@particle-academy/react-fancy 5.49.1 → 5.50.0

package/dist/reason-tag.cjs

@@ -1,10 +1,10 @@
 'use strict';
 
-var chunkEEKXWXYO_cjs = require('./chunk-EEKXWXYO.cjs');
+var chunkGCWIZNN2_cjs = require('./chunk-GCWIZNN2.cjs');
 require('./chunk-WKNVZUWZ.cjs');
 require('./chunk-M5MUGSON.cjs');
-require('./chunk-3XJKJQSY.cjs');
-require('./chunk-LRNWD26Z.cjs');
+require('./chunk-FWA4PCW7.cjs');
+require('./chunk-X2FC7ODX.cjs');
 require('./chunk-XCZZVRBY.cjs');
 require('./chunk-QKFOJKVE.cjs');
 require('./chunk-J2DI6RMR.cjs');
@@ -17,7 +17,7 @@ require('./chunk-ZU5Q77OT.cjs');
 
 Object.defineProperty(exports, "ReasonTag", {
   enumerable: true,
-  get: function () { return chunkEEKXWXYO_cjs.ReasonTag; }
+  get: function () { return chunkGCWIZNN2_cjs.ReasonTag; }
 });
 //# sourceMappingURL=reason-tag.cjs.map
 //# sourceMappingURL=reason-tag.cjs.map

package/dist/reason-tag.js

@@ -1,8 +1,8 @@
-export { ReasonTag } from './chunk-62WPAKFS.js';
+export { ReasonTag } from './chunk-UDEEPMQ4.js';
 import './chunk-6KXAFP2T.js';
 import './chunk-LQ4ICCN2.js';
-import './chunk-ZLYOMQ2J.js';
-import './chunk-QXYO76NZ.js';
+import './chunk-KODD54GT.js';
+import './chunk-6TBRBN7H.js';
 import './chunk-45BBNJQD.js';
 import './chunk-IVRYSSM7.js';
 import './chunk-MQ6VGG62.js';

package/docs/ContentRenderer.md

@@ -91,3 +91,39 @@ registerExtension({
 ```tsx
 <ContentRenderer value="# Title\n\nParagraph with **bold** text." format="markdown" />
 ```
+
+## Markdown and sanitising without the component
+
+`renderMarkdown(markdown, sanitize?)` returns the same HTML `ContentRenderer`
+renders, already sanitised, so a host never imports the markdown parser itself.
+
+`sanitizeHtml(html)` is a blocklist: it strips what can run (script, iframe,
+event handlers, `javascript:` URLs, ...) and keeps the rest. Pass options and it
+becomes an **allowlist** that keeps only what you list:
+
+```ts
+import { renderMarkdown, sanitizeHtml, type SanitizeHtmlOptions } from "@particle-academy/react-fancy";
+
+const CHAT_PROSE: SanitizeHtmlOptions = {
+  allowedTags: ["p", "br", "strong", "em", "a", "ul", "ol", "li", "code", "pre"],
+  allowedAttributes: ["href", "title"],         // or { "*": ["title"], a: ["href"], span: ["data-*"] }
+  allowedSchemes: ["https:", "http:", "mailto:"], // the default
+  allowRelative: true,                           // /x, ../x, ?q, #frag; never //host. Default false
+};
+
+renderMarkdown(md, CHAT_PROSE);       // same as sanitizeHtml(renderMarkdown(md), CHAT_PROSE)
+sanitizeHtml(html, CHAT_PROSE);
+```
+
+| Rule | Allowlist mode |
+|------|----------------|
+| Tag not listed | removed, its text and cleaned children kept |
+| `script`, `style`, `iframe`, `frame(set)`, `object`, `embed`, `applet`, `link`, `meta`, `base`, `form`, `title`, `template`, `noscript`, `noembed`, `noframes`, `xmp`, `plaintext`, `svg`, `math` | removed WITH content, even when listed |
+| Attribute not listed | removed |
+| `on*`, `srcdoc`, `srcset` | removed, even when listed |
+| URL attribute with an unlisted scheme | removed |
+| `javascript:`, `vbscript:` | removed, even when listed |
+| Comments | removed |
+| No DOM (SSR) | input returned as escaped text (fails closed) |
+
+The allowlist can only narrow: nothing you list widens past the blocklist.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@particle-academy/react-fancy",
-  "version": "5.49.1",
+  "version": "5.50.0",
   "description": "React UI component library for Human+ UX — controlled, agent-bridgeable primitives",
   "repository": {
     "type": "git",

package/dist/chunk-FNYUUVOK.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/components/ContentRenderer/extensions.ts","../src/components/Editor/editor.utils.ts","../src/components/ContentRenderer/RenderedContent.tsx","../src/components/ContentRenderer/ContentRenderer.tsx"],"names":["useMemo","sanitizeHtml","jsx","Fragment","marked","cn"],"mappings":";;;;;;;;;AAiCA,IAAM,iBAAoC,EAAC;AAGpC,SAAS,kBAAkB,SAAA,EAAkC;AAClE,EAAA,MAAM,MAAM,cAAA,CAAe,SAAA;AAAA,IACzB,CAAC,MAAM,CAAA,CAAE,GAAA,CAAI,aAAY,KAAM,SAAA,CAAU,IAAI,WAAA;AAAY,GAC3D;AACA,EAAA,IAAI,OAAO,CAAA,EAAG;AACZ,IAAA,cAAA,CAAe,GAAG,CAAA,GAAI,SAAA;AAAA,EACxB,CAAA,MAAO;AACL,IAAA,cAAA,CAAe,KAAK,SAAS,CAAA;AAAA,EAC/B;AACF;AAGO,SAAS,mBAAmB,UAAA,EAAqC;AACtE,EAAA,KAAA,MAAW,OAAO,UAAA,EAAY;AAC5B,IAAA,iBAAA,CAAkB,GAAG,CAAA;AAAA,EACvB;AACF;AAGO,SAAS,mBAAA,GAAyC;AACvD,EAAA,OAAO,CAAC,GAAG,cAAc,CAAA;AAC3B;AAOA,SAAS,gBAAgB,UAAA,EAA4C;AACnE,EAAA,MAAM,QAAgC,EAAC;AACvC,EAAA,MAAM,EAAA,GAAK,sDAAA;AACX,EAAA,IAAI,CAAA;AACJ,EAAA,OAAA,CAAQ,CAAA,GAAI,EAAA,CAAG,IAAA,CAAK,UAAU,OAAO,IAAA,EAAM;AACzC,IAAA,KAAA,CAAM,CAAA,CAAE,CAAC,CAAC,CAAA,GAAI,CAAA,CAAE,CAAC,CAAA,IAAK,CAAA,CAAE,CAAC,CAAA,IAAK,CAAA,CAAE,CAAC,CAAA,IAAK,EAAA;AAAA,EACxC;AACA,EAAA,OAAO,KAAA;AACT;AAWO,SAAS,aAAA,CACd,MACA,UAAA,EACkB;AAClB,EAAA,IAAI,UAAA,CAAW,WAAW,CAAA,EAAG;AAC3B,IAAA,OAAO,IAAA,GAAO,CAAC,EAAE,IAAA,EAAM,QAAQ,OAAA,EAAS,IAAA,EAAM,CAAA,GAAI,EAAC;AAAA,EACrD;AAEA,EAAA,MAAM,QAAA,GAAW,WAAW,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,GAAG,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA;AAItD,EAAA,MAAM,UAAU,IAAI,MAAA;AAAA,IAClB,KAAK,QAAQ,CAAA,sCAAA,CAAA;AAAA,IACb;AAAA,GACF;AAEA,EAAA,MAAM,WAA6B,EAAC;AACpC,EAAA,IAAI,SAAA,GAAY,CAAA;AAChB,EAAA,IAAI,KAAA;AAEJ,EAAA,OAAA,CAAQ,KAAA,GAAQ,OAAA,CAAQ,IAAA,CAAK,IAAI,OAAO,IAAA,EAAM;AAE5C,IAAA,IAAI,KAAA,CAAM,QAAQ,SAAA,EAAW;AAC3B,MAAA,QAAA,CAAS,IAAA,CAAK,EAAE,IAAA,EAAM,MAAA,EAAQ,OAAA,EAAS,IAAA,CAAK,KAAA,CAAM,SAAA,EAAW,KAAA,CAAM,KAAK,CAAA,EAAG,CAAA;AAAA,IAC7E;AAEA,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,CAAC,CAAA,CAAE,WAAA,EAAY;AACjC,IAAA,MAAM,QAAA,GAAW,MAAM,CAAC,CAAA,GAAI,MAAM,CAAC,CAAA,CAAE,MAAK,GAAI,EAAA;AAC9C,IAAA,MAAM,YAAA,GAAe,MAAM,CAAC,CAAA;AAE5B,IAAA,QAAA,CAAS,IAAA,CAAK;AAAA,MACZ,IAAA,EAAM,WAAA;AAAA,MACN,GAAA;AAAA,MACA,OAAA,EAAS,YAAA;AAAA,MACT,UAAA,EAAY,QAAA,GAAW,eAAA,CAAgB,QAAQ,IAAI;AAAC,KACrD,CAAA;AAED,IAAA,SAAA,GAAY,KAAA,CAAM,KAAA,GAAQ,KAAA,CAAM,CAAC,CAAA,CAAE,MAAA;AAAA,EACrC;AAGA,EAAA,IAAI,SAAA,GAAY,KAAK,MAAA,EAAQ;AAC3B,IAAA,QAAA,CAAS,IAAA,CAAK,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA,EAAG,CAAA;AAAA,EAChE;AAEA,EAAA,OAAO,QAAA;AACT;AAMO,SAAS,gBACd,kBAAA,EACmB;AACnB,EAAA,MAAM,UAAU,mBAAA,EAAoB;AACpC,EAAA,IAAI,CAAC,kBAAA,IAAsB,kBAAA,CAAmB,MAAA,KAAW,GAAG,OAAO,OAAA;AACnE,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,kBAAA;AAEjC,EAAA,MAAM,MAAA,GAAS,CAAC,GAAG,OAAO,CAAA;AAC1B,EAAA,KAAA,MAAW,OAAO,kBAAA,EAAoB;AACpC,IAAA,MAAM,MAAM,MAAA,CAAO,SAAA;AAAA,MACjB,CAAC,MAAM,CAAA,CAAE,GAAA,CAAI,aAAY,KAAM,GAAA,CAAI,IAAI,WAAA;AAAY,KACrD;AACA,IAAA,IAAI,OAAO,CAAA,EAAG;AACZ,MAAA,MAAA,CAAO,GAAG,CAAA,GAAI,GAAA;AAAA,IAChB,CAAA,MAAO;AACL,MAAA,MAAA,CAAO,KAAK,GAAG,CAAA;AAAA,IACjB;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;;;ACrJO,IAAM,YAAA,GAAe;AAAA,EAC1B,0DAAA;AAAA,EACA,6DAAA;AAAA,EACA,6DAAA;AAAA,EACA,YAAA;AAAA,EACA,qCAAA;AAAA,EACA,8DAAA;AAAA,EACA,aAAA;AAAA,EACA,uMAAA;AAAA,EACA,gGAAA;AAAA,EACA,kGAAA;AAAA,EACA,+CAAA;AAAA,EACA;AACF,CAAA,CAAE,KAAK,GAAG;AAEV,IAAM,gBAAA,GAAmB,6EAAA;AAGlB,SAAS,aAAa,KAAA,EAAoC;AAC/D,EAAA,OAAO,gBAAA,CAAiB,IAAA,CAAK,KAAK,CAAA,GAAI,MAAA,GAAS,UAAA;AACjD;AAMA,IAAM,kBAAA,uBAAyB,GAAA,CAAI;AAAA,EACjC,GAAA;AAAA,EAAK,MAAA;AAAA,EAAQ,SAAA;AAAA,EAAW,MAAA;AAAA,EAAQ,SAAA;AAAA,EAAW,OAAA;AAAA,EAAS,OAAA;AAAA,EACpD,GAAA;AAAA,EAAK,MAAA;AAAA,EAAQ,KAAA;AAAA,EAAO,KAAA;AAAA,EAAO,YAAA;AAAA,EAAc,MAAA;AAAA,EAAQ,IAAA;AAAA,EAAM,QAAA;AAAA,EACvD,QAAA;AAAA,EAAU,SAAA;AAAA,EAAW,MAAA;AAAA,EAAQ,MAAA;AAAA,EAAQ,KAAA;AAAA,EAAO,UAAA;AAAA,EAC5C,MAAA;AAAA,EAAQ,UAAA;AAAA,EAAY,IAAA;AAAA,EAAM,KAAA;AAAA,EAAO,SAAA;AAAA,EAAW,KAAA;AAAA,EAAO,QAAA;AAAA,EAAU,KAAA;AAAA,EAAO,IAAA;AAAA,EAAM,IAAA;AAAA,EAC1E,IAAA;AAAA,EAAM,OAAA;AAAA,EACN,UAAA;AAAA,EAAY,YAAA;AAAA,EAAc,QAAA;AAAA,EAAU,QAAA;AAAA,EAAU,MAAA;AAAA,EAC9C,IAAA;AAAA,EAAM,IAAA;AAAA,EAAM,IAAA;AAAA,EAAM,IAAA;AAAA,EAAM,IAAA;AAAA,EAAM,IAAA;AAAA,EAAM,MAAA;AAAA,EAAQ,QAAA;AAAA,EAAU,QAAA;AAAA,EAAU,IAAA;AAAA,EAAM,MAAA;AAAA,EACtE,GAAA;AAAA,EAAK,QAAA;AAAA,EAAU,KAAA;AAAA,EAAO,OAAA;AAAA,EAAS,KAAA;AAAA,EAC/B,KAAA;AAAA,EACA,OAAA;AAAA,EAAS,QAAA;AAAA,EAAU,IAAA;AAAA,EAAM,MAAA;AAAA,EACzB,MAAA;AAAA,EAAQ,KAAA;AAAA,EAAO,MAAA;AAAA,EAAQ,MAAA;AAAA,EAAQ,MAAA;AAAA,EAAQ,OAAA;AAAA,EACvC,KAAA;AAAA,EAAO,UAAA;AAAA,EACP,QAAA;AAAA,EAAU,IAAA;AAAA,EAAM,UAAA;AAAA,EAAY,QAAA;AAAA,EAAU,QAAA;AAAA,EACtC,GAAA;AAAA,EAAK,OAAA;AAAA,EAAS,SAAA;AAAA,EAAW,KAAA;AAAA,EAAO,UAAA;AAAA,EAChC,GAAA;AAAA,EACA,IAAA;AAAA,EAAM,IAAA;AAAA,EAAM,MAAA;AAAA,EACZ,GAAA;AAAA,EAAK,MAAA;AAAA,EAAQ,QAAA;AAAA,EAAU,SAAA;AAAA,EAAW,QAAA;AAAA,EAAU,MAAA;AAAA,EAAQ,OAAA;AAAA,EAAS,QAAA;AAAA,EAAU,MAAA;AAAA,EACvE,QAAA;AAAA,EAAU,QAAA;AAAA,EAAU,OAAA;AAAA,EAAS,KAAA;AAAA,EAAO,SAAA;AAAA,EAAW,KAAA;AAAA,EAC/C,OAAA;AAAA,EAAS,OAAA;AAAA,EAAS,IAAA;AAAA,EAAM,UAAA;AAAA,EAAY,UAAA;AAAA,EAAY,OAAA;AAAA,EAAS,IAAA;AAAA,EAAM,OAAA;AAAA,EAAS,MAAA;AAAA,EAAQ,OAAA;AAAA,EAAS,IAAA;AAAA,EAAM,OAAA;AAAA,EAC/F,GAAA;AAAA,EAAK,IAAA;AAAA,EACL,KAAA;AAAA,EAAO,OAAA;AAAA,EACP;AACF,CAAC,CAAA;AAOM,SAAS,eAAe,IAAA,EAAsB;AACnD,EAAA,IAAI,EAAA,GAAK,IAAA;AAGT,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,wBAAA,EAA0B,QAAQ,CAAA;AAClD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,wBAAA,EAA0B,SAAS,CAAA;AACnD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,wBAAA,EAA0B,UAAU,CAAA;AACpD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,wBAAA,EAA0B,WAAW,CAAA;AACrD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,wBAAA,EAA0B,YAAY,CAAA;AACtD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,wBAAA,EAA0B,aAAa,CAAA;AAGvD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,wBAAA,EAA0B,QAAQ,CAAA;AAClD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,mBAAA,EAAqB,IAAI,CAAA;AAGzC,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,gCAAA,EAAkC,QAAQ,CAAA;AAC1D,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,sBAAA,EAAwB,QAAQ,CAAA;AAChD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,wBAAA,EAA0B,MAAM,CAAA;AAChD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,sBAAA,EAAwB,MAAM,CAAA;AAC9C,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,sBAAA,EAAwB,IAAI,CAAA;AAC5C,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,sBAAA,EAAwB,QAAQ,CAAA;AAChD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,gCAAA,EAAkC,QAAQ,CAAA;AAC1D,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,0BAAA,EAA4B,QAAQ,CAAA;AACpD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,4BAAA,EAA8B,MAAM,CAAA;AAGpD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,yCAAA,EAA2C,UAAU,CAAA;AAGrE,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,wCAAA,EAA0C,QAAQ,CAAA;AAGlE,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,cAAA,EAAgB,IAAI,CAAA;AACpC,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,sBAAA,EAAwB,QAAQ,CAAA;AAChD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,0BAAA,EAA4B,MAAM,CAAA;AAGlD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,gCAAA,EAAkC,CAAC,OAAO,OAAA,KAAoB;AAC5E,IAAA,OAAO,mBAAmB,GAAA,CAAI,OAAA,CAAQ,WAAA,EAAa,IAAI,EAAA,GAAK,KAAA;AAAA,EAC9D,CAAC,CAAA;AAID,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,OAAA,EAAS,GAAG,CAAA;AAC5B,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,OAAA,EAAS,GAAG,CAAA;AAC5B,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,SAAA,EAAW,GAAG,CAAA;AAC9B,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,QAAA,EAAU,GAAG,CAAA;AAC7B,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,SAAA,EAAW,GAAG,CAAA;AAC9B,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,QAAA,EAAU,GAAG,CAAA;AAG7B,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,SAAA,EAAW,MAAM,CAAA;AACjC,EAAA,EAAA,GAAK,GAAG,IAAA,EAAK;AAEb,EAAA,OAAO,EAAA;AACT;AAMO,SAAS,uBAAuB,UAAA,EAAuC;AAC5E,EAAA,IAAI,UAAA,CAAW,MAAA,KAAW,CAAA,EAAG,OAAO,EAAA;AAEpC,EAAA,OAAO,UAAA,CACJ,GAAA,CAAI,CAAC,GAAA,KAAQ;AACZ,IAAA,MAAM,GAAA,GAAM,GAAA,CAAI,GAAA,CAAI,WAAA,EAAY;AAChC,IAAA,OAAO;AAAA,MACL,MAAM,GAAG,CAAA,OAAA,CAAA;AAAA,MACT,MAAM,GAAG,CAAA,MAAA,CAAA;AAAA,MACT,MAAM,GAAG,CAAA,YAAA,CAAA;AAAA,MACT,MAAM,GAAG,CAAA,QAAA,CAAA;AAAA,MACT,MAAM,GAAG,CAAA,eAAA,CAAA;AAAA,MACT,MAAM,GAAG,CAAA,iBAAA,CAAA;AAAA,MACT,MAAM,GAAG,CAAA,YAAA,CAAA;AAAA,MACT,MAAM,GAAG,CAAA,KAAA,CAAA;AAAA,MACT,MAAM,GAAG,CAAA,SAAA,CAAA;AAAA,MACT,WAAW,GAAG,CAAA,iBAAA,CAAA;AAAA,MACd,WAAW,GAAG,CAAA,gBAAA;AAAA,KAChB,CAAE,KAAK,GAAG,CAAA;AAAA,EACZ,CAAC,CAAA,CACA,IAAA,CAAK,GAAG,CAAA;AACb;AC5HO,SAAS,eAAA,CAAgB;AAAA,EAC9B,IAAA;AAAA,EACA,UAAA,EAAY,kBAAA;AAAA,EACZ,MAAA,GAAS;AACX,CAAA,EAAyB;AACvB,EAAA,MAAM,UAAA,GAAaA,aAAA;AAAA,IACjB,MAAM,gBAAgB,kBAAkB,CAAA;AAAA,IACxC,CAAC,kBAAkB;AAAA,GACrB;AAEA,EAAA,MAAM,QAAA,GAAWA,aAAA;AAAA,IACf,MAAM,aAAA,CAAc,IAAA,EAAM,UAAU,CAAA;AAAA,IACpC,CAAC,MAAM,UAAU;AAAA,GACnB;AAEA,EAAA,MAAM,aAAa,CAAC,OAAA,KAClB,MAAA,GAAS,OAAA,GAAUC,+BAAa,OAAO,CAAA;AAGzC,EAAA,IAAI,SAAS,MAAA,KAAW,CAAA,IAAK,SAAS,CAAC,CAAA,CAAE,SAAS,MAAA,EAAQ;AACxD,IAAA,uBAAOC,cAAA,CAAC,KAAA,EAAA,EAAI,uBAAA,EAAyB,EAAE,MAAA,EAAQ,UAAA,CAAW,QAAA,CAAS,CAAC,CAAA,CAAE,OAAO,CAAA,EAAE,EAAG,CAAA;AAAA,EACpF;AAGA,EAAA,IAAI,QAAA,CAAS,WAAW,CAAA,EAAG;AACzB,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,uBACEA,cAAA,CAAAC,mBAAA,EAAA,EACG,QAAA,EAAA,QAAA,CAAS,GAAA,CAAI,CAAC,SAAS,CAAA,KAAM;AAC5B,IAAA,IAAI,OAAA,CAAQ,SAAS,MAAA,EAAQ;AAC3B,MAAA,OAAO,OAAA,CAAQ,OAAA,mBACbD,cAAA,CAAC,KAAA,EAAA,EAAY,uBAAA,EAAyB,EAAE,MAAA,EAAQ,UAAA,CAAW,OAAA,CAAQ,OAAO,CAAA,EAAE,EAAA,EAAlE,CAAqE,CAAA,GAC7E,IAAA;AAAA,IACN;AAEA,IAAA,MAAM,MAAM,UAAA,CAAW,IAAA;AAAA,MACrB,CAAC,CAAA,KAAM,CAAA,CAAE,GAAA,CAAI,WAAA,OAAkB,OAAA,CAAQ;AAAA,KACzC;AACA,IAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AAEjB,IAAA,MAAM,YAAY,GAAA,CAAI,SAAA;AACtB,IAAA,MAAM,OAAA,GAAU,IAAI,KAAA,KAAU,KAAA;AAC9B,IAAA,MAAM,OAAA,GAAU,UAAU,KAAA,GAAQ,MAAA;AAElC,IAAA,uBACEA,cAAA,CAAC,OAAA,EAAA,EAAgB,uBAAA,EAAuB,OAAA,CAAQ,KAC9C,QAAA,kBAAAA,cAAA,CAAC,SAAA,EAAA,EAAU,OAAA,EAAS,OAAA,CAAQ,OAAA,EAAS,UAAA,EAAY,OAAA,CAAQ,UAAA,EAAY,KADzD,CAEd,CAAA;AAAA,EAEJ,CAAC,CAAA,EACH,CAAA;AAEJ;AAEA,eAAA,CAAgB,WAAA,GAAc,iBAAA;ACpEvB,SAAS,eAAA,CAAgB;AAAA,EAC9B,KAAA;AAAA,EACA,MAAA,GAAS,MAAA;AAAA,EACT,WAAA,GAAc,GAAA;AAAA,EACd,SAAA;AAAA,EACA,UAAA,EAAY,kBAAA;AAAA,EACZ,MAAA,GAAS;AACX,CAAA,EAAyB;AACvB,EAAA,MAAM,UAAA,GAAaF,aAAAA;AAAA,IACjB,MAAM,gBAAgB,kBAAkB,CAAA;AAAA,IACxC,CAAC,kBAAkB;AAAA,GACrB;AAEA,EAAA,MAAM,IAAA,GAAOA,cAAQ,MAAM;AAIzB,IAAA,MAAM,OAAO,KAAA,IAAS,EAAA;AACtB,IAAA,MAAM,cAAA,GAAiB,MAAA,KAAW,MAAA,GAAS,YAAA,CAAa,IAAI,CAAA,GAAI,MAAA;AAChE,IAAA,MAAM,GAAA,GAAM,cAAA,KAAmB,UAAA,GAC1BI,aAAA,CAAO,KAAA,CAAM,MAAM,EAAE,KAAA,EAAO,KAAA,EAAO,CAAA,GACpC,IAAA;AACJ,IAAA,OAAO,MAAA,GAAS,GAAA,GAAMH,8BAAA,CAAa,GAAG,CAAA;AAAA,EACxC,CAAA,EAAG,CAAC,KAAA,EAAO,MAAA,EAAQ,MAAM,CAAC,CAAA;AAE1B,EAAA,MAAM,aAAA,GAAgB,WAAW,MAAA,GAAS,CAAA;AAE1C,EAAA,uBACEC,cAAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,mCAAA,EAAkC,EAAA;AAAA,MAClC,KAAA,EAAO,EAAE,UAAA,EAAY,WAAA,EAAY;AAAA,MACjC,SAAA,EAAWG,oBAAA,CAAG,SAAA,EAAW,YAAA,EAAc,SAAS,CAAA;AAAA,MAE/C,QAAA,EAAA,aAAA,mBACCH,cAAAA,CAAC,eAAA,EAAA,EAAgB,MAAY,UAAA,EAAwB,MAAA,EAAgB,CAAA,mBAErEA,eAAC,KAAA,EAAA,EAAI,uBAAA,EAAyB,EAAE,MAAA,EAAQ,MAAK,EAAG;AAAA;AAAA,GAEpD;AAEJ;AAEA,eAAA,CAAgB,WAAA,GAAc,iBAAA","file":"chunk-FNYUUVOK.cjs","sourcesContent":["import type { ComponentType } from \"react\";\n\n/** Props passed to every render-extension component. */\nexport interface RenderExtensionProps {\n  /** The inner content of the custom tag (raw string). */\n  content: string;\n  /** Parsed HTML attributes from the opening tag. */\n  attributes: Record<string, string>;\n}\n\n/** Registers a custom tag with a React component for rendering. */\nexport interface RenderExtension {\n  /** Tag name to match, e.g. \"questions\", \"thinking\". Case-insensitive. */\n  tag: string;\n  /** React component that renders the matched tag. */\n  component: ComponentType<RenderExtensionProps>;\n  /**\n   * Whether this is a block-level element.\n   * Block extensions are wrapped in a `<div>`, inline in a `<span>`.\n   * @default true\n   */\n  block?: boolean;\n}\n\n/** A parsed segment — either raw HTML or a matched extension tag. */\nexport type ContentSegment =\n  | { type: \"html\"; content: string }\n  | { type: \"extension\"; tag: string; content: string; attributes: Record<string, string> };\n\n// ---------------------------------------------------------------------------\n// Global extension registry\n// ---------------------------------------------------------------------------\n\nconst globalRegistry: RenderExtension[] = [];\n\n/** Register a single render extension globally (available to all ContentRenderer and Editor instances). */\nexport function registerExtension(extension: RenderExtension): void {\n  const idx = globalRegistry.findIndex(\n    (e) => e.tag.toLowerCase() === extension.tag.toLowerCase(),\n  );\n  if (idx >= 0) {\n    globalRegistry[idx] = extension;\n  } else {\n    globalRegistry.push(extension);\n  }\n}\n\n/** Register multiple render extensions globally. */\nexport function registerExtensions(extensions: RenderExtension[]): void {\n  for (const ext of extensions) {\n    registerExtension(ext);\n  }\n}\n\n/** Get a snapshot of the current global registry. */\nexport function getGlobalExtensions(): RenderExtension[] {\n  return [...globalRegistry];\n}\n\n// ---------------------------------------------------------------------------\n// Parsing\n// ---------------------------------------------------------------------------\n\n/** Parse attributes from an opening tag string like `tag foo=\"bar\" baz=\"qux\"`. */\nfunction parseAttributes(attrString: string): Record<string, string> {\n  const attrs: Record<string, string> = {};\n  const re = /(\\w[\\w-]*)(?:\\s*=\\s*(?:\"([^\"]*)\"|'([^']*)'|(\\S+)))?/g;\n  let m: RegExpExecArray | null;\n  while ((m = re.exec(attrString)) !== null) {\n    attrs[m[1]] = m[2] ?? m[3] ?? m[4] ?? \"\";\n  }\n  return attrs;\n}\n\n/**\n * Split an HTML string into segments of plain HTML and matched extension tags.\n *\n * Handles:\n * - `<tag>content</tag>`\n * - `<tag attr=\"val\">content</tag>`\n * - Nested different-tags inside the content (preserved as raw HTML)\n * - Self-nesting of the same tag (greedy — matches outermost)\n */\nexport function parseSegments(\n  html: string,\n  extensions: RenderExtension[],\n): ContentSegment[] {\n  if (extensions.length === 0) {\n    return html ? [{ type: \"html\", content: html }] : [];\n  }\n\n  const tagNames = extensions.map((e) => e.tag).join(\"|\");\n  // Match opening tag with optional attributes, then content, then closing tag.\n  // Uses a non-greedy match for content — if same-tag nesting is needed the\n  // consumer should use distinct tag names.\n  const pattern = new RegExp(\n    `<(${tagNames})((?:\\\\s+[^>]*)?)>([\\\\s\\\\S]*?)<\\\\/\\\\1>`,\n    \"gi\",\n  );\n\n  const segments: ContentSegment[] = [];\n  let lastIndex = 0;\n  let match: RegExpExecArray | null;\n\n  while ((match = pattern.exec(html)) !== null) {\n    // Push any HTML before this match\n    if (match.index > lastIndex) {\n      segments.push({ type: \"html\", content: html.slice(lastIndex, match.index) });\n    }\n\n    const tag = match[1].toLowerCase();\n    const rawAttrs = match[2] ? match[2].trim() : \"\";\n    const innerContent = match[3];\n\n    segments.push({\n      type: \"extension\",\n      tag,\n      content: innerContent,\n      attributes: rawAttrs ? parseAttributes(rawAttrs) : {},\n    });\n\n    lastIndex = match.index + match[0].length;\n  }\n\n  // Push any trailing HTML\n  if (lastIndex < html.length) {\n    segments.push({ type: \"html\", content: html.slice(lastIndex) });\n  }\n\n  return segments;\n}\n\n/**\n * Merge per-instance extensions with the global registry.\n * Instance extensions override globals with the same tag name.\n */\nexport function mergeExtensions(\n  instanceExtensions?: RenderExtension[],\n): RenderExtension[] {\n  const globals = getGlobalExtensions();\n  if (!instanceExtensions || instanceExtensions.length === 0) return globals;\n  if (globals.length === 0) return instanceExtensions;\n\n  const merged = [...globals];\n  for (const ext of instanceExtensions) {\n    const idx = merged.findIndex(\n      (e) => e.tag.toLowerCase() === ext.tag.toLowerCase(),\n    );\n    if (idx >= 0) {\n      merged[idx] = ext;\n    } else {\n      merged.push(ext);\n    }\n  }\n  return merged;\n}\n","import type { RenderExtension } from \"../ContentRenderer/extensions\";\n\n/**\n * Shared prose typography classes for Editor.Content and ContentRenderer.\n * Hand-rolled since we don't depend on @tailwindcss/typography.\n */\nexport const proseClasses = [\n  \"[&_h1]:text-2xl [&_h1]:font-bold [&_h1]:mt-4 [&_h1]:mb-2\",\n  \"[&_h2]:text-xl [&_h2]:font-semibold [&_h2]:mt-3 [&_h2]:mb-2\",\n  \"[&_h3]:text-lg [&_h3]:font-semibold [&_h3]:mt-2 [&_h3]:mb-1\",\n  \"[&_p]:mb-2\",\n  \"[&_a]:text-blue-500 [&_a]:underline\",\n  \"[&_ul]:list-disc [&_ul]:pl-5 [&_ol]:list-decimal [&_ol]:pl-5\",\n  \"[&_li]:mb-1\",\n  \"[&_blockquote]:border-l-4 [&_blockquote]:border-zinc-300 [&_blockquote]:pl-4 [&_blockquote]:italic [&_blockquote]:text-zinc-600 dark:[&_blockquote]:border-zinc-600 dark:[&_blockquote]:text-zinc-400\",\n  \"[&_code]:bg-zinc-100 [&_code]:px-1 [&_code]:rounded [&_code]:text-sm dark:[&_code]:bg-zinc-800\",\n  \"[&_pre]:bg-zinc-950 [&_pre]:text-zinc-100 [&_pre]:p-4 [&_pre]:rounded-lg [&_pre]:overflow-x-auto\",\n  \"[&_pre_code]:bg-transparent [&_pre_code]:px-0\",\n  \"[&_strong]:font-bold [&_em]:italic\",\n].join(\" \");\n\nconst HTML_TAG_PATTERN = /<(p|div|br|h[1-6]|ul|ol|strong|em|a |img |table|pre|code|blockquote)[>\\s/]/i;\n\n/** Detect whether a string is likely HTML or Markdown. */\nexport function detectFormat(value: string): \"html\" | \"markdown\" {\n  return HTML_TAG_PATTERN.test(value) ? \"html\" : \"markdown\";\n}\n\n/**\n * Build a set of known HTML tag names. Extension tags are excluded\n * so that the \"strip remaining tags\" step preserves them.\n */\nconst STANDARD_HTML_TAGS = new Set([\n  \"a\", \"abbr\", \"address\", \"area\", \"article\", \"aside\", \"audio\",\n  \"b\", \"base\", \"bdi\", \"bdo\", \"blockquote\", \"body\", \"br\", \"button\",\n  \"canvas\", \"caption\", \"cite\", \"code\", \"col\", \"colgroup\",\n  \"data\", \"datalist\", \"dd\", \"del\", \"details\", \"dfn\", \"dialog\", \"div\", \"dl\", \"dt\",\n  \"em\", \"embed\",\n  \"fieldset\", \"figcaption\", \"figure\", \"footer\", \"form\",\n  \"h1\", \"h2\", \"h3\", \"h4\", \"h5\", \"h6\", \"head\", \"header\", \"hgroup\", \"hr\", \"html\",\n  \"i\", \"iframe\", \"img\", \"input\", \"ins\",\n  \"kbd\",\n  \"label\", \"legend\", \"li\", \"link\",\n  \"main\", \"map\", \"mark\", \"menu\", \"meta\", \"meter\",\n  \"nav\", \"noscript\",\n  \"object\", \"ol\", \"optgroup\", \"option\", \"output\",\n  \"p\", \"param\", \"picture\", \"pre\", \"progress\",\n  \"q\",\n  \"rp\", \"rt\", \"ruby\",\n  \"s\", \"samp\", \"script\", \"section\", \"select\", \"slot\", \"small\", \"source\", \"span\",\n  \"strike\", \"strong\", \"style\", \"sub\", \"summary\", \"sup\",\n  \"table\", \"tbody\", \"td\", \"template\", \"textarea\", \"tfoot\", \"th\", \"thead\", \"time\", \"title\", \"tr\", \"track\",\n  \"u\", \"ul\",\n  \"var\", \"video\",\n  \"wbr\",\n]);\n\n/**\n * Lightweight HTML-to-Markdown converter for editor output.\n * Handles the most common inline/block formatting produced by contentEditable.\n * Custom extension tags are preserved as-is in the output.\n */\nexport function htmlToMarkdown(html: string): string {\n  let md = html;\n\n  // Block elements first\n  md = md.replace(/<h1[^>]*>(.*?)<\\/h1>/gi, \"# $1\\n\");\n  md = md.replace(/<h2[^>]*>(.*?)<\\/h2>/gi, \"## $1\\n\");\n  md = md.replace(/<h3[^>]*>(.*?)<\\/h3>/gi, \"### $1\\n\");\n  md = md.replace(/<h4[^>]*>(.*?)<\\/h4>/gi, \"#### $1\\n\");\n  md = md.replace(/<h5[^>]*>(.*?)<\\/h5>/gi, \"##### $1\\n\");\n  md = md.replace(/<h6[^>]*>(.*?)<\\/h6>/gi, \"###### $1\\n\");\n\n  // Lists\n  md = md.replace(/<li[^>]*>(.*?)<\\/li>/gi, \"- $1\\n\");\n  md = md.replace(/<\\/?[uo]l[^>]*>/gi, \"\\n\");\n\n  // Inline formatting\n  md = md.replace(/<strong[^>]*>(.*?)<\\/strong>/gi, \"**$1**\");\n  md = md.replace(/<b[^>]*>(.*?)<\\/b>/gi, \"**$1**\");\n  md = md.replace(/<em[^>]*>(.*?)<\\/em>/gi, \"*$1*\");\n  md = md.replace(/<i[^>]*>(.*?)<\\/i>/gi, \"*$1*\");\n  md = md.replace(/<u[^>]*>(.*?)<\\/u>/gi, \"$1\");\n  md = md.replace(/<s[^>]*>(.*?)<\\/s>/gi, \"~~$1~~\");\n  md = md.replace(/<strike[^>]*>(.*?)<\\/strike>/gi, \"~~$1~~\");\n  md = md.replace(/<del[^>]*>(.*?)<\\/del>/gi, \"~~$1~~\");\n  md = md.replace(/<code[^>]*>(.*?)<\\/code>/gi, \"`$1`\");\n\n  // Links\n  md = md.replace(/<a[^>]*href=\"([^\"]*)\"[^>]*>(.*?)<\\/a>/gi, \"[$2]($1)\");\n\n  // Blockquotes\n  md = md.replace(/<blockquote[^>]*>(.*?)<\\/blockquote>/gi, \"> $1\\n\");\n\n  // Line breaks and paragraphs\n  md = md.replace(/<br\\s*\\/?>/gi, \"\\n\");\n  md = md.replace(/<p[^>]*>(.*?)<\\/p>/gi, \"$1\\n\\n\");\n  md = md.replace(/<div[^>]*>(.*?)<\\/div>/gi, \"$1\\n\");\n\n  // Strip only standard HTML tags — preserve unknown/custom tags\n  md = md.replace(/<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi, (match, tagName: string) => {\n    return STANDARD_HTML_TAGS.has(tagName.toLowerCase()) ? \"\" : match;\n  });\n\n  // Decode common HTML entities. Decode &amp; LAST so we never double-unescape:\n  // e.g. \"&amp;lt;\" must decode to the literal \"&lt;\", not to \"<\".\n  md = md.replace(/&lt;/g, \"<\");\n  md = md.replace(/&gt;/g, \">\");\n  md = md.replace(/&quot;/g, '\"');\n  md = md.replace(/&#39;/g, \"'\");\n  md = md.replace(/&nbsp;/g, \" \");\n  md = md.replace(/&amp;/g, \"&\");\n\n  // Clean up extra whitespace\n  md = md.replace(/\\n{3,}/g, \"\\n\\n\");\n  md = md.trim();\n\n  return md;\n}\n\n/**\n * Generate CSS classes to visually distinguish custom extension tags\n * inside the contentEditable area. Returns Tailwind-style descendant selectors.\n */\nexport function extensionEditorClasses(extensions: RenderExtension[]): string {\n  if (extensions.length === 0) return \"\";\n\n  return extensions\n    .map((ext) => {\n      const tag = ext.tag.toLowerCase();\n      return [\n        `[&_${tag}]:block`,\n        `[&_${tag}]:my-2`,\n        `[&_${tag}]:rounded-lg`,\n        `[&_${tag}]:border`,\n        `[&_${tag}]:border-dashed`,\n        `[&_${tag}]:border-zinc-300`,\n        `[&_${tag}]:bg-zinc-50`,\n        `[&_${tag}]:p-3`,\n        `[&_${tag}]:text-xs`,\n        `dark:[&_${tag}]:border-zinc-600`,\n        `dark:[&_${tag}]:bg-zinc-800/50`,\n      ].join(\" \");\n    })\n    .join(\" \");\n}\n","import { useMemo } from \"react\";\nimport { sanitizeHtml } from \"../../utils/sanitize\";\nimport type { RenderExtension } from \"./extensions\";\nimport { parseSegments, mergeExtensions } from \"./extensions\";\n\ninterface RenderedContentProps {\n  html: string;\n  extensions?: RenderExtension[];\n  /**\n   * If true, html is rendered as-is without per-segment sanitization. Caller\n   * (ContentRenderer) is expected to have already sanitized — or explicitly\n   * opted out — at the top level.\n   */\n  unsafe?: boolean;\n}\n\n/**\n * Internal component that renders an HTML string with extension support.\n * Plain HTML segments use dangerouslySetInnerHTML; custom-tag segments\n * are rendered via their registered React component.\n */\nexport function RenderedContent({\n  html,\n  extensions: instanceExtensions,\n  unsafe = false,\n}: RenderedContentProps) {\n  const extensions = useMemo(\n    () => mergeExtensions(instanceExtensions),\n    [instanceExtensions],\n  );\n\n  const segments = useMemo(\n    () => parseSegments(html, extensions),\n    [html, extensions],\n  );\n\n  const renderHtml = (content: string): string =>\n    unsafe ? content : sanitizeHtml(content);\n\n  // Fast path: no extensions matched — single dangerouslySetInnerHTML\n  if (segments.length === 1 && segments[0].type === \"html\") {\n    return <div dangerouslySetInnerHTML={{ __html: renderHtml(segments[0].content) }} />;\n  }\n\n  // No content at all\n  if (segments.length === 0) {\n    return null;\n  }\n\n  return (\n    <>\n      {segments.map((segment, i) => {\n        if (segment.type === \"html\") {\n          return segment.content ? (\n            <div key={i} dangerouslySetInnerHTML={{ __html: renderHtml(segment.content) }} />\n          ) : null;\n        }\n\n        const ext = extensions.find(\n          (e) => e.tag.toLowerCase() === segment.tag,\n        );\n        if (!ext) return null;\n\n        const Component = ext.component;\n        const isBlock = ext.block !== false;\n        const Wrapper = isBlock ? \"div\" : \"span\";\n\n        return (\n          <Wrapper key={i} data-render-extension={segment.tag}>\n            <Component content={segment.content} attributes={segment.attributes} />\n          </Wrapper>\n        );\n      })}\n    </>\n  );\n}\n\nRenderedContent.displayName = \"RenderedContent\";\n","import { useMemo } from \"react\";\nimport { marked } from \"marked\";\nimport { cn } from \"../../utils/cn\";\nimport { sanitizeHtml } from \"../../utils/sanitize\";\nimport { proseClasses, detectFormat } from \"../Editor/editor.utils\";\nimport { mergeExtensions } from \"./extensions\";\nimport { RenderedContent } from \"./RenderedContent\";\nimport type { ContentRendererProps } from \"./ContentRenderer.types\";\n\nexport function ContentRenderer({\n  value,\n  format = \"auto\",\n  lineSpacing = 1.6,\n  className,\n  extensions: instanceExtensions,\n  unsafe = false,\n}: ContentRendererProps) {\n  const extensions = useMemo(\n    () => mergeExtensions(instanceExtensions),\n    [instanceExtensions],\n  );\n\n  const html = useMemo(() => {\n    // Guard nullish input: marked.parse throws \"input parameter is undefined\n    // or null\", which (inside this useMemo during render) would crash the whole\n    // React tree. Treat missing content as empty.\n    const safe = value ?? \"\";\n    const resolvedFormat = format === \"auto\" ? detectFormat(safe) : format;\n    const raw = resolvedFormat === \"markdown\"\n      ? (marked.parse(safe, { async: false }) as string)\n      : safe;\n    return unsafe ? raw : sanitizeHtml(raw);\n  }, [value, format, unsafe]);\n\n  const hasExtensions = extensions.length > 0;\n\n  return (\n    <div\n      data-react-fancy-content-renderer=\"\"\n      style={{ lineHeight: lineSpacing }}\n      className={cn(\"text-sm\", proseClasses, className)}\n    >\n      {hasExtensions ? (\n        <RenderedContent html={html} extensions={extensions} unsafe={unsafe} />\n      ) : (\n        <div dangerouslySetInnerHTML={{ __html: html }} />\n      )}\n    </div>\n  );\n}\n\nContentRenderer.displayName = \"ContentRenderer\";\n"]}

package/dist/chunk-GMNMJLZO.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/components/ContentRenderer/extensions.ts","../src/components/Editor/editor.utils.ts","../src/components/ContentRenderer/RenderedContent.tsx","../src/components/ContentRenderer/ContentRenderer.tsx"],"names":["useMemo","jsx"],"mappings":";;;;;;;AAiCA,IAAM,iBAAoC,EAAC;AAGpC,SAAS,kBAAkB,SAAA,EAAkC;AAClE,EAAA,MAAM,MAAM,cAAA,CAAe,SAAA;AAAA,IACzB,CAAC,MAAM,CAAA,CAAE,GAAA,CAAI,aAAY,KAAM,SAAA,CAAU,IAAI,WAAA;AAAY,GAC3D;AACA,EAAA,IAAI,OAAO,CAAA,EAAG;AACZ,IAAA,cAAA,CAAe,GAAG,CAAA,GAAI,SAAA;AAAA,EACxB,CAAA,MAAO;AACL,IAAA,cAAA,CAAe,KAAK,SAAS,CAAA;AAAA,EAC/B;AACF;AAGO,SAAS,mBAAmB,UAAA,EAAqC;AACtE,EAAA,KAAA,MAAW,OAAO,UAAA,EAAY;AAC5B,IAAA,iBAAA,CAAkB,GAAG,CAAA;AAAA,EACvB;AACF;AAGO,SAAS,mBAAA,GAAyC;AACvD,EAAA,OAAO,CAAC,GAAG,cAAc,CAAA;AAC3B;AAOA,SAAS,gBAAgB,UAAA,EAA4C;AACnE,EAAA,MAAM,QAAgC,EAAC;AACvC,EAAA,MAAM,EAAA,GAAK,sDAAA;AACX,EAAA,IAAI,CAAA;AACJ,EAAA,OAAA,CAAQ,CAAA,GAAI,EAAA,CAAG,IAAA,CAAK,UAAU,OAAO,IAAA,EAAM;AACzC,IAAA,KAAA,CAAM,CAAA,CAAE,CAAC,CAAC,CAAA,GAAI,CAAA,CAAE,CAAC,CAAA,IAAK,CAAA,CAAE,CAAC,CAAA,IAAK,CAAA,CAAE,CAAC,CAAA,IAAK,EAAA;AAAA,EACxC;AACA,EAAA,OAAO,KAAA;AACT;AAWO,SAAS,aAAA,CACd,MACA,UAAA,EACkB;AAClB,EAAA,IAAI,UAAA,CAAW,WAAW,CAAA,EAAG;AAC3B,IAAA,OAAO,IAAA,GAAO,CAAC,EAAE,IAAA,EAAM,QAAQ,OAAA,EAAS,IAAA,EAAM,CAAA,GAAI,EAAC;AAAA,EACrD;AAEA,EAAA,MAAM,QAAA,GAAW,WAAW,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,GAAG,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA;AAItD,EAAA,MAAM,UAAU,IAAI,MAAA;AAAA,IAClB,KAAK,QAAQ,CAAA,sCAAA,CAAA;AAAA,IACb;AAAA,GACF;AAEA,EAAA,MAAM,WAA6B,EAAC;AACpC,EAAA,IAAI,SAAA,GAAY,CAAA;AAChB,EAAA,IAAI,KAAA;AAEJ,EAAA,OAAA,CAAQ,KAAA,GAAQ,OAAA,CAAQ,IAAA,CAAK,IAAI,OAAO,IAAA,EAAM;AAE5C,IAAA,IAAI,KAAA,CAAM,QAAQ,SAAA,EAAW;AAC3B,MAAA,QAAA,CAAS,IAAA,CAAK,EAAE,IAAA,EAAM,MAAA,EAAQ,OAAA,EAAS,IAAA,CAAK,KAAA,CAAM,SAAA,EAAW,KAAA,CAAM,KAAK,CAAA,EAAG,CAAA;AAAA,IAC7E;AAEA,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,CAAC,CAAA,CAAE,WAAA,EAAY;AACjC,IAAA,MAAM,QAAA,GAAW,MAAM,CAAC,CAAA,GAAI,MAAM,CAAC,CAAA,CAAE,MAAK,GAAI,EAAA;AAC9C,IAAA,MAAM,YAAA,GAAe,MAAM,CAAC,CAAA;AAE5B,IAAA,QAAA,CAAS,IAAA,CAAK;AAAA,MACZ,IAAA,EAAM,WAAA;AAAA,MACN,GAAA;AAAA,MACA,OAAA,EAAS,YAAA;AAAA,MACT,UAAA,EAAY,QAAA,GAAW,eAAA,CAAgB,QAAQ,IAAI;AAAC,KACrD,CAAA;AAED,IAAA,SAAA,GAAY,KAAA,CAAM,KAAA,GAAQ,KAAA,CAAM,CAAC,CAAA,CAAE,MAAA;AAAA,EACrC;AAGA,EAAA,IAAI,SAAA,GAAY,KAAK,MAAA,EAAQ;AAC3B,IAAA,QAAA,CAAS,IAAA,CAAK,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA,EAAG,CAAA;AAAA,EAChE;AAEA,EAAA,OAAO,QAAA;AACT;AAMO,SAAS,gBACd,kBAAA,EACmB;AACnB,EAAA,MAAM,UAAU,mBAAA,EAAoB;AACpC,EAAA,IAAI,CAAC,kBAAA,IAAsB,kBAAA,CAAmB,MAAA,KAAW,GAAG,OAAO,OAAA;AACnE,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,kBAAA;AAEjC,EAAA,MAAM,MAAA,GAAS,CAAC,GAAG,OAAO,CAAA;AAC1B,EAAA,KAAA,MAAW,OAAO,kBAAA,EAAoB;AACpC,IAAA,MAAM,MAAM,MAAA,CAAO,SAAA;AAAA,MACjB,CAAC,MAAM,CAAA,CAAE,GAAA,CAAI,aAAY,KAAM,GAAA,CAAI,IAAI,WAAA;AAAY,KACrD;AACA,IAAA,IAAI,OAAO,CAAA,EAAG;AACZ,MAAA,MAAA,CAAO,GAAG,CAAA,GAAI,GAAA;AAAA,IAChB,CAAA,MAAO;AACL,MAAA,MAAA,CAAO,KAAK,GAAG,CAAA;AAAA,IACjB;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;;;ACrJO,IAAM,YAAA,GAAe;AAAA,EAC1B,0DAAA;AAAA,EACA,6DAAA;AAAA,EACA,6DAAA;AAAA,EACA,YAAA;AAAA,EACA,qCAAA;AAAA,EACA,8DAAA;AAAA,EACA,aAAA;AAAA,EACA,uMAAA;AAAA,EACA,gGAAA;AAAA,EACA,kGAAA;AAAA,EACA,+CAAA;AAAA,EACA;AACF,CAAA,CAAE,KAAK,GAAG;AAEV,IAAM,gBAAA,GAAmB,6EAAA;AAGlB,SAAS,aAAa,KAAA,EAAoC;AAC/D,EAAA,OAAO,gBAAA,CAAiB,IAAA,CAAK,KAAK,CAAA,GAAI,MAAA,GAAS,UAAA;AACjD;AAMA,IAAM,kBAAA,uBAAyB,GAAA,CAAI;AAAA,EACjC,GAAA;AAAA,EAAK,MAAA;AAAA,EAAQ,SAAA;AAAA,EAAW,MAAA;AAAA,EAAQ,SAAA;AAAA,EAAW,OAAA;AAAA,EAAS,OAAA;AAAA,EACpD,GAAA;AAAA,EAAK,MAAA;AAAA,EAAQ,KAAA;AAAA,EAAO,KAAA;AAAA,EAAO,YAAA;AAAA,EAAc,MAAA;AAAA,EAAQ,IAAA;AAAA,EAAM,QAAA;AAAA,EACvD,QAAA;AAAA,EAAU,SAAA;AAAA,EAAW,MAAA;AAAA,EAAQ,MAAA;AAAA,EAAQ,KAAA;AAAA,EAAO,UAAA;AAAA,EAC5C,MAAA;AAAA,EAAQ,UAAA;AAAA,EAAY,IAAA;AAAA,EAAM,KAAA;AAAA,EAAO,SAAA;AAAA,EAAW,KAAA;AAAA,EAAO,QAAA;AAAA,EAAU,KAAA;AAAA,EAAO,IAAA;AAAA,EAAM,IAAA;AAAA,EAC1E,IAAA;AAAA,EAAM,OAAA;AAAA,EACN,UAAA;AAAA,EAAY,YAAA;AAAA,EAAc,QAAA;AAAA,EAAU,QAAA;AAAA,EAAU,MAAA;AAAA,EAC9C,IAAA;AAAA,EAAM,IAAA;AAAA,EAAM,IAAA;AAAA,EAAM,IAAA;AAAA,EAAM,IAAA;AAAA,EAAM,IAAA;AAAA,EAAM,MAAA;AAAA,EAAQ,QAAA;AAAA,EAAU,QAAA;AAAA,EAAU,IAAA;AAAA,EAAM,MAAA;AAAA,EACtE,GAAA;AAAA,EAAK,QAAA;AAAA,EAAU,KAAA;AAAA,EAAO,OAAA;AAAA,EAAS,KAAA;AAAA,EAC/B,KAAA;AAAA,EACA,OAAA;AAAA,EAAS,QAAA;AAAA,EAAU,IAAA;AAAA,EAAM,MAAA;AAAA,EACzB,MAAA;AAAA,EAAQ,KAAA;AAAA,EAAO,MAAA;AAAA,EAAQ,MAAA;AAAA,EAAQ,MAAA;AAAA,EAAQ,OAAA;AAAA,EACvC,KAAA;AAAA,EAAO,UAAA;AAAA,EACP,QAAA;AAAA,EAAU,IAAA;AAAA,EAAM,UAAA;AAAA,EAAY,QAAA;AAAA,EAAU,QAAA;AAAA,EACtC,GAAA;AAAA,EAAK,OAAA;AAAA,EAAS,SAAA;AAAA,EAAW,KAAA;AAAA,EAAO,UAAA;AAAA,EAChC,GAAA;AAAA,EACA,IAAA;AAAA,EAAM,IAAA;AAAA,EAAM,MAAA;AAAA,EACZ,GAAA;AAAA,EAAK,MAAA;AAAA,EAAQ,QAAA;AAAA,EAAU,SAAA;AAAA,EAAW,QAAA;AAAA,EAAU,MAAA;AAAA,EAAQ,OAAA;AAAA,EAAS,QAAA;AAAA,EAAU,MAAA;AAAA,EACvE,QAAA;AAAA,EAAU,QAAA;AAAA,EAAU,OAAA;AAAA,EAAS,KAAA;AAAA,EAAO,SAAA;AAAA,EAAW,KAAA;AAAA,EAC/C,OAAA;AAAA,EAAS,OAAA;AAAA,EAAS,IAAA;AAAA,EAAM,UAAA;AAAA,EAAY,UAAA;AAAA,EAAY,OAAA;AAAA,EAAS,IAAA;AAAA,EAAM,OAAA;AAAA,EAAS,MAAA;AAAA,EAAQ,OAAA;AAAA,EAAS,IAAA;AAAA,EAAM,OAAA;AAAA,EAC/F,GAAA;AAAA,EAAK,IAAA;AAAA,EACL,KAAA;AAAA,EAAO,OAAA;AAAA,EACP;AACF,CAAC,CAAA;AAOM,SAAS,eAAe,IAAA,EAAsB;AACnD,EAAA,IAAI,EAAA,GAAK,IAAA;AAGT,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,wBAAA,EAA0B,QAAQ,CAAA;AAClD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,wBAAA,EAA0B,SAAS,CAAA;AACnD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,wBAAA,EAA0B,UAAU,CAAA;AACpD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,wBAAA,EAA0B,WAAW,CAAA;AACrD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,wBAAA,EAA0B,YAAY,CAAA;AACtD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,wBAAA,EAA0B,aAAa,CAAA;AAGvD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,wBAAA,EAA0B,QAAQ,CAAA;AAClD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,mBAAA,EAAqB,IAAI,CAAA;AAGzC,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,gCAAA,EAAkC,QAAQ,CAAA;AAC1D,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,sBAAA,EAAwB,QAAQ,CAAA;AAChD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,wBAAA,EAA0B,MAAM,CAAA;AAChD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,sBAAA,EAAwB,MAAM,CAAA;AAC9C,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,sBAAA,EAAwB,IAAI,CAAA;AAC5C,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,sBAAA,EAAwB,QAAQ,CAAA;AAChD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,gCAAA,EAAkC,QAAQ,CAAA;AAC1D,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,0BAAA,EAA4B,QAAQ,CAAA;AACpD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,4BAAA,EAA8B,MAAM,CAAA;AAGpD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,yCAAA,EAA2C,UAAU,CAAA;AAGrE,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,wCAAA,EAA0C,QAAQ,CAAA;AAGlE,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,cAAA,EAAgB,IAAI,CAAA;AACpC,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,sBAAA,EAAwB,QAAQ,CAAA;AAChD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,0BAAA,EAA4B,MAAM,CAAA;AAGlD,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,gCAAA,EAAkC,CAAC,OAAO,OAAA,KAAoB;AAC5E,IAAA,OAAO,mBAAmB,GAAA,CAAI,OAAA,CAAQ,WAAA,EAAa,IAAI,EAAA,GAAK,KAAA;AAAA,EAC9D,CAAC,CAAA;AAID,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,OAAA,EAAS,GAAG,CAAA;AAC5B,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,OAAA,EAAS,GAAG,CAAA;AAC5B,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,SAAA,EAAW,GAAG,CAAA;AAC9B,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,QAAA,EAAU,GAAG,CAAA;AAC7B,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,SAAA,EAAW,GAAG,CAAA;AAC9B,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,QAAA,EAAU,GAAG,CAAA;AAG7B,EAAA,EAAA,GAAK,EAAA,CAAG,OAAA,CAAQ,SAAA,EAAW,MAAM,CAAA;AACjC,EAAA,EAAA,GAAK,GAAG,IAAA,EAAK;AAEb,EAAA,OAAO,EAAA;AACT;AAMO,SAAS,uBAAuB,UAAA,EAAuC;AAC5E,EAAA,IAAI,UAAA,CAAW,MAAA,KAAW,CAAA,EAAG,OAAO,EAAA;AAEpC,EAAA,OAAO,UAAA,CACJ,GAAA,CAAI,CAAC,GAAA,KAAQ;AACZ,IAAA,MAAM,GAAA,GAAM,GAAA,CAAI,GAAA,CAAI,WAAA,EAAY;AAChC,IAAA,OAAO;AAAA,MACL,MAAM,GAAG,CAAA,OAAA,CAAA;AAAA,MACT,MAAM,GAAG,CAAA,MAAA,CAAA;AAAA,MACT,MAAM,GAAG,CAAA,YAAA,CAAA;AAAA,MACT,MAAM,GAAG,CAAA,QAAA,CAAA;AAAA,MACT,MAAM,GAAG,CAAA,eAAA,CAAA;AAAA,MACT,MAAM,GAAG,CAAA,iBAAA,CAAA;AAAA,MACT,MAAM,GAAG,CAAA,YAAA,CAAA;AAAA,MACT,MAAM,GAAG,CAAA,KAAA,CAAA;AAAA,MACT,MAAM,GAAG,CAAA,SAAA,CAAA;AAAA,MACT,WAAW,GAAG,CAAA,iBAAA,CAAA;AAAA,MACd,WAAW,GAAG,CAAA,gBAAA;AAAA,KAChB,CAAE,KAAK,GAAG,CAAA;AAAA,EACZ,CAAC,CAAA,CACA,IAAA,CAAK,GAAG,CAAA;AACb;AC5HO,SAAS,eAAA,CAAgB;AAAA,EAC9B,IAAA;AAAA,EACA,UAAA,EAAY,kBAAA;AAAA,EACZ,MAAA,GAAS;AACX,CAAA,EAAyB;AACvB,EAAA,MAAM,UAAA,GAAa,OAAA;AAAA,IACjB,MAAM,gBAAgB,kBAAkB,CAAA;AAAA,IACxC,CAAC,kBAAkB;AAAA,GACrB;AAEA,EAAA,MAAM,QAAA,GAAW,OAAA;AAAA,IACf,MAAM,aAAA,CAAc,IAAA,EAAM,UAAU,CAAA;AAAA,IACpC,CAAC,MAAM,UAAU;AAAA,GACnB;AAEA,EAAA,MAAM,aAAa,CAAC,OAAA,KAClB,MAAA,GAAS,OAAA,GAAU,aAAa,OAAO,CAAA;AAGzC,EAAA,IAAI,SAAS,MAAA,KAAW,CAAA,IAAK,SAAS,CAAC,CAAA,CAAE,SAAS,MAAA,EAAQ;AACxD,IAAA,uBAAO,GAAA,CAAC,KAAA,EAAA,EAAI,uBAAA,EAAyB,EAAE,MAAA,EAAQ,UAAA,CAAW,QAAA,CAAS,CAAC,CAAA,CAAE,OAAO,CAAA,EAAE,EAAG,CAAA;AAAA,EACpF;AAGA,EAAA,IAAI,QAAA,CAAS,WAAW,CAAA,EAAG;AACzB,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,uBACE,GAAA,CAAA,QAAA,EAAA,EACG,QAAA,EAAA,QAAA,CAAS,GAAA,CAAI,CAAC,SAAS,CAAA,KAAM;AAC5B,IAAA,IAAI,OAAA,CAAQ,SAAS,MAAA,EAAQ;AAC3B,MAAA,OAAO,OAAA,CAAQ,OAAA,mBACb,GAAA,CAAC,KAAA,EAAA,EAAY,uBAAA,EAAyB,EAAE,MAAA,EAAQ,UAAA,CAAW,OAAA,CAAQ,OAAO,CAAA,EAAE,EAAA,EAAlE,CAAqE,CAAA,GAC7E,IAAA;AAAA,IACN;AAEA,IAAA,MAAM,MAAM,UAAA,CAAW,IAAA;AAAA,MACrB,CAAC,CAAA,KAAM,CAAA,CAAE,GAAA,CAAI,WAAA,OAAkB,OAAA,CAAQ;AAAA,KACzC;AACA,IAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AAEjB,IAAA,MAAM,YAAY,GAAA,CAAI,SAAA;AACtB,IAAA,MAAM,OAAA,GAAU,IAAI,KAAA,KAAU,KAAA;AAC9B,IAAA,MAAM,OAAA,GAAU,UAAU,KAAA,GAAQ,MAAA;AAElC,IAAA,uBACE,GAAA,CAAC,OAAA,EAAA,EAAgB,uBAAA,EAAuB,OAAA,CAAQ,KAC9C,QAAA,kBAAA,GAAA,CAAC,SAAA,EAAA,EAAU,OAAA,EAAS,OAAA,CAAQ,OAAA,EAAS,UAAA,EAAY,OAAA,CAAQ,UAAA,EAAY,KADzD,CAEd,CAAA;AAAA,EAEJ,CAAC,CAAA,EACH,CAAA;AAEJ;AAEA,eAAA,CAAgB,WAAA,GAAc,iBAAA;ACpEvB,SAAS,eAAA,CAAgB;AAAA,EAC9B,KAAA;AAAA,EACA,MAAA,GAAS,MAAA;AAAA,EACT,WAAA,GAAc,GAAA;AAAA,EACd,SAAA;AAAA,EACA,UAAA,EAAY,kBAAA;AAAA,EACZ,MAAA,GAAS;AACX,CAAA,EAAyB;AACvB,EAAA,MAAM,UAAA,GAAaA,OAAAA;AAAA,IACjB,MAAM,gBAAgB,kBAAkB,CAAA;AAAA,IACxC,CAAC,kBAAkB;AAAA,GACrB;AAEA,EAAA,MAAM,IAAA,GAAOA,QAAQ,MAAM;AAIzB,IAAA,MAAM,OAAO,KAAA,IAAS,EAAA;AACtB,IAAA,MAAM,cAAA,GAAiB,MAAA,KAAW,MAAA,GAAS,YAAA,CAAa,IAAI,CAAA,GAAI,MAAA;AAChE,IAAA,MAAM,GAAA,GAAM,cAAA,KAAmB,UAAA,GAC1B,MAAA,CAAO,KAAA,CAAM,MAAM,EAAE,KAAA,EAAO,KAAA,EAAO,CAAA,GACpC,IAAA;AACJ,IAAA,OAAO,MAAA,GAAS,GAAA,GAAM,YAAA,CAAa,GAAG,CAAA;AAAA,EACxC,CAAA,EAAG,CAAC,KAAA,EAAO,MAAA,EAAQ,MAAM,CAAC,CAAA;AAE1B,EAAA,MAAM,aAAA,GAAgB,WAAW,MAAA,GAAS,CAAA;AAE1C,EAAA,uBACEC,GAAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,mCAAA,EAAkC,EAAA;AAAA,MAClC,KAAA,EAAO,EAAE,UAAA,EAAY,WAAA,EAAY;AAAA,MACjC,SAAA,EAAW,EAAA,CAAG,SAAA,EAAW,YAAA,EAAc,SAAS,CAAA;AAAA,MAE/C,QAAA,EAAA,aAAA,mBACCA,GAAAA,CAAC,eAAA,EAAA,EAAgB,MAAY,UAAA,EAAwB,MAAA,EAAgB,CAAA,mBAErEA,IAAC,KAAA,EAAA,EAAI,uBAAA,EAAyB,EAAE,MAAA,EAAQ,MAAK,EAAG;AAAA;AAAA,GAEpD;AAEJ;AAEA,eAAA,CAAgB,WAAA,GAAc,iBAAA","file":"chunk-GMNMJLZO.js","sourcesContent":["import type { ComponentType } from \"react\";\n\n/** Props passed to every render-extension component. */\nexport interface RenderExtensionProps {\n  /** The inner content of the custom tag (raw string). */\n  content: string;\n  /** Parsed HTML attributes from the opening tag. */\n  attributes: Record<string, string>;\n}\n\n/** Registers a custom tag with a React component for rendering. */\nexport interface RenderExtension {\n  /** Tag name to match, e.g. \"questions\", \"thinking\". Case-insensitive. */\n  tag: string;\n  /** React component that renders the matched tag. */\n  component: ComponentType<RenderExtensionProps>;\n  /**\n   * Whether this is a block-level element.\n   * Block extensions are wrapped in a `<div>`, inline in a `<span>`.\n   * @default true\n   */\n  block?: boolean;\n}\n\n/** A parsed segment — either raw HTML or a matched extension tag. */\nexport type ContentSegment =\n  | { type: \"html\"; content: string }\n  | { type: \"extension\"; tag: string; content: string; attributes: Record<string, string> };\n\n// ---------------------------------------------------------------------------\n// Global extension registry\n// ---------------------------------------------------------------------------\n\nconst globalRegistry: RenderExtension[] = [];\n\n/** Register a single render extension globally (available to all ContentRenderer and Editor instances). */\nexport function registerExtension(extension: RenderExtension): void {\n  const idx = globalRegistry.findIndex(\n    (e) => e.tag.toLowerCase() === extension.tag.toLowerCase(),\n  );\n  if (idx >= 0) {\n    globalRegistry[idx] = extension;\n  } else {\n    globalRegistry.push(extension);\n  }\n}\n\n/** Register multiple render extensions globally. */\nexport function registerExtensions(extensions: RenderExtension[]): void {\n  for (const ext of extensions) {\n    registerExtension(ext);\n  }\n}\n\n/** Get a snapshot of the current global registry. */\nexport function getGlobalExtensions(): RenderExtension[] {\n  return [...globalRegistry];\n}\n\n// ---------------------------------------------------------------------------\n// Parsing\n// ---------------------------------------------------------------------------\n\n/** Parse attributes from an opening tag string like `tag foo=\"bar\" baz=\"qux\"`. */\nfunction parseAttributes(attrString: string): Record<string, string> {\n  const attrs: Record<string, string> = {};\n  const re = /(\\w[\\w-]*)(?:\\s*=\\s*(?:\"([^\"]*)\"|'([^']*)'|(\\S+)))?/g;\n  let m: RegExpExecArray | null;\n  while ((m = re.exec(attrString)) !== null) {\n    attrs[m[1]] = m[2] ?? m[3] ?? m[4] ?? \"\";\n  }\n  return attrs;\n}\n\n/**\n * Split an HTML string into segments of plain HTML and matched extension tags.\n *\n * Handles:\n * - `<tag>content</tag>`\n * - `<tag attr=\"val\">content</tag>`\n * - Nested different-tags inside the content (preserved as raw HTML)\n * - Self-nesting of the same tag (greedy — matches outermost)\n */\nexport function parseSegments(\n  html: string,\n  extensions: RenderExtension[],\n): ContentSegment[] {\n  if (extensions.length === 0) {\n    return html ? [{ type: \"html\", content: html }] : [];\n  }\n\n  const tagNames = extensions.map((e) => e.tag).join(\"|\");\n  // Match opening tag with optional attributes, then content, then closing tag.\n  // Uses a non-greedy match for content — if same-tag nesting is needed the\n  // consumer should use distinct tag names.\n  const pattern = new RegExp(\n    `<(${tagNames})((?:\\\\s+[^>]*)?)>([\\\\s\\\\S]*?)<\\\\/\\\\1>`,\n    \"gi\",\n  );\n\n  const segments: ContentSegment[] = [];\n  let lastIndex = 0;\n  let match: RegExpExecArray | null;\n\n  while ((match = pattern.exec(html)) !== null) {\n    // Push any HTML before this match\n    if (match.index > lastIndex) {\n      segments.push({ type: \"html\", content: html.slice(lastIndex, match.index) });\n    }\n\n    const tag = match[1].toLowerCase();\n    const rawAttrs = match[2] ? match[2].trim() : \"\";\n    const innerContent = match[3];\n\n    segments.push({\n      type: \"extension\",\n      tag,\n      content: innerContent,\n      attributes: rawAttrs ? parseAttributes(rawAttrs) : {},\n    });\n\n    lastIndex = match.index + match[0].length;\n  }\n\n  // Push any trailing HTML\n  if (lastIndex < html.length) {\n    segments.push({ type: \"html\", content: html.slice(lastIndex) });\n  }\n\n  return segments;\n}\n\n/**\n * Merge per-instance extensions with the global registry.\n * Instance extensions override globals with the same tag name.\n */\nexport function mergeExtensions(\n  instanceExtensions?: RenderExtension[],\n): RenderExtension[] {\n  const globals = getGlobalExtensions();\n  if (!instanceExtensions || instanceExtensions.length === 0) return globals;\n  if (globals.length === 0) return instanceExtensions;\n\n  const merged = [...globals];\n  for (const ext of instanceExtensions) {\n    const idx = merged.findIndex(\n      (e) => e.tag.toLowerCase() === ext.tag.toLowerCase(),\n    );\n    if (idx >= 0) {\n      merged[idx] = ext;\n    } else {\n      merged.push(ext);\n    }\n  }\n  return merged;\n}\n","import type { RenderExtension } from \"../ContentRenderer/extensions\";\n\n/**\n * Shared prose typography classes for Editor.Content and ContentRenderer.\n * Hand-rolled since we don't depend on @tailwindcss/typography.\n */\nexport const proseClasses = [\n  \"[&_h1]:text-2xl [&_h1]:font-bold [&_h1]:mt-4 [&_h1]:mb-2\",\n  \"[&_h2]:text-xl [&_h2]:font-semibold [&_h2]:mt-3 [&_h2]:mb-2\",\n  \"[&_h3]:text-lg [&_h3]:font-semibold [&_h3]:mt-2 [&_h3]:mb-1\",\n  \"[&_p]:mb-2\",\n  \"[&_a]:text-blue-500 [&_a]:underline\",\n  \"[&_ul]:list-disc [&_ul]:pl-5 [&_ol]:list-decimal [&_ol]:pl-5\",\n  \"[&_li]:mb-1\",\n  \"[&_blockquote]:border-l-4 [&_blockquote]:border-zinc-300 [&_blockquote]:pl-4 [&_blockquote]:italic [&_blockquote]:text-zinc-600 dark:[&_blockquote]:border-zinc-600 dark:[&_blockquote]:text-zinc-400\",\n  \"[&_code]:bg-zinc-100 [&_code]:px-1 [&_code]:rounded [&_code]:text-sm dark:[&_code]:bg-zinc-800\",\n  \"[&_pre]:bg-zinc-950 [&_pre]:text-zinc-100 [&_pre]:p-4 [&_pre]:rounded-lg [&_pre]:overflow-x-auto\",\n  \"[&_pre_code]:bg-transparent [&_pre_code]:px-0\",\n  \"[&_strong]:font-bold [&_em]:italic\",\n].join(\" \");\n\nconst HTML_TAG_PATTERN = /<(p|div|br|h[1-6]|ul|ol|strong|em|a |img |table|pre|code|blockquote)[>\\s/]/i;\n\n/** Detect whether a string is likely HTML or Markdown. */\nexport function detectFormat(value: string): \"html\" | \"markdown\" {\n  return HTML_TAG_PATTERN.test(value) ? \"html\" : \"markdown\";\n}\n\n/**\n * Build a set of known HTML tag names. Extension tags are excluded\n * so that the \"strip remaining tags\" step preserves them.\n */\nconst STANDARD_HTML_TAGS = new Set([\n  \"a\", \"abbr\", \"address\", \"area\", \"article\", \"aside\", \"audio\",\n  \"b\", \"base\", \"bdi\", \"bdo\", \"blockquote\", \"body\", \"br\", \"button\",\n  \"canvas\", \"caption\", \"cite\", \"code\", \"col\", \"colgroup\",\n  \"data\", \"datalist\", \"dd\", \"del\", \"details\", \"dfn\", \"dialog\", \"div\", \"dl\", \"dt\",\n  \"em\", \"embed\",\n  \"fieldset\", \"figcaption\", \"figure\", \"footer\", \"form\",\n  \"h1\", \"h2\", \"h3\", \"h4\", \"h5\", \"h6\", \"head\", \"header\", \"hgroup\", \"hr\", \"html\",\n  \"i\", \"iframe\", \"img\", \"input\", \"ins\",\n  \"kbd\",\n  \"label\", \"legend\", \"li\", \"link\",\n  \"main\", \"map\", \"mark\", \"menu\", \"meta\", \"meter\",\n  \"nav\", \"noscript\",\n  \"object\", \"ol\", \"optgroup\", \"option\", \"output\",\n  \"p\", \"param\", \"picture\", \"pre\", \"progress\",\n  \"q\",\n  \"rp\", \"rt\", \"ruby\",\n  \"s\", \"samp\", \"script\", \"section\", \"select\", \"slot\", \"small\", \"source\", \"span\",\n  \"strike\", \"strong\", \"style\", \"sub\", \"summary\", \"sup\",\n  \"table\", \"tbody\", \"td\", \"template\", \"textarea\", \"tfoot\", \"th\", \"thead\", \"time\", \"title\", \"tr\", \"track\",\n  \"u\", \"ul\",\n  \"var\", \"video\",\n  \"wbr\",\n]);\n\n/**\n * Lightweight HTML-to-Markdown converter for editor output.\n * Handles the most common inline/block formatting produced by contentEditable.\n * Custom extension tags are preserved as-is in the output.\n */\nexport function htmlToMarkdown(html: string): string {\n  let md = html;\n\n  // Block elements first\n  md = md.replace(/<h1[^>]*>(.*?)<\\/h1>/gi, \"# $1\\n\");\n  md = md.replace(/<h2[^>]*>(.*?)<\\/h2>/gi, \"## $1\\n\");\n  md = md.replace(/<h3[^>]*>(.*?)<\\/h3>/gi, \"### $1\\n\");\n  md = md.replace(/<h4[^>]*>(.*?)<\\/h4>/gi, \"#### $1\\n\");\n  md = md.replace(/<h5[^>]*>(.*?)<\\/h5>/gi, \"##### $1\\n\");\n  md = md.replace(/<h6[^>]*>(.*?)<\\/h6>/gi, \"###### $1\\n\");\n\n  // Lists\n  md = md.replace(/<li[^>]*>(.*?)<\\/li>/gi, \"- $1\\n\");\n  md = md.replace(/<\\/?[uo]l[^>]*>/gi, \"\\n\");\n\n  // Inline formatting\n  md = md.replace(/<strong[^>]*>(.*?)<\\/strong>/gi, \"**$1**\");\n  md = md.replace(/<b[^>]*>(.*?)<\\/b>/gi, \"**$1**\");\n  md = md.replace(/<em[^>]*>(.*?)<\\/em>/gi, \"*$1*\");\n  md = md.replace(/<i[^>]*>(.*?)<\\/i>/gi, \"*$1*\");\n  md = md.replace(/<u[^>]*>(.*?)<\\/u>/gi, \"$1\");\n  md = md.replace(/<s[^>]*>(.*?)<\\/s>/gi, \"~~$1~~\");\n  md = md.replace(/<strike[^>]*>(.*?)<\\/strike>/gi, \"~~$1~~\");\n  md = md.replace(/<del[^>]*>(.*?)<\\/del>/gi, \"~~$1~~\");\n  md = md.replace(/<code[^>]*>(.*?)<\\/code>/gi, \"`$1`\");\n\n  // Links\n  md = md.replace(/<a[^>]*href=\"([^\"]*)\"[^>]*>(.*?)<\\/a>/gi, \"[$2]($1)\");\n\n  // Blockquotes\n  md = md.replace(/<blockquote[^>]*>(.*?)<\\/blockquote>/gi, \"> $1\\n\");\n\n  // Line breaks and paragraphs\n  md = md.replace(/<br\\s*\\/?>/gi, \"\\n\");\n  md = md.replace(/<p[^>]*>(.*?)<\\/p>/gi, \"$1\\n\\n\");\n  md = md.replace(/<div[^>]*>(.*?)<\\/div>/gi, \"$1\\n\");\n\n  // Strip only standard HTML tags — preserve unknown/custom tags\n  md = md.replace(/<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi, (match, tagName: string) => {\n    return STANDARD_HTML_TAGS.has(tagName.toLowerCase()) ? \"\" : match;\n  });\n\n  // Decode common HTML entities. Decode &amp; LAST so we never double-unescape:\n  // e.g. \"&amp;lt;\" must decode to the literal \"&lt;\", not to \"<\".\n  md = md.replace(/&lt;/g, \"<\");\n  md = md.replace(/&gt;/g, \">\");\n  md = md.replace(/&quot;/g, '\"');\n  md = md.replace(/&#39;/g, \"'\");\n  md = md.replace(/&nbsp;/g, \" \");\n  md = md.replace(/&amp;/g, \"&\");\n\n  // Clean up extra whitespace\n  md = md.replace(/\\n{3,}/g, \"\\n\\n\");\n  md = md.trim();\n\n  return md;\n}\n\n/**\n * Generate CSS classes to visually distinguish custom extension tags\n * inside the contentEditable area. Returns Tailwind-style descendant selectors.\n */\nexport function extensionEditorClasses(extensions: RenderExtension[]): string {\n  if (extensions.length === 0) return \"\";\n\n  return extensions\n    .map((ext) => {\n      const tag = ext.tag.toLowerCase();\n      return [\n        `[&_${tag}]:block`,\n        `[&_${tag}]:my-2`,\n        `[&_${tag}]:rounded-lg`,\n        `[&_${tag}]:border`,\n        `[&_${tag}]:border-dashed`,\n        `[&_${tag}]:border-zinc-300`,\n        `[&_${tag}]:bg-zinc-50`,\n        `[&_${tag}]:p-3`,\n        `[&_${tag}]:text-xs`,\n        `dark:[&_${tag}]:border-zinc-600`,\n        `dark:[&_${tag}]:bg-zinc-800/50`,\n      ].join(\" \");\n    })\n    .join(\" \");\n}\n","import { useMemo } from \"react\";\nimport { sanitizeHtml } from \"../../utils/sanitize\";\nimport type { RenderExtension } from \"./extensions\";\nimport { parseSegments, mergeExtensions } from \"./extensions\";\n\ninterface RenderedContentProps {\n  html: string;\n  extensions?: RenderExtension[];\n  /**\n   * If true, html is rendered as-is without per-segment sanitization. Caller\n   * (ContentRenderer) is expected to have already sanitized — or explicitly\n   * opted out — at the top level.\n   */\n  unsafe?: boolean;\n}\n\n/**\n * Internal component that renders an HTML string with extension support.\n * Plain HTML segments use dangerouslySetInnerHTML; custom-tag segments\n * are rendered via their registered React component.\n */\nexport function RenderedContent({\n  html,\n  extensions: instanceExtensions,\n  unsafe = false,\n}: RenderedContentProps) {\n  const extensions = useMemo(\n    () => mergeExtensions(instanceExtensions),\n    [instanceExtensions],\n  );\n\n  const segments = useMemo(\n    () => parseSegments(html, extensions),\n    [html, extensions],\n  );\n\n  const renderHtml = (content: string): string =>\n    unsafe ? content : sanitizeHtml(content);\n\n  // Fast path: no extensions matched — single dangerouslySetInnerHTML\n  if (segments.length === 1 && segments[0].type === \"html\") {\n    return <div dangerouslySetInnerHTML={{ __html: renderHtml(segments[0].content) }} />;\n  }\n\n  // No content at all\n  if (segments.length === 0) {\n    return null;\n  }\n\n  return (\n    <>\n      {segments.map((segment, i) => {\n        if (segment.type === \"html\") {\n          return segment.content ? (\n            <div key={i} dangerouslySetInnerHTML={{ __html: renderHtml(segment.content) }} />\n          ) : null;\n        }\n\n        const ext = extensions.find(\n          (e) => e.tag.toLowerCase() === segment.tag,\n        );\n        if (!ext) return null;\n\n        const Component = ext.component;\n        const isBlock = ext.block !== false;\n        const Wrapper = isBlock ? \"div\" : \"span\";\n\n        return (\n          <Wrapper key={i} data-render-extension={segment.tag}>\n            <Component content={segment.content} attributes={segment.attributes} />\n          </Wrapper>\n        );\n      })}\n    </>\n  );\n}\n\nRenderedContent.displayName = \"RenderedContent\";\n","import { useMemo } from \"react\";\nimport { marked } from \"marked\";\nimport { cn } from \"../../utils/cn\";\nimport { sanitizeHtml } from \"../../utils/sanitize\";\nimport { proseClasses, detectFormat } from \"../Editor/editor.utils\";\nimport { mergeExtensions } from \"./extensions\";\nimport { RenderedContent } from \"./RenderedContent\";\nimport type { ContentRendererProps } from \"./ContentRenderer.types\";\n\nexport function ContentRenderer({\n  value,\n  format = \"auto\",\n  lineSpacing = 1.6,\n  className,\n  extensions: instanceExtensions,\n  unsafe = false,\n}: ContentRendererProps) {\n  const extensions = useMemo(\n    () => mergeExtensions(instanceExtensions),\n    [instanceExtensions],\n  );\n\n  const html = useMemo(() => {\n    // Guard nullish input: marked.parse throws \"input parameter is undefined\n    // or null\", which (inside this useMemo during render) would crash the whole\n    // React tree. Treat missing content as empty.\n    const safe = value ?? \"\";\n    const resolvedFormat = format === \"auto\" ? detectFormat(safe) : format;\n    const raw = resolvedFormat === \"markdown\"\n      ? (marked.parse(safe, { async: false }) as string)\n      : safe;\n    return unsafe ? raw : sanitizeHtml(raw);\n  }, [value, format, unsafe]);\n\n  const hasExtensions = extensions.length > 0;\n\n  return (\n    <div\n      data-react-fancy-content-renderer=\"\"\n      style={{ lineHeight: lineSpacing }}\n      className={cn(\"text-sm\", proseClasses, className)}\n    >\n      {hasExtensions ? (\n        <RenderedContent html={html} extensions={extensions} unsafe={unsafe} />\n      ) : (\n        <div dangerouslySetInnerHTML={{ __html: html }} />\n      )}\n    </div>\n  );\n}\n\nContentRenderer.displayName = \"ContentRenderer\";\n"]}

package/dist/chunk-LRNWD26Z.cjs

@@ -1,82 +0,0 @@
-'use strict';
-
-// src/utils/sanitize.ts
-var DANGEROUS_TAGS = /* @__PURE__ */ new Set([
-  "script",
-  "style",
-  "iframe",
-  "object",
-  "embed",
-  "link",
-  "meta",
-  "base",
-  "form",
-  // A <title> anywhere in the document retitles the host's tab.
-  "title"
-]);
-var URL_ATTRS = /* @__PURE__ */ new Set(["href", "src", "action", "formaction", "xlink:href"]);
-var SAFE_PROTOCOL = /^(?:https?:|mailto:|tel:|sms:|ftp:|#|\/|\.\/|\.\.\/|[^:]*$)/i;
-function sanitizeHref(href) {
-  if (href == null) return void 0;
-  const trimmed = href.trim();
-  if (!trimmed) return void 0;
-  return SAFE_PROTOCOL.test(trimmed) ? trimmed : void 0;
-}
-function stripDangerousAttrs(el) {
-  const names = [];
-  for (let i = 0; i < el.attributes.length; i++) {
-    names.push(el.attributes[i].name);
-  }
-  for (const name of names) {
-    const lower = name.toLowerCase();
-    if (lower.startsWith("on")) {
-      el.removeAttribute(name);
-      continue;
-    }
-    if (URL_ATTRS.has(lower)) {
-      const sanitized = sanitizeHref(el.getAttribute(name));
-      if (sanitized === void 0) {
-        el.removeAttribute(name);
-      } else {
-        el.setAttribute(name, sanitized);
-      }
-      continue;
-    }
-    if (lower === "srcdoc") {
-      el.removeAttribute(name);
-    }
-  }
-}
-function walk(el, removeQueue) {
-  const tag = el.tagName.toLowerCase();
-  if (DANGEROUS_TAGS.has(tag)) {
-    removeQueue.push(el);
-    return;
-  }
-  stripDangerousAttrs(el);
-  const children = Array.from(el.children);
-  for (const child of children) {
-    walk(child, removeQueue);
-  }
-}
-function sanitizeHtml(html) {
-  if (typeof window === "undefined" || typeof DOMParser === "undefined") {
-    return html;
-  }
-  const doc = new DOMParser().parseFromString(`<body>${html}</body>`, "text/html");
-  const body = doc.body;
-  if (!body) return html;
-  const removeQueue = [];
-  for (const child of Array.from(body.children)) {
-    walk(child, removeQueue);
-  }
-  for (const el of removeQueue) {
-    el.parentNode?.removeChild(el);
-  }
-  return body.innerHTML;
-}
-
-exports.sanitizeHref = sanitizeHref;
-exports.sanitizeHtml = sanitizeHtml;
-//# sourceMappingURL=chunk-LRNWD26Z.cjs.map
-//# sourceMappingURL=chunk-LRNWD26Z.cjs.map

package/dist/chunk-LRNWD26Z.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/utils/sanitize.ts"],"names":[],"mappings":";;;AAaA,IAAM,cAAA,uBAAqB,GAAA,CAAI;AAAA,EAC7B,QAAA;AAAA,EACA,OAAA;AAAA,EACA,QAAA;AAAA,EACA,QAAA;AAAA,EACA,OAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA;AAAA,EAEA;AACF,CAAC,CAAA;AAED,IAAM,SAAA,uBAAgB,GAAA,CAAI,CAAC,QAAQ,KAAA,EAAO,QAAA,EAAU,YAAA,EAAc,YAAY,CAAC,CAAA;AAE/E,IAAM,aAAA,GAAgB,8DAAA;AAQf,SAAS,aAAa,IAAA,EAAqD;AAChF,EAAA,IAAI,IAAA,IAAQ,MAAM,OAAO,MAAA;AACzB,EAAA,MAAM,OAAA,GAAU,KAAK,IAAA,EAAK;AAC1B,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,OAAO,aAAA,CAAc,IAAA,CAAK,OAAO,CAAA,GAAI,OAAA,GAAU,MAAA;AACjD;AAEA,SAAS,oBAAoB,EAAA,EAAmB;AAE9C,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,EAAA,CAAG,UAAA,CAAW,QAAQ,CAAA,EAAA,EAAK;AAC7C,IAAA,KAAA,CAAM,IAAA,CAAK,EAAA,CAAG,UAAA,CAAW,CAAC,EAAE,IAAI,CAAA;AAAA,EAClC;AAEA,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,KAAA,GAAQ,KAAK,WAAA,EAAY;AAG/B,IAAA,IAAI,KAAA,CAAM,UAAA,CAAW,IAAI,CAAA,EAAG;AAC1B,MAAA,EAAA,CAAG,gBAAgB,IAAI,CAAA;AACvB,MAAA;AAAA,IACF;AAGA,IAAA,IAAI,SAAA,CAAU,GAAA,CAAI,KAAK,CAAA,EAAG;AACxB,MAAA,MAAM,SAAA,GAAY,YAAA,CAAa,EAAA,CAAG,YAAA,CAAa,IAAI,CAAC,CAAA;AACpD,MAAA,IAAI,cAAc,MAAA,EAAW;AAC3B,QAAA,EAAA,CAAG,gBAAgB,IAAI,CAAA;AAAA,MACzB,CAAA,MAAO;AACL,QAAA,EAAA,CAAG,YAAA,CAAa,MAAM,SAAS,CAAA;AAAA,MACjC;AACA,MAAA;AAAA,IACF;AAGA,IAAA,IAAI,UAAU,QAAA,EAAU;AACtB,MAAA,EAAA,CAAG,gBAAgB,IAAI,CAAA;AAAA,IACzB;AAAA,EACF;AACF;AAEA,SAAS,IAAA,CAAK,IAAa,WAAA,EAA8B;AACvD,EAAA,MAAM,GAAA,GAAM,EAAA,CAAG,OAAA,CAAQ,WAAA,EAAY;AAEnC,EAAA,IAAI,cAAA,CAAe,GAAA,CAAI,GAAG,CAAA,EAAG;AAC3B,IAAA,WAAA,CAAY,KAAK,EAAE,CAAA;AACnB,IAAA;AAAA,EACF;AAEA,EAAA,mBAAA,CAAoB,EAAE,CAAA;AAEtB,EAAA,MAAM,QAAA,GAAW,KAAA,CAAM,IAAA,CAAK,EAAA,CAAG,QAAQ,CAAA;AACvC,EAAA,KAAA,MAAW,SAAS,QAAA,EAAU;AAC5B,IAAA,IAAA,CAAK,OAAO,WAAW,CAAA;AAAA,EACzB;AACF;AAUO,SAAS,aAAa,IAAA,EAAsB;AACjD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,OAAO,cAAc,WAAA,EAAa;AACrE,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,GAAA,GAAM,IAAI,SAAA,EAAU,CAAE,gBAAgB,CAAA,MAAA,EAAS,IAAI,WAAW,WAAW,CAAA;AAC/E,EAAA,MAAM,OAAO,GAAA,CAAI,IAAA;AACjB,EAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAElB,EAAA,MAAM,cAAyB,EAAC;AAChC,EAAA,KAAA,MAAW,KAAA,IAAS,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,QAAQ,CAAA,EAAG;AAC7C,IAAA,IAAA,CAAK,OAAO,WAAW,CAAA;AAAA,EACzB;AAEA,EAAA,KAAA,MAAW,MAAM,WAAA,EAAa;AAC5B,IAAA,EAAA,CAAG,UAAA,EAAY,YAAY,EAAE,CAAA;AAAA,EAC/B;AAEA,EAAA,OAAO,IAAA,CAAK,SAAA;AACd","file":"chunk-LRNWD26Z.cjs","sourcesContent":["/**\n * HTML and URL sanitization utilities.\n *\n * Hand-rolled (no third-party deps) using browser-native `DOMParser`. Designed\n * for the trust model \"consumer passes user-generated markdown/HTML to a\n * react-fancy component\" — strips script tags, event handlers, and dangerous\n * URI schemes from `href`/`src` attributes.\n *\n * For server-side rendering (no `window`), `sanitizeHtml` returns the input\n * unchanged. Consumers SSR-rendering untrusted content should sanitize on the\n * server with their own pipeline.\n */\n\nconst DANGEROUS_TAGS = new Set([\n  \"script\",\n  \"style\",\n  \"iframe\",\n  \"object\",\n  \"embed\",\n  \"link\",\n  \"meta\",\n  \"base\",\n  \"form\",\n  // A <title> anywhere in the document retitles the host's tab.\n  \"title\",\n]);\n\nconst URL_ATTRS = new Set([\"href\", \"src\", \"action\", \"formaction\", \"xlink:href\"]);\n\nconst SAFE_PROTOCOL = /^(?:https?:|mailto:|tel:|sms:|ftp:|#|\\/|\\.\\/|\\.\\.\\/|[^:]*$)/i;\n\n/**\n * Validate a URL/href against an allow-list of safe protocols. Returns the\n * input if safe, or `undefined` if it begins with a dangerous scheme like\n * `javascript:`, `data:`, or `vbscript:`. Relative URLs and fragment links\n * are allowed.\n */\nexport function sanitizeHref(href: string | undefined | null): string | undefined {\n  if (href == null) return undefined;\n  const trimmed = href.trim();\n  if (!trimmed) return undefined;\n  return SAFE_PROTOCOL.test(trimmed) ? trimmed : undefined;\n}\n\nfunction stripDangerousAttrs(el: Element): void {\n  // Collect names first; mutating during iteration is awkward with NamedNodeMap.\n  const names: string[] = [];\n  for (let i = 0; i < el.attributes.length; i++) {\n    names.push(el.attributes[i].name);\n  }\n\n  for (const name of names) {\n    const lower = name.toLowerCase();\n\n    // All on* event handlers\n    if (lower.startsWith(\"on\")) {\n      el.removeAttribute(name);\n      continue;\n    }\n\n    // URL attributes — protocol-filter\n    if (URL_ATTRS.has(lower)) {\n      const sanitized = sanitizeHref(el.getAttribute(name));\n      if (sanitized === undefined) {\n        el.removeAttribute(name);\n      } else {\n        el.setAttribute(name, sanitized);\n      }\n      continue;\n    }\n\n    // srcdoc executes JS in the iframe — drop wholesale\n    if (lower === \"srcdoc\") {\n      el.removeAttribute(name);\n    }\n  }\n}\n\nfunction walk(el: Element, removeQueue: Element[]): void {\n  const tag = el.tagName.toLowerCase();\n\n  if (DANGEROUS_TAGS.has(tag)) {\n    removeQueue.push(el);\n    return;\n  }\n\n  stripDangerousAttrs(el);\n\n  const children = Array.from(el.children);\n  for (const child of children) {\n    walk(child, removeQueue);\n  }\n}\n\n/**\n * Sanitize an HTML string by removing dangerous tags (script, iframe, etc.),\n * event-handler attributes (`onclick`, `onerror`, ...), and dangerous URI\n * schemes in `href`/`src` attributes.\n *\n * Uses the browser's `DOMParser`. In non-browser environments returns the\n * input unchanged — sanitize on the server in those cases.\n */\nexport function sanitizeHtml(html: string): string {\n  if (typeof window === \"undefined\" || typeof DOMParser === \"undefined\") {\n    return html;\n  }\n\n  const doc = new DOMParser().parseFromString(`<body>${html}</body>`, \"text/html\");\n  const body = doc.body;\n  if (!body) return html;\n\n  const removeQueue: Element[] = [];\n  for (const child of Array.from(body.children)) {\n    walk(child, removeQueue);\n  }\n\n  for (const el of removeQueue) {\n    el.parentNode?.removeChild(el);\n  }\n\n  return body.innerHTML;\n}\n"]}

package/dist/chunk-QXYO76NZ.js

@@ -1,79 +0,0 @@
-// src/utils/sanitize.ts
-var DANGEROUS_TAGS = /* @__PURE__ */ new Set([
-  "script",
-  "style",
-  "iframe",
-  "object",
-  "embed",
-  "link",
-  "meta",
-  "base",
-  "form",
-  // A <title> anywhere in the document retitles the host's tab.
-  "title"
-]);
-var URL_ATTRS = /* @__PURE__ */ new Set(["href", "src", "action", "formaction", "xlink:href"]);
-var SAFE_PROTOCOL = /^(?:https?:|mailto:|tel:|sms:|ftp:|#|\/|\.\/|\.\.\/|[^:]*$)/i;
-function sanitizeHref(href) {
-  if (href == null) return void 0;
-  const trimmed = href.trim();
-  if (!trimmed) return void 0;
-  return SAFE_PROTOCOL.test(trimmed) ? trimmed : void 0;
-}
-function stripDangerousAttrs(el) {
-  const names = [];
-  for (let i = 0; i < el.attributes.length; i++) {
-    names.push(el.attributes[i].name);
-  }
-  for (const name of names) {
-    const lower = name.toLowerCase();
-    if (lower.startsWith("on")) {
-      el.removeAttribute(name);
-      continue;
-    }
-    if (URL_ATTRS.has(lower)) {
-      const sanitized = sanitizeHref(el.getAttribute(name));
-      if (sanitized === void 0) {
-        el.removeAttribute(name);
-      } else {
-        el.setAttribute(name, sanitized);
-      }
-      continue;
-    }
-    if (lower === "srcdoc") {
-      el.removeAttribute(name);
-    }
-  }
-}
-function walk(el, removeQueue) {
-  const tag = el.tagName.toLowerCase();
-  if (DANGEROUS_TAGS.has(tag)) {
-    removeQueue.push(el);
-    return;
-  }
-  stripDangerousAttrs(el);
-  const children = Array.from(el.children);
-  for (const child of children) {
-    walk(child, removeQueue);
-  }
-}
-function sanitizeHtml(html) {
-  if (typeof window === "undefined" || typeof DOMParser === "undefined") {
-    return html;
-  }
-  const doc = new DOMParser().parseFromString(`<body>${html}</body>`, "text/html");
-  const body = doc.body;
-  if (!body) return html;
-  const removeQueue = [];
-  for (const child of Array.from(body.children)) {
-    walk(child, removeQueue);
-  }
-  for (const el of removeQueue) {
-    el.parentNode?.removeChild(el);
-  }
-  return body.innerHTML;
-}
-
-export { sanitizeHref, sanitizeHtml };
-//# sourceMappingURL=chunk-QXYO76NZ.js.map
-//# sourceMappingURL=chunk-QXYO76NZ.js.map

package/dist/chunk-QXYO76NZ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/utils/sanitize.ts"],"names":[],"mappings":";AAaA,IAAM,cAAA,uBAAqB,GAAA,CAAI;AAAA,EAC7B,QAAA;AAAA,EACA,OAAA;AAAA,EACA,QAAA;AAAA,EACA,QAAA;AAAA,EACA,OAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA;AAAA,EAEA;AACF,CAAC,CAAA;AAED,IAAM,SAAA,uBAAgB,GAAA,CAAI,CAAC,QAAQ,KAAA,EAAO,QAAA,EAAU,YAAA,EAAc,YAAY,CAAC,CAAA;AAE/E,IAAM,aAAA,GAAgB,8DAAA;AAQf,SAAS,aAAa,IAAA,EAAqD;AAChF,EAAA,IAAI,IAAA,IAAQ,MAAM,OAAO,MAAA;AACzB,EAAA,MAAM,OAAA,GAAU,KAAK,IAAA,EAAK;AAC1B,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,OAAO,aAAA,CAAc,IAAA,CAAK,OAAO,CAAA,GAAI,OAAA,GAAU,MAAA;AACjD;AAEA,SAAS,oBAAoB,EAAA,EAAmB;AAE9C,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,EAAA,CAAG,UAAA,CAAW,QAAQ,CAAA,EAAA,EAAK;AAC7C,IAAA,KAAA,CAAM,IAAA,CAAK,EAAA,CAAG,UAAA,CAAW,CAAC,EAAE,IAAI,CAAA;AAAA,EAClC;AAEA,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,KAAA,GAAQ,KAAK,WAAA,EAAY;AAG/B,IAAA,IAAI,KAAA,CAAM,UAAA,CAAW,IAAI,CAAA,EAAG;AAC1B,MAAA,EAAA,CAAG,gBAAgB,IAAI,CAAA;AACvB,MAAA;AAAA,IACF;AAGA,IAAA,IAAI,SAAA,CAAU,GAAA,CAAI,KAAK,CAAA,EAAG;AACxB,MAAA,MAAM,SAAA,GAAY,YAAA,CAAa,EAAA,CAAG,YAAA,CAAa,IAAI,CAAC,CAAA;AACpD,MAAA,IAAI,cAAc,MAAA,EAAW;AAC3B,QAAA,EAAA,CAAG,gBAAgB,IAAI,CAAA;AAAA,MACzB,CAAA,MAAO;AACL,QAAA,EAAA,CAAG,YAAA,CAAa,MAAM,SAAS,CAAA;AAAA,MACjC;AACA,MAAA;AAAA,IACF;AAGA,IAAA,IAAI,UAAU,QAAA,EAAU;AACtB,MAAA,EAAA,CAAG,gBAAgB,IAAI,CAAA;AAAA,IACzB;AAAA,EACF;AACF;AAEA,SAAS,IAAA,CAAK,IAAa,WAAA,EAA8B;AACvD,EAAA,MAAM,GAAA,GAAM,EAAA,CAAG,OAAA,CAAQ,WAAA,EAAY;AAEnC,EAAA,IAAI,cAAA,CAAe,GAAA,CAAI,GAAG,CAAA,EAAG;AAC3B,IAAA,WAAA,CAAY,KAAK,EAAE,CAAA;AACnB,IAAA;AAAA,EACF;AAEA,EAAA,mBAAA,CAAoB,EAAE,CAAA;AAEtB,EAAA,MAAM,QAAA,GAAW,KAAA,CAAM,IAAA,CAAK,EAAA,CAAG,QAAQ,CAAA;AACvC,EAAA,KAAA,MAAW,SAAS,QAAA,EAAU;AAC5B,IAAA,IAAA,CAAK,OAAO,WAAW,CAAA;AAAA,EACzB;AACF;AAUO,SAAS,aAAa,IAAA,EAAsB;AACjD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,OAAO,cAAc,WAAA,EAAa;AACrE,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,GAAA,GAAM,IAAI,SAAA,EAAU,CAAE,gBAAgB,CAAA,MAAA,EAAS,IAAI,WAAW,WAAW,CAAA;AAC/E,EAAA,MAAM,OAAO,GAAA,CAAI,IAAA;AACjB,EAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAElB,EAAA,MAAM,cAAyB,EAAC;AAChC,EAAA,KAAA,MAAW,KAAA,IAAS,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,QAAQ,CAAA,EAAG;AAC7C,IAAA,IAAA,CAAK,OAAO,WAAW,CAAA;AAAA,EACzB;AAEA,EAAA,KAAA,MAAW,MAAM,WAAA,EAAa;AAC5B,IAAA,EAAA,CAAG,UAAA,EAAY,YAAY,EAAE,CAAA;AAAA,EAC/B;AAEA,EAAA,OAAO,IAAA,CAAK,SAAA;AACd","file":"chunk-QXYO76NZ.js","sourcesContent":["/**\n * HTML and URL sanitization utilities.\n *\n * Hand-rolled (no third-party deps) using browser-native `DOMParser`. Designed\n * for the trust model \"consumer passes user-generated markdown/HTML to a\n * react-fancy component\" — strips script tags, event handlers, and dangerous\n * URI schemes from `href`/`src` attributes.\n *\n * For server-side rendering (no `window`), `sanitizeHtml` returns the input\n * unchanged. Consumers SSR-rendering untrusted content should sanitize on the\n * server with their own pipeline.\n */\n\nconst DANGEROUS_TAGS = new Set([\n  \"script\",\n  \"style\",\n  \"iframe\",\n  \"object\",\n  \"embed\",\n  \"link\",\n  \"meta\",\n  \"base\",\n  \"form\",\n  // A <title> anywhere in the document retitles the host's tab.\n  \"title\",\n]);\n\nconst URL_ATTRS = new Set([\"href\", \"src\", \"action\", \"formaction\", \"xlink:href\"]);\n\nconst SAFE_PROTOCOL = /^(?:https?:|mailto:|tel:|sms:|ftp:|#|\\/|\\.\\/|\\.\\.\\/|[^:]*$)/i;\n\n/**\n * Validate a URL/href against an allow-list of safe protocols. Returns the\n * input if safe, or `undefined` if it begins with a dangerous scheme like\n * `javascript:`, `data:`, or `vbscript:`. Relative URLs and fragment links\n * are allowed.\n */\nexport function sanitizeHref(href: string | undefined | null): string | undefined {\n  if (href == null) return undefined;\n  const trimmed = href.trim();\n  if (!trimmed) return undefined;\n  return SAFE_PROTOCOL.test(trimmed) ? trimmed : undefined;\n}\n\nfunction stripDangerousAttrs(el: Element): void {\n  // Collect names first; mutating during iteration is awkward with NamedNodeMap.\n  const names: string[] = [];\n  for (let i = 0; i < el.attributes.length; i++) {\n    names.push(el.attributes[i].name);\n  }\n\n  for (const name of names) {\n    const lower = name.toLowerCase();\n\n    // All on* event handlers\n    if (lower.startsWith(\"on\")) {\n      el.removeAttribute(name);\n      continue;\n    }\n\n    // URL attributes — protocol-filter\n    if (URL_ATTRS.has(lower)) {\n      const sanitized = sanitizeHref(el.getAttribute(name));\n      if (sanitized === undefined) {\n        el.removeAttribute(name);\n      } else {\n        el.setAttribute(name, sanitized);\n      }\n      continue;\n    }\n\n    // srcdoc executes JS in the iframe — drop wholesale\n    if (lower === \"srcdoc\") {\n      el.removeAttribute(name);\n    }\n  }\n}\n\nfunction walk(el: Element, removeQueue: Element[]): void {\n  const tag = el.tagName.toLowerCase();\n\n  if (DANGEROUS_TAGS.has(tag)) {\n    removeQueue.push(el);\n    return;\n  }\n\n  stripDangerousAttrs(el);\n\n  const children = Array.from(el.children);\n  for (const child of children) {\n    walk(child, removeQueue);\n  }\n}\n\n/**\n * Sanitize an HTML string by removing dangerous tags (script, iframe, etc.),\n * event-handler attributes (`onclick`, `onerror`, ...), and dangerous URI\n * schemes in `href`/`src` attributes.\n *\n * Uses the browser's `DOMParser`. In non-browser environments returns the\n * input unchanged — sanitize on the server in those cases.\n */\nexport function sanitizeHtml(html: string): string {\n  if (typeof window === \"undefined\" || typeof DOMParser === \"undefined\") {\n    return html;\n  }\n\n  const doc = new DOMParser().parseFromString(`<body>${html}</body>`, \"text/html\");\n  const body = doc.body;\n  if (!body) return html;\n\n  const removeQueue: Element[] = [];\n  for (const child of Array.from(body.children)) {\n    walk(child, removeQueue);\n  }\n\n  for (const el of removeQueue) {\n    el.parentNode?.removeChild(el);\n  }\n\n  return body.innerHTML;\n}\n"]}