@pyreon/document 0.10.0 → 0.11.0

package/src/renderers/xlsx.ts

@@ -1,10 +1,4 @@
-import type {
-  DocChild,
-  DocNode,
-  DocumentRenderer,
-  RenderOptions,
-  TableColumn,
-} from '../types'
+import type { DocChild, DocNode, DocumentRenderer, RenderOptions, TableColumn } from "../types"
 
 /**
  * XLSX renderer — lazy-loads ExcelJS on first use.
@@ -13,15 +7,13 @@ import type {
  */
 
 function resolveColumn(col: string | TableColumn): TableColumn {
-  return typeof col === 'string' ? { header: col } : col
+  return typeof col === "string" ? { header: col } : col
 }
 
 function getTextContent(children: DocChild[]): string {
   return children
-    .map((c) =>
-      typeof c === 'string' ? c : getTextContent((c as DocNode).children),
-    )
-    .join('')
+    .map((c) => (typeof c === "string" ? c : getTextContent((c as DocNode).children)))
+    .join("")
 }
 
 interface ExtractedSheet {
@@ -34,18 +26,18 @@ interface ExtractedSheet {
 function extractSheets(node: DocNode): ExtractedSheet[] {
   const sheets: ExtractedSheet[] = []
   let currentSheet: ExtractedSheet = {
-    name: 'Sheet 1',
+    name: "Sheet 1",
     headings: [],
     tables: [],
   }
 
   function walk(n: DocNode): void {
     switch (n.type) {
-      case 'document':
+      case "document":
         walkChildren(n)
         break
 
-      case 'page':
+      case "page":
         pushCurrentSheet()
         currentSheet = {
           name: `Sheet ${sheets.length + 1}`,
@@ -55,11 +47,11 @@ function extractSheets(node: DocNode): ExtractedSheet[] {
         walkChildren(n)
         break
 
-      case 'heading':
+      case "heading":
         addHeading(n)
         break
 
-      case 'table':
+      case "table":
         currentSheet.tables.push(n)
         break
 
@@ -70,7 +62,7 @@ function extractSheets(node: DocNode): ExtractedSheet[] {
 
   function walkChildren(n: DocNode): void {
     for (const child of n.children) {
-      if (typeof child !== 'string') walk(child)
+      if (typeof child !== "string") walk(child)
     }
   }
 
@@ -96,8 +88,8 @@ function extractSheets(node: DocNode): ExtractedSheet[] {
 
 /** Parse a cell value, handling currencies, percentages, and plain numbers. */
 function parseCellValue(value: string | number | undefined): string | number {
-  if (value == null) return ''
-  if (typeof value === 'number') return value
+  if (value == null) return ""
+  if (typeof value === "number") return value
 
   const trimmed = value.trim()
 
@@ -109,11 +101,11 @@ function parseCellValue(value: string | number | undefined): string | number {
   // Currency: "$1,234.56", "$1234", "-$500"
   const currencyMatch = trimmed.match(/^-?\$[\d,]+(\.\d+)?$/)
   if (currencyMatch) {
-    return Number.parseFloat(trimmed.replace(/[$,]/g, ''))
+    return Number.parseFloat(trimmed.replace(/[$,]/g, ""))
   }
 
   // Plain number: "1,234.56", "1234", "-500.5"
-  const plainNum = Number(trimmed.replace(/,/g, ''))
+  const plainNum = Number(trimmed.replace(/,/g, ""))
   if (!Number.isNaN(plainNum) && /^-?[\d,]+(\.\d+)?$/.test(trimmed)) {
     return plainNum
   }
@@ -122,26 +114,24 @@ function parseCellValue(value: string | number | undefined): string | number {
 }
 
 /** Get ExcelJS number format string for a value. */
-function getCellFormat(
-  originalValue: string | number | undefined,
-): string | undefined {
-  if (typeof originalValue !== 'string') return undefined
+function getCellFormat(originalValue: string | number | undefined): string | undefined {
+  if (typeof originalValue !== "string") return undefined
   const trimmed = originalValue.trim()
 
-  if (/^-?\d+(\.\d+)?%$/.test(trimmed)) return '0.00%'
-  if (/^-?\$/.test(trimmed)) return '$#,##0.00'
+  if (/^-?\d+(\.\d+)?%$/.test(trimmed)) return "0.00%"
+  if (/^-?\$/.test(trimmed)) return "$#,##0.00"
   return undefined
 }
 
 /** Map alignment string to ExcelJS horizontal alignment. */
-function mapAlignment(align?: string): 'left' | 'center' | 'right' | undefined {
-  if (align === 'left' || align === 'center' || align === 'right') return align
+function mapAlignment(align?: string): "left" | "center" | "right" | undefined {
+  if (align === "left" || align === "center" || align === "right") return align
   return undefined
 }
 
 /** Thin border style for ExcelJS. */
-function thinBorder(): { style: 'thin'; color: { argb: string } } {
-  return { style: 'thin', color: { argb: 'FFDDDDDD' } }
+function thinBorder(): { style: "thin"; color: { argb: string } } {
+  return { style: "thin", color: { argb: "FFDDDDDD" } }
 }
 
 /** Apply header styling to a cell. */
@@ -160,16 +150,16 @@ function styleHeaderCell(
   cell.value = col.header
   cell.font = {
     bold: true,
-    color: { argb: hs?.color?.replace('#', 'FF') ?? 'FF000000' },
+    color: { argb: hs?.color?.replace("#", "FF") ?? "FF000000" },
   }
   if (hs?.background) {
     cell.fill = {
-      type: 'pattern',
-      pattern: 'solid',
-      fgColor: { argb: hs.background.replace('#', 'FF') },
+      type: "pattern",
+      pattern: "solid",
+      fgColor: { argb: hs.background.replace("#", "FF") },
     }
   }
-  cell.alignment = { horizontal: mapAlignment(col.align) ?? 'left' }
+  cell.alignment = { horizontal: mapAlignment(col.align) ?? "left" }
   if (bordered) {
     cell.border = {
       top: thinBorder(),
@@ -198,12 +188,12 @@ function styleDataCell(
   cell.value = parseCellValue(rawValue)
   const fmt = getCellFormat(rawValue)
   if (fmt) cell.numFmt = fmt
-  cell.alignment = { horizontal: mapAlignment(col.align) ?? 'left' }
+  cell.alignment = { horizontal: mapAlignment(col.align) ?? "left" }
   if (striped && isOddRow) {
     cell.fill = {
-      type: 'pattern',
-      pattern: 'solid',
-      fgColor: { argb: 'FFF9F9F9' },
+      type: "pattern",
+      pattern: "solid",
+      fgColor: { argb: "FFF9F9F9" },
     }
   }
   if (bordered) {
@@ -226,13 +216,9 @@ function renderTable(
   startRow: number,
 ): number {
   let rowNum = startRow
-  const columns = (
-    (tableNode.props.columns ?? []) as (string | TableColumn)[]
-  ).map(resolveColumn)
+  const columns = ((tableNode.props.columns ?? []) as (string | TableColumn)[]).map(resolveColumn)
   const rows = (tableNode.props.rows ?? []) as (string | number)[][]
-  const hs = tableNode.props.headerStyle as
-    | { background?: string; color?: string }
-    | undefined
+  const hs = tableNode.props.headerStyle as { background?: string; color?: string } | undefined
   const bordered = (tableNode.props.bordered as boolean) ?? false
 
   // Caption
@@ -278,16 +264,13 @@ function renderTable(
 function autoFitColumns(ws: {
   columns: {
     width: number
-    eachCell?: (
-      opts: { includeEmpty: boolean },
-      cb: (cell: { value: unknown }) => void,
-    ) => void
+    eachCell?: (opts: { includeEmpty: boolean }, cb: (cell: { value: unknown }) => void) => void
   }[]
 }): void {
   for (const col of ws.columns) {
     let maxLen = 10
     col.eachCell?.({ includeEmpty: false }, (cell) => {
-      const len = String(cell.value ?? '').length
+      const len = String(cell.value ?? "").length
       if (len > maxLen) maxLen = len
     })
     col.width = Math.min(maxLen + 2, 50)
@@ -296,16 +279,23 @@ function autoFitColumns(ws: {
 
 export const xlsxRenderer: DocumentRenderer = {
   async render(node: DocNode, _options?: RenderOptions): Promise<Uint8Array> {
-    const ExcelJS = await import('exceljs')
+    let ExcelJS: any
+    try {
+      ExcelJS = await import("exceljs")
+    } catch {
+      throw new Error(
+        '[@pyreon/document] XLSX renderer requires "exceljs" package. Install it: bun add exceljs',
+      )
+    }
     const workbook = new ExcelJS.default.Workbook()
 
-    workbook.creator = (node.props.author as string) ?? ''
-    workbook.title = (node.props.title as string) ?? ''
+    workbook.creator = (node.props.author as string) ?? ""
+    workbook.title = (node.props.title as string) ?? ""
 
     const sheets = extractSheets(node)
 
     if (sheets.length === 0) {
-      workbook.addWorksheet('Sheet 1')
+      workbook.addWorksheet("Sheet 1")
     }
 
     for (const sheet of sheets) {
@@ -325,11 +315,7 @@ export const xlsxRenderer: DocumentRenderer = {
 
       // Add tables
       for (const tableNode of sheet.tables) {
-        rowNum = renderTable(
-          ws as unknown as Parameters<typeof renderTable>[0],
-          tableNode,
-          rowNum,
-        )
+        rowNum = renderTable(ws as unknown as Parameters<typeof renderTable>[0], tableNode, rowNum)
       }
 
       // Auto-fit columns (approximate)

package/src/sanitize.ts

@@ -8,13 +8,13 @@
  * Blocks: semicolons, braces, angle brackets, quotes, backslashes, expressions.
  */
 export function sanitizeCss(value: string | undefined): string {
-  if (value == null) return ''
+  if (value == null) return ""
   // Remove anything that could break out of a CSS value
   return value
-    .replace(/[;{}()<>\\'"]/g, '')
-    .replace(/expression\s*\(/gi, '')
-    .replace(/url\s*\(/gi, '')
-    .replace(/javascript\s*:/gi, '')
+    .replace(/[;{}()<>\\'"]/g, "")
+    .replace(/expression\s*\(/gi, "")
+    .replace(/url\s*\(/gi, "")
+    .replace(/javascript\s*:/gi, "")
 }
 
 /**
@@ -22,7 +22,7 @@ export function sanitizeCss(value: string | undefined): string {
  * Returns the value if valid, empty string if not.
  */
 export function sanitizeColor(value: string | undefined): string {
-  if (value == null) return ''
+  if (value == null) return ""
   const trimmed = value.trim()
   // Hex: #fff, #ffffff, #ffffffff
   if (/^#[0-9a-fA-F]{3,8}$/.test(trimmed)) return trimmed
@@ -31,21 +31,17 @@ export function sanitizeColor(value: string | undefined): string {
   // rgb/rgba/hsl/hsla
   if (/^(rgb|hsl)a?\(\s*[\d.,\s%]+\)$/.test(trimmed)) return trimmed
   // transparent, inherit, currentColor
-  if (/^(transparent|inherit|currentColor|initial|unset)$/i.test(trimmed))
-    return trimmed
-  return ''
+  if (/^(transparent|inherit|currentColor|initial|unset)$/i.test(trimmed)) return trimmed
+  return ""
 }
 
 /**
  * Sanitize a color for XML attributes (DOCX/PPTX) — only hex without #.
  * Returns 6-char hex string or default.
  */
-export function sanitizeXmlColor(
-  value: string | undefined,
-  fallback = '000000',
-): string {
+export function sanitizeXmlColor(value: string | undefined, fallback = "000000"): string {
   if (value == null) return fallback
-  const hex = value.replace('#', '')
+  const hex = value.replace("#", "")
   if (/^[0-9a-fA-F]{3,8}$/.test(hex)) return hex
   return fallback
 }
@@ -55,13 +51,13 @@ export function sanitizeXmlColor(
  * Returns the URL if safe, empty string if not.
  */
 export function sanitizeHref(url: string | undefined): string {
-  if (url == null) return ''
+  if (url == null) return ""
   const trimmed = url.trim()
   // Block dangerous protocols
-  const lower = trimmed.toLowerCase().replace(/\s/g, '')
-  if (lower.startsWith('javascript:')) return ''
-  if (lower.startsWith('vbscript:')) return ''
-  if (lower.startsWith('data:') && !lower.startsWith('data:image/')) return ''
+  const lower = trimmed.toLowerCase().replace(/\s/g, "")
+  if (lower.startsWith("javascript:")) return ""
+  if (lower.startsWith("vbscript:")) return ""
+  if (lower.startsWith("data:") && !lower.startsWith("data:image/")) return ""
   return trimmed
 }
 
@@ -70,12 +66,12 @@ export function sanitizeHref(url: string | undefined): string {
  * Blocks javascript:, vbscript:, and non-image data: URIs.
  */
 export function sanitizeImageSrc(src: string | undefined): string {
-  if (src == null) return ''
+  if (src == null) return ""
   const trimmed = src.trim()
-  const lower = trimmed.toLowerCase().replace(/\s/g, '')
-  if (lower.startsWith('javascript:')) return ''
-  if (lower.startsWith('vbscript:')) return ''
-  if (lower.startsWith('data:') && !lower.startsWith('data:image/')) return ''
+  const lower = trimmed.toLowerCase().replace(/\s/g, "")
+  if (lower.startsWith("javascript:")) return ""
+  if (lower.startsWith("vbscript:")) return ""
+  if (lower.startsWith("data:") && !lower.startsWith("data:image/")) return ""
   return trimmed
 }
 
@@ -83,6 +79,6 @@ export function sanitizeImageSrc(src: string | undefined): string {
  * Sanitize a style attribute value — validates it's safe CSS.
  */
 export function sanitizeStyle(value: string | undefined): string {
-  if (value == null) return ''
+  if (value == null) return ""
   return sanitizeCss(value)
 }