@shapesos/clay 0.9.0 → 0.11.0

package/dist/types-3Gzk7cRt.d.ts

@@ -0,0 +1,121 @@
+import { ComponentType } from 'react';
+
+/**
+ * Artifact-domain types — wire-protocol shapes shared between artifact components, block-services, and
+ * consumers. The block layer (`@/components/blocks`) imports these to define
+ * `ArtifactRefBlockRecord`; the artifact components consume them directly.
+ *
+ * Mirrored from the agent / io-server contract — see the `chat-typed-content-blocks-and-artifacts`
+ * plan, §6.4 (table contract).
+ */
+
+/**
+ * Artifact-type discriminator constants. Uppercase to match the server-side `artifactTypes`
+ * constant — io-server stores `artifact.type === "TABLE"` (aligned with the GraphQL enum).
+ */
+declare const artifactTypes: {
+    readonly TABLE: "TABLE";
+};
+/** Discriminator for artifact types. Additive — new types extend this union. */
+type ArtifactType = (typeof artifactTypes)[keyof typeof artifactTypes];
+/**
+ * A single column descriptor for a `TableArtifact`. Carries the ORDER and LABEL for the
+ * rendered table — `key` selects a column from the CSV header; `label` overrides the rendered
+ * header text. The CSV is always the source of truth for the data shape; clay never coerces,
+ * reformats, or interprets cell values.
+ */
+interface TableColumn {
+    /** Matches a header in the CSV. Required. Used to project + order the CSV's columns. */
+    key: string;
+    /** Human-readable header text. Required. */
+    label: string;
+    /**
+     * Accepted in the wire payload but not consulted by the renderer — every cell is rendered as
+     * the raw CSV string (or empty for null). Format conversion is a server concern; if a column
+     * needs to be "Yes/No" instead of "true/false", the server should emit it that way in the CSV.
+     * Kept in the interface so callers that pass `type` (e.g. io-client) don't get a type error.
+     */
+    type?: "string" | "number" | "date" | "boolean";
+    /**
+     * Accepted in the wire payload but not consulted by the renderer — every column is left-aligned
+     * by design. Kept in the interface for forward-compat; restore per-column alignment by editing
+     * `table-artifact-content.tsx` if a future use case justifies it.
+     */
+    align?: "left" | "center" | "right";
+}
+/**
+ * Optional stats embedded in `TableConfig` so clients can pre-render UI before fetching the
+ * actual data payload (e.g. N loading shimmers sized to the eventual row count).
+ *
+ * Backward-compat: optional everywhere — older artifacts persisted before this field shipped
+ * still validate. The renderer falls back to a single status-message line when `stats` is absent.
+ */
+interface TableStats {
+    /** Total number of rows in the materialised CSV. Lets the loading branch render shimmers. */
+    rowCount: number;
+}
+/** Rendering config for a table artifact, stored at `artifact.config` (JSONB on the server). */
+interface TableConfig {
+    /** Column descriptors in render order. */
+    columns: TableColumn[];
+    /** Optional metadata describing the underlying data — used for loading-state UI. */
+    stats?: TableStats;
+}
+/**
+ * A row inside a table artifact's parsed CSV. Every cell is the raw string from the CSV (or
+ * `null` for the empty string). The renderer never coerces or interprets — type-aware formatting
+ * is a server concern (the CSV's contents are what the user sees).
+ */
+type TableRow = Record<string, string | null>;
+/** Common shape every artifact record carries. Discriminated by `type`. */
+interface ArtifactBase<TType extends ArtifactType, TConfig> {
+    /** Artifact-type discriminator. */
+    type: TType;
+    /** Human-readable label. Nullable when the artifact has no title. */
+    title: string | null;
+    /** Rendering config — shape varies per artifact type. */
+    config: TConfig;
+    /** Protected-asset metadata pointing to the underlying data payload. Null while the asset is unavailable. */
+    protectedAsset: {
+        /** Time-limited URL the renderer fetches the artifact's data from. */
+        presignedUrl: string;
+    } | null;
+}
+/** Concrete table artifact record. Future artifact types extend `ArtifactRecord` here. */
+type TableArtifactRecord = ArtifactBase<typeof artifactTypes.TABLE, TableConfig>;
+/**
+ * Discriminated union of all supported artifacts. Single-member today; extension pattern:
+ *
+ *   export type ArtifactRecord = TableArtifactRecord | ChartArtifactRecord;
+ *
+ * Every consumer that narrows on `artifact.type` must add the new branch here AND in the
+ * `ArtifactServices` map (single source of truth for the type→component mapping). Older clay
+ * versions that don't know about a new type silently render nothing — see `ArtifactRefBlock` guard.
+ */
+type ArtifactRecord = TableArtifactRecord;
+/** Props every concrete artifact component receives from the dispatcher. */
+interface ArtifactServiceProps<TArtifact extends ArtifactRecord = ArtifactRecord> {
+    /** The artifact metadata (config + presigned URL). */
+    artifact: TArtifact;
+}
+/** Per-artifact-type service — registry entry that pairs a discriminator with its concrete component. */
+interface ArtifactService<TArtifact extends ArtifactRecord = ArtifactRecord> {
+    /** Discriminator value this service handles. */
+    type: ArtifactType;
+    /** React component that renders an artifact of this type — composes ai-elements primitives
+     * (`Artifact`, `ArtifactHeader`, `ArtifactTitle`, `ArtifactActions`, `ArtifactContent`) directly. */
+    Component: ComponentType<ArtifactServiceProps<TArtifact>>;
+    /**
+     * Returns a plain-text / markdown string suitable for clipboard copy.
+     *
+     * Called by `ArtifactRefBlockService.toClipboardText` when the user copies a message that
+     * contains this artifact. Must be pure and synchronous.
+     *
+     * Implementation notes per type:
+     * - `table`: returns the artifact title as plain text (see `TableArtifactService`).
+     * - Future types implement their own representation in a co-located `*-service.ts` file.
+     */
+    toClipboardText: (artifact: TArtifact) => string;
+}
+
+export { type ArtifactRecord as A, type TableArtifactRecord as T, type ArtifactService as a, type ArtifactServiceProps as b, type ArtifactType as c, type TableColumn as d, type TableConfig as e, type TableRow as f, type TableStats as g, artifactTypes as h };

package/dist/types-C9XX-Uhk.d.ts

@@ -0,0 +1,68 @@
+import { ComponentType } from 'react';
+import { A as ArtifactRecord } from './types-3Gzk7cRt.js';
+
+/** Block-type discriminator constants. Mirrors the wire shape from io-server / shapes-agent. */
+declare const blockTypes: {
+    readonly TEXT: "TEXT";
+    readonly ARTIFACT_REF: "ARTIFACT_REF";
+};
+/** Discriminator for content blocks. */
+type BlockType = (typeof blockTypes)[keyof typeof blockTypes];
+/** Plain-text content block — rendered as Markdown. */
+interface TextBlockRecord {
+    /** Block-type discriminator. */
+    type: typeof blockTypes.TEXT;
+    /** Type-specific data; kept as `payload` to match the wire shape 1:1. */
+    payload: {
+        /** The Markdown source for this text segment. */
+        text: string;
+    };
+}
+/**
+ * Reference-to-an-artifact content block — dispatched to the per-type artifact component.
+ *
+ * The artifact-domain types (`ArtifactRecord`, `TableArtifactRecord`, etc.) live in
+ * `@/components/artifacts/types` so the artifact layer can be consumed independently of the
+ * block layer (e.g. by a future surface that renders an artifact outside chat). The block layer
+ * imports them here to wrap an artifact in an `ARTIFACT_REF` block.
+ */
+interface ArtifactRefBlockRecord {
+    /** Block-type discriminator. */
+    type: typeof blockTypes.ARTIFACT_REF;
+    /** Type-specific data; kept as `payload` to match the wire shape 1:1. */
+    payload: {
+        /** The artifact's stable identifier, used for keying / future cross-message reuse. */
+        artifactId: string;
+        /** Inlined artifact metadata — clients fetch the underlying data via `artifact.protectedAsset.presignedUrl`. */
+        artifact: ArtifactRecord;
+    };
+}
+/** Discriminated union of all supported content blocks. Additive — new types extend this union. */
+type BlockRecord = TextBlockRecord | ArtifactRefBlockRecord;
+/** Props every concrete block component receives from the dispatcher. */
+interface BlockComponentProps<TBlock extends BlockRecord = BlockRecord> {
+    /** The block to render. */
+    block: TBlock;
+}
+/** Per-block-type service — registry entry that pairs a discriminator with its concrete component. */
+interface BlockService<TBlock extends BlockRecord = BlockRecord> {
+    /** Discriminator value this service handles. */
+    type: BlockType;
+    /** React component that renders a block of this type. */
+    Component: ComponentType<BlockComponentProps<TBlock>>;
+    /**
+     * Returns a plain-text or markdown string representation of this block suitable for clipboard
+     * copy. Called by `copyMessageText` when the user clicks "copy message".
+     *
+     * - `TextBlockService`: returns `block.payload.text` verbatim (markdown preserved).
+     * - `ArtifactRefBlockService`: delegates to `ArtifactServices[artifact.type].toClipboardText`.
+     *   Falls back to `[Artifact: <title>]` when the artifact type has no registered component.
+     *
+     * Optional so external `BlockService` implementors don't break on upgrade — when omitted, the
+     * aggregator treats the block as contributing the empty string (silently skipped). Implementations
+     * must be pure, synchronous functions — no async, no hooks, no side effects.
+     */
+    toClipboardText?: (block: TBlock) => string;
+}
+
+export { type ArtifactRefBlockRecord as A, type BlockComponentProps as B, type TextBlockRecord as T, type BlockRecord as a, type BlockService as b, type BlockType as c, blockTypes as d };

package/dist/types-DuuRI4ll.d.cts

@@ -0,0 +1,68 @@
+import { ComponentType } from 'react';
+import { A as ArtifactRecord } from './types-3Gzk7cRt.cjs';
+
+/** Block-type discriminator constants. Mirrors the wire shape from io-server / shapes-agent. */
+declare const blockTypes: {
+    readonly TEXT: "TEXT";
+    readonly ARTIFACT_REF: "ARTIFACT_REF";
+};
+/** Discriminator for content blocks. */
+type BlockType = (typeof blockTypes)[keyof typeof blockTypes];
+/** Plain-text content block — rendered as Markdown. */
+interface TextBlockRecord {
+    /** Block-type discriminator. */
+    type: typeof blockTypes.TEXT;
+    /** Type-specific data; kept as `payload` to match the wire shape 1:1. */
+    payload: {
+        /** The Markdown source for this text segment. */
+        text: string;
+    };
+}
+/**
+ * Reference-to-an-artifact content block — dispatched to the per-type artifact component.
+ *
+ * The artifact-domain types (`ArtifactRecord`, `TableArtifactRecord`, etc.) live in
+ * `@/components/artifacts/types` so the artifact layer can be consumed independently of the
+ * block layer (e.g. by a future surface that renders an artifact outside chat). The block layer
+ * imports them here to wrap an artifact in an `ARTIFACT_REF` block.
+ */
+interface ArtifactRefBlockRecord {
+    /** Block-type discriminator. */
+    type: typeof blockTypes.ARTIFACT_REF;
+    /** Type-specific data; kept as `payload` to match the wire shape 1:1. */
+    payload: {
+        /** The artifact's stable identifier, used for keying / future cross-message reuse. */
+        artifactId: string;
+        /** Inlined artifact metadata — clients fetch the underlying data via `artifact.protectedAsset.presignedUrl`. */
+        artifact: ArtifactRecord;
+    };
+}
+/** Discriminated union of all supported content blocks. Additive — new types extend this union. */
+type BlockRecord = TextBlockRecord | ArtifactRefBlockRecord;
+/** Props every concrete block component receives from the dispatcher. */
+interface BlockComponentProps<TBlock extends BlockRecord = BlockRecord> {
+    /** The block to render. */
+    block: TBlock;
+}
+/** Per-block-type service — registry entry that pairs a discriminator with its concrete component. */
+interface BlockService<TBlock extends BlockRecord = BlockRecord> {
+    /** Discriminator value this service handles. */
+    type: BlockType;
+    /** React component that renders a block of this type. */
+    Component: ComponentType<BlockComponentProps<TBlock>>;
+    /**
+     * Returns a plain-text or markdown string representation of this block suitable for clipboard
+     * copy. Called by `copyMessageText` when the user clicks "copy message".
+     *
+     * - `TextBlockService`: returns `block.payload.text` verbatim (markdown preserved).
+     * - `ArtifactRefBlockService`: delegates to `ArtifactServices[artifact.type].toClipboardText`.
+     *   Falls back to `[Artifact: <title>]` when the artifact type has no registered component.
+     *
+     * Optional so external `BlockService` implementors don't break on upgrade — when omitted, the
+     * aggregator treats the block as contributing the empty string (silently skipped). Implementations
+     * must be pure, synchronous functions — no async, no hooks, no side effects.
+     */
+    toClipboardText?: (block: TBlock) => string;
+}
+
+export { type ArtifactRefBlockRecord as A, type BlockComponentProps as B, type TextBlockRecord as T, type BlockRecord as a, type BlockService as b, type BlockType as c, blockTypes as d };

package/dist/utils.cjs

@@ -21,6 +21,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var utils_exports = {};
 __export(utils_exports, {
   convertTableToCSV: () => convertTableToCSV,
+  escapeCsvField: () => escapeCsvField,
   markdownToPlainText: () => markdownToPlainText,
   mergeRefs: () => mergeRefs,
   parseMarkdownTable: () => parseMarkdownTable
@@ -112,21 +113,27 @@ function parseMarkdownTable(markdown, tableIndex = 0) {
   return null;
 }
 
-// src/utils/convert-table-to-csv.ts
-function escapeField(field) {
-  if (field.includes(",") || field.includes('"') || field.includes("\n") || field.includes("\r")) {
-    return `"${field.replace(/"/g, '""')}"`;
+// src/utils/escape-csv-field.ts
+var FORMULA_TRIGGERS = /* @__PURE__ */ new Set(["=", "+", "@", "	", "\r"]);
+function escapeCsvField(field) {
+  const needsNeutralise = field.length > 0 && FORMULA_TRIGGERS.has(field[0]);
+  const safeField = needsNeutralise ? `	${field}` : field;
+  if (needsNeutralise || safeField.includes(",") || safeField.includes('"') || safeField.includes("\n") || safeField.includes("\r")) {
+    return `"${safeField.replace(/"/g, '""')}"`;
   }
-  return field;
+  return safeField;
 }
+
+// src/utils/convert-table-to-csv.ts
 function convertTableToCSV(table) {
-  const headerRow = table.columns.map(escapeField).join(",");
-  const dataRows = table.rows.map((row) => row.map(escapeField).join(","));
+  const headerRow = table.columns.map(escapeCsvField).join(",");
+  const dataRows = table.rows.map((row) => row.map(escapeCsvField).join(","));
   return [headerRow, ...dataRows].join("\r\n");
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   convertTableToCSV,
+  escapeCsvField,
   markdownToPlainText,
   mergeRefs,
   parseMarkdownTable

package/dist/utils.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/utils/index.ts","../src/utils/markdown-to-plain-text.ts","../src/utils/merge-refs.ts","../src/utils/parse-markdown-table.ts","../src/utils/convert-table-to-csv.ts"],"sourcesContent":["export { markdownToPlainText } from \"./markdown-to-plain-text\";\nexport { mergeRefs } from \"./merge-refs\";\nexport { parseMarkdownTable } from \"./parse-markdown-table\";\nexport type { MarkdownTable } from \"./parse-markdown-table\";\nexport { convertTableToCSV } from \"./convert-table-to-csv\";\n","const PLACEHOLDER_PREFIX = \"\\u200B\\u200BIC\";\nconst PLACEHOLDER_SUFFIX = \"\\u200B\\u200B\";\nconst PLACEHOLDER_REGEX = new RegExp(`${PLACEHOLDER_PREFIX}(\\\\d+)${PLACEHOLDER_SUFFIX}`, \"g\");\n\n/**\n * Strips only inline markdown marks (bold, italic, strikethrough) from a string.\n * Does not touch block-level syntax (headings, blockquotes, horizontal rules, links, images)\n * so values like `> 100`, `# items`, or `---` are preserved as-is.\n * @param text - The text to strip inline marks from.\n * @returns The text with inline marks removed.\n */\nexport function stripInlineMarks(text: string): string {\n  return (\n    text\n      // Bold + italic\n      .replace(/\\*{3}(.+?)\\*{3}/g, \"$1\")\n      // Bold\n      .replace(/\\*{2}(.+?)\\*{2}/g, \"$1\")\n      .replace(/_{2}(.+?)_{2}/g, \"$1\")\n      // Italic\n      .replace(/\\*(.+?)\\*/g, \"$1\")\n      .replace(/_(.+?)_/g, \"$1\")\n      // Strikethrough\n      .replace(/~~(.+?)~~/g, \"$1\")\n  );\n}\n\n/**\n * Converts a Markdown string to plain text by stripping all formatting syntax.\n *\n * Handles headings, bold/italic/strikethrough, links, images, blockquotes, code blocks,\n * inline code, tables, and horizontal rules. Inline code content is preserved literally\n * (formatting inside backticks is not stripped).\n *\n * @param markdown - The Markdown source string.\n * @returns A plain-text string with all Markdown syntax removed.\n */\nexport function markdownToPlainText(markdown: string): string {\n  if (!markdown) return \"\";\n\n  // Protect inline code content from bold/italic stripping by replacing with placeholders\n  const inlineCodeSnippets: string[] = [];\n  let result = markdown\n    // HTML comments (e.g. <!-- table-title: ... -->), including multiline and --!> variants\n    .replace(/^<!--[\\s\\S]*?--!?>\\n?/gm, \"\")\n    // Code blocks (must come first)\n    .replace(/```[\\s\\S]*?```/g, \"\")\n    // Inline code → placeholder\n    .replace(/`([^`]+)`/g, (_match, code: string) => {\n      inlineCodeSnippets.push(code);\n      return `${PLACEHOLDER_PREFIX}${inlineCodeSnippets.length - 1}${PLACEHOLDER_SUFFIX}`;\n    })\n    // Remove headings markers, keep text\n    .replace(/^#{1,6}\\s+/gm, \"\")\n    // Remove horizontal rules\n    .replace(/^(?:---|\\*\\*\\*|___)\\s*$/gm, \"\");\n  result = stripInlineMarks(result)\n    // Images: ![alt](url) → alt (must come before links)\n    .replace(/!\\[([^\\]]*)\\]\\([^)]+\\)/g, \"$1\")\n    // Links: [text](url) → text\n    .replace(/\\[([^\\]]+)\\]\\([^)]+\\)/g, \"$1\")\n    // Blockquote markers\n    .replace(/^>\\s?/gm, \"\")\n    // Table separator rows (|---|---|)\n    .replace(/^\\|[-:\\s|]+\\|\\s*$/gm, \"\")\n    // Table rows: | a | b | → a | b\n    .replace(/^\\|\\s?/gm, \"\")\n    .replace(/\\s?\\|$/gm, \"\")\n    // Collapse multiple blank lines\n    .replace(/\\n{3,}/g, \"\\n\\n\")\n    .trim();\n\n  // Restore inline code content\n  result = result.replace(PLACEHOLDER_REGEX, (_match, index: string) => inlineCodeSnippets[Number(index)]);\n\n  return result;\n}\n","import type { Ref } from \"react\";\n\n/**\n * Combines multiple React refs into a single callback ref.\n * Useful when a component needs to forward its ref while also keeping a local ref.\n *\n * @param refs - Any number of React refs (callback refs, RefObjects, or `undefined`).\n * @returns A callback ref that updates all provided refs when the DOM node changes.\n */\nexport function mergeRefs<T>(...refs: (Ref<T> | undefined)[]): (node: T | null) => void {\n  return (node) => {\n    for (const ref of refs) {\n      if (typeof ref === \"function\") {\n        ref(node);\n      } else if (ref) {\n        (ref as React.MutableRefObject<T | null>).current = node;\n      }\n    }\n  };\n}\n","import { stripInlineMarks } from \"./markdown-to-plain-text\";\n\n/** Structured representation of a parsed markdown table. */\nexport interface MarkdownTable {\n  /** Column header labels. */\n  columns: string[];\n  /** Data rows, each an array of cell values matching the column order. */\n  rows: string[][];\n  /** Optional title extracted from a `<!-- table-title: ... -->` comment above the table. */\n  title?: string;\n}\n\n/**\n * Parses cells from a markdown table row, trimming whitespace and stripping leading/trailing pipes.\n * @param line - A single line of a markdown table.\n * @returns An array of trimmed cell values.\n */\nfunction parseCells(line: string): string[] {\n  const trimmed = line.trim();\n  const stripped = trimmed.startsWith(\"|\") ? trimmed.slice(1) : trimmed;\n  const withoutTrailing = stripped.endsWith(\"|\") ? stripped.slice(0, -1) : stripped;\n  return withoutTrailing.split(\"|\").map((cell) => cell.trim());\n}\n\n/**\n * Tests whether a line is a GFM table separator row (e.g. `| --- | --- |`).\n * @param line - A single line to test.\n * @returns `true` if the line matches the separator pattern.\n */\nfunction isSeparatorRow(line: string): boolean {\n  const cells = parseCells(line);\n  return cells.length > 0 && cells.every((cell) => /^:?-{1,}:?$/.test(cell));\n}\n\n/**\n * Tests whether a line looks like a markdown table row (contains at least one pipe).\n * @param line - A single line to test.\n * @returns `true` if the line contains a pipe character.\n */\nfunction isTableRow(line: string): boolean {\n  return line.includes(\"|\");\n}\n\nconst TABLE_TITLE_PREFIX = \"<!-- table-title:\";\nconst TABLE_TITLE_SUFFIX = \"-->\";\n\n/**\n * Extracts a table title from a `<!-- table-title: ... -->` HTML comment.\n * Uses string methods instead of regex to avoid ReDoS on untrusted input.\n * @param line - A single line to test.\n * @returns The title string, or `undefined` if the line is not a title comment.\n */\nfunction extractTableTitle(line: string): string | undefined {\n  const trimmed = line.trim();\n  if (!trimmed.startsWith(TABLE_TITLE_PREFIX) || !trimmed.endsWith(TABLE_TITLE_SUFFIX)) {\n    return undefined;\n  }\n  return trimmed.slice(TABLE_TITLE_PREFIX.length, -TABLE_TITLE_SUFFIX.length).trim() || undefined;\n}\n\n/**\n * Extracts the Nth GFM markdown table from a string.\n * @param markdown - The markdown content to parse.\n * @param tableIndex - Zero-based index of the table to extract.\n * @returns The parsed table, or `null` if no table exists at the given index.\n */\nexport function parseMarkdownTable(markdown: string, tableIndex = 0): MarkdownTable | null {\n  const lines = markdown.split(\"\\n\");\n  let tableCount = 0;\n\n  for (let i = 0; i < lines.length - 1; i++) {\n    const headerLine = lines[i];\n    const separatorLine = lines[i + 1];\n\n    if (!isTableRow(headerLine) || !isSeparatorRow(separatorLine)) {\n      continue;\n    }\n\n    if (tableCount === tableIndex) {\n      const columns = parseCells(headerLine).map(stripInlineMarks);\n      const rows: string[][] = [];\n      const title = i > 0 ? extractTableTitle(lines[i - 1]) : undefined;\n\n      for (let j = i + 2; j < lines.length; j++) {\n        if (!isTableRow(lines[j]) || isSeparatorRow(lines[j])) {\n          break;\n        }\n        const trimmedLine = lines[j].trim();\n        if (trimmedLine === \"\") {\n          break;\n        }\n        rows.push(parseCells(lines[j]).map(stripInlineMarks));\n      }\n\n      return { columns, rows, ...(title ? { title } : {}) };\n    }\n\n    tableCount++;\n  }\n\n  return null;\n}\n","import type { MarkdownTable } from \"./parse-markdown-table\";\n\n/**\n * Escapes and optionally quotes a CSV field per RFC 4180.\n * Fields containing commas, double quotes, or newlines are wrapped in double quotes.\n * Existing double quotes are escaped by doubling them.\n * @param field - The raw field value.\n * @returns The escaped/quoted field string.\n */\nfunction escapeField(field: string): string {\n  if (field.includes(\",\") || field.includes('\"') || field.includes(\"\\n\") || field.includes(\"\\r\")) {\n    return `\"${field.replace(/\"/g, '\"\"')}\"`;\n  }\n  return field;\n}\n\n/**\n * Converts a parsed markdown table to a CSV string (RFC 4180).\n * Fields containing commas, double quotes, or newlines are quoted.\n * @param table - The structured table data to convert.\n * @returns A CSV-formatted string with CRLF line endings.\n */\nexport function convertTableToCSV(table: MarkdownTable): string {\n  const headerRow = table.columns.map(escapeField).join(\",\");\n  const dataRows = table.rows.map((row) => row.map(escapeField).join(\",\"));\n  return [headerRow, ...dataRows].join(\"\\r\\n\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAC3B,IAAM,oBAAoB,IAAI,OAAO,GAAG,kBAAkB,SAAS,kBAAkB,IAAI,GAAG;AASrF,SAAS,iBAAiB,MAAsB;AACrD,SACE,KAEG,QAAQ,oBAAoB,IAAI,EAEhC,QAAQ,oBAAoB,IAAI,EAChC,QAAQ,kBAAkB,IAAI,EAE9B,QAAQ,cAAc,IAAI,EAC1B,QAAQ,YAAY,IAAI,EAExB,QAAQ,cAAc,IAAI;AAEjC;AAYO,SAAS,oBAAoB,UAA0B;AAC5D,MAAI,CAAC,SAAU,QAAO;AAGtB,QAAM,qBAA+B,CAAC;AACtC,MAAI,SAAS,SAEV,QAAQ,2BAA2B,EAAE,EAErC,QAAQ,mBAAmB,EAAE,EAE7B,QAAQ,cAAc,CAAC,QAAQ,SAAiB;AAC/C,uBAAmB,KAAK,IAAI;AAC5B,WAAO,GAAG,kBAAkB,GAAG,mBAAmB,SAAS,CAAC,GAAG,kBAAkB;AAAA,EACnF,CAAC,EAEA,QAAQ,gBAAgB,EAAE,EAE1B,QAAQ,6BAA6B,EAAE;AAC1C,WAAS,iBAAiB,MAAM,EAE7B,QAAQ,2BAA2B,IAAI,EAEvC,QAAQ,0BAA0B,IAAI,EAEtC,QAAQ,WAAW,EAAE,EAErB,QAAQ,uBAAuB,EAAE,EAEjC,QAAQ,YAAY,EAAE,EACtB,QAAQ,YAAY,EAAE,EAEtB,QAAQ,WAAW,MAAM,EACzB,KAAK;AAGR,WAAS,OAAO,QAAQ,mBAAmB,CAAC,QAAQ,UAAkB,mBAAmB,OAAO,KAAK,CAAC,CAAC;AAEvG,SAAO;AACT;;;ACnEO,SAAS,aAAgB,MAAwD;AACtF,SAAO,CAAC,SAAS;AACf,eAAW,OAAO,MAAM;AACtB,UAAI,OAAO,QAAQ,YAAY;AAC7B,YAAI,IAAI;AAAA,MACV,WAAW,KAAK;AACd,QAAC,IAAyC,UAAU;AAAA,MACtD;AAAA,IACF;AAAA,EACF;AACF;;;ACFA,SAAS,WAAW,MAAwB;AAC1C,QAAM,UAAU,KAAK,KAAK;AAC1B,QAAM,WAAW,QAAQ,WAAW,GAAG,IAAI,QAAQ,MAAM,CAAC,IAAI;AAC9D,QAAM,kBAAkB,SAAS,SAAS,GAAG,IAAI,SAAS,MAAM,GAAG,EAAE,IAAI;AACzE,SAAO,gBAAgB,MAAM,GAAG,EAAE,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;AAC7D;AAOA,SAAS,eAAe,MAAuB;AAC7C,QAAM,QAAQ,WAAW,IAAI;AAC7B,SAAO,MAAM,SAAS,KAAK,MAAM,MAAM,CAAC,SAAS,cAAc,KAAK,IAAI,CAAC;AAC3E;AAOA,SAAS,WAAW,MAAuB;AACzC,SAAO,KAAK,SAAS,GAAG;AAC1B;AAEA,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAQ3B,SAAS,kBAAkB,MAAkC;AAC3D,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,CAAC,QAAQ,WAAW,kBAAkB,KAAK,CAAC,QAAQ,SAAS,kBAAkB,GAAG;AACpF,WAAO;AAAA,EACT;AACA,SAAO,QAAQ,MAAM,mBAAmB,QAAQ,CAAC,mBAAmB,MAAM,EAAE,KAAK,KAAK;AACxF;AAQO,SAAS,mBAAmB,UAAkB,aAAa,GAAyB;AACzF,QAAM,QAAQ,SAAS,MAAM,IAAI;AACjC,MAAI,aAAa;AAEjB,WAAS,IAAI,GAAG,IAAI,MAAM,SAAS,GAAG,KAAK;AACzC,UAAM,aAAa,MAAM,CAAC;AAC1B,UAAM,gBAAgB,MAAM,IAAI,CAAC;AAEjC,QAAI,CAAC,WAAW,UAAU,KAAK,CAAC,eAAe,aAAa,GAAG;AAC7D;AAAA,IACF;AAEA,QAAI,eAAe,YAAY;AAC7B,YAAM,UAAU,WAAW,UAAU,EAAE,IAAI,gBAAgB;AAC3D,YAAM,OAAmB,CAAC;AAC1B,YAAM,QAAQ,IAAI,IAAI,kBAAkB,MAAM,IAAI,CAAC,CAAC,IAAI;AAExD,eAAS,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACzC,YAAI,CAAC,WAAW,MAAM,CAAC,CAAC,KAAK,eAAe,MAAM,CAAC,CAAC,GAAG;AACrD;AAAA,QACF;AACA,cAAM,cAAc,MAAM,CAAC,EAAE,KAAK;AAClC,YAAI,gBAAgB,IAAI;AACtB;AAAA,QACF;AACA,aAAK,KAAK,WAAW,MAAM,CAAC,CAAC,EAAE,IAAI,gBAAgB,CAAC;AAAA,MACtD;AAEA,aAAO,EAAE,SAAS,MAAM,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG;AAAA,IACtD;AAEA;AAAA,EACF;AAEA,SAAO;AACT;;;AC5FA,SAAS,YAAY,OAAuB;AAC1C,MAAI,MAAM,SAAS,GAAG,KAAK,MAAM,SAAS,GAAG,KAAK,MAAM,SAAS,IAAI,KAAK,MAAM,SAAS,IAAI,GAAG;AAC9F,WAAO,IAAI,MAAM,QAAQ,MAAM,IAAI,CAAC;AAAA,EACtC;AACA,SAAO;AACT;AAQO,SAAS,kBAAkB,OAA8B;AAC9D,QAAM,YAAY,MAAM,QAAQ,IAAI,WAAW,EAAE,KAAK,GAAG;AACzD,QAAM,WAAW,MAAM,KAAK,IAAI,CAAC,QAAQ,IAAI,IAAI,WAAW,EAAE,KAAK,GAAG,CAAC;AACvE,SAAO,CAAC,WAAW,GAAG,QAAQ,EAAE,KAAK,MAAM;AAC7C;","names":[]}
+{"version":3,"sources":["../src/utils/index.ts","../src/utils/markdown-to-plain-text.ts","../src/utils/merge-refs.ts","../src/utils/parse-markdown-table.ts","../src/utils/escape-csv-field.ts","../src/utils/convert-table-to-csv.ts"],"sourcesContent":["export { markdownToPlainText } from \"./markdown-to-plain-text\";\nexport { mergeRefs } from \"./merge-refs\";\nexport { parseMarkdownTable } from \"./parse-markdown-table\";\nexport type { MarkdownTable } from \"./parse-markdown-table\";\nexport { convertTableToCSV } from \"./convert-table-to-csv\";\nexport { escapeCsvField } from \"./escape-csv-field\";\n","const PLACEHOLDER_PREFIX = \"\\u200B\\u200BIC\";\nconst PLACEHOLDER_SUFFIX = \"\\u200B\\u200B\";\nconst PLACEHOLDER_REGEX = new RegExp(`${PLACEHOLDER_PREFIX}(\\\\d+)${PLACEHOLDER_SUFFIX}`, \"g\");\n\n/**\n * Strips only inline markdown marks (bold, italic, strikethrough) from a string.\n * Does not touch block-level syntax (headings, blockquotes, horizontal rules, links, images)\n * so values like `> 100`, `# items`, or `---` are preserved as-is.\n * @param text - The text to strip inline marks from.\n * @returns The text with inline marks removed.\n */\nexport function stripInlineMarks(text: string): string {\n  return (\n    text\n      // Bold + italic\n      .replace(/\\*{3}(.+?)\\*{3}/g, \"$1\")\n      // Bold\n      .replace(/\\*{2}(.+?)\\*{2}/g, \"$1\")\n      .replace(/_{2}(.+?)_{2}/g, \"$1\")\n      // Italic\n      .replace(/\\*(.+?)\\*/g, \"$1\")\n      .replace(/_(.+?)_/g, \"$1\")\n      // Strikethrough\n      .replace(/~~(.+?)~~/g, \"$1\")\n  );\n}\n\n/**\n * Converts a Markdown string to plain text by stripping all formatting syntax.\n *\n * Handles headings, bold/italic/strikethrough, links, images, blockquotes, code blocks,\n * inline code, tables, and horizontal rules. Inline code content is preserved literally\n * (formatting inside backticks is not stripped).\n *\n * @param markdown - The Markdown source string.\n * @returns A plain-text string with all Markdown syntax removed.\n */\nexport function markdownToPlainText(markdown: string): string {\n  if (!markdown) return \"\";\n\n  // Protect inline code content from bold/italic stripping by replacing with placeholders\n  const inlineCodeSnippets: string[] = [];\n  let result = markdown\n    // HTML comments (e.g. <!-- table-title: ... -->), including multiline and --!> variants\n    .replace(/^<!--[\\s\\S]*?--!?>\\n?/gm, \"\")\n    // Code blocks (must come first)\n    .replace(/```[\\s\\S]*?```/g, \"\")\n    // Inline code → placeholder\n    .replace(/`([^`]+)`/g, (_match, code: string) => {\n      inlineCodeSnippets.push(code);\n      return `${PLACEHOLDER_PREFIX}${inlineCodeSnippets.length - 1}${PLACEHOLDER_SUFFIX}`;\n    })\n    // Remove headings markers, keep text\n    .replace(/^#{1,6}\\s+/gm, \"\")\n    // Remove horizontal rules\n    .replace(/^(?:---|\\*\\*\\*|___)\\s*$/gm, \"\");\n  result = stripInlineMarks(result)\n    // Images: ![alt](url) → alt (must come before links)\n    .replace(/!\\[([^\\]]*)\\]\\([^)]+\\)/g, \"$1\")\n    // Links: [text](url) → text\n    .replace(/\\[([^\\]]+)\\]\\([^)]+\\)/g, \"$1\")\n    // Blockquote markers\n    .replace(/^>\\s?/gm, \"\")\n    // Table separator rows (|---|---|)\n    .replace(/^\\|[-:\\s|]+\\|\\s*$/gm, \"\")\n    // Table rows: | a | b | → a | b\n    .replace(/^\\|\\s?/gm, \"\")\n    .replace(/\\s?\\|$/gm, \"\")\n    // Collapse multiple blank lines\n    .replace(/\\n{3,}/g, \"\\n\\n\")\n    .trim();\n\n  // Restore inline code content\n  result = result.replace(PLACEHOLDER_REGEX, (_match, index: string) => inlineCodeSnippets[Number(index)]);\n\n  return result;\n}\n","import type { Ref } from \"react\";\n\n/**\n * Combines multiple React refs into a single callback ref.\n * Useful when a component needs to forward its ref while also keeping a local ref.\n *\n * @param refs - Any number of React refs (callback refs, RefObjects, or `undefined`).\n * @returns A callback ref that updates all provided refs when the DOM node changes.\n */\nexport function mergeRefs<T>(...refs: (Ref<T> | undefined)[]): (node: T | null) => void {\n  return (node) => {\n    for (const ref of refs) {\n      if (typeof ref === \"function\") {\n        ref(node);\n      } else if (ref) {\n        (ref as React.MutableRefObject<T | null>).current = node;\n      }\n    }\n  };\n}\n","import { stripInlineMarks } from \"./markdown-to-plain-text\";\n\n/** Structured representation of a parsed markdown table. */\nexport interface MarkdownTable {\n  /** Column header labels. */\n  columns: string[];\n  /** Data rows, each an array of cell values matching the column order. */\n  rows: string[][];\n  /** Optional title extracted from a `<!-- table-title: ... -->` comment above the table. */\n  title?: string;\n}\n\n/**\n * Parses cells from a markdown table row, trimming whitespace and stripping leading/trailing pipes.\n * @param line - A single line of a markdown table.\n * @returns An array of trimmed cell values.\n */\nfunction parseCells(line: string): string[] {\n  const trimmed = line.trim();\n  const stripped = trimmed.startsWith(\"|\") ? trimmed.slice(1) : trimmed;\n  const withoutTrailing = stripped.endsWith(\"|\") ? stripped.slice(0, -1) : stripped;\n  return withoutTrailing.split(\"|\").map((cell) => cell.trim());\n}\n\n/**\n * Tests whether a line is a GFM table separator row (e.g. `| --- | --- |`).\n * @param line - A single line to test.\n * @returns `true` if the line matches the separator pattern.\n */\nfunction isSeparatorRow(line: string): boolean {\n  const cells = parseCells(line);\n  return cells.length > 0 && cells.every((cell) => /^:?-{1,}:?$/.test(cell));\n}\n\n/**\n * Tests whether a line looks like a markdown table row (contains at least one pipe).\n * @param line - A single line to test.\n * @returns `true` if the line contains a pipe character.\n */\nfunction isTableRow(line: string): boolean {\n  return line.includes(\"|\");\n}\n\nconst TABLE_TITLE_PREFIX = \"<!-- table-title:\";\nconst TABLE_TITLE_SUFFIX = \"-->\";\n\n/**\n * Extracts a table title from a `<!-- table-title: ... -->` HTML comment.\n * Uses string methods instead of regex to avoid ReDoS on untrusted input.\n * @param line - A single line to test.\n * @returns The title string, or `undefined` if the line is not a title comment.\n */\nfunction extractTableTitle(line: string): string | undefined {\n  const trimmed = line.trim();\n  if (!trimmed.startsWith(TABLE_TITLE_PREFIX) || !trimmed.endsWith(TABLE_TITLE_SUFFIX)) {\n    return undefined;\n  }\n  return trimmed.slice(TABLE_TITLE_PREFIX.length, -TABLE_TITLE_SUFFIX.length).trim() || undefined;\n}\n\n/**\n * Extracts the Nth GFM markdown table from a string.\n * @param markdown - The markdown content to parse.\n * @param tableIndex - Zero-based index of the table to extract.\n * @returns The parsed table, or `null` if no table exists at the given index.\n */\nexport function parseMarkdownTable(markdown: string, tableIndex = 0): MarkdownTable | null {\n  const lines = markdown.split(\"\\n\");\n  let tableCount = 0;\n\n  for (let i = 0; i < lines.length - 1; i++) {\n    const headerLine = lines[i];\n    const separatorLine = lines[i + 1];\n\n    if (!isTableRow(headerLine) || !isSeparatorRow(separatorLine)) {\n      continue;\n    }\n\n    if (tableCount === tableIndex) {\n      const columns = parseCells(headerLine).map(stripInlineMarks);\n      const rows: string[][] = [];\n      const title = i > 0 ? extractTableTitle(lines[i - 1]) : undefined;\n\n      for (let j = i + 2; j < lines.length; j++) {\n        if (!isTableRow(lines[j]) || isSeparatorRow(lines[j])) {\n          break;\n        }\n        const trimmedLine = lines[j].trim();\n        if (trimmedLine === \"\") {\n          break;\n        }\n        rows.push(parseCells(lines[j]).map(stripInlineMarks));\n      }\n\n      return { columns, rows, ...(title ? { title } : {}) };\n    }\n\n    tableCount++;\n  }\n\n  return null;\n}\n","/**\n * Characters that trigger spreadsheet-formula evaluation when present at the start of a CSV cell.\n * Excel, Google Sheets, and Numbers all treat a field beginning with one of these as a formula\n * (e.g. `=HYPERLINK(...)`, `+1+1`, `@SUM(...)`), so a field exfiltrated from user-controlled\n * data can run arbitrary expressions in the spreadsheet on open.\n *\n * Note: `-` is intentionally excluded. While `+` and `-` are listed in some CSV injection docs,\n * `-42` is a valid negative number and Excel/Sheets do NOT evaluate it as a formula. Including `-`\n * would corrupt all negative-number cells. The actual risk from `-` is extremely low in practice.\n */\nconst FORMULA_TRIGGERS = new Set([\"=\", \"+\", \"@\", \"\\t\", \"\\r\"]);\n\n/**\n * Escapes and optionally quotes a CSV field per RFC 4180, with OWASP-recommended formula-injection\n * neutralisation for fields beginning with a trigger character.\n *\n * - Fields starting with `=`, `+`, `@`, `\\t`, or `\\r` are prefixed with a tab so the spreadsheet\n *   renders them as literal text instead of evaluating them as a formula. The tab itself disappears\n *   in the rendered cell.\n * - Fields containing commas, double quotes, newlines, or a leading tab (from formula neutralisation)\n *   are wrapped in double quotes per RFC 4180. The double-quote wrapping ensures the tab prefix is\n *   preserved in parsers that would otherwise strip leading whitespace.\n * - Existing double quotes are escaped by doubling them.\n *\n * @param field - The raw field value.\n * @returns The escaped/quoted field string.\n */\nexport function escapeCsvField(field: string): string {\n  const needsNeutralise = field.length > 0 && FORMULA_TRIGGERS.has(field[0]);\n  const safeField = needsNeutralise ? `\\t${field}` : field;\n  if (\n    needsNeutralise ||\n    safeField.includes(\",\") ||\n    safeField.includes('\"') ||\n    safeField.includes(\"\\n\") ||\n    safeField.includes(\"\\r\")\n  ) {\n    return `\"${safeField.replace(/\"/g, '\"\"')}\"`;\n  }\n  return safeField;\n}\n","import { escapeCsvField } from \"./escape-csv-field\";\nimport type { MarkdownTable } from \"./parse-markdown-table\";\n\n/**\n * Converts a parsed markdown table to a CSV string (RFC 4180).\n * Fields containing commas, double quotes, or newlines are quoted.\n * @param table - The structured table data to convert.\n * @returns A CSV-formatted string with CRLF line endings.\n */\nexport function convertTableToCSV(table: MarkdownTable): string {\n  const headerRow = table.columns.map(escapeCsvField).join(\",\");\n  const dataRows = table.rows.map((row) => row.map(escapeCsvField).join(\",\"));\n  return [headerRow, ...dataRows].join(\"\\r\\n\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAC3B,IAAM,oBAAoB,IAAI,OAAO,GAAG,kBAAkB,SAAS,kBAAkB,IAAI,GAAG;AASrF,SAAS,iBAAiB,MAAsB;AACrD,SACE,KAEG,QAAQ,oBAAoB,IAAI,EAEhC,QAAQ,oBAAoB,IAAI,EAChC,QAAQ,kBAAkB,IAAI,EAE9B,QAAQ,cAAc,IAAI,EAC1B,QAAQ,YAAY,IAAI,EAExB,QAAQ,cAAc,IAAI;AAEjC;AAYO,SAAS,oBAAoB,UAA0B;AAC5D,MAAI,CAAC,SAAU,QAAO;AAGtB,QAAM,qBAA+B,CAAC;AACtC,MAAI,SAAS,SAEV,QAAQ,2BAA2B,EAAE,EAErC,QAAQ,mBAAmB,EAAE,EAE7B,QAAQ,cAAc,CAAC,QAAQ,SAAiB;AAC/C,uBAAmB,KAAK,IAAI;AAC5B,WAAO,GAAG,kBAAkB,GAAG,mBAAmB,SAAS,CAAC,GAAG,kBAAkB;AAAA,EACnF,CAAC,EAEA,QAAQ,gBAAgB,EAAE,EAE1B,QAAQ,6BAA6B,EAAE;AAC1C,WAAS,iBAAiB,MAAM,EAE7B,QAAQ,2BAA2B,IAAI,EAEvC,QAAQ,0BAA0B,IAAI,EAEtC,QAAQ,WAAW,EAAE,EAErB,QAAQ,uBAAuB,EAAE,EAEjC,QAAQ,YAAY,EAAE,EACtB,QAAQ,YAAY,EAAE,EAEtB,QAAQ,WAAW,MAAM,EACzB,KAAK;AAGR,WAAS,OAAO,QAAQ,mBAAmB,CAAC,QAAQ,UAAkB,mBAAmB,OAAO,KAAK,CAAC,CAAC;AAEvG,SAAO;AACT;;;ACnEO,SAAS,aAAgB,MAAwD;AACtF,SAAO,CAAC,SAAS;AACf,eAAW,OAAO,MAAM;AACtB,UAAI,OAAO,QAAQ,YAAY;AAC7B,YAAI,IAAI;AAAA,MACV,WAAW,KAAK;AACd,QAAC,IAAyC,UAAU;AAAA,MACtD;AAAA,IACF;AAAA,EACF;AACF;;;ACFA,SAAS,WAAW,MAAwB;AAC1C,QAAM,UAAU,KAAK,KAAK;AAC1B,QAAM,WAAW,QAAQ,WAAW,GAAG,IAAI,QAAQ,MAAM,CAAC,IAAI;AAC9D,QAAM,kBAAkB,SAAS,SAAS,GAAG,IAAI,SAAS,MAAM,GAAG,EAAE,IAAI;AACzE,SAAO,gBAAgB,MAAM,GAAG,EAAE,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;AAC7D;AAOA,SAAS,eAAe,MAAuB;AAC7C,QAAM,QAAQ,WAAW,IAAI;AAC7B,SAAO,MAAM,SAAS,KAAK,MAAM,MAAM,CAAC,SAAS,cAAc,KAAK,IAAI,CAAC;AAC3E;AAOA,SAAS,WAAW,MAAuB;AACzC,SAAO,KAAK,SAAS,GAAG;AAC1B;AAEA,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAQ3B,SAAS,kBAAkB,MAAkC;AAC3D,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,CAAC,QAAQ,WAAW,kBAAkB,KAAK,CAAC,QAAQ,SAAS,kBAAkB,GAAG;AACpF,WAAO;AAAA,EACT;AACA,SAAO,QAAQ,MAAM,mBAAmB,QAAQ,CAAC,mBAAmB,MAAM,EAAE,KAAK,KAAK;AACxF;AAQO,SAAS,mBAAmB,UAAkB,aAAa,GAAyB;AACzF,QAAM,QAAQ,SAAS,MAAM,IAAI;AACjC,MAAI,aAAa;AAEjB,WAAS,IAAI,GAAG,IAAI,MAAM,SAAS,GAAG,KAAK;AACzC,UAAM,aAAa,MAAM,CAAC;AAC1B,UAAM,gBAAgB,MAAM,IAAI,CAAC;AAEjC,QAAI,CAAC,WAAW,UAAU,KAAK,CAAC,eAAe,aAAa,GAAG;AAC7D;AAAA,IACF;AAEA,QAAI,eAAe,YAAY;AAC7B,YAAM,UAAU,WAAW,UAAU,EAAE,IAAI,gBAAgB;AAC3D,YAAM,OAAmB,CAAC;AAC1B,YAAM,QAAQ,IAAI,IAAI,kBAAkB,MAAM,IAAI,CAAC,CAAC,IAAI;AAExD,eAAS,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACzC,YAAI,CAAC,WAAW,MAAM,CAAC,CAAC,KAAK,eAAe,MAAM,CAAC,CAAC,GAAG;AACrD;AAAA,QACF;AACA,cAAM,cAAc,MAAM,CAAC,EAAE,KAAK;AAClC,YAAI,gBAAgB,IAAI;AACtB;AAAA,QACF;AACA,aAAK,KAAK,WAAW,MAAM,CAAC,CAAC,EAAE,IAAI,gBAAgB,CAAC;AAAA,MACtD;AAEA,aAAO,EAAE,SAAS,MAAM,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG;AAAA,IACtD;AAEA;AAAA,EACF;AAEA,SAAO;AACT;;;AC3FA,IAAM,mBAAmB,oBAAI,IAAI,CAAC,KAAK,KAAK,KAAK,KAAM,IAAI,CAAC;AAiBrD,SAAS,eAAe,OAAuB;AACpD,QAAM,kBAAkB,MAAM,SAAS,KAAK,iBAAiB,IAAI,MAAM,CAAC,CAAC;AACzE,QAAM,YAAY,kBAAkB,IAAK,KAAK,KAAK;AACnD,MACE,mBACA,UAAU,SAAS,GAAG,KACtB,UAAU,SAAS,GAAG,KACtB,UAAU,SAAS,IAAI,KACvB,UAAU,SAAS,IAAI,GACvB;AACA,WAAO,IAAI,UAAU,QAAQ,MAAM,IAAI,CAAC;AAAA,EAC1C;AACA,SAAO;AACT;;;AC/BO,SAAS,kBAAkB,OAA8B;AAC9D,QAAM,YAAY,MAAM,QAAQ,IAAI,cAAc,EAAE,KAAK,GAAG;AAC5D,QAAM,WAAW,MAAM,KAAK,IAAI,CAAC,QAAQ,IAAI,IAAI,cAAc,EAAE,KAAK,GAAG,CAAC;AAC1E,SAAO,CAAC,WAAW,GAAG,QAAQ,EAAE,KAAK,MAAM;AAC7C;","names":[]}

package/dist/utils.d.cts

@@ -46,4 +46,21 @@ declare function parseMarkdownTable(markdown: string, tableIndex?: number): Mark
  */
 declare function convertTableToCSV(table: MarkdownTable): string;
 
-export { type MarkdownTable, convertTableToCSV, markdownToPlainText, mergeRefs, parseMarkdownTable };
+/**
+ * Escapes and optionally quotes a CSV field per RFC 4180, with OWASP-recommended formula-injection
+ * neutralisation for fields beginning with a trigger character.
+ *
+ * - Fields starting with `=`, `+`, `@`, `\t`, or `\r` are prefixed with a tab so the spreadsheet
+ *   renders them as literal text instead of evaluating them as a formula. The tab itself disappears
+ *   in the rendered cell.
+ * - Fields containing commas, double quotes, newlines, or a leading tab (from formula neutralisation)
+ *   are wrapped in double quotes per RFC 4180. The double-quote wrapping ensures the tab prefix is
+ *   preserved in parsers that would otherwise strip leading whitespace.
+ * - Existing double quotes are escaped by doubling them.
+ *
+ * @param field - The raw field value.
+ * @returns The escaped/quoted field string.
+ */
+declare function escapeCsvField(field: string): string;
+
+export { type MarkdownTable, convertTableToCSV, escapeCsvField, markdownToPlainText, mergeRefs, parseMarkdownTable };

package/dist/utils.d.ts

@@ -46,4 +46,21 @@ declare function parseMarkdownTable(markdown: string, tableIndex?: number): Mark
  */
 declare function convertTableToCSV(table: MarkdownTable): string;
 
-export { type MarkdownTable, convertTableToCSV, markdownToPlainText, mergeRefs, parseMarkdownTable };
+/**
+ * Escapes and optionally quotes a CSV field per RFC 4180, with OWASP-recommended formula-injection
+ * neutralisation for fields beginning with a trigger character.
+ *
+ * - Fields starting with `=`, `+`, `@`, `\t`, or `\r` are prefixed with a tab so the spreadsheet
+ *   renders them as literal text instead of evaluating them as a formula. The tab itself disappears
+ *   in the rendered cell.
+ * - Fields containing commas, double quotes, newlines, or a leading tab (from formula neutralisation)
+ *   are wrapped in double quotes per RFC 4180. The double-quote wrapping ensures the tab prefix is
+ *   preserved in parsers that would otherwise strip leading whitespace.
+ * - Existing double quotes are escaped by doubling them.
+ *
+ * @param field - The raw field value.
+ * @returns The escaped/quoted field string.
+ */
+declare function escapeCsvField(field: string): string;
+
+export { type MarkdownTable, convertTableToCSV, escapeCsvField, markdownToPlainText, mergeRefs, parseMarkdownTable };

package/dist/utils.js

@@ -1,16 +1,18 @@
 import {
   convertTableToCSV,
+  escapeCsvField,
   parseMarkdownTable
-} from "./chunk-27GJUWVN.js";
-import {
-  markdownToPlainText
-} from "./chunk-NMKKU2UG.js";
+} from "./chunk-JJUIBBBU.js";
 import {
   mergeRefs
 } from "./chunk-KNYB3RL7.js";
+import {
+  markdownToPlainText
+} from "./chunk-NMKKU2UG.js";
 import "./chunk-5WRI5ZAA.js";
 export {
   convertTableToCSV,
+  escapeCsvField,
   markdownToPlainText,
   mergeRefs,
   parseMarkdownTable

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shapesos/clay",
-  "version": "0.9.0",
+  "version": "0.11.0",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
   "devDependencies": {
@@ -13,11 +13,15 @@
     "@storybook/react": "^10.2.13",
     "@storybook/react-vite": "^10.2.13",
     "@tabler/icons-react": "^3.37.1",
+    "@tailwindcss/cli": "^4.2.4",
+    "@tailwindcss/postcss": "^4.2.4",
+    "@tailwindcss/vite": "^4.2.4",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.2",
     "@testing-library/user-event": "^14.6.1",
     "@types/node": "^25.3.2",
+    "@types/papaparse": "^5.5.2",
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
     "@vitejs/plugin-react": "^5.1.4",
@@ -31,7 +35,9 @@
     "react-dom": "^19.2.4",
     "storybook": "^10.2.13",
     "styled-components": "^6.3.11",
+    "tailwindcss": "^4",
     "tsup": "~8.5.1",
+    "tw-animate-css": "^1.4.0",
     "typescript": "~5.9.3",
     "typescript-eslint": "^8.56.1",
     "vite": "^7.3.1",
@@ -58,6 +64,22 @@
       "import": "./dist/chat.js",
       "require": "./dist/chat.cjs"
     },
+    "./blocks": {
+      "types": "./dist/blocks.d.ts",
+      "import": "./dist/blocks.js",
+      "require": "./dist/blocks.cjs"
+    },
+    "./blocks/styles.css": "./dist/blocks.css",
+    "./artifacts": {
+      "types": "./dist/artifacts.d.ts",
+      "import": "./dist/artifacts.js",
+      "require": "./dist/artifacts.cjs"
+    },
+    "./table": {
+      "types": "./dist/table.d.ts",
+      "import": "./dist/table.js",
+      "require": "./dist/table.cjs"
+    },
     "./icon": {
       "types": "./dist/icon.d.ts",
       "import": "./dist/icon.js",
@@ -107,7 +129,9 @@
     "registry": "https://registry.npmjs.org/"
   },
   "scripts": {
-    "build": "tsup",
+    "build": "bun run gen:theme && tsup && bun run build:css",
+    "build:css": "tailwindcss -i src/styles/tailwind.css -o dist/blocks.css --minify",
+    "gen:theme": "bun run scripts/generate-theme-tokens.ts",
     "dev": "tsup --watch",
     "storybook": "storybook dev -p 6006",
     "build-storybook": "storybook build",
@@ -123,13 +147,19 @@
     "check": "eslint . && tsc --noEmit && vitest run",
     "prepare": "lefthook install"
   },
-  "sideEffects": false,
+  "sideEffects": [
+    "**/*.css"
+  ],
   "type": "module",
   "types": "./dist/index.d.ts",
   "dependencies": {
+    "@radix-ui/react-tooltip": "^1.2.8",
+    "clsx": "^2.1.1",
     "lottie-react": "^2.4.1",
+    "papaparse": "^5.5.3",
     "react-markdown": "^8.0.7",
     "remark-breaks": "^4.0.0",
-    "remark-gfm": "^3.0.1"
+    "remark-gfm": "^3.0.1",
+    "tailwind-merge": "^3.5.0"
   }
 }

package/dist/chunk-27GJUWVN.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/utils/parse-markdown-table.ts","../src/utils/convert-table-to-csv.ts"],"sourcesContent":["import { stripInlineMarks } from \"./markdown-to-plain-text\";\n\n/** Structured representation of a parsed markdown table. */\nexport interface MarkdownTable {\n  /** Column header labels. */\n  columns: string[];\n  /** Data rows, each an array of cell values matching the column order. */\n  rows: string[][];\n  /** Optional title extracted from a `<!-- table-title: ... -->` comment above the table. */\n  title?: string;\n}\n\n/**\n * Parses cells from a markdown table row, trimming whitespace and stripping leading/trailing pipes.\n * @param line - A single line of a markdown table.\n * @returns An array of trimmed cell values.\n */\nfunction parseCells(line: string): string[] {\n  const trimmed = line.trim();\n  const stripped = trimmed.startsWith(\"|\") ? trimmed.slice(1) : trimmed;\n  const withoutTrailing = stripped.endsWith(\"|\") ? stripped.slice(0, -1) : stripped;\n  return withoutTrailing.split(\"|\").map((cell) => cell.trim());\n}\n\n/**\n * Tests whether a line is a GFM table separator row (e.g. `| --- | --- |`).\n * @param line - A single line to test.\n * @returns `true` if the line matches the separator pattern.\n */\nfunction isSeparatorRow(line: string): boolean {\n  const cells = parseCells(line);\n  return cells.length > 0 && cells.every((cell) => /^:?-{1,}:?$/.test(cell));\n}\n\n/**\n * Tests whether a line looks like a markdown table row (contains at least one pipe).\n * @param line - A single line to test.\n * @returns `true` if the line contains a pipe character.\n */\nfunction isTableRow(line: string): boolean {\n  return line.includes(\"|\");\n}\n\nconst TABLE_TITLE_PREFIX = \"<!-- table-title:\";\nconst TABLE_TITLE_SUFFIX = \"-->\";\n\n/**\n * Extracts a table title from a `<!-- table-title: ... -->` HTML comment.\n * Uses string methods instead of regex to avoid ReDoS on untrusted input.\n * @param line - A single line to test.\n * @returns The title string, or `undefined` if the line is not a title comment.\n */\nfunction extractTableTitle(line: string): string | undefined {\n  const trimmed = line.trim();\n  if (!trimmed.startsWith(TABLE_TITLE_PREFIX) || !trimmed.endsWith(TABLE_TITLE_SUFFIX)) {\n    return undefined;\n  }\n  return trimmed.slice(TABLE_TITLE_PREFIX.length, -TABLE_TITLE_SUFFIX.length).trim() || undefined;\n}\n\n/**\n * Extracts the Nth GFM markdown table from a string.\n * @param markdown - The markdown content to parse.\n * @param tableIndex - Zero-based index of the table to extract.\n * @returns The parsed table, or `null` if no table exists at the given index.\n */\nexport function parseMarkdownTable(markdown: string, tableIndex = 0): MarkdownTable | null {\n  const lines = markdown.split(\"\\n\");\n  let tableCount = 0;\n\n  for (let i = 0; i < lines.length - 1; i++) {\n    const headerLine = lines[i];\n    const separatorLine = lines[i + 1];\n\n    if (!isTableRow(headerLine) || !isSeparatorRow(separatorLine)) {\n      continue;\n    }\n\n    if (tableCount === tableIndex) {\n      const columns = parseCells(headerLine).map(stripInlineMarks);\n      const rows: string[][] = [];\n      const title = i > 0 ? extractTableTitle(lines[i - 1]) : undefined;\n\n      for (let j = i + 2; j < lines.length; j++) {\n        if (!isTableRow(lines[j]) || isSeparatorRow(lines[j])) {\n          break;\n        }\n        const trimmedLine = lines[j].trim();\n        if (trimmedLine === \"\") {\n          break;\n        }\n        rows.push(parseCells(lines[j]).map(stripInlineMarks));\n      }\n\n      return { columns, rows, ...(title ? { title } : {}) };\n    }\n\n    tableCount++;\n  }\n\n  return null;\n}\n","import type { MarkdownTable } from \"./parse-markdown-table\";\n\n/**\n * Escapes and optionally quotes a CSV field per RFC 4180.\n * Fields containing commas, double quotes, or newlines are wrapped in double quotes.\n * Existing double quotes are escaped by doubling them.\n * @param field - The raw field value.\n * @returns The escaped/quoted field string.\n */\nfunction escapeField(field: string): string {\n  if (field.includes(\",\") || field.includes('\"') || field.includes(\"\\n\") || field.includes(\"\\r\")) {\n    return `\"${field.replace(/\"/g, '\"\"')}\"`;\n  }\n  return field;\n}\n\n/**\n * Converts a parsed markdown table to a CSV string (RFC 4180).\n * Fields containing commas, double quotes, or newlines are quoted.\n * @param table - The structured table data to convert.\n * @returns A CSV-formatted string with CRLF line endings.\n */\nexport function convertTableToCSV(table: MarkdownTable): string {\n  const headerRow = table.columns.map(escapeField).join(\",\");\n  const dataRows = table.rows.map((row) => row.map(escapeField).join(\",\"));\n  return [headerRow, ...dataRows].join(\"\\r\\n\");\n}\n"],"mappings":";;;;;AAiBA,SAAS,WAAW,MAAwB;AAC1C,QAAM,UAAU,KAAK,KAAK;AAC1B,QAAM,WAAW,QAAQ,WAAW,GAAG,IAAI,QAAQ,MAAM,CAAC,IAAI;AAC9D,QAAM,kBAAkB,SAAS,SAAS,GAAG,IAAI,SAAS,MAAM,GAAG,EAAE,IAAI;AACzE,SAAO,gBAAgB,MAAM,GAAG,EAAE,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;AAC7D;AAOA,SAAS,eAAe,MAAuB;AAC7C,QAAM,QAAQ,WAAW,IAAI;AAC7B,SAAO,MAAM,SAAS,KAAK,MAAM,MAAM,CAAC,SAAS,cAAc,KAAK,IAAI,CAAC;AAC3E;AAOA,SAAS,WAAW,MAAuB;AACzC,SAAO,KAAK,SAAS,GAAG;AAC1B;AAEA,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAQ3B,SAAS,kBAAkB,MAAkC;AAC3D,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,CAAC,QAAQ,WAAW,kBAAkB,KAAK,CAAC,QAAQ,SAAS,kBAAkB,GAAG;AACpF,WAAO;AAAA,EACT;AACA,SAAO,QAAQ,MAAM,mBAAmB,QAAQ,CAAC,mBAAmB,MAAM,EAAE,KAAK,KAAK;AACxF;AAQO,SAAS,mBAAmB,UAAkB,aAAa,GAAyB;AACzF,QAAM,QAAQ,SAAS,MAAM,IAAI;AACjC,MAAI,aAAa;AAEjB,WAAS,IAAI,GAAG,IAAI,MAAM,SAAS,GAAG,KAAK;AACzC,UAAM,aAAa,MAAM,CAAC;AAC1B,UAAM,gBAAgB,MAAM,IAAI,CAAC;AAEjC,QAAI,CAAC,WAAW,UAAU,KAAK,CAAC,eAAe,aAAa,GAAG;AAC7D;AAAA,IACF;AAEA,QAAI,eAAe,YAAY;AAC7B,YAAM,UAAU,WAAW,UAAU,EAAE,IAAI,gBAAgB;AAC3D,YAAM,OAAmB,CAAC;AAC1B,YAAM,QAAQ,IAAI,IAAI,kBAAkB,MAAM,IAAI,CAAC,CAAC,IAAI;AAExD,eAAS,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACzC,YAAI,CAAC,WAAW,MAAM,CAAC,CAAC,KAAK,eAAe,MAAM,CAAC,CAAC,GAAG;AACrD;AAAA,QACF;AACA,cAAM,cAAc,MAAM,CAAC,EAAE,KAAK;AAClC,YAAI,gBAAgB,IAAI;AACtB;AAAA,QACF;AACA,aAAK,KAAK,WAAW,MAAM,CAAC,CAAC,EAAE,IAAI,gBAAgB,CAAC;AAAA,MACtD;AAEA,aAAO,EAAE,SAAS,MAAM,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG;AAAA,IACtD;AAEA;AAAA,EACF;AAEA,SAAO;AACT;;;AC5FA,SAAS,YAAY,OAAuB;AAC1C,MAAI,MAAM,SAAS,GAAG,KAAK,MAAM,SAAS,GAAG,KAAK,MAAM,SAAS,IAAI,KAAK,MAAM,SAAS,IAAI,GAAG;AAC9F,WAAO,IAAI,MAAM,QAAQ,MAAM,IAAI,CAAC;AAAA,EACtC;AACA,SAAO;AACT;AAQO,SAAS,kBAAkB,OAA8B;AAC9D,QAAM,YAAY,MAAM,QAAQ,IAAI,WAAW,EAAE,KAAK,GAAG;AACzD,QAAM,WAAW,MAAM,KAAK,IAAI,CAAC,QAAQ,IAAI,IAAI,WAAW,EAAE,KAAK,GAAG,CAAC;AACvE,SAAO,CAAC,WAAW,GAAG,QAAQ,EAAE,KAAK,MAAM;AAC7C;","names":[]}