@transferwise/components 46.155.1 → 46.157.0

package/build/Inputs/SelectInput/TriggerButton/SelectInputTriggerButton.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"SelectInputTriggerButton.mjs","sources":["../../../../src/Inputs/SelectInput/TriggerButton/SelectInputTriggerButton.tsx"],"sourcesContent":["import { ListboxButton } from '@headlessui/react';\nimport mergeProps from 'merge-props';\nimport { useContext } from 'react';\nimport { PolymorphicWithOverrides } from '../../../common/PolymorphicWithOverrides/PolymorphicWithOverrides';\nimport { Merge } from '../../../utils';\nimport { SelectInputTriggerButtonPropsContext } from '../SelectInput.contexts';\n\nexport type SelectInputTriggerButtonElementType = 'button' | React.ComponentType;\n\nexport type SelectInputTriggerButtonProps<\n  T extends SelectInputTriggerButtonElementType = 'button',\n> = Merge<React.ComponentPropsWithoutRef<T>, { as?: T }>;\n\n/**\n * The trigger button component for SelectInput.\n * Uses Headless UI's ListboxButton with polymorphic support to allow\n * rendering as different element types.\n */\nexport function SelectInputTriggerButton<T extends SelectInputTriggerButtonElementType = 'button'>({\n  as = 'button' as T,\n  ...restProps\n}: SelectInputTriggerButtonProps<T>) {\n  const { ref, onClick, onKeyDown, size, ...interactionProps } = useContext(\n    SelectInputTriggerButtonPropsContext,\n  );\n\n  return (\n    <ListboxButton\n      ref={ref}\n      as={PolymorphicWithOverrides}\n      role=\"combobox\"\n      __overrides={{ as, size, ...interactionProps }}\n      {...mergeProps({ onClick, onKeyDown }, restProps)}\n    />\n  );\n}\n"],"names":["SelectInputTriggerButton","as","restProps","ref","onClick","onKeyDown","size","interactionProps","useContext","SelectInputTriggerButtonPropsContext","_jsx","ListboxButton","PolymorphicWithOverrides","role","__overrides","mergeProps"],"mappings":";;;;;;;AAkBM,SAAUA,wBAAwBA,CAA2D;AACjGC,EAAAA,EAAE,GAAG,QAAa;EAClB,GAAGC;AAAS,CACqB,EAAA;EACjC,MAAM;IAAEC,GAAG;IAAEC,OAAO;IAAEC,SAAS;IAAEC,IAAI;IAAE,GAAGC;AAAgB,GAAE,GAAGC,UAAU,CACvEC,oCAAoC,CACrC;EAED,oBACEC,GAAA,CAACC,aAAa,EAAA;AACZR,IAAAA,GAAG,EAAEA,GAAI;AACTF,IAAAA,EAAE,EAAEW,wBAAyB;AAC7BC,IAAAA,IAAI,EAAC,UAAU;AACfC,IAAAA,WAAW,EAAE;MAAEb,EAAE;MAAEK,IAAI;MAAE,GAAGC;KAAmB;AAAA,IAAA,GAC3CQ,UAAU,CAAC;MAAEX,OAAO;AAAEC,MAAAA;AAAS,KAAE,EAAEH,SAAS;AAAC,GAAC,CAClD;AAEN;;;;"}
+{"version":3,"file":"SelectInputTriggerButton.mjs","sources":["../../../../src/Inputs/SelectInput/TriggerButton/SelectInputTriggerButton.tsx"],"sourcesContent":["import { ListboxButton } from '@headlessui/react';\nimport mergeProps from 'merge-props';\nimport { useContext } from 'react';\nimport { PolymorphicWithOverrides } from '../../../common/PolymorphicWithOverrides/PolymorphicWithOverrides';\nimport { Merge } from '../../../utils';\nimport { SelectInputTriggerButtonPropsContext } from '../SelectInput.contexts';\n\nexport type SelectInputTriggerButtonElementType = React.ElementType;\n\nexport type SelectInputTriggerButtonProps<\n  T extends SelectInputTriggerButtonElementType = 'button',\n> = Merge<React.ComponentPropsWithoutRef<T>, { as?: T }>;\n\n/**\n * The trigger button component for SelectInput.\n * Uses Headless UI's ListboxButton with polymorphic support to allow\n * rendering as different element types.\n */\nexport function SelectInputTriggerButton<T extends SelectInputTriggerButtonElementType = 'button'>({\n  as = 'button' as T,\n  ...restProps\n}: SelectInputTriggerButtonProps<T>) {\n  const { ref, onClick, onKeyDown, size, ...interactionProps } = useContext(\n    SelectInputTriggerButtonPropsContext,\n  );\n\n  return (\n    <ListboxButton\n      ref={ref}\n      as={PolymorphicWithOverrides}\n      role=\"combobox\"\n      __overrides={{ as, size, ...interactionProps }}\n      {...mergeProps({ onClick, onKeyDown }, restProps)}\n    />\n  );\n}\n"],"names":["SelectInputTriggerButton","as","restProps","ref","onClick","onKeyDown","size","interactionProps","useContext","SelectInputTriggerButtonPropsContext","_jsx","ListboxButton","PolymorphicWithOverrides","role","__overrides","mergeProps"],"mappings":";;;;;;;AAkBM,SAAUA,wBAAwBA,CAA2D;AACjGC,EAAAA,EAAE,GAAG,QAAa;EAClB,GAAGC;AAAS,CACqB,EAAA;EACjC,MAAM;IAAEC,GAAG;IAAEC,OAAO;IAAEC,SAAS;IAAEC,IAAI;IAAE,GAAGC;AAAgB,GAAE,GAAGC,UAAU,CACvEC,oCAAoC,CACrC;EAED,oBACEC,GAAA,CAACC,aAAa,EAAA;AACZR,IAAAA,GAAG,EAAEA,GAAI;AACTF,IAAAA,EAAE,EAAEW,wBAAyB;AAC7BC,IAAAA,IAAI,EAAC,UAAU;AACfC,IAAAA,WAAW,EAAE;MAAEb,EAAE;MAAEK,IAAI;MAAE,GAAGC;KAAmB;AAAA,IAAA,GAC3CQ,UAAU,CAAC;MAAEX,OAAO;AAAEC,MAAAA;AAAS,KAAE,EAAEH,SAAS;AAAC,GAAC,CAClD;AAEN;;;;"}

package/build/Markup/Markup.js

@@ -0,0 +1,138 @@
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+var React = require('react');
+var Link = require('../Link/Link.js');
+var parseMarkup = require('./utils/parseMarkup.js');
+var sanitise = require('./utils/sanitise.js');
+var jsxRuntime = require('react/jsx-runtime');
+
+const PLACEHOLDER_REGEX = /\{\{(\w+)\}\}/g;
+function substituteData(text, data) {
+  return text.replace(PLACEHOLDER_REGEX, (match, key) => Object.prototype.hasOwnProperty.call(data, key) ? String(data[key]) : match);
+}
+function renderNodes(nodes, actions, data, allowLinks) {
+  return nodes.map((node, index) => renderNode(node, actions, data, allowLinks, index));
+}
+function renderLinkNode(node, actions, data, allowLinks, key) {
+  const children = renderNodes(node.children, actions, data, allowLinks);
+  if (node.action && actions?.[node.action]) {
+    return (
+      /*#__PURE__*/
+      // eslint-disable-next-line jsx-a11y/click-events-have-key-events
+      jsxRuntime.jsx(Link.default, {
+        "aria-label": node.accessibilityLabel,
+        onClick: actions[node.action],
+        children: children
+      }, key)
+    );
+  }
+  const sanitisedHref = node.href ? sanitise.sanitiseHref(node.href) : undefined;
+  if (sanitisedHref && sanitise.isHrefAllowedByMode(sanitisedHref, allowLinks)) {
+    return /*#__PURE__*/jsxRuntime.jsx(Link.default, {
+      href: sanitisedHref,
+      target: node.target,
+      "aria-label": node.accessibilityLabel,
+      children: children
+    }, key);
+  }
+  return /*#__PURE__*/jsxRuntime.jsx(React.Fragment, {
+    children: children
+  }, key);
+}
+function renderNode(node, actions, data, allowLinks, key) {
+  switch (node.type) {
+    case 'text':
+      return /*#__PURE__*/jsxRuntime.jsx(React.Fragment, {
+        children: data ? substituteData(node.content, data) : node.content
+      }, key);
+    case 'newline':
+      return /*#__PURE__*/jsxRuntime.jsx("br", {}, key);
+    case 'important':
+    case 'positive':
+    case 'negative':
+      return /*#__PURE__*/jsxRuntime.jsx("em", {
+        className: `wds-markup-emphasis wds-markup-emphasis--${node.type}`,
+        "aria-label": node.accessibilityLabel,
+        children: renderNodes(node.children, actions, data, allowLinks)
+      }, key);
+    case 'strong':
+      return /*#__PURE__*/jsxRuntime.jsx("strong", {
+        className: "wds-markup-strong",
+        "aria-label": node.accessibilityLabel,
+        children: renderNodes(node.children, actions, data, allowLinks)
+      }, key);
+    case 'strikethrough':
+      return /*#__PURE__*/jsxRuntime.jsx("del", {
+        className: "wds-markup-strikethrough",
+        "aria-label": node.accessibilityLabel,
+        children: renderNodes(node.children, actions, data, allowLinks)
+      }, key);
+    case 'paragraph':
+      return /*#__PURE__*/jsxRuntime.jsx("p", {
+        className: "wds-markup-paragraph",
+        children: renderNodes(node.children, actions, data, allowLinks)
+      }, key);
+    case 'link':
+      return renderLinkNode(node, actions, data, allowLinks, key);
+  }
+}
+function hasParagraph(nodes) {
+  for (const node of nodes) {
+    if (node.type === 'paragraph') {
+      return true;
+    }
+    if ('children' in node && hasParagraph(node.children)) {
+      return true;
+    }
+  }
+  return false;
+}
+/**
+ * Parses a markup string and renders it as React elements. Supports `<important>`,
+ * `<positive>`, `<negative>`, `<strong>`, `<strikethrough>`, `<paragraph>` (alias `<p>`),
+ * and `<link>` (alias `<a>`) with secure href validation.
+ *
+ * It only processes `string` input, while `ReactNode` is passed-through without processing.
+ *
+ * > The component supersedes [Emphasis](?path=/docs/typography-emphasis--docs), which will be
+ * eventually deprecated.
+ *
+ * @see http://storybook.wise.design/?path=/docs/typography-markup--docs
+ * @link ../emphasis/Emphasis | Emphasis
+ */
+const Markup = ({
+  children,
+  data,
+  allowLinks = 'internal',
+  actions,
+  as,
+  className,
+  'data-testid': testId
+}) => {
+  const tree = React.useMemo(() => typeof children === 'string' ? parseMarkup.parseMarkup(children) : [], [children]);
+  if (typeof children !== 'string') {
+    if (children == null) {
+      return null;
+    }
+    return /*#__PURE__*/jsxRuntime.jsx("span", {
+      className: className,
+      "data-testid": testId,
+      children: children
+    });
+  }
+  if (tree.length === 0) {
+    return null;
+  }
+  const Element = as ?? (hasParagraph(tree) ? 'div' : 'span');
+  return /*#__PURE__*/jsxRuntime.jsx(Element, {
+    className: className,
+    "data-testid": testId,
+    children: renderNodes(tree, actions, data, allowLinks)
+  });
+};
+
+exports.Markup = Markup;
+exports.default = Markup;
+//# sourceMappingURL=Markup.js.map

package/build/Markup/Markup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Markup.js","sources":["../../src/Markup/Markup.tsx"],"sourcesContent":["import React, { Fragment, useMemo } from 'react';\n\nimport Link from '../Link';\n\nimport { parseMarkup } from './utils/parseMarkup';\nimport { type AllowLinksMode, isHrefAllowedByMode, sanitiseHref } from './utils/sanitise';\nimport type { MarkupActions, MarkupNode, MarkupProps } from './Markup.types';\n\nconst PLACEHOLDER_REGEX = /\\{\\{(\\w+)\\}\\}/g;\n\ntype MarkupData = Record<string, string | number>;\n\nfunction substituteData(text: string, data: MarkupData): string {\n  return text.replace(PLACEHOLDER_REGEX, (match, key: string) =>\n    Object.prototype.hasOwnProperty.call(data, key) ? String(data[key]) : match,\n  );\n}\n\nfunction renderNodes(\n  nodes: MarkupNode[],\n  actions: MarkupActions | undefined,\n  data: MarkupData | undefined,\n  allowLinks: AllowLinksMode,\n): React.ReactNode[] {\n  return nodes.map((node, index) => renderNode(node, actions, data, allowLinks, index));\n}\n\nfunction renderLinkNode(\n  node: Extract<MarkupNode, { type: 'link' }>,\n  actions: MarkupActions | undefined,\n  data: MarkupData | undefined,\n  allowLinks: AllowLinksMode,\n  key: number,\n): React.ReactNode {\n  const children = renderNodes(node.children, actions, data, allowLinks);\n\n  if (node.action && actions?.[node.action]) {\n    return (\n      // eslint-disable-next-line jsx-a11y/click-events-have-key-events\n      <Link key={key} aria-label={node.accessibilityLabel} onClick={actions[node.action]}>\n        {children}\n      </Link>\n    );\n  }\n\n  const sanitisedHref = node.href ? sanitiseHref(node.href) : undefined;\n  if (sanitisedHref && isHrefAllowedByMode(sanitisedHref, allowLinks)) {\n    return (\n      <Link\n        key={key}\n        href={sanitisedHref}\n        target={node.target}\n        aria-label={node.accessibilityLabel}\n      >\n        {children}\n      </Link>\n    );\n  }\n\n  return <Fragment key={key}>{children}</Fragment>;\n}\n\nfunction renderNode(\n  node: MarkupNode,\n  actions: MarkupActions | undefined,\n  data: MarkupData | undefined,\n  allowLinks: AllowLinksMode,\n  key: number,\n): React.ReactNode {\n  switch (node.type) {\n    case 'text':\n      return (\n        <Fragment key={key}>{data ? substituteData(node.content, data) : node.content}</Fragment>\n      );\n    case 'newline':\n      return <br key={key} />;\n    case 'important':\n    case 'positive':\n    case 'negative':\n      return (\n        <em\n          key={key}\n          className={`wds-markup-emphasis wds-markup-emphasis--${node.type}`}\n          aria-label={node.accessibilityLabel}\n        >\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </em>\n      );\n    case 'strong':\n      return (\n        <strong key={key} className=\"wds-markup-strong\" aria-label={node.accessibilityLabel}>\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </strong>\n      );\n    case 'strikethrough':\n      return (\n        <del key={key} className=\"wds-markup-strikethrough\" aria-label={node.accessibilityLabel}>\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </del>\n      );\n    case 'paragraph':\n      return (\n        <p key={key} className=\"wds-markup-paragraph\">\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </p>\n      );\n    case 'link':\n      return renderLinkNode(node, actions, data, allowLinks, key);\n  }\n}\n\nfunction hasParagraph(nodes: MarkupNode[]): boolean {\n  for (const node of nodes) {\n    if (node.type === 'paragraph') {\n      return true;\n    }\n    if ('children' in node && hasParagraph(node.children)) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Parses a markup string and renders it as React elements. Supports `<important>`,\n * `<positive>`, `<negative>`, `<strong>`, `<strikethrough>`, `<paragraph>` (alias `<p>`),\n * and `<link>` (alias `<a>`) with secure href validation.\n *\n * It only processes `string` input, while `ReactNode` is passed-through without processing.\n *\n * > The component supersedes [Emphasis](?path=/docs/typography-emphasis--docs), which will be\n * eventually deprecated.\n *\n * @see http://storybook.wise.design/?path=/docs/typography-markup--docs\n * @link ../emphasis/Emphasis | Emphasis\n */\nexport const Markup: React.FC<MarkupProps> = ({\n  children,\n  data,\n  allowLinks = 'internal',\n  actions,\n  as,\n  className,\n  'data-testid': testId,\n}) => {\n  const tree = useMemo(\n    () => (typeof children === 'string' ? parseMarkup(children) : []),\n    [children],\n  );\n\n  if (typeof children !== 'string') {\n    if (children == null) {\n      return null;\n    }\n    return (\n      <span className={className} data-testid={testId}>\n        {children}\n      </span>\n    );\n  }\n\n  if (tree.length === 0) {\n    return null;\n  }\n\n  const Element = as ?? (hasParagraph(tree) ? 'div' : 'span');\n\n  return (\n    <Element className={className} data-testid={testId}>\n      {renderNodes(tree, actions, data, allowLinks)}\n    </Element>\n  );\n};\n\nexport default Markup;\n"],"names":["PLACEHOLDER_REGEX","substituteData","text","data","replace","match","key","Object","prototype","hasOwnProperty","call","String","renderNodes","nodes","actions","allowLinks","map","node","index","renderNode","renderLinkNode","children","action","_jsx","Link","accessibilityLabel","onClick","sanitisedHref","href","sanitiseHref","undefined","isHrefAllowedByMode","target","Fragment","type","content","className","hasParagraph","Markup","as","testId","tree","useMemo","parseMarkup","length","Element"],"mappings":";;;;;;;;;;AAQA,MAAMA,iBAAiB,GAAG,gBAAgB;AAI1C,SAASC,cAAcA,CAACC,IAAY,EAAEC,IAAgB,EAAA;AACpD,EAAA,OAAOD,IAAI,CAACE,OAAO,CAACJ,iBAAiB,EAAE,CAACK,KAAK,EAAEC,GAAW,KACxDC,MAAM,CAACC,SAAS,CAACC,cAAc,CAACC,IAAI,CAACP,IAAI,EAAEG,GAAG,CAAC,GAAGK,MAAM,CAACR,IAAI,CAACG,GAAG,CAAC,CAAC,GAAGD,KAAK,CAC5E;AACH;AAEA,SAASO,WAAWA,CAClBC,KAAmB,EACnBC,OAAkC,EAClCX,IAA4B,EAC5BY,UAA0B,EAAA;EAE1B,OAAOF,KAAK,CAACG,GAAG,CAAC,CAACC,IAAI,EAAEC,KAAK,KAAKC,UAAU,CAACF,IAAI,EAAEH,OAAO,EAAEX,IAAI,EAAEY,UAAU,EAAEG,KAAK,CAAC,CAAC;AACvF;AAEA,SAASE,cAAcA,CACrBH,IAA2C,EAC3CH,OAAkC,EAClCX,IAA4B,EAC5BY,UAA0B,EAC1BT,GAAW,EAAA;AAEX,EAAA,MAAMe,QAAQ,GAAGT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU,CAAC;EAEtE,IAAIE,IAAI,CAACK,MAAM,IAAIR,OAAO,GAAGG,IAAI,CAACK,MAAM,CAAC,EAAE;AACzC,IAAA;AAAA;AACE;AACAC,MAAAA,cAAA,CAACC,YAAI,EAAA;QAAW,YAAA,EAAYP,IAAI,CAACQ,kBAAmB;AAACC,QAAAA,OAAO,EAAEZ,OAAO,CAACG,IAAI,CAACK,MAAM,CAAE;AAAAD,QAAAA,QAAA,EAChFA;AAAQ,OAAA,EADAf,GAEL;AAAC;AAEX,EAAA;AAEA,EAAA,MAAMqB,aAAa,GAAGV,IAAI,CAACW,IAAI,GAAGC,qBAAY,CAACZ,IAAI,CAACW,IAAI,CAAC,GAAGE,SAAS;EACrE,IAAIH,aAAa,IAAII,4BAAmB,CAACJ,aAAa,EAAEZ,UAAU,CAAC,EAAE;IACnE,oBACEQ,cAAA,CAACC,YAAI,EAAA;AAEHI,MAAAA,IAAI,EAAED,aAAc;MACpBK,MAAM,EAAEf,IAAI,CAACe,MAAO;MACpB,YAAA,EAAYf,IAAI,CAACQ,kBAAmB;AAAAJ,MAAAA,QAAA,EAEnCA;AAAQ,KAAA,EALJf,GAMD,CAAC;AAEX,EAAA;EAEA,oBAAOiB,cAAA,CAACU,cAAQ,EAAA;AAAAZ,IAAAA,QAAA,EAAYA;AAAQ,GAAA,EAAdf,GAAyB,CAAC;AAClD;AAEA,SAASa,UAAUA,CACjBF,IAAgB,EAChBH,OAAkC,EAClCX,IAA4B,EAC5BY,UAA0B,EAC1BT,GAAW,EAAA;EAEX,QAAQW,IAAI,CAACiB,IAAI;AACf,IAAA,KAAK,MAAM;MACT,oBACEX,cAAA,CAACU,cAAQ,EAAA;AAAAZ,QAAAA,QAAA,EAAYlB,IAAI,GAAGF,cAAc,CAACgB,IAAI,CAACkB,OAAO,EAAEhC,IAAI,CAAC,GAAGc,IAAI,CAACkB;AAAO,OAAA,EAA9D7B,GAAyE,CAAC;AAE7F,IAAA,KAAK,SAAS;MACZ,oBAAOiB,cAAA,CAAA,IAAA,EAAA,EAAA,EAASjB,GAAI,CAAG;AACzB,IAAA,KAAK,WAAW;AAChB,IAAA,KAAK,UAAU;AACf,IAAA,KAAK,UAAU;AACb,MAAA,oBACEiB,cAAA,CAAA,IAAA,EAAA;AAEEa,QAAAA,SAAS,EAAE,CAAA,yCAAA,EAA4CnB,IAAI,CAACiB,IAAI,CAAA,CAAG;QACnE,YAAA,EAAYjB,IAAI,CAACQ,kBAAmB;QAAAJ,QAAA,EAEnCT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EAJjDT,GAKH,CAAC;AAET,IAAA,KAAK,QAAQ;AACX,MAAA,oBACEiB,cAAA,CAAA,QAAA,EAAA;AAAkBa,QAAAA,SAAS,EAAC,mBAAmB;QAAC,YAAA,EAAYnB,IAAI,CAACQ,kBAAmB;QAAAJ,QAAA,EACjFT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EAD3CT,GAEL,CAAC;AAEb,IAAA,KAAK,eAAe;AAClB,MAAA,oBACEiB,cAAA,CAAA,KAAA,EAAA;AAAea,QAAAA,SAAS,EAAC,0BAA0B;QAAC,YAAA,EAAYnB,IAAI,CAACQ,kBAAmB;QAAAJ,QAAA,EACrFT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EAD9CT,GAEL,CAAC;AAEV,IAAA,KAAK,WAAW;AACd,MAAA,oBACEiB,cAAA,CAAA,GAAA,EAAA;AAAaa,QAAAA,SAAS,EAAC,sBAAsB;QAAAf,QAAA,EAC1CT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EADhDT,GAEL,CAAC;AAER,IAAA,KAAK,MAAM;MACT,OAAOc,cAAc,CAACH,IAAI,EAAEH,OAAO,EAAEX,IAAI,EAAEY,UAAU,EAAET,GAAG,CAAC;AAC/D;AACF;AAEA,SAAS+B,YAAYA,CAACxB,KAAmB,EAAA;AACvC,EAAA,KAAK,MAAMI,IAAI,IAAIJ,KAAK,EAAE;AACxB,IAAA,IAAII,IAAI,CAACiB,IAAI,KAAK,WAAW,EAAE;AAC7B,MAAA,OAAO,IAAI;AACb,IAAA;IACA,IAAI,UAAU,IAAIjB,IAAI,IAAIoB,YAAY,CAACpB,IAAI,CAACI,QAAQ,CAAC,EAAE;AACrD,MAAA,OAAO,IAAI;AACb,IAAA;AACF,EAAA;AACA,EAAA,OAAO,KAAK;AACd;AAEA;;;;;;;;;;;;AAYG;AACI,MAAMiB,MAAM,GAA0BA,CAAC;EAC5CjB,QAAQ;EACRlB,IAAI;AACJY,EAAAA,UAAU,GAAG,UAAU;EACvBD,OAAO;EACPyB,EAAE;EACFH,SAAS;AACT,EAAA,aAAa,EAAEI;AAAM,CACtB,KAAI;EACH,MAAMC,IAAI,GAAGC,aAAO,CAClB,MAAO,OAAOrB,QAAQ,KAAK,QAAQ,GAAGsB,uBAAW,CAACtB,QAAQ,CAAC,GAAG,EAAG,EACjE,CAACA,QAAQ,CAAC,CACX;AAED,EAAA,IAAI,OAAOA,QAAQ,KAAK,QAAQ,EAAE;IAChC,IAAIA,QAAQ,IAAI,IAAI,EAAE;AACpB,MAAA,OAAO,IAAI;AACb,IAAA;AACA,IAAA,oBACEE,cAAA,CAAA,MAAA,EAAA;AAAMa,MAAAA,SAAS,EAAEA,SAAU;AAAC,MAAA,aAAA,EAAaI,MAAO;AAAAnB,MAAAA,QAAA,EAC7CA;AAAQ,KACL,CAAC;AAEX,EAAA;AAEA,EAAA,IAAIoB,IAAI,CAACG,MAAM,KAAK,CAAC,EAAE;AACrB,IAAA,OAAO,IAAI;AACb,EAAA;AAEA,EAAA,MAAMC,OAAO,GAAGN,EAAE,KAAKF,YAAY,CAACI,IAAI,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC;EAE3D,oBACElB,cAAA,CAACsB,OAAO,EAAA;AAACT,IAAAA,SAAS,EAAEA,SAAU;AAAC,IAAA,aAAA,EAAaI,MAAO;IAAAnB,QAAA,EAChDT,WAAW,CAAC6B,IAAI,EAAE3B,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,GACtC,CAAC;AAEd;;;;;"}

package/build/Markup/Markup.mjs

@@ -0,0 +1,133 @@
+import { useMemo, Fragment } from 'react';
+import Link from '../Link/Link.mjs';
+import { parseMarkup } from './utils/parseMarkup.mjs';
+import { sanitiseHref, isHrefAllowedByMode } from './utils/sanitise.mjs';
+import { jsx } from 'react/jsx-runtime';
+
+const PLACEHOLDER_REGEX = /\{\{(\w+)\}\}/g;
+function substituteData(text, data) {
+  return text.replace(PLACEHOLDER_REGEX, (match, key) => Object.prototype.hasOwnProperty.call(data, key) ? String(data[key]) : match);
+}
+function renderNodes(nodes, actions, data, allowLinks) {
+  return nodes.map((node, index) => renderNode(node, actions, data, allowLinks, index));
+}
+function renderLinkNode(node, actions, data, allowLinks, key) {
+  const children = renderNodes(node.children, actions, data, allowLinks);
+  if (node.action && actions?.[node.action]) {
+    return (
+      /*#__PURE__*/
+      // eslint-disable-next-line jsx-a11y/click-events-have-key-events
+      jsx(Link, {
+        "aria-label": node.accessibilityLabel,
+        onClick: actions[node.action],
+        children: children
+      }, key)
+    );
+  }
+  const sanitisedHref = node.href ? sanitiseHref(node.href) : undefined;
+  if (sanitisedHref && isHrefAllowedByMode(sanitisedHref, allowLinks)) {
+    return /*#__PURE__*/jsx(Link, {
+      href: sanitisedHref,
+      target: node.target,
+      "aria-label": node.accessibilityLabel,
+      children: children
+    }, key);
+  }
+  return /*#__PURE__*/jsx(Fragment, {
+    children: children
+  }, key);
+}
+function renderNode(node, actions, data, allowLinks, key) {
+  switch (node.type) {
+    case 'text':
+      return /*#__PURE__*/jsx(Fragment, {
+        children: data ? substituteData(node.content, data) : node.content
+      }, key);
+    case 'newline':
+      return /*#__PURE__*/jsx("br", {}, key);
+    case 'important':
+    case 'positive':
+    case 'negative':
+      return /*#__PURE__*/jsx("em", {
+        className: `wds-markup-emphasis wds-markup-emphasis--${node.type}`,
+        "aria-label": node.accessibilityLabel,
+        children: renderNodes(node.children, actions, data, allowLinks)
+      }, key);
+    case 'strong':
+      return /*#__PURE__*/jsx("strong", {
+        className: "wds-markup-strong",
+        "aria-label": node.accessibilityLabel,
+        children: renderNodes(node.children, actions, data, allowLinks)
+      }, key);
+    case 'strikethrough':
+      return /*#__PURE__*/jsx("del", {
+        className: "wds-markup-strikethrough",
+        "aria-label": node.accessibilityLabel,
+        children: renderNodes(node.children, actions, data, allowLinks)
+      }, key);
+    case 'paragraph':
+      return /*#__PURE__*/jsx("p", {
+        className: "wds-markup-paragraph",
+        children: renderNodes(node.children, actions, data, allowLinks)
+      }, key);
+    case 'link':
+      return renderLinkNode(node, actions, data, allowLinks, key);
+  }
+}
+function hasParagraph(nodes) {
+  for (const node of nodes) {
+    if (node.type === 'paragraph') {
+      return true;
+    }
+    if ('children' in node && hasParagraph(node.children)) {
+      return true;
+    }
+  }
+  return false;
+}
+/**
+ * Parses a markup string and renders it as React elements. Supports `<important>`,
+ * `<positive>`, `<negative>`, `<strong>`, `<strikethrough>`, `<paragraph>` (alias `<p>`),
+ * and `<link>` (alias `<a>`) with secure href validation.
+ *
+ * It only processes `string` input, while `ReactNode` is passed-through without processing.
+ *
+ * > The component supersedes [Emphasis](?path=/docs/typography-emphasis--docs), which will be
+ * eventually deprecated.
+ *
+ * @see http://storybook.wise.design/?path=/docs/typography-markup--docs
+ * @link ../emphasis/Emphasis | Emphasis
+ */
+const Markup = ({
+  children,
+  data,
+  allowLinks = 'internal',
+  actions,
+  as,
+  className,
+  'data-testid': testId
+}) => {
+  const tree = useMemo(() => typeof children === 'string' ? parseMarkup(children) : [], [children]);
+  if (typeof children !== 'string') {
+    if (children == null) {
+      return null;
+    }
+    return /*#__PURE__*/jsx("span", {
+      className: className,
+      "data-testid": testId,
+      children: children
+    });
+  }
+  if (tree.length === 0) {
+    return null;
+  }
+  const Element = as ?? (hasParagraph(tree) ? 'div' : 'span');
+  return /*#__PURE__*/jsx(Element, {
+    className: className,
+    "data-testid": testId,
+    children: renderNodes(tree, actions, data, allowLinks)
+  });
+};
+
+export { Markup, Markup as default };
+//# sourceMappingURL=Markup.mjs.map

package/build/Markup/Markup.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"Markup.mjs","sources":["../../src/Markup/Markup.tsx"],"sourcesContent":["import React, { Fragment, useMemo } from 'react';\n\nimport Link from '../Link';\n\nimport { parseMarkup } from './utils/parseMarkup';\nimport { type AllowLinksMode, isHrefAllowedByMode, sanitiseHref } from './utils/sanitise';\nimport type { MarkupActions, MarkupNode, MarkupProps } from './Markup.types';\n\nconst PLACEHOLDER_REGEX = /\\{\\{(\\w+)\\}\\}/g;\n\ntype MarkupData = Record<string, string | number>;\n\nfunction substituteData(text: string, data: MarkupData): string {\n  return text.replace(PLACEHOLDER_REGEX, (match, key: string) =>\n    Object.prototype.hasOwnProperty.call(data, key) ? String(data[key]) : match,\n  );\n}\n\nfunction renderNodes(\n  nodes: MarkupNode[],\n  actions: MarkupActions | undefined,\n  data: MarkupData | undefined,\n  allowLinks: AllowLinksMode,\n): React.ReactNode[] {\n  return nodes.map((node, index) => renderNode(node, actions, data, allowLinks, index));\n}\n\nfunction renderLinkNode(\n  node: Extract<MarkupNode, { type: 'link' }>,\n  actions: MarkupActions | undefined,\n  data: MarkupData | undefined,\n  allowLinks: AllowLinksMode,\n  key: number,\n): React.ReactNode {\n  const children = renderNodes(node.children, actions, data, allowLinks);\n\n  if (node.action && actions?.[node.action]) {\n    return (\n      // eslint-disable-next-line jsx-a11y/click-events-have-key-events\n      <Link key={key} aria-label={node.accessibilityLabel} onClick={actions[node.action]}>\n        {children}\n      </Link>\n    );\n  }\n\n  const sanitisedHref = node.href ? sanitiseHref(node.href) : undefined;\n  if (sanitisedHref && isHrefAllowedByMode(sanitisedHref, allowLinks)) {\n    return (\n      <Link\n        key={key}\n        href={sanitisedHref}\n        target={node.target}\n        aria-label={node.accessibilityLabel}\n      >\n        {children}\n      </Link>\n    );\n  }\n\n  return <Fragment key={key}>{children}</Fragment>;\n}\n\nfunction renderNode(\n  node: MarkupNode,\n  actions: MarkupActions | undefined,\n  data: MarkupData | undefined,\n  allowLinks: AllowLinksMode,\n  key: number,\n): React.ReactNode {\n  switch (node.type) {\n    case 'text':\n      return (\n        <Fragment key={key}>{data ? substituteData(node.content, data) : node.content}</Fragment>\n      );\n    case 'newline':\n      return <br key={key} />;\n    case 'important':\n    case 'positive':\n    case 'negative':\n      return (\n        <em\n          key={key}\n          className={`wds-markup-emphasis wds-markup-emphasis--${node.type}`}\n          aria-label={node.accessibilityLabel}\n        >\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </em>\n      );\n    case 'strong':\n      return (\n        <strong key={key} className=\"wds-markup-strong\" aria-label={node.accessibilityLabel}>\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </strong>\n      );\n    case 'strikethrough':\n      return (\n        <del key={key} className=\"wds-markup-strikethrough\" aria-label={node.accessibilityLabel}>\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </del>\n      );\n    case 'paragraph':\n      return (\n        <p key={key} className=\"wds-markup-paragraph\">\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </p>\n      );\n    case 'link':\n      return renderLinkNode(node, actions, data, allowLinks, key);\n  }\n}\n\nfunction hasParagraph(nodes: MarkupNode[]): boolean {\n  for (const node of nodes) {\n    if (node.type === 'paragraph') {\n      return true;\n    }\n    if ('children' in node && hasParagraph(node.children)) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Parses a markup string and renders it as React elements. Supports `<important>`,\n * `<positive>`, `<negative>`, `<strong>`, `<strikethrough>`, `<paragraph>` (alias `<p>`),\n * and `<link>` (alias `<a>`) with secure href validation.\n *\n * It only processes `string` input, while `ReactNode` is passed-through without processing.\n *\n * > The component supersedes [Emphasis](?path=/docs/typography-emphasis--docs), which will be\n * eventually deprecated.\n *\n * @see http://storybook.wise.design/?path=/docs/typography-markup--docs\n * @link ../emphasis/Emphasis | Emphasis\n */\nexport const Markup: React.FC<MarkupProps> = ({\n  children,\n  data,\n  allowLinks = 'internal',\n  actions,\n  as,\n  className,\n  'data-testid': testId,\n}) => {\n  const tree = useMemo(\n    () => (typeof children === 'string' ? parseMarkup(children) : []),\n    [children],\n  );\n\n  if (typeof children !== 'string') {\n    if (children == null) {\n      return null;\n    }\n    return (\n      <span className={className} data-testid={testId}>\n        {children}\n      </span>\n    );\n  }\n\n  if (tree.length === 0) {\n    return null;\n  }\n\n  const Element = as ?? (hasParagraph(tree) ? 'div' : 'span');\n\n  return (\n    <Element className={className} data-testid={testId}>\n      {renderNodes(tree, actions, data, allowLinks)}\n    </Element>\n  );\n};\n\nexport default Markup;\n"],"names":["PLACEHOLDER_REGEX","substituteData","text","data","replace","match","key","Object","prototype","hasOwnProperty","call","String","renderNodes","nodes","actions","allowLinks","map","node","index","renderNode","renderLinkNode","children","action","_jsx","Link","accessibilityLabel","onClick","sanitisedHref","href","sanitiseHref","undefined","isHrefAllowedByMode","target","Fragment","type","content","className","hasParagraph","Markup","as","testId","tree","useMemo","parseMarkup","length","Element"],"mappings":";;;;;;AAQA,MAAMA,iBAAiB,GAAG,gBAAgB;AAI1C,SAASC,cAAcA,CAACC,IAAY,EAAEC,IAAgB,EAAA;AACpD,EAAA,OAAOD,IAAI,CAACE,OAAO,CAACJ,iBAAiB,EAAE,CAACK,KAAK,EAAEC,GAAW,KACxDC,MAAM,CAACC,SAAS,CAACC,cAAc,CAACC,IAAI,CAACP,IAAI,EAAEG,GAAG,CAAC,GAAGK,MAAM,CAACR,IAAI,CAACG,GAAG,CAAC,CAAC,GAAGD,KAAK,CAC5E;AACH;AAEA,SAASO,WAAWA,CAClBC,KAAmB,EACnBC,OAAkC,EAClCX,IAA4B,EAC5BY,UAA0B,EAAA;EAE1B,OAAOF,KAAK,CAACG,GAAG,CAAC,CAACC,IAAI,EAAEC,KAAK,KAAKC,UAAU,CAACF,IAAI,EAAEH,OAAO,EAAEX,IAAI,EAAEY,UAAU,EAAEG,KAAK,CAAC,CAAC;AACvF;AAEA,SAASE,cAAcA,CACrBH,IAA2C,EAC3CH,OAAkC,EAClCX,IAA4B,EAC5BY,UAA0B,EAC1BT,GAAW,EAAA;AAEX,EAAA,MAAMe,QAAQ,GAAGT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU,CAAC;EAEtE,IAAIE,IAAI,CAACK,MAAM,IAAIR,OAAO,GAAGG,IAAI,CAACK,MAAM,CAAC,EAAE;AACzC,IAAA;AAAA;AACE;AACAC,MAAAA,GAAA,CAACC,IAAI,EAAA;QAAW,YAAA,EAAYP,IAAI,CAACQ,kBAAmB;AAACC,QAAAA,OAAO,EAAEZ,OAAO,CAACG,IAAI,CAACK,MAAM,CAAE;AAAAD,QAAAA,QAAA,EAChFA;AAAQ,OAAA,EADAf,GAEL;AAAC;AAEX,EAAA;AAEA,EAAA,MAAMqB,aAAa,GAAGV,IAAI,CAACW,IAAI,GAAGC,YAAY,CAACZ,IAAI,CAACW,IAAI,CAAC,GAAGE,SAAS;EACrE,IAAIH,aAAa,IAAII,mBAAmB,CAACJ,aAAa,EAAEZ,UAAU,CAAC,EAAE;IACnE,oBACEQ,GAAA,CAACC,IAAI,EAAA;AAEHI,MAAAA,IAAI,EAAED,aAAc;MACpBK,MAAM,EAAEf,IAAI,CAACe,MAAO;MACpB,YAAA,EAAYf,IAAI,CAACQ,kBAAmB;AAAAJ,MAAAA,QAAA,EAEnCA;AAAQ,KAAA,EALJf,GAMD,CAAC;AAEX,EAAA;EAEA,oBAAOiB,GAAA,CAACU,QAAQ,EAAA;AAAAZ,IAAAA,QAAA,EAAYA;AAAQ,GAAA,EAAdf,GAAyB,CAAC;AAClD;AAEA,SAASa,UAAUA,CACjBF,IAAgB,EAChBH,OAAkC,EAClCX,IAA4B,EAC5BY,UAA0B,EAC1BT,GAAW,EAAA;EAEX,QAAQW,IAAI,CAACiB,IAAI;AACf,IAAA,KAAK,MAAM;MACT,oBACEX,GAAA,CAACU,QAAQ,EAAA;AAAAZ,QAAAA,QAAA,EAAYlB,IAAI,GAAGF,cAAc,CAACgB,IAAI,CAACkB,OAAO,EAAEhC,IAAI,CAAC,GAAGc,IAAI,CAACkB;AAAO,OAAA,EAA9D7B,GAAyE,CAAC;AAE7F,IAAA,KAAK,SAAS;MACZ,oBAAOiB,GAAA,CAAA,IAAA,EAAA,EAAA,EAASjB,GAAI,CAAG;AACzB,IAAA,KAAK,WAAW;AAChB,IAAA,KAAK,UAAU;AACf,IAAA,KAAK,UAAU;AACb,MAAA,oBACEiB,GAAA,CAAA,IAAA,EAAA;AAEEa,QAAAA,SAAS,EAAE,CAAA,yCAAA,EAA4CnB,IAAI,CAACiB,IAAI,CAAA,CAAG;QACnE,YAAA,EAAYjB,IAAI,CAACQ,kBAAmB;QAAAJ,QAAA,EAEnCT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EAJjDT,GAKH,CAAC;AAET,IAAA,KAAK,QAAQ;AACX,MAAA,oBACEiB,GAAA,CAAA,QAAA,EAAA;AAAkBa,QAAAA,SAAS,EAAC,mBAAmB;QAAC,YAAA,EAAYnB,IAAI,CAACQ,kBAAmB;QAAAJ,QAAA,EACjFT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EAD3CT,GAEL,CAAC;AAEb,IAAA,KAAK,eAAe;AAClB,MAAA,oBACEiB,GAAA,CAAA,KAAA,EAAA;AAAea,QAAAA,SAAS,EAAC,0BAA0B;QAAC,YAAA,EAAYnB,IAAI,CAACQ,kBAAmB;QAAAJ,QAAA,EACrFT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EAD9CT,GAEL,CAAC;AAEV,IAAA,KAAK,WAAW;AACd,MAAA,oBACEiB,GAAA,CAAA,GAAA,EAAA;AAAaa,QAAAA,SAAS,EAAC,sBAAsB;QAAAf,QAAA,EAC1CT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EADhDT,GAEL,CAAC;AAER,IAAA,KAAK,MAAM;MACT,OAAOc,cAAc,CAACH,IAAI,EAAEH,OAAO,EAAEX,IAAI,EAAEY,UAAU,EAAET,GAAG,CAAC;AAC/D;AACF;AAEA,SAAS+B,YAAYA,CAACxB,KAAmB,EAAA;AACvC,EAAA,KAAK,MAAMI,IAAI,IAAIJ,KAAK,EAAE;AACxB,IAAA,IAAII,IAAI,CAACiB,IAAI,KAAK,WAAW,EAAE;AAC7B,MAAA,OAAO,IAAI;AACb,IAAA;IACA,IAAI,UAAU,IAAIjB,IAAI,IAAIoB,YAAY,CAACpB,IAAI,CAACI,QAAQ,CAAC,EAAE;AACrD,MAAA,OAAO,IAAI;AACb,IAAA;AACF,EAAA;AACA,EAAA,OAAO,KAAK;AACd;AAEA;;;;;;;;;;;;AAYG;AACI,MAAMiB,MAAM,GAA0BA,CAAC;EAC5CjB,QAAQ;EACRlB,IAAI;AACJY,EAAAA,UAAU,GAAG,UAAU;EACvBD,OAAO;EACPyB,EAAE;EACFH,SAAS;AACT,EAAA,aAAa,EAAEI;AAAM,CACtB,KAAI;EACH,MAAMC,IAAI,GAAGC,OAAO,CAClB,MAAO,OAAOrB,QAAQ,KAAK,QAAQ,GAAGsB,WAAW,CAACtB,QAAQ,CAAC,GAAG,EAAG,EACjE,CAACA,QAAQ,CAAC,CACX;AAED,EAAA,IAAI,OAAOA,QAAQ,KAAK,QAAQ,EAAE;IAChC,IAAIA,QAAQ,IAAI,IAAI,EAAE;AACpB,MAAA,OAAO,IAAI;AACb,IAAA;AACA,IAAA,oBACEE,GAAA,CAAA,MAAA,EAAA;AAAMa,MAAAA,SAAS,EAAEA,SAAU;AAAC,MAAA,aAAA,EAAaI,MAAO;AAAAnB,MAAAA,QAAA,EAC7CA;AAAQ,KACL,CAAC;AAEX,EAAA;AAEA,EAAA,IAAIoB,IAAI,CAACG,MAAM,KAAK,CAAC,EAAE;AACrB,IAAA,OAAO,IAAI;AACb,EAAA;AAEA,EAAA,MAAMC,OAAO,GAAGN,EAAE,KAAKF,YAAY,CAACI,IAAI,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC;EAE3D,oBACElB,GAAA,CAACsB,OAAO,EAAA;AAACT,IAAAA,SAAS,EAAEA,SAAU;AAAC,IAAA,aAAA,EAAaI,MAAO;IAAAnB,QAAA,EAChDT,WAAW,CAAC6B,IAAI,EAAE3B,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,GACtC,CAAC;AAEd;;;;"}

package/build/Markup/constants.js

@@ -0,0 +1,21 @@
+'use strict';
+
+// Only these tags are recognised — anything else is treated as plain text (security allow-list)
+const ALLOWED_TAGS = ['important', 'positive', 'negative', 'strong', 'strikethrough', 'paragraph', 'p', 'link', 'a'];
+const TAG_ALIASES = {
+  p: 'paragraph',
+  a: 'link'
+};
+// Maximum recursive nesting before the parser emits tags as literal text (DoS protection)
+const MAX_NESTING_DEPTH = 32;
+// Only these link targets are allowed — others are stripped to prevent iframe breakout
+const ALLOWED_TARGETS = ['_blank', '_self'];
+// Only these protocols pass href validation — all others are blocked
+const ALLOWED_PROTOCOLS = ['https:', 'mailto:'];
+
+exports.ALLOWED_PROTOCOLS = ALLOWED_PROTOCOLS;
+exports.ALLOWED_TAGS = ALLOWED_TAGS;
+exports.ALLOWED_TARGETS = ALLOWED_TARGETS;
+exports.MAX_NESTING_DEPTH = MAX_NESTING_DEPTH;
+exports.TAG_ALIASES = TAG_ALIASES;
+//# sourceMappingURL=constants.js.map

package/build/Markup/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sources":["../../src/Markup/constants.ts"],"sourcesContent":["// Only these tags are recognised — anything else is treated as plain text (security allow-list)\nexport const ALLOWED_TAGS = [\n  'important',\n  'positive',\n  'negative',\n  'strong',\n  'strikethrough',\n  'paragraph',\n  'p',\n  'link',\n  'a',\n] as const;\n\nexport const TAG_ALIASES: Record<string, string> = { p: 'paragraph', a: 'link' };\n\n// Maximum recursive nesting before the parser emits tags as literal text (DoS protection)\nexport const MAX_NESTING_DEPTH = 32;\n\n// Only these link targets are allowed — others are stripped to prevent iframe breakout\nexport const ALLOWED_TARGETS = ['_blank', '_self'];\n\n// Only these protocols pass href validation — all others are blocked\nexport const ALLOWED_PROTOCOLS = ['https:', 'mailto:'];\n"],"names":["ALLOWED_TAGS","TAG_ALIASES","p","a","MAX_NESTING_DEPTH","ALLOWED_TARGETS","ALLOWED_PROTOCOLS"],"mappings":";;AAAA;AACO,MAAMA,YAAY,GAAG,CAC1B,WAAW,EACX,UAAU,EACV,UAAU,EACV,QAAQ,EACR,eAAe,EACf,WAAW,EACX,GAAG,EACH,MAAM,EACN,GAAG;AAGE,MAAMC,WAAW,GAA2B;AAAEC,EAAAA,CAAC,EAAE,WAAW;AAAEC,EAAAA,CAAC,EAAE;;AAExE;AACO,MAAMC,iBAAiB,GAAG;AAEjC;MACaC,eAAe,GAAG,CAAC,QAAQ,EAAE,OAAO;AAEjD;MACaC,iBAAiB,GAAG,CAAC,QAAQ,EAAE,SAAS;;;;;;;;"}

package/build/Markup/constants.mjs

@@ -0,0 +1,15 @@
+// Only these tags are recognised — anything else is treated as plain text (security allow-list)
+const ALLOWED_TAGS = ['important', 'positive', 'negative', 'strong', 'strikethrough', 'paragraph', 'p', 'link', 'a'];
+const TAG_ALIASES = {
+  p: 'paragraph',
+  a: 'link'
+};
+// Maximum recursive nesting before the parser emits tags as literal text (DoS protection)
+const MAX_NESTING_DEPTH = 32;
+// Only these link targets are allowed — others are stripped to prevent iframe breakout
+const ALLOWED_TARGETS = ['_blank', '_self'];
+// Only these protocols pass href validation — all others are blocked
+const ALLOWED_PROTOCOLS = ['https:', 'mailto:'];
+
+export { ALLOWED_PROTOCOLS, ALLOWED_TAGS, ALLOWED_TARGETS, MAX_NESTING_DEPTH, TAG_ALIASES };
+//# sourceMappingURL=constants.mjs.map

package/build/Markup/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.mjs","sources":["../../src/Markup/constants.ts"],"sourcesContent":["// Only these tags are recognised — anything else is treated as plain text (security allow-list)\nexport const ALLOWED_TAGS = [\n  'important',\n  'positive',\n  'negative',\n  'strong',\n  'strikethrough',\n  'paragraph',\n  'p',\n  'link',\n  'a',\n] as const;\n\nexport const TAG_ALIASES: Record<string, string> = { p: 'paragraph', a: 'link' };\n\n// Maximum recursive nesting before the parser emits tags as literal text (DoS protection)\nexport const MAX_NESTING_DEPTH = 32;\n\n// Only these link targets are allowed — others are stripped to prevent iframe breakout\nexport const ALLOWED_TARGETS = ['_blank', '_self'];\n\n// Only these protocols pass href validation — all others are blocked\nexport const ALLOWED_PROTOCOLS = ['https:', 'mailto:'];\n"],"names":["ALLOWED_TAGS","TAG_ALIASES","p","a","MAX_NESTING_DEPTH","ALLOWED_TARGETS","ALLOWED_PROTOCOLS"],"mappings":"AAAA;AACO,MAAMA,YAAY,GAAG,CAC1B,WAAW,EACX,UAAU,EACV,UAAU,EACV,QAAQ,EACR,eAAe,EACf,WAAW,EACX,GAAG,EACH,MAAM,EACN,GAAG;AAGE,MAAMC,WAAW,GAA2B;AAAEC,EAAAA,CAAC,EAAE,WAAW;AAAEC,EAAAA,CAAC,EAAE;;AAExE;AACO,MAAMC,iBAAiB,GAAG;AAEjC;MACaC,eAAe,GAAG,CAAC,QAAQ,EAAE,OAAO;AAEjD;MACaC,iBAAiB,GAAG,CAAC,QAAQ,EAAE,SAAS;;;;"}

package/build/Markup/utils/parseMarkup.js

@@ -0,0 +1,263 @@
+'use strict';
+
+var constants = require('../constants.js');
+
+const MAX_INPUT_LENGTH = 10_000;
+const MAX_ACCESSIBILITY_LABEL_LENGTH = 250;
+const OBJECT_PROTOTYPE_KEYS = new Set(Object.getOwnPropertyNames(Object.prototype));
+// eslint-disable-next-line regexp/no-control-character
+const CONTROL_CHARS = /[\x00-\x1f\x7f-\x9f]/g;
+const HTML_METACHAR = /[<>"']/g;
+/**
+ * Matches opening and closing tags from the ALLOWED_TAGS allow-list.
+ *
+ * Capture groups:
+ *  1. `/` if this is a closing tag, undefined otherwise
+ *  2. Tag name
+ *  3. Raw attribute string between the tag name and `>` (empty for closing tags)
+ *
+ * The lookahead `(?=[\s>/])` after the tag name ensures we don't match partial
+ * words — e.g. `<stronger>` won't be matched as `<strong>`.
+ *
+ * Global flag (`g`) allows iterative matching via `exec()`.
+ */
+const TAG_REGEX = new RegExp(`<(\\/)?(${constants.ALLOWED_TAGS.join('|')})(?=[\\s>/])((?:[^>"']*(?:"[^"]*"|'[^']*'))*[^>"']*)>`, 'g');
+/**
+ * Splits the input string into a flat list of tokens by scanning for known tags.
+ * Text between tags is emitted as text/newline tokens. Unrecognised tags are never
+ * tokenised — they remain part of the surrounding text content.
+ */
+function tokenise(input) {
+  const tokens = [];
+  let lastIndex = 0;
+  TAG_REGEX.lastIndex = 0;
+  let match = TAG_REGEX.exec(input);
+  while (match !== null) {
+    if (match.index > lastIndex) {
+      pushTextWithNewlines(tokens, input.slice(lastIndex, match.index));
+    }
+    const isClose = match[1] === '/';
+    const tag = match[2];
+    const attrs = match[3] || '';
+    if (isClose) {
+      tokens.push({
+        type: 'close',
+        tag
+      });
+    } else {
+      tokens.push({
+        type: 'open',
+        tag,
+        attrs
+      });
+    }
+    lastIndex = TAG_REGEX.lastIndex;
+    match = TAG_REGEX.exec(input);
+  }
+  if (lastIndex < input.length) {
+    pushTextWithNewlines(tokens, input.slice(lastIndex));
+  }
+  return tokens;
+}
+/** Splits a text fragment on newline characters, interleaving newline tokens between parts. */
+function pushTextWithNewlines(tokens, text) {
+  const parts = text.split('\n');
+  for (let index = 0; index < parts.length; index += 1) {
+    if (index > 0) {
+      tokens.push({
+        type: 'newline'
+      });
+    }
+    if (parts[index]) {
+      tokens.push({
+        type: 'text',
+        content: parts[index]
+      });
+    }
+  }
+}
+/**
+ * Recursive descent parser that consumes tokens and builds a MarkupNode tree.
+ *
+ * When `untilTag` is provided, the function collects nodes until it finds a matching
+ * close token — returning `{ closed: true }`. If it exhausts all tokens without finding
+ * the close, it returns `{ closed: false }` so the caller can fall back to plain text
+ * (graceful degradation for malformed input).
+ *
+ * The shared `position` object acts as a cursor across recursive calls, avoiding the
+ * need to slice or copy the token array.
+ */
+function parse(tokens, position, untilTag, depth = 0) {
+  const nodes = [];
+  while (position.index < tokens.length) {
+    const token = tokens[position.index];
+    if (token.type === 'text') {
+      nodes.push({
+        type: 'text',
+        content: token.content
+      });
+      position.index += 1;
+    } else if (token.type === 'newline') {
+      nodes.push({
+        type: 'newline'
+      });
+      position.index += 1;
+    } else if (token.type === 'close') {
+      if (token.tag === untilTag) {
+        position.index += 1;
+        return {
+          closed: true,
+          nodes
+        };
+      }
+      // Mismatched close tag — render as literal text
+      nodes.push({
+        type: 'text',
+        content: `</${token.tag}>`
+      });
+      position.index += 1;
+    } else if (token.type === 'open') {
+      if (depth >= constants.MAX_NESTING_DEPTH) {
+        nodes.push({
+          type: 'text',
+          content: `<${token.tag}${token.attrs}>`
+        });
+        position.index += 1;
+      } else {
+        position.index += 1;
+        const result = parse(tokens, position, token.tag, depth + 1);
+        if (result.closed) {
+          const node = buildNode(token.tag, token.attrs, result.nodes);
+          nodes.push(node);
+        } else {
+          nodes.push({
+            type: 'text',
+            content: `<${token.tag}${token.attrs}>`
+          });
+          nodes.push(...result.nodes);
+        }
+      }
+    }
+  }
+  if (untilTag) {
+    return {
+      closed: false,
+      nodes
+    };
+  }
+  return {
+    closed: true,
+    nodes
+  };
+}
+/**
+ * Maps a raw tag name to a typed MarkupNode. Resolves aliases first (p→paragraph, a→link),
+ * then builds the appropriate node shape. Link nodes carry full attributes; other element
+ * nodes extract only accessibilityLabel.
+ */
+function buildNode(rawTag, attrs, children) {
+  const tag = constants.TAG_ALIASES[rawTag] || rawTag;
+  if (tag === 'link') {
+    return {
+      type: 'link',
+      children,
+      ...parseAttributes(attrs)
+    };
+  }
+  if (tag === 'paragraph') {
+    return {
+      type: 'paragraph',
+      children
+    };
+  }
+  const {
+    accessibilityLabel
+  } = parseAttributes(attrs);
+  return {
+    type: tag,
+    children,
+    ...(accessibilityLabel && {
+      accessibilityLabel
+    })
+  };
+}
+/**
+ * Matches allow-listed attributes from the raw attribute string captured by TAG_REGEX.
+ * Requires whitespace before each attribute name to prevent matching inside quoted values.
+ *
+ * Example: for input ` href="https://wise.com" target="_blank"`
+ *  - Match 1: groups = ['href', 'https://wise.com', undefined]
+ *  - Match 2: groups = ['target', '_blank', undefined]
+ *
+ * Capture groups:
+ *  1. Attribute name (href, action, target, or accessibilityLabel)
+ *  2. Double-quoted value (if present)
+ *  3. Single-quoted value (if present)
+ */
+const ATTR_REGEX = /(?<=\s)(href|action|target|accessibilityLabel)=(?:"([^"]*)"|'([^']*)')/g;
+/**
+ * Extracts allowed attributes from a raw attribute string.
+ * Supports both double- and single-quoted values. Any attribute not in the
+ * allow-list (href, action, target, accessibilityLabel) is silently discarded.
+ * First occurrence wins — duplicates are ignored.
+ */
+function parseAttributes(attrs) {
+  const result = {};
+  ATTR_REGEX.lastIndex = 0;
+  let match = ATTR_REGEX.exec(attrs);
+  while (match !== null) {
+    const key = match[1];
+    const value = match[2] ?? match[3];
+    if (!(key in result)) {
+      const sanitized = sanitizeAttributeValue(key, value);
+      if (sanitized !== undefined) {
+        result[key] = sanitized;
+      }
+    }
+    match = ATTR_REGEX.exec(attrs);
+  }
+  return result;
+}
+function sanitizeAttributeValue(key, value) {
+  switch (key) {
+    case 'href':
+      return value.replace(CONTROL_CHARS, '');
+    case 'action':
+      if (OBJECT_PROTOTYPE_KEYS.has(value)) {
+        return undefined;
+      }
+      return value;
+    case 'target':
+      if (!constants.ALLOWED_TARGETS.includes(value)) {
+        return undefined;
+      }
+      return value;
+    case 'accessibilityLabel':
+      return value.replace(HTML_METACHAR, '').slice(0, MAX_ACCESSIBILITY_LABEL_LENGTH);
+    default:
+      return undefined;
+  }
+}
+/** Entry point: tokenises the input string, then parses the token stream into a MarkupNode tree. */
+function parseMarkup(input) {
+  if (!input) {
+    return [];
+  }
+  if (input.length > MAX_INPUT_LENGTH) {
+    return [{
+      type: 'text',
+      content: input
+    }];
+  }
+  const tokens = tokenise(input);
+  const position = {
+    index: 0
+  };
+  return parse(tokens, position).nodes;
+}
+
+exports.MAX_NESTING_DEPTH = constants.MAX_NESTING_DEPTH;
+exports.MAX_ACCESSIBILITY_LABEL_LENGTH = MAX_ACCESSIBILITY_LABEL_LENGTH;
+exports.MAX_INPUT_LENGTH = MAX_INPUT_LENGTH;
+exports.parseMarkup = parseMarkup;
+//# sourceMappingURL=parseMarkup.js.map