@trinityui/design-system 2.11.0 → 2.11.1

package/dist/components/AI/AIChainOfThought.d.ts

@@ -87,7 +87,45 @@
  * ```
  */
 import React from 'react';
+import { Theme } from '@mui/material';
+import { type CSSObject } from '@mui/material/styles';
 import type { StepStatus, PhaseStatus, ChainSource, TaskError, ExecutionTask, ChainArtifact, OutputStat, InsightMetric, InsightReference, UnderstandingPhase, PlanPhase, ExecutionPhase, OutputPhase, InsightPhase, ChainPhase, AIChainOfThoughtProps } from './AIChainOfThought.types';
+/**
+ * @internal
+ * Primary tint behind `<mark>` per mode, calibrated so the highlight measures at
+ * least 1.5:1 against the thought and insight surfaces and text.primary on it
+ * at least 7:1 (asserted in AIChainOfThought.security.test.tsx).
+ */
+export declare const MARK_TINT: {
+    readonly light: 0.24;
+    readonly dark: 0.32;
+};
+/**
+ * @internal
+ * Styles for the links and highlights the allowlist keeps. Links resolve the
+ * theme's link role like MUI Link with its default props: the colour prop (MUI
+ * Link's default, or a theme MuiLink defaultProps colour) gives the base colour,
+ * and a root style override goes on top — an object, or a function called with
+ * MUI Link's default props (color, component, variant), the ownerState built from
+ * them plus theme defaultProps, and the theme. One rule styles every link, so
+ * per-link props (href, className, style, children) are not available to it.
+ * Other override slots and `variants` are not applied; an override that throws
+ * falls back to the base colour. A link
+ * inside a highlight keeps the highlight's text colour: the link colour on the
+ * tint can fall below 4.5:1, and the underline still marks the link.
+ */
+export declare const safeContentSx: {
+    readonly '& a': (theme: Theme) => CSSObject;
+    readonly '& mark': {
+        readonly backgroundColor: (theme: Theme) => string;
+        readonly color: "text.primary";
+        readonly borderRadius: "4px";
+        readonly px: 0.25;
+    };
+    readonly '& mark a, & mark a:hover': {
+        readonly color: "inherit";
+    };
+};
 export type { StepStatus, PhaseStatus, ChainSource, TaskError, ExecutionTask, ChainArtifact, OutputStat, InsightMetric, InsightReference, UnderstandingPhase, PlanPhase, ExecutionPhase, OutputPhase, InsightPhase, ChainPhase, AIChainOfThoughtProps, };
 /**
  * AIChainOfThought — Evolved reasoning UI.

package/dist/components/AI/AIChainOfThought.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AIChainOfThought.d.ts","sourceRoot":"","sources":["../../../src/components/AI/AIChainOfThought.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuFG;AAEH,OAAO,KAAmD,MAAM,OAAO,CAAC;AAsBxE,OAAO,KAAK,EACV,UAAU,EACV,WAAW,EACX,WAAW,EACX,SAAS,EACT,aAAa,EACb,aAAa,EACb,UAAU,EACV,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,SAAS,EACT,cAAc,EACd,WAAW,EACX,YAAY,EACZ,UAAU,EACV,qBAAqB,EACtB,MAAM,0BAA0B,CAAC;AAIlC,YAAY,EACV,UAAU,EACV,WAAW,EACX,WAAW,EACX,SAAS,EACT,aAAa,EACb,aAAa,EACb,UAAU,EACV,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,SAAS,EACT,cAAc,EACd,WAAW,EACX,YAAY,EACZ,UAAU,EACV,qBAAqB,GACtB,CAAC;AAqvCF;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,8FAwO5B,CAAC"}
+{"version":3,"file":"AIChainOfThought.d.ts","sourceRoot":"","sources":["../../../src/components/AI/AIChainOfThought.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuFG;AAEH,OAAO,KAAmD,MAAM,OAAO,CAAC;AACxE,OAAO,EAQL,KAAK,EAEN,MAAM,eAAe,CAAC;AACvB,OAAO,EAAS,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAY7D,OAAO,KAAK,EACV,UAAU,EACV,WAAW,EACX,WAAW,EACX,SAAS,EACT,aAAa,EACb,aAAa,EACb,UAAU,EACV,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,SAAS,EACT,cAAc,EACd,WAAW,EACX,YAAY,EACZ,UAAU,EACV,qBAAqB,EACtB,MAAM,0BAA0B,CAAC;AASlC;;;;;GAKG;AACH,eAAO,MAAM,SAAS;;;CAAuC,CAAC;AAsB9D;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,aAAa;4BACT,KAAK,KAAG,SAAS;;0CAkBL,KAAK;;;;;;;;CAMxB,CAAC;AAGX,YAAY,EACV,UAAU,EACV,WAAW,EACX,WAAW,EACX,SAAS,EACT,aAAa,EACb,aAAa,EACb,UAAU,EACV,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,SAAS,EACT,cAAc,EACd,WAAW,EACX,YAAY,EACZ,UAAU,EACV,qBAAqB,GACtB,CAAC;AA6vCF;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,8FAwO5B,CAAC"}

package/dist/components/AI/AIChainOfThought.types.d.ts

@@ -105,7 +105,12 @@ export interface PhaseBase {
 /** Understanding phase — thought bubbles + sources */
 export interface UnderstandingPhase extends PhaseBase {
     type: 'understanding';
-    /** Thought bubble contents (supports HTML: strong, code) */
+    /**
+     * Thought bubble contents. Treated as untrusted: rendered through the safe-content
+     * allowlist (b, strong, i, em, code, br, p, ul, ol, li, span, a, mark). Links keep
+     * only http(s)/mailto/tel/relative hrefs; every other tag, attribute and handler
+     * is removed or shown as text.
+     */
     thoughts: string[];
     /** Sources consulted */
     sources?: ChainSource[];
@@ -141,7 +146,12 @@ export interface OutputPhase extends PhaseBase {
 /** Insight phase — highlighted body, metrics, references */
 export interface InsightPhase extends PhaseBase {
     type: 'insight';
-    /** The insight body (supports HTML: p, strong, code, span.insight-highlight) */
+    /**
+     * The insight body. Treated as untrusted: rendered through the safe-content
+     * allowlist (b, strong, i, em, code, br, p, ul, ol, li, span, a, mark), with
+     * `<span class="insight-highlight">` for highlights. Links keep only
+     * http(s)/mailto/tel/relative hrefs; everything else is removed or shown as text.
+     */
     content: string;
     /** Optional confidence 0-1 */
     confidence?: number;

package/dist/components/AI/AIChainOfThought.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AIChainOfThought.types.d.ts","sourceRoot":"","sources":["../../../src/components/AI/AIChainOfThought.types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,6CAA6C;AAC7C,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,OAAO,GAAG,UAAU,CAAC;AAEpF,gCAAgC;AAChC,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAC;AAIvE,MAAM,WAAW,WAAW;IAC1B,gBAAgB;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mBAAmB;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAID,MAAM,WAAW,SAAS;IACxB,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,iBAAiB;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oBAAoB;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,MAAM,EAAE,UAAU,CAAC;IACnB,6CAA6C;IAC7C,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,wBAAwB;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID,MAAM,WAAW,aAAa;IAC5B,gBAAgB;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wBAAwB;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sCAAsC;IACtC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,oBAAoB;IACpB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CACtB;AAID,MAAM,WAAW,UAAU;IACzB,gBAAgB;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iBAAiB;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAID,MAAM,WAAW,aAAa;IAC5B,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAC;CACf;AAID,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sBAAsB;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAID,MAAM,WAAW,SAAS;IACxB,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,sDAAsD;AACtD,MAAM,WAAW,kBAAmB,SAAQ,SAAS;IACnD,IAAI,EAAE,eAAe,CAAC;IACtB,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,wBAAwB;IACxB,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;CACzB;AAED,2DAA2D;AAC3D,MAAM,WAAW,SAAU,SAAQ,SAAS;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IACnB,sCAAsC;IACtC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAe,SAAQ,SAAS;IAC/C,IAAI,EAAE,WAAW,CAAC;IAClB,sBAAsB;IACtB,KAAK,EAAE,aAAa,EAAE,CAAC;CACxB;AAED,8CAA8C;AAC9C,MAAM,WAAW,WAAY,SAAQ,SAAS;IAC5C,IAAI,EAAE,QAAQ,CAAC;IACf,oBAAoB;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0BAA0B;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB;IAChB,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB,qBAAqB;IACrB,SAAS,EAAE,aAAa,EAAE,CAAC;CAC5B;AAED,4DAA4D;AAC5D,MAAM,WAAW,YAAa,SAAQ,SAAS;IAC7C,IAAI,EAAE,SAAS,CAAC;IAChB,gFAAgF;IAChF,OAAO,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB;IAClB,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAC1B,2BAA2B;IAC3B,UAAU,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACjC;AAED,6CAA6C;AAC7C,MAAM,MAAM,UAAU,GAClB,kBAAkB,GAClB,SAAS,GACT,cAAc,GACd,WAAW,GACX,YAAY,CAAC;AAMjB,MAAM,WAAW,qBAAqB;IACpC,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,iEAAiE;IACjE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mDAAmD;IACnD,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;mFAC+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,wCAAwC;IACxC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC7B,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,kDAAkD;IAClD,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7C,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;KAAE,CAAC,CAAC;IAClE,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;IACpB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;IACzC,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,qDAAqD;IACrD,UAAU,CAAC,EAAE,MAAM,IAAI,CAAC;IACxB,gBAAgB;IAChB,EAAE,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;CACrB"}
+{"version":3,"file":"AIChainOfThought.types.d.ts","sourceRoot":"","sources":["../../../src/components/AI/AIChainOfThought.types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,6CAA6C;AAC7C,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,OAAO,GAAG,UAAU,CAAC;AAEpF,gCAAgC;AAChC,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAC;AAIvE,MAAM,WAAW,WAAW;IAC1B,gBAAgB;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mBAAmB;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAID,MAAM,WAAW,SAAS;IACxB,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,iBAAiB;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oBAAoB;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,MAAM,EAAE,UAAU,CAAC;IACnB,6CAA6C;IAC7C,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,wBAAwB;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID,MAAM,WAAW,aAAa;IAC5B,gBAAgB;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wBAAwB;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sCAAsC;IACtC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,oBAAoB;IACpB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CACtB;AAID,MAAM,WAAW,UAAU;IACzB,gBAAgB;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iBAAiB;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAID,MAAM,WAAW,aAAa;IAC5B,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAC;CACf;AAID,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sBAAsB;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAID,MAAM,WAAW,SAAS;IACxB,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,sDAAsD;AACtD,MAAM,WAAW,kBAAmB,SAAQ,SAAS;IACnD,IAAI,EAAE,eAAe,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,wBAAwB;IACxB,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;CACzB;AAED,2DAA2D;AAC3D,MAAM,WAAW,SAAU,SAAQ,SAAS;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IACnB,sCAAsC;IACtC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAe,SAAQ,SAAS;IAC/C,IAAI,EAAE,WAAW,CAAC;IAClB,sBAAsB;IACtB,KAAK,EAAE,aAAa,EAAE,CAAC;CACxB;AAED,8CAA8C;AAC9C,MAAM,WAAW,WAAY,SAAQ,SAAS;IAC5C,IAAI,EAAE,QAAQ,CAAC;IACf,oBAAoB;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0BAA0B;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB;IAChB,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB,qBAAqB;IACrB,SAAS,EAAE,aAAa,EAAE,CAAC;CAC5B;AAED,4DAA4D;AAC5D,MAAM,WAAW,YAAa,SAAQ,SAAS;IAC7C,IAAI,EAAE,SAAS,CAAC;IAChB;;;;;OAKG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB;IAClB,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAC1B,2BAA2B;IAC3B,UAAU,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACjC;AAED,6CAA6C;AAC7C,MAAM,MAAM,UAAU,GAClB,kBAAkB,GAClB,SAAS,GACT,cAAc,GACd,WAAW,GACX,YAAY,CAAC;AAMjB,MAAM,WAAW,qBAAqB;IACpC,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,iEAAiE;IACjE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mDAAmD;IACnD,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;mFAC+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,wCAAwC;IACxC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC7B,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,kDAAkD;IAClD,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7C,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;KAAE,CAAC,CAAC;IAClE,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;IACpB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;IACzC,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,qDAAqD;IACrD,UAAU,CAAC,EAAE,MAAM,IAAI,CAAC;IACxB,gBAAgB;IAChB,EAAE,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;CACrB"}

package/dist/components/AI/AISources.d.ts

@@ -23,13 +23,21 @@ export interface AISourceProps {
     number: number;
     /** Source title */
     title: string;
-    /** Source URL */
+    /**
+     * Source URL. Only http(s), mailto, tel and relative URLs become a link (new
+     * tab, `rel="noopener noreferrer"`); any other scheme is shown as plain text,
+     * with a development warning.
+     */
     url?: string;
     /** Source description/snippet */
     description?: string;
     /** Source type (webpage, document, etc.) */
     type?: 'webpage' | 'document' | 'article' | 'video' | 'other';
-    /** Favicon URL */
+    /**
+     * Favicon URL: http(s), `blob:`, relative or a raster `data:image/*` source,
+     * loaded lazily without a referrer. Other sources are not loaded (development
+     * warning).
+     */
     favicon?: string;
     /** Click handler */
     onClick?: () => void;

package/dist/components/AI/AISources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AISources.d.ts","sourceRoot":"","sources":["../../../src/components/AI/AISources.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAmB,MAAM,OAAO,CAAC;AACxC,OAAO,EAUL,OAAO,EACP,KAAK,EACN,MAAM,eAAe,CAAC;AAUvB;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,oBAAoB;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,mBAAmB;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4CAA4C;IAC5C,IAAI,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;IAC9D,kBAAkB;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oBAAoB;IACpB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,sBAAsB;IACtB,EAAE,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;CACrB;AAED;;GAEG;AACH,eAAO,MAAM,QAAQ,sFA4HnB,CAAC;AAMH;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,sBAAsB;IACtB,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC;IACzC,oBAAoB;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,6BAA6B;IAC7B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,yDAAyD;IACzD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2BAA2B;IAC3B,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,KAAK,IAAI,CAAC;IAC/E,sBAAsB;IACtB,EAAE,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;CACrB;AAED;;GAEG;AACH,eAAO,MAAM,gBAAgB,8FA+E5B,CAAC"}
+{"version":3,"file":"AISources.d.ts","sourceRoot":"","sources":["../../../src/components/AI/AISources.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAmB,MAAM,OAAO,CAAC;AACxC,OAAO,EAUL,OAAO,EACP,KAAK,EACN,MAAM,eAAe,CAAC;AAWvB;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,oBAAoB;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,mBAAmB;IACnB,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4CAA4C;IAC5C,IAAI,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;IAC9D;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oBAAoB;IACpB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,sBAAsB;IACtB,EAAE,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;CACrB;AAED;;GAEG;AACH,eAAO,MAAM,QAAQ,sFA+InB,CAAC;AAMH;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,sBAAsB;IACtB,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC;IACzC,oBAAoB;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,6BAA6B;IAC7B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,yDAAyD;IACzD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2BAA2B;IAC3B,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,KAAK,IAAI,CAAC;IAC/E,sBAAsB;IACtB,EAAE,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;CACrB;AAED;;GAEG;AACH,eAAO,MAAM,gBAAgB,8FA+E5B,CAAC"}

package/dist/components/AI/AITextBlock.d.ts

@@ -13,7 +13,7 @@
  * | `**bold**` | `<strong>` |
  * | `*italic*` or `_italic_` | `<em>` |
  * | `` `code` `` | `<code>` with monospace styling |
- * | `[text](url)` | `<a>` (opens in a new tab with `rel="noopener"`) |
+ * | `[text](url)` | `<a>` for http(s), mailto, tel and relative URLs (new tab, `rel="noopener noreferrer"`); other schemes render as text |
  * | `# Heading 1` through `###### Heading 6` | `<h1>`–`<h6>` |
  * | `- item` or `* item` | `<ul><li>` (unordered list) |
  * | `1. item` | `<ol><li>` (ordered list) |
@@ -36,7 +36,9 @@
  *
  * The parser does NOT execute HTML — incoming content is split and reassembled
  * via React elements, so `<script>`, `<iframe>`, etc. in the source string are
- * rendered as literal text, not parsed.
+ * rendered as literal text, not parsed. Link URLs pass the shared link policy
+ * (ADR-09): `javascript:`, `data:`, `vbscript:` and other schemes — including
+ * obfuscated forms — render as plain text, with a development warning.
  *
  * @example Plain text
  * ```tsx

package/dist/components/AI/AITextBlock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AITextBlock.d.ts","sourceRoot":"","sources":["../../../src/components/AI/AITextBlock.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAyB,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,SAAS,CAAC;AAOzC;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,mCAAmC;IACnC,OAAO,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IAC/B,sCAAsC;IACtC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,sCAAsC;IACtC,EAAE,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;CACrB;AAMD;;;;;;;;GAQG;AACH,eAAO,MAAM,WAAW,sFA2BtB,CAAC;AA8lBH,eAAe,WAAW,CAAC"}
+{"version":3,"file":"AITextBlock.d.ts","sourceRoot":"","sources":["../../../src/components/AI/AITextBlock.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAyB,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtE,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,SAAS,CAAC;AAOzC;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,mCAAmC;IACnC,OAAO,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IAC/B,sCAAsC;IACtC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,sCAAsC;IACtC,EAAE,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;CACrB;AAMD;;;;;;;;GAQG;AACH,eAAO,MAAM,WAAW,sFA2BtB,CAAC;AAymBH,eAAe,WAAW,CAAC"}

package/dist/components/AI/InsightEngineInput.d.ts

@@ -55,7 +55,11 @@ export interface AttachmentFile {
     size?: number;
     /** MIME type, used to choose the file-type icon */
     type?: string;
-    /** Image preview URL (object URL or remote). When set, shown as a thumbnail. */
+    /**
+     * Image preview URL, shown as a thumbnail: an object (blob:) URL, an http(s) or
+     * relative URL, or a raster `data:image/*`. Any other scheme (e.g. javascript:,
+     * data:image/svg+xml) falls back to the file-type icon.
+     */
     previewUrl?: string;
     /** Upload state. Omit (or `'done'`) for a settled file. */
     status?: AttachmentStatus;

package/dist/components/AI/InsightEngineInput.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"InsightEngineInput.d.ts","sourceRoot":"","sources":["../../../src/components/AI/InsightEngineInput.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAmD,MAAM,OAAO,CAAC;AACxE,OAAO,EAiBL,OAAO,EACP,KAAK,EACN,MAAM,eAAe,CAAC;AAGvB,OAAO,EAAiB,KAAK,cAAc,EAAE,KAAK,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC7G,OAAO,EAAe,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAMhE,MAAM,WAAW,WAAW;IAC1B,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yBAAyB;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,yBAAyB;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,gDAAgD;AAChD,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,OAAO,GAAG,MAAM,CAAC;AAE9D,MAAM,WAAW,cAAc;IAC7B,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,6BAA6B;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mFAAmF;IACnF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,iCAAiC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,uBAAuB;IACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oBAAoB;IACpB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AA8GD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,qBAAqB;IACrB,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,sDAAsD;IACtD,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IACnC,wCAAwC;IACxC,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACjE,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,IAAI,CAAC;IACtD,gCAAgC;IAChC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAGnB,0BAA0B;IAC1B,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACvB,kCAAkC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2BAA2B;IAC3B,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAG1C,gDAAgD;IAChD,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,8DAA8D;IAC9D,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IAG9D,+BAA+B;IAC/B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gCAAgC;IAChC,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IAC/C,kCAAkC;IAClC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,mCAAmC;IACnC,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IAGlD,oCAAoC;IACpC,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;IAC1B,4EAA4E;IAC5E,WAAW,CAAC,EAAE,OAAO,CAAC;IAGtB,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAC;IAC9B,8DAA8D;IAC9D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,6CAA6C;IAC7C,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAC;IAC9B,6EAA6E;IAC7E,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B,6DAA6D;IAC7D,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAG7C;;;;OAIG;IACH,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAGhC,qFAAqF;IACrF,iBAAiB,CAAC,EAAE,MAAM,IAAI,CAAC;IAC/B;;;OAGG;IACH,WAAW,CAAC,EAAE,cAAc,EAAE,CAAC;IAC/B,mEAAmE;IACnE,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC;IAC1C,gEAAgE;IAChE,YAAY,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,qGAAqG;IACrG,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yFAAyF;IACzF,eAAe,CAAC,EAAE,MAAM,CAAC;IAGzB,wCAAwC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,kCAAkC;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;OAIG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,sBAAsB;IACtB,EAAE,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;CACrB;AAMD,eAAO,MAAM,kBAAkB,gGAi7B7B,CAAC;AAEH,eAAe,kBAAkB,CAAC"}
+{"version":3,"file":"InsightEngineInput.d.ts","sourceRoot":"","sources":["../../../src/components/AI/InsightEngineInput.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAmD,MAAM,OAAO,CAAC;AACxE,OAAO,EAiBL,OAAO,EACP,KAAK,EACN,MAAM,eAAe,CAAC;AAIvB,OAAO,EAAiB,KAAK,cAAc,EAAE,KAAK,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC7G,OAAO,EAAe,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAMhE,MAAM,WAAW,WAAW;IAC1B,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yBAAyB;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,yBAAyB;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,gDAAgD;AAChD,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,OAAO,GAAG,MAAM,CAAC;AAE9D,MAAM,WAAW,cAAc;IAC7B,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,6BAA6B;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mFAAmF;IACnF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,iCAAiC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,uBAAuB;IACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oBAAoB;IACpB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AA8GD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,qBAAqB;IACrB,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,sDAAsD;IACtD,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IACnC,wCAAwC;IACxC,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACjE,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,IAAI,CAAC;IACtD,gCAAgC;IAChC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAGnB,0BAA0B;IAC1B,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACvB,kCAAkC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2BAA2B;IAC3B,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAG1C,gDAAgD;IAChD,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,8DAA8D;IAC9D,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IAG9D,+BAA+B;IAC/B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gCAAgC;IAChC,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IAC/C,kCAAkC;IAClC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,mCAAmC;IACnC,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IAGlD,oCAAoC;IACpC,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;IAC1B,4EAA4E;IAC5E,WAAW,CAAC,EAAE,OAAO,CAAC;IAGtB,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAC;IAC9B,8DAA8D;IAC9D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,6CAA6C;IAC7C,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAC;IAC9B,6EAA6E;IAC7E,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B,6DAA6D;IAC7D,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAG7C;;;;OAIG;IACH,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAGhC,qFAAqF;IACrF,iBAAiB,CAAC,EAAE,MAAM,IAAI,CAAC;IAC/B;;;OAGG;IACH,WAAW,CAAC,EAAE,cAAc,EAAE,CAAC;IAC/B,mEAAmE;IACnE,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC;IAC1C,gEAAgE;IAChE,YAAY,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,qGAAqG;IACrG,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yFAAyF;IACzF,eAAe,CAAC,EAAE,MAAM,CAAC;IAGzB,wCAAwC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,kCAAkC;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;OAIG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,sBAAsB;IACtB,EAAE,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;CACrB;AAMD,eAAO,MAAM,kBAAkB,gGA07B7B,CAAC;AAEH,eAAe,kBAAkB,CAAC"}

package/dist/components/HtmlToMui/HtmlToMui.d.ts

@@ -3,13 +3,16 @@
  * @module components/HtmlToMui
  * @example
  * ```tsx
- * import { HtmlToMui } from '@trinityui/design-system';
+ * // Internal component: not exported from the package yet (export decision OD-I7).
+ * import { HtmlToMui } from '../components/HtmlToMui';
  *
  * <HtmlToMui html="<h2>Overview</h2><p><strong>Safe</strong> rich content.</p>" />
  * ```
  */
 import * as React from "react";
 import { type SxProps, type Theme, type TypographyProps } from "@mui/material";
+/** Untrusted-content policies come from one shared module (ADR-09). */
+type RemoteImagePolicy = "block" | "allow";
 export interface HtmlToMuiProps {
     /**
      * Raw HTML to convert.
@@ -29,11 +32,38 @@ export interface HtmlToMuiProps {
      */
     className?: string;
     /**
-     * When true, strips unsafe tags/attributes before rendering.
+     * When true, drops dangerous elements (script, style, iframe, object, form, svg, …)
+     * together with their content. URL, style and class policies always apply,
+     * whatever this is set to.
      * @default true
      */
     sanitize?: boolean;
+    /**
+     * Remote (http, https, protocol-relative) image sources. `"block"` removes them
+     * so untrusted content cannot fetch third-party URLs (tracking pixels);
+     * relative, `blob:` and raster `data:image/*` sources always render.
+     * @default "block"
+     */
+    remoteImages?: RemoteImagePolicy;
+    /**
+     * Restrict passed-through `class` tokens to this list. When omitted, every class
+     * except MUI (`Mui*`, `Mui-*`, `mui-*`, any case) and Emotion (`css-*`) names
+     * passes through — untrusted
+     * content can still match your own global class selectors, so set this when
+     * the HTML is not fully trusted.
+     */
+    allowedClasses?: readonly string[];
 }
+/**
+ * Converts an HTML string into MUI-styled React nodes through the shared
+ * safe-content policies (ADR-09).
+ *
+ * Known issue (SSR): parsing needs `DOMParser`. Where it is unavailable (server
+ * rendering), the component renders the tag-stripped text in one paragraph, and
+ * the client then renders the parsed tree, so hydration does not match. Recorded
+ * as an ADR-27 (3) waiver owned by remediation Step 8; render it client-only, or
+ * use `renderSafeHtml`-based components, when server rendering matters.
+ */
 export declare const HtmlToMui: React.ForwardRefExoticComponent<HtmlToMuiProps & React.RefAttributes<HTMLDivElement>>;
 export default HtmlToMui;
 //# sourceMappingURL=HtmlToMui.d.ts.map

package/dist/components/HtmlToMui/HtmlToMui.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"HtmlToMui.d.ts","sourceRoot":"","sources":["../../../src/components/HtmlToMui/HtmlToMui.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EASL,KAAK,OAAO,EACZ,KAAK,KAAK,EACV,KAAK,eAAe,EACrB,MAAM,eAAe,CAAC;AAmFvB,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,kBAAkB,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IAChD;;OAEG;IACH,EAAE,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACpB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAqOD,eAAO,MAAM,SAAS,uFA6BpB,CAAC;AAEH,eAAe,SAAS,CAAC"}
+{"version":3,"file":"HtmlToMui.d.ts","sourceRoot":"","sources":["../../../src/components/HtmlToMui/HtmlToMui.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAWL,KAAK,OAAO,EACZ,KAAK,KAAK,EACV,KAAK,eAAe,EACrB,MAAM,eAAe,CAAC;AAUvB,uEAAuE;AACvE,KAAK,iBAAiB,GAAG,OAAO,GAAG,OAAO,CAAC;AAgD3C,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,kBAAkB,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IAChD;;OAEG;IACH,EAAE,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACpB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAmRD;;;;;;;;;GASG;AACH,eAAO,MAAM,SAAS,uFAyCpB,CAAC;AAEH,eAAe,SAAS,CAAC"}

package/dist/components/SandboxedIframeRenderer/SandboxedIframeRenderer.d.ts

@@ -3,7 +3,8 @@
  * @module components/SandboxedIframeRenderer
  * @example
  * ```tsx
- * import { SandboxedIframeRenderer } from '@trinityui/design-system';
+ * // Internal component: not exported from the package yet.
+ * import { SandboxedIframeRenderer } from '../components/SandboxedIframeRenderer';
  *
  * <SandboxedIframeRenderer
  *   title="Policy Preview"
@@ -36,14 +37,32 @@ export interface SandboxedIframeRendererProps {
     /**
      * Sandbox preset:
      * - strict: no scripts allowed
-     * - interactive: allows scripts inside iframe only
-     * @default "interactive"
+     * - interactive: allows scripts inside iframe only (never same-origin access)
+     * @default "strict"
      */
     sandboxPreset?: SandboxPreset;
     /**
-     * Explicit sandbox value override.
+     * Explicit sandbox value override. Tokens are normalised to lower case (as
+     * browsers read them), and `allow-same-origin` is always removed when combined
+     * with `allow-scripts`, because together they let the framed content remove
+     * its own sandbox. Without `allow-same-origin` the framed document has an
+     * opaque origin, so its navigations send no referrer; adding it (without
+     * scripts) lets untrusted content send the host page URL, so keep it out for
+     * untrusted HTML.
      */
     sandbox?: string;
+    /**
+     * Content-Security-Policy injected as the first element of the framed document.
+     * The default blocks resource loads from the network (scripts, images, styles,
+     * fonts, fetch/XHR, frames): `default-src 'none'; img-src data: blob:;
+     * style-src 'unsafe-inline'`, plus `script-src 'unsafe-inline'` when the
+     * resolved sandbox allows scripts. CSP does not govern navigation: the sandbox
+     * blocks top-level and popup navigation and form submission (both presets; only
+     * a `sandbox` override with `allow-forms` enables forms), but the frame can
+     * still navigate itself through a link (or script, when allowed), so data
+     * could leave in a URL. Pass a string to customise, or `false` to inject nothing.
+     */
+    contentSecurityPolicy?: string | false;
     /**
      * Optional iframe allow attribute.
      */
@@ -57,6 +76,31 @@ export interface SandboxedIframeRendererProps {
      */
     onLoad?: React.ReactEventHandler<HTMLIFrameElement>;
 }
+/**
+ * @internal — exported for tests only; not re-exported from index.ts.
+ * True when an override asks for scripts together with same-origin access,
+ * which {@link resolveSandboxValue} refuses.
+ */
+export declare function sandboxDropsSameOrigin(sandboxOverride?: string): boolean;
+/**
+ * @internal — exported for tests only; not re-exported from index.ts.
+ * Resolve the sandbox attribute (pure). Tokens are lower-cased and split on HTML
+ * whitespace (browsers compare them ASCII case-insensitively), and scripts are
+ * never combined with same-origin access.
+ */
+export declare function resolveSandboxValue(sandboxPreset: SandboxPreset, sandboxOverride?: string): string;
+/**
+ * @internal — exported for tests only; not re-exported from index.ts.
+ * Put a CSP `<meta>` before any author content. It goes right after a leading
+ * doctype (so the doctype stays first) or at the very start. The HTML parser
+ * places a leading `<meta>` into `<head>` before anything else is processed,
+ * so the policy applies to every script and resource in the document. The
+ * author HTML is never searched for `<head>`: that text could sit inside a
+ * comment, an attribute or a script, where a meta would not be enforced.
+ * (iframe `srcdoc` documents are always parsed in no-quirks mode, so a meta
+ * ahead of a missing doctype cannot change rendering.)
+ */
+export declare function injectCsp(html: string, policy: string): string;
 export declare const SandboxedIframeRenderer: React.ForwardRefExoticComponent<SandboxedIframeRendererProps & React.RefAttributes<HTMLDivElement>>;
 export default SandboxedIframeRenderer;
 //# sourceMappingURL=SandboxedIframeRenderer.d.ts.map

package/dist/components/SandboxedIframeRenderer/SandboxedIframeRenderer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SandboxedIframeRenderer.d.ts","sourceRoot":"","sources":["../../../src/components/SandboxedIframeRenderer/SandboxedIframeRenderer.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAAO,KAAK,OAAO,EAAE,KAAK,KAAK,EAAE,MAAM,eAAe,CAAC;AAE9D,KAAK,aAAa,GAAG,QAAQ,GAAG,aAAa,CAAC;AAE9C,MAAM,WAAW,4BAA4B;IAC3C;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,EAAE,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACpB;;OAEG;IACH,MAAM,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;CACrD;AAYD,eAAO,MAAM,uBAAuB,qGAiCnC,CAAC;AAEF,eAAe,uBAAuB,CAAC"}
+{"version":3,"file":"SandboxedIframeRenderer.d.ts","sourceRoot":"","sources":["../../../src/components/SandboxedIframeRenderer/SandboxedIframeRenderer.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAAO,KAAK,OAAO,EAAE,KAAK,KAAK,EAAE,MAAM,eAAe,CAAC;AAE9D,KAAK,aAAa,GAAG,QAAQ,GAAG,aAAa,CAAC;AAE9C,MAAM,WAAW,4BAA4B;IAC3C;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;OAUG;IACH,qBAAqB,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACvC;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,EAAE,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACpB;;OAEG;IACH,MAAM,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;CACrD;AAYD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAIxE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,aAAa,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAQlG;AAQD;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAO9D;AAED,eAAO,MAAM,uBAAuB,qGA8DnC,CAAC;AAEF,eAAe,uBAAuB,CAAC"}

package/dist/components/shared/safeContent.d.ts

@@ -0,0 +1,129 @@
+/**
+ * @internal — not part of the public API; used by components that render untrusted content.
+ * @fileoverview Safe rendering of untrusted (model-, user- or data-supplied) content.
+ * @module components/shared/safeContent
+ *
+ * One module owns every policy for turning untrusted strings into DOM, so AI
+ * components never reach for `dangerouslySetInnerHTML` (ADR-09, audit SEC-01..03):
+ *
+ * - {@link renderSafeHtml} — a deterministic string tokenizer (no DOMParser, no
+ *   `window`), so `renderToString` and the client build identical trees (no
+ *   hydration mismatch). Allowlisted tags become React elements; dangerous tags
+ *   are dropped with their content; every other tag is unwrapped to its text.
+ * - {@link isSafeHref} / {@link isSafeSrc} — separate URL policies for links and
+ *   images, evaluated after decoding entities and removing whitespace/C0 controls,
+ *   so obfuscations like `java\tscript:` or `javascript:` are caught.
+ * - {@link sanitizeInlineStyle} — a typographic/box allowlist for inline styles.
+ *
+ * React escapes every text node and attribute value, so output is inert by
+ * construction; the policies decide only what structure survives.
+ */
+import * as React from 'react';
+/**
+ * @internal
+ * Decode decimal, hex and known named character references the way browsers do.
+ * Numeric references decode with or without a semicolon. Named references need
+ * their semicolon, except the legacy set; in attribute values a legacy reference
+ * followed by `=` or an alphanumeric stays literal (so `?a=1&copy=2` keeps its
+ * query string).
+ */
+export declare function decodeEntities(input: string, inAttribute?: boolean): string;
+/**
+ * @internal
+ * Link policy: http, https, mailto, tel, relative paths and fragments.
+ * Everything else — javascript:, vbscript:, data:, file:, and any obfuscated
+ * form of them — is unsafe.
+ */
+export declare function isSafeHref(url: string | null | undefined): boolean;
+/**
+ * @internal
+ * Image-source policy: http, https, blob:, relative paths, and raster
+ * `data:image/(png|jpeg|gif|webp|avif|bmp|x-icon)`. Never `data:image/svg+xml`
+ * (SVG can carry script), never any other data: payload, and no app-shell
+ * schemes (file:, asset:, tauri:, capacitor:).
+ */
+export declare function isSafeSrc(url: string | null | undefined): boolean;
+/** @internal Test-only: forget which unsafe-URL warnings were shown (mirrors `__resetDeprecationWarnings`). */
+export declare function __resetUnsafeUrlWarnings(): void;
+/**
+ * @internal
+ * Dev-only, once per component, kind and scheme: report a URL that a safety
+ * policy blocked, so integrators notice a dropped link or image instead of
+ * silently losing it. Silent in production builds.
+ */
+export declare function warnUnsafeUrl(component: string, url: string | null | undefined, kind?: 'link' | 'image'): void;
+/**
+ * @internal
+ * True for sources fetched from the network: http(s) and network-path URLs.
+ * Browsers treat a backslash like a slash in such URLs, so `\\host/x` and
+ * `/\\host/x` count as remote too.
+ */
+export declare function isRemoteSrc(url: string | null | undefined): boolean;
+/** @internal A style map suitable for an MUI `sx` / React `style` object. */
+export type SafeStyleMap = Record<string, string | number>;
+/**
+ * @internal
+ * Parse an inline `style` attribute through the typographic/box allowlist.
+ * Positioning (position, inset, top/left/right/bottom, z-index), transforms,
+ * filters and any value that can fetch or execute (url(), expression(), var(),
+ * attr(), image-set(), @import, escapes) are dropped.
+ */
+export declare function sanitizeInlineStyle(styleValue: string | null | undefined): SafeStyleMap | undefined;
+/**
+ * @internal
+ * Tags removed together with everything inside them. A superset of the
+ * historical HtmlToMui BLOCKED_TAGS, so nothing previously dropped is loosened.
+ */
+export declare const DROP_WITH_CONTENT_TAGS: ReadonlySet<string>;
+/** @internal Default (and maximum) tag set kept by {@link renderSafeHtml}. */
+export declare const DEFAULT_ALLOWED_TAGS: ReadonlySet<string>;
+type Token = {
+    kind: 'text';
+    value: string;
+} | {
+    kind: 'start';
+    name: string;
+    attrs: Record<string, string>;
+    selfClosing: boolean;
+} | {
+    kind: 'end';
+    name: string;
+};
+/** @internal Split HTML into tokens. Comments, doctypes and processing instructions vanish. */
+export declare function tokenizeHtml(source: string): Token[];
+/** @internal Tags {@link renderSafeHtml} can keep. */
+export type SafeHtmlTag = 'b' | 'strong' | 'i' | 'em' | 'code' | 'br' | 'p' | 'ul' | 'ol' | 'li' | 'span' | 'a' | 'mark';
+/** @internal Options for {@link renderSafeHtml}. */
+export interface RenderSafeHtmlOptions {
+    /**
+     * Restrict the kept tags to a subset of {@link DEFAULT_ALLOWED_TAGS} (see
+     * {@link SafeHtmlTag}). Other names are accepted, warned about in development
+     * and unwrapped to text: the builder only implements the HTML parser's nesting
+     * rules for the default tags, and that is what keeps server and client output
+     * identical (no hydration mismatch).
+     */
+    allowTags?: Iterable<string>;
+    /**
+     * Classes allowed on `span`/`mark`, mapped to the element that renders them.
+     * `{ 'insight-highlight': 'span' }` keeps the class on a span;
+     * `{ highlight: 'mark' }` renders a semantic `<mark>`. All other classes are dropped.
+     */
+    allowClasses?: Record<string, 'span' | 'mark'>;
+}
+/**
+ * @internal
+ * Render untrusted HTML as React nodes through the allowlist. Deterministic:
+ * the same input yields the same tree on the server and the client.
+ *
+ * Default tags: b, strong, i, em, code, br, p, ul, ol, li, span, a, mark.
+ * Anchors keep only a safe `href`, `title` and `target="_blank"`, and always
+ * get `rel="noopener noreferrer"`; an anchor with an unsafe href becomes text.
+ *
+ * @example
+ * ```tsx
+ * <Box>{renderSafeHtml(thought, { allowClasses: { 'insight-highlight': 'span' } })}</Box>
+ * ```
+ */
+export declare function renderSafeHtml(html: string | null | undefined, options?: RenderSafeHtmlOptions): React.ReactNode;
+export {};
+//# sourceMappingURL=safeContent.d.ts.map

package/dist/components/shared/safeContent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safeContent.d.ts","sourceRoot":"","sources":["../../../src/components/shared/safeContent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AA6F/B;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,UAAQ,GAAG,MAAM,CAqBzE;AAqBD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAMlE;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAQjE;AAID,+GAA+G;AAC/G,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,IAAI,GAAE,MAAM,GAAG,OAAgB,GAAG,IAAI,CAetH;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAMnE;AA+BD,6EAA6E;AAC7E,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;AAkC3D;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,GAAG,SAAS,CAoBnG;AAMD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAIrD,CAAC;AAKH,8EAA8E;AAC9E,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAEnD,CAAC;AA2BH,KAAK,KAAK,GACN;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAE,GACpF;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAQlC,+FAA+F;AAC/F,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE,CAmIpD;AAoBD,sDAAsD;AACtD,MAAM,MAAM,WAAW,GAAG,GAAG,GAAG,QAAQ,GAAG,GAAG,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC;AAEzH,oDAAoD;AACpD,MAAM,WAAW,qBAAqB;IACpC;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;CAChD;AAyMD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,OAAO,GAAE,qBAA0B,GAAG,KAAK,CAAC,SAAS,CAIpH"}

package/dist/components/shared/warnDeprecated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"warnDeprecated.d.ts","sourceRoot":"","sources":["../../../src/components/shared/warnDeprecated.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAMH,wBAAgB,cAAc,CAC5B,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,GAClB,IAAI,CAaN;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD"}
+{"version":3,"file":"warnDeprecated.d.ts","sourceRoot":"","sources":["../../../src/components/shared/warnDeprecated.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAMH,wBAAgB,cAAc,CAC5B,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,GAClB,IAAI,CAeN;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD"}