@tristan2828/ui-foundation 3.14.0 → 3.15.0

package/conventions/docs/add-an-entity.md

@@ -197,7 +197,9 @@ is a filled-in example while the Widgets demo is still here).
      the plan edits in place** (`Edit in place`), shared by the form
      (through a `Controller`) and the view (through `editInPlace`), and
      the Markdown long text's `RichTextEditor` (on the form whether or
-     not it edits in place). Every other field's control stays inline in
+     not it edits in place), given a `placeholder` and `maxLength` (the
+     schema's limit, one constant both read, like Widget's
+     `DESCRIPTION_MAX_LENGTH`). Every other field's control stays inline in
      the form, as `widget-form.tsx`'s Category, Tags and Available From
      do. No `Edit in place` line and no Markdown long text: no fields
      file.

package/conventions/docs/cell-patterns.md

@@ -736,7 +736,12 @@ const price = editInPlace({
 - **Long text written as Markdown edits as rich text** (`RichTextEditor`):
   formatted where it's read, saved as Markdown with every block the person
   didn't touch kept exactly as written. On the form too, so it's one
-  control.
+  control. Give it a `placeholder` and the schema's limit as `maxLength`
+  (a count shows from 80% of it, in the destructive text tone once over).
+  Its keys: Ctrl/Cmd+K adds or edits a link (web and email addresses
+  only), Ctrl/Cmd+Shift+Enter ticks the task item the caret is in, and
+  Markdown pasted as plain text arrives formatted. Ctrl/Cmd+Enter stays
+  the save.
 - **The save is the single-field save** (`useRecordUpdate` with
   `optimistic: false, toastOnError: false`, the entity's
   `useEdit<Entity>Field`), `mutateAsync` of one field's PATCH.

package/dist/components/app/milkdown-editor.d.ts

@@ -1,2 +1,2 @@
 import type { RichTextEditorProps } from './rich-text-editor.js';
-export default function MilkdownEditor({ id, defaultValue, onChange, onProblem, readOnly, autoFocus, className, 'aria-label': ariaLabel, 'aria-labelledby': ariaLabelledBy, 'aria-describedby': ariaDescribedBy, 'aria-invalid': ariaInvalid, }: RichTextEditorProps): import("react").JSX.Element;
+export default function MilkdownEditor({ id, defaultValue, onChange, onProblem, readOnly, autoFocus, placeholder, maxLength, className, 'aria-label': ariaLabel, 'aria-labelledby': ariaLabelledBy, 'aria-describedby': ariaDescribedBy, 'aria-invalid': ariaInvalid, }: RichTextEditorProps): import("react").JSX.Element;

package/dist/components/app/milkdown-editor.js

@@ -1,4 +1,4 @@
-import { jsx as _jsx } from "react/jsx-runtime";
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
 // The rich-text editor behind RichTextEditor, loaded only when one opens
 // (rich-text-editor.tsx imports this lazily): Milkdown, a ProseMirror
 // editor whose Markdown goes in and out through remark, the same parser
@@ -15,15 +15,28 @@ import { jsx as _jsx } from "react/jsx-runtime";
 // - Headings render from <h3>, like <Markdown>: the page owns <h1> and
 //   <h2>. A task-list item renders a real checkbox that toggles it.
 // - Edited blocks are written in the document's own bullet and rule marks.
-import { useEffect, useRef } from 'react';
-import { defaultValueCtx, Editor, editorViewCtx, editorViewOptionsCtx, remarkStringifyOptionsCtx, rootCtx, } from '@milkdown/kit/core';
+// - Markdown pasted as plain text arrives formatted (still no HTML), and a
+//   copy out of the editor is Markdown.
+// - Ctrl/Cmd+K adds or edits a link (a box at the caret: web and email
+//   addresses only); Ctrl/Cmd+Shift+Enter ticks the task item the caret is
+//   in. Ctrl/Cmd+Enter stays the field's save.
+// - A placeholder in an empty document, and a count of the Markdown's
+//   length as it nears `maxLength`.
+import { useEffect, useId, useRef, useState } from 'react';
+import { defaultValueCtx, Editor, editorViewCtx, editorViewOptionsCtx, parserCtx, remarkStringifyOptionsCtx, rootCtx, schemaCtx, serializerCtx, } from '@milkdown/kit/core';
 import { history } from '@milkdown/kit/plugin/history';
 import { commands, inputRules, keymap, markInputRules, plugins, remarkPreserveEmptyLinePlugin, schema, } from '@milkdown/kit/preset/commonmark';
 import { gfm } from '@milkdown/kit/preset/gfm';
 import { Fragment, Slice } from '@milkdown/kit/prose/model';
 import { Plugin } from '@milkdown/kit/prose/state';
+import { Decoration, DecorationSet } from '@milkdown/kit/prose/view';
 import { $prose, getMarkdown } from '@milkdown/kit/utils';
 import { cn } from 'cn';
+import { Button } from '../ui/button.js';
+import { Field, FieldError, FieldLabel } from '../ui/field.js';
+import { Input } from '../ui/input.js';
+import { Popover, PopoverContent } from '../ui/popover.js';
+import { linkHref } from '../../lib/link-href.js';
 import { MarkdownMergeError, markdownStyle, mergeMarkdown } from '../../lib/markdown-merge.js';
 // The commonmark preset, minus the plugin that writes `<br />`. A $remark
 // plugin is a pair (its options and the plugin), spread into `plugins`.
@@ -102,14 +115,84 @@ function taskItemView(node, view, getPos) {
         ignoreMutation: (mutation) => mutation.target === box,
     };
 }
-export default function MilkdownEditor({ id, defaultValue, onChange, onProblem, readOnly = false, autoFocus = false, className, 'aria-label': ariaLabel, 'aria-labelledby': ariaLabelledBy, 'aria-describedby': ariaDescribedBy, 'aria-invalid': ariaInvalid, }) {
+// The task-list item the caret is in, ticked or unticked. False when the
+// caret isn't in one.
+function toggleTaskItem(view) {
+    const { $from } = view.state.selection;
+    for (let depth = $from.depth; depth > 0; depth--) {
+        const node = $from.node(depth);
+        if (node.type.name === 'list_item' && node.attrs.checked != null) {
+            view.dispatch(view.state.tr.setNodeMarkup($from.before(depth), undefined, { ...node.attrs, checked: !node.attrs.checked }));
+            return true;
+        }
+    }
+    return false;
+}
+function linkTarget(state) {
+    const link = state.schema.marks.link;
+    const { from, to, empty, $from } = state.selection;
+    if (!empty) {
+        let href = '';
+        state.doc.nodesBetween(from, to, (node) => {
+            const mark = link.isInSet(node.marks);
+            if (mark && !href)
+                href = String(mark.attrs.href);
+        });
+        return { from, to, href };
+    }
+    const mark = link.isInSet($from.marks());
+    if (!mark)
+        return { from, to, href: '' };
+    const start = $from.start();
+    let target = { from, to, href: String(mark.attrs.href) };
+    let runFrom = -1;
+    $from.parent.forEach((child, offset) => {
+        const childFrom = start + offset;
+        const childTo = childFrom + child.nodeSize;
+        if (!mark.isInSet(child.marks)) {
+            runFrom = -1;
+            return;
+        }
+        if (runFrom < 0)
+            runFrom = childFrom;
+        if (runFrom <= from && from <= childTo)
+            target = { from: runFrom, to: childTo, href: target.href };
+    });
+    return target;
+}
+// Sets (or, with `href` empty, removes) the link on the target. With
+// nothing selected and no link there, the address goes in as the link's
+// own text.
+function applyLink(view, target, href) {
+    const link = view.state.schema.marks.link;
+    const tr = view.state.tr;
+    if (target.from === target.to) {
+        if (!href)
+            return;
+        tr.insertText(href, target.from).addMark(target.from, target.from + href.length, link.create({ href }));
+    }
+    else {
+        tr.removeMark(target.from, target.to, link);
+        if (href)
+            tr.addMark(target.from, target.to, link.create({ href }));
+    }
+    view.dispatch(tr.scrollIntoView());
+}
+export default function MilkdownEditor({ id, defaultValue, onChange, onProblem, readOnly = false, autoFocus = false, placeholder, maxLength, className, 'aria-label': ariaLabel, 'aria-labelledby': ariaLabelledBy, 'aria-describedby': ariaDescribedBy, 'aria-invalid': ariaInvalid, }) {
     const rootRef = useRef(null);
     const editorRef = useRef(null);
+    const [linkBox, setLinkBox] = useState(null);
+    const [length, setLength] = useState(defaultValue.length);
     // The latest props, for the editor's callbacks, which are set up once.
-    const latest = useRef({ onChange, onProblem, readOnly });
+    const latest = useRef({ onChange, onProblem, readOnly, placeholder });
     useEffect(() => {
-        latest.current = { onChange, onProblem, readOnly };
+        latest.current = { onChange, onProblem, readOnly, placeholder };
     });
+    const ids = useId();
+    const counterId = `${ids}-count`;
+    // The count shows from 80% of the limit: below that it's noise.
+    const showCount = maxLength !== undefined && length >= maxLength * 0.8;
+    const describedBy = [ariaDescribedBy, showCount ? counterId : undefined].filter(Boolean).join(' ');
     const attributes = {
         'aria-multiline': 'true',
         'aria-readonly': String(readOnly),
@@ -121,10 +204,12 @@ export default function MilkdownEditor({ id, defaultValue, onChange, onProblem,
         attributes['aria-label'] = ariaLabel;
     if (ariaLabelledBy)
         attributes['aria-labelledby'] = ariaLabelledBy;
-    if (ariaDescribedBy)
-        attributes['aria-describedby'] = ariaDescribedBy;
+    if (describedBy)
+        attributes['aria-describedby'] = describedBy;
     if (ariaInvalid)
         attributes['aria-invalid'] = 'true';
+    if (placeholder)
+        attributes['aria-placeholder'] = placeholder;
     const attributesKey = JSON.stringify(attributes);
     // The editor is made once, from the Markdown it opened with.
     useEffect(() => {
@@ -143,6 +228,7 @@ export default function MilkdownEditor({ id, defaultValue, onChange, onProblem,
                 const merged = mergeMarkdown(original, baseline, current);
                 latest.current.onProblem?.(null);
                 latest.current.onChange(merged);
+                setLength(merged.length);
             }
             catch (error) {
                 if (!(error instanceof MarkdownMergeError))
@@ -161,6 +247,80 @@ export default function MilkdownEditor({ id, defaultValue, onChange, onProblem,
                 transformPasted: (slice) => new Slice(htmlToText(slice.content), slice.openStart, slice.openEnd),
             },
         }));
+        // Opens the link box at the start of what the link applies to.
+        const openLink = (view) => {
+            if (!view.editable)
+                return;
+            const target = linkTarget(view.state);
+            const point = view.coordsAtPos(target.from);
+            setLinkBox({
+                ...target,
+                anchor: {
+                    getBoundingClientRect: () => new DOMRect(point.left, point.top, 0, point.bottom - point.top),
+                    contextElement: view.dom,
+                },
+            });
+        };
+        // Paste, copy, the editor's own keys and the placeholder.
+        const input = $prose((ctx) => new Plugin({
+            props: {
+                // Plain text is read as Markdown, so `## Notes` or `**bold**`
+                // copied from another app arrives formatted; raw HTML in it
+                // still arrives as text. A paste with HTML of its own (from a
+                // web page) is ProseMirror's, through transformPasted above.
+                handlePaste: (view, event) => {
+                    const data = event.clipboardData;
+                    if (!data || !view.editable || data.getData('text/html'))
+                        return false;
+                    const text = data.getData('text/plain');
+                    if (!text || view.state.selection.$from.parent.type.spec.code)
+                        return false;
+                    const parsed = ctx.get(parserCtx)(text);
+                    if (!parsed || typeof parsed === 'string')
+                        return false;
+                    // Text with no Markdown in it (one plain paragraph) goes in
+                    // exactly as typed, spaces at its ends kept.
+                    const only = parsed.childCount === 1 ? parsed.firstChild : null;
+                    if (only?.type.name === 'paragraph' && only.childCount === 1 && only.textContent === text.trim()) {
+                        view.dispatch(view.state.tr.insertText(text).scrollIntoView());
+                        return true;
+                    }
+                    view.dispatch(view.state.tr.replaceSelection(Slice.maxOpen(htmlToText(parsed.content))).scrollIntoView());
+                    return true;
+                },
+                // A copy is Markdown, so it pastes into a plain text field
+                // (or another Markdown editor) as written.
+                clipboardTextSerializer: (slice) => {
+                    const doc = slice.content.firstChild?.isBlock
+                        ? ctx.get(schemaCtx).topNodeType.createAndFill(undefined, slice.content)
+                        : null;
+                    return doc ? ctx.get(serializerCtx)(doc) : slice.content.textBetween(0, slice.content.size, '\n\n');
+                },
+                handleKeyDown: (view, event) => {
+                    const mod = event.metaKey || event.ctrlKey;
+                    if (mod && !event.shiftKey && !event.altKey && event.key.toLowerCase() === 'k') {
+                        event.preventDefault();
+                        openLink(view);
+                        return true;
+                    }
+                    // Ctrl/Cmd+Shift+Enter in a task item ticks it, and goes no
+                    // further. Anywhere else it reaches the field, which saves.
+                    if (mod && event.shiftKey && event.key === 'Enter' && view.editable && toggleTaskItem(view)) {
+                        event.preventDefault();
+                        event.stopPropagation();
+                        return true;
+                    }
+                    return false;
+                },
+                decorations: (state) => {
+                    const text = latest.current.placeholder;
+                    const only = state.doc.childCount === 1 ? state.doc.firstChild : null;
+                    if (!text || !only || only.type.name !== 'paragraph' || only.content.size > 0)
+                        return null;
+                    return DecorationSet.create(state.doc, [Decoration.node(0, only.nodeSize, { 'data-placeholder': text })]);
+                },
+            },
+        }));
         const make = Editor.make()
             .config((ctx) => {
             ctx.set(rootCtx, root);
@@ -179,7 +339,8 @@ export default function MilkdownEditor({ id, defaultValue, onChange, onProblem,
             .use(COMMONMARK)
             .use(gfm)
             .use(history)
-            .use(changes);
+            .use(changes)
+            .use(input);
         void make.create().then((editor) => {
             if (cancelled) {
                 void editor.destroy();
@@ -212,10 +373,52 @@ export default function MilkdownEditor({ id, defaultValue, onChange, onProblem,
             view.setProps({ editable: () => !readOnly, attributes: JSON.parse(attributesKey) });
         });
     }, [readOnly, attributesKey]);
-    return (_jsx("div", { ref: rootRef, "data-slot": "rich-text-editor", className: cn('min-h-24 w-full min-w-0 rounded-lg border border-input bg-transparent px-2.5 py-2 type-body text-foreground break-words transition-colors', 'focus-within:border-ring focus-within:ring-3 focus-within:ring-ring/50 dark:bg-input/30', 'has-[[aria-invalid=true]]:border-destructive has-[[aria-invalid=true]]:ring-destructive/20', 'has-[[aria-readonly=true]]:text-muted-foreground', 
-        // The same type roles <Markdown> uses, so text reads the same
-        // being edited as being read.
-        '[&_.ProseMirror]:flex [&_.ProseMirror]:min-h-20 [&_.ProseMirror]:flex-col [&_.ProseMirror]:gap-3', '[&_h3]:type-section-title [&_h4]:type-section-title [&_h5]:type-label [&_h6]:type-label', '[&_ul]:flex [&_ul]:list-disc [&_ul]:flex-col [&_ul]:gap-1 [&_ul]:pl-6', '[&_ol]:flex [&_ol]:list-decimal [&_ol]:flex-col [&_ol]:gap-1 [&_ol]:pl-6', '[&_li[data-item-type=task]]:-ml-6 [&_li[data-item-type=task]]:flex [&_li[data-item-type=task]]:list-none [&_li[data-item-type=task]]:items-start [&_li[data-item-type=task]]:gap-2', '[&_li[data-item-type=task]>input]:mt-1 [&_li[data-item-type=task]>input]:size-4 [&_li[data-item-type=task]>input]:accent-primary', '[&_a]:text-primary [&_a]:underline [&_a]:underline-offset-4', '[&_blockquote]:border-l-2 [&_blockquote]:border-border [&_blockquote]:pl-4 [&_blockquote]:text-muted-foreground', '[&_pre]:overflow-x-auto [&_pre]:rounded-lg [&_pre]:bg-muted [&_pre]:p-3 [&_pre]:font-mono', '[&_:not(pre)>code]:rounded [&_:not(pre)>code]:bg-muted [&_:not(pre)>code]:px-1 [&_:not(pre)>code]:font-mono', '[&_hr]:border-border', '[&_table]:w-full [&_table]:border-collapse [&_td]:border [&_td]:border-border [&_td]:px-2 [&_td]:py-1 [&_th]:border [&_th]:border-border [&_th]:px-2 [&_th]:py-1 [&_th]:text-left [&_th]:type-label', 
-        // Raw HTML from the text: shown as its characters, never as markup.
-        '[&_span[data-type=html]]:rounded [&_span[data-type=html]]:bg-muted [&_span[data-type=html]]:px-1 [&_span[data-type=html]]:font-mono [&_span[data-type=html]]:text-foreground', className) }));
+    const closeLink = () => {
+        setLinkBox(null);
+        editorRef.current?.action((ctx) => ctx.get(editorViewCtx).focus());
+    };
+    return (_jsxs(_Fragment, { children: [_jsx("div", { ref: rootRef, "data-slot": "rich-text-editor", className: cn('min-h-24 w-full min-w-0 rounded-lg border border-input bg-transparent px-2.5 py-2 type-body text-foreground break-words transition-colors', 'focus-within:border-ring focus-within:ring-3 focus-within:ring-ring/50 dark:bg-input/30', 'has-[[aria-invalid=true]]:border-destructive has-[[aria-invalid=true]]:ring-destructive/20', 'has-[[aria-readonly=true]]:text-muted-foreground', 
+                // The same type roles <Markdown> uses, so text reads the same
+                // being edited as being read.
+                '[&_.ProseMirror]:flex [&_.ProseMirror]:min-h-20 [&_.ProseMirror]:flex-col [&_.ProseMirror]:gap-3', '[&_h3]:type-section-title [&_h4]:type-section-title [&_h5]:type-label [&_h6]:type-label', '[&_ul]:flex [&_ul]:list-disc [&_ul]:flex-col [&_ul]:gap-1 [&_ul]:pl-6', '[&_ol]:flex [&_ol]:list-decimal [&_ol]:flex-col [&_ol]:gap-1 [&_ol]:pl-6', '[&_li[data-item-type=task]]:-ml-6 [&_li[data-item-type=task]]:flex [&_li[data-item-type=task]]:list-none [&_li[data-item-type=task]]:items-start [&_li[data-item-type=task]]:gap-2', '[&_li[data-item-type=task]>input]:mt-1 [&_li[data-item-type=task]>input]:size-4 [&_li[data-item-type=task]>input]:accent-primary', '[&_a]:text-primary [&_a]:underline [&_a]:underline-offset-4', '[&_blockquote]:border-l-2 [&_blockquote]:border-border [&_blockquote]:pl-4 [&_blockquote]:text-muted-foreground', '[&_pre]:overflow-x-auto [&_pre]:rounded-lg [&_pre]:bg-muted [&_pre]:p-3 [&_pre]:font-mono', '[&_:not(pre)>code]:rounded [&_:not(pre)>code]:bg-muted [&_:not(pre)>code]:px-1 [&_:not(pre)>code]:font-mono', '[&_hr]:border-border', '[&_table]:w-full [&_table]:border-collapse [&_td]:border [&_td]:border-border [&_td]:px-2 [&_td]:py-1 [&_th]:border [&_th]:border-border [&_th]:px-2 [&_th]:py-1 [&_th]:text-left [&_th]:type-label', 
+                // Raw HTML from the text: shown as its characters, never as markup.
+                '[&_span[data-type=html]]:rounded [&_span[data-type=html]]:bg-muted [&_span[data-type=html]]:px-1 [&_span[data-type=html]]:font-mono [&_span[data-type=html]]:text-foreground', 
+                // The placeholder, in an empty document only (a decoration).
+                '[&_p[data-placeholder]]:before:pointer-events-none [&_p[data-placeholder]]:before:float-left [&_p[data-placeholder]]:before:h-0 [&_p[data-placeholder]]:before:text-muted-foreground [&_p[data-placeholder]]:before:content-[attr(data-placeholder)]', className) }), showCount && (_jsx("p", { id: counterId, "data-slot": "rich-text-editor-count", className: cn('text-right type-caption tabular-nums', length > maxLength ? 'text-destructive-text' : 'text-muted-foreground'), children: length > maxLength
+                    ? `${(length - maxLength).toLocaleString()} characters over the limit of ${maxLength.toLocaleString()}`
+                    : `${length.toLocaleString()} of ${maxLength.toLocaleString()} characters` })), _jsx(Popover, { open: linkBox !== null, onOpenChange: (open) => !open && closeLink(), children: linkBox && (_jsx(LinkForm, { box: linkBox, onApply: (href) => {
+                        const editor = editorRef.current;
+                        editor?.action((ctx) => applyLink(ctx.get(editorViewCtx), linkBox, href));
+                        closeLink();
+                    } })) })] }));
+}
+// The link box: the address, Apply, and Remove link for an existing one.
+// Enter (Ctrl/Cmd+Enter too) applies the link and stays its own: editing
+// in place listens for Ctrl/Cmd+Enter through the portal, and would save
+// the field without it. Esc is the popover's: it closes the box only.
+function LinkForm({ box, onApply }) {
+    const [typed, setTyped] = useState(box.href);
+    const [error, setError] = useState(null);
+    const inputRef = useRef(null);
+    const inputId = useId();
+    const errorId = `${inputId}-error`;
+    const apply = () => {
+        const href = linkHref(typed);
+        if (href === null) {
+            setError('Enter a web or email address, like https://example.com.');
+            return;
+        }
+        onApply(href);
+    };
+    const onKeyDown = (event) => {
+        if (event.key === 'Enter' && event.target === inputRef.current) {
+            event.preventDefault();
+            event.stopPropagation();
+            apply();
+        }
+    };
+    return (_jsxs(PopoverContent, { anchor: box.anchor, align: "start", "aria-label": box.href ? 'Edit link' : 'Add link', initialFocus: inputRef, finalFocus: false, className: "w-80", onKeyDown: onKeyDown, children: [_jsxs(Field, { "data-invalid": error ? true : undefined, children: [_jsx(FieldLabel, { htmlFor: inputId, children: "Link address" }), _jsx(Input, { ref: inputRef, id: inputId, value: typed, placeholder: "https://", autoComplete: "off", "aria-invalid": error ? true : undefined, "aria-describedby": error ? errorId : undefined, onChange: (event) => {
+                            setTyped(event.target.value);
+                            setError(null);
+                        } }), error && _jsx(FieldError, { id: errorId, children: error })] }), _jsxs("div", { className: "flex gap-2", children: [_jsx(Button, { size: "sm", onClick: apply, children: "Apply" }), box.href && (_jsx(Button, { size: "sm", variant: "outline", onClick: () => onApply(''), children: "Remove link" }))] })] }));
 }

package/dist/components/app/rich-text-editor.d.ts

@@ -10,6 +10,14 @@ export type RichTextEditorProps = {
     /** Shown but not editable (while a save is in flight). */
     readOnly?: boolean;
     autoFocus?: boolean;
+    /** Shown while the document is empty (and given to screen readers as `aria-placeholder`). */
+    placeholder?: string;
+    /**
+     * The field's limit on the saved Markdown's length. From 80% of it, a
+     * count shows under the editor, in the destructive text tone once over.
+     * Typing isn't stopped: the form's schema still refuses a save over it.
+     */
+    maxLength?: number;
     className?: string;
     /** The field's label. A rich-text area must have one: this, or `aria-labelledby`. */
     'aria-label'?: string;

package/dist/components/ui/popover.d.ts

@@ -2,7 +2,7 @@ import * as React from "react";
 import { Popover as PopoverPrimitive } from "@base-ui/react/popover";
 declare function Popover({ ...props }: PopoverPrimitive.Root.Props): React.JSX.Element;
 declare function PopoverTrigger({ ...props }: PopoverPrimitive.Trigger.Props): React.JSX.Element;
-declare function PopoverContent({ className, align, alignOffset, side, sideOffset, ...props }: PopoverPrimitive.Popup.Props & Pick<PopoverPrimitive.Positioner.Props, "align" | "alignOffset" | "side" | "sideOffset">): React.JSX.Element;
+declare function PopoverContent({ className, align, alignOffset, side, sideOffset, anchor, ...props }: PopoverPrimitive.Popup.Props & Pick<PopoverPrimitive.Positioner.Props, "align" | "alignOffset" | "side" | "sideOffset" | "anchor">): React.JSX.Element;
 declare function PopoverHeader({ className, ...props }: React.ComponentProps<"div">): React.JSX.Element;
 declare function PopoverTitle({ className, ...props }: PopoverPrimitive.Title.Props): React.JSX.Element;
 declare function PopoverDescription({ className, ...props }: PopoverPrimitive.Description.Props): React.JSX.Element;

package/dist/components/ui/popover.js

@@ -8,8 +8,12 @@ function Popover({ ...props }) {
 function PopoverTrigger({ ...props }) {
     return _jsx(PopoverPrimitive.Trigger, { "data-slot": "popover-trigger", ...props });
 }
-function PopoverContent({ className, align = "center", alignOffset = 0, side = "bottom", sideOffset = 4, ...props }) {
-    return (_jsx(PopoverPrimitive.Portal, { children: _jsx(PopoverPrimitive.Positioner, { align: align, alignOffset: alignOffset, side: side, sideOffset: sideOffset, className: "isolate z-50", children: _jsx(PopoverPrimitive.Popup, { "data-slot": "popover-content", className: cn("z-50 flex w-72 origin-(--transform-origin) flex-col gap-2.5 rounded-lg bg-popover p-2.5 text-sm text-popover-foreground shadow-md ring-1 ring-foreground/10 outline-hidden duration-100 data-[side=bottom]:slide-in-from-top-2 data-[side=inline-end]:slide-in-from-left-2 data-[side=inline-start]:slide-in-from-right-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 data-open:animate-in data-open:fade-in-0 data-open:zoom-in-95 data-closed:animate-out data-closed:fade-out-0 data-closed:zoom-out-95", className), ...props }) }) }));
+// `anchor` is this repo's patch to the upstream primitive: a popover with
+// no trigger of its own, placed at a point (the rich-text editor's link
+// box, at the caret). A local patch: re-running `shadcn add popover` here
+// would overwrite it. Diff against upstream before taking a new version.
+function PopoverContent({ className, align = "center", alignOffset = 0, side = "bottom", sideOffset = 4, anchor, ...props }) {
+    return (_jsx(PopoverPrimitive.Portal, { children: _jsx(PopoverPrimitive.Positioner, { anchor: anchor, align: align, alignOffset: alignOffset, side: side, sideOffset: sideOffset, className: "isolate z-50", children: _jsx(PopoverPrimitive.Popup, { "data-slot": "popover-content", className: cn("z-50 flex w-72 origin-(--transform-origin) flex-col gap-2.5 rounded-lg bg-popover p-2.5 text-sm text-popover-foreground shadow-md ring-1 ring-foreground/10 outline-hidden duration-100 data-[side=bottom]:slide-in-from-top-2 data-[side=inline-end]:slide-in-from-left-2 data-[side=inline-start]:slide-in-from-right-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 data-open:animate-in data-open:fade-in-0 data-open:zoom-in-95 data-closed:animate-out data-closed:fade-out-0 data-closed:zoom-out-95", className), ...props }) }) }));
 }
 function PopoverHeader({ className, ...props }) {
     return (_jsx("div", { "data-slot": "popover-header", className: cn("flex flex-col gap-0.5 text-sm", className), ...props }));

package/dist/lib/link-href.d.ts

@@ -0,0 +1,2 @@
+/** The `href` to save, `''` to remove the link, or `null` when it's refused. */
+export declare function linkHref(typed: string): string | null;

package/dist/lib/link-href.js

@@ -0,0 +1,22 @@
+// The address a link in the rich-text editor points at, from what the
+// person typed. Web and email addresses only: a bare `example.com` becomes
+// `https://example.com` and a bare `name@example.com` a `mailto:`; a path
+// on this site (`/x`) or a heading (`#x`) is kept. Any other scheme
+// (`javascript:`, `data:`, `file:`) is refused, so a link can't run code
+// or reach a local file.
+/** The `href` to save, `''` to remove the link, or `null` when it's refused. */
+export function linkHref(typed) {
+    const value = typed.trim();
+    if (value === '')
+        return '';
+    if (/^(https?:\/\/|mailto:|tel:)/i.test(value))
+        return value;
+    // A scheme of its own (`javascript:`), not a port (`example.com:8080`).
+    if (/^[a-z][a-z0-9+.-]*:(?!\d)/i.test(value))
+        return null;
+    if (value.startsWith('/') || value.startsWith('#'))
+        return value;
+    if (/^[^\s@/]+@[^\s@/]+\.[^\s@/]+$/.test(value))
+        return `mailto:${value}`;
+    return `https://${value}`;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tristan2828/ui-foundation",
-  "version": "3.14.0",
+  "version": "3.15.0",
   "description": "Shared UI foundation for contract-first, database-backed React apps: shadcn primitives, DataTable/EntityForm composites, auth, the gateway error seam, design tokens, lint rules and the AI playbook.",
   "license": "MIT",
   "repository": {