@umituz/web-canvas 1.1.0 → 1.2.0

package/dist/application/index.js

@@ -998,7 +998,76 @@ ${project.appMetadata.whatsNew}`;
   }
 };
 
+// src/infrastructure/services/minimalXlsx.ts
+var XML_HEADER = '<?xml version="1.0" encoding="UTF-8" standalone="yes"?>';
+function escapeXml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
+}
+function safeSheetName(name, index) {
+  const cleaned = name.replace(/[:\\/?*[\]]/g, " ").slice(0, 31).trim();
+  return cleaned.length > 0 ? cleaned : `Sheet${index + 1}`;
+}
+function columnName(index) {
+  let name = "";
+  let n = index;
+  while (n >= 0) {
+    name = String.fromCharCode(65 + n % 26) + name;
+    n = Math.floor(n / 26) - 1;
+  }
+  return name;
+}
+function cellXml(value, row, column) {
+  const ref = `${columnName(column)}${row}`;
+  if (typeof value === "number" && Number.isFinite(value)) {
+    return `<c r="${ref}"><v>${value}</v></c>`;
+  }
+  const text = value === null || value === void 0 ? "" : typeof value === "boolean" ? value ? "TRUE" : "FALSE" : String(value);
+  return `<c r="${ref}" t="inlineStr"><is><t xml:space="preserve">${escapeXml(text)}</t></is></c>`;
+}
+function sheetXml(rows) {
+  const body = rows.map((row, rowIndex) => {
+    const cells = row.map((value, columnIndex) => cellXml(value, rowIndex + 1, columnIndex)).join("");
+    return `<row r="${rowIndex + 1}">${cells}</row>`;
+  }).join("");
+  return `${XML_HEADER}<worksheet xmlns="http://schemas.openxmlformats.org/spreadsheetml/2006/main"><sheetData>${body}</sheetData></worksheet>`;
+}
+async function writeXlsxBlob(sheets, JSZip) {
+  const zip = new JSZip();
+  const safeNames = sheets.map((sheet, index) => safeSheetName(sheet.name, index));
+  zip.file(
+    "[Content_Types].xml",
+    `${XML_HEADER}<Types xmlns="http://schemas.openxmlformats.org/package/2006/content-types"><Default Extension="rels" ContentType="application/vnd.openxmlformats-package.relationships+xml"/><Default Extension="xml" ContentType="application/xml"/><Override PartName="/xl/workbook.xml" ContentType="application/vnd.openxmlformats-officedocument.spreadsheetml.sheet.main+xml"/>` + safeNames.map(
+      (_, index) => `<Override PartName="/xl/worksheets/sheet${index + 1}.xml" ContentType="application/vnd.openxmlformats-officedocument.spreadsheetml.worksheet+xml"/>`
+    ).join("") + "</Types>"
+  );
+  zip.file(
+    "_rels/.rels",
+    `${XML_HEADER}<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships"><Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/officeDocument" Target="xl/workbook.xml"/></Relationships>`
+  );
+  zip.file(
+    "xl/workbook.xml",
+    `${XML_HEADER}<workbook xmlns="http://schemas.openxmlformats.org/spreadsheetml/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships"><sheets>` + safeNames.map((name, index) => `<sheet name="${escapeXml(name)}" sheetId="${index + 1}" r:id="rId${index + 1}"/>`).join("") + "</sheets></workbook>"
+  );
+  zip.file(
+    "xl/_rels/workbook.xml.rels",
+    `${XML_HEADER}<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships">` + safeNames.map(
+      (_, index) => `<Relationship Id="rId${index + 1}" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/worksheet" Target="worksheets/sheet${index + 1}.xml"/>`
+    ).join("") + "</Relationships>"
+  );
+  sheets.forEach((sheet, index) => {
+    zip.file(`xl/worksheets/sheet${index + 1}.xml`, sheetXml(sheet.rows));
+  });
+  return zip.generateAsync({ type: "blob" });
+}
+
 // src/application/services/ReportService.ts
+function recordsToSheet(name, records) {
+  const headers = [...new Set(records.flatMap((record) => Object.keys(record)))];
+  return {
+    name,
+    rows: [headers, ...records.map((record) => headers.map((header) => record[header]))]
+  };
+}
 var ReportService = class _ReportService {
   static getInstance() {
     if (!_ReportService.instance) {
@@ -1044,31 +1113,19 @@ var ReportService = class _ReportService {
    * Export data to Excel
    */
   async exportToExcel(data, options = {}) {
-    const XLSX = await import("xlsx");
-    const wb = XLSX.utils.book_new();
+    const JSZip = (await import("jszip")).default;
     const apps = data.items.filter((i) => i.type === "app").map((i) => ({ Name: i.name, ...i.metrics, ...i.details }));
     const campaigns = data.items.filter((i) => i.type === "campaign").map((i) => ({ Name: i.name, ...i.metrics, ...i.details }));
     const posts = data.items.filter((i) => i.type === "post").map((i) => ({ Name: i.name, ...i.metrics, ...i.details }));
+    const sheets = [];
     if (apps.length > 0) {
-      XLSX.utils.book_append_sheet(
-        wb,
-        XLSX.utils.json_to_sheet(apps),
-        options.sheetName || "Apps"
-      );
+      sheets.push(recordsToSheet(options.sheetName || "Apps", apps));
     }
     if (campaigns.length > 0) {
-      XLSX.utils.book_append_sheet(
-        wb,
-        XLSX.utils.json_to_sheet(campaigns),
-        "Campaigns"
-      );
+      sheets.push(recordsToSheet("Campaigns", campaigns));
     }
     if (posts.length > 0) {
-      XLSX.utils.book_append_sheet(
-        wb,
-        XLSX.utils.json_to_sheet(posts),
-        "Posts"
-      );
+      sheets.push(recordsToSheet("Posts", posts));
     }
     if (options.includeSummary !== false) {
       const summary = [
@@ -1086,13 +1143,18 @@ var ReportService = class _ReportService {
           Value: (/* @__PURE__ */ new Date()).toLocaleDateString()
         }
       ];
-      XLSX.utils.book_append_sheet(
-        wb,
-        XLSX.utils.json_to_sheet(summary),
-        "Summary"
-      );
+      sheets.push(recordsToSheet("Summary", summary));
+    }
+    if (sheets.length === 0) {
+      sheets.push({ name: options.sheetName || "Sheet1", rows: [] });
     }
-    XLSX.writeFile(wb, options.filename || "report.xlsx");
+    const blob = await writeXlsxBlob(sheets, JSZip);
+    const url = URL.createObjectURL(blob);
+    const link = document.createElement("a");
+    link.href = url;
+    link.download = options.filename || "report.xlsx";
+    link.click();
+    URL.revokeObjectURL(url);
   }
   /**
    * Export data to CSV

package/dist/application/index.mjs

@@ -1,7 +1,7 @@
 import {
   ReportService,
   ScreenshotStudioService
-} from "../chunk-DNKRSL6D.mjs";
+} from "../chunk-P6RJ75US.mjs";
 import "../chunk-UOGTEMIJ.mjs";
 import "../chunk-Z6IB4BQV.mjs";
 import "../chunk-MC6PNV2F.mjs";

package/dist/{chunk-DNKRSL6D.mjs → chunk-P6RJ75US.mjs}

@@ -210,7 +210,76 @@ ${project.appMetadata.whatsNew}`;
   }
 };
 
+// src/infrastructure/services/minimalXlsx.ts
+var XML_HEADER = '<?xml version="1.0" encoding="UTF-8" standalone="yes"?>';
+function escapeXml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
+}
+function safeSheetName(name, index) {
+  const cleaned = name.replace(/[:\\/?*[\]]/g, " ").slice(0, 31).trim();
+  return cleaned.length > 0 ? cleaned : `Sheet${index + 1}`;
+}
+function columnName(index) {
+  let name = "";
+  let n = index;
+  while (n >= 0) {
+    name = String.fromCharCode(65 + n % 26) + name;
+    n = Math.floor(n / 26) - 1;
+  }
+  return name;
+}
+function cellXml(value, row, column) {
+  const ref = `${columnName(column)}${row}`;
+  if (typeof value === "number" && Number.isFinite(value)) {
+    return `<c r="${ref}"><v>${value}</v></c>`;
+  }
+  const text = value === null || value === void 0 ? "" : typeof value === "boolean" ? value ? "TRUE" : "FALSE" : String(value);
+  return `<c r="${ref}" t="inlineStr"><is><t xml:space="preserve">${escapeXml(text)}</t></is></c>`;
+}
+function sheetXml(rows) {
+  const body = rows.map((row, rowIndex) => {
+    const cells = row.map((value, columnIndex) => cellXml(value, rowIndex + 1, columnIndex)).join("");
+    return `<row r="${rowIndex + 1}">${cells}</row>`;
+  }).join("");
+  return `${XML_HEADER}<worksheet xmlns="http://schemas.openxmlformats.org/spreadsheetml/2006/main"><sheetData>${body}</sheetData></worksheet>`;
+}
+async function writeXlsxBlob(sheets, JSZip) {
+  const zip = new JSZip();
+  const safeNames = sheets.map((sheet, index) => safeSheetName(sheet.name, index));
+  zip.file(
+    "[Content_Types].xml",
+    `${XML_HEADER}<Types xmlns="http://schemas.openxmlformats.org/package/2006/content-types"><Default Extension="rels" ContentType="application/vnd.openxmlformats-package.relationships+xml"/><Default Extension="xml" ContentType="application/xml"/><Override PartName="/xl/workbook.xml" ContentType="application/vnd.openxmlformats-officedocument.spreadsheetml.sheet.main+xml"/>` + safeNames.map(
+      (_, index) => `<Override PartName="/xl/worksheets/sheet${index + 1}.xml" ContentType="application/vnd.openxmlformats-officedocument.spreadsheetml.worksheet+xml"/>`
+    ).join("") + "</Types>"
+  );
+  zip.file(
+    "_rels/.rels",
+    `${XML_HEADER}<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships"><Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/officeDocument" Target="xl/workbook.xml"/></Relationships>`
+  );
+  zip.file(
+    "xl/workbook.xml",
+    `${XML_HEADER}<workbook xmlns="http://schemas.openxmlformats.org/spreadsheetml/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships"><sheets>` + safeNames.map((name, index) => `<sheet name="${escapeXml(name)}" sheetId="${index + 1}" r:id="rId${index + 1}"/>`).join("") + "</sheets></workbook>"
+  );
+  zip.file(
+    "xl/_rels/workbook.xml.rels",
+    `${XML_HEADER}<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships">` + safeNames.map(
+      (_, index) => `<Relationship Id="rId${index + 1}" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/worksheet" Target="worksheets/sheet${index + 1}.xml"/>`
+    ).join("") + "</Relationships>"
+  );
+  sheets.forEach((sheet, index) => {
+    zip.file(`xl/worksheets/sheet${index + 1}.xml`, sheetXml(sheet.rows));
+  });
+  return zip.generateAsync({ type: "blob" });
+}
+
 // src/application/services/ReportService.ts
+function recordsToSheet(name, records) {
+  const headers = [...new Set(records.flatMap((record) => Object.keys(record)))];
+  return {
+    name,
+    rows: [headers, ...records.map((record) => headers.map((header) => record[header]))]
+  };
+}
 var ReportService = class _ReportService {
   static getInstance() {
     if (!_ReportService.instance) {
@@ -256,31 +325,19 @@ var ReportService = class _ReportService {
    * Export data to Excel
    */
   async exportToExcel(data, options = {}) {
-    const XLSX = await import("xlsx");
-    const wb = XLSX.utils.book_new();
+    const JSZip = (await import("jszip")).default;
     const apps = data.items.filter((i) => i.type === "app").map((i) => ({ Name: i.name, ...i.metrics, ...i.details }));
     const campaigns = data.items.filter((i) => i.type === "campaign").map((i) => ({ Name: i.name, ...i.metrics, ...i.details }));
     const posts = data.items.filter((i) => i.type === "post").map((i) => ({ Name: i.name, ...i.metrics, ...i.details }));
+    const sheets = [];
     if (apps.length > 0) {
-      XLSX.utils.book_append_sheet(
-        wb,
-        XLSX.utils.json_to_sheet(apps),
-        options.sheetName || "Apps"
-      );
+      sheets.push(recordsToSheet(options.sheetName || "Apps", apps));
     }
     if (campaigns.length > 0) {
-      XLSX.utils.book_append_sheet(
-        wb,
-        XLSX.utils.json_to_sheet(campaigns),
-        "Campaigns"
-      );
+      sheets.push(recordsToSheet("Campaigns", campaigns));
     }
     if (posts.length > 0) {
-      XLSX.utils.book_append_sheet(
-        wb,
-        XLSX.utils.json_to_sheet(posts),
-        "Posts"
-      );
+      sheets.push(recordsToSheet("Posts", posts));
     }
     if (options.includeSummary !== false) {
       const summary = [
@@ -298,13 +355,18 @@ var ReportService = class _ReportService {
           Value: (/* @__PURE__ */ new Date()).toLocaleDateString()
         }
       ];
-      XLSX.utils.book_append_sheet(
-        wb,
-        XLSX.utils.json_to_sheet(summary),
-        "Summary"
-      );
+      sheets.push(recordsToSheet("Summary", summary));
+    }
+    if (sheets.length === 0) {
+      sheets.push({ name: options.sheetName || "Sheet1", rows: [] });
     }
-    XLSX.writeFile(wb, options.filename || "report.xlsx");
+    const blob = await writeXlsxBlob(sheets, JSZip);
+    const url = URL.createObjectURL(blob);
+    const link = document.createElement("a");
+    link.href = url;
+    link.download = options.filename || "report.xlsx";
+    link.click();
+    URL.revokeObjectURL(url);
   }
   /**
    * Export data to CSV

package/dist/{chunk-HJ24NSQA.mjs → chunk-YRC4YPMO.mjs}

@@ -1,7 +1,7 @@
 import {
   ReportService,
   ScreenshotStudioService
-} from "./chunk-DNKRSL6D.mjs";
+} from "./chunk-P6RJ75US.mjs";
 import {
   CanvasRenderer
 } from "./chunk-UOGTEMIJ.mjs";
@@ -615,6 +615,7 @@ function useFreehandCanvas(options = {}) {
   const canvasRef = useRef4(null);
   const strokesRef = useRef4([]);
   const activeStrokeRef = useRef4(null);
+  const activePointerIdRef = useRef4(null);
   const dprRef = useRef4(1);
   const [strokeCount, setStrokeCount] = useState4(0);
   const redraw = useCallback4(() => {
@@ -702,8 +703,10 @@ function useFreehandCanvas(options = {}) {
     }
     function onPointerDown(event) {
       if (event.button !== 0 && event.pointerType === "mouse") return;
+      if (activeStrokeRef.current != null) return;
       event.preventDefault();
       el.setPointerCapture(event.pointerId);
+      activePointerIdRef.current = event.pointerId;
       const { brushSize: size, color: ink, pressureEnabled: dynamic } = optionsRef.current;
       const stroke = {
         size,
@@ -716,7 +719,7 @@ function useFreehandCanvas(options = {}) {
     }
     function onPointerMove(event) {
       const stroke = activeStrokeRef.current;
-      if (!stroke) return;
+      if (!stroke || event.pointerId !== activePointerIdRef.current) return;
       event.preventDefault();
       const point = pointFrom(event);
       const previous = stroke.points[stroke.points.length - 1];
@@ -725,8 +728,9 @@ function useFreehandCanvas(options = {}) {
     }
     function commit(event) {
       const stroke = activeStrokeRef.current;
-      if (!stroke) return;
+      if (!stroke || event.pointerId !== activePointerIdRef.current) return;
       activeStrokeRef.current = null;
+      activePointerIdRef.current = null;
       if (el.hasPointerCapture(event.pointerId)) {
         el.releasePointerCapture(event.pointerId);
       }

package/dist/index.js

@@ -1010,7 +1010,76 @@ ${project.appMetadata.whatsNew}`;
   }
 };
 
+// src/infrastructure/services/minimalXlsx.ts
+var XML_HEADER = '<?xml version="1.0" encoding="UTF-8" standalone="yes"?>';
+function escapeXml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
+}
+function safeSheetName(name, index) {
+  const cleaned = name.replace(/[:\\/?*[\]]/g, " ").slice(0, 31).trim();
+  return cleaned.length > 0 ? cleaned : `Sheet${index + 1}`;
+}
+function columnName(index) {
+  let name = "";
+  let n = index;
+  while (n >= 0) {
+    name = String.fromCharCode(65 + n % 26) + name;
+    n = Math.floor(n / 26) - 1;
+  }
+  return name;
+}
+function cellXml(value, row, column) {
+  const ref = `${columnName(column)}${row}`;
+  if (typeof value === "number" && Number.isFinite(value)) {
+    return `<c r="${ref}"><v>${value}</v></c>`;
+  }
+  const text = value === null || value === void 0 ? "" : typeof value === "boolean" ? value ? "TRUE" : "FALSE" : String(value);
+  return `<c r="${ref}" t="inlineStr"><is><t xml:space="preserve">${escapeXml(text)}</t></is></c>`;
+}
+function sheetXml(rows) {
+  const body = rows.map((row, rowIndex) => {
+    const cells = row.map((value, columnIndex) => cellXml(value, rowIndex + 1, columnIndex)).join("");
+    return `<row r="${rowIndex + 1}">${cells}</row>`;
+  }).join("");
+  return `${XML_HEADER}<worksheet xmlns="http://schemas.openxmlformats.org/spreadsheetml/2006/main"><sheetData>${body}</sheetData></worksheet>`;
+}
+async function writeXlsxBlob(sheets, JSZip) {
+  const zip = new JSZip();
+  const safeNames = sheets.map((sheet, index) => safeSheetName(sheet.name, index));
+  zip.file(
+    "[Content_Types].xml",
+    `${XML_HEADER}<Types xmlns="http://schemas.openxmlformats.org/package/2006/content-types"><Default Extension="rels" ContentType="application/vnd.openxmlformats-package.relationships+xml"/><Default Extension="xml" ContentType="application/xml"/><Override PartName="/xl/workbook.xml" ContentType="application/vnd.openxmlformats-officedocument.spreadsheetml.sheet.main+xml"/>` + safeNames.map(
+      (_, index) => `<Override PartName="/xl/worksheets/sheet${index + 1}.xml" ContentType="application/vnd.openxmlformats-officedocument.spreadsheetml.worksheet+xml"/>`
+    ).join("") + "</Types>"
+  );
+  zip.file(
+    "_rels/.rels",
+    `${XML_HEADER}<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships"><Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/officeDocument" Target="xl/workbook.xml"/></Relationships>`
+  );
+  zip.file(
+    "xl/workbook.xml",
+    `${XML_HEADER}<workbook xmlns="http://schemas.openxmlformats.org/spreadsheetml/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships"><sheets>` + safeNames.map((name, index) => `<sheet name="${escapeXml(name)}" sheetId="${index + 1}" r:id="rId${index + 1}"/>`).join("") + "</sheets></workbook>"
+  );
+  zip.file(
+    "xl/_rels/workbook.xml.rels",
+    `${XML_HEADER}<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships">` + safeNames.map(
+      (_, index) => `<Relationship Id="rId${index + 1}" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/worksheet" Target="worksheets/sheet${index + 1}.xml"/>`
+    ).join("") + "</Relationships>"
+  );
+  sheets.forEach((sheet, index) => {
+    zip.file(`xl/worksheets/sheet${index + 1}.xml`, sheetXml(sheet.rows));
+  });
+  return zip.generateAsync({ type: "blob" });
+}
+
 // src/application/services/ReportService.ts
+function recordsToSheet(name, records) {
+  const headers = [...new Set(records.flatMap((record) => Object.keys(record)))];
+  return {
+    name,
+    rows: [headers, ...records.map((record) => headers.map((header) => record[header]))]
+  };
+}
 var ReportService = class _ReportService {
   static getInstance() {
     if (!_ReportService.instance) {
@@ -1056,31 +1125,19 @@ var ReportService = class _ReportService {
    * Export data to Excel
    */
   async exportToExcel(data, options = {}) {
-    const XLSX = await import("xlsx");
-    const wb = XLSX.utils.book_new();
+    const JSZip = (await import("jszip")).default;
     const apps = data.items.filter((i) => i.type === "app").map((i) => ({ Name: i.name, ...i.metrics, ...i.details }));
     const campaigns = data.items.filter((i) => i.type === "campaign").map((i) => ({ Name: i.name, ...i.metrics, ...i.details }));
     const posts = data.items.filter((i) => i.type === "post").map((i) => ({ Name: i.name, ...i.metrics, ...i.details }));
+    const sheets = [];
     if (apps.length > 0) {
-      XLSX.utils.book_append_sheet(
-        wb,
-        XLSX.utils.json_to_sheet(apps),
-        options.sheetName || "Apps"
-      );
+      sheets.push(recordsToSheet(options.sheetName || "Apps", apps));
     }
     if (campaigns.length > 0) {
-      XLSX.utils.book_append_sheet(
-        wb,
-        XLSX.utils.json_to_sheet(campaigns),
-        "Campaigns"
-      );
+      sheets.push(recordsToSheet("Campaigns", campaigns));
     }
     if (posts.length > 0) {
-      XLSX.utils.book_append_sheet(
-        wb,
-        XLSX.utils.json_to_sheet(posts),
-        "Posts"
-      );
+      sheets.push(recordsToSheet("Posts", posts));
     }
     if (options.includeSummary !== false) {
       const summary = [
@@ -1098,13 +1155,18 @@ var ReportService = class _ReportService {
           Value: (/* @__PURE__ */ new Date()).toLocaleDateString()
         }
       ];
-      XLSX.utils.book_append_sheet(
-        wb,
-        XLSX.utils.json_to_sheet(summary),
-        "Summary"
-      );
+      sheets.push(recordsToSheet("Summary", summary));
     }
-    XLSX.writeFile(wb, options.filename || "report.xlsx");
+    if (sheets.length === 0) {
+      sheets.push({ name: options.sheetName || "Sheet1", rows: [] });
+    }
+    const blob = await writeXlsxBlob(sheets, JSZip);
+    const url = URL.createObjectURL(blob);
+    const link = document.createElement("a");
+    link.href = url;
+    link.download = options.filename || "report.xlsx";
+    link.click();
+    URL.revokeObjectURL(url);
   }
   /**
    * Export data to CSV
@@ -1755,6 +1817,7 @@ function useFreehandCanvas(options = {}) {
   const canvasRef = (0, import_react4.useRef)(null);
   const strokesRef = (0, import_react4.useRef)([]);
   const activeStrokeRef = (0, import_react4.useRef)(null);
+  const activePointerIdRef = (0, import_react4.useRef)(null);
   const dprRef = (0, import_react4.useRef)(1);
   const [strokeCount, setStrokeCount] = (0, import_react4.useState)(0);
   const redraw = (0, import_react4.useCallback)(() => {
@@ -1842,8 +1905,10 @@ function useFreehandCanvas(options = {}) {
     }
     function onPointerDown(event) {
       if (event.button !== 0 && event.pointerType === "mouse") return;
+      if (activeStrokeRef.current != null) return;
       event.preventDefault();
       el.setPointerCapture(event.pointerId);
+      activePointerIdRef.current = event.pointerId;
       const { brushSize: size, color: ink, pressureEnabled: dynamic } = optionsRef.current;
       const stroke = {
         size,
@@ -1856,7 +1921,7 @@ function useFreehandCanvas(options = {}) {
     }
     function onPointerMove(event) {
       const stroke = activeStrokeRef.current;
-      if (!stroke) return;
+      if (!stroke || event.pointerId !== activePointerIdRef.current) return;
       event.preventDefault();
       const point = pointFrom(event);
       const previous = stroke.points[stroke.points.length - 1];
@@ -1865,8 +1930,9 @@ function useFreehandCanvas(options = {}) {
     }
     function commit(event) {
       const stroke = activeStrokeRef.current;
-      if (!stroke) return;
+      if (!stroke || event.pointerId !== activePointerIdRef.current) return;
       activeStrokeRef.current = null;
+      activePointerIdRef.current = null;
       if (el.hasPointerCapture(event.pointerId)) {
         el.releasePointerCapture(event.pointerId);
       }

package/dist/index.mjs

@@ -3,11 +3,11 @@ import {
   useFreehandCanvas,
   useReportExport,
   useScreenshotStudio
-} from "./chunk-HJ24NSQA.mjs";
+} from "./chunk-YRC4YPMO.mjs";
 import {
   ReportService,
   ScreenshotStudioService
-} from "./chunk-DNKRSL6D.mjs";
+} from "./chunk-P6RJ75US.mjs";
 import {
   CanvasRenderer,
   DeviceConfigService,

package/dist/presentation/index.js

@@ -1482,7 +1482,76 @@ function useCanvasExport(options = {}) {
 // src/presentation/hooks/useReportExport.ts
 var import_react3 = require("react");
 
+// src/infrastructure/services/minimalXlsx.ts
+var XML_HEADER = '<?xml version="1.0" encoding="UTF-8" standalone="yes"?>';
+function escapeXml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
+}
+function safeSheetName(name, index) {
+  const cleaned = name.replace(/[:\\/?*[\]]/g, " ").slice(0, 31).trim();
+  return cleaned.length > 0 ? cleaned : `Sheet${index + 1}`;
+}
+function columnName(index) {
+  let name = "";
+  let n = index;
+  while (n >= 0) {
+    name = String.fromCharCode(65 + n % 26) + name;
+    n = Math.floor(n / 26) - 1;
+  }
+  return name;
+}
+function cellXml(value, row, column) {
+  const ref = `${columnName(column)}${row}`;
+  if (typeof value === "number" && Number.isFinite(value)) {
+    return `<c r="${ref}"><v>${value}</v></c>`;
+  }
+  const text = value === null || value === void 0 ? "" : typeof value === "boolean" ? value ? "TRUE" : "FALSE" : String(value);
+  return `<c r="${ref}" t="inlineStr"><is><t xml:space="preserve">${escapeXml(text)}</t></is></c>`;
+}
+function sheetXml(rows) {
+  const body = rows.map((row, rowIndex) => {
+    const cells = row.map((value, columnIndex) => cellXml(value, rowIndex + 1, columnIndex)).join("");
+    return `<row r="${rowIndex + 1}">${cells}</row>`;
+  }).join("");
+  return `${XML_HEADER}<worksheet xmlns="http://schemas.openxmlformats.org/spreadsheetml/2006/main"><sheetData>${body}</sheetData></worksheet>`;
+}
+async function writeXlsxBlob(sheets, JSZip) {
+  const zip = new JSZip();
+  const safeNames = sheets.map((sheet, index) => safeSheetName(sheet.name, index));
+  zip.file(
+    "[Content_Types].xml",
+    `${XML_HEADER}<Types xmlns="http://schemas.openxmlformats.org/package/2006/content-types"><Default Extension="rels" ContentType="application/vnd.openxmlformats-package.relationships+xml"/><Default Extension="xml" ContentType="application/xml"/><Override PartName="/xl/workbook.xml" ContentType="application/vnd.openxmlformats-officedocument.spreadsheetml.sheet.main+xml"/>` + safeNames.map(
+      (_, index) => `<Override PartName="/xl/worksheets/sheet${index + 1}.xml" ContentType="application/vnd.openxmlformats-officedocument.spreadsheetml.worksheet+xml"/>`
+    ).join("") + "</Types>"
+  );
+  zip.file(
+    "_rels/.rels",
+    `${XML_HEADER}<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships"><Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/officeDocument" Target="xl/workbook.xml"/></Relationships>`
+  );
+  zip.file(
+    "xl/workbook.xml",
+    `${XML_HEADER}<workbook xmlns="http://schemas.openxmlformats.org/spreadsheetml/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships"><sheets>` + safeNames.map((name, index) => `<sheet name="${escapeXml(name)}" sheetId="${index + 1}" r:id="rId${index + 1}"/>`).join("") + "</sheets></workbook>"
+  );
+  zip.file(
+    "xl/_rels/workbook.xml.rels",
+    `${XML_HEADER}<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships">` + safeNames.map(
+      (_, index) => `<Relationship Id="rId${index + 1}" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/worksheet" Target="worksheets/sheet${index + 1}.xml"/>`
+    ).join("") + "</Relationships>"
+  );
+  sheets.forEach((sheet, index) => {
+    zip.file(`xl/worksheets/sheet${index + 1}.xml`, sheetXml(sheet.rows));
+  });
+  return zip.generateAsync({ type: "blob" });
+}
+
 // src/application/services/ReportService.ts
+function recordsToSheet(name, records) {
+  const headers = [...new Set(records.flatMap((record) => Object.keys(record)))];
+  return {
+    name,
+    rows: [headers, ...records.map((record) => headers.map((header) => record[header]))]
+  };
+}
 var ReportService = class _ReportService {
   static getInstance() {
     if (!_ReportService.instance) {
@@ -1528,31 +1597,19 @@ var ReportService = class _ReportService {
    * Export data to Excel
    */
   async exportToExcel(data, options = {}) {
-    const XLSX = await import("xlsx");
-    const wb = XLSX.utils.book_new();
+    const JSZip = (await import("jszip")).default;
     const apps = data.items.filter((i) => i.type === "app").map((i) => ({ Name: i.name, ...i.metrics, ...i.details }));
     const campaigns = data.items.filter((i) => i.type === "campaign").map((i) => ({ Name: i.name, ...i.metrics, ...i.details }));
     const posts = data.items.filter((i) => i.type === "post").map((i) => ({ Name: i.name, ...i.metrics, ...i.details }));
+    const sheets = [];
     if (apps.length > 0) {
-      XLSX.utils.book_append_sheet(
-        wb,
-        XLSX.utils.json_to_sheet(apps),
-        options.sheetName || "Apps"
-      );
+      sheets.push(recordsToSheet(options.sheetName || "Apps", apps));
     }
     if (campaigns.length > 0) {
-      XLSX.utils.book_append_sheet(
-        wb,
-        XLSX.utils.json_to_sheet(campaigns),
-        "Campaigns"
-      );
+      sheets.push(recordsToSheet("Campaigns", campaigns));
     }
     if (posts.length > 0) {
-      XLSX.utils.book_append_sheet(
-        wb,
-        XLSX.utils.json_to_sheet(posts),
-        "Posts"
-      );
+      sheets.push(recordsToSheet("Posts", posts));
     }
     if (options.includeSummary !== false) {
       const summary = [
@@ -1570,13 +1627,18 @@ var ReportService = class _ReportService {
           Value: (/* @__PURE__ */ new Date()).toLocaleDateString()
         }
       ];
-      XLSX.utils.book_append_sheet(
-        wb,
-        XLSX.utils.json_to_sheet(summary),
-        "Summary"
-      );
+      sheets.push(recordsToSheet("Summary", summary));
     }
-    XLSX.writeFile(wb, options.filename || "report.xlsx");
+    if (sheets.length === 0) {
+      sheets.push({ name: options.sheetName || "Sheet1", rows: [] });
+    }
+    const blob = await writeXlsxBlob(sheets, JSZip);
+    const url = URL.createObjectURL(blob);
+    const link = document.createElement("a");
+    link.href = url;
+    link.download = options.filename || "report.xlsx";
+    link.click();
+    URL.revokeObjectURL(url);
   }
   /**
    * Export data to CSV
@@ -1749,6 +1811,7 @@ function useFreehandCanvas(options = {}) {
   const canvasRef = (0, import_react4.useRef)(null);
   const strokesRef = (0, import_react4.useRef)([]);
   const activeStrokeRef = (0, import_react4.useRef)(null);
+  const activePointerIdRef = (0, import_react4.useRef)(null);
   const dprRef = (0, import_react4.useRef)(1);
   const [strokeCount, setStrokeCount] = (0, import_react4.useState)(0);
   const redraw = (0, import_react4.useCallback)(() => {
@@ -1836,8 +1899,10 @@ function useFreehandCanvas(options = {}) {
     }
     function onPointerDown(event) {
       if (event.button !== 0 && event.pointerType === "mouse") return;
+      if (activeStrokeRef.current != null) return;
       event.preventDefault();
       el.setPointerCapture(event.pointerId);
+      activePointerIdRef.current = event.pointerId;
       const { brushSize: size, color: ink, pressureEnabled: dynamic } = optionsRef.current;
       const stroke = {
         size,
@@ -1850,7 +1915,7 @@ function useFreehandCanvas(options = {}) {
     }
     function onPointerMove(event) {
       const stroke = activeStrokeRef.current;
-      if (!stroke) return;
+      if (!stroke || event.pointerId !== activePointerIdRef.current) return;
       event.preventDefault();
       const point = pointFrom(event);
       const previous = stroke.points[stroke.points.length - 1];
@@ -1859,8 +1924,9 @@ function useFreehandCanvas(options = {}) {
     }
     function commit(event) {
       const stroke = activeStrokeRef.current;
-      if (!stroke) return;
+      if (!stroke || event.pointerId !== activePointerIdRef.current) return;
       activeStrokeRef.current = null;
+      activePointerIdRef.current = null;
       if (el.hasPointerCapture(event.pointerId)) {
         el.releasePointerCapture(event.pointerId);
       }

package/dist/presentation/index.mjs

@@ -3,8 +3,8 @@ import {
   useFreehandCanvas,
   useReportExport,
   useScreenshotStudio
-} from "../chunk-HJ24NSQA.mjs";
-import "../chunk-DNKRSL6D.mjs";
+} from "../chunk-YRC4YPMO.mjs";
+import "../chunk-P6RJ75US.mjs";
 import "../chunk-UOGTEMIJ.mjs";
 import "../chunk-Z6IB4BQV.mjs";
 import "../chunk-MC6PNV2F.mjs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@umituz/web-canvas",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "Comprehensive canvas and screenshot generation library with device frames, patterns, and PDF export",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -77,7 +77,7 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/umituz/web-canvas"
+    "url": "git+https://github.com/umituz/web-canvas.git"
   },
   "bugs": {
     "url": "https://github.com/umituz/web-canvas/issues"
@@ -97,7 +97,6 @@
   "dependencies": {
     "html2canvas": "^1.4.1",
     "jspdf": "^4.2.1",
-    "jszip": "^3.10.1",
-    "xlsx": "^0.18.5"
+    "jszip": "^3.10.1"
   }
 }

package/src/application/services/ReportService.ts

@@ -5,6 +5,20 @@
 
 import type { ReportData } from '../../domain/types/report.types';
 import type { PDFExportOptions, ExcelExportOptions } from '../../domain/types/report.types';
+import { writeXlsxBlob } from '../../infrastructure/services/minimalXlsx';
+import type { XlsxSheet } from '../../infrastructure/services/minimalXlsx';
+
+/** Flat records → header + value rows, matching json_to_sheet's shape. */
+function recordsToSheet(
+  name: string,
+  records: Record<string, string | number | boolean | null | undefined>[]
+): XlsxSheet {
+  const headers = [...new Set(records.flatMap((record) => Object.keys(record)))];
+  return {
+    name,
+    rows: [headers, ...records.map((record) => headers.map((header) => record[header]))],
+  };
+}
 
 export class ReportService {
   private static instance: ReportService;
@@ -71,8 +85,7 @@ export class ReportService {
     data: ReportData,
     options: ExcelExportOptions = {}
   ): Promise<void> {
-    const XLSX = await import('xlsx');
-    const wb = XLSX.utils.book_new();
+    const JSZip = (await import('jszip')).default;
 
     // Group items by type
     const apps = data.items
@@ -85,26 +98,15 @@ export class ReportService {
       .filter((i) => i.type === 'post')
       .map((i) => ({ Name: i.name, ...i.metrics, ...i.details }));
 
+    const sheets: XlsxSheet[] = [];
     if (apps.length > 0) {
-      XLSX.utils.book_append_sheet(
-        wb,
-        XLSX.utils.json_to_sheet(apps),
-        options.sheetName || 'Apps'
-      );
+      sheets.push(recordsToSheet(options.sheetName || 'Apps', apps));
     }
     if (campaigns.length > 0) {
-      XLSX.utils.book_append_sheet(
-        wb,
-        XLSX.utils.json_to_sheet(campaigns),
-        'Campaigns'
-      );
+      sheets.push(recordsToSheet('Campaigns', campaigns));
     }
     if (posts.length > 0) {
-      XLSX.utils.book_append_sheet(
-        wb,
-        XLSX.utils.json_to_sheet(posts),
-        'Posts'
-      );
+      sheets.push(recordsToSheet('Posts', posts));
     }
 
     // Summary sheet
@@ -124,14 +126,20 @@ export class ReportService {
           Value: new Date().toLocaleDateString(),
         },
       ];
-      XLSX.utils.book_append_sheet(
-        wb,
-        XLSX.utils.json_to_sheet(summary),
-        'Summary'
-      );
+      sheets.push(recordsToSheet('Summary', summary));
+    }
+
+    if (sheets.length === 0) {
+      sheets.push({ name: options.sheetName || 'Sheet1', rows: [] });
     }
 
-    XLSX.writeFile(wb, options.filename || 'report.xlsx');
+    const blob = await writeXlsxBlob(sheets, JSZip);
+    const url = URL.createObjectURL(blob);
+    const link = document.createElement('a');
+    link.href = url;
+    link.download = options.filename || 'report.xlsx';
+    link.click();
+    URL.revokeObjectURL(url);
   }
 
   /**

package/src/infrastructure/services/minimalXlsx.ts

@@ -0,0 +1,122 @@
+/**
+ * Minimal XLSX writer — replaces the unmaintained npm `xlsx` (SheetJS)
+ * dependency, whose registry build carries open prototype-pollution and
+ * ReDoS advisories with no registry fix. The report export only ever
+ * writes flat tables (header row + primitive cells), so a hand-rolled
+ * SpreadsheetML package on top of jszip covers the need: inline-string
+ * and numeric cells, multiple sheets, Excel/LibreOffice/Sheets-compatible.
+ */
+
+export interface XlsxSheet {
+  name: string;
+  /** Rows of primitive cells; the first row is the header. */
+  rows: (string | number | boolean | null | undefined)[][];
+}
+
+const XML_HEADER = '<?xml version="1.0" encoding="UTF-8" standalone="yes"?>';
+
+function escapeXml(value: string): string {
+  return value
+    .replace(/&/g, '&amp;')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;')
+    .replace(/"/g, '&quot;')
+    .replace(/'/g, '&apos;');
+}
+
+/** Excel sheet names: max 31 chars, no : \ / ? * [ ]. */
+function safeSheetName(name: string, index: number): string {
+  const cleaned = name.replace(/[:\\/?*[\]]/g, ' ').slice(0, 31).trim();
+  return cleaned.length > 0 ? cleaned : `Sheet${index + 1}`;
+}
+
+function columnName(index: number): string {
+  let name = '';
+  let n = index;
+  while (n >= 0) {
+    name = String.fromCharCode(65 + (n % 26)) + name;
+    n = Math.floor(n / 26) - 1;
+  }
+  return name;
+}
+
+function cellXml(value: string | number | boolean | null | undefined, row: number, column: number): string {
+  const ref = `${columnName(column)}${row}`;
+  if (typeof value === 'number' && Number.isFinite(value)) {
+    return `<c r="${ref}"><v>${value}</v></c>`;
+  }
+  const text =
+    value === null || value === undefined
+      ? ''
+      : typeof value === 'boolean'
+        ? value
+          ? 'TRUE'
+          : 'FALSE'
+        : String(value);
+  return `<c r="${ref}" t="inlineStr"><is><t xml:space="preserve">${escapeXml(text)}</t></is></c>`;
+}
+
+function sheetXml(rows: XlsxSheet['rows']): string {
+  const body = rows
+    .map((row, rowIndex) => {
+      const cells = row.map((value, columnIndex) => cellXml(value, rowIndex + 1, columnIndex)).join('');
+      return `<row r="${rowIndex + 1}">${cells}</row>`;
+    })
+    .join('');
+  return `${XML_HEADER}<worksheet xmlns="http://schemas.openxmlformats.org/spreadsheetml/2006/main"><sheetData>${body}</sheetData></worksheet>`;
+}
+
+/** Assembles the sheets into a .xlsx zip blob using jszip. */
+export async function writeXlsxBlob(sheets: XlsxSheet[], JSZip: typeof import('jszip')): Promise<Blob> {
+  const zip = new JSZip();
+  const safeNames = sheets.map((sheet, index) => safeSheetName(sheet.name, index));
+
+  zip.file(
+    '[Content_Types].xml',
+    `${XML_HEADER}<Types xmlns="http://schemas.openxmlformats.org/package/2006/content-types">` +
+      '<Default Extension="rels" ContentType="application/vnd.openxmlformats-package.relationships+xml"/>' +
+      '<Default Extension="xml" ContentType="application/xml"/>' +
+      '<Override PartName="/xl/workbook.xml" ContentType="application/vnd.openxmlformats-officedocument.spreadsheetml.sheet.main+xml"/>' +
+      safeNames
+        .map(
+          (_, index) =>
+            `<Override PartName="/xl/worksheets/sheet${index + 1}.xml" ContentType="application/vnd.openxmlformats-officedocument.spreadsheetml.worksheet+xml"/>`,
+        )
+        .join('') +
+      '</Types>',
+  );
+
+  zip.file(
+    '_rels/.rels',
+    `${XML_HEADER}<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships">` +
+      '<Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/officeDocument" Target="xl/workbook.xml"/>' +
+      '</Relationships>',
+  );
+
+  zip.file(
+    'xl/workbook.xml',
+    `${XML_HEADER}<workbook xmlns="http://schemas.openxmlformats.org/spreadsheetml/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships"><sheets>` +
+      safeNames
+        .map((name, index) => `<sheet name="${escapeXml(name)}" sheetId="${index + 1}" r:id="rId${index + 1}"/>`)
+        .join('') +
+      '</sheets></workbook>',
+  );
+
+  zip.file(
+    'xl/_rels/workbook.xml.rels',
+    `${XML_HEADER}<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships">` +
+      safeNames
+        .map(
+          (_, index) =>
+            `<Relationship Id="rId${index + 1}" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/worksheet" Target="worksheets/sheet${index + 1}.xml"/>`,
+        )
+        .join('') +
+      '</Relationships>',
+  );
+
+  sheets.forEach((sheet, index) => {
+    zip.file(`xl/worksheets/sheet${index + 1}.xml`, sheetXml(sheet.rows));
+  });
+
+  return zip.generateAsync({ type: 'blob' });
+}

package/src/presentation/hooks/useFreehandCanvas.ts

@@ -64,6 +64,7 @@ export function useFreehandCanvas(
   const canvasRef = useRef<HTMLCanvasElement | null>(null);
   const strokesRef = useRef<FreehandStroke[]>([]);
   const activeStrokeRef = useRef<FreehandStroke | null>(null);
+  const activePointerIdRef = useRef<number | null>(null);
   const dprRef = useRef(1);
 
   const [strokeCount, setStrokeCount] = useState(0);
@@ -168,8 +169,12 @@ export function useFreehandCanvas(
 
     function onPointerDown(event: PointerEvent): void {
       if (event.button !== 0 && event.pointerType === 'mouse') return;
+      // Only one stroke at a time: a resting palm or second finger touching
+      // mid-stroke must not hijack or corrupt the active stroke.
+      if (activeStrokeRef.current != null) return;
       event.preventDefault();
       el.setPointerCapture(event.pointerId);
+      activePointerIdRef.current = event.pointerId;
       const { brushSize: size, color: ink, pressureEnabled: dynamic } = optionsRef.current;
       const stroke: FreehandStroke = {
         size,
@@ -183,7 +188,7 @@ export function useFreehandCanvas(
 
     function onPointerMove(event: PointerEvent): void {
       const stroke = activeStrokeRef.current;
-      if (!stroke) return;
+      if (!stroke || event.pointerId !== activePointerIdRef.current) return;
       event.preventDefault();
       const point = pointFrom(event);
       const previous = stroke.points[stroke.points.length - 1];
@@ -193,8 +198,9 @@ export function useFreehandCanvas(
 
     function commit(event: PointerEvent): void {
       const stroke = activeStrokeRef.current;
-      if (!stroke) return;
+      if (!stroke || event.pointerId !== activePointerIdRef.current) return;
       activeStrokeRef.current = null;
+      activePointerIdRef.current = null;
       if (el.hasPointerCapture(event.pointerId)) {
         el.releasePointerCapture(event.pointerId);
       }