📦 deps(thirdparty): update snapshots

2026-07-22 10:09:47 +00:00
parent 316c012df0
commit 60364c6660
353 changed files with 24740 additions and 1264 deletions
@@ -0,0 +1,74 @@
+---
+name: markstream-custom-components
+description: "Override Markstream node renderers and add trusted custom tags across Vue, React, Svelte, and Angular using scoped or renderer-local mappings."
+category: frontend
+risk: critical
+source: https://github.com/Simon-He95/markstream-vue/tree/main/.agents/skills/markstream-custom-components
+source_repo: Simon-He95/markstream-vue
+source_type: official
+date_added: "2026-07-21"
+author: Simon-He95
+tags: [markdown, components, vue, react, svelte, angular]
+tools: [claude, cursor, gemini, codex]
+license: MIT
+license_source: https://github.com/Simon-He95/markstream-vue/blob/main/license
+---
+
+# Markstream Custom Components
+
+## Overview
+
+Customize specific Markstream nodes or trusted custom tags without replacing the parser or leaking global renderer state. Read [references/patterns.md](references/patterns.md) first.
+
+## When to Use
+
+Use to replace built-ins such as `image`, `link`, `code_block`, `mermaid`, or `inline_code`; render trusted tags such as `thinking`; or scope overrides to one renderer or app. Use parser transforms only when token or AST reshaping is required.
+
+## Workflow
+
+Before changing dependencies or source files, inspect the existing package manager and project conventions, preview the intended edits, and obtain explicit user approval.
+
+1. Classify the change as a built-in override, trusted tag, or parser transform.
+2. Prefer scoped mappings. Vue, Vue 2, Svelte, and Angular can use `setCustomComponents(customId, mapping)`; Svelte and Angular can also pass renderer-local maps.
+3. In React, prefer `streamingComponents` for parser-backed nodes and `htmlComponents` for sanitized attributes plus children.
+4. Start with leaf nodes before containers that must preserve children.
+5. For trusted tag bodies containing Markdown, use a nested renderer with the same allowlist. Do not add a second smooth-streaming loop.
+6. Preserve node/loading props, identity keys, scope IDs, theme state, and preview-height estimates for async diagrams.
+7. Remove temporary scoped registrations on cleanup and validate repeated and nested tags.
+
+## Example
+
+```tsx
+import MarkdownRender, {
+  type NodeComponentProps,
+  setCustomComponents,
+} from 'markstream-react'
+import 'markstream-react/index.css'
+
+function ThinkingNode({ node }: NodeComponentProps<any>) {
+  return <details><summary>Thinking</summary>{node.content}</details>
+}
+
+setCustomComponents('assistant-panel', { thinking: ThinkingNode })
+
+export function Answer({ markdown }: { markdown: string }) {
+  return (
+    <MarkdownRender
+      content={markdown}
+      customId="assistant-panel"
+      customHtmlTags={['thinking']}
+      htmlPolicy="safe"
+    />
+  )
+}
+```
+
+## Limitations
+
+- Component overrides cannot reproduce arbitrary remark/rehype transforms.
+- Container overrides require careful child rendering and accessibility review.
+- Framework registration APIs are not interchangeable.
+
+## Security & Safety Notes
+
+Treat custom HTML-like tags as trusted input only. Keep safe HTML enabled and do not pass unsanitized attributes into host components.
@@ -0,0 +1,14 @@
+# Override Patterns
+
+| Key | Typical use |
+|---|---|
+| `image` | Lightboxes, captions, lazy loading |
+| `link` | Routing, analytics, tooltips |
+| `code_block` | Fenced code blocks |
+| `mermaid`, `d2`, `infographic` | One diagram renderer |
+| `inline_code` | Inline typography |
+| `heading`, `paragraph`, `list_item` | Containers preserving children |
+
+For Vue, Vue 2, Svelte, or Angular shared registration, allowlist the tag, register it under a scoped `customId`, and pass that scope to the renderer. Prefer renderer-local maps when sharing is unnecessary.
+
+For React, use `streamingComponents` for parser-backed tags and `htmlComponents` for sanitized HTML-style props. When a tag body contains Markdown, use a nested renderer with the same allowlist and no independent pacing.