@ai-matrx/print 0.8.8 → 0.8.10

package/dist/document.d.cts

@@ -548,14 +548,22 @@ interface HtmlRenderContext {
     xhtml?: boolean;
     /** Where an in-document id lives (EPUB chapters split the document). */
     hrefFor?: (id: string) => string;
-    /** Image URL override (EPUB packages images inside the book). */
-    srcFor?: (url: string) => string;
+    /** Image URL override (EPUB packages images inside the book; the Markdown→HTML engine's asset port). `null` = unavailable. */
+    srcFor?: (url: string) => string | null;
 }
 declare function renderBlocksHtml(blocks: Block[], x: HtmlRenderContext): string;
 /** The print stylesheet for a document's settings. Light mode, always. */
 declare function documentCss(s: DocumentSettings): string;
 interface DocumentHtmlOptions {
     images?: ImageMap | undefined;
+    /** Image URL override (see `HtmlRenderContext.srcFor`). */
+    srcFor?: ((url: string) => string | null) | undefined;
+    /**
+     * Rewrites the rendered body (cover + sections) before it is placed in the
+     * page — the Markdown→HTML engine renders kind atoms and applies the
+     * allow-list here, so the trusted page shell and its CSS stay intact.
+     */
+    transformBody?: ((html: string) => string) | undefined;
 }
 /** A complete, standalone print-grade HTML document. */
 declare function documentToHtml(tree: DocTree, options?: DocumentHtmlOptions): string;

package/dist/document.d.ts

@@ -548,14 +548,22 @@ interface HtmlRenderContext {
     xhtml?: boolean;
     /** Where an in-document id lives (EPUB chapters split the document). */
     hrefFor?: (id: string) => string;
-    /** Image URL override (EPUB packages images inside the book). */
-    srcFor?: (url: string) => string;
+    /** Image URL override (EPUB packages images inside the book; the Markdown→HTML engine's asset port). `null` = unavailable. */
+    srcFor?: (url: string) => string | null;
 }
 declare function renderBlocksHtml(blocks: Block[], x: HtmlRenderContext): string;
 /** The print stylesheet for a document's settings. Light mode, always. */
 declare function documentCss(s: DocumentSettings): string;
 interface DocumentHtmlOptions {
     images?: ImageMap | undefined;
+    /** Image URL override (see `HtmlRenderContext.srcFor`). */
+    srcFor?: ((url: string) => string | null) | undefined;
+    /**
+     * Rewrites the rendered body (cover + sections) before it is placed in the
+     * page — the Markdown→HTML engine renders kind atoms and applies the
+     * allow-list here, so the trusted page shell and its CSS stay intact.
+     */
+    transformBody?: ((html: string) => string) | undefined;
 }
 /** A complete, standalone print-grade HTML document. */
 declare function documentToHtml(tree: DocTree, options?: DocumentHtmlOptions): string;

package/dist/document.js

@@ -285,6 +285,49 @@ var MATHML_SCHEMA = {
 function sanitizeMathml(mathml) {
   return sanitizeHtmlFragment(mathml, MATHML_SCHEMA);
 }
+var MATH_SVG_TAGS = ["svg", "g", "path", "rect", "line", "polyline", "polygon", "circle", "ellipse", "text", "title", "desc"];
+var MATH_SVG_ATTRIBUTES = [
+  "xmlns",
+  "width",
+  "height",
+  "viewBox",
+  "role",
+  "focusable",
+  "ariaHidden",
+  "ariaLabel",
+  "stroke",
+  "fill",
+  "strokeWidth",
+  "strokeLinecap",
+  "strokeLinejoin",
+  "transform",
+  "d",
+  "x",
+  "y",
+  "x1",
+  "y1",
+  "x2",
+  "y2",
+  "points",
+  "cx",
+  "cy",
+  "r",
+  "rx",
+  "ry",
+  "dataMmlNode",
+  "dataC"
+];
+var MATH_SVG_SCHEMA = {
+  tagNames: MATH_SVG_TAGS,
+  attributes: { "*": MATH_SVG_ATTRIBUTES },
+  strip: ["script", "style", "foreignObject"],
+  clobberPrefix: "",
+  clobber: [],
+  protocols: {}
+};
+function sanitizeMathSvg(svg) {
+  return sanitizeHtmlFragment(svg, MATH_SVG_SCHEMA);
+}
 
 // src/document/math.ts
 var MATH_OPEN = "\uE100";
@@ -358,7 +401,7 @@ async function typesetMathSpans(spans) {
       }
       const entry = { mathml: sanitizeMathml(mathml.replace(/\n\s*/g, "")) };
       if (s.display) {
-        const svg = mj.svg(s.tex, true);
+        const svg = sanitizeMathSvg(mj.svg(s.tex, true));
         entry.svg = svg;
         entry.widthEx = Number(/width="([\d.]+)ex"/.exec(svg)?.[1] ?? 0);
         entry.heightEx = Number(/height="([\d.]+)ex"/.exec(svg)?.[1] ?? 0);
@@ -3468,7 +3511,10 @@ function mathHtml(tex, display, x, inText = false) {
 }
 var href = (id, x) => x.hrefFor ? x.hrefFor(id) : `#${id}`;
 function imageSrc(url, x) {
-  if (x.srcFor) return x.srcFor(url);
+  if (x.srcFor) {
+    const src = x.srcFor(url);
+    return src === null ? null : safeUrl(src);
+  }
   const resolved = x.images?.get(url);
   if (resolved) return resolved.dataUrl;
   return safeUrl(url);
@@ -3649,7 +3695,7 @@ ${[2, 3, 4, 5, 6].map((l) => `.doc-toc .toc-l${l}{padding-left:${(l - 1) * 1.2}e
 }
 function documentToHtml(tree, options = {}) {
   const s = tree.settings;
-  const x = { tree, images: options.images };
+  const x = { tree, images: options.images, ...options.srcFor ? { srcFor: options.srcFor } : {} };
   const sections = tree.sections.map((sec) => {
     const cls = [
       "doc-section",
@@ -3672,8 +3718,8 @@ ${s.author ? `<meta name="author" content="${escapeHtml(s.author)}">` : ""}
 </head>
 <body>
 <main class="doc">
-${s.cover ? coverHtml(s, x) : ""}
-${sections}
+${(options.transformBody ?? ((h) => h))(`${s.cover ? coverHtml(s, x) : ""}
+${sections}`)}
 </main>
 </body>
 </html>`;
@@ -5012,6 +5058,7 @@ import { gfm } from "micromark-extension-gfm";
 
 // src/markdown.ts
 import { escapeHtml as escapeHtml3 } from "@ai-matrx/kit/html-escape";
+import { codeSpanText, findTableEnd, mapCodeRanges, rowCells, tableStartsAt, unescapeCellPipes } from "@ai-matrx/content-ir/source";
 function removeThinkingContent(content) {
   if (!content) return "";
   const hide = (_match, before, after) => before.length >= 2 || after.length >= 2 ? "\n\n" : "\n";