@ecsplico/editor 0.0.0-stage → 1.0.0

package/dist/markdown/document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.js","names":[],"sources":["../../src/markdown/document.ts"],"sourcesContent":["import type { Editor, JSONContent } from '@tiptap/core'\nimport { splitFences } from '../core/fences'\nimport { parseBlocks, pipelineOf } from '../core/pipeline'\nimport { EMPTY_EDITOR_CONTENT } from '../core/schema'\nimport { editorEntryOf } from '../core/editor-ui'\nimport { createTranslator, type Translate } from '../i18n'\nimport { enforceUrlPolicy, locate, type MarkdownDiagnostic, type MarkdownPolicy } from './policy'\n\n/** A Markdown body as document JSON, with what the parse dropped or could not understand. */\nexport interface MarkdownContent {\n  content: JSONContent\n  diagnostics: MarkdownDiagnostic[]\n}\n\n/** The part of `@tiptap/markdown`'s manager the HTML policy swaps out for the duration of one parse. */\ninterface HtmlParsing {\n  parseHTMLToken: (token: { raw?: string, text?: string }) => unknown\n}\n\n/**\n * Runs `parse` with raw HTML tokens (block and inline, tags and comments) dropped instead of handed to the schema's\n * `parseHTML` rules, and reports each in `diagnostics`.\n */\nfunction withoutRawHtml<T>(editor: Editor, source: string, diagnostics: MarkdownDiagnostic[], t: Translate, parse: () => T): T {\n  const manager = editor.markdown as unknown as HtmlParsing | undefined\n  if (!manager) return parse()\n  const own = Object.hasOwn(manager, 'parseHTMLToken')\n  const original = manager.parseHTMLToken\n  let from = 0\n  manager.parseHTMLToken = (token) => {\n    const html = (token.raw ?? token.text ?? '').trim()\n    if (html) {\n      const { line, next } = locate(source, html, from)\n      from = next\n      diagnostics.push({ code: 'raw-html', severity: 'warning', message: t('markdown.diagnostic.rawHtml', { html: JSON.stringify(html.length > 60 ? `${html.slice(0, 57)}…` : html) }), ...(line && { line }) })\n    }\n    return null\n  }\n  try {\n    return parse()\n  }\n  finally {\n    if (own) manager.parseHTMLToken = original\n    else delete (manager as Partial<HtmlParsing>).parseHTMLToken\n  }\n}\n\nconst opaqueFences = (node: JSONContent): JSONContent[] => [...(node.type === 'opaqueFence' ? [node] : []), ...(node.content ?? []).flatMap(opaqueFences)]\n\n/**\n * `body` (Markdown without frontmatter) as the document JSON of `editor`, plus `diagnostics`: the preset's block\n * pipeline parses it (`parseBlocks`: Markdown tokens, then the features' normalize and segment stages), the blocks\n * become the children of a `doc`, `policy` is enforced and the preset's `migrateContent` stage runs. An empty body is\n * the empty document (one empty paragraph). Nothing is applied to the editor.\n *\n * The diagnostics' `message` is in the language of `options.t`, by default that of the editor's registered surface, else\n * the default locale.\n *\n * Diagnostics: `raw-html` (dropped unless `policy.allowHtml`), `unsafe-url` (links and media with a scheme other than\n * http(s), mailto and tel are dropped; base64 `data:image` URLs are kept only with `policy.allowDataUrls`),\n * `unknown-fence` (a `:::` fence of a kind no feature registered, kept verbatim as an `opaqueFence`), and the fatal\n * `unclosed-fence` and `invalid-fence-meta` (a fence opener that stayed plain text).\n */\nexport function markdownToContent(editor: Editor, body: string, options: { policy?: MarkdownPolicy, t?: Translate } = {}): MarkdownContent {\n  const policy = options.policy ?? {}\n  const t = options.t ?? editorEntryOf(editor)?.ctx.t ?? createTranslator()\n  const diagnostics: MarkdownDiagnostic[] = []\n\n  const { blocks } = policy.allowHtml ? parseBlocks(editor, body) : withoutRawHtml(editor, body, diagnostics, t, () => parseBlocks(editor, body))\n  let content: JSONContent = blocks.length ? { type: 'doc', content: blocks } : EMPTY_EDITOR_CONTENT\n  content = enforceUrlPolicy(content, policy, body, diagnostics, t)\n  if (!content.content?.length) content = EMPTY_EDITOR_CONTENT\n\n  for (const problem of splitFences(body).problems) {\n    diagnostics.push({\n      code: problem.code,\n      severity: 'error',\n      line: problem.line,\n      message: t(problem.code === 'unclosed-fence' ? 'markdown.diagnostic.unclosedFence' : 'markdown.diagnostic.invalidFenceMeta', { kind: problem.kind }),\n    })\n  }\n  let from = 0\n  for (const fence of opaqueFences(content)) {\n    const raw = String(fence.attrs?.raw ?? '')\n    const { line, next } = locate(body, raw, from)\n    from = next\n    diagnostics.push({ code: 'unknown-fence', severity: 'info', message: t('markdown.diagnostic.unknownFence', { kind: String(fence.attrs?.kind) }), ...(line && { line }) })\n  }\n\n  return { content: pipelineOf(editor).migrateContent(content), diagnostics }\n}\n\n/**\n * The document of `editor` as Markdown (`editor.getMarkdown()`: the registered Markdown handlers render every node,\n * tables as pipe tables and task items as `- [ ]`/`- [x]`), without trailing line breaks: Tiptap keeps an empty\n * paragraph after a last block that is not a paragraph, and it is not content. Callers that write files add their own\n * final line break.\n */\nexport function contentToMarkdown(editor: Editor): string {\n  return editor.getMarkdown().replace(/\\n+$/, '')\n}\n"],"mappings":";;;;;;;;;;;AAuBA,SAAS,eAAkB,QAAgB,QAAgB,aAAmC,GAAc,OAAmB;CAC7H,MAAM,UAAU,OAAO;CACvB,IAAI,CAAC,SAAS,OAAO,MAAM;CAC3B,MAAM,MAAM,OAAO,OAAO,SAAS,gBAAgB;CACnD,MAAM,WAAW,QAAQ;CACzB,IAAI,OAAO;CACX,QAAQ,kBAAkB,UAAU;EAClC,MAAM,QAAQ,MAAM,OAAO,MAAM,QAAQ,GAAA,CAAI,KAAK;EAClD,IAAI,MAAM;GACR,MAAM,EAAE,MAAM,SAAS,OAAO,QAAQ,MAAM,IAAI;GAChD,OAAO;GACP,YAAY,KAAK;IAAE,MAAM;IAAY,UAAU;IAAW,SAAS,EAAE,+BAA+B,EAAE,MAAM,KAAK,UAAU,KAAK,SAAS,KAAK,GAAG,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC;IAAG,GAAI,QAAQ,EAAE,KAAK;GAAG,CAAC;EAC3M;EACA,OAAO;CACT;CACA,IAAI;EACF,OAAO,MAAM;CACf,UACQ;EACN,IAAI,KAAK,QAAQ,iBAAiB;OAC7B,OAAQ,QAAiC;CAChD;AACF;AAEA,MAAM,gBAAgB,SAAqC,CAAC,GAAI,KAAK,SAAS,gBAAgB,CAAC,IAAI,IAAI,CAAC,GAAI,IAAI,KAAK,WAAW,CAAC,EAAA,CAAG,QAAQ,YAAY,CAAC;;;;;;;;;;;;;;;AAgBzJ,SAAgB,kBAAkB,QAAgB,MAAc,UAAsD,CAAC,GAAoB;CACzI,MAAM,SAAS,QAAQ,UAAU,CAAC;CAClC,MAAM,IAAI,QAAQ,KAAK,cAAc,MAAM,CAAC,EAAE,IAAI,KAAK,iBAAiB;CACxE,MAAM,cAAoC,CAAC;CAE3C,MAAM,EAAE,WAAW,OAAO,YAAY,YAAY,QAAQ,IAAI,IAAI,eAAe,QAAQ,MAAM,aAAa,SAAS,YAAY,QAAQ,IAAI,CAAC;CAC9I,IAAI,UAAuB,OAAO,SAAS;EAAE,MAAM;EAAO,SAAS;CAAO,IAAI;CAC9E,UAAU,iBAAiB,SAAS,QAAQ,MAAM,aAAa,CAAC;CAChE,IAAI,CAAC,QAAQ,SAAS,QAAQ,UAAU;CAExC,KAAK,MAAM,WAAW,YAAY,IAAI,CAAC,CAAC,UACtC,YAAY,KAAK;EACf,MAAM,QAAQ;EACd,UAAU;EACV,MAAM,QAAQ;EACd,SAAS,EAAE,QAAQ,SAAS,mBAAmB,sCAAsC,wCAAwC,EAAE,MAAM,QAAQ,KAAK,CAAC;CACrJ,CAAC;CAEH,IAAI,OAAO;CACX,KAAK,MAAM,SAAS,aAAa,OAAO,GAAG;EACzC,MAAM,MAAM,OAAO,MAAM,OAAO,OAAO,EAAE;EACzC,MAAM,EAAE,MAAM,SAAS,OAAO,MAAM,KAAK,IAAI;EAC7C,OAAO;EACP,YAAY,KAAK;GAAE,MAAM;GAAiB,UAAU;GAAQ,SAAS,EAAE,oCAAoC,EAAE,MAAM,OAAO,MAAM,OAAO,IAAI,EAAE,CAAC;GAAG,GAAI,QAAQ,EAAE,KAAK;EAAG,CAAC;CAC1K;CAEA,OAAO;EAAE,SAAS,WAAW,MAAM,CAAC,CAAC,eAAe,OAAO;EAAG;CAAY;AAC5E;;;;;;;AAQA,SAAgB,kBAAkB,QAAwB;CACxD,OAAO,OAAO,YAAY,CAAC,CAAC,QAAQ,QAAQ,EAAE;AAChD"}

package/dist/markdown/frontmatter.d.ts

@@ -0,0 +1,18 @@
+//#region src/markdown/frontmatter.d.ts
+/** A Markdown text split into its YAML frontmatter block and the body after it. */
+export interface SplitMarkdown {
+  /** The frontmatter block verbatim, both `---` fence lines, the line break after the closing one and the blank lines separating it from the body included; null when the text has none. */
+  frontmatter: string | null;
+  /** Everything after the frontmatter block (the whole text without one). */
+  body: string;
+}
+/**
+ * Splits YAML frontmatter off `text`. The block is only recognised at offset 0 (a `---` line further down is a thematic
+ * break or a table border, never frontmatter) and is returned verbatim, so `joinFrontmatter(...splitFrontmatter(text))`
+ * gives `text` back byte for byte. The YAML itself is not parsed.
+ */
+export declare function splitFrontmatter(text: string): SplitMarkdown;
+/** `body` behind `frontmatter` (as `splitFrontmatter` returns it); without frontmatter, `body` itself. */
+export declare function joinFrontmatter(frontmatter: string | null, body: string): string;
+//#endregion
+//# sourceMappingURL=frontmatter.d.ts.map

package/dist/markdown/frontmatter.js

@@ -0,0 +1,32 @@
+//#region src/markdown/frontmatter.ts
+/**
+* `---`, any lines, `---`: each fence on a line of its own, the closing one ended by a line break or the end of the text.
+* Blank lines after the closing fence belong to the block: the body serializer never writes leading blank lines, so a
+* separator kept in the body would vanish on the first edit.
+*/
+const FRONTMATTER = /^---[ \t]*\r?\n(?:[\s\S]*?\r?\n)?---[ \t]*(?:\r?\n(?:[ \t]*\r?\n)*|$)/;
+/**
+* Splits YAML frontmatter off `text`. The block is only recognised at offset 0 (a `---` line further down is a thematic
+* break or a table border, never frontmatter) and is returned verbatim, so `joinFrontmatter(...splitFrontmatter(text))`
+* gives `text` back byte for byte. The YAML itself is not parsed.
+*/
+function splitFrontmatter(text) {
+	const match = FRONTMATTER.exec(text);
+	if (!match) return {
+		frontmatter: null,
+		body: text
+	};
+	return {
+		frontmatter: match[0],
+		body: text.slice(match[0].length)
+	};
+}
+/** `body` behind `frontmatter` (as `splitFrontmatter` returns it); without frontmatter, `body` itself. */
+function joinFrontmatter(frontmatter, body) {
+	if (frontmatter === null) return body;
+	return frontmatter.endsWith("\n") || !body ? frontmatter + body : `${frontmatter}\n${body}`;
+}
+//#endregion
+export { joinFrontmatter, splitFrontmatter };
+
+//# sourceMappingURL=frontmatter.js.map

package/dist/markdown/frontmatter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontmatter.js","names":[],"sources":["../../src/markdown/frontmatter.ts"],"sourcesContent":["/** A Markdown text split into its YAML frontmatter block and the body after it. */\nexport interface SplitMarkdown {\n  /** The frontmatter block verbatim, both `---` fence lines, the line break after the closing one and the blank lines separating it from the body included; null when the text has none. */\n  frontmatter: string | null\n  /** Everything after the frontmatter block (the whole text without one). */\n  body: string\n}\n\n/**\n * `---`, any lines, `---`: each fence on a line of its own, the closing one ended by a line break or the end of the text.\n * Blank lines after the closing fence belong to the block: the body serializer never writes leading blank lines, so a\n * separator kept in the body would vanish on the first edit.\n */\nconst FRONTMATTER = /^---[ \\t]*\\r?\\n(?:[\\s\\S]*?\\r?\\n)?---[ \\t]*(?:\\r?\\n(?:[ \\t]*\\r?\\n)*|$)/\n\n/**\n * Splits YAML frontmatter off `text`. The block is only recognised at offset 0 (a `---` line further down is a thematic\n * break or a table border, never frontmatter) and is returned verbatim, so `joinFrontmatter(...splitFrontmatter(text))`\n * gives `text` back byte for byte. The YAML itself is not parsed.\n */\nexport function splitFrontmatter(text: string): SplitMarkdown {\n  const match = FRONTMATTER.exec(text)\n  if (!match) return { frontmatter: null, body: text }\n  return { frontmatter: match[0], body: text.slice(match[0].length) }\n}\n\n/** `body` behind `frontmatter` (as `splitFrontmatter` returns it); without frontmatter, `body` itself. */\nexport function joinFrontmatter(frontmatter: string | null, body: string): string {\n  if (frontmatter === null) return body\n  // A closing fence at the very end of the text has no line break yet; the body must not run into it.\n  return frontmatter.endsWith('\\n') || !body ? frontmatter + body : `${frontmatter}\\n${body}`\n}\n"],"mappings":";;;;;;AAaA,MAAM,cAAc;;;;;;AAOpB,SAAgB,iBAAiB,MAA6B;CAC5D,MAAM,QAAQ,YAAY,KAAK,IAAI;CACnC,IAAI,CAAC,OAAO,OAAO;EAAE,aAAa;EAAM,MAAM;CAAK;CACnD,OAAO;EAAE,aAAa,MAAM;EAAI,MAAM,KAAK,MAAM,MAAM,EAAE,CAAC,MAAM;CAAE;AACpE;;AAGA,SAAgB,gBAAgB,aAA4B,MAAsB;CAChF,IAAI,gBAAgB,MAAM,OAAO;CAEjC,OAAO,YAAY,SAAS,IAAI,KAAK,CAAC,OAAO,cAAc,OAAO,GAAG,YAAY,IAAI;AACvF"}

package/dist/markdown/index.d.ts

@@ -0,0 +1,6 @@
+import { MarkdownDiagnostic, MarkdownDiagnosticCode, MarkdownPolicy, hasFatalDiagnostics } from "./policy.js";
+import { MarkdownContent, contentToMarkdown, markdownToContent } from "./document.js";
+import { SourceMode, SourceModeOptions, SourceModeState, createSourceMode } from "./source-mode.js";
+import { MarkdownClipboard, MarkdownClipboardOptions } from "./clipboard.js";
+import { SplitMarkdown, joinFrontmatter, splitFrontmatter } from "./frontmatter.js";
+export { MarkdownClipboard, type MarkdownClipboardOptions, type MarkdownContent, type MarkdownDiagnostic, type MarkdownDiagnosticCode, type MarkdownPolicy, type SourceMode, type SourceModeOptions, type SourceModeState, type SplitMarkdown, contentToMarkdown, createSourceMode, hasFatalDiagnostics, joinFrontmatter, markdownToContent, splitFrontmatter };

package/dist/markdown/index.js

@@ -0,0 +1,6 @@
+import { hasFatalDiagnostics } from "./policy.js";
+import { contentToMarkdown, markdownToContent } from "./document.js";
+import { MarkdownClipboard } from "./clipboard.js";
+import { joinFrontmatter, splitFrontmatter } from "./frontmatter.js";
+import { createSourceMode } from "./source-mode.js";
+export { MarkdownClipboard, contentToMarkdown, createSourceMode, hasFatalDiagnostics, joinFrontmatter, markdownToContent, splitFrontmatter };

package/dist/markdown/policy.d.ts

@@ -0,0 +1,34 @@
+import { JSONContent } from "@tiptap/core";
+//#region src/markdown/policy.d.ts
+/** What a Markdown text may carry into the editor. Everything not allowed is dropped and reported as a diagnostic. */
+export interface MarkdownPolicy {
+  /** Keep raw HTML (it becomes whatever the schema's `parseHTML` rules make of it). Default: dropped. */
+  allowHtml?: boolean;
+  /** Keep base64 raster `data:image/…` URLs on images. Default: dropped; links never carry `data:` URLs. */
+  allowDataUrls?: boolean;
+}
+export type MarkdownDiagnosticCode =
+/** Raw HTML was dropped (`policy.allowHtml` is off). */
+'raw-html' |
+/** A link or media URL with an unsafe scheme (`javascript:`, `data:`, …) was dropped. */
+'unsafe-url' |
+/** A `::: kind` fence of an unregistered kind is kept verbatim as an opaque block. */
+'unknown-fence' |
+/** A `::: kind` opener has no closing `:::`; the line stays plain text. */
+'unclosed-fence' |
+/** A `::: kind {…}` opener whose `{…}` is no JSON object; the line stays plain text. */
+'invalid-fence-meta' |
+/** The parsed document does not fit the editor's schema. */
+'invalid-document';
+export interface MarkdownDiagnostic {
+  code: MarkdownDiagnosticCode;
+  /** `error` diagnostics are fatal: source mode refuses to commit a text that has one. */
+  severity: 'info' | 'warning' | 'error';
+  message: string;
+  /** 1-based line of the text the diagnostic is about, when it could be located. */
+  line?: number;
+}
+/** Whether any of `diagnostics` is fatal (severity `error`). */
+export declare const hasFatalDiagnostics: (diagnostics: readonly MarkdownDiagnostic[]) => boolean;
+//#endregion
+//# sourceMappingURL=policy.d.ts.map

package/dist/markdown/policy.js

@@ -0,0 +1,78 @@
+//#region src/markdown/policy.ts
+/** Whether any of `diagnostics` is fatal (severity `error`). */
+const hasFatalDiagnostics = (diagnostics) => diagnostics.some((diagnostic) => diagnostic.severity === "error");
+const stripped = (url) => url.replace(/[\u0000-\u0020\u007f]/g, "");
+const SAFE_SCHEMES = /^(?:https?:|mailto:|tel:)/i;
+const HAS_SCHEME = /^[a-z][a-z\d+.-]*:/i;
+const DATA_IMAGE = /^data:image\/(?:png|gif|jpe?g|webp);base64,[a-z\d+/]+={0,2}$/i;
+/** Whether a link may keep `url`: relative references, fragments and `http(s)`, `mailto` and `tel`. */
+function isSafeUrl(url) {
+	const value = stripped(url);
+	return !HAS_SCHEME.test(value) || SAFE_SCHEMES.test(value);
+}
+/** Whether media may keep `url`: a safe link URL (no `mailto`/`tel`) or, when `policy.allowDataUrls` is on, a base64 raster `data:` URL. Backslashes and whitespace inside the URL are never allowed. */
+function isSafeMediaUrl(url, policy = {}) {
+	const value = url.trim();
+	if (!value || /[\u0000-\u0020\u007f\\]/.test(value)) return false;
+	if (/^data:/i.test(value)) return policy.allowDataUrls === true && DATA_IMAGE.test(value);
+	return /^https?:/i.test(value) || !HAS_SCHEME.test(value);
+}
+/** 1-based line of the first occurrence of `needle` in `text` after `from`, or undefined; `from` is returned as the new search start. */
+function locate(text, needle, from = 0) {
+	const index = needle ? text.indexOf(needle, from) : -1;
+	if (index < 0) return {
+		line: void 0,
+		next: from
+	};
+	let line = 1;
+	for (let i = text.indexOf("\n"); i !== -1 && i < index; i = text.indexOf("\n", i + 1)) line++;
+	return {
+		line,
+		next: index + needle.length
+	};
+}
+/**
+* `content` with every link mark whose `href` is unsafe removed (the text stays) and every node whose `src` is unsafe
+* dropped; each is reported as `unsafe-url`. `source` is the Markdown text, used to locate the URLs.
+*/
+function enforceUrlPolicy(content, policy, source, diagnostics, t) {
+	const cursors = /* @__PURE__ */ new Map();
+	const report = (url, what) => {
+		const { line, next } = locate(source, url, cursors.get(url) ?? 0);
+		cursors.set(url, next);
+		const shown = JSON.stringify(url.length > 60 ? `${url.slice(0, 57)}…` : url);
+		diagnostics.push({
+			code: "unsafe-url",
+			severity: "warning",
+			message: what ? t("markdown.diagnostic.unsafeMedia", {
+				type: what,
+				url: shown
+			}) : t("markdown.diagnostic.unsafeLink", { url: shown }),
+			...line && { line }
+		});
+	};
+	const visit = (node) => {
+		const src = node.attrs?.src;
+		if (typeof src === "string" && !isSafeMediaUrl(src, policy)) {
+			report(src, node.type ?? "media");
+			return [];
+		}
+		const marks = node.marks?.filter((mark) => {
+			const href = mark.type === "link" ? mark.attrs?.href : void 0;
+			if (typeof href !== "string" || isSafeUrl(href)) return true;
+			report(href, void 0);
+			return false;
+		});
+		const { marks: _marks, content: children, ...rest } = node;
+		return [{
+			...rest,
+			...marks?.length && { marks },
+			...children && { content: children.flatMap(visit) }
+		}];
+	};
+	return visit(content)[0];
+}
+//#endregion
+export { enforceUrlPolicy, hasFatalDiagnostics, isSafeMediaUrl, isSafeUrl, locate };
+
+//# sourceMappingURL=policy.js.map

package/dist/markdown/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","names":[],"sources":["../../src/markdown/policy.ts"],"sourcesContent":["import type { JSONContent } from '@tiptap/core'\nimport type { Translate } from '../i18n'\n\n/** What a Markdown text may carry into the editor. Everything not allowed is dropped and reported as a diagnostic. */\nexport interface MarkdownPolicy {\n  /** Keep raw HTML (it becomes whatever the schema's `parseHTML` rules make of it). Default: dropped. */\n  allowHtml?: boolean\n  /** Keep base64 raster `data:image/…` URLs on images. Default: dropped; links never carry `data:` URLs. */\n  allowDataUrls?: boolean\n}\n\nexport type MarkdownDiagnosticCode =\n  /** Raw HTML was dropped (`policy.allowHtml` is off). */\n  | 'raw-html'\n  /** A link or media URL with an unsafe scheme (`javascript:`, `data:`, …) was dropped. */\n  | 'unsafe-url'\n  /** A `::: kind` fence of an unregistered kind is kept verbatim as an opaque block. */\n  | 'unknown-fence'\n  /** A `::: kind` opener has no closing `:::`; the line stays plain text. */\n  | 'unclosed-fence'\n  /** A `::: kind {…}` opener whose `{…}` is no JSON object; the line stays plain text. */\n  | 'invalid-fence-meta'\n  /** The parsed document does not fit the editor's schema. */\n  | 'invalid-document'\n\nexport interface MarkdownDiagnostic {\n  code: MarkdownDiagnosticCode\n  /** `error` diagnostics are fatal: source mode refuses to commit a text that has one. */\n  severity: 'info' | 'warning' | 'error'\n  message: string\n  /** 1-based line of the text the diagnostic is about, when it could be located. */\n  line?: number\n}\n\n/** Whether any of `diagnostics` is fatal (severity `error`). */\nexport const hasFatalDiagnostics = (diagnostics: readonly MarkdownDiagnostic[]): boolean => diagnostics.some(diagnostic => diagnostic.severity === 'error')\n\n// Browsers drop tabs, line breaks and other control characters inside a URL's scheme (`java\\nscript:`), so the check does.\nconst stripped = (url: string): string => url.replace(/[\\u0000-\\u0020\\u007f]/g, '')\n\nconst SAFE_SCHEMES = /^(?:https?:|mailto:|tel:)/i\nconst HAS_SCHEME = /^[a-z][a-z\\d+.-]*:/i\nconst DATA_IMAGE = /^data:image\\/(?:png|gif|jpe?g|webp);base64,[a-z\\d+/]+={0,2}$/i\n\n/** Whether a link may keep `url`: relative references, fragments and `http(s)`, `mailto` and `tel`. */\nexport function isSafeUrl(url: string): boolean {\n  const value = stripped(url)\n  return !HAS_SCHEME.test(value) || SAFE_SCHEMES.test(value)\n}\n\n/** Whether media may keep `url`: a safe link URL (no `mailto`/`tel`) or, when `policy.allowDataUrls` is on, a base64 raster `data:` URL. Backslashes and whitespace inside the URL are never allowed. */\nexport function isSafeMediaUrl(url: string, policy: MarkdownPolicy = {}): boolean {\n  const value = url.trim()\n  if (!value || /[\\u0000-\\u0020\\u007f\\\\]/.test(value)) return false\n  if (/^data:/i.test(value)) return policy.allowDataUrls === true && DATA_IMAGE.test(value)\n  return /^https?:/i.test(value) || !HAS_SCHEME.test(value)\n}\n\n/** 1-based line of the first occurrence of `needle` in `text` after `from`, or undefined; `from` is returned as the new search start. */\nexport function locate(text: string, needle: string, from = 0): { line: number | undefined, next: number } {\n  const index = needle ? text.indexOf(needle, from) : -1\n  if (index < 0) return { line: undefined, next: from }\n  let line = 1\n  for (let i = text.indexOf('\\n'); i !== -1 && i < index; i = text.indexOf('\\n', i + 1)) line++\n  return { line, next: index + needle.length }\n}\n\n/**\n * `content` with every link mark whose `href` is unsafe removed (the text stays) and every node whose `src` is unsafe\n * dropped; each is reported as `unsafe-url`. `source` is the Markdown text, used to locate the URLs.\n */\nexport function enforceUrlPolicy(content: JSONContent, policy: MarkdownPolicy, source: string, diagnostics: MarkdownDiagnostic[], t: Translate): JSONContent {\n  const cursors = new Map<string, number>()\n  const report = (url: string, what: string | undefined) => {\n    const { line, next } = locate(source, url, cursors.get(url) ?? 0)\n    cursors.set(url, next)\n    const shown = JSON.stringify(url.length > 60 ? `${url.slice(0, 57)}…` : url)\n    diagnostics.push({ code: 'unsafe-url', severity: 'warning', message: what ? t('markdown.diagnostic.unsafeMedia', { type: what, url: shown }) : t('markdown.diagnostic.unsafeLink', { url: shown }), ...(line && { line }) })\n  }\n  const visit = (node: JSONContent): JSONContent[] => {\n    const src: unknown = node.attrs?.src\n    if (typeof src === 'string' && !isSafeMediaUrl(src, policy)) {\n      report(src, node.type ?? 'media')\n      return []\n    }\n    const marks = node.marks?.filter((mark) => {\n      const href: unknown = mark.type === 'link' ? mark.attrs?.href : undefined\n      if (typeof href !== 'string' || isSafeUrl(href)) return true\n      report(href, undefined)\n      return false\n    })\n    const { marks: _marks, content: children, ...rest } = node\n    return [{ ...rest, ...(marks?.length && { marks }), ...(children && { content: children.flatMap(visit) }) }]\n  }\n  return visit(content)[0]!\n}\n"],"mappings":";;AAmCA,MAAa,uBAAuB,gBAAwD,YAAY,MAAK,eAAc,WAAW,aAAa,OAAO;AAG1J,MAAM,YAAY,QAAwB,IAAI,QAAQ,0BAA0B,EAAE;AAElF,MAAM,eAAe;AACrB,MAAM,aAAa;AACnB,MAAM,aAAa;;AAGnB,SAAgB,UAAU,KAAsB;CAC9C,MAAM,QAAQ,SAAS,GAAG;CAC1B,OAAO,CAAC,WAAW,KAAK,KAAK,KAAK,aAAa,KAAK,KAAK;AAC3D;;AAGA,SAAgB,eAAe,KAAa,SAAyB,CAAC,GAAY;CAChF,MAAM,QAAQ,IAAI,KAAK;CACvB,IAAI,CAAC,SAAS,0BAA0B,KAAK,KAAK,GAAG,OAAO;CAC5D,IAAI,UAAU,KAAK,KAAK,GAAG,OAAO,OAAO,kBAAkB,QAAQ,WAAW,KAAK,KAAK;CACxF,OAAO,YAAY,KAAK,KAAK,KAAK,CAAC,WAAW,KAAK,KAAK;AAC1D;;AAGA,SAAgB,OAAO,MAAc,QAAgB,OAAO,GAA+C;CACzG,MAAM,QAAQ,SAAS,KAAK,QAAQ,QAAQ,IAAI,IAAI;CACpD,IAAI,QAAQ,GAAG,OAAO;EAAE,MAAM,KAAA;EAAW,MAAM;CAAK;CACpD,IAAI,OAAO;CACX,KAAK,IAAI,IAAI,KAAK,QAAQ,IAAI,GAAG,MAAM,MAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,MAAM,IAAI,CAAC,GAAG;CACvF,OAAO;EAAE;EAAM,MAAM,QAAQ,OAAO;CAAO;AAC7C;;;;;AAMA,SAAgB,iBAAiB,SAAsB,QAAwB,QAAgB,aAAmC,GAA2B;CAC3J,MAAM,0BAAU,IAAI,IAAoB;CACxC,MAAM,UAAU,KAAa,SAA6B;EACxD,MAAM,EAAE,MAAM,SAAS,OAAO,QAAQ,KAAK,QAAQ,IAAI,GAAG,KAAK,CAAC;EAChE,QAAQ,IAAI,KAAK,IAAI;EACrB,MAAM,QAAQ,KAAK,UAAU,IAAI,SAAS,KAAK,GAAG,IAAI,MAAM,GAAG,EAAE,EAAE,KAAK,GAAG;EAC3E,YAAY,KAAK;GAAE,MAAM;GAAc,UAAU;GAAW,SAAS,OAAO,EAAE,mCAAmC;IAAE,MAAM;IAAM,KAAK;GAAM,CAAC,IAAI,EAAE,kCAAkC,EAAE,KAAK,MAAM,CAAC;GAAG,GAAI,QAAQ,EAAE,KAAK;EAAG,CAAC;CAC7N;CACA,MAAM,SAAS,SAAqC;EAClD,MAAM,MAAe,KAAK,OAAO;EACjC,IAAI,OAAO,QAAQ,YAAY,CAAC,eAAe,KAAK,MAAM,GAAG;GAC3D,OAAO,KAAK,KAAK,QAAQ,OAAO;GAChC,OAAO,CAAC;EACV;EACA,MAAM,QAAQ,KAAK,OAAO,QAAQ,SAAS;GACzC,MAAM,OAAgB,KAAK,SAAS,SAAS,KAAK,OAAO,OAAO,KAAA;GAChE,IAAI,OAAO,SAAS,YAAY,UAAU,IAAI,GAAG,OAAO;GACxD,OAAO,MAAM,KAAA,CAAS;GACtB,OAAO;EACT,CAAC;EACD,MAAM,EAAE,OAAO,QAAQ,SAAS,UAAU,GAAG,SAAS;EACtD,OAAO,CAAC;GAAE,GAAG;GAAM,GAAI,OAAO,UAAU,EAAE,MAAM;GAAI,GAAI,YAAY,EAAE,SAAS,SAAS,QAAQ,KAAK,EAAE;EAAG,CAAC;CAC7G;CACA,OAAO,MAAM,OAAO,CAAC,CAAC;AACxB"}

package/dist/markdown/react.d.ts

@@ -0,0 +1,2 @@
+import { MarkdownSurface, MarkdownSurfaceProps } from "./MarkdownSurface.js";
+export { MarkdownSurface, type MarkdownSurfaceProps };

package/dist/markdown/react.js

@@ -0,0 +1 @@
+export { MarkdownSurface } from "./MarkdownSurface.js";

package/dist/markdown/source-mode.d.ts

@@ -0,0 +1,49 @@
+import { Translate } from "../i18n/index.js";
+import { ReadonlyStore } from "../core/store.js";
+import { MarkdownDiagnostic, MarkdownPolicy } from "./policy.js";
+import { MarkdownContent } from "./document.js";
+import { Editor } from "@tiptap/core";
+//#region src/markdown/source-mode.d.ts
+export interface SourceModeState {
+  mode: 'visual' | 'source';
+  /** The draft being edited in source mode (empty in visual mode). Never rewritten by a failed commit. */
+  source: string;
+  /** What the last `commit` found in the draft; a rejected commit keeps the fatal ones here until the next `enter`, `edit` or `cancel`. */
+  diagnostics: readonly MarkdownDiagnostic[];
+}
+export interface SourceMode {
+  readonly state: ReadonlyStore<SourceModeState>;
+  /** Starts a draft from the editor's current Markdown. False when there is no editable editor yet or it is already in source mode. */
+  enter(): boolean;
+  /** Replaces the draft (a source view's input handler). Ignored in visual mode. */
+  edit(source: string): void;
+  /**
+   * Parses the whole draft and, only when that gives no fatal diagnostic and fits the editor's schema, replaces the
+   * editor's document with it as one undoable edit and returns to visual mode. Otherwise the editor is untouched, the
+   * draft and the diagnostics stay in `state`, and the result is false. False as well when not in source mode.
+   */
+  commit(): boolean;
+  /** Discards the draft and returns to visual mode; the editor is untouched. */
+  cancel(): void;
+}
+export interface SourceModeOptions {
+  /** The editor the draft comes from and is committed to; undefined until it is ready. */
+  getEditor: () => Editor | undefined;
+  /** The Markdown a draft starts from. Default: `contentToMarkdown`. */
+  toMarkdown?: (editor: Editor) => string;
+  /** Parses a committed draft. Default: `markdownToContent` with `policy`. */
+  fromMarkdown?: (editor: Editor, source: string) => MarkdownContent;
+  /** The policy of the default `fromMarkdown`. */
+  policy?: MarkdownPolicy;
+  /** The translator of the default `fromMarkdown`'s diagnostics. Default: that of the editor's registered surface. */
+  t?: Translate;
+}
+/**
+ * The state machine behind a whole-document source view: `enter` → `edit`* → `commit` | `cancel`. Framework-free; the
+ * view (`MarkdownSurface`'s `sourceMode` prop, or a host's own textarea or code editor) renders `state` and calls the
+ * actions. The editor's document is only ever replaced by `commit`, and only by a draft that parsed without fatal
+ * diagnostics and fits the schema.
+ */
+export declare function createSourceMode(options: SourceModeOptions): SourceMode;
+//#endregion
+//# sourceMappingURL=source-mode.d.ts.map

package/dist/markdown/source-mode.js

@@ -0,0 +1,86 @@
+import { createStore } from "../core/store.js";
+import { hasFatalDiagnostics } from "./policy.js";
+import { contentToMarkdown, markdownToContent } from "./document.js";
+//#region src/markdown/source-mode.ts
+const VISUAL = {
+	mode: "visual",
+	source: "",
+	diagnostics: []
+};
+/**
+* The state machine behind a whole-document source view: `enter` → `edit`* → `commit` | `cancel`. Framework-free; the
+* view (`MarkdownSurface`'s `sourceMode` prop, or a host's own textarea or code editor) renders `state` and calls the
+* actions. The editor's document is only ever replaced by `commit`, and only by a draft that parsed without fatal
+* diagnostics and fits the schema.
+*/
+function createSourceMode(options) {
+	const toMarkdown = options.toMarkdown ?? contentToMarkdown;
+	const fromMarkdown = options.fromMarkdown ?? ((editor, source) => markdownToContent(editor, source, {
+		policy: options.policy,
+		t: options.t
+	}));
+	const state = createStore(VISUAL);
+	return {
+		state: {
+			get: state.get,
+			subscribe: state.subscribe
+		},
+		enter() {
+			const editor = options.getEditor();
+			if (!editor || editor.isDestroyed || !editor.isEditable || state.get().mode === "source") return false;
+			state.set({
+				mode: "source",
+				source: toMarkdown(editor),
+				diagnostics: []
+			});
+			return true;
+		},
+		edit(source) {
+			if (state.get().mode === "source") state.set({
+				mode: "source",
+				source,
+				diagnostics: []
+			});
+		},
+		commit() {
+			const editor = options.getEditor();
+			const { mode, source } = state.get();
+			if (mode !== "source" || !editor || editor.isDestroyed) return false;
+			const { content, diagnostics } = fromMarkdown(editor, source);
+			const reject = (found) => {
+				state.set({
+					mode: "source",
+					source,
+					diagnostics: found
+				});
+				return false;
+			};
+			if (hasFatalDiagnostics(diagnostics)) return reject(diagnostics);
+			let doc;
+			try {
+				doc = editor.schema.nodeFromJSON(content);
+				doc.check();
+			} catch (error) {
+				return reject([...diagnostics, {
+					code: "invalid-document",
+					severity: "error",
+					message: error instanceof Error ? error.message : String(error)
+				}]);
+			}
+			if (source !== toMarkdown(editor)) editor.view.dispatch(editor.state.tr.replaceWith(0, editor.state.doc.content.size, doc.content).scrollIntoView());
+			state.set({
+				mode: "visual",
+				source: "",
+				diagnostics
+			});
+			return true;
+		},
+		cancel() {
+			state.set(VISUAL);
+		}
+	};
+}
+//#endregion
+export { createSourceMode };
+
+//# sourceMappingURL=source-mode.js.map

package/dist/markdown/source-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-mode.js","names":[],"sources":["../../src/markdown/source-mode.ts"],"sourcesContent":["import type { Editor } from '@tiptap/core'\nimport type { Translate } from '../i18n'\nimport { createStore, type ReadonlyStore } from '../core/store'\nimport { contentToMarkdown, markdownToContent, type MarkdownContent } from './document'\nimport { hasFatalDiagnostics, type MarkdownDiagnostic, type MarkdownPolicy } from './policy'\n\nexport interface SourceModeState {\n  mode: 'visual' | 'source'\n  /** The draft being edited in source mode (empty in visual mode). Never rewritten by a failed commit. */\n  source: string\n  /** What the last `commit` found in the draft; a rejected commit keeps the fatal ones here until the next `enter`, `edit` or `cancel`. */\n  diagnostics: readonly MarkdownDiagnostic[]\n}\n\nexport interface SourceMode {\n  readonly state: ReadonlyStore<SourceModeState>\n  /** Starts a draft from the editor's current Markdown. False when there is no editable editor yet or it is already in source mode. */\n  enter(): boolean\n  /** Replaces the draft (a source view's input handler). Ignored in visual mode. */\n  edit(source: string): void\n  /**\n   * Parses the whole draft and, only when that gives no fatal diagnostic and fits the editor's schema, replaces the\n   * editor's document with it as one undoable edit and returns to visual mode. Otherwise the editor is untouched, the\n   * draft and the diagnostics stay in `state`, and the result is false. False as well when not in source mode.\n   */\n  commit(): boolean\n  /** Discards the draft and returns to visual mode; the editor is untouched. */\n  cancel(): void\n}\n\nexport interface SourceModeOptions {\n  /** The editor the draft comes from and is committed to; undefined until it is ready. */\n  getEditor: () => Editor | undefined\n  /** The Markdown a draft starts from. Default: `contentToMarkdown`. */\n  toMarkdown?: (editor: Editor) => string\n  /** Parses a committed draft. Default: `markdownToContent` with `policy`. */\n  fromMarkdown?: (editor: Editor, source: string) => MarkdownContent\n  /** The policy of the default `fromMarkdown`. */\n  policy?: MarkdownPolicy\n  /** The translator of the default `fromMarkdown`'s diagnostics. Default: that of the editor's registered surface. */\n  t?: Translate\n}\n\nconst VISUAL: SourceModeState = { mode: 'visual', source: '', diagnostics: [] }\n\n/**\n * The state machine behind a whole-document source view: `enter` → `edit`* → `commit` | `cancel`. Framework-free; the\n * view (`MarkdownSurface`'s `sourceMode` prop, or a host's own textarea or code editor) renders `state` and calls the\n * actions. The editor's document is only ever replaced by `commit`, and only by a draft that parsed without fatal\n * diagnostics and fits the schema.\n */\nexport function createSourceMode(options: SourceModeOptions): SourceMode {\n  const toMarkdown = options.toMarkdown ?? contentToMarkdown\n  const fromMarkdown = options.fromMarkdown ?? ((editor, source) => markdownToContent(editor, source, { policy: options.policy, t: options.t }))\n  const state = createStore<SourceModeState>(VISUAL)\n\n  return {\n    state: { get: state.get, subscribe: state.subscribe },\n    enter() {\n      const editor = options.getEditor()\n      if (!editor || editor.isDestroyed || !editor.isEditable || state.get().mode === 'source') return false\n      state.set({ mode: 'source', source: toMarkdown(editor), diagnostics: [] })\n      return true\n    },\n    edit(source) {\n      if (state.get().mode === 'source') state.set({ mode: 'source', source, diagnostics: [] })\n    },\n    commit() {\n      const editor = options.getEditor()\n      const { mode, source } = state.get()\n      if (mode !== 'source' || !editor || editor.isDestroyed) return false\n      const { content, diagnostics } = fromMarkdown(editor, source)\n      const reject = (found: MarkdownDiagnostic[]) => {\n        state.set({ mode: 'source', source, diagnostics: found })\n        return false\n      }\n      if (hasFatalDiagnostics(diagnostics)) return reject(diagnostics)\n      let doc\n      try {\n        doc = editor.schema.nodeFromJSON(content)\n        doc.check()\n      }\n      catch (error) {\n        return reject([...diagnostics, { code: 'invalid-document', severity: 'error', message: error instanceof Error ? error.message : String(error) }])\n      }\n      // An unchanged draft must not rewrite the document (block IDs, undo history, collaborative updates).\n      if (source !== toMarkdown(editor)) editor.view.dispatch(editor.state.tr.replaceWith(0, editor.state.doc.content.size, doc.content).scrollIntoView())\n      state.set({ mode: 'visual', source: '', diagnostics })\n      return true\n    },\n    cancel() {\n      state.set(VISUAL)\n    },\n  }\n}\n"],"mappings":";;;;AA2CA,MAAM,SAA0B;CAAE,MAAM;CAAU,QAAQ;CAAI,aAAa,CAAC;AAAE;;;;;;;AAQ9E,SAAgB,iBAAiB,SAAwC;CACvE,MAAM,aAAa,QAAQ,cAAc;CACzC,MAAM,eAAe,QAAQ,kBAAkB,QAAQ,WAAW,kBAAkB,QAAQ,QAAQ;EAAE,QAAQ,QAAQ;EAAQ,GAAG,QAAQ;CAAE,CAAC;CAC5I,MAAM,QAAQ,YAA6B,MAAM;CAEjD,OAAO;EACL,OAAO;GAAE,KAAK,MAAM;GAAK,WAAW,MAAM;EAAU;EACpD,QAAQ;GACN,MAAM,SAAS,QAAQ,UAAU;GACjC,IAAI,CAAC,UAAU,OAAO,eAAe,CAAC,OAAO,cAAc,MAAM,IAAI,CAAC,CAAC,SAAS,UAAU,OAAO;GACjG,MAAM,IAAI;IAAE,MAAM;IAAU,QAAQ,WAAW,MAAM;IAAG,aAAa,CAAC;GAAE,CAAC;GACzE,OAAO;EACT;EACA,KAAK,QAAQ;GACX,IAAI,MAAM,IAAI,CAAC,CAAC,SAAS,UAAU,MAAM,IAAI;IAAE,MAAM;IAAU;IAAQ,aAAa,CAAC;GAAE,CAAC;EAC1F;EACA,SAAS;GACP,MAAM,SAAS,QAAQ,UAAU;GACjC,MAAM,EAAE,MAAM,WAAW,MAAM,IAAI;GACnC,IAAI,SAAS,YAAY,CAAC,UAAU,OAAO,aAAa,OAAO;GAC/D,MAAM,EAAE,SAAS,gBAAgB,aAAa,QAAQ,MAAM;GAC5D,MAAM,UAAU,UAAgC;IAC9C,MAAM,IAAI;KAAE,MAAM;KAAU;KAAQ,aAAa;IAAM,CAAC;IACxD,OAAO;GACT;GACA,IAAI,oBAAoB,WAAW,GAAG,OAAO,OAAO,WAAW;GAC/D,IAAI;GACJ,IAAI;IACF,MAAM,OAAO,OAAO,aAAa,OAAO;IACxC,IAAI,MAAM;GACZ,SACO,OAAO;IACZ,OAAO,OAAO,CAAC,GAAG,aAAa;KAAE,MAAM;KAAoB,UAAU;KAAS,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAAE,CAAC,CAAC;GAClJ;GAEA,IAAI,WAAW,WAAW,MAAM,GAAG,OAAO,KAAK,SAAS,OAAO,MAAM,GAAG,YAAY,GAAG,OAAO,MAAM,IAAI,QAAQ,MAAM,IAAI,OAAO,CAAC,CAAC,eAAe,CAAC;GACnJ,MAAM,IAAI;IAAE,MAAM;IAAU,QAAQ;IAAI;GAAY,CAAC;GACrD,OAAO;EACT;EACA,SAAS;GACP,MAAM,IAAI,MAAM;EAClB;CACF;AACF"}

package/dist/markdown/vue.d.ts

@@ -0,0 +1,2 @@
+import _default from "./MarkdownSurface.vue.js";
+export { _default as MarkdownSurface };

package/dist/markdown/vue.js

@@ -0,0 +1 @@
+export { default as MarkdownSurface } from "./MarkdownSurface2.js";

package/dist/nuxt/module.d.ts

@@ -0,0 +1,68 @@
+import { Locale, Messages } from "../i18n/index.js";
+import { ModelSlot } from "../settings/values.js";
+import "../settings/index.js";
+//#region src/nuxt/module.d.ts
+export interface ModuleOptions {
+  /**
+   * The UI kit that renders the editor chrome. `'nuxt-ui'` (default): Nuxt UI, which must be registered before this
+   * module (its generated `ui.css` is patched so Tailwind scans the package). `'primevue'`: PrimeVue; the host installs
+   * PrimeVue (`app.use(PrimeVue, …)`, `ToastService`), mounts `<Toast />` and lets Tailwind scan the package.
+   */
+  kit: 'nuxt-ui' | 'primevue';
+  /** Language of the editor's strings: `'de'` (default) or `'en'`. Set once per app; a host that switches languages at run time recreates the editor context. */
+  locale: Locale;
+  /** Overrides of single messages by key (see `MessageKey`), applied on top of the catalog of `locale`; must be JSON-serialisable. */
+  messages?: Partial<Messages>;
+  ai: {
+    /**
+     * Server-defined model presets (any OpenAI-compatible chat completions endpoint), keyed by preset id. The key is
+     * per preset or the shared `apiKey`, both from env only: `NUXT_TIPTAP_EDITOR_AI_PRESETS_<ID>_API_KEY` (`<ID>` = the
+     * preset id in upper snake case, e.g. `flashLite` → `FLASH_LITE`) or `NUXT_TIPTAP_EDITOR_AI_API_KEY`. Preset ids
+     * must be camelCase so the env names map onto them.
+     */
+    presets: Record<string, {
+      label: string;
+      endpoint: string;
+      model: string;
+      apiKey?: string;
+    }>;
+    /** Default preset per slot; users may override in settings. The `complete` model must support assistant prefill. */
+    slots: Record<ModelSlot, string>;
+    /** Per-user limit shared by all AI endpoints: at most `max` requests per sliding `windowMs`. */
+    rateLimit: {
+      max: number;
+      windowMs: number;
+    };
+    /**
+     * Speech-to-text for audio/video `document` composites: any OpenAI-compatible `<endpoint>/audio/transcriptions`
+     * (e.g. OpenAI `whisper-1`; OpenRouter presets do not provide one). Absent = the action and the endpoint are off.
+     * The key comes from env only: `NUXT_TIPTAP_EDITOR_AI_TRANSCRIPTION_API_KEY`.
+     */
+    transcription?: {
+      endpoint: string;
+      model: string;
+      apiKey?: string;
+    };
+  };
+  collab: {
+    /**
+     * Authenticate the `/collab/:id` websocket upgrade itself (`EditorAdapter.authenticate` with the upgrade request's
+     * headers) and refuse it with HTTP 401 for an unknown user. Default `false`: the upgrade always succeeds, the user
+     * is authenticated afterwards from the headers or the provider's `token`, and an unauthenticated socket is closed
+     * with code 4401. Enable only when every client authenticates by cookie/headers: a client that sends its identity
+     * as `collaboration.token` (no cookies) cannot connect then. Env override:
+     * `NUXT_TIPTAP_EDITOR_COLLAB_AUTHENTICATE_UPGRADE=true`.
+     */
+    authenticateUpgrade: boolean;
+  };
+}
+/**
+ * Nuxt/Nitro integration of the editor package: the client context plugin (settings persistence, AI configuration),
+ * the Nitro API routes, the collaboration websocket and the AI configuration with its server-only secrets. The host
+ * plugs in through `setEditorAdapter()` (`@ecsplico/editor/server`) in a Nitro plugin (auth, loading and storing
+ * document content). Components are imported explicitly from the package entries; nothing is auto-registered.
+ */
+declare const _default: import("@nuxt/schema").NuxtModule<ModuleOptions, ModuleOptions, false>;
+//#endregion
+export { _default as default };
+//# sourceMappingURL=module.d.ts.map

package/dist/nuxt/module.js

@@ -0,0 +1,103 @@
+import { addPlugin, addServerScanDir, createResolver, defineNuxtModule } from "nuxt/kit";
+//#region src/nuxt/module.ts
+/**
+* Nuxt/Nitro integration of the editor package: the client context plugin (settings persistence, AI configuration),
+* the Nitro API routes, the collaboration websocket and the AI configuration with its server-only secrets. The host
+* plugs in through `setEditorAdapter()` (`@ecsplico/editor/server`) in a Nitro plugin (auth, loading and storing
+* document content). Components are imported explicitly from the package entries; nothing is auto-registered.
+*/
+var module_default = defineNuxtModule({
+	meta: {
+		name: "tiptap-editor",
+		configKey: "tiptapEditor"
+	},
+	defaults: {
+		kit: "nuxt-ui",
+		locale: "de",
+		collab: { authenticateUpgrade: false },
+		ai: {
+			presets: {
+				sonnet: {
+					label: "Claude Sonnet 4.5 (OpenRouter)",
+					endpoint: "https://openrouter.ai/api/v1",
+					model: "anthropic/claude-sonnet-4.5"
+				},
+				flashLite: {
+					label: "Gemini 2.5 Flash Lite (OpenRouter)",
+					endpoint: "https://openrouter.ai/api/v1",
+					model: "google/gemini-2.5-flash-lite"
+				}
+			},
+			slots: {
+				complete: "flashLite",
+				rewrite: "sonnet",
+				generate: "sonnet"
+			},
+			rateLimit: {
+				max: 30,
+				windowMs: 6e4
+			}
+		}
+	},
+	setup(options, nuxt) {
+		const { resolve } = createResolver(import.meta.url);
+		const packageSrc = resolve("..");
+		nuxt.options.build.transpile.push(packageSrc);
+		nuxt.options.css.push(resolve(options.kit === "primevue" ? "../vue/kit/primevue.css" : "../vue/kit/nuxt-ui.css"));
+		nuxt.options.css.push(resolve("../styles/core.css"), resolve("../styles/media.css"), resolve("../styles/mentions.css"), resolve("../styles/authors.css"), resolve("../styles/comments.css"), resolve("../styles/transcript.css"), resolve("../styles/composites.css"), resolve("../styles/ai.css"), resolve("../styles/collab.css"), resolve("../styles/block-ui.css"), resolve("../styles/themes.css"));
+		addPlugin({
+			src: resolve(`./runtime/plugins/editor-context-${options.kit}.client.ts`),
+			mode: "client"
+		});
+		addServerScanDir(resolve("./runtime/server"));
+		if (options.kit === "nuxt-ui") nuxt.hook("modules:done", () => {
+			const uiCss = nuxt.options.build.templates.find((t) => t.filename === "ui.css");
+			if (!uiCss?.getContents) throw new Error("tiptap-editor: @nuxt/ui muss vor diesem Modul registriert sein (ui.css-Template fehlt)");
+			const getContents = uiCss.getContents;
+			uiCss.getContents = async (data) => `@source "${packageSrc}/**/*";\n${await getContents(data)}`;
+		});
+		nuxt.options.nitro.experimental = {
+			...nuxt.options.nitro.experimental,
+			websocket: true
+		};
+		nuxt.options.nitro.externals = {
+			...nuxt.options.nitro.externals,
+			inline: [
+				...nuxt.options.nitro.externals?.inline ?? [],
+				"@ecsplico/editor",
+				packageSrc
+			]
+		};
+		nuxt.options.runtimeConfig.tiptapEditor = {
+			collab: { authenticateUpgrade: options.collab.authenticateUpgrade },
+			ai: {
+				apiKey: "",
+				presets: Object.fromEntries(Object.entries(options.ai.presets).map(([id, preset]) => [id, {
+					...preset,
+					apiKey: preset.apiKey ?? ""
+				}])),
+				slots: options.ai.slots,
+				rateLimit: options.ai.rateLimit,
+				...options.ai.transcription && { transcription: {
+					...options.ai.transcription,
+					apiKey: options.ai.transcription.apiKey ?? ""
+				} }
+			},
+			...nuxt.options.runtimeConfig.tiptapEditor
+		};
+		nuxt.options.runtimeConfig.public.tiptapEditor = {
+			kit: options.kit,
+			locale: options.locale,
+			...options.messages && { messages: options.messages },
+			ai: {
+				slots: options.ai.slots,
+				transcription: Boolean(options.ai.transcription)
+			},
+			...nuxt.options.runtimeConfig.public.tiptapEditor
+		};
+	}
+});
+//#endregion
+export { module_default as default };
+
+//# sourceMappingURL=module.js.map

package/dist/nuxt/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","names":[],"sources":["../../src/nuxt/module.ts"],"sourcesContent":["import { addPlugin, addServerScanDir, createResolver, defineNuxtModule } from 'nuxt/kit'\nimport type { Locale, Messages } from '../i18n'\nimport type { ModelSlot } from '../settings'\n\nexport interface ModuleOptions {\n  /**\n   * The UI kit that renders the editor chrome. `'nuxt-ui'` (default): Nuxt UI, which must be registered before this\n   * module (its generated `ui.css` is patched so Tailwind scans the package). `'primevue'`: PrimeVue; the host installs\n   * PrimeVue (`app.use(PrimeVue, …)`, `ToastService`), mounts `<Toast />` and lets Tailwind scan the package.\n   */\n  kit: 'nuxt-ui' | 'primevue'\n  /** Language of the editor's strings: `'de'` (default) or `'en'`. Set once per app; a host that switches languages at run time recreates the editor context. */\n  locale: Locale\n  /** Overrides of single messages by key (see `MessageKey`), applied on top of the catalog of `locale`; must be JSON-serialisable. */\n  messages?: Partial<Messages>\n  ai: {\n    /**\n     * Server-defined model presets (any OpenAI-compatible chat completions endpoint), keyed by preset id. The key is\n     * per preset or the shared `apiKey`, both from env only: `NUXT_TIPTAP_EDITOR_AI_PRESETS_<ID>_API_KEY` (`<ID>` = the\n     * preset id in upper snake case, e.g. `flashLite` → `FLASH_LITE`) or `NUXT_TIPTAP_EDITOR_AI_API_KEY`. Preset ids\n     * must be camelCase so the env names map onto them.\n     */\n    presets: Record<string, { label: string, endpoint: string, model: string, apiKey?: string }>\n    /** Default preset per slot; users may override in settings. The `complete` model must support assistant prefill. */\n    slots: Record<ModelSlot, string>\n    /** Per-user limit shared by all AI endpoints: at most `max` requests per sliding `windowMs`. */\n    rateLimit: { max: number, windowMs: number }\n    /**\n     * Speech-to-text for audio/video `document` composites: any OpenAI-compatible `<endpoint>/audio/transcriptions`\n     * (e.g. OpenAI `whisper-1`; OpenRouter presets do not provide one). Absent = the action and the endpoint are off.\n     * The key comes from env only: `NUXT_TIPTAP_EDITOR_AI_TRANSCRIPTION_API_KEY`.\n     */\n    transcription?: { endpoint: string, model: string, apiKey?: string }\n  }\n  collab: {\n    /**\n     * Authenticate the `/collab/:id` websocket upgrade itself (`EditorAdapter.authenticate` with the upgrade request's\n     * headers) and refuse it with HTTP 401 for an unknown user. Default `false`: the upgrade always succeeds, the user\n     * is authenticated afterwards from the headers or the provider's `token`, and an unauthenticated socket is closed\n     * with code 4401. Enable only when every client authenticates by cookie/headers: a client that sends its identity\n     * as `collaboration.token` (no cookies) cannot connect then. Env override:\n     * `NUXT_TIPTAP_EDITOR_COLLAB_AUTHENTICATE_UPGRADE=true`.\n     */\n    authenticateUpgrade: boolean\n  }\n}\n\n/**\n * Nuxt/Nitro integration of the editor package: the client context plugin (settings persistence, AI configuration),\n * the Nitro API routes, the collaboration websocket and the AI configuration with its server-only secrets. The host\n * plugs in through `setEditorAdapter()` (`@ecsplico/editor/server`) in a Nitro plugin (auth, loading and storing\n * document content). Components are imported explicitly from the package entries; nothing is auto-registered.\n */\nexport default defineNuxtModule<ModuleOptions>({\n  meta: { name: 'tiptap-editor', configKey: 'tiptapEditor' },\n  defaults: {\n    kit: 'nuxt-ui',\n    locale: 'de',\n    collab: { authenticateUpgrade: false },\n    ai: {\n      presets: {\n        sonnet: { label: 'Claude Sonnet 4.5 (OpenRouter)', endpoint: 'https://openrouter.ai/api/v1', model: 'anthropic/claude-sonnet-4.5' },\n        flashLite: { label: 'Gemini 2.5 Flash Lite (OpenRouter)', endpoint: 'https://openrouter.ai/api/v1', model: 'google/gemini-2.5-flash-lite' },\n      },\n      slots: { complete: 'flashLite', rewrite: 'sonnet', generate: 'sonnet' },\n      rateLimit: { max: 30, windowMs: 60_000 },\n    },\n  },\n  setup(options, nuxt) {\n    const { resolve } = createResolver(import.meta.url)\n    // `resolve('..')` is the package root of the built output (`dist`) or of `src` in this repository's app: both\n    // hold the stylesheets and the unbundled `nuxt/runtime` files, which Nuxt compiles for the client and Nitro for the server.\n    const packageSrc = resolve('..')\n    nuxt.options.build.transpile.push(packageSrc)\n    // The kit's token map comes first: the feature sheets (and an Obsidian theme, `themes.css`, last) read and may override `--sk-*`.\n    nuxt.options.css.push(resolve(options.kit === 'primevue' ? '../vue/kit/primevue.css' : '../vue/kit/nuxt-ui.css'))\n    nuxt.options.css.push(\n      resolve('../styles/core.css'),\n      resolve('../styles/media.css'),\n      resolve('../styles/mentions.css'),\n      resolve('../styles/authors.css'),\n      resolve('../styles/comments.css'),\n      resolve('../styles/transcript.css'),\n      resolve('../styles/composites.css'),\n      resolve('../styles/ai.css'),\n      resolve('../styles/collab.css'),\n      resolve('../styles/block-ui.css'),\n      resolve('../styles/themes.css'),\n    )\n    // One plugin file per kit: a dynamic `import()` of the other kit would still be bundled and needs its (optional) UI library.\n    addPlugin({ src: resolve(`./runtime/plugins/editor-context-${options.kit}.client.ts`), mode: 'client' })\n    addServerScanDir(resolve('./runtime/server'))\n    // Tailwind only scans the app layers listed in Nuxt UI's generated `ui.css` (`@source \"<layer>/app/**/*\"`), so the\n    // utility classes used by the package's components would never be generated. Append its source.\n    if (options.kit === 'nuxt-ui') nuxt.hook('modules:done', () => {\n      const uiCss = nuxt.options.build.templates.find(t => t.filename === 'ui.css')\n      if (!uiCss?.getContents) throw new Error('tiptap-editor: @nuxt/ui muss vor diesem Modul registriert sein (ui.css-Template fehlt)')\n      const getContents = uiCss.getContents\n      uiCss.getContents = async data => `@source \"${packageSrc}/**/*\";\\n${await getContents(data)}`\n    })\n    nuxt.options.nitro.experimental = { ...nuxt.options.nitro.experimental, websocket: true }\n    // Nitro bundles the package (the runtime files import `h3` and `nitropack/runtime`, which the host's Nitro resolves): never leave it external.\n    nuxt.options.nitro.externals = { ...nuxt.options.nitro.externals, inline: [...(nuxt.options.nitro.externals?.inline ?? []), '@ecsplico/editor', packageSrc] }\n    nuxt.options.runtimeConfig.tiptapEditor = {\n      collab: { authenticateUpgrade: options.collab.authenticateUpgrade },\n      ai: {\n        apiKey: '',\n        // Every preset gets an empty `apiKey`, so its env variable has a key to override.\n        presets: Object.fromEntries(Object.entries(options.ai.presets).map(([id, preset]) => [id, { ...preset, apiKey: preset.apiKey ?? '' }])),\n        slots: options.ai.slots,\n        rateLimit: options.ai.rateLimit,\n        // `apiKey` defaults to '' so its env variable has a key to override.\n        ...(options.ai.transcription && { transcription: { ...options.ai.transcription, apiKey: options.ai.transcription.apiKey ?? '' } }),\n      },\n      ...(nuxt.options.runtimeConfig.tiptapEditor as object | undefined),\n    }\n    // Default slot presets for the client before `GET /api/ai/models` has answered; read by the client context plugin.\n    nuxt.options.runtimeConfig.public.tiptapEditor = {\n      kit: options.kit,\n      locale: options.locale,\n      ...(options.messages && { messages: options.messages }),\n      ai: { slots: options.ai.slots, transcription: Boolean(options.ai.transcription) },\n      ...(nuxt.options.runtimeConfig.public.tiptapEditor as object | undefined),\n    }\n  },\n})\n"],"mappings":";;;;;;;;AAqDA,IAAA,iBAAe,iBAAgC;CAC7C,MAAM;EAAE,MAAM;EAAiB,WAAW;CAAe;CACzD,UAAU;EACR,KAAK;EACL,QAAQ;EACR,QAAQ,EAAE,qBAAqB,MAAM;EACrC,IAAI;GACF,SAAS;IACP,QAAQ;KAAE,OAAO;KAAkC,UAAU;KAAgC,OAAO;IAA8B;IAClI,WAAW;KAAE,OAAO;KAAsC,UAAU;KAAgC,OAAO;IAA+B;GAC5I;GACA,OAAO;IAAE,UAAU;IAAa,SAAS;IAAU,UAAU;GAAS;GACtE,WAAW;IAAE,KAAK;IAAI,UAAU;GAAO;EACzC;CACF;CACA,MAAM,SAAS,MAAM;EACnB,MAAM,EAAE,YAAY,eAAe,YAAY,GAAG;EAGlD,MAAM,aAAa,QAAQ,IAAI;EAC/B,KAAK,QAAQ,MAAM,UAAU,KAAK,UAAU;EAE5C,KAAK,QAAQ,IAAI,KAAK,QAAQ,QAAQ,QAAQ,aAAa,4BAA4B,wBAAwB,CAAC;EAChH,KAAK,QAAQ,IAAI,KACf,QAAQ,oBAAoB,GAC5B,QAAQ,qBAAqB,GAC7B,QAAQ,wBAAwB,GAChC,QAAQ,uBAAuB,GAC/B,QAAQ,wBAAwB,GAChC,QAAQ,0BAA0B,GAClC,QAAQ,0BAA0B,GAClC,QAAQ,kBAAkB,GAC1B,QAAQ,sBAAsB,GAC9B,QAAQ,wBAAwB,GAChC,QAAQ,sBAAsB,CAChC;EAEA,UAAU;GAAE,KAAK,QAAQ,oCAAoC,QAAQ,IAAI,WAAW;GAAG,MAAM;EAAS,CAAC;EACvG,iBAAiB,QAAQ,kBAAkB,CAAC;EAG5C,IAAI,QAAQ,QAAQ,WAAW,KAAK,KAAK,sBAAsB;GAC7D,MAAM,QAAQ,KAAK,QAAQ,MAAM,UAAU,MAAK,MAAK,EAAE,aAAa,QAAQ;GAC5E,IAAI,CAAC,OAAO,aAAa,MAAM,IAAI,MAAM,wFAAwF;GACjI,MAAM,cAAc,MAAM;GAC1B,MAAM,cAAc,OAAM,SAAQ,YAAY,WAAW,WAAW,MAAM,YAAY,IAAI;EAC5F,CAAC;EACD,KAAK,QAAQ,MAAM,eAAe;GAAE,GAAG,KAAK,QAAQ,MAAM;GAAc,WAAW;EAAK;EAExF,KAAK,QAAQ,MAAM,YAAY;GAAE,GAAG,KAAK,QAAQ,MAAM;GAAW,QAAQ;IAAC,GAAI,KAAK,QAAQ,MAAM,WAAW,UAAU,CAAC;IAAI;IAAoB;GAAU;EAAE;EAC5J,KAAK,QAAQ,cAAc,eAAe;GACxC,QAAQ,EAAE,qBAAqB,QAAQ,OAAO,oBAAoB;GAClE,IAAI;IACF,QAAQ;IAER,SAAS,OAAO,YAAY,OAAO,QAAQ,QAAQ,GAAG,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,IAAI;KAAE,GAAG;KAAQ,QAAQ,OAAO,UAAU;IAAG,CAAC,CAAC,CAAC;IACtI,OAAO,QAAQ,GAAG;IAClB,WAAW,QAAQ,GAAG;IAEtB,GAAI,QAAQ,GAAG,iBAAiB,EAAE,eAAe;KAAE,GAAG,QAAQ,GAAG;KAAe,QAAQ,QAAQ,GAAG,cAAc,UAAU;IAAG,EAAE;GAClI;GACA,GAAI,KAAK,QAAQ,cAAc;EACjC;EAEA,KAAK,QAAQ,cAAc,OAAO,eAAe;GAC/C,KAAK,QAAQ;GACb,QAAQ,QAAQ;GAChB,GAAI,QAAQ,YAAY,EAAE,UAAU,QAAQ,SAAS;GACrD,IAAI;IAAE,OAAO,QAAQ,GAAG;IAAO,eAAe,QAAQ,QAAQ,GAAG,aAAa;GAAE;GAChF,GAAI,KAAK,QAAQ,cAAc,OAAO;EACxC;CACF;AACF,CAAC"}

package/dist/nuxt/runtime/install-context.d.ts

@@ -0,0 +1,17 @@
+import { VueUiKit } from "../../vue/kit/types.js";
+import { App } from "vue";
+//#region src/nuxt/runtime/install-context.d.ts
+/**
+ * Installs the editor context on a Nuxt app (client only: TipTap does not render on the server). Settings are kept per
+ * account through the host's `/api/editor/settings`; the AI configuration is the module's public runtime config,
+ * passed on as inert data. Features request through ofetch, which is what Nuxt's `$fetch` is on the client. `locale`
+ * and `messages` are the module's options of the same name. The kit comes from the plugin file the module registered
+ * for its `kit` option, so a bundler only ever reaches the UI library the app uses (a PrimeVue app never resolves
+ * `@nuxt/ui`, a Nuxt UI app never `primevue`). Only the Vue app is read, so the parameter is structural: a host's
+ * augmented `NuxtApp` (plugins adding `$router`, `$auth`, ...) and the `_NuxtApp` a plugin receives both fit.
+ */
+export declare function installEditorContext(nuxtApp: {
+  vueApp: App;
+}, kit: VueUiKit): void;
+//#endregion
+//# sourceMappingURL=install-context.d.ts.map

package/dist/nuxt/runtime/install-context.js

@@ -0,0 +1,26 @@
+import { createEditor } from "../../vue/context.js";
+import { useRuntimeConfig } from "#app";
+//#region src/nuxt/runtime/install-context.ts
+/**
+* Installs the editor context on a Nuxt app (client only: TipTap does not render on the server). Settings are kept per
+* account through the host's `/api/editor/settings`; the AI configuration is the module's public runtime config,
+* passed on as inert data. Features request through ofetch, which is what Nuxt's `$fetch` is on the client. `locale`
+* and `messages` are the module's options of the same name. The kit comes from the plugin file the module registered
+* for its `kit` option, so a bundler only ever reaches the UI library the app uses (a PrimeVue app never resolves
+* `@nuxt/ui`, a Nuxt UI app never `primevue`). Only the Vue app is read, so the parameter is structural: a host's
+* augmented `NuxtApp` (plugins adding `$router`, `$auth`, ...) and the `_NuxtApp` a plugin receives both fit.
+*/
+function installEditorContext(nuxtApp, kit) {
+	const { ai, locale, messages } = useRuntimeConfig().public.tiptapEditor;
+	nuxtApp.vueApp.use(createEditor({
+		kit,
+		settings: { remote: true },
+		...ai && { ai },
+		...locale && { locale },
+		...messages && { messages }
+	}));
+}
+//#endregion
+export { installEditorContext };
+
+//# sourceMappingURL=install-context.js.map