@file-viewer/renderer-text 2.4.0 → 3.0.0

package/README.en.md

@@ -1,6 +1,6 @@
 # @file-viewer/renderer-text
 
-Standalone code, text, Markdown, patch, and git bundle renderer package for Flyfish File Viewer. It handles source highlighting, Markdown reading surfaces, embedded Mermaid diagrams in Markdown, side-by-side patch diffs, git bundle inspection, and unified zoom for `.txt`, `.json`, `.ts`, `.vue`, `.log`, `.md`, `.markdown`, `.patch`, `.bundle`, and other code delivery formats.
+Base code, text, and Markdown renderer package for Flyfish File Viewer. Mermaid, side-by-side patch diff, and Git bundle inspection live in `@file-viewer/capability-mermaid` and `@file-viewer/capability-text-tools`; they are excluded from the standard/full default closure.
 
 ## Usage
 
@@ -34,8 +34,8 @@ const options = {
 - Code and text preview uses `highlight.js` core with per-language dynamic imports instead of registering every language up front.
 - Code, text, and virtualized Markdown source views show their file type, indexing status, and line-count metadata bar by default. Set `options.text.toolbar: false` to hide this renderer-local bar without hiding the viewer-level download, search, or zoom toolbar.
 - Regular code and text previews can show a line-number gutter with `options.text.lineNumbers: true`. The gutter is excluded from copied source, search matches, and assistive reading. Virtual large-text views keep their existing gutter unless it is explicitly set to `false`.
-- `patch` uses `diff2html` on demand for side-by-side review.
-- `bundle` / `bdl` parses Git bundle headers, refs, commit history, file trees, and readable blobs; regular OFS_DELTA / REF_DELTA objects are resolved in the browser, while very large packs or bundles that depend on external prerequisites surface a clear boundary notice.
+- With the text-tools capability installed, `patch` uses `diff2html` for side-by-side review and `bundle` / `bdl` enables Git bundle inspection.
+- With the Mermaid capability installed, fenced Mermaid blocks render as diagrams. Without it, the source stays visible with the exact CLI enablement command.
 - HTML, XML, Vue, and similar files are escaped and shown as source, never executed.
 - Markdown uses `marked` for a read-only reading surface with dark/light theme support, table scrolling, and a unified zoom provider.
 - Markdown no longer falls back to source because of the general large-text threshold. Set `options.text.markdownVirtualizeAboveBytes` only when an application must bound exceptionally large Markdown files.
@@ -43,4 +43,4 @@ const options = {
 
 ## Migration Note
 
-`@file-viewer/core` no longer bundles code / markdown renderers and no longer depends directly on `highlight.js`, `marked`, `diff2html`, or git bundle parsing dependencies. Install this package explicitly for code, text, Markdown, patch, or git bundle preview, or use `@file-viewer/preset-all`, which aggregates this renderer automatically.
+Standard/full includes base code, text, and Markdown without installing `diff2html`, `pako`, or Mermaid. Optional uploads show `npx file-viewer-cli add text-tools --write` or `add mermaid-markdown --write`; `preset-all` is only for explicit all/debug use.

package/README.md

@@ -1,6 +1,6 @@
 # @file-viewer/renderer-text
 
-Flyfish File Viewer 的独立代码、文本、Markdown、patch 和 git bundle renderer 包。它负责 `.txt`、`.json`、`.ts`、`.vue`、`.log`、`.md`、`.markdown`、`.patch`、`.bundle` 等文本与代码交付文件的源码高亮、Markdown 阅读面、Markdown 内嵌 Mermaid 图、左右比对、bundle 结构查看和统一缩放。
+Flyfish File Viewer 的基础代码、文本和 Markdown renderer 包。Mermaid、patch 左右比对和 Git bundle 检查已拆到 `@file-viewer/capability-mermaid` 与 `@file-viewer/capability-text-tools`，不进入 standard/full 默认闭包。
 
 ## 用法
 
@@ -34,8 +34,8 @@ const options = {
 - 代码和文本使用 `highlight.js` core + 按语言动态加载，避免一次性注册全部语言。
 - 代码、文本和超大 Markdown 源码视图默认显示文件类型、索引状态和行数元信息栏；传入 `options.text.toolbar: false` 可隐藏该 renderer 内部栏，不影响 Viewer 的下载、搜索、缩放等全局工具栏。
 - 普通代码和文本可通过 `options.text.lineNumbers: true` 显示行号；行号不会进入复制内容、搜索结果或无障碍朗读。超大文本保留原有的虚拟行号栏，可显式传 `false` 隐藏。
-- `patch` 使用 `diff2html` 按需渲染左右比对视图。
-- `bundle` / `bdl` 会解析 Git bundle header、refs、commit 历史、文件树和可读 blob；常规 OFS_DELTA / REF_DELTA 会在浏览器端还原，超大包或依赖外部 prerequisite 的包会给出清晰边界提示。
+- 安装 text-tools capability 后，`patch` 使用 `diff2html` 渲染左右比对视图，`bundle` / `bdl` 才启用 Git bundle 结构检查。
+- 安装 Mermaid capability 后，Markdown 内嵌 Mermaid 图才会渲染；未安装时保留源码并显示精确 CLI 启用命令。
 - HTML / XML / Vue 等文件按源码方式转义展示，不执行脚本。
 - Markdown 使用 `marked` 输出只读阅读面，并保留明暗主题、表格滚动和统一缩放 provider。
 - Markdown 不再因为通用大文本阈值自动退化成源码；如业务必须限制超大 Markdown，可单独设置 `options.text.markdownVirtualizeAboveBytes`。
@@ -43,4 +43,4 @@ const options = {
 
 ## 迁移说明
 
-`@file-viewer/core` 已不再内置 code / markdown renderer，也不再直接依赖 `highlight.js`、`marked`、`diff2html` 或 Git bundle 解析依赖。需要代码、文本、Markdown、patch 或 git bundle 预览时，请显式安装本包，或使用会自动聚合本包的 `@file-viewer/preset-all`。
+standard/full 默认包含基础代码、文本和 Markdown，不安装 `diff2html`、`pako` 或 Mermaid。打开可选格式时会提示运行 `npx file-viewer-cli add text-tools --write` 或 `add mermaid-markdown --write`；`preset-all` 仅用于显式全量/调试。

package/dist/gitBundle.js

@@ -1,5 +1,6 @@
 import { createFileViewerTranslator, createFileViewerZoomChangeEmitter as createZoomChangeEmitter, registerFileViewerZoomProvider, unregisterFileViewerZoomProvider } from '@file-viewer/core';
-import { Inflate } from 'pako';
+import { getFileViewerPakoLoader } from './optionalCapabilities.js';
+let Inflate = null;
 const textDecoder = new TextDecoder('utf-8');
 const asciiDecoder = new TextDecoder('latin1');
 const bundleStyle = `
@@ -135,6 +136,8 @@ const readOfsDeltaBase = (bytes, start) => {
     return { value, offset };
 };
 const inflateObject = (bytes, start) => {
+    if (!Inflate)
+        throw new Error('Git bundle support is opt-in. Run `npx file-viewer-cli add text-tools --write`, then `npx file-viewer-cli install --yes`.');
     const inflator = new Inflate();
     let offset = start;
     while (!inflator.ended && offset < bytes.length) {
@@ -476,6 +479,12 @@ const renderMeta = (documentRef, panel, model, t) => {
     }
 };
 export default async function renderGitBundle(buffer, target, type = 'bundle', context) {
+    const loadPako = getFileViewerPakoLoader();
+    if (!loadPako) {
+        throw new Error('Git bundle support is opt-in. Run `npx file-viewer-cli add text-tools --write`, then `npx file-viewer-cli install --yes`.');
+    }
+    ;
+    ({ Inflate } = await loadPako());
     const documentRef = target.ownerDocument || document;
     const t = createFileViewerTranslator(context === null || context === void 0 ? void 0 : context.options);
     const model = await parseBundleModel(buffer, t);

package/dist/index.d.ts

@@ -1,4 +1,7 @@
 import { type FileRenderHandler, type FileViewerRenderedInstance, type FileViewerRendererPlugin, type RendererDefinition } from '@file-viewer/core';
+export { getFileViewerMermaidLoader, getFileViewerDiffToHtml, getFileViewerPakoLoader, registerFileViewerDiffToHtml, registerFileViewerMermaidLoader, registerFileViewerPakoLoader, } from './optionalCapabilities.js';
+export type { FileViewerMermaidLoader, FileViewerMermaidModule, FileViewerDiffToHtml, FileViewerPakoModule, } from './optionalCapabilities.js';
+export { sanitizeFileViewerRichHtml } from './sanitizeHtml.js';
 export declare const textRendererDefinitions: RendererDefinition[];
 export declare const renderFileViewerCode: FileRenderHandler<FileViewerRenderedInstance, HTMLDivElement>;
 export declare const renderFileViewerMarkdown: FileRenderHandler<FileViewerRenderedInstance, HTMLDivElement>;

package/dist/index.js

@@ -1,4 +1,6 @@
 import { DEFAULT_RENDERER_DEFINITIONS, } from '@file-viewer/core';
+export { getFileViewerMermaidLoader, getFileViewerDiffToHtml, getFileViewerPakoLoader, registerFileViewerDiffToHtml, registerFileViewerMermaidLoader, registerFileViewerPakoLoader, } from './optionalCapabilities.js';
+export { sanitizeFileViewerRichHtml } from './sanitizeHtml.js';
 const textRendererIds = ['code', 'markdown'];
 const textDefinitions = DEFAULT_RENDERER_DEFINITIONS.filter(definition => textRendererIds.includes(definition.id));
 if (textDefinitions.length !== textRendererIds.length) {

package/dist/markdown.d.ts

@@ -1,3 +1,4 @@
 import { type FileRenderContext, type FileViewerRenderedInstance } from '@file-viewer/core';
+export declare const sanitizeMermaidSvg: (documentRef: Document, svg: string) => SVGSVGElement;
 export declare const stripMarkdownFrontmatter: (text: string) => string;
 export default function renderMarkdown(buffer: ArrayBuffer, target: HTMLDivElement, context?: FileRenderContext): Promise<FileViewerRenderedInstance>;

package/dist/markdown.js

@@ -1,27 +1,22 @@
 import { marked } from 'marked';
 import createDOMPurify from 'dompurify';
-import { createFileViewerZoomChangeEmitter as createZoomChangeEmitter, decodeFileViewerTextBuffer, registerFileViewerZoomProvider, resolveFileViewerFitScale, unregisterFileViewerZoomProvider, } from '@file-viewer/core';
-const createSafeTextFragment = (documentRef, value) => {
-    const fragment = documentRef.createDocumentFragment();
-    fragment.append(documentRef.createTextNode(value));
-    return fragment;
-};
-const sanitizeMarkdownHtml = (documentRef, html) => {
+import { createFileViewerZoomChangeEmitter as createZoomChangeEmitter, assertFileViewerMermaidSourceHasNoExternalResources, decodeFileViewerTextBuffer, registerFileViewerZoomProvider, resolveFileViewerFitScale, unregisterFileViewerZoomProvider, sanitizeFileViewerSvgResources, } from '@file-viewer/core';
+import { getFileViewerMermaidLoader } from './optionalCapabilities.js';
+import { sanitizeFileViewerRichHtml } from './sanitizeHtml.js';
+const sanitizeMarkdownHtml = sanitizeFileViewerRichHtml;
+const purifierByDocument = new WeakMap();
+const getMarkdownPurifier = (documentRef) => {
+    const cached = purifierByDocument.get(documentRef);
+    if (cached)
+        return cached;
     const windowRef = documentRef.defaultView;
-    if (!windowRef) {
-        return createSafeTextFragment(documentRef, html);
-    }
+    if (!windowRef)
+        return null;
     const purifier = createDOMPurify(windowRef);
-    if (!purifier.isSupported) {
-        return createSafeTextFragment(documentRef, html);
-    }
-    return purifier.sanitize(html, {
-        RETURN_DOM_FRAGMENT: true,
-        USE_PROFILES: { html: true },
-        ADD_ATTR: ['target'],
-        FORBID_TAGS: ['style', 'iframe', 'object', 'embed', 'form'],
-        FORBID_ATTR: ['style', 'srcdoc'],
-    });
+    if (!purifier.isSupported)
+        return null;
+    purifierByDocument.set(documentRef, purifier);
+    return purifier;
 };
 const hardenMarkdownLinks = (root) => {
     root.querySelectorAll('a[target]').forEach(anchor => {
@@ -108,35 +103,38 @@ const isDarkTheme = (documentRef, theme) => {
     }
     return Boolean((_b = (_a = documentRef.defaultView) === null || _a === void 0 ? void 0 : _a.matchMedia) === null || _b === void 0 ? void 0 : _b.call(_a, '(prefers-color-scheme: dark)').matches);
 };
-const sanitizeMermaidSvg = (documentRef, svg) => {
-    var _a;
-    const Parser = ((_a = documentRef.defaultView) === null || _a === void 0 ? void 0 : _a.DOMParser) || DOMParser;
-    const parsed = new Parser().parseFromString(svg, 'image/svg+xml');
-    const parseError = parsed.querySelector('parsererror');
-    if (parseError) {
-        throw new Error(parseError.textContent || 'Unable to parse the Mermaid SVG.');
+export const sanitizeMermaidSvg = (documentRef, svg) => {
+    const purifier = getMarkdownPurifier(documentRef);
+    if (!purifier) {
+        throw new Error('Unable to initialize the Mermaid SVG sanitizer.');
     }
-    parsed.querySelectorAll('script,iframe,object,embed').forEach(node => node.remove());
-    parsed.querySelectorAll('*').forEach(node => {
-        for (const attribute of Array.from(node.attributes)) {
-            if (/^on/i.test(attribute.name)) {
-                node.removeAttribute(attribute.name);
-            }
-            else if (/^(?:href|xlink:href|src)$/i.test(attribute.name) && /^\s*javascript:/i.test(attribute.value)) {
-                node.removeAttribute(attribute.name);
-            }
-        }
+    const fragment = purifier.sanitize(svg, {
+        RETURN_DOM_FRAGMENT: true,
+        USE_PROFILES: { html: true, svg: true, svgFilters: true },
+        FORBID_TAGS: ['script', 'iframe', 'object', 'embed', 'form'],
+        FORBID_ATTR: ['srcdoc'],
     });
-    return documentRef.importNode(parsed.documentElement, true);
+    const root = fragment.querySelector('svg');
+    if (!root) {
+        throw new Error('Unable to parse the Mermaid SVG.');
+    }
+    sanitizeFileViewerSvgResources(fragment);
+    return documentRef.importNode(root, true);
 };
 const renderMermaidSvg = async (documentRef, source, theme) => {
     const render = async () => {
-        const mermaidModule = await import('mermaid');
+        assertFileViewerMermaidSourceHasNoExternalResources(source);
+        const loadMermaid = getFileViewerMermaidLoader();
+        if (!loadMermaid) {
+            throw new Error('Mermaid support is opt-in. Run `npx file-viewer-cli add mermaid-markdown --write`, then `npx file-viewer-cli install --yes`.');
+        }
+        const mermaidModule = await loadMermaid();
         const mermaid = mermaidModule.default;
         const id = `file-viewer-markdown-mermaid-${Date.now()}-${mermaidRenderSequence += 1}`;
         mermaid.initialize({
             startOnLoad: false,
             securityLevel: 'strict',
+            htmlLabels: false,
             theme: isDarkTheme(documentRef, theme) ? 'dark' : 'default',
         });
         const rendered = await mermaid.render(id, source);
@@ -171,7 +169,9 @@ const renderEmbeddedMermaid = async (article, theme) => {
             const message = documentRef.createElement('p');
             message.className = 'markdown-mermaid-error';
             message.setAttribute('role', 'alert');
-            message.textContent = 'Mermaid diagram could not be rendered. The source is shown above.';
+            message.textContent = error instanceof Error && error.message.includes('npx file-viewer-cli')
+                ? error.message
+                : 'Mermaid diagram could not be rendered. The source is shown above.';
             pre.after(message);
             console.warn('[file-viewer] Unable to render embedded Mermaid diagram.', error);
         }

package/dist/optionalCapabilities.d.ts

@@ -0,0 +1,21 @@
+export type FileViewerMermaidModule = {
+    default: {
+        initialize(options: Record<string, unknown>): void;
+        render(id: string, source: string): Promise<{
+            svg: string;
+        }>;
+    };
+};
+export type FileViewerMermaidLoader = () => Promise<FileViewerMermaidModule>;
+export type FileViewerDiffToHtml = (input: string, options: Record<string, unknown>) => string;
+export type FileViewerPakoModule = typeof import('pako');
+/**
+ * Enables embedded Mermaid blocks without making Mermaid part of the base text
+ * renderer dependency closure. Capability packs call this once at startup.
+ */
+export declare const registerFileViewerMermaidLoader: (loader: FileViewerMermaidLoader | null) => void;
+export declare const getFileViewerMermaidLoader: () => FileViewerMermaidLoader | null;
+export declare const registerFileViewerDiffToHtml: (renderer: FileViewerDiffToHtml | null) => void;
+export declare const getFileViewerDiffToHtml: () => FileViewerDiffToHtml | null;
+export declare const registerFileViewerPakoLoader: (loader: (() => Promise<FileViewerPakoModule>) | null) => void;
+export declare const getFileViewerPakoLoader: () => (() => Promise<FileViewerPakoModule>) | null;

package/dist/optionalCapabilities.js

@@ -0,0 +1,19 @@
+let mermaidLoader = null;
+let diffToHtml = null;
+let pakoLoader = null;
+/**
+ * Enables embedded Mermaid blocks without making Mermaid part of the base text
+ * renderer dependency closure. Capability packs call this once at startup.
+ */
+export const registerFileViewerMermaidLoader = (loader) => {
+    mermaidLoader = loader;
+};
+export const getFileViewerMermaidLoader = () => mermaidLoader;
+export const registerFileViewerDiffToHtml = (renderer) => {
+    diffToHtml = renderer;
+};
+export const getFileViewerDiffToHtml = () => diffToHtml;
+export const registerFileViewerPakoLoader = (loader) => {
+    pakoLoader = loader;
+};
+export const getFileViewerPakoLoader = () => pakoLoader;

package/dist/patch.js

@@ -1,5 +1,6 @@
 import { createFileViewerZoomChangeEmitter as createZoomChangeEmitter, decodeFileViewerTextBuffer, registerFileViewerZoomProvider, unregisterFileViewerZoomProvider } from '@file-viewer/core';
-import { html as diffToHtml } from 'diff2html';
+import { getFileViewerDiffToHtml } from './optionalCapabilities.js';
+import { sanitizeFileViewerRichHtml } from './sanitizeHtml.js';
 const patchStyle = `
 .patch-viewer{min-height:100%;--patch-bg:#f6f8fa;--patch-surface:#fff;--patch-border:rgba(31,35,40,.12);--patch-text:#24292f;--patch-muted:#57606a;--patch-add:#dafbe1;--patch-del:#ffebe9;--patch-info:#ddf4ff;--patch-font-size:13px;background:var(--patch-bg);color:var(--patch-text);box-sizing:border-box}
 .patch-toolbar{position:sticky;top:0;z-index:2;display:flex;height:46px;align-items:center;justify-content:space-between;gap:12px;padding:0 16px;border-bottom:1px solid var(--patch-border);background:rgba(255,255,255,.92);backdrop-filter:blur(12px);box-sizing:border-box}
@@ -52,18 +53,6 @@ const countFiles = (text) => {
     }
     return ((_a = text.match(/^---\s+/gm)) === null || _a === void 0 ? void 0 : _a.length) || 1;
 };
-const escapeHtml = (value) => {
-    return value.replace(/[&<>"']/g, char => {
-        const entities = {
-            '&': '&amp;',
-            '<': '&lt;',
-            '>': '&gt;',
-            '"': '&quot;',
-            "'": '&#39;'
-        };
-        return entities[char];
-    });
-};
 export default async function renderPatch(buffer, target, type = 'patch', context) {
     var _a, _b;
     const documentRef = target.ownerDocument || document;
@@ -76,16 +65,21 @@ export default async function renderPatch(buffer, target, type = 'patch', contex
     toolbar.append(createElement(documentRef, 'span', undefined, type.toUpperCase()), createElement(documentRef, 'strong', undefined, `${countFiles(text)} files · side-by-side`));
     const body = createElement(documentRef, 'div', 'patch-body');
     try {
-        body.innerHTML = diffToHtml(text, {
+        const diffToHtml = getFileViewerDiffToHtml();
+        if (!diffToHtml) {
+            throw new Error('Patch side-by-side rendering is opt-in. Run `npx file-viewer-cli add text-tools --write`, then `npx file-viewer-cli install --yes`.');
+        }
+        const rendered = diffToHtml(text, {
             drawFileList: true,
             matching: 'lines',
             outputFormat: 'side-by-side',
             renderNothingWhenEmpty: false
         });
+        body.replaceChildren(sanitizeFileViewerRichHtml(documentRef, rendered, { allowSvg: true }));
     }
     catch {
         const fallback = createElement(documentRef, 'pre', 'patch-fallback');
-        fallback.innerHTML = escapeHtml(text);
+        fallback.textContent = text;
         body.replaceChildren(fallback);
     }
     root.append(toolbar, body);

package/dist/sanitizeHtml.d.ts

@@ -0,0 +1,5 @@
+export type FileViewerRichHtmlSanitizerOptions = {
+    /** Preserve inert SVG markup such as diff icons. Raw Markdown keeps this disabled. */
+    allowSvg?: boolean;
+};
+export declare const sanitizeFileViewerRichHtml: (documentRef: Document, html: string, options?: FileViewerRichHtmlSanitizerOptions) => DocumentFragment;

package/dist/sanitizeHtml.js

@@ -0,0 +1,47 @@
+import createDOMPurify from 'dompurify';
+import { sanitizeFileViewerSvgResources } from '@file-viewer/core';
+const safeUrl = (value) => {
+    var _a, _b;
+    // eslint-disable-next-line no-control-regex -- remove URL controls before scheme validation
+    const compact = value.trim().replace(/[\u0000-\u0020\u007f-\u009f]/g, '');
+    const scheme = (_b = (_a = compact.match(/^([a-z][a-z0-9+.-]*):/i)) === null || _a === void 0 ? void 0 : _a[1]) === null || _b === void 0 ? void 0 : _b.toLowerCase();
+    return !scheme || ['http', 'https', 'mailto', 'tel'].includes(scheme);
+};
+export const sanitizeFileViewerRichHtml = (documentRef, html, options = {}) => {
+    const fallback = () => {
+        const fragment = documentRef.createDocumentFragment();
+        fragment.append(documentRef.createTextNode(html));
+        return fragment;
+    };
+    const windowRef = documentRef.defaultView;
+    if (!windowRef)
+        return fallback();
+    const purifier = createDOMPurify(windowRef);
+    if (!purifier.isSupported)
+        return fallback();
+    const fragment = purifier.sanitize(html, {
+        RETURN_DOM_FRAGMENT: true,
+        USE_PROFILES: options.allowSvg
+            ? { html: true, svg: true, svgFilters: true }
+            : { html: true },
+        ADD_ATTR: ['target'],
+        FORBID_TAGS: ['base', 'embed', 'form', 'iframe', 'object', 'script', 'style', 'template'],
+        FORBID_ATTR: ['action', 'formaction', 'srcdoc', 'style'],
+    });
+    fragment.querySelectorAll('*').forEach(element => {
+        for (const attribute of Array.from(element.attributes)) {
+            if (/^on/i.test(attribute.name))
+                element.removeAttribute(attribute.name);
+        }
+    });
+    fragment.querySelectorAll('a[href]').forEach(anchor => {
+        const href = anchor.getAttribute('href') || '';
+        if (!safeUrl(href))
+            anchor.removeAttribute('href');
+        if ((anchor.getAttribute('target') || '').toLowerCase() === '_blank')
+            anchor.rel = 'noopener noreferrer';
+    });
+    if (options.allowSvg)
+        sanitizeFileViewerSvgResources(fragment);
+    return fragment;
+};

package/file-viewer.capability.json

@@ -0,0 +1,12 @@
+{
+  "$schema": "../../../ecosystem/capability-manifest.schema.json",
+  "schemaVersion": 1,
+  "id": "text",
+  "packageName": "@file-viewer/renderer-text",
+  "rendererIds": ["markdown", "code"],
+  "formats": ["md", "markdown", "txt", "json", "js", "mjs", "cjs", "css", "java", "py", "html", "htm", "jsx", "ts", "tsx", "xml", "log", "vue", "yaml", "yml", "ini", "sh", "bash", "sql", "go", "rs", "php", "c", "cpp", "cc", "h", "hpp", "cs", "jsonc", "json5", "ipynb", "toml", "proto", "hcl", "tex", "gv", "http", "react", "rb", "swift", "kt"],
+  "assets": { "rendererIds": [] },
+  "license": { "spdx": "Apache-2.0", "policy": "permissive" },
+  "weight": "standard",
+  "profiles": ["lite", "standard", "all"]
+}

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@file-viewer/renderer-text",
-  "version": "2.4.0",
+  "version": "3.0.0",
   "private": false,
   "type": "module",
-  "description": "Standalone code, text, Markdown, patch diff, and Git bundle renderer plugin for File Viewer.",
+  "description": "Standalone code, text, and Markdown renderer for File Viewer; Mermaid, patch diff, and Git bundle tools are explicit opt-in capabilities.",
   "keywords": [
     "file-viewer",
     "renderer",
@@ -52,25 +52,30 @@
   },
   "files": [
     "dist",
+    "file-viewer.capability.json",
     "README.md",
     "README.en.md",
     "LICENSE"
   ],
   "dependencies": {
-    "@file-viewer/core": "2.4.0",
-    "diff2html": "^3.4.56",
+    "@file-viewer/core": "3.0.0",
     "highlight.js": "^11.11.1",
     "marked": "^18.0.5",
-    "mermaid": "^11.16.1",
-    "pako": "^2.1.0",
     "dompurify": "^3.4.13"
   },
   "devDependencies": {
+    "diff2html": "^3.4.56",
+    "mermaid": "^11.16.1",
+    "pako": "^2.1.0",
+    "jsdom": "^27.4.0",
     "typescript": "^6.0.3"
   },
+  "fileViewer": {
+    "capabilityManifest": "./file-viewer.capability.json"
+  },
   "license": "Apache-2.0",
   "scripts": {
-    "build": "tsc -b tsconfig.json",
+    "build": "tsc -b tsconfig.json && node --test test/*.test.mjs",
     "type-check": "tsc -b tsconfig.json"
   }
 }