@fileverse-dev/ddoc 4.1.11 → 4.1.12

package/dist/index.d.ts

@@ -5,6 +5,8 @@ export { DdocExportModal } from './package/components/export-modal';
 export { useHeadlessEditor } from './package/hooks/use-headless-editor';
 export { useExportHeadlessEditorContent } from './package/hooks/use-export-headless-editor-content';
 export { mergeTabAwareYjsUpdates } from './package/components/tabs/utils/tab-utils';
+export { validateCustomCss, sanitizeCustomCss, } from './package/utils/sanitize-css';
+export type { CssDiagnostic, CssValidationResult, } from './package/utils/sanitize-css';
 export { buildVersionDiffSnapshot } from './package/components/tabs/utils/version-diff-snapshot';
 export type { DdocExportModalProps, ExportFormatOption, ExportTabOption, } from './package/components/export-modal';
 export type { VersionTabSnapshot } from './package/components/tabs/utils/version-diff-snapshot';

package/dist/index.es.js

@@ -1,12 +1,14 @@
-import { D as e, a as o, E as d, P as t, d as r, h as i, m as n, c as E, u as l } from "./index-BhAjJb8w.mjs";
+import { D as e, a as o, E as t, P as d, e as r, h as i, m as n, d as E, c as l, u, v as C } from "./index-wRSSphoI.mjs";
 export {
   e as DdocEditor,
   o as DdocExportModal,
-  d as Editor,
-  t as PreviewDdocEditor,
+  t as Editor,
+  d as PreviewDdocEditor,
   r as buildVersionDiffSnapshot,
   i as handleContentPrint,
   n as mergeTabAwareYjsUpdates,
-  E as useExportHeadlessEditorContent,
-  l as useHeadlessEditor
+  E as sanitizeCustomCss,
+  l as useExportHeadlessEditorContent,
+  u as useHeadlessEditor,
+  C as validateCustomCss
 };

package/dist/{markdown-source-pane-DTszGHF9.mjs → markdown-source-pane-QRkiwIcH.mjs}

@@ -1,9 +1,9 @@
 var Vr = Object.defineProperty;
 var Wr = (t, e, O) => e in t ? Vr(t, e, { enumerable: !0, configurable: !0, writable: !0, value: O }) : t[e] = O;
 var gt = (t, e, O) => Wr(t, typeof e != "symbol" ? e + "" : e, O);
-import { j as Cr } from "./index-BhAjJb8w.mjs";
+import { j as Cr } from "./index-wRSSphoI.mjs";
 import { useRef as pe, useEffect as St } from "react";
-import { s as y, A as pO, T as dO, a as Gr, S as et, b as Lr, P as fO, E as j, i as QO, c as _, D as le, k as tt, F as Ar, M as Pt, W as Er, R as Ur, d as mO, N as oe, e as V, f as Mr, g as Ot, h as ce, p as $O, j as Y, t as h, l as Ir, I as rt, L as at, m as ye, n as ue, o as Qe, q as gO, r as te, u as SO, v as Br, w as Nr, x as PO, y as kO, z as Dr, B as Fr, C as Kr, G as Oe, H as ZO, J as Jr, K as kt, O as Hr, Q as ea, U as ta, V as Oa, X as ra, Y as aa, Z as ia, _ as sa, $ as na, a0 as la, a1 as oa, a2 as ca } from "./index-rpz9D-nF.mjs";
+import { s as y, A as pO, T as dO, a as Gr, S as et, b as Lr, P as fO, E as j, i as QO, c as _, D as le, k as tt, F as Ar, M as Pt, W as Er, R as Ur, d as mO, N as oe, e as V, f as Mr, g as Ot, h as ce, p as $O, j as Y, t as h, l as Ir, I as rt, L as at, m as ye, n as ue, o as Qe, q as gO, r as te, u as SO, v as Br, w as Nr, x as PO, y as kO, z as Dr, B as Fr, C as Kr, G as Oe, H as ZO, J as Jr, K as kt, O as Hr, Q as ea, U as ta, V as Oa, X as ra, Y as aa, Z as ia, _ as sa, $ as na, a0 as la, a1 as oa, a2 as ca } from "./index-C4IzZi0k.mjs";
 class ua {
   /**
   Create a new completion context. (Mostly useful for testing

package/dist/package/components/split-view/split-view-css-accordion.d.ts

@@ -0,0 +1,13 @@
+interface SplitViewCssAccordionProps {
+    /** The document's custom CSS (raw author selectors). */
+    customCSS?: string;
+}
+/**
+ * Split View LEFT pane: a collapsible, READ-ONLY view of the document's custom
+ * CSS, shown above the markdown source. Custom CSS is edited in the styling
+ * palette (the single source of truth), not in the markdown pane — this is a
+ * transparency affordance so the author can see what CSS is applied while in
+ * markdown mode. Renders nothing when there is no custom CSS.
+ */
+export declare const SplitViewCssAccordion: ({ customCSS, }: SplitViewCssAccordionProps) => import("react/jsx-runtime").JSX.Element | null;
+export {};

package/dist/package/components/split-view/split-view-markdown-pane.d.ts

@@ -6,6 +6,8 @@ interface SplitViewMarkdownPaneProps {
     /** Same uploader the editor uses — for the markdown toolbar's Image button. */
     ipfsImageUploadFn?: (file: File) => Promise<IpfsImageUploadResponse>;
     onError?: (error: string) => void;
+    /** Document custom CSS — shown read-only in a collapsible accordion. */
+    customCSS?: string;
     /** Sizing for the resizable split (flex-grow set by the draggable splitter). */
     style?: React.CSSProperties;
 }
@@ -15,5 +17,5 @@ interface SplitViewMarkdownPaneProps {
  * real ddoc editor itself — see ddoc-editor.tsx, which keeps that editor mounted
  * in place (never a second <EditorContent>) so its React node views survive.
  */
-export declare const SplitViewMarkdownPane: ({ markdown, onMarkdownChange, ipfsImageUploadFn, onError, style, }: SplitViewMarkdownPaneProps) => import("react/jsx-runtime").JSX.Element;
+export declare const SplitViewMarkdownPane: ({ markdown, onMarkdownChange, ipfsImageUploadFn, onError, customCSS, style, }: SplitViewMarkdownPaneProps) => import("react/jsx-runtime").JSX.Element;
 export {};

package/dist/package/extensions/mardown-paste-handler/index.d.ts

@@ -7,6 +7,11 @@ export declare const turndownService: TurndownService;
 export declare const setMarkdownInlineStyles: (enabled: boolean) => void;
 export declare const setResolveColorVars: (enabled: boolean) => void;
 declare module '@tiptap/core' {
+    interface Storage {
+        markdownPasteHandler: {
+            customCSS: string;
+        };
+    }
     interface Commands {
         uploadMarkdownFile: {
             uploadMarkdownFile: (ipfsImageUploadFn?: (file: File) => Promise<IpfsImageUploadResponse>, onError?: (error: string) => void) => any;

package/dist/package/types.d.ts

@@ -103,6 +103,17 @@ export interface DocumentStyling {
      * @example "portrait" | "landscape"
      */
     orientation?: 'portrait' | 'landscape';
+    /**
+     * Custom CSS
+     * @description The author's escape hatch for styling the document beyond the
+     * structured options above. Write BARE selectors (`h1 { … }`, `p { … }`,
+     * `blockquote { … }`) — they are auto-scoped to the document content, so rules
+     * can't leak into the toolbar or the host app. Bare top-level declarations
+     * (e.g. `background`, `font-family`) style the document surface itself.
+     * Applies live in the editor, in preview, and in exports (Markdown/HTML).
+     * @example "h1 { letter-spacing: -0.02em } p { line-height: 1.8 }"
+     */
+    customCSS?: string;
 }
 export interface DdocProps extends CommentAccountProps {
     /**

package/dist/package/utils/sanitize-css.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Sanitize + scope + validate author-supplied custom CSS before it is injected
+ * into the document.
+ *
+ * Authors write **normal, full-page CSS** — `body { … }`, `html body h1 { … }`,
+ * `h1 { … }`, `* { … }` — the way they'd style any web page. We transparently
+ * scope every rule to the document so it can't leak into the app, AND we map the
+ * page-root selectors (`html`, `body`, `:root`) onto the document root so that
+ * `body { background: … }` styles the doc surface and `html body h1 { … }`
+ * styles the doc's headings. No `.ProseMirror` prefix, no learning curve.
+ *
+ * Because the raw string reaches VIEWERS of a published doc, it is untrusted.
+ * Every selector is force-scoped (so a `}` breakout is neutralised — the escaped
+ * rule is simply scoped too), and dangerous declarations are stripped:
+ *  - external resource loads / exfiltration: `url(…)`, `@import`;
+ *  - clickjacking / UI redressing: `position: fixed | sticky`;
+ *  - legacy script vectors: `expression()`, `-moz-binding`, `behavior:`.
+ *
+ * We parse with the browser's own CSS engine (no dependency), rewrite each
+ * selector, strip dangerous declarations at every nesting level, and let the
+ * engine re-serialise — so the output is always a valid, balanced stylesheet.
+ *
+ * The sanitizer knows exactly what it removed, so it returns non-blocking
+ * `diagnostics`; the editing UI surfaces them (CSS is forgiving — we warn,
+ * never block).
+ */
+export interface CssDiagnostic {
+    level: 'warning' | 'error';
+    message: string;
+}
+export interface CssValidationResult {
+    /** Sanitized, scoped CSS, safe to inject. '' when nothing survives. */
+    css: string;
+    /** What was stripped/ignored, deduped. Empty when the CSS was fully clean. */
+    diagnostics: CssDiagnostic[];
+}
+/**
+ * Sanitize + scope AND report. Use this from the editing UI for diagnostics.
+ */
+export declare const validateCustomCss: (raw: string | undefined | null, scope?: string) => CssValidationResult;
+/**
+ * Sanitized + scoped CSS only — used at injection/export sinks that just need
+ * the safe string. Diagnostics are surfaced separately via validateCustomCss.
+ */
+export declare const sanitizeCustomCss: (raw: string | undefined | null, scope?: string) => string;

package/dist/{split-view-toolbar-Bpk4iUtd.mjs → split-view-toolbar-D2GdAA9D.mjs}

@@ -1,7 +1,7 @@
-import { j as d } from "./index-BhAjJb8w.mjs";
+import { j as d } from "./index-wRSSphoI.mjs";
 import { useRef as I, useState as N, useEffect as D } from "react";
 import { DynamicDropdown as E, Tooltip as R, IconButton as O } from "@fileverse/ui";
-import { a3 as A, a4 as P, c as y } from "./index-rpz9D-nF.mjs";
+import { a3 as A, a4 as P, c as y } from "./index-C4IzZi0k.mjs";
 const p = (e, t, o = t) => {
   const { state: s } = e, l = s.changeByRange((n) => {
     const u = s.sliceDoc(n.from, n.to), r = s.sliceDoc(