@formicoidea/labre-core 0.42.0 → 0.45.0

package/dist/_pkgs/affine-block-edgeless-text/view.js

@@ -5,6 +5,7 @@ import { EdgelessClipboardEdgelessTextConfig } from './edgeless-clipboard-config
 import { EdgelessTextInteraction } from './edgeless-text-block.js';
 import { edgelessTextToolbarExtension } from './edgeless-toolbar/index.js';
 import { effects } from './effects.js';
+import { EdgelessTextSvgPainterExtension } from './svg-painter.js';
 export class EdgelessTextViewExtension extends ViewExtensionProvider {
     constructor() {
         super(...arguments);
@@ -24,6 +25,7 @@ export class EdgelessTextViewExtension extends ViewExtensionProvider {
             context.register(edgelessTextToolbarExtension);
             context.register(EdgelessClipboardEdgelessTextConfig);
             context.register(EdgelessTextInteraction);
+            context.register(EdgelessTextSvgPainterExtension);
         }
     }
 }

package/dist/_pkgs/affine-block-embed/common/iframe-sandbox.d.ts

@@ -0,0 +1,39 @@
+/**
+ * The iframe sandbox policy of every embed block, in one place.
+ *
+ * Every `<iframe>` this package renders points at a third party, so every one
+ * of them is sandboxed. The three values below are the only levels there are;
+ * see `docs/adr/0028-iframe-sandbox-policy.md` for why.
+ *
+ * These constants used to live inside `embed-iframe-block/`, out of reach of
+ * the sibling blocks of the same package — which is how the dedicated
+ * YouTube / Figma / Loom players were shipped with no sandbox at all until
+ * issue #389. The policy belongs to the package, not to one block.
+ */
+/**
+ * Sandbox granted to an embed served by a known provider (spotify, miro, …)
+ * through `EmbedIframeConfig`. A provider may widen it through its own
+ * `sandbox` option.
+ */
+export declare const TRUSTED_SANDBOX = "allow-same-origin allow-scripts allow-forms allow-presentation";
+/**
+ * Sandbox granted to an arbitrary url: the generic provider, or no provider at
+ * all. Without `allow-same-origin` the frame runs on an opaque origin.
+ */
+export declare const UNTRUSTED_SANDBOX = "allow-scripts";
+/**
+ * Sandbox granted to the dedicated third-party players whose `src` is built
+ * from a fixed, hard-coded origin (`www.youtube.com`, `www.figma.com`,
+ * `www.loom.com`): they never go through `EmbedIframeConfig`, so this is the
+ * only place their policy is written.
+ *
+ * `allow-same-origin` is not negotiable: without it the YouTube player fails
+ * to start (`Cache storage is disabled because the context is sandboxed`) and
+ * paints a black frame. It is safe here precisely because the origin is fixed
+ * and cross-origin to the host — the frame keeps its own origin and cannot
+ * reach the host document.
+ *
+ * It is `TRUSTED_SANDBOX` minus `allow-forms`: none of these three players has
+ * a form to submit, so the capability is not granted.
+ */
+export declare const PROVIDER_PLAYER_SANDBOX = "allow-same-origin allow-scripts allow-presentation";

package/dist/_pkgs/affine-block-embed/common/iframe-sandbox.js

@@ -0,0 +1,39 @@
+/**
+ * The iframe sandbox policy of every embed block, in one place.
+ *
+ * Every `<iframe>` this package renders points at a third party, so every one
+ * of them is sandboxed. The three values below are the only levels there are;
+ * see `docs/adr/0028-iframe-sandbox-policy.md` for why.
+ *
+ * These constants used to live inside `embed-iframe-block/`, out of reach of
+ * the sibling blocks of the same package — which is how the dedicated
+ * YouTube / Figma / Loom players were shipped with no sandbox at all until
+ * issue #389. The policy belongs to the package, not to one block.
+ */
+/**
+ * Sandbox granted to an embed served by a known provider (spotify, miro, …)
+ * through `EmbedIframeConfig`. A provider may widen it through its own
+ * `sandbox` option.
+ */
+export const TRUSTED_SANDBOX = 'allow-same-origin allow-scripts allow-forms allow-presentation';
+/**
+ * Sandbox granted to an arbitrary url: the generic provider, or no provider at
+ * all. Without `allow-same-origin` the frame runs on an opaque origin.
+ */
+export const UNTRUSTED_SANDBOX = 'allow-scripts';
+/**
+ * Sandbox granted to the dedicated third-party players whose `src` is built
+ * from a fixed, hard-coded origin (`www.youtube.com`, `www.figma.com`,
+ * `www.loom.com`): they never go through `EmbedIframeConfig`, so this is the
+ * only place their policy is written.
+ *
+ * `allow-same-origin` is not negotiable: without it the YouTube player fails
+ * to start (`Cache storage is disabled because the context is sandboxed`) and
+ * paints a black frame. It is safe here precisely because the origin is fixed
+ * and cross-origin to the host — the frame keeps its own origin and cannot
+ * reach the host document.
+ *
+ * It is `TRUSTED_SANDBOX` minus `allow-forms`: none of these three players has
+ * a form to submit, so the capability is not granted.
+ */
+export const PROVIDER_PLAYER_SANDBOX = 'allow-same-origin allow-scripts allow-presentation';

package/dist/_pkgs/affine-block-embed/configs/toolbar.js

@@ -1,4 +1,4 @@
-import { reassociateConnectorsCommand } from '../../affine-block-surface/index.js';
+import { applyCreationLayer, reassociateConnectorsCommand, sourceLayerOf, } from '../../affine-block-surface/index.js';
 import { toast } from '../../affine-components/toast/index.js';
 import { BookmarkStyles, EmbedGithubModel, EmbedGithubStyles, isExternalEmbedModel, } from '../../affine-model/index.js';
 import { EMBED_CARD_HEIGHT, EMBED_CARD_WIDTH, } from '../../affine-shared/consts/index.js';
@@ -342,7 +342,16 @@ const createBuiltinSurfaceToolbarConfigForExternal = (klass) => {
                             const bounds = Bound.deserialize(xywh);
                             bounds.w = EMBED_CARD_WIDTH[style];
                             bounds.h = EMBED_CARD_HEIGHT[style];
-                            const newId = ctx.store.addBlock(flavour, { url, caption, style, xywh: bounds.serialize() }, parent);
+                            // The card takes the embed's place, layer included (ADR 0031 §6).
+                            const props = {
+                                url,
+                                caption,
+                                style,
+                                xywh: bounds.serialize(),
+                                layer: sourceLayerOf(model),
+                            };
+                            applyCreationLayer(ctx.std, props);
+                            const newId = ctx.store.addBlock(flavour, props, parent);
                             ctx.command.exec(reassociateConnectorsCommand, { oldId, newId });
                             ctx.store.deleteBlock(model);
                             // Selects new block

package/dist/_pkgs/affine-block-embed/embed-figma-block/embed-figma-block.js

@@ -4,6 +4,7 @@ import { BlockSelection } from '../../std/index.js';
 import { html, nothing } from 'lit';
 import { classMap } from 'lit/directives/class-map.js';
 import { EmbedBlockComponent } from '../common/embed-block-element.js';
+import { PROVIDER_PLAYER_SANDBOX } from '../common/iframe-sandbox.js';
 import { FigmaIcon, styles } from './styles.js';
 export class EmbedFigmaBlockComponent extends EmbedBlockComponent {
     constructor() {
@@ -69,6 +70,7 @@ export class EmbedFigmaBlockComponent extends EmbedBlockComponent {
                 allowfullscreen
                 loading="lazy"
                 credentialless
+                sandbox=${PROVIDER_PLAYER_SANDBOX}
               ></iframe>
 
               <!-- overlay to prevent the iframe from capturing pointer events -->

package/dist/_pkgs/affine-block-embed/embed-iframe-block/components/embed-iframe-error-card.d.ts

@@ -1,7 +1,20 @@
 import type { EmbedIframeBlockModel } from '../../../affine-model/index.js';
 import type { BlockStdScope } from '../../../std/index.js';
 import { LitElement } from 'lit';
-import type { EmbedIframeStatusCardOptions } from '../types.js';
+import { type EmbedIframeStatusCardOptions } from '../types.js';
+/**
+ * The sentence the error card draws under its (translated) title — #390.
+ *
+ * The card used to render `error.message` raw, which put an English developer
+ * sentence under a French heading. An {@link EmbedIframeError} that declared a
+ * `messageKey` is resolved through it, with its own `message` as the English
+ * fallback; anything else — a plain `Error`, a `BlockSuiteError`, a DI wiring
+ * failure — reads one keyed sentence, and its `message` is NEVER displayed.
+ *
+ * A free function rather than a method so the contract can be tested without
+ * mounting a custom element.
+ */
+export declare function embedIframeErrorMessage(std: BlockStdScope, error?: Error | null): string;
 declare const EmbedIframeErrorCard_base: typeof LitElement & import("../../../global/utils/types.js").Constructor<import("../../../global/lit/with-disposable.js").DisposableClass>;
 export declare class EmbedIframeErrorCard extends EmbedIframeErrorCard_base {
     static styles: import("lit").CSSResult;

package/dist/_pkgs/affine-block-embed/embed-iframe-block/components/embed-iframe-error-card.js

@@ -44,8 +44,27 @@ import { property, query } from 'lit/decorators.js';
 import { classMap } from 'lit/directives/class-map.js';
 import { styleMap } from 'lit/directives/style-map.js';
 import { ERROR_CARD_DEFAULT_HEIGHT } from '../consts.js';
-import { EMBED_IFRAME_ERROR_EDIT, EMBED_IFRAME_ERROR_TITLE, } from '../../translations.js';
+import { EmbedIframeError } from '../types.js';
+import { EMBED_IFRAME_ERROR_EDIT, EMBED_IFRAME_ERROR_FALLBACK, EMBED_IFRAME_ERROR_TITLE, } from '../../translations.js';
 const LINK_EDIT_POPUP_OFFSET = 12;
+/**
+ * The sentence the error card draws under its (translated) title — #390.
+ *
+ * The card used to render `error.message` raw, which put an English developer
+ * sentence under a French heading. An {@link EmbedIframeError} that declared a
+ * `messageKey` is resolved through it, with its own `message` as the English
+ * fallback; anything else — a plain `Error`, a `BlockSuiteError`, a DI wiring
+ * failure — reads one keyed sentence, and its `message` is NEVER displayed.
+ *
+ * A free function rather than a method so the contract can be tested without
+ * mounting a custom element.
+ */
+export function embedIframeErrorMessage(std, error) {
+    if (error instanceof EmbedIframeError && error.messageKey) {
+        return translateKey(std, error.messageKey, error.message);
+    }
+    return translateKey(std, ...EMBED_IFRAME_ERROR_FALLBACK);
+}
 let EmbedIframeErrorCard = (() => {
     let _classSuper = WithDisposable(LitElement);
     let __editButton_decorators;
@@ -268,7 +287,7 @@ let EmbedIframeErrorCard = (() => {
             >
           </div>
           <div class="error-message">
-            ${this.error?.message || 'Failed to load embedded content'}
+            ${embedIframeErrorMessage(this.std, this.error)}
           </div>
           <div class="error-info">
             ${this.readonly

package/dist/_pkgs/affine-block-embed/embed-iframe-block/configs/toolbar.js

@@ -1,4 +1,4 @@
-import { reassociateConnectorsCommand } from '../../../affine-block-surface/index.js';
+import { applyCreationLayer, reassociateConnectorsCommand, sourceLayerOf, } from '../../../affine-block-surface/index.js';
 import { toast } from '../../../affine-components/toast/index.js';
 import { BookmarkStyles, EmbedIframeBlockModel } from '../../../affine-model/index.js';
 import { EMBED_CARD_HEIGHT, EMBED_CARD_WIDTH, } from '../../../affine-shared/consts/index.js';
@@ -292,7 +292,16 @@ export const builtinSurfaceToolbarConfig = {
                         const bounds = Bound.deserialize(xywh);
                         bounds.w = EMBED_CARD_WIDTH[style];
                         bounds.h = EMBED_CARD_HEIGHT[style];
-                        const newId = ctx.store.addBlock(flavour, { url, caption, style, xywh: bounds.serialize() }, parent);
+                        // The card takes the iframe's place, layer included (ADR 0031 §6).
+                        const props = {
+                            url,
+                            caption,
+                            style,
+                            xywh: bounds.serialize(),
+                            layer: sourceLayerOf(model),
+                        };
+                        applyCreationLayer(ctx.std, props);
+                        const newId = ctx.store.addBlock(flavour, props, parent);
                         ctx.command.exec(reassociateConnectorsCommand, { oldId, newId });
                         ctx.store.deleteBlock(model);
                         // Selects new block

package/dist/_pkgs/affine-block-embed/embed-iframe-block/consts.d.ts

@@ -4,8 +4,6 @@ export declare const EMBED_IFRAME_DEFAULT_CONTAINER_BORDER_RADIUS = 8;
 export declare const DEFAULT_IFRAME_HEIGHT = 152;
 export declare const DEFAULT_IFRAME_WIDTH = "100%";
 export declare const LINK_CREATE_POPUP_OFFSET = 4;
-export declare const TRUSTED_SANDBOX = "allow-same-origin allow-scripts allow-forms allow-presentation";
-export declare const UNTRUSTED_SANDBOX = "allow-scripts";
 export declare const IDLE_CARD_DEFAULT_HEIGHT = 48;
 export declare const LOADING_CARD_DEFAULT_HEIGHT = 114;
 export declare const ERROR_CARD_DEFAULT_HEIGHT = 114;

package/dist/_pkgs/affine-block-embed/embed-iframe-block/consts.js

@@ -4,11 +4,8 @@ export const EMBED_IFRAME_DEFAULT_CONTAINER_BORDER_RADIUS = 8;
 export const DEFAULT_IFRAME_HEIGHT = 152;
 export const DEFAULT_IFRAME_WIDTH = '100%';
 export const LINK_CREATE_POPUP_OFFSET = 4;
-// Sandbox granted to an embed served by a known provider (spotify, miro, …).
-export const TRUSTED_SANDBOX = 'allow-same-origin allow-scripts allow-forms allow-presentation';
-// Sandbox granted to an arbitrary url: the generic provider, or no provider at
-// all. Without `allow-same-origin` the frame runs on an opaque origin.
-export const UNTRUSTED_SANDBOX = 'allow-scripts';
+// The sandbox policy now lives at `../common/iframe-sandbox.ts`, so that every
+// block of this package can read it (issue #389).
 export const IDLE_CARD_DEFAULT_HEIGHT = 48;
 export const LOADING_CARD_DEFAULT_HEIGHT = 114;
 export const ERROR_CARD_DEFAULT_HEIGHT = 114;

package/dist/_pkgs/affine-block-embed/embed-iframe-block/embed-iframe-block.d.ts

@@ -4,7 +4,7 @@ import { EmbedIframeService, type IframeOptions } from '../../affine-shared/serv
 import { type ReadonlySignal } from '@preact/signals-core';
 import { type ClassInfo } from 'lit/directives/class-map.js';
 import type { EmbedLinkInputPopupOptions } from './components/embed-iframe-link-input-popup.js';
-import type { EmbedIframeStatusCardOptions } from './types.js';
+import { type EmbedIframeStatusCardOptions } from './types.js';
 export type EmbedIframeStatus = 'idle' | 'loading' | 'success' | 'error';
 export declare class EmbedIframeBlockComponent extends CaptionedBlockComponent<EmbedIframeBlockModel> {
     selectedStyle$: ReadonlySignal<ClassInfo> | null;

package/dist/_pkgs/affine-block-embed/embed-iframe-block/embed-iframe-block.js

@@ -37,7 +37,6 @@ import { CaptionedBlockComponent, SelectedStyle, } from '../../affine-components
 import { createLitPortal } from '../../affine-components/portal/index.js';
 import { EmbedIframeService, LinkPreviewServiceIdentifier, NotificationProvider, TOAST_NO_LINK_FOUND, translateKey, } from '../../affine-shared/services/index.js';
 import { matchModels, shouldRefreshOnPropsUpdate, } from '../../affine-shared/utils/index.js';
-import { BlockSuiteError, ErrorCode } from '../../global/exceptions/index.js';
 import { BlockSelection } from '../../std/index.js';
 import { flip, offset, shift } from '@floating-ui/dom';
 import { computed, effect, signal, } from '@preact/signals-core';
@@ -46,10 +45,12 @@ import { query } from 'lit/decorators.js';
 import { classMap } from 'lit/directives/class-map.js';
 import { ifDefined } from 'lit/directives/if-defined.js';
 import { styleMap } from 'lit/directives/style-map.js';
-import { DEFAULT_IFRAME_HEIGHT, DEFAULT_IFRAME_WIDTH, EMBED_IFRAME_DEFAULT_CONTAINER_BORDER_RADIUS, ERROR_CARD_DEFAULT_HEIGHT, IDLE_CARD_DEFAULT_HEIGHT, LINK_CREATE_POPUP_OFFSET, LOADING_CARD_DEFAULT_HEIGHT, TRUSTED_SANDBOX, UNTRUSTED_SANDBOX, } from './consts.js';
+import { DEFAULT_IFRAME_HEIGHT, DEFAULT_IFRAME_WIDTH, EMBED_IFRAME_DEFAULT_CONTAINER_BORDER_RADIUS, ERROR_CARD_DEFAULT_HEIGHT, IDLE_CARD_DEFAULT_HEIGHT, LINK_CREATE_POPUP_OFFSET, LOADING_CARD_DEFAULT_HEIGHT, } from './consts.js';
 import { embedIframeBlockStyles } from './style.js';
+import { EmbedIframeError, } from './types.js';
 import { isSafeEmbedUrl, safeGetIframeSrc } from './utils.js';
-import { EMBED_IFRAME_NO_LINK_MESSAGE } from '../translations.js';
+import { TRUSTED_SANDBOX, UNTRUSTED_SANDBOX, } from '../common/iframe-sandbox.js';
+import { EMBED_IFRAME_ERROR_INVALID_URL, EMBED_IFRAME_ERROR_NO_DATA, EMBED_IFRAME_NO_LINK_MESSAGE, } from '../translations.js';
 let EmbedIframeBlockComponent = (() => {
     let _classSuper = CaptionedBlockComponent;
     let __blockContainer_decorators;
@@ -249,7 +250,10 @@ let EmbedIframeBlockComponent = (() => {
                     const embedIframeService = this.embedIframeService;
                     const linkPreviewService = this.linkPreviewService;
                     if (!embedIframeService || !linkPreviewService) {
-                        throw new BlockSuiteError(ErrorCode.ValueNotExists, 'EmbedIframeService or LinkPreviewService not found');
+                        // A DI wiring failure, never a user-facing fact: it declares NO
+                        // `messageKey`, so the card shows its generic keyed sentence and this
+                        // technical one stays where a developer reads it (#390).
+                        throw new EmbedIframeError('EmbedIframeService or LinkPreviewService not found');
                     }
                     // get embed data and preview data in a promise
                     const [embedData, previewData] = await Promise.all([
@@ -259,7 +263,9 @@ let EmbedIframeBlockComponent = (() => {
                     // if the embed data is not found, and the iframeUrl is not set, throw an error
                     const currentIframeUrl = this.model.props.iframeUrl;
                     if (!embedData && !currentIframeUrl) {
-                        throw new BlockSuiteError(ErrorCode.ValueNotExists, 'Failed to get embed data');
+                        throw new EmbedIframeError(EMBED_IFRAME_ERROR_NO_DATA[1], {
+                            messageKey: EMBED_IFRAME_ERROR_NO_DATA[0],
+                        });
                     }
                     // update model
                     const iframeUrl = this._getIframeUrl(embedData) ?? currentIframeUrl;
@@ -366,7 +372,9 @@ let EmbedIframeBlockComponent = (() => {
                 // the url comes from the document: refuse to give a non http(s) one to src
                 if (!isSafeEmbedUrl(iframeUrl)) {
                     return html `<embed-iframe-error-card
-        .error=${new Error('Invalid iframe URL')}
+        .error=${new EmbedIframeError(EMBED_IFRAME_ERROR_INVALID_URL[1], {
+                        messageKey: EMBED_IFRAME_ERROR_INVALID_URL[0],
+                    })}
         .model=${this.model}
         .onRetry=${this._handleRetry}
         .std=${this.std}

package/dist/_pkgs/affine-block-embed/embed-iframe-block/types.d.ts

@@ -14,3 +14,19 @@ export type EmbedIframeStatusCardOptions = {
     width?: number;
     height?: number;
 };
+/**
+ * An embed failure that names its own sentence — the `InterchangeImportError`
+ * pattern (`blocks/surface/src/extensions/interchange.ts`) applied to the
+ * iframe error card (#390).
+ *
+ * `message` stays the English developer sentence (the console, a test's
+ * assertion); `messageKey` is what the CARD renders. An error without a key
+ * renders `EMBED_IFRAME_ERROR_FALLBACK`, never its `message`: a sentence
+ * written for a developer has no business under a translated title.
+ */
+export declare class EmbedIframeError extends Error {
+    readonly messageKey?: string;
+    constructor(message: string, options?: {
+        messageKey?: string;
+    });
+}

package/dist/_pkgs/affine-block-embed/embed-iframe-block/types.js

@@ -1 +1,17 @@
-export {};
+/**
+ * An embed failure that names its own sentence — the `InterchangeImportError`
+ * pattern (`blocks/surface/src/extensions/interchange.ts`) applied to the
+ * iframe error card (#390).
+ *
+ * `message` stays the English developer sentence (the console, a test's
+ * assertion); `messageKey` is what the CARD renders. An error without a key
+ * renders `EMBED_IFRAME_ERROR_FALLBACK`, never its `message`: a sentence
+ * written for a developer has no business under a translated title.
+ */
+export class EmbedIframeError extends Error {
+    constructor(message, options) {
+        super(message);
+        this.name = 'EmbedIframeError';
+        this.messageKey = options?.messageKey;
+    }
+}

package/dist/_pkgs/affine-block-embed/embed-loom-block/embed-loom-block.js

@@ -42,6 +42,7 @@ import { property } from 'lit/decorators.js';
 import { classMap } from 'lit/directives/class-map.js';
 import { styleMap } from 'lit/directives/style-map.js';
 import { EmbedBlockComponent } from '../common/embed-block-element.js';
+import { PROVIDER_PLAYER_SANDBOX } from '../common/iframe-sandbox.js';
 import { getEmbedCardIcons } from '../common/utils.js';
 import { loomUrlRegex } from './embed-loom-model.js';
 import { LoomIcon, styles } from './styles.js';
@@ -136,6 +137,7 @@ let EmbedLoomBlockComponent = (() => {
                       allow="fullscreen; accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
                       loading="lazy"
                       credentialless
+                      sandbox=${PROVIDER_PLAYER_SANDBOX}
                     ></iframe>
 
                     <!-- overlay to prevent the iframe from capturing pointer events -->

package/dist/_pkgs/affine-block-embed/embed-youtube-block/embed-youtube-block.js

@@ -42,6 +42,7 @@ import { property, state } from 'lit/decorators.js';
 import { classMap } from 'lit/directives/class-map.js';
 import { styleMap } from 'lit/directives/style-map.js';
 import { EmbedBlockComponent } from '../common/embed-block-element.js';
+import { PROVIDER_PLAYER_SANDBOX } from '../common/iframe-sandbox.js';
 import { getEmbedCardIcons } from '../common/utils.js';
 import { youtubeUrlRegex } from './embed-youtube-model.js';
 import { styles, YoutubeIcon } from './styles.js';
@@ -153,6 +154,7 @@ let EmbedYoutubeBlockComponent = (() => {
                       allowfullscreen
                       loading="lazy"
                       credentialless
+                      sandbox=${PROVIDER_PLAYER_SANDBOX}
                     ></iframe>
 
                     <!-- overlay to prevent the iframe from capturing pointer events -->

package/dist/_pkgs/affine-block-embed/index.d.ts

@@ -3,6 +3,7 @@ export { createEmbedBlockMarkdownAdapterMatcher } from './common/adapters/markdo
 export { createEmbedBlockPlainTextAdapterMatcher } from './common/adapters/plain-text.js';
 export { createEmbedEdgelessBlockInteraction, EmbedBlockComponent, } from './common/embed-block-element.js';
 export * from './common/embed-note-content-styles.js';
+export { PROVIDER_PLAYER_SANDBOX, TRUSTED_SANDBOX, UNTRUSTED_SANDBOX, } from './common/iframe-sandbox.js';
 export { insertEmbedCard } from './common/insert-embed-card.js';
 export * from './common/render-linked-doc.js';
 export { toEdgelessEmbedBlock } from './common/to-edgeless-embed-block.js';

package/dist/_pkgs/affine-block-embed/index.js

@@ -3,6 +3,7 @@ export { createEmbedBlockMarkdownAdapterMatcher } from './common/adapters/markdo
 export { createEmbedBlockPlainTextAdapterMatcher } from './common/adapters/plain-text.js';
 export { createEmbedEdgelessBlockInteraction, EmbedBlockComponent, } from './common/embed-block-element.js';
 export * from './common/embed-note-content-styles.js';
+export { PROVIDER_PLAYER_SANDBOX, TRUSTED_SANDBOX, UNTRUSTED_SANDBOX, } from './common/iframe-sandbox.js';
 export { insertEmbedCard } from './common/insert-embed-card.js';
 export * from './common/render-linked-doc.js';
 export { toEdgelessEmbedBlock } from './common/to-edgeless-embed-block.js';

package/dist/_pkgs/affine-block-embed/translations.d.ts

@@ -18,6 +18,14 @@ export declare const EMBED_IFRAME_SLASH_NAME: ChromeWording;
 export declare const EMBED_IFRAME_SLASH_DESCRIPTION: ChromeWording;
 export declare const EMBED_IFRAME_ERROR_TITLE: ChromeWording;
 export declare const EMBED_IFRAME_ERROR_EDIT: ChromeWording;
+export declare const EMBED_IFRAME_ERROR_NO_DATA: ChromeWording;
+export declare const EMBED_IFRAME_ERROR_INVALID_URL: ChromeWording;
+/**
+ * What the card says for any error that declares no key of its own —
+ * including the DI wiring failure ("EmbedIframeService or LinkPreviewService
+ * not found"), which is never a user-facing fact and stays in the console.
+ */
+export declare const EMBED_IFRAME_ERROR_FALLBACK: ChromeWording;
 export declare const EMBED_IFRAME_IDLE_TEXT: ChromeWording;
 export declare const EMBED_IFRAME_INVALID_URL_TITLE: ChromeWording;
 export declare const EMBED_IFRAME_INVALID_URL_MESSAGE: ChromeWording;

package/dist/_pkgs/affine-block-embed/translations.js

@@ -39,6 +39,31 @@ export const EMBED_IFRAME_ERROR_TITLE = [
     'This link couldn’t be loaded.',
 ];
 export const EMBED_IFRAME_ERROR_EDIT = TOOLBAR_EDIT;
+/* ── The error card's own sentence (#390) ─────────────────────────────────
+ *
+ * The card used to render `error.message` raw — a developer sentence thrown
+ * by `refreshData`, drawn under a translated title. An `EmbedIframeError`
+ * carries a `messageKey` instead (the `InterchangeImportError` pattern,
+ * `blocks/surface/src/extensions/interchange.ts`), and the card resolves the
+ * key or this fallback, never the raw `message`.
+ */
+export const EMBED_IFRAME_ERROR_NO_DATA = [
+    'com.labre.embed.iframe.error.no-embed-data',
+    'Failed to get embed data',
+];
+export const EMBED_IFRAME_ERROR_INVALID_URL = [
+    'com.labre.embed.iframe.error.invalid-url',
+    'Invalid iframe URL',
+];
+/**
+ * What the card says for any error that declares no key of its own —
+ * including the DI wiring failure ("EmbedIframeService or LinkPreviewService
+ * not found"), which is never a user-facing fact and stays in the console.
+ */
+export const EMBED_IFRAME_ERROR_FALLBACK = [
+    'com.labre.embed.iframe.error.message',
+    'Failed to load embedded content',
+];
 export const EMBED_IFRAME_IDLE_TEXT = [
     'com.labre.embed.iframe.idle.text',
     'Embed anything (Google Drive, Google Docs, Spotify, Miro…)',
@@ -101,6 +126,9 @@ export const EMBED_WORDINGS = [
     EMBED_IFRAME_SLASH_NAME,
     EMBED_IFRAME_SLASH_DESCRIPTION,
     EMBED_IFRAME_ERROR_TITLE,
+    EMBED_IFRAME_ERROR_NO_DATA,
+    EMBED_IFRAME_ERROR_INVALID_URL,
+    EMBED_IFRAME_ERROR_FALLBACK,
     EMBED_IFRAME_IDLE_TEXT,
     EMBED_IFRAME_INVALID_URL_TITLE,
     EMBED_IFRAME_INVALID_URL_MESSAGE,

package/dist/_pkgs/affine-block-embed-doc/embed-linked-doc-block/embed-edgeless-linked-doc-block.js

@@ -1,5 +1,5 @@
 import { createEmbedEdgelessBlockInteraction, toEdgelessEmbedBlock, } from '../../affine-block-embed/index.js';
-import { EdgelessCRUDIdentifier, reassociateConnectorsCommand, } from '../../affine-block-surface/index.js';
+import { EdgelessCRUDIdentifier, reassociateConnectorsCommand, sourceLayerOf, } from '../../affine-block-surface/index.js';
 import { EmbedLinkedDocBlockSchema } from '../../affine-model/index.js';
 import { EMBED_CARD_HEIGHT, EMBED_CARD_WIDTH, } from '../../affine-shared/consts/index.js';
 import { cloneReferenceInfoWithoutAliases, isNewTabTrigger, isNewViewTrigger, } from '../../affine-shared/utils/index.js';
@@ -21,6 +21,8 @@ export class EmbedEdgelessLinkedDocBlockComponent extends toEdgelessEmbedBlock(E
                 xywh: bound.serialize(),
                 caption,
                 ...cloneReferenceInfoWithoutAliases(this.referenceInfo$.peek()),
+                // In the linked doc's layer, not the active one (ADR 0031 §6).
+                layer: sourceLayerOf(this.model),
             }, surface);
             this.std.command.exec(reassociateConnectorsCommand, {
                 oldId: id,

package/dist/_pkgs/affine-block-embed-doc/embed-linked-doc-block/embed-linked-doc-block.js

@@ -38,7 +38,7 @@ import { LoadingIcon } from '../../affine-components/icons/index.js';
 import { isPeekable, Peekable } from '../../affine-components/peek/index.js';
 import { RefNodeSlotsProvider } from '../../affine-inline-reference/index.js';
 import { EMBED_CARD_HEIGHT, EMBED_CARD_WIDTH, REFERENCE_NODE, } from '../../affine-shared/consts/index.js';
-import { CHROME_LOADING, CitationProvider, DocDisplayMetaProvider, DocModeProvider, LINKED_DOC_DELETED, LINKED_DOC_EMPTY_PREVIEW, LINKED_DOC_FAILED, OpenDocExtensionIdentifier, ThemeProvider, TOOLBAR_RELOAD, translateKey, whenLinkedDocContentReady, } from '../../affine-shared/services/index.js';
+import { CHROME_LOADING, CHROME_UNTITLED, CitationProvider, DocDisplayMetaProvider, DocModeProvider, LINKED_DOC_DELETED, LINKED_DOC_EMPTY_PREVIEW, LINKED_DOC_FAILED, OpenDocExtensionIdentifier, ThemeProvider, TOOLBAR_RELOAD, translateKey, whenLinkedDocContentReady, } from '../../affine-shared/services/index.js';
 import { cloneReferenceInfo, cloneReferenceInfoWithoutAliases, isNewTabTrigger, isNewViewTrigger, matchModels, referenceToNode, } from '../../affine-shared/utils/index.js';
 import { Bound } from '../../global/gfx/index.js';
 import { ResetIcon } from '@blocksuite/icons/lit';
@@ -118,7 +118,9 @@ let EmbedLinkedDocBlockComponent = (() => {
         }
         static { this.styles = styles; }
         get docTitle() {
-            return this.model.props.title || this.linkedDoc?.meta?.title || 'Untitled';
+            return (this.model.props.title ||
+                this.linkedDoc?.meta?.title ||
+                translateKey(this.std, ...CHROME_UNTITLED));
         }
         get editorMode() {
             return this._linkedDocMode;

package/dist/_pkgs/affine-block-embed-doc/embed-synced-doc-block/configs/toolbar.js

@@ -1,3 +1,4 @@
+import { applyCreationLayer, sourceLayerOf } from '../../../affine-block-surface/index.js';
 import { toast } from '../../../affine-components/toast/index.js';
 import { EditorChevronDown } from '../../../affine-components/toolbar/index.js';
 import { DEFAULT_NOTE_HEIGHT, DEFAULT_NOTE_WIDTH, EmbedSyncedDocModel, NoteBlockModel, NoteDisplayMode, } from '../../../affine-model/index.js';
@@ -297,11 +298,15 @@ const builtinSurfaceToolbarConfig = {
                             PADDING;
                         const y = syncedDocModel.elementBound.y;
                         const children = await draftedModels;
-                        const noteId = std.store.addBlock('affine:note', {
+                        const props = {
                             xywh: new Bound(x, y, DEFAULT_NOTE_WIDTH, DEFAULT_NOTE_HEIGHT).serialize(),
                             index: gfx.layer.generateIndex(),
                             displayMode: NoteDisplayMode.EdgelessOnly,
-                        }, ctx.store.root);
+                            // Beside the synced doc, in its layer (ADR 0031 §6).
+                            layer: sourceLayerOf(syncedDocModel),
+                        };
+                        applyCreationLayer(std, props);
+                        const noteId = std.store.addBlock('affine:note', props, ctx.store.root);
                         std.store.addBlock('affine:paragraph', {
                             text: new Text([
                                 {

package/dist/_pkgs/affine-block-embed-doc/embed-synced-doc-block/embed-edgeless-synced-doc-block.js

@@ -33,7 +33,7 @@ var __runInitializers = (this && this.__runInitializers) || function (thisArg, i
     return useValue ? value : void 0;
 };
 import { toEdgelessEmbedBlock } from '../../affine-block-embed/index.js';
-import { EdgelessCRUDIdentifier, reassociateConnectorsCommand, } from '../../affine-block-surface/index.js';
+import { EdgelessCRUDIdentifier, reassociateConnectorsCommand, sourceLayerOf, } from '../../affine-block-surface/index.js';
 import {} from '../../affine-model/index.js';
 import { EMBED_CARD_HEIGHT, EMBED_CARD_WIDTH, } from '../../affine-shared/consts/index.js';
 import { ThemeExtensionIdentifier, ThemeProvider, translateKey, } from '../../affine-shared/services/index.js';
@@ -170,6 +170,8 @@ let EmbedEdgelessSyncedDocBlockComponent = (() => {
                     caption,
                     ...this.referenceInfo,
                     ...aliasInfo,
+                    // In the synced doc's layer, not the active one (ADR 0031 §6).
+                    layer: sourceLayerOf(this.model),
                 }, surface);
                 this.std.command.exec(reassociateConnectorsCommand, {
                     oldId: id,

package/dist/_pkgs/affine-block-embed-doc/embed-synced-doc-block/embed-synced-doc-block.js

@@ -38,7 +38,7 @@ import { ViewExtensionManagerIdentifier } from '../../affine-ext-loader/index.js
 import { RefNodeSlotsProvider, } from '../../affine-inline-reference/index.js';
 import { NoteDisplayMode, } from '../../affine-model/index.js';
 import { REFERENCE_NODE } from '../../affine-shared/consts/index.js';
-import { DocDisplayMetaProvider, DocModeProvider, EditorSettingExtension, EditorSettingProvider, GeneralSettingSchema, ThemeExtensionIdentifier, ThemeProvider, translateKey, } from '../../affine-shared/services/index.js';
+import { CHROME_UNTITLED, DocDisplayMetaProvider, DocModeProvider, EditorSettingExtension, EditorSettingProvider, GeneralSettingSchema, ThemeExtensionIdentifier, ThemeProvider, translateKey, } from '../../affine-shared/services/index.js';
 import { cloneReferenceInfo } from '../../affine-shared/utils/index.js';
 import { Bound, getCommonBound } from '../../global/gfx/index.js';
 import { BlockSelection, BlockStdScope, LifeCycleWatcher, } from '../../std/index.js';
@@ -405,7 +405,7 @@ let EmbedSyncedDocBlockComponent = (() => {
             };
         }
         get docTitle() {
-            return this.syncedDoc?.meta?.title || 'Untitled';
+            return (this.syncedDoc?.meta?.title || translateKey(this.std, ...CHROME_UNTITLED));
         }
         get docUpdatedAt() {
             return this._docUpdatedAt;

package/dist/_pkgs/affine-block-frame/frame-manager.d.ts

@@ -20,6 +20,9 @@ export declare const EdgelessFrameManagerIdentifier: import("../global/di/types.
 export declare class EdgelessFrameManager extends GfxExtension {
     static key: string;
     private readonly _disposable;
+    /** Canvas elements added locally, waiting for the adoption microtask. */
+    private readonly _pendingAdoptions;
+    private _pendingAdoptionTicks;
     /**
      * Get all sorted frames by presentation orderer,
      * the legacy frame that uses `index` as presentation order
@@ -67,6 +70,8 @@ export declare class EdgelessFrameManager extends GfxExtension {
      */
     private _watchFrameMoved;
     private _watchElementAdded;
+    /** A canvas element just added locally: the frame under it adopts it. */
+    private _adoptIfInFrame;
     /**
      * Whether `element` fully encloses `frame`.
      *