@formicoidea/labre-core 0.46.0 → 0.46.2

package/dist/_pkgs/affine-block-bookmark/bookmark-block.js

@@ -35,7 +35,7 @@ var __runInitializers = (this && this.__runInitializers) || function (thisArg, i
 import { CaptionedBlockComponent, SelectedStyle, } from '../affine-components/caption/index.js';
 import { ImageProxyService } from '../affine-shared/adapters/index.js';
 import { BlockCommentManager, CitationProvider, DocModeProvider, LinkPreviewServiceIdentifier, } from '../affine-shared/services/index.js';
-import { normalizeUrl, shouldRefreshOnPropsUpdate, } from '../affine-shared/utils/index.js';
+import { isSafeLinkUrl, normalizeUrl, shouldRefreshOnPropsUpdate, } from '../affine-shared/utils/index.js';
 import { BlockSelection } from '../std/index.js';
 import { computed, signal } from '@preact/signals-core';
 import { html } from 'lit';
@@ -122,7 +122,10 @@ let BookmarkBlockComponent = (() => {
                 selectionManager.setGroup('note', [blockSelection]);
             };
             this.open = () => {
-                window.open(this.link, '_blank');
+                const { link } = this;
+                if (!isSafeLinkUrl(link))
+                    return;
+                window.open(link, '_blank');
             };
             this.refreshData = () => {
                 refreshBookmarkUrlData(this, this._fetchAbortController?.signal).catch(console.error);

package/dist/_pkgs/affine-block-callout/commands/turn-into-callout.d.ts

@@ -14,7 +14,7 @@ import type { BlockModel, Store } from '../../store/index.js';
  */
 export declare function calloutConversionTargets(store: Store, models: BlockModel[]): BlockModel[];
 /**
- * Wraps each selected paragraph, list item or code block in a callout (#418).
+ * Turns each selected paragraph, list item or code block into a callout (#418).
  *
  * A callout is a hub with no text of its own, so this cannot be
  * `transformModel`: the callout takes the block's place, a paragraph inside it

package/dist/_pkgs/affine-block-callout/commands/turn-into-callout.js

@@ -37,7 +37,7 @@ export function calloutConversionTargets(store, models) {
     return convertible.filter(model => !convertible.some(other => isAncestor(store, other, model)));
 }
 /**
- * Wraps each selected paragraph, list item or code block in a callout (#418).
+ * Turns each selected paragraph, list item or code block into a callout (#418).
  *
  * A callout is a hub with no text of its own, so this cannot be
  * `transformModel`: the callout takes the block's place, a paragraph inside it

package/dist/_pkgs/affine-block-callout/configs/slash-menu.js

@@ -42,10 +42,12 @@ export const calloutSlashMenuConfig = {
                 if (index === -1)
                     return;
                 const calloutId = store.addBlock('affine:callout', {}, parent, index + 1);
-                if (!calloutId)
+                // `addBlock` returns an id even when the schema refused the block
+                // (`transact` swallows the throw, #418): only the model proves it.
+                if (!store.getModelById(calloutId))
                     return;
                 const paragraphId = store.addBlock('affine:paragraph', {}, calloutId);
-                if (!paragraphId)
+                if (!store.getModelById(paragraphId))
                     return;
                 std.host.updateComplete
                     .then(() => {

package/dist/_pkgs/affine-block-callout/view.d.ts

@@ -1,6 +1,35 @@
 import { type ViewExtensionContext, ViewExtensionProvider } from '../affine-ext-loader/index.js';
-export declare class CalloutViewExtension extends ViewExtensionProvider {
+/**
+ * Callout rendering — ALWAYS registered, independent of the `callout` flag
+ * (ADR 0009, #418). A document that already holds callouts must paint them,
+ * let them be edited and let them be turned back into text whatever the flag
+ * says: until 2026-10-11 the whole view sat behind the flag, and
+ * `{ callout: false }` left every stored callout rendered as nothing.
+ *
+ * What lives here is what an EXISTING callout needs, the mirror of
+ * `WardleyRenderViewExtension`:
+ * - `effects()` whole: `affine-callout` paints the block, and
+ *   `affine-emoji-menu` opens from a rendered callout's icon — both are
+ *   render-side, so unlike the frameworks' this `effects()` is not tooling;
+ * - the flavour and the block view, the lookup `lit-host` performs;
+ * - the keymap: Enter and Backspace inside a callout edit stored content, they
+ *   create nothing;
+ * - the block toolbar (#468): Turn into text, copy, duplicate, delete — the
+ *   way OUT of a stored callout, as the Wardley contextual toolbar stays with
+ *   a stored map.
+ */
+export declare class CalloutRenderViewExtension extends ViewExtensionProvider {
     name: string;
     effect(): void;
     setup(context: ViewExtensionContext): void;
 }
+/**
+ * Callout creation tooling — flag-gated (`callout`, ADR 0009): the slash-menu
+ * item and the "Turn into → Callout" entry, the two ways to CREATE a callout.
+ * With the flag off no new callout can be made; the ones already written keep
+ * rendering through {@link CalloutRenderViewExtension}.
+ */
+export declare class CalloutViewExtension extends ViewExtensionProvider {
+    name: string;
+    setup(context: ViewExtensionContext): void;
+}

package/dist/_pkgs/affine-block-callout/view.js

@@ -9,10 +9,29 @@ import { calloutSlashMenuConfig } from './configs/slash-menu.js';
 import { calloutToolbarConfig } from './configs/toolbar.js';
 import { calloutTurnIntoEntry } from './configs/turn-into.js';
 import { effects } from './effects.js';
-export class CalloutViewExtension extends ViewExtensionProvider {
+/**
+ * Callout rendering — ALWAYS registered, independent of the `callout` flag
+ * (ADR 0009, #418). A document that already holds callouts must paint them,
+ * let them be edited and let them be turned back into text whatever the flag
+ * says: until 2026-10-11 the whole view sat behind the flag, and
+ * `{ callout: false }` left every stored callout rendered as nothing.
+ *
+ * What lives here is what an EXISTING callout needs, the mirror of
+ * `WardleyRenderViewExtension`:
+ * - `effects()` whole: `affine-callout` paints the block, and
+ *   `affine-emoji-menu` opens from a rendered callout's icon — both are
+ *   render-side, so unlike the frameworks' this `effects()` is not tooling;
+ * - the flavour and the block view, the lookup `lit-host` performs;
+ * - the keymap: Enter and Backspace inside a callout edit stored content, they
+ *   create nothing;
+ * - the block toolbar (#468): Turn into text, copy, duplicate, delete — the
+ *   way OUT of a stored callout, as the Wardley contextual toolbar stays with
+ *   a stored map.
+ */
+export class CalloutRenderViewExtension extends ViewExtensionProvider {
     constructor() {
         super(...arguments);
-        this.name = 'affine-callout-block';
+        this.name = 'affine-callout-render-block';
     }
     effect() {
         super.effect();
@@ -24,8 +43,6 @@ export class CalloutViewExtension extends ViewExtensionProvider {
             FlavourExtension('affine:callout'),
             BlockViewExtension('affine:callout', literal `affine-callout`),
             CalloutKeymapExtension,
-            SlashMenuConfigExtension('affine:callout', calloutSlashMenuConfig),
-            TextConversionEntryExtension(calloutTurnIntoEntry),
             ToolbarModuleExtension({
                 id: BlockFlavourIdentifier('affine:callout'),
                 config: calloutToolbarConfig,
@@ -33,3 +50,22 @@ export class CalloutViewExtension extends ViewExtensionProvider {
         ]);
     }
 }
+/**
+ * Callout creation tooling — flag-gated (`callout`, ADR 0009): the slash-menu
+ * item and the "Turn into → Callout" entry, the two ways to CREATE a callout.
+ * With the flag off no new callout can be made; the ones already written keep
+ * rendering through {@link CalloutRenderViewExtension}.
+ */
+export class CalloutViewExtension extends ViewExtensionProvider {
+    constructor() {
+        super(...arguments);
+        this.name = 'affine-callout-block';
+    }
+    setup(context) {
+        super.setup(context);
+        context.register([
+            SlashMenuConfigExtension('affine:callout', calloutSlashMenuConfig),
+            TextConversionEntryExtension(calloutTurnIntoEntry),
+        ]);
+    }
+}

package/dist/_pkgs/affine-block-code/code-toolbar/components/lang-button.js

@@ -118,7 +118,7 @@ let LanguageListButton = (() => {
             const plainText = {
                 label: translateKey(this.blockComponent.std, ...CODE_PLAIN_TEXT_LANGUAGE),
                 name: PLAIN_TEXT_ITEM_NAME,
-                aliases: ['plain', 'text', 'none'],
+                aliases: ['plain', 'text', 'plaintext', 'txt', 'none'],
             };
             const index = languages.findIndex(item => item.name === PLAIN_TEXT_ITEM_NAME);
             if (index === -1) {

package/dist/_pkgs/affine-block-database/properties/link/cell-renderer.js

@@ -1,6 +1,6 @@
 import { RefNodeSlotsProvider } from '../../../affine-inline-reference/index.js';
 import { ParseDocUrlProvider } from '../../../affine-shared/services/index.js';
-import { isValidUrl, normalizeUrl, stopPropagation, } from '../../../affine-shared/utils/index.js';
+import { isSafeLinkUrl, isValidUrl, normalizeUrl, stopPropagation, } from '../../../affine-shared/utils/index.js';
 import { BaseCellRenderer, createFromBaseCellRenderer, createIcon, } from '../../../data-view/index.js';
 import { EditIcon } from '@blocksuite/icons/lit';
 import { computed } from '@preact/signals-core';
@@ -101,7 +101,7 @@ export class LinkCell extends BaseCellRenderer {
             ? html `<span class="${linkedDocStyle}" @click="${this.openDoc}"
                 >${docName}</span
               >`
-            : isValidUrl(linkText)
+            : isValidUrl(linkText) && isSafeLinkUrl(linkText)
                 ? html `<a
                   data-testid="property-link-a"
                   class="${inlineLinkNodeStyle}"

package/dist/_pkgs/affine-block-embed/embed-figma-block/embed-figma-block.js

@@ -1,5 +1,5 @@
 import { OpenIcon } from '../../affine-components/icons/index.js';
-import { shouldRefreshOnPropsUpdate } from '../../affine-shared/utils/index.js';
+import { isSafeLinkUrl, shouldRefreshOnPropsUpdate, } from '../../affine-shared/utils/index.js';
 import { BlockSelection } from '../../std/index.js';
 import { html, nothing } from 'lit';
 import { classMap } from 'lit/directives/class-map.js';
@@ -15,6 +15,8 @@ export class EmbedFigmaBlockComponent extends EmbedBlockComponent {
             if (!link.match(/^[a-zA-Z]+:\/\//)) {
                 link = 'https://' + link;
             }
+            if (!isSafeLinkUrl(link))
+                return;
             window.open(link, '_blank');
         };
         this.refreshData = () => { };

package/dist/_pkgs/affine-block-embed/embed-github-block/embed-github-block.js

@@ -35,7 +35,7 @@ var __runInitializers = (this && this.__runInitializers) || function (thisArg, i
 import { LoadingIcon, OpenIcon } from '../../affine-components/icons/index.js';
 import { ImageProxyService } from '../../affine-shared/adapters/index.js';
 import { ThemeProvider } from '../../affine-shared/services/index.js';
-import { shouldRefreshOnPropsUpdate } from '../../affine-shared/utils/index.js';
+import { isSafeLinkUrl, shouldRefreshOnPropsUpdate, } from '../../affine-shared/utils/index.js';
 import { BlockSelection, isGfxBlockComponent } from '../../std/index.js';
 import { html, nothing } from 'lit';
 import { property } from 'lit/decorators.js';
@@ -249,6 +249,8 @@ let EmbedGithubBlockComponent = (() => {
                 if (!link.match(/^[a-zA-Z]+:\/\//)) {
                     link = 'https://' + link;
                 }
+                if (!isSafeLinkUrl(link))
+                    return;
                 window.open(link, '_blank');
             };
             this.refreshData = () => {

package/dist/_pkgs/affine-block-embed/embed-loom-block/embed-loom-block.js

@@ -35,7 +35,7 @@ var __runInitializers = (this && this.__runInitializers) || function (thisArg, i
 import { LoadingIcon, OpenIcon } from '../../affine-components/icons/index.js';
 import { ImageProxyService } from '../../affine-shared/adapters/index.js';
 import { ThemeProvider } from '../../affine-shared/services/index.js';
-import { shouldRefreshOnPropsUpdate } from '../../affine-shared/utils/index.js';
+import { isSafeLinkUrl, shouldRefreshOnPropsUpdate, } from '../../affine-shared/utils/index.js';
 import { BlockSelection } from '../../std/index.js';
 import { html } from 'lit';
 import { property } from 'lit/decorators.js';
@@ -186,6 +186,8 @@ let EmbedLoomBlockComponent = (() => {
                 if (!link.match(/^[a-zA-Z]+:\/\//)) {
                     link = 'https://' + link;
                 }
+                if (!isSafeLinkUrl(link))
+                    return;
                 window.open(link, '_blank');
             };
             this.refreshData = () => {

package/dist/_pkgs/affine-block-embed/embed-youtube-block/embed-youtube-block.js

@@ -35,7 +35,7 @@ var __runInitializers = (this && this.__runInitializers) || function (thisArg, i
 import { LoadingIcon, OpenIcon } from '../../affine-components/icons/index.js';
 import { ImageProxyService } from '../../affine-shared/adapters/index.js';
 import { ThemeProvider } from '../../affine-shared/services/index.js';
-import { shouldRefreshOnPropsUpdate } from '../../affine-shared/utils/index.js';
+import { isSafeLinkUrl, shouldRefreshOnPropsUpdate, } from '../../affine-shared/utils/index.js';
 import { BlockSelection } from '../../std/index.js';
 import { html, nothing } from 'lit';
 import { property, state } from 'lit/decorators.js';
@@ -232,6 +232,8 @@ let EmbedYoutubeBlockComponent = (() => {
                 if (!link.match(/^[a-zA-Z]+:\/\//)) {
                     link = 'https://' + link;
                 }
+                if (!isSafeLinkUrl(link))
+                    return;
                 window.open(link, '_blank');
             };
             this.refreshData = () => {

package/dist/_pkgs/affine-block-surface/extensions/reading-toolbar.js

@@ -58,18 +58,18 @@ const READ_LABEL_FALLBACK = 'Read this component';
  * Drawn inline like its neighbours: this package does not depend on
  * `@blocksuite/icons` and one glyph is not worth a new dependency.
  */
-const ReadIcon = html `<svg
-  width="20"
-  height="20"
-  viewBox="0 0 24 24"
-  fill="none"
-  stroke="currentColor"
-  stroke-width="2"
-  stroke-linecap="round"
-  stroke-linejoin="round"
->
-  <path d="M2 12s3.5-6 10-6 10 6 10 6-3.5 6-10 6-10-6-10-6z" />
-  <circle cx="12" cy="12" r="3" />
+const ReadIcon = html `<svg
+  width="20"
+  height="20"
+  viewBox="0 0 24 24"
+  fill="none"
+  stroke="currentColor"
+  stroke-width="2"
+  stroke-linecap="round"
+  stroke-linejoin="round"
+>
+  <path d="M2 12s3.5-6 10-6 10 6 10 6-3.5 6-10 6-10-6-10-6z" />
+  <circle cx="12" cy="12" r="3" />
 </svg>`;
 /** The command this module drives. Spelled once. */
 const ELEMENT_READ_ID = 'element.read';

package/dist/_pkgs/affine-components/highlight-dropdown-menu/highlight-duotone-icon.js

@@ -1,14 +1,14 @@
 import { HighLightDuotoneIcon } from '@blocksuite/icons/lit';
 import { css, LitElement } from 'lit';
 export class HighlightDuotoneIcon extends LitElement {
-    static { this.styles = css `
-    svg {
-      display: flex;
-      font-size: 20px;
-    }
-    svg > path:nth-child(1) {
-      fill: var(--color, unset);
-    }
+    static { this.styles = css `
+    svg {
+      display: flex;
+      font-size: 20px;
+    }
+    svg > path:nth-child(1) {
+      fill: var(--color, unset);
+    }
   `; }
     render() {
         return HighLightDuotoneIcon();

package/dist/_pkgs/affine-components/highlight-dropdown-menu/text-duotone-icon.js

@@ -1,17 +1,17 @@
 import { TextBackgroundDuotoneIcon } from '@blocksuite/icons/lit';
 import { css, LitElement } from 'lit';
 export class TextDuotoneIcon extends LitElement {
-    static { this.styles = css `
-    svg {
-      display: flex;
-      font-size: 20px;
-    }
-    svg > path:nth-child(1) {
-      fill: var(--background, unset);
-    }
-    svg > path:nth-child(3) {
-      fill: var(--color, unset);
-    }
+    static { this.styles = css `
+    svg {
+      display: flex;
+      font-size: 20px;
+    }
+    svg > path:nth-child(1) {
+      fill: var(--background, unset);
+    }
+    svg > path:nth-child(3) {
+      fill: var(--color, unset);
+    }
   `; }
     render() {
         return TextBackgroundDuotoneIcon();

package/dist/_pkgs/affine-components/link-preview/link.js

@@ -32,11 +32,11 @@ var __runInitializers = (this && this.__runInitializers) || function (thisArg, i
     }
     return useValue ? value : void 0;
 };
-import { getHostName } from '../../affine-shared/utils/index.js';
+import { getHostName, isSafeLinkUrl } from '../../affine-shared/utils/index.js';
 import { PropTypes, requiredProperties } from '../../std/index.js';
 import { css, LitElement } from 'lit';
 import { property } from 'lit/decorators.js';
-import { html } from 'lit-html';
+import { html, nothing } from 'lit-html';
 let LinkPreview = (() => {
     let _classDecorators = [requiredProperties({
             url: PropTypes.string,
@@ -98,7 +98,7 @@ let LinkPreview = (() => {
         class="affine-link-preview"
         rel="noopener noreferrer"
         target="_blank"
-        href=${url}
+        href=${isSafeLinkUrl(url) ? url : nothing}
       >
         <span>${getHostName(url)}</span>
       </a>

package/dist/_pkgs/affine-inline-footnote/footnote-node/footnote-node.js

@@ -36,6 +36,7 @@ import { HoverController } from '../../affine-components/hover/index.js';
 import { PeekViewProvider } from '../../affine-components/peek/index.js';
 import { CitationProvider } from '../../affine-shared/services/index.js';
 import { unsafeCSSVarV2 } from '../../affine-shared/theme/index.js';
+import { isSafeLinkUrl } from '../../affine-shared/utils/index.js';
 import { WithDisposable } from '../../global/lit/index.js';
 import { BlockSelection, ShadowlessElement, TextSelection, } from '../../std/index.js';
 import { INLINE_ROOT_ATTR, ZERO_WIDTH_FOR_EMBED_NODE, ZERO_WIDTH_FOR_EMPTY_LINE, } from '../../std/inline/index.js';
@@ -203,6 +204,8 @@ let AffineFootnoteNode = (() => {
                     .catch(console.error);
             };
             this._handleUrlReference = (url) => {
+                if (!isSafeLinkUrl(url))
+                    return;
                 window.open(url, '_blank');
             };
             this._updateFootnoteAttributes = (footnote) => {

package/dist/_pkgs/affine-inline-link/adapters/markdown/markdown-inline.js

@@ -1,4 +1,5 @@
 import { MarkdownASTToDeltaExtension } from '../../../affine-shared/adapters/index.js';
+import { isSafeLinkUrl } from '../../../affine-shared/utils/index.js';
 export const markdownLinkToDeltaMatcher = MarkdownASTToDeltaExtension({
     name: 'link',
     match: ast => ast.type === 'link',
@@ -39,6 +40,10 @@ export const markdownLinkToDeltaMatcher = MarkdownASTToDeltaExtension({
                 ];
             }
         }
+        // A refused scheme (`javascript:`, `data:`…) keeps its text, loses the mark.
+        if (!isSafeLinkUrl(ast.url)) {
+            return ast.children.flatMap(child => context.toDelta(child));
+        }
         return ast.children.flatMap(child => context.toDelta(child).map(delta => {
             delta.attributes = { ...delta.attributes, link: ast.url };
             return delta;

package/dist/_pkgs/affine-inline-link/link-node/affine-link.js

@@ -36,11 +36,11 @@ import { whenHover } from '../../affine-components/hover/index.js';
 import { RefNodeSlotsProvider } from '../../affine-inline-reference/index.js';
 import { ParseDocUrlProvider, ToolbarRegistryIdentifier, } from '../../affine-shared/services/index.js';
 import { affineTextStyles } from '../../affine-shared/styles/index.js';
-import { normalizeUrl } from '../../affine-shared/utils/index.js';
+import { isSafeLinkUrl, normalizeUrl } from '../../affine-shared/utils/index.js';
 import { WithDisposable } from '../../global/lit/index.js';
 import { BLOCK_ID_ATTR, ShadowlessElement } from '../../std/index.js';
 import { INLINE_ROOT_ATTR, ZERO_WIDTH_FOR_EMPTY_LINE, } from '../../std/inline/index.js';
-import { css, html } from 'lit';
+import { css, html, nothing } from 'lit';
 import { property } from 'lit/decorators.js';
 import { styleMap } from 'lit/directives/style-map.js';
 let AffineLink = (() => {
@@ -112,8 +112,11 @@ let AffineLink = (() => {
             this._referenceInfo = { pageId, params };
         }
         _renderLink(style) {
+            const { link } = this;
+            // A stored link may come from an imported or shared document: a refused
+            // scheme keeps its text but gets no href, so a click navigates nowhere.
             return html `<a
-      href=${this.link}
+      href=${isSafeLinkUrl(link) ? link : nothing}
       rel="noopener noreferrer"
       target="_blank"
       style=${styleMap(style)}

package/dist/_pkgs/affine-shared/utils/url.d.ts

@@ -1,4 +1,19 @@
 export declare function normalizeUrl(str: string): string;
+/**
+ * Whether a link stored in a document may become an `href` or be opened.
+ *
+ * Only `http:`, `https:` and `mailto:` pass, plus scheme-less values that
+ * {@link normalizeUrl} turns into https (`example.com`). Everything else is
+ * refused — `javascript:`, `data:`, `vbscript:`, `file:`, relative paths —
+ * because the value comes from an imported, pasted or shared document and a
+ * click on it must never run in the editor's origin. The scheme is read by
+ * `new URL` after the same cleanup the browser does, never by a prefix test,
+ * so ` JaVaScRiPt:` and `java\tscript:` are recognised for what they are.
+ *
+ * Render and open sites call this on the stored value; nothing is rewritten
+ * on load, so a refused link keeps its text and simply is not clickable.
+ */
+export declare function isSafeLinkUrl(str: string | null | undefined): str is string;
 /**
  * Assume user will input a url, we just need to check if it is valid.
  *

package/dist/_pkgs/affine-shared/utils/url.js

@@ -57,6 +57,36 @@ export function normalizeUrl(str) {
     }
     return str;
 }
+const LINK_SCHEMES = new Set(['http:', 'https:', 'mailto:']);
+// What the WHATWG URL parser drops before reading a scheme: leading and
+// trailing C0 controls and spaces, and every tab or newline anywhere.
+const URL_EDGE_JUNK = /^[\u0000-\u0020]+|[\u0000-\u0020]+$/g;
+const URL_TAB_OR_NEWLINE = /[\t\n\r]/g;
+/**
+ * Whether a link stored in a document may become an `href` or be opened.
+ *
+ * Only `http:`, `https:` and `mailto:` pass, plus scheme-less values that
+ * {@link normalizeUrl} turns into https (`example.com`). Everything else is
+ * refused — `javascript:`, `data:`, `vbscript:`, `file:`, relative paths —
+ * because the value comes from an imported, pasted or shared document and a
+ * click on it must never run in the editor's origin. The scheme is read by
+ * `new URL` after the same cleanup the browser does, never by a prefix test,
+ * so ` JaVaScRiPt:` and `java\tscript:` are recognised for what they are.
+ *
+ * Render and open sites call this on the stored value; nothing is rewritten
+ * on load, so a refused link keeps its text and simply is not clickable.
+ */
+export function isSafeLinkUrl(str) {
+    if (!str)
+        return false;
+    const cleaned = str
+        .replace(URL_TAB_OR_NEWLINE, '')
+        .replace(URL_EDGE_JUNK, '');
+    if (!cleaned)
+        return false;
+    const url = toURL(normalizeUrl(cleaned));
+    return url !== null && LINK_SCHEMES.has(url.protocol);
+}
 /**
  * Assume user will input a url, we just need to check if it is valid.
  *

package/dist/_pkgs/affine-widget-edgeless-selected-rect/edgeless-element-link.js

@@ -34,7 +34,7 @@ var __runInitializers = (this && this.__runInitializers) || function (thisArg, i
 };
 import { RefNodeSlotsProvider } from '../affine-inline-reference/index.js';
 import { translateKey } from '../affine-shared/services/index.js';
-import { overlayScale, requestThrottledConnectedFrame, toOverlayCoord, } from '../affine-shared/utils/index.js';
+import { isSafeLinkUrl, overlayScale, requestThrottledConnectedFrame, toOverlayCoord, } from '../affine-shared/utils/index.js';
 import { WidgetComponent } from '../std/index.js';
 import { GfxControllerIdentifier, GfxPrimitiveElementModel, } from '../std/gfx/index.js';
 import { OpenInNewIcon, RightSidebarIcon } from '@blocksuite/icons/lit';
@@ -94,7 +94,7 @@ let EdgelessElementLinkWidget = (() => {
                         host: this.std.host,
                     });
                 }
-                else if (el.externalLink) {
+                else if (isSafeLinkUrl(el.externalLink)) {
                     window.open(el.externalLink, '_blank', 'noopener,noreferrer');
                 }
             };

package/dist/_pkgs/affine-widget-edgeless-zoom-toolbar/index.js

@@ -52,29 +52,29 @@ let AffineEdgelessZoomToolbarWidget = (() => {
             __esDecorate(this, null, __hide_decorators, { kind: "accessor", name: "_hide", static: false, private: false, access: { has: obj => "_hide" in obj, get: obj => obj._hide, set: (obj, value) => { obj._hide = value; } }, metadata: _metadata }, __hide_initializers, __hide_extraInitializers);
             if (_metadata) Object.defineProperty(this, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
         }
-        static { this.styles = css `
-    :host {
-      position: absolute;
-      bottom: 20px;
-      left: 12px;
-      z-index: var(--affine-z-index-popover);
-      display: flex;
-      justify-content: center;
-      -webkit-user-select: none;
-      user-select: none;
-    }
-
-    @container viewport (width <= 1200px) {
-      edgeless-zoom-toolbar {
-        display: none;
-      }
-    }
-
-    @container viewport (width > 1200px) {
-      zoom-bar-toggle-button {
-        display: none;
-      }
-    }
+        static { this.styles = css `
+    :host {
+      position: absolute;
+      bottom: 20px;
+      left: 12px;
+      z-index: var(--affine-z-index-popover);
+      display: flex;
+      justify-content: center;
+      -webkit-user-select: none;
+      user-select: none;
+    }
+
+    @container viewport (width <= 1200px) {
+      edgeless-zoom-toolbar {
+        display: none;
+      }
+    }
+
+    @container viewport (width > 1200px) {
+      zoom-bar-toggle-button {
+        display: none;
+      }
+    }
   `; }
         get edgeless() {
             return this.block;
@@ -105,9 +105,9 @@ let AffineEdgelessZoomToolbarWidget = (() => {
             if (this._hide || !this.edgeless) {
                 return nothing;
             }
-            return html `
-      <edgeless-zoom-toolbar .std=${this.std}></edgeless-zoom-toolbar>
-      <zoom-bar-toggle-button .std=${this.std}></zoom-bar-toggle-button>
+            return html `
+      <edgeless-zoom-toolbar .std=${this.std}></edgeless-zoom-toolbar>
+      <zoom-bar-toggle-button .std=${this.std}></zoom-bar-toggle-button>
     `;
         }
         #_hide_accessor_storage = __runInitializers(this, __hide_initializers, false);

package/dist/_pkgs/affine-widget-keyboard-toolbar/icons.js

@@ -19,105 +19,105 @@ export function HeadingIcon(i) {
             return Heading1Icon();
     }
 }
-export const HighLightDuotoneIcon = (color) => html `<svg
-    xmlns="http://www.w3.org/2000/svg"
-    width="24"
-    height="24"
-    viewBox="0 0 24 24"
-    fill="none"
-  >
-    <path
-      d="M5.8291 16.441L7.91757 18.5295L6.57811 19.8689C6.53119 19.9158 6.46406 19.9364 6.3989 19.9239L3.37036 19.3412C3.21285 19.3109 3.15331 19.1168 3.26673 19.0034L5.8291 16.441Z"
-      fill="${color}"
-    />
-    <path
-      fill-rule="evenodd"
-      clip-rule="evenodd"
-      d="M19.0095 3.63759C17.9526 2.58067 16.26 2.516 15.1255 3.48919L7.32135 10.1837C6.35438 11.0132 6.05275 12.3823 6.58163 13.5414L6.73501 13.8775L5.67697 14.9356C5.30169 15.3108 5.30169 15.9193 5.67697 16.2946L8.06379 18.6814C8.43907 19.0567 9.04752 19.0567 9.4228 18.6814L10.4808 17.6234L10.8171 17.7768C11.9761 18.3057 13.3452 18.0041 14.1747 17.0371L20.8692 9.23294C21.8424 8.09846 21.7778 6.40588 20.7208 5.34896L19.0095 3.63759ZM16.1021 4.62769C16.6415 4.16498 17.4463 4.19572 17.9488 4.69825L19.6602 6.40962C20.1627 6.91215 20.1935 7.7169 19.7307 8.25631L14.6424 14.188L10.1704 9.71604L16.1021 4.62769ZM9.02857 10.6955L8.29798 11.3222C7.83822 11.7166 7.6948 12.3676 7.94627 12.9187L8.29785 13.6892C8.4348 13.9893 8.37947 14.3544 8.13372 14.6001L7.11878 15.6151L8.74329 17.2396L9.75812 16.2247C10.004 15.9789 10.3691 15.9236 10.6693 16.0606L11.4398 16.4122C11.9908 16.6636 12.6418 16.5202 13.0362 16.0605L13.6629 15.3299L9.02857 10.6955Z"
-      fill="${cssVarV2('icon/primary')}"
-    />
+export const HighLightDuotoneIcon = (color) => html `<svg
+    xmlns="http://www.w3.org/2000/svg"
+    width="24"
+    height="24"
+    viewBox="0 0 24 24"
+    fill="none"
+  >
+    <path
+      d="M5.8291 16.441L7.91757 18.5295L6.57811 19.8689C6.53119 19.9158 6.46406 19.9364 6.3989 19.9239L3.37036 19.3412C3.21285 19.3109 3.15331 19.1168 3.26673 19.0034L5.8291 16.441Z"
+      fill="${color}"
+    />
+    <path
+      fill-rule="evenodd"
+      clip-rule="evenodd"
+      d="M19.0095 3.63759C17.9526 2.58067 16.26 2.516 15.1255 3.48919L7.32135 10.1837C6.35438 11.0132 6.05275 12.3823 6.58163 13.5414L6.73501 13.8775L5.67697 14.9356C5.30169 15.3108 5.30169 15.9193 5.67697 16.2946L8.06379 18.6814C8.43907 19.0567 9.04752 19.0567 9.4228 18.6814L10.4808 17.6234L10.8171 17.7768C11.9761 18.3057 13.3452 18.0041 14.1747 17.0371L20.8692 9.23294C21.8424 8.09846 21.7778 6.40588 20.7208 5.34896L19.0095 3.63759ZM16.1021 4.62769C16.6415 4.16498 17.4463 4.19572 17.9488 4.69825L19.6602 6.40962C20.1627 6.91215 20.1935 7.7169 19.7307 8.25631L14.6424 14.188L10.1704 9.71604L16.1021 4.62769ZM9.02857 10.6955L8.29798 11.3222C7.83822 11.7166 7.6948 12.3676 7.94627 12.9187L8.29785 13.6892C8.4348 13.9893 8.37947 14.3544 8.13372 14.6001L7.11878 15.6151L8.74329 17.2396L9.75812 16.2247C10.004 15.9789 10.3691 15.9236 10.6693 16.0606L11.4398 16.4122C11.9908 16.6636 12.6418 16.5202 13.0362 16.0605L13.6629 15.3299L9.02857 10.6955Z"
+      fill="${cssVarV2('icon/primary')}"
+    />
   </svg>`;
-export const TextColorIcon = (color) => html `<svg
-    xmlns="http://www.w3.org/2000/svg"
-    width="32"
-    height="32"
-    viewBox="0 0 32 32"
-    fill="none"
-  >
-    <path
-      fill-rule="evenodd"
-      clip-rule="evenodd"
-      d="M14.0627 6.16255C14.385 5.30291 15.2068 4.7334 16.1249 4.7334C17.043 4.7334 17.8648 5.30291 18.1872 6.16255L23.7279 20.9378C23.9219 21.455 23.6599 22.0314 23.1427 22.2253C22.6256 22.4192 22.0492 22.1572 21.8553 21.6401L20.2289 17.3031H12.021L10.3946 21.6401C10.2007 22.1572 9.62428 22.4192 9.10716 22.2253C8.59004 22.0314 8.32803 21.455 8.52195 20.9378L14.0627 6.16255ZM12.771 15.3031H19.4789L16.3146 6.8648C16.2849 6.78576 16.2094 6.7334 16.1249 6.7334C16.0405 6.7334 15.965 6.78576 15.9353 6.8648L12.771 15.3031Z"
-      fill="${cssVarV2('icon/primary')}"
-    />
-    <rect
-      x="5.45837"
-      y="24"
-      width="21.3333"
-      height="3.33333"
-      rx="1"
-      fill=${color}
-    />
+export const TextColorIcon = (color) => html `<svg
+    xmlns="http://www.w3.org/2000/svg"
+    width="32"
+    height="32"
+    viewBox="0 0 32 32"
+    fill="none"
+  >
+    <path
+      fill-rule="evenodd"
+      clip-rule="evenodd"
+      d="M14.0627 6.16255C14.385 5.30291 15.2068 4.7334 16.1249 4.7334C17.043 4.7334 17.8648 5.30291 18.1872 6.16255L23.7279 20.9378C23.9219 21.455 23.6599 22.0314 23.1427 22.2253C22.6256 22.4192 22.0492 22.1572 21.8553 21.6401L20.2289 17.3031H12.021L10.3946 21.6401C10.2007 22.1572 9.62428 22.4192 9.10716 22.2253C8.59004 22.0314 8.32803 21.455 8.52195 20.9378L14.0627 6.16255ZM12.771 15.3031H19.4789L16.3146 6.8648C16.2849 6.78576 16.2094 6.7334 16.1249 6.7334C16.0405 6.7334 15.965 6.78576 15.9353 6.8648L12.771 15.3031Z"
+      fill="${cssVarV2('icon/primary')}"
+    />
+    <rect
+      x="5.45837"
+      y="24"
+      width="21.3333"
+      height="3.33333"
+      rx="1"
+      fill=${color}
+    />
   </svg>`;
-export const TextBackgroundDuotoneIcon = (color) => html `<svg
-    xmlns="http://www.w3.org/2000/svg"
-    width="32"
-    height="32"
-    viewBox="0 0 32 32"
-    fill="none"
-  >
-    <path
-      fill-rule="evenodd"
-      clip-rule="evenodd"
-      d="M4.57507 7.33336C4.57507 5.60287 5.97791 4.20003 7.70841 4.20003H25.0417C26.7722 4.20003 28.1751 5.60287 28.1751 7.33336V24.6667C28.1751 26.3972 26.7722 27.8 25.0417 27.8H7.70841C5.97791 27.8 4.57507 26.3972 4.57507 24.6667V7.33336Z"
-      fill="${color}"
-    />
-    <path
-      fill-rule="evenodd"
-      clip-rule="evenodd"
-      d="M4.57495 7.33333C4.57495 5.60284 5.97779 4.2 7.70828 4.2H25.0416C26.7721 4.2 28.175 5.60284 28.175 7.33333V24.6667C28.175 26.3972 26.7721 27.8 25.0416 27.8H7.70828C5.97779 27.8 4.57495 26.3972 4.57495 24.6667V7.33333ZM7.70828 5.13333C6.49326 5.13333 5.50828 6.1183 5.50828 7.33333V24.6667C5.50828 25.8817 6.49326 26.8667 7.70828 26.8667H25.0416C26.2566 26.8667 27.2416 25.8817 27.2416 24.6667V7.33333C27.2416 6.1183 26.2566 5.13333 25.0416 5.13333H7.70828Z"
-      fill="black"
-      fill-opacity="0.22"
-    />
-    <path
-      fill-rule="evenodd"
-      clip-rule="evenodd"
-      d="M14.5379 10.0064C14.8251 9.24064 15.5571 8.73332 16.375 8.73332C17.1928 8.73332 17.9249 9.24064 18.2121 10.0064L22.6446 21.8266C22.8386 22.3438 22.5766 22.9202 22.0594 23.1141C21.5423 23.308 20.9659 23.046 20.772 22.5289L19.5196 19.1891H13.2304L11.978 22.5289C11.7841 23.046 11.2076 23.308 10.6905 23.1141C10.1734 22.9202 9.9114 22.3438 10.1053 21.8266L14.5379 10.0064ZM13.9804 17.1891H18.7696L16.375 10.8035L13.9804 17.1891Z"
-      fill="${cssVarV2('text/primary')}"
-    />
+export const TextBackgroundDuotoneIcon = (color) => html `<svg
+    xmlns="http://www.w3.org/2000/svg"
+    width="32"
+    height="32"
+    viewBox="0 0 32 32"
+    fill="none"
+  >
+    <path
+      fill-rule="evenodd"
+      clip-rule="evenodd"
+      d="M4.57507 7.33336C4.57507 5.60287 5.97791 4.20003 7.70841 4.20003H25.0417C26.7722 4.20003 28.1751 5.60287 28.1751 7.33336V24.6667C28.1751 26.3972 26.7722 27.8 25.0417 27.8H7.70841C5.97791 27.8 4.57507 26.3972 4.57507 24.6667V7.33336Z"
+      fill="${color}"
+    />
+    <path
+      fill-rule="evenodd"
+      clip-rule="evenodd"
+      d="M4.57495 7.33333C4.57495 5.60284 5.97779 4.2 7.70828 4.2H25.0416C26.7721 4.2 28.175 5.60284 28.175 7.33333V24.6667C28.175 26.3972 26.7721 27.8 25.0416 27.8H7.70828C5.97779 27.8 4.57495 26.3972 4.57495 24.6667V7.33333ZM7.70828 5.13333C6.49326 5.13333 5.50828 6.1183 5.50828 7.33333V24.6667C5.50828 25.8817 6.49326 26.8667 7.70828 26.8667H25.0416C26.2566 26.8667 27.2416 25.8817 27.2416 24.6667V7.33333C27.2416 6.1183 26.2566 5.13333 25.0416 5.13333H7.70828Z"
+      fill="black"
+      fill-opacity="0.22"
+    />
+    <path
+      fill-rule="evenodd"
+      clip-rule="evenodd"
+      d="M14.5379 10.0064C14.8251 9.24064 15.5571 8.73332 16.375 8.73332C17.1928 8.73332 17.9249 9.24064 18.2121 10.0064L22.6446 21.8266C22.8386 22.3438 22.5766 22.9202 22.0594 23.1141C21.5423 23.308 20.9659 23.046 20.772 22.5289L19.5196 19.1891H13.2304L11.978 22.5289C11.7841 23.046 11.2076 23.308 10.6905 23.1141C10.1734 22.9202 9.9114 22.3438 10.1053 21.8266L14.5379 10.0064ZM13.9804 17.1891H18.7696L16.375 10.8035L13.9804 17.1891Z"
+      fill="${cssVarV2('text/primary')}"
+    />
   </svg>`;
-export const FigmaDuotoneIcon = html `<svg
-  width="32"
-  height="32"
-  viewBox="0 0 24 24"
-  fill="none"
-  xmlns="http://www.w3.org/2000/svg"
->
-  <g id="Figma_Duotone">
-    <path
-      id="Vector"
-      d="M8.41842 22.5027C10.3047 22.5027 11.8356 20.9719 11.8356 19.0856V15.6685H8.41842C6.53216 15.6685 5.00128 17.1993 5.00128 19.0856C5.00128 20.9719 6.53216 22.5027 8.41842 22.5027Z"
-      fill="#0ACF83"
-    />
-    <path
-      id="Vector_2"
-      d="M5.00128 12.2514C5.00128 10.3651 6.53216 8.83423 8.41842 8.83423H11.8356V15.6685H8.41842C6.53216 15.6685 5.00128 14.1376 5.00128 12.2514Z"
-      fill="#A259FF"
-    />
-    <path
-      id="Vector_3"
-      d="M5.00146 5.41714C5.00146 3.53088 6.53234 2 8.4186 2H11.8357V8.83428H8.4186C6.53234 8.83428 5.00146 7.3034 5.00146 5.41714Z"
-      fill="#F24E1E"
-    />
-    <path
-      id="Vector_4"
-      d="M11.8356 2H15.2527C17.139 2 18.6699 3.53088 18.6699 5.41714C18.6699 7.3034 17.139 8.83428 15.2527 8.83428H11.8356V2Z"
-      fill="#FF7262"
-    />
-    <path
-      id="Vector_5"
-      d="M18.6699 12.2514C18.6699 14.1376 17.139 15.6685 15.2527 15.6685C13.3665 15.6685 11.8356 14.1376 11.8356 12.2514C11.8356 10.3651 13.3665 8.83423 15.2527 8.83423C17.139 8.83423 18.6699 10.3651 18.6699 12.2514Z"
-      fill="#1ABCFE"
-    />
-  </g>
+export const FigmaDuotoneIcon = html `<svg
+  width="32"
+  height="32"
+  viewBox="0 0 24 24"
+  fill="none"
+  xmlns="http://www.w3.org/2000/svg"
+>
+  <g id="Figma_Duotone">
+    <path
+      id="Vector"
+      d="M8.41842 22.5027C10.3047 22.5027 11.8356 20.9719 11.8356 19.0856V15.6685H8.41842C6.53216 15.6685 5.00128 17.1993 5.00128 19.0856C5.00128 20.9719 6.53216 22.5027 8.41842 22.5027Z"
+      fill="#0ACF83"
+    />
+    <path
+      id="Vector_2"
+      d="M5.00128 12.2514C5.00128 10.3651 6.53216 8.83423 8.41842 8.83423H11.8356V15.6685H8.41842C6.53216 15.6685 5.00128 14.1376 5.00128 12.2514Z"
+      fill="#A259FF"
+    />
+    <path
+      id="Vector_3"
+      d="M5.00146 5.41714C5.00146 3.53088 6.53234 2 8.4186 2H11.8357V8.83428H8.4186C6.53234 8.83428 5.00146 7.3034 5.00146 5.41714Z"
+      fill="#F24E1E"
+    />
+    <path
+      id="Vector_4"
+      d="M11.8356 2H15.2527C17.139 2 18.6699 3.53088 18.6699 5.41714C18.6699 7.3034 17.139 8.83428 15.2527 8.83428H11.8356V2Z"
+      fill="#FF7262"
+    />
+    <path
+      id="Vector_5"
+      d="M18.6699 12.2514C18.6699 14.1376 17.139 15.6685 15.2527 15.6685C13.3665 15.6685 11.8356 14.1376 11.8356 12.2514C11.8356 10.3651 13.3665 8.83423 15.2527 8.83423C17.139 8.83423 18.6699 10.3651 18.6699 12.2514Z"
+      fill="#1ABCFE"
+    />
+  </g>
 </svg> `;

package/dist/_pkgs/affine-widget-page-dragging-area/index.js

@@ -199,16 +199,16 @@ let AffinePageDraggingAreaWidget = (() => {
                 width: rect.width + 'px',
                 height: rect.height + 'px',
             };
-            return html `
-      <style>
-        .affine-page-dragging-area {
-          position: absolute;
-          background: var(--affine-hover-color);
-          z-index: 1;
-          pointer-events: none;
-        }
-      </style>
-      <div class="affine-page-dragging-area" style=${styleMap(style)}></div>
+            return html `
+      <style>
+        .affine-page-dragging-area {
+          position: absolute;
+          background: var(--affine-hover-color);
+          z-index: 1;
+          pointer-events: none;
+        }
+      </style>
+      <div class="affine-page-dragging-area" style=${styleMap(style)}></div>
     `;
         }
         #rect_accessor_storage;

package/dist/_pkgs/affine-widget-viewport-overlay/index.js

@@ -51,19 +51,19 @@ let AffineViewportOverlayWidget = (() => {
             __esDecorate(this, null, __lockViewport_decorators, { kind: "accessor", name: "_lockViewport", static: false, private: false, access: { has: obj => "_lockViewport" in obj, get: obj => obj._lockViewport, set: (obj, value) => { obj._lockViewport = value; } }, metadata: _metadata }, __lockViewport_initializers, __lockViewport_extraInitializers);
             if (_metadata) Object.defineProperty(this, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
         }
-        static { this.styles = css `
-    .affine-viewport-overlay-widget {
-      position: absolute;
-      top: 0;
-      left: 0;
-      background: transparent;
-      pointer-events: none;
-      z-index: calc(var(--affine-z-index-popover) - 1);
-    }
-
-    .affine-viewport-overlay-widget.lock {
-      pointer-events: auto;
-    }
+        static { this.styles = css `
+    .affine-viewport-overlay-widget {
+      position: absolute;
+      top: 0;
+      left: 0;
+      background: transparent;
+      pointer-events: none;
+      z-index: calc(var(--affine-z-index-popover) - 1);
+    }
+
+    .affine-viewport-overlay-widget.lock {
+      pointer-events: auto;
+    }
   `; }
         connectedCallback() {
             super.connectedCallback();

package/dist/_pkgs/data-view/core/utils/menu-title.js

@@ -1,22 +1,22 @@
 import { ArrowLeftBigIcon } from '@blocksuite/icons/lit';
 import { html } from 'lit';
 export const menuTitle = (name, onBack) => {
-    return html `
-    <div
-      style="display:flex;align-items:center;gap: 4px;padding: 3px 3px 3px 2px"
-    >
-      <div
-        @click=${onBack}
-        class="dv-icon-20 dv-hover dv-pd-2 dv-round-4"
-        style="display:flex;"
-      >
-        ${ArrowLeftBigIcon()}
-      </div>
-      <div
-        style="font-weight:500;font-size: 14px;line-height: 22px;color: var(--affine-text-primary-color)"
-      >
-        ${name}
-      </div>
-    </div>
+    return html `
+    <div
+      style="display:flex;align-items:center;gap: 4px;padding: 3px 3px 3px 2px"
+    >
+      <div
+        @click=${onBack}
+        class="dv-icon-20 dv-hover dv-pd-2 dv-round-4"
+        style="display:flex;"
+      >
+        ${ArrowLeftBigIcon()}
+      </div>
+      <div
+        style="font-weight:500;font-size: 14px;line-height: 22px;color: var(--affine-text-primary-color)"
+      >
+        ${name}
+      </div>
+    </div>
   `;
 };

package/dist/_pkgs/data-view/view-presets/table/pc-virtual/group/top/group-title.js

@@ -19,9 +19,9 @@ export const GroupTitle = (groupData, ops) => {
     }
     const icon = groupData.value == null
         ? ''
-        : html ` <uni-lit
-          class="${groupHeaderIcon}"
-          .uni="${groupData.property.icon}"
+        : html ` <uni-lit
+          class="${groupHeaderIcon}"
+          .uni="${groupData.property.icon}"
         ></uni-lit>`;
     const props = {
         group: groupData,
@@ -29,25 +29,25 @@ export const GroupTitle = (groupData, ops) => {
     };
     const showColumnName = groupData.property.type$.value === 'checkbox';
     const columnName = showColumnName
-        ? html `<span class="${groupHeaderTitle}"
-        >${groupData.property.name$.value}</span
+        ? html `<span class="${groupHeaderTitle}"
+        >${groupData.property.name$.value}</span
       >`
         : nothing;
     const opsClass = clsx(ops.groupHover && show, groupHeaderOps);
-    return html `
-    <div class="${groupTitleRow}">
-      ${icon} ${renderUniLit(view, props)} ${columnName}
-      ${GroupHeaderCount(groupData)}
-    </div>
+    return html `
+    <div class="${groupTitleRow}">
+      ${icon} ${renderUniLit(view, props)} ${columnName}
+      ${GroupHeaderCount(groupData)}
+    </div>
     ${!ops.readonly
-        ? html ` <div class="${opsClass}">
-          <div @click="${ops.clickAdd}" class="${groupHeaderOp}">
-            ${PlusIcon()}
-          </div>
-          <div @click="${ops.clickOps}" class="${groupHeaderOp}">
-            ${MoreHorizontalIcon()}
-          </div>
+        ? html ` <div class="${opsClass}">
+          <div @click="${ops.clickAdd}" class="${groupHeaderOp}">
+            ${PlusIcon()}
+          </div>
+          <div @click="${ops.clickOps}" class="${groupHeaderOp}">
+            ${MoreHorizontalIcon()}
+          </div>
         </div>`
-        : nothing}
+        : nothing}
   `;
 };

package/dist/extensions/view.js

@@ -1,6 +1,6 @@
 import { AttachmentViewExtension } from '../_pkgs/affine-block-attachment/view.js';
 import { BookmarkViewExtension } from '../_pkgs/affine-block-bookmark/view.js';
-import { CalloutViewExtension } from '../_pkgs/affine-block-callout/view.js';
+import { CalloutRenderViewExtension, CalloutViewExtension, } from '../_pkgs/affine-block-callout/view.js';
 import { CodeBlockViewExtension } from '../_pkgs/affine-block-code/view.js';
 import { DataViewViewExtension } from '../_pkgs/affine-block-data-view/view.js';
 import { DatabaseViewExtension } from '../_pkgs/affine-block-database/view.js';
@@ -108,6 +108,10 @@ export function getInternalViewExtensions(flags) {
         // Block
         ...(on('attachment') ? [AttachmentViewExtension] : []),
         ...(on('bookmark') ? [BookmarkViewExtension] : []),
+        // Split like the frameworks (ADR 0009, #418): a stored callout paints,
+        // edits and keeps its block toolbar; the flag removes only the creation
+        // entries (slash item, Turn into). The other blocks are not split yet.
+        CalloutRenderViewExtension,
         ...(on('callout') ? [CalloutViewExtension] : []),
         ...(on('code') ? [CodeBlockViewExtension] : []),
         ...(on('data-view') ? [DataViewViewExtension] : []),

package/dist/flags.d.ts

@@ -47,6 +47,9 @@
  *   re-renders untouched once the flag is back on — but a disabled block
  *   currently renders as nothing until its view extension is split the way the
  *   frameworks' were. See the "Consequences" section of `docs/adr/0009`.
+ *   `callout` is the one block split so far (2026-10-11 amendment of that
+ *   ADR): with `{ callout: false }` a stored callout still renders, stays
+ *   editable and keeps its block toolbar; only its creation entries go.
  * - `latex` covers both the latex block and inline latex.
  * - `frame` also covers the frame panel fragment.
  * - `ddd-templates` covers all four DDD Templates-panel categories, so the

package/dist/flags.js

@@ -47,6 +47,9 @@
  *   re-renders untouched once the flag is back on — but a disabled block
  *   currently renders as nothing until its view extension is split the way the
  *   frameworks' were. See the "Consequences" section of `docs/adr/0009`.
+ *   `callout` is the one block split so far (2026-10-11 amendment of that
+ *   ADR): with `{ callout: false }` a stored callout still renders, stays
+ *   editable and keeps its block toolbar; only its creation entries go.
  * - `latex` covers both the latex block and inline latex.
  * - `frame` also covers the frame panel fragment.
  * - `ddd-templates` covers all four DDD Templates-panel categories, so the

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@formicoidea/labre-core",
   "description": "Labre editor — the full BlockSuite-derived editor as one package.",
-  "version": "0.46.0",
+  "version": "0.46.2",
   "type": "module",
   "sideEffects": false,
   "author": "lajola",