@formicoidea/labre-core 0.50.0 → 0.52.0

package/dist/_pkgs/affine-block-surface/view.js

@@ -1,10 +1,10 @@
-import { ExportToPdfIcon, ExportToPngIcon, GridIcon, } from '@blocksuite/icons/lit';
+import { ExportIcon, ExportToPdfIcon, ExportToPngIcon, ExportToSvgIcon, GridIcon, } from '@blocksuite/icons/lit';
 import { ViewExtensionProvider, } from '../affine-ext-loader/index.js';
 import { CanvasGrid, CanvasLocalVisibility, } from '../affine-shared/services/index.js';
 import { BlockViewExtension, CommandExtension, FlavourExtension, } from '../std/index.js';
 import { literal } from 'lit/static-html.js';
 import { effects } from './effects.js';
-import { auditCommands, CanvasActiveLayer, canvasExportCommands, canvasGridCommands, EdgelessCRUDExtension, EdgelessLegacySlotExtension, EditPropsMiddlewareBuilder, exportSvgCommands, exportSvgToolbarExtension, mapQualityCommands, mapQualityWidget, ReadingManager, readingProposalWidget, readingToolbarExtension, selectionPaneCommands, SelectionPaneModel, SpotlightManager, UserLayerMiddlewareBuilder, userLayerCommands, ValidationManager, validationExceptionToolbarExtension, ValidationOverlay, violationDetailWidget, } from './extensions/index.js';
+import { auditCommands, CanvasActiveLayer, canvasDrawioExportCommands, canvasExportCommands, CANVAS_INTERCHANGE, canvasGridCommands, canvasSvgExportCommands, EdgelessCRUDExtension, EdgelessLegacySlotExtension, EditPropsMiddlewareBuilder, exportSvgCommands, INTERCHANGE_EXPORT_ICON_KEY, InterchangeExtension, exportSvgToolbarExtension, mapQualityCommands, mapQualityWidget, ReadingManager, readingProposalWidget, readingToolbarExtension, selectionPaneCommands, SelectionPaneModel, SpotlightManager, UserLayerMiddlewareBuilder, userLayerCommands, ValidationManager, validationExceptionToolbarExtension, ValidationOverlay, violationDetailWidget, } from './extensions/index.js';
 import { ExportManagerExtension } from './extensions/export-manager/export-manager.js';
 import { BackgroundStackingExtension } from './framework-background/stacking.js';
 import { ElementHighlightOverlay } from './renderer/element-highlight-overlay.js';
@@ -97,6 +97,26 @@ export class SurfaceViewExtension extends ViewExtensionProvider {
                 'canvas.export.png': ExportToPngIcon(),
                 'canvas.export.pdf': ExportToPdfIcon(),
             }));
+            // The canvas as a draw.io drawing (ADR 0019, amendment of 2026-10-14):
+            // the third "This view" export, and the registry's one capability no
+            // framework owns. Never gated, for the PNG's reason — it writes what the
+            // canvas paints, whatever drew it — so with every framework off the
+            // registry still answers `canvas:drawio:export`.
+            context.register(InterchangeExtension(CANVAS_INTERCHANGE));
+            context.register(CommandExtension(canvasDrawioExportCommands, {
+                'canvas.export.drawio': ExportIcon(),
+                // The icon of the view actions derived from the frameworks'
+                // `*:export` capabilities (`interchange-export.ts`): they are
+                // listed by the host façade, never registered as commands, so their
+                // one icon rides on this table.
+                [INTERCHANGE_EXPORT_ICON_KEY]: ExportIcon(),
+            }));
+            // The whole canvas as SVG (ADR 0034, amendment of 2026-10-14): the
+            // renderer replay of `export.svg`, over everything this viewer sees.
+            // Never gated, for the PNG's reason.
+            context.register(CommandExtension(canvasSvgExportCommands, {
+                'canvas.export.svg': ExportToSvgIcon(),
+            }));
             // User layers (ADR 0031 §2-§6): the viewer's active layer (session
             // only), the `beforeAdd` middleware that stamps it on what is created,
             // and the commands the pane's layer rows run. Content, never gated.

package/dist/_pkgs/affine-block-table/adapters/utils.js

@@ -130,12 +130,35 @@ export const parseTableFromHtml = (element, astToDelta) => {
     });
     return createTableProps(rowTextLists);
 };
+/**
+ * A cell holds rich text, and no inline matcher turns an `image` into a delta:
+ * `![alt](url)` in a pasted Markdown table used to vanish from its cell. It is
+ * kept as a link named by its alt text (its URL when it has none), so nothing
+ * of the source is lost; the link matcher still refuses an unsafe scheme and
+ * keeps the words (labre REQ-IM-2, "no data loss").
+ */
+function imagesAsLinks(node) {
+    if (node.type === 'image') {
+        return {
+            type: 'link',
+            url: node.url,
+            title: node.title,
+            children: [{ type: 'text', value: node.alt || node.url }],
+        };
+    }
+    if (!('children' in node))
+        return node;
+    return {
+        ...node,
+        children: node.children.map(child => imagesAsLinks(child)),
+    };
+}
 export const parseTableFromMarkdown = (node, astToDelta) => {
     const rowTextLists = [];
     node.children.forEach(row => {
         const rowText = [];
         row.children.forEach(cell => {
-            rowText.push(astToDelta(cell));
+            rowText.push(astToDelta(imagesAsLinks(cell)));
         });
         rowTextLists.push(rowText);
     });

package/dist/_pkgs/affine-gfx-note/toolbar/note-menu.js

@@ -32,13 +32,12 @@ var __runInitializers = (this && this.__runInitializers) || function (thisArg, i
     }
     return useValue ? value : void 0;
 };
-import { addAttachments } from '../../affine-block-attachment/index.js';
+import { pickAndAddAttachments } from '../../affine-block-attachment/index.js';
 import { insertLinkByQuickSearchCommand } from '../../affine-block-bookmark/index.js';
-import { addImages } from '../../affine-block-image/index.js';
+import { pickAndAddImages } from '../../affine-block-image/index.js';
 import { DefaultTool } from '../../affine-block-surface/index.js';
 import { MAX_IMAGE_WIDTH } from '../../affine-model/index.js';
 import { TelemetryProvider, translateKey } from '../../affine-shared/services/index.js';
-import { getImageFilesFromLocal, openSingleFileWith, } from '../../affine-shared/utils/index.js';
 import { EdgelessToolbarToolMixin } from '../../affine-widget-edgeless-toolbar/index.js';
 import { AttachmentIcon, ImageIcon, LinkIcon } from '@blocksuite/icons/lit';
 import { effect } from '@preact/signals-core';
@@ -112,8 +111,7 @@ let EdgelessNoteMenu = (() => {
   `; }
         async _addImages() {
             this._imageLoading = true;
-            const imageFiles = await getImageFilesFromLocal();
-            const ids = await addImages(this.edgeless.std, imageFiles, {
+            const ids = await pickAndAddImages(this.edgeless.std, {
                 maxWidth: MAX_IMAGE_WIDTH,
             });
             this._imageLoading = false;
@@ -185,10 +183,9 @@ let EdgelessNoteMenu = (() => {
               .activeMode=${'background'}
               .tooltip=${translateKey(this.edgeless.std, ...GFX_NOTE_MENU_FILE)}
               @click=${async () => {
-                const file = await openSingleFileWith();
-                if (!file)
+                const ids = await pickAndAddAttachments(this.edgeless.std);
+                if (!ids.length)
                     return;
-                await addAttachments(this.edgeless.std, [file]);
                 this.gfx.tool.setTool(DefaultTool);
                 this.edgeless.std
                     .getOptional(TelemetryProvider)

package/dist/_pkgs/affine-gfx-template/contribute.d.ts

@@ -26,9 +26,19 @@ export declare const TemplateCategoryIdentifier: import("../global/di/types.js")
  */
 export declare function TemplateCategoryExtension(...categories: TemplateCategory[]): ExtensionType;
 /**
- * The catalogue ONE editor sees: the built-in categories (`Other`, plus
- * whatever a host appended through `EdgelessTemplatePanel.templates.extend`)
- * followed by the categories the view extensions mounted on this `std`
- * registered — i.e. exactly the frameworks whose tooling is on.
+ * The identity of the host's category of saved frames (the
+ * `FrameTemplateProvider` seam): the stable name the panel remembers and
+ * lists by. Its tab reads {@link TEMPLATE_PANEL_CATEGORY_SAVED_FRAMES}.
+ */
+export declare const SAVED_FRAMES_CATEGORY = "Saved frames";
+/**
+ * The catalogue ONE editor sees: the built-in `Other`, then the categories
+ * the view extensions mounted on this `std` registered — i.e. exactly the
+ * frameworks whose tooling is on — then the host's saved frames, when a
+ * host keeps them (`FrameTemplateProvider`).
+ *
+ * Per editor, from its DI container: the module-level `extend(...)` of
+ * 0.49 and earlier, which appended for every editor and was never emptied,
+ * is gone (a host category is a `TemplateCategoryExtension`).
  */
 export declare function templateManagerFor(std: BlockStdScope): TemplateManager;

package/dist/_pkgs/affine-gfx-template/contribute.js

@@ -1,6 +1,8 @@
+import { FrameTemplateProvider, } from '../affine-shared/services/index.js';
 import { createIdentifier } from '../global/di/index.js';
 import { builtInTemplates } from './toolbar/builtin-templates.js';
 import { resolveTemplateName } from './toolbar/resolve-name.js';
+import { TEMPLATE_PANEL_CATEGORY_SAVED_FRAMES } from './translations.js';
 /**
  * A framework registers its Templates-panel categories here; the panel reads
  * them back from the std of the edgeless it opens on. One identifier per
@@ -33,20 +35,61 @@ export function TemplateCategoryExtension(...categories) {
         },
     };
 }
+/**
+ * The identity of the host's category of saved frames (the
+ * `FrameTemplateProvider` seam): the stable name the panel remembers and
+ * lists by. Its tab reads {@link TEMPLATE_PANEL_CATEGORY_SAVED_FRAMES}.
+ */
+export const SAVED_FRAMES_CATEGORY = 'Saved frames';
+function savedFrameTemplate(service, saved) {
+    return {
+        name: saved.title,
+        type: 'template',
+        content: saved.snapshot,
+        preview: saved.preview,
+        // The panel runs `afterInsert` only once the template job has resolved.
+        afterInsert: service.frameInserted
+            ? std => service.frameInserted?.({
+                docId: std.store.id,
+                templateId: saved.id,
+            })
+            : undefined,
+    };
+}
+/**
+ * The host's saved frames as a category, or none without a host. Lazy: the
+ * host is asked only when the panel shows the tab or searches across tabs.
+ */
+function savedFramesCategory(std) {
+    const service = std.provider.getOptional(FrameTemplateProvider);
+    if (!service)
+        return null;
+    return {
+        name: SAVED_FRAMES_CATEGORY,
+        nameKey: TEMPLATE_PANEL_CATEGORY_SAVED_FRAMES[0],
+        templates: async () => (await service.list()).map(saved => savedFrameTemplate(service, saved)),
+    };
+}
 function loadCategory(category) {
     return Array.isArray(category.templates)
         ? Promise.resolve(category.templates)
         : category.templates();
 }
 /**
- * The catalogue ONE editor sees: the built-in categories (`Other`, plus
- * whatever a host appended through `EdgelessTemplatePanel.templates.extend`)
- * followed by the categories the view extensions mounted on this `std`
- * registered — i.e. exactly the frameworks whose tooling is on.
+ * The catalogue ONE editor sees: the built-in `Other`, then the categories
+ * the view extensions mounted on this `std` registered — i.e. exactly the
+ * frameworks whose tooling is on — then the host's saved frames, when a
+ * host keeps them (`FrameTemplateProvider`).
+ *
+ * Per editor, from its DI container: the module-level `extend(...)` of
+ * 0.49 and earlier, which appended for every editor and was never emptied,
+ * is gone (a host category is a `TemplateCategoryExtension`).
  */
 export function templateManagerFor(std) {
+    const saved = savedFramesCategory(std);
     const contributed = [
         ...std.provider.getAll(TemplateCategoryIdentifier).values(),
+        ...(saved ? [saved] : []),
     ];
     const byName = (name) => contributed.find(c => c.name === name);
     return {
@@ -57,8 +100,6 @@ export function templateManagerFor(std) {
             ]),
         ],
         categoryLabel: name => byName(name)?.nameKey ?? builtInTemplates.categoryLabel(name),
-        // Both halves, so a host's `extend(...)` can still append to a framework's
-        // own category (the global half answers `[]` for a name it does not know).
         list: async (name) => {
             const category = byName(name);
             return [

package/dist/_pkgs/affine-gfx-template/toolbar/builtin-templates.d.ts

@@ -1,9 +1,14 @@
-import type { Template, TemplateCategory, TemplateManager } from './template-type.js';
+import type { Template, TemplateCategory } from './template-type.js';
 export declare const templates: TemplateCategory[];
+/**
+ * The catalogue every editor has, whatever is mounted: `Other`. A host or a
+ * framework adds a category per editor with `TemplateCategoryExtension`; the
+ * module-level `extend(...)` this object carried until 0.49 appended for every
+ * editor of the page and was never emptied.
+ */
 export declare const builtInTemplates: {
     list: (category: string) => Promise<Template[]>;
     categories: () => Promise<string[]>;
     categoryLabel: (name: string) => string | undefined;
     search: (keyword: string, cateName?: string) => Promise<Template[]>;
-    extend(manager: TemplateManager): void;
 };

package/dist/_pkgs/affine-gfx-template/toolbar/builtin-templates.js

@@ -16,48 +16,27 @@ function lcs(text1, text2) {
     }
     return dp[text1.length][text2.length];
 }
-const extendTemplate = [];
-const flat = (arr) => arr.reduce((pre, current) => {
-    if (current) {
-        return pre.concat(current);
-    }
-    return pre;
-}, []);
+/**
+ * The catalogue every editor has, whatever is mounted: `Other`. A host or a
+ * framework adds a category per editor with `TemplateCategoryExtension`; the
+ * module-level `extend(...)` this object carried until 0.49 appended for every
+ * editor of the page and was never emptied.
+ */
 export const builtInTemplates = {
     list: async (category) => {
-        const extendTemplates = flat(await Promise.all(extendTemplate.map(manager => manager.list(category))));
-        // eslint-disable-next-line sonarjs/no-empty-collection
         const cate = templates.find(cate => cate.name === category);
         if (!cate)
-            return extendTemplates;
-        const result = cate.templates instanceof Function
-            ? await cate.templates()
-            : await Promise.all(Object.values(cate.templates));
-        return result.concat(extendTemplates);
-    },
-    categories: async () => {
-        const extendCates = flat(await Promise.all(extendTemplate.map(manager => manager.categories())));
-        // eslint-disable-next-line sonarjs/no-empty-collection
-        return templates.map(cate => cate.name).concat(extendCates);
-    },
-    categoryLabel: (name) => {
-        // eslint-disable-next-line sonarjs/no-empty-collection
-        const own = templates.find(cate => cate.name === name)?.nameKey;
-        if (own)
-            return own;
-        for (const manager of extendTemplate) {
-            const key = manager.categoryLabel?.(name);
-            if (key)
-                return key;
-        }
-        return undefined;
+            return [];
+        return cate.templates instanceof Function
+            ? cate.templates()
+            : cate.templates;
     },
+    categories: async () => templates.map(cate => cate.name),
+    categoryLabel: (name) => templates.find(cate => cate.name === name)?.nameKey,
     search: async (keyword, cateName) => {
-        const candidates = flat(await Promise.all(extendTemplate.map(manager => manager.search(keyword, cateName))));
+        const candidates = [];
         keyword = keyword.trim().toLocaleLowerCase();
-        await Promise.all(
-        // eslint-disable-next-line sonarjs/no-empty-collection
-        templates.map(async (categroy) => {
+        await Promise.all(templates.map(async (categroy) => {
             if (cateName && cateName !== categroy.name) {
                 return;
             }
@@ -73,9 +52,4 @@ export const builtInTemplates = {
         }));
         return candidates;
     },
-    extend(manager) {
-        if (extendTemplate.includes(manager))
-            return;
-        extendTemplate.push(manager);
-    },
 };

package/dist/_pkgs/affine-gfx-template/toolbar/resolve-name.d.ts

@@ -10,7 +10,7 @@ import type { Template } from './template-type.js';
  * through this generic seam.
  *
  * `Template.name` itself stays the STABLE identity `templateFromCommand`
- * bakes in (the drag payload, the `repeat` key, the `templateCache` storage
+ * bakes in (the drag payload, the search, the `templateCache` storage
  * key) — and it is ALSO what gets passed as `translateKey`'s fallback, never
  * `command.labelFallback`: most derived templates leave `name` at its default
  * (the command's own fallback, so the two agree anyway), but a few tiles

package/dist/_pkgs/affine-gfx-template/toolbar/resolve-name.js

@@ -10,7 +10,7 @@ import { getRegisteredCommands } from '../../std/index.js';
  * through this generic seam.
  *
  * `Template.name` itself stays the STABLE identity `templateFromCommand`
- * bakes in (the drag payload, the `repeat` key, the `templateCache` storage
+ * bakes in (the drag payload, the search, the `templateCache` storage
  * key) — and it is ALSO what gets passed as `translateKey`'s fallback, never
  * `command.labelFallback`: most derived templates leave `name` at its default
  * (the command's own fallback, so the two agree anyway), but a few tiles

package/dist/_pkgs/affine-gfx-template/toolbar/template-panel.d.ts

@@ -6,16 +6,16 @@ declare const EdgelessTemplatePanel_base: typeof LitElement & import("../../glob
 export declare class EdgelessTemplatePanel extends EdgelessTemplatePanel_base {
     static styles: import("lit").CSSResult;
     /**
-     * The GLOBAL half of the catalogue — `Other` and a host's `extend(...)`.
-     * Framework categories are not here: they live in the editor's DI container
-     * (`TemplateCategoryExtension`) and are read through {@link catalogue}.
+     * The GLOBAL half of the catalogue — `Other`. Framework and host
+     * categories are not here: they live in the editor's DI container
+     * (`TemplateCategoryExtension`, `FrameTemplateProvider`) and are read
+     * through {@link catalogue}.
      */
     static templates: {
         list: (category: string) => Promise<Template[]>;
         categories: () => Promise<string[]>;
         categoryLabel: (name: string) => string | undefined;
         search: (keyword: string, cateName?: string) => Promise<Template[]>;
-        extend(manager: import("./template-type.js").TemplateManager): void;
     };
     /** What THIS edgeless offers: the global half plus its std's categories. */
     get catalogue(): import("./template-type.js").TemplateManager;

package/dist/_pkgs/affine-gfx-template/toolbar/template-panel.js

@@ -265,9 +265,10 @@ let EdgelessTemplatePanel = (() => {
     }
   `; }
         /**
-         * The GLOBAL half of the catalogue — `Other` and a host's `extend(...)`.
-         * Framework categories are not here: they live in the editor's DI container
-         * (`TemplateCategoryExtension`) and are read through {@link catalogue}.
+         * The GLOBAL half of the catalogue — `Other`. Framework and host
+         * categories are not here: they live in the editor's DI container
+         * (`TemplateCategoryExtension`, `FrameTemplateProvider`) and are read
+         * through {@link catalogue}.
          */
         static { this.templates = builtInTemplates; }
         /** What THIS edgeless offers: the global half plus its std's categories. */
@@ -485,10 +486,10 @@ let EdgelessTemplatePanel = (() => {
                 })}
                   ></affine-template-loading>`
                 : repeat(_templates, 
-                // The drag payload, `templateCache` and `isBeingDragged`
-                // below all key off this SAME identity — never the
-                // resolved (possibly translated) display name.
-                template => template.name, template => {
+                // The template object itself: two saved frames may share
+                // a title (`FrameTemplateProvider`), and a name key
+                // would draw one tile for both.
+                template => template, template => {
                     const preview = template.preview
                         ? template.preview.startsWith('<svg')
                             ? html `${unsafeSVG(template.preview)}`
@@ -498,8 +499,7 @@ let EdgelessTemplatePanel = (() => {
                               loading="lazy"
                             />`
                         : defaultPreview;
-                    const isBeingDragged = draggingElement &&
-                        draggingElement.data.name === template.name;
+                    const isBeingDragged = draggingElement && draggingElement.data === template;
                     // The one place that asks the host's catalogue for the
                     // WORDING above the identity — see `resolveTemplateName`.
                     const displayName = resolveTemplateName(this.edgeless.std, template);

package/dist/_pkgs/affine-gfx-template/toolbar/template-type.d.ts

@@ -70,9 +70,8 @@ export type TemplateCategory = {
      * key (`com.labre.framework.<id>`, the senior button's); a generic one
      * (`Other`) gets a key of its own. Absent for a category whose display name
      * cannot be attributed to one owner (Cynefin and Estuarine share a single
-     * `cynefin-estuarine` framework key that names neither individually) or that
-     * a host contributed through {@link TemplateManager.extend} — either way
-     * `name` is shown as is.
+     * `cynefin-estuarine` framework key that names neither individually), in
+     * which case `name` is shown as is.
      */
     nameKey?: string;
     templates: Template[] | (() => Promise<Template[]>);
@@ -83,5 +82,4 @@ export interface TemplateManager {
     search(keyword: string, category?: string): Promise<Template[]> | Template[];
     /** {@link TemplateCategory.nameKey} of the category named `name`, if any. */
     categoryLabel?(name: string): string | undefined;
-    extend?(manager: TemplateManager): void;
 }

package/dist/_pkgs/affine-gfx-template/translations.d.ts

@@ -18,6 +18,11 @@ export declare const TEMPLATE_PANEL_SEARCH_PLACEHOLDER: ChromeWording;
  * same word as {@link CATALOGUE_OTHER}, one key.
  */
 export declare const TEMPLATE_PANEL_CATEGORY_OTHER: ChromeWording;
+/**
+ * The tab of the frames a host keeps as templates (`FrameTemplateProvider`,
+ * `SAVED_FRAMES_CATEGORY`); there is no such tab without that host.
+ */
+export declare const TEMPLATE_PANEL_CATEGORY_SAVED_FRAMES: ChromeWording;
 /** The "Template" senior tool's own button name (`SeniorTool.labelKey`). */
 export declare const TEMPLATE_SENIOR_TOOL_NAME: ChromeWording;
 export declare const TEMPLATE_NAME_SWOT: ChromeWording;

package/dist/_pkgs/affine-gfx-template/translations.js

@@ -24,6 +24,14 @@ export const TEMPLATE_PANEL_SEARCH_PLACEHOLDER = [
  * same word as {@link CATALOGUE_OTHER}, one key.
  */
 export const TEMPLATE_PANEL_CATEGORY_OTHER = CATALOGUE_OTHER;
+/**
+ * The tab of the frames a host keeps as templates (`FrameTemplateProvider`,
+ * `SAVED_FRAMES_CATEGORY`); there is no such tab without that host.
+ */
+export const TEMPLATE_PANEL_CATEGORY_SAVED_FRAMES = [
+    'com.labre.template.panel.category.saved-frames',
+    'Saved frames',
+];
 /** The "Template" senior tool's own button name (`SeniorTool.labelKey`). */
 export const TEMPLATE_SENIOR_TOOL_NAME = [
     'com.labre.template.senior-tool.name',
@@ -65,6 +73,7 @@ export const TEMPLATE_NAME_GANTT_CHART = [
 export const TEMPLATE_PACKAGE_WORDINGS = [
     TEMPLATE_PANEL_ADD,
     TEMPLATE_PANEL_SEARCH_PLACEHOLDER,
+    TEMPLATE_PANEL_CATEGORY_SAVED_FRAMES,
     TEMPLATE_SENIOR_TOOL_NAME,
     TEMPLATE_NAME_SWOT,
     TEMPLATE_NAME_KANBAN_BOARD,

package/dist/_pkgs/affine-inline-footnote/adapters/markdown/inline-delta.js

@@ -1,4 +1,5 @@
 import { FOOTNOTE_DEFINITION_PREFIX, InlineDeltaToMarkdownAdapterExtension, } from '../../../affine-shared/adapters/index.js';
+import { isSafeLinkUrl } from '../../../affine-shared/utils/index.js';
 export const footnoteReferenceDeltaToMarkdownAdapterMatcher = InlineDeltaToMarkdownAdapterExtension({
     name: 'footnote-reference',
     match: delta => !!delta.attributes?.footnote,
@@ -19,6 +20,11 @@ export const footnoteReferenceDeltaToMarkdownAdapterMatcher = InlineDeltaToMarkd
         if (!configs.has(footnoteDefinitionKey)) {
             // clone the footnote reference
             const clonedFootnoteReference = { ...footnote.reference };
+            // A stored url with a refused scheme is not written back out.
+            if (clonedFootnoteReference.url &&
+                !isSafeLinkUrl(clonedFootnoteReference.url)) {
+                delete clonedFootnoteReference.url;
+            }
             // If the footnote reference contains url, encode it
             if (clonedFootnoteReference.url) {
                 clonedFootnoteReference.url = encodeURIComponent(clonedFootnoteReference.url);

package/dist/_pkgs/affine-inline-footnote/adapters/markdown/markdown-inline.js

@@ -1,5 +1,6 @@
 import { FootNoteReferenceParamsSchema } from '../../../affine-model/index.js';
 import { FOOTNOTE_DEFINITION_PREFIX, MarkdownASTToDeltaExtension, } from '../../../affine-shared/adapters/index.js';
+import { isSafeLinkUrl } from '../../../affine-shared/utils/index.js';
 export const markdownFootnoteReferenceToDeltaMatcher = MarkdownASTToDeltaExtension({
     name: 'footnote-reference',
     match: ast => ast.type === 'footnoteReference',
@@ -23,6 +24,12 @@ export const markdownFootnoteReferenceToDeltaMatcher = MarkdownASTToDeltaExtensi
                 footnoteDefinitionJson.favicon = decodeURIComponent(footnoteDefinitionJson.favicon);
             }
             const footnoteReference = FootNoteReferenceParamsSchema.parse(footnoteDefinitionJson);
+            // A refused scheme is not stored: the footnote keeps its label and
+            // loses the url, which the render side would refuse anyway.
+            if (footnoteReference.url !== undefined &&
+                !isSafeLinkUrl(footnoteReference.url)) {
+                delete footnoteReference.url;
+            }
             // If the footnote reference is an attachment, and the file type is not set,
             // Try to infer the file type from the file name.
             const { type: referenceType, fileName, fileType } = footnoteReference;

package/dist/_pkgs/affine-inline-link/adapters/html/html-inline.js

@@ -1,4 +1,5 @@
 import { HtmlASTToDeltaExtension, } from '../../../affine-shared/adapters/index.js';
+import { isSafeLinkUrl } from '../../../affine-shared/utils/index.js';
 const isElement = (ast) => {
     return ast.type === 'element';
 };
@@ -47,7 +48,9 @@ export const htmlLinkElementToDeltaMatcher = HtmlASTToDeltaExtension({
             }
         }
         return ast.children.flatMap(child => context.toDelta(child, { trim: false }).map(delta => {
-            if (href.startsWith('http')) {
+            // http(s) only, and by the parsed scheme: a prefix test let
+            // `httpx:` or `http-javascript:` through.
+            if (/^https?:/i.test(href.trim()) && isSafeLinkUrl(href)) {
                 delta.attributes = {
                     ...delta.attributes,
                     link: href,

package/dist/_pkgs/affine-inline-link/adapters/html/inline-delta.js

@@ -1,4 +1,5 @@
 import { InlineDeltaToHtmlAdapterExtension } from '../../../affine-shared/adapters/index.js';
+import { isSafeLinkUrl } from '../../../affine-shared/utils/index.js';
 export const linkDeltaToHtmlAdapterMatcher = InlineDeltaToHtmlAdapterExtension({
     name: 'link',
     match: delta => !!delta.attributes?.link,
@@ -8,7 +9,8 @@ export const linkDeltaToHtmlAdapterMatcher = InlineDeltaToHtmlAdapterExtension({
             value: delta.insert,
         };
         const link = delta.attributes?.link;
-        if (!link) {
+        // A stored link with a refused scheme is written as its text alone.
+        if (!link || !isSafeLinkUrl(link)) {
             return hast;
         }
         return {

package/dist/_pkgs/affine-inline-link/adapters/markdown/inline-delta.js

@@ -1,4 +1,5 @@
 import { InlineDeltaToMarkdownAdapterExtension } from '../../../affine-shared/adapters/index.js';
+import { isSafeLinkUrl } from '../../../affine-shared/utils/index.js';
 export const linkDeltaToMarkdownAdapterMatcher = InlineDeltaToMarkdownAdapterExtension({
     name: 'link',
     match: delta => !!delta.attributes?.link,
@@ -8,7 +9,9 @@ export const linkDeltaToMarkdownAdapterMatcher = InlineDeltaToMarkdownAdapterExt
             value: delta.insert,
         };
         const link = delta.attributes?.link;
-        if (!link) {
+        // A stored link with a refused scheme (an older document, a paste) is
+        // written as its text alone, never re-emitted as a link.
+        if (!link || !isSafeLinkUrl(link)) {
             return mdast;
         }
         const { current: currentMdast } = context;

package/dist/_pkgs/affine-inline-link/adapters/notion-html/html-inline.js

@@ -1,4 +1,5 @@
 import { NotionHtmlASTToDeltaExtension, } from '../../../affine-shared/adapters/index.js';
+import { isSafeLinkUrl } from '../../../affine-shared/utils/index.js';
 const isElement = (ast) => {
     return ast.type === 'element';
 };
@@ -29,7 +30,7 @@ export const notionHtmlLinkElementToDeltaMatcher = NotionHtmlASTToDeltaExtension
                     return delta;
                 }
             }
-            if (href.startsWith('http')) {
+            if (/^https?:/i.test(href.trim()) && isSafeLinkUrl(href)) {
                 delta.attributes = {
                     ...delta.attributes,
                     link: href,

package/dist/_pkgs/affine-inline-link/link-node/affine-link.d.ts

@@ -14,6 +14,13 @@ export declare class AffineLink extends AffineLink_base {
         setFloating: (element?: Element) => void;
         dispose: () => void;
     };
+    /**
+     * Opens this link's toolbar without a hover, as a proposal (see
+     * `proposeLinkViews`). The toolbar keeps the hover contract once the pointer
+     * enters it; until then any key or press outside it closes it, so the
+     * proposal never outlives the next gesture.
+     */
+    proposeViews(): void;
     connectedCallback(): void;
     get block(): BlockComponent<import("../../store/index.js").BlockModel<object>, import("../../std/index.js").BlockService, string> | null;
     get inlineEditor(): import("../../std/inline/inline-editor.js").InlineEditor<AffineTextAttributes> | undefined;

package/dist/_pkgs/affine-inline-link/link-node/affine-link.js

@@ -65,6 +65,43 @@ let AffineLink = (() => {
       text-decoration: underline;
     }
   `; }
+        /**
+         * Opens this link's toolbar without a hover, as a proposal (see
+         * `proposeLinkViews`). The toolbar keeps the hover contract once the pointer
+         * enters it; until then any key or press outside it closes it, so the
+         * proposal never outlives the next gesture.
+         */
+        proposeViews() {
+            const message$ = this.std.get(ToolbarRegistryIdentifier).message$;
+            let floating;
+            const controller = new AbortController();
+            const close = (event) => {
+                if (floating && event.composedPath().includes(floating))
+                    return;
+                controller.abort();
+                if (message$.peek()?.element === this)
+                    message$.value = null;
+            };
+            const options = { capture: true, signal: controller.signal };
+            document.addEventListener('keydown', close, options);
+            document.addEventListener('pointerdown', close, options);
+            this._disposables.add(() => controller.abort());
+            message$.value = {
+                flavour: 'affine:link',
+                element: this,
+                setFloating: element => {
+                    floating = element;
+                    this._whenHover.setFloating(element);
+                },
+            };
+            // Subscribed after the write: `subscribe` calls back at once with the
+            // current value, which must already be this proposal.
+            const unsubscribe = message$.subscribe(message => {
+                if (message?.element !== this)
+                    controller.abort();
+            });
+            controller.signal.addEventListener('abort', unsubscribe);
+        }
         connectedCallback() {
             super.connectedCallback();
             this._whenHover.setReference(this);

package/dist/_pkgs/affine-inline-link/link-node/index.d.ts

@@ -1,2 +1,3 @@
 export { AffineLink } from './affine-link.js';
 export { toggleLinkPopup } from './link-popup/toggle-link-popup.js';
+export { lonePastedUrl, proposeLinkViews } from './propose-views.js';

package/dist/_pkgs/affine-inline-link/link-node/index.js

@@ -1,2 +1,3 @@
 export { AffineLink } from './affine-link.js';
 export { toggleLinkPopup } from './link-popup/toggle-link-popup.js';
+export { lonePastedUrl, proposeLinkViews } from './propose-views.js';