@jant/core 0.3.42 → 0.3.43

package/dist/{env-wCpMcNXs.js → env-CgaH9Mut.js}

@@ -1,4 +1,4 @@
-import { _ as __exportAll, c as normalizeSitePathPrefix, t as buildSiteUrl } from "./url-FvvgARU9.js";
+import { l as normalizeSitePathPrefix, t as buildSiteUrl, v as __exportAll } from "./url-umUptr5z.js";
 //#region src/lib/display-text.ts
 /**
 * Normalize a user-visible text value.

package/dist/{github-api-CficQztC.js → github-api-BkRWnqMx.js}

@@ -1,4 +1,4 @@
-import { _ as __exportAll } from "./url-FvvgARU9.js";
+import { v as __exportAll } from "./url-umUptr5z.js";
 //#region src/lib/github-api.ts
 var github_api_exports = /* @__PURE__ */ __exportAll({
 	GitHubApiError: () => GitHubApiError,

package/dist/{github-app-F4qZ05xk.js → github-app-WeadXMb8.js}

@@ -1,4 +1,4 @@
-import { _ as __exportAll } from "./url-FvvgARU9.js";
+import { v as __exportAll } from "./url-umUptr5z.js";
 //#region src/lib/github-app.ts
 var github_app_exports = /* @__PURE__ */ __exportAll({
 	buildInstallUrl: () => buildInstallUrl,

package/dist/{github-sync-zohnA9qv.js → github-sync-7y_nTXx1.js}

@@ -1,6 +1,6 @@
-import { _ as __exportAll, h as toPublicPath, u as sanitizeUrl } from "./url-FvvgARU9.js";
-import { r as getInstallationToken } from "./github-app-F4qZ05xk.js";
-import { r as parseRepoSlug, t as createGitHubClient } from "./github-api-CficQztC.js";
+import { d as sanitizeUrl, g as toPublicPath, v as __exportAll } from "./url-umUptr5z.js";
+import { r as getInstallationToken } from "./github-app-WeadXMb8.js";
+import { r as parseRepoSlug, t as createGitHubClient } from "./github-api-BkRWnqMx.js";
 import { strToU8, zipSync } from "fflate";
 import { Extension, Node } from "@tiptap/core";
 import { MarkdownManager } from "@tiptap/markdown";
@@ -2315,14 +2315,21 @@ var RENDER_CONTEXT = {
 * matching.
 *
 * @param bodyJson - TipTap JSON string (the `body` column)
+* @param options.includeLinkHrefs
+*   When `true`, URLs from inline link marks are appended after the link text
+*   so they get indexed for search. Default `false` keeps the output clean for
+*   plain-text consumers like `toPlainText`/`extractTitle`.
 * @returns Plain text for FTS indexing, or null if parsing fails or doc is empty
 *
 * @example
 * ```ts
 * const text = extractBodyText(body);
 * // "Hello world Some code here"
+*
+* const indexed = extractBodyText(body, { includeLinkHrefs: true });
+* // "See this page https://example.com"
 * ```
-*/ function extractBodyText(bodyJson) {
+*/ function extractBodyText(bodyJson, options = {}) {
 	let doc;
 	try {
 		doc = JSON.parse(bodyJson);
@@ -2330,9 +2337,20 @@ var RENDER_CONTEXT = {
 		return null;
 	}
 	if (doc.type !== "doc" || !doc.content) return null;
+	const includeLinkHrefs = options.includeLinkHrefs === true;
 	function collectText(node) {
 		if (!SEARCHABLE_TYPES.has(node.type)) return "";
-		if (node.type === "text") return node.text ?? "";
+		if (node.type === "text") {
+			const text = node.text ?? "";
+			if (!includeLinkHrefs || !node.marks || node.marks.length === 0) return text;
+			const hrefs = [];
+			for (const mark of node.marks) {
+				if (mark.type !== "link") continue;
+				const href = mark.attrs?.href;
+				if (typeof href === "string" && href.trim()) hrefs.push(href);
+			}
+			return hrefs.length > 0 ? `${text} ${hrefs.join(" ")}` : text;
+		}
 		if (node.type === "hardBreak") return " ";
 		if (!node.content) return "";
 		return node.content.map(collectText).join(" ");
@@ -2386,12 +2404,15 @@ function extractSummary(bodyJson, maxBlocks, maxChars) {
 * @param bodyJson - Tiptap JSON string
 * @param maxBlocks - Maximum number of top-level blocks to include
 * @param maxChars - Maximum total plain-text character count
-* @returns HTML summary and whether content was truncated, or null
+* @returns HTML summary, whether content was truncated, and the index in
+*   `doc.content` where the content after the summary boundary begins, or null.
+*   `breakAtIndex` lets callers align the summary with the full-body rendering
+*   when splitting at the "read more" boundary (e.g. to insert an anchor).
 *
 * @example
 * ```ts
 * const result = extractSummaryHtml(body, 5, 500);
-* // { html: "<ul><li><p>Item</p></li></ul>", hasMore: true }
+* // { html: "<ul><li><p>Item</p></li></ul>", hasMore: true, breakAtIndex: 1 }
 * ```
 */ function extractSummaryHtml(bodyJson, maxBlocks = 5, maxChars = 500) {
 	let doc;
@@ -2412,17 +2433,21 @@ function extractSummary(bodyJson, maxBlocks, maxChars) {
 				type: "doc",
 				content: selected
 			}),
-			hasMore: true
+			hasMore: true,
+			breakAtIndex: moreBreakIdx
 		};
 	}
 	const selected = [];
 	let totalChars = 0;
-	for (const node of nodes) {
-		if (!SUMMARY_BLOCK_TYPES.has(node.type)) continue;
+	let lastSelectedIdx = -1;
+	for (let i = 0; i < nodes.length; i++) {
+		const node = nodes[i];
+		if (!node || !SUMMARY_BLOCK_TYPES.has(node.type)) continue;
 		const text = extractPlainText(node).trim();
 		if ((selected.length >= maxBlocks || totalChars + text.length > maxChars) && selected.length > 0) break;
 		selected.push(node);
 		totalChars += text.length;
+		lastSelectedIdx = i;
 	}
 	if (selected.length === 0) return null;
 	return {
@@ -2430,7 +2455,8 @@ function extractSummary(bodyJson, maxBlocks, maxChars) {
 			type: "doc",
 			content: selected
 		}),
-		hasMore: selected.length < totalContentNodes
+		hasMore: selected.length < totalContentNodes,
+		breakAtIndex: lastSelectedIdx + 1
 	};
 }
 //#endregion
@@ -3885,11 +3911,12 @@ function normalizeArchiveText(text) {
 	return (text ?? "").replace(/\s+/g, " ").trim();
 }
 function getArchiveSummaryText(post) {
+	const cleanBodyText = post.body ? extractBodyText(post.body) : null;
 	const candidates = post.format === "quote" ? [
 		post.summary,
-		post.bodyText,
+		cleanBodyText,
 		post.quoteText
-	] : [post.summary, post.bodyText];
+	] : [post.summary, cleanBodyText];
 	for (const candidate of candidates) {
 		const normalized = normalizeArchiveText(candidate);
 		if (normalized) return normalized;
@@ -4693,4 +4720,4 @@ function uint8ArrayToBase64(bytes) {
 	return btoa(binary);
 }
 //#endregion
-export { JANT_POSITIVE_LOGO_PNG_FILENAME as A, getJantLogoHref as B, formatYearMonth as C, HOME_BRANDING_LINK_LABEL as D, toISOString as E, getJantBundledAsset as F, base64ToUint8Array as G, JANT_LOGO_PATH_DATA as H, getJantIconFilename as I, getJantIconHref as L, getDefaultJantAppleTouchIconBytes as M, getDefaultJantFaviconIcoBytes as N, HOME_BRANDING_PREFIX as O, getJantBrandPackHref as P, getJantLogoFilename as R, formatTime as S, time_exports as T, JANT_LOGO_VIEW_BOX as U, getJantPositiveLogoPngHref as V, arrayBufferToBase64 as W, getMediaUrl as _, tiptapJsonToMarkdown as a, formatRelativeAge as b, render as c, extractSummary as d, extractSummaryHtml as f, getImageUrl as g, escapeHtml as h, createExportService as i, JANT_REPO_URL as j, JANT_BRAND_PACK_FILENAME as k, toPlainText as l, trimTiptapBody as m, createGitHubSyncService as n, markdownToTiptapJson as o, renderTiptapJson as p, github_sync_exports as r, markdown_exports as s, SYNC_COMMIT_MARKER as t, extractBodyText as u, getPublicUrlForProvider as v, now as w, formatRelativeTime as x, formatDate as y, getJantLogoFills as z };
+export { JANT_BRAND_PACK_FILENAME as A, getJantLogoFills as B, formatTime as C, toISOString as D, time_exports as E, getJantBrandPackHref as F, arrayBufferToBase64 as G, getJantPositiveLogoPngHref as H, getJantBundledAsset as I, base64ToUint8Array as K, getJantIconFilename as L, JANT_REPO_URL as M, getDefaultJantAppleTouchIconBytes as N, HOME_BRANDING_LINK_LABEL as O, getDefaultJantFaviconIcoBytes as P, getJantIconHref as R, formatRelativeTime as S, now as T, JANT_LOGO_PATH_DATA as U, getJantLogoHref as V, JANT_LOGO_VIEW_BOX as W, getImageUrl as _, tiptapJsonToMarkdown as a, formatDate as b, render as c, extractSummary as d, extractSummaryHtml as f, escapeHtml as g, trimTiptapBody as h, createExportService as i, JANT_POSITIVE_LOGO_PNG_FILENAME as j, HOME_BRANDING_PREFIX as k, toPlainText as l, renderTiptapJson as m, createGitHubSyncService as n, markdownToTiptapJson as o, renderTiptapDocument as p, github_sync_exports as r, markdown_exports as s, SYNC_COMMIT_MARKER as t, extractBodyText as u, getMediaUrl as v, formatYearMonth as w, formatRelativeAge as x, getPublicUrlForProvider as y, getJantLogoFilename as z };

package/dist/index.js

@@ -1,7 +1,7 @@
-import { g as url_exports } from "./url-FvvgARU9.js";
-import { A as MEDIA_KINDS, C as toNavItemViews, D as FORMATS, E as toSearchResultView, M as SORT_ORDERS, N as STATUSES, O as MAX_MEDIA_ATTACHMENTS, P as TEXT_ATTACHMENT_CONTENT_FORMATS, S as toNavItemView, T as toPostViews, b as toArchiveGroupsWithMedia, f as defaultFeedRenderer, j as NAV_ITEM_TYPES, k as MAX_PINNED_POSTS, n as createRequestRuntime, p as defaultSitemapRenderer, t as createApp, v as createMediaContext, w as toPostView, x as toMediaView, y as toArchiveGroups } from "./app-Cu3lveYI.js";
-import { T as time_exports, n as createGitHubSyncService, s as markdown_exports } from "./github-sync-zohnA9qv.js";
-import { u as getGitHubAppConfig } from "./env-wCpMcNXs.js";
+import { _ as url_exports } from "./url-umUptr5z.js";
+import { A as NAV_ITEM_TYPES, C as toPostView, D as MAX_MEDIA_ATTACHMENTS, E as FORMATS, M as STATUSES, N as TEXT_ATTACHMENT_CONTENT_FORMATS, O as MAX_PINNED_POSTS, S as toNavItemViews, T as toSearchResultView, _ as createMediaContext, b as toMediaView, f as defaultFeedRenderer, j as SORT_ORDERS, k as MEDIA_KINDS, n as createRequestRuntime, t as createApp, v as toArchiveGroups, w as toPostViews, x as toNavItemView, y as toArchiveGroupsWithMedia } from "./app-GbfwoeDJ.js";
+import { E as time_exports, n as createGitHubSyncService, s as markdown_exports } from "./github-sync-7y_nTXx1.js";
+import { u as getGitHubAppConfig } from "./env-CgaH9Mut.js";
 //#region src/lib/github-sync-worker.ts
 /**
 * GitHub Sync Worker
@@ -85,4 +85,4 @@ import { u as getGitHubAppConfig } from "./env-wCpMcNXs.js";
 	}
 }
 //#endregion
-export { FORMATS, MAX_MEDIA_ATTACHMENTS, MAX_PINNED_POSTS, MEDIA_KINDS, NAV_ITEM_TYPES, SORT_ORDERS, STATUSES, TEXT_ATTACHMENT_CONTENT_FORMATS, createApp, createMediaContext, defaultFeedRenderer, defaultSitemapRenderer, handleQueueBatch as handleGitHubSyncQueueBatch, markdown_exports as markdown, time_exports as time, toArchiveGroups, toArchiveGroupsWithMedia, toMediaView, toNavItemView, toNavItemViews, toPostView, toPostViews, toSearchResultView, url_exports as url };
+export { FORMATS, MAX_MEDIA_ATTACHMENTS, MAX_PINNED_POSTS, MEDIA_KINDS, NAV_ITEM_TYPES, SORT_ORDERS, STATUSES, TEXT_ATTACHMENT_CONTENT_FORMATS, createApp, createMediaContext, defaultFeedRenderer, handleQueueBatch as handleGitHubSyncQueueBatch, markdown_exports as markdown, time_exports as time, toArchiveGroups, toArchiveGroupsWithMedia, toMediaView, toNavItemView, toNavItemViews, toPostView, toPostViews, toSearchResultView, url_exports as url };

package/dist/node.js

@@ -1,7 +1,7 @@
-import "./url-FvvgARU9.js";
-import { F as buildThemeStyle, I as BUILTIN_COLOR_THEMES, L as getPublicAssetBasePath, R as isAssetPath, _ as schema_exports, a as createSiteService, c as resolveConfig, d as getFontThemeCssVariables, g as createNodeDatabase, h as sqliteSchemaBundle, i as createNodeRequestRuntime, l as BUILTIN_FONT_THEMES, m as pgSchemaBundle, o as resolveDatabaseDialect, r as createNodeCliRuntime, s as getHostBasedStartupConfigurationIssues, t as createApp, u as getCjkSerifCssVariables } from "./app-Cu3lveYI.js";
-import { i as createExportService } from "./github-sync-zohnA9qv.js";
-import { b as getSiteResolutionMode, i as getConfiguredSingleSitePathPrefix, l as getEnvString, r as getConfiguredSingleSiteOrigin, x as shouldTrustProxy, y as getPort } from "./env-wCpMcNXs.js";
+import "./url-umUptr5z.js";
+import { F as BUILTIN_COLOR_THEMES, I as getPublicAssetBasePath, L as isAssetPath, P as buildThemeStyle, a as createSiteService, c as resolveConfig, d as getFontThemeCssVariables, g as schema_exports, h as createNodeDatabase, i as createNodeRequestRuntime, l as BUILTIN_FONT_THEMES, m as sqliteSchemaBundle, o as resolveDatabaseDialect, p as pgSchemaBundle, r as createNodeCliRuntime, s as getHostBasedStartupConfigurationIssues, t as createApp, u as getCjkSerifCssVariables } from "./app-GbfwoeDJ.js";
+import { i as createExportService } from "./github-sync-7y_nTXx1.js";
+import { b as getSiteResolutionMode, i as getConfiguredSingleSitePathPrefix, l as getEnvString, r as getConfiguredSingleSiteOrigin, x as shouldTrustProxy, y as getPort } from "./env-CgaH9Mut.js";
 import { drizzle } from "drizzle-orm/better-sqlite3";
 import { serve } from "@hono/node-server";
 import Database from "better-sqlite3";
@@ -473,7 +473,7 @@ async function createNodeRequestHandler(options) {
 async function start(env = process.env, app) {
 	const handler = await createNodeRequestHandler({
 		env,
-		app: async () => app ?? (await import("./app-DzCB4yOp.js")).createApp()
+		app: async () => app ?? (await import("./app-Ctl0T0zO.js")).createApp()
 	});
 	const hostname = resolveHost(env);
 	const port = resolvePort(env);

package/dist/{url-FvvgARU9.js → url-umUptr5z.js}

@@ -22,6 +22,7 @@ var __exportAll = (all, no_symbols) => {
 	getSitePathPrefix: () => getSitePathPrefix,
 	isFullUrl: () => isFullUrl,
 	isSafeAbsoluteUrl: () => isSafeAbsoluteUrl,
+	isSafeInternalRedirect: () => isSafeInternalRedirect,
 	normalizePath: () => normalizePath,
 	normalizeSitePathPrefix: () => normalizeSitePathPrefix,
 	normalizeSiteUrl: () => normalizeSiteUrl,
@@ -279,6 +280,34 @@ var SAFE_URL_PROTOCOLS = new Set([
 	return toPublicPath(href, sitePathPrefix);
 }
 /**
+* Check whether a path is a safe same-origin redirect target.
+*
+* Accepts only paths that start with a single `/` (no protocol-relative
+* `//host`, no scheme, no control characters). Callers should use this to
+* validate user-supplied `redirect` query parameters before issuing a
+* `Location` header.
+*
+* @param path - Candidate redirect path
+* @returns `true` when the path is safe to use as an internal redirect
+*
+* @example
+* ```ts
+* isSafeInternalRedirect("/settings") // true
+* isSafeInternalRedirect("//evil.example") // false
+* isSafeInternalRedirect("https://evil.example") // false
+* ```
+*/ function isSafeInternalRedirect(path) {
+	if (typeof path !== "string") return false;
+	if (!path.startsWith("/")) return false;
+	if (path.startsWith("//")) return false;
+	if (path.startsWith("/\\")) return false;
+	for (let i = 0; i < path.length; i += 1) {
+		const code = path.charCodeAt(i);
+		if (code < 32 || code === 127) return false;
+	}
+	return true;
+}
+/**
 * Remove the site path prefix from a public request pathname.
 *
 * @param pathname - Public request pathname
@@ -302,4 +331,4 @@ var SAFE_URL_PROTOCOLS = new Set([
 	return new URL(toPublicPath(path, sitePathPrefix), siteUrl).toString();
 }
 //#endregion
-export { __exportAll as _, getSitePathPrefix as a, normalizeSitePathPrefix as c, slugify as d, stripSitePathPrefix as f, url_exports as g, toPublicPath as h, getSiteOrigin as i, normalizeSiteUrl as l, toPublicHref as m, extractDisplayDomain as n, isFullUrl as o, toAbsoluteSiteUrl as p, extractDomain as r, normalizePath as s, buildSiteUrl as t, sanitizeUrl as u };
+export { url_exports as _, getSitePathPrefix as a, normalizePath as c, sanitizeUrl as d, slugify as f, toPublicPath as g, toPublicHref as h, getSiteOrigin as i, normalizeSitePathPrefix as l, toAbsoluteSiteUrl as m, extractDisplayDomain as n, isFullUrl as o, stripSitePathPrefix as p, extractDomain as r, isSafeInternalRedirect as s, buildSiteUrl as t, normalizeSiteUrl as u, __exportAll as v };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jant/core",
-  "version": "0.3.42",
+  "version": "0.3.43",
   "description": "A modern, open-source microblogging platform built on Cloudflare Workers",
   "type": "module",
   "exports": {

package/src/__tests__/helpers/app.ts

@@ -13,6 +13,7 @@ import type BetterSqlite3 from "better-sqlite3";
 import { errorHandler } from "../../middleware/error-handler.js";
 import { createI18n } from "../../i18n/i18n.js";
 import { DEFAULT_APP_PORT } from "../../lib/env.js";
+import { createMemoryRateLimiter } from "../../lib/rate-limit-memory.js";
 import { resolveConfig } from "../../lib/resolve-config.js";
 import type { StorageDriver } from "../../lib/storage.js";
 import type { HostedHandoffService } from "../../services/hosted-handoff.js";
@@ -57,6 +58,9 @@ export function createTestApp(options: TestAppOptions = {}) {
     siteResolutionMode: options.siteResolutionMode ?? "single-site",
   });
 
+  // Fresh limiter per test app so counters don't leak between tests.
+  const rateLimiter = createMemoryRateLimiter();
+
   const app = new Hono<Env>();
 
   // Global error handler: maps DomainError → HTTP responses
@@ -105,6 +109,7 @@ export function createTestApp(options: TestAppOptions = {}) {
     c.set("allSettings", allSettings);
     c.set("appConfig", resolveConfig(c.env, allSettings));
     c.set("storage", options.storage ?? null);
+    c.set("rateLimiter", rateLimiter);
 
     // i18n (English default for tests)
     const i18n = createI18n("en");
@@ -117,21 +122,27 @@ export function createTestApp(options: TestAppOptions = {}) {
         "test-user",
         "owner",
       );
+      const session = {
+        user: { id: "test-user", email: "test@test.com", name: "Test" },
+        session: { id: "test-session" },
+      } as unknown as AppVariables["session"];
       // Mock auth that always returns a session
       c.set("auth", {
         api: {
-          getSession: async () => ({
-            user: { id: "test-user", email: "test@test.com", name: "Test" },
-            session: { id: "test-session" },
-          }),
+          getSession: async () => session,
         },
       } as AppVariables["auth"]);
+      // Mirror what `attachSession` middleware would produce in production.
+      c.set("session", session);
+      c.set("isAuthenticated", true);
     } else {
       c.set("auth", {
         api: {
           getSession: async () => null,
         },
       } as AppVariables["auth"]);
+      c.set("session", null);
+      c.set("isAuthenticated", false);
     }
 
     await next();

package/src/app.tsx

@@ -53,6 +53,7 @@ import {
   githubSyncAdminRoutes,
 } from "./routes/api/github-sync.js";
 import { internalTextAttachmentsRoutes } from "./routes/api/internal/text-attachments.js";
+import { internalSearchReindexRoutes } from "./routes/api/internal/search-reindex.js";
 import { internalUploadsRoutes } from "./routes/api/internal/uploads.js";
 import { publicPostsApiRoutes } from "./routes/api/public/posts.js";
 // Routes - Compose
@@ -65,6 +66,7 @@ import { manifestRoutes } from "./routes/feed/manifest.js";
 
 // Middleware
 import { requireAuth } from "./middleware/auth.js";
+import { attachSession } from "./middleware/session.js";
 import { requireOnboarding } from "./middleware/onboarding.js";
 import { errorHandler } from "./middleware/error-handler.js";
 import { withConfig } from "./middleware/config.js";
@@ -306,10 +308,15 @@ export function createApp(): App {
     c.set("auth", runtime.auth);
     c.set("currentSite", runtime.currentSite);
     c.set("currentSiteDomain", runtime.currentSiteDomain);
+    c.set("rateLimiter", runtime.rateLimiter);
 
     await next();
   });
 
+  // Populate c.var.session / c.var.isAuthenticated once per request so
+  // downstream handlers don't each call auth.api.getSession themselves.
+  app.use("*", attachSession());
+
   app.use("*", async (c, next) => {
     const redirectUrl = await getHostedCanonicalRedirect({
       currentSite: c.var.currentSite,
@@ -337,6 +344,7 @@ export function createApp(): App {
   app.route("/api/internal/api-tokens", internalApiTokensRoutes);
   app.route("/api/internal/sites", internalSitesRoutes);
   app.route("/api/internal/text-attachments", internalTextAttachmentsRoutes);
+  app.route("/api/internal/search/reindex", internalSearchReindexRoutes);
   app.route("/api/internal/uploads", internalUploadsRoutes);
   app.route("/api/github-sync", githubSyncWebhookRoutes);
 

package/src/client/tiptap/__tests__/insert-paragraph-around.test.ts

@@ -0,0 +1,228 @@
+// @vitest-environment happy-dom
+
+import { afterEach, describe, expect, it } from "vitest";
+import { Editor } from "@tiptap/core";
+import StarterKit from "@tiptap/starter-kit";
+import { TextSelection } from "@tiptap/pm/state";
+import { InsertParagraphAround } from "../insert-paragraph-around.js";
+
+const editors: Editor[] = [];
+
+function createEditor(content: string) {
+  const element = document.createElement("div");
+  document.body.appendChild(element);
+
+  const editor = new Editor({
+    element,
+    extensions: [
+      StarterKit.configure({
+        heading: { levels: [1, 2, 3] },
+        link: { openOnClick: false, autolink: false },
+      }),
+      InsertParagraphAround,
+    ],
+    content,
+  });
+
+  // Any first transaction flushes happy-dom's synthetic DOM-change, which in
+  // this test environment appends an auto trailing paragraph. Running it
+  // once up front means later pos-based assertions count deltas instead of
+  // racing with that artifact.
+  editor.view.dispatch(editor.state.tr);
+
+  editors.push(editor);
+  return editor;
+}
+
+function setCursor(editor: Editor, pos: number) {
+  editor.view.dispatch(
+    editor.state.tr.setSelection(TextSelection.create(editor.state.doc, pos)),
+  );
+}
+
+function pressKey(editor: Editor, key: string) {
+  return editor.view.someProp("handleKeyDown", (fn) =>
+    fn(
+      editor.view,
+      new KeyboardEvent("keydown", {
+        key,
+        code: key,
+      }),
+    ),
+  );
+}
+
+function pressModShiftEnter(editor: Editor) {
+  return editor.view.someProp("handleKeyDown", (fn) =>
+    fn(
+      editor.view,
+      new KeyboardEvent("keydown", {
+        key: "Enter",
+        code: "Enter",
+        shiftKey: true,
+        ctrlKey: true,
+      }),
+    ),
+  );
+}
+
+function pressModAltEnter(editor: Editor) {
+  return editor.view.someProp("handleKeyDown", (fn) =>
+    fn(
+      editor.view,
+      new KeyboardEvent("keydown", {
+        key: "Enter",
+        code: "Enter",
+        altKey: true,
+        ctrlKey: true,
+      }),
+    ),
+  );
+}
+
+afterEach(() => {
+  while (editors.length > 0) {
+    editors.pop()?.destroy();
+  }
+  document.body.innerHTML = "";
+});
+
+describe("InsertParagraphAround: ArrowUp / ArrowLeft at doc start", () => {
+  it("inserts an empty paragraph before a leading blockquote on ArrowUp", () => {
+    const editor = createEditor("<blockquote><p>hello</p></blockquote>");
+    setCursor(editor, 2); // inside blockquote's <p>, at the very start
+
+    const before = editor.state.doc.childCount;
+    const handled = pressKey(editor, "ArrowUp");
+
+    expect(handled).toBe(true);
+    expect(editor.state.doc.childCount).toBe(before + 1);
+    expect(editor.state.doc.firstChild?.type.name).toBe("paragraph");
+    expect(editor.state.doc.firstChild?.textContent).toBe("");
+    expect(editor.state.doc.child(1).type.name).toBe("blockquote");
+    // Cursor lands in the new leading paragraph.
+    expect(editor.state.selection.$from.parent.type.name).toBe("paragraph");
+    expect(editor.state.selection.$from.pos).toBe(1);
+  });
+
+  it("also fires on ArrowLeft", () => {
+    const editor = createEditor("<blockquote><p>hello</p></blockquote>");
+    setCursor(editor, 2);
+
+    const before = editor.state.doc.childCount;
+    const handled = pressKey(editor, "ArrowLeft");
+
+    expect(handled).toBe(true);
+    expect(editor.state.doc.childCount).toBe(before + 1);
+    expect(editor.state.doc.firstChild?.type.name).toBe("paragraph");
+  });
+
+  it("fires for a leading heading too", () => {
+    const editor = createEditor("<h1>Title</h1><p>body</p>");
+    setCursor(editor, 1); // very start of the <h1>
+
+    const handled = pressKey(editor, "ArrowUp");
+
+    expect(handled).toBe(true);
+    expect(editor.state.doc.firstChild?.type.name).toBe("paragraph");
+    expect(editor.state.doc.firstChild?.textContent).toBe("");
+    expect(editor.state.doc.child(1).type.name).toBe("heading");
+  });
+
+  it("does nothing when the first block is already a paragraph", () => {
+    const editor = createEditor("<p>hi</p><blockquote><p>q</p></blockquote>");
+    setCursor(editor, 1); // start of leading paragraph
+
+    const before = editor.state.doc.childCount;
+    const handled = pressKey(editor, "ArrowUp");
+
+    expect(handled).toBeFalsy();
+    expect(editor.state.doc.childCount).toBe(before);
+    expect(editor.state.doc.firstChild?.textContent).toBe("hi");
+  });
+
+  it("does nothing when the cursor is not at the very first position", () => {
+    const editor = createEditor("<blockquote><p>hello</p></blockquote>");
+    setCursor(editor, 4); // middle of "hello"
+
+    const before = editor.state.doc.childCount;
+    const handled = pressKey(editor, "ArrowUp");
+
+    expect(handled).toBeFalsy();
+    expect(editor.state.doc.childCount).toBe(before);
+  });
+
+  it("does nothing when inside a later blockquote, not the first", () => {
+    const editor = createEditor(
+      "<p>first</p><blockquote><p>second</p></blockquote>",
+    );
+    // doc: p("first") + bq(p("second"))
+    // Positions: 0=before p, 1=start of "first", 7=after p, 8=inside bq,
+    // 9=start of "second" — cursor not at doc start.
+    setCursor(editor, 9);
+
+    const before = editor.state.doc.childCount;
+    const handled = pressKey(editor, "ArrowUp");
+
+    expect(handled).toBeFalsy();
+    expect(editor.state.doc.childCount).toBe(before);
+  });
+});
+
+describe("InsertParagraphAround: Mod-Shift-Enter / Mod-Alt-Enter", () => {
+  it("Mod-Shift-Enter inserts a paragraph before the current top-level block", () => {
+    const editor = createEditor("<blockquote><p>hello</p></blockquote>");
+    setCursor(editor, 4); // middle of "hello"
+
+    const before = editor.state.doc.childCount;
+    const handled = pressModShiftEnter(editor);
+
+    expect(handled).toBe(true);
+    expect(editor.state.doc.childCount).toBe(before + 1);
+    expect(editor.state.doc.firstChild?.type.name).toBe("paragraph");
+    expect(editor.state.doc.firstChild?.textContent).toBe("");
+    expect(editor.state.doc.child(1).type.name).toBe("blockquote");
+    expect(editor.state.doc.child(1).textContent).toBe("hello");
+    expect(editor.state.selection.$from.parent.type.name).toBe("paragraph");
+    expect(editor.state.selection.$from.pos).toBe(1);
+  });
+
+  it("Mod-Alt-Enter inserts a paragraph after the current top-level block", () => {
+    const editor = createEditor("<blockquote><p>hello</p></blockquote>");
+    setCursor(editor, 4);
+
+    const before = editor.state.doc.childCount;
+    const blockquoteSize = editor.state.doc.firstChild!.nodeSize;
+    const handled = pressModAltEnter(editor);
+
+    expect(handled).toBe(true);
+    expect(editor.state.doc.childCount).toBe(before + 1);
+    expect(editor.state.doc.firstChild?.type.name).toBe("blockquote");
+    expect(editor.state.doc.child(1).type.name).toBe("paragraph");
+    expect(editor.state.doc.child(1).textContent).toBe("");
+    // Cursor sits just inside the inserted trailing paragraph.
+    expect(editor.state.selection.$from.parent.type.name).toBe("paragraph");
+    expect(editor.state.selection.$from.pos).toBe(blockquoteSize + 1);
+  });
+
+  it("Mod-Shift-Enter escapes the top-level block from nested content", () => {
+    const editor = createEditor(
+      "<ul><li><p>one</p></li><li><p>two</p></li></ul>",
+    );
+    // Cursor inside the paragraph of the 2nd list item.
+    // Walk to a safe position within the second item's text.
+    const listNode = editor.state.doc.firstChild!;
+    const firstItem = listNode.child(0);
+    const pos = 1 /* into <ul> */ + firstItem.nodeSize + 2; /* into <li><p> */
+    setCursor(editor, pos);
+
+    const before = editor.state.doc.childCount;
+    const handled = pressModShiftEnter(editor);
+
+    expect(handled).toBe(true);
+    expect(editor.state.doc.childCount).toBe(before + 1);
+    expect(editor.state.doc.firstChild?.type.name).toBe("paragraph");
+    expect(editor.state.doc.firstChild?.textContent).toBe("");
+    expect(editor.state.doc.child(1).type.name).toBe("bulletList");
+  });
+});

package/src/client/tiptap/extensions.ts

@@ -16,6 +16,7 @@ import { ExitableMarks } from "./exitable-marks.js";
 import { TabIndent } from "./tab-indent.js";
 import { LinkInputRules } from "./link-input-rules.js";
 import { WrappingInputRules } from "./wrapping-input-rules.js";
+import { InsertParagraphAround } from "./insert-paragraph-around.js";
 import { Footnotes } from "./footnotes.js";
 import type { FormattingToolbarMode } from "./toolbar-mode.js";
 import { ImageNode } from "./image-node.js";
@@ -80,6 +81,7 @@ export function createSettingsEditorExtensions(
     WrappingInputRules,
     MarkdownClipboard,
     ExitableMarks,
+    InsertParagraphAround,
     BubbleMenu.configure({
       toolbarMode: "compose",
     }),
@@ -120,6 +122,7 @@ export function createEditorExtensions(
       toolbarMode: options.toolbarMode ?? "default",
     }),
     ExitableMarks,
+    InsertParagraphAround,
     TabIndent,
   ];
 }