@lvce-editor/api 9.36.0 → 9.37.1

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 export { activate } from './parts/Activation/Activation.ts';
 export { getColorThemeNames } from './parts/ColorTheme/ColorTheme.ts';
+export { markdownToVirtualDom } from './parts/Markdown/Markdown.ts';
 export { getAccessToken, type GetAccessTokenOptions } from './parts/Authentication/Authentication.ts';
 export { createElectronWebContentsView } from './parts/ElectronWebContentsView/ElectronWebContentsView.ts';
 export { executeCommand } from './parts/ExecuteCommand/ExecuteCommand.ts';

package/dist/index.js

@@ -1,5 +1,6 @@
 export { activate } from "./parts/Activation/Activation.js";
 export { getColorThemeNames } from "./parts/ColorTheme/ColorTheme.js";
+export { markdownToVirtualDom } from "./parts/Markdown/Markdown.js";
 export { getAccessToken } from "./parts/Authentication/Authentication.js";
 export { createElectronWebContentsView } from "./parts/ElectronWebContentsView/ElectronWebContentsView.js";
 export { executeCommand } from "./parts/ExecuteCommand/ExecuteCommand.js";

package/dist/parts/LanguageProvider/LanguageProvider.d.ts

@@ -26,6 +26,9 @@ export interface DocumentSymbolProvider extends LanguageProvider {
 export declare const executeLanguageProvider: (kind: string, methodName: string, textDocument: {
     readonly languageId: string;
 }, ...args: readonly unknown[]) => Promise<unknown>;
+export declare const executeSourceActionProvider: (textDocument: {
+    readonly languageId: string;
+}, kind: string) => Promise<unknown>;
 export declare const executeOrganizeImportsProvider: (textDocument: {
     readonly languageId: string;
 }) => Promise<unknown>;

package/dist/parts/LanguageProvider/LanguageProvider.js

@@ -45,7 +45,7 @@ export const executeLanguageProvider = async (kind, methodName, textDocument, ..
     }
     return method(textDocument, ...args);
 };
-export const executeOrganizeImportsProvider = async (textDocument) => {
+export const executeSourceActionProvider = async (textDocument, kind) => {
     const provider = getProvider('code action', textDocument.languageId);
     if (!provider) {
         throw new ExtensionApiError(`No code action provider found for ${textDocument.languageId}`);
@@ -55,12 +55,13 @@ export const executeOrganizeImportsProvider = async (textDocument) => {
     if (!Array.isArray(actions)) {
         throw new ExtensionApiError('invalid code action result: code actions must be of type array');
     }
-    const action = actions.find((candidate) => candidate && typeof candidate === 'object' && candidate.kind === 'source.organizeImports');
+    const action = actions.find((candidate) => candidate && typeof candidate === 'object' && candidate.kind === kind);
     if (!action || typeof action.execute !== 'function') {
         return [];
     }
     return action.execute(textDocument);
 };
+export const executeOrganizeImportsProvider = (textDocument) => executeSourceActionProvider(textDocument, 'source.organizeImports');
 export const registerBraceCompletionProvider = (provider) => registerProvider('brace completion', provider, ['provideBraceCompletion']);
 export const registerClosingTagProvider = (provider) => registerProvider('closing tag', provider, ['provideClosingTag']);
 export const registerCodeActionsProvider = (provider) => registerProvider('code action', provider, ['provideCodeActions']);
@@ -76,6 +77,7 @@ export const registerTypeDefinitionProvider = (provider) => registerProvider('ty
 const commandMap = {
     'ExtensionApi.executeLanguageProvider': executeLanguageProvider,
     'ExtensionApi.executeOrganizeImportsProvider': executeOrganizeImportsProvider,
+    'ExtensionApi.executeSourceActionProvider': executeSourceActionProvider,
 };
 export const resetLanguageProviderRegistry = () => {
     for (const kind of Object.keys(providers)) {

package/dist/parts/Markdown/Markdown.d.ts

@@ -0,0 +1,2 @@
+import type { VirtualDomNode } from '@lvce-editor/virtual-dom-worker';
+export declare const markdownToVirtualDom: (markdown: string) => Promise<readonly VirtualDomNode[]>;

package/dist/parts/Markdown/Markdown.js

@@ -0,0 +1,7 @@
+import { RendererWorker } from '@lvce-editor/rpc-registry';
+import { sanitizeMarkdownVirtualDom } from "./SanitizeMarkdownVirtualDom.js";
+export const markdownToVirtualDom = async (markdown) => {
+    const html = await RendererWorker.invoke('Markdown.renderMarkdown', markdown);
+    const nodes = (await RendererWorker.invoke('Markdown.getVirtualDom', html));
+    return sanitizeMarkdownVirtualDom(nodes);
+};

package/dist/parts/Markdown/SanitizeMarkdownVirtualDom.d.ts

@@ -0,0 +1,2 @@
+import type { VirtualDomNode } from '@lvce-editor/virtual-dom-worker';
+export declare const sanitizeMarkdownVirtualDom: (nodes: readonly VirtualDomNode[]) => readonly VirtualDomNode[];

package/dist/parts/Markdown/SanitizeMarkdownVirtualDom.js

@@ -0,0 +1,30 @@
+import { VirtualDomElements } from '@lvce-editor/virtual-dom-worker';
+const allowedHrefProtocols = new Set(['http', 'https', 'mailto', 'tel']);
+const allowedSrcProtocols = new Set(['http', 'https']);
+const protocolPattern = /^([a-z][a-z\d+.-]*):/i;
+const isAllowedUrl = (value, allowedProtocols) => {
+    const normalizedValue = [...value]
+        .filter((character) => {
+        const codePoint = character.codePointAt(0) ?? 0;
+        return codePoint > 32 && codePoint !== 127;
+    })
+        .join('');
+    const protocol = protocolPattern.exec(normalizedValue)?.[1]?.toLowerCase();
+    return !protocol || allowedProtocols.has(protocol);
+};
+export const sanitizeMarkdownVirtualDom = (nodes) => {
+    return nodes.map((node) => {
+        const sanitizedNode = { ...node };
+        if (typeof sanitizedNode.href === 'string' && !isAllowedUrl(sanitizedNode.href, allowedHrefProtocols)) {
+            delete sanitizedNode.href;
+        }
+        if (sanitizedNode.type === VirtualDomElements.A && typeof sanitizedNode.href === 'string') {
+            sanitizedNode.target = '_blank';
+            sanitizedNode.rel = 'noopener noreferrer';
+        }
+        if (typeof sanitizedNode.src === 'string' && !isAllowedUrl(sanitizedNode.src, allowedSrcProtocols)) {
+            delete sanitizedNode.src;
+        }
+        return sanitizedNode;
+    });
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lvce-editor/api",
-  "version": "9.36.0",
+  "version": "9.37.1",
   "description": "Tree-shakeable extension API for Lvce Editor extensions.",
   "keywords": [
     "lvce-editor",