@open-press/cli 0.7.1 → 0.8.0

package/template/core/engine/react/mdx-compile.mjs

@@ -112,6 +112,7 @@ export function rehypeBlockIds(options = {}) {
       if (includeBlockIds && !includeBlockIds.has(id)) return false;
 
       setDataAttribute(node, "data-openpress-block-id", id);
+      setDataAttribute(node, "data-openpress-object-id", createBlockObjectEntityId(id));
       const extraAttributes = blockAttributes.get(id);
       if (extraAttributes) {
         for (const [name, value] of Object.entries(extraAttributes)) {
@@ -142,9 +143,19 @@ function applyTableRowBlocks({
   includeBlockIds,
 }) {
   const rows = tableBodyRows(node);
+  const header = tableHeaderRow(node);
+  const caption = tableCaption(node);
+  const captionRecord = caption ? { id: `${id}-caption`, node: caption } : null;
+  const headerRecord = header ? { id: `${id}-h0`, node: header } : null;
+  const selectedCaption = captionRecord && (!includeBlockIds || includeBlockIds.has(captionRecord.id));
+  const selectedHeader = headerRecord && (!includeBlockIds || includeBlockIds.has(headerRecord.id));
+  const firstSelectedRowIndex = selectedFirstTableRowIndex(rows, includeBlockIds, id);
+  const renderCaption = selectedCaption || (captionRecord && includeBlockIds && firstSelectedRowIndex === 0);
+  const renderHeader = Boolean(headerRecord && (!includeBlockIds || firstSelectedRowIndex === 0 || selectedHeader));
   if (rows.length === 0) {
     if (includeBlockIds && !includeBlockIds.has(id)) return false;
     setDataAttribute(node, "data-openpress-block-id", id);
+    setDataAttribute(node, "data-openpress-object-id", createBlockObjectEntityId(id));
     blocks.push({
       id,
       kind: "element",
@@ -165,15 +176,56 @@ function applyTableRowBlocks({
   const selected = includeBlockIds
     ? rowRecords.filter((row) => includeBlockIds.has(row.id))
     : rowRecords;
-  if (selected.length === 0) return false;
+  if (selected.length === 0 && !selectedCaption && !selectedHeader) return false;
 
   setDataAttribute(node, "data-openpress-table-id", id);
+  if (headerRecord && renderHeader) {
+    setDataAttribute(headerRecord.node, "data-openpress-block-id", headerRecord.id);
+    setDataAttribute(headerRecord.node, "data-openpress-object-id", createBlockObjectEntityId(headerRecord.id));
+    setDataAttribute(headerRecord.node, "data-openpress-block-layout", "attached");
+  }
+  if (captionRecord) {
+    if (renderCaption) {
+      setDataAttribute(captionRecord.node, "data-openpress-block-id", captionRecord.id);
+      setDataAttribute(captionRecord.node, "data-openpress-object-id", createBlockObjectEntityId(captionRecord.id));
+      if (selectedCaption) {
+        blocks.push({
+          id: captionRecord.id,
+          kind: "element",
+          name: "caption",
+          text: textContent(captionRecord.node).trim() || undefined,
+          filePath,
+          chapterSlug,
+          tableId: id,
+          layout: "attached",
+          source: sourcePosition(captionRecord.node.position ?? node.position),
+        });
+      }
+    } else {
+      removeTableCaption(node);
+    }
+  }
+  if (headerRecord && selectedHeader) {
+    blocks.push({
+      id: headerRecord.id,
+      kind: "table-row",
+      name: "table-header-row",
+      text: textContent(headerRecord.node).trim() || undefined,
+      filePath,
+      chapterSlug,
+      tableId: id,
+      rowIndex: -1,
+      layout: "attached",
+      source: sourcePosition(headerRecord.node.position ?? node.position),
+    });
+  }
   const selectedNodes = new Set(selected.map((row) => row.node));
   pruneUnselectedTableRows(node, new Set(rowRecords.map((row) => row.node)), selectedNodes);
-  if (selected[0]?.index > 0) stripTableHeader(node);
+  if (!renderHeader) stripTableHeader(node);
 
   for (const row of selected) {
     setDataAttribute(row.node, "data-openpress-block-id", row.id);
+    setDataAttribute(row.node, "data-openpress-object-id", createBlockObjectEntityId(row.id));
     blocks.push({
       id: row.id,
       kind: "table-row",
@@ -229,6 +281,7 @@ function normalizeTableCaptions(node) {
         type: "element",
         tagName: "caption",
         properties: {},
+        position: child.position,
         children: [{ type: "text", value: captionText }],
       });
     }
@@ -272,8 +325,10 @@ function wrapMdxComponents(components) {
     if (typeof Component !== "function") continue;
     wrapped[name] = function ComponentBlock(props = {}) {
       const blockId = props["data-openpress-block-id"];
+      const objectId = props["data-openpress-object-id"] || (blockId ? createBlockObjectEntityId(blockId) : undefined);
       const rest = { ...props };
       delete rest["data-openpress-block-id"];
+      delete rest["data-openpress-object-id"];
 
       if (!blockId) return React.createElement(Component, rest);
 
@@ -281,6 +336,7 @@ function wrapMdxComponents(components) {
         "div",
         {
           "data-openpress-block-id": blockId,
+          "data-openpress-object-id": objectId,
           "data-openpress-component-block": name,
         },
         React.createElement(Component, rest),
@@ -336,6 +392,7 @@ function applyListItemBlocks({
   if (items.length === 0) {
     if (includeBlockIds && !includeBlockIds.has(id)) return false;
     setDataAttribute(node, "data-openpress-block-id", id);
+    setDataAttribute(node, "data-openpress-object-id", createBlockObjectEntityId(id));
     blocks.push({
       id,
       kind: "element",
@@ -375,6 +432,7 @@ function applyListItemBlocks({
 
   for (const item of selected) {
     setDataAttribute(item.node, "data-openpress-block-id", item.id);
+    setDataAttribute(item.node, "data-openpress-object-id", createBlockObjectEntityId(item.id));
     blocks.push({
       id: item.id,
       kind: "list-item",
@@ -419,6 +477,28 @@ function tableBodyRows(table) {
   return (table.children ?? []).filter((child) => child?.type === "element" && child.tagName === "tr");
 }
 
+function tableHeaderRow(table) {
+  if (table?.type !== "element" || table.tagName !== "table") return null;
+  for (const child of table.children ?? []) {
+    if (child?.type !== "element" || child.tagName !== "thead") continue;
+    return (child.children ?? []).find((row) => row?.type === "element" && row.tagName === "tr") ?? null;
+  }
+  return null;
+}
+
+function selectedFirstTableRowIndex(rows, includeBlockIds, tableId) {
+  if (!includeBlockIds) return 0;
+  for (let index = 0; index < rows.length; index += 1) {
+    if (includeBlockIds.has(`${tableId}-r${index}`)) return index;
+  }
+  return -1;
+}
+
+function tableCaption(table) {
+  if (table?.type !== "element" || table.tagName !== "table") return null;
+  return (table.children ?? []).find((child) => child?.type === "element" && child.tagName === "caption") ?? null;
+}
+
 function pruneUnselectedTableRows(node, rowNodes, selectedNodes) {
   if (!Array.isArray(node?.children)) return;
   node.children = node.children.filter((child) => {
@@ -432,10 +512,15 @@ function stripTableHeader(table) {
   if (!Array.isArray(table?.children)) return;
   table.children = table.children.filter((child) => {
     if (child?.type !== "element") return true;
-    return child.tagName !== "caption" && child.tagName !== "thead";
+    return child.tagName !== "thead";
   });
 }
 
+function removeTableCaption(table) {
+  if (!Array.isArray(table?.children)) return;
+  table.children = table.children.filter((child) => child?.type !== "element" || child.tagName !== "caption");
+}
+
 function headingText(node) {
   if (!/^h[1-6]$/.test(String(node?.tagName ?? ""))) return undefined;
   return textContent(node).trim() || undefined;
@@ -470,6 +555,14 @@ function setDataAttribute(node, name, value) {
   node.properties[name] = value;
 }
 
+function createObjectEntityId(kind, ...parts) {
+  return [kind, ...parts.map((part) => encodeURIComponent(String(part)))].join(":");
+}
+
+function createBlockObjectEntityId(blockId) {
+  return createObjectEntityId("mdx-block", blockId);
+}
+
 function visit(node, visitor) {
   visitor(node);
   if (!Array.isArray(node?.children)) return;

package/template/core/engine/react/measurement-css.mjs

@@ -20,7 +20,7 @@ export async function buildReactMeasurementCss(root, config, workspace) {
     parts.push("\n/* === public/openpress/chapter-scoped.css === */\n");
     parts.push(chapterCss);
   }
-  return rewriteAssetUrls(parts.join("\n"), config);
+  return rewriteAssetUrls(stripViewportMediaQueries(parts.join("\n")), config);
 }
 
 async function appendOptionalFile(parts, filePath, label) {
@@ -42,3 +42,95 @@ function rewriteAssetUrls(css, config) {
     .replace(/url\((["'])?\/openpress\/fonts\//g, `url($1${themeFontsDir}`)
     .replace(/url\((["'])?\/openpress\/katex-fonts\//g, `url($1${katexFontsDir}`);
 }
+
+function stripViewportMediaQueries(css) {
+  let output = "";
+  let cursor = 0;
+
+  while (cursor < css.length) {
+    const mediaIndex = css.indexOf("@media", cursor);
+    if (mediaIndex < 0) {
+      output += css.slice(cursor);
+      break;
+    }
+
+    output += css.slice(cursor, mediaIndex);
+    const blockStart = css.indexOf("{", mediaIndex);
+    if (blockStart < 0) {
+      output += css.slice(mediaIndex);
+      break;
+    }
+
+    const prelude = css.slice(mediaIndex + "@media".length, blockStart);
+    const blockEnd = findCssBlockEnd(css, blockStart);
+    if (blockEnd < 0) {
+      output += css.slice(mediaIndex);
+      break;
+    }
+
+    if (!isViewportMediaPrelude(prelude)) {
+      output += css.slice(mediaIndex, blockEnd + 1);
+    }
+    cursor = blockEnd + 1;
+  }
+
+  return output;
+}
+
+function isViewportMediaPrelude(prelude) {
+  if (/\bprint\b/i.test(prelude)) return false;
+  return /\(\s*(?:min-|max-)?(?:device-)?(?:width|height)\s*:/i.test(prelude)
+    || /\(\s*orientation\s*:/i.test(prelude)
+    || /\(\s*(?:min-|max-)?aspect-ratio\s*:/i.test(prelude);
+}
+
+function findCssBlockEnd(css, blockStart) {
+  let depth = 0;
+  let quote = "";
+  let inComment = false;
+
+  for (let index = blockStart; index < css.length; index += 1) {
+    const current = css[index];
+    const next = css[index + 1];
+
+    if (inComment) {
+      if (current === "*" && next === "/") {
+        inComment = false;
+        index += 1;
+      }
+      continue;
+    }
+
+    if (quote) {
+      if (current === "\\") {
+        index += 1;
+        continue;
+      }
+      if (current === quote) quote = "";
+      continue;
+    }
+
+    if (current === "/" && next === "*") {
+      inComment = true;
+      index += 1;
+      continue;
+    }
+
+    if (current === "\"" || current === "'") {
+      quote = current;
+      continue;
+    }
+
+    if (current === "{") {
+      depth += 1;
+      continue;
+    }
+
+    if (current === "}") {
+      depth -= 1;
+      if (depth === 0) return index;
+    }
+  }
+
+  return -1;
+}

package/template/core/engine/react/object-entities.mjs

@@ -0,0 +1,119 @@
+export function createObjectEntityId(kind, ...parts) {
+  return [kind, ...parts.map((part) => encodeURIComponent(String(part)))].join(":");
+}
+
+export function createBlockObjectEntityId(blockId) {
+  return createObjectEntityId("mdx-block", blockId);
+}
+
+export function createPageObjectEntityId(frameKey) {
+  return createObjectEntityId("page", frameKey);
+}
+
+export function createFrameObjectEntityId(frameKey) {
+  return createObjectEntityId("frame", frameKey);
+}
+
+export function createMdxAreaObjectEntityId(frameKey, chainId, indexInFrame) {
+  return createObjectEntityId("mdx-area", frameKey, chainId, indexInFrame);
+}
+
+export function buildObjectEntities({ frames, blocks, blockMap }) {
+  const entities = {};
+  const blockParentIdByBlockId = new Map();
+
+  for (const block of blocks) {
+    const frameKey = block.frameKey ?? block.id;
+    const sourcePath = block.source?.path;
+    const pageId = createPageObjectEntityId(frameKey);
+    const base = {
+      frameKey,
+      pageId,
+      source: sourcePath
+        ? {
+            path: sourcePath,
+            file: block.source?.file,
+            line: 1,
+            column: 1,
+          }
+        : undefined,
+    };
+
+    entities[pageId] = {
+      id: pageId,
+      kind: "page",
+      label: block.title || `Page ${block.pageNumber}`,
+      ...base,
+    };
+
+    const frameId = createFrameObjectEntityId(frameKey);
+    entities[frameId] = {
+      id: frameId,
+      kind: "frame",
+      label: block.role || block.title || frameKey,
+      ...base,
+      parentId: pageId,
+      metadata: { role: block.role ?? null, chrome: block.chrome ?? null },
+    };
+  }
+
+  for (const frame of frames) {
+    const pageId = createPageObjectEntityId(frame.frameKey);
+    const frameId = createFrameObjectEntityId(frame.frameKey);
+    for (const area of frame.mdxAreas ?? []) {
+      const id = createMdxAreaObjectEntityId(frame.frameKey, area.chainId, area.indexInFrame);
+      const firstEditableBlock = (area.blockIds ?? [])
+        .map((blockId) => blockMap[blockId])
+        .find((block) => block?.path);
+      for (const blockId of area.blockIds ?? []) blockParentIdByBlockId.set(blockId, id);
+      entities[id] = {
+        id,
+        kind: "mdx-area",
+        label: `${area.chainId} area ${area.indexInFrame + 1}`,
+        parentId: frameId,
+        pageId,
+        frameKey: frame.frameKey,
+        chainId: area.chainId,
+        source: firstEditableBlock
+          ? {
+              path: firstEditableBlock.path,
+              source: firstEditableBlock.source,
+              line: firstEditableBlock.source?.line,
+              column: firstEditableBlock.source?.column,
+            }
+          : undefined,
+        metadata: { blockCount: area.blockIds?.length ?? 0 },
+      };
+    }
+  }
+
+  for (const block of Object.values(blockMap)) {
+    if (!block?.id) continue;
+    const id = createBlockObjectEntityId(block.id);
+    const pageId = block.frameKey ? createPageObjectEntityId(block.frameKey) : undefined;
+    entities[id] = {
+      id,
+      kind: "mdx-block",
+      label: block.name ? `${block.name} ${block.id}` : block.id,
+      parentId: blockParentIdByBlockId.get(block.id),
+      pageId,
+      blockId: block.id,
+      frameKey: block.frameKey,
+      chainId: block.chainId,
+      source: block.path
+        ? {
+            path: block.path,
+            source: block.source,
+            line: block.source?.line,
+            column: block.source?.column,
+          }
+        : undefined,
+      metadata: {
+        blockKind: block.kind ?? null,
+        componentName: block.kind === "component" ? block.name ?? null : null,
+      },
+    };
+  }
+
+  return entities;
+}

package/template/core/engine/react/pipeline/allocate.mjs

@@ -179,7 +179,8 @@ function greedyAllocate(blocks, regions) {
 
 function shouldKeepWithNext(block, nextBlock) {
   if (!nextBlock) return false;
-  return /^h[1-6]$/.test(String(block?.name ?? ""));
+  const name = String(block?.name ?? "");
+  return /^h[1-6]$/.test(name) || name === "caption";
 }
 
 function recordAllocation(allocation, result, regions) {
@@ -223,12 +224,14 @@ function groupBlockHeights(blockHeights) {
 
 function buildBlockStream(chainSource, heightMap) {
   if (!chainSource || !heightMap) return [];
-  return chainSource.map((block) => ({
-    id: block.id,
-    kind: block.kind,
-    name: block.name,
-    height: heightMap.get(block.id) ?? 0,
-  }));
+  return chainSource
+    .filter((block) => block.layout !== "attached")
+    .map((block) => ({
+      id: block.id,
+      kind: block.kind,
+      name: block.name,
+      height: heightMap.get(block.id) ?? 0,
+    }));
 }
 
 function* iterateChains(sources) {

package/template/core/engine/react/pipeline/frame-measurement.mjs

@@ -221,6 +221,8 @@ async function runChromiumMeasurement(html, viewport) {
         const parentTop = chain.parentElement?.getBoundingClientRect().top ?? chain.getBoundingClientRect().top;
         let previousBottom = parentTop;
         for (const el of Array.from(chain.querySelectorAll("[data-openpress-block-id]"))) {
+          if (el.tagName.toLowerCase() === "caption") continue;
+          if (el.getAttribute("data-openpress-block-layout") === "attached") continue;
           const rect = el.getBoundingClientRect();
           out.push({
             id: el.getAttribute("data-openpress-block-id"),

package/template/core/engine/react/project-asset-endpoint.mjs

@@ -3,8 +3,7 @@ import path from "node:path";
 import { loadConfig } from "../runtime/config.mjs";
 import { collectSourceTextFiles } from "../runtime/source-text-tools.mjs";
 import { insertCommentMarker } from "./comment-marker.mjs";
-
-const MAX_PROJECT_ASSET_BODY_BYTES = 64 * 1024;
+import { readJsonBody, writeJson } from "./http-json.mjs";
 
 export async function handleProjectAssetRequest(req, res, {
   root = ".",
@@ -16,7 +15,7 @@ export async function handleProjectAssetRequest(req, res, {
   }
 
   try {
-    const body = await readJsonBody(req);
+    const body = await readJsonBody(req, { bodyLabel: "Project asset request" });
     const config = await loadConfig(root);
     const action = stringValue(body?.action);
     const kind = stringValue(body?.kind);
@@ -53,6 +52,7 @@ export async function handleProjectAssetRequest(req, res, {
         note: body?.note,
         commentTarget: body?.commentTarget,
         currentSource: body?.currentSource,
+        objectEntity: body?.objectEntity,
         timestamp,
       });
       writeJson(res, 200, { ok: true, ...result });
@@ -133,6 +133,7 @@ async function createProjectAssetComment({
   note,
   commentTarget,
   currentSource,
+  objectEntity,
   timestamp,
 }) {
   const normalizedName = normalizeAssetName(kind, name);
@@ -146,13 +147,14 @@ async function createProjectAssetComment({
     commentTarget: stringValue(commentTarget),
     currentSource,
   });
+  const objectHint = stringValue(objectEntity?.id) ? ` object=${stringValue(objectEntity.id)}` : "";
 
   const result = await insertCommentMarker({
     root: config.root,
     path: target.path,
     source: { line: target.line, column: 1 },
     note: `${assetLabel(kind, normalizedName)}：${noteText}`,
-    hint: `openpress-project-asset kind=${kind} action=comment target=${target.reason} asset=${normalizedName}`,
+    hint: `openpress-project-asset kind=${kind} action=comment target=${target.reason} asset=${normalizedName}${objectHint}`,
     timestamp,
   });
 
@@ -357,23 +359,3 @@ async function fileExists(filePath) {
     return false;
   }
 }
-
-async function readJsonBody(req) {
-  let body = "";
-  for await (const chunk of req) {
-    body += String(chunk);
-    if (Buffer.byteLength(body, "utf8") > MAX_PROJECT_ASSET_BODY_BYTES) {
-      throw new Error("Project asset request body is too large.");
-    }
-  }
-  try {
-    return JSON.parse(body || "{}");
-  } catch {
-    throw new Error("Project asset request body must be valid JSON.");
-  }
-}
-
-function writeJson(res, status, body) {
-  res.writeHead(status, { "Content-Type": "application/json; charset=utf-8" });
-  res.end(`${JSON.stringify(body, null, 2)}\n`);
-}

package/template/core/engine/react/source-edit-endpoint.d.mts

@@ -0,0 +1,10 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+
+export function handleSourceEditRequest(
+  req: IncomingMessage,
+  res: ServerResponse,
+  options?: {
+    root?: string;
+    refreshDocument?: boolean;
+  },
+): Promise<void>;

package/template/core/engine/react/source-edit-endpoint.mjs

@@ -0,0 +1,75 @@
+import { loadConfig } from "../runtime/config.mjs";
+import { applySourceBlockTextEdit, readSourceBlockText } from "../runtime/source-text-tools.mjs";
+import { exportReactDocument } from "./document-export.mjs";
+import { readJsonBody, writeJson } from "./http-json.mjs";
+
+export async function handleSourceEditRequest(req, res, {
+  root = ".",
+  refreshDocument = true,
+} = {}) {
+  if (req.method === "GET") {
+    try {
+      const requestUrl = new URL(req.url ?? "/", "http://localhost");
+      const config = await loadConfig(root);
+      const sourceText = await readSourceBlockText({
+        config,
+        path: requestUrl.searchParams.get("path"),
+        source: {
+          line: Number(requestUrl.searchParams.get("line")),
+          column: Number(requestUrl.searchParams.get("column") || 1),
+          endLine: Number(requestUrl.searchParams.get("endLine") || requestUrl.searchParams.get("line")),
+          endColumn: Number(requestUrl.searchParams.get("endColumn") || requestUrl.searchParams.get("column") || 1),
+        },
+      });
+      writeJson(res, 200, { ok: true, source: sourceText });
+    } catch (error) {
+      writeJson(res, 400, {
+        ok: false,
+        message: error instanceof Error ? error.message : String(error),
+      });
+    }
+    return;
+  }
+
+  if (req.method !== "POST") {
+    writeJson(res, 405, { ok: false, message: "OpenPress source edit endpoint requires GET or POST." });
+    return;
+  }
+
+  try {
+    const body = await readJsonBody(req, {
+      bodyLabel: "OpenPress source edit request",
+      maxBytes: 256 * 1024,
+    });
+    const config = await loadConfig(root);
+    const edit = await applySourceBlockTextEdit({
+      config,
+      path: body?.path,
+      source: body?.source,
+      text: body?.text,
+      kind: body?.kind,
+      name: body?.name,
+      blockId: body?.blockId,
+      sourceMode: body?.sourceMode === true,
+    });
+    const exported = refreshDocument && body?.refreshDocument !== false
+      ? await exportReactDocument(root, { syncAssets: false })
+      : null;
+
+    writeJson(res, 200, {
+      ok: true,
+      edit,
+      document: exported
+        ? {
+          path: exported.documentPath,
+          pageCount: exported.pageCount,
+        }
+        : undefined,
+    });
+  } catch (error) {
+    writeJson(res, 400, {
+      ok: false,
+      message: error instanceof Error ? error.message : String(error),
+    });
+  }
+}

package/template/core/engine/react/sources/mdx-resolver.mjs

@@ -10,6 +10,7 @@
 import fs from "node:fs/promises";
 import path from "node:path";
 import React from "react";
+import { documentRelativePath, resolveDocumentRelativePath } from "../../runtime/path-utils.mjs";
 import { compileMdx } from "../mdx-compile.mjs";
 import { createHeadingState, fallbackOutlineItems, headingAttributesForBlock } from "./heading-numbering.mjs";
 
@@ -103,6 +104,7 @@ async function resolveSource({ sourceId, descriptor, documentRoot, globalCompone
           kind: block.kind,
           name: block.name,
           text: block.text,
+          layout: block.layout,
           chainId,
           sectionSlug: section.slug,
           path: documentRelative(file.absolutePath, documentRoot),
@@ -323,6 +325,7 @@ function compileTocBlocks({ tocBlocks, chainId, blockIds, toc }) {
         {
           className,
           "data-openpress-block-id": block.id,
+          "data-openpress-object-id": createBlockObjectEntityId(block.id),
           "data-openpress-toc-entry": block.sectionSlug,
         },
         React.createElement(
@@ -352,6 +355,14 @@ function locateSection(renderData, chainId) {
   throw new Error(`No section found for chainId "${chainId}" in source "${renderData.sourceId}".`);
 }
 
+function createObjectEntityId(kind, ...parts) {
+  return [kind, ...parts.map((part) => encodeURIComponent(String(part)))].join(":");
+}
+
+function createBlockObjectEntityId(blockId) {
+  return createObjectEntityId("mdx-block", blockId);
+}
+
 // ---------------------------------------------------------------------------
 // Validation
 // ---------------------------------------------------------------------------
@@ -425,17 +436,4 @@ function deriveTitleFromDirName(name) {
     .join(" ");
 }
 
-function documentRelative(absolutePath, documentRoot) {
-  return path.relative(documentRoot, absolutePath).split(path.sep).join("/");
-}
-
-function resolveDocumentRelativePath(documentRoot, rel, label) {
-  if (typeof rel !== "string" || !rel.trim()) throw new Error(`${label} must be a non-empty document-relative path.`);
-  if (rel.includes("..")) throw new Error(`${label} contains "..", rejected.`);
-  const absolutePath = path.resolve(documentRoot, rel);
-  const relCheck = path.relative(documentRoot, absolutePath);
-  if (relCheck.startsWith("..") || path.isAbsolute(relCheck)) {
-    throw new Error(`${label} escapes the document root.`);
-  }
-  return absolutePath;
-}
+const documentRelative = documentRelativePath;

package/template/core/engine/react/style-discovery.mjs

@@ -1,5 +1,6 @@
 import fs from "node:fs/promises";
 import path from "node:path";
+import { documentRelativePath } from "../runtime/path-utils.mjs";
 
 // Style discovery — only used to find per-section CSS files for the
 // section-folders preset. MDX content discovery lives in `sources/mdx-resolver`.
@@ -102,10 +103,6 @@ function pathRecord(absolutePath, documentRoot) {
   };
 }
 
-function documentRelativePath(absolutePath, documentRoot) {
-  return path.relative(documentRoot, absolutePath).split(path.sep).join("/");
-}
-
 function compareSectionDirectories(a, b) {
   const left = sectionSortKey(a.name);
   const right = sectionSortKey(b.name);