@openleaf-editor/core 0.1.0-beta.1 → 0.1.0-beta.3

package/dist/elements.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"elements.d.ts","sourceRoot":"","sources":["../src/elements.ts"],"names":[],"mappings":"AAAA,cAAc,0CAA0C,CAAA"}

package/dist/elements.js

@@ -0,0 +1,2 @@
+export * from '@openleaf-editor/content-policy/elements';
+//# sourceMappingURL=elements.js.map

package/dist/elements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"elements.js","sourceRoot":"","sources":["../src/elements.ts"],"names":[],"mappings":"AAAA,cAAc,0CAA0C,CAAA"}

package/dist/embed.d.ts

@@ -0,0 +1,2 @@
+export * from '@openleaf-editor/content-policy/embed';
+//# sourceMappingURL=embed.d.ts.map

package/dist/embed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"embed.d.ts","sourceRoot":"","sources":["../src/embed.ts"],"names":[],"mappings":"AAAA,cAAc,uCAAuC,CAAA"}

package/dist/embed.js

@@ -0,0 +1,2 @@
+export * from '@openleaf-editor/content-policy/embed';
+//# sourceMappingURL=embed.js.map

package/dist/embed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embed.js","sourceRoot":"","sources":["../src/embed.ts"],"names":[],"mappings":"AAAA,cAAc,uCAAuC,CAAA"}

package/dist/errors.d.ts

@@ -0,0 +1,38 @@
+/**
+ * The one error type OpenLeaf throws on purpose.
+ *
+ * Before this there were four styles and no way to tell them apart: `parseHtml`
+ * coerced anything to an empty document, `serializeHtml(null)` surfaced a raw
+ * ProseMirror `TypeError` with nothing naming OpenLeaf in it, a bad
+ * `registerEditorPlugin` argument was accepted and failed much later through
+ * `console.error`, and a schema collision threw on some unrelated later call.
+ * A `catch` block could not distinguish "the integrator passed the wrong thing"
+ * from "the library has a bug", so integrators either swallowed everything or
+ * nothing.
+ *
+ * `code` is the stable part. Messages are for people and may be reworded; the
+ * code is what a `catch` should switch on.
+ */
+export type OpenLeafErrorCode = 
+/** A public function was called with a value it cannot accept. */
+'invalid-argument'
+/** Input nests deeper than the recursive DOM walks can survive. */
+ | 'depth-limit'
+/** Two schema extensions define the same node or mark name. */
+ | 'schema-conflict'
+/** No `Document` was available and none was supplied. */
+ | 'no-document';
+export declare class OpenLeafError extends Error {
+    readonly code: OpenLeafErrorCode;
+    constructor(code: OpenLeafErrorCode, message: string, options?: ErrorOptions);
+}
+/**
+ * A duck check rather than `instanceof`.
+ *
+ * Two copies of `@openleaf-editor/core` on one page -- which the plugin bundles
+ * exist to prevent but a mis-pinned install still produces -- have two distinct
+ * `OpenLeafError` classes, and `instanceof` is false across them. The code is
+ * what callers actually branch on, so that is what this checks.
+ */
+export declare function isOpenLeafError(value: unknown, code?: OpenLeafErrorCode): boolean;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,MAAM,iBAAiB;AAC3B,kEAAkE;AAChE,kBAAkB;AACpB,mEAAmE;GACjE,aAAa;AACf,+DAA+D;GAC7D,iBAAiB;AACnB,yDAAyD;GACvD,aAAa,CAAA;AAEjB,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;gBAEpB,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAQ7E;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAGjF"}

package/dist/errors.js

@@ -0,0 +1,40 @@
+/**
+ * The one error type OpenLeaf throws on purpose.
+ *
+ * Before this there were four styles and no way to tell them apart: `parseHtml`
+ * coerced anything to an empty document, `serializeHtml(null)` surfaced a raw
+ * ProseMirror `TypeError` with nothing naming OpenLeaf in it, a bad
+ * `registerEditorPlugin` argument was accepted and failed much later through
+ * `console.error`, and a schema collision threw on some unrelated later call.
+ * A `catch` block could not distinguish "the integrator passed the wrong thing"
+ * from "the library has a bug", so integrators either swallowed everything or
+ * nothing.
+ *
+ * `code` is the stable part. Messages are for people and may be reworded; the
+ * code is what a `catch` should switch on.
+ */
+export class OpenLeafError extends Error {
+    code;
+    constructor(code, message, options) {
+        super(message, options);
+        this.code = code;
+        // Set explicitly rather than via a class field: a field would be an own
+        // property on every instance, and `name` is conventionally read off the
+        // prototype chain by anything formatting an error.
+        this.name = 'OpenLeafError';
+    }
+}
+/**
+ * A duck check rather than `instanceof`.
+ *
+ * Two copies of `@openleaf-editor/core` on one page -- which the plugin bundles
+ * exist to prevent but a mis-pinned install still produces -- have two distinct
+ * `OpenLeafError` classes, and `instanceof` is false across them. The code is
+ * what callers actually branch on, so that is what this checks.
+ */
+export function isOpenLeafError(value, code) {
+    if (!(value instanceof Error) || value.name !== 'OpenLeafError')
+        return false;
+    return code === undefined || value.code === code;
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAYH,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,IAAI,CAAmB;IAEhC,YAAY,IAAuB,EAAE,OAAe,EAAE,OAAsB;QAC1E,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,wEAAwE;QACxE,wEAAwE;QACxE,mDAAmD;QACnD,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;IAC7B,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,IAAwB;IACtE,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,KAAK,CAAA;IAC7E,OAAO,IAAI,KAAK,SAAS,IAAK,KAAuB,CAAC,IAAI,KAAK,IAAI,CAAA;AACrE,CAAC"}

package/dist/extensions.d.ts

@@ -51,15 +51,28 @@ export interface SchemaExtension {
     /**
      * Re-emit attributes the spec does not model. Defaults to true.
      *
-     * Adding a node type strictly *reduces* fidelity for the tag it claims: before
-     * the node existed, the preservation layer kept the element and every
-     * attribute on it; afterwards the spec keeps only what it declares. A callout
-     * node modelling `class` silently drops `id` and `data-analytics` that used to
-     * survive.
+     * Adding a node or mark type strictly *reduces* fidelity for the tag it
+     * claims: before the type existed, the preservation layer kept the element
+     * and every attribute on it; afterwards the spec keeps only what it declares.
+     * A callout node modelling `class` silently drops `id` and `data-analytics`
+     * that used to survive, and a `strong` mark used to drop `class` the same way.
      *
      * So unmodelled attributes are captured on parse and merged back on
      * serialize, by default, at schema-build time -- which means an author cannot
      * opt out by forgetting.
+     *
+     * ## Setting this to `false` is security-relevant
+     *
+     * The capture is also where `on*` handlers and unsafe URL schemes are
+     * filtered out of the residue -- see `withCarriedAttributes` below. Turning
+     * the carry off skips the wrapper entirely, and with it that filter, so a
+     * spec's own `getAttrs` becomes the only thing standing between pasted
+     * `onclick` and the stored document.
+     *
+     * It exists for specs that already model every attribute they claim, where
+     * carrying would emit the same value twice. It is not a performance knob, and
+     * a plugin that sets it is making a decision `SECURITY.md` documents under
+     * "Plugin trust model". If you set it, your `getAttrs` owns the scrub.
      */
     readonly carryUnknownAttributes?: boolean;
 }
@@ -86,6 +99,34 @@ export declare function createSchema(list?: readonly SchemaExtension[]): Schema;
  * "bind to this" and would be captured at import by every consumer, which is
  * exactly what made the schema impossible to extend. Memoized, and invalidated
  * whenever the registry changes.
+ *
+ * ## Why the subscription is in here and not at module scope
+ *
+ * This package declares `"sideEffects": false`, which is a literal promise that
+ * evaluating a module for its own sake changes nothing observable. The bare
+ * top-level `onSchemaExtensionsChange(() => { cached = null })` that used to sit
+ * below this function broke that promise: it mutates the listener set in the
+ * registry above, which is observable by anything that calls `notify()`.
+ *
+ * What it did *not* do, measured rather than assumed, is actually get dropped.
+ * Both rollup 4 (`treeshake.moduleSideEffects: false`) and webpack 5
+ * (`optimization.sideEffects`) keep the statement, because the arrow function
+ * writes `cached` and `cached` is read by this function -- so the tree-shaker
+ * can see the statement contributes to a live export and retains it. A probe
+ * that warms the memo, registers an extension and re-reads the schema returns
+ * the plugin's node type under both bundlers, before and after this change.
+ *
+ * It is moved anyway, because the retention depended entirely on that linkage
+ * being visible. It is not a property of the invalidator; it is a property of
+ * this particular pair of statements, and it would quietly stop holding the
+ * moment the memo is refactored -- at which point the failure is silent and
+ * total, since `coreSchema()` would keep handing back a schema built before the
+ * first `registerSchemaExtension` call. Registering on the first call costs a
+ * boolean and makes the flag true instead of true-by-luck.
+ *
+ * There is no window in which the invalidator is missing: the subscription is
+ * installed before the value it guards ever exists, and nothing can reach the
+ * memo except through here.
  */
 export declare function coreSchema(): Schema;
 //# sourceMappingURL=extensions.d.ts.map

package/dist/extensions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extensions.d.ts","sourceRoot":"","sources":["../src/extensions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAGH,OAAO,EACL,MAAM,EAEN,KAAK,QAAQ,EACb,KAAK,QAAQ,EAGd,MAAM,mBAAmB,CAAA;AAU1B,MAAM,WAAW,eAAe;IAC9B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;IACnD,iCAAiC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;IACnD,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAA;CAC1C;AAED,gFAAgF;AAChF,eAAO,MAAM,YAAY,sBAAsB,CAAA;AAmB/C;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,IAAI,CAe9E;AAED,wBAAgB,0BAA0B,IAAI,SAAS,eAAe,EAAE,CAEvE;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAKzE;AAED,gDAAgD;AAChD,wBAAgB,qBAAqB,IAAI,IAAI,CAG5C;AAwPD,wBAAgB,YAAY,CAAC,IAAI,GAAE,SAAS,eAAe,EAAO,GAAG,MAAM,CAyB1E;AAID;;;;;;;GAOG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAGnC"}
+{"version":3,"file":"extensions.d.ts","sourceRoot":"","sources":["../src/extensions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAGH,OAAO,EAEL,MAAM,EAEN,KAAK,QAAQ,EACb,KAAK,QAAQ,EAGd,MAAM,mBAAmB,CAAA;AAqB1B,MAAM,WAAW,eAAe;IAC9B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;IACnD,iCAAiC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;IACnD,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAA;CAC1C;AAED,gFAAgF;AAChF,eAAO,MAAM,YAAY,sBAAsB,CAAA;AAmB/C;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,IAAI,CAoB9E;AAED,wBAAgB,0BAA0B,IAAI,SAAS,eAAe,EAAE,CAEvE;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAKzE;AAED,gDAAgD;AAChD,wBAAgB,qBAAqB,IAAI,IAAI,CAG5C;AAmdD,wBAAgB,YAAY,CAAC,IAAI,GAAE,SAAS,eAAe,EAAO,GAAG,MAAM,CA4B1E;AAKD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAgB,UAAU,IAAI,MAAM,CASnC"}