@silurus/ooxml 0.71.0 → 0.72.1

package/README.md

@@ -1,4 +1,4 @@
-> **This entire codebase — Rust parsers, TypeScript renderers, tests, and tooling — was implemented by [Claude](https://claude.ai)** (Anthropic's AI assistant) through iterative prompting. No human-written application code exists in this repository.
+> **This entire codebase — Rust parsers, TypeScript renderers, tests, and tooling — is implemented by AI coding agents, primarily [Claude](https://claude.ai) and [Codex](https://openai.com/codex/)**, through iterative prompting. No human-written application code exists in this repository.
 
 <details>
 <summary><b>Why this project exists — a note from the author</b></summary>
@@ -11,7 +11,7 @@ In practice, it didn't happen. For more than a decade, no free, open-source libr
 
 Generative AI changed that. A viewer is an unusually good fit for AI-driven iterative development ("vibe coding"): there is a spec to read and a correct output to aim for, so the work comes down to interpreting the specification and refining the rendering until it matches. Limiting the scope to viewing also avoids the most serious risk an Office library can carry — corrupting a user's files.
 
-So I'm building this library with Claude, spec-first, and keeping it free to use. For some documents it already reproduces the desktop Office applications more faithfully than commercial libraries — and sometimes even the official Microsoft 365 web apps.
+So I'm building this library with AI coding agents, spec-first, and keeping it free to use. For some documents it already reproduces the desktop Office applications more faithfully than commercial libraries — and sometimes even the official Microsoft 365 web apps.
 
 </details>
 
@@ -229,6 +229,20 @@ a transparent, selectable text layer per page/slide for native copy. In
 worker boundary) and the viewer logs one warning — use the default `mode: 'main'`
 for selectable text.
 
+**Hyperlinks.** For DOCX/PPTX the link hit regions live on the text-selection
+overlay, so hyperlink interaction requires `enableTextSelection: true`; when that
+overlay is enabled, links are interactive by default. XLSX hit-tests cells
+directly, so links are interactive out of the box. An external link opens in a
+new tab (scheme-sanitized to `http` / `https` / `mailto` / `tel`, `noopener`),
+and an internal target navigates within the document (docx bookmark, pptx slide
+jump, xlsx sheet). Pass `onHyperlinkClick(target)` to take over the click
+yourself.
+Pass `enableHyperlinks: false` to disable hyperlink interactivity entirely — no
+hit-testing, no pointer cursor over links, no default navigation, and
+`onHyperlinkClick` is never called; links still render as authored but are inert.
+This applies to every viewer that supports hyperlinks (`DocxViewer`,
+`DocxScrollViewer`, `PptxViewer`, `PptxScrollViewer`, `XlsxViewer`).
+
 **Master–detail / shared engine.** Inject an already-loaded headless engine so a
 paged viewer and a scroll viewer (or several panes) share **one** parse. When you
 inject, `load()` is unsupported (the engine is already loaded), the engine's own
@@ -416,7 +430,7 @@ const current = ref(0);
 const total   = ref(0);
 
 onMounted(async () => {
-  viewer = new PptxViewer(canvas.value!, {
+  viewer = new PptxViewer(canvas.value as HTMLCanvasElement, {
     onSlideChange: (i, t) => { current.value = i; total.value = t; },
   });
   await viewer.load(props.src);

package/THIRD_PARTY_NOTICES.md

@@ -92,15 +92,88 @@ remains entirely MIT / Apache-2.0, with no copyleft licenses:
 cargo license --manifest-path packages/mcp-server/Cargo.toml --avoid-dev-deps
 ```
 
+## Unicode Character Database data
+
+The line-breaking, vertical-orientation and Arabic-shaping logic is driven
+by tables generated from the Unicode Character Database (UCD), © Unicode,
+Inc., licensed under the [Unicode License v3](#unicode-license-v3-full-text)
+(SPDX: `Unicode-3.0`), which expressly permits copying, modification and
+redistribution of the data files with this notice.
+
+Checked into this repository (generator inputs, each retaining its original
+Unicode copyright header; not part of the npm tarball):
+
+- `packages/core/scripts/VerticalOrientation.txt` (UAX #50
+  Vertical_Orientation, UCD 17.0.0)
+- `packages/docx/scripts/ArabicShaping.txt` (Joining_Type / Joining_Group,
+  UCD 17.0.0)
+- `packages/docx/scripts/DerivedJoiningType.txt` (UCD 17.0.0)
+
+Shipped in `dist/` as UCD-derived data compiled from the above and from
+`LineBreak.txt` / `DerivedGeneralCategory.txt` / `EastAsianWidth.txt`
+(fetched at generation time, not checked in): the `*.generated.ts` tables
+under `packages/core/src/text/` and `packages/docx/src/` (line-break
+classes, East Asian width, vertical orientation, bidi character data,
+Arabic joining classes).
+
+The `unicode-ident` Rust crate listed above also carries `Unicode-3.0` in
+its SPDX expression for the same reason (embedded UCD-derived tables).
+
 ## License texts
 
 - **MIT** — see [LICENSE](./LICENSE) (this repository's own license; the
   MIT-licensed dependencies above use the same standard text with their own
   copyright holder).
+- **Unicode License v3** — canonical text at
+  <https://www.unicode.org/license.txt>, reproduced below.
 - **Apache License, Version 2.0** — full text at
   <https://www.apache.org/licenses/LICENSE-2.0>, reproduced below for
   convenience.
 
+### Unicode License v3 (full text)
+
+```
+UNICODE LICENSE V3
+
+COPYRIGHT AND PERMISSION NOTICE
+
+Copyright © 1991-2026 Unicode, Inc.
+
+NOTICE TO USER: Carefully read the following legal agreement. BY
+DOWNLOADING, INSTALLING, COPYING OR OTHERWISE USING DATA FILES, AND/OR
+SOFTWARE, YOU UNEQUIVOCALLY ACCEPT, AND AGREE TO BE BOUND BY, ALL OF THE
+TERMS AND CONDITIONS OF THIS AGREEMENT. IF YOU DO NOT AGREE, DO NOT
+DOWNLOAD, INSTALL, COPY, DISTRIBUTE OR USE THE DATA FILES OR SOFTWARE.
+
+Permission is hereby granted, free of charge, to any person obtaining a
+copy of data files and any associated documentation (the "Data Files") or
+software and any associated documentation (the "Software") to deal in the
+Data Files or Software without restriction, including without limitation
+the rights to use, copy, modify, merge, publish, distribute, and/or sell
+copies of the Data Files or Software, and to permit persons to whom the
+Data Files or Software are furnished to do so, provided that either (a)
+this copyright and permission notice appear with all copies of the Data
+Files or Software, or (b) this copyright and permission notice appear in
+associated Documentation.
+
+THE DATA FILES AND SOFTWARE ARE PROVIDED "AS IS", WITHOUT WARRANTY OF ANY
+KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF
+THIRD PARTY RIGHTS.
+
+IN NO EVENT SHALL THE COPYRIGHT HOLDER OR HOLDERS INCLUDED IN THIS NOTICE
+BE LIABLE FOR ANY CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES,
+OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
+WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION,
+ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THE DATA
+FILES OR SOFTWARE.
+
+Except as contained in this notice, the name of a copyright holder shall
+not be used in advertising or otherwise to promote the sale, use or other
+dealings in these Data Files or Software without prior written
+authorization of the copyright holder.
+```
+
 ### Apache License 2.0 (full text)
 
 ```