@stll/folio-core 0.26.0 → 0.27.1

package/dist/docx/server/extractDocxText.js

@@ -103,16 +103,26 @@ const NESTED_TABLE_CELL_SEPARATOR = " / ";
 const MAX_TABLE_COLUMNS = 256;
 /** Bound the mutual recursion between a cell and the tables nested inside it. */
 const MAX_NESTED_TABLE_DEPTH = 8;
+/** Rows collected from one `w:tbl`. The column cap alone leaves row count unbounded. */
+const MAX_TABLE_ROWS = 8192;
+/**
+* Characters one extraction emits, shared by the body and every header/footer
+* part. Element count is bounded at unzip, but a bounded element count still
+* renders an unbounded number of table rows once `w:gridSpan` padding and the
+* GFM scaffolding are counted, so the emitted side carries its own ceiling.
+*/
+const MAX_EXTRACTED_CHARS = 8e6;
 /**
 * Collect a table's `w:tr`, or a row's `w:tc`, seeing through the wrappers Word
 * puts around them (`w:sdt` / `w:sdtContent` content controls, `w:customXml`).
 * The walk stops at `w:tbl` and `w:p` so a nested table's rows and cells never
 * leak into the grid of the table that contains them.
 */
-const collectTableParts = (parent, localName) => {
+const collectTableParts = (parent, localName, limit) => {
 	const parts = [];
 	const walk = (node) => {
 		for (const child of childElements(node)) {
+			if (parts.length >= limit) return;
 			const childName = wordElementName(child);
 			if (childName === localName) {
 				parts.push(child);
@@ -142,7 +152,7 @@ const readCellSourceParagraphs = (cell, depth) => {
 			}
 			if (childName === "tbl") {
 				if (depth >= MAX_NESTED_TABLE_DEPTH) continue;
-				for (const row of collectTableParts(child, "tr")) for (const nestedCell of collectTableParts(row, "tc")) for (const paragraph of readCellSourceParagraphs(nestedCell, depth + 1)) paragraphs.push(paragraph);
+				for (const row of collectTableParts(child, "tr", MAX_TABLE_ROWS)) for (const nestedCell of collectTableParts(row, "tc", MAX_TABLE_COLUMNS)) for (const paragraph of readCellSourceParagraphs(nestedCell, depth + 1)) paragraphs.push(paragraph);
 				continue;
 			}
 			walk(child);
@@ -173,8 +183,8 @@ const readCellRenderedLines = (cell, depth) => {
 };
 const flattenNestedTable = (table, depth) => {
 	const lines = [];
-	for (const row of collectTableParts(table, "tr")) {
-		const cells = collectTableParts(row, "tc").map((cell) => readCellRenderedLines(cell, depth).join("\n"));
+	for (const row of collectTableParts(table, "tr", MAX_TABLE_ROWS)) {
+		const cells = collectTableParts(row, "tc", MAX_TABLE_COLUMNS).map((cell) => readCellRenderedLines(cell, depth).join("\n"));
 		if (cells.some((text) => text.length > 0)) lines.push(cells.join(NESTED_TABLE_CELL_SEPARATOR));
 	}
 	return lines;
@@ -229,12 +239,12 @@ const readTableGrid = (table) => {
 	const rows = [];
 	let columnCount = 0;
 	let firstRowIsHeader = false;
-	for (const [rowIndex, row] of collectTableParts(table, "tr").entries()) {
+	for (const [rowIndex, row] of collectTableParts(table, "tr", MAX_TABLE_ROWS).entries()) {
 		if (rowIndex === 0) firstRowIsHeader = declaresHeaderRow(row);
 		const columns = [];
 		const gridBefore = readRowGridOffset(row, "gridBefore");
 		for (let index = 0; index < gridBefore; index += 1) columns.push(emptyTableCell());
-		for (const cell of collectTableParts(row, "tc")) {
+		for (const cell of collectTableParts(row, "tc", MAX_TABLE_COLUMNS)) {
 			if (columns.length >= MAX_TABLE_COLUMNS) break;
 			const extractedCell = readTableCell(cell, 0);
 			columns.push(extractedCell);
@@ -293,7 +303,8 @@ const renderTableRows = (table, tableIndex) => {
 	for (const row of firstRowIsHeader ? remainingRows : rows) pushCells(row);
 	return rendered;
 };
-const extractContainer = ({ container, source, startIndex, startTableIndex }) => {
+const createCharBudget = () => ({ remaining: MAX_EXTRACTED_CHARS });
+const extractContainer = ({ container, source, startIndex, startTableIndex, budget }) => {
 	const paragraphs = [];
 	let charCount = 0;
 	let tableCount = 0;
@@ -307,6 +318,7 @@ const extractContainer = ({ container, source, startIndex, startTableIndex }) =>
 		};
 		paragraphs.push(entry);
 		charCount += text.length;
+		budget.remaining -= text.length;
 	};
 	const pushTableRow = ({ text, position }) => {
 		paragraphs.push({
@@ -316,6 +328,7 @@ const extractContainer = ({ container, source, startIndex, startTableIndex }) =>
 			tableRow: position
 		});
 		charCount += text.length;
+		budget.remaining -= text.length;
 	};
 	/**
 	* Walk block content in document order. Descent mirrors the previous
@@ -325,6 +338,7 @@ const extractContainer = ({ container, source, startIndex, startTableIndex }) =>
 	*/
 	const walkBlocks = (node) => {
 		for (const child of childElements(node)) {
+			if (budget.remaining <= 0) return;
 			const childName = wordElementName(child);
 			if (childName === "tbl") {
 				for (const row of renderTableRows(child, startTableIndex + tableCount)) pushTableRow(row);
@@ -342,7 +356,7 @@ const extractContainer = ({ container, source, startIndex, startTableIndex }) =>
 		tableCount
 	};
 };
-const extractParts = async ({ archive, source, rootName, startIndex, startTableIndex, paths }) => {
+const extractParts = async ({ archive, source, rootName, startIndex, startTableIndex, paths, budget }) => {
 	const paragraphs = [];
 	let charCount = 0;
 	let tableCount = 0;
@@ -356,7 +370,8 @@ const extractParts = async ({ archive, source, rootName, startIndex, startTableI
 			container,
 			source,
 			startIndex: nextIndex,
-			startTableIndex: startTableIndex + tableCount
+			startTableIndex: startTableIndex + tableCount,
+			budget
 		});
 		for (const paragraph of result.paragraphs) paragraphs.push(paragraph);
 		charCount += result.charCount;
@@ -427,19 +442,22 @@ const extractDocxText = async (bytes) => {
 	const body = findDeep(root, "w", "body");
 	if (!body) return createEmptyResult();
 	const referencedParts = await resolveReferencedHeaderFooterParts(archive, root);
+	const budget = createCharBudget();
 	const headers = await extractParts({
 		archive,
 		source: "header",
 		rootName: "hdr",
 		startIndex: 0,
 		startTableIndex: 0,
-		paths: referencedParts.headers
+		paths: referencedParts.headers,
+		budget
 	});
 	const bodyResult = extractContainer({
 		container: body,
 		source: "body",
 		startIndex: headers.paragraphs.length,
-		startTableIndex: headers.tableCount
+		startTableIndex: headers.tableCount,
+		budget
 	});
 	const footers = await extractParts({
 		archive,
@@ -447,7 +465,8 @@ const extractDocxText = async (bytes) => {
 		rootName: "ftr",
 		startIndex: headers.paragraphs.length + bodyResult.paragraphs.length,
 		startTableIndex: headers.tableCount + bodyResult.tableCount,
-		paths: referencedParts.footers
+		paths: referencedParts.footers,
+		budget
 	});
 	return {
 		paragraphs: [

package/dist/docx/styleParser.js

@@ -1,3 +1,4 @@
+import { isValidHexColor } from "../utils/colorResolver.js";
 import { mergeParagraphFormatting } from "../utils/paragraphFormattingMerge.js";
 import { mergeTextFormatting } from "../utils/textFormattingMerge.js";
 import { BorderStyleSchema, ConditionalStyleTypeSchema, EmphasisMarkSchema, FontHintSchema, FontThemeSchema, HighlightColorSchema, LineSpacingRuleSchema, ParagraphAlignmentSchema, ShadingPatternSchema, StyleTypeSchema, TabLeaderSchema, TabStopAlignmentSchema, TableCellTextDirectionSchema, TableRowHeightRuleSchema, TableWidthTypeSchema, TextEffectSchema, ThemeColorSlotSchema, UnderlineStyleSchema, narrowEnum } from "./parserEnums.js";
@@ -86,7 +87,7 @@ function parseRunProperties(rPr, theme) {
 				if (resolved) fontFamily.ascii = resolved;
 			}
 		}
-		const hAnsiTheme = getAttribute(rFonts, "w", "hAnsiTheme");
+		const hAnsiTheme = narrowEnum(getAttribute(rFonts, "w", "hAnsiTheme"), FontThemeSchema);
 		if (hAnsiTheme) {
 			fontFamily.hAnsiTheme = hAnsiTheme;
 			if (theme && !fontFamily.hAnsi) {
@@ -94,7 +95,7 @@ function parseRunProperties(rPr, theme) {
 				if (resolved) fontFamily.hAnsi = resolved;
 			}
 		}
-		const eastAsiaTheme = getAttribute(rFonts, "w", "eastAsiaTheme");
+		const eastAsiaTheme = narrowEnum(getAttribute(rFonts, "w", "eastAsiaTheme"), FontThemeSchema);
 		if (eastAsiaTheme) {
 			fontFamily.eastAsiaTheme = eastAsiaTheme;
 			if (theme && !fontFamily.eastAsia) {
@@ -102,7 +103,7 @@ function parseRunProperties(rPr, theme) {
 				if (resolved) fontFamily.eastAsia = resolved;
 			}
 		}
-		const csTheme = getAttribute(rFonts, "w", "cstheme");
+		const csTheme = narrowEnum(getAttribute(rFonts, "w", "cstheme"), FontThemeSchema);
 		if (csTheme) {
 			fontFamily.csTheme = csTheme;
 			if (theme && !fontFamily.cs) {
@@ -192,9 +193,9 @@ function parseShadingProperties(shd) {
 	if (!shd) return;
 	const props = {};
 	const color = getAttribute(shd, "w", "color");
-	if (color && color !== "auto") props.color = { rgb: color };
+	if (color && color !== "auto" && isValidHexColor(color)) props.color = { rgb: color };
 	const fill = getAttribute(shd, "w", "fill");
-	if (fill && fill !== "auto") props.fill = { rgb: fill };
+	if (fill && fill !== "auto" && isValidHexColor(fill)) props.fill = { rgb: fill };
 	const validatedThemeFill = narrowEnum(getAttribute(shd, "w", "themeFill"), ThemeColorSlotSchema);
 	if (validatedThemeFill) {
 		if (!props.fill) props.fill = {};

package/dist/docx/unzip.js

@@ -1,6 +1,6 @@
 import { DOCX_CONTAINER_TYPES, detectDocxContainerType } from "./encryption/containerFormat.js";
 import { openDocxBuffer } from "./encryption/openEncryptedDocx.js";
-import { FOLIO_XML_RESOURCE_LIMITS } from "./xmlResourceLimits.js";
+import { FOLIO_XML_RESOURCE_LIMITS, assertXmlResourceLimits } from "./xmlResourceLimits.js";
 import JSZip from "jszip";
 //#region src/docx/unzip.ts
 /**
@@ -191,7 +191,7 @@ async function unzipDocx(buffer, options = {}) {
 	for (const extracted of await Promise.all(extractionTasks.map((extract) => extract()))) {
 		if (!extracted) continue;
 		if (extracted.type === "xml") {
-			assignXmlContent(content, extracted);
+			assignXmlContent(content, extracted, limits);
 			continue;
 		}
 		if (extracted.type === "media") {
@@ -202,7 +202,21 @@ async function unzipDocx(buffer, options = {}) {
 	}
 	return content;
 }
-function assignXmlContent(content, { path, lowerPath, content: xmlContent }) {
+/**
+* Parts that every consumer expands into an object tree. Preflighting them once
+* here puts the bound on the unzip, so `parseDocx`, the selective save and the
+* repack path all share it instead of each entry point carrying its own.
+*/
+const PREFLIGHT_XML_PARTS = /* @__PURE__ */ new Set([
+	"word/document.xml",
+	"word/styles.xml",
+	"word/numbering.xml"
+]);
+function assignXmlContent(content, { path, lowerPath, content: xmlContent }, limits) {
+	if (PREFLIGHT_XML_PARTS.has(lowerPath)) assertXmlResourceLimits(xmlContent, {
+		...FOLIO_XML_RESOURCE_LIMITS,
+		maxBytes: limits.maxXmlBytes
+	});
 	content.allXml.set(path, xmlContent);
 	if (lowerPath === "word/document.xml") content.documentXml = xmlContent;
 	else if (lowerPath === "word/styles.xml") content.stylesXml = xmlContent;

package/dist/docx/xmlParser.js

@@ -610,6 +610,24 @@ function findAllDeep(root, namespace, localName) {
 */
 const MAX_XMLNS_DECLARATIONS_PER_ELEMENT = 64;
 /**
+* Sanity cap on one declaration's value. Namespace URIs are short; a longer
+* binding is dropped rather than replayed onto every captured subtree that
+* inherits from the declaring element.
+*/
+const MAX_XMLNS_VALUE_LENGTH = 512;
+/**
+* Sanity cap on an accumulated declaration set. Applied both when collecting one
+* element's declarations and when merging down the ancestor chain, so every set
+* this module produces or returns is bounded and a captured `w:pict` subtree
+* replays at most this much regardless of how the chain was built.
+*/
+const MAX_XMLNS_DECLARATION_CHARS = 8192;
+const xmlnsDeclarationChars = (declarations) => {
+	let chars = 0;
+	for (const [name, value] of Object.entries(declarations)) chars += name.length + value.length;
+	return chars;
+};
+/**
 * Collect every `xmlns` / `xmlns:*` declaration from an element's attributes.
 *
 * The serializer's hard-coded root namespaces only cover canonical prefixes
@@ -623,13 +641,18 @@ function collectXmlnsDeclarations(element) {
 	const attrs = element.attributes;
 	if (!attrs) return out;
 	let declarationCount = 0;
+	let declarationChars = 0;
 	for (const key in attrs) {
 		if (declarationCount >= MAX_XMLNS_DECLARATIONS_PER_ELEMENT) break;
 		const value = attrs[key];
-		if ((key === "xmlns" || key.startsWith("xmlns:")) && value !== void 0) {
-			out[key] = String(value);
-			declarationCount += 1;
-		}
+		if (key !== "xmlns" && !key.startsWith("xmlns:")) continue;
+		if (value === void 0) continue;
+		const declaration = String(value);
+		if (declaration.length > MAX_XMLNS_VALUE_LENGTH) continue;
+		if (declarationChars + key.length + declaration.length > MAX_XMLNS_DECLARATION_CHARS) break;
+		out[key] = declaration;
+		declarationCount += 1;
+		declarationChars += key.length + declaration.length;
 	}
 	return out;
 }
@@ -643,10 +666,13 @@ function collectXmlnsDeclarations(element) {
 */
 function mergeXmlnsDeclarations(inherited, element) {
 	const own = collectXmlnsDeclarations(element);
-	for (const _key in own) return {
-		...inherited,
-		...own
-	};
+	for (const _key in own) {
+		const merged = {
+			...inherited,
+			...own
+		};
+		return xmlnsDeclarationChars(merged) > MAX_XMLNS_DECLARATION_CHARS ? inherited : merged;
+	}
 	return inherited;
 }
 const QNAME_VALUE_ATTRIBUTES = /* @__PURE__ */ new Set([

package/dist/index.d.ts

@@ -17,6 +17,7 @@ import { DocumentStyleCatalog, DocumentStyleCatalogEntry, ExtractDocumentStyleSe
 import { STELLA_STYLE_SET_NAME, createStellaStyleDocumentPreset, createStellaStyleSet } from "./style-sets/stellaStyle.js";
 import { createDocx } from "./docx/rezip.js";
 import { DocxCompatibility, DocxCompatibilityContext, DocxCompatibilityIssue, DocxCompatibilityLocation, DocxCompatibilityPart, FolioDocxCompatibilityHost, FolioDocxCompatibilityProfile, InspectDocxCompatibilityOptions, inspectDocxCompatibility } from "./docx/compatibility.js";
+import { BlockRect } from "./paged-layout/blockGeometry.js";
 import { setAISuggestionsMeta, setFocusedSuggestionMeta } from "./prosemirror/plugins/aiSuggestionDecorations.js";
 import { scrollFolioPositionIntoView } from "./paged-layout/scrollToPmPosition.js";
 import { getFolioCaretViewportRect, getFolioSelectionViewportRect } from "./paged-layout/selectionViewportRect.js";
@@ -34,4 +35,4 @@ import { getGoogleFontsEnabled, setEmbeddedFontFamilyMap, setGoogleFontsEnabled
 import { DOCX_CONFORMANCE_CLASSES } from "@stll/docx-core/model";
 type Document = document_d_exports.Document;
 type DocxConformanceClass = document_d_exports.DocxConformanceClass;
-export { type AIBarStatus, type AIChatMode, type AICitation, type AICitationRange, type AICitationSource, type AIGenerateInput, type AISuggestion, type AISuggestionApplyMode, type AISuggestionPreset, type AISuggestionSeverity, type AISuggestionStatus, type AcceptAutocompleteResult, type AnonymizationMatch, type AnonymizationTerm, type ApplyFolioDocumentOperationsOptions, type ApplyResult, type AutocompleteSuggestionPluginOptions, type AutocompleteSuggestionState, type AutocompleteSuggestionStatus, type AutocompleteTriggerCheck, type AutocompleteTriggerOptions, type AutocompleteTriggerSkipReason, type CreateEmptyDocumentOptions, DEFAULT_AI_SUGGESTION_PRESETS, DEFAULT_AUTOCOMPLETE_DEAD_ZONE_NODES, DOCUMENT_PRESET_VERSION, DOCUMENT_STYLE_SET_VERSION, DOCX_CONFORMANCE_CLASSES, type DeriveBlockIdInput, type DirectiveKind, type DirectiveRange, type Document, type DocumentPreset, type DocumentStyleCatalog, type DocumentStyleCatalogEntry, type DocumentStyleSet, type DocxCompatibility, type DocxCompatibilityContext, type DocxCompatibilityIssue, type DocxCompatibilityLocation, type DocxCompatibilityPart, type DocxConformanceClass, type EmbeddedFont, type EmbeddedFontParts, type ExtractDocumentStyleSetOptions, FOLIO_DOCUMENT_OPERATION_BATCH_MODES, FOLIO_DOCUMENT_OPERATION_CONTRACT_VERSION, FOLIO_DOCUMENT_OPERATION_MODES, FOLIO_DOCUMENT_OPERATION_MODES_BY_TYPE, FOLIO_DOCUMENT_OPERATION_PRECONDITIONS, FOLIO_DOCUMENT_OPERATION_STORIES, FOLIO_DOCUMENT_OPERATION_TYPES, type FolioAIBlock, type FolioAIBlockAnchor, type FolioAIBlockKind, type FolioAIBlockPreviewRun, type FolioAIComment, type FolioAIEditAppliedOperation, type FolioAIEditApplyMode, type FolioAIEditApplyResult, type FolioAIEditOperation, type FolioAIEditPrecondition, type FolioAIEditReviewMeta, type FolioAIEditSeverity, type FolioAIEditSkipReason, type FolioAIEditSkippedOperation, type FolioAIEditSnapshot, type FolioAISignatureParty, type FolioBlockId, type FolioDocumentOperation, type FolioDocumentOperationAffectedTarget, type FolioDocumentOperationBatch, type FolioDocumentOperationCapabilities, type FolioDocumentOperationIssue, type FolioDocumentOperationMode, type FolioDocumentOperationPrecondition, type FolioDocumentOperationReceipt, type FolioDocumentOperationRecovery, type FolioDocumentOperationResult, type FolioDocumentOperationStatus, type FolioDocumentOperationStory, type FolioDocumentOperationType, type FolioDocumentOperationUndoFailureReason, type FolioDocumentOperationUndoHandle, type FolioDocumentOperationUndoResult, type FolioDocxCompatibilityHost, type FolioDocxCompatibilityProfile, type ImageMeta, type ImageRef, type InspectDocxCompatibilityOptions, InvalidFolioDocumentOperationBatchError, type MarkdownOptions, type MarkdownResult, type PositionalText, type ResolvedAnchor, STELLA_STYLE_SET_NAME, type TemplatePreviewSpan, type TemplatePreviewValue, type TemplatePreviewValues, type TemplateSlashMenuKeyAction, type TemplateSlashMenuState, UnsupportedFolioDocumentOperationVersionError, type WordDiffSegment, acceptAutocompleteSuggestion, acceptAutocompleteWord, anonymizationDecorationsKey, appendAutocompleteToken, applyFolioAIEditOperations, applyFolioDocumentOperations, applySuggestions, assertSupportedFolioDocumentOperationVersion, autocompleteSuggestionKey, autocompleteSuggestionPlugin, buildEmbeddedFontFamilyMap, buildPositionalText, clearAutocompleteSuggestion, clearTemplateSlashMenu, consumeTemplateSlashQuery, createAICitationDecorationsPlugin, createDocx, createEmptyDocument, createFolioAIEditSnapshot, createStellaStyleDocumentPreset, createStellaStyleSet, deriveBlockId, diffWordSegments, extractDocumentStyleSet, extractDocumentStyleSetFromDocx, extractEmbeddedFonts, finishAutocompleteSuggestion, fromMarkdown, getAnonymizationMatches, getAutocompleteSuggestion, getEmbeddedFontFaces, getFolioCaretViewportRect, getFolioDocumentOperationCapabilities, getFolioDocumentOperationIssues, getFolioDocumentOperationReceipts, getFolioParaIdFromBlockId, getFolioSelectionViewportRect, getGoogleFontsEnabled, getTemplateDirectives, getTemplateSlashMenu, hashFolioAIBlockText, inspectDocumentStyles, inspectDocumentStylesFromDocx, inspectDocxCompatibility, isFolioBlockId, isFolioDocumentOperationModeSupported, isSequentialFolioBlockId, isSuggestionStale, isSupportedFolioDocumentOperationVersion, mergeDocumentContent, normalizeFolioAIBlockText, parseFolioDocumentOperationBatch, resetTemplateSlashQuery, resolveSuggestionAnchor, scanDirectives, scopeEmbeddedFontFamily, scrollFolioPositionIntoView, setAICitationsMeta, setAISuggestionsMeta, setActiveCitationMeta, setAnonymizationTermsMeta, setEmbeddedFontFamilyMap, setFocusedSuggestionMeta, setGoogleFontsEnabled, setTemplatePreviewValues, shouldTriggerAutocomplete, startAutocompleteSuggestion, templateSlashMenuKey, toMarkdown, toMarkdownResult };
+export { type AIBarStatus, type AIChatMode, type AICitation, type AICitationRange, type AICitationSource, type AIGenerateInput, type AISuggestion, type AISuggestionApplyMode, type AISuggestionPreset, type AISuggestionSeverity, type AISuggestionStatus, type AcceptAutocompleteResult, type AnonymizationMatch, type AnonymizationTerm, type ApplyFolioDocumentOperationsOptions, type ApplyResult, type AutocompleteSuggestionPluginOptions, type AutocompleteSuggestionState, type AutocompleteSuggestionStatus, type AutocompleteTriggerCheck, type AutocompleteTriggerOptions, type AutocompleteTriggerSkipReason, type BlockRect, type CreateEmptyDocumentOptions, DEFAULT_AI_SUGGESTION_PRESETS, DEFAULT_AUTOCOMPLETE_DEAD_ZONE_NODES, DOCUMENT_PRESET_VERSION, DOCUMENT_STYLE_SET_VERSION, DOCX_CONFORMANCE_CLASSES, type DeriveBlockIdInput, type DirectiveKind, type DirectiveRange, type Document, type DocumentPreset, type DocumentStyleCatalog, type DocumentStyleCatalogEntry, type DocumentStyleSet, type DocxCompatibility, type DocxCompatibilityContext, type DocxCompatibilityIssue, type DocxCompatibilityLocation, type DocxCompatibilityPart, type DocxConformanceClass, type EmbeddedFont, type EmbeddedFontParts, type ExtractDocumentStyleSetOptions, FOLIO_DOCUMENT_OPERATION_BATCH_MODES, FOLIO_DOCUMENT_OPERATION_CONTRACT_VERSION, FOLIO_DOCUMENT_OPERATION_MODES, FOLIO_DOCUMENT_OPERATION_MODES_BY_TYPE, FOLIO_DOCUMENT_OPERATION_PRECONDITIONS, FOLIO_DOCUMENT_OPERATION_STORIES, FOLIO_DOCUMENT_OPERATION_TYPES, type FolioAIBlock, type FolioAIBlockAnchor, type FolioAIBlockKind, type FolioAIBlockPreviewRun, type FolioAIComment, type FolioAIEditAppliedOperation, type FolioAIEditApplyMode, type FolioAIEditApplyResult, type FolioAIEditOperation, type FolioAIEditPrecondition, type FolioAIEditReviewMeta, type FolioAIEditSeverity, type FolioAIEditSkipReason, type FolioAIEditSkippedOperation, type FolioAIEditSnapshot, type FolioAISignatureParty, type FolioBlockId, type FolioDocumentOperation, type FolioDocumentOperationAffectedTarget, type FolioDocumentOperationBatch, type FolioDocumentOperationCapabilities, type FolioDocumentOperationIssue, type FolioDocumentOperationMode, type FolioDocumentOperationPrecondition, type FolioDocumentOperationReceipt, type FolioDocumentOperationRecovery, type FolioDocumentOperationResult, type FolioDocumentOperationStatus, type FolioDocumentOperationStory, type FolioDocumentOperationType, type FolioDocumentOperationUndoFailureReason, type FolioDocumentOperationUndoHandle, type FolioDocumentOperationUndoResult, type FolioDocxCompatibilityHost, type FolioDocxCompatibilityProfile, type ImageMeta, type ImageRef, type InspectDocxCompatibilityOptions, InvalidFolioDocumentOperationBatchError, type MarkdownOptions, type MarkdownResult, type PositionalText, type ResolvedAnchor, STELLA_STYLE_SET_NAME, type TemplatePreviewSpan, type TemplatePreviewValue, type TemplatePreviewValues, type TemplateSlashMenuKeyAction, type TemplateSlashMenuState, UnsupportedFolioDocumentOperationVersionError, type WordDiffSegment, acceptAutocompleteSuggestion, acceptAutocompleteWord, anonymizationDecorationsKey, appendAutocompleteToken, applyFolioAIEditOperations, applyFolioDocumentOperations, applySuggestions, assertSupportedFolioDocumentOperationVersion, autocompleteSuggestionKey, autocompleteSuggestionPlugin, buildEmbeddedFontFamilyMap, buildPositionalText, clearAutocompleteSuggestion, clearTemplateSlashMenu, consumeTemplateSlashQuery, createAICitationDecorationsPlugin, createDocx, createEmptyDocument, createFolioAIEditSnapshot, createStellaStyleDocumentPreset, createStellaStyleSet, deriveBlockId, diffWordSegments, extractDocumentStyleSet, extractDocumentStyleSetFromDocx, extractEmbeddedFonts, finishAutocompleteSuggestion, fromMarkdown, getAnonymizationMatches, getAutocompleteSuggestion, getEmbeddedFontFaces, getFolioCaretViewportRect, getFolioDocumentOperationCapabilities, getFolioDocumentOperationIssues, getFolioDocumentOperationReceipts, getFolioParaIdFromBlockId, getFolioSelectionViewportRect, getGoogleFontsEnabled, getTemplateDirectives, getTemplateSlashMenu, hashFolioAIBlockText, inspectDocumentStyles, inspectDocumentStylesFromDocx, inspectDocxCompatibility, isFolioBlockId, isFolioDocumentOperationModeSupported, isSequentialFolioBlockId, isSuggestionStale, isSupportedFolioDocumentOperationVersion, mergeDocumentContent, normalizeFolioAIBlockText, parseFolioDocumentOperationBatch, resetTemplateSlashQuery, resolveSuggestionAnchor, scanDirectives, scopeEmbeddedFontFamily, scrollFolioPositionIntoView, setAICitationsMeta, setAISuggestionsMeta, setActiveCitationMeta, setAnonymizationTermsMeta, setEmbeddedFontFamilyMap, setFocusedSuggestionMeta, setGoogleFontsEnabled, setTemplatePreviewValues, shouldTriggerAutocomplete, startAutocompleteSuggestion, templateSlashMenuKey, toMarkdown, toMarkdownResult };

package/dist/layout-painter/renderPage.js

@@ -1597,6 +1597,7 @@ function renderPages(pages, container, options = {}) {
 		const viewportHeight = window.innerHeight;
 		const nearThreshold = viewportHeight * 3;
 		const nearIndices = /* @__PURE__ */ new Set();
+		let depopulated = false;
 		for (const [el, data] of liveDataMap) {
 			if (!data.rendered) continue;
 			const rect = el.getBoundingClientRect();
@@ -1609,8 +1610,12 @@ function renderPages(pages, container, options = {}) {
 				keepRendered = true;
 				break;
 			}
-			if (!keepRendered && nearIndices.size > 0) depopulatePageShell(el, liveDataMap);
+			if (!keepRendered && nearIndices.size > 0) {
+				depopulatePageShell(el, liveDataMap);
+				depopulated = true;
+			}
 		}
+		if (depopulated) emitPainterPainted(container);
 	}, {
 		root: null,
 		rootMargin: `${VIRTUALIZATION_ROOT_MARGIN_PX}px 0px ${VIRTUALIZATION_ROOT_MARGIN_PX}px 0px`

package/dist/layout-painter/renderParagraph.js

@@ -15,6 +15,7 @@ import { resolvePhysicalParagraphInlineLayout } from "../utils/paragraphInlineLa
 import { inlineImageBoundingBox, parseRotationDegrees, rotatedBoundingBox } from "../utils/rotationBoundingBox.js";
 import { applySanitizedImageSrc } from "../utils/sanitizeImageSrc.js";
 import { SCRIPT_CLASS, hasCjk, hasComplexScript, segmentByScript } from "../utils/scriptSegments.js";
+import { sanitizeExternalUrl } from "../utils/urlSecurity.js";
 import { borderStrokeToCss, resolveParagraphBorderHorizontalOutsets } from "./borderStroke.js";
 import { planCursiveJoiners, withCursiveJoiners } from "./cursiveJoiners.js";
 import { getAutomaticTextColorForBackground } from "./documentColors.js";
@@ -114,6 +115,12 @@ const DEFAULT_BLACK_TEXT_COLOR_VALUES = /* @__PURE__ */ new Set(["000000", "000"
 const SUGGESTION_COLOR_CSS = "var(--suggestion-color, #6d3bd6)";
 const SUGGESTION_TINT_CSS = "var(--suggestion-bg, color-mix(in oklch, #6d3bd6 12%, transparent))";
 const SUGGESTION_TINT_LAYER_CSS = `linear-gradient(${SUGGESTION_TINT_CSS}, ${SUGGESTION_TINT_CSS})`;
+const RUN_BACKGROUND_TEXT_COLOR_VAR = "--doc-run-background-text-color";
+const setRunBackgroundTextColor = (element, color) => {
+	element.classList.add("docx-run-background-text");
+	element.style.setProperty(RUN_BACKGROUND_TEXT_COLOR_VAR, color);
+};
+const hasRunBackgroundTextSurface = (run) => Boolean(run.highlight ?? run.shading) && !run.isInsertion && !run.isDeletion && !(run.commentIds !== void 0 && run.commentIds.length > 0);
 function normalizeTextColorValue(color) {
 	return color.trim().toLowerCase().replace(/^#/u, "");
 }
@@ -205,6 +212,8 @@ function applyRunStyles(element, run) {
 		const hasCommentHighlight = run.commentIds !== void 0 && run.commentIds.length > 0;
 		const automaticTextColor = hasExplicitTextColor || hasTrackedChangeColor || hasCommentHighlight ? void 0 : getAutomaticTextColorForBackground(runBackground);
 		if (automaticTextColor) element.style.color = automaticTextColor;
+		const backgroundTextColor = hasExplicitTextColor ? textColor : automaticTextColor;
+		if (backgroundTextColor && hasRunBackgroundTextSurface(run)) setRunBackgroundTextColor(element, backgroundTextColor);
 	}
 	const decorations = [];
 	let explicitDecorationStyle = false;
@@ -315,11 +324,13 @@ function renderTextRun(run, doc, hyperlinkDirection) {
 	applyRunStyles(span, run);
 	applyPmPositions(span, run.pmStart, run.pmEnd);
 	const paintedText = toPaintedText(run.text);
-	if (run.hyperlink) {
+	const isBookmarkTarget = run.hyperlink?.href.startsWith("#") === true;
+	const hyperlinkHref = resolveHyperlinkHref(run.hyperlink?.href, isBookmarkTarget);
+	if (run.hyperlink && hyperlinkHref !== void 0) {
 		const anchor = doc.createElement("a");
-		anchor.href = run.hyperlink.href;
+		anchor.href = hyperlinkHref;
 		if (hyperlinkDirection || DISPLAYED_URL_PATTERN.test(paintedText.trim())) anchor.dir = LEFT_TO_RIGHT_DIRECTION;
-		if (!run.hyperlink.href.startsWith("#")) {
+		if (!isBookmarkTarget) {
 			anchor.target = "_blank";
 			anchor.rel = "noopener noreferrer";
 		}
@@ -332,12 +343,27 @@ function renderTextRun(run, doc, hyperlinkDirection) {
 			span.style.color = hyperlinkColor;
 			anchor.style.setProperty("--doc-run-color", hyperlinkColor);
 			span.style.setProperty("--doc-run-color", hyperlinkColor);
+			if (hasRunBackgroundTextSurface(run)) {
+				setRunBackgroundTextColor(span, hyperlinkColor);
+				setRunBackgroundTextColor(anchor, hyperlinkColor);
+			}
 		}
 		span.append(anchor);
 	} else span.textContent = paintedText;
 	applyWhitespaceUnderline(span, run);
 	return span;
 }
+/**
+* Bookmark targets (`#name`) scroll within the document and stay verbatim;
+* every other target is narrowed to the protocols the painter navigates to,
+* matching the image hyperlink path. `undefined` means the run gets no anchor:
+* an empty `href` resolves to the current document, so a rejected target would
+* otherwise stay navigable.
+*/
+function resolveHyperlinkHref(href, isBookmarkTarget) {
+	if (href === void 0) return;
+	return isBookmarkTarget ? href : sanitizeExternalUrl(href);
+}
 function isNoteReferenceRun(run) {
 	return run.footnoteRefId !== void 0 || run.endnoteRefId !== void 0;
 }
@@ -345,11 +371,14 @@ function removeUnderlineTextDecoration(element) {
 	const textDecorationLines = (element.style.textDecorationLine || "").split(/\s+/u).filter((line) => line && line !== "underline");
 	element.style.textDecorationLine = textDecorationLines.join(" ");
 }
+function applyContinuousUnderline(element, underline) {
+	removeUnderlineTextDecoration(element);
+	const color = typeof underline === "object" && underline.color ? underline.color : "currentColor";
+	element.style.boxShadow = `inset 0 -1px 0 ${color}`;
+}
 function applyWhitespaceUnderline(element, run) {
 	if (!run.underline || run.text.trim().length > 0) return;
-	removeUnderlineTextDecoration(element);
-	element.style.borderBottom = "1px solid currentColor";
-	if (typeof run.underline === "object" && run.underline.color) element.style.borderBottomColor = run.underline.color;
+	applyContinuousUnderline(element, run.underline);
 }
 /**
 * Number of leader characters to fill the tab's inner span. The inner span
@@ -401,9 +430,7 @@ function canClampTabToRightEdge(alignment, hasPriorRenderedContent, hasPriorTab,
 }
 function applyTabUnderline(element, run) {
 	if (!run.underline) return;
-	removeUnderlineTextDecoration(element);
-	element.style.borderBottom = "1px solid currentColor";
-	if (typeof run.underline === "object" && run.underline.color) element.style.borderBottomColor = run.underline.color;
+	applyContinuousUnderline(element, run.underline);
 }
 /**
 * Get leader character for tab

package/dist/paged-layout/blockGeometry.d.ts

@@ -0,0 +1,32 @@
+import { FolioAIEditSnapshot } from "../ai-edits/types.js";
+//#region src/paged-layout/blockGeometry.d.ts
+/** Painted geometry for one AI-snapshot block in scroll-content coordinates. */
+type BlockRect = {
+  blockId: string;
+  /** One-based painted page number. */
+  page: number;
+  /** Pixels from the scroll root's content origin. */
+  top: number;
+  /** Pixels from the scroll root's content origin. */
+  left: number;
+  width: number;
+  height: number;
+};
+type ReadBlockRectsOptions = {
+  blockIds: readonly string[];
+  snapshot: FolioAIEditSnapshot;
+  pagesContainer: HTMLElement;
+  scrollRoot: HTMLElement;
+};
+/**
+ * Measure painted snapshot blocks relative to one editor's scroll root.
+ *
+ * Missing snapshot ids and blocks on unpainted virtual pages are omitted. Each
+ * requested block is measured at most once; painted elements are collected in
+ * one DOM query per relevant page.
+ */
+declare const readBlockRects: ({ blockIds, snapshot, pagesContainer, scrollRoot }: ReadBlockRectsOptions) => ReadonlyMap<string, BlockRect>;
+/** Subscribe to instance-scoped painted-page changes. */
+declare const onPaintedLayoutChange: (pagesContainer: HTMLElement, listener: () => void) => (() => void);
+//#endregion
+export { BlockRect, ReadBlockRectsOptions, onPaintedLayoutChange, readBlockRects };

package/dist/paged-layout/blockGeometry.js

@@ -0,0 +1,115 @@
+import { resolveSequentialBlockAnchor } from "../ai-edits/blockRange.js";
+import { PAINTER_PAINTED_EVENT, findPageShellForPmPos } from "../layout-painter/renderPage.js";
+//#region src/paged-layout/blockGeometry.ts
+const PAINTED_BLOCK_SELECTOR = "[data-block-id][data-pm-start]";
+const PAGE_SELECTOR = "[data-page-number]";
+const pageNumberOf = (page) => {
+	const raw = page.dataset["pageNumber"];
+	const pageNumber = raw === void 0 ? NaN : Number(raw);
+	return Number.isInteger(pageNumber) && pageNumber > 0 ? pageNumber : null;
+};
+const requestedBlocks = (blockIds, snapshot) => {
+	const uniqueIds = new Set(blockIds);
+	const requested = [];
+	for (const blockId of uniqueIds) {
+		const anchor = Object.hasOwn(snapshot.anchors, blockId) ? snapshot.anchors[blockId] : resolveSequentialBlockAnchor(blockId, snapshot);
+		if (anchor) requested.push({
+			blockId,
+			pmStart: anchor.from
+		});
+	}
+	return requested;
+};
+const paintedBlocksByPmStart = (page) => {
+	const blocks = /* @__PURE__ */ new Map();
+	for (const element of page.querySelectorAll(PAINTED_BLOCK_SELECTOR)) {
+		const pmStart = Number(element.dataset["pmStart"]);
+		if (Number.isFinite(pmStart) && !blocks.has(pmStart)) blocks.set(pmStart, element);
+	}
+	return blocks;
+};
+const groupVirtualizedRequestsByPage = (requests, pagesContainer) => {
+	const byPage = /* @__PURE__ */ new Map();
+	for (const request of requests) {
+		const page = findPageShellForPmPos(pagesContainer, request.pmStart)?.element;
+		if (!page) return null;
+		const pageRequests = byPage.get(page);
+		if (pageRequests) pageRequests.push(request);
+		else byPage.set(page, [request]);
+	}
+	return byPage;
+};
+const findPaintedElements = (requests, pagesContainer) => {
+	const found = /* @__PURE__ */ new Map();
+	const virtualizedRequests = groupVirtualizedRequestsByPage(requests, pagesContainer);
+	if (virtualizedRequests) {
+		for (const [page, pageRequests] of virtualizedRequests) {
+			const pageNumber = pageNumberOf(page);
+			if (pageNumber === null) continue;
+			const blocks = paintedBlocksByPmStart(page);
+			for (const request of pageRequests) {
+				const element = blocks.get(request.pmStart);
+				if (element) found.set(request.blockId, {
+					element,
+					page: pageNumber
+				});
+			}
+		}
+		return found;
+	}
+	const requestsByPmStart = new Map(requests.map((request) => [request.pmStart, request]));
+	for (const page of pagesContainer.querySelectorAll(PAGE_SELECTOR)) {
+		const pageNumber = pageNumberOf(page);
+		if (pageNumber === null) continue;
+		const blocks = paintedBlocksByPmStart(page);
+		for (const [pmStart, request] of requestsByPmStart) {
+			const element = blocks.get(pmStart);
+			if (element) {
+				found.set(request.blockId, {
+					element,
+					page: pageNumber
+				});
+				requestsByPmStart.delete(pmStart);
+			}
+		}
+		if (requestsByPmStart.size === 0) break;
+	}
+	return found;
+};
+/**
+* Measure painted snapshot blocks relative to one editor's scroll root.
+*
+* Missing snapshot ids and blocks on unpainted virtual pages are omitted. Each
+* requested block is measured at most once; painted elements are collected in
+* one DOM query per relevant page.
+*/
+const readBlockRects = ({ blockIds, snapshot, pagesContainer, scrollRoot }) => {
+	const requests = requestedBlocks(blockIds, snapshot);
+	const paintedElements = findPaintedElements(requests, pagesContainer);
+	if (paintedElements.size === 0) return /* @__PURE__ */ new Map();
+	const rootRect = scrollRoot.getBoundingClientRect();
+	const rects = /* @__PURE__ */ new Map();
+	for (const request of requests) {
+		const painted = paintedElements.get(request.blockId);
+		if (!painted) continue;
+		const rect = painted.element.getBoundingClientRect();
+		rects.set(request.blockId, {
+			blockId: request.blockId,
+			page: painted.page,
+			top: rect.top - rootRect.top - scrollRoot.clientTop + scrollRoot.scrollTop,
+			left: rect.left - rootRect.left - scrollRoot.clientLeft + scrollRoot.scrollLeft,
+			width: rect.width,
+			height: rect.height
+		});
+	}
+	return rects;
+};
+/** Subscribe to instance-scoped painted-page changes. */
+const onPaintedLayoutChange = (pagesContainer, listener) => {
+	pagesContainer.addEventListener(PAINTER_PAINTED_EVENT, listener);
+	return () => {
+		pagesContainer.removeEventListener(PAINTER_PAINTED_EVENT, listener);
+	};
+};
+//#endregion
+export { onPaintedLayoutChange, readBlockRects };

package/dist/prosemirror/conversion/fromProseDoc.js

@@ -1845,10 +1845,11 @@ function tableCellAttrsToFormatting(attrs) {
 		if (attrs.rowspan > 1) result.vMerge = "restart";
 		else if (result.vMerge === "restart" && !attrs._preserveVMergeRestart) delete result.vMerge;
 		const cellWidth = attrs.width;
-		if (cellWidth !== void 0) result.width = {
+		if (typeof cellWidth === "number") result.width = {
 			value: cellWidth,
 			type: attrs.widthType ?? "dxa"
 		};
+		else delete result.width;
 		if (attrs.verticalAlign !== (orig.verticalAlign ?? void 0)) if (attrs.verticalAlign) result.verticalAlign = attrs.verticalAlign;
 		else delete result.verticalAlign;
 		if (backgroundChanged) result.shading = cellShadingFromAttrs(attrs);
@@ -1859,11 +1860,11 @@ function tableCellAttrsToFormatting(attrs) {
 		return result;
 	}
 	const cellWidth = attrs.width;
-	if (!(attrs.colspan > 1 || attrs.rowspan > 1 || cellWidth !== void 0 || attrs.verticalAlign || backgroundChanged || attrs.borders || attrs.margins || attrs.textDirection)) return;
+	if (!(attrs.colspan > 1 || attrs.rowspan > 1 || typeof cellWidth === "number" || attrs.verticalAlign || backgroundChanged || attrs.borders || attrs.margins || attrs.textDirection)) return;
 	const f = {};
 	if (attrs.colspan > 1) f.gridSpan = attrs.colspan;
 	if (attrs.rowspan > 1) f.vMerge = "restart";
-	if (cellWidth !== void 0) f.width = {
+	if (typeof cellWidth === "number") f.width = {
 		value: cellWidth,
 		type: attrs.widthType ?? "dxa"
 	};

package/dist/utils/headerFooter.js

@@ -185,23 +185,11 @@ const createEmptyHeaderFooter = (document, position, isFirstPage) => {
 		type: hdrFtrType,
 		rId
 	};
-	const usedTargets = /* @__PURE__ */ new Set();
-	for (const relationship of pkg.relationships?.values() ?? []) if (relationship.target) usedTargets.add(relationship.target);
-	let targetNumber = 1;
-	while (usedTargets.has(`${position}${targetNumber}.xml`)) targetNumber++;
-	const relationshipType = position === "header" ? "http://schemas.openxmlformats.org/officeDocument/2006/relationships/header" : "http://schemas.openxmlformats.org/officeDocument/2006/relationships/footer";
-	const relationships = new Map(pkg.relationships);
-	relationships.set(rId, {
-		id: rId,
-		type: relationshipType,
-		target: `${position}${targetNumber}.xml`
-	});
 	return {
 		...document,
 		package: {
 			...pkg,
 			[mapKey]: newMap,
-			relationships,
 			document: {
 				...pkg.document,
 				finalSectionProperties: {