@stll/folio-core 0.43.0 → 0.45.0

package/dist/docx/xmlResourceLimits.js

@@ -1,12 +1,60 @@
 import { TaggedError } from "better-result";
-/** Shared bounds for XML parts parsed by Folio. */
+/**
+* Shared bounds for XML parts parsed by Folio.
+*
+* `maxBytes` and the package expansion ceiling bound the *markup*; they do not
+* bound what parsing that markup allocates. A parsed element retains far more
+* than the bytes it was written as, so a part that satisfies a byte bound can
+* still cost multiples of it in tree. Measured on this repository's corpus
+* generators (Bun 1.4, arm64, heap retained after a forced GC):
+*
+*   shape                       bytes/element   tree heap / part bytes
+*   `<w:r/>`                          49.5 B            8.3x
+*   `<w:r a=".." x4/>`               105-124 B          2.8-3.3x
+*   `<w:r><w:t>x</w:t></w:r>`        162-171 B         14.1-14.8x
+*
+* An element is therefore the unit a memory bound has to count, because the
+* adversarial shape is the cheap one: `<w:r/>` is 7 bytes of markup and 49.5
+* bytes of tree, so 128 MiB of markup buys ~19M elements and ~950 MB of tree
+* inside a byte budget that never trips.
+*
+* Corpus distribution (5,314 readable packages, every XML and .rels part):
+*
+*   metric                     p50      p90      p99    p99.9        max
+*   elements / part             16      227    1,590   24,719    596,668
+*   elements / package         917    3,230   29,106   71,975    602,212
+*   attributes / part           27      577    1,993   21,037    630,374
+*   attributes / package     1,783    4,711   25,896   91,946    639,110
+*   depth / part                 3        9       15       22     15,005
+*   elements per byte        0.012    0.027    0.036    0.043      0.111
+*
+* The defaults below reject no corpus package that today's bounds accept. The
+* package budget is the one that matters: it caps a whole package at ~2.5M
+* elements and ~3M attributes, which is at most ~425 MB of tree at the densest
+* measured shape and ~124 MB at the cheapest. Before it existed, only
+* `word/document.xml`, `word/styles.xml` and `word/numbering.xml` were counted
+* at all, so a package of many merely-large parts could reach the expansion
+* ceiling of 250 MiB, ~37M elements and well past 1.8 GB of tree while passing
+* every bound. Lower these to trade format reach for a smaller ceiling.
+*/
 const FOLIO_XML_RESOURCE_LIMITS = {
 	maxBytes: 128 * (1024 * 1024),
 	maxDepth: 100,
-	maxNodes: 1e6
+	/** 1.68x the corpus maximum (596,668). Unchanged; a shipped bound is not loosened. */
+	maxElementsPerPart: 1e6,
+	/** 3.97x the corpus maximum (630,374). */
+	maxAttributesPerPart: 25e5,
+	/** 4.15x the corpus maximum (602,212). */
+	maxElementsPerPackage: 25e5,
+	/** 4.69x the corpus maximum (639,110). */
+	maxAttributesPerPackage: 3e6
 };
 /** XML input exceeded a parser resource bound or could not be scanned safely. */
 var XmlResourceLimitError = class extends TaggedError("XmlResourceLimitError") {};
+const createXmlPackageBudget = () => ({
+	elements: 0,
+	attributes: 0
+});
 const exceedsUtf8ByteLimit = (value, maxBytes) => {
 	let bytes = 0;
 	for (let index = 0; index < value.length; index += 1) {
@@ -22,8 +70,9 @@ const exceedsUtf8ByteLimit = (value, maxBytes) => {
 	return false;
 };
 const isXmlWhitespace = (code) => code === 9 || code === 10 || code === 13 || code === 32;
-const findTagClose = (xml, start) => {
+const scanTag = (xml, start) => {
 	let quote = 0;
+	let attributes = 0;
 	for (let cursor = start; cursor < xml.length; cursor += 1) {
 		const code = xml.charCodeAt(cursor);
 		if (quote !== 0) {
@@ -34,29 +83,53 @@ const findTagClose = (xml, start) => {
 			quote = code;
 			continue;
 		}
-		if (code === 62) return cursor;
+		if (code === 61) {
+			attributes += 1;
+			continue;
+		}
+		if (code === 62) return {
+			close: cursor,
+			attributes
+		};
 	}
-	return -1;
+	return {
+		close: -1,
+		attributes
+	};
 };
 const throwSyntaxLimit = () => {
 	throw new XmlResourceLimitError({
 		message: "XML resource preflight could not safely scan malformed markup",
-		limit: "syntax"
+		limit: "syntax",
+		observed: 0,
+		allowed: 0
 	});
 };
 /**
-* Bound XML bytes, element count, and nesting before building an object tree.
-* The lexical scan is iterative, so deeply nested input cannot consume the JS
-* call stack before the depth limit is enforced.
+* Bound XML bytes, element count, attribute count and nesting before building
+* an object tree. The lexical scan is iterative, so deeply nested input cannot
+* consume the JS call stack before the depth limit is enforced, and every
+* bound is checked at the point it is crossed, so the work done before a
+* refusal is proportional to the limit rather than to the input.
 */
-const assertXmlResourceLimits = (xml, limits = FOLIO_XML_RESOURCE_LIMITS) => {
-	if (exceedsUtf8ByteLimit(xml, limits.maxBytes)) throw new XmlResourceLimitError({
-		message: `XML part exceeds ${String(limits.maxBytes)} bytes`,
-		limit: "bytes"
-	});
+const assertXmlResourceLimits = ({ xml, limits = FOLIO_XML_RESOURCE_LIMITS, partPath, budget }) => {
+	const refuse = (limit, message, observed, allowed) => {
+		throw new XmlResourceLimitError({
+			message: partPath === void 0 ? message : `${message} (part ${partPath})`,
+			limit,
+			...partPath === void 0 ? {} : { partPath },
+			observed,
+			allowed
+		});
+	};
+	if (exceedsUtf8ByteLimit(xml, limits.maxBytes)) refuse("bytes", `XML part exceeds ${String(limits.maxBytes)} bytes`, limits.maxBytes + 1, limits.maxBytes);
+	const budgetElements = budget?.elements ?? 0;
+	const budgetAttributes = budget?.attributes ?? 0;
 	let cursor = 0;
 	let depth = 0;
+	let maxDepth = 0;
 	let nodes = 0;
+	let attributes = 0;
 	while (cursor < xml.length) {
 		const open = xml.indexOf("<", cursor);
 		if (open === -1) break;
@@ -79,7 +152,7 @@ const assertXmlResourceLimits = (xml, limits = FOLIO_XML_RESOURCE_LIMITS) => {
 			continue;
 		}
 		if (xml.startsWith("<!", open)) throwSyntaxLimit();
-		const close = findTagClose(xml, open + 1);
+		const { close, attributes: tagAttributes } = scanTag(xml, open + 1);
 		if (close === -1) throwSyntaxLimit();
 		if (xml.charCodeAt(open + 1) === 47) {
 			if (depth === 0) throwSyntaxLimit();
@@ -88,21 +161,29 @@ const assertXmlResourceLimits = (xml, limits = FOLIO_XML_RESOURCE_LIMITS) => {
 			continue;
 		}
 		nodes += 1;
-		if (nodes > limits.maxNodes) throw new XmlResourceLimitError({
-			message: `XML part contains more than ${String(limits.maxNodes)} elements`,
-			limit: "nodes"
-		});
+		if (nodes > limits.maxElementsPerPart) refuse("elements", `XML part contains more than ${String(limits.maxElementsPerPart)} elements`, nodes, limits.maxElementsPerPart);
+		if (budgetElements + nodes > limits.maxElementsPerPackage) refuse("package-elements", `DOCX package contains more than ${String(limits.maxElementsPerPackage)} XML elements`, budgetElements + nodes, limits.maxElementsPerPackage);
+		attributes += tagAttributes;
+		if (attributes > limits.maxAttributesPerPart) refuse("attributes", `XML part contains more than ${String(limits.maxAttributesPerPart)} attributes`, attributes, limits.maxAttributesPerPart);
+		if (budgetAttributes + attributes > limits.maxAttributesPerPackage) refuse("package-attributes", `DOCX package contains more than ${String(limits.maxAttributesPerPackage)} XML attributes`, budgetAttributes + attributes, limits.maxAttributesPerPackage);
 		let lastContent = close - 1;
 		while (lastContent > open && isXmlWhitespace(xml.charCodeAt(lastContent))) lastContent -= 1;
 		const elementDepth = depth + 1;
-		if (elementDepth > limits.maxDepth) throw new XmlResourceLimitError({
-			message: `XML part is nested deeper than ${String(limits.maxDepth)} elements`,
-			limit: "depth"
-		});
+		if (elementDepth > limits.maxDepth) refuse("depth", `XML part is nested deeper than ${String(limits.maxDepth)} elements`, elementDepth, limits.maxDepth);
+		if (elementDepth > maxDepth) maxDepth = elementDepth;
 		if (xml.charCodeAt(lastContent) !== 47) depth = elementDepth;
 		cursor = close + 1;
 	}
 	if (depth !== 0) throwSyntaxLimit();
+	if (budget) {
+		budget.elements += nodes;
+		budget.attributes += attributes;
+	}
+	return {
+		elements: nodes,
+		attributes,
+		maxDepth
+	};
 };
 //#endregion
-export { FOLIO_XML_RESOURCE_LIMITS, XmlResourceLimitError, assertXmlResourceLimits };
+export { FOLIO_XML_RESOURCE_LIMITS, XmlResourceLimitError, assertXmlResourceLimits, createXmlPackageBudget };

package/dist/internal/pageBreakRunSourceDescendantIndex.js

@@ -59,7 +59,8 @@ const buildPageBreakRunSourceDescendantIndex = (rootContent) => {
 				case "deletion":
 				case "moveFrom":
 				case "moveTo":
-				case "inlineSdt": return inspectMany(content.content, inspectParagraphContent);
+				case "inlineSdt":
+				case "bidiWrapper": return inspectMany(content.content, inspectParagraphContent);
 				case "simpleField": {
 					const fieldResultFlags = inspectMany(content.content, inspectParagraphContent);
 					if (hasFlag(fieldResultFlags, SOURCE_FLAGS.paragraphPageBreak) && hasFlag(fieldResultFlags, SOURCE_FLAGS.paragraphTextBoxShape)) return fieldResultFlags | SOURCE_FLAGS.pageBreakSharesTextBoxShape;

package/dist/internal/paragraphFormattingSerialization.d.ts

@@ -1,9 +1,8 @@
 import { document_d_exports } from "../types/document.js";
 //#region src/internal/paragraphFormattingSerialization.d.ts
-type ExhaustiveFields<Source, Classified extends keyof Source> = Exclude<keyof Source, Classified> extends never ? Source : never;
 type ParagraphNumberingReference = document_d_exports.ParagraphFormatting["numPr"] | null;
-type ClassifiedParagraphFormattingField = "alignment" | "bidi" | "kinsoku" | "overflowPunctuation" | "spaceBefore" | "spaceAfter" | "lineSpacing" | "lineSpacingRule" | "snapToGrid" | "beforeAutospacing" | "afterAutospacing" | "spacingExplicit" | "indentLeft" | "indentRight" | "indentFirstLine" | "hangingIndent" | "borders" | "shading" | "tabs" | "keepNext" | "keepLines" | "widowControl" | "pageBreakBefore" | "contextualSpacing" | "numPr" | "numPrFromStyle" | "outlineLevel" | "styleId" | "frame" | "suppressLineNumbers" | "suppressAutoHyphens" | "runProperties" | "runInWithNext";
-type ExhaustiveParagraphFormatting = ExhaustiveFields<document_d_exports.ParagraphFormatting, ClassifiedParagraphFormattingField>;
+type ClassifiedParagraphFormattingField = "alignment" | "bidi" | "kinsoku" | "overflowPunctuation" | "spaceBefore" | "spaceAfter" | "lineSpacing" | "lineSpacingRule" | "snapToGrid" | "beforeAutospacing" | "afterAutospacing" | "spacingExplicit" | "indentLeft" | "indentRight" | "indentFirstLine" | "hangingIndent" | "borders" | "shading" | "tabs" | "keepNext" | "keepLines" | "widowControl" | "pageBreakBefore" | "contextualSpacing" | "numPr" | "numPrFromStyle" | "numberingChangeXml" | "outlineLevel" | "styleId" | "frame" | "suppressLineNumbers" | "suppressAutoHyphens" | "runProperties" | "runInWithNext";
+type ExhaustiveParagraphFormatting = document_d_exports.ExhaustiveFields<document_d_exports.ParagraphFormatting, ClassifiedParagraphFormattingField>;
 /** Compare numbering references by their emitted id and effective level. */
 declare const paragraphNumberingReferencesEqual: (left: ParagraphNumberingReference, right: ParagraphNumberingReference) => boolean;
 /** Compare the authored `w:numPr` attributes, including an absent `w:ilvl`. */

package/dist/internal/paragraphFormattingSerialization.js

@@ -1,6 +1,9 @@
 import { serializeBorder } from "../docx/serializer/borderSerializer.js";
 import { serializeShading, serializeTextFormatting } from "../docx/serializer/textFormattingSerializer.js";
-import { escapeXml, intAttr } from "../docx/serializer/xmlUtils.js";
+import { intAttr } from "../docx/serializer/xmlUtils.js";
+import { sanitizeCapturedXmlElement } from "../docx/verbatimCapture.js";
+import { NAMESPACES, OOXML_NAMESPACE_SCOPE } from "../docx/xmlParser.js";
+import { escapeXmlAttribute } from "@stll/docx-core";
 //#region src/internal/paragraphFormattingSerialization.ts
 const modelParagraphNumberingReference = (reference) => {
 	if (!reference) return null;
@@ -74,14 +77,32 @@ const serializeIndentation = (formatting) => {
 	}
 	return attrs.length === 0 ? "" : `<w:ind ${attrs.join(" ")}/>`;
 };
-const serializeNumbering = (numPr) => {
+/**
+* `w:numPr`, with the tracked record of the numbering it replaced.
+*
+* `w:numberingChange` is the revision a reviewer's numbering change left
+* behind. It is history: nothing in the model derives it, and a rebuilt
+* `w:numPr` that drops it discards the revision silently. It is written even
+* when the paragraph's own numbering reference is gone, because a change
+* record with nothing left to describe is still a record — the schema declares
+* it last in `CT_NumPr`, after `w:ilvl` and `w:numId`.
+*/
+const serializeNumbering = (numPr, numberingChangeXml) => {
 	const modeled = modelParagraphNumberingReference(numPr ?? null);
-	if (!modeled) return "";
 	const parts = [];
-	if (modeled.ilvl !== void 0) parts.push(`<w:ilvl w:val="${intAttr(modeled.ilvl)}"/>`);
-	if (modeled.numId !== void 0) parts.push(`<w:numId w:val="${intAttr(modeled.numId)}"/>`);
+	if (modeled?.ilvl !== void 0) parts.push(`<w:ilvl w:val="${intAttr(modeled.ilvl)}"/>`);
+	if (modeled?.numId !== void 0) parts.push(`<w:numId w:val="${intAttr(modeled.numId)}"/>`);
+	const change = replayableNumberingChangeXml(numberingChangeXml);
+	if (change !== null) parts.push(change);
 	return parts.length === 0 ? "" : `<w:numPr>${parts.join("")}</w:numPr>`;
 };
+const NUMBERING_CHANGE_ROOT_NAME = /* @__PURE__ */ new Set(["numberingChange"]);
+const WORDPROCESSINGML_NAMESPACE = /* @__PURE__ */ new Set([NAMESPACES.w]);
+const replayableNumberingChangeXml = (numberingChangeXml) => sanitizeCapturedXmlElement(numberingChangeXml, {
+	allowedLocalNames: NUMBERING_CHANGE_ROOT_NAME,
+	allowedNamespaceUris: WORDPROCESSINGML_NAMESPACE,
+	inheritedNamespaceScope: OOXML_NAMESPACE_SCOPE
+});
 const serializeFrameProperties = (frame) => {
 	if (!frame) return "";
 	const { dropCap, lines, width, height, hSpace, vSpace, hAnchor, vAnchor, x, y, xAlign, yAlign, wrap } = frame;
@@ -117,16 +138,16 @@ const extractRunPropertiesInnerXml = (runPropertiesXml) => {
 */
 const modelParagraphFormattingEmission = (input) => {
 	if (!input) return {};
-	const { alignment, bidi, kinsoku, overflowPunctuation, spaceBefore, spaceAfter, lineSpacing, lineSpacingRule, snapToGrid, beforeAutospacing, afterAutospacing, spacingExplicit, indentLeft, indentRight, indentFirstLine, hangingIndent, borders, shading, tabs, keepNext, keepLines, widowControl, pageBreakBefore, contextualSpacing, numPr, numPrFromStyle, outlineLevel, styleId, frame, suppressLineNumbers, suppressAutoHyphens, runProperties, runInWithNext } = input;
+	const { alignment, bidi, kinsoku, overflowPunctuation, spaceBefore, spaceAfter, lineSpacing, lineSpacingRule, snapToGrid, beforeAutospacing, afterAutospacing, spacingExplicit, indentLeft, indentRight, indentFirstLine, hangingIndent, borders, shading, tabs, keepNext, keepLines, widowControl, pageBreakBefore, contextualSpacing, numPr, numPrFromStyle, numberingChangeXml, outlineLevel, styleId, frame, suppressLineNumbers, suppressAutoHyphens, runProperties, runInWithNext } = input;
 	modelSpacingProvenance(spacingExplicit);
 	const propertiesXml = [
-		styleId ? `<w:pStyle w:val="${escapeXml(styleId)}"/>` : "",
+		styleId ? `<w:pStyle w:val="${escapeXmlAttribute(styleId)}"/>` : "",
 		serializeToggle("keepNext", keepNext),
 		serializeToggle("keepLines", keepLines),
 		serializeToggle("pageBreakBefore", pageBreakBefore),
 		serializeFrameProperties(frame),
 		serializeToggle("widowControl", widowControl),
-		isStyleSourcedParagraphNumbering(numPr, numPrFromStyle) ? "" : serializeNumbering(numPr),
+		isStyleSourcedParagraphNumbering(numPr, numPrFromStyle) ? serializeNumbering(void 0, numberingChangeXml) : serializeNumbering(numPr, numberingChangeXml),
 		serializeToggle("suppressLineNumbers", suppressLineNumbers),
 		serializeParagraphBorders(borders),
 		serializeShading(shading),

package/dist/layout-bridge/convert/footnoteLayout.js

@@ -1,6 +1,6 @@
 import { measureParagraph } from "../../layout-engine/measure/measureParagraph.js";
 import { layoutTextBoxContent } from "../../layout-engine/measure/textBoxParagraphLayout.js";
-import { DEFAULT_TEXTBOX_MARGINS, FOOTNOTE_ENTRY_MARGIN_BOTTOM, FOOTNOTE_FALLBACK_LINE_HEIGHT, FOOTNOTE_SEPARATOR_HEIGHT, isFloatingImageRun } from "../../layout-engine/types.js";
+import { DEFAULT_TEXTBOX_MARGINS, FOOTNOTE_ENTRY_MARGIN_BOTTOM, FOOTNOTE_FALLBACK_LINE_HEIGHT, FOOTNOTE_SEPARATOR_HEIGHT, isFloatingImageRun, resolveTableWidthPx } from "../../layout-engine/types.js";
 import { footnoteToProseDoc } from "../../prosemirror/conversion/toProseDoc.js";
 import { toFlowBlocks } from "./toFlowBlocks.js";
 //#region src/layout-bridge/convert/footnoteLayout.ts
@@ -264,14 +264,9 @@ function measureFootnoteBlock(block, contentWidth) {
 		default: return block;
 	}
 }
-function resolveFootnoteTableWidth(width, widthType, contentWidth) {
-	if (!width) return;
-	if (widthType === "pct") return contentWidth * width / 5e3;
-	if (widthType === "dxa" || !widthType || widthType === "auto") return width / 1440 * 96;
-}
 function measureFootnoteTable(tableBlock, contentWidth) {
 	let columnWidths = tableBlock.columnWidths ?? [];
-	const explicitWidth = resolveFootnoteTableWidth(tableBlock.width, tableBlock.widthType, contentWidth);
+	const explicitWidth = resolveTableWidthPx(tableBlock.width, tableBlock.widthType, contentWidth);
 	if (columnWidths.length === 0) {
 		const firstRow = tableBlock.rows.at(0);
 		let colCount = 0;

package/dist/layout-engine/index.d.ts

@@ -1,4 +1,4 @@
-import { BlockId, BorderStyle, CellBorderSpec, CellBorders, ColumnBreakBlock, ColumnBreakMeasure, ColumnLayout, DEFAULT_TEXTBOX_MARGINS, DEFAULT_TEXTBOX_WIDTH, DocumentPosition, FOOTNOTE_ENTRY_MARGIN_BOTTOM, FOOTNOTE_FALLBACK_LINE_HEIGHT, FOOTNOTE_SEPARATOR_HEIGHT, FieldRun, FloatingTablePosition, FlowBlock, FootnoteContent, Fragment, FragmentBase, HeaderFooterContent, HeaderFooterContentHeights, HeaderFooterLayout, HitTestResult, HyperlinkInfo, ImageBlock, ImageFragment, ImageMeasure, ImageRun, ImageRunPosition, Layout, LayoutOptions, LineBreakRun, ListMarkerFormatting, ListNumPr, MathRun, Measure, MeasuredLine, Page, PageBreakBlock, PageBreakMeasure, PageHeaderFooterRefs, PageMargins, ParagraphAttrs, ParagraphBlock, ParagraphBorders, ParagraphFragment, ParagraphIndent, ParagraphMeasure, ParagraphSpacing, RenderedPageBreakRun, Run, RunFormatting, SdtGroup, SectionBreakBlock, SectionBreakMeasure, SectionPageNumbering, TabAlignment, TabRun, TabStop, TableBlock, TableCell, TableCellMeasure, TableFragment, TableMeasure, TableRow, TableRowMeasure, TextBoxBlock, TextBoxFlowAttrs, TextBoxFragment, TextBoxMeasure, TextRun, floatingTextBoxReservesBand, floatingTextBoxWrapsText, getTableRowLeadingWidth, isFloatingImageRun, isFloatingTextBoxBlock, isTextWrappingFloatingImageRun, resolveTableCellPadding, tableColumnsArePinned } from "./types.js";
+import { BlockId, BorderStyle, CellBorderSpec, CellBorders, ColumnBreakBlock, ColumnBreakMeasure, ColumnLayout, DEFAULT_TEXTBOX_MARGINS, DEFAULT_TEXTBOX_WIDTH, DocumentPosition, FOOTNOTE_ENTRY_MARGIN_BOTTOM, FOOTNOTE_FALLBACK_LINE_HEIGHT, FOOTNOTE_SEPARATOR_HEIGHT, FieldRun, FloatingTablePosition, FlowBlock, FootnoteContent, Fragment, FragmentBase, HeaderFooterContent, HeaderFooterContentHeights, HeaderFooterLayout, HitTestResult, HyperlinkInfo, ImageBlock, ImageFragment, ImageMeasure, ImageRun, ImageRunPosition, Layout, LayoutOptions, LineBreakRun, ListMarkerFormatting, ListNumPr, MathRun, Measure, MeasuredLine, Page, PageBreakBlock, PageBreakMeasure, PageHeaderFooterRefs, PageMargins, ParagraphAttrs, ParagraphBlock, ParagraphBorders, ParagraphFragment, ParagraphIndent, ParagraphMeasure, ParagraphSpacing, RenderedPageBreakRun, Run, RunFormatting, SdtGroup, SectionBreakBlock, SectionBreakMeasure, SectionPageNumbering, TabAlignment, TabRun, TabStop, TableBlock, TableCell, TableCellMeasure, TableFragment, TableMeasure, TableRow, TableRowMeasure, TextBoxBlock, TextBoxFlowAttrs, TextBoxFragment, TextBoxMeasure, TextRun, floatingTextBoxReservesBand, floatingTextBoxWrapsText, getTableRowLeadingWidth, isFloatingImageRun, isFloatingTextBoxBlock, isTextWrappingFloatingImageRun, resolveTableCellPadding, resolveTableWidthPx, tableColumnsArePinned } from "./types.js";
 import { PageState, Paginator, PaginatorOptions, createPaginator } from "./paginator.js";
 import { KeepNextChain, calculateChainHeight, computeKeepNextChains, getMidChainIndices, hasKeepLines, hasPageBreakBefore } from "./keep-together.js";
 import { resolveSectionHeaderFooterRefs } from "./headerFooterRefs.js";
@@ -42,4 +42,4 @@ declare function layoutDocument(blocks: FlowBlock[], measures: Measure[], option
  */
 declare function getHeaderRowsHeight(measure: TableMeasure, headerRowCount: number): number;
 //#endregion
-export { BlockId, BorderStyle, type BreakDecision, CellBorderSpec, CellBorders, ColumnBreakBlock, ColumnBreakMeasure, ColumnLayout, DEFAULT_TEXTBOX_MARGINS, DEFAULT_TEXTBOX_WIDTH, DocumentPosition, FOOTNOTE_ENTRY_MARGIN_BOTTOM, FOOTNOTE_FALLBACK_LINE_HEIGHT, FOOTNOTE_SEPARATOR_HEIGHT, FieldRun, FloatingTablePosition, FlowBlock, FootnoteContent, Fragment, FragmentBase, HeaderFooterContent, HeaderFooterContentHeights, HeaderFooterLayout, HitTestResult, HyperlinkInfo, ImageBlock, ImageFragment, ImageMeasure, ImageRun, ImageRunPosition, type KeepNextChain, Layout, LayoutOptions, LineBreakRun, ListMarkerFormatting, ListNumPr, MathRun, Measure, MeasuredLine, Page, PageBreakBlock, PageBreakMeasure, PageHeaderFooterRefs, PageMargins, type PageState, type Paginator, type PaginatorOptions, ParagraphAttrs, ParagraphBlock, ParagraphBorders, ParagraphFragment, ParagraphIndent, ParagraphMeasure, ParagraphSpacing, RenderedPageBreakRun, Run, RunFormatting, SdtGroup, SectionBreakBlock, SectionBreakMeasure, SectionLayoutConfig, SectionPageNumbering, type SectionState, TabAlignment, TabRun, TabStop, TableBlock, TableCell, TableCellMeasure, TableFragment, TableMeasure, TableRow, TableRowMeasure, TextBoxBlock, TextBoxFlowAttrs, TextBoxFragment, TextBoxMeasure, TextRun, applyContextualSpacing, applyPendingToActive, assertExhaustiveFlowBlock, calculateChainHeight, collectSectionConfigs, computeKeepNextChains, createInitialSectionState, createPaginator, findPageIndexContainingPmPos, floatingTextBoxReservesBand, floatingTextBoxWrapsText, getEffectiveColumns, getEffectiveMargins, getEffectivePageSize, getHeaderRowsHeight, getMidChainIndices, getTableRowLeadingWidth, hasKeepLines, hasPageBreakBefore, isFloatingImageRun, isFloatingTextBoxBlock, isTextWrappingFloatingImageRun, layoutDocument, resolveSectionHeaderFooterRefs, resolveTableCellPadding, scheduleSectionBreak, tableColumnsArePinned };
+export { BlockId, BorderStyle, type BreakDecision, CellBorderSpec, CellBorders, ColumnBreakBlock, ColumnBreakMeasure, ColumnLayout, DEFAULT_TEXTBOX_MARGINS, DEFAULT_TEXTBOX_WIDTH, DocumentPosition, FOOTNOTE_ENTRY_MARGIN_BOTTOM, FOOTNOTE_FALLBACK_LINE_HEIGHT, FOOTNOTE_SEPARATOR_HEIGHT, FieldRun, FloatingTablePosition, FlowBlock, FootnoteContent, Fragment, FragmentBase, HeaderFooterContent, HeaderFooterContentHeights, HeaderFooterLayout, HitTestResult, HyperlinkInfo, ImageBlock, ImageFragment, ImageMeasure, ImageRun, ImageRunPosition, type KeepNextChain, Layout, LayoutOptions, LineBreakRun, ListMarkerFormatting, ListNumPr, MathRun, Measure, MeasuredLine, Page, PageBreakBlock, PageBreakMeasure, PageHeaderFooterRefs, PageMargins, type PageState, type Paginator, type PaginatorOptions, ParagraphAttrs, ParagraphBlock, ParagraphBorders, ParagraphFragment, ParagraphIndent, ParagraphMeasure, ParagraphSpacing, RenderedPageBreakRun, Run, RunFormatting, SdtGroup, SectionBreakBlock, SectionBreakMeasure, SectionLayoutConfig, SectionPageNumbering, type SectionState, TabAlignment, TabRun, TabStop, TableBlock, TableCell, TableCellMeasure, TableFragment, TableMeasure, TableRow, TableRowMeasure, TextBoxBlock, TextBoxFlowAttrs, TextBoxFragment, TextBoxMeasure, TextRun, applyContextualSpacing, applyPendingToActive, assertExhaustiveFlowBlock, calculateChainHeight, collectSectionConfigs, computeKeepNextChains, createInitialSectionState, createPaginator, findPageIndexContainingPmPos, floatingTextBoxReservesBand, floatingTextBoxWrapsText, getEffectiveColumns, getEffectiveMargins, getEffectivePageSize, getHeaderRowsHeight, getMidChainIndices, getTableRowLeadingWidth, hasKeepLines, hasPageBreakBefore, isFloatingImageRun, isFloatingTextBoxBlock, isTextWrappingFloatingImageRun, layoutDocument, resolveSectionHeaderFooterRefs, resolveTableCellPadding, resolveTableWidthPx, scheduleSectionBreak, tableColumnsArePinned };

package/dist/layout-engine/index.js

@@ -14,7 +14,7 @@ import { applyPendingToActive, createInitialSectionState, getEffectiveColumns, g
 import { applySectionVerticalAlignment } from "./sectionVerticalAlignment.js";
 import { buildTableRowBreakInfo, getRowContinuationSkip, snapRowBreak } from "./tableRowBreak.js";
 import { bandFragmentX, bandTopContentY, isPageFrameRelativeAnchor } from "./textBoxFlow.js";
-import { DEFAULT_TEXTBOX_MARGINS, DEFAULT_TEXTBOX_WIDTH, FOOTNOTE_ENTRY_MARGIN_BOTTOM, FOOTNOTE_FALLBACK_LINE_HEIGHT, FOOTNOTE_SEPARATOR_HEIGHT, floatingTextBoxReservesBand, floatingTextBoxWrapsText, getTableRowLeadingWidth, isFloatingImageRun, isFloatingTextBoxBlock, isTextWrappingFloatingImageRun, resolveTableCellPadding, tableColumnsArePinned } from "./types.js";
+import { DEFAULT_TEXTBOX_MARGINS, DEFAULT_TEXTBOX_WIDTH, FOOTNOTE_ENTRY_MARGIN_BOTTOM, FOOTNOTE_FALLBACK_LINE_HEIGHT, FOOTNOTE_SEPARATOR_HEIGHT, floatingTextBoxReservesBand, floatingTextBoxWrapsText, getTableRowLeadingWidth, isFloatingImageRun, isFloatingTextBoxBlock, isTextWrappingFloatingImageRun, resolveTableCellPadding, resolveTableWidthPx, tableColumnsArePinned } from "./types.js";
 import { panic } from "better-result";
 //#region src/layout-engine/index.ts
 /**
@@ -1036,4 +1036,4 @@ function handleSectionBreak(_block, paginator, nextSectionConfig, nextSectionTyp
 	paginator.updateColumns(nextSectionConfig.columns ?? DEFAULT_COLUMNS);
 }
 //#endregion
-export { DEFAULT_TEXTBOX_MARGINS, DEFAULT_TEXTBOX_WIDTH, FOOTNOTE_ENTRY_MARGIN_BOTTOM, FOOTNOTE_FALLBACK_LINE_HEIGHT, FOOTNOTE_SEPARATOR_HEIGHT, applyContextualSpacing, applyPendingToActive, assertExhaustiveFlowBlock, calculateChainHeight, collectSectionConfigs, computeKeepNextChains, createInitialSectionState, createPaginator, findPageIndexContainingPmPos, floatingTextBoxReservesBand, floatingTextBoxWrapsText, getEffectiveColumns, getEffectiveMargins, getEffectivePageSize, getHeaderRowsHeight, getMidChainIndices, getTableRowLeadingWidth, hasKeepLines, hasPageBreakBefore, isFloatingImageRun, isFloatingTextBoxBlock, isTextWrappingFloatingImageRun, layoutDocument, resolveSectionHeaderFooterRefs, resolveTableCellPadding, scheduleSectionBreak, tableColumnsArePinned };
+export { DEFAULT_TEXTBOX_MARGINS, DEFAULT_TEXTBOX_WIDTH, FOOTNOTE_ENTRY_MARGIN_BOTTOM, FOOTNOTE_FALLBACK_LINE_HEIGHT, FOOTNOTE_SEPARATOR_HEIGHT, applyContextualSpacing, applyPendingToActive, assertExhaustiveFlowBlock, calculateChainHeight, collectSectionConfigs, computeKeepNextChains, createInitialSectionState, createPaginator, findPageIndexContainingPmPos, floatingTextBoxReservesBand, floatingTextBoxWrapsText, getEffectiveColumns, getEffectiveMargins, getEffectivePageSize, getHeaderRowsHeight, getMidChainIndices, getTableRowLeadingWidth, hasKeepLines, hasPageBreakBefore, isFloatingImageRun, isFloatingTextBoxBlock, isTextWrappingFloatingImageRun, layoutDocument, resolveSectionHeaderFooterRefs, resolveTableCellPadding, resolveTableWidthPx, scheduleSectionBreak, tableColumnsArePinned };

package/dist/layout-engine/measure/measureBlocks.js

@@ -4,7 +4,7 @@ import { isParagraphFrameTextBox } from "../paragraphFrame.js";
 import { normalizeSectionBreakType } from "../section-breaks.js";
 import { bandFragmentX, bandTopContentY, isPageFrameRelativeAnchor } from "../textBoxFlow.js";
 import { getTextBoxGroupId } from "../textBoxGroup.js";
-import { DEFAULT_TEXTBOX_MARGINS, floatingTextBoxReservesBand, floatingTextBoxWrapsText, resolveTableCellPadding, tableColumnsArePinned } from "../types.js";
+import { DEFAULT_TEXTBOX_MARGINS, floatingTextBoxReservesBand, floatingTextBoxWrapsText, resolveTableCellPadding, resolveTableWidthPx, tableColumnsArePinned } from "../types.js";
 import { getCachedParagraphMeasure, setCachedParagraphMeasure } from "./cache.js";
 import { resolveFloatingTablePageX } from "./floatingTablePosition.js";
 import { findClearLineY, measureParagraph } from "./measureParagraph.js";
@@ -59,11 +59,6 @@ function emuToPixels(emu) {
 	if (emu === void 0) return 0;
 	return Math.round(emu * 96 / 914400);
 }
-function resolveTableWidthPx(width, widthType, contentWidth) {
-	if (!width) return;
-	if (widthType === "pct") return contentWidth * width / 5e3;
-	if (widthType === "dxa" || !widthType || widthType === "auto") return Math.round(width / 20 * 1.333);
-}
 function measureTableBlock(tableBlock, contentWidth, fieldValues) {
 	let columnWidths = tableBlock.columnWidths ?? [];
 	const explicitWidthPx = resolveTableWidthPx(tableBlock.width, tableBlock.widthType, contentWidth);

package/dist/layout-engine/types.d.ts

@@ -1,7 +1,7 @@
 import { OutlineStyleAttr } from "../types/documentEnumValues.js";
 import { ImagePosition, ImageWrap, NumberFormat, SdtProperties, SdtType, ShapeTextBody, TableCellFormatting, TableWidthType, VerticalAlign } from "@stll/docx-core/model";
 declare namespace types_d_exports {
-  export { BlockId, BorderStyle, CellBorderSpec, CellBorders, ColumnBreakBlock, ColumnBreakMeasure, ColumnLayout, DEFAULT_TEXTBOX_MARGINS, DEFAULT_TEXTBOX_WIDTH, DocumentPosition, FOOTNOTE_ENTRY_MARGIN_BOTTOM, FOOTNOTE_FALLBACK_LINE_HEIGHT, FOOTNOTE_SEPARATOR_HEIGHT, FieldRun, FloatingTablePosition, FlowBlock, FootnoteContent, Fragment, FragmentBase, HeaderFooterContent, HeaderFooterContentHeights, HeaderFooterLayout, HitTestResult, HyperlinkInfo, ImageBlock, ImageFragment, ImageMeasure, ImageRun, ImageRunPosition, Layout, LayoutOptions, LineBreakRun, ListMarkerFormatting, ListNumPr, MathRun, Measure, MeasuredLine, Page, PageBreakBlock, PageBreakMeasure, PageHeaderFooterRefs, PageMargins, ParagraphAttrs, ParagraphBlock, ParagraphBorders, ParagraphFragment, ParagraphIndent, ParagraphMeasure, ParagraphSpacing, RenderedPageBreakRun, Run, RunFormatting, SdtGroup, SectionBreakBlock, SectionBreakMeasure, SectionPageNumbering, TabAlignment, TabRun, TabStop, TableBlock, TableCell, TableCellMeasure, TableFragment, TableMeasure, TableRow, TableRowMeasure, TextBoxBlock, TextBoxFlowAttrs, TextBoxFragment, TextBoxMeasure, TextRun, floatingTextBoxReservesBand, floatingTextBoxWrapsText, getTableRowLeadingWidth, isFloatingImageRun, isFloatingTextBoxBlock, isTextWrappingFloatingImageRun, resolveTableCellPadding, tableColumnsArePinned };
+  export { BlockId, BorderStyle, CellBorderSpec, CellBorders, ColumnBreakBlock, ColumnBreakMeasure, ColumnLayout, DEFAULT_TEXTBOX_MARGINS, DEFAULT_TEXTBOX_WIDTH, DocumentPosition, FOOTNOTE_ENTRY_MARGIN_BOTTOM, FOOTNOTE_FALLBACK_LINE_HEIGHT, FOOTNOTE_SEPARATOR_HEIGHT, FieldRun, FloatingTablePosition, FlowBlock, FootnoteContent, Fragment, FragmentBase, HeaderFooterContent, HeaderFooterContentHeights, HeaderFooterLayout, HitTestResult, HyperlinkInfo, ImageBlock, ImageFragment, ImageMeasure, ImageRun, ImageRunPosition, Layout, LayoutOptions, LineBreakRun, ListMarkerFormatting, ListNumPr, MathRun, Measure, MeasuredLine, Page, PageBreakBlock, PageBreakMeasure, PageHeaderFooterRefs, PageMargins, ParagraphAttrs, ParagraphBlock, ParagraphBorders, ParagraphFragment, ParagraphIndent, ParagraphMeasure, ParagraphSpacing, RenderedPageBreakRun, Run, RunFormatting, SdtGroup, SectionBreakBlock, SectionBreakMeasure, SectionPageNumbering, TabAlignment, TabRun, TabStop, TableBlock, TableCell, TableCellMeasure, TableFragment, TableMeasure, TableRow, TableRowMeasure, TextBoxBlock, TextBoxFlowAttrs, TextBoxFragment, TextBoxMeasure, TextRun, floatingTextBoxReservesBand, floatingTextBoxWrapsText, getTableRowLeadingWidth, isFloatingImageRun, isFloatingTextBoxBlock, isTextWrappingFloatingImageRun, resolveTableCellPadding, resolveTableWidthPx, tableColumnsArePinned };
 }
 /**
  * Unique identifier for a block in the document.
@@ -1429,7 +1429,13 @@ declare function floatingTextBoxReservesBand(block: TextBoxFlowAttrs): boolean;
  * and the painter both consult this so their line count and `white-space` agree.
  */
 declare function tableColumnsArePinned(table: TableBlock): boolean;
+/**
+ * Resolve a `w:tblW`/`w:tcW` pair to pixels. The single reader: measurement and
+ * the footnote layout bridge both go through it so a table cannot be pinned in
+ * one and autofitted in the other.
+ */
+declare function resolveTableWidthPx(width: number | undefined, widthType: TableWidthType | undefined, containerWidth: number): number | undefined;
 /** Return the leading visual offset for a row with omitted grid columns. */
 declare const getTableRowLeadingWidth: (row: TableRow, columnWidths: readonly number[]) => number;
 //#endregion
-export { BlockId, BorderStyle, CellBorderSpec, CellBorders, ColumnBreakBlock, ColumnBreakMeasure, ColumnLayout, DEFAULT_TEXTBOX_MARGINS, DEFAULT_TEXTBOX_WIDTH, DocumentPosition, FOOTNOTE_ENTRY_MARGIN_BOTTOM, FOOTNOTE_FALLBACK_LINE_HEIGHT, FOOTNOTE_SEPARATOR_HEIGHT, FieldRun, FloatingTablePosition, FlowBlock, FootnoteContent, Fragment, FragmentBase, HeaderFooterContent, HeaderFooterContentHeights, HeaderFooterLayout, HitTestResult, HyperlinkInfo, ImageBlock, ImageFragment, ImageMeasure, ImageRun, ImageRunPosition, Layout, LayoutOptions, LineBreakRun, ListMarkerFormatting, ListNumPr, MathRun, Measure, MeasuredLine, Page, PageBreakBlock, PageBreakMeasure, PageHeaderFooterRefs, PageMargins, ParagraphAttrs, ParagraphBlock, ParagraphBorders, ParagraphFragment, ParagraphIndent, ParagraphMeasure, ParagraphSpacing, RenderedPageBreakRun, Run, RunFormatting, SdtGroup, SectionBreakBlock, SectionBreakMeasure, SectionPageNumbering, TabAlignment, TabRun, TabStop, TableBlock, TableCell, TableCellMeasure, TableFragment, TableMeasure, TableRow, TableRowMeasure, TextBoxBlock, TextBoxFlowAttrs, TextBoxFragment, TextBoxMeasure, TextRun, floatingTextBoxReservesBand, floatingTextBoxWrapsText, getTableRowLeadingWidth, isFloatingImageRun, isFloatingTextBoxBlock, isTextWrappingFloatingImageRun, resolveTableCellPadding, tableColumnsArePinned, types_d_exports };
+export { BlockId, BorderStyle, CellBorderSpec, CellBorders, ColumnBreakBlock, ColumnBreakMeasure, ColumnLayout, DEFAULT_TEXTBOX_MARGINS, DEFAULT_TEXTBOX_WIDTH, DocumentPosition, FOOTNOTE_ENTRY_MARGIN_BOTTOM, FOOTNOTE_FALLBACK_LINE_HEIGHT, FOOTNOTE_SEPARATOR_HEIGHT, FieldRun, FloatingTablePosition, FlowBlock, FootnoteContent, Fragment, FragmentBase, HeaderFooterContent, HeaderFooterContentHeights, HeaderFooterLayout, HitTestResult, HyperlinkInfo, ImageBlock, ImageFragment, ImageMeasure, ImageRun, ImageRunPosition, Layout, LayoutOptions, LineBreakRun, ListMarkerFormatting, ListNumPr, MathRun, Measure, MeasuredLine, Page, PageBreakBlock, PageBreakMeasure, PageHeaderFooterRefs, PageMargins, ParagraphAttrs, ParagraphBlock, ParagraphBorders, ParagraphFragment, ParagraphIndent, ParagraphMeasure, ParagraphSpacing, RenderedPageBreakRun, Run, RunFormatting, SdtGroup, SectionBreakBlock, SectionBreakMeasure, SectionPageNumbering, TabAlignment, TabRun, TabStop, TableBlock, TableCell, TableCellMeasure, TableFragment, TableMeasure, TableRow, TableRowMeasure, TextBoxBlock, TextBoxFlowAttrs, TextBoxFragment, TextBoxMeasure, TextRun, floatingTextBoxReservesBand, floatingTextBoxWrapsText, getTableRowLeadingWidth, isFloatingImageRun, isFloatingTextBoxBlock, isTextWrappingFloatingImageRun, resolveTableCellPadding, resolveTableWidthPx, tableColumnsArePinned, types_d_exports };

package/dist/layout-engine/types.js

@@ -14,6 +14,7 @@ var types_exports = /* @__PURE__ */ __exportAll({
 	isFloatingTextBoxBlock: () => isFloatingTextBoxBlock,
 	isTextWrappingFloatingImageRun: () => isTextWrappingFloatingImageRun,
 	resolveTableCellPadding: () => resolveTableCellPadding,
+	resolveTableWidthPx: () => resolveTableWidthPx,
 	tableColumnsArePinned: () => tableColumnsArePinned
 });
 const DEFAULT_TABLE_CELL_PADDING = {
@@ -129,7 +130,39 @@ function floatingTextBoxReservesBand(block) {
 */
 function tableColumnsArePinned(table) {
 	if (table.layout === "fixed") return true;
-	return table.widthType === "dxa" || table.widthType === "pct";
+	return hasMeasuredTableWidth(table.widthType);
+}
+/**
+* Whether `w:tblW`/`w:tcW`'s `w:w` is a measurement at all.
+*
+* Under `w:type="auto"` or `"nil"` (§17.18.87) the number is meaningless:
+* `auto` asks the consumer to size the table to its content and `nil` declares
+* no width, so both ignore `w:w` entirely. Word still writes a leftover value
+* there, and reading it as twips pins a table that should autofit.
+*/
+function hasMeasuredTableWidth(widthType) {
+	switch (widthType) {
+		case "dxa":
+		case "pct": return true;
+		case "auto":
+		case "nil":
+		case void 0: return false;
+		default: return widthType;
+	}
+}
+const TWIPS_PER_INCH = 1440;
+const PIXELS_PER_INCH = 96;
+/** `w:type="pct"` measures in fiftieths of a percent, so 5000 is 100 %. */
+const PERCENT_DENOMINATOR = 5e3;
+/**
+* Resolve a `w:tblW`/`w:tcW` pair to pixels. The single reader: measurement and
+* the footnote layout bridge both go through it so a table cannot be pinned in
+* one and autofitted in the other.
+*/
+function resolveTableWidthPx(width, widthType, containerWidth) {
+	if (width === void 0 || width <= 0 || !hasMeasuredTableWidth(widthType)) return;
+	if (widthType === "pct") return width / PERCENT_DENOMINATOR * containerWidth;
+	return width / TWIPS_PER_INCH * PIXELS_PER_INCH;
 }
 const tableRowOwnsNestedGrid = (row) => {
 	const cell = row.cells.length === 1 ? row.cells.at(0) : void 0;
@@ -142,4 +175,4 @@ const getTableRowLeadingWidth = (row, columnWidths) => {
 	return columnWidths.slice(0, row.gridBefore ?? 0).reduce((sum, columnWidth) => sum + columnWidth, 0);
 };
 //#endregion
-export { DEFAULT_TEXTBOX_MARGINS, DEFAULT_TEXTBOX_WIDTH, FOOTNOTE_ENTRY_MARGIN_BOTTOM, FOOTNOTE_FALLBACK_LINE_HEIGHT, FOOTNOTE_SEPARATOR_HEIGHT, floatingTextBoxReservesBand, floatingTextBoxWrapsText, getTableRowLeadingWidth, isFloatingImageRun, isFloatingTextBoxBlock, isTextWrappingFloatingImageRun, resolveTableCellPadding, tableColumnsArePinned, types_exports };
+export { DEFAULT_TEXTBOX_MARGINS, DEFAULT_TEXTBOX_WIDTH, FOOTNOTE_ENTRY_MARGIN_BOTTOM, FOOTNOTE_FALLBACK_LINE_HEIGHT, FOOTNOTE_SEPARATOR_HEIGHT, floatingTextBoxReservesBand, floatingTextBoxWrapsText, getTableRowLeadingWidth, isFloatingImageRun, isFloatingTextBoxBlock, isTextWrappingFloatingImageRun, resolveTableCellPadding, resolveTableWidthPx, tableColumnsArePinned, types_exports };

package/dist/layout-painter/renderImage.js

@@ -1,5 +1,5 @@
 import { applySanitizedImageSrc } from "../utils/sanitizeImageSrc.js";
-import { sanitizeExternalUrl } from "../utils/urlSecurity.js";
+import { anchorTargetAttrs, sanitizeExternalUrl } from "../utils/urlSecurity.js";
 //#region src/layout-painter/renderImage.ts
 /**
 * CSS class names for image elements
@@ -145,8 +145,9 @@ function renderImageFragment(fragment, block, _measure, _context, options = {})
 	if (hlinkHref) {
 		const linkEl = doc.createElement("a");
 		linkEl.href = hlinkHref;
-		linkEl.target = "_blank";
-		linkEl.rel = "noopener noreferrer";
+		const { target, rel } = anchorTargetAttrs(void 0);
+		linkEl.target = target;
+		linkEl.rel = rel;
 		linkEl.style.display = "block";
 		linkEl.style.width = "100%";
 		linkEl.style.height = "100%";

package/dist/layout-painter/renderParagraph.js

@@ -16,7 +16,7 @@ import { resolvePhysicalParagraphInlineLayout } from "../utils/paragraphInlineLa
 import { inlineImageBoundingBox, parseRotationDegrees, rotatedBoundingBox } from "../utils/rotationBoundingBox.js";
 import { sanitizeImageSrc } from "../utils/sanitizeImageSrc.js";
 import { SCRIPT_CLASS, hasCjk, hasComplexScript, segmentByScript } from "../utils/scriptSegments.js";
-import { sanitizeExternalUrl } from "../utils/urlSecurity.js";
+import { anchorTargetAttrs, sanitizeExternalUrl } from "../utils/urlSecurity.js";
 import { borderStrokeToCss, resolveParagraphBorderHorizontalOutsets } from "./borderStroke.js";
 import { planCursiveJoiners, withCursiveJoiners } from "./cursiveJoiners.js";
 import { getAutomaticTextColorForBackground, setAuthoredBackgroundColor, setAuthoredTextColor } from "./documentColors.js";
@@ -357,8 +357,9 @@ function renderTextRun(run, doc, options) {
 		anchor.href = hyperlinkHref;
 		if (options?.hyperlinkDirection || DISPLAYED_URL_PATTERN.test(paintedText.trim())) anchor.dir = LEFT_TO_RIGHT_DIRECTION;
 		if (!isBookmarkTarget) {
-			anchor.target = "_blank";
-			anchor.rel = "noopener noreferrer";
+			const { target, rel } = anchorTargetAttrs(void 0);
+			anchor.target = target;
+			anchor.rel = rel;
 		}
 		if (run.hyperlink.tooltip) anchor.title = run.hyperlink.tooltip;
 		appendPaintedText({

package/dist/managers/autoSaveCodec.js

@@ -1,13 +1,7 @@
 import { validateFolioDocumentModel } from "../docx/modelValidation.js";
+import { bytesToBase64 } from "../utils/base64.js";
 //#region src/managers/autoSaveCodec.ts
 const AUTOSAVE_FORMAT_VERSION = 2;
-const BASE64_CHUNK_BYTES = 32768;
-const encodeBase64 = (buffer) => {
-	const bytes = new Uint8Array(buffer);
-	const chunks = [];
-	for (let offset = 0; offset < bytes.length; offset += BASE64_CHUNK_BYTES) chunks.push(String.fromCharCode(...bytes.subarray(offset, offset + BASE64_CHUNK_BYTES)));
-	return btoa(chunks.join(""));
-};
 const decodeBase64 = (value) => {
 	const binary = atob(value);
 	const bytes = new Uint8Array(binary.length);
@@ -23,7 +17,7 @@ const encodeValue = (value) => {
 	};
 	if (value instanceof ArrayBuffer) return {
 		type: "arrayBuffer",
-		value: encodeBase64(value)
+		value: bytesToBase64(new Uint8Array(value))
 	};
 	if (value instanceof Map) return {
 		type: "map",

package/dist/markdown/images.js

@@ -1,3 +1,4 @@
+import { bytesToBase64 } from "../utils/base64.js";
 //#region src/markdown/images.ts
 const MIME_TO_EXT = {
 	"image/png": "png",
@@ -14,10 +15,6 @@ const MIME_TO_EXT = {
 function extFor(mimeType, fallback) {
 	return MIME_TO_EXT[mimeType] ?? fallback;
 }
-function bytesToBase64(bytes) {
-	if (typeof Buffer !== "undefined") return Buffer.from(bytes).toString("base64");
-	return btoa(new TextDecoder("latin1").decode(bytes));
-}
 function toUint8(data) {
 	if (data instanceof Uint8Array) return data;
 	return new Uint8Array(data);

package/dist/markdown/index.js

@@ -19,7 +19,7 @@ function toMarkdownResult(doc, opts) {
 	return renderDocument(doc, opts);
 }
 function renderDocument(doc, opts = {}) {
-	const ctx = newContext(opts);
+	const ctx = newContext(opts, doc.package.styles);
 	const markdown = appendTrailers(ctx, doc, renderBlocks(ctx, doc.package, doc.package.document.content));
 	if (doc.warnings) ctx.warnings.unshift(...doc.warnings);
 	if (!markdown.trim()) ctx.warnings.push("document has no content");

package/dist/markdown/internals.d.ts

@@ -1,10 +1,15 @@
+import { document_d_exports } from "../types/document.js";
 import { MarkdownOptions, RenderContext } from "./types.js";
 //#region src/markdown/internals.d.ts
 /**
  * Build a fresh `RenderContext` from caller options, applying defaults. The
  * `footnotes` default is `"keep"` (folio addition over upstream #595).
+ *
+ * The document's styles are indexed once here: every paragraph asks the index
+ * whether it is a heading or a quote, so rebuilding it per paragraph would
+ * make the render quadratic.
  */
-declare function newContext(opts?: MarkdownOptions): RenderContext;
+declare function newContext(opts?: MarkdownOptions, styles?: document_d_exports.StyleDefinitions | undefined): RenderContext;
 /**
  * Push a warning into the context, deduplicating against existing entries so
  * recurring messages appear at most once.

package/dist/markdown/internals.js

@@ -1,10 +1,23 @@
+import { createBuiltInStyleIndex } from "../docx/builtInStyles.js";
 //#region src/markdown/internals.ts
 /**
+* Internal helpers shared by the markdown converter: context construction and
+* warning dedupe. Kept free of renderer imports so the renderers can import
+* `pushWarning` without forming an import cycle (trailer emission, which needs
+* `renderBlock`, lives in `trailers.ts`). Ported from eigenpal/docx-editor
+* PR #595, trimmed to the sync continuous path.
+*/
+/**
 * Build a fresh `RenderContext` from caller options, applying defaults. The
 * `footnotes` default is `"keep"` (folio addition over upstream #595).
+*
+* The document's styles are indexed once here: every paragraph asks the index
+* whether it is a heading or a quote, so rebuilding it per paragraph would
+* make the render quadratic.
 */
-function newContext(opts = {}) {
+function newContext(opts = {}, styles) {
 	return {
+		builtInStyles: createBuiltInStyleIndex(styles?.styles ?? [], styles?.docDefaults),
 		opts: {
 			annotations: opts.annotations ?? "html",
 			trackedChanges: opts.trackedChanges ?? "annotate",