@texuli/core 0.1.0-next.1 → 0.1.0-next.2

package/README.md

@@ -1,8 +1,11 @@
 # @texuli/core
 
 **Layer L0: texels.** Framework-free TypeScript behavior and policy that every
-Texuli component is built from. No Svelte, no runtime dependencies. Private
-workspace package (`"private": true`), not published.
+Texuli component is built from. No Svelte, no runtime dependencies.
+Published to npm as `0.1.0-next.2` under the `next`
+dist-tag (by CI, with provenance); no stable release (`latest` is reserved
+for 1.0.0), so install it with `@next`. The workspace package stays
+`"private": true`.
 
 ## What exists today
 
@@ -38,12 +41,12 @@ rest.
 | URL policy (links) | `safeHref`, `type HrefTrust` | [core-url-policy](docs/core-url-policy.md) |
 | URL policy (media) | `safeImageSrc`, `safeImageSrcset`, `safeMediaSrc`, `MAX_DATA_IMAGE_BYTES` | [core-url-policy](docs/core-url-policy.md) |
 
-The editor texels are not in the root barrel: the barrel measures 22.63 of
-its 24 KiB budget. `pnpm size --filter core/editor` (2026-10-25) measures
-`editor-history` at 754 B and `editor-keymap` at 2.49 KiB, both within the 4
-KiB per-texel default. `editor-markdown` (7.03 KiB), `editor-model` (7.81
-KiB) and `editor-transforms` (10.36 KiB) are over it, so their budget rows
-are pending with the owner.
+The editor texels are not in the root barrel: the barrel measures 22.64 of
+its 24 KiB budget. `pnpm size` (2026-10-26) measures `editor-history` at
+773 B and `editor-keymap` at 2.49 KiB, both within the 4 KiB per-texel
+default. `editor-markdown` (7.05 of 7.50 KiB), `editor-model` (7.83 of
+8.50 KiB) and `editor-transforms` (10.36 of 11 KiB) are over that default
+and carry their own budget rows; every entry is within budget.
 
 The tables above name the headline exports per texel, not the full surface:
 read `src/index.ts` (and the per-area `index.ts`) for every exported symbol
@@ -86,7 +89,9 @@ isTabbable(stops[0]!);                        // true
 - **`untrusted`** (default, for agent or user content): only `https:`,
   `mailto:` and `#fragment`.
 - **`developer`** (for app-authored props): anything except `javascript:`,
-  `vbscript:`, `data:` and protocol-relative `//host` URLs.
+  `vbscript:`, `data:` and any value opening with two slashes or
+  backslashes in any mix (`//host`, `/\host`, `\/host`, `\\host`) or with
+  any leading backslash, which browsers resolve off-origin.
 - Whitespace and ASCII control characters are stripped before the scheme is
   read, so `java\tscript:` is caught.
 

package/dist/editor/history.js

@@ -18,6 +18,12 @@ export function editorHistoryReducer(history, action) {
             if (!action.result.ok)
                 return { ...history, errors: action.result.errors };
             const state = action.result.state;
+            // A change that leaves the document as it was (a caret mark toggle) is
+            // no undo step, but like a selection change it ends the running typing
+            // step: undo after "a **b**" stops at the format change, not at "".
+            if (state.doc === history.present.doc) {
+                return { ...history, present: state, errors: [], last: null };
+            }
             const kind = action.kind ?? 'other';
             const at = action.at ?? 0;
             const block = focusBlock(state);

package/dist/url/safe-href.js

@@ -4,7 +4,9 @@
  * Two trust tiers:
  * - `developer`: props written by the app's own developers. Every scheme is
  *   allowed except the ones that execute or smuggle content: `javascript:`,
- *   `vbscript:`, `data:` and protocol-relative `//host` URLs.
+ *   `vbscript:`, `data:` and protocol-relative URLs: any value opening with
+ *   two of `/` and `\` (`//host`, `/\host`, `\/host`, `\\host`) or with a
+ *   backslash.
  * - `untrusted`: content an agent or a user produced. Only `https:`,
  *   `mailto:` and same-document `#fragment` links pass, and additionally:
  *   - no invisible formatting characters anywhere (zero-width, bidi
@@ -19,6 +21,7 @@
  * `untrusted` (`resolveTrust`). A rejected value returns `undefined`, so the
  * caller renders inert text.
  */
+import { hasAuthorityPrefix } from "../url-policy/shared.js";
 import { resolveTrust } from "../url-policy/trust.js";
 const BLOCKED_SCHEMES = new Set(['javascript:', 'vbscript:', 'data:']);
 const UNTRUSTED_SCHEMES = new Set(['https:', 'mailto:']);
@@ -67,7 +70,8 @@ export function safeHref(value, requested = 'untrusted') {
         return undefined;
     if (href.startsWith('#'))
         return href;
-    if (href.startsWith('//') || href.startsWith('\\'))
+    // `//`, `/\`, `\/` and `\\` all open another origin; so does any leading `\`.
+    if (hasAuthorityPrefix(href))
         return undefined;
     const scheme = /^([a-z][a-z0-9+.-]*):/i.exec(href)?.[1]?.toLowerCase();
     if (trust === 'untrusted') {

package/dist/url-policy/shared.d.ts

@@ -1,4 +1,12 @@
 export declare function cleanSource(value: unknown): string | undefined;
+/**
+ * Whether a URL opens with a backslash or with `//` or `/\`. Browsers read
+ * `\` as `/` in http(s) URLs, so `//host`, `/\host`, `\/host` and `\\host`
+ * are all protocol-relative and leave the page's origin (`/\evil.example`
+ * resolves to `https://evil.example/`). Callers pass the value after
+ * trimming and stripping control characters.
+ */
+export declare function hasAuthorityPrefix(value: string): boolean;
 export declare function sourceScheme(value: string): string | undefined;
 export declare function isBlockedSource(value: string): boolean;
 export declare function isAllowedRelativeOrWebSource(value: string): boolean;

package/dist/url-policy/shared.js

@@ -11,14 +11,22 @@ export function cleanSource(value) {
     }
     return source;
 }
+/**
+ * Whether a URL opens with a backslash or with `//` or `/\`. Browsers read
+ * `\` as `/` in http(s) URLs, so `//host`, `/\host`, `\/host` and `\\host`
+ * are all protocol-relative and leave the page's origin (`/\evil.example`
+ * resolves to `https://evil.example/`). Callers pass the value after
+ * trimming and stripping control characters.
+ */
+export function hasAuthorityPrefix(value) {
+    return /^(\\|\/[/\\])/.test(value);
+}
 export function sourceScheme(value) {
     return /^([a-z][a-z0-9+.-]*):/i.exec(value)?.[1]?.toLowerCase();
 }
 export function isBlockedSource(value) {
     const scheme = sourceScheme(value);
-    return ((scheme !== undefined && BLOCKED_SCHEMES.has(`${scheme}:`)) ||
-        value.startsWith('//') ||
-        value.startsWith('\\'));
+    return (scheme !== undefined && BLOCKED_SCHEMES.has(`${scheme}:`)) || hasAuthorityPrefix(value);
 }
 export function isAllowedRelativeOrWebSource(value) {
     const scheme = sourceScheme(value);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@texuli/core",
-  "version": "0.1.0-next.1",
+  "version": "0.1.0-next.2",
   "description": "Texels: framework-free behavior and policy that every Texuli component is built from.",
   "keywords": [
     "svelte",