@underverse-ui/underverse 1.0.184 → 1.0.186

package/dist/index.cjs

@@ -1086,6 +1086,11 @@ var en_default = {
       borderColor: "Border Color",
       clearBorder: "Clear Border",
       formula: "Formula",
+      formulaBar: "Formula bar",
+      formulaError: "Formula error",
+      editFormula: "Edit formula",
+      clearCell: "Clear cell",
+      convertToValue: "Convert to value",
       numberFormat: "Number Format",
       formatText: "Text",
       formatDate: "Date",
@@ -1508,6 +1513,11 @@ var vi_default = {
       borderColor: "M\xE0u vi\u1EC1n",
       clearBorder: "X\xF3a vi\u1EC1n",
       formula: "C\xF4ng th\u1EE9c",
+      formulaBar: "Thanh c\xF4ng th\u1EE9c",
+      formulaError: "L\u1ED7i c\xF4ng th\u1EE9c",
+      editFormula: "S\u1EEDa c\xF4ng th\u1EE9c",
+      clearCell: "X\xF3a n\u1ED9i dung \xF4",
+      convertToValue: "Chuy\u1EC3n th\xE0nh gi\xE1 tr\u1ECB",
       numberFormat: "\u0110\u1ECBnh d\u1EA1ng s\u1ED1",
       formatText: "Ch\u1EEF",
       formatDate: "Ng\xE0y",
@@ -1930,6 +1940,11 @@ var ko_default = {
       borderColor: "\uD14C\uB450\uB9AC \uC0C9\uC0C1",
       clearBorder: "\uD14C\uB450\uB9AC \uC9C0\uC6B0\uAE30",
       formula: "\uC218\uC2DD",
+      formulaBar: "\uC218\uC2DD \uC785\uB825\uC904",
+      formulaError: "\uC218\uC2DD \uC624\uB958",
+      editFormula: "\uC218\uC2DD \uD3B8\uC9D1",
+      clearCell: "\uC140 \uB0B4\uC6A9 \uC0AD\uC81C",
+      convertToValue: "\uAC12\uC73C\uB85C \uBCC0\uD658",
       numberFormat: "\uD45C\uC2DC \uD615\uC2DD",
       formatText: "\uD14D\uC2A4\uD2B8",
       formatDate: "\uB0A0\uC9DC",
@@ -2352,6 +2367,11 @@ var ja_default = {
       borderColor: "\u67A0\u7DDA\u306E\u8272",
       clearBorder: "\u67A0\u7DDA\u3092\u30AF\u30EA\u30A2",
       formula: "\u6570\u5F0F",
+      formulaBar: "\u6570\u5F0F\u30D0\u30FC",
+      formulaError: "\u6570\u5F0F\u30A8\u30E9\u30FC",
+      editFormula: "\u6570\u5F0F\u3092\u7DE8\u96C6",
+      clearCell: "\u30BB\u30EB\u3092\u30AF\u30EA\u30A2",
+      convertToValue: "\u5024\u306B\u5909\u63DB",
       numberFormat: "\u8868\u793A\u5F62\u5F0F",
       formatText: "\u30C6\u30AD\u30B9\u30C8",
       formatDate: "\u65E5\u4ED8",
@@ -27548,8 +27568,8 @@ function useLocale2() {
 }
 
 // src/components/UEditor/UEditor.tsx
-var import_react80 = __toESM(require("react"), 1);
-var import_react81 = require("@tiptap/react");
+var import_react82 = __toESM(require("react"), 1);
+var import_react83 = require("@tiptap/react");
 
 // src/components/UEditor/extensions.ts
 var import_core16 = require("@tiptap/core");
@@ -27711,6 +27731,54 @@ var import_react49 = require("@tiptap/react");
 var import_react47 = __toESM(require("react"), 1);
 var import_react48 = require("@tiptap/react");
 var import_lucide_react43 = require("lucide-react");
+
+// src/components/UEditor/url-safety.ts
+var LINK_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:", "mailto:", "tel:"]);
+var IMAGE_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:"]);
+var FILE_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:", "blob:"]);
+function normalizeUrlInput(raw) {
+  return raw.trim().replace(/[\u0000-\u001F\u007F\s]+/g, "");
+}
+function isProtocolRelativeUrl(value) {
+  return value.startsWith("//");
+}
+function isRelativeUrl(value) {
+  return value.startsWith("/") || value.startsWith("./") || value.startsWith("../") || value.startsWith("#");
+}
+function isDataImageUrl(value) {
+  return /^data:image\/(?:png|jpe?g|gif|webp|svg\+xml|bmp|x-icon|avif);base64,/i.test(value);
+}
+function isDataFileUrl(value) {
+  return /^data:[a-z0-9][a-z0-9!#$&^_.+-]*\/[a-z0-9][a-z0-9!#$&^_.+-]*(?:;[a-z0-9!#$&^_.+-]+=[^;,]*)*;base64,[a-z0-9+/]*={0,2}$/i.test(value);
+}
+function isSafeUEditorUrl(raw, kind) {
+  const value = normalizeUrlInput(raw);
+  if (!value) return false;
+  if (kind === "image" && isDataImageUrl(value)) return true;
+  if (kind === "file" && isDataFileUrl(value)) return true;
+  if (isProtocolRelativeUrl(value)) return false;
+  if (isRelativeUrl(value)) return true;
+  try {
+    const parsed = new URL(value);
+    if (kind === "image") return IMAGE_PROTOCOLS.has(parsed.protocol);
+    if (kind === "file") return FILE_PROTOCOLS.has(parsed.protocol);
+    return LINK_PROTOCOLS.has(parsed.protocol);
+  } catch {
+    return false;
+  }
+}
+function sanitizeUEditorUrl(raw, kind) {
+  const value = raw.trim();
+  if (!value) return "";
+  if (isSafeUEditorUrl(value, kind)) return normalizeUrlInput(value);
+  if (kind === "link" && !isProtocolRelativeUrl(value) && !/^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(value)) {
+    const withProtocol = `https://${value}`;
+    return isSafeUEditorUrl(withProtocol, kind) ? withProtocol : "";
+  }
+  return "";
+}
+
+// src/components/UEditor/BookmarkView.tsx
 var import_jsx_runtime80 = require("react/jsx-runtime");
 var BookmarkView = ({ node, updateAttributes, selected, editor }) => {
   const t = useSmartTranslations("UEditor");
@@ -27718,17 +27786,25 @@ var BookmarkView = ({ node, updateAttributes, selected, editor }) => {
   const [loading2, setLoading] = (0, import_react47.useState)(false);
   const [error, setError] = (0, import_react47.useState)(false);
   const [retryToken, setRetryToken] = (0, import_react47.useState)(0);
-  const fetchedRetryTokenRef = import_react47.default.useRef(-1);
+  const lastFetchKeyRef = import_react47.default.useRef("");
   const fetchRequestIdRef = import_react47.default.useRef(0);
+  const safeUrl = sanitizeUEditorUrl(String(url ?? ""), "link");
+  const safeImage = sanitizeUEditorUrl(String(image ?? ""), "image");
+  const clickToOpenNewTabMessage = t("bookmark.clickToOpenNewTab");
+  const clickToOpenLinkMessage = t("bookmark.clickToOpenLink");
+  const noDescriptionMessage = t("bookmark.noDescription");
   (0, import_react47.useEffect)(() => {
     if (title && retryToken === 0) return;
-    if (fetchedRetryTokenRef.current === retryToken) return;
-    fetchedRetryTokenRef.current = retryToken;
+    if (!safeUrl) return;
+    const fetchKey = `${safeUrl}\0${retryToken}`;
+    if (lastFetchKeyRef.current === fetchKey) return;
+    lastFetchKeyRef.current = fetchKey;
     const requestId = fetchRequestIdRef.current + 1;
     fetchRequestIdRef.current = requestId;
+    let active = true;
     const safeUpdateAttributes = (attrs) => {
       Promise.resolve().then(() => {
-        if (fetchRequestIdRef.current === requestId && editor && !editor.isDestroyed) {
+        if (active && fetchRequestIdRef.current === requestId && editor && !editor.isDestroyed) {
           updateAttributes(attrs);
         }
       });
@@ -27737,43 +27813,75 @@ var BookmarkView = ({ node, updateAttributes, selected, editor }) => {
     const fetchMetadata = extension?.options?.fetchMetadata;
     if (!fetchMetadata) {
       try {
-        const hostname = new URL(url).hostname;
+        const hostname = new URL(safeUrl).hostname;
         safeUpdateAttributes({
-          title: hostname || url,
-          description: t("bookmark.clickToOpenNewTab"),
+          title: hostname || safeUrl,
+          description: clickToOpenNewTabMessage,
           publisher: hostname
         });
       } catch {
         safeUpdateAttributes({
-          title: url,
-          description: t("bookmark.clickToOpenLink"),
+          title: safeUrl,
+          description: clickToOpenLinkMessage,
           publisher: ""
         });
       }
-      return;
+      return () => {
+        active = false;
+      };
     }
-    setLoading(true);
-    setError(false);
-    fetchMetadata(url).then((meta) => {
-      if (fetchRequestIdRef.current !== requestId) return;
+    queueMicrotask(() => {
+      if (!active) return;
+      setLoading(true);
+      setError(false);
+    });
+    fetchMetadata(safeUrl).then((meta) => {
+      if (!active || fetchRequestIdRef.current !== requestId) return;
+      const hostname = (() => {
+        try {
+          return new URL(safeUrl).hostname;
+        } catch {
+          return "";
+        }
+      })();
       safeUpdateAttributes({
-        title: meta.title || new URL(url).hostname || url,
-        description: meta.description || t("bookmark.noDescription"),
-        image: meta.image || "",
-        publisher: meta.publisher || new URL(url).hostname || ""
+        title: meta.title || hostname || safeUrl,
+        description: meta.description || noDescriptionMessage,
+        image: meta.image ? sanitizeUEditorUrl(meta.image, "image") : "",
+        publisher: meta.publisher || hostname
       });
       setLoading(false);
     }).catch(() => {
-      if (fetchRequestIdRef.current !== requestId) return;
+      if (!active || fetchRequestIdRef.current !== requestId) return;
       setError(true);
       setLoading(false);
     });
-    return void 0;
-  }, [url, title, editor, updateAttributes, t, retryToken]);
-  const handleOpenLink = (e) => {
-    e.preventDefault();
-    e.stopPropagation();
-    window.open(url, "_blank", "noopener,noreferrer");
+    return () => {
+      active = false;
+    };
+  }, [
+    safeUrl,
+    title,
+    editor,
+    updateAttributes,
+    retryToken,
+    clickToOpenNewTabMessage,
+    clickToOpenLinkMessage,
+    noDescriptionMessage
+  ]);
+  const openLink = () => {
+    if (safeUrl) window.open(safeUrl, "_blank", "noopener,noreferrer");
+  };
+  const handleOpenLink = (event) => {
+    event.preventDefault();
+    event.stopPropagation();
+    openLink();
+  };
+  const handleKeyDown2 = (event) => {
+    if (event.key !== "Enter") return;
+    event.preventDefault();
+    event.stopPropagation();
+    openLink();
   };
   const handleRetryPreview = (event) => {
     event.preventDefault();
@@ -27782,7 +27890,7 @@ var BookmarkView = ({ node, updateAttributes, selected, editor }) => {
   };
   const displayPublisher = publisher || (() => {
     try {
-      return new URL(url).hostname;
+      return safeUrl ? new URL(safeUrl).hostname : "";
     } catch {
       return "";
     }
@@ -27795,6 +27903,10 @@ var BookmarkView = ({ node, updateAttributes, selected, editor }) => {
         selected && "ring-2 ring-primary/45 border-primary/20 shadow-sm"
       ),
       onClick: handleOpenLink,
+      onKeyDown: handleKeyDown2,
+      role: "link",
+      tabIndex: safeUrl ? 0 : -1,
+      "aria-disabled": !safeUrl,
       children: loading2 ? /* @__PURE__ */ (0, import_jsx_runtime80.jsxs)("div", { className: "flex items-center justify-between p-4 gap-4 animate-pulse", children: [
         /* @__PURE__ */ (0, import_jsx_runtime80.jsxs)("div", { className: "flex-1 flex flex-col gap-2", children: [
           /* @__PURE__ */ (0, import_jsx_runtime80.jsx)("div", { className: "h-4 w-1/3 bg-muted-foreground/20 rounded" }),
@@ -27809,11 +27921,11 @@ var BookmarkView = ({ node, updateAttributes, selected, editor }) => {
               /* @__PURE__ */ (0, import_jsx_runtime80.jsx)(import_lucide_react43.Globe, { className: "h-3 w-3 flex-shrink-0" }),
               displayPublisher
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime80.jsx)("h4", { className: "text-sm font-semibold text-foreground line-clamp-1 break-all", children: title || url }),
+            /* @__PURE__ */ (0, import_jsx_runtime80.jsx)("h4", { className: "text-sm font-semibold text-foreground line-clamp-1 break-all", children: title || safeUrl || String(url ?? "") }),
             /* @__PURE__ */ (0, import_jsx_runtime80.jsx)("p", { className: "text-xs text-muted-foreground line-clamp-2 leading-relaxed", children: description })
           ] }),
           /* @__PURE__ */ (0, import_jsx_runtime80.jsxs)("span", { className: "text-[11px] text-primary/80 font-mono mt-2 truncate flex items-center gap-1", children: [
-            url,
+            safeUrl || String(url ?? ""),
             /* @__PURE__ */ (0, import_jsx_runtime80.jsx)(import_lucide_react43.ExternalLink, { className: "h-3 w-3 flex-shrink-0" })
           ] }),
           error && /* @__PURE__ */ (0, import_jsx_runtime80.jsxs)("div", { className: "mt-2 flex flex-wrap items-center gap-2 text-xs text-destructive", children: [
@@ -27835,10 +27947,10 @@ var BookmarkView = ({ node, updateAttributes, selected, editor }) => {
             )
           ] })
         ] }),
-        image && /* @__PURE__ */ (0, import_jsx_runtime80.jsx)("div", { className: "relative w-full sm:w-44 h-32 sm:h-auto flex-shrink-0 bg-muted overflow-hidden border-t sm:border-t-0 sm:border-l border-border/50", children: /* @__PURE__ */ (0, import_jsx_runtime80.jsx)(
+        safeImage && /* @__PURE__ */ (0, import_jsx_runtime80.jsx)("div", { className: "relative w-full sm:w-44 h-32 sm:h-auto flex-shrink-0 bg-muted overflow-hidden border-t sm:border-t-0 sm:border-l border-border/50", children: /* @__PURE__ */ (0, import_jsx_runtime80.jsx)(
           "img",
           {
-            src: image,
+            src: safeImage,
             alt: title || "Link preview image",
             className: "absolute inset-0 w-full h-full object-cover transition-opacity duration-300",
             onError: (e) => {
@@ -27868,11 +27980,11 @@ var Bookmark = import_core2.Node.create({
     return {
       url: {
         default: "",
-        parseHTML: (element) => element.getAttribute("href") || element.getAttribute("data-url") || "",
-        renderHTML: (attributes) => ({
-          href: attributes.url,
-          "data-url": attributes.url
-        })
+        parseHTML: (element) => sanitizeUEditorUrl(element.getAttribute("href") || element.getAttribute("data-url") || "", "link"),
+        renderHTML: (attributes) => {
+          const url = sanitizeUEditorUrl(String(attributes.url ?? ""), "link");
+          return url ? { href: url, "data-url": url } : {};
+        }
       },
       title: {
         default: "",
@@ -27890,10 +28002,11 @@ var Bookmark = import_core2.Node.create({
       },
       image: {
         default: "",
-        parseHTML: (element) => element.getAttribute("data-image") || "",
-        renderHTML: (attributes) => ({
-          "data-image": attributes.image
-        })
+        parseHTML: (element) => sanitizeUEditorUrl(element.getAttribute("data-image") || "", "image"),
+        renderHTML: (attributes) => {
+          const image = sanitizeUEditorUrl(String(attributes.image ?? ""), "image");
+          return image ? { "data-image": image } : {};
+        }
       },
       publisher: {
         default: "",
@@ -27926,9 +28039,12 @@ var Bookmark = import_core2.Node.create({
   addCommands() {
     return {
       setBookmark: (attributes) => ({ commands }) => {
+        const url = sanitizeUEditorUrl(attributes.url, "link");
+        if (!url) return false;
+        const image = attributes.image ? sanitizeUEditorUrl(attributes.image, "image") : "";
         return commands.insertContent({
           type: this.name,
-          attrs: attributes
+          attrs: { ...attributes, url, image }
         });
       }
     };
@@ -27945,7 +28061,6 @@ var Bookmark = import_core2.Node.create({
             if (!text || !URL_REGEX.test(text)) return false;
             const { selection } = view.state;
             const parent = selection.$from.parent;
-            console.log("DEBUG handlePaste name:", parent.type.name, "size:", parent.content.size);
             const isEmptyParagraph = parent.type.name === "paragraph" && parent.content.size === 0;
             if (isEmptyParagraph) {
               event.preventDefault();
@@ -27973,15 +28088,15 @@ var import_react51 = require("@tiptap/react");
 var import_lucide_react44 = require("lucide-react");
 var import_jsx_runtime81 = require("react/jsx-runtime");
 function formatBytes(bytes, decimals = 1) {
-  if (!bytes || bytes <= 0) return "0 Bytes";
+  if (!Number.isFinite(bytes) || bytes <= 0) return "0 Bytes";
   const k = 1024;
   const dm = decimals < 0 ? 0 : decimals;
-  const sizes = ["Bytes", "KB", "MB", "GB"];
-  const i = Math.floor(Math.log(bytes) / Math.log(k));
+  const sizes = ["Bytes", "KB", "MB", "GB", "TB", "PB"];
+  const i = Math.min(Math.floor(Math.log(bytes) / Math.log(k)), sizes.length - 1);
   return `${parseFloat((bytes / Math.pow(k, i)).toFixed(dm))} ${sizes[i]}`;
 }
 function getFileIcon2(type) {
-  const mime = (type || "").toLowerCase();
+  const mime = String(type || "").toLowerCase();
   if (mime.includes("pdf")) return import_lucide_react44.FileText;
   if (mime.startsWith("image/")) return import_lucide_react44.Image;
   if (mime.startsWith("audio/")) return import_lucide_react44.Music;
@@ -28007,11 +28122,13 @@ function dataURLtoFile(dataurl, filename, mimeType) {
       }
     }
     return new File([bytes], filename, { type: mime });
-  } catch (e) {
-    console.error("Error converting data URI to file:", e);
+  } catch {
     return null;
   }
 }
+function getErrorMessage(error) {
+  return error instanceof Error && error.message ? error.message : "Upload failed";
+}
 var FileCardView = ({ node, selected, editor, updateAttributes }) => {
   const t = useSmartTranslations("UEditor");
   const { src, fileName, fileSize, fileType } = node.attrs;
@@ -28019,49 +28136,64 @@ var FileCardView = ({ node, selected, editor, updateAttributes }) => {
   const [uploadError, setUploadError] = (0, import_react50.useState)(null);
   const [retryToken, setRetryToken] = (0, import_react50.useState)(0);
   const uploadAttemptedRef = (0, import_react50.useRef)(false);
+  const lastUploadSrcRef = (0, import_react50.useRef)("");
+  const uploadRequestIdRef = (0, import_react50.useRef)(0);
+  const safeSrc = sanitizeUEditorUrl(String(src ?? ""), "file");
+  const extension = editor?.extensionManager?.extensions?.find((item) => item.name === "fileCard");
+  const uploadFn = extension?.options?.upload;
   (0, import_react50.useEffect)(() => {
-    if (!src || !src.startsWith("data:")) {
+    if (lastUploadSrcRef.current !== safeSrc) {
+      lastUploadSrcRef.current = safeSrc;
+      uploadAttemptedRef.current = false;
+    }
+    if (!safeSrc || !safeSrc.startsWith("data:") || !uploadFn) {
       return;
     }
-    const extension = editor?.extensionManager?.extensions?.find((e) => e.name === "fileCard");
-    const uploadFn = extension?.options?.upload;
-    if (!uploadFn || uploadAttemptedRef.current || !updateAttributes) {
+    if (uploadAttemptedRef.current || !updateAttributes) {
       return;
     }
     uploadAttemptedRef.current = true;
     setUploadError(null);
+    const requestId = uploadRequestIdRef.current + 1;
+    uploadRequestIdRef.current = requestId;
+    let active = true;
     const runUpload = async () => {
       try {
-        const file = dataURLtoFile(src, fileName || "file", fileType);
+        const file = dataURLtoFile(safeSrc, fileName || "file", fileType);
         if (!file) {
           throw new Error("Failed to parse file data");
         }
         const resolvedUrl = await uploadFn(file);
+        const nextSrc = sanitizeUEditorUrl(String(resolvedUrl ?? ""), "file");
+        if (!nextSrc) throw new Error("Upload handler returned an unsafe URL");
         Promise.resolve().then(() => {
-          if (editor && !editor.isDestroyed) {
-            updateAttributes({ src: resolvedUrl });
+          if (active && uploadRequestIdRef.current === requestId && editor && !editor.isDestroyed) {
+            updateAttributes({ src: nextSrc });
           }
         });
-      } catch (err) {
-        console.error("File upload failed:", err);
-        setUploadError(err?.message || "Upload failed");
+      } catch (error) {
+        if (!active || uploadRequestIdRef.current !== requestId) return;
+        setUploadError(getErrorMessage(error));
         uploadAttemptedRef.current = false;
       }
     };
     void runUpload();
-  }, [src, fileName, fileType, editor, updateAttributes, retryToken]);
+    return () => {
+      active = false;
+    };
+  }, [safeSrc, fileName, fileType, editor, updateAttributes, uploadFn, retryToken]);
   const handleDownload = (e) => {
     e.preventDefault();
     e.stopPropagation();
-    if (!src) return;
+    if (!safeSrc) return;
     const link = document.createElement("a");
-    link.href = src;
+    link.href = safeSrc;
     link.download = fileName || "download";
     document.body.appendChild(link);
     link.click();
     document.body.removeChild(link);
   };
-  const isUploading = (src || "").startsWith("data:");
+  const hasInlineUpload = safeSrc.startsWith("data:") && Boolean(uploadFn);
   const handleRetryUpload = (event) => {
     event.preventDefault();
     event.stopPropagation();
@@ -28084,11 +28216,11 @@ var FileCardView = ({ node, selected, editor, updateAttributes }) => {
             /* @__PURE__ */ (0, import_jsx_runtime81.jsx)("div", { className: "text-sm font-semibold text-foreground truncate break-all", children: fileName || t("fileCard.unnamed") }),
             /* @__PURE__ */ (0, import_jsx_runtime81.jsxs)("div", { className: "text-xs text-muted-foreground flex items-center gap-2 mt-0.5", children: [
               fileSize ? /* @__PURE__ */ (0, import_jsx_runtime81.jsx)("span", { children: formatBytes(fileSize) }) : null,
-              isUploading && /* @__PURE__ */ (0, import_jsx_runtime81.jsx)("span", { className: cn(
+              hasInlineUpload && /* @__PURE__ */ (0, import_jsx_runtime81.jsx)("span", { className: cn(
                 "font-medium truncate max-w-50",
                 uploadError ? "text-destructive" : "text-primary animate-pulse"
               ), children: uploadError ? `${t("fileCard.uploadFailed") || "T\u1EA3i l\xEAn th\u1EA5t b\u1EA1i"}: ${uploadError}` : t("fileCard.uploading") }),
-              isUploading && uploadError && /* @__PURE__ */ (0, import_jsx_runtime81.jsxs)(
+              hasInlineUpload && uploadError && /* @__PURE__ */ (0, import_jsx_runtime81.jsxs)(
                 "button",
                 {
                   type: "button",
@@ -28103,7 +28235,7 @@ var FileCardView = ({ node, selected, editor, updateAttributes }) => {
             ] })
           ] })
         ] }),
-        src && /* @__PURE__ */ (0, import_jsx_runtime81.jsx)(
+        safeSrc && /* @__PURE__ */ (0, import_jsx_runtime81.jsx)(
           "button",
           {
             type: "button",
@@ -28132,11 +28264,11 @@ var FileCard = import_core3.Node.create({
     return {
       src: {
         default: "",
-        parseHTML: (element) => element.getAttribute("href") || element.getAttribute("data-src") || "",
-        renderHTML: (attributes) => ({
-          href: attributes.src,
-          "data-src": attributes.src
-        })
+        parseHTML: (element) => sanitizeUEditorUrl(element.getAttribute("href") || element.getAttribute("data-src") || "", "file"),
+        renderHTML: (attributes) => {
+          const src = sanitizeUEditorUrl(String(attributes.src ?? ""), "file");
+          return src ? { href: src, "data-src": src } : {};
+        }
       },
       fileName: {
         default: "",
@@ -28148,13 +28280,15 @@ var FileCard = import_core3.Node.create({
       fileSize: {
         default: null,
         parseHTML: (element) => {
-          const val = element.getAttribute("data-file-size");
-          return val ? Number(val) : null;
+          const rawValue = element.getAttribute("data-file-size");
+          const value = rawValue ? Number(rawValue) : Number.NaN;
+          return Number.isFinite(value) && value >= 0 ? value : null;
         },
         renderHTML: (attributes) => {
-          if (attributes.fileSize === null || attributes.fileSize === void 0) return {};
+          const fileSize = Number(attributes.fileSize);
+          if (!Number.isFinite(fileSize) || fileSize < 0) return {};
           return {
-            "data-file-size": attributes.fileSize
+            "data-file-size": fileSize
           };
         }
       },
@@ -28189,9 +28323,16 @@ var FileCard = import_core3.Node.create({
   addCommands() {
     return {
       setFileCard: (attributes) => ({ commands }) => {
+        const src = sanitizeUEditorUrl(attributes.src, "file");
+        if (!src) return false;
+        const fileSize = Number(attributes.fileSize);
         return commands.insertContent({
           type: this.name,
-          attrs: attributes
+          attrs: {
+            ...attributes,
+            src,
+            fileSize: Number.isFinite(fileSize) && fileSize >= 0 ? fileSize : null
+          }
         });
       }
     };
@@ -28605,6 +28746,10 @@ function destroyTippyInstance(instance) {
   if (!instance || instance.state.isDestroyed) return;
   instance.destroy();
 }
+function setTippyReferenceClientRect(instance, clientRect) {
+  if (!instance || instance.state.isDestroyed) return;
+  instance.setProps({ getReferenceClientRect: clientRect });
+}
 
 // src/components/UEditor/slash-command.tsx
 var import_jsx_runtime84 = require("react/jsx-runtime");
@@ -28977,9 +29122,7 @@ var SlashCommand = import_core6.Extension.create({
               if (!props.clientRect) {
                 return;
               }
-              popup?.[0]?.setProps({
-                getReferenceClientRect: props.clientRect
-              });
+              setTippyReferenceClientRect(getFirstTippyInstance(popup), props.clientRect);
             },
             onKeyDown(props) {
               if (!props || !props.event) return false;
@@ -29716,45 +29859,6 @@ function getClipboardTsvTableContent(dataTransfer) {
   );
 }
 
-// src/components/UEditor/url-safety.ts
-var LINK_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:", "mailto:", "tel:"]);
-var IMAGE_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:"]);
-function normalizeUrlInput(raw) {
-  return raw.trim().replace(/[\u0000-\u001F\u007F\s]+/g, "");
-}
-function isProtocolRelativeUrl(value) {
-  return value.startsWith("//");
-}
-function isRelativeUrl(value) {
-  return value.startsWith("/") || value.startsWith("./") || value.startsWith("../") || value.startsWith("#");
-}
-function isDataImageUrl(value) {
-  return /^data:image\/(?:png|jpe?g|gif|webp|svg\+xml|bmp|x-icon|avif);base64,/i.test(value);
-}
-function isSafeUEditorUrl(raw, kind) {
-  const value = normalizeUrlInput(raw);
-  if (!value) return false;
-  if (kind === "image" && isDataImageUrl(value)) return true;
-  if (isRelativeUrl(value)) return true;
-  if (isProtocolRelativeUrl(value)) return false;
-  try {
-    const parsed = new URL(value);
-    return kind === "image" ? IMAGE_PROTOCOLS.has(parsed.protocol) : LINK_PROTOCOLS.has(parsed.protocol);
-  } catch {
-    return false;
-  }
-}
-function sanitizeUEditorUrl(raw, kind) {
-  const value = raw.trim();
-  if (!value) return "";
-  if (isSafeUEditorUrl(value, kind)) return normalizeUrlInput(value);
-  if (kind === "link" && !isProtocolRelativeUrl(value) && !/^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(value)) {
-    const withProtocol = `https://${value}`;
-    return isSafeUEditorUrl(withProtocol, kind) ? withProtocol : "";
-  }
-  return "";
-}
-
 // src/components/UEditor/clipboard-images.ts
 var DEFAULT_UEDITOR_IMAGE_MAX_FILE_SIZE = 10 * 1024 * 1024;
 var DEFAULT_UEDITOR_IMAGE_MIME_TYPES = ["image/png", "image/jpeg", "image/webp", "image/gif", "image/svg+xml"];
@@ -29996,9 +30100,7 @@ var EmojiSuggestion = import_core8.Extension.create({
               if (!props.clientRect) {
                 return;
               }
-              popup?.[0]?.setProps({
-                getReferenceClientRect: props.clientRect
-              });
+              setTippyReferenceClientRect(getFirstTippyInstance(popup), props.clientRect);
             },
             onKeyDown(props) {
               if (!props || !props.event) return false;
@@ -30095,7 +30197,7 @@ var FormulaSuggestionList = (0, import_react62.forwardRef)((props, ref) => {
         setSelectedIndex((prev) => (prev + 1) % props.items.length);
         return true;
       }
-      if (event.key === "Enter" || event.key === "Tab") {
+      if (event.key === "Tab") {
         const item = props.items[selectedIndex];
         if (item) {
           props.command(item);
@@ -30185,9 +30287,7 @@ var FormulaSuggestion = import_core9.Extension.create({
               if (!props.clientRect) {
                 return;
               }
-              popup?.[0]?.setProps({
-                getReferenceClientRect: props.clientRect
-              });
+              setTippyReferenceClientRect(getFirstTippyInstance(popup), props.clientRect);
             },
             onKeyDown(props) {
               const popupInstance = getFirstTippyInstance(popup);
@@ -31929,7 +32029,6 @@ function buildUEditorExtensions({
     import_extension_gapcursor.default,
     import_extension_link.default.configure({
       openOnClick: false,
-      protocols: ["http", "https", "mailto", "tel"],
       isAllowedUri: (url) => isSafeUEditorUrl(url ?? "", "link"),
       HTMLAttributes: {
         class: "text-primary underline underline-offset-2 hover:text-primary/80 cursor-pointer"
@@ -32981,7 +33080,7 @@ var EditorToolbar = ({
   const [showImageInput, setShowImageInput] = (0, import_react70.useState)(false);
   const [showLinkInput, setShowLinkInput] = (0, import_react70.useState)(false);
   const [isTableMenuOpen, setIsTableMenuOpen] = (0, import_react70.useState)(false);
-  const tableCommandAnchorPosRef = (0, import_react70.useRef)(null);
+  const [preservedTableAnchorPos, setPreservedTableAnchorPos] = (0, import_react70.useState)(null);
   const fileInputRef = (0, import_react70.useRef)(null);
   const [isUploadingImage, setIsUploadingImage] = (0, import_react70.useState)(false);
   const [imageUploadError, setImageUploadError] = (0, import_react70.useState)(null);
@@ -32996,7 +33095,7 @@ var EditorToolbar = ({
   const tableAlignAttr = tableAttrs.tableAlign ?? tableAttrs.textAlign;
   const currentTableAlign = tableAlignAttr === "center" || tableAlignAttr === "right" ? tableAlignAttr : "left";
   const isTableSelected = tableInfo !== null;
-  const hasTableContext = isTableSelected || tableCommandAnchorPosRef.current !== null;
+  const hasTableContext = isTableSelected || preservedTableAnchorPos !== null;
   const canMergeCells = hasTableContext && editor.can().mergeCells();
   const canSplitCell = hasTableContext && editor.can().splitCell();
   const currentCellVerticalAlign = normalizeStyleValue(editor.getAttributes("tableCell").verticalAlign || editor.getAttributes("tableHeader").verticalAlign) || "";
@@ -33021,7 +33120,7 @@ var EditorToolbar = ({
   const displayedFontFamilyValue = currentFontFamily || defaultFontFamilyValue;
   const displayedFontSizeLabel = currentFontSize ? currentFontSizeLabel : "13";
   const activeFontSize = currentFontSize || "13px";
-  const tableCommandAnchorPos = tableCommandAnchorPosRef.current ?? tableAnchorPos ?? void 0;
+  const tableCommandAnchorPos = preservedTableAnchorPos ?? tableAnchorPos ?? void 0;
   const isMedium = variant === "medium";
   const isMediumFull = variant === "medium-full";
   const isFull = variant === "default" || variant === "full" || variant === "notion" || !variant;
@@ -33697,7 +33796,7 @@ var EditorToolbar = ({
         isOpen: isTableMenuOpen,
         onOpenChange: (open) => {
           setIsTableMenuOpen(open);
-          tableCommandAnchorPosRef.current = open ? getTableAnchorPos(editor) : null;
+          setPreservedTableAnchorPos(open ? getTableAnchorPos(editor) : null);
         },
         trigger: /* @__PURE__ */ (0, import_jsx_runtime91.jsxs)(ToolbarButton, { onClick: () => {
         }, title: t("toolbar.table"), children: [
@@ -33714,6 +33813,7 @@ var EditorToolbar = ({
               onInsert: (rows, cols) => {
                 editor.chain().focus().insertTable({ rows, cols, withHeaderRow: true }).run();
                 setIsTableMenuOpen(false);
+                setPreservedTableAnchorPos(null);
               }
             }
           ),
@@ -33904,6 +34004,7 @@ var import_react_dom8 = require("react-dom");
 var import_lucide_react54 = require("lucide-react");
 
 // src/components/UEditor/table-formula-commands.ts
+var import_state10 = require("@tiptap/pm/state");
 var import_tables5 = require("@tiptap/pm/tables");
 
 // src/components/UEditor/table-formula.ts
@@ -34467,6 +34568,75 @@ function getSelectionTableCellNode(editor) {
   }
   return null;
 }
+function getSelectionTableCellPos(editor) {
+  const cellSelection = editor.state.selection;
+  const anchorCellPos = cellSelection.$anchorCell?.pos;
+  if (typeof anchorCellPos === "number") {
+    const node = editor.state.doc.nodeAt(anchorCellPos);
+    if (node?.type.name === "tableCell" || node?.type.name === "tableHeader") {
+      return anchorCellPos;
+    }
+  }
+  const { $from } = editor.state.selection;
+  for (let depth = $from.depth; depth > 0; depth -= 1) {
+    const node = $from.node(depth);
+    if (node.type.name === "tableCell" || node.type.name === "tableHeader") {
+      return $from.before(depth);
+    }
+  }
+  return null;
+}
+function getSelectionTableCellAnchor(editor) {
+  const cellPos = getSelectionTableCellPos(editor);
+  if (cellPos == null) return null;
+  const node = editor.state.doc.nodeAt(cellPos);
+  if (!node || node.type.name !== "tableCell" && node.type.name !== "tableHeader") return null;
+  const $cell = editor.state.doc.resolve(Math.min(cellPos + 1, editor.state.doc.content.size));
+  for (let depth = $cell.depth; depth > 0; depth -= 1) {
+    const tableNode = $cell.node(depth);
+    if (tableNode.type.name !== "table") continue;
+    const tableStart = $cell.start(depth);
+    const rect = safeFindCell2(import_tables5.TableMap.get(tableNode), cellPos - tableStart);
+    if (!rect) return null;
+    return {
+      cellPos,
+      column: rect.left,
+      label: `${indexToColumnName(rect.left)}${rect.top + 1}`,
+      node,
+      row: rect.top,
+      tablePos: tableStart - 1
+    };
+  }
+  return null;
+}
+function restoreSelectionAtTableCell(editor, anchor) {
+  const tableNode = editor.state.doc.nodeAt(anchor.tablePos);
+  if (!tableNode || tableNode.type.name !== "table") return false;
+  const map = import_tables5.TableMap.get(tableNode);
+  if (anchor.row >= map.height || anchor.column >= map.width) return false;
+  const relativeCellPos = map.positionAt(anchor.row, anchor.column, tableNode);
+  const cellPos = anchor.tablePos + 1 + relativeCellPos;
+  const cellNode = editor.state.doc.nodeAt(cellPos);
+  if (!cellNode || cellNode.type.name !== "tableCell" && cellNode.type.name !== "tableHeader") return false;
+  const selectionPos = Math.min(cellPos + 2, editor.state.doc.content.size);
+  editor.view.dispatch(
+    editor.state.tr.setSelection(import_state10.TextSelection.near(editor.state.doc.resolve(selectionPos))).setMeta("addToHistory", false)
+  );
+  return true;
+}
+function getSelectedTableFormulaCell(editor) {
+  const selectedCell = getSelectionTableCellAnchor(editor);
+  if (!selectedCell) return null;
+  const formula = typeof selectedCell.node.attrs.formula === "string" ? selectedCell.node.attrs.formula.trim() : "";
+  if (!formula) return null;
+  const computedValue = typeof selectedCell.node.attrs.computedValue === "string" ? selectedCell.node.attrs.computedValue : "";
+  return {
+    ...selectedCell,
+    computedValue,
+    formula,
+    formulaState: computedValue.startsWith("#") ? "error" : "computed"
+  };
+}
 function getSelectionTableInfo(editor) {
   const { $from } = editor.state.selection;
   for (let depth = $from.depth; depth > 0; depth -= 1) {
@@ -34513,6 +34683,28 @@ function createCellDisplayContent(cellNode, displayValue) {
   }
   return [paragraphType.create(null, cellNode.type.schema.text(displayValue))];
 }
+function removeSelectedTableCellFormula(editor, clearContent) {
+  const selectedCell = getSelectedTableFormulaCell(editor);
+  if (!selectedCell) return false;
+  const nextCell2 = selectedCell.node.type.create(
+    {
+      ...selectedCell.node.attrs,
+      formula: null,
+      computedValue: null
+    },
+    clearContent ? createCellDisplayContent(selectedCell.node, "") : selectedCell.node.content,
+    selectedCell.node.marks
+  );
+  let transaction = editor.state.tr.replaceWith(selectedCell.cellPos, selectedCell.cellPos + selectedCell.node.nodeSize, nextCell2).setMeta(UEDITOR_TABLE_FORMULA_RECALCULATE_META, true);
+  const selectionPos = Math.min(selectedCell.cellPos + 2, transaction.doc.content.size);
+  transaction = transaction.setSelection(import_state10.TextSelection.near(transaction.doc.resolve(selectionPos)));
+  editor.view.dispatch(transaction);
+  recalculateActiveTableFormulas(editor);
+  restoreSelectionAtTableCell(editor, selectedCell);
+  editor.view.focus();
+  dispatchTableLayoutChange(editor);
+  return true;
+}
 function buildTableValueMap(tableNode) {
   const map = import_tables5.TableMap.get(tableNode);
   const values = /* @__PURE__ */ new Map();
@@ -34535,21 +34727,15 @@ function normalizeFormulaInput(formula) {
 function setSelectedTableCellFormula(editor, formula) {
   const normalized = normalizeFormulaInput(formula);
   const { state, view } = editor;
+  const selectionAnchor = getSelectionTableCellAnchor(editor);
   if (!normalized) {
-    const clearedFormula = (0, import_tables5.setCellAttr)("formula", null)(state, view.dispatch.bind(view));
-    const clearedValue2 = (0, import_tables5.setCellAttr)("computedValue", null)(editor.state, view.dispatch.bind(view));
-    if (clearedFormula || clearedValue2) {
-      recalculateActiveTableFormulas(editor);
-      view.focus();
-      dispatchTableLayoutChange(editor);
-      return true;
-    }
-    return false;
+    return clearSelectedTableCellFormula(editor);
   }
   const appliedFormula = (0, import_tables5.setCellAttr)("formula", normalized)(state, view.dispatch.bind(view));
   const clearedValue = (0, import_tables5.setCellAttr)("computedValue", null)(editor.state, view.dispatch.bind(view));
   if (appliedFormula || clearedValue) {
     recalculateActiveTableFormulas(editor);
+    if (selectionAnchor) restoreSelectionAtTableCell(editor, selectionAnchor);
     view.focus();
     dispatchTableLayoutChange(editor);
     return true;
@@ -34557,7 +34743,10 @@ function setSelectedTableCellFormula(editor, formula) {
   return false;
 }
 function clearSelectedTableCellFormula(editor) {
-  return setSelectedTableCellFormula(editor, "");
+  return removeSelectedTableCellFormula(editor, true);
+}
+function convertSelectedTableCellFormulaToValue(editor) {
+  return removeSelectedTableCellFormula(editor, false);
 }
 function setSelectedTableCellNumberFormat(editor, numberFormat) {
   const value = numberFormat && numberFormat !== "text" ? numberFormat : null;
@@ -34757,6 +34946,58 @@ function recalculateAllTableFormulas(editor) {
 
 // src/components/UEditor/menus.tsx
 var import_jsx_runtime92 = require("react/jsx-runtime");
+var FloatingSlashCommandMenu = ({ editor, onClose }) => {
+  const t = useSmartTranslations("UEditor");
+  const messages = (0, import_react72.useMemo)(() => buildSlashCommandMessages(t), [t]);
+  const items = (0, import_react72.useMemo)(() => buildSlashCommandItems({ query: "", messages }), [messages]);
+  const listRef = (0, import_react72.useRef)(null);
+  (0, import_react72.useEffect)(() => {
+    const handleKeyDown2 = (event) => {
+      if (event.key === "Escape") {
+        event.preventDefault();
+        onClose();
+        return;
+      }
+      const handled = listRef.current?.onKeyDown({ event }) ?? false;
+      if (handled) {
+        event.preventDefault();
+      }
+    };
+    document.addEventListener("keydown", handleKeyDown2);
+    return () => document.removeEventListener("keydown", handleKeyDown2);
+  }, [onClose]);
+  return /* @__PURE__ */ (0, import_jsx_runtime92.jsx)(
+    SlashCommandList,
+    {
+      ref: listRef,
+      items,
+      messages,
+      command: (item) => {
+        item.command({ editor });
+        onClose();
+      }
+    }
+  );
+};
+var FloatingMenuContent = ({ editor }) => {
+  const t = useSmartTranslations("UEditor");
+  const [showCommands, setShowCommands] = (0, import_react72.useState)(false);
+  if (showCommands) {
+    return /* @__PURE__ */ (0, import_jsx_runtime92.jsx)(FloatingSlashCommandMenu, { editor, onClose: () => setShowCommands(false) });
+  }
+  return /* @__PURE__ */ (0, import_jsx_runtime92.jsxs)(
+    "button",
+    {
+      type: "button",
+      onClick: () => setShowCommands(true),
+      className: "flex items-center gap-1 px-2 py-1.5 rounded-lg hover:bg-accent transition-all group",
+      children: [
+        /* @__PURE__ */ (0, import_jsx_runtime92.jsx)(import_lucide_react54.Plus, { className: "w-4 h-4 text-muted-foreground group-hover:text-foreground" }),
+        /* @__PURE__ */ (0, import_jsx_runtime92.jsx)("span", { className: "text-sm text-muted-foreground group-hover:text-foreground", children: t("floatingMenu.addBlock") })
+      ]
+    }
+  );
+};
 function applyTableCellBackground(editor, color) {
   const value = color || null;
   const { state, view } = editor;
@@ -35495,7 +35736,8 @@ var LinkPreviewContent = ({ editor, onEdit }) => {
   const url = editor.getAttributes("link").href || "";
   const t = useSmartTranslations("UEditor");
   const handleOpen = () => {
-    window.open(url, "_blank", "noopener,noreferrer");
+    const safeUrl = sanitizeUEditorUrl(url, "link");
+    if (safeUrl) window.open(safeUrl, "_blank", "noopener,noreferrer");
   };
   const handleUnlink = () => {
     editor.chain().focus().unsetLink().run();
@@ -35525,16 +35767,19 @@ var CustomBubbleMenu = ({
   });
   const menuRef = (0, import_react72.useRef)(null);
   const keepOpenRef = (0, import_react72.useRef)(false);
+  const [keepOpen, setKeepOpenState] = (0, import_react72.useState)(false);
   const showTimeoutRef = (0, import_react72.useRef)(null);
   const suppressShowUntilRef = (0, import_react72.useRef)(0);
   const setKeepOpen = (0, import_react72.useCallback)((next) => {
     keepOpenRef.current = next;
+    setKeepOpenState(next);
     if (!next) setLinkInputOpen(false);
     if (next) setIsVisible(true);
   }, []);
   const closeBubbleMenu = (0, import_react72.useCallback)(() => {
     suppressShowUntilRef.current = Date.now() + 1e3;
     keepOpenRef.current = false;
+    setKeepOpenState(false);
     setLinkInputOpen(false);
     setIsVisible(false);
     if (showTimeoutRef.current) {
@@ -35640,13 +35885,13 @@ var CustomBubbleMenu = ({
         onMouseDown: (e) => {
           const target = e.target;
           if (target?.closest?.("[data-ueditor-close-on-select]")) {
-            keepOpenRef.current = false;
+            setKeepOpen(false);
           } else if (target?.closest?.("[data-ueditor-keep-open]")) {
-            keepOpenRef.current = true;
+            setKeepOpen(true);
           }
           e.preventDefault();
         },
-        children: editor.isActive("link") && !keepOpenRef.current && !linkInputOpen ? /* @__PURE__ */ (0, import_jsx_runtime92.jsx)(
+        children: editor.isActive("link") && !keepOpen && !linkInputOpen ? /* @__PURE__ */ (0, import_jsx_runtime92.jsx)(
           LinkPreviewContent,
           {
             editor,
@@ -35672,6 +35917,54 @@ var CustomBubbleMenu = ({
     document.body
   );
 };
+var CustomFloatingMenu = ({ editor }) => {
+  const FLOATING_MENU_OFFSET = 16;
+  const [isVisible, setIsVisible] = (0, import_react72.useState)(false);
+  const [position, setPosition2] = (0, import_react72.useState)({ top: 0, left: 0 });
+  (0, import_react72.useEffect)(() => {
+    const updatePosition = () => {
+      const { state, view } = editor;
+      const { $from, empty } = state.selection;
+      const isEmptyTextBlock = $from.parent.isTextblock && $from.parent.type.name === "paragraph" && $from.parent.textContent === "" && empty;
+      if (!isEmptyTextBlock || !view.hasFocus()) {
+        setIsVisible(false);
+        return;
+      }
+      const coords = view.coordsAtPos($from.pos);
+      setPosition2({ top: coords.top - FLOATING_MENU_OFFSET, left: coords.left });
+      setIsVisible(true);
+    };
+    const handleBlur = () => setIsVisible(false);
+    editor.on("selectionUpdate", updatePosition);
+    editor.on("focus", updatePosition);
+    editor.on("blur", handleBlur);
+    editor.on("update", updatePosition);
+    return () => {
+      editor.off("selectionUpdate", updatePosition);
+      editor.off("focus", updatePosition);
+      editor.off("blur", handleBlur);
+      editor.off("update", updatePosition);
+    };
+  }, [editor]);
+  if (!isVisible) return null;
+  return (0, import_react_dom8.createPortal)(
+    /* @__PURE__ */ (0, import_jsx_runtime92.jsx)(
+      "div",
+      {
+        "data-popover": true,
+        className: "fixed z-99999 rounded-2xl border border-border/50 bg-card text-card-foreground shadow-lg backdrop-blur-sm overflow-hidden animate-in fade-in-0 slide-in-from-bottom-2",
+        style: {
+          top: `${position.top}px`,
+          left: `${position.left}px`,
+          transform: "translate(-50%, -100%)"
+        },
+        onMouseDown: (e) => e.preventDefault(),
+        children: /* @__PURE__ */ (0, import_jsx_runtime92.jsx)(FloatingMenuContent, { editor })
+      }
+    ),
+    document.body
+  );
+};
 
 // src/components/UEditor/CharacterCount.tsx
 var import_jsx_runtime93 = require("react/jsx-runtime");
@@ -38747,7 +39040,7 @@ var Selection = class {
   found.
   */
   static findFrom($pos, dir, textOnly = false) {
-    let inner = $pos.parent.inlineContent ? new TextSelection3($pos) : findSelectionIn($pos.node(0), $pos.parent, $pos.pos, $pos.index(), dir, textOnly);
+    let inner = $pos.parent.inlineContent ? new TextSelection4($pos) : findSelectionIn($pos.node(0), $pos.parent, $pos.pos, $pos.index(), dir, textOnly);
     if (inner)
       return inner;
     for (let depth = $pos.depth - 1; depth >= 0; depth--) {
@@ -38816,7 +39109,7 @@ var Selection = class {
   returns the bookmark for that.
   */
   getBookmark() {
-    return TextSelection3.between(this.$anchor, this.$head).getBookmark();
+    return TextSelection4.between(this.$anchor, this.$head).getBookmark();
   }
 };
 Selection.prototype.visible = true;
@@ -38836,7 +39129,7 @@ function checkTextSelection($pos) {
     console["warn"]("TextSelection endpoint not pointing into a node with inline content (" + $pos.parent.type.name + ")");
   }
 }
-var TextSelection3 = class _TextSelection extends Selection {
+var TextSelection4 = class _TextSelection extends Selection {
   /**
   Construct a text selection between the given points.
   */
@@ -38922,7 +39215,7 @@ var TextSelection3 = class _TextSelection extends Selection {
     return new _TextSelection($anchor, $head);
   }
 };
-Selection.jsonID("text", TextSelection3);
+Selection.jsonID("text", TextSelection4);
 var TextBookmark = class _TextBookmark {
   constructor(anchor, head) {
     this.anchor = anchor;
@@ -38932,7 +39225,7 @@ var TextBookmark = class _TextBookmark {
     return new _TextBookmark(mapping.map(this.anchor), mapping.map(this.head));
   }
   resolve(doc) {
-    return TextSelection3.between(doc.resolve(this.anchor), doc.resolve(this.head));
+    return TextSelection4.between(doc.resolve(this.anchor), doc.resolve(this.head));
   }
 };
 var NodeSelection2 = class _NodeSelection extends Selection {
@@ -39051,7 +39344,7 @@ var AllBookmark = {
 };
 function findSelectionIn(doc, node, pos, index, dir, text = false) {
   if (node.inlineContent)
-    return TextSelection3.create(doc, pos);
+    return TextSelection4.create(doc, pos);
   for (let i = index - (dir > 0 ? 0 : 1); dir > 0 ? i < node.childCount : i >= 0; i += dir) {
     let child = node.child(i);
     if (!child.isAtom) {
@@ -39643,7 +39936,7 @@ var CellSelection = class CellSelection2 extends Selection {
       else if (tableChanged && this.isColSelection()) return CellSelection2.colSelection($anchorCell, $headCell);
       else return new CellSelection2($anchorCell, $headCell);
     }
-    return TextSelection3.between($anchorCell, $headCell);
+    return TextSelection4.between($anchorCell, $headCell);
   }
   content() {
     const table = this.$anchorCell.node(-1);
@@ -40258,7 +40551,7 @@ function shiftArrow(axis, dir) {
   };
 }
 function atEndOfCell(view, axis, dir) {
-  if (!(view.state.selection instanceof TextSelection3)) return null;
+  if (!(view.state.selection instanceof TextSelection4)) return null;
   const { $head } = view.state.selection;
   for (let d = $head.depth - 1; d >= 0; d--) {
     const parent = $head.node(d);
@@ -41378,7 +41671,7 @@ function TableControls({ editor, containerRef }) {
         destructive: true
       }
     ];
-  }, [layout, runAtActiveCell, t]);
+  }, [editor, layout, runAtActiveCell, t]);
   const getRowHandleMenuItems = import_react74.default.useCallback((rowHandle) => [
     {
       label: t("tableMenu.addRowBefore"),
@@ -41594,6 +41887,42 @@ var UEDITOR_PROSEMIRROR_CLASS_NAME = cn(
   "[&_th]:px-2",
   "[&_th]:py-0",
   "[&_th_p]:my-0",
+  "[&_td[data-formula]]:pr-7",
+  "[&_th[data-formula]]:pr-7",
+  "[&_td[data-formula]]:before:pointer-events-none",
+  "[&_th[data-formula]]:before:pointer-events-none",
+  "[&_td[data-formula]]:before:absolute",
+  "[&_th[data-formula]]:before:absolute",
+  "[&_td[data-formula]]:before:right-1",
+  "[&_th[data-formula]]:before:right-1",
+  "[&_td[data-formula]]:before:top-1",
+  "[&_th[data-formula]]:before:top-1",
+  "[&_td[data-formula]]:before:z-[1]",
+  "[&_th[data-formula]]:before:z-[1]",
+  "[&_td[data-formula]]:before:rounded-sm",
+  "[&_th[data-formula]]:before:rounded-sm",
+  "[&_td[data-formula]]:before:bg-primary/10",
+  "[&_th[data-formula]]:before:bg-primary/10",
+  "[&_td[data-formula]]:before:px-1",
+  "[&_th[data-formula]]:before:px-1",
+  "[&_td[data-formula]]:before:font-mono",
+  "[&_th[data-formula]]:before:font-mono",
+  "[&_td[data-formula]]:before:text-[9px]",
+  "[&_th[data-formula]]:before:text-[9px]",
+  "[&_td[data-formula]]:before:font-semibold",
+  "[&_th[data-formula]]:before:font-semibold",
+  "[&_td[data-formula]]:before:leading-4",
+  "[&_th[data-formula]]:before:leading-4",
+  "[&_td[data-formula]]:before:text-primary",
+  "[&_th[data-formula]]:before:text-primary",
+  "[&_td[data-formula]]:before:content-['fx']",
+  "[&_th[data-formula]]:before:content-['fx']",
+  "[&_td[data-formula-state='error']]:bg-destructive/5",
+  "[&_th[data-formula-state='error']]:bg-destructive/5",
+  "[&_td[data-formula-state='error']]:before:bg-destructive/10",
+  "[&_th[data-formula-state='error']]:before:bg-destructive/10",
+  "[&_td[data-formula-state='error']]:before:text-destructive",
+  "[&_th[data-formula-state='error']]:before:text-destructive",
   "[&_td[colwidth]]:min-w-0",
   "[&_th[colwidth]]:min-w-0",
   "[&_td[data-colwidth]]:min-w-0",
@@ -42099,7 +42428,7 @@ function useUEditorTableInteractions(editor, editable = true) {
       clearHoveredTableCell();
       clearAllTableResizeHover();
     };
-  }, [beginResize, cancelResize, cleanupRowResize, clearActiveTableCell, clearAllTableResizeHover, clearHoveredTableCell, editable, editor, handleRowResizePointerMove, handleRowResizePointerUp, hideColumnGuide, hideRowGuide, isRowResizing, scheduleTableLayoutSync, showColumnGuide, showRowGuide, syncActiveRowResizeGuide, syncActiveTableCellFromSelection, updateActiveCellHighlight]);
+  }, [beginResize, cancelResize, cleanupRowResize, clearActiveTableCell, clearAllTableResizeHover, clearHoveredTableCell, editable, editor, handleRowResizePointerMove, handleRowResizePointerUp, hideColumnGuide, hideRowGuide, isRowResizing, scheduleTableLayoutSync, setActiveTableCell, setHoveredTableCell, showColumnGuide, showRowGuide, syncActiveRowResizeGuide, syncActiveTableCellFromSelection, updateActiveCellHighlight]);
   return {
     editorContentRef,
     tableColumnGuideRef,
@@ -42113,7 +42442,7 @@ var import_react77 = require("react");
 var import_tables8 = require("@tiptap/pm/tables");
 
 // src/components/UEditor/table-formula-range-picker.ts
-var import_state10 = require("@tiptap/pm/state");
+var import_state11 = require("@tiptap/pm/state");
 var import_tables7 = require("@tiptap/pm/tables");
 function getCellText2(cellNode) {
   return cellNode.textBetween(0, cellNode.content.size, "\n").trim();
@@ -42132,6 +42461,9 @@ function getFormulaEditingTableContext(view) {
     if (!tableNode || tableNode.type.name !== "table") return null;
     const tableDom = cellDom.closest("table");
     if (!(tableDom instanceof HTMLTableElement)) return null;
+    const tableMap = import_tables7.TableMap.get(tableNode);
+    const tableStart = $from.start(tableDepth);
+    const formulaCellRect = tableMap.findCell(cellPos - tableStart);
     return {
       cellContentEnd: $from.end(depth),
       cellContentStart: $from.start(depth),
@@ -42139,17 +42471,56 @@ function getFormulaEditingTableContext(view) {
       formula: getCellText2(node),
       tableDom,
       tableNode,
-      tablePos: $from.before(tableDepth)
+      tablePos: $from.before(tableDepth),
+      formulaCellLabel: `${indexToColumnName(formulaCellRect.left)}${formulaCellRect.top + 1}`
     };
   }
   return null;
 }
+function collectTableFormulaCells(tableNode) {
+  const tableMap = import_tables7.TableMap.get(tableNode);
+  const formulas = [];
+  tableNode.forEach((rowNode, rowOffset) => {
+    rowNode.forEach((cellNode, cellOffset) => {
+      const formula = typeof cellNode.attrs.formula === "string" ? cellNode.attrs.formula.trim() : "";
+      if (!formula) return;
+      const rect = tableMap.findCell(rowOffset + 1 + cellOffset);
+      formulas.push({
+        label: `${indexToColumnName(rect.left)}${rect.top + 1}`,
+        formula
+      });
+    });
+  });
+  return formulas;
+}
+function getFormulaCycleBlockedLabels(tableNode, formulaCellLabel) {
+  const graph = buildTableFormulaDependencyGraph(collectTableFormulaCells(tableNode));
+  const blocked = /* @__PURE__ */ new Set();
+  const queue = [formulaCellLabel.toUpperCase()];
+  for (let index = 0; index < queue.length; index += 1) {
+    const label = queue[index];
+    if (!label || blocked.has(label)) continue;
+    blocked.add(label);
+    for (const dependent of graph.dependents.get(label) ?? []) {
+      if (!blocked.has(dependent)) queue.push(dependent);
+    }
+  }
+  return blocked;
+}
+function getReferenceLabels(reference) {
+  const range = parseTableCellRange(reference);
+  return range ? getTableCellRangeLabels(range) : [reference.toUpperCase()];
+}
+function isBlockedFormulaReference(tableNode, formulaCellLabel, reference) {
+  const blockedLabels = getFormulaCycleBlockedLabels(tableNode, formulaCellLabel);
+  return getReferenceLabels(reference).some((label) => blockedLabels.has(label));
+}
 function cancelFormulaEditing(view) {
   const context = getFormulaEditingTableContext(view);
   if (!context) return false;
   let tr = view.state.tr.delete(context.cellContentStart, context.cellContentEnd);
   const selectionPos = Math.min(context.cellContentStart, tr.doc.content.size);
-  tr = tr.setSelection(import_state10.TextSelection.near(tr.doc.resolve(selectionPos)));
+  tr = tr.setSelection(import_state11.TextSelection.near(tr.doc.resolve(selectionPos)));
   view.dispatch(tr);
   view.focus();
   return true;
@@ -42207,19 +42578,30 @@ function normalizeFormulaRangeLabel(fromLabel, toLabel) {
   return fromLabel === toLabel ? fromLabel : `${fromLabel}:${toLabel}`;
 }
 function replacePickedLabel(view, pickState, nextLabel, currentCell) {
-  if (nextLabel === pickState.currentLabel && currentCell === pickState.currentCell) return pickState;
+  const formulaContext = getFormulaEditingTableContext(view);
+  const blocked = formulaContext ? isBlockedFormulaReference(formulaContext.tableNode, pickState.formulaCellLabel, nextLabel) : false;
+  if (blocked) {
+    return {
+      ...pickState,
+      blocked: true,
+      currentCell
+    };
+  }
+  if (nextLabel === pickState.currentLabel && currentCell === pickState.currentCell && !pickState.blocked) return pickState;
   if (nextLabel === pickState.currentLabel) {
     return {
       ...pickState,
+      blocked: false,
       currentCell
     };
   }
   let tr = view.state.tr.insertText(nextLabel, pickState.insertedFrom, pickState.insertedTo);
   const nextTo = pickState.insertedFrom + nextLabel.length;
-  tr = tr.setSelection(import_state10.TextSelection.create(tr.doc, nextTo));
+  tr = tr.setSelection(import_state11.TextSelection.create(tr.doc, nextTo));
   view.dispatch(tr);
   return {
     ...pickState,
+    blocked: false,
     insertedTo: nextTo,
     currentLabel: nextLabel,
     currentCell
@@ -42231,12 +42613,28 @@ function beginFormulaRangePick(view, event) {
   if (!formulaCell) return null;
   const picked = getFormulaTableCellInfo(view, event.target, formulaCell.tablePos);
   if (!picked || picked.cell === formulaCell.cellDom) return null;
+  const blocked = isBlockedFormulaReference(formulaCell.tableNode, formulaCell.formulaCellLabel, picked.label);
+  if (blocked) {
+    event.preventDefault();
+    event.stopPropagation();
+    return {
+      anchorLabel: picked.label,
+      anchorCell: picked.cell,
+      tablePos: formulaCell.tablePos,
+      insertedFrom: view.state.selection.from,
+      insertedTo: view.state.selection.from,
+      currentLabel: "",
+      currentCell: picked.cell,
+      blocked: true,
+      formulaCellLabel: formulaCell.formulaCellLabel
+    };
+  }
   const { from, to } = view.state.selection;
   const prefix = from === to ? getReferenceInsertionPrefix(view, formulaCell.cellContentStart, from) : "";
   const insertedText = `${prefix}${picked.label}`;
   const insertedFrom = from + prefix.length;
   let tr = view.state.tr.insertText(insertedText, from, to);
-  tr = tr.setSelection(import_state10.TextSelection.create(tr.doc, from + insertedText.length));
+  tr = tr.setSelection(import_state11.TextSelection.create(tr.doc, from + insertedText.length));
   view.dispatch(tr);
   view.focus();
   event.preventDefault();
@@ -42248,7 +42646,9 @@ function beginFormulaRangePick(view, event) {
     insertedFrom,
     insertedTo: insertedFrom + picked.label.length,
     currentLabel: picked.label,
-    currentCell: picked.cell
+    currentCell: picked.cell,
+    blocked: false,
+    formulaCellLabel: formulaCell.formulaCellLabel
   };
 }
 function updateFormulaRangePick(view, pickState, event) {
@@ -42276,7 +42676,8 @@ function getFormulaRangePickHighlight(container, pickState) {
     left,
     top,
     width: Math.max(0, right - left),
-    height: Math.max(0, bottom - top)
+    height: Math.max(0, bottom - top),
+    blocked: pickState.blocked
   };
 }
 
@@ -42300,6 +42701,12 @@ function createReferenceHighlight(label) {
   element.className = "pointer-events-none absolute z-[21] rounded-[2px] border-2 border-emerald-500 bg-emerald-500/15";
   return element;
 }
+function createBlockedReferenceHighlight(label) {
+  const element = document.createElement("span");
+  element.dataset.ueditorFormulaBlockedReference = label;
+  element.className = "pointer-events-none absolute z-[22] rounded-[2px] border-2 border-destructive/80 bg-destructive/10";
+  return element;
+}
 function useFormulaCoordinateOverlay(editor, containerRef, labels) {
   const overlayRef = (0, import_react77.useRef)(null);
   (0, import_react77.useEffect)(() => {
@@ -42311,6 +42718,7 @@ function useFormulaCoordinateOverlay(editor, containerRef, labels) {
     let activeTable = null;
     let activeTablePos = null;
     let hoverLabel = null;
+    const scrollListenerOptions = { passive: true, capture: true };
     const clearOverlay = () => {
       activeTable = null;
       activeTablePos = null;
@@ -42370,10 +42778,12 @@ function useFormulaCoordinateOverlay(editor, containerRef, labels) {
       actions.dataset.ueditorFormulaActions = "";
       actions.className = "pointer-events-auto absolute z-50 flex items-center gap-1 rounded-md border border-border bg-background p-1 shadow-md";
       const formulaCellRect = context.cellDom.getBoundingClientRect();
+      const formulaActionsHeight = 34;
+      const formulaActionsTop = formulaCellRect.bottom + 4 + formulaActionsHeight > tableRect.bottom ? Math.max(containerRect.top + 4, formulaCellRect.top - formulaActionsHeight - 4) : formulaCellRect.bottom + 4;
       setPosition(
         actions,
         formulaCellRect.left - containerRect.left + container.scrollLeft,
-        formulaCellRect.bottom - containerRect.top + container.scrollTop + 4
+        formulaActionsTop - containerRect.top + container.scrollTop
       );
       const applyButton = document.createElement("button");
       applyButton.type = "button";
@@ -42425,10 +42835,12 @@ function useFormulaCoordinateOverlay(editor, containerRef, labels) {
         children.push(label);
       }
       const references = new Set(getTableFormulaReferences(context.formula));
+      const blockedReferences = getFormulaCycleBlockedLabels(context.tableNode, context.formulaCellLabel);
       for (const info of cellInfos) {
-        if (!info || !references.has(info.label)) continue;
+        if (!info) continue;
         const cellRect = info.cell.getBoundingClientRect();
-        const highlight = createReferenceHighlight(info.label);
+        const highlight = info.label !== context.formulaCellLabel && blockedReferences.has(info.label) ? createBlockedReferenceHighlight(info.label) : references.has(info.label) ? createReferenceHighlight(info.label) : null;
+        if (!highlight) continue;
         setPosition(
           highlight,
           cellRect.left - containerRect.left + container.scrollLeft + 2,
@@ -42483,6 +42895,7 @@ function useFormulaCoordinateOverlay(editor, containerRef, labels) {
     editor.view.dom.addEventListener("mousemove", handleMouseMove2);
     editor.view.dom.addEventListener("mouseleave", handleMouseLeave2);
     container.addEventListener(UEDITOR_TABLE_LAYOUT_CHANGE_EVENT, scheduleSync);
+    container.addEventListener("scroll", scheduleSync, scrollListenerOptions);
     window.addEventListener("resize", scheduleSync);
     scheduleSync();
     return () => {
@@ -42493,6 +42906,7 @@ function useFormulaCoordinateOverlay(editor, containerRef, labels) {
       editor.view.dom.removeEventListener("mousemove", handleMouseMove2);
       editor.view.dom.removeEventListener("mouseleave", handleMouseLeave2);
       container.removeEventListener(UEDITOR_TABLE_LAYOUT_CHANGE_EVENT, scheduleSync);
+      container.removeEventListener("scroll", scheduleSync, scrollListenerOptions);
       window.removeEventListener("resize", scheduleSync);
       if (animationFrame != null) window.cancelAnimationFrame(animationFrame);
       clearOverlay();
@@ -43385,9 +43799,156 @@ var MenuBar = ({
   ] });
 };
 
-// src/components/UEditor/UEditor.tsx
+// src/components/UEditor/table-formula-bar.tsx
+var import_react80 = require("react");
+var import_react81 = require("@tiptap/react");
+var import_lucide_react59 = require("lucide-react");
 var import_jsx_runtime100 = require("react/jsx-runtime");
-var UEditor = import_react80.default.forwardRef(({
+function TableFormulaBar({ editor }) {
+  const t = useSmartTranslations("UEditor");
+  const inputRef = (0, import_react80.useRef)(null);
+  const [draftState, setDraftState] = (0, import_react80.useState)(null);
+  (0, import_react81.useEditorState)({
+    editor,
+    selector: ({ transactionNumber }) => transactionNumber
+  });
+  const selectedCell = getSelectedTableFormulaCell(editor);
+  (0, import_react80.useEffect)(() => {
+    const focusFormulaInput = () => {
+      inputRef.current?.focus();
+    };
+    const handleDoubleClick = (event) => {
+      const target = resolveEventElement(event.target);
+      if (!target?.closest?.("td[data-formula],th[data-formula]")) return;
+      event.preventDefault();
+      focusFormulaInput();
+    };
+    editor.view.dom.addEventListener("dblclick", handleDoubleClick);
+    return () => {
+      editor.view.dom.removeEventListener("dblclick", handleDoubleClick);
+    };
+  }, [editor]);
+  if (!selectedCell) return null;
+  const selectedCellKey = `${selectedCell.tablePos}:${selectedCell.row}:${selectedCell.column}`;
+  const draft = draftState?.cellKey === selectedCellKey && draftState.sourceFormula === selectedCell.formula ? draftState.value : selectedCell.formula;
+  const setDraft = (value) => {
+    setDraftState({
+      cellKey: selectedCellKey,
+      sourceFormula: selectedCell.formula,
+      value
+    });
+  };
+  const applyDraft = () => {
+    const normalized = normalizeFormulaInput(draft);
+    if (normalized) {
+      setSelectedTableCellFormula(editor, normalized);
+    } else {
+      clearSelectedTableCellFormula(editor);
+    }
+    setDraftState(null);
+  };
+  const cancelDraft = () => {
+    setDraftState(null);
+    window.setTimeout(() => {
+      if (!editor.isDestroyed) editor.commands.focus();
+    }, 0);
+  };
+  return /* @__PURE__ */ (0, import_jsx_runtime100.jsxs)(
+    "div",
+    {
+      "data-ueditor-formula-bar": "",
+      role: "toolbar",
+      "aria-label": t("tableMenu.formulaBar"),
+      className: "flex min-h-10 items-center gap-2 border-b border-border/60 bg-muted/25 px-2 py-1.5",
+      children: [
+        /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(
+          "span",
+          {
+            "data-ueditor-formula-cell-label": "",
+            className: "flex h-7 min-w-12 items-center justify-center rounded-md border border-border/60 bg-background px-2 font-mono text-xs font-semibold text-foreground",
+            children: selectedCell.label
+          }
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(import_lucide_react59.Sigma, { "aria-hidden": "true", className: "h-4 w-4 shrink-0 text-primary" }),
+        /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(
+          "input",
+          {
+            ref: inputRef,
+            "data-ueditor-formula-input": "",
+            value: draft,
+            onChange: (event) => setDraft(event.target.value),
+            onKeyDown: (event) => {
+              event.stopPropagation();
+              if (event.key === "Enter") {
+                event.preventDefault();
+                applyDraft();
+              } else if (event.key === "Escape") {
+                event.preventDefault();
+                cancelDraft();
+              }
+            },
+            "aria-label": t("tableMenu.editFormula"),
+            className: "h-7 min-w-0 flex-1 rounded-md border border-border/60 bg-background px-2 font-mono text-sm text-foreground outline-none focus:border-primary/40 focus:ring-2 focus:ring-primary/15"
+          }
+        ),
+        selectedCell.formulaState === "error" && /* @__PURE__ */ (0, import_jsx_runtime100.jsxs)(
+          "span",
+          {
+            role: "status",
+            className: "hidden shrink-0 items-center gap-1 text-xs font-medium text-destructive sm:inline-flex",
+            children: [
+              /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(import_lucide_react59.AlertCircle, { "aria-hidden": "true", className: "h-3.5 w-3.5" }),
+              t("tableMenu.formulaError")
+            ]
+          }
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(
+          "button",
+          {
+            type: "button",
+            onClick: applyDraft,
+            "aria-label": t("tableMenu.apply"),
+            title: t("tableMenu.apply"),
+            className: "flex h-7 w-7 shrink-0 items-center justify-center rounded-md bg-primary text-primary-foreground transition-colors hover:bg-primary/90",
+            children: /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(import_lucide_react59.Check, { "aria-hidden": "true", className: "h-4 w-4" })
+          }
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(
+          "button",
+          {
+            type: "button",
+            onClick: () => {
+              convertSelectedTableCellFormulaToValue(editor);
+              setDraftState(null);
+            },
+            "aria-label": t("tableMenu.convertToValue"),
+            title: t("tableMenu.convertToValue"),
+            className: "flex h-7 w-7 shrink-0 items-center justify-center rounded-md border border-border/60 bg-background text-muted-foreground transition-colors hover:bg-muted hover:text-foreground",
+            children: /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(import_lucide_react59.Hash, { "aria-hidden": "true", className: "h-4 w-4" })
+          }
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(
+          "button",
+          {
+            type: "button",
+            onClick: () => {
+              clearSelectedTableCellFormula(editor);
+              setDraftState(null);
+            },
+            "aria-label": t("tableMenu.clearCell"),
+            title: t("tableMenu.clearCell"),
+            className: "flex h-7 w-7 shrink-0 items-center justify-center rounded-md border border-destructive/30 bg-background text-destructive transition-colors hover:bg-destructive/10",
+            children: /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(import_lucide_react59.Trash2, { "aria-hidden": "true", className: "h-4 w-4" })
+          }
+        )
+      ]
+    }
+  );
+}
+
+// src/components/UEditor/UEditor.tsx
+var import_jsx_runtime101 = require("react/jsx-runtime");
+var UEditor = import_react82.default.forwardRef(({
   content = "",
   onChange,
   onHtmlChange,
@@ -43405,6 +43966,7 @@ var UEditor = import_react80.default.forwardRef(({
   autofocus = false,
   showToolbar = true,
   showBubbleMenu = true,
+  showFloatingMenu = false,
   showCharacterCount = true,
   showFooter = true,
   maxCharacters,
@@ -43428,14 +43990,14 @@ var UEditor = import_react80.default.forwardRef(({
 }, ref) => {
   const t = useSmartTranslations("UEditor");
   const effectivePlaceholder = placeholder ?? t("placeholder");
-  const inFlightPrepareRef = (0, import_react80.useRef)(null);
-  const lastAppliedContentRef = (0, import_react80.useRef)(content ?? "");
-  const scheduledFormulaRecalculateRef = (0, import_react80.useRef)(false);
-  const editorInstanceRef = (0, import_react80.useRef)(null);
-  const formulaRangePickRef = (0, import_react80.useRef)(null);
-  const formulaRangeSurfaceRef = (0, import_react80.useRef)(null);
-  const [formulaRangeHighlight, setFormulaRangeHighlight] = import_react80.default.useState(null);
-  const scheduleFormulaRecalculate = import_react80.default.useCallback((editor2, options) => {
+  const inFlightPrepareRef = (0, import_react82.useRef)(null);
+  const lastAppliedContentRef = (0, import_react82.useRef)(content ?? "");
+  const scheduledFormulaRecalculateRef = (0, import_react82.useRef)(false);
+  const editorInstanceRef = (0, import_react82.useRef)(null);
+  const formulaRangePickRef = (0, import_react82.useRef)(null);
+  const formulaRangeSurfaceRef = (0, import_react82.useRef)(null);
+  const [formulaRangeHighlight, setFormulaRangeHighlight] = import_react82.default.useState(null);
+  const scheduleFormulaRecalculate = import_react82.default.useCallback((editor2, options) => {
     if (editor2.isDestroyed || scheduledFormulaRecalculateRef.current) return;
     if (!options?.force && isEditingTableFormulaText(editor2)) return;
     scheduledFormulaRecalculateRef.current = true;
@@ -43446,7 +44008,7 @@ var UEditor = import_react80.default.forwardRef(({
       }
     });
   }, []);
-  const resolvedUploadFile = (0, import_react80.useMemo)(() => {
+  const resolvedUploadFile = (0, import_react82.useMemo)(() => {
     if (uploadFile) return uploadFile;
     if (uploadFileForSave) {
       return async (file) => {
@@ -43456,7 +44018,7 @@ var UEditor = import_react80.default.forwardRef(({
     }
     return uploadImage;
   }, [uploadFile, uploadFileForSave, uploadImage]);
-  const extensions = (0, import_react80.useMemo)(
+  const extensions = (0, import_react82.useMemo)(
     () => [
       ...buildUEditorExtensions({
         placeholder: effectivePlaceholder,
@@ -43475,11 +44037,11 @@ var UEditor = import_react80.default.forwardRef(({
     ],
     [effectivePlaceholder, t, maxCharacters, uploadImage, resolvedUploadFile, imageInsertMode, maxImageFileSize, allowedImageMimeTypes, fallbackToDataUrl, editable, fetchMetadata, extraExtensions]
   );
-  const syncFormulaRangeHighlight = import_react80.default.useCallback((pickState) => {
+  const syncFormulaRangeHighlight = import_react82.default.useCallback((pickState) => {
     const container = formulaRangeSurfaceRef.current;
     setFormulaRangeHighlight(container && pickState ? getFormulaRangePickHighlight(container, pickState) : null);
   }, []);
-  const editor = (0, import_react81.useEditor)({
+  const editor = (0, import_react83.useEditor)({
     immediatelyRender: false,
     extensions,
     content,
@@ -43524,9 +44086,9 @@ var UEditor = import_react80.default.forwardRef(({
           if (formulaContext && event.key === "Enter") {
             event.preventDefault();
             event.stopPropagation();
-            const activeEditor = editorInstanceRef.current;
-            if (activeEditor && !isDraftTableFormula(formulaContext.formula)) {
-              recalculateActiveTableFormulas(activeEditor);
+            const activeEditor2 = editorInstanceRef.current;
+            if (activeEditor2 && !isDraftTableFormula(formulaContext.formula)) {
+              recalculateActiveTableFormulas(activeEditor2);
             }
             return true;
           }
@@ -43536,6 +44098,13 @@ var UEditor = import_react80.default.forwardRef(({
             cancelFormulaEditing(_view);
             return true;
           }
+          const activeEditor = editorInstanceRef.current;
+          if (activeEditor && (event.key === "Backspace" || event.key === "Delete") && getSelectedTableFormulaCell(activeEditor)) {
+            event.preventDefault();
+            event.stopPropagation();
+            clearSelectedTableCellFormula(activeEditor);
+            return true;
+          }
           if (event.key === "ArrowLeft" || event.key === "ArrowRight" || event.key === "ArrowUp" || event.key === "ArrowDown") {
             event.stopPropagation();
           }
@@ -43546,7 +44115,7 @@ var UEditor = import_react80.default.forwardRef(({
           if (event.button !== 0) return false;
           const target = resolveEventElement(event.target);
           const anchor = target?.closest?.("a[href]");
-          const href = anchor?.getAttribute("href") ?? "";
+          const href = sanitizeUEditorUrl(anchor?.getAttribute("href") ?? "", "link");
           if (!href) return false;
           if (editable) return false;
           if (!view.state.selection.empty) return false;
@@ -43572,11 +44141,13 @@ var UEditor = import_react80.default.forwardRef(({
     onSelectionUpdate: ({ editor: editor2 }) => {
       scheduleFormulaRecalculate(editor2);
     },
-    onBlur: ({ editor: editor2 }) => {
+    onBlur: ({ editor: editor2, event }) => {
+      const nextTarget = event.relatedTarget;
+      if (nextTarget instanceof Element && nextTarget.closest("[data-ueditor-formula-bar]")) return;
       scheduleFormulaRecalculate(editor2, { force: true });
     }
   });
-  (0, import_react80.useEffect)(() => {
+  (0, import_react82.useEffect)(() => {
     editorInstanceRef.current = editor;
     return () => {
       if (editorInstanceRef.current === editor) editorInstanceRef.current = null;
@@ -43592,7 +44163,7 @@ var UEditor = import_react80.default.forwardRef(({
     apply: t("tableMenu.apply"),
     cancel: t("imageInput.cancelBtn")
   });
-  (0, import_react80.useImperativeHandle)(
+  (0, import_react82.useImperativeHandle)(
     ref,
     () => ({
       editor,
@@ -43617,7 +44188,7 @@ var UEditor = import_react80.default.forwardRef(({
     }),
     [content, editor, uploadImageForSave, uploadFileForSave, uploadImageConcurrency]
   );
-  (0, import_react80.useEffect)(() => {
+  (0, import_react82.useEffect)(() => {
     if (!editor) return;
     queueMicrotask(() => {
       if (!editor.isDestroyed) {
@@ -43625,7 +44196,7 @@ var UEditor = import_react80.default.forwardRef(({
       }
     });
   }, [editor]);
-  (0, import_react80.useEffect)(() => {
+  (0, import_react82.useEffect)(() => {
     if (!editor) return;
     const nextContent = content ?? "";
     if (lastAppliedContentRef.current === nextContent) return;
@@ -43644,7 +44215,7 @@ var UEditor = import_react80.default.forwardRef(({
     }
   }, [content, editor]);
   if (!editor) {
-    return /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(
+    return /* @__PURE__ */ (0, import_jsx_runtime101.jsx)(
       "div",
       {
         className: cn("w-full border bg-background flex items-center justify-center text-muted-foreground", className),
@@ -43653,7 +44224,7 @@ var UEditor = import_react80.default.forwardRef(({
       }
     );
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime100.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime101.jsxs)(
     "div",
     {
       className: cn(
@@ -43669,7 +44240,7 @@ var UEditor = import_react80.default.forwardRef(({
         className
       ),
       children: [
-        editable && showMenuBar && /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(
+        editable && showMenuBar && /* @__PURE__ */ (0, import_jsx_runtime101.jsx)(
           MenuBar,
           {
             editor,
@@ -43684,7 +44255,7 @@ var UEditor = import_react80.default.forwardRef(({
             onPreview
           }
         ),
-        editable && showToolbar && /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(
+        editable && showToolbar && /* @__PURE__ */ (0, import_jsx_runtime101.jsx)(
           EditorToolbar,
           {
             editor,
@@ -43699,7 +44270,8 @@ var UEditor = import_react80.default.forwardRef(({
             letterSpacings
           }
         ),
-        editable && showBubbleMenu && /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(
+        editable && /* @__PURE__ */ (0, import_jsx_runtime101.jsx)(TableFormulaBar, { editor }),
+        editable && showBubbleMenu && /* @__PURE__ */ (0, import_jsx_runtime101.jsx)(
           CustomBubbleMenu,
           {
             editor,
@@ -43707,7 +44279,8 @@ var UEditor = import_react80.default.forwardRef(({
             lineHeights
           }
         ),
-        /* @__PURE__ */ (0, import_jsx_runtime100.jsxs)(
+        editable && showFloatingMenu && /* @__PURE__ */ (0, import_jsx_runtime101.jsx)(CustomFloatingMenu, { editor }),
+        /* @__PURE__ */ (0, import_jsx_runtime101.jsxs)(
           "div",
           {
             ref: (node) => {
@@ -43720,7 +44293,7 @@ var UEditor = import_react80.default.forwardRef(({
               maxHeight
             },
             children: [
-              /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(
+              /* @__PURE__ */ (0, import_jsx_runtime101.jsx)(
                 "span",
                 {
                   ref: tableColumnGuideRef,
@@ -43728,7 +44301,7 @@ var UEditor = import_react80.default.forwardRef(({
                   className: "pointer-events-none absolute z-20 bg-primary opacity-0 transition-opacity duration-100"
                 }
               ),
-              /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(
+              /* @__PURE__ */ (0, import_jsx_runtime101.jsx)(
                 "span",
                 {
                   ref: tableRowGuideRef,
@@ -43736,7 +44309,7 @@ var UEditor = import_react80.default.forwardRef(({
                   className: "pointer-events-none absolute z-20 bg-primary opacity-0 transition-opacity duration-100"
                 }
               ),
-              /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(
+              /* @__PURE__ */ (0, import_jsx_runtime101.jsx)(
                 "span",
                 {
                   ref: activeTableCellHighlightRef,
@@ -43745,20 +44318,24 @@ var UEditor = import_react80.default.forwardRef(({
                   className: "pointer-events-none hidden absolute z-20 rounded-[2px] border-2 border-primary bg-primary/10"
                 }
               ),
-              /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(
+              /* @__PURE__ */ (0, import_jsx_runtime101.jsx)(
                 "div",
                 {
                   ref: formulaCoordinateOverlayRef,
                   "data-ueditor-formula-coordinate-overlay": "",
-                  className: "pointer-events-none absolute inset-0 z-[21] hidden overflow-visible"
+                  className: "pointer-events-none absolute inset-0 z-[35] hidden overflow-visible"
                 }
               ),
-              formulaRangeHighlight && /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(
+              formulaRangeHighlight && /* @__PURE__ */ (0, import_jsx_runtime101.jsx)(
                 "span",
                 {
                   "aria-hidden": "true",
                   "data-ueditor-formula-range-highlight": "",
-                  className: "pointer-events-none absolute z-20 rounded-[2px] border-2 border-primary bg-primary/10",
+                  "data-ueditor-formula-range-blocked": formulaRangeHighlight.blocked ? "true" : void 0,
+                  className: cn(
+                    "pointer-events-none absolute z-20 rounded-[2px] border-2",
+                    formulaRangeHighlight.blocked ? "border-destructive bg-destructive/15" : "border-primary bg-primary/10"
+                  ),
                   style: {
                     left: formulaRangeHighlight.left,
                     top: formulaRangeHighlight.top,
@@ -43767,9 +44344,9 @@ var UEditor = import_react80.default.forwardRef(({
                   }
                 }
               ),
-              editable && /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(TableControls, { editor, containerRef: editorContentRef }),
-              /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(
-                import_react81.EditorContent,
+              editable && /* @__PURE__ */ (0, import_jsx_runtime101.jsx)(TableControls, { editor, containerRef: editorContentRef }),
+              /* @__PURE__ */ (0, import_jsx_runtime101.jsx)(
+                import_react83.EditorContent,
                 {
                   editor,
                   className: "min-h-full"
@@ -43778,7 +44355,7 @@ var UEditor = import_react80.default.forwardRef(({
             ]
           }
         ),
-        showFooter && showCharacterCount && /* @__PURE__ */ (0, import_jsx_runtime100.jsx)(CharacterCountDisplay, { editor, maxCharacters })
+        showFooter && showCharacterCount && /* @__PURE__ */ (0, import_jsx_runtime101.jsx)(CharacterCountDisplay, { editor, maxCharacters })
       ]
     }
   );