@underverse-ui/underverse 2.0.31 → 2.0.32

package/CHANGELOG.md

@@ -8,6 +8,16 @@ All notable changes to `@underverse-ui/underverse` are documented in this file.
 
 - `DataTable` sortable headers now keep their titles visually centered while the sort control remains aligned to the trailing edge.
 
+## [2.0.32] - 2026-09-09
+
+### Added
+
+- Added `UEditor.bubbleMenuPlacement` to keep the selection bubble menu above, below, or automatically positioned around the selection.
+
+### Fixed
+
+- Hardened `UEditor` table selection and layout resolution against external HTML table cells and invalid `posAtDOM()` positions, including cross-realm popup and iframe documents.
+
 ## [2.0.2] - 2026-07-28
 
 ### Added

package/api-reference.json

@@ -1,8 +1,8 @@
 {
   "package": "@underverse-ui/underverse",
-  "version": "2.0.31",
+  "version": "2.0.32",
   "sourceEntry": "src/index.ts",
-  "totalExports": 263,
+  "totalExports": 264,
   "exports": [
     {
       "name": "*",
@@ -1604,6 +1604,13 @@
       "local": false,
       "aliasOf": "default"
     },
+    {
+      "name": "UEditorBubbleMenuPlacement",
+      "kind": "type",
+      "source": "./components/UEditor",
+      "reexport": true,
+      "local": false
+    },
     {
       "name": "UEditorFontFamilyOption",
       "kind": "type",

package/dist/{chunk-37MHVJMV.js → chunk-4TXHZS3S.js}

@@ -3090,11 +3090,16 @@ function isCrossRealmTableRow(value) {
 function isCrossRealmTableCell(value) {
   return isCrossRealmElement(value) && ["TD", "TH"].includes(String(value.tagName).toUpperCase()) && "cellIndex" in value;
 }
+function isValidProseMirrorPosition(doc, pos) {
+  return Number.isInteger(pos) && pos >= 0 && pos <= doc.content.size;
+}
 var TABLE_RESIZE_HIT_ZONE = 5;
 function findTableRowNodeInfo(view, rowElement) {
+  if (!view.dom.contains(rowElement)) return null;
   const firstCell = rowElement.querySelector("th,td");
-  if (!firstCell) return null;
+  if (!isCrossRealmTableCell(firstCell) || !view.dom.contains(firstCell)) return null;
   const cellPos = view.posAtDOM(firstCell, 0);
+  if (!isValidProseMirrorPosition(view.state.doc, cellPos)) return null;
   const $pos = view.state.doc.resolve(cellPos);
   for (let depth = $pos.depth; depth > 0; depth -= 1) {
     const node = $pos.node(depth);
@@ -3136,14 +3141,14 @@ function getSelectionTableCell(view) {
   const browserSelection = realm?.getSelection();
   const anchorElement = resolveEventElement(browserSelection?.anchorNode ?? null);
   const anchorCell = anchorElement?.closest?.("th,td");
-  if (realm && anchorCell instanceof realm.HTMLElement) {
+  if (isCrossRealmTableCell(anchorCell) && view.dom.contains(anchorCell)) {
     return anchorCell;
   }
   const { from } = view.state.selection;
   const domAtPos = view.domAtPos(from);
   const element = resolveEventElement(domAtPos.node);
   const cell = element?.closest?.("th,td");
-  return realm && cell instanceof realm.HTMLElement ? cell : null;
+  return isCrossRealmTableCell(cell) && view.dom.contains(cell) ? cell : null;
 }
 function resolveRowResizeTarget(cell, clientX, clientY) {
   const rect = cell.getBoundingClientRect();
@@ -4327,18 +4332,22 @@ function getTableAnchorPos(editor) {
   const editorWindow = editorDocument.defaultView;
   const selectionAnchor = resolveEventElement(editorWindow?.getSelection()?.anchorNode ?? null);
   const selectionCell = selectionAnchor?.closest?.("th,td");
-  if (editorWindow && selectionCell instanceof editorWindow.HTMLTableCellElement && editor.view.dom.contains(selectionCell)) {
-    return editor.view.posAtDOM(selectionCell, 0) + 1;
+  if (isCrossRealmTableCell(selectionCell) && editor.view.dom.contains(selectionCell)) {
+    const cellPos2 = editor.view.posAtDOM(selectionCell, 0);
+    return isValidProseMirrorPosition(editor.state.doc, cellPos2) && isValidProseMirrorPosition(editor.state.doc, cellPos2 + 1) ? cellPos2 + 1 : null;
   }
   const activeElement = editorWindow && editorDocument.activeElement instanceof editorWindow.Element ? editorDocument.activeElement : null;
   const activeCell = activeElement?.closest?.("th,td");
-  if (editorWindow && activeCell instanceof editorWindow.HTMLTableCellElement && editor.view.dom.contains(activeCell)) {
-    return editor.view.posAtDOM(activeCell, 0) + 1;
+  if (isCrossRealmTableCell(activeCell) && editor.view.dom.contains(activeCell)) {
+    const cellPos2 = editor.view.posAtDOM(activeCell, 0);
+    return isValidProseMirrorPosition(editor.state.doc, cellPos2) && isValidProseMirrorPosition(editor.state.doc, cellPos2 + 1) ? cellPos2 + 1 : null;
   }
   const tables = editor.view.dom.querySelectorAll("table");
   if (tables.length !== 1) return null;
   const firstCell = tables[0]?.querySelector("th,td");
-  return editorWindow && firstCell instanceof editorWindow.HTMLTableCellElement ? editor.view.posAtDOM(firstCell, 0) + 1 : null;
+  if (!isCrossRealmTableCell(firstCell) || !editor.view.dom.contains(firstCell)) return null;
+  const cellPos = editor.view.posAtDOM(firstCell, 0);
+  return isValidProseMirrorPosition(editor.state.doc, cellPos) && isValidProseMirrorPosition(editor.state.doc, cellPos + 1) ? cellPos + 1 : null;
 }
 var EDITOR_UI_ACTIVE_MARKS = [
   "blockquote",
@@ -5758,6 +5767,7 @@ export {
   isCrossRealmTable,
   isCrossRealmTableRow,
   isCrossRealmTableCell,
+  isValidProseMirrorPosition,
   findTableRowNodeInfo,
   resolveEventElement,
   isPointOverRenderedText,
@@ -5817,4 +5827,4 @@ export {
   EditorToolbar,
   UEDITOR_PROSEMIRROR_CLASS_NAME
 };
-//# sourceMappingURL=chunk-37MHVJMV.js.map
+//# sourceMappingURL=chunk-4TXHZS3S.js.map