@vectojs/core 0.2.2 → 0.2.3

package/dist/{chunk-LIX7DJTI.js → chunk-TXA3LZDM.js}

@@ -185,8 +185,50 @@ var CanvasRenderer = (_class = class _CanvasRenderer {
     }
     return grad;
   }
+  /**
+   * Canvas2D drawing contexts are automatically released when their
+   * `<canvas>` element is GC'd, so there's no explicit GPU handle to free.
+   * This method clears our internal batch state and is idempotent.
+   */
+  dispose() {
+    this.batchCount = 0;
+    this.batchColor = "";
+    this.batchAlpha = 1;
+    this.batchActive = false;
+  }
 }, _class.__initStatic(), _class);
 
+// src/renderer/url.ts
+var SAFE_SCHEMES = /* @__PURE__ */ new Set(["http:", "https:", "mailto:", "tel:", "ftp:"]);
+var SCHEME_PATTERN = /^[a-z][a-z\d+.-]*$/i;
+function normalizeSchemeCandidate(value) {
+  let result = "";
+  for (const character of value) {
+    const code = character.charCodeAt(0);
+    if (code > 32 && (code < 127 || code > 159)) result += character;
+  }
+  return result;
+}
+function hasSafeSchemeOrIsRelative(url) {
+  const colonIndex = url.indexOf(":");
+  if (colonIndex < 0) return true;
+  const candidate = normalizeSchemeCandidate(url.slice(0, colonIndex));
+  if (!SCHEME_PATTERN.test(candidate)) return true;
+  return SAFE_SCHEMES.has(`${candidate.toLowerCase()}:`);
+}
+function sanitizeUrl(href) {
+  if (typeof href !== "string") return "";
+  const trimmed = href.trim();
+  if (trimmed === "") return "";
+  return hasSafeSchemeOrIsRelative(trimmed) ? trimmed : "#";
+}
+function isSafeUrl(urlStr) {
+  if (typeof urlStr !== "string") return false;
+  const trimmed = urlStr.trim();
+  if (trimmed === "") return false;
+  return hasSafeSchemeOrIsRelative(trimmed);
+}
+
 // src/renderer/SVGRenderer.ts
 var SVGRenderer = (_class2 = class {
   
@@ -395,7 +437,7 @@ var SVGRenderer = (_class2 = class {
   }
   fill(colorOrGradient) {
     this.flush();
-    const fillVal = this.resolveGradient(colorOrGradient);
+    const fillVal = this.escapeXML(this.resolveGradient(colorOrGradient));
     const dStr = this.currentPath.join(" ");
     const transformStr = `matrix(${this.ma},${this.mb},${this.mc},${this.md},${this.me},${this.mf})`;
     this.buffer.push(
@@ -404,7 +446,7 @@ var SVGRenderer = (_class2 = class {
   }
   stroke(colorOrGradient, lineWidth = 1) {
     this.flush();
-    const strokeVal = this.resolveGradient(colorOrGradient);
+    const strokeVal = this.escapeXML(this.resolveGradient(colorOrGradient));
     const dStr = this.currentPath.join(" ");
     const transformStr = `matrix(${this.ma},${this.mb},${this.mc},${this.md},${this.me},${this.mf})`;
     this.buffer.push(
@@ -424,7 +466,7 @@ var SVGRenderer = (_class2 = class {
     const fontWeight = fontWeightMatch ? fontWeightMatch[1].toLowerCase() : "normal";
     const cleanFont = font.replace(/\d+(?:\.\d+)?(px|em|rem)(?:\/\d+(?:\.\d+)?(?:px|em|rem|%)?)?/, "").trim();
     const fontFamily = cleanFont.replace(/(bold|italic|normal|600|500|400|300|100)\s+/gi, "").trim() || "sans-serif";
-    const fillVal = this.resolveGradient(color);
+    const fillVal = this.escapeXML(this.resolveGradient(color));
     const transformStr = `matrix(${this.ma},${this.mb},${this.mc},${this.md},${this.me},${this.mf})`;
     this.buffer.push(
       `<g transform="${transformStr}"><text x="${x}" y="${y}" font-size="${fontSize}" font-weight="${fontWeight}" font-style="${fontStyle}" font-family="${this.escapeXML(fontFamily)}" fill="${fillVal}" opacity="${this.globalAlpha}">${this.escapeXML(text)}</text></g>`
@@ -446,7 +488,9 @@ var SVGRenderer = (_class2 = class {
   }
   drawImage(source, dx, dy, dw, dh) {
     this.flush();
-    const href = typeof _optionalChain([source, 'optionalAccess', _ => _.toDataURL]) === "function" ? source.toDataURL() : _optionalChain([source, 'optionalAccess', _2 => _2.src]) || "";
+    const fromCanvas2 = typeof _optionalChain([source, 'optionalAccess', _ => _.toDataURL]) === "function";
+    const rawHref = fromCanvas2 ? source.toDataURL() : _optionalChain([source, 'optionalAccess', _2 => _2.src]) || "";
+    const href = fromCanvas2 && this.isSafeRasterDataUrl(rawHref) ? rawHref : sanitizeUrl(String(rawHref));
     const transformStr = `matrix(${this.ma},${this.mb},${this.mc},${this.md},${this.me},${this.mf})`;
     if (href) {
       this.buffer.push(
@@ -459,6 +503,21 @@ var SVGRenderer = (_class2 = class {
       console.warn("drawImage source fallback triggered");
     }
   }
+  /**
+   * Embed SVG markup as an isolated nested image.
+   *
+   * This explicit path is used by `SVGEntity` during vector export. General
+   * `drawImage()` input remains subject to the URL policy and therefore still
+   * rejects caller-provided SVG data URLs.
+   */
+  drawSVG(source, dx, dy, dw, dh) {
+    this.flush();
+    const href = `data:image/svg+xml;charset=utf-8,${encodeURIComponent(source)}`;
+    const transformStr = `matrix(${this.ma},${this.mb},${this.mc},${this.md},${this.me},${this.mf})`;
+    this.buffer.push(
+      `<image href="${this.escapeXML(href)}" x="${dx}" y="${dy}" width="${dw}" height="${dh}" transform="${transformStr}" />`
+    );
+  }
   flush() {
     if (!this.batchActive || this.batchCircles.length === 0) return;
     let d = "";
@@ -566,6 +625,17 @@ var SVGRenderer = (_class2 = class {
       }
     });
   }
+  isSafeRasterDataUrl(value) {
+    return typeof value === "string" && /^data:image\/(?:png|jpeg|gif|webp);base64,[a-z\d+/=\s]*$/i.test(value);
+  }
+  /**
+   * SVGRenderer accumulates strings in memory; nothing external is allocated.
+   * Drop the buffers for GC and become idempotent.
+   */
+  dispose() {
+    this.clear();
+    this.gradientCache.clear();
+  }
 }, _class2);
 
 // src/renderer/colorParse.ts
@@ -831,6 +901,7 @@ function createWebGLPointRenderer(canvas) {
   let logicalW = 0;
   let logicalH = 0;
   let dpr = 1;
+  let destroyed = false;
   return {
     resize(width, height) {
       logicalW = width;
@@ -1037,6 +1108,8 @@ function createWebGLPointRenderer(canvas) {
       gl.bindVertexArray(null);
     },
     destroy() {
+      if (destroyed) return;
+      destroyed = true;
       gl.deleteBuffer(pointBuffer);
       gl.deleteBuffer(rectBuffer);
       gl.deleteBuffer(spriteBuffer);
@@ -1326,10 +1399,14 @@ var WebGPUParticleSystemManager = (_class3 = class {
     if (!this.computePipeline || !entity.computeBindGroup) return;
     const uniformArray = new Float32Array(20);
     const color = parseColorToRGBA(entity.baseColor);
+    let opacity = 1;
+    for (let current = entity; current; current = current.parent) {
+      opacity *= current.opacity;
+    }
     uniformArray[0] = color[0];
     uniformArray[1] = color[1];
     uniformArray[2] = color[2];
-    uniformArray[3] = color[3];
+    uniformArray[3] = color[3] * opacity;
     const mActive = !isNaN(mouseX) && !isNaN(mouseY) && mouseX > -9e3 && mouseY > -9e3;
     uniformArray[4] = mActive ? mouseX : -9999;
     uniformArray[5] = mActive ? mouseY : -9999;
@@ -1377,4 +1454,6 @@ var WebGPUParticleSystemManager = (_class3 = class {
 
 
 
-exports.CanvasRenderer = CanvasRenderer; exports.SVGRenderer = SVGRenderer; exports.parseColorToRGBA = parseColorToRGBA; exports.createWebGLPointRenderer = createWebGLPointRenderer; exports.WebGPUParticleSystemManager = WebGPUParticleSystemManager;
+
+
+exports.CanvasRenderer = CanvasRenderer; exports.sanitizeUrl = sanitizeUrl; exports.isSafeUrl = isSafeUrl; exports.SVGRenderer = SVGRenderer; exports.parseColorToRGBA = parseColorToRGBA; exports.createWebGLPointRenderer = createWebGLPointRenderer; exports.WebGPUParticleSystemManager = WebGPUParticleSystemManager;

package/dist/{chunk-72WVPMSJ.js → chunk-VVOQNUBK.js}

@@ -1,7 +1,7 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } var _class; var _class2;
 
 
-var _chunkRW6NC4RBjs = require('./chunk-RW6NC4RB.js');
+var _chunk6I53LI3Zjs = require('./chunk-6I53LI3Z.js');
 
 // src/layout/LayoutEngine.ts
 function computeLineSegments(top, bottom, maxWidth, exclusions) {
@@ -142,8 +142,8 @@ var LayoutEngine = (_class = class {
         offset += paragraph.length + 1;
         continue;
       }
-      const { shapedText, indexMap } = _chunkRW6NC4RBjs.ArabicShaper.shapeArabic(paragraph);
-      const levels = _chunkRW6NC4RBjs.BidiResolver.resolveLevels(shapedText);
+      const { shapedText, indexMap } = _chunk6I53LI3Zjs.ArabicShaper.shapeArabic(paragraph);
+      const levels = _chunk6I53LI3Zjs.BidiResolver.resolveLevels(shapedText);
       const words = [];
       let shapedCharIdx = 0;
       let pFallback = false;
@@ -192,7 +192,7 @@ var LayoutEngine = (_class = class {
         words,
         isEmpty: false,
         fallbackToCanvas: pFallback || void 0,
-        baseLevel: _chunkRW6NC4RBjs.BidiResolver.getBaseLevel(shapedText)
+        baseLevel: _chunk6I53LI3Zjs.BidiResolver.getBaseLevel(shapedText)
       };
       if (this.paragraphCache.size > 1e3) this.paragraphCache.clear();
       this.paragraphCache.set(key, prepared);
@@ -264,8 +264,8 @@ var LayoutEngine = (_class = class {
         offset += paragraph.length + 1;
         continue;
       }
-      const { shapedText, indexMap } = _chunkRW6NC4RBjs.ArabicShaper.shapeArabic(paragraph);
-      const levels = _chunkRW6NC4RBjs.BidiResolver.resolveLevels(shapedText);
+      const { shapedText, indexMap } = _chunk6I53LI3Zjs.ArabicShaper.shapeArabic(paragraph);
+      const levels = _chunk6I53LI3Zjs.BidiResolver.resolveLevels(shapedText);
       const words = [];
       let shapedCharIdx = 0;
       let pFallback = false;
@@ -317,7 +317,7 @@ var LayoutEngine = (_class = class {
         words,
         isEmpty: false,
         fallbackToCanvas: pFallback || void 0,
-        baseLevel: _chunkRW6NC4RBjs.BidiResolver.getBaseLevel(shapedText)
+        baseLevel: _chunk6I53LI3Zjs.BidiResolver.getBaseLevel(shapedText)
       };
       if (this.richParagraphCache.size > 1e3) this.richParagraphCache.clear();
       this.richParagraphCache.set(key, prepared);
@@ -372,7 +372,7 @@ var LayoutEngine = (_class = class {
       }
       for (const run of runs) {
         const runStartX = run[0].x;
-        _chunkRW6NC4RBjs.BidiResolver.reorderVisual(run, paragraphBaseLevel);
+        _chunk6I53LI3Zjs.BidiResolver.reorderVisual(run, paragraphBaseLevel);
         let x = runStartX;
         for (const node of run) {
           node.x = x;

package/dist/{chunk-YA2J5ZH7.mjs → chunk-YSS44ADQ.mjs}

@@ -301,24 +301,57 @@ var WORKER_SOURCE_STRING = '"use strict";(()=>{var b=new Map;self.onmessage=x=>{
 // src/layout/LayoutWorkerManager.ts
 var LayoutWorkerManager = class _LayoutWorkerManager {
   static instance;
-  worker;
+  worker = null;
   registeredFonts = /* @__PURE__ */ new Set();
   pendingCallbacks = /* @__PURE__ */ new Map();
   seqIdCounter = /* @__PURE__ */ new Map();
   debounceTimers = /* @__PURE__ */ new Map();
   constructor() {
+    this.worker = this.createWorker();
+  }
+  createWorker() {
     const workerBlob = new Blob([WORKER_SOURCE_STRING], { type: "application/javascript" });
     const workerURL = URL.createObjectURL(workerBlob);
-    this.worker = new Worker(workerURL);
-    setTimeout(() => URL.revokeObjectURL(workerURL), 2e3);
-    this.worker.onmessage = (e) => {
+    let worker;
+    try {
+      worker = new Worker(workerURL);
+    } finally {
+      URL.revokeObjectURL(workerURL);
+    }
+    worker.onmessage = (e) => {
+      if (this.worker !== worker) return;
       const response = e.data;
-      const callback = this.pendingCallbacks.get(`${response.id}-${response.seqId}`);
+      const key = `${response.id}-${response.seqId}`;
+      const callback = this.pendingCallbacks.get(key);
       if (callback) {
+        this.pendingCallbacks.delete(key);
         callback(response);
-        this.pendingCallbacks.delete(`${response.id}-${response.seqId}`);
       }
     };
+    worker.onerror = () => this.handleWorkerFailure(worker);
+    worker.onmessageerror = () => this.handleWorkerFailure(worker);
+    return worker;
+  }
+  ensureWorker() {
+    if (!this.worker) this.worker = this.createWorker();
+    return this.worker;
+  }
+  handleWorkerFailure(worker) {
+    if (this.worker !== worker) return;
+    worker.terminate();
+    this.worker = null;
+    this.pendingCallbacks.clear();
+    this.registeredFonts.clear();
+  }
+  destroy() {
+    for (const timer of this.debounceTimers.values()) clearTimeout(timer);
+    this.debounceTimers.clear();
+    this.pendingCallbacks.clear();
+    this.seqIdCounter.clear();
+    this.registeredFonts.clear();
+    this.worker?.terminate();
+    this.worker = null;
+    if (_LayoutWorkerManager.instance === this) _LayoutWorkerManager.instance = void 0;
   }
   static getInstance() {
     if (!_LayoutWorkerManager.instance) {
@@ -332,6 +365,7 @@ var LayoutWorkerManager = class _LayoutWorkerManager {
       clearTimeout(existingTimer);
     }
     const runLayout = () => {
+      this.debounceTimers.delete(entityId);
       const nextSeqId = (this.seqIdCounter.get(entityId) ?? 0) + 1;
       this.seqIdCounter.set(entityId, nextSeqId);
       const request = {
@@ -350,7 +384,12 @@ var LayoutWorkerManager = class _LayoutWorkerManager {
         this.registeredFonts.add(options.fontId);
       }
       this.pendingCallbacks.set(`${entityId}-${nextSeqId}`, options.callback);
-      this.worker.postMessage(request);
+      try {
+        this.ensureWorker().postMessage(request);
+      } catch {
+        const worker = this.worker;
+        if (worker) this.handleWorkerFailure(worker);
+      }
     };
     if (!this.seqIdCounter.has(entityId)) {
       runLayout();
@@ -365,6 +404,9 @@ var LayoutWorkerManager = class _LayoutWorkerManager {
       clearTimeout(existingTimer);
       this.debounceTimers.delete(entityId);
     }
+    for (const key of this.pendingCallbacks.keys()) {
+      if (key.startsWith(`${entityId}-`)) this.pendingCallbacks.delete(key);
+    }
     this.seqIdCounter.delete(entityId);
   }
 };

package/dist/index.d.ts

@@ -4,6 +4,7 @@ export * from './renderer/SVGRenderer';
 export * from './renderer/WebGLPointRenderer';
 export * from './renderer/WebGPUParticleSystemManager';
 export * from './renderer/colorParse';
+export * from './renderer/url';
 export * from './tree/Entity';
 export * from './tree/Scene';
 export * from './components/TextEntity';