@xiaobuyu/nodesign 0.0.1 → 0.0.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (282) hide show
  1. package/README.md +156 -106
  2. package/bin/nodesign.js +0 -0
  3. package/package.json +1 -1
  4. package/server/api/README.md +45 -45
  5. package/server/api/_guard.js +75 -75
  6. package/server/api/admin.js +187 -187
  7. package/server/api/assets/docx-page.js +103 -103
  8. package/server/api/assets/helpers.js +22 -22
  9. package/server/api/assets/notes.js +144 -144
  10. package/server/api/assets.js +896 -896
  11. package/server/api/board.js +57 -57
  12. package/server/api/browse.js +138 -138
  13. package/server/api/canvas.js +444 -444
  14. package/server/api/chatai.js +324 -324
  15. package/server/api/exports/build-standalone.js +980 -980
  16. package/server/api/exports/cards.js +118 -118
  17. package/server/api/exports/docx-pdf.js +46 -46
  18. package/server/api/exports/export-page.js +142 -142
  19. package/server/api/exports/handoff.js +147 -147
  20. package/server/api/exports.js +690 -690
  21. package/server/api/instruction.js +75 -75
  22. package/server/api/me.js +116 -116
  23. package/server/api/memory.js +185 -185
  24. package/server/api/pending-changes.js +366 -366
  25. package/server/api/plugins.js +164 -164
  26. package/server/api/projects.js +220 -220
  27. package/server/api/publish.js +64 -64
  28. package/server/api/recent.js +73 -73
  29. package/server/api/sessions.js +589 -589
  30. package/server/api/skills.js +77 -77
  31. package/server/api/standalone-fit.js +168 -168
  32. package/server/api/turn-compose.js +180 -180
  33. package/server/api/turn-inflight.js +44 -44
  34. package/server/auth/README.md +17 -17
  35. package/server/auth/middleware.js +138 -138
  36. package/server/auth/origin-guard.js +71 -71
  37. package/server/auth/session.js +108 -108
  38. package/server/auth/tier.js +113 -113
  39. package/server/auth/users-store.js +348 -348
  40. package/server/edit/README.md +29 -29
  41. package/server/engine/README.md +113 -113
  42. package/server/engine/agent/agent-shared.js +550 -550
  43. package/server/engine/agent/auto-mode-default-hard-deny.txt +4 -4
  44. package/server/engine/agent/auto-mode-rules.js +78 -78
  45. package/server/engine/agent/context.js +418 -418
  46. package/server/engine/agent/events.js +464 -464
  47. package/server/engine/agent/hooks/canvas-validate.js +199 -199
  48. package/server/engine/agent/hooks/failure.js +120 -120
  49. package/server/engine/agent/hooks/file-events.js +75 -75
  50. package/server/engine/agent/hooks/lifecycle.js +233 -233
  51. package/server/engine/agent/hooks/post-canvas-focus.js +80 -80
  52. package/server/engine/agent/hooks/post-guidance.js +206 -206
  53. package/server/engine/agent/hooks/post-subagent-report.js +104 -104
  54. package/server/engine/agent/hooks/post-trim.js +58 -58
  55. package/server/engine/agent/hooks/pre-board-neighborhood.js +34 -34
  56. package/server/engine/agent/hooks/pre-defaults.js +84 -84
  57. package/server/engine/agent/hooks/pre-injectors.js +277 -277
  58. package/server/engine/agent/hooks/pre-performance-log-guard.js +78 -78
  59. package/server/engine/agent/hooks/pre-starter-files.js +61 -61
  60. package/server/engine/agent/hooks/pre-workspace-scope-guard.js +78 -78
  61. package/server/engine/agent/hooks/site-validate.js +94 -94
  62. package/server/engine/agent/hooks/tool-prompts.js +31 -31
  63. package/server/engine/agent/hooks/turn-state-memory.js +56 -56
  64. package/server/engine/agent/hooks/user-prompt-submit.js +215 -215
  65. package/server/engine/agent/hooks.js +354 -354
  66. package/server/engine/agent/init-contract.js +69 -69
  67. package/server/engine/agent/isolation.js +159 -159
  68. package/server/engine/agent/model-table.js +292 -292
  69. package/server/engine/agent/plugin-loader.js +266 -266
  70. package/server/engine/agent/prompts/nodesign-prelude.md +336 -336
  71. package/server/engine/agent/prompts/tools/ask-user-question-protocol.md +71 -71
  72. package/server/engine/agent/prompts/tools/direct-edit-protocol.md +98 -98
  73. package/server/engine/agent/prompts/tools/generate-image-cookbook.gemini-gateway.md +583 -583
  74. package/server/engine/agent/prompts/tools/generate-image-cookbook.md +483 -483
  75. package/server/engine/agent/prompts/tools/hybrid-reference.md +100 -100
  76. package/server/engine/agent/prompts/tools/paint-still-cookbook.md +270 -270
  77. package/server/engine/agent/prompts/tools/roll-film-cookbook.md +70 -70
  78. package/server/engine/agent/prompts/tools/site-reference.md +106 -106
  79. package/server/engine/agent/prompts/tools/tweaks-syntax.md +125 -125
  80. package/server/engine/agent/prompts/tools/vision-checker-dispatch.md +48 -48
  81. package/server/engine/agent/session-loop.js +1024 -1024
  82. package/server/engine/agent/session-model.js +164 -164
  83. package/server/engine/agent/skill.js +204 -204
  84. package/server/engine/agent/task-events.js +78 -78
  85. package/server/engine/agents/ds-extractor.md +132 -132
  86. package/server/engine/agents/explorer.md +190 -190
  87. package/server/engine/agents/index.js +230 -230
  88. package/server/engine/agents/schemas/design-system.json +156 -156
  89. package/server/engine/agents/schemas/tweak-schema.json +113 -113
  90. package/server/engine/agents/tweak-proposer.md +127 -127
  91. package/server/engine/agents/vision-checker.md +254 -254
  92. package/server/engine/browse/capture.js +422 -422
  93. package/server/engine/browse/card.js +137 -137
  94. package/server/engine/browse/handover.js +59 -59
  95. package/server/engine/browse/page-digest.js +119 -119
  96. package/server/engine/browse/refs.js +196 -196
  97. package/server/engine/browse/registry.js +307 -307
  98. package/server/engine/browse/screencast.js +170 -170
  99. package/server/engine/browse/state.js +121 -121
  100. package/server/engine/chatai/chat-log.js +79 -79
  101. package/server/engine/chatai/index.js +193 -193
  102. package/server/engine/chatai/openai-compat.js +152 -152
  103. package/server/engine/chatai/orchestrate.js +309 -309
  104. package/server/engine/chatai/perform.js +40 -40
  105. package/server/engine/chatai/summarize.js +79 -79
  106. package/server/engine/mcp/capability-gate.js +52 -52
  107. package/server/engine/mcp/index.js +339 -339
  108. package/server/engine/mcp/param-sanitizer.js +142 -142
  109. package/server/engine/mcp/tools/arrange-on-board.js +124 -124
  110. package/server/engine/mcp/tools/artifact-session.js +278 -278
  111. package/server/engine/mcp/tools/browse-computer.js +421 -421
  112. package/server/engine/mcp/tools/browse-find-batch.js +183 -183
  113. package/server/engine/mcp/tools/browse-screenshot.js +157 -157
  114. package/server/engine/mcp/tools/browse.js +480 -480
  115. package/server/engine/mcp/tools/build-docx.js +101 -101
  116. package/server/engine/mcp/tools/clear-pending-changes.js +99 -99
  117. package/server/engine/mcp/tools/create-on-board.js +155 -155
  118. package/server/engine/mcp/tools/crystallize-skill.js +168 -168
  119. package/server/engine/mcp/tools/explain-style.js +237 -237
  120. package/server/engine/mcp/tools/export-handoff.js +133 -133
  121. package/server/engine/mcp/tools/expose-tweaks.js +149 -149
  122. package/server/engine/mcp/tools/generate-image.js +842 -842
  123. package/server/engine/mcp/tools/get-computed-styles.js +164 -164
  124. package/server/engine/mcp/tools/get-pending-changes.js +205 -205
  125. package/server/engine/mcp/tools/h3box-ssh.js +84 -84
  126. package/server/engine/mcp/tools/helpers/acquire-page.js +82 -82
  127. package/server/engine/mcp/tools/helpers/motion-lab.js +554 -554
  128. package/server/engine/mcp/tools/helpers/motion-scroll.js +112 -112
  129. package/server/engine/mcp/tools/helpers/perception-page.js +215 -215
  130. package/server/engine/mcp/tools/helpers/reference-download.js +103 -103
  131. package/server/engine/mcp/tools/helpers/rembg-bridge.py +80 -80
  132. package/server/engine/mcp/tools/helpers/shot-pipeline.js +280 -280
  133. package/server/engine/mcp/tools/highlight.js +68 -68
  134. package/server/engine/mcp/tools/list-pages.js +222 -222
  135. package/server/engine/mcp/tools/lookup-tags.js +59 -59
  136. package/server/engine/mcp/tools/navigate-to-page.js +60 -60
  137. package/server/engine/mcp/tools/organize-board.js +64 -64
  138. package/server/engine/mcp/tools/paint-still.js +434 -434
  139. package/server/engine/mcp/tools/pin-to-board.js +130 -130
  140. package/server/engine/mcp/tools/preview-deck.js +130 -130
  141. package/server/engine/mcp/tools/profile-scroll.js +305 -305
  142. package/server/engine/mcp/tools/publish-site.js +102 -102
  143. package/server/engine/mcp/tools/query-elements.js +195 -195
  144. package/server/engine/mcp/tools/read-board.js +103 -103
  145. package/server/engine/mcp/tools/read-document.js +93 -93
  146. package/server/engine/mcp/tools/read-page.js +264 -264
  147. package/server/engine/mcp/tools/read-tavern-json.js +143 -143
  148. package/server/engine/mcp/tools/record-decision.js +140 -140
  149. package/server/engine/mcp/tools/relate-on-board.js +110 -110
  150. package/server/engine/mcp/tools/report-issue.js +115 -115
  151. package/server/engine/mcp/tools/roll-film.js +266 -266
  152. package/server/engine/mcp/tools/screenshot-docx.js +138 -138
  153. package/server/engine/mcp/tools/screenshot-url.js +195 -195
  154. package/server/engine/mcp/tools/screenshot.js +583 -583
  155. package/server/engine/mcp/tools/tier-gate.js +96 -96
  156. package/server/engine/mcp/tools/trace-motion.js +215 -215
  157. package/server/engine/mcp/tools/web-search.js +548 -548
  158. package/server/engine/motion/inventory.js +349 -349
  159. package/server/engine/perception/session.js +235 -235
  160. package/server/engine/plugins/nodesign/.claude-plugin/plugin.json +5 -5
  161. package/server/engine/plugins/nodesign/skills/deskskill-engine-mini/SKILL.md +192 -192
  162. package/server/engine/plugins/nodesign/skills/deskskill-engine-mini/canvas.template.html +667 -667
  163. package/server/engine/plugins/nodesign/skills/deskskill-engine-mini/patterns/hybrid-grid.md +22 -22
  164. package/server/engine/plugins/nodesign/skills/deskskill-engine-mini/patterns/image-led-cover.md +25 -25
  165. package/server/engine/plugins/nodesign/skills/deskskill-engine-mini/patterns/portrait.md +23 -23
  166. package/server/engine/plugins/nodesign/skills/deskskill-engine-mini/patterns/quote-backdrop.md +21 -21
  167. package/server/engine/plugins/nodesign/skills/deskskill-engine-mini/patterns/section-divider.md +23 -23
  168. package/server/engine/plugins/nodesign/skills/deskskill-engine-mini/patterns/text-led.md +21 -21
  169. package/server/engine/plugins/nodesign/skills/docx-craft/SKILL.md +162 -162
  170. package/server/engine/plugins/nodesign/skills/docx-craft/references/token-schema.md +407 -407
  171. package/server/engine/plugins/nodesign/skills/docx-craft//346/226/207/346/241/243.template.json +80 -80
  172. package/server/engine/plugins/nodesign/skills/rp-craft/SKILL.md +228 -228
  173. package/server/engine/plugins/nodesign/skills/rp-craft/patterns//346/274/224/345/207/272/351/241/265-/346/234/200/345/260/217/345/256/236/347/216/260.html +78 -78
  174. package/server/engine/plugins/nodesign/skills/rp-craft//346/274/224/345/207/272.template.js +268 -268
  175. package/server/engine/plugins/nodesign/skills/site-craft/SKILL.md +323 -323
  176. package/server/engine/plugins/nodesign/skills/site-craft/patterns/build-lane.md +134 -134
  177. package/server/engine/plugins/nodesign/skills/site-craft/patterns/cutout-collage.md +61 -61
  178. package/server/engine/plugins/nodesign/skills/site-craft/patterns/mock-app.md +163 -163
  179. package/server/engine/plugins/nodesign/skills/site-craft/patterns/page-transitions.md +86 -86
  180. package/server/engine/runs/active-runs.js +698 -698
  181. package/server/engine/runs/live-turn.js +252 -252
  182. package/server/engine/runs/store.js +364 -364
  183. package/server/engine/runs/turn-relay.js +217 -217
  184. package/server/engine/runtime/workspace.js +164 -164
  185. package/server/lib/artifact-file-path.js +80 -80
  186. package/server/lib/artifact-target.js +284 -284
  187. package/server/lib/asset-refs.js +239 -239
  188. package/server/lib/async-queue.js +104 -104
  189. package/server/lib/auto-relations.js +130 -130
  190. package/server/lib/binding-types.js +60 -60
  191. package/server/lib/board-kind-sizes.js +62 -62
  192. package/server/lib/board-relations.js +133 -133
  193. package/server/lib/browse-proxy.js +180 -180
  194. package/server/lib/canvas-id.js +36 -36
  195. package/server/lib/cover.js +227 -227
  196. package/server/lib/danbooru-tags.js +291 -291
  197. package/server/lib/doc-extract.js +156 -156
  198. package/server/lib/docx/build-from-source.js +260 -260
  199. package/server/lib/docx/build.js +490 -490
  200. package/server/lib/docx/dump-styles.js +287 -287
  201. package/server/lib/docx/fonts/nodesign-cjk.conf +164 -164
  202. package/server/lib/docx/merge-runs.js +129 -129
  203. package/server/lib/docx/numbering.js +218 -218
  204. package/server/lib/docx/order.js +152 -152
  205. package/server/lib/docx/rawzip.js +172 -172
  206. package/server/lib/docx/render.js +92 -92
  207. package/server/lib/docx/text-lint.js +225 -225
  208. package/server/lib/docx/tokens.js +335 -335
  209. package/server/lib/docx/units.js +29 -29
  210. package/server/lib/docx/xml.js +291 -291
  211. package/server/lib/docx-pages.js +187 -187
  212. package/server/lib/export-collect.js +289 -289
  213. package/server/lib/export-package.js +210 -210
  214. package/server/lib/html-srcset.js +145 -145
  215. package/server/lib/image-variant.js +460 -460
  216. package/server/lib/ingress/forward-openai-chat.js +305 -305
  217. package/server/lib/ingress/openai-chat.js +491 -491
  218. package/server/lib/ingress/session-notice.js +66 -66
  219. package/server/lib/ingress/session-routes.js +68 -68
  220. package/server/lib/ingress/slot-probe.js +130 -130
  221. package/server/lib/ingress/upstream-billing.js +52 -52
  222. package/server/lib/ingress/upstream-fail-streak.js +72 -72
  223. package/server/lib/ingress/upstream-truncation.js +48 -48
  224. package/server/lib/issues-store.js +182 -182
  225. package/server/lib/kinds/deck.js +72 -72
  226. package/server/lib/kinds/docx.js +283 -283
  227. package/server/lib/kinds/file-kinds.js +113 -113
  228. package/server/lib/kinds/index.js +202 -202
  229. package/server/lib/kinds/site.js +161 -161
  230. package/server/lib/model-ingress.js +543 -543
  231. package/server/lib/moderation.js +255 -255
  232. package/server/lib/notice-store.js +103 -103
  233. package/server/lib/plugin-install.js +104 -104
  234. package/server/lib/plugin-validator.js +721 -721
  235. package/server/lib/publish-store.js +115 -115
  236. package/server/lib/quick-summary.js +52 -52
  237. package/server/lib/quota.js +270 -270
  238. package/server/lib/rate-window.js +29 -29
  239. package/server/lib/reference-assets.js +92 -92
  240. package/server/lib/region-shot.js +135 -135
  241. package/server/lib/safe-path.js +73 -73
  242. package/server/lib/sdk-session.js +33 -33
  243. package/server/lib/showcase-store.js +92 -92
  244. package/server/lib/site-publish.js +465 -465
  245. package/server/lib/ssrf-guard.js +432 -432
  246. package/server/lib/task-scan.js +158 -158
  247. package/server/lib/tavern-json.js +154 -154
  248. package/server/lib/video-variant.js +237 -237
  249. package/server/lib/workspace-path.js +33 -33
  250. package/server/ops/fix-sdk-musl.mjs +40 -40
  251. package/server/ops/install-macos-fonts.sh +114 -114
  252. package/server/ops/macos-fonts.conf +336 -336
  253. package/server/ops/sandbox-shim/bwrap +57 -57
  254. package/server/projects/assets-summary.js +119 -119
  255. package/server/projects/auto-name.js +53 -53
  256. package/server/projects/board-store.js +640 -640
  257. package/server/projects/move-entry.js +103 -103
  258. package/server/projects/store.js +270 -270
  259. package/server/projects/ui-config.js +54 -54
  260. package/server/projects/workspace-templates.js +53 -53
  261. package/server/projects/workspace.js +1025 -1025
  262. package/server/runtime/local-config.js +177 -177
  263. package/server/runtime/profile.js +72 -72
  264. package/server/services/rembg-service.py +334 -334
  265. package/server/shared/README.md +25 -25
  266. package/server/shared/deck.js +54 -54
  267. package/server/shared/time.js +49 -49
  268. package/server/style-pipeline/README.md +53 -53
  269. package/server/ws/broker.js +36 -36
  270. package/server/ws/browse-channel.js +177 -177
  271. package/server/ws/index.js +386 -386
  272. package/web/README.md +89 -89
  273. package/web/dist/assets/BrowserWindow-BYCgizHw.js +11 -0
  274. package/web/dist/assets/{DeckWindow-4G0xX7P3.js → DeckWindow-pNydEM4L.js} +1 -1
  275. package/web/dist/assets/{DocxWindow-BXQsoPkh.js → DocxWindow-PPgzh3Gq.js} +1 -1
  276. package/web/dist/assets/{SiteWindow-D6eS-2gM.js → SiteWindow-DM0LQPCO.js} +1 -1
  277. package/web/dist/assets/{index-Cbl3ATvp.js → index-BHTBJlpY.js} +32 -32
  278. package/web/dist/assets/{pending-edit-apply-DTjo2geW.js → pending-edit-apply-C0I13CbD.js} +1 -1
  279. package/web/dist/assets/{rotate-cw-LMT3x1Zj.js → rotate-cw-B1UQ8Hld.js} +1 -1
  280. package/web/dist/assets/{square-dashed-mouse-pointer-CBoAkfhi.js → square-dashed-mouse-pointer-8lrgqmfv.js} +1 -1
  281. package/web/dist/index.html +17 -17
  282. package/web/dist/assets/BrowserWindow-Dc7J7CYc.js +0 -11
@@ -1,29 +1,29 @@
1
- /**
2
- * units.js — OOXML 单位换算 + 中文字号表。
3
- * twip = 1/20 pt;w:sz 单位是半磅;mm→twip 按 1440/25.4。
4
- */
5
-
6
- export const ptToTwip = (pt) => Math.round(pt * 20);
7
- export const ptToHalf = (pt) => Math.round(pt * 2);
8
- export const mmToTwip = (mm) => Math.round(mm * 1440 / 25.4);
9
- export const twipToPt = (t) => t / 20;
10
-
11
- /** 中文字号 → 磅 */
12
- export const ZIHAO = {
13
- 初号: 42, 小初: 36, 一号: 26, 小一: 24, 二号: 22, 小二: 18,
14
- 三号: 16, 小三: 15, 四号: 14, 小四: 12, 五号: 10.5, 小五: 9,
15
- 六号: 7.5, 小六: 6.5, 七号: 5.5, 八号: 5,
16
- };
17
-
18
- export function sizePt(v) {
19
- if (typeof v === 'number') return v;
20
- if (typeof v === 'string' && ZIHAO[v] != null) return ZIHAO[v];
21
- throw new Error(`unknown font size: ${v}`);
22
- }
23
-
24
- export const PAGE_SIZES = {
25
- A4: { wTwip: 11906, hTwip: 16838 },
26
- A3: { wTwip: 16838, hTwip: 23811 },
27
- Letter: { wTwip: 12240, hTwip: 15840 },
28
- B5: { wTwip: 9978, hTwip: 14170 },
29
- };
1
+ /**
2
+ * units.js — OOXML 单位换算 + 中文字号表。
3
+ * twip = 1/20 pt;w:sz 单位是半磅;mm→twip 按 1440/25.4。
4
+ */
5
+
6
+ export const ptToTwip = (pt) => Math.round(pt * 20);
7
+ export const ptToHalf = (pt) => Math.round(pt * 2);
8
+ export const mmToTwip = (mm) => Math.round(mm * 1440 / 25.4);
9
+ export const twipToPt = (t) => t / 20;
10
+
11
+ /** 中文字号 → 磅 */
12
+ export const ZIHAO = {
13
+ 初号: 42, 小初: 36, 一号: 26, 小一: 24, 二号: 22, 小二: 18,
14
+ 三号: 16, 小三: 15, 四号: 14, 小四: 12, 五号: 10.5, 小五: 9,
15
+ 六号: 7.5, 小六: 6.5, 七号: 5.5, 八号: 5,
16
+ };
17
+
18
+ export function sizePt(v) {
19
+ if (typeof v === 'number') return v;
20
+ if (typeof v === 'string' && ZIHAO[v] != null) return ZIHAO[v];
21
+ throw new Error(`unknown font size: ${v}`);
22
+ }
23
+
24
+ export const PAGE_SIZES = {
25
+ A4: { wTwip: 11906, hTwip: 16838 },
26
+ A3: { wTwip: 16838, hTwip: 23811 },
27
+ Letter: { wTwip: 12240, hTwip: 15840 },
28
+ B5: { wTwip: 9978, hTwip: 14170 },
29
+ };
@@ -1,291 +1,291 @@
1
- /**
2
- * xml.js — OOXML 专用的「保真 DOM」:parse / serialize / 增删改。
3
- *
4
- * 设计目标(与通用 XML 库刚好相反):
5
- * 1. 没碰过的节点,serialize 时逐字节还原输入(保真编辑的地基)。
6
- * 做法:每个节点保留原始片段(openRaw/closeRaw/raw),只有被
7
- * 标脏(dirty)或新建的节点才走规范化序列化。
8
- * 2. 自检闸门:parse 完立刻 serialize 一遍,若与输入不等,说明这份
9
- * XML 用了我们没覆盖的语法(DTD/CDATA/PI 等),parseXml 直接抛错,
10
- * 调用方退回「不编辑」而不是带病手术。
11
- *
12
- * 覆盖的语法子集 = Word/LibreOffice/我们自己产出的 OOXML 实际用到的:
13
- * 声明、元素(含自闭合)、属性、文本、注释、CDATA(原样保留)。
14
- * 不支持 DTD / 外部实体(OOXML 不用,遇到即拒——顺带挡住 XXE)。
15
- */
16
-
17
- const NAME_RE = /^[^\s"'<>/=]+/;
18
-
19
- export class XmlNode {
20
- constructor(type) {
21
- this.type = type; // 'elem' | 'text' | 'comment' | 'cdata' | 'decl'
22
- this.name = '';
23
- this.attrs = []; // [ [name, value(decoded)] ... ] 保序
24
- this.children = [];
25
- this.parent = null;
26
- this.selfClosing = false;
27
- // 保真用的原始片段(parse 时填;一旦 dirty 就失效)
28
- this.openRaw = null; // '<w:p w:x="1">' 或自闭合的整个 tag
29
- this.closeRaw = null; // '</w:p>'
30
- this.raw = null; // text/comment/cdata/decl 的原文
31
- this.dirty = false;
32
- }
33
-
34
- markDirty() {
35
- let n = this;
36
- while (n && !n.dirty) { n.dirty = true; n = n.parent; }
37
- }
38
-
39
- attr(name) {
40
- const hit = this.attrs.find(([k]) => k === name);
41
- return hit ? hit[1] : null;
42
- }
43
-
44
- setAttr(name, value) {
45
- const hit = this.attrs.find(([k]) => k === name);
46
- if (hit) hit[1] = value; else this.attrs.push([name, value]);
47
- this.markDirty();
48
- }
49
-
50
- removeAttr(name) {
51
- const i = this.attrs.findIndex(([k]) => k === name);
52
- if (i >= 0) { this.attrs.splice(i, 1); this.markDirty(); }
53
- }
54
-
55
- /** 直属子元素(跳过 text/comment) */
56
- childElems(name) {
57
- const out = [];
58
- for (const c of this.children) {
59
- if (c.type === 'elem' && (!name || c.name === name)) out.push(c);
60
- }
61
- return out;
62
- }
63
-
64
- firstChild(name) {
65
- for (const c of this.children) {
66
- if (c.type === 'elem' && c.name === name) return c;
67
- }
68
- return null;
69
- }
70
-
71
- /** 深度优先找所有指定名字的后代元素 */
72
- find(name, out = []) {
73
- for (const c of this.children) {
74
- if (c.type !== 'elem') continue;
75
- if (c.name === name) out.push(c);
76
- c.find(name, out);
77
- }
78
- return out;
79
- }
80
-
81
- /** 元素的全部文本内容(w:t 语义下已解码) */
82
- text() {
83
- if (this.type === 'text') return decodeEntities(this.raw ?? '');
84
- let s = '';
85
- for (const c of this.children) s += c.text();
86
- return s;
87
- }
88
-
89
- append(child) {
90
- child.parent = this;
91
- this.children.push(child);
92
- this.markDirty();
93
- return child;
94
- }
95
-
96
- insertBefore(child, ref) {
97
- const i = this.children.indexOf(ref);
98
- child.parent = this;
99
- if (i < 0) this.children.push(child); else this.children.splice(i, 0, child);
100
- this.markDirty();
101
- return child;
102
- }
103
-
104
- remove(child) {
105
- const i = this.children.indexOf(child);
106
- if (i >= 0) { this.children.splice(i, 1); this.markDirty(); }
107
- }
108
-
109
- replaceChildren(list) {
110
- for (const c of list) c.parent = this;
111
- this.children = list;
112
- this.markDirty();
113
- }
114
- }
115
-
116
- export function elem(name, attrs = [], children = []) {
117
- const n = new XmlNode('elem');
118
- n.name = name;
119
- n.attrs = attrs.map(([k, v]) => [k, String(v)]);
120
- for (const c of children) { c.parent = n; n.children.push(c); }
121
- n.dirty = true;
122
- return n;
123
- }
124
-
125
- export function textNode(s) {
126
- const n = new XmlNode('text');
127
- n.raw = encodeText(String(s));
128
- n.dirty = true;
129
- return n;
130
- }
131
-
132
- export function decodeEntities(s) {
133
- return s.replace(/&(#x?[0-9a-fA-F]+|[a-zA-Z]+);/g, (m, body) => {
134
- if (body[0] === '#') {
135
- const code = body[1] === 'x' || body[1] === 'X'
136
- ? parseInt(body.slice(2), 16) : parseInt(body.slice(1), 10);
137
- return Number.isFinite(code) ? String.fromCodePoint(code) : m;
138
- }
139
- return { amp: '&', lt: '<', gt: '>', quot: '"', apos: "'" }[body] ?? m;
140
- });
141
- }
142
-
143
- export function encodeText(s) {
144
- return s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
145
- }
146
-
147
- export function encodeAttr(s) {
148
- return encodeText(s).replace(/"/g, '&quot;')
149
- // 属性值里的换行/Tab 若不转义,解析器会按空格归一(丢信息)
150
- .replace(/\n/g, '&#10;').replace(/\t/g, '&#9;').replace(/\r/g, '&#13;');
151
- }
152
-
153
- /**
154
- * @param {string} input
155
- * @returns {{ decl: string|null, root: XmlNode, trailing: string }}
156
- */
157
- export function parseXml(input) {
158
- let pos = 0;
159
- const len = input.length;
160
- let decl = null;
161
-
162
- if (input.startsWith('')) throw new Error('BOM-prefixed XML not supported (strip first)');
163
- if (input.startsWith('<?xml')) {
164
- const end = input.indexOf('?>');
165
- if (end < 0) throw new Error('unterminated XML declaration');
166
- decl = input.slice(0, end + 2);
167
- pos = end + 2;
168
- }
169
-
170
- const rootWrap = new XmlNode('elem'); // 假根,容纳声明后的空白+根元素
171
- const stack = [rootWrap];
172
-
173
- while (pos < len) {
174
- const top = stack[stack.length - 1];
175
- if (input[pos] === '<') {
176
- if (input.startsWith('<!--', pos)) {
177
- const end = input.indexOf('-->', pos);
178
- if (end < 0) throw new Error('unterminated comment');
179
- const n = new XmlNode('comment');
180
- n.raw = input.slice(pos, end + 3);
181
- n.parent = top; top.children.push(n);
182
- pos = end + 3;
183
- } else if (input.startsWith('<![CDATA[', pos)) {
184
- const end = input.indexOf(']]>', pos);
185
- if (end < 0) throw new Error('unterminated CDATA');
186
- const n = new XmlNode('cdata');
187
- n.raw = input.slice(pos, end + 3);
188
- n.parent = top; top.children.push(n);
189
- pos = end + 3;
190
- } else if (input.startsWith('<!', pos) || input.startsWith('<?', pos)) {
191
- throw new Error(`unsupported markup at ${pos}: ${input.slice(pos, pos + 24)}`);
192
- } else if (input.startsWith('</', pos)) {
193
- const end = input.indexOf('>', pos);
194
- if (end < 0) throw new Error('unterminated close tag');
195
- const name = input.slice(pos + 2, end).trim();
196
- if (top === rootWrap || top.name !== name) {
197
- throw new Error(`close tag mismatch: </${name}> vs <${top.name}>`);
198
- }
199
- top.closeRaw = input.slice(pos, end + 1);
200
- stack.pop();
201
- pos = end + 1;
202
- } else {
203
- // open tag / self-closing tag
204
- const start = pos;
205
- pos++;
206
- const m = NAME_RE.exec(input.slice(pos));
207
- if (!m) throw new Error(`bad tag name at ${pos}`);
208
- const node = new XmlNode('elem');
209
- node.name = m[0];
210
- pos += m[0].length;
211
- // attributes
212
- for (;;) {
213
- while (pos < len && /\s/.test(input[pos])) pos++;
214
- if (input[pos] === '>') { pos++; break; }
215
- if (input[pos] === '/' && input[pos + 1] === '>') { node.selfClosing = true; pos += 2; break; }
216
- const am = NAME_RE.exec(input.slice(pos));
217
- if (!am) throw new Error(`bad attribute at ${pos}: ${input.slice(pos, pos + 20)}`);
218
- const aname = am[0];
219
- pos += aname.length;
220
- while (pos < len && /\s/.test(input[pos])) pos++;
221
- if (input[pos] !== '=') throw new Error(`attribute without value at ${pos}`);
222
- pos++;
223
- while (pos < len && /\s/.test(input[pos])) pos++;
224
- const q = input[pos];
225
- if (q !== '"' && q !== "'") throw new Error(`unquoted attribute at ${pos}`);
226
- const vEnd = input.indexOf(q, pos + 1);
227
- if (vEnd < 0) throw new Error('unterminated attribute value');
228
- node.attrs.push([aname, decodeEntities(input.slice(pos + 1, vEnd))]);
229
- pos = vEnd + 1;
230
- }
231
- node.openRaw = input.slice(start, pos);
232
- node.parent = top;
233
- top.children.push(node);
234
- if (!node.selfClosing) stack.push(node);
235
- }
236
- } else {
237
- const next = input.indexOf('<', pos);
238
- const end = next < 0 ? len : next;
239
- const n = new XmlNode('text');
240
- n.raw = input.slice(pos, end);
241
- n.parent = top; top.children.push(n);
242
- pos = end;
243
- }
244
- }
245
- if (stack.length !== 1) throw new Error(`unclosed element <${stack[stack.length - 1].name}>`);
246
- const rootElems = rootWrap.children.filter((c) => c.type === 'elem');
247
- if (rootElems.length !== 1) throw new Error('expected exactly one root element');
248
-
249
- const doc = { decl, root: rootElems[0], wrap: rootWrap };
250
-
251
- // 自检闸门:序列化必须逐字节还原输入
252
- const echo = serialize(doc);
253
- if (echo !== input) {
254
- const at = firstDiff(echo, input);
255
- throw new Error(`fidelity self-check failed at byte ${at}: `
256
- + JSON.stringify(input.slice(Math.max(0, at - 40), at + 40)));
257
- }
258
- return doc;
259
- }
260
-
261
- function firstDiff(a, b) {
262
- const n = Math.min(a.length, b.length);
263
- for (let i = 0; i < n; i++) if (a[i] !== b[i]) return i;
264
- return n;
265
- }
266
-
267
- export function serialize(doc) {
268
- let out = doc.decl ?? '';
269
- for (const c of doc.wrap.children) out += serializeNode(c);
270
- return out;
271
- }
272
-
273
- export function serializeNode(node) {
274
- if (node.type === 'text' || node.type === 'comment' || node.type === 'cdata' || node.type === 'decl') {
275
- return node.raw ?? '';
276
- }
277
- // 干净节点:原始片段直出
278
- if (!node.dirty && node.openRaw != null) {
279
- if (node.selfClosing) return node.openRaw;
280
- let out = node.openRaw;
281
- for (const c of node.children) out += serializeNode(c);
282
- return out + node.closeRaw;
283
- }
284
- // 脏/新建节点:规范化输出
285
- let tag = `<${node.name}`;
286
- for (const [k, v] of node.attrs) tag += ` ${k}="${encodeAttr(v)}"`;
287
- if (node.children.length === 0) return `${tag}/>`;
288
- let out = `${tag}>`;
289
- for (const c of node.children) out += serializeNode(c);
290
- return `${out}</${node.name}>`;
291
- }
1
+ /**
2
+ * xml.js — OOXML 专用的「保真 DOM」:parse / serialize / 增删改。
3
+ *
4
+ * 设计目标(与通用 XML 库刚好相反):
5
+ * 1. 没碰过的节点,serialize 时逐字节还原输入(保真编辑的地基)。
6
+ * 做法:每个节点保留原始片段(openRaw/closeRaw/raw),只有被
7
+ * 标脏(dirty)或新建的节点才走规范化序列化。
8
+ * 2. 自检闸门:parse 完立刻 serialize 一遍,若与输入不等,说明这份
9
+ * XML 用了我们没覆盖的语法(DTD/CDATA/PI 等),parseXml 直接抛错,
10
+ * 调用方退回「不编辑」而不是带病手术。
11
+ *
12
+ * 覆盖的语法子集 = Word/LibreOffice/我们自己产出的 OOXML 实际用到的:
13
+ * 声明、元素(含自闭合)、属性、文本、注释、CDATA(原样保留)。
14
+ * 不支持 DTD / 外部实体(OOXML 不用,遇到即拒——顺带挡住 XXE)。
15
+ */
16
+
17
+ const NAME_RE = /^[^\s"'<>/=]+/;
18
+
19
+ export class XmlNode {
20
+ constructor(type) {
21
+ this.type = type; // 'elem' | 'text' | 'comment' | 'cdata' | 'decl'
22
+ this.name = '';
23
+ this.attrs = []; // [ [name, value(decoded)] ... ] 保序
24
+ this.children = [];
25
+ this.parent = null;
26
+ this.selfClosing = false;
27
+ // 保真用的原始片段(parse 时填;一旦 dirty 就失效)
28
+ this.openRaw = null; // '<w:p w:x="1">' 或自闭合的整个 tag
29
+ this.closeRaw = null; // '</w:p>'
30
+ this.raw = null; // text/comment/cdata/decl 的原文
31
+ this.dirty = false;
32
+ }
33
+
34
+ markDirty() {
35
+ let n = this;
36
+ while (n && !n.dirty) { n.dirty = true; n = n.parent; }
37
+ }
38
+
39
+ attr(name) {
40
+ const hit = this.attrs.find(([k]) => k === name);
41
+ return hit ? hit[1] : null;
42
+ }
43
+
44
+ setAttr(name, value) {
45
+ const hit = this.attrs.find(([k]) => k === name);
46
+ if (hit) hit[1] = value; else this.attrs.push([name, value]);
47
+ this.markDirty();
48
+ }
49
+
50
+ removeAttr(name) {
51
+ const i = this.attrs.findIndex(([k]) => k === name);
52
+ if (i >= 0) { this.attrs.splice(i, 1); this.markDirty(); }
53
+ }
54
+
55
+ /** 直属子元素(跳过 text/comment) */
56
+ childElems(name) {
57
+ const out = [];
58
+ for (const c of this.children) {
59
+ if (c.type === 'elem' && (!name || c.name === name)) out.push(c);
60
+ }
61
+ return out;
62
+ }
63
+
64
+ firstChild(name) {
65
+ for (const c of this.children) {
66
+ if (c.type === 'elem' && c.name === name) return c;
67
+ }
68
+ return null;
69
+ }
70
+
71
+ /** 深度优先找所有指定名字的后代元素 */
72
+ find(name, out = []) {
73
+ for (const c of this.children) {
74
+ if (c.type !== 'elem') continue;
75
+ if (c.name === name) out.push(c);
76
+ c.find(name, out);
77
+ }
78
+ return out;
79
+ }
80
+
81
+ /** 元素的全部文本内容(w:t 语义下已解码) */
82
+ text() {
83
+ if (this.type === 'text') return decodeEntities(this.raw ?? '');
84
+ let s = '';
85
+ for (const c of this.children) s += c.text();
86
+ return s;
87
+ }
88
+
89
+ append(child) {
90
+ child.parent = this;
91
+ this.children.push(child);
92
+ this.markDirty();
93
+ return child;
94
+ }
95
+
96
+ insertBefore(child, ref) {
97
+ const i = this.children.indexOf(ref);
98
+ child.parent = this;
99
+ if (i < 0) this.children.push(child); else this.children.splice(i, 0, child);
100
+ this.markDirty();
101
+ return child;
102
+ }
103
+
104
+ remove(child) {
105
+ const i = this.children.indexOf(child);
106
+ if (i >= 0) { this.children.splice(i, 1); this.markDirty(); }
107
+ }
108
+
109
+ replaceChildren(list) {
110
+ for (const c of list) c.parent = this;
111
+ this.children = list;
112
+ this.markDirty();
113
+ }
114
+ }
115
+
116
+ export function elem(name, attrs = [], children = []) {
117
+ const n = new XmlNode('elem');
118
+ n.name = name;
119
+ n.attrs = attrs.map(([k, v]) => [k, String(v)]);
120
+ for (const c of children) { c.parent = n; n.children.push(c); }
121
+ n.dirty = true;
122
+ return n;
123
+ }
124
+
125
+ export function textNode(s) {
126
+ const n = new XmlNode('text');
127
+ n.raw = encodeText(String(s));
128
+ n.dirty = true;
129
+ return n;
130
+ }
131
+
132
+ export function decodeEntities(s) {
133
+ return s.replace(/&(#x?[0-9a-fA-F]+|[a-zA-Z]+);/g, (m, body) => {
134
+ if (body[0] === '#') {
135
+ const code = body[1] === 'x' || body[1] === 'X'
136
+ ? parseInt(body.slice(2), 16) : parseInt(body.slice(1), 10);
137
+ return Number.isFinite(code) ? String.fromCodePoint(code) : m;
138
+ }
139
+ return { amp: '&', lt: '<', gt: '>', quot: '"', apos: "'" }[body] ?? m;
140
+ });
141
+ }
142
+
143
+ export function encodeText(s) {
144
+ return s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
145
+ }
146
+
147
+ export function encodeAttr(s) {
148
+ return encodeText(s).replace(/"/g, '&quot;')
149
+ // 属性值里的换行/Tab 若不转义,解析器会按空格归一(丢信息)
150
+ .replace(/\n/g, '&#10;').replace(/\t/g, '&#9;').replace(/\r/g, '&#13;');
151
+ }
152
+
153
+ /**
154
+ * @param {string} input
155
+ * @returns {{ decl: string|null, root: XmlNode, trailing: string }}
156
+ */
157
+ export function parseXml(input) {
158
+ let pos = 0;
159
+ const len = input.length;
160
+ let decl = null;
161
+
162
+ if (input.startsWith('')) throw new Error('BOM-prefixed XML not supported (strip first)');
163
+ if (input.startsWith('<?xml')) {
164
+ const end = input.indexOf('?>');
165
+ if (end < 0) throw new Error('unterminated XML declaration');
166
+ decl = input.slice(0, end + 2);
167
+ pos = end + 2;
168
+ }
169
+
170
+ const rootWrap = new XmlNode('elem'); // 假根,容纳声明后的空白+根元素
171
+ const stack = [rootWrap];
172
+
173
+ while (pos < len) {
174
+ const top = stack[stack.length - 1];
175
+ if (input[pos] === '<') {
176
+ if (input.startsWith('<!--', pos)) {
177
+ const end = input.indexOf('-->', pos);
178
+ if (end < 0) throw new Error('unterminated comment');
179
+ const n = new XmlNode('comment');
180
+ n.raw = input.slice(pos, end + 3);
181
+ n.parent = top; top.children.push(n);
182
+ pos = end + 3;
183
+ } else if (input.startsWith('<![CDATA[', pos)) {
184
+ const end = input.indexOf(']]>', pos);
185
+ if (end < 0) throw new Error('unterminated CDATA');
186
+ const n = new XmlNode('cdata');
187
+ n.raw = input.slice(pos, end + 3);
188
+ n.parent = top; top.children.push(n);
189
+ pos = end + 3;
190
+ } else if (input.startsWith('<!', pos) || input.startsWith('<?', pos)) {
191
+ throw new Error(`unsupported markup at ${pos}: ${input.slice(pos, pos + 24)}`);
192
+ } else if (input.startsWith('</', pos)) {
193
+ const end = input.indexOf('>', pos);
194
+ if (end < 0) throw new Error('unterminated close tag');
195
+ const name = input.slice(pos + 2, end).trim();
196
+ if (top === rootWrap || top.name !== name) {
197
+ throw new Error(`close tag mismatch: </${name}> vs <${top.name}>`);
198
+ }
199
+ top.closeRaw = input.slice(pos, end + 1);
200
+ stack.pop();
201
+ pos = end + 1;
202
+ } else {
203
+ // open tag / self-closing tag
204
+ const start = pos;
205
+ pos++;
206
+ const m = NAME_RE.exec(input.slice(pos));
207
+ if (!m) throw new Error(`bad tag name at ${pos}`);
208
+ const node = new XmlNode('elem');
209
+ node.name = m[0];
210
+ pos += m[0].length;
211
+ // attributes
212
+ for (;;) {
213
+ while (pos < len && /\s/.test(input[pos])) pos++;
214
+ if (input[pos] === '>') { pos++; break; }
215
+ if (input[pos] === '/' && input[pos + 1] === '>') { node.selfClosing = true; pos += 2; break; }
216
+ const am = NAME_RE.exec(input.slice(pos));
217
+ if (!am) throw new Error(`bad attribute at ${pos}: ${input.slice(pos, pos + 20)}`);
218
+ const aname = am[0];
219
+ pos += aname.length;
220
+ while (pos < len && /\s/.test(input[pos])) pos++;
221
+ if (input[pos] !== '=') throw new Error(`attribute without value at ${pos}`);
222
+ pos++;
223
+ while (pos < len && /\s/.test(input[pos])) pos++;
224
+ const q = input[pos];
225
+ if (q !== '"' && q !== "'") throw new Error(`unquoted attribute at ${pos}`);
226
+ const vEnd = input.indexOf(q, pos + 1);
227
+ if (vEnd < 0) throw new Error('unterminated attribute value');
228
+ node.attrs.push([aname, decodeEntities(input.slice(pos + 1, vEnd))]);
229
+ pos = vEnd + 1;
230
+ }
231
+ node.openRaw = input.slice(start, pos);
232
+ node.parent = top;
233
+ top.children.push(node);
234
+ if (!node.selfClosing) stack.push(node);
235
+ }
236
+ } else {
237
+ const next = input.indexOf('<', pos);
238
+ const end = next < 0 ? len : next;
239
+ const n = new XmlNode('text');
240
+ n.raw = input.slice(pos, end);
241
+ n.parent = top; top.children.push(n);
242
+ pos = end;
243
+ }
244
+ }
245
+ if (stack.length !== 1) throw new Error(`unclosed element <${stack[stack.length - 1].name}>`);
246
+ const rootElems = rootWrap.children.filter((c) => c.type === 'elem');
247
+ if (rootElems.length !== 1) throw new Error('expected exactly one root element');
248
+
249
+ const doc = { decl, root: rootElems[0], wrap: rootWrap };
250
+
251
+ // 自检闸门:序列化必须逐字节还原输入
252
+ const echo = serialize(doc);
253
+ if (echo !== input) {
254
+ const at = firstDiff(echo, input);
255
+ throw new Error(`fidelity self-check failed at byte ${at}: `
256
+ + JSON.stringify(input.slice(Math.max(0, at - 40), at + 40)));
257
+ }
258
+ return doc;
259
+ }
260
+
261
+ function firstDiff(a, b) {
262
+ const n = Math.min(a.length, b.length);
263
+ for (let i = 0; i < n; i++) if (a[i] !== b[i]) return i;
264
+ return n;
265
+ }
266
+
267
+ export function serialize(doc) {
268
+ let out = doc.decl ?? '';
269
+ for (const c of doc.wrap.children) out += serializeNode(c);
270
+ return out;
271
+ }
272
+
273
+ export function serializeNode(node) {
274
+ if (node.type === 'text' || node.type === 'comment' || node.type === 'cdata' || node.type === 'decl') {
275
+ return node.raw ?? '';
276
+ }
277
+ // 干净节点:原始片段直出
278
+ if (!node.dirty && node.openRaw != null) {
279
+ if (node.selfClosing) return node.openRaw;
280
+ let out = node.openRaw;
281
+ for (const c of node.children) out += serializeNode(c);
282
+ return out + node.closeRaw;
283
+ }
284
+ // 脏/新建节点:规范化输出
285
+ let tag = `<${node.name}`;
286
+ for (const [k, v] of node.attrs) tag += ` ${k}="${encodeAttr(v)}"`;
287
+ if (node.children.length === 0) return `${tag}/>`;
288
+ let out = `${tag}>`;
289
+ for (const c of node.children) out += serializeNode(c);
290
+ return `${out}</${node.name}>`;
291
+ }