fabricjs-document-engine 0.6.0 → 0.8.0

package/dist/index.cjs

@@ -1,5 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_errors = require("./engine/errors.cjs");
+const require_content_limits = require("./security/content-limits.cjs");
 const require_document_format = require("./document/document-format.cjs");
 const require_validate_document = require("./document/validate-document.cjs");
 const require_migrate_document = require("./migrations/migrate-document.cjs");
@@ -7,14 +8,19 @@ const require_create_document_engine = require("./engine/create-document-engine.
 const require_keyboard_shortcuts = require("./history/keyboard-shortcuts.cjs");
 const require_unsaved_changes_warning = require("./save/unsaved-changes-warning.cjs");
 const require_download_export = require("./export/download-export.cjs");
+const require_document_state_store = require("./state/document-state-store.cjs");
 exports.CURRENT_SCHEMA_VERSION = require_document_format.CURRENT_SCHEMA_VERSION;
 exports.DocumentEngineError = require_errors.DocumentEngineError;
 exports.bindKeyboardShortcuts = require_keyboard_shortcuts.bindKeyboardShortcuts;
 exports.bindUnsavedChangesWarning = require_unsaved_changes_warning.bindUnsavedChangesWarning;
 exports.createConflictError = require_errors.createConflictError;
 exports.createDocumentEngine = require_create_document_engine.createDocumentEngine;
+exports.createDocumentStateStore = require_document_state_store.createDocumentStateStore;
 exports.detectSchemaVersion = require_migrate_document.detectSchemaVersion;
 exports.downloadExport = require_download_export.downloadExport;
 exports.isDocumentEngineError = require_errors.isDocumentEngineError;
+exports.isSafeImageUrl = require_content_limits.isSafeImageUrl;
 exports.migrateDocument = require_migrate_document.migrateDocument;
+exports.refuseUnsafeImageUrls = require_content_limits.refuseUnsafeImageUrls;
+exports.secureDocument = require_content_limits.secureDocument;
 exports.validateDocument = require_validate_document.validateDocument;

package/dist/index.d.cts

@@ -7,6 +7,7 @@ import { ExportPreflight, ExportProblem, ExportProblemCode } from "./export/pref
 import { NewDocumentOptions } from "./document/create-document.cjs";
 import { CustomObjectDefinition } from "./fabric/object-registry.cjs";
 import { HistoryOptions, HistoryState } from "./history/create-history.cjs";
+import { ContentLimits, isSafeImageUrl, refuseUnsafeImageUrls, secureDocument } from "./security/content-limits.cjs";
 import { DocumentVersion, VersionKind, VersionOptions, VersionStorage, VersionSummary } from "./versions/document-version.cjs";
 import { RecoveryStore } from "./recovery/recovery-store.cjs";
 import { InterruptedLoad, RecoveryOptions, RecoveryRecord } from "./recovery/recovery-controller.cjs";
@@ -22,4 +23,5 @@ import { KeyboardShortcutOptions, UndoRedoTarget, bindKeyboardShortcuts } from "
 import { UnsavedChangesSource, bindUnsavedChangesWarning } from "./save/unsaved-changes-warning.cjs";
 import { DownloadableExport, downloadExport } from "./export/download-export.cjs";
 import { Migration, MigrationContext, MigrationResult, detectSchemaVersion, migrateDocument } from "./migrations/migrate-document.cjs";
-export { type AssetManifest, type AssetOptions, type AssetReport, type AssetWarning, type AssetWarningCode, type AutosaveOptions, CURRENT_SCHEMA_VERSION, type CustomObjectDefinition, type DocumentCanvas, type DocumentEngine, DocumentEngineError, type DocumentEngineErrorDetails, type DocumentEngineEvents, type DocumentEngineOptions, type DocumentErrorCode, type DocumentInfo, type DocumentIssue, type DocumentStorage, type DocumentVersion, type DownloadableExport, type ExportArea, type ExportBackground, type ExportFormat, type ExportOptions, type ExportPreflight, type ExportProblem, type ExportProblemCode, type ExportRect, type ExportResult, type FabricDocument, type FontAsset, type FontLoader, type HistoryOptions, type HistoryState, type ImageAsset, type ImportOptions, type InterruptedLoad, type KeyboardShortcutOptions, type LoadOptions, type Migration, type MigrationContext, type MigrationResult, type NewDocumentOptions, type RecoveryOptions, type RecoveryRecord, type RecoveryStore, type RetryOptions, type SaveContext, type SaveOptions, type SaveResult, type SaveRetryEvent, type SaveState, type SaveStatus, type SerializedFabricObject, type UndoRedoTarget, type UnsavedChangesSource, type Unsubscribe, type UploadRequest, type VersionKind, type VersionOptions, type VersionStorage, type VersionSummary, bindKeyboardShortcuts, bindUnsavedChangesWarning, createConflictError, createDocumentEngine, detectSchemaVersion, downloadExport, isDocumentEngineError, migrateDocument, validateDocument };
+import { DocumentState, DocumentStateStore, createDocumentStateStore } from "./state/document-state-store.cjs";
+export { type AssetManifest, type AssetOptions, type AssetReport, type AssetWarning, type AssetWarningCode, type AutosaveOptions, CURRENT_SCHEMA_VERSION, type ContentLimits, type CustomObjectDefinition, type DocumentCanvas, type DocumentEngine, DocumentEngineError, type DocumentEngineErrorDetails, type DocumentEngineEvents, type DocumentEngineOptions, type DocumentErrorCode, type DocumentInfo, type DocumentIssue, type DocumentState, type DocumentStateStore, type DocumentStorage, type DocumentVersion, type DownloadableExport, type ExportArea, type ExportBackground, type ExportFormat, type ExportOptions, type ExportPreflight, type ExportProblem, type ExportProblemCode, type ExportRect, type ExportResult, type FabricDocument, type FontAsset, type FontLoader, type HistoryOptions, type HistoryState, type ImageAsset, type ImportOptions, type InterruptedLoad, type KeyboardShortcutOptions, type LoadOptions, type Migration, type MigrationContext, type MigrationResult, type NewDocumentOptions, type RecoveryOptions, type RecoveryRecord, type RecoveryStore, type RetryOptions, type SaveContext, type SaveOptions, type SaveResult, type SaveRetryEvent, type SaveState, type SaveStatus, type SerializedFabricObject, type UndoRedoTarget, type UnsavedChangesSource, type Unsubscribe, type UploadRequest, type VersionKind, type VersionOptions, type VersionStorage, type VersionSummary, bindKeyboardShortcuts, bindUnsavedChangesWarning, createConflictError, createDocumentEngine, createDocumentStateStore, detectSchemaVersion, downloadExport, isDocumentEngineError, isSafeImageUrl, migrateDocument, refuseUnsafeImageUrls, secureDocument, validateDocument };

package/dist/index.d.ts

@@ -7,6 +7,7 @@ import { ExportPreflight, ExportProblem, ExportProblemCode } from "./export/pref
 import { NewDocumentOptions } from "./document/create-document.js";
 import { CustomObjectDefinition } from "./fabric/object-registry.js";
 import { HistoryOptions, HistoryState } from "./history/create-history.js";
+import { ContentLimits, isSafeImageUrl, refuseUnsafeImageUrls, secureDocument } from "./security/content-limits.js";
 import { DocumentVersion, VersionKind, VersionOptions, VersionStorage, VersionSummary } from "./versions/document-version.js";
 import { RecoveryStore } from "./recovery/recovery-store.js";
 import { InterruptedLoad, RecoveryOptions, RecoveryRecord } from "./recovery/recovery-controller.js";
@@ -22,4 +23,5 @@ import { KeyboardShortcutOptions, UndoRedoTarget, bindKeyboardShortcuts } from "
 import { UnsavedChangesSource, bindUnsavedChangesWarning } from "./save/unsaved-changes-warning.js";
 import { DownloadableExport, downloadExport } from "./export/download-export.js";
 import { Migration, MigrationContext, MigrationResult, detectSchemaVersion, migrateDocument } from "./migrations/migrate-document.js";
-export { type AssetManifest, type AssetOptions, type AssetReport, type AssetWarning, type AssetWarningCode, type AutosaveOptions, CURRENT_SCHEMA_VERSION, type CustomObjectDefinition, type DocumentCanvas, type DocumentEngine, DocumentEngineError, type DocumentEngineErrorDetails, type DocumentEngineEvents, type DocumentEngineOptions, type DocumentErrorCode, type DocumentInfo, type DocumentIssue, type DocumentStorage, type DocumentVersion, type DownloadableExport, type ExportArea, type ExportBackground, type ExportFormat, type ExportOptions, type ExportPreflight, type ExportProblem, type ExportProblemCode, type ExportRect, type ExportResult, type FabricDocument, type FontAsset, type FontLoader, type HistoryOptions, type HistoryState, type ImageAsset, type ImportOptions, type InterruptedLoad, type KeyboardShortcutOptions, type LoadOptions, type Migration, type MigrationContext, type MigrationResult, type NewDocumentOptions, type RecoveryOptions, type RecoveryRecord, type RecoveryStore, type RetryOptions, type SaveContext, type SaveOptions, type SaveResult, type SaveRetryEvent, type SaveState, type SaveStatus, type SerializedFabricObject, type UndoRedoTarget, type UnsavedChangesSource, type Unsubscribe, type UploadRequest, type VersionKind, type VersionOptions, type VersionStorage, type VersionSummary, bindKeyboardShortcuts, bindUnsavedChangesWarning, createConflictError, createDocumentEngine, detectSchemaVersion, downloadExport, isDocumentEngineError, migrateDocument, validateDocument };
+import { DocumentState, DocumentStateStore, createDocumentStateStore } from "./state/document-state-store.js";
+export { type AssetManifest, type AssetOptions, type AssetReport, type AssetWarning, type AssetWarningCode, type AutosaveOptions, CURRENT_SCHEMA_VERSION, type ContentLimits, type CustomObjectDefinition, type DocumentCanvas, type DocumentEngine, DocumentEngineError, type DocumentEngineErrorDetails, type DocumentEngineEvents, type DocumentEngineOptions, type DocumentErrorCode, type DocumentInfo, type DocumentIssue, type DocumentState, type DocumentStateStore, type DocumentStorage, type DocumentVersion, type DownloadableExport, type ExportArea, type ExportBackground, type ExportFormat, type ExportOptions, type ExportPreflight, type ExportProblem, type ExportProblemCode, type ExportRect, type ExportResult, type FabricDocument, type FontAsset, type FontLoader, type HistoryOptions, type HistoryState, type ImageAsset, type ImportOptions, type InterruptedLoad, type KeyboardShortcutOptions, type LoadOptions, type Migration, type MigrationContext, type MigrationResult, type NewDocumentOptions, type RecoveryOptions, type RecoveryRecord, type RecoveryStore, type RetryOptions, type SaveContext, type SaveOptions, type SaveResult, type SaveRetryEvent, type SaveState, type SaveStatus, type SerializedFabricObject, type UndoRedoTarget, type UnsavedChangesSource, type Unsubscribe, type UploadRequest, type VersionKind, type VersionOptions, type VersionStorage, type VersionSummary, bindKeyboardShortcuts, bindUnsavedChangesWarning, createConflictError, createDocumentEngine, createDocumentStateStore, detectSchemaVersion, downloadExport, isDocumentEngineError, isSafeImageUrl, migrateDocument, refuseUnsafeImageUrls, secureDocument, validateDocument };

package/dist/index.js

@@ -1,4 +1,5 @@
 import { DocumentEngineError, createConflictError, isDocumentEngineError } from "./engine/errors.js";
+import { isSafeImageUrl, refuseUnsafeImageUrls, secureDocument } from "./security/content-limits.js";
 import { CURRENT_SCHEMA_VERSION } from "./document/document-format.js";
 import { validateDocument } from "./document/validate-document.js";
 import { detectSchemaVersion, migrateDocument } from "./migrations/migrate-document.js";
@@ -6,4 +7,5 @@ import { createDocumentEngine } from "./engine/create-document-engine.js";
 import { bindKeyboardShortcuts } from "./history/keyboard-shortcuts.js";
 import { bindUnsavedChangesWarning } from "./save/unsaved-changes-warning.js";
 import { downloadExport } from "./export/download-export.js";
-export { CURRENT_SCHEMA_VERSION, DocumentEngineError, bindKeyboardShortcuts, bindUnsavedChangesWarning, createConflictError, createDocumentEngine, detectSchemaVersion, downloadExport, isDocumentEngineError, migrateDocument, validateDocument };
+import { createDocumentStateStore } from "./state/document-state-store.js";
+export { CURRENT_SCHEMA_VERSION, DocumentEngineError, bindKeyboardShortcuts, bindUnsavedChangesWarning, createConflictError, createDocumentEngine, createDocumentStateStore, detectSchemaVersion, downloadExport, isDocumentEngineError, isSafeImageUrl, migrateDocument, refuseUnsafeImageUrls, secureDocument, validateDocument };

package/dist/react/engine-context.cjs

@@ -0,0 +1,12 @@
+let react = require("react");
+//#region src/react/engine-context.ts
+const EngineContext = (0, react.createContext)(null);
+function DocumentEngineProvider({ engine, children }) {
+	return (0, react.createElement)(EngineContext.Provider, { value: engine }, children);
+}
+function useEngine() {
+	return (0, react.useContext)(EngineContext);
+}
+//#endregion
+exports.DocumentEngineProvider = DocumentEngineProvider;
+exports.useEngine = useEngine;

package/dist/react/engine-context.d.cts

@@ -0,0 +1,10 @@
+import { DocumentEngine } from "../engine/create-document-engine.cjs";
+import { ReactNode } from "react";
+//#region src/react/engine-context.d.ts
+export interface DocumentEngineProviderProps {
+  engine: DocumentEngine | null;
+  children?: ReactNode;
+}
+export declare function DocumentEngineProvider({ engine, children }: DocumentEngineProviderProps): ReactNode;
+export declare function useEngine(): DocumentEngine | null;
+//#endregion

package/dist/react/engine-context.d.ts

@@ -0,0 +1,10 @@
+import { DocumentEngine } from "../engine/create-document-engine.js";
+import { ReactNode } from "react";
+//#region src/react/engine-context.d.ts
+export interface DocumentEngineProviderProps {
+  engine: DocumentEngine | null;
+  children?: ReactNode;
+}
+export declare function DocumentEngineProvider({ engine, children }: DocumentEngineProviderProps): ReactNode;
+export declare function useEngine(): DocumentEngine | null;
+//#endregion

package/dist/react/engine-context.js

@@ -0,0 +1,11 @@
+import { createContext, createElement, useContext } from "react";
+//#region src/react/engine-context.ts
+const EngineContext = createContext(null);
+function DocumentEngineProvider({ engine, children }) {
+	return createElement(EngineContext.Provider, { value: engine }, children);
+}
+function useEngine() {
+	return useContext(EngineContext);
+}
+//#endregion
+export { DocumentEngineProvider, useEngine };

package/dist/react/use-document-engine.cjs

@@ -0,0 +1,23 @@
+const require_create_document_engine = require("../engine/create-document-engine.cjs");
+let react = require("react");
+//#region src/react/use-document-engine.ts
+function useDocumentEngine(canvas, options = {}) {
+	const latestOptions = (0, react.useRef)(options);
+	latestOptions.current = options;
+	const [engine, setEngine] = (0, react.useState)(null);
+	(0, react.useEffect)(() => {
+		if (!canvas) return void 0;
+		const created = require_create_document_engine.createDocumentEngine({
+			...latestOptions.current,
+			canvas
+		});
+		setEngine(created);
+		return () => {
+			created.destroy();
+			setEngine((current) => current === created ? null : current);
+		};
+	}, [canvas]);
+	return engine;
+}
+//#endregion
+exports.useDocumentEngine = useDocumentEngine;

package/dist/react/use-document-engine.d.cts

@@ -0,0 +1,6 @@
+import { DocumentEngine, DocumentEngineOptions } from "../engine/create-document-engine.cjs";
+import { StaticCanvas } from "fabric";
+//#region src/react/use-document-engine.d.ts
+export type ReactEngineOptions = Omit<DocumentEngineOptions, "canvas">;
+export declare function useDocumentEngine(canvas: StaticCanvas | null | undefined, options?: ReactEngineOptions): DocumentEngine | null;
+//#endregion

package/dist/react/use-document-engine.d.ts

@@ -0,0 +1,6 @@
+import { DocumentEngine, DocumentEngineOptions } from "../engine/create-document-engine.js";
+import { StaticCanvas } from "fabric";
+//#region src/react/use-document-engine.d.ts
+export type ReactEngineOptions = Omit<DocumentEngineOptions, "canvas">;
+export declare function useDocumentEngine(canvas: StaticCanvas | null | undefined, options?: ReactEngineOptions): DocumentEngine | null;
+//#endregion

package/dist/react/use-document-engine.js

@@ -0,0 +1,23 @@
+import { createDocumentEngine } from "../engine/create-document-engine.js";
+import { useEffect, useRef, useState } from "react";
+//#region src/react/use-document-engine.ts
+function useDocumentEngine(canvas, options = {}) {
+	const latestOptions = useRef(options);
+	latestOptions.current = options;
+	const [engine, setEngine] = useState(null);
+	useEffect(() => {
+		if (!canvas) return void 0;
+		const created = createDocumentEngine({
+			...latestOptions.current,
+			canvas
+		});
+		setEngine(created);
+		return () => {
+			created.destroy();
+			setEngine((current) => current === created ? null : current);
+		};
+	}, [canvas]);
+	return engine;
+}
+//#endregion
+export { useDocumentEngine };

package/dist/react/use-document-event.cjs

@@ -0,0 +1,12 @@
+let react = require("react");
+//#region src/react/use-document-event.ts
+function useDocumentEvent(engine, name, handler) {
+	const latestHandler = (0, react.useRef)(handler);
+	latestHandler.current = handler;
+	(0, react.useEffect)(() => {
+		if (!engine) return void 0;
+		return engine.on(name, (payload) => latestHandler.current(payload));
+	}, [engine, name]);
+}
+//#endregion
+exports.useDocumentEvent = useDocumentEvent;

package/dist/react/use-document-event.d.cts

@@ -0,0 +1,4 @@
+import { DocumentEngine, DocumentEngineEvents } from "../engine/create-document-engine.cjs";
+//#region src/react/use-document-event.d.ts
+export declare function useDocumentEvent<Name extends keyof DocumentEngineEvents>(engine: DocumentEngine | null | undefined, name: Name, handler: (payload: DocumentEngineEvents[Name]) => void): void;
+//#endregion

package/dist/react/use-document-event.d.ts

@@ -0,0 +1,4 @@
+import { DocumentEngine, DocumentEngineEvents } from "../engine/create-document-engine.js";
+//#region src/react/use-document-event.d.ts
+export declare function useDocumentEvent<Name extends keyof DocumentEngineEvents>(engine: DocumentEngine | null | undefined, name: Name, handler: (payload: DocumentEngineEvents[Name]) => void): void;
+//#endregion

package/dist/react/use-document-event.js

@@ -0,0 +1,12 @@
+import { useEffect, useRef } from "react";
+//#region src/react/use-document-event.ts
+function useDocumentEvent(engine, name, handler) {
+	const latestHandler = useRef(handler);
+	latestHandler.current = handler;
+	useEffect(() => {
+		if (!engine) return void 0;
+		return engine.on(name, (payload) => latestHandler.current(payload));
+	}, [engine, name]);
+}
+//#endregion
+export { useDocumentEvent };

package/dist/react/use-document-state.cjs

@@ -0,0 +1,11 @@
+const require_document_state_store = require("../state/document-state-store.cjs");
+let react = require("react");
+//#region src/react/use-document-state.ts
+const subscribeToNothing = () => () => void 0;
+const nothing = () => null;
+function useDocumentState(engine) {
+	const store = (0, react.useMemo)(() => engine ? require_document_state_store.createDocumentStateStore(engine) : null, [engine]);
+	return (0, react.useSyncExternalStore)(store ? store.subscribe : subscribeToNothing, store ? store.getSnapshot : nothing, nothing);
+}
+//#endregion
+exports.useDocumentState = useDocumentState;

package/dist/react/use-document-state.d.cts

@@ -0,0 +1,5 @@
+import { DocumentEngine } from "../engine/create-document-engine.cjs";
+import { DocumentState } from "../state/document-state-store.cjs";
+//#region src/react/use-document-state.d.ts
+export declare function useDocumentState(engine: DocumentEngine | null | undefined): DocumentState | null;
+//#endregion

package/dist/react/use-document-state.d.ts

@@ -0,0 +1,5 @@
+import { DocumentEngine } from "../engine/create-document-engine.js";
+import { DocumentState } from "../state/document-state-store.js";
+//#region src/react/use-document-state.d.ts
+export declare function useDocumentState(engine: DocumentEngine | null | undefined): DocumentState | null;
+//#endregion

package/dist/react/use-document-state.js

@@ -0,0 +1,11 @@
+import { createDocumentStateStore } from "../state/document-state-store.js";
+import { useMemo, useSyncExternalStore } from "react";
+//#region src/react/use-document-state.ts
+const subscribeToNothing = () => () => void 0;
+const nothing = () => null;
+function useDocumentState(engine) {
+	const store = useMemo(() => engine ? createDocumentStateStore(engine) : null, [engine]);
+	return useSyncExternalStore(store ? store.subscribe : subscribeToNothing, store ? store.getSnapshot : nothing, nothing);
+}
+//#endregion
+export { useDocumentState };

package/dist/react.cjs

@@ -0,0 +1,11 @@
+"use client";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_use_document_engine = require("./react/use-document-engine.cjs");
+const require_use_document_state = require("./react/use-document-state.cjs");
+const require_use_document_event = require("./react/use-document-event.cjs");
+const require_engine_context = require("./react/engine-context.cjs");
+exports.DocumentEngineProvider = require_engine_context.DocumentEngineProvider;
+exports.useDocumentEngine = require_use_document_engine.useDocumentEngine;
+exports.useDocumentEvent = require_use_document_event.useDocumentEvent;
+exports.useDocumentState = require_use_document_state.useDocumentState;
+exports.useEngine = require_engine_context.useEngine;

package/dist/react.d.cts

@@ -0,0 +1,6 @@
+import { DocumentState } from "./state/document-state-store.cjs";
+import { ReactEngineOptions, useDocumentEngine } from "./react/use-document-engine.cjs";
+import { useDocumentState } from "./react/use-document-state.cjs";
+import { useDocumentEvent } from "./react/use-document-event.cjs";
+import { DocumentEngineProvider, DocumentEngineProviderProps, useEngine } from "./react/engine-context.cjs";
+export { DocumentEngineProvider, type DocumentEngineProviderProps, type DocumentState, type ReactEngineOptions, useDocumentEngine, useDocumentEvent, useDocumentState, useEngine };

package/dist/react.d.ts

@@ -0,0 +1,6 @@
+import { DocumentState } from "./state/document-state-store.js";
+import { ReactEngineOptions, useDocumentEngine } from "./react/use-document-engine.js";
+import { useDocumentState } from "./react/use-document-state.js";
+import { useDocumentEvent } from "./react/use-document-event.js";
+import { DocumentEngineProvider, DocumentEngineProviderProps, useEngine } from "./react/engine-context.js";
+export { DocumentEngineProvider, type DocumentEngineProviderProps, type DocumentState, type ReactEngineOptions, useDocumentEngine, useDocumentEvent, useDocumentState, useEngine };

package/dist/react.js

@@ -0,0 +1,6 @@
+"use client";
+import { useDocumentEngine } from "./react/use-document-engine.js";
+import { useDocumentState } from "./react/use-document-state.js";
+import { useDocumentEvent } from "./react/use-document-event.js";
+import { DocumentEngineProvider, useEngine } from "./react/engine-context.js";
+export { DocumentEngineProvider, useDocumentEngine, useDocumentEvent, useDocumentState, useEngine };

package/dist/recovery/recovery-controller.cjs

@@ -1,5 +1,25 @@
 const require_asset_pipeline = require("../assets/asset-pipeline.cjs");
 //#region src/recovery/recovery-controller.ts
+async function toStoredFiles(files) {
+	const entries = await Promise.all(Object.entries(files).map(async ([url, blob]) => [url, {
+		type: blob.type,
+		bytes: await blob.arrayBuffer()
+	}]));
+	return Object.fromEntries(entries);
+}
+function fromStoredFiles(files) {
+	const restored = {};
+	for (const [url, file] of Object.entries(files ?? {})) restored[url] = file instanceof Blob ? file : new Blob([file.bytes], { type: file.type });
+	return restored;
+}
+function fromStoredRecord(value) {
+	if (!isRecoveryRecord(value)) return void 0;
+	const stored = value;
+	return {
+		...stored,
+		files: fromStoredFiles(stored.files)
+	};
+}
 const documentKeyPrefix = "document:";
 const unloadKeyPrefix = "unload:";
 const loadingKey = "loading";
@@ -79,7 +99,10 @@ function createRecoveryController(options) {
 		if (!options.shouldWrite()) return;
 		const document = options.createDocument();
 		const record = createRecord(document, await captureTabOnlyFiles(document));
-		await store.set(documentKey(document.id), record);
+		await store.set(documentKey(document.id), {
+			...record,
+			files: await toStoredFiles(record.files)
+		});
 		options.onCheckpoint(record);
 	}
 	function writeCheckpointBeforeThePageCloses() {
@@ -91,12 +114,15 @@ function createRecoveryController(options) {
 			return;
 		}
 		const record = createRecord(document, Object.fromEntries(readyFiles));
-		store.set(documentKey(document.id), record).then(() => options.onCheckpoint(record), options.onError);
+		toStoredFiles(record.files).then((files) => store.set(documentKey(document.id), {
+			...record,
+			files
+		})).then(() => options.onCheckpoint(record), options.onError);
 	}
 	async function read(documentId) {
 		await queue;
 		const [checkpoint, unloadCopy] = await Promise.all([store.get(documentKey(documentId)), store.get(unloadKey(documentId))]);
-		return newerRecord(isRecoveryRecord(checkpoint) ? checkpoint : void 0, isRecoveryRecord(unloadCopy) ? unloadCopy : void 0);
+		return newerRecord(fromStoredRecord(checkpoint), fromStoredRecord(unloadCopy));
 	}
 	function cancel() {
 		if (timer !== void 0) clearTimeout(timer);

package/dist/recovery/recovery-controller.js

@@ -1,5 +1,25 @@
 import { rewriteUrls } from "../assets/asset-pipeline.js";
 //#region src/recovery/recovery-controller.ts
+async function toStoredFiles(files) {
+	const entries = await Promise.all(Object.entries(files).map(async ([url, blob]) => [url, {
+		type: blob.type,
+		bytes: await blob.arrayBuffer()
+	}]));
+	return Object.fromEntries(entries);
+}
+function fromStoredFiles(files) {
+	const restored = {};
+	for (const [url, file] of Object.entries(files ?? {})) restored[url] = file instanceof Blob ? file : new Blob([file.bytes], { type: file.type });
+	return restored;
+}
+function fromStoredRecord(value) {
+	if (!isRecoveryRecord(value)) return void 0;
+	const stored = value;
+	return {
+		...stored,
+		files: fromStoredFiles(stored.files)
+	};
+}
 const documentKeyPrefix = "document:";
 const unloadKeyPrefix = "unload:";
 const loadingKey = "loading";
@@ -79,7 +99,10 @@ function createRecoveryController(options) {
 		if (!options.shouldWrite()) return;
 		const document = options.createDocument();
 		const record = createRecord(document, await captureTabOnlyFiles(document));
-		await store.set(documentKey(document.id), record);
+		await store.set(documentKey(document.id), {
+			...record,
+			files: await toStoredFiles(record.files)
+		});
 		options.onCheckpoint(record);
 	}
 	function writeCheckpointBeforeThePageCloses() {
@@ -91,12 +114,15 @@ function createRecoveryController(options) {
 			return;
 		}
 		const record = createRecord(document, Object.fromEntries(readyFiles));
-		store.set(documentKey(document.id), record).then(() => options.onCheckpoint(record), options.onError);
+		toStoredFiles(record.files).then((files) => store.set(documentKey(document.id), {
+			...record,
+			files
+		})).then(() => options.onCheckpoint(record), options.onError);
 	}
 	async function read(documentId) {
 		await queue;
 		const [checkpoint, unloadCopy] = await Promise.all([store.get(documentKey(documentId)), store.get(unloadKey(documentId))]);
-		return newerRecord(isRecoveryRecord(checkpoint) ? checkpoint : void 0, isRecoveryRecord(unloadCopy) ? unloadCopy : void 0);
+		return newerRecord(fromStoredRecord(checkpoint), fromStoredRecord(unloadCopy));
 	}
 	function cancel() {
 		if (timer !== void 0) clearTimeout(timer);

package/dist/security/content-limits.cjs

@@ -0,0 +1,86 @@
+const require_asset_references = require("../assets/asset-references.cjs");
+const require_errors = require("../engine/errors.cjs");
+//#region src/security/content-limits.ts
+const dangerousKeys = /* @__PURE__ */ new Set([
+	"__proto__",
+	"constructor",
+	"prototype"
+]);
+function isSafeImageUrl(url) {
+	const trimmed = url.trim().toLowerCase();
+	const scheme = /^([a-z][a-z0-9+.-]*):/.exec(trimmed)?.[1];
+	if (scheme === void 0) return true;
+	if (scheme === "http" || scheme === "https" || scheme === "blob") return true;
+	if (scheme === "data") return trimmed.startsWith("data:image/");
+	return false;
+}
+function withoutDangerousKeys(value) {
+	return JSON.parse(JSON.stringify(value), (key, nested) => dangerousKeys.has(key) ? void 0 : nested);
+}
+function deepestNesting(value) {
+	let deepest = 0;
+	const pending = [{
+		value,
+		depth: 1
+	}];
+	while (pending.length > 0) {
+		const { value: current, depth } = pending.pop();
+		if (typeof current !== "object" || current === null) continue;
+		deepest = Math.max(deepest, depth);
+		for (const child of Object.values(current)) pending.push({
+			value: child,
+			depth: depth + 1
+		});
+	}
+	return deepest;
+}
+function countObjects(objects) {
+	let count = 0;
+	const pending = [...objects];
+	while (pending.length > 0) {
+		const object = pending.pop();
+		count += 1;
+		if (Array.isArray(object.objects)) pending.push(...object.objects);
+		if (object.clipPath && typeof object.clipPath === "object") pending.push(object.clipPath);
+	}
+	return count;
+}
+function unsafe(path, message) {
+	return {
+		code: "UNSAFE_DOCUMENT",
+		path,
+		message
+	};
+}
+function secureDocument(input, limits = {}) {
+	if (typeof input !== "object" || input === null) return input;
+	const maxDepth = limits.maxDepth ?? 100;
+	const maxObjects = limits.maxObjects ?? 5e4;
+	const document = withoutDangerousKeys(input);
+	const issues = [];
+	const depth = deepestNesting(document);
+	if (depth > maxDepth) issues.push(unsafe("", `the document is nested ${depth} levels deep, the limit is ${maxDepth}`));
+	if (Array.isArray(document.objects) && issues.length === 0) {
+		const count = countObjects(document.objects.filter((object) => typeof object === "object" && object !== null));
+		if (count > maxObjects) issues.push(unsafe("objects", `the document has ${count} objects, the limit is ${maxObjects}`));
+	}
+	refuseWhenUnsafe(issues);
+	return document;
+}
+function refuseWhenUnsafe(issues) {
+	if (issues.length === 0) return;
+	throw new require_errors.DocumentEngineError("UNSAFE_DOCUMENT", `The document was refused: ${issues.map((issue) => issue.message).join("; ")}`, { issues });
+}
+function refuseUnsafeImageUrls(objects, isAllowedUrl = isSafeImageUrl) {
+	const issues = [];
+	for (const reference of require_asset_references.findImageReferences(objects)) {
+		if (isAllowedUrl(reference.url)) continue;
+		const where = reference.objectId ? `object ${reference.objectId}` : "an object";
+		issues.push(unsafe("objects", `${where} uses the image address "${reference.url.slice(0, 60)}", which is not allowed`));
+	}
+	refuseWhenUnsafe(issues);
+}
+//#endregion
+exports.isSafeImageUrl = isSafeImageUrl;
+exports.refuseUnsafeImageUrls = refuseUnsafeImageUrls;
+exports.secureDocument = secureDocument;

package/dist/security/content-limits.d.cts

@@ -0,0 +1,11 @@
+import { SerializedFabricObject } from "../document/document-format.cjs";
+//#region src/security/content-limits.d.ts
+export interface ContentLimits {
+  maxObjects?: number;
+  maxDepth?: number;
+  isAllowedUrl?: (url: string) => boolean;
+}
+export declare function isSafeImageUrl(url: string): boolean;
+export declare function secureDocument(input: unknown, limits?: ContentLimits): unknown;
+export declare function refuseUnsafeImageUrls(objects: readonly SerializedFabricObject[], isAllowedUrl?: (url: string) => boolean): void;
+//#endregion

package/dist/security/content-limits.d.ts

@@ -0,0 +1,11 @@
+import { SerializedFabricObject } from "../document/document-format.js";
+//#region src/security/content-limits.d.ts
+export interface ContentLimits {
+  maxObjects?: number;
+  maxDepth?: number;
+  isAllowedUrl?: (url: string) => boolean;
+}
+export declare function isSafeImageUrl(url: string): boolean;
+export declare function secureDocument(input: unknown, limits?: ContentLimits): unknown;
+export declare function refuseUnsafeImageUrls(objects: readonly SerializedFabricObject[], isAllowedUrl?: (url: string) => boolean): void;
+//#endregion

package/dist/security/content-limits.js

@@ -0,0 +1,84 @@
+import { findImageReferences } from "../assets/asset-references.js";
+import { DocumentEngineError } from "../engine/errors.js";
+//#region src/security/content-limits.ts
+const dangerousKeys = /* @__PURE__ */ new Set([
+	"__proto__",
+	"constructor",
+	"prototype"
+]);
+function isSafeImageUrl(url) {
+	const trimmed = url.trim().toLowerCase();
+	const scheme = /^([a-z][a-z0-9+.-]*):/.exec(trimmed)?.[1];
+	if (scheme === void 0) return true;
+	if (scheme === "http" || scheme === "https" || scheme === "blob") return true;
+	if (scheme === "data") return trimmed.startsWith("data:image/");
+	return false;
+}
+function withoutDangerousKeys(value) {
+	return JSON.parse(JSON.stringify(value), (key, nested) => dangerousKeys.has(key) ? void 0 : nested);
+}
+function deepestNesting(value) {
+	let deepest = 0;
+	const pending = [{
+		value,
+		depth: 1
+	}];
+	while (pending.length > 0) {
+		const { value: current, depth } = pending.pop();
+		if (typeof current !== "object" || current === null) continue;
+		deepest = Math.max(deepest, depth);
+		for (const child of Object.values(current)) pending.push({
+			value: child,
+			depth: depth + 1
+		});
+	}
+	return deepest;
+}
+function countObjects(objects) {
+	let count = 0;
+	const pending = [...objects];
+	while (pending.length > 0) {
+		const object = pending.pop();
+		count += 1;
+		if (Array.isArray(object.objects)) pending.push(...object.objects);
+		if (object.clipPath && typeof object.clipPath === "object") pending.push(object.clipPath);
+	}
+	return count;
+}
+function unsafe(path, message) {
+	return {
+		code: "UNSAFE_DOCUMENT",
+		path,
+		message
+	};
+}
+function secureDocument(input, limits = {}) {
+	if (typeof input !== "object" || input === null) return input;
+	const maxDepth = limits.maxDepth ?? 100;
+	const maxObjects = limits.maxObjects ?? 5e4;
+	const document = withoutDangerousKeys(input);
+	const issues = [];
+	const depth = deepestNesting(document);
+	if (depth > maxDepth) issues.push(unsafe("", `the document is nested ${depth} levels deep, the limit is ${maxDepth}`));
+	if (Array.isArray(document.objects) && issues.length === 0) {
+		const count = countObjects(document.objects.filter((object) => typeof object === "object" && object !== null));
+		if (count > maxObjects) issues.push(unsafe("objects", `the document has ${count} objects, the limit is ${maxObjects}`));
+	}
+	refuseWhenUnsafe(issues);
+	return document;
+}
+function refuseWhenUnsafe(issues) {
+	if (issues.length === 0) return;
+	throw new DocumentEngineError("UNSAFE_DOCUMENT", `The document was refused: ${issues.map((issue) => issue.message).join("; ")}`, { issues });
+}
+function refuseUnsafeImageUrls(objects, isAllowedUrl = isSafeImageUrl) {
+	const issues = [];
+	for (const reference of findImageReferences(objects)) {
+		if (isAllowedUrl(reference.url)) continue;
+		const where = reference.objectId ? `object ${reference.objectId}` : "an object";
+		issues.push(unsafe("objects", `${where} uses the image address "${reference.url.slice(0, 60)}", which is not allowed`));
+	}
+	refuseWhenUnsafe(issues);
+}
+//#endregion
+export { isSafeImageUrl, refuseUnsafeImageUrls, secureDocument };