fabricjs-document-engine 0.7.0 → 1.0.0

package/dist/history/history-stack.cjs

@@ -1,27 +1,63 @@
 //#region src/history/history-stack.ts
-function createHistoryStack(limit) {
+function bytesOfChange(change) {
+	let bytes = (change.order?.length ?? 0) * 8;
+	for (const [id, json] of change.objects) bytes += (id.length + (json?.length ?? 0)) * 2;
+	return bytes;
+}
+function estimateStepBytes(step) {
+	return bytesOfChange(step.before) + bytesOfChange(step.after) + step.label.length * 2;
+}
+function createHistoryStack(limits) {
 	const undoSteps = [];
 	const redoSteps = [];
-	function pushWithinLimit(steps, step) {
+	const sizes = /* @__PURE__ */ new WeakMap();
+	let totalBytes = 0;
+	function sizeOf(step) {
+		let size = sizes.get(step);
+		if (size === void 0) {
+			size = estimateStepBytes(step);
+			sizes.set(step, size);
+		}
+		return size;
+	}
+	function forget(step) {
+		if (step) totalBytes -= sizeOf(step);
+	}
+	function stayWithinLimits() {
+		while (undoSteps.length > limits.steps) forget(undoSteps.shift());
+		while (redoSteps.length > limits.steps) forget(redoSteps.shift());
+		while (totalBytes > limits.bytes && undoSteps.length + redoSteps.length > 1) forget(undoSteps.length > 0 ? undoSteps.shift() : redoSteps.shift());
+	}
+	function add(steps, step) {
 		steps.push(step);
-		if (steps.length > limit) steps.shift();
+		totalBytes += sizeOf(step);
+		stayWithinLimits();
+	}
+	function take(steps) {
+		const step = steps.pop();
+		forget(step);
+		return step;
 	}
 	return {
 		record(step) {
-			pushWithinLimit(undoSteps, step);
+			redoSteps.forEach(forget);
 			redoSteps.length = 0;
+			add(undoSteps, step);
 		},
-		takeUndo: () => undoSteps.pop(),
-		takeRedo: () => redoSteps.pop(),
-		returnUndo: (step) => pushWithinLimit(undoSteps, step),
-		returnRedo: (step) => pushWithinLimit(redoSteps, step),
+		takeUndo: () => take(undoSteps),
+		takeRedo: () => take(redoSteps),
+		returnUndo: (step) => add(undoSteps, step),
+		returnRedo: (step) => add(redoSteps, step),
 		undoLabels: () => undoSteps.map((step) => step.label).reverse(),
 		redoLabels: () => redoSteps.map((step) => step.label).reverse(),
+		usedBytes: () => totalBytes,
 		clear() {
 			undoSteps.length = 0;
 			redoSteps.length = 0;
+			totalBytes = 0;
 		}
 	};
 }
 //#endregion
 exports.createHistoryStack = createHistoryStack;
+exports.estimateStepBytes = estimateStepBytes;

package/dist/history/history-stack.js

@@ -1,27 +1,62 @@
 //#region src/history/history-stack.ts
-function createHistoryStack(limit) {
+function bytesOfChange(change) {
+	let bytes = (change.order?.length ?? 0) * 8;
+	for (const [id, json] of change.objects) bytes += (id.length + (json?.length ?? 0)) * 2;
+	return bytes;
+}
+function estimateStepBytes(step) {
+	return bytesOfChange(step.before) + bytesOfChange(step.after) + step.label.length * 2;
+}
+function createHistoryStack(limits) {
 	const undoSteps = [];
 	const redoSteps = [];
-	function pushWithinLimit(steps, step) {
+	const sizes = /* @__PURE__ */ new WeakMap();
+	let totalBytes = 0;
+	function sizeOf(step) {
+		let size = sizes.get(step);
+		if (size === void 0) {
+			size = estimateStepBytes(step);
+			sizes.set(step, size);
+		}
+		return size;
+	}
+	function forget(step) {
+		if (step) totalBytes -= sizeOf(step);
+	}
+	function stayWithinLimits() {
+		while (undoSteps.length > limits.steps) forget(undoSteps.shift());
+		while (redoSteps.length > limits.steps) forget(redoSteps.shift());
+		while (totalBytes > limits.bytes && undoSteps.length + redoSteps.length > 1) forget(undoSteps.length > 0 ? undoSteps.shift() : redoSteps.shift());
+	}
+	function add(steps, step) {
 		steps.push(step);
-		if (steps.length > limit) steps.shift();
+		totalBytes += sizeOf(step);
+		stayWithinLimits();
+	}
+	function take(steps) {
+		const step = steps.pop();
+		forget(step);
+		return step;
 	}
 	return {
 		record(step) {
-			pushWithinLimit(undoSteps, step);
+			redoSteps.forEach(forget);
 			redoSteps.length = 0;
+			add(undoSteps, step);
 		},
-		takeUndo: () => undoSteps.pop(),
-		takeRedo: () => redoSteps.pop(),
-		returnUndo: (step) => pushWithinLimit(undoSteps, step),
-		returnRedo: (step) => pushWithinLimit(redoSteps, step),
+		takeUndo: () => take(undoSteps),
+		takeRedo: () => take(redoSteps),
+		returnUndo: (step) => add(undoSteps, step),
+		returnRedo: (step) => add(redoSteps, step),
 		undoLabels: () => undoSteps.map((step) => step.label).reverse(),
 		redoLabels: () => redoSteps.map((step) => step.label).reverse(),
+		usedBytes: () => totalBytes,
 		clear() {
 			undoSteps.length = 0;
 			redoSteps.length = 0;
+			totalBytes = 0;
 		}
 	};
 }
 //#endregion
-export { createHistoryStack };
+export { createHistoryStack, estimateStepBytes };

package/dist/index.cjs

@@ -1,5 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_errors = require("./engine/errors.cjs");
+const require_content_limits = require("./security/content-limits.cjs");
 const require_document_format = require("./document/document-format.cjs");
 const require_validate_document = require("./document/validate-document.cjs");
 const require_migrate_document = require("./migrations/migrate-document.cjs");
@@ -18,5 +19,8 @@ exports.createDocumentStateStore = require_document_state_store.createDocumentSt
 exports.detectSchemaVersion = require_migrate_document.detectSchemaVersion;
 exports.downloadExport = require_download_export.downloadExport;
 exports.isDocumentEngineError = require_errors.isDocumentEngineError;
+exports.isSafeImageUrl = require_content_limits.isSafeImageUrl;
 exports.migrateDocument = require_migrate_document.migrateDocument;
+exports.refuseUnsafeImageUrls = require_content_limits.refuseUnsafeImageUrls;
+exports.secureDocument = require_content_limits.secureDocument;
 exports.validateDocument = require_validate_document.validateDocument;

package/dist/index.d.cts

@@ -7,6 +7,7 @@ import { ExportPreflight, ExportProblem, ExportProblemCode } from "./export/pref
 import { NewDocumentOptions } from "./document/create-document.cjs";
 import { CustomObjectDefinition } from "./fabric/object-registry.cjs";
 import { HistoryOptions, HistoryState } from "./history/create-history.cjs";
+import { ContentLimits, isSafeImageUrl, refuseUnsafeImageUrls, secureDocument } from "./security/content-limits.cjs";
 import { DocumentVersion, VersionKind, VersionOptions, VersionStorage, VersionSummary } from "./versions/document-version.cjs";
 import { RecoveryStore } from "./recovery/recovery-store.cjs";
 import { InterruptedLoad, RecoveryOptions, RecoveryRecord } from "./recovery/recovery-controller.cjs";
@@ -16,11 +17,11 @@ import { DocumentEngineError, DocumentEngineErrorDetails, DocumentErrorCode, Doc
 import { DocumentStorage, SaveContext, SaveResult } from "./storage/storage-contract.cjs";
 import { SaveOptions, SaveRetryEvent, SaveState, SaveStatus } from "./save/save-controller.cjs";
 import { Unsubscribe } from "./engine/event-emitter.cjs";
-import { DocumentEngine, DocumentEngineEvents, DocumentEngineOptions, ExportResult, ImportOptions, LoadOptions, createDocumentEngine } from "./engine/create-document-engine.cjs";
+import { DocumentEngine, DocumentEngineEvents, DocumentEngineOptions, ExportResult, ImportOptions, LoadOptions, NewDocumentRequest, createDocumentEngine } from "./engine/create-document-engine.cjs";
 import { validateDocument } from "./document/validate-document.cjs";
 import { KeyboardShortcutOptions, UndoRedoTarget, bindKeyboardShortcuts } from "./history/keyboard-shortcuts.cjs";
 import { UnsavedChangesSource, bindUnsavedChangesWarning } from "./save/unsaved-changes-warning.cjs";
 import { DownloadableExport, downloadExport } from "./export/download-export.cjs";
 import { Migration, MigrationContext, MigrationResult, detectSchemaVersion, migrateDocument } from "./migrations/migrate-document.cjs";
 import { DocumentState, DocumentStateStore, createDocumentStateStore } from "./state/document-state-store.cjs";
-export { type AssetManifest, type AssetOptions, type AssetReport, type AssetWarning, type AssetWarningCode, type AutosaveOptions, CURRENT_SCHEMA_VERSION, type CustomObjectDefinition, type DocumentCanvas, type DocumentEngine, DocumentEngineError, type DocumentEngineErrorDetails, type DocumentEngineEvents, type DocumentEngineOptions, type DocumentErrorCode, type DocumentInfo, type DocumentIssue, type DocumentState, type DocumentStateStore, type DocumentStorage, type DocumentVersion, type DownloadableExport, type ExportArea, type ExportBackground, type ExportFormat, type ExportOptions, type ExportPreflight, type ExportProblem, type ExportProblemCode, type ExportRect, type ExportResult, type FabricDocument, type FontAsset, type FontLoader, type HistoryOptions, type HistoryState, type ImageAsset, type ImportOptions, type InterruptedLoad, type KeyboardShortcutOptions, type LoadOptions, type Migration, type MigrationContext, type MigrationResult, type NewDocumentOptions, type RecoveryOptions, type RecoveryRecord, type RecoveryStore, type RetryOptions, type SaveContext, type SaveOptions, type SaveResult, type SaveRetryEvent, type SaveState, type SaveStatus, type SerializedFabricObject, type UndoRedoTarget, type UnsavedChangesSource, type Unsubscribe, type UploadRequest, type VersionKind, type VersionOptions, type VersionStorage, type VersionSummary, bindKeyboardShortcuts, bindUnsavedChangesWarning, createConflictError, createDocumentEngine, createDocumentStateStore, detectSchemaVersion, downloadExport, isDocumentEngineError, migrateDocument, validateDocument };
+export { type AssetManifest, type AssetOptions, type AssetReport, type AssetWarning, type AssetWarningCode, type AutosaveOptions, CURRENT_SCHEMA_VERSION, type ContentLimits, type CustomObjectDefinition, type DocumentCanvas, type DocumentEngine, DocumentEngineError, type DocumentEngineErrorDetails, type DocumentEngineEvents, type DocumentEngineOptions, type DocumentErrorCode, type DocumentInfo, type DocumentIssue, type DocumentState, type DocumentStateStore, type DocumentStorage, type DocumentVersion, type DownloadableExport, type ExportArea, type ExportBackground, type ExportFormat, type ExportOptions, type ExportPreflight, type ExportProblem, type ExportProblemCode, type ExportRect, type ExportResult, type FabricDocument, type FontAsset, type FontLoader, type HistoryOptions, type HistoryState, type ImageAsset, type ImportOptions, type InterruptedLoad, type KeyboardShortcutOptions, type LoadOptions, type Migration, type MigrationContext, type MigrationResult, type NewDocumentOptions, type NewDocumentRequest, type RecoveryOptions, type RecoveryRecord, type RecoveryStore, type RetryOptions, type SaveContext, type SaveOptions, type SaveResult, type SaveRetryEvent, type SaveState, type SaveStatus, type SerializedFabricObject, type UndoRedoTarget, type UnsavedChangesSource, type Unsubscribe, type UploadRequest, type VersionKind, type VersionOptions, type VersionStorage, type VersionSummary, bindKeyboardShortcuts, bindUnsavedChangesWarning, createConflictError, createDocumentEngine, createDocumentStateStore, detectSchemaVersion, downloadExport, isDocumentEngineError, isSafeImageUrl, migrateDocument, refuseUnsafeImageUrls, secureDocument, validateDocument };

package/dist/index.d.ts

@@ -7,6 +7,7 @@ import { ExportPreflight, ExportProblem, ExportProblemCode } from "./export/pref
 import { NewDocumentOptions } from "./document/create-document.js";
 import { CustomObjectDefinition } from "./fabric/object-registry.js";
 import { HistoryOptions, HistoryState } from "./history/create-history.js";
+import { ContentLimits, isSafeImageUrl, refuseUnsafeImageUrls, secureDocument } from "./security/content-limits.js";
 import { DocumentVersion, VersionKind, VersionOptions, VersionStorage, VersionSummary } from "./versions/document-version.js";
 import { RecoveryStore } from "./recovery/recovery-store.js";
 import { InterruptedLoad, RecoveryOptions, RecoveryRecord } from "./recovery/recovery-controller.js";
@@ -16,11 +17,11 @@ import { DocumentEngineError, DocumentEngineErrorDetails, DocumentErrorCode, Doc
 import { DocumentStorage, SaveContext, SaveResult } from "./storage/storage-contract.js";
 import { SaveOptions, SaveRetryEvent, SaveState, SaveStatus } from "./save/save-controller.js";
 import { Unsubscribe } from "./engine/event-emitter.js";
-import { DocumentEngine, DocumentEngineEvents, DocumentEngineOptions, ExportResult, ImportOptions, LoadOptions, createDocumentEngine } from "./engine/create-document-engine.js";
+import { DocumentEngine, DocumentEngineEvents, DocumentEngineOptions, ExportResult, ImportOptions, LoadOptions, NewDocumentRequest, createDocumentEngine } from "./engine/create-document-engine.js";
 import { validateDocument } from "./document/validate-document.js";
 import { KeyboardShortcutOptions, UndoRedoTarget, bindKeyboardShortcuts } from "./history/keyboard-shortcuts.js";
 import { UnsavedChangesSource, bindUnsavedChangesWarning } from "./save/unsaved-changes-warning.js";
 import { DownloadableExport, downloadExport } from "./export/download-export.js";
 import { Migration, MigrationContext, MigrationResult, detectSchemaVersion, migrateDocument } from "./migrations/migrate-document.js";
 import { DocumentState, DocumentStateStore, createDocumentStateStore } from "./state/document-state-store.js";
-export { type AssetManifest, type AssetOptions, type AssetReport, type AssetWarning, type AssetWarningCode, type AutosaveOptions, CURRENT_SCHEMA_VERSION, type CustomObjectDefinition, type DocumentCanvas, type DocumentEngine, DocumentEngineError, type DocumentEngineErrorDetails, type DocumentEngineEvents, type DocumentEngineOptions, type DocumentErrorCode, type DocumentInfo, type DocumentIssue, type DocumentState, type DocumentStateStore, type DocumentStorage, type DocumentVersion, type DownloadableExport, type ExportArea, type ExportBackground, type ExportFormat, type ExportOptions, type ExportPreflight, type ExportProblem, type ExportProblemCode, type ExportRect, type ExportResult, type FabricDocument, type FontAsset, type FontLoader, type HistoryOptions, type HistoryState, type ImageAsset, type ImportOptions, type InterruptedLoad, type KeyboardShortcutOptions, type LoadOptions, type Migration, type MigrationContext, type MigrationResult, type NewDocumentOptions, type RecoveryOptions, type RecoveryRecord, type RecoveryStore, type RetryOptions, type SaveContext, type SaveOptions, type SaveResult, type SaveRetryEvent, type SaveState, type SaveStatus, type SerializedFabricObject, type UndoRedoTarget, type UnsavedChangesSource, type Unsubscribe, type UploadRequest, type VersionKind, type VersionOptions, type VersionStorage, type VersionSummary, bindKeyboardShortcuts, bindUnsavedChangesWarning, createConflictError, createDocumentEngine, createDocumentStateStore, detectSchemaVersion, downloadExport, isDocumentEngineError, migrateDocument, validateDocument };
+export { type AssetManifest, type AssetOptions, type AssetReport, type AssetWarning, type AssetWarningCode, type AutosaveOptions, CURRENT_SCHEMA_VERSION, type ContentLimits, type CustomObjectDefinition, type DocumentCanvas, type DocumentEngine, DocumentEngineError, type DocumentEngineErrorDetails, type DocumentEngineEvents, type DocumentEngineOptions, type DocumentErrorCode, type DocumentInfo, type DocumentIssue, type DocumentState, type DocumentStateStore, type DocumentStorage, type DocumentVersion, type DownloadableExport, type ExportArea, type ExportBackground, type ExportFormat, type ExportOptions, type ExportPreflight, type ExportProblem, type ExportProblemCode, type ExportRect, type ExportResult, type FabricDocument, type FontAsset, type FontLoader, type HistoryOptions, type HistoryState, type ImageAsset, type ImportOptions, type InterruptedLoad, type KeyboardShortcutOptions, type LoadOptions, type Migration, type MigrationContext, type MigrationResult, type NewDocumentOptions, type NewDocumentRequest, type RecoveryOptions, type RecoveryRecord, type RecoveryStore, type RetryOptions, type SaveContext, type SaveOptions, type SaveResult, type SaveRetryEvent, type SaveState, type SaveStatus, type SerializedFabricObject, type UndoRedoTarget, type UnsavedChangesSource, type Unsubscribe, type UploadRequest, type VersionKind, type VersionOptions, type VersionStorage, type VersionSummary, bindKeyboardShortcuts, bindUnsavedChangesWarning, createConflictError, createDocumentEngine, createDocumentStateStore, detectSchemaVersion, downloadExport, isDocumentEngineError, isSafeImageUrl, migrateDocument, refuseUnsafeImageUrls, secureDocument, validateDocument };

package/dist/index.js

@@ -1,4 +1,5 @@
 import { DocumentEngineError, createConflictError, isDocumentEngineError } from "./engine/errors.js";
+import { isSafeImageUrl, refuseUnsafeImageUrls, secureDocument } from "./security/content-limits.js";
 import { CURRENT_SCHEMA_VERSION } from "./document/document-format.js";
 import { validateDocument } from "./document/validate-document.js";
 import { detectSchemaVersion, migrateDocument } from "./migrations/migrate-document.js";
@@ -7,4 +8,4 @@ import { bindKeyboardShortcuts } from "./history/keyboard-shortcuts.js";
 import { bindUnsavedChangesWarning } from "./save/unsaved-changes-warning.js";
 import { downloadExport } from "./export/download-export.js";
 import { createDocumentStateStore } from "./state/document-state-store.js";
-export { CURRENT_SCHEMA_VERSION, DocumentEngineError, bindKeyboardShortcuts, bindUnsavedChangesWarning, createConflictError, createDocumentEngine, createDocumentStateStore, detectSchemaVersion, downloadExport, isDocumentEngineError, migrateDocument, validateDocument };
+export { CURRENT_SCHEMA_VERSION, DocumentEngineError, bindKeyboardShortcuts, bindUnsavedChangesWarning, createConflictError, createDocumentEngine, createDocumentStateStore, detectSchemaVersion, downloadExport, isDocumentEngineError, isSafeImageUrl, migrateDocument, refuseUnsafeImageUrls, secureDocument, validateDocument };

package/dist/recovery/recovery-controller.cjs

@@ -1,5 +1,25 @@
 const require_asset_pipeline = require("../assets/asset-pipeline.cjs");
 //#region src/recovery/recovery-controller.ts
+async function toStoredFiles(files) {
+	const entries = await Promise.all(Object.entries(files).map(async ([url, blob]) => [url, {
+		type: blob.type,
+		bytes: await blob.arrayBuffer()
+	}]));
+	return Object.fromEntries(entries);
+}
+function fromStoredFiles(files) {
+	const restored = {};
+	for (const [url, file] of Object.entries(files ?? {})) restored[url] = file instanceof Blob ? file : new Blob([file.bytes], { type: file.type });
+	return restored;
+}
+function fromStoredRecord(value) {
+	if (!isRecoveryRecord(value)) return void 0;
+	const stored = value;
+	return {
+		...stored,
+		files: fromStoredFiles(stored.files)
+	};
+}
 const documentKeyPrefix = "document:";
 const unloadKeyPrefix = "unload:";
 const loadingKey = "loading";
@@ -79,7 +99,10 @@ function createRecoveryController(options) {
 		if (!options.shouldWrite()) return;
 		const document = options.createDocument();
 		const record = createRecord(document, await captureTabOnlyFiles(document));
-		await store.set(documentKey(document.id), record);
+		await store.set(documentKey(document.id), {
+			...record,
+			files: await toStoredFiles(record.files)
+		});
 		options.onCheckpoint(record);
 	}
 	function writeCheckpointBeforeThePageCloses() {
@@ -91,12 +114,15 @@ function createRecoveryController(options) {
 			return;
 		}
 		const record = createRecord(document, Object.fromEntries(readyFiles));
-		store.set(documentKey(document.id), record).then(() => options.onCheckpoint(record), options.onError);
+		toStoredFiles(record.files).then((files) => store.set(documentKey(document.id), {
+			...record,
+			files
+		})).then(() => options.onCheckpoint(record), options.onError);
 	}
 	async function read(documentId) {
 		await queue;
 		const [checkpoint, unloadCopy] = await Promise.all([store.get(documentKey(documentId)), store.get(unloadKey(documentId))]);
-		return newerRecord(isRecoveryRecord(checkpoint) ? checkpoint : void 0, isRecoveryRecord(unloadCopy) ? unloadCopy : void 0);
+		return newerRecord(fromStoredRecord(checkpoint), fromStoredRecord(unloadCopy));
 	}
 	function cancel() {
 		if (timer !== void 0) clearTimeout(timer);
@@ -123,6 +149,7 @@ function createRecoveryController(options) {
 			}, interval);
 		},
 		flush,
+		writeNow: writeCheckpointBeforeThePageCloses,
 		cancel,
 		remove: (documentId) => enqueue(async () => {
 			await store.delete(unloadKey(documentId));

package/dist/recovery/recovery-controller.js

@@ -1,5 +1,25 @@
 import { rewriteUrls } from "../assets/asset-pipeline.js";
 //#region src/recovery/recovery-controller.ts
+async function toStoredFiles(files) {
+	const entries = await Promise.all(Object.entries(files).map(async ([url, blob]) => [url, {
+		type: blob.type,
+		bytes: await blob.arrayBuffer()
+	}]));
+	return Object.fromEntries(entries);
+}
+function fromStoredFiles(files) {
+	const restored = {};
+	for (const [url, file] of Object.entries(files ?? {})) restored[url] = file instanceof Blob ? file : new Blob([file.bytes], { type: file.type });
+	return restored;
+}
+function fromStoredRecord(value) {
+	if (!isRecoveryRecord(value)) return void 0;
+	const stored = value;
+	return {
+		...stored,
+		files: fromStoredFiles(stored.files)
+	};
+}
 const documentKeyPrefix = "document:";
 const unloadKeyPrefix = "unload:";
 const loadingKey = "loading";
@@ -79,7 +99,10 @@ function createRecoveryController(options) {
 		if (!options.shouldWrite()) return;
 		const document = options.createDocument();
 		const record = createRecord(document, await captureTabOnlyFiles(document));
-		await store.set(documentKey(document.id), record);
+		await store.set(documentKey(document.id), {
+			...record,
+			files: await toStoredFiles(record.files)
+		});
 		options.onCheckpoint(record);
 	}
 	function writeCheckpointBeforeThePageCloses() {
@@ -91,12 +114,15 @@ function createRecoveryController(options) {
 			return;
 		}
 		const record = createRecord(document, Object.fromEntries(readyFiles));
-		store.set(documentKey(document.id), record).then(() => options.onCheckpoint(record), options.onError);
+		toStoredFiles(record.files).then((files) => store.set(documentKey(document.id), {
+			...record,
+			files
+		})).then(() => options.onCheckpoint(record), options.onError);
 	}
 	async function read(documentId) {
 		await queue;
 		const [checkpoint, unloadCopy] = await Promise.all([store.get(documentKey(documentId)), store.get(unloadKey(documentId))]);
-		return newerRecord(isRecoveryRecord(checkpoint) ? checkpoint : void 0, isRecoveryRecord(unloadCopy) ? unloadCopy : void 0);
+		return newerRecord(fromStoredRecord(checkpoint), fromStoredRecord(unloadCopy));
 	}
 	function cancel() {
 		if (timer !== void 0) clearTimeout(timer);
@@ -123,6 +149,7 @@ function createRecoveryController(options) {
 			}, interval);
 		},
 		flush,
+		writeNow: writeCheckpointBeforeThePageCloses,
 		cancel,
 		remove: (documentId) => enqueue(async () => {
 			await store.delete(unloadKey(documentId));

package/dist/security/content-limits.cjs

@@ -0,0 +1,86 @@
+const require_asset_references = require("../assets/asset-references.cjs");
+const require_errors = require("../engine/errors.cjs");
+//#region src/security/content-limits.ts
+const dangerousKeys = /* @__PURE__ */ new Set([
+	"__proto__",
+	"constructor",
+	"prototype"
+]);
+function isSafeImageUrl(url) {
+	const trimmed = url.trim().toLowerCase();
+	const scheme = /^([a-z][a-z0-9+.-]*):/.exec(trimmed)?.[1];
+	if (scheme === void 0) return true;
+	if (scheme === "http" || scheme === "https" || scheme === "blob") return true;
+	if (scheme === "data") return trimmed.startsWith("data:image/");
+	return false;
+}
+function withoutDangerousKeys(value) {
+	return JSON.parse(JSON.stringify(value), (key, nested) => dangerousKeys.has(key) ? void 0 : nested);
+}
+function deepestNesting(value) {
+	let deepest = 0;
+	const pending = [{
+		value,
+		depth: 1
+	}];
+	while (pending.length > 0) {
+		const { value: current, depth } = pending.pop();
+		if (typeof current !== "object" || current === null) continue;
+		deepest = Math.max(deepest, depth);
+		for (const child of Object.values(current)) pending.push({
+			value: child,
+			depth: depth + 1
+		});
+	}
+	return deepest;
+}
+function countObjects(objects) {
+	let count = 0;
+	const pending = [...objects];
+	while (pending.length > 0) {
+		const object = pending.pop();
+		count += 1;
+		if (Array.isArray(object.objects)) pending.push(...object.objects);
+		if (object.clipPath && typeof object.clipPath === "object") pending.push(object.clipPath);
+	}
+	return count;
+}
+function unsafe(path, message) {
+	return {
+		code: "UNSAFE_DOCUMENT",
+		path,
+		message
+	};
+}
+function secureDocument(input, limits = {}) {
+	if (typeof input !== "object" || input === null) return input;
+	const maxDepth = limits.maxDepth ?? 100;
+	const maxObjects = limits.maxObjects ?? 5e4;
+	const document = withoutDangerousKeys(input);
+	const issues = [];
+	const depth = deepestNesting(document);
+	if (depth > maxDepth) issues.push(unsafe("", `the document is nested ${depth} levels deep, the limit is ${maxDepth}`));
+	if (Array.isArray(document.objects) && issues.length === 0) {
+		const count = countObjects(document.objects.filter((object) => typeof object === "object" && object !== null));
+		if (count > maxObjects) issues.push(unsafe("objects", `the document has ${count} objects, the limit is ${maxObjects}`));
+	}
+	refuseWhenUnsafe(issues);
+	return document;
+}
+function refuseWhenUnsafe(issues) {
+	if (issues.length === 0) return;
+	throw new require_errors.DocumentEngineError("UNSAFE_DOCUMENT", `The document was refused: ${issues.map((issue) => issue.message).join("; ")}`, { issues });
+}
+function refuseUnsafeImageUrls(objects, isAllowedUrl = isSafeImageUrl) {
+	const issues = [];
+	for (const reference of require_asset_references.findImageReferences(objects)) {
+		if (isAllowedUrl(reference.url)) continue;
+		const where = reference.objectId ? `object ${reference.objectId}` : "an object";
+		issues.push(unsafe("objects", `${where} uses the image address "${reference.url.slice(0, 60)}", which is not allowed`));
+	}
+	refuseWhenUnsafe(issues);
+}
+//#endregion
+exports.isSafeImageUrl = isSafeImageUrl;
+exports.refuseUnsafeImageUrls = refuseUnsafeImageUrls;
+exports.secureDocument = secureDocument;

package/dist/security/content-limits.d.cts

@@ -0,0 +1,11 @@
+import { SerializedFabricObject } from "../document/document-format.cjs";
+//#region src/security/content-limits.d.ts
+export interface ContentLimits {
+  maxObjects?: number;
+  maxDepth?: number;
+  isAllowedUrl?: (url: string) => boolean;
+}
+export declare function isSafeImageUrl(url: string): boolean;
+export declare function secureDocument(input: unknown, limits?: ContentLimits): unknown;
+export declare function refuseUnsafeImageUrls(objects: readonly SerializedFabricObject[], isAllowedUrl?: (url: string) => boolean): void;
+//#endregion

package/dist/security/content-limits.d.ts

@@ -0,0 +1,11 @@
+import { SerializedFabricObject } from "../document/document-format.js";
+//#region src/security/content-limits.d.ts
+export interface ContentLimits {
+  maxObjects?: number;
+  maxDepth?: number;
+  isAllowedUrl?: (url: string) => boolean;
+}
+export declare function isSafeImageUrl(url: string): boolean;
+export declare function secureDocument(input: unknown, limits?: ContentLimits): unknown;
+export declare function refuseUnsafeImageUrls(objects: readonly SerializedFabricObject[], isAllowedUrl?: (url: string) => boolean): void;
+//#endregion

package/dist/security/content-limits.js

@@ -0,0 +1,84 @@
+import { findImageReferences } from "../assets/asset-references.js";
+import { DocumentEngineError } from "../engine/errors.js";
+//#region src/security/content-limits.ts
+const dangerousKeys = /* @__PURE__ */ new Set([
+	"__proto__",
+	"constructor",
+	"prototype"
+]);
+function isSafeImageUrl(url) {
+	const trimmed = url.trim().toLowerCase();
+	const scheme = /^([a-z][a-z0-9+.-]*):/.exec(trimmed)?.[1];
+	if (scheme === void 0) return true;
+	if (scheme === "http" || scheme === "https" || scheme === "blob") return true;
+	if (scheme === "data") return trimmed.startsWith("data:image/");
+	return false;
+}
+function withoutDangerousKeys(value) {
+	return JSON.parse(JSON.stringify(value), (key, nested) => dangerousKeys.has(key) ? void 0 : nested);
+}
+function deepestNesting(value) {
+	let deepest = 0;
+	const pending = [{
+		value,
+		depth: 1
+	}];
+	while (pending.length > 0) {
+		const { value: current, depth } = pending.pop();
+		if (typeof current !== "object" || current === null) continue;
+		deepest = Math.max(deepest, depth);
+		for (const child of Object.values(current)) pending.push({
+			value: child,
+			depth: depth + 1
+		});
+	}
+	return deepest;
+}
+function countObjects(objects) {
+	let count = 0;
+	const pending = [...objects];
+	while (pending.length > 0) {
+		const object = pending.pop();
+		count += 1;
+		if (Array.isArray(object.objects)) pending.push(...object.objects);
+		if (object.clipPath && typeof object.clipPath === "object") pending.push(object.clipPath);
+	}
+	return count;
+}
+function unsafe(path, message) {
+	return {
+		code: "UNSAFE_DOCUMENT",
+		path,
+		message
+	};
+}
+function secureDocument(input, limits = {}) {
+	if (typeof input !== "object" || input === null) return input;
+	const maxDepth = limits.maxDepth ?? 100;
+	const maxObjects = limits.maxObjects ?? 5e4;
+	const document = withoutDangerousKeys(input);
+	const issues = [];
+	const depth = deepestNesting(document);
+	if (depth > maxDepth) issues.push(unsafe("", `the document is nested ${depth} levels deep, the limit is ${maxDepth}`));
+	if (Array.isArray(document.objects) && issues.length === 0) {
+		const count = countObjects(document.objects.filter((object) => typeof object === "object" && object !== null));
+		if (count > maxObjects) issues.push(unsafe("objects", `the document has ${count} objects, the limit is ${maxObjects}`));
+	}
+	refuseWhenUnsafe(issues);
+	return document;
+}
+function refuseWhenUnsafe(issues) {
+	if (issues.length === 0) return;
+	throw new DocumentEngineError("UNSAFE_DOCUMENT", `The document was refused: ${issues.map((issue) => issue.message).join("; ")}`, { issues });
+}
+function refuseUnsafeImageUrls(objects, isAllowedUrl = isSafeImageUrl) {
+	const issues = [];
+	for (const reference of findImageReferences(objects)) {
+		if (isAllowedUrl(reference.url)) continue;
+		const where = reference.objectId ? `object ${reference.objectId}` : "an object";
+		issues.push(unsafe("objects", `${where} uses the image address "${reference.url.slice(0, 60)}", which is not allowed`));
+	}
+	refuseWhenUnsafe(issues);
+}
+//#endregion
+export { isSafeImageUrl, refuseUnsafeImageUrls, secureDocument };