omni-viewer-core 0.9.0 → 0.10.0

package/dist/parsers/markdown/index.d.ts

@@ -2,6 +2,19 @@ import { type ParseOutcome, type ParseOptions } from '../types.js';
 export interface MarkdownHeading {
     level: number;
     text: string;
+    /**
+     * Source-order handle (`heading-0`, `heading-1`, …), not a DOM anchor.
+     *
+     * Rendering is owned by the viewer's renderer, which may emit its own slug
+     * ids (`#introduction`), and those win over this handle in the preview. The
+     * line-scanner also disagrees with a full Markdown parser on which lines are
+     * headings — `#` inside a fenced code block is counted here but not rendered,
+     * setext headings (`Title\n=====`) are rendered but not counted — so ordinals
+     * cannot be assumed to line up with the rendered heading elements either.
+     *
+     * Build outline links from `start`/`end` (source spans, which are exact) and
+     * resolve the rendered target by text or by the renderer's own slugging.
+     */
     id: string;
     start: number;
     end: number;

package/dist/registry/index.js

@@ -128,7 +128,7 @@ export const YAML_VIEWER_DESCRIPTOR = {
 };
 export const PROTO_VIEWER_DESCRIPTOR = {
     id: 'proto', displayNameKey: 'proto.title', extensions: ['proto'], priority: 10,
-    requiredServices: [], optionalServices: ['clipboard']
+    requiredServices: [], optionalServices: ['clipboard', 'save', 'writeback']
 };
 /**
  * Excel spans two containers (xlsx/xlsm are zip, xls is ole), so it has no

package/dist/styles/proto.css

@@ -1,2 +1,2 @@
 
-:host{display:block;height:100%;color:var(--omni-fg,#d4d4d4);background:var(--omni-bg,#1e1e1e);font:13px system-ui,sans-serif}.omni-proto{display:flex;flex-direction:column;height:100%;min-height:420px}.omni-proto__header,.omni-proto__toolbar{display:flex;align-items:center;gap:8px;padding:10px 14px;border-bottom:1px solid var(--omni-border,#3c3c3c);flex-wrap:wrap}.omni-proto__title{font-size:16px;font-weight:650;margin-right:auto}.omni-proto__summary,.omni-proto__muted{color:var(--omni-muted,#999)}.omni-proto button,.omni-proto input,.omni-proto select,.omni-proto textarea{font:inherit;color:inherit;background:var(--omni-control,#2d2d2d);border:1px solid var(--omni-border,#555);border-radius:4px;padding:5px 9px}.omni-proto button{cursor:pointer}.omni-proto button[aria-pressed=true]{background:var(--omni-accent,#0e639c);border-color:var(--omni-accent,#0e639c);color:#fff}.omni-proto__search{min-width:220px}.omni-proto__workspace{display:grid;grid-template-columns:minmax(280px,42%) 1fr;min-height:0;flex:1}.omni-proto__source,.omni-proto__panel{overflow:auto;min-width:0}.omni-proto__source{margin:0;padding:12px 0;border-right:1px solid var(--omni-border,#3c3c3c);font:12px/1.55 ui-monospace,monospace;counter-reset:line}.omni-proto__line{display:block;padding:0 12px 0 52px;white-space:pre;position:relative}.omni-proto__line:before{counter-increment:line;content:counter(line);position:absolute;left:8px;width:34px;text-align:right;color:var(--omni-muted,#777)}.omni-proto__line.is-selected{background:color-mix(in srgb,var(--omni-accent,#0e639c) 30%,transparent)}.omni-proto__tok--kw{color:var(--omni-syntax-keyword,#569cd6)}.omni-proto__tok--type{color:var(--omni-syntax-type,#4ec9b0)}.omni-proto__tok--str{color:var(--omni-syntax-string,#ce9178)}.omni-proto__tok--num{color:var(--omni-syntax-number,#b5cea8)}.omni-proto__tok--comment{color:var(--omni-syntax-comment,#6a9955);font-style:italic}.omni-proto__tok--punct{color:var(--omni-syntax-punct,#808080)}.omni-proto__panel{padding:12px}.omni-proto__row,.omni-proto__card{border:1px solid var(--omni-border,#3c3c3c);border-radius:5px;padding:8px;margin-bottom:7px}.omni-proto__row{display:flex;gap:8px;align-items:baseline}.omni-proto__row[data-line]{cursor:pointer}.omni-proto__badge{font-size:11px;color:var(--omni-accent-fg,#75beff);min-width:58px}.omni-proto__code{font-family:ui-monospace,monospace}.omni-proto__children{margin-left:18px}.omni-proto__baseline{box-sizing:border-box;width:100%;min-height:180px;display:block;margin-bottom:8px;font-family:ui-monospace,monospace}.omni-proto__warning{padding:8px 14px;color:#f0c674;border-top:1px solid var(--omni-border,#3c3c3c)}.omni-proto__empty{color:var(--omni-muted,#999);padding:20px;text-align:center}@media(max-width:760px){.omni-proto__workspace{grid-template-columns:1fr;grid-template-rows:minmax(180px,40%) 1fr}.omni-proto__source{border-right:0;border-bottom:1px solid var(--omni-border,#3c3c3c)}}
+:host{display:block;height:100%;color:var(--omni-fg,#d4d4d4);background:var(--omni-bg,#1e1e1e);font:13px system-ui,sans-serif}.omni-proto{display:flex;flex-direction:column;height:100%;min-height:420px}.omni-proto__header,.omni-proto__toolbar{display:flex;align-items:center;gap:8px;padding:10px 14px;border-bottom:1px solid var(--omni-border,#3c3c3c);flex-wrap:wrap}.omni-proto__title{font-size:16px;font-weight:650;margin-right:auto}.omni-proto__summary,.omni-proto__muted{color:var(--omni-muted,#999)}.omni-proto button,.omni-proto input,.omni-proto select,.omni-proto textarea{font:inherit;color:inherit;background:var(--omni-control,#2d2d2d);border:1px solid var(--omni-border,#555);border-radius:4px;padding:5px 9px}.omni-proto button{cursor:pointer}.omni-proto button[aria-pressed=true]{background:var(--omni-accent,#0e639c);border-color:var(--omni-accent,#0e639c);color:#fff}.omni-proto__search{min-width:220px}.omni-proto__workspace{display:grid;grid-template-columns:minmax(280px,42%) 1fr;min-height:0;flex:1}.omni-proto__panel{overflow:auto;min-width:0}.omni-proto__source{position:relative;overflow:hidden;min-width:0;border-right:1px solid var(--omni-border,#3c3c3c)}.omni-proto__highlight{position:absolute;inset:0;margin:0;padding:12px 0;overflow:auto;pointer-events:none;font:12px/1.55 ui-monospace,monospace;counter-reset:line;white-space:pre;color:inherit}.omni-proto textarea.omni-proto__editor{position:absolute;inset:0;box-sizing:border-box;margin:0;padding:12px 12px 12px 52px;background:transparent;border:0;border-radius:0;outline:none;resize:none;overflow:auto;font:12px/1.55 ui-monospace,monospace;white-space:pre;color:transparent;caret-color:var(--omni-fg,#d4d4d4);-webkit-text-fill-color:transparent;z-index:1}.omni-proto__line{display:block;padding:0 12px 0 52px;white-space:pre;position:relative}.omni-proto__line:before{counter-increment:line;content:counter(line);position:absolute;left:8px;width:34px;text-align:right;color:var(--omni-muted,#777)}.omni-proto__line.is-selected{background:color-mix(in srgb,var(--omni-accent,#0e639c) 30%,transparent)}.omni-proto__tok--kw{color:var(--omni-syntax-keyword,#569cd6)}.omni-proto__tok--type{color:var(--omni-syntax-type,#4ec9b0)}.omni-proto__tok--str{color:var(--omni-syntax-string,#ce9178)}.omni-proto__tok--num{color:var(--omni-syntax-number,#b5cea8)}.omni-proto__tok--comment{color:var(--omni-syntax-comment,#6a9955);font-style:italic}.omni-proto__tok--punct{color:var(--omni-syntax-punct,#808080)}.omni-proto__panel{padding:12px}.omni-proto__row,.omni-proto__card{border:1px solid var(--omni-border,#3c3c3c);border-radius:5px;padding:8px;margin-bottom:7px}.omni-proto__row{display:flex;gap:8px;align-items:baseline}.omni-proto__row[data-line]{cursor:pointer}.omni-proto__badge{font-size:11px;color:var(--omni-accent-fg,#75beff);min-width:58px}.omni-proto__code{font-family:ui-monospace,monospace}.omni-proto__children{margin-left:18px}.omni-proto__baseline{box-sizing:border-box;width:100%;min-height:180px;display:block;margin-bottom:8px;font-family:ui-monospace,monospace}.omni-proto__status{margin-left:auto;color:var(--omni-muted,#999);font-size:12px}.omni-proto__warning{padding:8px 14px;color:#f0c674;border-top:1px solid var(--omni-border,#3c3c3c)}.omni-proto__empty{color:var(--omni-muted,#999);padding:20px;text-align:center}@media(max-width:760px){.omni-proto__workspace{grid-template-columns:1fr;grid-template-rows:minmax(180px,40%) 1fr}.omni-proto__source{border-right:0;border-bottom:1px solid var(--omni-border,#3c3c3c)}}

package/dist/viewers/anchors.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Shared link hardening for in-document fragment anchors (`<a href="#name">`).
+ *
+ * Renderers emit intra-document references as fragments: docx-preview turns Word
+ * bookmarks into `<span id="name">` and table-of-contents entries, cross-references
+ * and footnote back-links into `<a href="#name">`. Viewers strip `href` when they
+ * harden the DOM, so the browser's default fragment navigation is gone — and it
+ * would not work anyway once the viewer lives in a shadow root, where a
+ * document-level fragment lookup cannot see the target.
+ */
+/** An anchor's `href`, classified as far as link hardening is concerned. */
+export type AnchorTarget = {
+    kind: 'fragment';
+    name: string;
+} | {
+    kind: 'absolute';
+    url: URL;
+} | {
+    kind: 'unsupported';
+};
+/**
+ * Splits fragment references from everything else. A URL that merely *carries* a
+ * fragment (`https://example.com/x#frag`) is an external link, not an in-document
+ * one, and stays on the host navigation path.
+ */
+export declare function classifyAnchorTarget(href: string): AnchorTarget;
+/**
+ * Finds the element a fragment points at, without leaving `scope`.
+ *
+ * `getElementById` is used rather than a selector because bookmark names are not
+ * CSS identifiers — Word emits names that start with a digit, contain `_`, or are
+ * non-ASCII — and `CSS.escape` is absent from some hosts and test environments.
+ * The lookup is confined to `scope` on purpose: under `styleIsolation: 'scoped'`
+ * the root node is the host `document`, where an unrelated page element may share
+ * the id. Duplicate ids resolve to the first match in document order.
+ */
+export declare function findFragmentTarget(scope: HTMLElement, name: string): HTMLElement | null;
+/**
+ * Brings a fragment target into view and moves focus to it.
+ *
+ * The viewer's own scrollport is adjusted instead of calling `scrollIntoView`,
+ * which also scrolls every ancestor scrollport and would drag the host page
+ * around when the viewer is embedded in one.
+ */
+export declare function revealFragmentTarget(target: HTMLElement, viewport: HTMLElement | null): void;
+/**
+ * Wires `anchor` to scroll to its in-document target, registering the teardown on
+ * `disposers`. Returns `false` when nothing matches the fragment — a broken
+ * cross-reference, which callers surface the same way they surface a blocked link.
+ */
+export declare function bindFragmentAnchor(anchor: HTMLElement, name: string, scope: HTMLElement, viewport: HTMLElement | null, disposers: Array<() => void>): boolean;

package/dist/viewers/anchors.js

@@ -0,0 +1,114 @@
+/**
+ * Shared link hardening for in-document fragment anchors (`<a href="#name">`).
+ *
+ * Renderers emit intra-document references as fragments: docx-preview turns Word
+ * bookmarks into `<span id="name">` and table-of-contents entries, cross-references
+ * and footnote back-links into `<a href="#name">`. Viewers strip `href` when they
+ * harden the DOM, so the browser's default fragment navigation is gone — and it
+ * would not work anyway once the viewer lives in a shadow root, where a
+ * document-level fragment lookup cannot see the target.
+ */
+/**
+ * Splits fragment references from everything else. A URL that merely *carries* a
+ * fragment (`https://example.com/x#frag`) is an external link, not an in-document
+ * one, and stays on the host navigation path.
+ */
+export function classifyAnchorTarget(href) {
+    if (href.startsWith('#')) {
+        const name = href.slice(1);
+        return name ? { kind: 'fragment', name } : { kind: 'unsupported' };
+    }
+    try {
+        return { kind: 'absolute', url: new URL(href) };
+    }
+    catch {
+        return { kind: 'unsupported' };
+    }
+}
+/**
+ * Finds the element a fragment points at, without leaving `scope`.
+ *
+ * `getElementById` is used rather than a selector because bookmark names are not
+ * CSS identifiers — Word emits names that start with a digit, contain `_`, or are
+ * non-ASCII — and `CSS.escape` is absent from some hosts and test environments.
+ * The lookup is confined to `scope` on purpose: under `styleIsolation: 'scoped'`
+ * the root node is the host `document`, where an unrelated page element may share
+ * the id. Duplicate ids resolve to the first match in document order.
+ */
+export function findFragmentTarget(scope, name) {
+    const root = scope.getRootNode();
+    for (const candidate of fragmentCandidates(name)) {
+        const byId = root.getElementById?.(candidate) ?? null;
+        if (byId && scope.contains(byId))
+            return byId;
+        // Either the root node has no match, or the match sits outside the viewer;
+        // a duplicate may still exist inside it.
+        const scoped = [...scope.querySelectorAll('[id]')]
+            .find((node) => node.id === candidate);
+        if (scoped)
+            return scoped;
+    }
+    return null;
+}
+/** Raw name first, then percent-decoded, since renderers differ on encoding. */
+function fragmentCandidates(name) {
+    try {
+        const decoded = decodeURIComponent(name);
+        return decoded === name ? [name] : [name, decoded];
+    }
+    catch {
+        // Malformed escape sequence: the raw name is all we have.
+        return [name];
+    }
+}
+/**
+ * Brings a fragment target into view and moves focus to it.
+ *
+ * The viewer's own scrollport is adjusted instead of calling `scrollIntoView`,
+ * which also scrolls every ancestor scrollport and would drag the host page
+ * around when the viewer is embedded in one.
+ */
+export function revealFragmentTarget(target, viewport) {
+    if (viewport) {
+        viewport.scrollTop +=
+            target.getBoundingClientRect().top - viewport.getBoundingClientRect().top;
+    }
+    else {
+        target.scrollIntoView?.({ block: 'start' });
+    }
+    // Bookmark markers are empty spans, so they need to be made focusable first.
+    if (!target.hasAttribute('tabindex'))
+        target.setAttribute('tabindex', '-1');
+    target.focus({ preventScroll: true });
+}
+/**
+ * Wires `anchor` to scroll to its in-document target, registering the teardown on
+ * `disposers`. Returns `false` when nothing matches the fragment — a broken
+ * cross-reference, which callers surface the same way they surface a blocked link.
+ */
+export function bindFragmentAnchor(anchor, name, scope, viewport, disposers) {
+    if (!findFragmentTarget(scope, name))
+        return false;
+    anchor.setAttribute('role', 'link');
+    anchor.tabIndex = 0;
+    const activate = (event) => {
+        event.preventDefault();
+        // Resolved on activation rather than up front: viewers prune content after
+        // hardening (page limits, re-renders), so the target may be gone by now.
+        const target = findFragmentTarget(scope, name);
+        if (target)
+            revealFragmentTarget(target, viewport);
+    };
+    const onKeyDown = (event) => {
+        const { key } = event;
+        if (key === 'Enter' || key === ' ' || key === 'Spacebar')
+            activate(event);
+    };
+    anchor.addEventListener('click', activate);
+    anchor.addEventListener('keydown', onKeyDown);
+    disposers.push(() => {
+        anchor.removeEventListener('click', activate);
+        anchor.removeEventListener('keydown', onKeyDown);
+    });
+    return true;
+}

package/dist/viewers/markdown/index.js

@@ -1,5 +1,6 @@
 import { ALLOWED_LINK_SCHEMES } from '../../host/index.js';
 import { parseMarkdown } from '../../parsers/markdown/index.js';
+import { bindFragmentAnchor, classifyAnchorTarget } from '../anchors.js';
 import { MountAbortedError, VIEWER_ROOT_CLASS } from '../types.js';
 import { createMarkdownController } from './controller.js';
 import { maskMathSegments, mathSegmentLiteral } from './math.js';
@@ -156,21 +157,18 @@ export async function mountMarkdownViewer(input, container, ctx, deps, options =
         preview.querySelectorAll('a').forEach(anchor => {
             const href = anchor.getAttribute('href') ?? '';
             anchor.removeAttribute('href');
-            if (href.startsWith('#')) {
-                anchor.setAttribute('href', href);
+            const target = classifyAnchorTarget(href);
+            // Restoring `href` would not scroll anything under the default shadow
+            // isolation, where document-level fragment lookup cannot see the target.
+            if (target.kind === 'fragment' && bindFragmentAnchor(anchor, target.name, preview, preview, disposers))
                 return;
-            }
-            try {
-                const url = new URL(href);
-                if (!ALLOWED_LINK_SCHEMES.includes(url.protocol) || !ctx.navigation)
-                    throw new Error('blocked');
-                anchor.setAttribute('role', 'link');
-                anchor.tabIndex = 0;
-                on(anchor, 'click', (() => void ctx.navigation.openExternalUrl(href)));
-            }
-            catch {
+            if (target.kind !== 'absolute' || !ALLOWED_LINK_SCHEMES.includes(target.url.protocol) || !ctx.navigation) {
                 anchor.setAttribute('aria-disabled', 'true');
+                return;
             }
+            anchor.setAttribute('role', 'link');
+            anchor.tabIndex = 0;
+            on(anchor, 'click', (() => void ctx.navigation.openExternalUrl(href)));
         });
         preview.querySelectorAll('img').forEach(image => {
             const path = image.getAttribute('src') ?? '';
@@ -312,7 +310,22 @@ export async function mountMarkdownViewer(input, container, ctx, deps, options =
             const holder = new DOMParser().parseFromString(sanitizedHtml, 'text/html');
             while (holder.body.firstChild)
                 preview.append(holder.body.firstChild);
-            preview.querySelectorAll('h1,h2,h3,h4,h5,h6').forEach((heading, index) => heading.id = `heading-${index}`);
+            // Every heading gets a stable id, but a slug the renderer already
+            // emitted wins: in-document `#slug` links are written against those.
+            // These ids are the preview's own; MarkdownHeading.id from the parser
+            // is a source-order handle and is not expected to match them.
+            const takenIds = new Set([...preview.querySelectorAll('[id]')].map(node => node.id));
+            preview.querySelectorAll('h1,h2,h3,h4,h5,h6').forEach((heading, index) => {
+                if (heading.id)
+                    return;
+                // A renderer slug can itself be `heading-2`; duplicate ids would send
+                // `#heading-2` to whichever element comes first in document order.
+                let id = `heading-${index}`;
+                for (let suffix = 1; takenIds.has(id); suffix++)
+                    id = `heading-${index}-${suffix}`;
+                heading.id = id;
+                takenIds.add(id);
+            });
             hardenContent(version);
             await renderEnhancements(version);
             if (disposed || version !== renderVersion)

package/dist/viewers/pdf/index.js

@@ -1160,6 +1160,10 @@ export async function mountPdfViewer(input, container, ctx, deps, options = {})
     function setMarkupListOpen(open) {
         markupListOpen = open;
         markupList.classList.toggle('is-open', open);
+        // The Annotations panel is a left sidebar that sits directly under the
+        // thumbnail toggle; hide the toggle while it is open so the two do not
+        // overlap.
+        thumbsToggleBtn.hidden = open;
         if (open)
             renderMarkupList();
     }

package/dist/viewers/proto/index.d.ts

@@ -1,4 +1,4 @@
-import type { ClipboardService, HostContext } from '../../host/index.js';
+import type { ClipboardService, FileSaveService, FileWritebackService, HostContext } from '../../host/index.js';
 import { type MountOptions, type ViewerHandle, type ViewerInput } from '../types.js';
 export { protoViewerCss } from './styles.js';
 export { parseProto } from '../../parsers/proto/index.js';
@@ -8,10 +8,12 @@ export declare const PROTO_VIEWER_META: {
     extensions: string[];
     priority: number;
     requiredServices: readonly [];
-    optionalServices: readonly ["clipboard"];
+    optionalServices: readonly ["clipboard", "save", "writeback"];
     inputOwnership: "borrows";
 };
 export type ProtoViewerContext = HostContext & {
     clipboard?: ClipboardService;
+    save?: FileSaveService;
+    writeback?: FileWritebackService;
 };
 export declare function mountProtoViewer(input: ViewerInput, container: HTMLElement, ctx: ProtoViewerContext, options?: MountOptions): Promise<ViewerHandle>;

package/dist/viewers/proto/index.js

@@ -3,7 +3,7 @@ import { MountAbortedError, VIEWER_ROOT_CLASS } from '../types.js';
 import { protoViewerCss } from './styles.js';
 export { protoViewerCss } from './styles.js';
 export { parseProto } from '../../parsers/proto/index.js';
-export const PROTO_VIEWER_META = { id: 'proto', displayNameKey: 'proto.title', extensions: ['proto'], priority: 10, requiredServices: [], optionalServices: ['clipboard'], inputOwnership: 'borrows' };
+export const PROTO_VIEWER_META = { id: 'proto', displayNameKey: 'proto.title', extensions: ['proto'], priority: 10, requiredServices: [], optionalServices: ['clipboard', 'save', 'writeback'], inputOwnership: 'borrows' };
 const PROTO_KEYWORDS = new Set(['syntax', 'package', 'import', 'public', 'weak', 'option', 'message', 'enum', 'service', 'rpc', 'returns', 'stream', 'repeated', 'optional', 'required', 'oneof', 'map', 'reserved', 'extend', 'extensions', 'to', 'max', 'group', 'default']);
 const PROTO_TYPES = new Set(['double', 'float', 'int32', 'int64', 'uint32', 'uint64', 'sint32', 'sint64', 'fixed32', 'fixed64', 'sfixed32', 'sfixed64', 'bool', 'string', 'bytes']);
 const PROTO_LITERALS = new Set(['true', 'false']);
@@ -76,7 +76,7 @@ export async function mountProtoViewer(input, container, ctx, options = {}) {
     if (options.signal?.aborted)
         throw new MountAbortedError();
     const source = new TextDecoder().decode(input.data);
-    const model = parseProto(source, input.fileName);
+    let model = parseProto(source, input.fileName);
     const t = ctx.i18n.t.bind(ctx.i18n);
     let root;
     if ((options.styleIsolation ?? 'shadow') === 'shadow' && typeof container.attachShadow === 'function') {
@@ -99,7 +99,9 @@ export async function mountProtoViewer(input, container, ctx, options = {}) {
     const onPanel = (node, type, listener) => listen(panelDisposers, node, type, listener);
     const frame = el('div', 'omni-proto');
     const header = el('header', 'omni-proto__header');
-    header.append(el('strong', 'omni-proto__title', input.fileName), el('span', 'omni-proto__summary', t('proto.summary', { syntax: model.syntax || 'proto', package: model.packageName || t('proto.noPackage'), messages: model.stats.messages, services: model.stats.services })));
+    const summaryText = () => t('proto.summary', { syntax: model.syntax || 'proto', package: model.packageName || t('proto.noPackage'), messages: model.stats.messages, services: model.stats.services });
+    const summary = el('span', 'omni-proto__summary', summaryText());
+    header.append(el('strong', 'omni-proto__title', input.fileName), summary);
     const toolbar = el('div', 'omni-proto__toolbar');
     const search = el('input', 'omni-proto__search');
     search.type = 'search';
@@ -113,18 +115,34 @@ export async function mountProtoViewer(input, container, ctx, options = {}) {
     copy.type = 'button';
     copy.disabled = !ctx.clipboard;
     copy.title = ctx.clipboard ? '' : t('common.noClipboard');
-    toolbar.append(copy);
-    const sourceView = el('pre', 'omni-proto__source');
-    let inBlock = false;
-    source.replace(/\r\n?|\n/g, '\n').split('\n').forEach((text, i) => { const line = el('span', 'omni-proto__line'); line.dataset.line = String(i + 1); const result = tokenizeProtoLine(text, inBlock); inBlock = result.inBlock; if (!result.tokens.length)
+    const save = el('button', undefined, t('json.save'));
+    save.type = 'button';
+    const saveAs = el('button', undefined, t('json.saveAs'));
+    saveAs.type = 'button';
+    const status = el('span', 'omni-proto__status');
+    status.setAttribute('aria-live', 'polite');
+    toolbar.append(copy, save, saveAs, status);
+    const highlight = el('pre', 'omni-proto__highlight');
+    const highlightSource = (text) => { highlight.replaceChildren(); let inBlock = false; text.replace(/\r\n?|\n/g, '\n').split('\n').forEach((lineText, i) => { const line = el('span', 'omni-proto__line'); line.dataset.line = String(i + 1); const result = tokenizeProtoLine(lineText, inBlock); inBlock = result.inBlock; if (!result.tokens.length)
         line.textContent = ' ';
     else
-        result.tokens.forEach(token => line.append(token.cls ? el('span', `omni-proto__tok--${token.cls}`, token.text) : document.createTextNode(token.text))); sourceView.append(line); });
+        result.tokens.forEach(token => line.append(token.cls ? el('span', `omni-proto__tok--${token.cls}`, token.text) : document.createTextNode(token.text))); highlight.append(line); }); };
+    const editor = el('textarea', 'omni-proto__editor');
+    editor.spellcheck = false;
+    editor.value = source;
+    editor.setAttribute('aria-label', t('json.editor.title'));
+    let savedText = source;
+    let dirty = false;
+    const sourceView = el('div', 'omni-proto__source');
+    sourceView.append(highlight, editor);
+    const syncScroll = () => { highlight.scrollTop = editor.scrollTop; highlight.scrollLeft = editor.scrollLeft; };
+    on(editor, 'scroll', syncScroll);
+    highlightSource(source);
     const panel = el('section', 'omni-proto__panel');
     const workspace = el('main', 'omni-proto__workspace');
     workspace.append(sourceView, panel);
     const reveal = (line) => { if (!line)
-        return; sourceView.querySelectorAll('.is-selected').forEach(node => node.classList.remove('is-selected')); const target = sourceView.querySelector(`[data-line="${line}"]`); target?.classList.add('is-selected'); target?.scrollIntoView({ block: 'center' }); };
+        return; highlight.querySelectorAll('.is-selected').forEach(node => node.classList.remove('is-selected')); const target = highlight.querySelector(`[data-line="${line}"]`); target?.classList.add('is-selected'); const lineHeight = parseFloat(getComputedStyle(editor).lineHeight) || 18; editor.scrollTop = Math.max(0, (line - 1) * lineHeight - editor.clientHeight / 2); syncScroll(); };
     const row = (badge, text, line) => { const node = el('div', 'omni-proto__row'); node.append(el('span', 'omni-proto__badge', badge), el('span', 'omni-proto__code', text)); node.dataset.search = `${badge} ${text}`.toLowerCase(); if (line) {
         node.dataset.line = String(line);
         onPanel(node, 'click', () => reveal(line));
@@ -229,16 +247,46 @@ export async function mountProtoViewer(input, container, ctx, options = {}) {
         if (!panel.children.length)
             panel.append(el('div', 'omni-proto__empty', t('proto.noDeclarations')));
     };
+    const warning = el('div', 'omni-proto__warning');
+    const updateWarning = () => { warning.textContent = model.warnings.join(' · '); warning.style.display = model.warnings.length ? '' : 'none'; };
+    const updateSaveState = () => { save.disabled = !ctx.writeback || !dirty; save.title = ctx.writeback ? '' : t('common.noWriteback'); saveAs.disabled = !ctx.save; saveAs.title = ctx.save ? '' : t('common.noFileSave'); };
+    const bytes = () => new TextEncoder().encode(editor.value);
+    // Heavy pass: full re-parse + panel rebuild. Debounced (below) so typing in
+    // a large schema stays responsive.
+    const reparse = () => { model = parseProto(editor.value, input.fileName); summary.textContent = summaryText(); updateWarning(); render(); };
+    let reparseTimer;
+    // Eager pass on every keystroke: cheap highlight + dirty/save state so the
+    // caret feedback and Save button react immediately; the parse/render is
+    // deferred to the debounced reparse.
+    const onEdit = () => { highlightSource(editor.value); dirty = editor.value !== savedText; status.textContent = ''; updateSaveState(); if (reparseTimer)
+        clearTimeout(reparseTimer); reparseTimer = setTimeout(() => { reparseTimer = undefined; reparse(); }, 200); };
+    // Snapshot the text before the async write: reading editor.value again in
+    // the resolve handler would mark whatever the user typed meanwhile as saved.
+    const doSave = () => { if (!ctx.writeback)
+        return; const text = editor.value; void ctx.writeback.write(new TextEncoder().encode(text)).then(() => { savedText = text; dirty = editor.value !== text; status.textContent = t('common.savedToOriginal'); updateSaveState(); }).catch(error => { ctx.logger.log('error', `proto save failed: ${String(error)}`); status.textContent = t('common.saveFailed'); }); };
+    const doSaveAs = () => { if (!ctx.save)
+        return; void Promise.resolve(ctx.save.saveFile(input.fileName, bytes(), 'text/plain')).then(() => { status.textContent = t('common.saved', { name: input.fileName }); }).catch(error => { ctx.logger.log('error', `proto saveAs failed: ${String(error)}`); status.textContent = t('common.saveFailed'); }); };
     panelDefs.forEach(([key, labelKey]) => { const button = el('button', undefined, t(labelKey)); button.type = 'button'; button.dataset.panel = key; button.setAttribute('aria-pressed', String(key === active)); on(button, 'click', () => { active = key; toolbar.querySelectorAll('[data-panel]').forEach(node => node.setAttribute('aria-pressed', String(node.dataset.panel === active))); render(); }); toolbar.insertBefore(button, copy); });
     on(search, 'input', () => applySearch(search.value.trim().toLowerCase()));
     on(copy, 'click', () => { if (ctx.clipboard)
         void ctx.clipboard.writeText(panel.textContent ?? '').catch(error => ctx.logger.log('error', `proto copy failed: ${String(error)}`)); });
-    frame.append(header, toolbar, workspace);
-    if (model.warnings.length)
-        frame.append(el('div', 'omni-proto__warning', model.warnings.join(' · ')));
+    on(editor, 'input', onEdit);
+    on(save, 'click', doSave);
+    on(saveAs, 'click', doSaveAs);
+    on(editor, 'keydown', event => { const keyboard = event; if ((keyboard.metaKey || keyboard.ctrlKey) && keyboard.key === 's') {
+        keyboard.preventDefault();
+        if (ctx.writeback)
+            doSave();
+        else
+            doSaveAs();
+    } });
+    updateWarning();
+    updateSaveState();
+    frame.append(header, toolbar, workspace, warning);
     root.append(frame);
     render();
-    return { dispose() { panelDisposers.splice(0).forEach(dispose => dispose()); disposers.splice(0).forEach(dispose => dispose()); frame.remove(); if (root instanceof ShadowRoot)
+    return { dispose() { if (reparseTimer)
+            clearTimeout(reparseTimer); panelDisposers.splice(0).forEach(dispose => dispose()); disposers.splice(0).forEach(dispose => dispose()); frame.remove(); if (root instanceof ShadowRoot)
             root.replaceChildren();
         else
             container.classList.remove(VIEWER_ROOT_CLASS, 'omni-viewer--proto'); } };

package/dist/viewers/proto/styles.d.ts

@@ -1 +1 @@
-export declare const protoViewerCss = "\n:host{display:block;height:100%;color:var(--omni-fg,#d4d4d4);background:var(--omni-bg,#1e1e1e);font:13px system-ui,sans-serif}.omni-proto{display:flex;flex-direction:column;height:100%;min-height:420px}.omni-proto__header,.omni-proto__toolbar{display:flex;align-items:center;gap:8px;padding:10px 14px;border-bottom:1px solid var(--omni-border,#3c3c3c);flex-wrap:wrap}.omni-proto__title{font-size:16px;font-weight:650;margin-right:auto}.omni-proto__summary,.omni-proto__muted{color:var(--omni-muted,#999)}.omni-proto button,.omni-proto input,.omni-proto select,.omni-proto textarea{font:inherit;color:inherit;background:var(--omni-control,#2d2d2d);border:1px solid var(--omni-border,#555);border-radius:4px;padding:5px 9px}.omni-proto button{cursor:pointer}.omni-proto button[aria-pressed=true]{background:var(--omni-accent,#0e639c);border-color:var(--omni-accent,#0e639c);color:#fff}.omni-proto__search{min-width:220px}.omni-proto__workspace{display:grid;grid-template-columns:minmax(280px,42%) 1fr;min-height:0;flex:1}.omni-proto__source,.omni-proto__panel{overflow:auto;min-width:0}.omni-proto__source{margin:0;padding:12px 0;border-right:1px solid var(--omni-border,#3c3c3c);font:12px/1.55 ui-monospace,monospace;counter-reset:line}.omni-proto__line{display:block;padding:0 12px 0 52px;white-space:pre;position:relative}.omni-proto__line:before{counter-increment:line;content:counter(line);position:absolute;left:8px;width:34px;text-align:right;color:var(--omni-muted,#777)}.omni-proto__line.is-selected{background:color-mix(in srgb,var(--omni-accent,#0e639c) 30%,transparent)}.omni-proto__tok--kw{color:var(--omni-syntax-keyword,#569cd6)}.omni-proto__tok--type{color:var(--omni-syntax-type,#4ec9b0)}.omni-proto__tok--str{color:var(--omni-syntax-string,#ce9178)}.omni-proto__tok--num{color:var(--omni-syntax-number,#b5cea8)}.omni-proto__tok--comment{color:var(--omni-syntax-comment,#6a9955);font-style:italic}.omni-proto__tok--punct{color:var(--omni-syntax-punct,#808080)}.omni-proto__panel{padding:12px}.omni-proto__row,.omni-proto__card{border:1px solid var(--omni-border,#3c3c3c);border-radius:5px;padding:8px;margin-bottom:7px}.omni-proto__row{display:flex;gap:8px;align-items:baseline}.omni-proto__row[data-line]{cursor:pointer}.omni-proto__badge{font-size:11px;color:var(--omni-accent-fg,#75beff);min-width:58px}.omni-proto__code{font-family:ui-monospace,monospace}.omni-proto__children{margin-left:18px}.omni-proto__baseline{box-sizing:border-box;width:100%;min-height:180px;display:block;margin-bottom:8px;font-family:ui-monospace,monospace}.omni-proto__warning{padding:8px 14px;color:#f0c674;border-top:1px solid var(--omni-border,#3c3c3c)}.omni-proto__empty{color:var(--omni-muted,#999);padding:20px;text-align:center}@media(max-width:760px){.omni-proto__workspace{grid-template-columns:1fr;grid-template-rows:minmax(180px,40%) 1fr}.omni-proto__source{border-right:0;border-bottom:1px solid var(--omni-border,#3c3c3c)}}";
+export declare const protoViewerCss = "\n:host{display:block;height:100%;color:var(--omni-fg,#d4d4d4);background:var(--omni-bg,#1e1e1e);font:13px system-ui,sans-serif}.omni-proto{display:flex;flex-direction:column;height:100%;min-height:420px}.omni-proto__header,.omni-proto__toolbar{display:flex;align-items:center;gap:8px;padding:10px 14px;border-bottom:1px solid var(--omni-border,#3c3c3c);flex-wrap:wrap}.omni-proto__title{font-size:16px;font-weight:650;margin-right:auto}.omni-proto__summary,.omni-proto__muted{color:var(--omni-muted,#999)}.omni-proto button,.omni-proto input,.omni-proto select,.omni-proto textarea{font:inherit;color:inherit;background:var(--omni-control,#2d2d2d);border:1px solid var(--omni-border,#555);border-radius:4px;padding:5px 9px}.omni-proto button{cursor:pointer}.omni-proto button[aria-pressed=true]{background:var(--omni-accent,#0e639c);border-color:var(--omni-accent,#0e639c);color:#fff}.omni-proto__search{min-width:220px}.omni-proto__workspace{display:grid;grid-template-columns:minmax(280px,42%) 1fr;min-height:0;flex:1}.omni-proto__panel{overflow:auto;min-width:0}.omni-proto__source{position:relative;overflow:hidden;min-width:0;border-right:1px solid var(--omni-border,#3c3c3c)}.omni-proto__highlight{position:absolute;inset:0;margin:0;padding:12px 0;overflow:auto;pointer-events:none;font:12px/1.55 ui-monospace,monospace;counter-reset:line;white-space:pre;color:inherit}.omni-proto textarea.omni-proto__editor{position:absolute;inset:0;box-sizing:border-box;margin:0;padding:12px 12px 12px 52px;background:transparent;border:0;border-radius:0;outline:none;resize:none;overflow:auto;font:12px/1.55 ui-monospace,monospace;white-space:pre;color:transparent;caret-color:var(--omni-fg,#d4d4d4);-webkit-text-fill-color:transparent;z-index:1}.omni-proto__line{display:block;padding:0 12px 0 52px;white-space:pre;position:relative}.omni-proto__line:before{counter-increment:line;content:counter(line);position:absolute;left:8px;width:34px;text-align:right;color:var(--omni-muted,#777)}.omni-proto__line.is-selected{background:color-mix(in srgb,var(--omni-accent,#0e639c) 30%,transparent)}.omni-proto__tok--kw{color:var(--omni-syntax-keyword,#569cd6)}.omni-proto__tok--type{color:var(--omni-syntax-type,#4ec9b0)}.omni-proto__tok--str{color:var(--omni-syntax-string,#ce9178)}.omni-proto__tok--num{color:var(--omni-syntax-number,#b5cea8)}.omni-proto__tok--comment{color:var(--omni-syntax-comment,#6a9955);font-style:italic}.omni-proto__tok--punct{color:var(--omni-syntax-punct,#808080)}.omni-proto__panel{padding:12px}.omni-proto__row,.omni-proto__card{border:1px solid var(--omni-border,#3c3c3c);border-radius:5px;padding:8px;margin-bottom:7px}.omni-proto__row{display:flex;gap:8px;align-items:baseline}.omni-proto__row[data-line]{cursor:pointer}.omni-proto__badge{font-size:11px;color:var(--omni-accent-fg,#75beff);min-width:58px}.omni-proto__code{font-family:ui-monospace,monospace}.omni-proto__children{margin-left:18px}.omni-proto__baseline{box-sizing:border-box;width:100%;min-height:180px;display:block;margin-bottom:8px;font-family:ui-monospace,monospace}.omni-proto__status{margin-left:auto;color:var(--omni-muted,#999);font-size:12px}.omni-proto__warning{padding:8px 14px;color:#f0c674;border-top:1px solid var(--omni-border,#3c3c3c)}.omni-proto__empty{color:var(--omni-muted,#999);padding:20px;text-align:center}@media(max-width:760px){.omni-proto__workspace{grid-template-columns:1fr;grid-template-rows:minmax(180px,40%) 1fr}.omni-proto__source{border-right:0;border-bottom:1px solid var(--omni-border,#3c3c3c)}}";

package/dist/viewers/proto/styles.js

@@ -1,2 +1,2 @@
 export const protoViewerCss = `
-:host{display:block;height:100%;color:var(--omni-fg,#d4d4d4);background:var(--omni-bg,#1e1e1e);font:13px system-ui,sans-serif}.omni-proto{display:flex;flex-direction:column;height:100%;min-height:420px}.omni-proto__header,.omni-proto__toolbar{display:flex;align-items:center;gap:8px;padding:10px 14px;border-bottom:1px solid var(--omni-border,#3c3c3c);flex-wrap:wrap}.omni-proto__title{font-size:16px;font-weight:650;margin-right:auto}.omni-proto__summary,.omni-proto__muted{color:var(--omni-muted,#999)}.omni-proto button,.omni-proto input,.omni-proto select,.omni-proto textarea{font:inherit;color:inherit;background:var(--omni-control,#2d2d2d);border:1px solid var(--omni-border,#555);border-radius:4px;padding:5px 9px}.omni-proto button{cursor:pointer}.omni-proto button[aria-pressed=true]{background:var(--omni-accent,#0e639c);border-color:var(--omni-accent,#0e639c);color:#fff}.omni-proto__search{min-width:220px}.omni-proto__workspace{display:grid;grid-template-columns:minmax(280px,42%) 1fr;min-height:0;flex:1}.omni-proto__source,.omni-proto__panel{overflow:auto;min-width:0}.omni-proto__source{margin:0;padding:12px 0;border-right:1px solid var(--omni-border,#3c3c3c);font:12px/1.55 ui-monospace,monospace;counter-reset:line}.omni-proto__line{display:block;padding:0 12px 0 52px;white-space:pre;position:relative}.omni-proto__line:before{counter-increment:line;content:counter(line);position:absolute;left:8px;width:34px;text-align:right;color:var(--omni-muted,#777)}.omni-proto__line.is-selected{background:color-mix(in srgb,var(--omni-accent,#0e639c) 30%,transparent)}.omni-proto__tok--kw{color:var(--omni-syntax-keyword,#569cd6)}.omni-proto__tok--type{color:var(--omni-syntax-type,#4ec9b0)}.omni-proto__tok--str{color:var(--omni-syntax-string,#ce9178)}.omni-proto__tok--num{color:var(--omni-syntax-number,#b5cea8)}.omni-proto__tok--comment{color:var(--omni-syntax-comment,#6a9955);font-style:italic}.omni-proto__tok--punct{color:var(--omni-syntax-punct,#808080)}.omni-proto__panel{padding:12px}.omni-proto__row,.omni-proto__card{border:1px solid var(--omni-border,#3c3c3c);border-radius:5px;padding:8px;margin-bottom:7px}.omni-proto__row{display:flex;gap:8px;align-items:baseline}.omni-proto__row[data-line]{cursor:pointer}.omni-proto__badge{font-size:11px;color:var(--omni-accent-fg,#75beff);min-width:58px}.omni-proto__code{font-family:ui-monospace,monospace}.omni-proto__children{margin-left:18px}.omni-proto__baseline{box-sizing:border-box;width:100%;min-height:180px;display:block;margin-bottom:8px;font-family:ui-monospace,monospace}.omni-proto__warning{padding:8px 14px;color:#f0c674;border-top:1px solid var(--omni-border,#3c3c3c)}.omni-proto__empty{color:var(--omni-muted,#999);padding:20px;text-align:center}@media(max-width:760px){.omni-proto__workspace{grid-template-columns:1fr;grid-template-rows:minmax(180px,40%) 1fr}.omni-proto__source{border-right:0;border-bottom:1px solid var(--omni-border,#3c3c3c)}}`;
+:host{display:block;height:100%;color:var(--omni-fg,#d4d4d4);background:var(--omni-bg,#1e1e1e);font:13px system-ui,sans-serif}.omni-proto{display:flex;flex-direction:column;height:100%;min-height:420px}.omni-proto__header,.omni-proto__toolbar{display:flex;align-items:center;gap:8px;padding:10px 14px;border-bottom:1px solid var(--omni-border,#3c3c3c);flex-wrap:wrap}.omni-proto__title{font-size:16px;font-weight:650;margin-right:auto}.omni-proto__summary,.omni-proto__muted{color:var(--omni-muted,#999)}.omni-proto button,.omni-proto input,.omni-proto select,.omni-proto textarea{font:inherit;color:inherit;background:var(--omni-control,#2d2d2d);border:1px solid var(--omni-border,#555);border-radius:4px;padding:5px 9px}.omni-proto button{cursor:pointer}.omni-proto button[aria-pressed=true]{background:var(--omni-accent,#0e639c);border-color:var(--omni-accent,#0e639c);color:#fff}.omni-proto__search{min-width:220px}.omni-proto__workspace{display:grid;grid-template-columns:minmax(280px,42%) 1fr;min-height:0;flex:1}.omni-proto__panel{overflow:auto;min-width:0}.omni-proto__source{position:relative;overflow:hidden;min-width:0;border-right:1px solid var(--omni-border,#3c3c3c)}.omni-proto__highlight{position:absolute;inset:0;margin:0;padding:12px 0;overflow:auto;pointer-events:none;font:12px/1.55 ui-monospace,monospace;counter-reset:line;white-space:pre;color:inherit}.omni-proto textarea.omni-proto__editor{position:absolute;inset:0;box-sizing:border-box;margin:0;padding:12px 12px 12px 52px;background:transparent;border:0;border-radius:0;outline:none;resize:none;overflow:auto;font:12px/1.55 ui-monospace,monospace;white-space:pre;color:transparent;caret-color:var(--omni-fg,#d4d4d4);-webkit-text-fill-color:transparent;z-index:1}.omni-proto__line{display:block;padding:0 12px 0 52px;white-space:pre;position:relative}.omni-proto__line:before{counter-increment:line;content:counter(line);position:absolute;left:8px;width:34px;text-align:right;color:var(--omni-muted,#777)}.omni-proto__line.is-selected{background:color-mix(in srgb,var(--omni-accent,#0e639c) 30%,transparent)}.omni-proto__tok--kw{color:var(--omni-syntax-keyword,#569cd6)}.omni-proto__tok--type{color:var(--omni-syntax-type,#4ec9b0)}.omni-proto__tok--str{color:var(--omni-syntax-string,#ce9178)}.omni-proto__tok--num{color:var(--omni-syntax-number,#b5cea8)}.omni-proto__tok--comment{color:var(--omni-syntax-comment,#6a9955);font-style:italic}.omni-proto__tok--punct{color:var(--omni-syntax-punct,#808080)}.omni-proto__panel{padding:12px}.omni-proto__row,.omni-proto__card{border:1px solid var(--omni-border,#3c3c3c);border-radius:5px;padding:8px;margin-bottom:7px}.omni-proto__row{display:flex;gap:8px;align-items:baseline}.omni-proto__row[data-line]{cursor:pointer}.omni-proto__badge{font-size:11px;color:var(--omni-accent-fg,#75beff);min-width:58px}.omni-proto__code{font-family:ui-monospace,monospace}.omni-proto__children{margin-left:18px}.omni-proto__baseline{box-sizing:border-box;width:100%;min-height:180px;display:block;margin-bottom:8px;font-family:ui-monospace,monospace}.omni-proto__status{margin-left:auto;color:var(--omni-muted,#999);font-size:12px}.omni-proto__warning{padding:8px 14px;color:#f0c674;border-top:1px solid var(--omni-border,#3c3c3c)}.omni-proto__empty{color:var(--omni-muted,#999);padding:20px;text-align:center}@media(max-width:760px){.omni-proto__workspace{grid-template-columns:1fr;grid-template-rows:minmax(180px,40%) 1fr}.omni-proto__source{border-right:0;border-bottom:1px solid var(--omni-border,#3c3c3c)}}`;

package/dist/viewers/word/docx-preprocess.js

@@ -141,7 +141,7 @@ export async function preprocessDocx(data, zipModule, sheetOrOptions, legacyMaxD
                 messageKey: 'diag.word.embedded-limit',
                 ...(relation ? { location: relation.target } : {})
             });
-            output += '<w:r/>';
+            // Dropping the drawing outright: an empty run here would nest inside one.
             changed = true;
             continue;
         }
@@ -157,7 +157,7 @@ export async function preprocessDocx(data, zipModule, sheetOrOptions, legacyMaxD
         }
         const token = `__OMNI_WORD_CHART_${index++}__`;
         placeholders.push({ token, kind: 'chart', chart });
-        output += `<w:r><w:t xml:space="preserve">${token}</w:t></w:r>`;
+        output += runInnerText(token);
         changed = true;
     }
     documentXml = output + documentXml.slice(cursor);
@@ -187,7 +187,7 @@ export async function preprocessDocx(data, zipModule, sheetOrOptions, legacyMaxD
                 messageKey: 'diag.word.embedded-limit',
                 ...(relation ? { location: relation.target } : {})
             });
-            output += '<w:r/>';
+            // Dropping the object outright: an empty run here would nest inside one.
             changed = true;
             continue;
         }
@@ -244,7 +244,7 @@ export async function preprocessDocx(data, zipModule, sheetOrOptions, legacyMaxD
                 .map((row) => row.slice(0, 10).map((cell) => String(cell ?? '')));
             const token = `__OMNI_WORD_SHEET_${index++}__`;
             placeholders.push({ token, kind: 'sheet', title: name, rows });
-            output += `<w:r><w:t xml:space="preserve">${token}</w:t></w:r>`;
+            output += runInnerText(token);
             changed = true;
         }
         catch (error) {
@@ -273,6 +273,16 @@ export async function preprocessDocx(data, zipModule, sheetOrOptions, legacyMaxD
     }
     return { data, placeholders, diagnostics, partial };
 }
+/**
+ * Placeholder markup substituted for a `w:drawing`/`w:object`.
+ *
+ * Both are run *inner* content, so the replacement is a bare `w:t` — wrapping it
+ * in another `w:r` would nest a run inside a run, which docx-preview's run parser
+ * does not recognise and silently drops along with the placeholder token.
+ */
+function runInnerText(token) {
+    return `<w:t xml:space="preserve">${token}</w:t>`;
+}
 export function parseChart(xml) {
     const sourceType = xml.match(/<c:([A-Za-z0-9]+Chart)\b/)?.[1]
         ?? (/<c:ser>/i.test(xml) ? 'barChart' : '');

package/dist/viewers/word/index.js

@@ -1,4 +1,5 @@
 import { ALLOWED_LINK_SCHEMES } from '../../host/index.js';
+import { bindFragmentAnchor, classifyAnchorTarget } from '../anchors.js';
 import { hasEmbeddedDocWorkbook, parseDocBinaryHtml } from '../../parsers/doc-binary/index.js';
 import { MountAbortedError, VIEWER_ROOT_CLASS } from '../types.js';
 import { createWordController } from './controller.js';
@@ -349,7 +350,7 @@ export async function mountWordViewer(input, container, ctx, deps = {}, options
             paginateLegacyDocument(content);
         }
         ensureActive();
-        const securityDiagnostics = secureWordDom(content, ctx, disposers);
+        const securityDiagnostics = secureWordDom(content, ctx, disposers, viewport);
         if (securityDiagnostics.length) {
             diagnostics.push(...securityDiagnostics);
             partial = true;
@@ -440,7 +441,7 @@ export async function mountWordViewer(input, container, ctx, deps = {}, options
                 messageKey: 'diag.word.fallback-renderer-used',
                 recoverable: true
             });
-            diagnostics.push(...secureWordDom(content, ctx, disposers));
+            diagnostics.push(...secureWordDom(content, ctx, disposers, viewport));
             emitStatus({
                 state: 'ready',
                 format,
@@ -770,7 +771,7 @@ function pieColors(chart) {
     const first = chart.series[0]?.color;
     return first ? [first, ...palette.filter((color) => color !== first)] : palette;
 }
-function secureWordDom(root, ctx, disposers) {
+function secureWordDom(root, ctx, disposers, viewport) {
     const diagnostics = [];
     root.querySelectorAll('img,source,video,audio').forEach((node) => {
         for (const attr of ['src', 'srcset']) {
@@ -791,13 +792,14 @@ function secureWordDom(root, ctx, disposers) {
         const href = anchor.getAttribute('href') ?? '';
         anchor.removeAttribute('href');
         anchor.removeAttribute('target');
-        let allowed = false;
-        try {
-            allowed = ALLOWED_LINK_SCHEMES.includes(new URL(href).protocol);
-        }
-        catch {
-            allowed = false;
-        }
+        const target = classifyAnchorTarget(href);
+        // Bookmarks, table-of-contents entries and note back-references stay usable
+        // without a navigation service: they never leave the document.
+        if (target.kind === 'fragment' &&
+            bindFragmentAnchor(anchor, target.name, root, viewport, disposers))
+            return;
+        const allowed = target.kind === 'absolute' &&
+            ALLOWED_LINK_SCHEMES.includes(target.url.protocol);
         if (!allowed || !ctx.navigation) {
             anchor.setAttribute('aria-disabled', 'true');
             if (/^(?:https?:)?\/\//i.test(href)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omni-viewer-core",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Shared parsing + rendering core for Omni Viewer (vscode / chrome / obsidian / web)",
   "type": "module",
   "license": "MIT",

package/dist/viewers/hwp/self-loading.d.ts

@@ -1,2 +0,0 @@
-import type { HwpViewerDeps } from './index.js';
-export declare function loadHwpViewerDeps(): Promise<HwpViewerDeps>;

package/dist/viewers/hwp/self-loading.js

@@ -1,6 +0,0 @@
-export async function loadHwpViewerDeps() {
-    const imported = await import('@rhwp/core');
-    if (typeof imported.default === 'function')
-        await imported.default();
-    return { loadRhwp: async () => imported };
-}