ooxml-ui 0.29.3 → 0.30.0

package/dist/edit-worker.js

@@ -4,6 +4,7 @@ import { editVsdx, parseVsdx } from 'ooxml-core/visio';
 // src/visio/edit-worker.ts
 var worker = self;
 worker.onmessage = async (event) => {
+  if (event.origin && event.origin !== self.location.origin) return;
   try {
     const result = await editVsdx(event.data.bytes, event.data.edits);
     const document = await parseVsdx(result.bytes, { metafileConverter: convertMetafileToSvgTree });

package/dist/parse-worker.js

@@ -4,6 +4,7 @@ import { loadVisio } from 'ooxml-core/visio';
 // src/visio/parse-worker.ts
 var worker = self;
 worker.onmessage = async (event) => {
+  if (event.origin && event.origin !== self.location.origin) return;
   try {
     const document = await loadVisio(event.data, { metafileConverter: convertMetafileToSvgTree });
     worker.postMessage({ ok: true, document });

package/dist/suite/index.d.ts

@@ -0,0 +1 @@
+export * from './tab-state.js';

package/dist/suite/tab-state.d.ts

@@ -0,0 +1,47 @@
+/**
+ * The suite's tab model: a pure list of tabs and which one is active, with no DOM and no host
+ * assumptions, so the web shell and the desktop shell drive the same code. Every tab is one app
+ * (and the framework demo or editor it runs on); the same app may be open in several tabs. Home is
+ * not a tab: it is the state where nothing is active.
+ */
+export interface SuiteTab {
+    readonly id: string;
+    readonly app: string;
+    readonly framework: string;
+    /** Pinned tabs sit first, show only their icon and cannot be closed by accident. */
+    readonly pinned: boolean;
+}
+export interface SuiteTabState {
+    readonly tabs: readonly SuiteTab[];
+    /** The active tab's id, or null for Home. */
+    readonly active: string | null;
+}
+export declare const EMPTY_SUITE_STATE: SuiteTabState;
+/** Read a persisted state, dropping anything malformed, duplicated or pointing at a missing tab. */
+export declare function parseSuiteState(value: unknown): SuiteTabState;
+export declare function openSuiteTab(state: SuiteTabState, app: string, framework: string, id: string): SuiteTabState;
+/** Activate a tab; an unknown id or null means Home. */
+export declare function activateSuiteTab(state: SuiteTabState, id: string | null): SuiteTabState;
+/**
+ * Close a tab. Closing the active one activates its right neighbour, else the left one, else
+ * Home, as browser tab strips do.
+ */
+export declare function closeSuiteTab(state: SuiteTabState, id: string): SuiteTabState;
+export declare function setSuiteTabFramework(state: SuiteTabState, id: string, framework: string): SuiteTabState;
+/** Titles for the strip: the app name, numbered from the second tab of the same app on. */
+export declare function suiteTabTitles(tabs: readonly SuiteTab[], nameOf: (app: string) => string): Map<string, string>;
+/** An id no live tab uses. */
+export declare function newSuiteTabId(tabs: readonly SuiteTab[]): string;
+/** Stable partition: pinned tabs first, every group keeping its order. */
+export declare function pinnedFirst(tabs: readonly SuiteTab[]): SuiteTab[];
+/** Pin a tab (it joins the end of the pinned group) or unpin it (it leads the unpinned ones). */
+export declare function pinSuiteTab(state: SuiteTabState, id: string, pinned: boolean): SuiteTabState;
+/**
+ * Move a tab to just before `beforeId` (the end when null). A tab never leaves its group: a
+ * pinned tab stays among the pinned ones and an unpinned tab among the others.
+ */
+export declare function moveSuiteTab(state: SuiteTabState, id: string, beforeId: string | null): SuiteTabState;
+/** Close every tab but this one; pinned tabs stay. */
+export declare function closeOtherSuiteTabs(state: SuiteTabState, id: string): SuiteTabState;
+/** Close the tabs after this one; pinned tabs stay. */
+export declare function closeSuiteTabsToRight(state: SuiteTabState, id: string): SuiteTabState;

package/dist/suite.js

@@ -0,0 +1,90 @@
+// src/suite/tab-state.ts
+var EMPTY_SUITE_STATE = { tabs: [], active: null };
+function parseSuiteState(value) {
+  if (!value || typeof value !== "object") return EMPTY_SUITE_STATE;
+  const raw = value;
+  if (!Array.isArray(raw.tabs)) return EMPTY_SUITE_STATE;
+  const tabs = [];
+  for (const item of raw.tabs) {
+    if (!item || typeof item !== "object") continue;
+    const { id, app, framework, pinned } = item;
+    if (typeof id !== "string" || typeof app !== "string" || typeof framework !== "string")
+      continue;
+    if (tabs.some((tab) => tab.id === id)) continue;
+    tabs.push({ id, app, framework, pinned: pinned === true });
+  }
+  const active = tabs.some((tab) => tab.id === raw.active) ? raw.active : null;
+  return { tabs: pinnedFirst(tabs), active };
+}
+function openSuiteTab(state, app, framework, id) {
+  return { tabs: [...state.tabs, { id, app, framework, pinned: false }], active: id };
+}
+function activateSuiteTab(state, id) {
+  return { tabs: state.tabs, active: id && state.tabs.some((t) => t.id === id) ? id : null };
+}
+function closeSuiteTab(state, id) {
+  const index = state.tabs.findIndex((tab) => tab.id === id);
+  if (index < 0) return state;
+  const tabs = state.tabs.filter((tab) => tab.id !== id);
+  if (state.active !== id) return { tabs, active: state.active };
+  const next = tabs[index] ?? tabs[index - 1];
+  return { tabs, active: next ? next.id : null };
+}
+function setSuiteTabFramework(state, id, framework) {
+  return {
+    tabs: state.tabs.map((tab) => tab.id === id ? { ...tab, framework } : tab),
+    active: state.active
+  };
+}
+function suiteTabTitles(tabs, nameOf) {
+  const seen = /* @__PURE__ */ new Map();
+  const titles = /* @__PURE__ */ new Map();
+  for (const tab of tabs) {
+    const count = (seen.get(tab.app) ?? 0) + 1;
+    seen.set(tab.app, count);
+    titles.set(tab.id, count === 1 ? nameOf(tab.app) : `${nameOf(tab.app)} ${count}`);
+  }
+  return titles;
+}
+function newSuiteTabId(tabs) {
+  let n = tabs.length + 1;
+  while (tabs.some((tab) => tab.id === `t${n}`)) n++;
+  return `t${n}`;
+}
+function pinnedFirst(tabs) {
+  return [...tabs.filter((t) => t.pinned), ...tabs.filter((t) => !t.pinned)];
+}
+function pinSuiteTab(state, id, pinned) {
+  const tab = state.tabs.find((t) => t.id === id);
+  if (!tab || tab.pinned === pinned) return state;
+  const rest = state.tabs.filter((t) => t.id !== id);
+  const moved = { ...tab, pinned };
+  const pinnedCount = rest.filter((t) => t.pinned).length;
+  rest.splice(pinned ? pinnedCount : pinnedCount, 0, moved);
+  return { tabs: rest, active: state.active };
+}
+function moveSuiteTab(state, id, beforeId) {
+  const tab = state.tabs.find((t) => t.id === id);
+  if (!tab || beforeId === id) return state;
+  const rest = state.tabs.filter((t) => t.id !== id);
+  const pinnedCount = rest.filter((t) => t.pinned).length;
+  const wanted = beforeId === null ? rest.length : rest.findIndex((t) => t.id === beforeId);
+  if (wanted < 0) return state;
+  const index = tab.pinned ? Math.min(wanted, pinnedCount) : Math.max(wanted, pinnedCount);
+  rest.splice(index, 0, tab);
+  return { tabs: rest, active: state.active };
+}
+function without(state, keep, anchor) {
+  const tabs = state.tabs.filter(keep);
+  return { tabs, active: tabs.some((t) => t.id === state.active) ? state.active : anchor };
+}
+function closeOtherSuiteTabs(state, id) {
+  return without(state, (t) => t.id === id || t.pinned, id);
+}
+function closeSuiteTabsToRight(state, id) {
+  const at = state.tabs.findIndex((t) => t.id === id);
+  if (at < 0) return state;
+  return without(state, (t, i) => i <= at || t.pinned, id);
+}
+
+export { EMPTY_SUITE_STATE, activateSuiteTab, closeOtherSuiteTabs, closeSuiteTab, closeSuiteTabsToRight, moveSuiteTab, newSuiteTabId, openSuiteTab, parseSuiteState, pinSuiteTab, pinnedFirst, setSuiteTabFramework, suiteTabTitles };

package/dist/xlsx.js

@@ -3711,7 +3711,7 @@ function safeSvg(doc, markup) {
     }
     for (const attribute of [...node.attributes]) {
       const value = attribute.value.trim().toLowerCase();
-      if (/^on/i.test(attribute.name) || value.startsWith("javascript:") || /href$/i.test(attribute.name) && !value.startsWith("#"))
+      if (/^on/i.test(attribute.name) || /^(?:javascript|vbscript|data):/i.test(value.replace(/[\p{Cc}\p{Z}]/gu, "")) || /href$/i.test(attribute.name) && !value.startsWith("#"))
         node.removeAttribute(attribute.name);
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "ooxml-ui",
-	"version": "0.29.3",
+	"version": "0.30.0",
 	"description": "Shared, format-neutral web components and styles for the Office viewers (Word, PowerPoint, Excel)",
 	"keywords": [
 		"custom-elements",
@@ -69,6 +69,11 @@
 			"import": "./dist/teams.js",
 			"default": "./dist/teams.js"
 		},
+		"./suite": {
+			"types": "./dist/suite/index.d.ts",
+			"import": "./dist/suite.js",
+			"default": "./dist/suite.js"
+		},
 		"./docx": {
 			"types": "./dist/docx/index.d.ts",
 			"import": "./dist/docx.js",
@@ -99,9 +104,9 @@
 		"gen:manifest": "node scripts/gen-manifest.mjs"
 	},
 	"dependencies": {
-		"emf-converter": "4.8.9",
+		"emf-converter": "4.8.21",
 		"lit": "^3.3.3",
-		"ooxml-core": "^0.21.2",
+		"ooxml-core": "^0.22.0",
 		"prosemirror-collab": "^1.3.1",
 		"prosemirror-commands": "^1.7.2",
 		"prosemirror-history": "^1.5.1",