rapier-markdown-kit 1.2.6 → 1.2.8

package/dist/kit/render-sanitize.mjs

@@ -1,13 +1,15 @@
 // SPDX-License-Identifier: MIT
 import {typography} from '../spec/md-marks.mjs';
 const RAPIER_SANITIZE_FORBID_TAGS = Object.freeze(['form', 'style', 'dialog', 'template', 'iframe']);
-const RAPIER_SANITIZE_FORBID_ATTR = Object.freeze(['action', 'formaction', 'form', 'for']);
+// Invokers (DOMPurify 3.4.16 allows them) act on another element by id, and a document shares the page with the editor's own
+// controls: a document's button could open or close them.
+const RAPIER_SANITIZE_FORBID_ATTR = Object.freeze(['action', 'formaction', 'form', 'for', 'command', 'commandfor', 'popover', 'popovertarget', 'popovertargetaction']);
 // The document profiles use one allowlist in a browser and in an inert server parser.
 const RAPIER_SANITIZE_PROFILES = Object.freeze({
 	htmlTags: Object.freeze(["a","abbr","acronym","address","area","article","aside","audio","b","bdi","bdo","big","blink","blockquote","body","br","button","canvas","caption","center","cite","code","col","colgroup","content","data","datalist","dd","decorator","del","details","dfn","dialog","dir","div","dl","dt","element","em","fieldset","figcaption","figure","font","footer","form","h1","h2","h3","h4","h5","h6","head","header","hgroup","hr","html","i","img","input","ins","kbd","label","legend","li","main","map","mark","marquee","menu","menuitem","meter","nav","nobr","ol","optgroup","option","output","p","picture","pre","progress","q","rp","rt","ruby","s","samp","search","section","select","shadow","slot","small","source","spacer","span","strike","strong","style","sub","summary","sup","table","tbody","td","template","textarea","tfoot","th","thead","time","tr","track","tt","u","ul","var","video","wbr"]),
 	svgTags: Object.freeze(["svg","a","altglyph","altglyphdef","altglyphitem","animatecolor","animatemotion","animatetransform","circle","clippath","defs","desc","ellipse","enterkeyhint","exportparts","filter","font","g","glyph","glyphref","hkern","image","inputmode","line","lineargradient","marker","mask","metadata","mpath","part","path","pattern","polygon","polyline","radialgradient","rect","stop","style","switch","symbol","text","textpath","title","tref","tspan","view","vkern"]),
 	mathTags: Object.freeze(["math","menclose","merror","mfenced","mfrac","mglyph","mi","mlabeledtr","mmultiscripts","mn","mo","mover","mpadded","mphantom","mroot","mrow","ms","mspace","msqrt","mstyle","msub","msup","msubsup","mtable","mtd","mtext","mtr","munder","munderover","mprescripts"]),
-	htmlAttributes: Object.freeze(["accept","action","align","alt","autocapitalize","autocomplete","autopictureinpicture","autoplay","background","bgcolor","border","capture","cellpadding","cellspacing","checked","cite","class","clear","color","cols","colspan","controls","controlslist","coords","crossorigin","datetime","decoding","default","dir","disabled","disablepictureinpicture","disableremoteplayback","download","draggable","enctype","enterkeyhint","exportparts","face","for","headers","height","hidden","high","href","hreflang","id","inert","inputmode","integrity","ismap","kind","label","lang","list","loading","loop","low","max","maxlength","media","method","min","minlength","multiple","muted","name","nonce","noshade","novalidate","nowrap","open","optimum","part","pattern","placeholder","playsinline","poster","preload","pubdate","radiogroup","readonly","rel","required","rev","reversed","role","rows","rowspan","spellcheck","scope","selected","shape","size","sizes","slot","span","srclang","start","src","srcset","step","style","summary","tabindex","title","translate","type","usemap","valign","value","width","wrap","xmlns"]),
+	htmlAttributes: Object.freeze(["accept","action","align","alt","autocapitalize","autocomplete","autopictureinpicture","autoplay","background","bgcolor","border","capture","cellpadding","cellspacing","checked","cite","class","clear","color","cols","colspan","command","commandfor","controls","controlslist","coords","crossorigin","datetime","decoding","default","dir","disabled","disablepictureinpicture","disableremoteplayback","download","draggable","enctype","enterkeyhint","exportparts","face","for","headers","height","hidden","high","href","hreflang","id","inert","inputmode","integrity","ismap","kind","label","lang","list","loading","loop","low","max","maxlength","media","method","min","minlength","multiple","muted","name","nonce","noshade","novalidate","nowrap","open","optimum","part","pattern","placeholder","playsinline","popover","popovertarget","popovertargetaction","poster","preload","pubdate","radiogroup","readonly","rel","required","rev","reversed","role","rows","rowspan","spellcheck","scope","selected","shape","size","sizes","slot","span","srclang","start","src","srcset","step","style","summary","tabindex","title","translate","type","usemap","valign","value","width","wrap","xmlns"]),
 	svgAttributes: Object.freeze(["accent-height","accumulate","additive","alignment-baseline","amplitude","ascent","attributename","attributetype","azimuth","basefrequency","baseline-shift","begin","bias","by","class","clip","clippathunits","clip-path","clip-rule","color","color-interpolation","color-interpolation-filters","color-profile","color-rendering","cx","cy","d","dx","dy","diffuseconstant","direction","display","divisor","dominant-baseline","dur","edgemode","elevation","end","exponent","fill","fill-opacity","fill-rule","filter","filterunits","flood-color","flood-opacity","font-family","font-size","font-size-adjust","font-stretch","font-style","font-variant","font-weight","fx","fy","g1","g2","glyph-name","glyphref","gradientunits","gradienttransform","height","href","id","image-rendering","in","in2","intercept","k","k1","k2","k3","k4","kerning","keypoints","keysplines","keytimes","lang","lengthadjust","letter-spacing","kernelmatrix","kernelunitlength","lighting-color","local","marker-end","marker-mid","marker-start","markerheight","markerunits","markerwidth","maskcontentunits","maskunits","max","mask","mask-type","media","method","mode","min","name","numoctaves","offset","operator","opacity","order","orient","orientation","origin","overflow","paint-order","path","pathlength","patterncontentunits","patterntransform","patternunits","pointer-events","points","preservealpha","preserveaspectratio","primitiveunits","r","rx","ry","radius","refx","refy","repeatcount","repeatdur","restart","result","rotate","scale","seed","shape-rendering","slope","specularconstant","specularexponent","spreadmethod","startoffset","stddeviation","stitchtiles","stop-color","stop-opacity","stroke-dasharray","stroke-dashoffset","stroke-linecap","stroke-linejoin","stroke-miterlimit","stroke-opacity","stroke","stroke-width","style","surfacescale","systemlanguage","tabindex","tablevalues","targetx","targety","transform","transform-origin","text-anchor","text-decoration","text-orientation","text-rendering","textlength","type","u1","u2","unicode","values","vector-effect","viewbox","visibility","version","vert-adv-y","vert-origin-x","vert-origin-y","width","word-spacing","wrap","writing-mode","xchannelselector","ychannelselector","x","x1","x2","xmlns","y","y1","y2","z","zoomandpan"]),
 	mathAttributes: Object.freeze(["accent","accentunder","align","bevelled","close","columnalign","columnlines","columnspacing","columnspan","denomalign","depth","dir","display","displaystyle","encoding","fence","frame","height","href","id","largeop","length","linethickness","lquote","lspace","mathbackground","mathcolor","mathsize","mathvariant","maxsize","minsize","movablelimits","notation","numalign","open","rowalign","rowlines","rowspacing","rowspan","rspace","rquote","scriptlevel","scriptminsize","scriptsizemultiplier","selection","separator","separators","stretchy","subscriptshift","supscriptshift","symmetric","voffset","width","xmlns"]),
 	xmlAttributes: Object.freeze(["xlink:href","xml:id","xlink:title","xml:space","xmlns:xlink"]),
@@ -89,8 +91,10 @@ function prepareMathSource(input, DOMParser) {
 // An inert parser and a string sanitizer use the same profile as DOMPurify. Neither port may
 // execute document scripts or fetch resources. HTML5 parsing precedes filtering so foreign
 // content, entities and malformed table markup cross the same boundary as a browser's parser.
-function createInertHtmlSanitizer({parseFragment, serialize, sanitizeHtml, safeRasterDataUrl}) {
-	if (![parseFragment, serialize, sanitizeHtml, safeRasterDataUrl].every(port => typeof port === 'function'))
+function createInertHtmlSanitizer({parseFragment, serialize, sanitizeHtml, safeRasterDataUrl, chromeOwnsId = id => /^rapier-(?!anchor-)/.test(id)}) {
+	// chromeOwnsId defaults to _rapierChromeOwnsId's prefix rule: every page Rapier writes carries rapier- elements
+	// (rapier-document, rapier-ledger). The factories are serialized into written pages, so neither reads a module constant.
+	if (![parseFragment, serialize, sanitizeHtml, safeRasterDataUrl, chromeOwnsId].every(port => typeof port === 'function'))
 		throw new TypeError('The inert HTML sanitizer requires every parser and filtering port');
 	const uri = /^(?:(?:(?:f|ht)tps?|mailto|tel|callto|sms|cid|xmpp|matrix):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i;
 	const uriSafe = new Set(['alt', 'class', 'for', 'id', 'label', 'name', 'pattern', 'placeholder', 'role', 'summary', 'title', 'value', 'style', 'xmlns']);
@@ -270,7 +274,7 @@ function _rapierInstallSanitizeHooks() {
 		if (!/^data:/i.test(compact)) return;
 		const tag = node?.nodeName === 'IMG' ? 'img'
 			: node?.namespaceURI === DIAGRAM_LABEL_SVG_NAMESPACE && node.localName === 'image' ? 'image' : '';
-		const rasterAllowed = (/^(?:render|export|raw|source)$/.test(_rapierSanitizeRuntime.context)
+		const rasterAllowed = (/^(?:paste|render|export|raw|source)$/.test(_rapierSanitizeRuntime.context)
 			|| _rapierSanitizeRuntime.context === 'diagram' && tag === 'image')
 			&& _rapierImageDataAttributeAllowed(tag, data.attrName.toLowerCase(), compact, _rapierSafeRasterDataUrl);
 		if (!rasterAllowed) data.keepAttr = false;
@@ -309,14 +313,17 @@ function _rapierInstallSanitizeHooks() {
 	// know: a marker's style is only `mso-list:Ignore`. The paste carries both as data-* first, where they stay,
 	// for the conversion that reads them (_rapierPasteWordLists).
 	DOMPurify.addHook('uponSanitizeElement', node => {
-		if (_rapierSanitizeRuntime.context !== 'paste' || !node || !/^(?:P|SPAN)$/.test(node.nodeName)) return;
+		if (_rapierSanitizeRuntime.context !== 'paste' || !node || !/^(?:P|LI|H[1-6]|SPAN)$/.test(node.nodeName)) return;
 		// Only the style names them: a page cannot bring these attributes of its own.
 		node.removeAttribute('data-rapier-word-level');
 		node.removeAttribute('data-rapier-word-marker');
 		const style = node.getAttribute('style');
 		if (!style || !/mso-list/i.test(style)) return;
-		const {wordListLevel, wordListIsMarker} = globalThis.RapierMarkdownSpec;
-		const level = node.nodeName === 'P' ? wordListLevel(style) : 0;
+		// Word's list reading is the editor's (AGPL) grammar; a host without it keeps the paste's paragraphs as they are.
+		const spec = globalThis.RapierMarkdownSpec;
+		if (!spec) return;
+		const {wordListLevel, wordListIsMarker} = spec;
+		const level = /^(?:P|LI|H[1-6])$/.test(node.nodeName) ? wordListLevel(style) : 0;
 		if (level) node.setAttribute('data-rapier-word-level', String(level));
 		else if (node.nodeName === 'SPAN' && wordListIsMarker(style)) node.setAttribute('data-rapier-word-marker', '1');
 	});
@@ -444,6 +451,17 @@ function _rapierChromeOwnsId(id) {
 	return _rapierSanitizeRuntime.chromeIds.has(String(id)) || /^rapier-(?!anchor-)/.test(id);
 }
 
+// A link whose words or address carry a bidi control, or whose host is spelled in punycode, can show a destination it does
+// not have. Opening one names its real address first; the answer is that address, or '' when the link opens at once.
+const RAPIER_BIDI_CONTROL = /[\u061c\u200e\u200f\u202a-\u202e\u2066-\u2069]/;
+function _rapierLinkDestinationToConfirm(href, text = '') {
+	let url, address = String(href || '');
+	try { url = new URL(address); } catch (_) { return ''; }
+	try { address = decodeURIComponent(address); } catch (_) {}
+	return RAPIER_BIDI_CONTROL.test(String(text)) || RAPIER_BIDI_CONTROL.test(address) ||
+		url.hostname.split('.').some(label => /^xn--/i.test(label)) ? url.href : '';
+}
+
 function _rapierSafeRasterDataUrl(value) {
 	const match = RAPIER_RASTER_DATA_URL_RE.exec(value);
 	if (!match) return false;
@@ -526,7 +544,7 @@ function _rapierDropRemoteRules(rules, owner) {
 }
 
 function _rapierVerifyRasterBytes(bytes, mime) {
-	if (mime === 'image/jxl') return globalThis.RapierImageAssets.isJxl(bytes);
+	if (mime === 'image/jxl') return globalThis.RapierImageAssets?.isJxl(bytes) === true; // without the editor's codec a JPEG XL picture is refused
 
 	// declaration, doctype or generator/license comment before <svg itself, of whatever length its
 
@@ -540,6 +558,6 @@ function _rapierVerifyRasterBytes(bytes, mime) {
 
   return {_rapierVerifyRasterBytes, _rapierInstallSanitizeHooks, sanitizeRapierHtml,
     sanitizeRapierFragment: typeof DOMPurify?.sanitize === 'function' ? sanitizeRapierFragment : undefined,
-    diagramLabelStyle, escapeRapierHtmlText, _rapierChromeOwnsId, _rapierSafeRasterDataUrl, _rapierCssPresentationIsRemote, _rapierRemoteSubresourceOrigin, _rapierStyleWithoutRemoteUrls, _rapierStylesheetWithoutRemoteUrls, _rapierDropRemoteRules};
+    diagramLabelStyle, escapeRapierHtmlText, _rapierChromeOwnsId, _rapierLinkDestinationToConfirm, _rapierSafeRasterDataUrl, _rapierCssPresentationIsRemote, _rapierRemoteSubresourceOrigin, _rapierStyleWithoutRemoteUrls, _rapierStylesheetWithoutRemoteUrls, _rapierDropRemoteRules};
 }
 export {RAPIER_SANITIZE_FORBID_TAGS as forbidTags, RAPIER_SANITIZE_FORBID_ATTR as forbidAttributes, createRenderSanitizer, createInertHtmlSanitizer, RAPIER_SANITIZE_OPTIONS as options, prepareMathSource};

package/dist/kit/render-styles.mjs

@@ -54,7 +54,7 @@ function _rapierDocumentPrintCss(hostSelector) {
 @page{size:auto;margin:12mm 14mm 14mm}
 @media print{
 	${p('.md-render')}{--md-color-line:#000000!important}
-	${list('.md-render h1','.md-render h2','.md-render h3','.md-render h4','.md-render h5','.md-render h6')}{break-after:avoid-page;page-break-after:avoid;color:#111}
+	${list('.md-render h1','.md-render h2','.md-render h3','.md-render h4','.md-render h5','.md-render h6')}{page-break-after:avoid;break-after:avoid-page;color:#111}
 	${list('.md-render p','.md-render li','.md-render blockquote')}{orphans:3;widows:3}
 	${p('.md-render img')}{max-width:100%!important;height:auto!important;break-inside:avoid-page}
 	${list('.md-render pre','.artifact-flat')}{white-space:pre-wrap!important;overflow-wrap:anywhere!important;word-break:break-word!important;overflow:visible!important;max-height:none!important}
@@ -66,7 +66,7 @@ function _rapierDocumentPrintCss(hostSelector) {
 	${list('.md-render th','.md-render td')}{overflow-wrap:anywhere;word-break:normal}
 	${p('.md-render thead')}{display:table-header-group}
 	${p('.md-render tfoot')}{display:table-footer-group}
-	${p('.md-render tr')}{break-inside:avoid-page;page-break-inside:avoid}
+	${p('.md-render tr')}{page-break-inside:avoid;break-inside:avoid-page}
 	${p('.md-render details>*:not(summary)')}{display:block!important}
 	${p('.md-render details')}{break-inside:auto}
 	${p('.md-render a')}{color:#111!important;text-decoration:underline}

package/dist/kit/render.mjs

@@ -161,7 +161,9 @@ async function _rapierBuildArtifact(options, providedContext) {
 		+ (printWidth > 0 ? '.rapier-page.md-render{width:' + printWidth + 'px!important}' : '') + '}' : '';
 	const pageTitle = settings && settings.title ? globalThis.RapierMarkdownSpec.documentTitle(settings) : metadata.filename;
 	let css = _rapierArtifactStyles(theme, includeFonts, !!opts.print || completePage, false, opts.print && opts.kind === 'standalone' ? '' : null)
-		+ (completePage ? '\n\n' + _rapierSharedPageFallbackCss() : '')
+		// Print already floats pictures. Tables, code, figures and rules clear them
+		// through the same clearing rule a complete page uses; print keeps its own page flow.
+		+ (completePage || opts.print ? '\n\n' + _rapierSharedPageFallbackCss(!completePage) : '')
 		+ (opts.extraCss ? '\n\n' + opts.extraCss : '')
 		+ (willFont ? '\n\n@font-face{font-family:' + willFont.family + ';src:url(' + await _rapierBlobDataUrl(new Blob([willFont.bytes], { type: 'font/ttf' })) + ') format("truetype")}' : '')
 		+ (settingsCss ? '\n' + settingsCss : '')
@@ -671,13 +673,13 @@ async function _rapierReadSharedDocument(text, filename) {
 	return {source, filename: name, kind, bom, ...parts, comparisonBase};
 }
 
-function _rapierSharedPageFallbackCss() {
-	return `
+function _rapierSharedPageFallbackCss(clearOnly = false) {
+	const clear = '.rapier-page>:is(pre,table,hr,figure,.table-scroll-wrap,.math-display-wrap){clear:both}\n';
+	return clearOnly ? clear : `
 .rapier-page{display:flow-root}
 .rapier-page>:first-child{margin-top:0}
 .md-render h1{display:flow-root}
-.rapier-page>:is(pre,table,hr,figure,.table-scroll-wrap,.math-display-wrap){clear:both}
-`;
+` + clear;
 }
 
 function _rapierShareWrapKind(element) {

package/dist/kit/will.d.mts

@@ -0,0 +1,42 @@
+// SPDX-License-Identifier: MIT
+// Will/1: permissions a Markdown document gives agents, as HTML comments on their own lines.
+//   <!-- will/1 keep -->  ...  <!-- /will -->     keep: no change; append: add after the region's text only; edit: any change
+export type WillLaw = 'keep' | 'append' | 'edit';
+export type WillFault = 'malformed_marker' | 'unpaired_marker';
+/** A paired region; `start` to `end` is its text between the marker lines (UTF-16 offsets). */
+export interface WillRegion {
+  index: number; law: WillLaw; intent: string | null;
+  openerLine: number; openerStart: number; openerEnd: number; openerContentEnd: number;
+  closerLine: number; closerStart: number; closerEnd: number;
+  start: number; end: number;
+}
+export interface WillMarker { kind: 'open' | 'close' | 'near'; law: WillLaw | ''; intent: string | null; content: string; fault?: WillFault; line?: number; start?: number; end?: number; contentEnd?: number; }
+export interface Will {
+  /** True when the text has any marker line. */
+  present: boolean;
+  /** The first fault, or ''. A document with a fault is all keep. */
+  fault: WillFault | '';
+  faults: {mode: WillFault; line: number; start: number; end: number}[];
+  /** Every marker line, as [start, end) with its terminator. */
+  blocks: {start: number; end: number}[];
+  markers: WillMarker[];
+  regions: WillRegion[];
+  text: string;
+}
+/** A quick test for any marker line. */
+export function hasWillMarkers(text: string): boolean;
+export function parseWill(text: string): Will;
+/** The law over [start, end): 'keep' when a fault, a marker or a keep region is touched; 'append' inside an append region; else 'edit'. */
+export function willGovern(will: Will, start: number, end: number): WillLaw;
+/** The regions [start, end) touches (an empty range: the regions it stands in). */
+export function willRegionsIn(will: Will, start: number, end: number): WillRegion[];
+/** The region or marker line [start, end) touches, or null. */
+export function willTouchesMarker(will: Will, start: number, end: number): WillRegion | {law: 'keep'} | null;
+/** The intent words of the one region wholly containing [start, end), or ''. */
+export function willIntentOf(will: Will, start: number, end: number): string;
+/** Reads one line as a marker, or null. */
+export function willMarkerOf(line: string): WillMarker | null;
+/** The width of a line terminator ending at `last` (char code), with `prior` before it: 0, 1 or 2. */
+export function terminatorWidth(last: number, prior: number): number;
+/** The text without one trailing line terminator. */
+export function stripOneTerminator(text: string): string;

package/dist/spec/document-settings.mjs

@@ -10,6 +10,91 @@ import {normalizeFontFamily, fontFamilyCss, FONT_STACKS} from './md-marks.mjs';
 const NUMBER = /^(?:\d+(?:\.\d*)?|\.\d+)(?:e[+-]?\d+)?$/i;
 export const DOCUMENT_LEADING = 1.75 / 1.1;
 
+// Before/after are points; line is a multiple of the element's own type size.
+// Presets and native exports read this same table. Explicit measures do not grow with font size.
+export const SPACING_TYPES = Object.freeze(['paragraph', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6',
+	'list', 'item', 'table', 'picture', 'drawing', 'quote', 'code', 'rule', 'footnote', 'toc']);
+export const SPACING_PRESETS = Object.freeze({compact: .7, standard: 1, roomy: 1.5});
+const SPACING_SELECTORS = Object.freeze({paragraph: 'p', h1: 'h1', h2: 'h2', h3: 'h3', h4: 'h4', h5: 'h5', h6: 'h6',
+	list: ':is(ul,ol)', item: 'li', table: ':is(table,.table-scroll-wrap)', picture: 'p[data-md-picture]',
+	drawing: ':is(.diagram-block,p[data-md-picture]:has(img[data-md-svg],img[src^="data:image/svg+xml"]))', quote: 'blockquote',
+	code: 'pre', rule: 'hr:not(.footnotes-sep):not([data-md-break])', footnote: '.footnotes', toc: '.rapier-jump-list'});
+const HEADING_LINE = [1.75 / 2.2, 1.5 / 1.75, 1.2 / 1.5, 1 / 1.25, .9 / 1.1, .82];
+
+export function normalizeDocumentSpacing(value) {
+	if (typeof value === 'string') {
+		if (Object.hasOwn(SPACING_PRESETS, value)) value = {preset: value};
+		else { try { value = JSON.parse(value); } catch (_) { return null; } }
+	}
+	if (!value || typeof value !== 'object' || Array.isArray(value)) return null;
+	const result = {};
+	for (const [key, entry] of Object.entries(value)) {
+		if (key === 'preset') {
+			if (!Object.hasOwn(SPACING_PRESETS, entry)) return null;
+			result.preset = entry; continue;
+		}
+		if (!SPACING_TYPES.includes(key) || !entry || typeof entry !== 'object' || Array.isArray(entry)) return null;
+		const row = {};
+		for (const [field, number] of Object.entries(entry)) {
+			if (!['before', 'after', 'line'].includes(field) || typeof number !== 'number' || !Number.isFinite(number) ||
+				number < (field === 'line' ? .5 : 0) || number > (field === 'line' ? 4 : 720)) return null;
+			row[field] = number;
+		}
+		result[key] = Object.freeze(row);
+	}
+	return Object.freeze(result);
+}
+
+export function documentSpacing(settings, kind = 'paragraph') {
+	const type = SPACING_TYPES.includes(kind) ? kind : 'paragraph', spacing = settings?.spacing;
+	const preset = spacing?.preset || 'standard', scale = SPACING_PRESETS[preset];
+	const size = (settings?.fontsize?.unit || 1.1) / 1.1;
+	const heading = /^h([1-6])$/.exec(type), leading = settings?.linestretch?.factor ??
+		(preset === 'compact' ? 1.3 : preset === 'roomy' ? 1.85 : DOCUMENT_LEADING);
+	const before = heading ? 15 : type === 'footnote' ? 9 : 0;
+	const after = heading ? 3 : type === 'paragraph' ? 6 : type === 'item' ? 3 : type === 'footnote' ? 0 : 9;
+	const line = heading ? leading * HEADING_LINE[Number(heading[1]) - 1] : type === 'code' ? leading * .75 / .7386 : leading;
+	if (settings?.word) return {before: (heading ? 12 : type === 'footnote' ? 9 : 0) * scale,
+		after: (heading ? 6 : type === 'paragraph' ? 8 : type === 'item' || type === 'footnote' ? 0 : 9) * scale,
+		line: leading, ...spacing?.[type]};
+	return {before: before * scale * size, after: after * scale * size, line, ...spacing?.[type]};
+}
+
+// Word's widely supported Calibri/11 pt Normal template. Explicit document settings always win.
+export function wordDocumentSettings(settings) {
+	return {...settings, word: true, fontsize: settings?.fontsize || fontSize('11pt'),
+		mainfont: settings?.mainfont || documentFont('Calibri'), sansfont: settings?.sansfont || documentFont('Calibri'),
+		linestretch: settings?.linestretch || leading('1.08')};
+}
+export function documentHeadingSize(settings, level) {
+	const body = (settings?.fontsize?.unit || 1.1) * 12;
+	return body * (settings?.word ? [16/11,13/11,12/11,1,1,1] : [2.2,1.75,1.5,1.25,1.1,1])[level - 1];
+}
+
+export function documentSpacingCss(settings, scope = '.md-render', defaults = false) {
+	if (!defaults && !settings?.spacing && !settings?.linestretch && !settings?.fontsize) return '';
+	const length = points => 'calc(' + Number((points / 12).toFixed(8)) + ' * var(--md-unit))';
+	let css = '';
+	for (const type of SPACING_TYPES) {
+		const row = documentSpacing(settings, type), selector = scope + ' ' + SPACING_SELECTORS[type];
+		css += selector + '{margin-block:' + length(row.before) + ' ' + length(row.after) + ';line-height:' + row.line + '}';
+		if (settings?.word && /^h[1-6]$/.test(type)) css += selector + '{font-size:' + length(documentHeadingSize(settings, Number(type[1]))) + '}';
+	}
+	// Compound blocks own the outside gap; the last child does not add it again.
+	css += scope + ' :is(li,td,th,blockquote)>:last-child{margin-bottom:0}' +
+		scope + ' li:last-child{margin-bottom:0}' + scope + ' li>:is(ul,ol){margin-bottom:0}' +
+		scope + ' .table-scroll-wrap>table{margin-block:0}' +
+		scope + ' pre{font-size:calc(var(--md-text-body) * .7386)}' +
+		scope + ' pre code{line-height:inherit}' + scope + ' .footnotes{padding-top:0}' +
+		scope + ' .footnotes-list{margin-block:0}' + scope + ' blockquote:not(.callout){padding-block:0}';
+	const item = documentSpacing(settings, 'item');
+	css += scope + ' ul.rapier-jump-list>li{padding-block:0;margin-block:' + length(item.before) + ' ' + length(item.after) + '}' +
+		scope + ' ul.rapier-jump-list>li:last-child{margin-bottom:0}';
+	for (const [type, selector] of [['item','li>p'], ['table',':is(td,th)>p'], ['quote','blockquote>p'], ['footnote','.footnotes p'], ['toc','.rapier-jump-list li']])
+		css += scope + ' ' + selector + '{line-height:' + documentSpacing(settings, type).line + '}';
+	return css;
+}
+
 function measure(value, positive = false) {
 	const text = unquote(value);
 	const number = NUMBER.test(text) ? Number(text) : NaN;
@@ -40,7 +125,7 @@ const PAPERS = Object.freeze({
 });
 const EMPTY = Object.freeze({
 	title: null, subtitle: null, lang: null, fontsize: null, mainfont: null, sansfont: null, monofont: null, defaultfont: null, linestretch: null,
-	papersize: null, geometry: null, pagestyle: null,
+	papersize: null, geometry: null, pagestyle: null, spacing: null,
 });
 
 function unquote(value) {
@@ -257,6 +342,7 @@ export function readDocumentSettings(markdown) {
 	return Object.freeze({
 		title: take('title') || null, subtitle: take('subtitle') || null, lang: languageTag(take('lang')),
 		fontsize, mainfont, sansfont, monofont, defaultfont, linestretch, papersize, geometry,
+		spacing: normalizeDocumentSpacing(take('spacing')),
 		pagestyle: page === 'plain' || page === 'empty' ? page : null,
 	});
 }
@@ -276,14 +362,14 @@ export function updateDocumentSettings(markdown, patch) {
 		text: (source[field.start - 1] === ':' ? ' ' : '') + text + (source[field.end] === '#' ? ' ' : '')});
 	for (const [key, supplied] of Object.entries(patch || {})) {
 		const font = ['mainfont', 'sansfont', 'monofont', 'defaultfont'].includes(key);
-		if (!font && !['fontsize', 'linestretch'].includes(key)) throw new TypeError('Unknown document setting: ' + key);
+		if (!font && !['fontsize', 'linestretch', 'spacing'].includes(key)) throw new TypeError('Unknown document setting: ' + key);
 		const matches = fields.filter(item => item.key === key);
 		if (matches.length > 1) throw new RangeError('Duplicate document setting: ' + key);
 		const field = matches[0];
-		const value = supplied === null ? null : font ? documentFont(supplied) : key === 'fontsize' ? fontSize(supplied) : leading(supplied);
+		const value = supplied === null ? null : font ? documentFont(supplied) : key === 'fontsize' ? fontSize(supplied) : key === 'spacing' ? normalizeDocumentSpacing(supplied) : leading(supplied);
 		if (supplied !== null && !value) throw new TypeError('Invalid document setting: ' + key);
-		const encoded = value === null ? '' : font ? JSON.stringify(value.family) : key === 'fontsize' ? value.step : String(value.factor);
-		if (value !== null && before[key] && (font ? before[key].family === value.family : key === 'fontsize' ? same(before.fontsize.unit, value.unit) : before.linestretch.factor === value.factor)) continue;
+		const encoded = value === null ? '' : font ? JSON.stringify(value.family) : key === 'fontsize' ? value.step : key === 'spacing' ? JSON.stringify(value) : String(value.factor);
+		if (value !== null && before[key] && (font ? before[key].family === value.family : key === 'fontsize' ? same(before.fontsize.unit, value.unit) : key === 'spacing' ? JSON.stringify(before.spacing) === encoded : before.linestretch.factor === value.factor)) continue;
 		if (key === 'fontsize' && value !== null && fontSize(encoded)?.unit !== value.unit) refuse(key);
 		if (!field) { if (value !== null) append.push(key + ': ' + encoded + eol); continue; }
 		if (field.opaque || field.invalid || field.multiline || field.block) refuse(key);
@@ -327,7 +413,7 @@ export function documentSettingsStyle(settings, defaultFont) {
 	if (sans) decls.push('--md-font-sans:' + (sans.css || fontFamilyCss(sans.family)));
 	if (main) decls.push('font-family:' + (main.css || fontFamilyCss(main.family)));
 	if (mono) decls.push('--md-font-mono:' + (mono.css || fontFamilyCss(mono.family)));
-	return decls.length ? '.md-render{' + decls.join(';') + '}' : '';
+	return (decls.length ? '.md-render{' + decls.join(';') + '}' : '') + documentSpacingCss(settings);
 }
 
 // Null when the page keys do not change the print sheet. The view never asks.

package/dist/spec/html-blocks.mjs

@@ -474,6 +474,7 @@ export function mountHtmlBlocks(doc, options = {}) {
             if (info) {pixels += info.width * info.height; if (pixels > 24000000) throw new Error('HTML image pixel budget'); admitted[url] = {width: info.width, height: info.height, animated: !!info.animated};}
             if (match[1].toLowerCase() === 'image/svg+xml') {
               const svgText = new win.TextDecoder('utf-8', {fatal: true}).decode(bytes);
+              if (/<!\s*(?:DOCTYPE|ENTITY)\b/i.test(svgText)) throw new Error('SVG declarations are unsupported');
               const parsed = new win.DOMParser().parseFromString(svgText, 'image/svg+xml');
               if (parsed.querySelector('parsererror') || parsed.documentElement.localName !== 'svg') throw new Error('Invalid SVG image');
               const svg = doc.importNode(parsed.documentElement, true);
@@ -618,8 +619,9 @@ export function mountHtmlBlocks(doc, options = {}) {
 
 // Cold export uses the same opaque renderer, independently of the visible editor
 // and its caches. The caller owns original bytes; only detached display nodes change.
-export async function materializeObjects(root, {signal, width = 640, imageInfo, poster, bestEffort = false, issues = []} = {}) {
-  const doc = root.ownerDocument, win = doc.defaultView;
+export async function materializeObjects(root, {signal, width = 640, imageInfo, poster, bestEffort = false, issues = [], document: live} = {}) {
+  // An export root is parsed in an inert document (no window, no body); the caller names the page whose sandboxed frames draw its objects.
+  const doc = root.ownerDocument.defaultView ? root.ownerDocument : live, win = doc.defaultView;
   const images = [...root.querySelectorAll('img[data-rapier-html],img[data-rapier-animation]')];
   if (images.length > 64) throw new Error('Object export count budget');
   for (const image of images) {

package/dist/spec/md-assets.mjs

@@ -1,5 +1,6 @@
 // SPDX-License-Identifier: MIT
 // Pure text and markdown-it tokens: no DOM, no byte decoding, no globalThis.Rapier* (MIT kit; decoders stay in images/assets.mjs).
+import {isWordSidecarBlock} from './word-sidecar.mjs';
 
 export const IMAGE_LIMITS = Object.freeze({bytes: 16 * 1024 * 1024, sourceChars: 64 * 1024 * 1024, dimension: 16384, pixels: 24000000, assets: 1024});
 const parsers = new WeakMap();
@@ -93,6 +94,11 @@ const unheldLines = new Proxy(Array.prototype, {
 // lines begins (undefined when the source ends before it). `env` is the whole pass's. The tables hold at most
 // the lines between two visits: BLOCK_WINDOW of them, or as many as one block's rules read.
 export function eachBlockWindow(source, bodyOffset, parser, env, visit, keepNul = false) {
+  for (const window of blockWindows(source, bodyOffset, parser, env, keepNul)) visit(window);
+}
+
+// The same tokenizer can pause between complete top-level windows; no grammar rule is suspended.
+export function* blockWindows(source, bodyOffset, parser, env, keepNul = false) {
   const lineEnds = source.slice(bodyOffset).replace(/\r\n?/g, '\n'), body = keepNul ? lineEnds : lineEnds.replace(/\0/g, '\ufffd');
   // The body is the source with every CRLF one unit shorter: count the pairs before a body offset, from the last
   // offset asked.
@@ -105,7 +111,7 @@ export function eachBlockWindow(source, bodyOffset, parser, env, visit, keepNul
   const tokens = [];
   let origin = 0, first = 0, state;
   // A line begins after the newline that ends the line before it. No rule writes eMarks.
-  const report = () => visit({tokens, firstLine: first, lineStart: line => {
+  const report = () => ({tokens, firstLine: first, lineStart: line => {
     if (!line) return sourceOffset(origin);
     const end = Object.hasOwn(state.eMarks, line - 1) ? state.eMarks[line - 1] : body.length;
     return end < body.length ? sourceOffset(end + 1) : undefined;
@@ -115,7 +121,7 @@ export function eachBlockWindow(source, bodyOffset, parser, env, visit, keepNul
   if (lines <= BLOCK_WINDOW) {
     state = new parser.block.State(body, parser, env, tokens);
     parser.block.tokenize(state, state.line, state.lineMax);
-    return report();
+    yield report(); return;
   }
   // The parser's own count of a last line that no newline ends: it does not count one of only spaces.
   state = new parser.block.State(body.slice(body.lastIndexOf('\n') + 1), parser, env, tokens);
@@ -180,14 +186,14 @@ export function eachBlockWindow(source, bodyOffset, parser, env, visit, keepNul
       else if (!parser.utils.isSpace(code)) break;
     }
     frontier = origin; ended = false; betweenBlocks = false;
-    state.line = 0; state.lineMax = lines - first;
+    state.line = 0; state.lineMax = lines - first; state.rapierFirstLine = first;
     const outer = unheldLine;
     unheldLine = answer;
     let finished = true;
     try { parser.block.tokenize(state, 0, state.lineMax); }
     catch (error) { if (error !== WINDOW_END) throw error; finished = false; }
     finally { unheldLine = outer; }
-    report();
+    yield report();
     if (finished) return;
     tokens.length = 0;
     origin = state.eMarks[state.line - 1] + 1; first += state.line;
@@ -209,6 +215,19 @@ export function dataImage(url) {
 
 // Markdown-it owns recognition, nesting, duplicate precedence and escapes; block parse only.
 export function parseAssets(source, factory = configured || globalThis.markdownit, bodyOffset = 0) {
+  const steps = assetSteps(source, factory, bodyOffset);
+  let next = steps.next();
+  while (!next.done) next = steps.next();
+  return next.value;
+}
+export async function parseAssetsWork(source, factory, bodyOffset, work) {
+  const steps = assetSteps(source, factory, bodyOffset);
+  work.signal?.throwIfAborted();
+  let next = steps.next();
+  while (!next.done) { await work.yield(); work.signal?.throwIfAborted(); next = steps.next(); }
+  return next.value;
+}
+function* assetSteps(source, factory = configured || globalThis.markdownit, bodyOffset = 0) {
   if (typeof source !== 'string') return fail('image_source_invalid');
   if (source.length > IMAGE_LIMITS.sourceChars) return fail('image_source_limit');
   if (!source.includes(']:')) return {assets: new Map(), blocks: [], duplicateLabels: new Set(), appendixStart: source.length, references: Object.create(null)};
@@ -218,7 +237,7 @@ export function parseAssets(source, factory = configured || globalThis.markdowni
   if (definition) return definition.index;
   const parser = parserFor(factory), env = {};
   const assets = new Map(), blocks = [], seen = new Set(), duplicateLabels = new Set();
-  eachBlockWindow(source, bodyOffset, parser, env, ({tokens, lineStart}) => {
+  for (const {tokens, lineStart} of blockWindows(source, bodyOffset, parser, env)) {
     for (const token of tokens) {
       if (token.type !== 'reference_definition' || !token.map) continue;
       const id = token.meta.label, definition = token.meta.mdImageDefinition, first = !seen.has(id);
@@ -241,7 +260,8 @@ export function parseAssets(source, factory = configured || globalThis.markdowni
       blocks.push(row);
       if (first) assets.set(id, row);
     }
-  });
+    yield;
+  }
   const references = env.references || Object.create(null);
   if (assets.size > IMAGE_LIMITS.assets) for (const asset of assets.values()) asset.status = 'asset_count_limit';
   let appendixStart = source.length;
@@ -562,6 +582,7 @@ export function assetOmissions(source) {
   return spans;
 }
 export function isAssetBlock(raw) {
+  if (isWordSidecarBlock(raw)) return true;
   if (typeof raw !== 'string' || !/data:image\//i.test(raw)) return false;
   const parsed = parseAssets(raw);
   if (!parsed.blocks.length) return false;

package/dist/spec/md-layout.mjs

@@ -169,9 +169,9 @@ export function wrapTextBlock(element) {
 
 // The one wrap-owner rule (layout/browser.js, kit/render.mjs, editor/share.js): text after, else before, skipping pictures,
 // metadata and empty paragraphs; any other block is a barrier in that direction.
-export function wrapNeighbour(node, classify) {
-  for (const step of [n => n && n.nextElementSibling, n => n && n.previousElementSibling]) {
-    for (let sibling = step(node); sibling; sibling = step(sibling)) {
+export function wrapNeighbour(node, classify, step = (n, direction) => n && n[direction > 0 ? 'nextElementSibling' : 'previousElementSibling']) {
+  for (const direction of [1, -1]) {
+    for (let sibling = step(node, direction); sibling; sibling = step(sibling, direction)) {
       const kind = classify(sibling);
       if (kind && typeof kind === 'object') return kind.stop;
       if (kind === 'metadata') continue;

package/dist/spec/md-source.mjs

@@ -115,9 +115,13 @@ export function markdownSourcePositions(source, parser) {
 
 // Capture only table-cell provenance while the parser still owns container-adjusted row
 // bounds. Looking for cell text in a whole row aliases literal pipes and quote/list markers.
-export function markdownTableSources(source, parser, environment, lineStarts = null) {
+export function markdownTableSources(source, parser, environment, lineStarts = null, parse = null) {
   const cells = new WeakMap();
-  if (!source.includes('|')) return {tokens: parser.parse(source, environment), cells};
+  const read = owner => {
+    if (parse) return parse(owner, source, environment).then(tokens => ({tokens, cells}));
+    return {tokens: owner.parse(source, environment), cells};
+  };
+  if (!source.includes('|')) return read(parser);
   const lines = lineStarts || [0];
   if (!lineStarts) for (const row of source.matchAll(/\r\n?|\n/g)) lines.push(row.index + row[0].length);
   const owner = Object.create(parser), block = Object.create(parser.block), ruler = Object.create(parser.block.ruler);
@@ -131,14 +135,14 @@ export function markdownTableSources(source, parser, environment, lineStarts = n
         if (token.type === 'tr_open') {
           const row = token.map[0], from = state.bMarks[row] + state.tShift[row];
           const line = state.src.lastIndexOf('\n', from - 1) + 1;
-          cell = tableSource(state.src.slice(from, state.eMarks[row]), lines[row] + from - line);
+          cell = tableSource(state.src.slice(from, state.eMarks[row]), lines[row + (state.rapierFirstLine || 0)] + from - line);
         } else if (token.type === 'inline' && cell) cells.set(token, cell(token.content));
         else if (token.type === 'tr_close') cell = null;
       }
     }
     return matched;
   });
-  return {tokens: owner.parse(source, environment), cells};
+  return read(owner);
 }
 
 function tableSource(row, base) {

package/dist/spec/word-sidecar.mjs

@@ -0,0 +1,7 @@
+// SPDX-License-Identifier: MIT
+// An inert document asset, kept in Source and excluded from the reading surface.
+// This is recognition only: interchange/docx.mjs admits the bounded JSON and native XML.
+export const WORD_SIDECAR_OPEN = '<!-- rapier-word:v1\n';
+export function isWordSidecarBlock(raw) {
+  return typeof raw === 'string' && /^<!-- rapier-word:v1\r?\n[^\r\n]*\r?\n-->[ \t\r\n]*$/.test(raw);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rapier-markdown-kit",
-  "version": "1.2.6",
+  "version": "1.2.8",
   "description": "Read, render and write Self-contained Markdown: one .md file that carries its pictures, drawings and layout, and that any Markdown app can read. HTML renderer, stylesheet, text layout, Will/1 agent permissions, and an edit history with authorship and offline merge. MIT, no dependencies.",
   "keywords": [
     "markdown",
@@ -40,17 +40,34 @@
   "main": "./dist/kit/index.mjs",
   "exports": {
     ".": "./dist/kit/index.mjs",
+    "./markdown-it": {
+      "types": "./dist/kit/markdown-it.d.mts",
+      "default": "./dist/kit/markdown-it.mjs"
+    },
     "./layout": "./dist/kit/layout.mjs",
     "./marks": "./dist/kit/marks.mjs",
     "./model": "./dist/kit/model.mjs",
     "./typography": "./dist/kit/typography.mjs",
-    "./will": "./dist/kit/will.mjs",
+    "./will": {
+      "types": "./dist/kit/will.d.mts",
+      "default": "./dist/kit/will.mjs"
+    },
     "./assets": "./dist/kit/assets.mjs",
     "./style.css": "./style.css",
     "./package.json": "./package.json",
     "./render": "./dist/kit/render-entry.mjs",
-    "./rapier-ledger": "./dist/kit/rapier-ledger.mjs",
-    "./ledger/carried": "./dist/kit/ledger/carried.mjs"
+    "./rapier-ledger": {
+      "types": "./dist/kit/ledger.d.mts",
+      "default": "./dist/kit/ledger.mjs"
+    },
+    "./pdf": {
+      "types": "./dist/kit/pdf-source.d.mts",
+      "default": "./dist/kit/pdf-source.mjs"
+    },
+    "./ledger/carried": {
+      "types": "./dist/kit/ledger/carried.d.mts",
+      "default": "./dist/kit/ledger/carried.mjs"
+    }
   },
   "repository": {
     "type": "git",