superdoc 2.23.1-next.5 → 2.23.1-next.7

package/dist/style.layered.css

@@ -1493,7 +1493,7 @@ img[data-v-c95b2073] {
   font-size: 11px;
 }
 
-.comments-dialog[data-v-dcbcc0d4] {
+.comments-dialog[data-v-c189ab35] {
   display: flex;
   flex-direction: column;
   padding: var(--sd-ui-comments-card-padding, 16px);
@@ -1512,75 +1512,79 @@ img[data-v-c95b2073] {
   overflow-wrap: break-word;
   word-break: break-word;
 }
-.comments-dialog[data-v-dcbcc0d4]:not(.is-active) {
+.comments-dialog[data-v-c189ab35]:not(.is-active) {
   cursor: pointer;
 }
-.comments-dialog[data-v-dcbcc0d4]:not(.is-active):not(.is-resolved):hover {
+.comments-dialog[data-v-c189ab35]:not(.is-active):not(.is-resolved):hover {
   background-color: var(--sd-ui-comments-card-hover-bg, #f3f6fd);
 }
-.comments-dialog[data-v-dcbcc0d4]:not(.is-resolved):hover .overflow-menu {
+.comments-dialog[data-v-c189ab35]:not(.is-resolved):hover .overflow-menu {
   opacity: 1;
   pointer-events: auto;
 }
-.comments-dialog.is-active[data-v-dcbcc0d4] {
+.comments-dialog.is-active[data-v-c189ab35] {
   background-color: var(--sd-ui-comments-card-active-bg, #ffffff);
   border-color: var(--sd-ui-comments-card-active-border, #e0e0e0);
   box-shadow: var(--sd-ui-comments-card-shadow, 0px 4px 12px 0px rgba(50, 50, 50, 0.15));
   z-index: 10;
 }
-.comments-dialog.is-resolved[data-v-dcbcc0d4] {
+.comments-dialog.is-resolved[data-v-c189ab35] {
   background-color: var(--sd-ui-comments-card-resolved-bg, #f0f0f0);
 }
-.comment-separator[data-v-dcbcc0d4] {
+.comment-separator[data-v-c189ab35] {
   background-color: var(--sd-ui-comments-separator, #e0e0e0);
   height: 1px;
   width: 100%;
   margin: 10px 0;
 }
-.comment[data-v-dcbcc0d4] {
+.comment[data-v-c189ab35] {
   font-size: var(--sd-ui-comments-body-size, 14px);
   line-height: 1.5;
   white-space: pre-wrap;
   color: var(--sd-ui-comments-body-text, #212121);
   margin: 4px 0 0 0;
 }
-.comment[data-v-dcbcc0d4] p {
+.comment[data-v-c189ab35] p {
   margin: 0;
 }
-.tracked-change[data-v-dcbcc0d4] {
+.comment[data-v-c189ab35] a {
+  color: var(--sd-ui-action, #1354ff);
+  text-decoration: underline;
+}
+.tracked-change[data-v-c189ab35] {
   font-size: var(--sd-ui-comments-body-size, 14px);
   line-height: 1.5;
   color: var(--sd-ui-comments-body-text, #212121);
   margin: 4px 0 0 0;
 }
-.change-type[data-v-dcbcc0d4] {
+.change-type[data-v-c189ab35] {
   color: var(--sd-ui-comments-body-text, #212121);
 }
-.tracked-change-text[data-v-dcbcc0d4] {
+.tracked-change-text[data-v-c189ab35] {
   color: var(--sd-ui-comments-body-text, #212121);
   white-space: pre-wrap;
 }
-.tracked-change-text.is-deleted[data-v-dcbcc0d4] {
+.tracked-change-text.is-deleted[data-v-c189ab35] {
   color: var(--sd-ui-comments-delete-text, #cb0e47);
 }
-.tracked-change-text.is-inserted[data-v-dcbcc0d4] {
+.tracked-change-text.is-inserted[data-v-c189ab35] {
   color: var(--sd-ui-comments-insert-text, #1f6feb);
   font-weight: 500;
 }
-.tracked-change[data-track-change-semantic-color-key='move-from'] .tracked-change-text.is-deleted[data-v-dcbcc0d4] {
+.tracked-change[data-track-change-semantic-color-key='move-from'] .tracked-change-text.is-deleted[data-v-c189ab35] {
   color: var(--sd-ui-comments-move-from-text, #00853d);
 }
-.tracked-change[data-track-change-semantic-color-key='move-to'] .tracked-change-text.is-inserted[data-v-dcbcc0d4] {
+.tracked-change[data-track-change-semantic-color-key='move-to'] .tracked-change-text.is-inserted[data-v-c189ab35] {
   color: var(--sd-ui-comments-move-to-text, #00853d);
 }
-.tracked-change-detail-lines[data-v-dcbcc0d4] {
+.tracked-change-detail-lines[data-v-c189ab35] {
   margin-top: 4px;
 }
-.tracked-change-detail-line[data-v-dcbcc0d4] {
+.tracked-change-detail-line[data-v-c189ab35] {
   font-size: 12px;
   line-height: 1.4;
 }
-.tracked-change-image-preview[data-v-dcbcc0d4] {
+.tracked-change-image-preview[data-v-c189ab35] {
   display: inline-flex;
   align-items: center;
   justify-content: center;
@@ -1591,7 +1595,7 @@ img[data-v-c95b2073] {
   max-width: 96px;
   max-height: 96px;
 }
-.tracked-change-image-preview__image[data-v-dcbcc0d4] {
+.tracked-change-image-preview__image[data-v-c189ab35] {
   display: block;
   width: auto;
   height: auto;
@@ -1601,7 +1605,7 @@ img[data-v-c95b2073] {
 }
 
 /* ── Failed tracked-change decision alert (SD-3772 §6) ── */
-.tracked-change-decision-alert[data-v-dcbcc0d4] {
+.tracked-change-decision-alert[data-v-c189ab35] {
   display: flex;
   align-items: center;
   justify-content: space-between;
@@ -1615,12 +1619,12 @@ img[data-v-c95b2073] {
   font-size: var(--sd-ui-comments-body-size, 14px);
   line-height: 1.4;
 }
-.tracked-change-decision-alert__retry[data-v-dcbcc0d4] {
+.tracked-change-decision-alert__retry[data-v-c189ab35] {
   flex-shrink: 0;
 }
 
 /* ── Resolved badge ── */
-.resolved-badge[data-v-dcbcc0d4] {
+.resolved-badge[data-v-c189ab35] {
   display: inline-flex;
   align-items: center;
   gap: 4px;
@@ -1629,33 +1633,33 @@ img[data-v-c95b2073] {
   color: var(--sd-ui-comments-resolved-text, #00853d);
   margin-bottom: 4px;
 }
-.resolved-badge__icon[data-v-dcbcc0d4] {
+.resolved-badge__icon[data-v-c189ab35] {
   display: inline-flex;
   width: 12px;
   height: 12px;
 }
-.resolved-badge__icon[data-v-dcbcc0d4] svg {
+.resolved-badge__icon[data-v-c189ab35] svg {
   width: 100%;
   height: 100%;
   fill: currentColor;
 }
 
 /* ── Text truncation ── */
-.comment.is-truncated[data-v-dcbcc0d4],
-.tracked-change.is-truncated[data-v-dcbcc0d4] {
+.comment.is-truncated[data-v-c189ab35],
+.tracked-change.is-truncated[data-v-c189ab35] {
   display: -webkit-box;
   -webkit-line-clamp: 3;
   -webkit-box-orient: vertical;
   max-height: 4.5em;
   overflow: hidden;
 }
-.comment.is-scrollable[data-v-dcbcc0d4],
-.tracked-change.is-scrollable[data-v-dcbcc0d4] {
+.comment.is-scrollable[data-v-c189ab35],
+.tracked-change.is-scrollable[data-v-c189ab35] {
   max-height: 220px;
   overflow-y: auto;
   padding-right: 4px;
 }
-.show-more-toggle[data-v-dcbcc0d4] {
+.show-more-toggle[data-v-c189ab35] {
   font-size: 12px;
   color: var(--sd-ui-action, #1355ff);
   cursor: pointer;
@@ -1663,12 +1667,12 @@ img[data-v-c95b2073] {
   margin-top: 4px;
   user-select: none;
 }
-.show-more-toggle[data-v-dcbcc0d4]:hover {
+.show-more-toggle[data-v-c189ab35]:hover {
   text-decoration: underline;
 }
 
 /* ── Thread collapse ── */
-.collapsed-replies[data-v-dcbcc0d4] {
+.collapsed-replies[data-v-c189ab35] {
   display: flex;
   align-items: center;
   gap: 6px;
@@ -1679,24 +1683,24 @@ img[data-v-c95b2073] {
   cursor: pointer;
   user-select: none;
 }
-.collapsed-replies[data-v-dcbcc0d4]:hover {
+.collapsed-replies[data-v-c189ab35]:hover {
   text-decoration: underline;
 }
-.collapsed-avatars[data-v-dcbcc0d4] {
+.collapsed-avatars[data-v-c189ab35] {
   display: flex;
 }
-.collapsed-avatars .mini-avatar[data-v-dcbcc0d4] {
+.collapsed-avatars .mini-avatar[data-v-c189ab35] {
   --sd-comment-avatar-size: 20px;
   --sd-comment-avatar-font-size: 8px;
   margin-left: -4px;
   border: 2px solid var(--sd-ui-comments-card-active-bg, #ffffff);
 }
-.collapsed-avatars .mini-avatar[data-v-dcbcc0d4]:first-child {
+.collapsed-avatars .mini-avatar[data-v-c189ab35]:first-child {
   margin-left: 0;
 }
 
 /* ── New comment input ── */
-.new-comment-input-wrapper[data-v-dcbcc0d4] {
+.new-comment-input-wrapper[data-v-c189ab35] {
   border: 1.5px solid var(--sd-ui-comments-input-border, #dbdbdb);
   border-radius: 12px;
   padding: 8.5px 10.5px;
@@ -1705,17 +1709,17 @@ img[data-v-c95b2073] {
   max-height: 150px;
   overflow: visible;
 }
-.new-comment-input-wrapper[data-v-dcbcc0d4]:focus-within {
+.new-comment-input-wrapper[data-v-c189ab35]:focus-within {
   border-color: var(--sd-ui-comments-input-focus-border, #4f7cff);
   box-shadow: 0 0 0 2px rgba(79, 124, 255, 0.16);
 }
-.new-comment-input-wrapper[data-v-dcbcc0d4] .comment-entry {
+.new-comment-input-wrapper[data-v-c189ab35] .comment-entry {
   border-radius: 0;
 }
-.new-comment-input-wrapper[data-v-dcbcc0d4] .input-section {
+.new-comment-input-wrapper[data-v-c189ab35] .input-section {
   margin: 0;
 }
-.new-comment-input-wrapper[data-v-dcbcc0d4] .superdoc-field {
+.new-comment-input-wrapper[data-v-c189ab35] .superdoc-field {
   font-size: 14px;
   line-height: 20px;
   border: none;
@@ -1726,18 +1730,18 @@ img[data-v-c95b2073] {
   max-height: 132px;
   resize: none;
 }
-.new-comment-input-wrapper[data-v-dcbcc0d4] .superdoc-field:focus,
-.new-comment-input-wrapper[data-v-dcbcc0d4] .superdoc-field:active {
+.new-comment-input-wrapper[data-v-c189ab35] .superdoc-field:focus,
+.new-comment-input-wrapper[data-v-c189ab35] .superdoc-field:active {
   border: none;
   box-shadow: none;
   outline: none;
 }
-.new-comment-input-wrapper[data-v-dcbcc0d4] .sd-editor-placeholder::before {
+.new-comment-input-wrapper[data-v-c189ab35] .sd-editor-placeholder::before {
   content: 'Comment or add others with @';
 }
 
 /* ── Reply pill & expanded input ── */
-.reply-pill[data-v-dcbcc0d4] {
+.reply-pill[data-v-c189ab35] {
   width: 100%;
   padding: 8.5px 10.5px;
   border: 1.5px solid transparent;
@@ -1751,16 +1755,16 @@ img[data-v-c95b2073] {
   cursor: text;
   transition: background 150ms ease;
 }
-.reply-pill[data-v-dcbcc0d4]:hover {
+.reply-pill[data-v-c189ab35]:hover {
   background: var(--sd-color-gray-200, #f2f2f2);
 }
-.reply-pill[data-v-dcbcc0d4]:disabled {
+.reply-pill[data-v-c189ab35]:disabled {
   cursor: not-allowed;
 }
-.reply-expanded[data-v-dcbcc0d4] {
+.reply-expanded[data-v-c189ab35] {
   margin-top: 10px;
 }
-.reply-input-wrapper[data-v-dcbcc0d4] {
+.reply-input-wrapper[data-v-c189ab35] {
   border: 1.5px solid var(--sd-ui-comments-input-border, #dbdbdb);
   border-radius: 12px;
   padding: 8.5px 10.5px;
@@ -1768,17 +1772,17 @@ img[data-v-c95b2073] {
   max-height: 150px;
   overflow: visible;
 }
-.reply-input-wrapper[data-v-dcbcc0d4]:focus-within {
+.reply-input-wrapper[data-v-c189ab35]:focus-within {
   border-color: var(--sd-ui-comments-input-focus-border, #4f7cff);
   box-shadow: 0 0 0 2px rgba(79, 124, 255, 0.16);
 }
-.reply-input-wrapper[data-v-dcbcc0d4] .comment-entry {
+.reply-input-wrapper[data-v-c189ab35] .comment-entry {
   border-radius: 0;
 }
-.reply-input-wrapper[data-v-dcbcc0d4] .input-section {
+.reply-input-wrapper[data-v-c189ab35] .input-section {
   margin: 0;
 }
-.reply-input-wrapper[data-v-dcbcc0d4] .superdoc-field {
+.reply-input-wrapper[data-v-c189ab35] .superdoc-field {
   font-size: 14px;
   line-height: 20px;
   border: none;
@@ -1789,23 +1793,23 @@ img[data-v-c95b2073] {
   max-height: 132px;
   resize: none;
 }
-.reply-input-wrapper[data-v-dcbcc0d4] .superdoc-field:focus,
-.reply-input-wrapper[data-v-dcbcc0d4] .superdoc-field:active {
+.reply-input-wrapper[data-v-c189ab35] .superdoc-field:focus,
+.reply-input-wrapper[data-v-c189ab35] .superdoc-field:active {
   border: none;
   box-shadow: none;
   outline: none;
 }
-.reply-input-wrapper[data-v-dcbcc0d4] .sd-editor-placeholder::before {
+.reply-input-wrapper[data-v-c189ab35] .sd-editor-placeholder::before {
   content: 'Reply or add others with @';
 }
-.reply-actions[data-v-dcbcc0d4] {
+.reply-actions[data-v-c189ab35] {
   display: flex;
   justify-content: flex-end;
   align-items: center;
   gap: 16px;
   margin-top: 8px;
 }
-.reply-btn-cancel[data-v-dcbcc0d4] {
+.reply-btn-cancel[data-v-c189ab35] {
   background: none;
   border: none;
   font-size: 13px;
@@ -1816,10 +1820,10 @@ img[data-v-c95b2073] {
   font-family: inherit;
   transition: color 150ms;
 }
-.reply-btn-cancel[data-v-dcbcc0d4]:hover {
+.reply-btn-cancel[data-v-c189ab35]:hover {
   color: var(--sd-ui-text, #212121);
 }
-.reply-btn-primary[data-v-dcbcc0d4] {
+.reply-btn-primary[data-v-c189ab35] {
   background: var(--sd-ui-action, #1355ff);
   border: none;
   font-size: 13px;
@@ -1831,19 +1835,19 @@ img[data-v-c95b2073] {
   font-family: inherit;
   transition: background 150ms;
 }
-.reply-btn-primary[data-v-dcbcc0d4]:hover {
+.reply-btn-primary[data-v-c189ab35]:hover {
   background: var(--sd-ui-action-hover, #0f44cc);
 }
-.reply-btn-primary.sd-is-disabled[data-v-dcbcc0d4] {
+.reply-btn-primary.sd-is-disabled[data-v-c189ab35] {
   background: var(--sd-color-gray-400, #dbdbdb);
   color: var(--sd-color-gray-600, #888888);
   cursor: default;
   pointer-events: none;
 }
-.existing-internal-input[data-v-dcbcc0d4] {
+.existing-internal-input[data-v-c189ab35] {
   margin-bottom: 10px;
 }
-.sd-internal-dropdown[data-v-dcbcc0d4] {
+.sd-internal-dropdown[data-v-c189ab35] {
   display: inline-block;
 }
 

package/dist/superdoc/src/components/CommentsLayer/comment-urls.d.ts

@@ -0,0 +1,2 @@
+/** Render links without rewriting stored comment HTML or its rich-text structure. */
+export function renderCommentHtml(value: any): string;

package/dist/superdoc.cjs

@@ -304,7 +304,7 @@ var awarenessStatesToArray = (context, states) => {
 var DEFAULT_ENDPOINT = "https://ingest.superdoc.dev/v1/collect";
 function getSuperdocVersion() {
 	try {
-		return "2.23.1-next.5";
+		return "2.23.1-next.7";
 	} catch {
 		return "unknown";
 	}
@@ -13166,6 +13166,114 @@ var _sfc_main$35 = {
 };
 var CommentInput_default = /*#__PURE__*/ require__plugin_vue_export_helper._plugin_vue_export_helper_default(_sfc_main$35, [["__scopeId", "data-v-0720a671"]]);
 //#endregion
+//#region src/internal/toolbar/built-in/url-safety.js
+/**
+* Minimal href sanitizer for the built-in link popover.
+*
+* The v1 toolbar used the shared `@superdoc/url-validation` package, which is not
+* a resolvable runtime dependency of the published `superdoc` ES build. This
+* keeps the same fail-closed posture (only known-safe schemes pass) without
+* pulling in that package: dangerous schemes (`javascript:`, `data:`,
+* `vbscript:`) return `null`, mirroring the v1 contract that callers treat a
+* `null` result as an invalid URL.
+*/
+var SAFE_SCHEME = /^(https?|mailto|tel):/i;
+var DANGEROUS_SCHEME = /^(javascript|data|vbscript):/i;
+var HAS_SCHEME = /^[a-z][a-z0-9+.-]*:/i;
+/**
+* Validate and normalize an href. Returns `{ href }` for safe values, or `null`.
+* @param {string} value
+* @returns {{ href: string }|null}
+*/
+function sanitizeHref(value) {
+	if (typeof value !== "string") return null;
+	const trimmed = value.trim();
+	if (!trimmed) return null;
+	if (trimmed.startsWith("#")) return { href: trimmed };
+	if (DANGEROUS_SCHEME.test(trimmed)) return null;
+	if (HAS_SCHEME.test(trimmed)) return SAFE_SCHEME.test(trimmed) ? { href: trimmed } : null;
+	return { href: trimmed };
+}
+//#endregion
+//#region src/components/CommentsLayer/comment-urls.js
+function isAbsoluteWebUrl(value) {
+	if (!/^https?:\/\/[^\s/?#\\]+/i.test(value) || /[\s\\]/u.test(value)) return false;
+	try {
+		const url = new URL(value);
+		return (url.protocol === "https:" || url.protocol === "http:") && Boolean(url.hostname);
+	} catch {
+		return false;
+	}
+}
+function trimUrlPunctuation(value) {
+	const closingDelimiter = {
+		"(": ")",
+		"[": "]",
+		"{": "}"
+	};
+	const balance = {
+		")": 0,
+		"]": 0,
+		"}": 0
+	};
+	for (const character of value) {
+		const close = closingDelimiter[character];
+		if (close) balance[close] += 1;
+		else if (Object.hasOwn(balance, character)) balance[character] -= 1;
+	}
+	let end = value.length;
+	while (end > 0) {
+		const character = value[end - 1];
+		if (".,!?;:".includes(character)) end -= 1;
+		else if (balance[character] < 0) {
+			balance[character] += 1;
+			end -= 1;
+		} else break;
+	}
+	return value.slice(0, end);
+}
+function configureLink(link, href) {
+	link.setAttribute("href", href);
+	link.setAttribute("target", "_blank");
+	link.setAttribute("rel", "noopener noreferrer");
+}
+/** Render links without rewriting stored comment HTML or its rich-text structure. */
+function renderCommentHtml(value) {
+	if (typeof value !== "string") return "";
+	if (typeof document === "undefined") return value;
+	const template = document.createElement("template");
+	template.innerHTML = value;
+	for (const link of template.content.querySelectorAll("a")) {
+		const safe = sanitizeHref(link.getAttribute("href"));
+		if (safe && (isAbsoluteWebUrl(safe.href) || /^(mailto|tel):\S+$/i.test(safe.href))) configureLink(link, safe.href);
+		else link.replaceWith(...link.childNodes);
+	}
+	const walker = document.createTreeWalker(template.content, NodeFilter.SHOW_TEXT);
+	const textNodes = [];
+	while (walker.nextNode()) textNodes.push(walker.currentNode);
+	for (const node of textNodes) {
+		if (node.parentElement?.closest("a, script, style, textarea, code, pre")) continue;
+		const text = node.textContent;
+		const fragment = document.createDocumentFragment();
+		let end = 0;
+		for (const match of text.matchAll(/(^|[\s([{])(https?:\/\/[^\s<>"']+)/gi)) {
+			const href = trimUrlPunctuation(match[2]);
+			if (!isAbsoluteWebUrl(href)) continue;
+			const start = match.index + match[1].length;
+			fragment.append(document.createTextNode(text.slice(end, start)));
+			const link = document.createElement("a");
+			configureLink(link, href);
+			link.textContent = href;
+			fragment.append(link);
+			end = start + href.length;
+		}
+		if (end === 0) continue;
+		fragment.append(document.createTextNode(text.slice(end)));
+		node.replaceWith(fragment);
+	}
+	return template.innerHTML;
+}
+//#endregion
 //#region src/components/CommentsLayer/CommentDialog.vue
 var _hoisted_1$27 = [
 	"aria-label",
@@ -13547,6 +13655,12 @@ var _sfc_main$34 = {
 				return a.createdTime - b.createdTime;
 			});
 		});
+		const renderedCommentTexts = require__plugin_vue_export_helper.computed(() => new Map(comments.value.map((comment) => [comment.commentId, renderCommentHtml(comment.commentText)])));
+		const handleDialogClick = (event) => {
+			if (event.target instanceof Element && event.target.closest(".comment a[href]")) return;
+			event.preventDefault();
+			return setFocus();
+		};
 		const dialogAccessibleLabel = require__plugin_vue_export_helper.computed(() => {
 			if (props.comment.trackedChangeLabel) return props.comment.trackedChangeLabel;
 			if (props.comment.trackedChange) return "Tracked change discussion";
@@ -14175,7 +14289,7 @@ var _sfc_main$34 = {
 					"is-active": isDialogActive.value || isPendingNewComment.value,
 					"is-resolved": props.comment.resolvedTime
 				}]),
-				onClick: require__plugin_vue_export_helper.withModifiers(setFocus, ["stop", "prevent"]),
+				onClick: require__plugin_vue_export_helper.withModifiers(handleDialogClick, ["stop"]),
 				style: require__plugin_vue_export_helper.normalizeStyle(getSidebarCommentStyle.value),
 				ref_key: "commentDialogElement",
 				ref: commentDialogElement,
@@ -14312,7 +14426,7 @@ var _sfc_main$34 = {
 								class: require__plugin_vue_export_helper.normalizeClass(["comment", index === 0 ? bodyOverflowClass.value : void 0]),
 								ref_for: true,
 								ref: index === 0 ? setParentBodyRef : void 0,
-								innerHTML: comment.commentText
+								innerHTML: renderedCommentTexts.value.get(comment.commentId)
 							}, null, 10, _hoisted_38)) : require__plugin_vue_export_helper.unref(isDebugging) && !isEditingThisComment.value(comment) ? (require__plugin_vue_export_helper.openBlock(), require__plugin_vue_export_helper.createElementBlock("div", _hoisted_39, require__plugin_vue_export_helper.toDisplayString(require__plugin_vue_export_helper.unref(editorCommentPositions)[comment.importedId !== void 0 ? comment.importedId : comment.commentId]?.bounds), 1)) : (require__plugin_vue_export_helper.openBlock(), require__plugin_vue_export_helper.createElementBlock("div", _hoisted_40, [require__plugin_vue_export_helper.createElementVNode("div", _hoisted_41, [require__plugin_vue_export_helper.createVNode(CommentInput_default, {
 								ref_for: true,
 								ref: setEditCommentInputRef(comment.commentId),
@@ -14389,7 +14503,7 @@ var _sfc_main$34 = {
 		};
 	}
 };
-var CommentDialog_default = /*#__PURE__*/ require__plugin_vue_export_helper._plugin_vue_export_helper_default(_sfc_main$34, [["__scopeId", "data-v-dcbcc0d4"]]);
+var CommentDialog_default = /*#__PURE__*/ require__plugin_vue_export_helper._plugin_vue_export_helper_default(_sfc_main$34, [["__scopeId", "data-v-c189ab35"]]);
 //#endregion
 //#region src/components/CommentsLayer/commentsList/ReviewDirectoryListItem.vue
 var _hoisted_1$26 = [
@@ -18623,35 +18737,6 @@ function shouldHandleFindShortcut(event, { focusInside, owner }) {
 	return (!active || active === document.body || active === document.documentElement) && ownsAmbientFindShortcut(owner);
 }
 //#endregion
-//#region src/internal/toolbar/built-in/url-safety.js
-/**
-* Minimal href sanitizer for the built-in link popover.
-*
-* The v1 toolbar used the shared `@superdoc/url-validation` package, which is not
-* a resolvable runtime dependency of the published `superdoc` ES build. This
-* keeps the same fail-closed posture (only known-safe schemes pass) without
-* pulling in that package: dangerous schemes (`javascript:`, `data:`,
-* `vbscript:`) return `null`, mirroring the v1 contract that callers treat a
-* `null` result as an invalid URL.
-*/
-var SAFE_SCHEME = /^(https?|mailto|tel):/i;
-var DANGEROUS_SCHEME = /^(javascript|data|vbscript):/i;
-var HAS_SCHEME = /^[a-z][a-z0-9+.-]*:/i;
-/**
-* Validate and normalize an href. Returns `{ href }` for safe values, or `null`.
-* @param {string} value
-* @returns {{ href: string }|null}
-*/
-function sanitizeHref(value) {
-	if (typeof value !== "string") return null;
-	const trimmed = value.trim();
-	if (!trimmed) return null;
-	if (trimmed.startsWith("#")) return { href: trimmed };
-	if (DANGEROUS_SCHEME.test(trimmed)) return null;
-	if (HAS_SCHEME.test(trimmed)) return SAFE_SCHEME.test(trimmed) ? { href: trimmed } : null;
-	return { href: trimmed };
-}
-//#endregion
 //#region ../../shared/common/icons/bold-solid.svg?raw
 var bold_solid_default = "<svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 384 512\"><!--!Font Awesome Free 6.7.2 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free Copyright 2025 Fonticons, Inc.--><path d=\"M0 64C0 46.3 14.3 32 32 32l48 0 16 0 128 0c70.7 0 128 57.3 128 128c0 31.3-11.3 60.1-30 82.3c37.1 22.4 62 63.1 62 109.7c0 70.7-57.3 128-128 128L96 480l-16 0-48 0c-17.7 0-32-14.3-32-32s14.3-32 32-32l16 0 0-160L48 96 32 96C14.3 96 0 81.7 0 64zM224 224c35.3 0 64-28.7 64-64s-28.7-64-64-64L112 96l0 128 112 0zM112 288l0 128 144 0c35.3 0 64-28.7 64-64s-28.7-64-64-64l-32 0-112 0z\"/></svg>";
 //#endregion
@@ -46472,7 +46557,7 @@ var SuperDoc = class extends require_eventemitter3.import_eventemitter3.default
 		}
 		this.userColorMap = /* @__PURE__ */ new Map();
 		this.colorIndex = 0;
-		this.version = "2.23.1-next.5";
+		this.version = "2.23.1-next.7";
 		this.#log("🦋 [superdoc] Using SuperDoc version:", this.version);
 		this.superdocId = config.superdocId || require_uuid.v4();
 		this.colors = this.config.colors ?? [];