wendang 0.0.1 → 0.1.0

package/dist/cjs/validation/mind-map.js

@@ -0,0 +1,129 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateMindMap = validateMindMap;
+exports.mindMapOutline = mindMapOutline;
+const idOk = (v) => typeof v === 'string' && /^[\w-]{1,80}$/.test(v);
+function validateMindMap(node) {
+    const a = node.attrs;
+    if (!a || ![1, 2, 3].includes(Number(a.formatVersion)) || !idOk(a.id) || !idOk(a.rootId) ||
+        !['right', 'left', 'both', 'down'].includes(String(a.layout)) ||
+        !['blue', 'teal', 'violet', 'amber'].includes(String(a.theme)) ||
+        typeof a.height !== 'number' || !Number.isFinite(a.height) || a.height < 240 || a.height > 800) {
+        throw new Error('思维导图属性或格式版本无效');
+    }
+    if (!Array.isArray(node.content) || node.content.length < 1 || node.content.filter(t => t?.type === 'mindMapTopic').length > 500 || node.content.length > 1500) {
+        throw new Error('思维导图需要 1～500 个主题');
+    }
+    const ids = new Set();
+    for (const t of node.content.filter(t => t?.type !== 'mindMapRelation')) {
+        const p = t?.attrs;
+        if (!t || t.type !== 'mindMapTopic' || !p || !idOk(p.id) || ids.has(p.id) ||
+            typeof p.parentId !== 'string' || (p.parentId !== '' && !idOk(p.parentId)) ||
+            typeof p.order !== 'number' || !Number.isFinite(p.order) || Math.abs(p.order) > 1e12 ||
+            (t.content !== undefined && !Array.isArray(t.content)))
+            throw new Error('思维导图主题结构无效');
+        ids.add(p.id);
+        for (const [key, values] of Object.entries({ shape: ['round', 'pill', 'text'], align: ['left', 'center', 'right'] })) {
+            if (p[key] !== undefined && p[key] !== null && !values.includes(String(p[key])))
+                throw new Error('导图主题样式无效');
+        }
+        for (const key of ['color', 'background'])
+            if (p[key] && !['#18243a', '#ffffff', '#3864ef', '#087f8c', '#7950c7', '#a66b08', '#d94848', '#f3f5fb', '#dce7ff', '#d3f4e9', '#ece0ff', '#fff0c2', '#ffe1e1', '#233044'].includes(String(p[key])))
+                throw new Error('导图颜色无效');
+        if (p.fontSize !== undefined && p.fontSize !== null && ![12, 14, 16, 18, 20].includes(Number(p.fontSize)))
+            throw new Error('导图字号无效');
+        if (p.icon && !['💡', '🎯', '📌', '🚩', '⭐', '✅', '⚠️', '💬', '📅', '🔎'].includes(String(p.icon)))
+            throw new Error('导图图标无效');
+        if (p.done !== undefined && p.done !== null && typeof p.done !== 'boolean')
+            throw new Error('导图状态无效');
+        if (p.side !== undefined && p.side !== null && p.side !== -1 && p.side !== 1)
+            throw new Error('导图分支方向无效');
+        if (p.attachmentId && (typeof p.attachmentId !== 'string' || !/^[0-9a-f-]{36}$/i.test(p.attachmentId)))
+            throw new Error('导图图片引用无效');
+        let length = 0;
+        const fields = new Set();
+        let fieldsStarted = false, noteStarted = false;
+        for (const c of t.content ?? []) {
+            if (c && ['mindMapDescription', 'mindMapNote'].includes(c.type ?? '')) {
+                if (c.type === 'mindMapDescription' && noteStarted)
+                    throw new Error('主题描述必须位于备注之前');
+                fieldsStarted = true;
+                if (c.type === 'mindMapNote')
+                    noteStarted = true;
+                if (fields.has(c.type) || (c.content !== undefined && !Array.isArray(c.content)) || c.content?.some(n => n?.type !== 'text' || typeof n.text !== 'string' || n.content !== undefined) || (c.content ?? []).reduce((n, x) => n + (x.text?.length ?? 0), 0) > 4000)
+                    throw new Error('导图描述或备注无效');
+                fields.add(c.type);
+                continue;
+            }
+            if (!c || c.type !== 'text' || typeof c.text !== 'string' || c.content !== undefined) {
+                throw new Error('思维导图主题只支持纯文本');
+            }
+            if (fieldsStarted)
+                throw new Error('主题标题必须位于描述和备注之前');
+            length += c.text.length;
+        }
+        if (length > 2000)
+            throw new Error('单个主题文字不得超过 2000 字符');
+    }
+    if (!ids.has(a.rootId))
+        throw new Error('思维导图缺少中心主题');
+    if (a.branchStyle && !['curve', 'straight', 'step'].includes(String(a.branchStyle)))
+        throw new Error('分支样式无效');
+    const relationIds = new Set();
+    for (const r of node.content.filter(t => t?.type === 'mindMapRelation')) {
+        const p = r.attrs;
+        if (!p || !idOk(p.id) || ids.has(p.id) || relationIds.has(p.id) || !idOk(p.source) || !idOk(p.target) || p.source === p.target ||
+            !['related', 'depends', 'reference'].includes(String(p.kind)) || typeof p.label !== 'string' || p.label.length > 200 || r.content?.length)
+            throw new Error('导图关系线无效');
+        relationIds.add(p.id);
+    }
+}
+/** Same deterministic tree projection as the reader; orphan/cycle conflicts never discard text. */
+function mindMapOutline(node) {
+    const rootId = String(node.attrs?.rootId ?? '');
+    if (!idOk(rootId) || !Array.isArray(node.content) || node.content.filter(t => t?.type === 'mindMapTopic').length > 500 || node.content.length > 1500)
+        return [];
+    const topics = (node.content ?? []).filter(t => t.type === 'mindMapTopic').map(t => ({
+        id: String(t.attrs?.id ?? ''), parentId: String(t.attrs?.parentId ?? ''),
+        order: Number(t.attrs?.order) || 0, text: (t.content ?? []).filter(c => c.type === 'text').map(c => c.text ?? '').join(''),
+        ...Object.fromEntries((t.content ?? []).filter(c => c.type === 'mindMapDescription' || c.type === 'mindMapNote')
+            .map(c => [c.type === 'mindMapDescription' ? 'description' : 'note', (c.content ?? []).map(n => n.text ?? '').join('')])),
+        ...(t.attrs?.attachmentId ? { attachmentId: String(t.attrs.attachmentId) } : {}),
+    }));
+    if (!topics.some(t => t.id === rootId))
+        return [];
+    const byId = new Map(topics.map(t => [t.id, t]));
+    for (const t of topics) {
+        if (t.id === rootId)
+            t.parentId = '';
+        else if (!byId.has(t.parentId) || t.parentId === t.id)
+            t.parentId = rootId;
+    }
+    for (const start of [...topics].sort((a, b) => a.id.localeCompare(b.id))) {
+        const path = [], seen = new Set();
+        let current = start;
+        while (current && current.id !== rootId) {
+            if (seen.has(current.id)) {
+                byId.get(path.slice(path.indexOf(current.id)).sort()[0]).parentId = rootId;
+                break;
+            }
+            path.push(current.id);
+            seen.add(current.id);
+            current = byId.get(current.parentId);
+        }
+    }
+    topics.sort((a, b) => a.order - b.order || a.id.localeCompare(b.id));
+    const result = [];
+    const visited = new Set();
+    const visit = (id, depth) => {
+        const topic = byId.get(id);
+        if (!topic || visited.has(id))
+            return;
+        visited.add(id);
+        result.push({ ...topic, depth });
+        for (const child of topics.filter(t => t.parentId === id))
+            visit(child.id, depth + 1);
+    };
+    visit(rootId, 0);
+    return result;
+}

package/dist/cjs/validation/schema-version.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CONTENT_SCHEMA_VERSION = void 0;
+/** 协同握手与正文写入共用，不依赖 Nest 服务。 */
+exports.CONTENT_SCHEMA_VERSION = 10;

package/dist/cjs/validation/schema.js

@@ -0,0 +1,376 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ContentSchemaService = exports.SCHEMA_VERSION = exports.ALLOWED_NODES = void 0;
+const error_js_1 = require("./error.js");
+const ErrorCode = { VALIDATION_FAILED: 'validation.failed' };
+const doc_node_whitelist_js_1 = require("./doc-node-whitelist.js");
+Object.defineProperty(exports, "ALLOWED_NODES", { enumerable: true, get: function () { return doc_node_whitelist_js_1.ALLOWED_NODES; } });
+const video_embed_js_1 = require("./video-embed.js");
+const schema_version_js_1 = require("./schema-version.js");
+const mind_map_js_1 = require("./mind-map.js");
+const callout_js_1 = require("./callout.js");
+const workbook_js_1 = require("./workbook.js");
+/**
+ * 文档 schema 校验与派生提取（M0 定稿，见实施计划 4.1）。
+ *
+ * 职责：
+ * 1) 校验客户端提交的 ProseMirror JSON 是否只含白名单节点/标记 → 否则**拒绝写入**，
+ *    避免旧客户端遇到未知节点的文档时覆盖成空（对齐主方案第 3 节）。
+ * 2) 提取派生数据：正文引用的页面 ID（用于反向链接）、附件 ID。
+ *
+ * schemaVersion 升级策略：新增节点或旧客户端无法保留的持久属性时提升 SCHEMA_VERSION，并在此登记。
+ * 旧版本客户端读到更高版本文档时由前端拒编辑（本服务不影响读取）。
+ */
+/**
+ * 正文格式版本。
+ *
+ * 变更记录：
+ *  - 1：M0 初始版本（段落/标题/列表/引用/代码/表格/图片/页面引用/提及/公式）
+ *  - 2：新增 `fileAttachment`（视频或文件卡片）与 `callout`（高亮块）
+ *  - 3：新增块级格式属性 `textAlign`/`indent`（段落与标题）与行内样式标记
+ *       `textStyle`（文字颜色）/`highlight`（背景高亮）；同时补上此前遗漏的
+ *       `paragraph` 属性条目与表格 `colwidth`（列宽）
+ *  - 4：新增分栏节点 `columns`/`column`（等宽，无属性）
+ *  - 5：新增平台视频节点 `videoEmbed`
+ *  - 6：新增结构化思维导图 `mindMap` / `mindMapTopic`
+ *  - 7：导图描述、备注、关系节点、受限主题样式与图片引用；标题支持行内标记
+ *  - 8：思维导图分支方向 side，防止旧编辑器重写时丢失左右布局
+ *  - 9：高亮块图标与独立文字、边框、填充颜色
+ *  - 10：独立工作簿根格式 workbook（不进入 ProseMirror）
+ *
+ * 提升它的意义：客户端读到**更高版本**的文档时可以选择拒编辑（而非静默丢内容），
+ * 因此只要引入了新的节点类型就必须登记在此，不能只改白名单。
+ */
+exports.SCHEMA_VERSION = schema_version_js_1.CONTENT_SCHEMA_VERSION;
+/** 属性白名单：只保留我们认识且安全的属性，其余剥离（防 XSS 与样式污染）。 */
+const ALLOWED_ATTRS = {
+    // 标题：级别 + 块级格式（对齐/缩进）
+    heading: new Set(['level', 'textAlign', 'indent']),
+    // 段落此前**没有条目** → 任何段落属性都会被丢弃（对齐/缩进加上来时必须补）
+    paragraph: new Set(['textAlign', 'indent']),
+    // Tiptap / Markdown 已有的标准属性；遗漏会让从 3 开始的列表保存后变回 1。
+    orderedList: new Set(['start']),
+    // 行内样式标记的颜色值（漏登记 = 颜色丢失，只剩空标记）
+    textStyle: new Set(['color']),
+    highlight: new Set(['color']),
+    // width：等比缩放的显式宽度（四角手柄）；align：图片工具条的左/中/右对齐。
+    // 两者都必须登记，否则作者调整尺寸/对齐后一经保存就被静默剥离。
+    image: new Set(['attachmentId', 'alt', 'width', 'align']),
+    fileAttachment: new Set(['attachmentId', 'filename', 'mimeType', 'size']),
+    videoEmbed: new Set(['provider', 'videoId', 'page', 'startSeconds']),
+    mindMap: new Set(['id', 'rootId', 'formatVersion', 'layout', 'theme', 'height', 'branchStyle']),
+    mindMapTopic: new Set(['id', 'parentId', 'order', 'shape', 'color', 'background', 'fontSize', 'align', 'icon', 'done', 'attachmentId', 'side']),
+    mindMapRelation: new Set(['id', 'source', 'target', 'kind', 'label']),
+    callout: new Set(['tone', 'icon', 'textColor', 'borderColor', 'backgroundColor']),
+    codeBlock: new Set(['language']),
+    link: new Set(['href', 'target', 'rel']),
+    pageLink: new Set(['pageId', 'label']),
+    mention: new Set(['userId', 'label']),
+    // colwidth：Tiptap 的列宽就是这个属性。此前未登记 → 拖动列宽保存后被
+    // 静默剥离（且当时没有任何测试覆盖属性白名单，所以长期未被发现）。
+    tableCell: new Set(['colspan', 'rowspan', 'align', 'colwidth', 'backgroundColor']),
+    tableHeader: new Set(['colspan', 'rowspan', 'align', 'colwidth', 'backgroundColor']),
+    taskItem: new Set(['checked']),
+    mathInline: new Set(['latex']),
+    mathBlock: new Set(['latex']),
+};
+/**
+ * 需要强制为**正整数**的表格属性。
+ *
+ * ## 为什么只登记名字不够（实测的正文整篇消失）
+ *
+ * 白名单只保证"属性名合法"，不保证**类型**合法。历史数据里出现过
+ * `colspan: "2"` / `colspan: 0` / `colwidth: "[180,0]"`：
+ *
+ * - 字符串 colspan 会让 `prosemirror-tables` 的 `findWidth()` 执行
+ *   `rowWidth += colspan` 时发生**字符串拼接**（`0 + "1"` → `"01"`），
+ *   `width` 膨胀到 1e39，`computeMap()` 的 `map[i] = 0` 抛
+ *   `RangeError: Invalid array length`；
+ * - `colspan: 0` 会让列宽数组长度与 colspan 不匹配；
+ * - 字符串 colwidth 会在 `removeColSpan` 的 `slice().splice()` 处抛错。
+ *
+ * 三者都挂在 Tiptap 挂载期，表现为**正文区整体渲染失败**（用户看到"标题与目录
+ * 还在、正文空白"）。因此这里在入库边界上做强类型归一：把能安全转换的转成正确
+ * 类型，转换不了的**丢弃该属性**（回退 schema 默认值），而不是原样存进去。
+ *
+ * 前端另有读取侧兜底（`web/src/shared/table-attrs.ts`），因为历史数据已经存在，
+ * 且协同路径不经过本服务的校验。
+ */
+const POSITIVE_INT_ATTRS = new Set(['colspan', 'rowspan']);
+const CELL_BACKGROUND_COLORS = new Set([
+    '#f1f3f5', '#fff3bf', '#d3f9d8', '#d0ebff', '#e5dbff', '#ffe3e3',
+]);
+/** 该节点是否是表格单元格（需要强类型化数值属性）。 */
+function isTableCellType(type) {
+    return type === 'tableCell' || type === 'tableHeader';
+}
+/**
+ * 把值归一为 `[1, +∞)` 的整数；不合法返回 undefined（表示丢弃该属性）。
+ *
+ * 不抛错而丢弃的理由：这是**净化**而非校验——粘贴来的内容常带脏属性，
+ * 为此拒绝整个保存会让用户无法保存正文，代价远大于丢掉一个单元格属性。
+ */
+function coercePositiveInt(raw) {
+    const n = typeof raw === 'number' ? raw : Number.parseInt(String(raw ?? ''), 10);
+    if (!Number.isFinite(n))
+        return undefined;
+    const i = Math.floor(n);
+    return i >= 1 ? i : undefined;
+}
+/**
+ * 把 colwidth 归一为「正整数数组」或 null；不合法返回 undefined（丢弃）。
+ *
+ * 注意 0 是**合法分量**（表示"该列自适应"），长度必须与 colspan 对齐，
+ * 因此这里保留 0、只把非数字分量归 0。
+ */
+function coerceColwidth(raw) {
+    if (raw === null)
+        return null;
+    let list;
+    if (Array.isArray(raw)) {
+        list = raw;
+    }
+    else if (typeof raw === 'string') {
+        const text = raw.trim();
+        if (!text)
+            return null;
+        if (text.startsWith('[')) {
+            try {
+                const parsed = JSON.parse(text);
+                list = Array.isArray(parsed) ? parsed : [];
+            }
+            catch {
+                return undefined;
+            }
+        }
+        else {
+            list = text.split(',');
+        }
+    }
+    else {
+        return undefined;
+    }
+    if (list.length === 0)
+        return null;
+    const nums = list.map((v) => {
+        const n = typeof v === 'number' ? v : Number.parseInt(String(v ?? ''), 10);
+        return Number.isFinite(n) && n > 0 ? Math.floor(n) : 0;
+    });
+    return nums.some((n) => n > 0) ? nums : null;
+}
+const MAX_NODES = 20000; // 防御性上限，避免超大文档拖垮服务
+const MAX_DEPTH = 100;
+class ContentSchemaService {
+    validate(raw, schemaVersion) {
+        if (!Number.isSafeInteger(schemaVersion) || schemaVersion < 1)
+            throw error_js_1.ContentValidationError.validation('内容版本必须是正整数');
+        if ((0, workbook_js_1.isWorkbookDocument)(raw)) {
+            if (schemaVersion !== 10)
+                throw error_js_1.ContentValidationError.validation('工作表需要当前编辑器版本');
+            try {
+                return { doc: (0, workbook_js_1.validateWorkbook)(raw), schemaVersion,
+                    linkTargetIds: [], attachmentIds: [], mentionUserIds: [] };
+            }
+            catch (error) {
+                throw error_js_1.ContentValidationError.validation(error instanceof Error ? error.message : '工作表格式无效');
+            }
+        }
+        if (typeof raw !== 'object' ||
+            raw === null ||
+            raw.type !== 'doc') {
+            throw error_js_1.ContentValidationError.validation('正文格式非法：根节点必须是 doc');
+        }
+        if (schemaVersion > exports.SCHEMA_VERSION) {
+            throw new error_js_1.ContentValidationError(ErrorCode.VALIDATION_FAILED, `正文版本 ${schemaVersion} 高于服务端支持的 ${exports.SCHEMA_VERSION}，请升级后再编辑`, 422);
+        }
+        const linkTargetIds = new Set();
+        const attachmentIds = new Set();
+        const mentionUserIds = new Set();
+        let nodeCount = 0;
+        const walk = (node, depth, parentType = '') => {
+            if (typeof node !== 'object' || node === null) {
+                throw error_js_1.ContentValidationError.validation('正文包含非法节点');
+            }
+            if (depth > MAX_DEPTH) {
+                throw error_js_1.ContentValidationError.validation('正文嵌套层级过深');
+            }
+            const n = node;
+            const type = n.type;
+            if ((type === 'mindMapTopic' || type === 'mindMapRelation') && parentType !== 'mindMap') {
+                throw error_js_1.ContentValidationError.validation('导图主题只能放在思维导图内');
+            }
+            if (['mindMapDescription', 'mindMapNote'].includes(String(type)) && parentType !== 'mindMapTopic')
+                throw error_js_1.ContentValidationError.validation('导图描述只能放在主题内');
+            if (type === 'mindMap') {
+                try {
+                    (0, mind_map_js_1.validateMindMap)(n);
+                }
+                catch (err) {
+                    throw error_js_1.ContentValidationError.validation(err instanceof Error ? err.message : '思维导图结构无效');
+                }
+            }
+            if (type === 'callout' && !(0, callout_js_1.validCalloutAttrs)(n.attrs ?? {}))
+                throw error_js_1.ContentValidationError.validation('高亮块属性无效');
+            if (typeof type === 'string') {
+                if (!doc_node_whitelist_js_1.ALLOWED_NODES.has(type)) {
+                    throw new error_js_1.ContentValidationError(ErrorCode.VALIDATION_FAILED, `正文包含服务端不支持的节点「${type}」，已拒绝保存以避免内容丢失`, 422, { nodeType: type, schemaVersion: exports.SCHEMA_VERSION });
+                }
+                nodeCount += 1;
+                if (nodeCount > MAX_NODES) {
+                    throw error_js_1.ContentValidationError.validation('正文节点数超出上限');
+                }
+            }
+            const out = {};
+            if (typeof type === 'string')
+                out.type = type;
+            // 属性净化：非白名单属性直接丢弃，而非报错（粘贴内容常携带脏属性）
+            if (n.attrs && typeof n.attrs === 'object') {
+                const allowed = typeof type === 'string' ? ALLOWED_ATTRS[type] : undefined;
+                const cleaned = {};
+                for (const [k, v] of Object.entries(n.attrs)) {
+                    if (!allowed || !allowed.has(k))
+                        continue;
+                    if (isTableCellType(type) && k === 'backgroundColor') {
+                        if (typeof v === 'string' && CELL_BACKGROUND_COLORS.has(v))
+                            cleaned[k] = v;
+                        continue;
+                    }
+                    if (k === 'href' && typeof v === 'string') {
+                        if (!this.isSafeHref(v))
+                            continue;
+                    }
+                    // 表格单元格的数值属性必须强类型化：字符串形态会让
+                    // prosemirror-tables 崩溃、整篇正文渲染失败（见 POSITIVE_INT_ATTRS 注释）
+                    if (isTableCellType(type) && POSITIVE_INT_ATTRS.has(k)) {
+                        const coerced = coercePositiveInt(v);
+                        if (coerced === undefined)
+                            continue;
+                        cleaned[k] = coerced;
+                        continue;
+                    }
+                    if (isTableCellType(type) && k === 'colwidth') {
+                        const coerced = coerceColwidth(v);
+                        if (coerced === undefined)
+                            continue;
+                        cleaned[k] = coerced;
+                        continue;
+                    }
+                    cleaned[k] = v;
+                }
+                if (Object.keys(cleaned).length > 0)
+                    out.attrs = cleaned;
+            }
+            if (type === 'videoEmbed') {
+                const video = (0, video_embed_js_1.normalizeVideoEmbed)(n.attrs);
+                if (!video)
+                    throw error_js_1.ContentValidationError.validation('视频属性无效，请重新插入视频');
+                out.attrs = { ...video };
+            }
+            if (typeof n.text === 'string')
+                out.text = n.text;
+            // 标记净化
+            if (Array.isArray(n.marks)) {
+                const marks = n.marks
+                    .filter((m) => typeof m.type === 'string' && doc_node_whitelist_js_1.ALLOWED_MARKS.has(m.type))
+                    .map((m) => {
+                    const mm = { type: m.type };
+                    if (m.attrs && typeof m.attrs === 'object') {
+                        const allowed = ALLOWED_ATTRS[m.type];
+                        const cleaned = {};
+                        for (const [k, v] of Object.entries(m.attrs)) {
+                            if (!allowed?.has(k))
+                                continue;
+                            // 链接标记的 href 同样必须过协议白名单。
+                            // 注意：这里曾漏检，导致正文内超链接可携带 javascript: 协议
+                            // 绕过服务端校验（由 doc-schema 单测发现）。
+                            if (k === 'href') {
+                                if (typeof v !== 'string' || !this.isSafeHref(v))
+                                    continue;
+                            }
+                            cleaned[k] = v;
+                        }
+                        if (Object.keys(cleaned).length > 0)
+                            mm.attrs = cleaned;
+                    }
+                    return mm;
+                });
+                if (marks.length > 0)
+                    out.marks = marks;
+            }
+            // 派生提取
+            if (type === 'pageLink' && n.attrs) {
+                const pid = n.attrs.pageId;
+                if (typeof pid === 'string' && pid.length > 0)
+                    linkTargetIds.add(pid);
+            }
+            if ((type === 'image' || type === 'mindMapTopic') && n.attrs) {
+                const aid = n.attrs.attachmentId;
+                if (typeof aid === 'string' && aid.length > 0) {
+                    attachmentIds.add(aid);
+                }
+            }
+            // 视频/文件卡片同样引用附件：必须一并收集，否则这些附件会被
+            // 附件引用计数与孤儿清理误判为「无人引用」而删掉。
+            if (type === 'fileAttachment' && n.attrs) {
+                const aid = n.attrs.attachmentId;
+                if (typeof aid === 'string' && aid.length > 0) {
+                    attachmentIds.add(aid);
+                }
+            }
+            // 公式源码长度上限：LaTeX 渲染复杂度可被超长输入放大
+            if ((type === 'mathInline' || type === 'mathBlock') && n.attrs) {
+                const latex = n.attrs.latex;
+                if (typeof latex === 'string' && latex.length > 5000) {
+                    throw error_js_1.ContentValidationError.validation('公式内容过长（上限 5000 字符）');
+                }
+            }
+            if (type === 'mention' && n.attrs) {
+                const uid = n.attrs.userId;
+                if (typeof uid === 'string' && uid.length > 0) {
+                    mentionUserIds.add(uid);
+                }
+            }
+            if (Array.isArray(n.content)) {
+                out.content = n.content
+                    .filter((c) => c !== null && c !== undefined)
+                    .map((c) => walk(c, depth + 1, typeof type === 'string' ? type : ''));
+            }
+            return out;
+        };
+        const doc = walk(raw, 0);
+        return {
+            doc,
+            schemaVersion: exports.SCHEMA_VERSION,
+            linkTargetIds: [...linkTargetIds],
+            attachmentIds: [...attachmentIds],
+            mentionUserIds: [...mentionUserIds],
+        };
+    }
+    /** 仅允许 http/https/mailto 与站内相对链接，阻断 javascript: 等危险协议。 */
+    isSafeHref(href) {
+        const trimmed = href.trim().toLowerCase();
+        if (trimmed.startsWith('/') || trimmed.startsWith('#'))
+            return true;
+        return (trimmed.startsWith('http://') ||
+            trimmed.startsWith('https://') ||
+            trimmed.startsWith('mailto:'));
+    }
+    /** 纯文本投影：供 M0 搜索与摘要使用（不含 HTML，避免 XSS 面）。 */
+    extractPlainText(doc) {
+        if ((0, workbook_js_1.isWorkbookDocument)(doc))
+            return (0, workbook_js_1.workbookText)(doc);
+        const buf = [];
+        const walk = (node) => {
+            if (typeof node !== 'object' || node === null)
+                return;
+            const n = node;
+            if (typeof n.text === 'string')
+                buf.push(n.text);
+            if (Array.isArray(n.content))
+                n.content.forEach(walk);
+        };
+        walk(doc);
+        return buf.join(' ').replace(/\s+/g, ' ').trim();
+    }
+}
+exports.ContentSchemaService = ContentSchemaService;

package/dist/cjs/validation/video-embed.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("../shared/video-embed.js"), exports);

package/dist/cjs/validation/workbook.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("../shared/workbook.js"), exports);

package/dist/esm/document.js

@@ -0,0 +1,3 @@
+export * from './schema.js';
+export * from './shared/node-catalog.js';
+export * from './shared/doc-text.js';

package/dist/esm/index.js

@@ -0,0 +1,3 @@
+export * from './schema.js';
+export { emptyWorkbook, validateWorkbook } from './spreadsheet.js';
+export { createMindMap, readMindMap, mindMapToJson } from './mindmap.js';

package/dist/esm/mindmap.js

@@ -0,0 +1,4 @@
+export * from './shared/mind-map.js';
+export * from './shared/mind-map-phase2.js';
+export * from './shared/mind-map-folding.js';
+export { validateMindMap } from './validation/mind-map.js';

package/dist/esm/schema.js

@@ -0,0 +1,3 @@
+export { ContentSchemaService, SCHEMA_VERSION } from './validation/schema.js';
+export { ContentValidationError } from './validation/error.js';
+export { ALLOWED_NODES, ALLOWED_MARKS } from './validation/doc-node-whitelist.js';