@classic-homes/agent-chat 0.0.0-stage → 0.1.1

package/dist/components/ToolTimeline.svelte

@@ -0,0 +1,113 @@
+<script lang="ts">
+  import { Icon } from '@classic-homes/theme-svelte';
+  import type { DelegationState, ToolCallState } from '../reducer.js';
+
+  let {
+    tools,
+    delegations,
+    streaming = false,
+  }: { tools: ToolCallState[]; delegations: DelegationState[]; streaming?: boolean } = $props();
+  let expanded = $state(false);
+  const running = $derived(tools.filter((t) => !t.status).length);
+  const label = $derived.by(() => {
+    if (streaming && running > 0)
+      return `Working: ${tools
+        .filter((t) => !t.status)
+        .map((t) => t.name)
+        .join(', ')}`;
+    const children = delegations.map((d) => d.child);
+    const parts = [tools.length ? `${tools.length} tool call${tools.length === 1 ? '' : 's'}` : ''];
+    if (children.length) parts.push(`via ${[...new Set(children)].join(', ')}`);
+    return parts.filter(Boolean).join(' ');
+  });
+</script>
+
+{#if tools.length > 0 || delegations.length > 0}
+  <div class="agent-timeline">
+    <button
+      type="button"
+      class="agent-timeline__toggle"
+      onclick={() => (expanded = !expanded)}
+      aria-expanded={expanded}
+    >
+      <Icon name={expanded ? 'chevron-down' : 'chevron-right'} size={14} />
+      <span>{label}</span>
+      {#if streaming && running > 0}<span class="agent-timeline__dot" aria-hidden="true"
+        ></span>{/if}
+    </button>
+    {#if expanded}
+      <ol class="agent-timeline__list">
+        {#each tools as tool (tool.callId)}
+          <li
+            class="agent-timeline__item"
+            class:agent-timeline__item--error={tool.status === 'error' || tool.status === 'refused'}
+          >
+            <span class="agent-timeline__name"
+              >{tool.server ? `${tool.server}/` : ''}{tool.name}</span
+            >
+            <span class="agent-timeline__agent">{tool.agent}</span>
+            <span class="agent-timeline__status"
+              >{tool.status ?? 'running'}{tool.durationMs !== undefined
+                ? ` · ${tool.durationMs} ms`
+                : ''}</span
+            >
+            {#if tool.summary}<div class="agent-timeline__summary">{tool.summary}</div>{/if}
+          </li>
+        {/each}
+      </ol>
+    {/if}
+  </div>
+{/if}
+
+<style>
+  .agent-timeline {
+    margin: 0.25rem 0 0.5rem;
+    font-size: 0.75rem;
+    color: hsl(var(--muted-foreground));
+  }
+  .agent-timeline__toggle {
+    display: inline-flex;
+    align-items: center;
+    gap: 0.375rem;
+    background: none;
+    border: 0;
+    padding: 0.125rem 0;
+    color: inherit;
+    cursor: pointer;
+    font: inherit;
+  }
+  .agent-timeline__dot {
+    width: 0.5rem;
+    height: 0.5rem;
+    border-radius: 9999px;
+    background: hsl(var(--primary));
+    animation: agent-pulse 1.2s ease-in-out infinite;
+  }
+  @keyframes agent-pulse {
+    50% {
+      opacity: 0.3;
+    }
+  }
+  .agent-timeline__list {
+    margin: 0.375rem 0 0;
+    padding-left: 1rem;
+    display: grid;
+    gap: 0.25rem;
+  }
+  .agent-timeline__item {
+    display: grid;
+    grid-template-columns: auto 1fr auto;
+    gap: 0 0.5rem;
+  }
+  .agent-timeline__item--error .agent-timeline__status {
+    color: hsl(var(--destructive));
+  }
+  .agent-timeline__name {
+    font-family: ui-monospace, monospace;
+  }
+  .agent-timeline__summary {
+    grid-column: 1 / -1;
+    white-space: pre-wrap;
+    opacity: 0.8;
+  }
+</style>

package/dist/components/ToolTimeline.svelte.d.ts

@@ -0,0 +1,10 @@
+import type { DelegationState, ToolCallState } from '../reducer.js';
+type $$ComponentProps = {
+    tools: ToolCallState[];
+    delegations: DelegationState[];
+    streaming?: boolean;
+};
+declare const ToolTimeline: import("svelte").Component<$$ComponentProps, {}, "">;
+type ToolTimeline = ReturnType<typeof ToolTimeline>;
+export default ToolTimeline;
+//# sourceMappingURL=ToolTimeline.svelte.d.ts.map

package/dist/components/ToolTimeline.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ToolTimeline.svelte.d.ts","sourceRoot":"","sources":["../../src/lib/components/ToolTimeline.svelte.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnE,KAAK,gBAAgB,GAAI;IAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAAC,WAAW,EAAE,eAAe,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAqD1G,QAAA,MAAM,YAAY,sDAAwC,CAAC;AAC3D,KAAK,YAAY,GAAG,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;AACpD,eAAe,YAAY,CAAC"}

package/dist/components/UiFrame.svelte

@@ -0,0 +1,95 @@
+<script lang="ts">
+  import { onMount } from 'svelte';
+  import type { UiResourceState } from '../reducer.js';
+  import {
+    MIN_FRAME_HEIGHT,
+    UI_FRAME_RENDER,
+    composerTextFor,
+    isFromFrame,
+    parseFrameMessage,
+    type FrameAction,
+  } from '../ui-frame-protocol.js';
+
+  interface Props {
+    resource: UiResourceState;
+    /** Origin of the sandbox page (agent-api `/frame`); the iframe never shares the host origin. */
+    sandboxOrigin: string;
+    onprompt?: (text: string) => void;
+    ontool?: (toolName: string, params?: Record<string, unknown>) => void;
+    onnotify?: (message: string) => void;
+  }
+  let { resource, sandboxOrigin, onprompt, ontool, onnotify }: Props = $props();
+
+  let frame: HTMLIFrameElement | null = $state(null);
+  let height = $state(MIN_FRAME_HEIGHT);
+  const initialHeight = $derived(resource.preferredFrameSize?.[1] ?? `${MIN_FRAME_HEIGHT}px`);
+
+  function send(): void {
+    frame?.contentWindow?.postMessage(
+      { type: UI_FRAME_RENDER, html: resource.html, uri: resource.uri },
+      sandboxOrigin,
+    );
+  }
+
+  function handle(action: FrameAction): void {
+    switch (action.type) {
+      case 'ready':
+        send();
+        break;
+      case 'size':
+        height = action.height;
+        break;
+      case 'prompt':
+      case 'intent':
+        onprompt?.(composerTextFor(action));
+        break;
+      case 'tool':
+        ontool?.(action.toolName, action.params); // never auto-run: the host confirms with the user
+        break;
+      case 'link':
+        window.open(action.url, '_blank', 'noopener,noreferrer');
+        break;
+      case 'notify':
+        onnotify?.(action.message);
+        break;
+    }
+  }
+
+  onMount(() => {
+    const listener = (event: MessageEvent) => {
+      if (!isFromFrame(event, frame, sandboxOrigin)) return;
+      const action = parseFrameMessage(event.data);
+      if (action) handle(action);
+    };
+    window.addEventListener('message', listener);
+    return () => window.removeEventListener('message', listener);
+  });
+</script>
+
+<div class="agent-ui-frame">
+  <iframe
+    bind:this={frame}
+    title={resource.uri}
+    src={`${sandboxOrigin}/frame`}
+    sandbox="allow-scripts allow-popups allow-popups-to-escape-sandbox allow-forms"
+    referrerpolicy="no-referrer"
+    allow=""
+    style={`height:${height > MIN_FRAME_HEIGHT ? `${height}px` : initialHeight}`}
+    onload={send}
+  ></iframe>
+</div>
+
+<style>
+  .agent-ui-frame {
+    margin: 0.5rem 0;
+    border: 1px solid hsl(var(--border));
+    border-radius: 0.5rem;
+    overflow: hidden;
+    background: hsl(var(--card));
+  }
+  iframe {
+    display: block;
+    width: 100%;
+    border: 0;
+  }
+</style>

package/dist/components/UiFrame.svelte.d.ts

@@ -0,0 +1,13 @@
+import type { UiResourceState } from '../reducer.js';
+interface Props {
+    resource: UiResourceState;
+    /** Origin of the sandbox page (agent-api `/frame`); the iframe never shares the host origin. */
+    sandboxOrigin: string;
+    onprompt?: (text: string) => void;
+    ontool?: (toolName: string, params?: Record<string, unknown>) => void;
+    onnotify?: (message: string) => void;
+}
+declare const UiFrame: import("svelte").Component<Props, {}, "">;
+type UiFrame = ReturnType<typeof UiFrame>;
+export default UiFrame;
+//# sourceMappingURL=UiFrame.svelte.d.ts.map

package/dist/components/UiFrame.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UiFrame.svelte.d.ts","sourceRoot":"","sources":["../../src/lib/components/UiFrame.svelte.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAWnD,UAAU,KAAK;IACb,QAAQ,EAAE,eAAe,CAAC;IAC1B,gGAAgG;IAChG,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACtE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AA8DH,QAAA,MAAM,OAAO,2CAAwC,CAAC;AACtD,KAAK,OAAO,GAAG,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;AAC1C,eAAe,OAAO,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+export * from './markdown.js';
+export * from './reducer.js';
+export * from './session.svelte.js';
+export * from './ui-frame-protocol.js';
+export { default as AgentChat } from './components/AgentChat.svelte';
+export { default as ArtifactPanel } from './components/ArtifactPanel.svelte';
+export { default as Composer } from './components/Composer.svelte';
+export { default as ConversationSidebar } from './components/ConversationSidebar.svelte';
+export { default as MessageItem } from './components/MessageItem.svelte';
+export { default as MessageList } from './components/MessageList.svelte';
+export { default as ModeBanner } from './components/ModeBanner.svelte';
+export { default as ToolTimeline } from './components/ToolTimeline.svelte';
+export { default as UiFrame } from './components/UiFrame.svelte';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/lib/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AACzF,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/index.js

@@ -0,0 +1,13 @@
+export * from './markdown.js';
+export * from './reducer.js';
+export * from './session.svelte.js';
+export * from './ui-frame-protocol.js';
+export { default as AgentChat } from './components/AgentChat.svelte';
+export { default as ArtifactPanel } from './components/ArtifactPanel.svelte';
+export { default as Composer } from './components/Composer.svelte';
+export { default as ConversationSidebar } from './components/ConversationSidebar.svelte';
+export { default as MessageItem } from './components/MessageItem.svelte';
+export { default as MessageList } from './components/MessageList.svelte';
+export { default as ModeBanner } from './components/ModeBanner.svelte';
+export { default as ToolTimeline } from './components/ToolTimeline.svelte';
+export { default as UiFrame } from './components/UiFrame.svelte';

package/dist/markdown.d.ts

@@ -0,0 +1,13 @@
+export interface MarkdownOptions {
+    /** Hosts (exact or `.suffix`) whose images may render; same-origin is always allowed. */
+    imageHosts?: string[];
+    /** Origin treated as internal for links (`data-internal`), default the page origin. */
+    internalOrigin?: string;
+}
+export declare function escapeHtml(text: string): string;
+/** Safe scheme check; percent-decodes first so `javascript%3A` cannot slip through. */
+export declare function isSafeUrl(url: string): boolean;
+export declare function isAllowedImageUrl(url: string, hosts?: string[]): boolean;
+export declare function isInternalUrl(url: string, internalOrigin?: string | undefined): boolean;
+export declare function parseMarkdown(text: string, options?: MarkdownOptions): string;
+//# sourceMappingURL=markdown.d.ts.map

package/dist/markdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.d.ts","sourceRoot":"","sources":["../src/lib/markdown.ts"],"names":[],"mappings":"AAiEA,MAAM,WAAW,eAAe;IAC9B,yFAAyF;IACzF,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,uFAAuF;IACvF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAID,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK/C;AAED,uFAAuF;AACvF,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAO9C;AAMD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,WAAsB,GAAG,OAAO,CAenF;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,qBAAe,GAAG,OAAO,CAOjF;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,MAAM,CA6DjF"}

package/dist/markdown.js

@@ -0,0 +1,325 @@
+/**
+ * Markdown → sanitized HTML for assistant text. Forked from @classic-homes/chat-core
+ * (packages/chat-core/src/lib/markdown.ts) and reduced to what the agent UI needs.
+ *
+ * Security: assistant output is prompt-injectable through tool results and documents, so the
+ * result is always passed through DOMPurify with a tight allow-list: no `style`, `class` only
+ * for the classes this file emits, images only from allowed hosts, links only with safe schemes.
+ * Rich HTML (artifacts, MCP-UI) never goes through here; it renders in the sandbox frame.
+ */
+import DOMPurify from 'dompurify';
+const OWN_CLASS_RE = /^agent-[\w-]+( agent-[\w-]+)*$/;
+let hooked = false;
+function ensureHook() {
+    if (hooked || typeof DOMPurify.addHook !== 'function')
+        return;
+    hooked = true;
+    DOMPurify.addHook('uponSanitizeAttribute', (_node, data) => {
+        if (data.attrName === 'class' && !OWN_CLASS_RE.test(data.attrValue))
+            data.keepAttr = false;
+    });
+}
+const DOMPURIFY_CONFIG = {
+    ALLOWED_TAGS: [
+        'p',
+        'strong',
+        'em',
+        'a',
+        'code',
+        'pre',
+        'ul',
+        'ol',
+        'li',
+        'h2',
+        'h3',
+        'h4',
+        'blockquote',
+        'table',
+        'thead',
+        'tbody',
+        'tr',
+        'th',
+        'td',
+        'br',
+        'hr',
+        'img',
+        'del',
+        'input',
+    ],
+    ALLOWED_ATTR: [
+        'href',
+        'target',
+        'rel',
+        'class',
+        'data-internal',
+        'src',
+        'alt',
+        'loading',
+        'start',
+        'type',
+        'checked',
+        'disabled',
+    ],
+    ALLOWED_URI_REGEXP: /^(?:(?:https?|mailto):|[^a-z]|[a-z+.-]+(?:[^a-z+.\-:]|$))/i,
+};
+const DEFAULT_IMAGE_HOSTS = ['classichomes.com', '.classichomes.com'];
+export function escapeHtml(text) {
+    return text.replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#039;' })[c]);
+}
+/** Safe scheme check; percent-decodes first so `javascript%3A` cannot slip through. */
+export function isSafeUrl(url) {
+    try {
+        const decoded = decodeURIComponent(url).toLowerCase().trim();
+        return !['javascript:', 'data:', 'vbscript:'].some((s) => decoded.startsWith(s));
+    }
+    catch {
+        return false;
+    }
+}
+function pageOrigin() {
+    return typeof window !== 'undefined' ? window.location.origin : undefined;
+}
+export function isAllowedImageUrl(url, hosts = DEFAULT_IMAGE_HOSTS) {
+    if (!isSafeUrl(url))
+        return false;
+    if (url.startsWith('/') && !url.startsWith('//'))
+        return true;
+    try {
+        const origin = pageOrigin();
+        const parsed = new URL(url, origin ?? 'https://invalid.local');
+        if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:')
+            return false;
+        if (origin && parsed.origin === origin)
+            return true;
+        const host = parsed.hostname.toLowerCase();
+        return hosts.some((h) => h.startsWith('.') ? host.endsWith(h) || host === h.slice(1) : host === h);
+    }
+    catch {
+        return false;
+    }
+}
+export function isInternalUrl(url, internalOrigin = pageOrigin()) {
+    if (!isSafeUrl(url) || !internalOrigin)
+        return false;
+    try {
+        return new URL(url, internalOrigin).origin === internalOrigin;
+    }
+    catch {
+        return false;
+    }
+}
+export function parseMarkdown(text, options = {}) {
+    ensureHook();
+    const CODE = '\u0000CB';
+    const INLINE = '\u0000IC';
+    let html = text.replace(/\r\n/g, '\n');
+    const codeBlocks = [];
+    html = html.replace(/```([\w-]*)[^\n]*\n([\s\S]*?)```/g, (_, lang, code) => {
+        const cls = lang
+            ? ` class="agent-code agent-lang-${lang.toLowerCase().replace(/[^a-z0-9-]/g, '')}"`
+            : ' class="agent-code"';
+        codeBlocks.push(`<pre${cls}><code>${escapeHtml(code.replace(/\n$/, ''))}</code></pre>`);
+        return `${CODE}${codeBlocks.length - 1}${CODE}`;
+    });
+    const inlineCodes = [];
+    html = html.replace(/`([^`\n]+)`/g, (_, code) => {
+        inlineCodes.push(`<code>${escapeHtml(code)}</code>`);
+        return `${INLINE}${inlineCodes.length - 1}${INLINE}`;
+    });
+    html = parseBlockquotes(html);
+    html = parseTables(html);
+    html = parseLists(html);
+    html = escapePreservingTags(html, [CODE, INLINE]);
+    html = html.replace(/^[\t ]*(?:---+|\*\*\*+|___+)[\t ]*$/gm, '<hr>');
+    html = html.replace(/^#### (.+)$/gm, '<h4>$1</h4>');
+    html = html.replace(/^### (.+)$/gm, '<h4>$1</h4>');
+    html = html.replace(/^## (.+)$/gm, '<h3>$1</h3>');
+    html = html.replace(/^# (.+)$/gm, '<h2>$1</h2>');
+    html = html.replace(/~~([^~\n]+)~~/g, '<del>$1</del>');
+    html = html.replace(/\*\*(.+?)\*\*/g, '<strong>$1</strong>');
+    html = html.replace(/__(.+?)__/g, '<strong>$1</strong>');
+    html = html.replace(/(?<!^)(?<![*\w])\*([^*\n]+)\*(?![*\w])/gm, '<em>$1</em>');
+    html = html.replace(/(?<![_\w])_([^_\n]+)_(?![_\w])/g, '<em>$1</em>');
+    const hosts = options.imageHosts ?? DEFAULT_IMAGE_HOSTS;
+    html = html.replace(/!\[([^\]]*)\]\(([^)\s]+)\)/g, (_, alt, url) => {
+        const raw = url.replace(/&amp;/g, '&');
+        if (!isAllowedImageUrl(raw, hosts))
+            return alt;
+        return `<img src="${url}" alt="${alt}" class="agent-image" loading="lazy">`;
+    });
+    html = html.replace(/\[([^\]]+)\]\(([^)\s]+)\)/g, (_, label, url) => {
+        const raw = url.replace(/&amp;/g, '&');
+        if (!isSafeUrl(raw))
+            return label;
+        if (isInternalUrl(raw, options.internalOrigin))
+            return `<a href="${url}" class="agent-internal-link" data-internal="true">${label}</a>`;
+        return `<a href="${url}" target="_blank" rel="noopener noreferrer">${label}</a>`;
+    });
+    codeBlocks.forEach((block, i) => (html = html.replace(`${CODE}${i}${CODE}`, block)));
+    inlineCodes.forEach((code, i) => (html = html.replace(`${INLINE}${i}${INLINE}`, code)));
+    html = html.replace(/\n\n+/g, '</p><p>');
+    html = html.replace(/(?<!<\/li>|<\/ul>|<\/ol>|<\/pre>|<\/h[1-4]>|<\/table>|<\/tr>|<\/td>|<\/th>|<\/blockquote>|<hr>)\n(?!<)/g, '<br>');
+    if (!html.startsWith('<'))
+        html = `<p>${html}</p>`;
+    html = html.replace(/<p>\s*<\/p>/g, '');
+    return DOMPurify.sanitize(html, DOMPURIFY_CONFIG);
+}
+function escapePreservingTags(html, markers) {
+    const tags = [
+        'blockquote',
+        'table',
+        'thead',
+        'tbody',
+        'tr',
+        'th',
+        'td',
+        'ul',
+        'ol',
+        'li',
+        'br',
+        'input',
+    ];
+    const tagPattern = tags.map((t) => `<\\/?${t}[^>]*>`).join('|');
+    const markerPattern = markers.map((m) => `${m}\\d+${m}`).join('|');
+    const pattern = new RegExp(`(${tagPattern}|${markerPattern})`, 'gi');
+    return html
+        .split(pattern)
+        .map((part) => {
+        if (tags.some((t) => new RegExp(`^<\\/?${t}[^>]*>$`, 'i').test(part)))
+            return part;
+        if (markers.some((m) => part.startsWith(m) && part.endsWith(m)))
+            return part;
+        return escapeHtml(part);
+    })
+        .join('');
+}
+function parseBlockquotes(html) {
+    const lines = html.split('\n');
+    const out = [];
+    let i = 0;
+    while (i < lines.length) {
+        if (/^\s*>/.test(lines[i])) {
+            const quote = [];
+            while (i < lines.length && /^\s*>/.test(lines[i])) {
+                quote.push(lines[i].replace(/^\s*>+\s?/, ''));
+                i += 1;
+            }
+            out.push(`<blockquote class="agent-blockquote">${quote.join('<br>')}</blockquote>`);
+            continue;
+        }
+        out.push(lines[i]);
+        i += 1;
+    }
+    return out.join('\n');
+}
+function parseItem(line) {
+    const ul = /^(\s*)[-*+]\s+(.+)$/.exec(line);
+    if (ul) {
+        const task = /^\[([ xX])\]\s+(.*)$/.exec(ul[2]);
+        return {
+            content: task ? task[2] : ul[2],
+            indent: ul[1].replace(/\t/g, '  ').length,
+            type: 'ul',
+            task: task ? task[1] !== ' ' : undefined,
+        };
+    }
+    const ol = /^(\s*)(\d+)\.\s+(.+)$/.exec(line);
+    if (ol)
+        return {
+            content: ol[3],
+            indent: ol[1].replace(/\t/g, '  ').length,
+            type: 'ol',
+            start: Number(ol[2]),
+        };
+    return null;
+}
+function buildList(items, start, indent) {
+    const first = items[start];
+    const startAttr = first.type === 'ol' && first.start !== 1 ? ` start="${first.start}"` : '';
+    let html = `<${first.type}${startAttr}${first.task !== undefined ? ' class="agent-tasklist"' : ''}>`;
+    let i = start;
+    while (i < items.length && items[i].indent >= indent) {
+        const item = items[i];
+        if (item.indent > indent) {
+            const nested = buildList(items, i, item.indent);
+            html += nested.html;
+            i = nested.end;
+            continue;
+        }
+        const box = item.task === undefined
+            ? ''
+            : `<input type="checkbox" disabled${item.task ? ' checked' : ''}> `;
+        if (i + 1 < items.length && items[i + 1].indent > indent) {
+            html += `<li>${box}${item.content}`;
+            const nested = buildList(items, i + 1, items[i + 1].indent);
+            html += `${nested.html}</li>`;
+            i = nested.end;
+        }
+        else {
+            html += `<li>${box}${item.content}</li>`;
+            i += 1;
+        }
+    }
+    return { html: `${html}</${first.type}>`, end: i };
+}
+function parseLists(html) {
+    const lines = html.split('\n');
+    const out = [];
+    let i = 0;
+    while (i < lines.length) {
+        const item = parseItem(lines[i]);
+        if (!item) {
+            out.push(lines[i]);
+            i += 1;
+            continue;
+        }
+        const items = [item];
+        i += 1;
+        while (i < lines.length) {
+            const next = parseItem(lines[i]);
+            if (next) {
+                items.push(next);
+                i += 1;
+            }
+            else if (lines[i].trim() === '' && i + 1 < lines.length && parseItem(lines[i + 1])) {
+                i += 1;
+            }
+            else
+                break;
+        }
+        out.push(buildList(items, 0, item.indent).html);
+    }
+    return out.join('\n');
+}
+const isSeparator = (line) => /^\|?[\s\-:|]+\|?$/.test(line.trim()) && line.includes('-');
+const cells = (line) => line
+    .trim()
+    .replace(/^\|/, '')
+    .replace(/\|$/, '')
+    .split('|')
+    .map((c) => c.trim());
+function parseTables(html) {
+    const lines = html.split('\n');
+    const out = [];
+    let i = 0;
+    while (i < lines.length) {
+        const line = lines[i];
+        if (line.includes('|') && !isSeparator(line) && lines[i + 1] && isSeparator(lines[i + 1])) {
+            const header = cells(line);
+            const rows = [];
+            let j = i + 2;
+            while (j < lines.length && lines[j].includes('|') && !isSeparator(lines[j])) {
+                rows.push(cells(lines[j]));
+                j += 1;
+            }
+            out.push(`<table class="agent-table"><thead><tr>${header.map((h) => `<th>${h}</th>`).join('')}</tr></thead><tbody>${rows
+                .map((r) => `<tr>${r.map((c) => `<td>${c}</td>`).join('')}</tr>`)
+                .join('')}</tbody></table>`);
+            i = j;
+            continue;
+        }
+        out.push(line);
+        i += 1;
+    }
+    return out.join('\n');
+}

package/dist/markdown.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=markdown.test.d.ts.map

package/dist/markdown.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.test.d.ts","sourceRoot":"","sources":["../src/lib/markdown.test.ts"],"names":[],"mappings":""}

package/dist/markdown.test.js

@@ -0,0 +1,35 @@
+import { describe, expect, it } from 'vitest';
+import { isAllowedImageUrl, isSafeUrl, parseMarkdown } from './markdown.js';
+describe('parseMarkdown', () => {
+    it('renders common blocks and sanitizes', () => {
+        const html = parseMarkdown('# Title\n\nSome **bold** and `code`.\n\n- a\n- b\n\n| h | i |\n|---|---|\n| 1 | 2 |');
+        expect(html).toContain('<h2>Title</h2>');
+        expect(html).toContain('<strong>bold</strong>');
+        expect(html).toContain('<code>code</code>');
+        expect(html).toContain('<li>a</li>');
+        expect(html).toContain('<table class="agent-table">');
+    });
+    it('strips scripts, inline styles and foreign classes', () => {
+        const html = parseMarkdown('hi <script>alert(1)</script> <b style="position:fixed" class="evil">x</b>');
+        expect(html).not.toContain('<script');
+        expect(html).not.toMatch(/<[a-z]+[^>]*style=/);
+        expect(html).not.toMatch(/<[a-z]+[^>]*class="evil"/);
+        expect(html).not.toMatch(/<b[\s>]/);
+    });
+    it('allows images only from allowed hosts and blocks unsafe links', () => {
+        expect(parseMarkdown('![pix](https://attacker.example/p.gif?leak=1)')).not.toContain('<img');
+        expect(parseMarkdown('![pix](https://images.classichomes.com/a.png)')).toContain('<img');
+        expect(parseMarkdown('[x](javascript:alert(1))')).not.toContain('<a');
+        const ext = parseMarkdown('[docs](https://developers.cloudflare.com/)');
+        expect(ext).toContain('target="_blank"');
+        expect(ext).toContain('rel="noopener noreferrer"');
+    });
+    it('keeps code blocks verbatim and renders task lists', () => {
+        const html = parseMarkdown('```ts\nconst a = "<b>";\n```\n\n- [x] done\n- [ ] todo');
+        expect(html).toContain('agent-lang-ts');
+        expect(html).toContain('&lt;b&gt;');
+        expect(html).toMatch(/<input[^>]*type="checkbox"[^>]*checked/);
+        expect(isSafeUrl('javascript%3Aalert(1)')).toBe(false);
+        expect(isAllowedImageUrl('/api/files/f1')).toBe(true);
+    });
+});