@danieltmn/tamnora 0.1.0

package/harness/packages/server/public/markdown.js

@@ -0,0 +1,174 @@
+// Dependency-free Markdown -> HTML for the console chat, mirroring the SPA's
+// react-markdown + rehype-highlight behaviour. Every raw text is HTML-escaped
+// before any tag is inserted, so model output cannot inject markup.
+
+const HTML_ESCAPES = { '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' };
+
+export function escapeHtml(value) {
+  return String(value ?? '').replace(/[&<>"']/g, (c) => HTML_ESCAPES[c]);
+}
+
+const KEYWORDS = {
+  js: 'const let var function return if else for while do break continue new class extends super import export from default async await try catch finally throw typeof instanceof delete void yield switch case this null undefined true false of in',
+  jsx: 'const let var function return if else for while new class import export default async await try catch finally throw typeof this null undefined true false',
+  ts: 'const let var function return if else for while do break continue new class extends implements interface type enum import export from default async await try catch finally throw public private protected readonly as switch case this null undefined true false of in',
+  json: 'true false null',
+  bash: 'if then else elif fi for while do done case esac function in echo cd ls cat grep sed awk export source return exit sudo rm mkdir touch pwd curl wget git npm pnpm node',
+  sh: 'if then else elif fi for while do done case esac function in echo cd ls cat grep sed awk export source return exit sudo rm mkdir touch pwd',
+  php: 'function return if else elseif endif foreach as echo print class extends implements public private protected static new use namespace try catch finally throw match fn true false null isset unset array',
+  python: 'def return if elif else for while import from as class try except finally raise with lambda yield pass break continue in is not and or None True False self',
+};
+
+function normalizeLang(lang) {
+  const value = String(lang ?? '').toLowerCase();
+  if (value === 'tsx' || value === 'typescript') return 'ts';
+  if (value === 'javascript' || value === 'mjs' || value === 'cjs') return 'js';
+  if (value === 'shell' || value === 'zsh' || value === 'console') return 'bash';
+  if (value === 'yml' || value === 'yaml') return 'yaml';
+  return value;
+}
+
+function wrap(cls, text) {
+  return `<span class="${cls}">${escapeHtml(text)}</span>`;
+}
+
+/** Minimal tokenizer: comments, strings, numbers and keywords. Best effort. */
+export function highlight(code, lang) {
+  const language = normalizeLang(lang);
+  const keywords = new Set((KEYWORDS[language] ?? '').split(/\s+/).filter(Boolean));
+  const pattern =
+    /(\/\/[^\n]*|#[^\n]*|\/\*[\s\S]*?\*\/)|("(?:[^"\\]|\\.)*"|'(?:[^'\\]|\\.)*'|`(?:[^`\\]|\\.)*`)|(\b\d[\d._]*\b)|([A-Za-z_$][\w$]*)/g;
+
+  let out = '';
+  let last = 0;
+  let match;
+  while ((match = pattern.exec(code))) {
+    out += escapeHtml(code.slice(last, match.index));
+    const [full, comment, str, num, word] = match;
+    if (comment) out += wrap('tok-comment', full);
+    else if (str) out += wrap('tok-string', full);
+    else if (num) out += wrap('tok-number', full);
+    else if (word && keywords.has(word)) out += wrap('tok-keyword', full);
+    else out += escapeHtml(full);
+    last = match.index + full.length;
+  }
+  return out + escapeHtml(code.slice(last));
+}
+
+function inline(text) {
+  let out = escapeHtml(text);
+  const codes = [];
+  out = out.replace(/`([^`]+)`/g, (_, code) => {
+    codes.push(code);
+    return `\uE000${codes.length - 1}\uE000`;
+  });
+  out = out
+    .replace(/\*\*([^*]+)\*\*/g, '<strong>$1</strong>')
+    .replace(/__([^_]+)__/g, '<strong>$1</strong>')
+    .replace(/(^|[^*\w])\*([^*\n]+)\*/g, '$1<em>$2</em>')
+    .replace(
+      /\[([^\]]+)\]\((https?:\/\/[^\s)]+)\)/g,
+      '<a href="$2" target="_blank" rel="noopener noreferrer">$1</a>'
+    );
+  return out.replace(/\uE000(\d+)\uE000/g, (_, idx) => `<code>${codes[Number(idx)]}</code>`);
+}
+
+/** Render a Markdown string to safe HTML. */
+export function renderMarkdown(text) {
+  const lines = String(text ?? '').replace(/\r\n?/g, '\n').split('\n');
+  const out = [];
+  let paragraph = [];
+  let i = 0;
+
+  const flush = () => {
+    if (paragraph.length) {
+      out.push(`<p>${inline(paragraph.join(' '))}</p>`);
+      paragraph = [];
+    }
+  };
+
+  while (i < lines.length) {
+    const line = lines[i];
+
+    const fence = line.match(/^\s*```\s*([\w+#.-]*)\s*$/);
+    if (fence) {
+      flush();
+      const lang = fence[1] || '';
+      const body = [];
+      i += 1;
+      while (i < lines.length && !/^\s*```\s*$/.test(lines[i])) {
+        body.push(lines[i]);
+        i += 1;
+      }
+      i += 1;
+      const code = body.join('\n');
+      out.push(
+        `<div class="code-block"><div class="code-bar"><span class="code-lang">${escapeHtml(
+          lang || 'texto'
+        )}</span><button type="button" class="code-copy">copiar</button></div>` +
+          `<pre class="code"><code>${highlight(code, lang)}</code></pre></div>`
+      );
+      continue;
+    }
+
+    if (/^\s*$/.test(line)) {
+      flush();
+      i += 1;
+      continue;
+    }
+
+    const heading = line.match(/^(#{1,6})\s+(.*)$/);
+    if (heading) {
+      flush();
+      const level = heading[1].length;
+      out.push(`<h${level}>${inline(heading[2])}</h${level}>`);
+      i += 1;
+      continue;
+    }
+
+    if (/^\s*([-*_])(\s*\1){2,}\s*$/.test(line)) {
+      flush();
+      out.push('<hr />');
+      i += 1;
+      continue;
+    }
+
+    if (/^\s*>/.test(line)) {
+      flush();
+      const quote = [];
+      while (i < lines.length && /^\s*>/.test(lines[i])) {
+        quote.push(lines[i].replace(/^\s*>\s?/, ''));
+        i += 1;
+      }
+      out.push(`<blockquote>${renderMarkdown(quote.join('\n'))}</blockquote>`);
+      continue;
+    }
+
+    if (/^\s*([-*+])\s+/.test(line)) {
+      flush();
+      const items = [];
+      while (i < lines.length && /^\s*([-*+])\s+/.test(lines[i])) {
+        items.push(lines[i].replace(/^\s*([-*+])\s+/, ''));
+        i += 1;
+      }
+      out.push(`<ul>${items.map((item) => `<li>${inline(item)}</li>`).join('')}</ul>`);
+      continue;
+    }
+
+    if (/^\s*\d+[.)]\s+/.test(line)) {
+      flush();
+      const items = [];
+      while (i < lines.length && /^\s*\d+[.)]\s+/.test(lines[i])) {
+        items.push(lines[i].replace(/^\s*\d+[.)]\s+/, ''));
+        i += 1;
+      }
+      out.push(`<ol>${items.map((item) => `<li>${inline(item)}</li>`).join('')}</ol>`);
+      continue;
+    }
+
+    paragraph.push(line.trim());
+    i += 1;
+  }
+  flush();
+  return out.join('\n');
+}