@diegopetrucci/pi-extensions 0.1.72 → 0.1.73

package/extensions/annotate-git-diff/web/app.js

@@ -846,6 +846,53 @@ function clearWorkingTreeCommitState() {
 	}
 }
 
+function clearCommitScopedErrors(sha) {
+	for (const key of Object.keys(state.fileErrors)) {
+		if (key.startsWith(`commits:${sha}:`)) delete state.fileErrors[key];
+	}
+}
+
+function reconcileCommitState(nextCommits) {
+	const retainedImmutableShas = new Set(
+		nextCommits.filter((commit) => commit.kind === "commit").map((commit) => commit.sha),
+	);
+
+	const knownShas = new Set([
+		...Object.keys(state.commitFilesBySha),
+		...Object.keys(state.commitErrors),
+		...Object.keys(state.commitRequestIds),
+	]);
+	for (const key of [
+		...Object.keys(state.fileContents),
+		...Object.keys(state.fileErrors),
+		...Object.keys(state.pendingRequestIds),
+	]) {
+		if (!key.startsWith("commits:")) continue;
+		const rest = key.slice("commits:".length);
+		const separator = rest.indexOf(":");
+		if (separator > 0) knownShas.add(rest.slice(0, separator));
+	}
+	for (const sha of knownShas) {
+		if (retainedImmutableShas.has(sha)) continue;
+		const previousFiles = state.commitFilesBySha[sha] ?? [];
+		for (const file of previousFiles) {
+			delete state.reviewedFiles[file.id];
+			delete state.scrollPositions[scrollKey("commits", file.id, sha)];
+		}
+		clearCommitScopedState(sha);
+		delete state.commitFilesBySha[sha];
+		delete state.commitErrors[sha];
+		delete state.commitRequestIds[sha];
+	}
+
+	for (const sha of retainedImmutableShas) {
+		// A failed immutable request is safe to retry after a successful refresh;
+		// successful immutable contents and in-flight requests remain untouched.
+		delete state.commitErrors[sha];
+		clearCommitScopedErrors(sha);
+	}
+}
+
 function requestLatestReviewData() {
 	if (!window.glimpse?.send) return;
 	if (state.reviewDataRequestId != null) return;
@@ -1779,7 +1826,7 @@ function submitDraftOnClose() {
 	const payload = buildSubmitPayload();
 	if (!hasSubmitPayloadContent(payload)) return;
 	suppressAutoSubmitOnClose = true;
-	window.glimpse?.send?.(payload);
+	window.glimpse?.send?.({ ...payload, draft: true });
 }
 
 function updateCommentsUI() {
@@ -1924,8 +1971,11 @@ window.__reviewReceive = (message) => {
 		if (state.reviewDataRequestId !== message.requestId) return;
 		clearRefreshableFileState();
 		clearWorkingTreeCommitState();
-		reviewData.files = Array.isArray(message.files) ? message.files : [];
-		reviewData.commits = Array.isArray(message.commits) ? message.commits : [];
+		const nextFiles = Array.isArray(message.files) ? message.files : [];
+		const nextCommits = Array.isArray(message.commits) ? message.commits : [];
+		reconcileCommitState(nextCommits);
+		reviewData.files = nextFiles;
+		reviewData.commits = nextCommits;
 		reviewData.branchBaseRef = message.branchBaseRef ?? null;
 		reviewData.branchMergeBaseSha = message.branchMergeBaseSha ?? null;
 		reviewData.repositoryHasHead = message.repositoryHasHead === true;
@@ -2265,7 +2315,7 @@ window.addEventListener("pagehide", submitDraftOnClose);
 submitButton.addEventListener("click", () => {
 	const payload = buildSubmitPayload();
 	suppressAutoSubmitOnClose = true;
-	window.glimpse.send(payload);
+	window.glimpse.send({ ...payload, draft: false });
 	window.glimpse.close();
 });
 

package/extensions/annotate-git-diff/web/index.html

@@ -641,9 +641,9 @@ __INLINE_TAILWIND_JS__
         <svg aria-hidden="true" focusable="false" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.4" stroke-linecap="round" stroke-linejoin="round"><path d="M10.5 2.5l3 3-8 8H2.5V10.5z"/><path d="M9 4l3 3"/></svg>
       </button>
       <button type="button" id="cancel-button" class="cursor-pointer rounded-md border border-review-border bg-review-panel px-3 py-1.5 text-xs font-medium text-review-text hover:bg-red-500/10 hover:text-red-400 hover:border-red-500/30">Cancel</button>
-      <button type="button" id="submit-button" class="gh-primary-btn">
+      <button type="button" id="submit-button" class="gh-primary-btn" title="Send review feedback to the agent" aria-label="Send review feedback to the agent">
         <svg aria-hidden="true" focusable="false" viewBox="0 0 16 16" width="12" height="12" fill="currentColor"><path d="M13.78 4.22a.75.75 0 0 1 0 1.06l-7.25 7.25a.75.75 0 0 1-1.06 0L2.22 9.28a.751.751 0 0 1 .018-1.042.751.751 0 0 1 1.042-.018L6 10.94l6.72-6.72a.75.75 0 0 1 1.06 0Z"/></svg>
-        Submit review
+        Submit to agent
       </button>
     </div>
   </div>

package/extensions/annotate-last-message/README.md

@@ -22,7 +22,15 @@ Run `/annotate-last-message` from an interactive pi session. The annotation wind
 - section comments for larger chunks of the message, and
 - inline notes tied to individual lines.
 
-When you submit, the extension appends a structured planning-oriented feedback prompt to the current editor buffer. It does not auto-apply changes or rewrite the previous assistant message in place.
+The message preview renders headings, lists, blockquotes, emphasis, inline code, strikethrough, links, and fenced code while preserving the original one-based source-line coordinates. Raw HTML is displayed as text. Link destinations are shown as inert text beside the label; the window never navigates to an assistant-provided URL.
+
+The window follows the active Pi theme through `ctx.ui.theme`, including Markdown colors and dark/light appearance, with readable local fallbacks when a theme token is unavailable. Opening the window does not change Pi's host theme or settings.
+
+When you submit, the extension sends a structured planning-oriented feedback prompt directly to the agent as a follow-up message. Your existing editor text is left untouched. It does not auto-apply changes or rewrite the previous assistant message in place.
+
+## Rollback
+
+There is no runtime setting or toggle for submit behavior. To roll back the rendering/theme change, reinstall the previous package version or revert this source change and rebuild/reinstall the package; no Pi theme or host setting needs to be restored.
 
 ## Requirements
 

package/extensions/annotate-last-message/index.ts

@@ -3,22 +3,61 @@ import type { ExtensionAPI, ExtensionCommandContext } from "@earendil-works/pi-c
 import { openQuietGlimpse, type QuietGlimpseWindow } from "./quiet-glimpse.js";
 import { composeAnnotateLastMessagePrompt, hasAnnotateLastMessageFeedback } from "./prompt.js";
 import { findLastAssistantMessage } from "./session.js";
-import type { AnnotateLastMessageCancelPayload, AnnotateLastMessageSubmitPayload, AnnotateLastMessageWindowMessage, LastAssistantMessageData } from "./types.js";
+import type {
+	AnnotateLastMessageCancelPayload,
+	AnnotateLastMessageInlineComment,
+	AnnotateLastMessageSectionComment,
+	AnnotateLastMessageSubmitPayload,
+	AnnotateLastMessageWindowMessage,
+	LastAssistantMessageData,
+} from "./types.js";
 import { buildAnnotateLastMessageHtml } from "./ui.js";
 
+function isInlineComment(value: unknown): value is AnnotateLastMessageInlineComment {
+	return (
+		typeof value === "object" &&
+		value != null &&
+		"line" in value &&
+		typeof value.line === "number" &&
+		Number.isInteger(value.line) &&
+		value.line > 0 &&
+		"body" in value &&
+		typeof value.body === "string"
+	);
+}
+
+function isSectionComment(value: unknown): value is AnnotateLastMessageSectionComment {
+	return (
+		typeof value === "object" &&
+		value != null &&
+		"sectionId" in value &&
+		typeof value.sectionId === "string" &&
+		"body" in value &&
+		typeof value.body === "string"
+	);
+}
+
 function isSubmitPayload(value: unknown): value is AnnotateLastMessageSubmitPayload {
-	return typeof value === "object" && value != null && "type" in value && value.type === "submit";
+	return (
+		typeof value === "object" &&
+		value != null &&
+		"type" in value &&
+		value.type === "submit" &&
+		"overallComment" in value &&
+		typeof value.overallComment === "string" &&
+		"inlineComments" in value &&
+		Array.isArray(value.inlineComments) &&
+		value.inlineComments.every(isInlineComment) &&
+		"sectionComments" in value &&
+		Array.isArray(value.sectionComments) &&
+		value.sectionComments.every(isSectionComment)
+	);
 }
 
 function isCancelPayload(value: unknown): value is AnnotateLastMessageCancelPayload {
 	return typeof value === "object" && value != null && "type" in value && value.type === "cancel";
 }
 
-function appendPrompt(ctx: ExtensionCommandContext, prompt: string): void {
-	const prefix = ctx.ui.getEditorText().trim().length > 0 ? "\n\n" : "";
-	ctx.ui.pasteToEditor(`${prefix}${prompt}`);
-}
-
 export function registerAnnotateLastMessageCommand(pi: ExtensionAPI): void {
 	let activeWindow: QuietGlimpseWindow | null = null;
 	let annotationOpening = false;
@@ -61,7 +100,7 @@ export function registerAnnotateLastMessageCommand(pi: ExtensionAPI): void {
 		const attempt = ++annotationAttempt;
 
 		try {
-			const html = buildAnnotateLastMessageHtml(messageData);
+			const html = buildAnnotateLastMessageHtml(messageData, ctx.ui.theme);
 			const window = await openQuietGlimpse(html, {
 				width: 1440,
 				height: 980,
@@ -111,8 +150,8 @@ export function registerAnnotateLastMessageCommand(pi: ExtensionAPI): void {
 
 					const onMessage = (data: unknown): void => {
 						if (isSubmitPayload(data) || isCancelPayload(data)) {
-							requestWindowClose();
 							settle(data);
+							requestWindowClose();
 						}
 					};
 
@@ -143,7 +182,7 @@ export function registerAnnotateLastMessageCommand(pi: ExtensionAPI): void {
 			void (async (windowMessageSource: QuietGlimpseWindow, sourceData: LastAssistantMessageData) => {
 				try {
 					const result = await terminalMessagePromise;
-					if (suppressedWindows.has(windowMessageSource)) return;
+					if (suppressedWindows.has(windowMessageSource) || attempt !== annotationAttempt) return;
 					if (result == null) return;
 					if (result.type === "cancel") {
 						ctx.ui.notify("Annotation cancelled.", "info");
@@ -155,10 +194,10 @@ export function registerAnnotateLastMessageCommand(pi: ExtensionAPI): void {
 					}
 
 					const prompt = composeAnnotateLastMessagePrompt(sourceData, result);
-					appendPrompt(ctx, prompt);
-					ctx.ui.notify("Appended annotation feedback to the editor.", "info");
+					pi.sendUserMessage(prompt, { deliverAs: "followUp" });
+					ctx.ui.notify("Annotation feedback sent to the agent.", "info");
 				} catch (error) {
-					if (suppressedWindows.has(windowMessageSource)) return;
+					if (suppressedWindows.has(windowMessageSource) || attempt !== annotationAttempt) return;
 					const message = error instanceof Error ? error.message : String(error);
 					ctx.ui.notify(`Annotation failed: ${message}`, "error");
 				}
@@ -166,6 +205,7 @@ export function registerAnnotateLastMessageCommand(pi: ExtensionAPI): void {
 
 			ctx.ui.notify("Opened native annotation window.", "info");
 		} catch (error) {
+			if (attempt !== annotationAttempt) return;
 			closeActiveWindow({ suppressResults: true });
 			const message = error instanceof Error ? error.message : String(error);
 			ctx.ui.notify(`Annotation failed: ${message}`, "error");

package/extensions/annotate-last-message/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-annotate-last-message",
-  "version": "0.1.9",
+  "version": "0.1.10",
   "description": "A standalone pi extension that adds /annotate-last-message, a native Glimpse UI for annotating the latest assistant reply.",
   "keywords": [
     "pi-package",
@@ -20,6 +20,7 @@
     "prompt.ts",
     "quiet-glimpse.ts",
     "session.ts",
+    "theme.ts",
     "types.ts",
     "ui.ts",
     "web",

package/extensions/annotate-last-message/quiet-glimpse.ts

@@ -57,13 +57,15 @@ class QuietGlimpseWindowImpl extends EventEmitter implements QuietGlimpseWindow
 
 		const rl = createInterface({ input: proc.stdout, crlfDelay: Infinity });
 		rl.on("line", (line) => {
-			let message: GlimpseProtocolMessage;
+			let parsed: unknown;
 			try {
-				message = JSON.parse(line) as GlimpseProtocolMessage;
+				parsed = JSON.parse(line);
 			} catch {
 				this.#reportError(new Error(`Malformed glimpse protocol line: ${line}`));
 				return;
 			}
+			if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) return;
+			const message = parsed as GlimpseProtocolMessage;
 
 			switch (message.type) {
 				case "ready":

package/extensions/annotate-last-message/theme.ts

@@ -0,0 +1,247 @@
+import type {
+	Theme,
+	ThemeBg,
+	ThemeColor,
+} from "@earendil-works/pi-coding-agent";
+
+/**
+ * The small public part of Pi's active theme used by the native annotation UI.
+ * The command passes ctx.ui.theme directly; no Pi theme singleton is imported.
+ */
+export type AnnotateTheme = Pick<Theme, "appearance" | "colors" | "fg" | "bg">;
+
+const DARK_FALLBACK: Readonly<Record<string, string>> = {
+	"--color-scheme": "dark",
+	"--bg": "#0d1117",
+	"--panel": "#151b23",
+	"--panel-hover": "#1f242c",
+	"--inset": "#0b1118",
+	"--border": "#30363d",
+	"--border-muted": "#21262d",
+	"--text": "#f0f6fc",
+	"--muted": "#8a8a8a",
+	"--dim": "#585858",
+	"--accent": "#f4c95d",
+	"--success": "#7ee787",
+	"--error": "#ffb3b3",
+	"--warning": "#f4c95d",
+	"--mdHeading": "#f4c95d",
+	"--mdLink": "#7dd3fc",
+	"--mdLinkUrl": "#8a8a8a",
+	"--mdCode": "#9b7bff",
+	"--mdCodeBlock": "inherit",
+	"--mdCodeBlockBorder": "#6f42c1",
+	"--mdQuote": "#8a8a8a",
+	"--mdQuoteBorder": "#6f42c1",
+	"--mdHr": "#585858",
+	"--mdListBullet": "#f4c95d",
+	"--mdBold": "inherit",
+	"--mdItalic": "inherit",
+};
+
+const LIGHT_FALLBACK: Readonly<Record<string, string>> = {
+	"--color-scheme": "light",
+	"--bg": "#f6f8fa",
+	"--panel": "#ffffff",
+	"--panel-hover": "#f3f4f6",
+	"--inset": "#f6f8fa",
+	"--border": "#d0d7de",
+	"--border-muted": "#afb8c1",
+	"--text": "#1f2328",
+	"--muted": "#57606a",
+	"--dim": "#6e7781",
+	"--accent": "#8250df",
+	"--success": "#1a7f37",
+	"--error": "#cf222e",
+	"--warning": "#9a6700",
+	"--mdHeading": "#9a6700",
+	"--mdLink": "#0969da",
+	"--mdLinkUrl": "#57606a",
+	"--mdCode": "#8250df",
+	"--mdCodeBlock": "#1a7f37",
+	"--mdCodeBlockBorder": "#6e7781",
+	"--mdQuote": "#57606a",
+	"--mdQuoteBorder": "#6e7781",
+	"--mdHr": "#8c959f",
+	"--mdListBullet": "#8250df",
+	"--mdBold": "inherit",
+	"--mdItalic": "inherit",
+};
+
+const BASIC_ANSI_COLORS: Readonly<Record<number, string>> = {
+	0: "#000000",
+	1: "#800000",
+	2: "#008000",
+	3: "#808000",
+	4: "#000080",
+	5: "#800080",
+	6: "#008080",
+	7: "#c0c0c0",
+	8: "#808080",
+	9: "#ff0000",
+	10: "#00ff00",
+	11: "#ffff00",
+	12: "#0000ff",
+	13: "#ff00ff",
+	14: "#00ffff",
+	15: "#ffffff",
+};
+
+const CUBE_LEVELS = [0, 95, 135, 175, 215, 255] as const;
+const SENTINEL = "X";
+
+const FOREGROUND_THEME_VARS: ReadonlyArray<{ token: ThemeColor; cssVar: string }> = [
+	{ token: "text", cssVar: "--text" },
+	{ token: "muted", cssVar: "--muted" },
+	{ token: "dim", cssVar: "--dim" },
+	{ token: "accent", cssVar: "--accent" },
+	{ token: "success", cssVar: "--success" },
+	{ token: "error", cssVar: "--error" },
+	{ token: "warning", cssVar: "--warning" },
+	{ token: "mdHeading", cssVar: "--mdHeading" },
+	{ token: "mdLink", cssVar: "--mdLink" },
+	{ token: "mdLinkUrl", cssVar: "--mdLinkUrl" },
+	{ token: "mdCode", cssVar: "--mdCode" },
+	{ token: "mdCodeBlock", cssVar: "--mdCodeBlock" },
+	{ token: "mdCodeBlockBorder", cssVar: "--mdCodeBlockBorder" },
+	{ token: "mdQuote", cssVar: "--mdQuote" },
+	{ token: "mdQuoteBorder", cssVar: "--mdQuoteBorder" },
+	{ token: "mdHr", cssVar: "--mdHr" },
+	{ token: "mdListBullet", cssVar: "--mdListBullet" },
+	{ token: "border", cssVar: "--border" },
+	{ token: "borderMuted", cssVar: "--border-muted" },
+];
+
+const BACKGROUND_THEME_VARS: ReadonlyArray<{ token: ThemeBg; cssVar: string }> = [
+	{ token: "customMessageBg", cssVar: "--panel" },
+	{ token: "selectedBg", cssVar: "--panel-hover" },
+	{ token: "toolPendingBg", cssVar: "--inset" },
+];
+
+function toHex(value: number): string {
+	const clamped = Math.min(255, Math.max(0, Math.round(value)));
+	return clamped.toString(16).padStart(2, "0");
+}
+
+function xterm256ToHex(index: number): string | null {
+	if (!Number.isInteger(index) || index < 0 || index > 255) return null;
+	if (index < 16) return BASIC_ANSI_COLORS[index] ?? null;
+	if (index >= 232) {
+		const value = 8 + (index - 232) * 10;
+		const hex = toHex(value);
+		return `#${hex}${hex}${hex}`;
+	}
+	const cubeIndex = index - 16;
+	const blue = cubeIndex % 6;
+	const green = Math.floor(cubeIndex / 6) % 6;
+	const red = Math.floor(cubeIndex / 36) % 6;
+	return `#${toHex(CUBE_LEVELS[red])}${toHex(CUBE_LEVELS[green])}${toHex(CUBE_LEVELS[blue])}`;
+}
+
+function colorValueToHex(value: unknown): string | null {
+	if (typeof value !== "object" || value == null) return null;
+	const color = value as { kind?: unknown; r?: unknown; g?: unknown; b?: unknown; index?: unknown };
+	if (color.kind === "rgb") {
+		const channels = [color.r, color.g, color.b];
+		if (!channels.every((channel) => typeof channel === "number" && Number.isFinite(channel) && channel >= 0 && channel <= 255)) {
+			return null;
+		}
+		return `#${toHex(color.r as number)}${toHex(color.g as number)}${toHex(color.b as number)}`;
+	}
+	if (color.kind === "indexed" && typeof color.index === "number") {
+		return xterm256ToHex(color.index);
+	}
+	// OKLCH values are intentionally handled through theme.fg/theme.bg below.
+	// Those public helpers account for Pi's configured terminal color mode.
+	return null;
+}
+
+function ansiColorToHex(value: unknown, background: boolean): string | null {
+	if (typeof value !== "string") return null;
+	const match = new RegExp(`^\\u001b\\[([0-9;]+)m`).exec(value);
+	if (!match) return null;
+	const params = match[1].split(";").map(Number);
+	const [mode, kind, first, second, third] = params;
+	const expectedMode = background ? 48 : 38;
+	if (mode !== expectedMode) {
+		if (!background && ((mode >= 30 && mode <= 37) || (mode >= 90 && mode <= 97))) {
+			return xterm256ToHex(mode >= 90 ? mode - 82 : mode - 30);
+		}
+		if (background && ((mode >= 40 && mode <= 47) || (mode >= 100 && mode <= 107))) {
+			return xterm256ToHex(mode >= 100 ? mode - 92 : mode - 40);
+		}
+		return null;
+	}
+	if (kind === 2 && params.length >= 5) {
+		const channels = [first, second, third];
+		if (!channels.every((channel) => Number.isInteger(channel) && channel >= 0 && channel <= 255)) return null;
+		return `#${toHex(first)}${toHex(second)}${toHex(third)}`;
+	}
+	if (kind === 5 && params.length >= 3) return xterm256ToHex(first);
+	return null;
+}
+
+function readThemeColor(theme: AnnotateTheme, token: ThemeColor | ThemeBg, background: boolean): string | null {
+	let colors: Readonly<Record<string, unknown>> | undefined;
+	try {
+		colors = theme.colors as Readonly<Record<string, unknown>>;
+	} catch {
+		colors = undefined;
+	}
+
+	let colorValue: unknown;
+	try {
+		colorValue = colors?.[token];
+	} catch {
+		colorValue = undefined;
+	}
+	const fromColors = colorValueToHex(colorValue);
+	if (fromColors != null) return fromColors;
+
+	try {
+		const styled = background
+			? theme.bg(token as ThemeBg, SENTINEL)
+			: theme.fg(token as ThemeColor, SENTINEL);
+		return ansiColorToHex(styled, background);
+	} catch {
+		return null;
+	}
+}
+
+function readAppearance(theme: AnnotateTheme | null | undefined): "dark" | "light" {
+	try {
+		return theme?.appearance === "light" ? "light" : "dark";
+	} catch {
+		return "dark";
+	}
+}
+
+/**
+ * Build safe CSS custom properties from the active Pi theme.
+ *
+ * Every value is either a local fallback or a validated hex color. Theme
+ * getters are isolated per token so one broken custom theme cannot make the
+ * native annotation window unreadable or prevent it from opening.
+ */
+export function getThemeCssVars(theme?: AnnotateTheme | null): Record<string, string> {
+	const vars: Record<string, string> = {
+		...(readAppearance(theme) === "light" ? LIGHT_FALLBACK : DARK_FALLBACK),
+	};
+	if (theme == null) return vars;
+
+	for (const { token, cssVar } of FOREGROUND_THEME_VARS) {
+		const color = readThemeColor(theme, token, false);
+		if (color != null) vars[cssVar] = color;
+	}
+	for (const { token, cssVar } of BACKGROUND_THEME_VARS) {
+		const color = readThemeColor(theme, token, true);
+		if (color != null) vars[cssVar] = color;
+	}
+	return vars;
+}
+
+export const __testing = {
+	ansiColorToHex,
+	colorValueToHex,
+	xterm256ToHex,
+};

package/extensions/annotate-last-message/ui.ts

@@ -2,6 +2,8 @@ import { readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 
+import type { AnnotateTheme } from "./theme.js";
+import { getThemeCssVars } from "./theme.js";
 import type { LastAssistantMessageData } from "./types.js";
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
@@ -15,9 +17,33 @@ function escapeInlineScriptSource(value: string): string {
 	return value.replace(/<\/(script)/gi, "<\\/$1");
 }
 
-export function buildAnnotateLastMessageHtml(data: LastAssistantMessageData): string {
+function buildThemeCssBlock(vars: Record<string, string>): string {
+	const declarations = Object.entries(vars)
+		.map(([key, value]) => `  ${key}: ${value};`)
+		.join("\n");
+	return `:root {\n${declarations}\n}`;
+}
+
+export function buildAnnotateLastMessageHtml(
+	data: LastAssistantMessageData,
+	theme?: AnnotateTheme,
+): string {
 	const templateHtml = readFileSync(join(webDir, "index.html"), "utf8");
+	const mdRendererJs = escapeInlineScriptSource(readFileSync(join(webDir, "md-renderer.js"), "utf8"));
 	const appJs = escapeInlineScriptSource(readFileSync(join(webDir, "app.js"), "utf8"));
 	const payload = escapeForInlineScript(JSON.stringify(data));
-	return templateHtml.replace('"__INLINE_DATA__"', payload).replace("__INLINE_JS__", appJs);
+	const themeBlock = buildThemeCssBlock(getThemeCssVars(theme));
+	const replacements = new Map([
+		['"__INLINE_DATA__"', payload],
+		["__INLINE_MD_RENDERER_JS__", mdRendererJs],
+		["__INLINE_JS__", appJs],
+		["__INLINE_THEME__", themeBlock],
+	]);
+
+	// Replace the original template in one pass so marker-like message data,
+	// theme values, or runtime source is never scanned as another placeholder.
+	return templateHtml.replace(
+		/"__INLINE_DATA__"|__INLINE_MD_RENDERER_JS__|__INLINE_JS__|__INLINE_THEME__/g,
+		(marker) => replacements.get(marker) ?? marker,
+	);
 }