@dustfeather/deckrun 2.0.0

package/dist/titles.js

@@ -0,0 +1,30 @@
+/**
+ * How much of a document is searched for its `<title>`, and how long a
+ * heading or title may be before it is ignored.
+ *
+ * The document is attacker-supplied — it arrives from `deckrun <url>`,
+ * `/__fetch-doc` or a `POST /__present-doc` body — so every scan here is
+ * bounded. An unbounded `[^>]*` or `[\s\S]*?` re-scans the remaining input
+ * from every candidate start position, which turns a megabyte of `<title`
+ * into quadratic work on the server's only thread.
+ */
+const HEAD_SCAN_LIMIT = 64 * 1024;
+const ATTR_LIMIT = 200;
+const TEXT_LIMIT = 2000;
+const HEADING_RE = new RegExp(`<h[1-6][^>]{0,${ATTR_LIMIT}}>([\\s\\S]{0,${TEXT_LIMIT}}?)</h[1-6]>`, "i");
+const TITLE_RE = new RegExp(`<title[^>]{0,${ATTR_LIMIT}}>([\\s\\S]{0,${TEXT_LIMIT}}?)</title>`, "i");
+function stripTags(value) {
+    return value.replace(/<[^>]{0,1000}>/g, "").trim();
+}
+/** First heading of the deck, with inline markup stripped. */
+export function deckTitle(slides, fallback) {
+    const heading = slides[0]?.html.slice(0, HEAD_SCAN_LIMIT).match(HEADING_RE);
+    const text = heading ? stripTags(heading[1]) : "";
+    return text || fallback;
+}
+/** An HTML doc's own `<title>`, with inline markup stripped. */
+export function docTitle(html, fallback) {
+    const match = html.slice(0, HEAD_SCAN_LIMIT).match(TITLE_RE);
+    const text = match ? stripTags(match[1]) : "";
+    return text || fallback;
+}

package/package.json

@@ -0,0 +1,64 @@
+{
+  "name": "@dustfeather/deckrun",
+  "version": "2.0.0",
+  "description": "A local-first presentation tool for writing, editing, presenting, and exporting Markdown slides or self-contained HTML docs.",
+  "keywords": [
+    "presentation",
+    "slides",
+    "markdown",
+    "deck",
+    "mermaid",
+    "katex",
+    "pdf-export",
+    "local-first",
+    "cli"
+  ],
+  "homepage": "https://github.com/dustfeather/deckrun#readme",
+  "bugs": {
+    "url": "https://github.com/dustfeather/deckrun/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/dustfeather/deckrun.git"
+  },
+  "license": "MIT",
+  "author": "Catalin Teodorescu",
+  "type": "module",
+  "engines": {
+    "node": ">=26"
+  },
+  "bin": {
+    "deckrun": "./dist/index.js"
+  },
+  "files": [
+    "dist/",
+    "THIRD-PARTY-NOTICES.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "prepare": "git config core.hooksPath .githooks 2>/dev/null || true",
+    "build": "tsc && chmod +x dist/index.js",
+    "dev": "tsx src/index.ts",
+    "typecheck": "tsc --noEmit",
+    "test": "npm run build && node --test"
+  },
+  "dependencies": {
+    "commander": "^15.0.0",
+    "katex": "^0.18.7",
+    "marked": "^18.0.13",
+    "mermaid": "^11.17.2",
+    "open": "^11.0.4",
+    "sanitize-html": "^2.17.7"
+  },
+  "devDependencies": {
+    "@types/node": "^26.6.1",
+    "@types/sanitize-html": "^2.16.0",
+    "tsx": "^4.23.13",
+    "typescript": "^7.0.2"
+  },
+  "allowScripts": {
+    "esbuild@0.28.2": true
+  }
+}