@flamingo-stack/openframe-frontend-core 0.0.467 → 0.0.468-snapshot.20260723140929

package/src/components/chat/utils/chunk-parser.ts

@@ -1,255 +0,0 @@
-/**
- * Utilities for parsing NATS chunks into structured actions
- */
-
-import { MESSAGE_TYPE, type ChunkData, type ParsedChunkAction, type ToolExecutionSegment, type PendingToolCallData } from '../types'
-
-function normalizeToolCalls(raw: unknown): PendingToolCallData[] {
-  if (!Array.isArray(raw)) return []
-  return raw
-    .filter((item): item is Record<string, any> => !!item && typeof item === 'object')
-    .map((item) => ({
-      toolExecutionRequestId: String(item.toolExecutionRequestId ?? ''),
-      toolName: String(item.toolName ?? ''),
-      toolTitle: typeof item.toolTitle === 'string' ? item.toolTitle : undefined,
-      toolExplanation: typeof item.toolExplanation === 'string' ? item.toolExplanation : undefined,
-      toolType: typeof item.toolType === 'string' ? item.toolType : undefined,
-      requiresApproval: item.requiresApproval === true,
-      approvalType: typeof item.approvalType === 'string' ? item.approvalType : null,
-      toolCallArguments:
-        item.toolCallArguments && typeof item.toolCallArguments === 'object'
-          ? (item.toolCallArguments as Record<string, any>)
-          : null,
-    }))
-}
-
-/**
- * Parse a raw NATS chunk into a structured action
- */
-export function parseChunkToAction(chunk: unknown): ParsedChunkAction | null {
-  if (!chunk || typeof chunk !== 'object') return null
-  
-  const data = chunk as ChunkData
-  const type = String(data.type || '')
-
-  switch (type) {
-    case MESSAGE_TYPE.MESSAGE_START:
-      return { action: 'message_start' }
-      
-    case MESSAGE_TYPE.MESSAGE_END:
-      return { action: 'message_end' }
-      
-    case MESSAGE_TYPE.AI_METADATA: {
-      const providerName = data.providerName || data.provider
-      if (typeof data.modelName === 'string' && typeof providerName === 'string') {
-        return {
-          action: 'metadata',
-          modelDisplayName: data.modelDisplayName,
-          modelName: data.modelName,
-          providerName,
-          contextWindow: typeof data.contextWindow === 'number' ? data.contextWindow : 0,
-        }
-      }
-      return null
-    }
-    
-    case MESSAGE_TYPE.TEXT:
-      if (typeof data.text === 'string') {
-        return { action: 'text', text: data.text }
-      }
-      return null
-
-    case MESSAGE_TYPE.THINKING:
-      if (typeof data.text === 'string') {
-        return { action: 'thinking', text: data.text }
-      }
-      return null
-
-    case MESSAGE_TYPE.EXECUTING_TOOL:
-      return {
-        action: 'tool_execution',
-        segment: {
-          type: 'tool_execution',
-          data: {
-            type: 'EXECUTING_TOOL',
-            integratedToolType: data.integratedToolType || '',
-            toolFunction: data.toolFunction || '',
-            toolTitle: typeof data.title === 'string' ? data.title : undefined,
-            parameters: data.parameters,
-            toolExecutionRequestId: typeof data.toolExecutionRequestId === 'string' ? data.toolExecutionRequestId : undefined,
-          }
-        }
-      }
-
-    case MESSAGE_TYPE.EXECUTED_TOOL:
-      return {
-        action: 'tool_execution',
-        segment: {
-          type: 'tool_execution',
-          data: {
-            type: 'EXECUTED_TOOL',
-            integratedToolType: data.integratedToolType || '',
-            toolFunction: data.toolFunction || '',
-            toolTitle: typeof data.title === 'string' ? data.title : undefined,
-            parameters: data.parameters,
-            result: data.result,
-            success: data.success,
-            toolExecutionRequestId: typeof data.toolExecutionRequestId === 'string' ? data.toolExecutionRequestId : undefined,
-          }
-        }
-      }
-      
-    case MESSAGE_TYPE.APPROVAL_REQUEST: {
-      const requestId = data.approvalRequestId || data.approval_request_id || ''
-      const approvalType = data.approvalType || 'USER'
-      const toolCalls = normalizeToolCalls(data.toolCalls)
-
-      if (toolCalls.length > 0) {
-        return {
-          action: 'approval_batch',
-          requestId,
-          approvalType,
-          toolCalls,
-        }
-      }
-
-      return {
-        action: 'approval_request',
-        requestId,
-        command: data.command || '',
-        explanation: data.explanation,
-        approvalType,
-      }
-    }
-      
-    case MESSAGE_TYPE.APPROVAL_RESULT: {
-      // The realtime NATS chunk carries the resolver's name as `displayName`; the
-      // persisted GraphQL message exposes the same value as `resolvedByName`. Accept
-      // either so realtime and history-replay render "by {name}" identically.
-      const resolvedByName =
-        typeof data.resolvedByName === 'string'
-          ? data.resolvedByName
-          : typeof data.displayName === 'string'
-            ? data.displayName
-            : undefined
-      return {
-        action: 'approval_result',
-        requestId: data.approvalRequestId || data.approval_request_id || '',
-        approved: data.approved === true,
-        approvalType: data.approvalType || 'CLIENT',
-        resolvedByName,
-      }
-    }
-      
-    case MESSAGE_TYPE.ERROR:
-      return {
-        action: 'error',
-        error: data.error || 'An error occurred',
-        details: data.details,
-      }
-      
-    case MESSAGE_TYPE.MESSAGE_REQUEST:
-      return {
-        action: 'message_request',
-        text: String(data.text || ''),
-        ownerType: typeof data.ownerType === 'string' ? data.ownerType : undefined,
-        displayName: typeof data.displayName === 'string' ? data.displayName : undefined,
-        userId: typeof data.userId === 'string' ? data.userId : undefined,
-        // Entity-context refs the user attached to this message (backend
-        // `MESSAGE_REQUEST` chunk → `contextItems: [{ type, id }]`). The wire
-        // shape carries no label; the host resolves display text + icon. `label`
-        // is REQUIRED on `ChatContextItem`, so fall back to the id (same as the
-        // historical path in `process-historical-messages.ts`) — keeps both
-        // message sources producing an identical shape.
-        contextItems: Array.isArray(data.contextItems)
-          ? (data.contextItems as Array<{ type?: unknown; id?: unknown }>)
-              .filter((it) => typeof it?.type === 'string' && typeof it?.id === 'string')
-              .map((it) => ({ type: it.type as string, id: it.id as string, label: it.id as string }))
-          : undefined,
-      }
-
-    case MESSAGE_TYPE.TOKEN_USAGE:
-      return {
-        action: 'token_usage',
-        data: {
-          inputTokensSize: data.inputTokensSize ?? 0,
-          outputTokensSize: data.outputTokensSize ?? 0,
-          totalTokensSize: data.totalTokensSize ?? 0,
-          contextSize: data.contextSize ?? 0,
-        },
-      }
-
-    case MESSAGE_TYPE.CONTEXT_COMPACTION_START:
-      return { action: 'context_compaction_start' }
-
-    case MESSAGE_TYPE.CONTEXT_COMPACTION_END:
-      return {
-        action: 'context_compaction_end',
-        summary: typeof data.text === 'string' ? data.text : undefined,
-      }
-
-    case MESSAGE_TYPE.SYSTEM:
-      if (typeof data.text === 'string') {
-        return { action: 'system', text: data.text }
-      }
-      return null
-
-    case MESSAGE_TYPE.DIRECT_MESSAGE:
-      if (typeof data.text === 'string') {
-        return {
-          action: 'direct_message',
-          text: data.text,
-          ownerType: typeof data.ownerType === 'string' ? data.ownerType : undefined,
-          displayName: typeof data.displayName === 'string' ? data.displayName : undefined,
-          userId: typeof data.userId === 'string' ? data.userId : undefined,
-        }
-      }
-      return null
-
-    case MESSAGE_TYPE.DIALOG_CLOSED:
-      return { action: 'dialog_closed' }
-
-    default:
-      return null
-  }
-}
-
-/**
- * Check if a chunk represents a control message (start/end)
- */
-export function isControlChunk(chunk: unknown): boolean {
-  if (!chunk || typeof chunk !== 'object') return false
-  const data = chunk as ChunkData
-  const type = String(data.type || '')
-  return type === MESSAGE_TYPE.MESSAGE_START || type === MESSAGE_TYPE.MESSAGE_END
-}
-
-/**
- * Check if a chunk represents an error
- */
-export function isErrorChunk(chunk: unknown): boolean {
-  if (!chunk || typeof chunk !== 'object') return false
-  const data = chunk as ChunkData
-  return data.type === MESSAGE_TYPE.ERROR
-}
-
-/**
- * Check if a chunk represents metadata
- */
-export function isMetadataChunk(chunk: unknown): boolean {
-  if (!chunk || typeof chunk !== 'object') return false
-  const data = chunk as ChunkData
-  return data.type === MESSAGE_TYPE.AI_METADATA
-}
-
-/**
- * Extract text content from a chunk if it's a text chunk
- */
-export function extractTextFromChunk(chunk: unknown): string | null {
-  if (!chunk || typeof chunk !== 'object') return null
-  const data = chunk as ChunkData
-  if (data.type === MESSAGE_TYPE.TEXT && typeof data.text === 'string') {
-    return data.text
-  }
-  return null
-}

package/src/components/ui/.simple-markdown-renderer.md

@@ -1,40 +0,0 @@
-<!-- source-hash: cb258dc120396ef8c715487b0cdc1022 -->
-Client-side React component that renders LLM-generated markdown safely, combining `react-markdown` with a custom XSS sanitization pipeline and support for GitHub-flavored markdown, syntax highlighting, and embedded media.
-
-## Key Components
-
-### Security Pipeline
-- **`rehypeStripUnsafe()`** — Custom rehype plugin that strips dangerous HAST nodes after `rehype-raw` parsing. Removes `<script>`, `<style>`, `<object>`, event handler attributes (`on*`), `javascript:` / `data:` URIs, and `iframe srcdoc` vectors.
-- **`srcsetHasUnsafeCandidate()`** — Inspects every candidate URL in `srcset` attributes (not just the first), preventing multi-candidate injection attacks.
-- **`escapeUnknownHtmlTags()`** — Pre-processes markdown text to escape HTML tags not in the `SAFE_HTML_TAGS` allowlist, preventing LLM-emitted XML-style tags (e.g., `<ticket>`, `<their>`) from reaching React as unrecognized custom elements. Preserves code blocks and inline code spans.
-- **`cardAwareUrlTransform()`** — Extends `react-markdown`'s default URL sanitizer to allow the internal `card://` scheme for chat-card markers while keeping all other unsafe schemes blocked.
-
-### Constants & Regexes
-| Export | Purpose |
-|--------|---------|
-| `SAFE_HTML_TAGS` | Allowlist of permitted HTML5 tags forwarded to React |
-| `STRIP_ELEMENTS` | Tags removed entirely at the HAST level |
-| `EVENT_HANDLER_ATTR_RE` | Matches `on*` attribute names |
-| `JAVASCRIPT_URL_RE` / `DATA_URL_RE` | Detect unsafe URL schemes |
-| `TAG_LIKE_REGEX` | Parses HTML-like tags in markdown source |
-
-### Mermaid Support
-- `mermaidStyles` — Responsive CSS for Mermaid SVG diagrams using DM Sans font.
-
-## Usage Example
-
-```typescript
-import { SimpleMarkdownRenderer } from './simple-markdown-renderer';
-
-// Basic usage — content is sanitized automatically
-<SimpleMarkdownRenderer
-  content="## Hello\n\nThis is **LLM-generated** markdown with `code`."
-/>
-
-// The sanitizer prevents XSS from LLM output automatically:
-// "<script>alert(1)</script>" → stripped
-// "<their> tag" → escaped to &lt;their&gt;
-// "javascript:alert(1)" href → removed
-```
-
-> **Note:** This renderer is designed specifically for untrusted LLM output. The sanitization pipeline runs in layers: text pre-processing → `rehype-raw` → `rehypeStripUnsafe` → `rehype-highlight`, ensuring no XSS vectors survive even if one layer is bypassed. Community support is available on the [OpenMSP Slack](https://join.slack.com/t/openmsp/shared_invite/zt-36bl7mx0h-3~U2nFH6nqHqoTPXMaHEHA).