@gajae-code/coding-agent 0.18.6 → 0.18.8

package/src/export/html/css-color.ts

@@ -0,0 +1,9 @@
+const SAFE_CSS_COLOR =
+	/^(?:#[0-9a-fA-F]{3,8}|rgb\(\s*\d{1,3}\s*,\s*\d{1,3}\s*,\s*\d{1,3}\s*\)|rgba\(\s*\d{1,3}\s*,\s*\d{1,3}\s*,\s*\d{1,3}\s*,\s*(?:0|1|0?\.\d+)\s*\))$/;
+
+/** Keep a theme color that is safe to place in a `<style>` block. */
+export function cssColorOrFallback(value: string | undefined, fallback: string): string {
+	const trimmed = value?.trim();
+	if (trimmed && SAFE_CSS_COLOR.test(trimmed)) return trimmed;
+	return fallback;
+}

package/src/export/html/index.ts

@@ -6,6 +6,7 @@ import { APP_NAME, isEnoent } from "@gajae-code/utils";
 import { getResolvedThemeColors, getThemeExportColors } from "../../modes/theme/theme";
 import { SessionManager } from "../../session/session-manager";
 // Pre-generated template (created by scripts/generate-template.ts at publish time)
+import { cssColorOrFallback } from "./css-color";
 import { TEMPLATE } from "./template.generated";
 
 export interface ExportOptions {
@@ -78,16 +79,16 @@ async function generateThemeVars(themeName?: string): Promise<string> {
 	const colors = await getResolvedThemeColors(themeName);
 	const lines: string[] = [];
 	for (const [key, value] of Object.entries(colors)) {
-		lines.push(`--${key}: ${value};`);
+		lines.push(`--${key}: ${cssColorOrFallback(value, "transparent")};`);
 	}
 
 	const themeExport = await getThemeExportColors(themeName);
 	const userMessageBg = colors.userMessageBg || "#343541";
 	const derived = deriveExportColors(userMessageBg);
 
-	lines.push(`--body-bg: ${themeExport.pageBg ?? derived.pageBg};`);
-	lines.push(`--container-bg: ${themeExport.cardBg ?? derived.cardBg};`);
-	lines.push(`--info-bg: ${themeExport.infoBg ?? derived.infoBg};`);
+	lines.push(`--body-bg: ${cssColorOrFallback(themeExport.pageBg, derived.pageBg)};`);
+	lines.push(`--container-bg: ${cssColorOrFallback(themeExport.cardBg, derived.cardBg)};`);
+	lines.push(`--info-bg: ${cssColorOrFallback(themeExport.infoBg, derived.infoBg)};`);
 
 	return lines.join(" ");
 }