@jini-ai/chat 0.6.15-rc.2 → 0.6.16

package/README.md

@@ -197,12 +197,17 @@ required argument objects: e.g. `isTerminalRunStatus({ status })`,
 `registerExtEventRenderer({ name, renderer }, { slotKey })`. A slot-key callback receives `{ data }`.
 `interleaveMessageBlocks({ events, content, rows }, { slotOf })` retains its reconstruction checks.
 The isolated `core/run-events`, `core/ag-ui`, `server/run-finalizer`, `react/embed`,
-`transports/fetch-sse`, `browser/session-store` and `browser/page-actions` subpaths are published.
+`transports/fetch-sse`, `browser/session-store` and `browser/frontend-session-bridge` subpaths are published. Page control uses the shared frontend bridge and page executor; the retired directive executor and cross-page action queue have been removed.
 `FrontendSessionBridgeArgs` is exported from `react`; hosts pass baseUrl and openStream, optionally request or native fetch.
 The SSE transport takes an injected decoder; browser hosts must supply a browser-safe module.
 
 ## React integration boundaries
 
+`ChatPane` accepts an optional `sendingLabel?: string` for host-localized startup feedback,
+for example `<ChatPane transport={transport} sendingLabel="Connecting to the assistant…" />`.
+The active, sending activity line displays it verbatim until run acceptance. Omitting the prop
+restores the translated `Sending…` label; it has no effect once sending ends.
+
 Model/provider selection belongs to the host-injected `ModelAgentPickerSlot`, because choosing
 an LLM or agent is a provider concern rather than a chat-domain concern. The unused internal
 picker was removed after a fresh caller check confirmed that only its own tests reached it.

package/dist/core/accepted-input.js

@@ -15,7 +15,9 @@ export function projectAcceptedInputMessages({ messages }, _options = {}) {
         });
         if (inputs.length === 0)
             return [message];
-        const { attachments: _attachments, secretRedaction: _redaction, ...turn } = message;
+        const turn = { ...message };
+        delete turn.attachments;
+        delete turn.secretRedaction;
         // MOVE: Older receipts have no per-input files; retain those legacy files on the final bubble.
         return inputs.map((input, index) => ({ ...turn, id: input.id, content: input.text,
             attachments: input.attachments ?? (index === inputs.length - 1 ? message.attachments ?? [] : []), ...(input.secretRedaction ? { secretRedaction: input.secretRedaction } : {}) }));
@@ -86,7 +88,8 @@ function expandQuestionAnswers({ events }, { answerContexts } = {}) {
     const questions = new Map(events.flatMap(event => event.kind === 'tool_use' ? [[event.id, event.input]] : []));
     const answers = new Map(events.flatMap(event => {
         const context = event.kind === 'tool_result' ? answerContexts?.get(event.toolUseId) : undefined;
-        const input = context ? context.input : event.kind === 'tool_result' ? questions.get(event.toolUseId) : undefined;
+        const originalInput = event.kind === 'tool_result' ? questions.get(event.toolUseId) : undefined;
+        const input = context ? context.input : originalInput;
         const answer = questionAnswerEvent({ event, input }, { includeTitle: context?.includeTitle === true });
         return answer ? [[answer.data.toolUseId, answer]] : [];
     }));
@@ -121,13 +124,17 @@ function matchOptimisticInput({ input, optimistic, seen }, _options = {}) {
     const next = candidates?.events[candidates.index];
     const follows = next?.data.afterInputId === undefined || seen.has(next.data.afterInputId);
     // Keep predecessor testing before the caller adds this receipt's ids to seen.
-    return input.data.toolUseId ? optimistic.byQuestion.get(input.data.toolUseId) : follows ? next : undefined;
+    if (input.data.toolUseId)
+        return optimistic.byQuestion.get(input.data.toolUseId);
+    return follows ? next : undefined;
 }
 /** Apply authoritative receipt data while retaining local identity and queued constituents. */
 function mergeAcceptedReceipt({ input, pending }, _options = {}) {
     // Replayed queue acceptance cannot undo confirmed consumption.
     const deliveryState = pending.data.deliveryState === 'consumed' ? 'consumed' : input.data.deliveryState ?? pending.data.deliveryState;
-    const { optimistic: _optimistic, afterInputId: _afterInputId, ...pendingData } = pending.data;
+    const pendingData = { ...pending.data };
+    delete pendingData.optimistic;
+    delete pendingData.afterInputId;
     const aliases = [...new Set([...(input.data.aliases ?? []), input.data.id, ...(pending.data.aliases ?? [])])].filter(id => id !== pending.data.id);
     return { ...input, data: { ...pendingData, ...input.data, id: pending.data.id,
             // Legacy acceptance receipts omit state; HTTP acceptance still means queued until consumption.
@@ -199,8 +206,10 @@ export function projectAcceptedInputEvents({ events }, options) {
         return projectEvents({ events }, options);
     // Event arrays are replaced, never mutated, so a transcript update re-projects only changed messages.
     let projected = defaultProjections.get(events);
-    if (!projected)
-        defaultProjections.set(events, projected = projectEvents({ events }, {}));
+    if (!projected) {
+        projected = projectEvents({ events }, {});
+        defaultProjections.set(events, projected);
+    }
     return projected;
 }
 const defaultProjections = new WeakMap();
@@ -218,11 +227,11 @@ function projectEvents({ events }, options) {
             continue;
         const next = replacements.get(event) ?? event;
         const input = acceptedInputEvent({ event: next });
-        if (input && emitted.has(input.data.id))
-            continue;
-        if (input)
-            emitted.add(input.data.id);
-        projected.push(next);
+        if (!input || !emitted.has(input.data.id)) {
+            if (input)
+                emitted.add(input.data.id);
+            projected.push(next);
+        }
     }
     return projected;
 }

package/dist/core/ag-ui/entry.js

@@ -6,7 +6,9 @@
  * The host emits RUN_STARTED and terminal RUN_FINISHED/RUN_ERROR outside this pure projection. */
 import { EventType } from '@ag-ui/core';
 function asString(v) {
-    return typeof v === "string" ? v : v == null ? "" : JSON.stringify(v);
+    if (typeof v === "string")
+        return v;
+    return v == null ? "" : JSON.stringify(v);
 }
 function reduceUsagePayload(payload) {
     const usage = (payload.usage ?? {});

package/dist/core/agent-plugin-chat-state.js

@@ -13,7 +13,9 @@ function isStringList({ value }) {
 }
 /** A stored row is usable only when its exclusions and (null or listed) decision are all string ids. */
 function usableChatState({ value }) {
-    return value && isStringList({ value: value.excluded }) && (value.decision === null || isStringList({ value: value.decision?.selected })) ? value : null;
+    if (!value || !isStringList({ value: value.excluded }))
+        return null;
+    return value.decision === null || isStringList({ value: value.decision?.selected }) ? value : null;
 }
 /** Corrupt/blocked storage permits a fresh question, as clearing localStorage does. */
 export function readAgentPluginChatState({ conversationId }, { storage = browserStorage() } = {}) {

package/dist/core/antigravity/tool-presentation.d.ts

@@ -0,0 +1,13 @@
+/** Antigravity's saved CLI receipts use capitalized argument keys. Display only: never rewrite history. */
+type Call = {
+    name: string;
+    input: unknown;
+};
+/** Translate agy's MCP envelope and file arguments into the generic chat presentation contract.
+ * Returns undefined for other shapes. Pure; O(k) when copying k file argument keys, otherwise O(1).
+ */
+export declare function antigravityToolPresentation({ name, input }: Call, _options?: Record<string, never>): (Call & {
+    wrapper?: Call;
+}) | undefined;
+export {};
+//# sourceMappingURL=tool-presentation.d.ts.map

package/dist/core/antigravity/tool-presentation.js

@@ -0,0 +1,20 @@
+/** A transport envelope must name both server and tool before its arguments can be unwrapped. */
+function nonEmptyString(value) {
+    return typeof value === 'string' && value.length > 0;
+}
+/** Translate agy's MCP envelope and file arguments into the generic chat presentation contract.
+ * Returns undefined for other shapes. Pure; O(k) when copying k file argument keys, otherwise O(1).
+ */
+export function antigravityToolPresentation({ name, input }, _options = {}) {
+    if (input === null || typeof input !== 'object')
+        return undefined;
+    const args = input;
+    if (name === 'read_file' && typeof args.Path === 'string') {
+        return { name, input: { ...args, file_path: args.Path } };
+    }
+    if (name !== 'call_mcp_tool' || !nonEmptyString(args.ServerName) || !nonEmptyString(args.ToolName))
+        return undefined;
+    const call = { name: args.ToolName, input: args.Arguments };
+    return { ...call, wrapper: call };
+}
+//# sourceMappingURL=tool-presentation.js.map

package/dist/core/assistant-client/ag-ui-transport.js

@@ -1,5 +1,11 @@
 import { EventType } from "@ag-ui/core";
 import { createAgUiToAgentTranslationState, translateAgUiEventToAgentEvent } from "../ag-ui/entry.js";
+/** Only the originating attachment can authorize page execution. Read its token for every turn;
+ * caller-supplied tool definitions never authorize or execute a transcript event. */
+function frontendBinding({ input }, _options = {}) {
+    const token = input.context?.["frontendBindToken"];
+    return typeof token === "string" && token.length > 0 ? { frontendBindToken: token } : {};
+}
 /** Bind the official client without adding its dependency to every chat consumer. */
 export function createAgUiRunClient({ ports }, _options = {}) {
     /** In-flight AG-UI turns' driving `HttpAgent`, keyed by the client-minted runId — the ONLY way
@@ -54,8 +60,11 @@ export function createAgUiRunClient({ ports }, _options = {}) {
         // none yet (e.g. the very first turn).
         const threadId = input.conversationId ?? ports.mintId({}, {});
         const agent = ports.createAgent({ url: ports.endpoint, threadId }, {});
+        if (input.signal.aborted)
+            throw new DOMException("Run cancelled", "AbortError");
         agUiAgents.set(runId, agent);
-        input.signal?.addEventListener("abort", () => agent.abortRun());
+        const abort = () => agent.abortRun();
+        input.signal.addEventListener("abort", abort, { once: true });
         const messages = input.history.filter((message) => message.content.trim().length > 0).map(toAgUiMessage);
         const runAgentInput = {
             threadId,
@@ -65,8 +74,9 @@ export function createAgUiRunClient({ ports }, _options = {}) {
             tools: [],
             context: [],
             forwardedProps: {
+                ...frontendBinding({ input }),
                 ...(input.agentId ? { agentId: input.agentId } : {}),
-                ...(input.history.some(message => message.role === "user" && message.secretRedaction?.secretRedacted) ? { secretRedacted: true } : {}),
+                ...(input.history.findLast(message => message.role === "user")?.secretRedaction?.secretRedacted ? { secretRedacted: true } : {}),
             },
         };
         const collected = [];
@@ -76,6 +86,7 @@ export function createAgUiRunClient({ ports }, _options = {}) {
                 return;
             settled = true;
             agUiAgents.delete(runId);
+            input.signal.removeEventListener("abort", abort);
             handlers.onDone(collected);
         };
         const state = createAgUiToAgentTranslationState({ customEventNames: ports.customEventNames }, {});
@@ -96,6 +107,7 @@ export function createAgUiRunClient({ ports }, _options = {}) {
                 },
                 error: (error) => {
                     agUiAgents.delete(runId);
+                    input.signal.removeEventListener("abort", abort);
                     const err = error instanceof Error ? error : new Error(String(error));
                     if (!startSettled) {
                         startSettled = true;

package/dist/core/assistant-client/attachment-liveness.js

@@ -47,7 +47,7 @@ async function isAttachmentStillServed(ref, options) {
  * @complexity O(n) requests, at most `concurrency` concurrent; O(n) space for the verdicts.
  */
 async function probeAll(refs, concurrency, probe) {
-    const verdicts = new Array(refs.length).fill(false);
+    const verdicts = Array.from({ length: refs.length }, () => false);
     const entries = refs.entries();
     async function worker() {
         for (const [index, ref] of entries) {

package/dist/core/assistant-client/durable-run-subscription.js

@@ -29,7 +29,8 @@ export function followDurableRun({ runId: initialRunId, handlers, signal, bindin
         handlers.onDone(message.events ?? []);
     }
     function open() {
-        const epoch = ++streamEpoch;
+        streamEpoch += 1;
+        const epoch = streamEpoch;
         dropped = false;
         stopStream?.();
         stopStream = ports.stream({ runId, cursor,

package/dist/core/assistant-client/transport.js

@@ -293,7 +293,9 @@ export function createAssistantTransportClient({ ports }, _options = {}) {
             const payload = JSON.parse(frame.data);
             ctx.handlers.onError(new Error(asString(payload.message) || "BYOK turn failed"));
         }
-        else if (frame.event === "end") {
+        else {
+            if (frame.event !== "end")
+                return;
             const notice = terminalReasonNotice(readTerminalReason(frame.data, false));
             if (notice) {
                 ctx.collected.push(notice);
@@ -391,7 +393,8 @@ export function createAssistantTransportClient({ ports }, _options = {}) {
         // A response whose body stream errors out (e.g. a dropped connection) must not turn "the server
         // rejected the request" into "the client crashed reading the rejection".
         const detail = await response.text().catch(() => "");
-        return new Error(`${action} (${response.status})${detail ? `: ${detail.slice(0, 300)}` : ""}`);
+        const suffix = detail ? ": " + detail.slice(0, 300) : "";
+        return new Error(`${action} (${response.status})${suffix}`);
     }
     /**
      * The BYOK run path (2026-08-04) — one held-open `POST` to `assistant-byok.ts`, no separate
@@ -573,8 +576,9 @@ export function createAssistantTransportClient({ ports }, _options = {}) {
             prompt: ports.projectPrompt({ prompt, context: input.context }, {}),
             // Select one complete transcript after binding; concatenating it with the tail repeats turns.
             coldStartContext: ports.projectPrompt({ prompt: runPrompt(input.history), context: input.context }, {}),
-            // The transcript is already sanitized; retain its signal across the daemon JSON boundary.
-            ...(input.history.some(message => message.role === "user" && message.secretRedaction?.secretRedacted) ? { secretRedacted: true } : {}),
+            // The transcript is already sanitized; retain only the CURRENT user's signal across the
+            // daemon JSON boundary. Replaying an old signal reports another paste on every later turn.
+            ...(newestUserMessage({ history: input.history }, {})?.secretRedaction?.secretRedacted ? { secretRedacted: true } : {}),
             assistantMessageId: input.assistantMessageId,
             ...frontendBindTokenField(input),
             ...modelField(input),
@@ -766,7 +770,7 @@ export function createAssistantTransportClient({ ports }, _options = {}) {
                 // can never arrive.
                 if (runId.startsWith(BYOK_RUN_ID_PREFIX)) {
                     handlers.onDone([]);
-                    return;
+                    return undefined;
                 }
                 // Same "no server-side record to resume" reasoning as the BYOK branch above — see
                 // `assistant-transport-ag-ui.ts`'s own doc for why this path has no reattach story yet.
@@ -774,6 +778,7 @@ export function createAssistantTransportClient({ ports }, _options = {}) {
                     return ports.agUi.reattachAgUiRun({ handlers }, {});
                 }
                 subscribeToRun(runId, handlers, options?.signal);
+                return undefined;
             },
             async fetchRunStatus(runId) {
                 // Same reasoning as `reattachRun` above — no server-side run record exists for a BYOK run id,
@@ -794,7 +799,7 @@ export function createAssistantTransportClient({ ports }, _options = {}) {
                 // this exact id — there is no server-side run to `POST .../cancel` against.
                 if (runId.startsWith(BYOK_RUN_ID_PREFIX)) {
                     byokAbortControllers.get(runId)?.abort();
-                    return;
+                    return undefined;
                 }
                 if (ports.agUi.isAgUiRunId({ runId }, {})) {
                     return ports.agUi.stopAgUiRun({ runId }, {});
@@ -807,11 +812,12 @@ export function createAssistantTransportClient({ ports }, _options = {}) {
                 });
                 // 404: the daemon no longer knows this run (it restarted), so nothing is left running to stop.
                 if (response.status === 404)
-                    return;
+                    return undefined;
                 // `fetch` resolves on any status: without this a refused cancel (401/403/500) resolved exactly
                 // like a successful one while the run kept executing. `useRunStream` logs a rejection here.
                 if (!response.ok)
                     throw await refusalError({ action: "cancelling agent run failed", response }, {});
+                return undefined;
             },
         };
     }

package/dist/core/assistant-content.js

@@ -32,8 +32,9 @@ export function assistantContentFromEvents({ events }, _options = {}) {
     for (const ev of dedupeToolUsesById({ events: events ? [...events] : undefined })) {
         if (isAssistantStepBoundary({ event: ev })) {
             stepBoundary = true;
+            continue;
         }
-        else if (ev.kind === 'text' && ev.text.length > 0) {
+        if (ev.kind === 'text' && ev.text.length > 0) {
             out += (stepBoundary ? separatorBefore({ out, text: ev.text }) : '') + ev.text;
             stepBoundary = false;
         }

package/dist/core/composer-history.js

@@ -21,7 +21,8 @@ export function createComposerHistoryState(_required, _optional = {}) {
     return { entries: [], index: null, draft: null };
 }
 function hasModifierOrPopup({ input }, _optional = {}) {
-    return Boolean(input.shiftKey || input.ctrlKey || input.altKey || input.metaKey || input.isComposing || input.popupOpen);
+    const modified = input.shiftKey || input.ctrlKey || input.altKey || input.metaKey;
+    return Boolean(modified || input.isComposing || input.popupOpen);
 }
 /**
  * Whether the selection sits on the first/last line. A selection spanning a newline is on

package/dist/core/durable-projection.js

@@ -52,8 +52,9 @@ export function mergeRunEvents({ saved, incoming }, _optional = {}) {
             skip = Math.max(0, skip - event.text.length);
             if (text)
                 result.push({ ...event, text });
+            continue;
         }
-        else if (claimNewKey({ key: identity(event, incomingUsage), keys })) {
+        if (claimNewKey({ key: identity(event, incomingUsage), keys })) {
             result.push(event);
         }
     }

package/dist/core/durable-runs/continuation.js

@@ -6,7 +6,8 @@ export function canonicalToolInput({ value }, _optional = {}) {
         return `[${value.map((item) => canonicalToolInput({ value: item }, {})).join(",")}]`;
     if (value !== null && typeof value === "object") {
         const object = value;
-        return `{${Object.keys(object).sort().map((key) => `${JSON.stringify(key)}:${canonicalToolInput({ value: object[key] }, {})}`).join(",")}}`;
+        const fields = Object.keys(object).sort().map((key) => `${JSON.stringify(key)}:${canonicalToolInput({ value: object[key] }, {})}`);
+        return `{${fields.join(",")}}`;
     }
     return JSON.stringify(value) ?? "null";
 }

package/dist/core/events.d.ts

@@ -17,7 +17,7 @@
  * not depend on `@jini-ai/protocol` (or, by the same reasoning, on `@jini-ai/daemon`), the same
  * "translate the wire, don't import it" posture `assistant-ag-ui.ts` documents for its own port of
  * this package's vocabulary in the other direction. Keep in sync by hand if the daemon's shape
- * changes — there are exactly two fields, so drift is easy to spot in review.
+ * changes — the image arm has two required and two optional fields, so drift is easy to spot in review.
  */
 export type ToolResultMediaBlock = {
     readonly type: 'text';
@@ -26,6 +26,10 @@ export type ToolResultMediaBlock = {
     readonly type: 'image';
     readonly mimeType: string;
     readonly data: string;
+    /** Optional caption and alt text (e.g. the media item's title). */
+    readonly title?: string;
+    /** Optional link to the full file; the renderer only links a safe (http(s) or same-site) target. */
+    readonly href?: string;
 };
 /**
  * A single renderable unit of agent output. Covers every generic variant a

package/dist/core/messages.d.ts

@@ -25,6 +25,10 @@ export interface ChatAttachment {
     /** User-visible attachment order for this turn; older items may omit it. */
     order?: number;
 }
+export interface SecretRedactionSignal {
+    readonly secretRedacted: true;
+    readonly count: number;
+}
 /**
  * A single turn in a conversation. This is the generic subset of OD's
  * `ChatMessage` (`packages/contracts/src/api/chat.ts`): product-shaped
@@ -36,7 +40,7 @@ export interface ChatMessage {
     /** A normal send stays outside recall until the transport accepts it. */
     inputPending?: boolean;
     /** Transient safe receipt; storage requires no new column. */
-    secretRedaction?: import('./user-text-redaction.js').SecretRedactionSignal;
+    secretRedaction?: SecretRedactionSignal;
     id: string;
     role: ChatRole;
     content: string;

package/dist/core/partial-json.js

@@ -38,14 +38,22 @@ function scanJsonPrefix({ buf }, _optional = {}) {
             ({ inStr, esc } = advanceJsonString({ c, esc }));
             continue;
         }
-        if (c === '"')
-            inStr = true;
-        else if (c === '{')
-            stack.push('}');
-        else if (c === '[')
-            stack.push(']');
-        else if (c === '}' || c === ']')
-            stack.pop();
+        switch (c) {
+            case '"':
+                inStr = true;
+                break;
+            case '{':
+                stack.push('}');
+                break;
+            case '[':
+                stack.push(']');
+                break;
+            case '}':
+            case ']':
+                stack.pop();
+                break;
+            default: break;
+        }
     }
     return { stack, inStr };
 }
@@ -76,7 +84,8 @@ function trimIncompleteTail({ out }, _optional = {}) {
     let prev;
     let passes = 0;
     do {
-        if (++passes > MAX_TAIL_CLEANUP_PASSES)
+        passes += 1;
+        if (passes > MAX_TAIL_CLEANUP_PASSES)
             return null;
         prev = out;
         out = trimTrailingSeparators({ text: out });

package/dist/core/persistence/title.d.ts

@@ -13,7 +13,7 @@
  * Ported from Open Design's `summarizeProjectNameFromPrompt` (`apps/web/src/utils/projectName.ts`).
  * The Latin path has since diverged: it keeps the prompt's words, names and dotted domains (the
  * original's stop-word removal and title casing turned "port example.com to jini" into "Port
- * Example Com Jini"), and `LEADING_LATIN_FILLER` fixes the original's article bug, documented at
+ * Example Com Jini"), and `stripLeadingLatinFiller` fixes the original's article bug, documented at
  * its declaration. The CJK path keeps the original's filler and punctuation rules, which is not
  * decoration: they differ enough from the Latin ones that a shared path produced worse titles in both.
  */

package/dist/core/persistence/title.js

@@ -13,7 +13,7 @@
  * Ported from Open Design's `summarizeProjectNameFromPrompt` (`apps/web/src/utils/projectName.ts`).
  * The Latin path has since diverged: it keeps the prompt's words, names and dotted domains (the
  * original's stop-word removal and title casing turned "port example.com to jini" into "Port
- * Example Com Jini"), and `LEADING_LATIN_FILLER` fixes the original's article bug, documented at
+ * Example Com Jini"), and `stripLeadingLatinFiller` fixes the original's article bug, documented at
  * its declaration. The CJK path keeps the original's filler and punctuation rules, which is not
  * decoration: they differ enough from the Latin ones that a shared path produced worse titles in both.
  */
@@ -38,7 +38,16 @@ const CJK_PATTERN = /[㐀-鿿]/;
  * with `a` after a verb silently lost its first character. Requiring the separator as part of the
  * article makes an article an article rather than a prefix.
  */
-const LEADING_LATIN_FILLER = /^(please\s+)?(can\s+you\s+|could\s+you\s+|help\s+me\s+|i\s+want\s+to\s+|i\s+need\s+to\s+)?(create|build|make|design|implement|add|fix|update|improve|optimize|generate|write|search|find|show|list|turn)\s+((this|that)\s+into\s+)?((an|a|the|this|that|my|me)\s+)?/i;
+function stripLeadingLatinFiller(input) {
+    const polite = input.replace(/^please\s+/i, '');
+    const request = polite.replace(/^(?:can\s+you|could\s+you|help\s+me|i\s+want\s+to|i\s+need\s+to)\s+/i, '');
+    const verb = /^(?:create|build|make|design|implement|add|fix|update|improve|optimize|generate|write|search|find|show|list|turn)\s+/i.exec(request);
+    if (!verb)
+        return input;
+    return request.slice(verb[0].length)
+        .replace(/^(?:this|that)\s+into\s+/i, '')
+        .replace(/^(?:an|a|the|this|that|my|me)\s+/i, '');
+}
 const LEADING_CJK_FILLER = [
     /^先?(帮我|帮忙|麻烦|请|可以|能不能|能否|给我|我想要|我要)/,
     /^(先)?(实现|做|做一下|创建|生成|设计|开发|新增|添加|优化|修复|改|更改|调整)(一下|一个|一版|下)?/,
@@ -72,11 +81,11 @@ export function stripConversationTitleMarkdown({ text }, _options = {}) {
         .replace(/^\s{0,3}\[[^\]\n]+\]:[^\n]*(?:\n|$)/gm, ' ')
         .replace(/!?\[([^\[\]\n]+)\]\((?:[^()[\]\n]|\([^()[\]\n]*\))*(?:\)|$)/g, '$1')
         .replace(/\[([^\[\]\n]+)\]\[[^\[\]\n]*(?:\]|$)/g, '$1')
-        .replace(/^\s{0,3}#{1,6}\s+|[ \t]+#+[ \t]*$/gm, '')
+        .replace(/^\s{0,3}#{1,6}\s+|(?<![ \t])[ \t]+#+[ \t]*$/gm, '')
         .replace(/(?<![\w\\*])(\*\*|\*)(?=[^\s*])([^*\n]*?[^\s*\\])\1(?![\w*])/g, '$2')
-        .replace(/(?<![\w\\_])(__|_)(?=[^\s_])([^\n]*?[^\s\\])\1(?![\w_])/g, '$2')
+        .replace(/(?<![\w\\])(__|_)(?=[^\s_])([^\n]*?[^\s\\])\1(?!\w)/g, '$2')
         .replace(/`|~~/g, '')
-        .replace(/!?\[([^\]\n]*)(?=\n|$)/g, '$1')
+        .split('\n').map(stripUnclosedTitleLink).join('\n')
         // Unescape after markup removal so an escaped literal marker cannot become emphasis.
         .replace(/\\([\\`*_[\]~])/g, '$1')
         .replace(/\s+/g, ' ')
@@ -97,7 +106,7 @@ function truncateTitle(title) {
     return (lastSpace > 0 ? prefix.slice(0, lastSpace) : prefix).trimEnd();
 }
 function trimLatinTitle(input) {
-    const words = input.replace(LEADING_LATIN_FILLER, '').match(/[\p{L}\p{N}]+(?:[._-][\p{L}\p{N}]+)*/gu) ?? [];
+    const words = stripLeadingLatinFiller(input).match(/[\p{L}\p{N}]+(?:[._-][\p{L}\p{N}]+)*/gu) ?? [];
     const title = words.join(' ');
     // Domain and filename tokens retain their original case, even at the start of a sentence.
     return words[0]?.includes('.') ? title : title.charAt(0).toUpperCase() + title.slice(1);
@@ -107,7 +116,7 @@ function trimCjkTitle(input) {
     for (const pattern of LEADING_CJK_FILLER)
         title = title.replace(pattern, '').trim();
     // Cut at the first sentence-ending punctuation, then drop spacing — CJK titles do not use it.
-    title = title.replace(/[，。！？；：,.!?;:].*$/, '').replace(/\s+/g, '');
+    title = title.split(/[，。！？；：,.!?;:]/, 1)[0].replace(/\s+/g, '');
     return title.slice(0, MAX_CJK_LENGTH);
 }
 /**
@@ -144,4 +153,13 @@ export function conversationTitleForDisplay({ title, titleSource, firstPrompt },
     }
     return truncateTitle(stripConversationTitleMarkdown({ text: title })) || null;
 }
+/** The first open label after the last closing bracket is the only possible trailing cut link.
+ * Retain any later '[' characters inside its label, as the original tolerant pattern does. */
+function stripUnclosedTitleLink(line) {
+    const open = line.indexOf('[', line.lastIndexOf(']') + 1);
+    if (open === -1)
+        return line;
+    const start = line[open - 1] === '!' ? open - 1 : open;
+    return line.slice(0, start) + line.slice(open + 1);
+}
 //# sourceMappingURL=title.js.map

package/dist/core/question-form/normalize.js

@@ -135,7 +135,7 @@ const COLOR_KEYWORD = /^[a-z]+$/i;
  * A colour function. The argument charset deliberately excludes `(`, so no nested function —
  * `var()`, `url()`, `image-set()`, `attr()` — can appear inside one of these either.
  */
-const COLOR_FUNCTION = /^(?:rgb|rgba|hsl|hsla|hwb|lab|lch|oklab|oklch|color)\(\s*[0-9a-z%.,/\s+-]*\)$/i;
+const COLOR_FUNCTION = /^(?:rgb|rgba|hsl|hsla|hwb|lab|lch|oklab|oklch|color)\([0-9a-z%.,/\s+-]*\)$/i;
 /**
  * Whether a model-supplied palette entry may be written into a CSS value.
  *

package/dist/core/question-form/scan.js

@@ -197,7 +197,7 @@ export function parsePartialQuestionForm({ input }) {
 // body — but only when those backticks are the closing wrapper, not content
 // of a JSON string value still being typed.
 function stripTrailingFence(body) {
-    const m = /\s*`{1,3}\s*$/.exec(body);
+    const m = /(?<!\s)\s*`{1,3}\s*$/.exec(body);
     if (!m)
         return body;
     const before = body.slice(0, m.index);
@@ -206,10 +206,12 @@ function stripTrailingFence(body) {
     return before;
 }
 function endsInsideJsonString(s) {
-    for (let i = s.indexOf('"'); i !== -1; i = s.indexOf('"', i)) {
-        i = jsonStringEnd({ s, start: i });
-        if (i === -1)
+    let i = s.indexOf('"');
+    while (i !== -1) {
+        const end = jsonStringEnd({ s, start: i });
+        if (end === -1)
             return true;
+        i = s.indexOf('"', end);
     }
     return false;
 }
@@ -217,9 +219,11 @@ function endsInsideJsonString(s) {
 // quote is at `start`, or -1 when that literal hasn't finished streaming.
 function jsonStringEnd({ s, start }) {
     for (let i = start + 1; i < s.length; i++) {
-        if (s[i] === '\\')
+        if (s[i] === '\\') {
             i++;
-        else if (s[i] === '"')
+            continue;
+        }
+        if (s[i] === '"')
             return i + 1;
     }
     return -1;
@@ -231,10 +235,12 @@ const DEPTH_DELTA = { '{': 1, '[': 1, '}': -1, ']': -1 };
 function completeTopLevelString(body, field) {
     const marker = `"${field}"`;
     let depth = 0;
-    for (let i = 0; i < body.length; i++) {
+    let i = 0;
+    while (i < body.length) {
         const c = body[i];
         if (c !== '"') {
             depth += DEPTH_DELTA[c] ?? 0;
+            i += 1;
             continue;
         }
         const valueStart = depth === 1 ? keyValueStart({ body, at: i, marker }) : -1;
@@ -244,7 +250,7 @@ function completeTopLevelString(body, field) {
         const end = jsonStringEnd({ s: body, start: i });
         if (end === -1)
             return undefined;
-        i = end - 1;
+        i = end;
     }
     return undefined;
 }
@@ -322,20 +328,24 @@ function countClosedQuestionObjects(body) {
 // it never closes (string-aware so braces inside strings don't count).
 function balancedObjectEnd({ s, start }) {
     let depth = 0;
-    for (let i = start; i < s.length; i++) {
+    let i = start;
+    while (i < s.length) {
         const c = s[i];
         if (c === '"') {
             const end = jsonStringEnd({ s, start: i });
             if (end === -1)
                 return -1;
-            i = end - 1;
-        }
-        else if (c === '{') {
-            depth++;
+            i = end;
+            continue;
         }
-        else if (c === '}' && --depth === 0) {
-            return i + 1;
+        if (c === '{')
+            depth += 1;
+        if (c === '}') {
+            depth -= 1;
+            if (depth === 0)
+                return i + 1;
         }
+        i += 1;
     }
     return -1;
 }

package/dist/core/question-form/secret-answers.js

@@ -31,7 +31,8 @@ export function withoutSecretQuestionDefaults({ form }) {
     return { ...form, questions: form.questions.map(question => {
             if (!isSecretQuestion({ question }))
                 return question;
-            const { defaultValue: _defaultValue, ...safe } = question;
+            const safe = { ...question };
+            delete safe.defaultValue;
             return safe;
         }) };
 }