@linxin666/dsh-remote-web-ui 0.1.17 → 0.1.18

package/lib/types/client/PluginSettingsCard.d.ts

@@ -28,6 +28,17 @@ export interface PluginSettingsCardProps<TKey extends string = string> {
     onSave: () => void;
     /** Drop every staged edit. */
     onDiscard: () => void;
+    /**
+     * Render the controls expanded on arrival (still collapsible). Defaults to
+     * true: promoted first-level sections show their settings immediately.
+     */
+    defaultOpen?: boolean;
+    /**
+     * Render without the collapse affordance: a static header and an always
+     * visible body. Used by first-level settings sections whose nav entry
+     * already provides the selection.
+     */
+    alwaysOpen?: boolean;
     /** The plugin's controls. */
     children: ReactNode;
 }

package/lib/types/client/PluginSettingsCard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PluginSettingsCard.d.ts","sourceRoot":"","sources":["../../../src/client/PluginSettingsCard.tsx"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAEH,OAAO,EAAY,KAAK,SAAS,EAAE,MAAM,OAAO,CAAA;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAGnD,oGAAoG;AACpG,eAAO,MAAM,cAAc,kMAUjB,CAAA;AAEV,6CAA6C;AAC7C,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAA;AAEzD,oEAAoE;AACpE,MAAM,MAAM,eAAe,CAAC,IAAI,SAAS,MAAM,GAAG,MAAM,IAAI,IAAI,GAAG,WAAW,CAAA;AAE9E,wDAAwD;AACxD,MAAM,WAAW,uBAAuB,CAAC,IAAI,SAAS,MAAM,GAAG,MAAM;IACnE,0CAA0C;IAC1C,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,MAAM,CAAA;IACnF,uCAAuC;IACvC,QAAQ,EAAE,IAAI,CAAA;IACd,4EAA4E;IAC5E,cAAc,EAAE,IAAI,CAAA;IACpB,kFAAkF;IAClF,KAAK,EAAE,SAAS,CAAA;IAChB,+BAA+B;IAC/B,MAAM,EAAE,MAAM,IAAI,CAAA;IAClB,8BAA8B;IAC9B,SAAS,EAAE,MAAM,IAAI,CAAA;IACrB,6BAA6B;IAC7B,QAAQ,EAAE,SAAS,CAAA;CACpB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,SAAS,MAAM,GAAG,MAAM,EAAE,KAAK,EAAE,uBAAuB,CAAC,IAAI,CAAC,sCAiHpG;AAED,oEAAoE;AACpE,MAAM,WAAW,UAAU;IACzB,wDAAwD;IACxD,EAAE,EAAE,MAAM,CAAA;IACV,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAA;IACZ,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,sEAAsE;IACtE,UAAU,EAAE,OAAO,CAAA;IACnB,6DAA6D;IAC7D,OAAO,EAAE,OAAO,CAAA;IAChB,qCAAqC;IACrC,eAAe,EAAE,MAAM,CAAA;IACvB,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,kEAAkE;IAClE,YAAY,EAAE,MAAM,CAAA;IACpB,gFAAgF;IAChF,QAAQ,EAAE,OAAO,CAAA;IACjB,wBAAwB;IACxB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC9B,oEAAoE;IACpE,OAAO,EAAE,MAAM,IAAI,CAAA;CACpB;AAED,kHAAkH;AAClH,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG;IAC7C,yEAAyE;IACzE,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,+BAqCA;AAED,0CAA0C;AAC1C,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG;IAC/C,mCAAmC;IACnC,YAAY,EAAE,MAAM,CAAA;IACpB,8BAA8B;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAA;CACjB,+BAmCA;AAED,sDAAsD;AACtD,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG;IAC9C,oEAAoE;IACpE,YAAY,EAAE,MAAM,CAAA;IACpB,mEAAmE;IACnE,OAAO,EAAE,aAAa,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACzD,+BAsCA"}
+{"version":3,"file":"PluginSettingsCard.d.ts","sourceRoot":"","sources":["../../../src/client/PluginSettingsCard.tsx"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAEH,OAAO,EAAY,KAAK,SAAS,EAAE,MAAM,OAAO,CAAA;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAGnD,oGAAoG;AACpG,eAAO,MAAM,cAAc,kMAUjB,CAAA;AAEV,6CAA6C;AAC7C,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAA;AAEzD,oEAAoE;AACpE,MAAM,MAAM,eAAe,CAAC,IAAI,SAAS,MAAM,GAAG,MAAM,IAAI,IAAI,GAAG,WAAW,CAAA;AAE9E,wDAAwD;AACxD,MAAM,WAAW,uBAAuB,CAAC,IAAI,SAAS,MAAM,GAAG,MAAM;IACnE,0CAA0C;IAC1C,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,MAAM,CAAA;IACnF,uCAAuC;IACvC,QAAQ,EAAE,IAAI,CAAA;IACd,4EAA4E;IAC5E,cAAc,EAAE,IAAI,CAAA;IACpB,kFAAkF;IAClF,KAAK,EAAE,SAAS,CAAA;IAChB,+BAA+B;IAC/B,MAAM,EAAE,MAAM,IAAI,CAAA;IAClB,8BAA8B;IAC9B,SAAS,EAAE,MAAM,IAAI,CAAA;IACrB;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,6BAA6B;IAC7B,QAAQ,EAAE,SAAS,CAAA;CACpB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,SAAS,MAAM,GAAG,MAAM,EAAE,KAAK,EAAE,uBAAuB,CAAC,IAAI,CAAC,sCAyGpG;AAED,oEAAoE;AACpE,MAAM,WAAW,UAAU;IACzB,wDAAwD;IACxD,EAAE,EAAE,MAAM,CAAA;IACV,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAA;IACZ,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,sEAAsE;IACtE,UAAU,EAAE,OAAO,CAAA;IACnB,6DAA6D;IAC7D,OAAO,EAAE,OAAO,CAAA;IAChB,qCAAqC;IACrC,eAAe,EAAE,MAAM,CAAA;IACvB,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,kEAAkE;IAClE,YAAY,EAAE,MAAM,CAAA;IACpB,gFAAgF;IAChF,QAAQ,EAAE,OAAO,CAAA;IACjB,wBAAwB;IACxB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC9B,oEAAoE;IACpE,OAAO,EAAE,MAAM,IAAI,CAAA;CACpB;AAED,kHAAkH;AAClH,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG;IAC7C,yEAAyE;IACzE,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,+BAqCA;AAED,0CAA0C;AAC1C,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG;IAC/C,mCAAmC;IACnC,YAAY,EAAE,MAAM,CAAA;IACpB,8BAA8B;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAA;CACjB,+BAmCA;AAED,sDAAsD;AACtD,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG;IAC9C,oEAAoE;IACpE,YAAY,EAAE,MAAM,CAAA;IACpB,mEAAmE;IACnE,OAAO,EAAE,aAAa,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACzD,+BAsCA"}

package/lib/types/client/PluginSettingsCard.js

@@ -28,24 +28,30 @@ export const CARD_COPY_KEYS = [
  * @returns the card, or nothing while the namespace is still loading.
  */
 export function PluginSettingsCard(props) {
-    const [open, setOpen] = useState(false);
-    const { state } = props;
+    const [open, setOpen] = useState(props.defaultOpen ?? true);
+    const { state, alwaysOpen } = props;
     if (!state.available)
         return null;
     const title = props.t(props.titleKey);
     const description = props.t(props.descriptionKey);
     const blocked = !state.dirty || state.invalid || state.saving;
-    const cardClass = open ? `${css.cardOpen} ${css.card}` : css.card;
+    const expanded = alwaysOpen === true || open;
+    const cardClass = expanded ? `${css.cardOpen} ${css.card}` : css.card;
+    // With alwaysOpen the nav entry already provides the selection, so the
+    // header is a static title row instead of a disclosure button.
+    const header = alwaysOpen === true
+        ? (_jsxs("div", { className: css.headerStatic, children: [_jsxs("span", { className: css.headText, children: [_jsx("span", { className: css.name, title: title, children: title }), _jsx("span", { className: css.description, title: description, children: description })] }), state.dirty ? _jsx("span", { className: css.pending, title: props.t('settings.unsaved'), children: props.t('settings.unsaved') }) : null] }))
+        : (_jsxs("button", { type: "button", className: css.header, "aria-expanded": open, "aria-label": `${props.t(open ? 'settings.collapse' : 'settings.expand')}: ${title}`, onClick: () => { setOpen(!open); }, children: [_jsxs("span", { className: css.headText, children: [_jsx("span", { className: css.name, title: title, children: title }), _jsx("span", { className: css.description, title: description, children: description })] }), state.dirty ? _jsx("span", { className: css.pending, title: props.t('settings.unsaved'), children: props.t('settings.unsaved') }) : null, _jsx("svg", { width: "14", height: "14", viewBox: "0 0 14 14", fill: "none", xmlns: "http://www.w3.org/2000/svg", className: open ? `${css.chevron} ${css.chevronOpen}` : css.chevron, children: _jsx("path", { d: "M11.8486 5.5L11.4238 5.92383L8.69727 8.65137C8.44157 8.90706 8.21562 9.13382 8.01172 9.29785C7.79912 9.46883 7.55595 9.61756 7.25 9.66602C7.08435 9.69222 6.91565 9.69222 6.75 9.66602C6.44405 9.61756 6.20088 9.46883 5.98828 9.29785C5.78438 9.13382 5.55843 8.90706 5.30273 8.65137L2.57617 5.92383L2.15137 5.5L3 4.65137L3.42383 5.07617L6.15137 7.80273C6.42595 8.07732 6.59876 8.24849 6.74023 8.3623C6.87291 8.46904 6.92272 8.47813 6.9375 8.48047C6.97895 8.48703 7.02105 8.48703 7.0625 8.48047C7.07728 8.47813 7.12709 8.46904 7.25977 8.3623C7.40124 8.24849 7.57405 8.07732 7.84863 7.80273L10.5762 5.07617L11 4.65137L11.8486 5.5Z", fill: "currentColor" }) })] }));
     // The namespace exists but the Host does not serve it to this client (the
     // official settings allowlist omits third-party namespaces): show a card
     // that explains the gap instead of vanishing, so a missing card never
     // reads as a missing plugin.
     if (!state.exposed) {
-        return (_jsxs("li", { className: cardClass, children: [_jsxs("button", { type: "button", className: css.header, "aria-expanded": open, "aria-label": `${props.t(open ? 'settings.collapse' : 'settings.expand')}: ${title}`, onClick: () => { setOpen(!open); }, children: [_jsxs("span", { className: css.headText, children: [_jsx("span", { className: css.name, title: title, children: title }), _jsx("span", { className: css.description, title: description, children: description })] }), _jsx("svg", { width: "14", height: "14", viewBox: "0 0 14 14", fill: "none", xmlns: "http://www.w3.org/2000/svg", className: open ? `${css.chevron} ${css.chevronOpen}` : css.chevron, children: _jsx("path", { d: "M11.8486 5.5L11.4238 5.92383L8.69727 8.65137C8.44157 8.90706 8.21562 9.13382 8.01172 9.29785C7.79912 9.46883 7.55595 9.61756 7.25 9.66602C7.08435 9.69222 6.91565 9.69222 6.75 9.66602C6.44405 9.61756 6.20088 9.46883 5.98828 9.29785C5.78438 9.13382 5.55843 8.90706 5.30273 8.65137L2.57617 5.92383L2.15137 5.5L3 4.65137L3.42383 5.07617L6.15137 7.80273C6.42595 8.07732 6.59876 8.24849 6.74023 8.3623C6.87291 8.46904 6.92272 8.47813 6.9375 8.48047C6.97895 8.48703 7.02105 8.48703 7.0625 8.48047C7.07728 8.47813 7.12709 8.46904 7.25977 8.3623C7.40124 8.24849 7.57405 8.07732 7.84863 7.80273L10.5762 5.07617L11 4.65137L11.8486 5.5Z", fill: "currentColor" }) })] }), open
+        return (_jsxs("li", { className: cardClass, children: [header, expanded
                     ? (_jsx("div", { className: css.body, children: _jsx("p", { className: css.notExposed, role: "status", children: props.t('settings.notExposed') }) }))
                     : null] }));
     }
-    return (_jsxs("li", { className: cardClass, children: [_jsxs("button", { type: "button", className: css.header, "aria-expanded": open, "aria-label": `${props.t(open ? 'settings.collapse' : 'settings.expand')}: ${title}`, onClick: () => { setOpen(!open); }, children: [_jsxs("span", { className: css.headText, children: [_jsx("span", { className: css.name, title: title, children: title }), _jsx("span", { className: css.description, title: description, children: description })] }), state.dirty ? _jsx("span", { className: css.pending, title: props.t('settings.unsaved'), children: props.t('settings.unsaved') }) : null, _jsx("svg", { width: "14", height: "14", viewBox: "0 0 14 14", fill: "none", xmlns: "http://www.w3.org/2000/svg", className: open ? `${css.chevron} ${css.chevronOpen}` : css.chevron, children: _jsx("path", { d: "M11.8486 5.5L11.4238 5.92383L8.69727 8.65137C8.44157 8.90706 8.21562 9.13382 8.01172 9.29785C7.79912 9.46883 7.55595 9.61756 7.25 9.66602C7.08435 9.69222 6.91565 9.69222 6.75 9.66602C6.44405 9.61756 6.20088 9.46883 5.98828 9.29785C5.78438 9.13382 5.55843 8.90706 5.30273 8.65137L2.57617 5.92383L2.15137 5.5L3 4.65137L3.42383 5.07617L6.15137 7.80273C6.42595 8.07732 6.59876 8.24849 6.74023 8.3623C6.87291 8.46904 6.92272 8.47813 6.9375 8.48047C6.97895 8.48703 7.02105 8.48703 7.0625 8.48047C7.07728 8.47813 7.12709 8.46904 7.25977 8.3623C7.40124 8.24849 7.57405 8.07732 7.84863 7.80273L10.5762 5.07617L11 4.65137L11.8486 5.5Z", fill: "currentColor" }) })] }), open
+    return (_jsxs("li", { className: cardClass, children: [header, expanded
                 ? (_jsxs("div", { className: css.body, children: [!state.writable ? _jsx("p", { className: css.readOnly, role: "status", children: props.t('settings.readOnly') }) : null, props.children, _jsxs("div", { className: css.footer, children: [state.failed
                                     ? (_jsxs("p", { className: css.failed, role: "status", children: [props.t('settings.saveFailed'), state.failedReason ? ' - ' + state.failedReason : ''] }))
                                     : null, _jsx("button", { type: "button", className: css.discard, disabled: !state.dirty || state.saving, onClick: props.onDiscard, children: props.t('settings.discard') }), _jsx("button", { type: "button", className: css.save, disabled: blocked, onClick: props.onSave, children: props.t(!state.saving ? 'settings.save' : 'settings.saving') })] })] }))

package/lib/types/mobile/markdown.d.ts

@@ -0,0 +1,26 @@
+/**
+ * A compact GFM-subset markdown renderer for the mobile chat: headings,
+ * paragraphs, fenced + inline code, bold/italic/strikethrough, links,
+ * images, lists, blockquotes, hr, and tables. All HTML is escaped before
+ * transformation — the output only ever contains the renderer's own tags.
+ * Dependency-free on purpose (the mobile bundle stays at ~456 KB); the
+ * escape-first + protocol allow-list design mirrors the desktop panel's
+ * preview renderer (dsh-aionui-panel/src/client/preview/markdown.ts).
+ * Pure and exported for tests.
+ * @module dsh-remote-web-ui/mobile/markdown
+ */
+/** Escape HTML special characters. */
+export declare function escapeHtml(text: string): string;
+/**
+ * Guard a raw link/image target against dangerous protocols. Returns the
+ * (trimmed) raw string when safe, else null. Only http:, https:, mailto:
+ * and fragment anchors (#...) are allowed; anything with another scheme
+ * — javascript:, data:, vbscript:, etc. — is rejected so the value never
+ * reaches dangerouslySetInnerHTML.
+ */
+export declare function safeUrl(raw: string): string | null;
+/** Inline pass: code spans, bold, italic, strikethrough, images, links. */
+export declare function renderInline(text: string): string;
+/** Render a markdown document to HTML (block pass). */
+export declare function renderMarkdown(source: string): string;
+//# sourceMappingURL=markdown.d.ts.map

package/lib/types/mobile/markdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.d.ts","sourceRoot":"","sources":["../../../src/mobile/markdown.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,sCAAsC;AACtC,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO/C;AAED;;;;;;GAMG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQlD;AAgBD,2EAA2E;AAC3E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAqFjD;AAED,uDAAuD;AACvD,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CA+HrD"}

package/lib/types/mobile/markdown.js

@@ -0,0 +1,272 @@
+/**
+ * A compact GFM-subset markdown renderer for the mobile chat: headings,
+ * paragraphs, fenced + inline code, bold/italic/strikethrough, links,
+ * images, lists, blockquotes, hr, and tables. All HTML is escaped before
+ * transformation — the output only ever contains the renderer's own tags.
+ * Dependency-free on purpose (the mobile bundle stays at ~456 KB); the
+ * escape-first + protocol allow-list design mirrors the desktop panel's
+ * preview renderer (dsh-aionui-panel/src/client/preview/markdown.ts).
+ * Pure and exported for tests.
+ * @module dsh-remote-web-ui/mobile/markdown
+ */
+/** Escape HTML special characters. */
+export function escapeHtml(text) {
+    return text
+        .replace(/&/g, '&')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#39;');
+}
+/**
+ * Guard a raw link/image target against dangerous protocols. Returns the
+ * (trimmed) raw string when safe, else null. Only http:, https:, mailto:
+ * and fragment anchors (#...) are allowed; anything with another scheme
+ * — javascript:, data:, vbscript:, etc. — is rejected so the value never
+ * reaches dangerouslySetInnerHTML.
+ */
+export function safeUrl(raw) {
+    const trimmed = raw.trim();
+    if (trimmed === '')
+        return null;
+    if (trimmed.startsWith('#'))
+        return trimmed;
+    const scheme = /^([a-zA-Z][a-zA-Z0-9+.-]*):/.exec(trimmed);
+    if (scheme === null)
+        return trimmed;
+    const name = scheme[1].toLowerCase();
+    return name === 'http' || name === 'https' || name === 'mailto' ? trimmed : null;
+}
+/** Find the ')' closing a link/image target, skipping nested parens. */
+function findCloseParen(text, from) {
+    let depth = 0;
+    for (let i = from; i < text.length; i += 1) {
+        const char = text[i];
+        if (char === '(')
+            depth += 1;
+        else if (char === ')') {
+            if (depth === 0)
+                return i;
+            depth -= 1;
+        }
+    }
+    return -1;
+}
+/** Inline pass: code spans, bold, italic, strikethrough, images, links. */
+export function renderInline(text) {
+    let out = '';
+    let i = 0;
+    const n = text.length;
+    while (i < n) {
+        const char = text[i];
+        // Fenced inline code first.
+        if (char === '`') {
+            const end = text.indexOf('`', i + 1);
+            if (end !== -1) {
+                out += '<code>' + escapeHtml(text.slice(i + 1, end)) + '</code>';
+                i = end + 1;
+                continue;
+            }
+        }
+        // Image ![alt](src)
+        if (char === '!' && text[i + 1] === '[') {
+            const close = text.indexOf('](', i + 2);
+            if (close !== -1) {
+                const parenEnd = findCloseParen(text, close + 2);
+                if (parenEnd !== -1) {
+                    const alt = text.slice(i + 2, close);
+                    const src = text.slice(close + 2, parenEnd);
+                    const safe = safeUrl(src);
+                    if (safe === null) {
+                        out += escapeHtml(alt);
+                    }
+                    else {
+                        const srcEsc = escapeHtml(safe).replace(/\s+/g, '%20');
+                        out += '<img alt="' + escapeHtml(alt) + '" src="' + srcEsc + '" />';
+                    }
+                    i = parenEnd + 1;
+                    continue;
+                }
+            }
+        }
+        // Link [text](href)
+        if (char === '[') {
+            const close = text.indexOf('](', i + 1);
+            if (close !== -1) {
+                const parenEnd = findCloseParen(text, close + 2);
+                if (parenEnd !== -1) {
+                    const label = text.slice(i + 1, close);
+                    const href = text.slice(close + 2, parenEnd);
+                    const safe = safeUrl(href);
+                    if (safe === null) {
+                        out += renderInline(label);
+                    }
+                    else {
+                        out += '<a href="' + escapeHtml(safe) + '" target="_blank" rel="noopener noreferrer">' + renderInline(label) + '</a>';
+                    }
+                    i = parenEnd + 1;
+                    continue;
+                }
+            }
+        }
+        // Bold **text**
+        if (char === '*' && text[i + 1] === '*') {
+            const end = text.indexOf('**', i + 2);
+            if (end !== -1) {
+                out += '<strong>' + renderInline(text.slice(i + 2, end)) + '</strong>';
+                i = end + 2;
+                continue;
+            }
+        }
+        // Italic *text*
+        if (char === '*' && text[i - 1] !== '*' && text[i + 1] !== '*') {
+            const end = text.indexOf('*', i + 1);
+            if (end !== -1 && text[end + 1] !== '*') {
+                out += '<em>' + renderInline(text.slice(i + 1, end)) + '</em>';
+                i = end + 1;
+                continue;
+            }
+        }
+        // Strikethrough ~~text~~
+        if (char === '~' && text[i + 1] === '~') {
+            const end = text.indexOf('~~', i + 2);
+            if (end !== -1) {
+                out += '<del>' + renderInline(text.slice(i + 2, end)) + '</del>';
+                i = end + 2;
+                continue;
+            }
+        }
+        out += escapeHtml(char);
+        i += 1;
+    }
+    return out;
+}
+/** Render a markdown document to HTML (block pass). */
+export function renderMarkdown(source) {
+    const lines = source.replace(/\r\n/g, '\n').split('\n');
+    const out = [];
+    let i = 0;
+    const n = lines.length;
+    const flushParagraph = (buffer) => {
+        if (buffer.length === 0)
+            return;
+        out.push('<p>' + renderInline(buffer.join('\n')) + '</p>');
+        buffer.length = 0;
+    };
+    let paragraph = [];
+    while (i < n) {
+        const line = lines[i];
+        // Fenced code block.
+        const fence = /^```([\w+-]*)\s*$/.exec(line);
+        if (fence !== null) {
+            flushParagraph(paragraph);
+            const lang = fence[1] ?? '';
+            i += 1;
+            const code = [];
+            while (i < n && !/^```\s*$/.test(lines[i])) {
+                code.push(lines[i]);
+                i += 1;
+            }
+            i += 1; // closing fence
+            const langAttr = lang === '' ? '' : ' class="language-' + escapeHtml(lang) + '"';
+            out.push('<pre' + langAttr + '><code>' + escapeHtml(code.join('\n')) + '</code></pre>');
+            continue;
+        }
+        // Heading.
+        const heading = /^(#{1,6})\s+(.*)$/.exec(line);
+        if (heading !== null) {
+            flushParagraph(paragraph);
+            const level = heading[1].length;
+            out.push('<h' + level + '>' + renderInline(heading[2] ?? '') + '</h' + level + '>');
+            i += 1;
+            continue;
+        }
+        // Horizontal rule.
+        if (/^\s*(---+|\*\*\*+|___+)\s*$/.test(line)) {
+            flushParagraph(paragraph);
+            out.push('<hr />');
+            i += 1;
+            continue;
+        }
+        // Table: header row then separator row.
+        if (line.includes('|') && i + 1 < n && /^\s*\|?[\s:|-]+\|?\s*$/.test(lines[i + 1]) && lines[i + 1].includes('-')) {
+            flushParagraph(paragraph);
+            const headerCells = splitTableRow(line);
+            i += 2;
+            const rows = [];
+            while (i < n && lines[i].includes('|')) {
+                rows.push(splitTableRow(lines[i]));
+                i += 1;
+            }
+            out.push('<table>');
+            out.push('<thead><tr>' + headerCells.map((cell) => '<th>' + renderInline(cell) + '</th>').join('') + '</tr></thead>');
+            if (rows.length > 0) {
+                out.push('<tbody>' + rows.map((row) => '<tr>' + row.map((cell) => '<td>' + renderInline(cell) + '</td>').join('') + '</tr>').join('') + '</tbody>');
+            }
+            out.push('</table>');
+            continue;
+        }
+        // Blockquote (one level).
+        const quote = /^>\s?(.*)$/.exec(line);
+        if (quote !== null) {
+            flushParagraph(paragraph);
+            const body = [];
+            while (i < n) {
+                const q = /^>\s?(.*)$/.exec(lines[i]);
+                if (q === null)
+                    break;
+                body.push(q[1] ?? '');
+                i += 1;
+            }
+            out.push('<blockquote><p>' + body.map((bodyLine) => renderInline(bodyLine)).join('<br />') + '</p></blockquote>');
+            continue;
+        }
+        // Unordered list.
+        const ul = /^\s*([-*+])\s+(.*)$/.exec(line);
+        if (ul !== null) {
+            flushParagraph(paragraph);
+            const items = [];
+            while (i < n) {
+                const item = /^\s*([-*+])\s+(.*)$/.exec(lines[i]);
+                if (item === null)
+                    break;
+                items.push('<li>' + renderInline(item[2] ?? '') + '</li>');
+                i += 1;
+            }
+            out.push('<ul>' + items.join('') + '</ul>');
+            continue;
+        }
+        // Ordered list.
+        const ol = /^\s*\d+[.)]\s+(.*)$/.exec(line);
+        if (ol !== null) {
+            flushParagraph(paragraph);
+            const items = [];
+            while (i < n) {
+                const item = /^\s*\d+[.)]\s+(.*)$/.exec(lines[i]);
+                if (item === null)
+                    break;
+                items.push('<li>' + renderInline(item[1] ?? '') + '</li>');
+                i += 1;
+            }
+            out.push('<ol>' + items.join('') + '</ol>');
+            continue;
+        }
+        // Blank line: flush the paragraph.
+        if (line.trim() === '') {
+            flushParagraph(paragraph);
+            i += 1;
+            continue;
+        }
+        paragraph.push(line);
+        i += 1;
+    }
+    flushParagraph(paragraph);
+    return out.join('\n');
+}
+/** Split one table row into cells (respecting the leading/trailing pipes). */
+function splitTableRow(line) {
+    const trimmed = line.trim();
+    const inner = trimmed.startsWith('|') ? trimmed.slice(1) : trimmed;
+    const withoutTrailing = inner.endsWith('|') ? inner.slice(0, -1) : inner;
+    return withoutTrailing.split('|').map((cell) => cell.trim());
+}

package/lib/types/mobile/markdown.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=markdown.test.d.ts.map

package/lib/types/mobile/markdown.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.test.d.ts","sourceRoot":"","sources":["../../../src/mobile/markdown.test.ts"],"names":[],"mappings":""}

package/lib/types/mobile/markdown.test.js

@@ -0,0 +1,67 @@
+/**
+ * Mobile markdown renderer tests: GFM subset coverage plus the security
+ * contract — raw HTML escapes, dangerous link/image protocols are
+ * stripped, and code fences never parse their content.
+ */
+import { describe, expect, it } from 'vitest';
+import { escapeHtml, renderInline, renderMarkdown, safeUrl } from "./markdown.js";
+describe('safeUrl', () => {
+    it('allows http/https/mailto/fragments and scheme-less targets', () => {
+        expect(safeUrl('https://example.com/a')).toBe('https://example.com/a');
+        expect(safeUrl('http://example.com')).toBe('http://example.com');
+        expect(safeUrl('mailto:a@b.c')).toBe('mailto:a@b.c');
+        expect(safeUrl('#top')).toBe('#top');
+        expect(safeUrl('./rel/path')).toBe('./rel/path');
+    });
+    it('rejects javascript:/data:/vbscript: and blanks', () => {
+        expect(safeUrl('javascript:alert(1)')).toBeNull();
+        expect(safeUrl('data:text/html,x')).toBeNull();
+        expect(safeUrl('vbscript:x')).toBeNull();
+        expect(safeUrl('')).toBeNull();
+        expect(safeUrl('   ')).toBeNull();
+    });
+});
+describe('renderInline', () => {
+    it('renders code, bold, italic, strikethrough and links', () => {
+        expect(renderInline('`a<b`')).toBe('<code>a&lt;b</code>');
+        expect(renderInline('**b**')).toBe('<strong>b</strong>');
+        expect(renderInline('*i*')).toBe('<em>i</em>');
+        expect(renderInline('~~d~~')).toBe('<del>d</del>');
+        expect(renderInline('[x](https://e.com)')).toBe('<a href="https://e.com" target="_blank" rel="noopener noreferrer">x</a>');
+    });
+    it('strips unsafe link targets and renders the label as plain text', () => {
+        expect(renderInline('[x](javascript:alert(1))')).toBe('x');
+        expect(renderInline('![a](data:text/html,x)')).toBe('a');
+    });
+    it('escapes raw HTML instead of passing it through', () => {
+        expect(renderInline('<script>alert(1)</script>')).toBe('&lt;script&gt;alert(1)&lt;/script&gt;');
+    });
+});
+describe('renderMarkdown', () => {
+    it('renders headings, hr, paragraphs', () => {
+        const html = renderMarkdown('# T\n\npara\n\n---');
+        expect(html).toContain('<h1>T</h1>');
+        expect(html).toContain('<p>para</p>');
+        expect(html).toContain('<hr />');
+    });
+    it('renders fenced code without parsing its content', () => {
+        const html = renderMarkdown('```ts\nconst a = **bold** <x>\n```');
+        expect(html).toBe('<pre class="language-ts"><code>const a = **bold** &lt;x&gt;</code></pre>');
+    });
+    it('renders lists, blockquotes and tables', () => {
+        const html = renderMarkdown('- a\n- b\n\n1. x\n2. y\n\n> quote\n\n| h1 | h2 |\n| --- | --- |\n| c1 | c2 |');
+        expect(html).toContain('<ul><li>a</li><li>b</li></ul>');
+        expect(html).toContain('<ol><li>x</li><li>y</li></ol>');
+        expect(html).toContain('<blockquote><p>quote</p></blockquote>');
+        expect(html).toContain('<thead><tr><th>h1</th><th>h2</th></tr></thead>');
+        expect(html).toContain('<td>c1</td><td>c2</td>');
+    });
+    it('normalizes CRLF and keeps user-visible text intact', () => {
+        expect(renderMarkdown('a\r\nb')).toBe('<p>a\nb</p>');
+    });
+});
+describe('escapeHtml', () => {
+    it('escapes all five HTML-significant characters', () => {
+        expect(escapeHtml('<&>"\'')).toBe('&lt;&amp;&gt;&quot;&#39;');
+    });
+});

package/lib/types/mobile/messages.d.ts

@@ -68,6 +68,20 @@ export interface RenderMessage {
     readonly toolSummary?: string;
     /** Set when the owning turn ended in an error. */
     readonly failed?: boolean;
+    /**
+     * Token usage reported by the final assistant event. cacheReadTokens and
+     * cacheWriteTokens are only attached when the wire carried finite values.
+     */
+    readonly usage?: {
+        inputTokens: number;
+        outputTokens: number;
+        cacheReadTokens?: number;
+        cacheWriteTokens?: number;
+    };
+    /** Context window for the model that produced this message (from request/context). */
+    readonly contextWindow?: number;
+    /** Wire source.kind of a user message (e.g. plugin or user). */
+    readonly sourceKind?: string;
 }
 /** One tool call attached to an assistant message (callId dedupes repeats). */
 export interface ToolCallInfo {

package/lib/types/mobile/messages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../../src/mobile/messages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAA;IACnC,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,CAAA;IAC/B,8EAA8E;IAC9E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,oCAAoC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,kFAAkF;IAClF,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B,sFAAsF;IACtF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,kDAAkD;IAClD,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,8BAA8B;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,qDAAqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAA;CAC1B;AA2bD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,SAAS,EAAE,EAAE,QAAQ,CAAC,EAAE,SAAS,aAAa,EAAE,GAAG,aAAa,EAAE,CAS7G"}
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../../src/mobile/messages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAA;IACnC,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,CAAA;IAC/B,8EAA8E;IAC9E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,oCAAoC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,kFAAkF;IAClF,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B,sFAAsF;IACtF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,kDAAkD;IAClD,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;IACzB;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE;QACf,WAAW,EAAE,MAAM,CAAA;QACnB,YAAY,EAAE,MAAM,CAAA;QACpB,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAC1B,CAAA;IACD,sFAAsF;IACtF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,gEAAgE;IAChE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,8BAA8B;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,qDAAqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAA;CAC1B;AA6eD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,SAAS,EAAE,EAAE,QAAQ,CAAC,EAAE,SAAS,aAAa,EAAE,GAAG,aAAa,EAAE,CAS7G"}

package/lib/types/mobile/messages.js

@@ -190,6 +190,15 @@ function applyEvent(state, event) {
         case 'tool/call':
             applyToolCall(state, event);
             break;
+        case 'request/context': {
+            // Wire shape: { provider, model, contextWindow? }. A present finite
+            // contextWindow seeds every later assistant message that reports usage.
+            const data = isRecord(event.data) ? event.data : {};
+            const window = pickNumber(data['contextWindow']);
+            if (window !== undefined)
+                state.contextWindow = window;
+            break;
+        }
         // turn/start, session/end-seed, and every other/unknown type render nothing.
         default:
             break;
@@ -199,13 +208,28 @@ function applyUserMessage(state, event) {
     const data = isRecord(event.data) ? event.data : {};
     const id = pickString(data['id']) ?? syntheticId('user', event.seq);
     const text = textFromContent(data['content']);
+    const source = isRecord(data['source']) ? data['source'] : {};
+    const sourceKind = pickString(source['kind']);
     const existing = state.byId.get(id);
     if (existing !== undefined) {
         // Idempotent replace (replayed events update in place, never duplicate).
-        replaceMessage(state, existing, { ...existing, text, seq: event.seq, time: event.time });
+        replaceMessage(state, existing, {
+            ...existing,
+            ...(sourceKind !== undefined ? { sourceKind } : {}),
+            text,
+            seq: event.seq,
+            time: event.time,
+        });
         return;
     }
-    const message = { id, kind: 'user', text, seq: event.seq, time: event.time };
+    const message = {
+        id,
+        kind: 'user',
+        text,
+        ...(sourceKind !== undefined ? { sourceKind } : {}),
+        seq: event.seq,
+        time: event.time,
+    };
     state.messages.push(message);
     state.byId.set(id, message);
 }
@@ -218,6 +242,8 @@ function applyAssistantMessage(state, event) {
     const finalText = textFromContent(messageData['content']);
     const finalReasoning = reasoningFromContent(messageData['content']);
     const key = tsKey(turn, step);
+    const usage = usageFromData(data);
+    const contextWindow = state.contextWindow;
     // Finalize the matching assistant message (by id, or by turn/step for the
     // streaming partial that chunks built before the final event arrived).
     let target = state.byId.get(id);
@@ -231,6 +257,8 @@ function applyAssistantMessage(state, event) {
             // The final content block list is authoritative; an adapter that omits
             // reasoning from the final message keeps the streamed reasoning text.
             ...(finalReasoning !== '' ? { reasoning: finalReasoning } : {}),
+            ...(usage !== undefined ? { usage } : {}),
+            ...(usage !== undefined && contextWindow !== undefined ? { contextWindow } : {}),
             seq: event.seq,
             time: event.time,
             pending: false,
@@ -246,6 +274,8 @@ function applyAssistantMessage(state, event) {
         kind: 'assistant',
         text: finalText,
         ...(finalReasoning !== '' ? { reasoning: finalReasoning } : {}),
+        ...(usage !== undefined ? { usage } : {}),
+        ...(usage !== undefined && contextWindow !== undefined ? { contextWindow } : {}),
         seq: event.seq,
         time: event.time,
     };
@@ -258,6 +288,28 @@ function applyAssistantMessage(state, event) {
     if (turn !== undefined)
         state.messageTurn.set(id, turn);
 }
+/**
+ * Extract token usage from an assistant event payload. Only attaches when the
+ * wire carries finite `inputTokens` AND `outputTokens`; the cache fields are
+ * included only for finite numbers.
+ */
+function usageFromData(data) {
+    const usageData = data['usage'];
+    if (!isRecord(usageData))
+        return undefined;
+    const inputTokens = pickNumber(usageData['inputTokens']);
+    const outputTokens = pickNumber(usageData['outputTokens']);
+    if (inputTokens === undefined || outputTokens === undefined)
+        return undefined;
+    const usage = { inputTokens, outputTokens };
+    const cacheReadTokens = pickNumber(usageData['cacheReadTokens']);
+    const cacheWriteTokens = pickNumber(usageData['cacheWriteTokens']);
+    if (cacheReadTokens !== undefined)
+        usage.cacheReadTokens = cacheReadTokens;
+    if (cacheWriteTokens !== undefined)
+        usage.cacheWriteTokens = cacheWriteTokens;
+    return usage;
+}
 function applyChunk(state, event) {
     const target = chunkTarget(event.data);
     if (target === null)