@linxin666/dsh-remote-web-ui 0.1.17 → 0.1.18

package/lib/types/mobile/views/ChatView.test.js

@@ -461,3 +461,108 @@ describe('ChatView scrolling', () => {
         await waitFor(() => { expect(scrollWrites.length).toBe(writesBefore); });
     });
 });
+describe('ChatView display toggles and context usage', () => {
+    /** jsdom in this setup ships a bare localStorage object; install a real fake. */
+    const makeStorage = () => {
+        const map = new Map();
+        return {
+            getItem: (key) => map.get(key) ?? null,
+            setItem: (key, value) => { map.set(key, value); },
+            removeItem: (key) => { map.delete(key); },
+            clear: () => { map.clear(); },
+            key: (index) => [...map.keys()][index] ?? null,
+            get length() { return map.size; },
+        };
+    };
+    /** A user/message whose source.kind is 'plugin' (injected system message). */
+    const systemEvents = () => [
+        makeEntry('user/message', {
+            id: 'u-plugin',
+            role: 'user',
+            content: [{ type: 'text', text: '系统注入消息' }],
+            source: { kind: 'plugin', name: 'react-extension' },
+        }, 0),
+        makeEntry('user/message', { id: 'u-1', role: 'user', content: [{ type: 'text', text: '普通消息' }] }, 1),
+    ];
+    const toolEvents = () => [
+        makeEntry('user/message', { id: 'u-1', role: 'user', content: [{ type: 'text', text: '改文件' }] }, 0),
+        makeEntry('assistant/message', {
+            turn: 0,
+            step: 0,
+            message: { id: 'a-1', role: 'assistant', content: [{ type: 'text', text: '完成' }] },
+        }, 1),
+        makeEntry('tool/call', { turn: 0, step: 0, callId: 'c1', name: 'bash', arguments: '{}' }, 2),
+    ];
+    beforeEach(() => {
+        vi.stubGlobal('localStorage', makeStorage());
+    });
+    afterEach(() => {
+        vi.unstubAllGlobals();
+    });
+    it('hides injected user messages by default and reveals them via the display sheet', async () => {
+        loadHistoryMock.mockResolvedValue(historyPage(systemEvents()));
+        render(_jsx(ChatView, { session: session, onBack: () => { } }));
+        // The plugin-injected message is hidden by default; the real user message shows.
+        expect(await screen.findByText('普通消息')).toBeTruthy();
+        expect(screen.queryByText('系统注入消息')).toBeNull();
+        // Open the display sheet and flip the system-message switch on.
+        fireEvent.click(screen.getByRole('button', { name: /显示/ }));
+        const systemSwitch = await screen.findByRole('switch', { name: '系统提示词' });
+        expect(systemSwitch.getAttribute('aria-checked')).toBe('false');
+        fireEvent.click(systemSwitch);
+        expect(await screen.findByText('系统注入消息')).toBeTruthy();
+        // Flip it back off: the injected row disappears again.
+        const systemSwitchAfter = screen.getByRole('switch', { name: '系统提示词' });
+        expect(systemSwitchAfter.getAttribute('aria-checked')).toBe('true');
+        fireEvent.click(systemSwitchAfter);
+        expect(screen.queryByText('系统注入消息')).toBeNull();
+    });
+    it('hides the tool disclosure when the tool-call toggle is off', async () => {
+        loadHistoryMock.mockResolvedValue(historyPage(toolEvents()));
+        render(_jsx(ChatView, { session: session, onBack: () => { } }));
+        // Tool disclosure visible by default.
+        expect(await screen.findByRole('button', { name: /工具/ })).toBeTruthy();
+        fireEvent.click(screen.getByRole('button', { name: /显示/ }));
+        const toolSwitch = await screen.findByRole('switch', { name: '工具调用' });
+        expect(toolSwitch.getAttribute('aria-checked')).toBe('true');
+        fireEvent.click(toolSwitch);
+        // The disclosure is gone while reasoning/text remain.
+        expect(screen.queryByRole('button', { name: /工具/ })).toBeNull();
+        expect(screen.getByText('完成')).toBeTruthy();
+    });
+    it('renders the context usage chip from request/context plus assistant usage', async () => {
+        loadHistoryMock.mockResolvedValue(historyPage([
+            makeEntry('request/context', { provider: 'fx', model: 'fx-1', contextWindow: 100_000 }, 0),
+            makeEntry('user/message', { id: 'u-1', role: 'user', content: [{ type: 'text', text: 'hi' }] }, 1),
+            makeEntry('assistant/message', {
+                turn: 0,
+                step: 0,
+                message: { id: 'a-1', role: 'assistant', content: [{ type: 'text', text: 'ok' }] },
+                usage: { inputTokens: 30_000, outputTokens: 1_000 },
+            }, 2),
+        ]));
+        render(_jsx(ChatView, { session: session, onBack: () => { } }));
+        expect(await screen.findByText('上下文 30%')).toBeTruthy();
+    });
+    it('adds the warn class when context usage is at or above 80%', async () => {
+        loadHistoryMock.mockResolvedValue(historyPage([
+            makeEntry('request/context', { provider: 'fx', model: 'fx-1', contextWindow: 100_000 }, 0),
+            makeEntry('user/message', { id: 'u-1', role: 'user', content: [{ type: 'text', text: 'hi' }] }, 1),
+            makeEntry('assistant/message', {
+                turn: 0,
+                step: 0,
+                message: { id: 'a-1', role: 'assistant', content: [{ type: 'text', text: 'ok' }] },
+                usage: { inputTokens: 80_000, outputTokens: 0 },
+            }, 2),
+        ]));
+        render(_jsx(ChatView, { session: session, onBack: () => { } }));
+        const chip = await screen.findByText('上下文 80%');
+        expect(chip.className).toContain('chat-context-warn');
+    });
+    it('renders no context chip when there is no usage/context data', async () => {
+        loadHistoryMock.mockResolvedValue(historyPage(turnEvents()));
+        render(_jsx(ChatView, { session: session, onBack: () => { } }));
+        await screen.findByText('已完成修改');
+        expect(screen.queryByText(/上下文/)).toBeNull();
+    });
+});

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@linxin666/dsh-remote-web-ui",
   "description": "Mobile remote control for the dsh web GUI: scan-to-pair QR entry beside the settings button, one-time pairing tokens, live device status, and revocable mobile sessions",
-  "version": "0.1.17",
+  "version": "0.1.18",
   "type": "module",
   "engines": {
     "node": "^22.19.0 || >=24.0.0"

package/src/client/PluginSettingsCard.tsx

@@ -45,6 +45,17 @@ export interface PluginSettingsCardProps<TKey extends string = string> {
   onSave: () => void
   /** Drop every staged edit. */
   onDiscard: () => void
+  /**
+   * Render the controls expanded on arrival (still collapsible). Defaults to
+   * true: promoted first-level sections show their settings immediately.
+   */
+  defaultOpen?: boolean
+  /**
+   * Render without the collapse affordance: a static header and an always
+   * visible body. Used by first-level settings sections whose nav entry
+   * already provides the selection.
+   */
+  alwaysOpen?: boolean
   /** The plugin's controls. */
   children: ReactNode
 }
@@ -55,57 +66,27 @@ export interface PluginSettingsCardProps<TKey extends string = string> {
  * @returns the card, or nothing while the namespace is still loading.
  */
 export function PluginSettingsCard<TKey extends string = string>(props: PluginSettingsCardProps<TKey>) {
-  const [open, setOpen] = useState(false)
-  const { state } = props
+  const [open, setOpen] = useState(props.defaultOpen ?? true)
+  const { state, alwaysOpen } = props
   if (!state.available) return null
   const title = props.t(props.titleKey)
   const description = props.t(props.descriptionKey)
   const blocked = !state.dirty || state.invalid || state.saving
-  const cardClass = open ? `${css.cardOpen} ${css.card}` : css.card
-  // The namespace exists but the Host does not serve it to this client (the
-  // official settings allowlist omits third-party namespaces): show a card
-  // that explains the gap instead of vanishing, so a missing card never
-  // reads as a missing plugin.
-  if (!state.exposed) {
-    return (
-      <li className={cardClass}>
-        <button
-          type="button"
-          className={css.header}
-          aria-expanded={open}
-          aria-label={`${props.t(open ? 'settings.collapse' : 'settings.expand')}: ${title}`}
-          onClick={() => { setOpen(!open) }}
-        >
-          <span className={css.headText}>
-            <span className={css.name} title={title}>{title}</span>
-            <span className={css.description} title={description}>{description}</span>
-          </span>
-          <svg
-            width="14"
-            height="14"
-            viewBox="0 0 14 14"
-            fill="none"
-            xmlns="http://www.w3.org/2000/svg"
-            className={open ? `${css.chevron} ${css.chevronOpen}` : css.chevron}
-          >
-            <path
-              d="M11.8486 5.5L11.4238 5.92383L8.69727 8.65137C8.44157 8.90706 8.21562 9.13382 8.01172 9.29785C7.79912 9.46883 7.55595 9.61756 7.25 9.66602C7.08435 9.69222 6.91565 9.69222 6.75 9.66602C6.44405 9.61756 6.20088 9.46883 5.98828 9.29785C5.78438 9.13382 5.55843 8.90706 5.30273 8.65137L2.57617 5.92383L2.15137 5.5L3 4.65137L3.42383 5.07617L6.15137 7.80273C6.42595 8.07732 6.59876 8.24849 6.74023 8.3623C6.87291 8.46904 6.92272 8.47813 6.9375 8.48047C6.97895 8.48703 7.02105 8.48703 7.0625 8.48047C7.07728 8.47813 7.12709 8.46904 7.25977 8.3623C7.40124 8.24849 7.57405 8.07732 7.84863 7.80273L10.5762 5.07617L11 4.65137L11.8486 5.5Z"
-              fill="currentColor"
-            />
-          </svg>
-        </button>
-        {open
-          ? (
-            <div className={css.body}>
-              <p className={css.notExposed} role="status">{props.t('settings.notExposed')}</p>
-            </div>
-          )
-          : null}
-      </li>
+  const expanded = alwaysOpen === true || open
+  const cardClass = expanded ? `${css.cardOpen} ${css.card}` : css.card
+  // With alwaysOpen the nav entry already provides the selection, so the
+  // header is a static title row instead of a disclosure button.
+  const header = alwaysOpen === true
+    ? (
+      <div className={css.headerStatic}>
+        <span className={css.headText}>
+          <span className={css.name} title={title}>{title}</span>
+          <span className={css.description} title={description}>{description}</span>
+        </span>
+        {state.dirty ? <span className={css.pending} title={props.t('settings.unsaved')}>{props.t('settings.unsaved')}</span> : null}
+      </div>
     )
-  }
-  return (
-    <li className={cardClass}>
+    : (
       <button
         type="button"
         className={css.header}
@@ -132,7 +113,29 @@ export function PluginSettingsCard<TKey extends string = string>(props: PluginSe
           />
         </svg>
       </button>
-      {open
+    )
+  // The namespace exists but the Host does not serve it to this client (the
+  // official settings allowlist omits third-party namespaces): show a card
+  // that explains the gap instead of vanishing, so a missing card never
+  // reads as a missing plugin.
+  if (!state.exposed) {
+    return (
+      <li className={cardClass}>
+        {header}
+        {expanded
+          ? (
+            <div className={css.body}>
+              <p className={css.notExposed} role="status">{props.t('settings.notExposed')}</p>
+            </div>
+          )
+          : null}
+      </li>
+    )
+  }
+  return (
+    <li className={cardClass}>
+      {header}
+      {expanded
         ? (
           <div className={css.body}>
             {!state.writable ? <p className={css.readOnly} role="status">{props.t('settings.readOnly')}</p> : null}

package/src/client/settings-card.module.css

@@ -42,6 +42,15 @@
   outline-offset: -2px;
 }
 
+.headerStatic {
+  width: 100%;
+  border-radius: 12px;
+  align-items: center;
+  gap: 12px;
+  padding: 14px 16px;
+  display: flex;
+}
+
 .headText {
   flex-direction: column;
   flex: 1;

package/src/mobile/markdown.test.ts

@@ -0,0 +1,77 @@
+/**
+ * Mobile markdown renderer tests: GFM subset coverage plus the security
+ * contract — raw HTML escapes, dangerous link/image protocols are
+ * stripped, and code fences never parse their content.
+ */
+import { describe, expect, it } from 'vitest'
+import { escapeHtml, renderInline, renderMarkdown, safeUrl } from './markdown.ts'
+
+describe('safeUrl', () => {
+  it('allows http/https/mailto/fragments and scheme-less targets', () => {
+    expect(safeUrl('https://example.com/a')).toBe('https://example.com/a')
+    expect(safeUrl('http://example.com')).toBe('http://example.com')
+    expect(safeUrl('mailto:a@b.c')).toBe('mailto:a@b.c')
+    expect(safeUrl('#top')).toBe('#top')
+    expect(safeUrl('./rel/path')).toBe('./rel/path')
+  })
+
+  it('rejects javascript:/data:/vbscript: and blanks', () => {
+    expect(safeUrl('javascript:alert(1)')).toBeNull()
+    expect(safeUrl('data:text/html,x')).toBeNull()
+    expect(safeUrl('vbscript:x')).toBeNull()
+    expect(safeUrl('')).toBeNull()
+    expect(safeUrl('   ')).toBeNull()
+  })
+})
+
+describe('renderInline', () => {
+  it('renders code, bold, italic, strikethrough and links', () => {
+    expect(renderInline('`a<b`')).toBe('<code>a&lt;b</code>')
+    expect(renderInline('**b**')).toBe('<strong>b</strong>')
+    expect(renderInline('*i*')).toBe('<em>i</em>')
+    expect(renderInline('~~d~~')).toBe('<del>d</del>')
+    expect(renderInline('[x](https://e.com)')).toBe('<a href="https://e.com" target="_blank" rel="noopener noreferrer">x</a>')
+  })
+
+  it('strips unsafe link targets and renders the label as plain text', () => {
+    expect(renderInline('[x](javascript:alert(1))')).toBe('x')
+    expect(renderInline('![a](data:text/html,x)')).toBe('a')
+  })
+
+  it('escapes raw HTML instead of passing it through', () => {
+    expect(renderInline('<script>alert(1)</script>')).toBe('&lt;script&gt;alert(1)&lt;/script&gt;')
+  })
+})
+
+describe('renderMarkdown', () => {
+  it('renders headings, hr, paragraphs', () => {
+    const html = renderMarkdown('# T\n\npara\n\n---')
+    expect(html).toContain('<h1>T</h1>')
+    expect(html).toContain('<p>para</p>')
+    expect(html).toContain('<hr />')
+  })
+
+  it('renders fenced code without parsing its content', () => {
+    const html = renderMarkdown('```ts\nconst a = **bold** <x>\n```')
+    expect(html).toBe('<pre class="language-ts"><code>const a = **bold** &lt;x&gt;</code></pre>')
+  })
+
+  it('renders lists, blockquotes and tables', () => {
+    const html = renderMarkdown('- a\n- b\n\n1. x\n2. y\n\n> quote\n\n| h1 | h2 |\n| --- | --- |\n| c1 | c2 |')
+    expect(html).toContain('<ul><li>a</li><li>b</li></ul>')
+    expect(html).toContain('<ol><li>x</li><li>y</li></ol>')
+    expect(html).toContain('<blockquote><p>quote</p></blockquote>')
+    expect(html).toContain('<thead><tr><th>h1</th><th>h2</th></tr></thead>')
+    expect(html).toContain('<td>c1</td><td>c2</td>')
+  })
+
+  it('normalizes CRLF and keeps user-visible text intact', () => {
+    expect(renderMarkdown('a\r\nb')).toBe('<p>a\nb</p>')
+  })
+})
+
+describe('escapeHtml', () => {
+  it('escapes all five HTML-significant characters', () => {
+    expect(escapeHtml('<&>"\'')).toBe('&lt;&amp;&gt;&quot;&#39;')
+  })
+})

package/src/mobile/markdown.ts

@@ -0,0 +1,278 @@
+/**
+ * A compact GFM-subset markdown renderer for the mobile chat: headings,
+ * paragraphs, fenced + inline code, bold/italic/strikethrough, links,
+ * images, lists, blockquotes, hr, and tables. All HTML is escaped before
+ * transformation — the output only ever contains the renderer's own tags.
+ * Dependency-free on purpose (the mobile bundle stays at ~456 KB); the
+ * escape-first + protocol allow-list design mirrors the desktop panel's
+ * preview renderer (dsh-aionui-panel/src/client/preview/markdown.ts).
+ * Pure and exported for tests.
+ * @module dsh-remote-web-ui/mobile/markdown
+ */
+
+/** Escape HTML special characters. */
+export function escapeHtml(text: string): string {
+  return text
+    .replace(/&/g, '&')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;')
+    .replace(/"/g, '&quot;')
+    .replace(/'/g, '&#39;')
+}
+
+/**
+ * Guard a raw link/image target against dangerous protocols. Returns the
+ * (trimmed) raw string when safe, else null. Only http:, https:, mailto:
+ * and fragment anchors (#...) are allowed; anything with another scheme
+ * — javascript:, data:, vbscript:, etc. — is rejected so the value never
+ * reaches dangerouslySetInnerHTML.
+ */
+export function safeUrl(raw: string): string | null {
+  const trimmed = raw.trim()
+  if (trimmed === '') return null
+  if (trimmed.startsWith('#')) return trimmed
+  const scheme = /^([a-zA-Z][a-zA-Z0-9+.-]*):/.exec(trimmed)
+  if (scheme === null) return trimmed
+  const name = scheme[1].toLowerCase()
+  return name === 'http' || name === 'https' || name === 'mailto' ? trimmed : null
+}
+
+/** Find the ')' closing a link/image target, skipping nested parens. */
+function findCloseParen(text: string, from: number): number {
+  let depth = 0
+  for (let i = from; i < text.length; i += 1) {
+    const char = text[i]
+    if (char === '(') depth += 1
+    else if (char === ')') {
+      if (depth === 0) return i
+      depth -= 1
+    }
+  }
+  return -1
+}
+
+/** Inline pass: code spans, bold, italic, strikethrough, images, links. */
+export function renderInline(text: string): string {
+  let out = ''
+  let i = 0
+  const n = text.length
+  while (i < n) {
+    const char = text[i]
+    // Fenced inline code first.
+    if (char === '`') {
+      const end = text.indexOf('`', i + 1)
+      if (end !== -1) {
+        out += '<code>' + escapeHtml(text.slice(i + 1, end)) + '</code>'
+        i = end + 1
+        continue
+      }
+    }
+    // Image ![alt](src)
+    if (char === '!' && text[i + 1] === '[') {
+      const close = text.indexOf('](', i + 2)
+      if (close !== -1) {
+        const parenEnd = findCloseParen(text, close + 2)
+        if (parenEnd !== -1) {
+          const alt = text.slice(i + 2, close)
+          const src = text.slice(close + 2, parenEnd)
+          const safe = safeUrl(src)
+          if (safe === null) {
+            out += escapeHtml(alt)
+          } else {
+            const srcEsc = escapeHtml(safe).replace(/\s+/g, '%20')
+            out += '<img alt="' + escapeHtml(alt) + '" src="' + srcEsc + '" />'
+          }
+          i = parenEnd + 1
+          continue
+        }
+      }
+    }
+    // Link [text](href)
+    if (char === '[') {
+      const close = text.indexOf('](', i + 1)
+      if (close !== -1) {
+        const parenEnd = findCloseParen(text, close + 2)
+        if (parenEnd !== -1) {
+          const label = text.slice(i + 1, close)
+          const href = text.slice(close + 2, parenEnd)
+          const safe = safeUrl(href)
+          if (safe === null) {
+            out += renderInline(label)
+          } else {
+            out += '<a href="' + escapeHtml(safe) + '" target="_blank" rel="noopener noreferrer">' + renderInline(label) + '</a>'
+          }
+          i = parenEnd + 1
+          continue
+        }
+      }
+    }
+    // Bold **text**
+    if (char === '*' && text[i + 1] === '*') {
+      const end = text.indexOf('**', i + 2)
+      if (end !== -1) {
+        out += '<strong>' + renderInline(text.slice(i + 2, end)) + '</strong>'
+        i = end + 2
+        continue
+      }
+    }
+    // Italic *text*
+    if (char === '*' && text[i - 1] !== '*' && text[i + 1] !== '*') {
+      const end = text.indexOf('*', i + 1)
+      if (end !== -1 && text[end + 1] !== '*') {
+        out += '<em>' + renderInline(text.slice(i + 1, end)) + '</em>'
+        i = end + 1
+        continue
+      }
+    }
+    // Strikethrough ~~text~~
+    if (char === '~' && text[i + 1] === '~') {
+      const end = text.indexOf('~~', i + 2)
+      if (end !== -1) {
+        out += '<del>' + renderInline(text.slice(i + 2, end)) + '</del>'
+        i = end + 2
+        continue
+      }
+    }
+    out += escapeHtml(char)
+    i += 1
+  }
+  return out
+}
+
+/** Render a markdown document to HTML (block pass). */
+export function renderMarkdown(source: string): string {
+  const lines = source.replace(/\r\n/g, '\n').split('\n')
+  const out: string[] = []
+  let i = 0
+  const n = lines.length
+
+  const flushParagraph = (buffer: string[]): void => {
+    if (buffer.length === 0) return
+    out.push('<p>' + renderInline(buffer.join('\n')) + '</p>')
+    buffer.length = 0
+  }
+
+  let paragraph: string[] = []
+  while (i < n) {
+    const line = lines[i]
+
+    // Fenced code block.
+    const fence = /^```([\w+-]*)\s*$/.exec(line)
+    if (fence !== null) {
+      flushParagraph(paragraph)
+      const lang = fence[1] ?? ''
+      i += 1
+      const code: string[] = []
+      while (i < n && !/^```\s*$/.test(lines[i])) {
+        code.push(lines[i])
+        i += 1
+      }
+      i += 1 // closing fence
+      const langAttr = lang === '' ? '' : ' class="language-' + escapeHtml(lang) + '"'
+      out.push('<pre' + langAttr + '><code>' + escapeHtml(code.join('\n')) + '</code></pre>')
+      continue
+    }
+
+    // Heading.
+    const heading = /^(#{1,6})\s+(.*)$/.exec(line)
+    if (heading !== null) {
+      flushParagraph(paragraph)
+      const level = heading[1].length
+      out.push('<h' + level + '>' + renderInline(heading[2] ?? '') + '</h' + level + '>')
+      i += 1
+      continue
+    }
+
+    // Horizontal rule.
+    if (/^\s*(---+|\*\*\*+|___+)\s*$/.test(line)) {
+      flushParagraph(paragraph)
+      out.push('<hr />')
+      i += 1
+      continue
+    }
+
+    // Table: header row then separator row.
+    if (line.includes('|') && i + 1 < n && /^\s*\|?[\s:|-]+\|?\s*$/.test(lines[i + 1]) && lines[i + 1].includes('-')) {
+      flushParagraph(paragraph)
+      const headerCells = splitTableRow(line)
+      i += 2
+      const rows: string[][] = []
+      while (i < n && lines[i].includes('|')) {
+        rows.push(splitTableRow(lines[i]))
+        i += 1
+      }
+      out.push('<table>')
+      out.push('<thead><tr>' + headerCells.map((cell) => '<th>' + renderInline(cell) + '</th>').join('') + '</tr></thead>')
+      if (rows.length > 0) {
+        out.push('<tbody>' + rows.map((row) => '<tr>' + row.map((cell) => '<td>' + renderInline(cell) + '</td>').join('') + '</tr>').join('') + '</tbody>')
+      }
+      out.push('</table>')
+      continue
+    }
+
+    // Blockquote (one level).
+    const quote = /^>\s?(.*)$/.exec(line)
+    if (quote !== null) {
+      flushParagraph(paragraph)
+      const body: string[] = []
+      while (i < n) {
+        const q = /^>\s?(.*)$/.exec(lines[i])
+        if (q === null) break
+        body.push(q[1] ?? '')
+        i += 1
+      }
+      out.push('<blockquote><p>' + body.map((bodyLine) => renderInline(bodyLine)).join('<br />') + '</p></blockquote>')
+      continue
+    }
+
+    // Unordered list.
+    const ul = /^\s*([-*+])\s+(.*)$/.exec(line)
+    if (ul !== null) {
+      flushParagraph(paragraph)
+      const items: string[] = []
+      while (i < n) {
+        const item = /^\s*([-*+])\s+(.*)$/.exec(lines[i])
+        if (item === null) break
+        items.push('<li>' + renderInline(item[2] ?? '') + '</li>')
+        i += 1
+      }
+      out.push('<ul>' + items.join('') + '</ul>')
+      continue
+    }
+
+    // Ordered list.
+    const ol = /^\s*\d+[.)]\s+(.*)$/.exec(line)
+    if (ol !== null) {
+      flushParagraph(paragraph)
+      const items: string[] = []
+      while (i < n) {
+        const item = /^\s*\d+[.)]\s+(.*)$/.exec(lines[i])
+        if (item === null) break
+        items.push('<li>' + renderInline(item[1] ?? '') + '</li>')
+        i += 1
+      }
+      out.push('<ol>' + items.join('') + '</ol>')
+      continue
+    }
+
+    // Blank line: flush the paragraph.
+    if (line.trim() === '') {
+      flushParagraph(paragraph)
+      i += 1
+      continue
+    }
+
+    paragraph.push(line)
+    i += 1
+  }
+  flushParagraph(paragraph)
+  return out.join('\n')
+}
+
+/** Split one table row into cells (respecting the leading/trailing pipes). */
+function splitTableRow(line: string): string[] {
+  const trimmed = line.trim()
+  const inner = trimmed.startsWith('|') ? trimmed.slice(1) : trimmed
+  const withoutTrailing = inner.endsWith('|') ? inner.slice(0, -1) : inner
+  return withoutTrailing.split('|').map((cell) => cell.trim())
+}