@m6d/cortex-cli 0.11.0 → 0.12.0

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@m6d/cortex-cli",
-    "version": "0.11.0",
+    "version": "0.12.0",
     "description": "Scaffold and operate Cortex servers",
     "license": "MIT",
     "type": "module",

package/src/contracts/charts/chart-spec.ts

@@ -168,6 +168,7 @@ const OTHER_IMAGE_FUNCTION_GLOBAL = new RegExp(
     "gi",
 );
 const CSS_ESCAPE = /\\([0-9a-f]{1,6})\s?|\\(.)/gi;
+const IMPORT_RULE = /@import[^;]*;?/gi;
 
 /** Style text with its CSS escapes decoded, so a url() hidden behind one reads as itself. */
 function decodeCssEscapes(text: string) {
@@ -197,9 +198,18 @@ export function externalResourceIn(value: string) {
     return false;
 }
 
-/** Style text with every resource-loading function neutralized: CSS escapes decoded first, url() kept only to fragments. */
+/**
+ * Style text with every resource-loading function neutralized: CSS escapes
+ * decoded first, url() kept only to fragments. A backslash left after the one
+ * decode would be a second escape layer the browser decodes again, and an
+ * @import may name its target as a bare string, so both are dropped. Each
+ * leaves a space behind, so the text around a removal cannot join into a
+ * new one.
+ */
 export function scrubStyleText(text: string) {
     return decodeCssEscapes(text)
+        .replaceAll("\\", " ")
+        .replace(IMPORT_RULE, " ")
         .replace(OTHER_IMAGE_FUNCTION_GLOBAL, "none")
         .replace(URL_FUNCTION, (match, argument: string) =>
             urlTarget(argument).startsWith("#") ? match : "none",

package/src/contracts/markdown/index.ts

@@ -1,8 +1,11 @@
 /*
- * CommonMark fence tracking shared by the prompt rich-text pipeline and the
- * widget's streamed-message segmenter.
+ * CommonMark fence tracking shared by the prompt rich-text pipeline, the
+ * widget's streamed-message segmenter, and the server's report stand-ins.
  */
 
+/** A fence delimiter of three or more backticks or tildes, indented at most three spaces, and the rest of its line. */
+const FENCE_LINE = /^ {0,3}(`{3,}|~{3,})(.*)$/;
+
 /**
  * Line-by-line fence state, following CommonMark's fence rules: a fence line
  * is indented at most three spaces; an opening backtick fence's info string
@@ -14,7 +17,7 @@
 export function fenceTracker() {
     let fence: { marker: string; length: number } | null = null;
     return (line: string) => {
-        const match = /^ {0,3}(`{3,}|~{3,})(.*)$/.exec(line);
+        const match = FENCE_LINE.exec(line);
         const delimiter = match?.[1];
         const rest = match?.[2] ?? "";
         if (delimiter) {
@@ -37,3 +40,8 @@ export function fenceTracker() {
         return fence ? "inside" : "outside";
     };
 }
+
+/** An opening fence line's language: the info string's first word, "" when there is none. */
+export function fenceLanguage(line: string) {
+    return FENCE_LINE.exec(line)?.[2]?.trim().split(/\s+/)[0] ?? "";
+}

package/src/contracts/runtime/api.ts

@@ -7,6 +7,7 @@ import {
     IDENTIFIER_PATTERN,
     localeSchema,
     localizedTextSchema,
+    mediaFormSchema,
     mentionedToolSchema,
     slugSchema,
     suggestionsSchema,
@@ -196,6 +197,12 @@ export const runtimeAgentConfigSchema = z.object({
      * attachments stay downloadable and deletable.
      */
     attachmentsEnabled: z.boolean(),
+    /**
+     * The media forms the agent may draw, which its prompt then describes.
+     * Operational like `attachmentsEnabled`: toggling applies without
+     * republishing.
+     */
+    media: z.array(mediaFormSchema),
     metaTools: z.object({
         searchKnowledge: z.boolean(),
         searchTools: z.boolean(),

package/src/contracts/runtime/grammar.ts

@@ -1,5 +1,11 @@
 import { z } from "zod";
-import { LOCALES, TOOL_SURFACES, type Greeting, type Suggestions } from "../wire/index";
+import {
+    LOCALES,
+    MEDIA_FORMS,
+    TOOL_SURFACES,
+    type Greeting,
+    type Suggestions,
+} from "../wire/index";
 
 /*
  * The grammar both sides of the runtime API share: identifier patterns, the
@@ -23,6 +29,7 @@ export const slugSchema = z.string().regex(SLUG_PATTERN).max(64);
 
 export const localeSchema = z.enum(LOCALES);
 export const toolSurfaceSchema = z.enum(TOOL_SURFACES);
+export const mediaFormSchema = z.enum(MEDIA_FORMS);
 export const catalogVersionSchema = z.string().regex(/^[0-9a-f]{16}$/);
 export const sha256HexSchema = z.string().regex(/^[0-9a-f]{64}$/);
 

package/src/contracts/wire/index.ts

@@ -20,6 +20,17 @@ export type ToolSurface = (typeof TOOL_SURFACES)[number];
 export const MESSAGE_ROLES = ["system", "user", "assistant", "trigger"] as const;
 export type MessageRole = (typeof MESSAGE_ROLES)[number];
 
+/** The fenced blocks an agent may draw in its replies instead of text. */
+export const MEDIA_FORMS = ["mermaid", "vega-lite", "map", "report"] as const;
+export type MediaForm = (typeof MEDIA_FORMS)[number];
+
+/** The forms an agent draws unless its config says otherwise: reports are large, so they are opt-in. */
+export const DEFAULT_MEDIA_FORMS = [
+    "mermaid",
+    "vega-lite",
+    "map",
+] as const satisfies readonly MediaForm[];
+
 export const ATTACHMENT_MIME_TYPES = [
     "image/png",
     "image/jpeg",

package/src/scaffold/files.ts

@@ -27,7 +27,7 @@ export type Database = "postgres" | "mssql";
 // sync (scripts/sync-package-versions.ts) restamps it and files.test.ts holds
 // them to that.
 export const DEPENDENCIES = {
-    "@m6d/cortex-server": "~0.11.0",
+    "@m6d/cortex-server": "~0.12.0",
     "@tanstack/ai": "^0.55.0",
     "@tanstack/ai-openai": "^0.22.8",
     hono: "^4.12.3",