@m6d/cortex-cli 0.11.0 → 0.12.1

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@m6d/cortex-cli",
-    "version": "0.11.0",
+    "version": "0.12.1",
     "description": "Scaffold and operate Cortex servers",
     "license": "MIT",
     "type": "module",

package/src/contracts/charts/chart-spec.ts

@@ -168,6 +168,7 @@ const OTHER_IMAGE_FUNCTION_GLOBAL = new RegExp(
     "gi",
 );
 const CSS_ESCAPE = /\\([0-9a-f]{1,6})\s?|\\(.)/gi;
+const IMPORT_RULE = /@import[^;]*;?/gi;
 
 /** Style text with its CSS escapes decoded, so a url() hidden behind one reads as itself. */
 function decodeCssEscapes(text: string) {
@@ -197,9 +198,18 @@ export function externalResourceIn(value: string) {
     return false;
 }
 
-/** Style text with every resource-loading function neutralized: CSS escapes decoded first, url() kept only to fragments. */
+/**
+ * Style text with every resource-loading function neutralized: CSS escapes
+ * decoded first, url() kept only to fragments. A backslash left after the one
+ * decode would be a second escape layer the browser decodes again, and an
+ * @import may name its target as a bare string, so both are dropped. Each
+ * leaves a space behind, so the text around a removal cannot join into a
+ * new one.
+ */
 export function scrubStyleText(text: string) {
     return decodeCssEscapes(text)
+        .replaceAll("\\", " ")
+        .replace(IMPORT_RULE, " ")
         .replace(OTHER_IMAGE_FUNCTION_GLOBAL, "none")
         .replace(URL_FUNCTION, (match, argument: string) =>
             urlTarget(argument).startsWith("#") ? match : "none",

package/src/contracts/graph/clients/embed.ts

@@ -17,10 +17,17 @@ export type EmbeddingProviderConfig = {
 /** Turns a batch of strings into their vectors, in the order given. */
 export type EmbedFn = (values: string[]) => Promise<number[][]>;
 
+/**
+ * The most inputs one embeddings request carries. Text Embeddings Inference
+ * refuses more than 32 by default; providers that allow larger batches just
+ * take more requests.
+ */
+export const EMBEDDING_MAX_BATCH_SIZE = 32;
+
 export function createEmbedder(config: EmbeddingProviderConfig) {
     const url = `${config.baseURL.replace(/\/+$/, "")}/embeddings`;
 
-    return async function embed(values: string[]) {
+    async function embedBatch(values: string[]) {
         const response = await fetch(url, {
             method: "POST",
             headers: {
@@ -41,5 +48,15 @@ export function createEmbedder(config: EmbeddingProviderConfig) {
         return [...body.data]
             .sort((left, right) => left.index - right.index)
             .map((entry) => entry.embedding);
+    }
+
+    return async function embed(values: string[]) {
+        const embeddings: number[][] = [];
+        for (let index = 0; index < values.length; index += EMBEDDING_MAX_BATCH_SIZE) {
+            embeddings.push(
+                ...(await embedBatch(values.slice(index, index + EMBEDDING_MAX_BATCH_SIZE))),
+            );
+        }
+        return embeddings;
     };
 }

package/src/contracts/graph/index.ts

@@ -27,4 +27,4 @@ export type { Neo4jConfig, Neo4jClient, Neo4jRow } from "./clients/neo4j";
 export { createNeo4jClient, Neo4jQueryError } from "./clients/neo4j";
 
 export type { EmbedFn, EmbeddingProviderConfig } from "./clients/embed";
-export { createEmbedder } from "./clients/embed";
+export { createEmbedder, EMBEDDING_MAX_BATCH_SIZE } from "./clients/embed";

package/src/contracts/markdown/index.ts

@@ -1,8 +1,11 @@
 /*
- * CommonMark fence tracking shared by the prompt rich-text pipeline and the
- * widget's streamed-message segmenter.
+ * CommonMark fence tracking shared by the prompt rich-text pipeline, the
+ * widget's streamed-message segmenter, and the server's report stand-ins.
  */
 
+/** A fence delimiter of three or more backticks or tildes, indented at most three spaces, and the rest of its line. */
+const FENCE_LINE = /^ {0,3}(`{3,}|~{3,})(.*)$/;
+
 /**
  * Line-by-line fence state, following CommonMark's fence rules: a fence line
  * is indented at most three spaces; an opening backtick fence's info string
@@ -14,7 +17,7 @@
 export function fenceTracker() {
     let fence: { marker: string; length: number } | null = null;
     return (line: string) => {
-        const match = /^ {0,3}(`{3,}|~{3,})(.*)$/.exec(line);
+        const match = FENCE_LINE.exec(line);
         const delimiter = match?.[1];
         const rest = match?.[2] ?? "";
         if (delimiter) {
@@ -37,3 +40,8 @@ export function fenceTracker() {
         return fence ? "inside" : "outside";
     };
 }
+
+/** An opening fence line's language: the info string's first word, "" when there is none. */
+export function fenceLanguage(line: string) {
+    return FENCE_LINE.exec(line)?.[2]?.trim().split(/\s+/)[0] ?? "";
+}

package/src/contracts/runtime/api.ts

@@ -7,6 +7,7 @@ import {
     IDENTIFIER_PATTERN,
     localeSchema,
     localizedTextSchema,
+    mediaFormSchema,
     mentionedToolSchema,
     slugSchema,
     suggestionsSchema,
@@ -196,6 +197,12 @@ export const runtimeAgentConfigSchema = z.object({
      * attachments stay downloadable and deletable.
      */
     attachmentsEnabled: z.boolean(),
+    /**
+     * The media forms the agent may draw, which its prompt then describes.
+     * Operational like `attachmentsEnabled`: toggling applies without
+     * republishing.
+     */
+    media: z.array(mediaFormSchema),
     metaTools: z.object({
         searchKnowledge: z.boolean(),
         searchTools: z.boolean(),

package/src/contracts/runtime/grammar.ts

@@ -1,5 +1,11 @@
 import { z } from "zod";
-import { LOCALES, TOOL_SURFACES, type Greeting, type Suggestions } from "../wire/index";
+import {
+    LOCALES,
+    MEDIA_FORMS,
+    TOOL_SURFACES,
+    type Greeting,
+    type Suggestions,
+} from "../wire/index";
 
 /*
  * The grammar both sides of the runtime API share: identifier patterns, the
@@ -23,6 +29,7 @@ export const slugSchema = z.string().regex(SLUG_PATTERN).max(64);
 
 export const localeSchema = z.enum(LOCALES);
 export const toolSurfaceSchema = z.enum(TOOL_SURFACES);
+export const mediaFormSchema = z.enum(MEDIA_FORMS);
 export const catalogVersionSchema = z.string().regex(/^[0-9a-f]{16}$/);
 export const sha256HexSchema = z.string().regex(/^[0-9a-f]{64}$/);
 

package/src/contracts/wire/index.ts

@@ -20,6 +20,17 @@ export type ToolSurface = (typeof TOOL_SURFACES)[number];
 export const MESSAGE_ROLES = ["system", "user", "assistant", "trigger"] as const;
 export type MessageRole = (typeof MESSAGE_ROLES)[number];
 
+/** The fenced blocks an agent may draw in its replies instead of text. */
+export const MEDIA_FORMS = ["mermaid", "vega-lite", "map", "report"] as const;
+export type MediaForm = (typeof MEDIA_FORMS)[number];
+
+/** The forms an agent draws unless its config says otherwise: reports are large, so they are opt-in. */
+export const DEFAULT_MEDIA_FORMS = [
+    "mermaid",
+    "vega-lite",
+    "map",
+] as const satisfies readonly MediaForm[];
+
 export const ATTACHMENT_MIME_TYPES = [
     "image/png",
     "image/jpeg",

package/src/scaffold/files.ts

@@ -27,7 +27,7 @@ export type Database = "postgres" | "mssql";
 // sync (scripts/sync-package-versions.ts) restamps it and files.test.ts holds
 // them to that.
 export const DEPENDENCIES = {
-    "@m6d/cortex-server": "~0.11.0",
+    "@m6d/cortex-server": "~0.12.1",
     "@tanstack/ai": "^0.55.0",
     "@tanstack/ai-openai": "^0.22.8",
     hono: "^4.12.3",