@mulmoclaude/markdown-utils 1.3.0 → 1.3.2

package/README.md

@@ -1,3 +1,11 @@
 # @mulmoclaude/markdown-utils
 
 Browser-safe markdown / image rendering utilities shared by the MulmoClaude host and the markdown plugin.
+
+## Related projects
+
+Published from the MulmoClaude monorepo by [Receptron](https://github.com/receptron).
+
+- **[MulmoClaude](https://github.com/receptron/mulmoclaude)** — an open-source AI assistant platform that runs on your own computer. Claude Code as the engine, a personal wiki for long-term memory, schema-driven collections for your data, and chat that summons the right GUI (markdown, charts, forms, spreadsheets, wikis) for each task.
+- **[MulmoTerminal](https://github.com/receptron/mulmoterminal)** — a terminal-first cockpit for running many AI coding agents in parallel. One roster showing every session's summary and PR status, tmux-backed session persistence, git-worktree isolation, one-click PRs, and mobile push with remote reply.
+- **[MulmoTerminal manual](https://receptron.github.io/mulmoterminal/)** — setup, workflows, feature reference, configuration, mobile notifications, and alternative / local model providers. Available in English and Japanese.

package/dist/image/htmlSrcAttrs.js

@@ -141,10 +141,24 @@ const RESOLVABLE_TAG_OUTER_RE = /<(?:img|source|video|audio)\b(?:[^>"']|"[^"]*"|
 // look like a tag.
 const TAG_NAME_RE = /^<([a-z]+)/i;
 // Attribute iterator: walks each `name=value` pair inside a tag. The
-// leading `\s+` ensures we only match real attribute boundaries, not
+// leading `\s` ensures we only match real attribute boundaries, not
 // `src=` text embedded inside another attribute's quoted value.
+//
+// That leading class is a single `\s`, NOT `\s+`, and the difference is
+// quadratic runtime rather than style. With `\s+`, a run of N spaces that
+// is not followed by an attribute name makes the engine match all N, fail
+// `[A-Za-z]`, then backtrack through every shorter length — repeated from
+// every start position inside the run, so `<img` + N spaces + `!>` costs
+// O(N²) (measured 4x per doubling; ~1.7s at N=32k). Matching one
+// whitespace char cannot backtrack, so the same input is linear.
+//
+// Output is unaffected: under the `g` flag the scan advances one char at a
+// time, so the match still lands on the whitespace immediately before the
+// name. Any earlier whitespace simply falls outside the match and is
+// copied through verbatim by `replace`.
+//
 // Capture groups:
-//   1: leading whitespace
+//   1: the single whitespace char before the attribute name
 //   2: attribute name
 //   3: `=` with surrounding spaces (only when value present)
 //   4: full quoted/unquoted value (unused but captured for clarity)
@@ -155,8 +169,8 @@ const TAG_NAME_RE = /^<([a-z]+)/i;
 //      quote as the value
 //
 // All quantifiers bounded — verified ReDoS-safe in test_htmlSrcAttrs.ts.
-// eslint-disable-next-line sonarjs/super-linear-regex, sonarjs/regex-complexity, security/detect-unsafe-regex -- bounded quantifiers, ReDoS-safe (test in test_htmlSrcAttrs.ts)
-const ATTR_ITER_RE = /(\s+)([A-Za-z][\w:-]*)(?:(\s*=\s*)("([^"]*)"|'([^']*)'|([^\s>"'][^\s>]*)))?/g;
+// eslint-disable-next-line sonarjs/regex-complexity, security/detect-unsafe-regex -- bounded quantifiers, ReDoS-safe (test in test_htmlSrcAttrs.ts)
+const ATTR_ITER_RE = /(\s)([A-Za-z][\w:-]*)(?:(\s*=\s*)("([^"]*)"|'([^']*)'|([^\s>"'][^\s>]*)))?/g;
 /** Transform every URL-bearing attribute on a recognised tag.
  *
  *  `transform` is invoked once per matching attribute value. Return:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mulmoclaude/markdown-utils",
-  "version": "1.3.0",
+  "version": "1.3.2",
   "description": "Browser-safe markdown / image rendering utilities shared by the MulmoClaude host and the markdown plugin",
   "type": "module",
   "main": "./dist/index.js",
@@ -33,7 +33,7 @@
   "license": "MIT",
   "author": "Receptron Team",
   "dependencies": {
-    "@mulmoclaude/common": "^1.1.0",
+    "@mulmoclaude/common": "^1.1.1",
     "js-yaml": "^5.2.2",
     "marked": "^18.0.7"
   },
@@ -45,5 +45,20 @@
     "mermaid": "^11.16.0",
     "typescript": "^6.0.3",
     "vue": "^3.5.40"
+  },
+  "homepage": "https://github.com/receptron/mulmoclaude/tree/main/packages/markdown-utils#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/receptron/mulmoclaude.git",
+    "directory": "packages/markdown-utils"
+  },
+  "keywords": [
+    "mulmoclaude",
+    "markdown",
+    "rendering",
+    "browser-safe"
+  ],
+  "bugs": {
+    "url": "https://github.com/receptron/mulmoclaude/issues"
   }
 }