@pactor-app/markdown 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Pactor Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,58 @@
+# @pactor-app/markdown
+
+[Pactor](https://github.com/426-330/pactor) 的 Markdown 模块：安全的 Markdown 渲染器（`MarkdownRenderer`）与 DSL Markdown 组件适配（`type: Markdown`）。Chat 消息与 Page/Overlay DSL 共用同一渲染器。
+
+## 安装
+
+```bash
+npm install @pactor-app/markdown react
+# 或
+pnpm add @pactor-app/markdown react
+```
+
+`react >= 18` 为 peer dependency。开发基准：react-markdown v10（^10.1.0）+ remark-gfm v4（^4.0.1）。
+
+## 安全边界
+
+- **不启用 raw HTML**：基于 react-markdown 的 AST 渲染，Markdown 文本中的原始 HTML（`<script>`、事件属性、任意标签）不会渲染为元素。**切勿引入 `rehype-raw`**——该约定由测试锁定（script / onerror 注入场景）。
+- **协议白名单**：链接 href 仅允许 `http:` / `https:` / `mailto:` 与相对路径；图片 src 仅允许 `http:` / `https:` 与相对路径。`javascript:` 等危险协议的链接渲染为纯文本，图片不渲染。
+- **外链安全属性**：http(s) 链接自动带 `target="_blank" rel="noreferrer"`。
+
+## 独立使用
+
+```tsx
+import { MarkdownRenderer } from '@pactor-app/markdown';
+
+<MarkdownRenderer content={'### 标题\n\n- 列表项\n\n| 表 | 格 |\n| - | - |\n| 1 | 2 |'} />;
+```
+
+支持：标题 / 段落 / 粗体 / 斜体 / 有序与无序列表 / GFM 表格与删除线 / 围栏代码块（`<pre><code class="language-xxx">`，供后续语法高亮扩展）与行内代码 / 引用 / 链接 / 图片。容器带基础 class `@pactor-app/markdown`，样式由宿主主题决定。
+
+## DSL 使用
+
+```tsx
+import { createPageRuntime, PageRuntimeView } from '@pactor-app/runtime';
+import { registerMarkdownComponents } from '@pactor-app/markdown';
+
+const runtime = createPageRuntime(pageDsl);
+registerMarkdownComponents(runtime.context.components); // 注册 DSL 类型 'Markdown'
+
+await runtime.initialized;
+<PageRuntimeView runtime={runtime} />;
+```
+
+```yaml
+type: Markdown
+props:
+  content: '当前筛选：**${state.keyword}**'
+```
+
+`props.content` 中的表达式（`${data.xxx}` 等）由 Renderer 在下发前解析，组件拿到的已是最终文本。Chat 的 Safe Registry 场景可复用同一 `registerMarkdownComponents`。
+
+## 文档
+
+完整文档见 <https://github.com/426-330/pactor/tree/main/docs>（`pnpm docs:dev` 本地启动文档站）。
+
+## License
+
+[MIT](../../LICENSE)

package/dist/index.cjs

@@ -0,0 +1,208 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  CodeBlock: () => CodeBlock,
+  MARKDOWN_DSL_TYPE: () => MARKDOWN_DSL_TYPE,
+  MarkdownDslComponent: () => MarkdownDslComponent,
+  MarkdownRenderer: () => MarkdownRenderer,
+  isSafeUrl: () => isSafeUrl,
+  registerCodeLanguages: () => registerCodeLanguages,
+  registerMarkdownComponents: () => registerMarkdownComponents
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/renderer.tsx
+var import_react_markdown = __toESM(require("react-markdown"), 1);
+var import_rehype_katex = __toESM(require("rehype-katex"), 1);
+var import_remark_gfm = __toESM(require("remark-gfm"), 1);
+var import_remark_math = __toESM(require("remark-math"), 1);
+
+// src/code-block.tsx
+var import_react = require("react");
+var import_react_syntax_highlighter = require("react-syntax-highlighter");
+var import_bash = __toESM(require("react-syntax-highlighter/dist/esm/languages/prism/bash"), 1);
+var import_css = __toESM(require("react-syntax-highlighter/dist/esm/languages/prism/css"), 1);
+var import_javascript = __toESM(require("react-syntax-highlighter/dist/esm/languages/prism/javascript"), 1);
+var import_json = __toESM(require("react-syntax-highlighter/dist/esm/languages/prism/json"), 1);
+var import_jsx = __toESM(require("react-syntax-highlighter/dist/esm/languages/prism/jsx"), 1);
+var import_markdown = __toESM(require("react-syntax-highlighter/dist/esm/languages/prism/markdown"), 1);
+var import_python = __toESM(require("react-syntax-highlighter/dist/esm/languages/prism/python"), 1);
+var import_tsx = __toESM(require("react-syntax-highlighter/dist/esm/languages/prism/tsx"), 1);
+var import_typescript = __toESM(require("react-syntax-highlighter/dist/esm/languages/prism/typescript"), 1);
+var import_yaml = __toESM(require("react-syntax-highlighter/dist/esm/languages/prism/yaml"), 1);
+var import_one_light = __toESM(require("react-syntax-highlighter/dist/esm/styles/prism/one-light"), 1);
+var import_jsx_runtime = require("react/jsx-runtime");
+var LANGUAGES = {
+  bash: import_bash.default,
+  css: import_css.default,
+  javascript: import_javascript.default,
+  js: import_javascript.default,
+  json: import_json.default,
+  jsx: import_jsx.default,
+  markdown: import_markdown.default,
+  md: import_markdown.default,
+  python: import_python.default,
+  py: import_python.default,
+  tsx: import_tsx.default,
+  typescript: import_typescript.default,
+  ts: import_typescript.default,
+  yaml: import_yaml.default,
+  yml: import_yaml.default
+};
+var registered = false;
+function registerCodeLanguages() {
+  if (registered) {
+    return;
+  }
+  registered = true;
+  for (const [name, language] of Object.entries(LANGUAGES)) {
+    import_react_syntax_highlighter.PrismLight.registerLanguage(name, language);
+  }
+}
+function isCodeLanguageRegistered(language) {
+  return language.toLowerCase() in LANGUAGES;
+}
+function CodeBlock({ language, children }) {
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+    import_react_syntax_highlighter.PrismLight,
+    {
+      language: language.toLowerCase(),
+      style: import_one_light.default,
+      customStyle: { margin: 0, background: "transparent", fontSize: "0.85em" },
+      codeTagProps: { className: `language-${language.toLowerCase()}` },
+      children: children.replace(/\n$/, "")
+    }
+  );
+}
+function extractFencedCode(preChildren) {
+  if (!(0, import_react.isValidElement)(preChildren)) {
+    return null;
+  }
+  const { className, children } = preChildren.props;
+  const match = /language-([\w-]+)/.exec(className ?? "");
+  if (!match) {
+    return null;
+  }
+  return { language: match[1], code: String(children ?? "") };
+}
+
+// src/renderer.tsx
+var import_jsx_runtime2 = require("react/jsx-runtime");
+var LINK_PROTOCOL_WHITELIST = /* @__PURE__ */ new Set(["http:", "https:", "mailto:"]);
+var IMAGE_PROTOCOL_WHITELIST = /* @__PURE__ */ new Set(["http:", "https:"]);
+function extractProtocol(url) {
+  const match = /^([a-zA-Z][a-zA-Z0-9+.-]*):/.exec(url.trim());
+  return match ? `${match[1].toLowerCase()}:` : null;
+}
+function isSafeUrl(url, kind) {
+  if (typeof url !== "string" || url.trim() === "") {
+    return false;
+  }
+  const protocol = extractProtocol(url);
+  if (protocol === null) {
+    return true;
+  }
+  const whitelist = kind === "link" ? LINK_PROTOCOL_WHITELIST : IMAGE_PROTOCOL_WHITELIST;
+  return whitelist.has(protocol);
+}
+var SafeLink = ({ href, children }) => {
+  if (!isSafeUrl(href, "link")) {
+    return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(import_jsx_runtime2.Fragment, { children });
+  }
+  const protocol = extractProtocol(href);
+  if (protocol === "http:" || protocol === "https:") {
+    return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("a", { href, target: "_blank", rel: "noreferrer", children });
+  }
+  return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("a", { href, children });
+};
+var SafeImage = ({ src, alt }) => {
+  if (!isSafeUrl(src, "image")) {
+    return null;
+  }
+  return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("img", { src, alt: alt ?? "" });
+};
+var baseComponents = {
+  a: SafeLink,
+  img: SafeImage
+};
+var highlightingComponents = {
+  ...baseComponents,
+  pre: ({ children }) => {
+    const fenced = extractFencedCode(children);
+    if (fenced && isCodeLanguageRegistered(fenced.language)) {
+      return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(CodeBlock, { language: fenced.language, children: fenced.code });
+    }
+    return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("pre", { children });
+  }
+};
+function MarkdownRenderer({
+  content = "",
+  className,
+  math = true,
+  codeHighlight = true
+}) {
+  if (codeHighlight) {
+    registerCodeLanguages();
+  }
+  const containerClass = className ? `pactor-markdown ${className}` : "pactor-markdown";
+  return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("div", { className: containerClass, children: /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(
+    import_react_markdown.default,
+    {
+      remarkPlugins: math ? [import_remark_gfm.default, import_remark_math.default] : [import_remark_gfm.default],
+      rehypePlugins: math ? [import_rehype_katex.default] : [],
+      components: codeHighlight ? highlightingComponents : baseComponents,
+      children: content
+    }
+  ) });
+}
+
+// src/dsl-component.tsx
+var import_jsx_runtime3 = require("react/jsx-runtime");
+function MarkdownDslComponent({ content }) {
+  return /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(MarkdownRenderer, { content: content ?? "" });
+}
+
+// src/register.ts
+var MARKDOWN_DSL_TYPE = "Markdown";
+function registerMarkdownComponents(registry) {
+  registry.register(MARKDOWN_DSL_TYPE, MarkdownDslComponent);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  CodeBlock,
+  MARKDOWN_DSL_TYPE,
+  MarkdownDslComponent,
+  MarkdownRenderer,
+  isSafeUrl,
+  registerCodeLanguages,
+  registerMarkdownComponents
+});

package/dist/index.d.cts

@@ -0,0 +1,62 @@
+import * as react from 'react';
+import { Registry } from '@pactor-app/core';
+
+/**
+ * 协议白名单检查：相对路径（无协议）放行；
+ * 带协议的 URL 必须在白名单内，否则拒绝。
+ * 空串同样拒绝——react-markdown 默认 urlTransform 会把
+ * javascript: 等危险协议置为空串，空串即视为已被拒绝。
+ */
+declare function isSafeUrl(url: string | undefined, kind: 'link' | 'image'): boolean;
+interface MarkdownRendererProps {
+    /** Markdown 源文本（DSL 场景下表达式已由 Renderer 解析后传入） */
+    content?: string;
+    /** 附加 className，与基础 class `@pactor-app/markdown` 并存 */
+    className?: string;
+    /** 数学公式（remark-math + rehype-katex），默认 true；需自行引入 katex css */
+    math?: boolean;
+    /** fenced 代码块语法高亮，默认 true */
+    codeHighlight?: boolean;
+}
+/**
+ * Markdown 渲染器：标题 / 列表 / 表格（GFM）/ 代码块 / 引用 / 链接 / 图片 /
+ * 数学公式（KaTeX）。容器带基础 class `@pactor-app/markdown`，样式由宿主主题决定。
+ * 技术选型参考 DeepTutor web：react-markdown + remark-gfm + remark-math +
+ * rehype-katex + react-syntax-highlighter（Light 构建）。
+ *
+ * 注意：启用 math 时需在使用方引入 `katex/dist/katex.min.css`。
+ */
+declare function MarkdownRenderer({ content, className, math, codeHighlight, }: MarkdownRendererProps): react.JSX.Element;
+
+interface MarkdownDslComponentProps {
+    /**
+     * Markdown 内容（DSL props.content）。
+     * `${data.xxx}` 等表达式已由 Renderer 在 props 下发前解析（设计决策 D3）。
+     */
+    content?: string;
+}
+/**
+ * DSL 组件适配：`{ type: 'Markdown', props: { content } }`。
+ * 仅做 props 透传，渲染与安全边界全部委托给 MarkdownRenderer。
+ */
+declare function MarkdownDslComponent({ content }: MarkdownDslComponentProps): react.JSX.Element;
+
+/** Markdown 组件的 DSL 类型名 */
+declare const MARKDOWN_DSL_TYPE = "Markdown";
+/**
+ * 把 Markdown DSL 组件注册到给定的 Component Registry
+ * （@pactor-app/runtime 的 `ComponentRegistry` 即 `Registry<unknown>`，
+ * @pactor-app/chat 的 Safe Registry 场景亦可复用）。
+ */
+declare function registerMarkdownComponents(registry: Registry<unknown>): void;
+
+/** 幂等注册内置语言表（模块加载时由 MarkdownRenderer 触发一次） */
+declare function registerCodeLanguages(): void;
+interface CodeBlockProps {
+    language: string;
+    children: string;
+}
+/** fenced 代码块高亮渲染（Prism Light + one-light 主题） */
+declare function CodeBlock({ language, children }: CodeBlockProps): react.JSX.Element;
+
+export { CodeBlock, type CodeBlockProps, MARKDOWN_DSL_TYPE, MarkdownDslComponent, type MarkdownDslComponentProps, MarkdownRenderer, type MarkdownRendererProps, isSafeUrl, registerCodeLanguages, registerMarkdownComponents };

package/dist/index.d.ts

@@ -0,0 +1,62 @@
+import * as react from 'react';
+import { Registry } from '@pactor-app/core';
+
+/**
+ * 协议白名单检查：相对路径（无协议）放行；
+ * 带协议的 URL 必须在白名单内，否则拒绝。
+ * 空串同样拒绝——react-markdown 默认 urlTransform 会把
+ * javascript: 等危险协议置为空串，空串即视为已被拒绝。
+ */
+declare function isSafeUrl(url: string | undefined, kind: 'link' | 'image'): boolean;
+interface MarkdownRendererProps {
+    /** Markdown 源文本（DSL 场景下表达式已由 Renderer 解析后传入） */
+    content?: string;
+    /** 附加 className，与基础 class `@pactor-app/markdown` 并存 */
+    className?: string;
+    /** 数学公式（remark-math + rehype-katex），默认 true；需自行引入 katex css */
+    math?: boolean;
+    /** fenced 代码块语法高亮，默认 true */
+    codeHighlight?: boolean;
+}
+/**
+ * Markdown 渲染器：标题 / 列表 / 表格（GFM）/ 代码块 / 引用 / 链接 / 图片 /
+ * 数学公式（KaTeX）。容器带基础 class `@pactor-app/markdown`，样式由宿主主题决定。
+ * 技术选型参考 DeepTutor web：react-markdown + remark-gfm + remark-math +
+ * rehype-katex + react-syntax-highlighter（Light 构建）。
+ *
+ * 注意：启用 math 时需在使用方引入 `katex/dist/katex.min.css`。
+ */
+declare function MarkdownRenderer({ content, className, math, codeHighlight, }: MarkdownRendererProps): react.JSX.Element;
+
+interface MarkdownDslComponentProps {
+    /**
+     * Markdown 内容（DSL props.content）。
+     * `${data.xxx}` 等表达式已由 Renderer 在 props 下发前解析（设计决策 D3）。
+     */
+    content?: string;
+}
+/**
+ * DSL 组件适配：`{ type: 'Markdown', props: { content } }`。
+ * 仅做 props 透传，渲染与安全边界全部委托给 MarkdownRenderer。
+ */
+declare function MarkdownDslComponent({ content }: MarkdownDslComponentProps): react.JSX.Element;
+
+/** Markdown 组件的 DSL 类型名 */
+declare const MARKDOWN_DSL_TYPE = "Markdown";
+/**
+ * 把 Markdown DSL 组件注册到给定的 Component Registry
+ * （@pactor-app/runtime 的 `ComponentRegistry` 即 `Registry<unknown>`，
+ * @pactor-app/chat 的 Safe Registry 场景亦可复用）。
+ */
+declare function registerMarkdownComponents(registry: Registry<unknown>): void;
+
+/** 幂等注册内置语言表（模块加载时由 MarkdownRenderer 触发一次） */
+declare function registerCodeLanguages(): void;
+interface CodeBlockProps {
+    language: string;
+    children: string;
+}
+/** fenced 代码块高亮渲染（Prism Light + one-light 主题） */
+declare function CodeBlock({ language, children }: CodeBlockProps): react.JSX.Element;
+
+export { CodeBlock, type CodeBlockProps, MARKDOWN_DSL_TYPE, MarkdownDslComponent, type MarkdownDslComponentProps, MarkdownRenderer, type MarkdownRendererProps, isSafeUrl, registerCodeLanguages, registerMarkdownComponents };

package/dist/index.js

@@ -0,0 +1,165 @@
+// src/renderer.tsx
+import Markdown from "react-markdown";
+import rehypeKatex from "rehype-katex";
+import remarkGfm from "remark-gfm";
+import remarkMath from "remark-math";
+
+// src/code-block.tsx
+import { isValidElement } from "react";
+import { PrismLight as SyntaxHighlighter } from "react-syntax-highlighter";
+import bash from "react-syntax-highlighter/dist/esm/languages/prism/bash";
+import css from "react-syntax-highlighter/dist/esm/languages/prism/css";
+import javascript from "react-syntax-highlighter/dist/esm/languages/prism/javascript";
+import json from "react-syntax-highlighter/dist/esm/languages/prism/json";
+import jsx from "react-syntax-highlighter/dist/esm/languages/prism/jsx";
+import markdown from "react-syntax-highlighter/dist/esm/languages/prism/markdown";
+import python from "react-syntax-highlighter/dist/esm/languages/prism/python";
+import tsx from "react-syntax-highlighter/dist/esm/languages/prism/tsx";
+import typescript from "react-syntax-highlighter/dist/esm/languages/prism/typescript";
+import yaml from "react-syntax-highlighter/dist/esm/languages/prism/yaml";
+import oneLight from "react-syntax-highlighter/dist/esm/styles/prism/one-light";
+import { jsx as jsx2 } from "react/jsx-runtime";
+var LANGUAGES = {
+  bash,
+  css,
+  javascript,
+  js: javascript,
+  json,
+  jsx,
+  markdown,
+  md: markdown,
+  python,
+  py: python,
+  tsx,
+  typescript,
+  ts: typescript,
+  yaml,
+  yml: yaml
+};
+var registered = false;
+function registerCodeLanguages() {
+  if (registered) {
+    return;
+  }
+  registered = true;
+  for (const [name, language] of Object.entries(LANGUAGES)) {
+    SyntaxHighlighter.registerLanguage(name, language);
+  }
+}
+function isCodeLanguageRegistered(language) {
+  return language.toLowerCase() in LANGUAGES;
+}
+function CodeBlock({ language, children }) {
+  return /* @__PURE__ */ jsx2(
+    SyntaxHighlighter,
+    {
+      language: language.toLowerCase(),
+      style: oneLight,
+      customStyle: { margin: 0, background: "transparent", fontSize: "0.85em" },
+      codeTagProps: { className: `language-${language.toLowerCase()}` },
+      children: children.replace(/\n$/, "")
+    }
+  );
+}
+function extractFencedCode(preChildren) {
+  if (!isValidElement(preChildren)) {
+    return null;
+  }
+  const { className, children } = preChildren.props;
+  const match = /language-([\w-]+)/.exec(className ?? "");
+  if (!match) {
+    return null;
+  }
+  return { language: match[1], code: String(children ?? "") };
+}
+
+// src/renderer.tsx
+import { Fragment, jsx as jsx3 } from "react/jsx-runtime";
+var LINK_PROTOCOL_WHITELIST = /* @__PURE__ */ new Set(["http:", "https:", "mailto:"]);
+var IMAGE_PROTOCOL_WHITELIST = /* @__PURE__ */ new Set(["http:", "https:"]);
+function extractProtocol(url) {
+  const match = /^([a-zA-Z][a-zA-Z0-9+.-]*):/.exec(url.trim());
+  return match ? `${match[1].toLowerCase()}:` : null;
+}
+function isSafeUrl(url, kind) {
+  if (typeof url !== "string" || url.trim() === "") {
+    return false;
+  }
+  const protocol = extractProtocol(url);
+  if (protocol === null) {
+    return true;
+  }
+  const whitelist = kind === "link" ? LINK_PROTOCOL_WHITELIST : IMAGE_PROTOCOL_WHITELIST;
+  return whitelist.has(protocol);
+}
+var SafeLink = ({ href, children }) => {
+  if (!isSafeUrl(href, "link")) {
+    return /* @__PURE__ */ jsx3(Fragment, { children });
+  }
+  const protocol = extractProtocol(href);
+  if (protocol === "http:" || protocol === "https:") {
+    return /* @__PURE__ */ jsx3("a", { href, target: "_blank", rel: "noreferrer", children });
+  }
+  return /* @__PURE__ */ jsx3("a", { href, children });
+};
+var SafeImage = ({ src, alt }) => {
+  if (!isSafeUrl(src, "image")) {
+    return null;
+  }
+  return /* @__PURE__ */ jsx3("img", { src, alt: alt ?? "" });
+};
+var baseComponents = {
+  a: SafeLink,
+  img: SafeImage
+};
+var highlightingComponents = {
+  ...baseComponents,
+  pre: ({ children }) => {
+    const fenced = extractFencedCode(children);
+    if (fenced && isCodeLanguageRegistered(fenced.language)) {
+      return /* @__PURE__ */ jsx3(CodeBlock, { language: fenced.language, children: fenced.code });
+    }
+    return /* @__PURE__ */ jsx3("pre", { children });
+  }
+};
+function MarkdownRenderer({
+  content = "",
+  className,
+  math = true,
+  codeHighlight = true
+}) {
+  if (codeHighlight) {
+    registerCodeLanguages();
+  }
+  const containerClass = className ? `pactor-markdown ${className}` : "pactor-markdown";
+  return /* @__PURE__ */ jsx3("div", { className: containerClass, children: /* @__PURE__ */ jsx3(
+    Markdown,
+    {
+      remarkPlugins: math ? [remarkGfm, remarkMath] : [remarkGfm],
+      rehypePlugins: math ? [rehypeKatex] : [],
+      components: codeHighlight ? highlightingComponents : baseComponents,
+      children: content
+    }
+  ) });
+}
+
+// src/dsl-component.tsx
+import { jsx as jsx4 } from "react/jsx-runtime";
+function MarkdownDslComponent({ content }) {
+  return /* @__PURE__ */ jsx4(MarkdownRenderer, { content: content ?? "" });
+}
+
+// src/register.ts
+var MARKDOWN_DSL_TYPE = "Markdown";
+function registerMarkdownComponents(registry) {
+  registry.register(MARKDOWN_DSL_TYPE, MarkdownDslComponent);
+}
+export {
+  CodeBlock,
+  MARKDOWN_DSL_TYPE,
+  MarkdownDslComponent,
+  MarkdownRenderer,
+  isSafeUrl,
+  registerCodeLanguages,
+  registerMarkdownComponents
+};

package/package.json

@@ -0,0 +1,74 @@
+{
+  "name": "@pactor-app/markdown",
+  "version": "0.1.0",
+  "description": "Pactor Markdown module: safe Markdown renderer (react-markdown AST, no raw HTML) and DSL Markdown component adapter",
+  "keywords": [
+    "pactor",
+    "dsl",
+    "server-driven-ui",
+    "markdown",
+    "react"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/426-330/pactor.git",
+    "directory": "packages/markdown"
+  },
+  "homepage": "https://github.com/426-330/pactor/tree/main/packages/markdown",
+  "bugs": "https://github.com/426-330/pactor/issues",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "sideEffects": false,
+  "engines": {
+    "node": ">=18"
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "katex": "^0.18.4",
+    "react-markdown": "^10.1.0",
+    "react-syntax-highlighter": "^16.1.1",
+    "rehype-katex": "^7.0.1",
+    "remark-gfm": "^4.0.1",
+    "remark-math": "^6.0.0",
+    "@pactor-app/core": "0.1.0"
+  },
+  "peerDependencies": {
+    "react": ">=18"
+  },
+  "devDependencies": {
+    "@testing-library/dom": "^10.4.1",
+    "@testing-library/react": "^16.3.2",
+    "@types/react": "^19.2.18",
+    "@types/react-dom": "^19.2.4",
+    "@types/react-syntax-highlighter": "^15.5.13",
+    "jsdom": "^30.0.1",
+    "react": "^19.2.8",
+    "react-dom": "^19.2.8",
+    "@pactor-app/runtime": "0.1.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit"
+  }
+}