@seed-ship/mcp-ui-solid 6.22.0 → 6.23.0

package/dist/utils/iframe-coep.js.map

@@ -1 +1 @@
-{"version":3,"file":"iframe-coep.js","sources":["../../src/utils/iframe-coep.ts"],"sourcesContent":["/**\n * COEP helpers for the two iframes the library renders\n * (`IframeRenderer` in `UIResourceRenderer.tsx`, and the YouTube / Vimeo\n * embed in `VideoRenderer.tsx`).\n *\n * @since v6.21.0\n *\n * A host that serves `Cross-Origin-Embedder-Policy: credentialless` makes the\n * browser refuse any cross-origin iframe whose own document sends no COEP\n * header. The HTML attribute `credentialless` on the `<iframe>` lifts that,\n * at the price of the embedded document losing access to the cookies and\n * storage of its own origin — see `MCPUIConfigContext` for the policy.\n */\n\nimport { createSignal, onMount, type Accessor } from 'solid-js'\nimport { isTrustedIframeDomain } from '../services/validation'\nimport type { MCPUIConfig } from '../context/MCPUIConfigContext'\n\n/**\n * Does this iframe get the boolean `credentialless` attribute?\n *\n * `'auto'` (the default) says yes only when the embed has nothing to lose:\n * the host is not trusted AND the iframe already runs without cookies because\n * its `sandbox` has no `allow-same-origin` (`sandboxedWithoutSameOrigin`).\n * The video embed carries no sandbox, so in `'auto'` it keeps its provider\n * cookies and a COEP host must opt in with `'always'`.\n *\n * An unparsable URL is not trusted, so it gets the attribute.\n *\n * Takes a RESOLVED config (`Required<MCPUIConfig>` — what `useMCPUIConfig()`\n * and `DEFAULT_MCPUI_CONFIG` hand out). `MCPUIConfig`'s own fields are\n * optional so new keys stay backward compatible, and reading an unresolved\n * one here would silently re-implement the defaults next to their source.\n */\nexport function shouldSetCredentialless(\n  url: string,\n  config: Required<MCPUIConfig>,\n  options: { sandboxedWithoutSameOrigin: boolean }\n): boolean {\n  const mode = config.iframeCredentialless\n  if (mode === 'always') return true\n  if (mode === 'never') return false\n  if (!options.sandboxedWithoutSameOrigin) return false\n  return !isTrustedIframeDomain(url, {\n    customTrustedDomains: config.customTrustedIframeDomains,\n  })\n}\n\n/**\n * `window.crossOriginIsolated`, read **after mount** into a signal.\n *\n * Reading it during render would make the server emit markup the client\n * cannot reproduce; the signal starts at `false` (the SSR value) and flips\n * once mounted, so hydration always matches.\n */\nexport function createCrossOriginIsolated(): Accessor<boolean> {\n  const [isolated, setIsolated] = createSignal(false)\n  onMount(() => {\n    setIsolated(typeof window !== 'undefined' && window.crossOriginIsolated === true)\n  })\n  return isolated\n}\n\n/**\n * Does the \"open in a new tab\" link show under an embed?\n *\n * `'auto'` shows it only on a cross-origin-isolated page — exactly where COEP\n * can block the frame, and where the blocking is silent (a refused\n * cross-origin document fires no `error` event the parent can observe).\n *\n * Takes a resolved config, for the reason given on `shouldSetCredentialless`.\n */\nexport function shouldShowIframeFallbackLink(\n  config: Required<MCPUIConfig>,\n  crossOriginIsolated: boolean\n): boolean {\n  const mode = config.iframeFallbackLink\n  if (mode === 'always') return true\n  if (mode === 'never') return false\n  return crossOriginIsolated\n}\n"],"names":[],"mappings":";;AAkCO,SAAS,wBACd,KACA,QACA,SACS;AACT,QAAM,OAAO,OAAO;AACpB,MAAI,SAAS,SAAU,QAAO;AAC9B,MAAI,SAAS,QAAS,QAAO;AAC7B,MAAI,CAAC,QAAQ,2BAA4B,QAAO;AAChD,SAAO,CAAC,sBAAsB,KAAK;AAAA,IACjC,sBAAsB,OAAO;AAAA,EAAA,CAC9B;AACH;AASO,SAAS,4BAA+C;AAC7D,QAAM,CAAC,UAAU,WAAW,IAAI,aAAa,KAAK;AAClD,UAAQ,MAAM;AACZ,gBAAY,OAAO,WAAW,eAAe,OAAO,wBAAwB,IAAI;AAAA,EAClF,CAAC;AACD,SAAO;AACT;AAWO,SAAS,6BACd,QACA,qBACS;AACT,QAAM,OAAO,OAAO;AACpB,MAAI,SAAS,SAAU,QAAO;AAC9B,MAAI,SAAS,QAAS,QAAO;AAC7B,SAAO;AACT;"}
+{"version":3,"file":"iframe-coep.js","sources":["../../src/utils/iframe-coep.ts"],"sourcesContent":["/**\n * COEP helpers for the two iframes the library renders\n * (`IframeRenderer` in `UIResourceRenderer.tsx`, and the YouTube / Vimeo\n * embed in `VideoRenderer.tsx`).\n *\n * @since v6.21.0\n *\n * A host that serves `Cross-Origin-Embedder-Policy: credentialless` makes the\n * browser refuse any cross-origin iframe whose own document sends no COEP\n * header. The HTML attribute `credentialless` on the `<iframe>` lifts that,\n * at the price of the embedded document losing access to the cookies and\n * storage of its own origin — see `MCPUIConfigContext` for the policy.\n */\n\nimport { createSignal, onMount, type Accessor } from 'solid-js'\nimport { isTrustedIframeDomain } from '../services/validation'\nimport type { MCPUIConfig } from '../context/MCPUIConfigContext'\n\n/**\n * Does this iframe get the boolean `credentialless` attribute?\n *\n * `'auto'` (the default) says yes only when the embed has nothing to lose:\n * the host is not trusted AND the iframe already runs without cookies because\n * its `sandbox` has no `allow-same-origin` (`sandboxedWithoutSameOrigin`).\n * The video embed carries no sandbox, so in `'auto'` it keeps its provider\n * cookies and a COEP host must opt in with `'always'`.\n *\n * An unparsable URL is not trusted, so it gets the attribute.\n *\n * Takes a RESOLVED config — `MCPUIConfig`, which is what `useMCPUIConfig()`\n * and `DEFAULT_MCPUI_CONFIG` hand out, every key present. The authored view is\n * `MCPUIConfigInput`, whose fields are optional so that a new key stays\n * backward compatible; accepting one of those here would mean re-implementing\n * the defaults next to their source, and silently drifting from them.\n */\nexport function shouldSetCredentialless(\n  url: string,\n  config: MCPUIConfig,\n  options: { sandboxedWithoutSameOrigin: boolean }\n): boolean {\n  const mode = config.iframeCredentialless\n  if (mode === 'always') return true\n  if (mode === 'never') return false\n  if (!options.sandboxedWithoutSameOrigin) return false\n  return !isTrustedIframeDomain(url, {\n    customTrustedDomains: config.customTrustedIframeDomains,\n  })\n}\n\n/**\n * `window.crossOriginIsolated`, read **after mount** into a signal.\n *\n * Reading it during render would make the server emit markup the client\n * cannot reproduce; the signal starts at `false` (the SSR value) and flips\n * once mounted, so hydration always matches.\n */\nexport function createCrossOriginIsolated(): Accessor<boolean> {\n  const [isolated, setIsolated] = createSignal(false)\n  onMount(() => {\n    setIsolated(typeof window !== 'undefined' && window.crossOriginIsolated === true)\n  })\n  return isolated\n}\n\n/**\n * Does the \"open in a new tab\" link show under an embed?\n *\n * `'auto'` shows it only on a cross-origin-isolated page — exactly where COEP\n * can block the frame, and where the blocking is silent (a refused\n * cross-origin document fires no `error` event the parent can observe).\n *\n * Takes a resolved config, for the reason given on `shouldSetCredentialless`.\n */\nexport function shouldShowIframeFallbackLink(\n  config: MCPUIConfig,\n  crossOriginIsolated: boolean\n): boolean {\n  const mode = config.iframeFallbackLink\n  if (mode === 'always') return true\n  if (mode === 'never') return false\n  return crossOriginIsolated\n}\n"],"names":[],"mappings":";;AAmCO,SAAS,wBACd,KACA,QACA,SACS;AACT,QAAM,OAAO,OAAO;AACpB,MAAI,SAAS,SAAU,QAAO;AAC9B,MAAI,SAAS,QAAS,QAAO;AAC7B,MAAI,CAAC,QAAQ,2BAA4B,QAAO;AAChD,SAAO,CAAC,sBAAsB,KAAK;AAAA,IACjC,sBAAsB,OAAO;AAAA,EAAA,CAC9B;AACH;AASO,SAAS,4BAA+C;AAC7D,QAAM,CAAC,UAAU,WAAW,IAAI,aAAa,KAAK;AAClD,UAAQ,MAAM;AACZ,gBAAY,OAAO,WAAW,eAAe,OAAO,wBAAwB,IAAI;AAAA,EAClF,CAAC;AACD,SAAO;AACT;AAWO,SAAS,6BACd,QACA,qBACS;AACT,QAAM,OAAO,OAAO;AACpB,MAAI,SAAS,SAAU,QAAO;AAC9B,MAAI,SAAS,QAAS,QAAO;AAC7B,SAAO;AACT;"}

package/dist/utils/math-markdown.cjs

@@ -0,0 +1,240 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const marked = require("marked");
+const escapeHtml = require("./escape-html.cjs");
+const sanitizeHtml = require("./sanitize-html.cjs");
+const MATH_MARKDOWN_LIMITS = {
+  sourceLength: 1e5,
+  expressionLength: 4096,
+  expressionCount: 128
+};
+const MATH_TAGS = [
+  "math",
+  "semantics",
+  "mrow",
+  "mi",
+  "mo",
+  "mn",
+  "mtext",
+  "mspace",
+  "ms",
+  "msup",
+  "msub",
+  "msubsup",
+  "mfrac",
+  "msqrt",
+  "mroot",
+  "mtable",
+  "mtr",
+  "mtd",
+  "mover",
+  "munder",
+  "munderover",
+  "mpadded",
+  "mphantom",
+  "mstyle",
+  "menclose"
+];
+const MATH_ATTRS = [
+  "xmlns",
+  "display",
+  "class",
+  "mathvariant",
+  "stretchy",
+  "fence",
+  "separator",
+  "lspace",
+  "rspace",
+  "accent",
+  "accentunder",
+  "columnalign",
+  "rowalign",
+  "columnspacing",
+  "rowspacing",
+  "columnlines",
+  "rowlines",
+  "frame",
+  "notation",
+  "width",
+  "height",
+  "depth",
+  "voffset",
+  "scriptlevel",
+  "displaystyle"
+];
+const STRICT_MATHML_CONFIG = {
+  ALLOWED_TAGS: [...MATH_TAGS, "span"],
+  ALLOWED_ATTR: [...MATH_ATTRS],
+  FORBID_TAGS: ["annotation", "annotation-xml", "style", "a"],
+  // DOMPurify normally keeps the text of forbidden tags. TeX annotations can
+  // be large and duplicate the accessible MathML, so remove their subtree.
+  ADD_FORBID_CONTENTS: ["annotation", "annotation-xml"],
+  FORBID_ATTR: ["style"]
+};
+const CELL_MARKDOWN_TAGS = [
+  "a",
+  "strong",
+  "em",
+  "b",
+  "i",
+  "code",
+  "span",
+  "br",
+  "button",
+  "svg",
+  "path",
+  "p",
+  "ul",
+  "ol",
+  "li",
+  "pre",
+  "blockquote",
+  "h1",
+  "h2",
+  "h3",
+  "h4",
+  "h5",
+  "h6",
+  ...MATH_TAGS
+];
+const FINAL_PROFILES = {
+  prose: {
+    ADD_TAGS: [...MATH_TAGS],
+    ADD_ATTR: [...MATH_ATTRS, "target", "rel"],
+    FORBID_TAGS: ["annotation", "annotation-xml", "style", "form", "textarea", "select", "button", "iframe", "object", "embed"],
+    ADD_FORBID_CONTENTS: ["annotation", "annotation-xml"],
+    FORBID_ATTR: ["style"]
+  },
+  cellMarkdown: {
+    ALLOWED_TAGS: CELL_MARKDOWN_TAGS,
+    ALLOWED_ATTR: [
+      "href",
+      "target",
+      "rel",
+      "class",
+      "data-citation-page",
+      "data-citation-source",
+      "data-citation-doc",
+      "data-citation-verified",
+      "title",
+      "fill",
+      "stroke",
+      "viewBox",
+      "stroke-linecap",
+      "stroke-linejoin",
+      "stroke-width",
+      "d",
+      ...MATH_ATTRS
+    ],
+    FORBID_TAGS: ["annotation", "annotation-xml", "style"],
+    ADD_FORBID_CONTENTS: ["annotation", "annotation-xml"],
+    FORBID_ATTR: ["style"]
+  }
+};
+function isCurrencyLike(raw, tex, following) {
+  var _a, _b, _c;
+  if (/^\$\s|\s\$$/.test(raw)) return true;
+  if (/^\d+(?:[.,]\d+)?-\s*$/.test(tex)) return true;
+  if (/^\d/.test(tex) && /^\d/.test(following)) return true;
+  const amount = (_a = /^\d+(?:[.,]\d{1,2})?(?=$|[\s,;:!?()[\]+*/-])/.exec(tex)) == null ? void 0 : _a[0];
+  if (!amount) return false;
+  const trailing = tex.slice(amount.length);
+  if (!trailing) return false;
+  const hasUnmatchedOpeningParen = (((_b = trailing.match(/\(/g)) == null ? void 0 : _b.length) ?? 0) > (((_c = trailing.match(/\)/g)) == null ? void 0 : _c.length) ?? 0);
+  const containsTexCommand = /\\[A-Za-z]+/.test(trailing);
+  if (hasUnmatchedOpeningParen && !containsTexCommand) return true;
+  const closerLooksLikeLaterOpener = /^(?![\s,.;:!?)}\]])(?:\\[^\n]|[^\\\n$])+\$(?!\$)/.test(following);
+  return closerLooksLikeLaterOpener;
+}
+const CELL_LINK_ATTRIBUTES = 'target="_blank" rel="noopener noreferrer" class="text-blue-600 dark:text-blue-400 hover:underline"';
+function cellLinkExtension() {
+  return {
+    renderer: {
+      link(token) {
+        const anchor = marked.Renderer.prototype.link.call(this, token);
+        return anchor.replace("<a ", `<a ${CELL_LINK_ATTRIBUTES} `);
+      }
+    }
+  };
+}
+function mathExtension(renderer) {
+  let count = 0;
+  const token = (raw, tex, displayMode) => ({
+    type: displayMode ? "mcpDisplayMath" : "mcpInlineMath",
+    raw,
+    tex,
+    displayMode,
+    render: ++count <= MATH_MARKDOWN_LIMITS.expressionCount && tex.length <= MATH_MARKDOWN_LIMITS.expressionLength
+  });
+  return {
+    extensions: [
+      {
+        name: "mcpDisplayMath",
+        level: "block",
+        start(src) {
+          const index = src.indexOf("$$");
+          return index < 0 ? void 0 : index;
+        },
+        tokenizer(src) {
+          const match = /^\$\$\s*\n?([\s\S]+?)\n?\s*\$\$(?:\n|$)/.exec(src);
+          if (!match) return void 0;
+          return token(match[0], match[1], true);
+        },
+        renderer(tokenValue) {
+          return renderToken(tokenValue, renderer);
+        }
+      },
+      {
+        name: "mcpInlineMath",
+        level: "inline",
+        start(src) {
+          const index = src.indexOf("$");
+          return index < 0 ? void 0 : index;
+        },
+        tokenizer(src) {
+          const match = /^\$(?!\$)((?:\\[^\n]|[^\\\n$])+?)\$(?!\$)/.exec(src);
+          if (!match || isCurrencyLike(match[0], match[1], src.slice(match[0].length))) return void 0;
+          return token(match[0], match[1], false);
+        },
+        renderer(tokenValue) {
+          return renderToken(tokenValue, renderer);
+        }
+      }
+    ]
+  };
+}
+function renderToken(token, renderer) {
+  if (!token.render) return escapeHtml.escapeHtml(token.raw);
+  try {
+    const rendered = renderer(token.tex, { displayMode: token.displayMode });
+    if (!rendered) return escapeHtml.escapeHtml(token.raw);
+    return sanitizeHtml.sanitizeHtml(rendered, STRICT_MATHML_CONFIG);
+  } catch {
+    return escapeHtml.escapeHtml(token.raw);
+  }
+}
+function parseMathMarkdown(source, renderer, profile, transformText) {
+  const input = source === null || source === void 0 ? "" : String(source);
+  if (!sanitizeHtml.canSanitizeHtml()) return escapeHtml.escapeHtml(input);
+  if (input.length > MATH_MARKDOWN_LIMITS.sourceLength) return escapeHtml.escapeHtml(input);
+  const textRenderer = transformText ? {
+    renderer: {
+      text(token) {
+        if ("tokens" in token && token.tokens) {
+          return this.parser.parseInline(token.tokens);
+        }
+        const safeText = marked.Renderer.prototype.text.call(this, token);
+        return transformText(safeText);
+      }
+    }
+  } : void 0;
+  const extensions = [mathExtension(renderer)];
+  if (profile === "cellMarkdown") extensions.push(cellLinkExtension());
+  if (textRenderer) extensions.push(textRenderer);
+  const parser = new marked.Marked({ gfm: true }, ...extensions);
+  const parsed = parser.parse(input, { async: false });
+  return sanitizeHtml.sanitizeHtml(parsed, FINAL_PROFILES[profile]);
+}
+exports.MATH_MARKDOWN_LIMITS = MATH_MARKDOWN_LIMITS;
+exports.parseMathMarkdown = parseMathMarkdown;
+//# sourceMappingURL=math-markdown.cjs.map

package/dist/utils/math-markdown.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"math-markdown.cjs","sources":["../../src/utils/math-markdown.ts"],"sourcesContent":["import type { Config } from 'dompurify'\nimport { Marked, Renderer, type MarkedExtension, type Tokens } from 'marked'\nimport type { MathRenderer } from '../context/MCPUIMathContext'\nimport { escapeHtml } from './escape-html'\nimport { canSanitizeHtml, sanitizeHtml } from './sanitize-html'\n\nexport type MathMarkdownProfile = 'prose' | 'cellMarkdown'\nexport type MarkdownTextTransform = (escapedText: string) => string\n\nexport const MATH_MARKDOWN_LIMITS = {\n  sourceLength: 100_000,\n  expressionLength: 4_096,\n  expressionCount: 128,\n} as const\n\nconst MATH_TAGS = [\n  'math', 'semantics', 'mrow', 'mi', 'mo', 'mn', 'mtext', 'mspace', 'ms',\n  'msup', 'msub', 'msubsup', 'mfrac', 'msqrt', 'mroot', 'mtable', 'mtr',\n  'mtd', 'mover', 'munder', 'munderover', 'mpadded', 'mphantom', 'mstyle', 'menclose',\n] as const\n\nconst MATH_ATTRS = [\n  'xmlns', 'display', 'class', 'mathvariant', 'stretchy', 'fence', 'separator',\n  'lspace', 'rspace', 'accent', 'accentunder', 'columnalign', 'rowalign',\n  'columnspacing', 'rowspacing', 'columnlines', 'rowlines', 'frame', 'notation',\n  'width', 'height', 'depth', 'voffset', 'scriptlevel', 'displaystyle',\n] as const\n\nconst STRICT_MATHML_CONFIG = {\n  ALLOWED_TAGS: [...MATH_TAGS, 'span'],\n  ALLOWED_ATTR: [...MATH_ATTRS],\n  FORBID_TAGS: ['annotation', 'annotation-xml', 'style', 'a'],\n  // DOMPurify normally keeps the text of forbidden tags. TeX annotations can\n  // be large and duplicate the accessible MathML, so remove their subtree.\n  ADD_FORBID_CONTENTS: ['annotation', 'annotation-xml'],\n  FORBID_ATTR: ['style'],\n} as Config\n\nconst CELL_MARKDOWN_TAGS = [\n  'a', 'strong', 'em', 'b', 'i', 'code', 'span', 'br', 'button', 'svg', 'path',\n  'p', 'ul', 'ol', 'li', 'pre', 'blockquote', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6',\n  ...MATH_TAGS,\n]\n\nconst FINAL_PROFILES: Record<MathMarkdownProfile, Config> = {\n  prose: {\n    ADD_TAGS: [...MATH_TAGS],\n    ADD_ATTR: [...MATH_ATTRS, 'target', 'rel'],\n    FORBID_TAGS: ['annotation', 'annotation-xml', 'style', 'form', 'textarea', 'select', 'button', 'iframe', 'object', 'embed'],\n    ADD_FORBID_CONTENTS: ['annotation', 'annotation-xml'],\n    FORBID_ATTR: ['style'],\n  } as Config,\n  cellMarkdown: {\n    ALLOWED_TAGS: CELL_MARKDOWN_TAGS,\n    ALLOWED_ATTR: [\n      'href', 'target', 'rel', 'class', 'data-citation-page', 'data-citation-source',\n      'data-citation-doc', 'data-citation-verified', 'title', 'fill', 'stroke',\n      'viewBox', 'stroke-linecap', 'stroke-linejoin', 'stroke-width', 'd',\n      ...MATH_ATTRS,\n    ],\n    FORBID_TAGS: ['annotation', 'annotation-xml', 'style'],\n    ADD_FORBID_CONTENTS: ['annotation', 'annotation-xml'],\n    FORBID_ATTR: ['style'],\n  } as Config,\n}\n\ninterface MathToken extends Tokens.Generic {\n  type: 'mcpDisplayMath' | 'mcpInlineMath'\n  raw: string\n  tex: string\n  displayMode: boolean\n  render: boolean\n}\n\nfunction isCurrencyLike(raw: string, tex: string, following: string): boolean {\n  if (/^\\$\\s|\\s\\$$/.test(raw)) return true\n  if (/^\\d+(?:[.,]\\d+)?-\\s*$/.test(tex)) return true\n  if (/^\\d/.test(tex) && /^\\d/.test(following)) return true\n\n  // A currency opener can otherwise pair with the opening delimiter of a\n  // later expression (\"$5 then ($x$)\"). Reinterpret that first candidate\n  // only when it starts with a bounded numeric amount and its apparent closer\n  // is immediately followed by a complete later inline body. This deliberately\n  // leaves inherently ambiguous standalone forms ($5$, $2 + 3$, $2\\pi$) as\n  // math and does not depend on the prose between the two delimiters.\n  const amount = /^\\d+(?:[.,]\\d{1,2})?(?=$|[\\s,;:!?()[\\]+*/-])/.exec(tex)?.[0]\n  if (!amount) return false\n\n  // A standalone numeric token is valid math even when followed by prose or\n  // another expression (\"$5$, then $x$\"). Reassignment requires content\n  // beyond the amount itself.\n  const trailing = tex.slice(amount.length)\n  if (!trailing) return false\n\n  // During streaming, the later formula may not have closed yet. An unmatched\n  // opening parenthesis before its dollar is sufficient structural evidence\n  // that the numeric dollar was currency; otherwise a permissive renderer can\n  // briefly flash \"5 then (\" as math.\n  const hasUnmatchedOpeningParen = (trailing.match(/\\(/g)?.length ?? 0) > (trailing.match(/\\)/g)?.length ?? 0)\n  const containsTexCommand = /\\\\[A-Za-z]+/.test(trailing)\n  if (hasUnmatchedOpeningParen && !containsTexCommand) return true\n\n  const closerLooksLikeLaterOpener = /^(?![\\s,.;:!?)}\\]])(?:\\\\[^\\n]|[^\\\\\\n$])+\\$(?!\\$)/.test(following)\n  return closerLooksLikeLaterOpener\n}\n\nconst CELL_LINK_ATTRIBUTES = 'target=\"_blank\" rel=\"noopener noreferrer\" class=\"text-blue-600 dark:text-blue-400 hover:underline\"'\n\nfunction cellLinkExtension(): MarkedExtension {\n  return {\n    renderer: {\n      link(this: Renderer, token: Tokens.Link): string {\n        // Marked owns escaping of the destination, title and nested label\n        // tokens. Only inject fixed attributes into its already-safe anchor.\n        const anchor = Renderer.prototype.link.call(this, token) as string\n        return anchor.replace('<a ', `<a ${CELL_LINK_ATTRIBUTES} `)\n      },\n    },\n  }\n}\n\nfunction mathExtension(renderer: MathRenderer): MarkedExtension {\n  let count = 0\n  const token = (raw: string, tex: string, displayMode: boolean): MathToken => ({\n    type: displayMode ? 'mcpDisplayMath' : 'mcpInlineMath',\n    raw,\n    tex,\n    displayMode,\n    render: ++count <= MATH_MARKDOWN_LIMITS.expressionCount && tex.length <= MATH_MARKDOWN_LIMITS.expressionLength,\n  })\n\n  return {\n    extensions: [\n      {\n        name: 'mcpDisplayMath',\n        level: 'block',\n        start(src) {\n          const index = src.indexOf('$$')\n          return index < 0 ? undefined : index\n        },\n        tokenizer(src) {\n          const match = /^\\$\\$\\s*\\n?([\\s\\S]+?)\\n?\\s*\\$\\$(?:\\n|$)/.exec(src)\n          if (!match) return undefined\n          return token(match[0], match[1], true)\n        },\n        renderer(tokenValue) {\n          return renderToken(tokenValue as MathToken, renderer)\n        },\n      },\n      {\n        name: 'mcpInlineMath',\n        level: 'inline',\n        start(src) {\n          const index = src.indexOf('$')\n          return index < 0 ? undefined : index\n        },\n        tokenizer(src) {\n          const match = /^\\$(?!\\$)((?:\\\\[^\\n]|[^\\\\\\n$])+?)\\$(?!\\$)/.exec(src)\n          if (!match || isCurrencyLike(match[0], match[1], src.slice(match[0].length))) return undefined\n          return token(match[0], match[1], false)\n        },\n        renderer(tokenValue) {\n          return renderToken(tokenValue as MathToken, renderer)\n        },\n      },\n    ],\n  }\n}\n\nfunction renderToken(token: MathToken, renderer: MathRenderer): string {\n  if (!token.render) return escapeHtml(token.raw)\n  try {\n    const rendered = renderer(token.tex, { displayMode: token.displayMode })\n    if (!rendered) return escapeHtml(token.raw)\n    return sanitizeHtml(rendered, STRICT_MATHML_CONFIG)\n  } catch {\n    return escapeHtml(token.raw)\n  }\n}\n\n/**\n * Parse Markdown with isolated, bounded math support and sanitize the complete\n * result for its final sink. The optional transform sees escaped ordinary text\n * tokens only. Math, code, raw HTML and link destinations never pass through\n * it, so citation syntax cannot corrupt TeX optional arguments or attributes.\n */\nexport function parseMathMarkdown(\n  source: string,\n  renderer: MathRenderer,\n  profile: MathMarkdownProfile,\n  transformText?: MarkdownTextTransform,\n): string {\n  const input = source === null || source === undefined ? '' : String(source)\n  if (!canSanitizeHtml()) return escapeHtml(input)\n  if (input.length > MATH_MARKDOWN_LIMITS.sourceLength) return escapeHtml(input)\n\n  const textRenderer = transformText\n    ? {\n        renderer: {\n          text(this: Renderer, token: Tokens.Text | Tokens.Escape): string {\n            // Block text tokens (notably list-item text) can own already\n            // tokenized inline children. Recurse first so math and code keep\n            // their own renderers; leaf text callbacks run as parsing descends.\n            if ('tokens' in token && token.tokens) {\n              return this.parser.parseInline(token.tokens)\n            }\n            // Delegate entity handling and nested token rendering to Marked's\n            // own renderer. `escapeHtml` is deliberately not equivalent: it\n            // turns source `&amp;` into visible `&amp;` by double-escaping it.\n            const safeText = Renderer.prototype.text.call(this, token)\n            return transformText(safeText as string)\n          },\n        },\n      }\n    : undefined\n  const extensions = [mathExtension(renderer)]\n  if (profile === 'cellMarkdown') extensions.push(cellLinkExtension())\n  if (textRenderer) extensions.push(textRenderer)\n  const parser = new Marked({ gfm: true }, ...extensions)\n  const parsed = parser.parse(input, { async: false }) as string\n  return sanitizeHtml(parsed, FINAL_PROFILES[profile])\n}\n"],"names":["Renderer","escapeHtml","sanitizeHtml","canSanitizeHtml","Marked"],"mappings":";;;;;AASO,MAAM,uBAAuB;AAAA,EAClC,cAAc;AAAA,EACd,kBAAkB;AAAA,EAClB,iBAAiB;AACnB;AAEA,MAAM,YAAY;AAAA,EAChB;AAAA,EAAQ;AAAA,EAAa;AAAA,EAAQ;AAAA,EAAM;AAAA,EAAM;AAAA,EAAM;AAAA,EAAS;AAAA,EAAU;AAAA,EAClE;AAAA,EAAQ;AAAA,EAAQ;AAAA,EAAW;AAAA,EAAS;AAAA,EAAS;AAAA,EAAS;AAAA,EAAU;AAAA,EAChE;AAAA,EAAO;AAAA,EAAS;AAAA,EAAU;AAAA,EAAc;AAAA,EAAW;AAAA,EAAY;AAAA,EAAU;AAC3E;AAEA,MAAM,aAAa;AAAA,EACjB;AAAA,EAAS;AAAA,EAAW;AAAA,EAAS;AAAA,EAAe;AAAA,EAAY;AAAA,EAAS;AAAA,EACjE;AAAA,EAAU;AAAA,EAAU;AAAA,EAAU;AAAA,EAAe;AAAA,EAAe;AAAA,EAC5D;AAAA,EAAiB;AAAA,EAAc;AAAA,EAAe;AAAA,EAAY;AAAA,EAAS;AAAA,EACnE;AAAA,EAAS;AAAA,EAAU;AAAA,EAAS;AAAA,EAAW;AAAA,EAAe;AACxD;AAEA,MAAM,uBAAuB;AAAA,EAC3B,cAAc,CAAC,GAAG,WAAW,MAAM;AAAA,EACnC,cAAc,CAAC,GAAG,UAAU;AAAA,EAC5B,aAAa,CAAC,cAAc,kBAAkB,SAAS,GAAG;AAAA;AAAA;AAAA,EAG1D,qBAAqB,CAAC,cAAc,gBAAgB;AAAA,EACpD,aAAa,CAAC,OAAO;AACvB;AAEA,MAAM,qBAAqB;AAAA,EACzB;AAAA,EAAK;AAAA,EAAU;AAAA,EAAM;AAAA,EAAK;AAAA,EAAK;AAAA,EAAQ;AAAA,EAAQ;AAAA,EAAM;AAAA,EAAU;AAAA,EAAO;AAAA,EACtE;AAAA,EAAK;AAAA,EAAM;AAAA,EAAM;AAAA,EAAM;AAAA,EAAO;AAAA,EAAc;AAAA,EAAM;AAAA,EAAM;AAAA,EAAM;AAAA,EAAM;AAAA,EAAM;AAAA,EAC1E,GAAG;AACL;AAEA,MAAM,iBAAsD;AAAA,EAC1D,OAAO;AAAA,IACL,UAAU,CAAC,GAAG,SAAS;AAAA,IACvB,UAAU,CAAC,GAAG,YAAY,UAAU,KAAK;AAAA,IACzC,aAAa,CAAC,cAAc,kBAAkB,SAAS,QAAQ,YAAY,UAAU,UAAU,UAAU,UAAU,OAAO;AAAA,IAC1H,qBAAqB,CAAC,cAAc,gBAAgB;AAAA,IACpD,aAAa,CAAC,OAAO;AAAA,EAAA;AAAA,EAEvB,cAAc;AAAA,IACZ,cAAc;AAAA,IACd,cAAc;AAAA,MACZ;AAAA,MAAQ;AAAA,MAAU;AAAA,MAAO;AAAA,MAAS;AAAA,MAAsB;AAAA,MACxD;AAAA,MAAqB;AAAA,MAA0B;AAAA,MAAS;AAAA,MAAQ;AAAA,MAChE;AAAA,MAAW;AAAA,MAAkB;AAAA,MAAmB;AAAA,MAAgB;AAAA,MAChE,GAAG;AAAA,IAAA;AAAA,IAEL,aAAa,CAAC,cAAc,kBAAkB,OAAO;AAAA,IACrD,qBAAqB,CAAC,cAAc,gBAAgB;AAAA,IACpD,aAAa,CAAC,OAAO;AAAA,EAAA;AAEzB;AAUA,SAAS,eAAe,KAAa,KAAa,WAA4B;;AAC5E,MAAI,cAAc,KAAK,GAAG,EAAG,QAAO;AACpC,MAAI,wBAAwB,KAAK,GAAG,EAAG,QAAO;AAC9C,MAAI,MAAM,KAAK,GAAG,KAAK,MAAM,KAAK,SAAS,EAAG,QAAO;AAQrD,QAAM,UAAS,oDAA+C,KAAK,GAAG,MAAvD,mBAA2D;AAC1E,MAAI,CAAC,OAAQ,QAAO;AAKpB,QAAM,WAAW,IAAI,MAAM,OAAO,MAAM;AACxC,MAAI,CAAC,SAAU,QAAO;AAMtB,QAAM,8BAA4B,cAAS,MAAM,KAAK,MAApB,mBAAuB,WAAU,QAAM,cAAS,MAAM,KAAK,MAApB,mBAAuB,WAAU;AAC1G,QAAM,qBAAqB,cAAc,KAAK,QAAQ;AACtD,MAAI,4BAA4B,CAAC,mBAAoB,QAAO;AAE5D,QAAM,6BAA6B,mDAAmD,KAAK,SAAS;AACpG,SAAO;AACT;AAEA,MAAM,uBAAuB;AAE7B,SAAS,oBAAqC;AAC5C,SAAO;AAAA,IACL,UAAU;AAAA,MACR,KAAqB,OAA4B;AAG/C,cAAM,SAASA,OAAAA,SAAS,UAAU,KAAK,KAAK,MAAM,KAAK;AACvD,eAAO,OAAO,QAAQ,OAAO,MAAM,oBAAoB,GAAG;AAAA,MAC5D;AAAA,IAAA;AAAA,EACF;AAEJ;AAEA,SAAS,cAAc,UAAyC;AAC9D,MAAI,QAAQ;AACZ,QAAM,QAAQ,CAAC,KAAa,KAAa,iBAAqC;AAAA,IAC5E,MAAM,cAAc,mBAAmB;AAAA,IACvC;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,EAAE,SAAS,qBAAqB,mBAAmB,IAAI,UAAU,qBAAqB;AAAA,EAAA;AAGhG,SAAO;AAAA,IACL,YAAY;AAAA,MACV;AAAA,QACE,MAAM;AAAA,QACN,OAAO;AAAA,QACP,MAAM,KAAK;AACT,gBAAM,QAAQ,IAAI,QAAQ,IAAI;AAC9B,iBAAO,QAAQ,IAAI,SAAY;AAAA,QACjC;AAAA,QACA,UAAU,KAAK;AACb,gBAAM,QAAQ,0CAA0C,KAAK,GAAG;AAChE,cAAI,CAAC,MAAO,QAAO;AACnB,iBAAO,MAAM,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI;AAAA,QACvC;AAAA,QACA,SAAS,YAAY;AACnB,iBAAO,YAAY,YAAyB,QAAQ;AAAA,QACtD;AAAA,MAAA;AAAA,MAEF;AAAA,QACE,MAAM;AAAA,QACN,OAAO;AAAA,QACP,MAAM,KAAK;AACT,gBAAM,QAAQ,IAAI,QAAQ,GAAG;AAC7B,iBAAO,QAAQ,IAAI,SAAY;AAAA,QACjC;AAAA,QACA,UAAU,KAAK;AACb,gBAAM,QAAQ,4CAA4C,KAAK,GAAG;AAClE,cAAI,CAAC,SAAS,eAAe,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,MAAM,MAAM,CAAC,EAAE,MAAM,CAAC,EAAG,QAAO;AACrF,iBAAO,MAAM,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,KAAK;AAAA,QACxC;AAAA,QACA,SAAS,YAAY;AACnB,iBAAO,YAAY,YAAyB,QAAQ;AAAA,QACtD;AAAA,MAAA;AAAA,IACF;AAAA,EACF;AAEJ;AAEA,SAAS,YAAY,OAAkB,UAAgC;AACrE,MAAI,CAAC,MAAM,OAAQ,QAAOC,WAAAA,WAAW,MAAM,GAAG;AAC9C,MAAI;AACF,UAAM,WAAW,SAAS,MAAM,KAAK,EAAE,aAAa,MAAM,aAAa;AACvE,QAAI,CAAC,SAAU,QAAOA,sBAAW,MAAM,GAAG;AAC1C,WAAOC,aAAAA,aAAa,UAAU,oBAAoB;AAAA,EACpD,QAAQ;AACN,WAAOD,WAAAA,WAAW,MAAM,GAAG;AAAA,EAC7B;AACF;AAQO,SAAS,kBACd,QACA,UACA,SACA,eACQ;AACR,QAAM,QAAQ,WAAW,QAAQ,WAAW,SAAY,KAAK,OAAO,MAAM;AAC1E,MAAI,CAACE,aAAAA,gBAAA,EAAmB,QAAOF,WAAAA,WAAW,KAAK;AAC/C,MAAI,MAAM,SAAS,qBAAqB,aAAc,QAAOA,WAAAA,WAAW,KAAK;AAE7E,QAAM,eAAe,gBACjB;AAAA,IACE,UAAU;AAAA,MACR,KAAqB,OAA4C;AAI/D,YAAI,YAAY,SAAS,MAAM,QAAQ;AACrC,iBAAO,KAAK,OAAO,YAAY,MAAM,MAAM;AAAA,QAC7C;AAIA,cAAM,WAAWD,OAAAA,SAAS,UAAU,KAAK,KAAK,MAAM,KAAK;AACzD,eAAO,cAAc,QAAkB;AAAA,MACzC;AAAA,IAAA;AAAA,EACF,IAEF;AACJ,QAAM,aAAa,CAAC,cAAc,QAAQ,CAAC;AAC3C,MAAI,YAAY,eAAgB,YAAW,KAAK,mBAAmB;AACnE,MAAI,aAAc,YAAW,KAAK,YAAY;AAC9C,QAAM,SAAS,IAAII,cAAO,EAAE,KAAK,KAAA,GAAQ,GAAG,UAAU;AACtD,QAAM,SAAS,OAAO,MAAM,OAAO,EAAE,OAAO,OAAO;AACnD,SAAOF,0BAAa,QAAQ,eAAe,OAAO,CAAC;AACrD;;;"}

package/dist/utils/math-markdown.d.ts

@@ -0,0 +1,16 @@
+import type { MathRenderer } from '../context/MCPUIMathContext';
+export type MathMarkdownProfile = 'prose' | 'cellMarkdown';
+export type MarkdownTextTransform = (escapedText: string) => string;
+export declare const MATH_MARKDOWN_LIMITS: {
+    readonly sourceLength: 100000;
+    readonly expressionLength: 4096;
+    readonly expressionCount: 128;
+};
+/**
+ * Parse Markdown with isolated, bounded math support and sanitize the complete
+ * result for its final sink. The optional transform sees escaped ordinary text
+ * tokens only. Math, code, raw HTML and link destinations never pass through
+ * it, so citation syntax cannot corrupt TeX optional arguments or attributes.
+ */
+export declare function parseMathMarkdown(source: string, renderer: MathRenderer, profile: MathMarkdownProfile, transformText?: MarkdownTextTransform): string;
+//# sourceMappingURL=math-markdown.d.ts.map

package/dist/utils/math-markdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"math-markdown.d.ts","sourceRoot":"","sources":["../../src/utils/math-markdown.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAI/D,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,cAAc,CAAA;AAC1D,MAAM,MAAM,qBAAqB,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,CAAA;AAEnE,eAAO,MAAM,oBAAoB;;;;CAIvB,CAAA;AAuKV;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,mBAAmB,EAC5B,aAAa,CAAC,EAAE,qBAAqB,GACpC,MAAM,CA8BR"}

package/dist/utils/math-markdown.js

@@ -0,0 +1,240 @@
+import { Marked, Renderer } from "marked";
+import { escapeHtml } from "./escape-html.js";
+import { canSanitizeHtml, sanitizeHtml } from "./sanitize-html.js";
+const MATH_MARKDOWN_LIMITS = {
+  sourceLength: 1e5,
+  expressionLength: 4096,
+  expressionCount: 128
+};
+const MATH_TAGS = [
+  "math",
+  "semantics",
+  "mrow",
+  "mi",
+  "mo",
+  "mn",
+  "mtext",
+  "mspace",
+  "ms",
+  "msup",
+  "msub",
+  "msubsup",
+  "mfrac",
+  "msqrt",
+  "mroot",
+  "mtable",
+  "mtr",
+  "mtd",
+  "mover",
+  "munder",
+  "munderover",
+  "mpadded",
+  "mphantom",
+  "mstyle",
+  "menclose"
+];
+const MATH_ATTRS = [
+  "xmlns",
+  "display",
+  "class",
+  "mathvariant",
+  "stretchy",
+  "fence",
+  "separator",
+  "lspace",
+  "rspace",
+  "accent",
+  "accentunder",
+  "columnalign",
+  "rowalign",
+  "columnspacing",
+  "rowspacing",
+  "columnlines",
+  "rowlines",
+  "frame",
+  "notation",
+  "width",
+  "height",
+  "depth",
+  "voffset",
+  "scriptlevel",
+  "displaystyle"
+];
+const STRICT_MATHML_CONFIG = {
+  ALLOWED_TAGS: [...MATH_TAGS, "span"],
+  ALLOWED_ATTR: [...MATH_ATTRS],
+  FORBID_TAGS: ["annotation", "annotation-xml", "style", "a"],
+  // DOMPurify normally keeps the text of forbidden tags. TeX annotations can
+  // be large and duplicate the accessible MathML, so remove their subtree.
+  ADD_FORBID_CONTENTS: ["annotation", "annotation-xml"],
+  FORBID_ATTR: ["style"]
+};
+const CELL_MARKDOWN_TAGS = [
+  "a",
+  "strong",
+  "em",
+  "b",
+  "i",
+  "code",
+  "span",
+  "br",
+  "button",
+  "svg",
+  "path",
+  "p",
+  "ul",
+  "ol",
+  "li",
+  "pre",
+  "blockquote",
+  "h1",
+  "h2",
+  "h3",
+  "h4",
+  "h5",
+  "h6",
+  ...MATH_TAGS
+];
+const FINAL_PROFILES = {
+  prose: {
+    ADD_TAGS: [...MATH_TAGS],
+    ADD_ATTR: [...MATH_ATTRS, "target", "rel"],
+    FORBID_TAGS: ["annotation", "annotation-xml", "style", "form", "textarea", "select", "button", "iframe", "object", "embed"],
+    ADD_FORBID_CONTENTS: ["annotation", "annotation-xml"],
+    FORBID_ATTR: ["style"]
+  },
+  cellMarkdown: {
+    ALLOWED_TAGS: CELL_MARKDOWN_TAGS,
+    ALLOWED_ATTR: [
+      "href",
+      "target",
+      "rel",
+      "class",
+      "data-citation-page",
+      "data-citation-source",
+      "data-citation-doc",
+      "data-citation-verified",
+      "title",
+      "fill",
+      "stroke",
+      "viewBox",
+      "stroke-linecap",
+      "stroke-linejoin",
+      "stroke-width",
+      "d",
+      ...MATH_ATTRS
+    ],
+    FORBID_TAGS: ["annotation", "annotation-xml", "style"],
+    ADD_FORBID_CONTENTS: ["annotation", "annotation-xml"],
+    FORBID_ATTR: ["style"]
+  }
+};
+function isCurrencyLike(raw, tex, following) {
+  var _a, _b, _c;
+  if (/^\$\s|\s\$$/.test(raw)) return true;
+  if (/^\d+(?:[.,]\d+)?-\s*$/.test(tex)) return true;
+  if (/^\d/.test(tex) && /^\d/.test(following)) return true;
+  const amount = (_a = /^\d+(?:[.,]\d{1,2})?(?=$|[\s,;:!?()[\]+*/-])/.exec(tex)) == null ? void 0 : _a[0];
+  if (!amount) return false;
+  const trailing = tex.slice(amount.length);
+  if (!trailing) return false;
+  const hasUnmatchedOpeningParen = (((_b = trailing.match(/\(/g)) == null ? void 0 : _b.length) ?? 0) > (((_c = trailing.match(/\)/g)) == null ? void 0 : _c.length) ?? 0);
+  const containsTexCommand = /\\[A-Za-z]+/.test(trailing);
+  if (hasUnmatchedOpeningParen && !containsTexCommand) return true;
+  const closerLooksLikeLaterOpener = /^(?![\s,.;:!?)}\]])(?:\\[^\n]|[^\\\n$])+\$(?!\$)/.test(following);
+  return closerLooksLikeLaterOpener;
+}
+const CELL_LINK_ATTRIBUTES = 'target="_blank" rel="noopener noreferrer" class="text-blue-600 dark:text-blue-400 hover:underline"';
+function cellLinkExtension() {
+  return {
+    renderer: {
+      link(token) {
+        const anchor = Renderer.prototype.link.call(this, token);
+        return anchor.replace("<a ", `<a ${CELL_LINK_ATTRIBUTES} `);
+      }
+    }
+  };
+}
+function mathExtension(renderer) {
+  let count = 0;
+  const token = (raw, tex, displayMode) => ({
+    type: displayMode ? "mcpDisplayMath" : "mcpInlineMath",
+    raw,
+    tex,
+    displayMode,
+    render: ++count <= MATH_MARKDOWN_LIMITS.expressionCount && tex.length <= MATH_MARKDOWN_LIMITS.expressionLength
+  });
+  return {
+    extensions: [
+      {
+        name: "mcpDisplayMath",
+        level: "block",
+        start(src) {
+          const index = src.indexOf("$$");
+          return index < 0 ? void 0 : index;
+        },
+        tokenizer(src) {
+          const match = /^\$\$\s*\n?([\s\S]+?)\n?\s*\$\$(?:\n|$)/.exec(src);
+          if (!match) return void 0;
+          return token(match[0], match[1], true);
+        },
+        renderer(tokenValue) {
+          return renderToken(tokenValue, renderer);
+        }
+      },
+      {
+        name: "mcpInlineMath",
+        level: "inline",
+        start(src) {
+          const index = src.indexOf("$");
+          return index < 0 ? void 0 : index;
+        },
+        tokenizer(src) {
+          const match = /^\$(?!\$)((?:\\[^\n]|[^\\\n$])+?)\$(?!\$)/.exec(src);
+          if (!match || isCurrencyLike(match[0], match[1], src.slice(match[0].length))) return void 0;
+          return token(match[0], match[1], false);
+        },
+        renderer(tokenValue) {
+          return renderToken(tokenValue, renderer);
+        }
+      }
+    ]
+  };
+}
+function renderToken(token, renderer) {
+  if (!token.render) return escapeHtml(token.raw);
+  try {
+    const rendered = renderer(token.tex, { displayMode: token.displayMode });
+    if (!rendered) return escapeHtml(token.raw);
+    return sanitizeHtml(rendered, STRICT_MATHML_CONFIG);
+  } catch {
+    return escapeHtml(token.raw);
+  }
+}
+function parseMathMarkdown(source, renderer, profile, transformText) {
+  const input = source === null || source === void 0 ? "" : String(source);
+  if (!canSanitizeHtml()) return escapeHtml(input);
+  if (input.length > MATH_MARKDOWN_LIMITS.sourceLength) return escapeHtml(input);
+  const textRenderer = transformText ? {
+    renderer: {
+      text(token) {
+        if ("tokens" in token && token.tokens) {
+          return this.parser.parseInline(token.tokens);
+        }
+        const safeText = Renderer.prototype.text.call(this, token);
+        return transformText(safeText);
+      }
+    }
+  } : void 0;
+  const extensions = [mathExtension(renderer)];
+  if (profile === "cellMarkdown") extensions.push(cellLinkExtension());
+  if (textRenderer) extensions.push(textRenderer);
+  const parser = new Marked({ gfm: true }, ...extensions);
+  const parsed = parser.parse(input, { async: false });
+  return sanitizeHtml(parsed, FINAL_PROFILES[profile]);
+}
+export {
+  MATH_MARKDOWN_LIMITS,
+  parseMathMarkdown
+};
+//# sourceMappingURL=math-markdown.js.map

package/dist/utils/math-markdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"math-markdown.js","sources":["../../src/utils/math-markdown.ts"],"sourcesContent":["import type { Config } from 'dompurify'\nimport { Marked, Renderer, type MarkedExtension, type Tokens } from 'marked'\nimport type { MathRenderer } from '../context/MCPUIMathContext'\nimport { escapeHtml } from './escape-html'\nimport { canSanitizeHtml, sanitizeHtml } from './sanitize-html'\n\nexport type MathMarkdownProfile = 'prose' | 'cellMarkdown'\nexport type MarkdownTextTransform = (escapedText: string) => string\n\nexport const MATH_MARKDOWN_LIMITS = {\n  sourceLength: 100_000,\n  expressionLength: 4_096,\n  expressionCount: 128,\n} as const\n\nconst MATH_TAGS = [\n  'math', 'semantics', 'mrow', 'mi', 'mo', 'mn', 'mtext', 'mspace', 'ms',\n  'msup', 'msub', 'msubsup', 'mfrac', 'msqrt', 'mroot', 'mtable', 'mtr',\n  'mtd', 'mover', 'munder', 'munderover', 'mpadded', 'mphantom', 'mstyle', 'menclose',\n] as const\n\nconst MATH_ATTRS = [\n  'xmlns', 'display', 'class', 'mathvariant', 'stretchy', 'fence', 'separator',\n  'lspace', 'rspace', 'accent', 'accentunder', 'columnalign', 'rowalign',\n  'columnspacing', 'rowspacing', 'columnlines', 'rowlines', 'frame', 'notation',\n  'width', 'height', 'depth', 'voffset', 'scriptlevel', 'displaystyle',\n] as const\n\nconst STRICT_MATHML_CONFIG = {\n  ALLOWED_TAGS: [...MATH_TAGS, 'span'],\n  ALLOWED_ATTR: [...MATH_ATTRS],\n  FORBID_TAGS: ['annotation', 'annotation-xml', 'style', 'a'],\n  // DOMPurify normally keeps the text of forbidden tags. TeX annotations can\n  // be large and duplicate the accessible MathML, so remove their subtree.\n  ADD_FORBID_CONTENTS: ['annotation', 'annotation-xml'],\n  FORBID_ATTR: ['style'],\n} as Config\n\nconst CELL_MARKDOWN_TAGS = [\n  'a', 'strong', 'em', 'b', 'i', 'code', 'span', 'br', 'button', 'svg', 'path',\n  'p', 'ul', 'ol', 'li', 'pre', 'blockquote', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6',\n  ...MATH_TAGS,\n]\n\nconst FINAL_PROFILES: Record<MathMarkdownProfile, Config> = {\n  prose: {\n    ADD_TAGS: [...MATH_TAGS],\n    ADD_ATTR: [...MATH_ATTRS, 'target', 'rel'],\n    FORBID_TAGS: ['annotation', 'annotation-xml', 'style', 'form', 'textarea', 'select', 'button', 'iframe', 'object', 'embed'],\n    ADD_FORBID_CONTENTS: ['annotation', 'annotation-xml'],\n    FORBID_ATTR: ['style'],\n  } as Config,\n  cellMarkdown: {\n    ALLOWED_TAGS: CELL_MARKDOWN_TAGS,\n    ALLOWED_ATTR: [\n      'href', 'target', 'rel', 'class', 'data-citation-page', 'data-citation-source',\n      'data-citation-doc', 'data-citation-verified', 'title', 'fill', 'stroke',\n      'viewBox', 'stroke-linecap', 'stroke-linejoin', 'stroke-width', 'd',\n      ...MATH_ATTRS,\n    ],\n    FORBID_TAGS: ['annotation', 'annotation-xml', 'style'],\n    ADD_FORBID_CONTENTS: ['annotation', 'annotation-xml'],\n    FORBID_ATTR: ['style'],\n  } as Config,\n}\n\ninterface MathToken extends Tokens.Generic {\n  type: 'mcpDisplayMath' | 'mcpInlineMath'\n  raw: string\n  tex: string\n  displayMode: boolean\n  render: boolean\n}\n\nfunction isCurrencyLike(raw: string, tex: string, following: string): boolean {\n  if (/^\\$\\s|\\s\\$$/.test(raw)) return true\n  if (/^\\d+(?:[.,]\\d+)?-\\s*$/.test(tex)) return true\n  if (/^\\d/.test(tex) && /^\\d/.test(following)) return true\n\n  // A currency opener can otherwise pair with the opening delimiter of a\n  // later expression (\"$5 then ($x$)\"). Reinterpret that first candidate\n  // only when it starts with a bounded numeric amount and its apparent closer\n  // is immediately followed by a complete later inline body. This deliberately\n  // leaves inherently ambiguous standalone forms ($5$, $2 + 3$, $2\\pi$) as\n  // math and does not depend on the prose between the two delimiters.\n  const amount = /^\\d+(?:[.,]\\d{1,2})?(?=$|[\\s,;:!?()[\\]+*/-])/.exec(tex)?.[0]\n  if (!amount) return false\n\n  // A standalone numeric token is valid math even when followed by prose or\n  // another expression (\"$5$, then $x$\"). Reassignment requires content\n  // beyond the amount itself.\n  const trailing = tex.slice(amount.length)\n  if (!trailing) return false\n\n  // During streaming, the later formula may not have closed yet. An unmatched\n  // opening parenthesis before its dollar is sufficient structural evidence\n  // that the numeric dollar was currency; otherwise a permissive renderer can\n  // briefly flash \"5 then (\" as math.\n  const hasUnmatchedOpeningParen = (trailing.match(/\\(/g)?.length ?? 0) > (trailing.match(/\\)/g)?.length ?? 0)\n  const containsTexCommand = /\\\\[A-Za-z]+/.test(trailing)\n  if (hasUnmatchedOpeningParen && !containsTexCommand) return true\n\n  const closerLooksLikeLaterOpener = /^(?![\\s,.;:!?)}\\]])(?:\\\\[^\\n]|[^\\\\\\n$])+\\$(?!\\$)/.test(following)\n  return closerLooksLikeLaterOpener\n}\n\nconst CELL_LINK_ATTRIBUTES = 'target=\"_blank\" rel=\"noopener noreferrer\" class=\"text-blue-600 dark:text-blue-400 hover:underline\"'\n\nfunction cellLinkExtension(): MarkedExtension {\n  return {\n    renderer: {\n      link(this: Renderer, token: Tokens.Link): string {\n        // Marked owns escaping of the destination, title and nested label\n        // tokens. Only inject fixed attributes into its already-safe anchor.\n        const anchor = Renderer.prototype.link.call(this, token) as string\n        return anchor.replace('<a ', `<a ${CELL_LINK_ATTRIBUTES} `)\n      },\n    },\n  }\n}\n\nfunction mathExtension(renderer: MathRenderer): MarkedExtension {\n  let count = 0\n  const token = (raw: string, tex: string, displayMode: boolean): MathToken => ({\n    type: displayMode ? 'mcpDisplayMath' : 'mcpInlineMath',\n    raw,\n    tex,\n    displayMode,\n    render: ++count <= MATH_MARKDOWN_LIMITS.expressionCount && tex.length <= MATH_MARKDOWN_LIMITS.expressionLength,\n  })\n\n  return {\n    extensions: [\n      {\n        name: 'mcpDisplayMath',\n        level: 'block',\n        start(src) {\n          const index = src.indexOf('$$')\n          return index < 0 ? undefined : index\n        },\n        tokenizer(src) {\n          const match = /^\\$\\$\\s*\\n?([\\s\\S]+?)\\n?\\s*\\$\\$(?:\\n|$)/.exec(src)\n          if (!match) return undefined\n          return token(match[0], match[1], true)\n        },\n        renderer(tokenValue) {\n          return renderToken(tokenValue as MathToken, renderer)\n        },\n      },\n      {\n        name: 'mcpInlineMath',\n        level: 'inline',\n        start(src) {\n          const index = src.indexOf('$')\n          return index < 0 ? undefined : index\n        },\n        tokenizer(src) {\n          const match = /^\\$(?!\\$)((?:\\\\[^\\n]|[^\\\\\\n$])+?)\\$(?!\\$)/.exec(src)\n          if (!match || isCurrencyLike(match[0], match[1], src.slice(match[0].length))) return undefined\n          return token(match[0], match[1], false)\n        },\n        renderer(tokenValue) {\n          return renderToken(tokenValue as MathToken, renderer)\n        },\n      },\n    ],\n  }\n}\n\nfunction renderToken(token: MathToken, renderer: MathRenderer): string {\n  if (!token.render) return escapeHtml(token.raw)\n  try {\n    const rendered = renderer(token.tex, { displayMode: token.displayMode })\n    if (!rendered) return escapeHtml(token.raw)\n    return sanitizeHtml(rendered, STRICT_MATHML_CONFIG)\n  } catch {\n    return escapeHtml(token.raw)\n  }\n}\n\n/**\n * Parse Markdown with isolated, bounded math support and sanitize the complete\n * result for its final sink. The optional transform sees escaped ordinary text\n * tokens only. Math, code, raw HTML and link destinations never pass through\n * it, so citation syntax cannot corrupt TeX optional arguments or attributes.\n */\nexport function parseMathMarkdown(\n  source: string,\n  renderer: MathRenderer,\n  profile: MathMarkdownProfile,\n  transformText?: MarkdownTextTransform,\n): string {\n  const input = source === null || source === undefined ? '' : String(source)\n  if (!canSanitizeHtml()) return escapeHtml(input)\n  if (input.length > MATH_MARKDOWN_LIMITS.sourceLength) return escapeHtml(input)\n\n  const textRenderer = transformText\n    ? {\n        renderer: {\n          text(this: Renderer, token: Tokens.Text | Tokens.Escape): string {\n            // Block text tokens (notably list-item text) can own already\n            // tokenized inline children. Recurse first so math and code keep\n            // their own renderers; leaf text callbacks run as parsing descends.\n            if ('tokens' in token && token.tokens) {\n              return this.parser.parseInline(token.tokens)\n            }\n            // Delegate entity handling and nested token rendering to Marked's\n            // own renderer. `escapeHtml` is deliberately not equivalent: it\n            // turns source `&amp;` into visible `&amp;` by double-escaping it.\n            const safeText = Renderer.prototype.text.call(this, token)\n            return transformText(safeText as string)\n          },\n        },\n      }\n    : undefined\n  const extensions = [mathExtension(renderer)]\n  if (profile === 'cellMarkdown') extensions.push(cellLinkExtension())\n  if (textRenderer) extensions.push(textRenderer)\n  const parser = new Marked({ gfm: true }, ...extensions)\n  const parsed = parser.parse(input, { async: false }) as string\n  return sanitizeHtml(parsed, FINAL_PROFILES[profile])\n}\n"],"names":[],"mappings":";;;AASO,MAAM,uBAAuB;AAAA,EAClC,cAAc;AAAA,EACd,kBAAkB;AAAA,EAClB,iBAAiB;AACnB;AAEA,MAAM,YAAY;AAAA,EAChB;AAAA,EAAQ;AAAA,EAAa;AAAA,EAAQ;AAAA,EAAM;AAAA,EAAM;AAAA,EAAM;AAAA,EAAS;AAAA,EAAU;AAAA,EAClE;AAAA,EAAQ;AAAA,EAAQ;AAAA,EAAW;AAAA,EAAS;AAAA,EAAS;AAAA,EAAS;AAAA,EAAU;AAAA,EAChE;AAAA,EAAO;AAAA,EAAS;AAAA,EAAU;AAAA,EAAc;AAAA,EAAW;AAAA,EAAY;AAAA,EAAU;AAC3E;AAEA,MAAM,aAAa;AAAA,EACjB;AAAA,EAAS;AAAA,EAAW;AAAA,EAAS;AAAA,EAAe;AAAA,EAAY;AAAA,EAAS;AAAA,EACjE;AAAA,EAAU;AAAA,EAAU;AAAA,EAAU;AAAA,EAAe;AAAA,EAAe;AAAA,EAC5D;AAAA,EAAiB;AAAA,EAAc;AAAA,EAAe;AAAA,EAAY;AAAA,EAAS;AAAA,EACnE;AAAA,EAAS;AAAA,EAAU;AAAA,EAAS;AAAA,EAAW;AAAA,EAAe;AACxD;AAEA,MAAM,uBAAuB;AAAA,EAC3B,cAAc,CAAC,GAAG,WAAW,MAAM;AAAA,EACnC,cAAc,CAAC,GAAG,UAAU;AAAA,EAC5B,aAAa,CAAC,cAAc,kBAAkB,SAAS,GAAG;AAAA;AAAA;AAAA,EAG1D,qBAAqB,CAAC,cAAc,gBAAgB;AAAA,EACpD,aAAa,CAAC,OAAO;AACvB;AAEA,MAAM,qBAAqB;AAAA,EACzB;AAAA,EAAK;AAAA,EAAU;AAAA,EAAM;AAAA,EAAK;AAAA,EAAK;AAAA,EAAQ;AAAA,EAAQ;AAAA,EAAM;AAAA,EAAU;AAAA,EAAO;AAAA,EACtE;AAAA,EAAK;AAAA,EAAM;AAAA,EAAM;AAAA,EAAM;AAAA,EAAO;AAAA,EAAc;AAAA,EAAM;AAAA,EAAM;AAAA,EAAM;AAAA,EAAM;AAAA,EAAM;AAAA,EAC1E,GAAG;AACL;AAEA,MAAM,iBAAsD;AAAA,EAC1D,OAAO;AAAA,IACL,UAAU,CAAC,GAAG,SAAS;AAAA,IACvB,UAAU,CAAC,GAAG,YAAY,UAAU,KAAK;AAAA,IACzC,aAAa,CAAC,cAAc,kBAAkB,SAAS,QAAQ,YAAY,UAAU,UAAU,UAAU,UAAU,OAAO;AAAA,IAC1H,qBAAqB,CAAC,cAAc,gBAAgB;AAAA,IACpD,aAAa,CAAC,OAAO;AAAA,EAAA;AAAA,EAEvB,cAAc;AAAA,IACZ,cAAc;AAAA,IACd,cAAc;AAAA,MACZ;AAAA,MAAQ;AAAA,MAAU;AAAA,MAAO;AAAA,MAAS;AAAA,MAAsB;AAAA,MACxD;AAAA,MAAqB;AAAA,MAA0B;AAAA,MAAS;AAAA,MAAQ;AAAA,MAChE;AAAA,MAAW;AAAA,MAAkB;AAAA,MAAmB;AAAA,MAAgB;AAAA,MAChE,GAAG;AAAA,IAAA;AAAA,IAEL,aAAa,CAAC,cAAc,kBAAkB,OAAO;AAAA,IACrD,qBAAqB,CAAC,cAAc,gBAAgB;AAAA,IACpD,aAAa,CAAC,OAAO;AAAA,EAAA;AAEzB;AAUA,SAAS,eAAe,KAAa,KAAa,WAA4B;;AAC5E,MAAI,cAAc,KAAK,GAAG,EAAG,QAAO;AACpC,MAAI,wBAAwB,KAAK,GAAG,EAAG,QAAO;AAC9C,MAAI,MAAM,KAAK,GAAG,KAAK,MAAM,KAAK,SAAS,EAAG,QAAO;AAQrD,QAAM,UAAS,oDAA+C,KAAK,GAAG,MAAvD,mBAA2D;AAC1E,MAAI,CAAC,OAAQ,QAAO;AAKpB,QAAM,WAAW,IAAI,MAAM,OAAO,MAAM;AACxC,MAAI,CAAC,SAAU,QAAO;AAMtB,QAAM,8BAA4B,cAAS,MAAM,KAAK,MAApB,mBAAuB,WAAU,QAAM,cAAS,MAAM,KAAK,MAApB,mBAAuB,WAAU;AAC1G,QAAM,qBAAqB,cAAc,KAAK,QAAQ;AACtD,MAAI,4BAA4B,CAAC,mBAAoB,QAAO;AAE5D,QAAM,6BAA6B,mDAAmD,KAAK,SAAS;AACpG,SAAO;AACT;AAEA,MAAM,uBAAuB;AAE7B,SAAS,oBAAqC;AAC5C,SAAO;AAAA,IACL,UAAU;AAAA,MACR,KAAqB,OAA4B;AAG/C,cAAM,SAAS,SAAS,UAAU,KAAK,KAAK,MAAM,KAAK;AACvD,eAAO,OAAO,QAAQ,OAAO,MAAM,oBAAoB,GAAG;AAAA,MAC5D;AAAA,IAAA;AAAA,EACF;AAEJ;AAEA,SAAS,cAAc,UAAyC;AAC9D,MAAI,QAAQ;AACZ,QAAM,QAAQ,CAAC,KAAa,KAAa,iBAAqC;AAAA,IAC5E,MAAM,cAAc,mBAAmB;AAAA,IACvC;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,EAAE,SAAS,qBAAqB,mBAAmB,IAAI,UAAU,qBAAqB;AAAA,EAAA;AAGhG,SAAO;AAAA,IACL,YAAY;AAAA,MACV;AAAA,QACE,MAAM;AAAA,QACN,OAAO;AAAA,QACP,MAAM,KAAK;AACT,gBAAM,QAAQ,IAAI,QAAQ,IAAI;AAC9B,iBAAO,QAAQ,IAAI,SAAY;AAAA,QACjC;AAAA,QACA,UAAU,KAAK;AACb,gBAAM,QAAQ,0CAA0C,KAAK,GAAG;AAChE,cAAI,CAAC,MAAO,QAAO;AACnB,iBAAO,MAAM,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI;AAAA,QACvC;AAAA,QACA,SAAS,YAAY;AACnB,iBAAO,YAAY,YAAyB,QAAQ;AAAA,QACtD;AAAA,MAAA;AAAA,MAEF;AAAA,QACE,MAAM;AAAA,QACN,OAAO;AAAA,QACP,MAAM,KAAK;AACT,gBAAM,QAAQ,IAAI,QAAQ,GAAG;AAC7B,iBAAO,QAAQ,IAAI,SAAY;AAAA,QACjC;AAAA,QACA,UAAU,KAAK;AACb,gBAAM,QAAQ,4CAA4C,KAAK,GAAG;AAClE,cAAI,CAAC,SAAS,eAAe,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,MAAM,MAAM,CAAC,EAAE,MAAM,CAAC,EAAG,QAAO;AACrF,iBAAO,MAAM,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,KAAK;AAAA,QACxC;AAAA,QACA,SAAS,YAAY;AACnB,iBAAO,YAAY,YAAyB,QAAQ;AAAA,QACtD;AAAA,MAAA;AAAA,IACF;AAAA,EACF;AAEJ;AAEA,SAAS,YAAY,OAAkB,UAAgC;AACrE,MAAI,CAAC,MAAM,OAAQ,QAAO,WAAW,MAAM,GAAG;AAC9C,MAAI;AACF,UAAM,WAAW,SAAS,MAAM,KAAK,EAAE,aAAa,MAAM,aAAa;AACvE,QAAI,CAAC,SAAU,QAAO,WAAW,MAAM,GAAG;AAC1C,WAAO,aAAa,UAAU,oBAAoB;AAAA,EACpD,QAAQ;AACN,WAAO,WAAW,MAAM,GAAG;AAAA,EAC7B;AACF;AAQO,SAAS,kBACd,QACA,UACA,SACA,eACQ;AACR,QAAM,QAAQ,WAAW,QAAQ,WAAW,SAAY,KAAK,OAAO,MAAM;AAC1E,MAAI,CAAC,gBAAA,EAAmB,QAAO,WAAW,KAAK;AAC/C,MAAI,MAAM,SAAS,qBAAqB,aAAc,QAAO,WAAW,KAAK;AAE7E,QAAM,eAAe,gBACjB;AAAA,IACE,UAAU;AAAA,MACR,KAAqB,OAA4C;AAI/D,YAAI,YAAY,SAAS,MAAM,QAAQ;AACrC,iBAAO,KAAK,OAAO,YAAY,MAAM,MAAM;AAAA,QAC7C;AAIA,cAAM,WAAW,SAAS,UAAU,KAAK,KAAK,MAAM,KAAK;AACzD,eAAO,cAAc,QAAkB;AAAA,MACzC;AAAA,IAAA;AAAA,EACF,IAEF;AACJ,QAAM,aAAa,CAAC,cAAc,QAAQ,CAAC;AAC3C,MAAI,YAAY,eAAgB,YAAW,KAAK,mBAAmB;AACnE,MAAI,aAAc,YAAW,KAAK,YAAY;AAC9C,QAAM,SAAS,IAAI,OAAO,EAAE,KAAK,KAAA,GAAQ,GAAG,UAAU;AACtD,QAAM,SAAS,OAAO,MAAM,OAAO,EAAE,OAAO,OAAO;AACnD,SAAO,aAAa,QAAQ,eAAe,OAAO,CAAC;AACrD;"}