@xapp/chat-widget 1.92.0 → 1.93.0

package/dist/index.js

@@ -3635,6 +3635,7 @@ var MCPChat = /** @class */ (function () {
                 toolCallId: params.toolCallId,
                 displayName: params.displayName,
                 label: params.label,
+                toolInput: params.toolInput,
                 hidden: params.hidden,
                 toolResult: params.toolResult,
                 toolError: params.toolError,
@@ -4164,6 +4165,7 @@ var MCPChat = /** @class */ (function () {
                                                 displayName: data.displayName,
                                                 label: data.label,
                                                 hidden: data.hidden,
+                                                toolInput: data.toolInput,
                                                 toolResult: data.toolResult,
                                                 toolError: data.toolError,
                                             });
@@ -11620,14 +11622,14 @@ var ToolCallDisplay = function (_a) {
 };
 
 /**
- * Escape &, <, > for safe insertion into HTML text nodes.
- * Not suitable for attribute values.
+ * Escape &, <, >, and " for safe insertion into HTML text nodes and attribute values.
  */
 function escapeHtml(text) {
     return text
         .replace(/&/g, "&amp;")
         .replace(/</g, "&lt;")
-        .replace(/>/g, "&gt;");
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;");
 }
 function parseInlineMarkdown(text) {
     return escapeHtml(text)
@@ -11664,13 +11666,27 @@ function tableToHtml(headerLine, separatorLine, bodyBlock) {
 function parseMarkdown(text) {
     if (!text)
         return "";
-    // Extract tables first, replace with placeholders, then process the rest
+    // Extract fenced code blocks first, replace with placeholders
+    var codeBlocks = [];
+    var processed = text.replace(/```([^\s`]*)\r?\n([\s\S]*?)```/g, function (_match, lang, code) {
+        var escaped = escapeHtml(code.replace(/\n$/, ""));
+        var langAttr = lang ? " data-language=\"".concat(escapeHtml(lang), "\"") : "";
+        codeBlocks.push("<pre><code".concat(langAttr, ">").concat(escaped, "</code></pre>"));
+        return "%%CODEBLOCK".concat(codeBlocks.length - 1, "%%");
+    });
+    // Extract tables, replace with placeholders
     var tables = [];
-    var processed = text.replace(/(?:^|\n)(\|.+\|)\n(\|[\s:|-]+\|)\n((?:\|.+\|\n?)+)/g, function (_match, headerLine, separatorLine, bodyBlock) {
+    processed = processed.replace(/(?:^|\n)(\|.+\|)\n(\|[\s:|-]+\|)\n((?:\|.+\|\n?)+)/g, function (_match, headerLine, separatorLine, bodyBlock) {
         tables.push(tableToHtml(headerLine, separatorLine, bodyBlock));
         return "\n%%TABLE".concat(tables.length - 1, "%%\n");
     });
-    // Now safely escape and parse markdown on the non-table text
+    // Extract inline code, replace with placeholders
+    var inlineCodes = [];
+    processed = processed.replace(/`([^`\n]+)`/g, function (_match, code) {
+        inlineCodes.push("<code>".concat(escapeHtml(code), "</code>"));
+        return "%%INLINECODE".concat(inlineCodes.length - 1, "%%");
+    });
+    // Now safely escape and parse markdown on the non-table/code text
     processed = processed
         .replace(/&/g, "&amp;")
         .replace(/</g, "&lt;")
@@ -11699,8 +11715,17 @@ function parseMarkdown(text) {
         return match.replace(/<br>/g, "");
     });
     // Restore table placeholders (strip adjacent <br> tags)
+    // Use function replacer to avoid $ special-sequence interpretation in replacement strings
     tables.forEach(function (tableHtml, i) {
-        processed = processed.replace(new RegExp("(?:<br>)?%%TABLE".concat(i, "%%(?:<br>)?")), tableHtml);
+        processed = processed.replace(new RegExp("(?:<br>)?%%TABLE".concat(i, "%%(?:<br>)?")), function () { return tableHtml; });
+    });
+    // Restore code block placeholders (strip adjacent <br> tags)
+    codeBlocks.forEach(function (codeHtml, i) {
+        processed = processed.replace(new RegExp("(?:<br>)?%%CODEBLOCK".concat(i, "%%(?:<br>)?")), function () { return codeHtml; });
+    });
+    // Restore inline code placeholders
+    inlineCodes.forEach(function (codeHtml, i) {
+        processed = processed.replace("%%INLINECODE".concat(i, "%%"), function () { return codeHtml; });
     });
     return processed;
 }
@@ -36622,13 +36647,13 @@ function update(state, action) {
                                     var _a;
                                     if (index === streamingIndex_3 && isChatMsgDetail(chat)) {
                                         var toolCalls = (_a = chat.toolCalls) === null || _a === void 0 ? void 0 : _a.map(function (tc) {
-                                            var _a;
+                                            var _a, _b;
                                             // Match by toolCallId if available, otherwise fall back to name + isExecuting
                                             var isMatch = toolEndDetail_1.toolCallId
                                                 ? tc.toolCallId === toolEndDetail_1.toolCallId
                                                 : tc.name === toolEndDetail_1.toolName && tc.isExecuting;
                                             if (isMatch) {
-                                                return __assign(__assign({}, tc), { displayName: toolEndDetail_1.displayName || tc.displayName, label: toolEndDetail_1.label, hidden: (_a = toolEndDetail_1.hidden) !== null && _a !== void 0 ? _a : tc.hidden, result: toolEndDetail_1.toolResult, error: toolEndDetail_1.toolError, endTime: toolEndDetail_1.timestamp, isExecuting: false });
+                                                return __assign(__assign({}, tc), { displayName: toolEndDetail_1.displayName || tc.displayName, label: toolEndDetail_1.label, hidden: (_a = toolEndDetail_1.hidden) !== null && _a !== void 0 ? _a : tc.hidden, input: (_b = toolEndDetail_1.toolInput) !== null && _b !== void 0 ? _b : tc.input, result: toolEndDetail_1.toolResult, error: toolEndDetail_1.toolError, endTime: toolEndDetail_1.timestamp, isExecuting: false });
                                             }
                                             return tc;
                                         });