buninu 0.6.0 → 0.7.0

package/CHANGELOG.md

@@ -1,5 +1,31 @@
 # Changelog
 
+## 0.7.0 - 2026-10-26
+
+- Sync jsgotty to 1.4.0:
+  * Add horizontal and diagonal scrolling through terminal mouse reporting,
+    including Shift-wheel horizontal scrolling and preserved wheel modifiers.
+  * Double-tap and hold the second tap to drag with the left mouse button when
+    application mouse reporting is enabled. Release the button on touch
+    cancellation, backgrounding or disconnect; ordinary swipes still scroll.
+  * Add Right click to the existing image long-press menu, sending the click
+    at the position where the menu was opened without removing the image.
+  * Prevent Android WebView from automatically zooming the terminal's hidden
+    input after native long-press paste, including at reduced viewport zoom.
+    Keep native paste, IME input and pinch zoom on the visible terminal.
+- Sync jsmdcui to 0.19.4:
+  * Restore Dockerfile highlighting and improve compatibility with Micro's
+    syntax definitions by translating Go regexp flags and POSIX character
+    classes while preserving scoped flags.
+  * Fix nested HTML/XML highlighting regions so quoted attributes return to
+    their enclosing tags and unfinished attributes retain state across lines.
+  * Use iterative region scanning to support long minified lines without
+    recursive stack exhaustion or truncating highlighting.
+  * Guard against zero-width region cycles, cyclic syntax/state trees and
+    excessively nested regexp conversion. Disable failing rules individually
+    instead of losing an entire syntax definition; retain support for long
+    lines. These guards do not impose timeouts on individual JavaScript regexps.
+
 ## 0.6.0 - 2026-10-25
 
 - Sync jsgotty to 1.3.0:

package/apps/jsgotty/README.en.md

@@ -349,3 +349,7 @@ printf '\033]52;c;%s\007' "$(printf 'Hello' | base64 | tr -d '\n')"
 Applications can send `ESC ] 52 ; c ; ? ST` to read and receive a base64-encoded OSC 52 reply on stdin.
 
 `jsgotty --client` **does not intercept OSC 52**: it forwards reads and writes unchanged for the outer terminal emulator to handle.
+
+### Touch dragging and right click
+
+When the application enables mouse reporting, double-tap and hold the second tap to drag with the left button; lifting your finger releases it. Single-finger swipes still scroll. The existing image long-press menu now includes `Right click` below `Remove image`; it sends a right click at the position where the menu was opened. Pinch zoom and the existing remove-image gesture remain unchanged. To disable double-tap dragging, set `window.touchDoubleTapDrag = false` in the page JavaScript.

package/apps/jsgotty/README.md

@@ -351,3 +351,7 @@ printf '\033]52;c;%s\007' "$(printf 'Hello' | base64 | tr -d '\n')"
 程式可送出 `ESC ] 52 ; c ; ? ST` 讀取，並從 stdin 接收 base64 編碼的 OSC 52 回覆。
 
 `jsgotty --client` **不攔截 OSC 52**，讀寫控制碼都原樣轉送，交給最外層真正的終端模擬器決定。
+
+### 觸控拖曳與右鍵
+
+在程式啟用滑鼠回報時，快速點兩下並按住第二下可拖曳左鍵，放開即釋放；單指滑動仍是捲動。既有圖片長按選單的 `Remove image` 下方新增 `Right click`，會在叫出選單的原始位置送出右鍵點擊。雙指縮放與原本的移除圖片入口不變。若要停用雙擊拖曳，可在網頁 JavaScript 設定 `window.touchDoubleTapDrag = false`。

package/apps/jsgotty/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "jsgotty",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "jsgotty",
-      "version": "1.3.0",
+      "version": "1.4.0",
       "dependencies": {
         "node-addon-api": "^7.1.1",
         "ws": "^8.18.3"

package/apps/jsgotty/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jsgotty",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "description": "Share your terminal as a web application: A JavaScript rewrite of GoTTY",
   "license": "MIT",
   "bin": {

package/apps/jsgotty/static/css/index.css

@@ -17,3 +17,10 @@ html, body, #terminal {
 #terminal, #terminal .xterm, #terminal .xterm-viewport, #terminal .xterm-screen {
     touch-action: manipulation;
 }
+
+/* Chromium skips focused-editable auto-zoom when that element disallows
+   pinch zoom. Restrict only the hidden input, not the terminal canvas:
+   native paste/IME remain available and the visible terminal can still pinch. */
+#terminal .xterm-helper-textarea {
+    touch-action: none;
+}

package/apps/jsgotty/static/js/gotty.js

@@ -15997,8 +15997,15 @@
                                 !1 === e._customWheelEventHandler(t)
                               )
                                 return !1;
-                              if (0 === e.viewport.getLinesScrolled(t))
-                                return !1;
+                              // Preserve both axes of diagonal wheel/touch gestures.
+                              // CoreMouseService already encodes wheel actions 2/3 as 66/67.
+                              if (t.deltaX) e.coreMouseService.triggerMouseEvent({
+                                col: i.col, row: i.row, x: i.x, y: i.y,
+                                button: 4, action: t.deltaX < 0 ? 2 : 3,
+                                ctrl: t.ctrlKey, alt: t.altKey, shift: t.shiftKey,
+                              });
+                              if (0 === e.viewport.getLinesScrolled(t, true))
+                                return !!t.deltaX;
                               ((s = t.deltaY < 0 ? 0 : 1), (r = 4));
                               break;
                             default:
@@ -16972,8 +16979,9 @@
                         }
                         return { bufferElements: s, cursorElement: i };
                       }
-                      getLinesScrolled(e) {
-                        if (0 === e.deltaY || e.shiftKey) return 0;
+                      getLinesScrolled(e, mouseReporting = false) {
+                        // Shift belongs to the remote application while mouse reporting is active.
+                        if (0 === e.deltaY || (e.shiftKey && !mouseReporting)) return 0;
                         let t = this._applyScrollModifier(e.deltaY, e);
                         return (
                           e.deltaMode === WheelEvent.DOM_DELTA_PIXEL

package/apps/jsgotty/static/js/kitty.js

@@ -561,6 +561,26 @@
     state.renderBound = state.renderDisposables.length > 0;
   }
 
+  // Touch gestures report mouse input without DOM mousedown: xterm's DOM
+  // handler focuses its hidden textarea, which can zoom Android WebView.
+  function reportTouchMouse(type, point, button = 0) {
+    const core = terminal?.__gottyXterm?._core;
+    if (!core?.coreMouseService?.areMouseEventsActive) return;
+    const screen = core.screenElement;
+    if (!screen) return;
+    const rect = screen.getBoundingClientRect();
+    const coords = core._mouseService.getMouseReportCoords({
+      clientX: Math.max(rect.left, Math.min(rect.right - 1, point.clientX)),
+      clientY: Math.max(rect.top, Math.min(rect.bottom - 1, point.clientY)),
+    }, screen);
+    if (!coords) return;
+    core.coreMouseService.triggerMouseEvent({
+      ...coords, button,
+      action: type === "mousedown" ? 1 : type === "mousemove" ? 32 : 0,
+      ctrl: false, alt: false, shift: false,
+    });
+  }
+
   function dispatchSyntheticWheel(target, touch, deltaX, deltaY) {
     if (!target) {
       return;
@@ -597,22 +617,69 @@
       return screen || viewport || xterm || terminal;
     };
 
+    let lastTap = null;
+    let drag = null;
+    const mouse = (type, point) => reportTouchMouse(type, point);
+    const releaseDrag = () => {
+      if (drag) {
+        const point = drag;
+        drag = null;
+        mouse("mouseup", point);
+      }
+    };
+    const cancelGesture = () => {
+      releaseDrag();
+      lastTap = null;
+      state.touchScroll = null;
+    };
+    state.cancelTouchGesture = cancelGesture;
+    bindTarget.addEventListener("contextmenu", (event) => {
+      if (drag) { event.preventDefault(); event.stopImmediatePropagation(); }
+    }, true);
+    window.addEventListener("blur", cancelGesture);
+    document.addEventListener("visibilitychange", () => {
+      if (document.hidden) cancelGesture();
+    });
+
     bindTarget.addEventListener("touchstart", (event) => {
       if (event.touches.length !== 1) {
-        state.touchScroll = null;
+        cancelGesture();
         return;
       }
       const touch = event.touches[0];
+      const reporting = terminal.__gottyXterm?._core?.coreMouseService?.areMouseEventsActive;
+      if (reporting && window.touchDoubleTapDrag !== false && lastTap &&
+          performance.now() - lastTap.time < 350 &&
+          Math.hypot(touch.clientX - lastTap.x, touch.clientY - lastTap.y) < 24) {
+        lastTap = null;
+        state.touchScroll = null;
+        drag = { identifier: touch.identifier, clientX: touch.clientX, clientY: touch.clientY };
+        // Cancel compatibility mouse events: this is the second press, not a third click.
+        event.preventDefault();
+        mouse("mousedown", drag);
+        return;
+      }
+      lastTap = null;
       state.touchScroll = {
+        startX: touch.clientX, startY: touch.clientY, startTime: performance.now(), moved: false,
         identifier: touch.identifier,
         lastX: touch.clientX,
         lastY: touch.clientY,
         residualX: 0,
         residualY: 0
       };
-    }, { passive: true });
+    }, { passive: false });
 
     bindTarget.addEventListener("touchmove", (event) => {
+      if (drag) {
+        const touch = Array.from(event.touches).find(t => t.identifier === drag.identifier);
+        if (!touch || event.touches.length !== 1) { cancelGesture(); return; }
+        event.preventDefault();
+        drag.clientX = touch.clientX;
+        drag.clientY = touch.clientY;
+        mouse("mousemove", drag);
+        return;
+      }
       if (!state.touchScroll) {
         return;
       }
@@ -621,6 +688,8 @@
         return;
       }
 
+      if (Math.hypot(touch.clientX - state.touchScroll.startX,
+          touch.clientY - state.touchScroll.startY) > 8) state.touchScroll.moved = true;
       const deltaX = state.touchScroll.lastX - touch.clientX;
       const deltaY = state.touchScroll.lastY - touch.clientY;
       state.touchScroll.lastX = touch.clientX;
@@ -653,11 +722,20 @@
       state.touchScroll.residualY -= ticksY * threshold * stepY;
     }, { passive: false });
 
-    const clearTouchScroll = () => {
+    bindTarget.addEventListener("touchend", (event) => {
+      if (drag) {
+        event.preventDefault();
+        releaseDrag();
+      } else {
+        const scroll = state.touchScroll;
+        if (scroll && !scroll.moved && event.touches.length === 0 &&
+            performance.now() - scroll.startTime < 350) {
+          lastTap = { x: scroll.lastX, y: scroll.lastY, time: performance.now() };
+        }
+      }
       state.touchScroll = null;
-    };
-    bindTarget.addEventListener("touchend", clearTouchScroll, { passive: true });
-    bindTarget.addEventListener("touchcancel", clearTouchScroll, { passive: true });
+    }, { passive: false });
+    bindTarget.addEventListener("touchcancel", cancelGesture, { passive: true });
     state.touchBound = true;
   }
 
@@ -676,9 +754,25 @@
     removeButton.textContent = "Remove image";
     menu.appendChild(removeButton);
 
+    const separator = document.createElement("hr");
+    const rightButton = document.createElement("button");
+    rightButton.type = "button";
+    rightButton.className = "kitty-context-menu__item";
+    rightButton.textContent = "Right click";
+    menu.append(separator, rightButton);
+    rightButton.addEventListener("click", (event) => {
+      event.preventDefault();
+      event.stopPropagation();
+      const point = state.contextMenu?.point;
+      hideContextMenu();
+      if (!point || !terminal.__gottyXterm?._core?.coreMouseService?.areMouseEventsActive) return;
+      reportTouchMouse("mousedown", { clientX: point.x, clientY: point.y }, 2);
+      reportTouchMouse("mouseup", { clientX: point.x, clientY: point.y }, 2);
+    });
+
     state.contextMenu = {
       root: menu,
-      removeButton,
+      removeButton, rightButton, separator,
       targetKey: null
     };
 
@@ -722,6 +816,9 @@
   function showContextMenu(x, y, key) {
     const menu = ensureContextMenu();
     menu.targetKey = key;
+    menu.point = { x, y };
+    const reporting = !!terminal.__gottyXterm?._core?.coreMouseService?.areMouseEventsActive;
+    menu.rightButton.hidden = menu.separator.hidden = !reporting;
     menu.root.hidden = false;
 
     const margin = 10;
@@ -1004,6 +1101,15 @@
     return false;
   }
 
+  const watchedSockets = new WeakSet();
+  function watchTouchSocket(socket) {
+    if (watchedSockets.has(socket)) return;
+    watchedSockets.add(socket);
+    socket.addEventListener("close", () => {
+      if (state.socket === socket) state.cancelTouchGesture?.();
+    });
+  }
+
   const nativeSend = WebSocket.prototype.send;
   const nativeOnOpen = WebSocket.prototype.addEventListener;
   WebSocket.prototype.addEventListener = function (type, listener, options) {
@@ -1012,6 +1118,7 @@
     }
       const wrapped = function (event) {
         state.socket = this;
+        watchTouchSocket(this);
         inspectTerminalOutput(event.data);
         if (typeof event.data === "string" && event.data[0] === MSG_KITTY) {
           if (handleKittyMessage(event.data.slice(1))) {
@@ -1058,6 +1165,7 @@
       }
       const wrapped = function (event) {
         state.socket = this;
+        watchTouchSocket(this);
         inspectTerminalOutput(event.data);
         if (typeof event.data === "string" && event.data[0] === MSG_KITTY) {
           if (handleKittyMessage(event.data.slice(1))) {

package/apps/jsgotty/tests/manual/zoom-collector.cjs

@@ -0,0 +1,55 @@
+// Usage: node tests/manual/zoom-collector.cjs [port] [output.jsonl]
+const http = require('node:http');
+const fs = require('node:fs');
+const path = require('node:path');
+const os = require('node:os');
+const { randomBytes } = require('node:crypto');
+const port = Number(process.argv[2] || 18767);
+const file = path.resolve(process.argv[3] || path.join(os.tmpdir(), 'jsgotty-zoom-debug.jsonl'));
+const token = randomBytes(16).toString('hex');
+const endpoint = `http://127.0.0.1:${port}/${token}`;
+const client = fs.readFileSync(path.join(__dirname, 'zoom-debug.js'), 'utf8') +
+  `\nwindow.startGottyZoomDebug({endpoint:${JSON.stringify(endpoint)}});\n`;
+let count = 0;
+http.createServer((req, res) => {
+  res.setHeader('Access-Control-Allow-Origin', '*');
+  res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
+  res.setHeader('Access-Control-Allow-Headers', 'Content-Type');
+  res.setHeader('Access-Control-Allow-Private-Network', 'true');
+  res.setHeader('Cache-Control', 'no-store');
+  if (req.url !== '/' + token && req.url !== '/' + token + '/client.js') {
+    res.writeHead(404); return res.end();
+  }
+  if (req.method === 'OPTIONS') { res.writeHead(204); return res.end(); }
+  if (req.method === 'GET' && req.url.endsWith('/client.js')) {
+    res.setHeader('Content-Type', 'application/javascript');
+    return res.end(client);
+  }
+  if (req.method !== 'POST' || req.url !== '/' + token) {
+    res.writeHead(405); return res.end();
+  }
+  let body = '';
+  req.on('data', chunk => {
+    body += chunk;
+    if (body.length > 16384) req.destroy();
+  });
+  req.on('end', () => {
+    if (count >= 20000) { res.writeHead(429); return res.end(); }
+    let event;
+    try { event = JSON.parse(body); }
+    catch { res.writeHead(400); return res.end(); }
+    try {
+      fs.appendFileSync(file, JSON.stringify({receivedAt: new Date().toISOString(), event}) + '\n', {mode: 0o600});
+      count++;
+      res.writeHead(204); res.end();
+    } catch (error) {
+      console.error(error.message);
+      res.writeHead(500); res.end();
+    }
+  });
+}).listen(port, '127.0.0.1', () => {
+  console.log('Log (append): ' + file);
+  console.log('Run in the connected jsgotty page via DevTools or CDP:');
+  console.log(`fetch(${JSON.stringify(endpoint + '/client.js')}).then(r => r.text()).then(source => (0, eval)(source))`);
+  console.log('Stop browser capture: window.stopGottyZoomDebug()');
+});

package/apps/jsgotty/tests/manual/zoom-debug.js

@@ -0,0 +1,39 @@
+// Manual WebView zoom diagnostics. Does not change focus, selection or gestures.
+window.startGottyZoomDebug = ({endpoint} = {}) => {
+  window.stopGottyZoomDebug?.();
+  window.__zoomDiag?.stop();
+  const logs = [], cleanup = [], started = Date.now();
+  const session = Math.random().toString(36).slice(2);
+  let stopped = false;
+  const label = el => el ? `${el.tagName || ''}#${el.id || ''}.${String(el.className || '')}` : null;
+  const record = event => {
+    if (stopped || logs.length >= 4000 || Date.now() - started > 600000) return;
+    const v = window.visualViewport, active = document.activeElement;
+    const row = {session, sequence:logs.length, time:Date.now(), type:event.type,
+      target:label(event.target), active:label(active), trusted:event.isTrusted,
+      touches:event.touches?.length, viewport:document.querySelector('meta[name=viewport]')?.content,
+      scale:v?.scale, offset:v ? [v.offsetLeft,v.offsetTop] : null,
+      size:v ? [v.width,v.height] : null, scroll:[scrollX,scrollY],
+      selection:document.getSelection()?.type,
+      fontSize:active ? getComputedStyle(active).fontSize : null};
+    logs.push(row);
+    if(endpoint) fetch(endpoint,{method:'POST',headers:{'Content-Type':'text/plain'},body:JSON.stringify(row)})
+      .catch(e=>{window.__gottyZoomDeliveryError=String(e)});
+  };
+  const listen=(target,type)=>{
+    target.addEventListener(type,record,{capture:true,passive:true});
+    cleanup.push(()=>target.removeEventListener(type,record,true));
+  };
+  for(const type of ['touchstart','touchend','touchcancel','mousedown','mouseup','click',
+    'contextmenu','focusin','focusout','selectionchange','visibilitychange'])listen(document,type);
+  if(window.visualViewport)for(const type of ['resize','scroll'])listen(visualViewport,type);
+  const observer=new MutationObserver(()=>record({type:'viewport-mutation'}));
+  const meta=document.querySelector('meta[name=viewport]');
+  if(meta)observer.observe(meta,{attributes:true});
+  cleanup.push(()=>observer.disconnect());
+  window.stopGottyZoomDebug=()=>{stopped=true;cleanup.forEach(fn=>fn())};
+  window.__gottyZoomRecords=logs;
+  window.markGottyZoomDebug=label=>record({type:'mark:'+label});
+  record({type:'ready'});
+  return 'Zoom diagnostics started';
+};

package/apps/jsgotty/tests/touch-drag-browser.test.js

@@ -0,0 +1,106 @@
+// Opt-in real bundled-xterm integration; no browser/dependency downloads.
+// CHROMIUM_HEADLESS=/path/to/chromium-headless-shell node --test tests/touch-drag-browser.test.js
+const test=require('node:test');
+const assert=require('node:assert/strict');
+const fs=require('node:fs');
+const path=require('node:path');
+const http=require('node:http');
+const {spawn}=require('node:child_process');
+const {once}=require('node:events');
+const WebSocket=require('ws');
+const root=path.join(__dirname,'../static');
+test('touch double-tap drag and image-menu right click use bundled xterm', {skip:!process.env.CHROMIUM_HEADLESS,timeout:60000},async()=>{
+ const bundle=fs.readFileSync(path.join(root,'js/gotty.js'),'utf8').replace('(i.nc = void 0));','(i.nc = void 0)); window.TestGoTTYXterm = i(634).GoTTYXterm;');
+ const server=http.createServer((req,res)=>{
+  if(req.url==='/index.css'){res.setHeader('Content-Type','text/css');res.end(fs.readFileSync(path.join(root,'css/index.css')));}
+  else if(req.url==='/bundle.js'){res.setHeader('Content-Type','text/javascript');res.end(bundle);}
+  else if(req.url==='/gestures.js'){
+   const source=fs.readFileSync(path.join(root,'js/kitty.js'),'utf8');
+   res.setHeader('Content-Type','text/javascript');
+   res.end(source.slice(source.indexOf('  function reportTouchMouse('),source.indexOf('  function ensureContextMenu('))+source.slice(source.indexOf('  function ensureContextMenu('),source.indexOf('  function bindImageContextMenu('))+source.slice(source.indexOf('  function bindImageContextMenu('),source.indexOf('  function bindImageContextMenu(')+source.slice(source.indexOf('  function bindImageContextMenu(')).indexOf('\n  function ',5))+'\nbindTouchScrolling();bindImageContextMenu();');
+  }
+  else if(req.url==='/keyboard.js'){res.setHeader('Content-Type','text/javascript');res.end(fs.readFileSync(path.join(root,'js/kitty-keyboard.js')));}
+  else res.end('<!doctype html><div id="terminal"><div id="fixture" style="width:800px;height:600px"></div></div><link rel="stylesheet" href="/index.css"><script src="/keyboard.js"></script><script src="/bundle.js"></script><script>window.wrapper=new TestGoTTYXterm(document.getElementById("fixture"));window.sent=[];wrapper.onInput(b=>sent.push(new TextDecoder().decode(b)));wrapper.kittyKeyboard.android=true;</script>');
+ });
+ server.listen(0,'127.0.0.1');await once(server,'listening');
+ const child=spawn(process.env.CHROMIUM_HEADLESS,['--no-sandbox','--disable-gpu','--remote-debugging-port=0','http://127.0.0.1:'+server.address().port],{detached:true,stdio:['ignore','ignore','pipe']});
+ let ws;
+ try{
+  const endpoint=await new Promise((resolve,reject)=>{let log='';const timer=setTimeout(()=>reject(Error('Browser startup timeout: '+log)),15000);child.on('error',reject);child.on('exit',code=>{clearTimeout(timer);reject(Error('Browser exited '+code+': '+log));});child.stderr.on('data',b=>{log+=b;const m=log.match(/DevTools listening on (ws:\/\/[^\s]+)/);if(m){clearTimeout(timer);resolve(m[1]);}});});
+  const u=new URL(endpoint);let tab;
+  for(let i=0;i<50;i++){tab=(await (await fetch('http://'+u.host+'/json/list')).json()).find(x=>x.type==='page');if(tab)break;await new Promise(r=>setTimeout(r,100));}
+  ws=new WebSocket(tab.webSocketDebuggerUrl);await once(ws,'open');let id=0;const pending=new Map();ws.on('message',data=>{const m=JSON.parse(data);if(pending.has(m.id)){const {resolve,reject}=pending.get(m.id);pending.delete(m.id);m.error?reject(m.error):resolve(m.result);}});
+  const call=(method,params)=>new Promise((resolve,reject)=>{pending.set(++id,{resolve,reject});ws.send(JSON.stringify({id,method,params}));});
+  for(let i=0;i<50;i++){const r=await call('Runtime.evaluate',{expression:'Boolean(window.wrapper)',returnByValue:true});if(r.result.value)break;await new Promise(r=>setTimeout(r,100));}
+  const result=await call('Runtime.evaluate',{awaitPromise:true,returnByValue:true,expression:`(async()=>{
+   const term=wrapper.term;
+   const write=s=>new Promise(r=>term.write(s,r));
+   const equal=(a,b)=>{if(JSON.stringify(a)!==JSON.stringify(b))throw Error(JSON.stringify({actual:a,expected:b}));};
+   await write('\\x1b[?1002h\\x1b[?1006h');
+   const terminal=document.getElementById('fixture');terminal.__gottyXterm=term;
+   const screen=term.element.querySelector('.xterm-screen'), rect=screen.getBoundingClientRect();
+   const state={placements:new Map()};
+   const xtermElements=()=>({screen});
+   const DEFAULT_TOUCH_SCROLL_THRESHOLD=24;
+   const removePlacementNode=node=>node.remove();
+   eval(await (await fetch('/gestures.js')).text());
+   const touch=(type,x=30,y=30,count=1)=>{
+    const point=new Touch({identifier:1,target:screen,clientX:rect.left+x,clientY:rect.top+y});
+    const touches=type==='touchend'||type==='touchcancel'?[]:count===1?[point]:[point,new Touch({identifier:2,target:screen,clientX:rect.left+x+30,clientY:rect.top+y})];
+    const event=new TouchEvent(type,{bubbles:true,cancelable:true,touches,changedTouches:[point]});
+    screen.dispatchEvent(event);return event.defaultPrevented;
+   };
+   const codes=()=>sent.map(s=>{const m=s.match(/<([0-9]+);[0-9]+;[0-9]+([Mm])/);return m?m[1]+m[2]:s;});
+   let focusCalls=0;const originalFocus=term._core.focus;term._core.focus=function(...args){focusCalls++;return originalFocus.apply(this,args);};
+   const firstTap=()=>{touch('touchstart');touch('touchend');
+    // Browser compatibility mouse sequence after an ordinary tap.
+    for(const type of ['mousedown','mouseup'])screen.dispatchEvent(new MouseEvent(type,{bubbles:true,clientX:rect.left+30,clientY:rect.top+30,button:0,buttons:type==='mousedown'?1:0}));};
+   sent.length=0;firstTap();equal(codes(),['0M','0m']);
+   const focusBeforeDrag=focusCalls;
+   if(!touch('touchstart'))throw Error('Second press must suppress compatibility click');
+   equal(codes(),['0M','0m','0M']); // still held, no premature release
+   touch('touchmove',80,70);touch('touchend',80,70);
+   equal(codes(),['0M','0m','0M','32M','0m']);
+   equal(focusCalls,focusBeforeDrag);
+   sent.length=0;firstTap();touch('touchstart');touch('touchend');
+   equal(codes(),['0M','0m','0M','0m']); // ordinary double click
+   for(const cancel of [()=>touch('touchcancel'),()=>touch('touchstart',30,30,2),()=>window.dispatchEvent(new Event('blur')),()=>state.cancelTouchGesture()]){
+    sent.length=0;firstTap();touch('touchstart');cancel();touch('touchend');equal(codes(),['0M','0m','0M','0m']);
+   }
+   sent.length=0;firstTap();touch('touchstart');
+   touch('touchmove',-200,-200);touch('touchend',-200,-200);
+   equal(codes(),['0M','0m','0M','32M','0m']); // release outside grid still reaches application
+   sent.length=0;touch('touchstart');touch('touchmove',30,90);touch('touchend',30,90);
+   if(!codes().length||codes().some(x=>!x.startsWith('64')))throw Error('Single touch must remain scrolling: '+codes());
+   sent.length=0;touch('touchstart');touch('touchmove',30,90);touch('touchend',30,90);
+   if(codes().some(x=>x==='0M'))throw Error('Scroll must not arm double tap');
+   // Use precisely the existing image context-menu path, with its original location.
+   const node=document.createElement('div');node.style.zIndex='0';node.getBoundingClientRect=()=>({left:0,top:0,right:1000,bottom:1000});state.placements.set('image',node);
+   screen.dispatchEvent(new MouseEvent('contextmenu',{bubbles:true,cancelable:true,clientX:rect.left+30,clientY:rect.top+30,button:2}));
+   if(state.contextMenu.root.hidden)throw Error('Menu missing');
+   const focusBeforeRight=focusCalls;
+   sent.length=0;state.contextMenu.rightButton.click();equal(focusCalls,focusBeforeRight);equal(codes(),['2M','2m']);
+   if(!state.contextMenu.root.hidden||!state.placements.has('image'))throw Error('Right click must hide menu and preserve image');
+   await write('\\x1b[?1002l');state.cancelTouchGesture();sent.length=0;
+   firstTap();touch('touchstart');touch('touchmove',80,70);touch('touchend');
+   if(codes().some(x=>/^[032][Mm]$/.test(x)))throw Error('No application mouse reporting outside mouse mode');
+   state.cancelTouchGesture();state.placements.clear();
+   term.focus();const textarea=term.textarea;
+   screen.dispatchEvent(new MouseEvent('contextmenu',{bubbles:true,cancelable:true,clientX:rect.left+30,clientY:rect.top+30,button:2}));
+   if(document.activeElement!==textarea)throw Error('Context menu must keep textarea focused for native paste');
+   const data=new DataTransfer();data.setData('text/plain','paste-check');sent.length=0;
+   textarea.dispatchEvent(new ClipboardEvent('paste',{bubbles:true,cancelable:true,clipboardData:data}));
+   if(!sent.join('').includes('paste-check'))throw Error('Paste stopped working');
+   equal(getComputedStyle(textarea).touchAction,'none');
+   equal(getComputedStyle(screen).touchAction,'manipulation');
+   touch('touchstart');
+   if(document.activeElement!==textarea)throw Error('Touch must not blur the input');
+   touch('touchend');
+   wrapper.close();return 'ok';
+  })()`});
+  assert.equal(result.exceptionDetails,undefined,JSON.stringify(result.exceptionDetails));assert.equal(result.result.value,'ok');
+ }finally{
+  ws?.close();if(child.pid){try{process.kill(-child.pid,'SIGTERM');}catch{}}
+  server.closeAllConnections();await new Promise(r=>server.close(r));
+ }
+});

package/apps/jsgotty/tests/wheel-browser.test.js

@@ -0,0 +1,60 @@
+// Opt-in real bundled-xterm integration; no browser/dependency downloads.
+// CHROMIUM_HEADLESS=/path/to/chromium-headless-shell node --test tests/kitty-keyboard-browser.test.js
+const test=require('node:test');
+const assert=require('node:assert/strict');
+const fs=require('node:fs');
+const path=require('node:path');
+const http=require('node:http');
+const {spawn}=require('node:child_process');
+const {once}=require('node:events');
+const WebSocket=require('ws');
+const root=path.join(__dirname,'../static');
+test('shipped xterm reports horizontal, vertical and diagonal wheel events', {skip:!process.env.CHROMIUM_HEADLESS,timeout:60000},async()=>{
+ const bundle=fs.readFileSync(path.join(root,'js/gotty.js'),'utf8').replace('(i.nc = void 0));','(i.nc = void 0)); window.TestGoTTYXterm = i(634).GoTTYXterm;');
+ const server=http.createServer((req,res)=>{
+  if(req.url==='/bundle.js'){res.setHeader('Content-Type','text/javascript');res.end(bundle);}
+  else if(req.url==='/keyboard.js'){res.setHeader('Content-Type','text/javascript');res.end(fs.readFileSync(path.join(root,'js/kitty-keyboard.js')));}
+  else res.end('<!doctype html><div id="fixture" style="width:800px;height:600px"></div><script src="/keyboard.js"></script><script src="/bundle.js"></script><script>window.wrapper=new TestGoTTYXterm(document.getElementById("fixture"));window.sent=[];wrapper.onInput(b=>sent.push(new TextDecoder().decode(b)));wrapper.kittyKeyboard.android=true;</script>');
+ });
+ server.listen(0,'127.0.0.1');await once(server,'listening');
+ const child=spawn(process.env.CHROMIUM_HEADLESS,['--no-sandbox','--disable-gpu','--remote-debugging-port=0','http://127.0.0.1:'+server.address().port],{detached:true,stdio:['ignore','ignore','pipe']});
+ let ws;
+ try{
+  const endpoint=await new Promise((resolve,reject)=>{let log='';const timer=setTimeout(()=>reject(Error('Browser startup timeout: '+log)),15000);child.on('error',reject);child.on('exit',code=>{clearTimeout(timer);reject(Error('Browser exited '+code+': '+log));});child.stderr.on('data',b=>{log+=b;const m=log.match(/DevTools listening on (ws:\/\/[^\s]+)/);if(m){clearTimeout(timer);resolve(m[1]);}});});
+  const u=new URL(endpoint);let tab;
+  for(let i=0;i<50;i++){tab=(await (await fetch('http://'+u.host+'/json/list')).json()).find(x=>x.type==='page');if(tab)break;await new Promise(r=>setTimeout(r,100));}
+  ws=new WebSocket(tab.webSocketDebuggerUrl);await once(ws,'open');let id=0;const pending=new Map();ws.on('message',data=>{const m=JSON.parse(data);if(pending.has(m.id)){const {resolve,reject}=pending.get(m.id);pending.delete(m.id);m.error?reject(m.error):resolve(m.result);}});
+  const call=(method,params)=>new Promise((resolve,reject)=>{pending.set(++id,{resolve,reject});ws.send(JSON.stringify({id,method,params}));});
+  for(let i=0;i<50;i++){const r=await call('Runtime.evaluate',{expression:'Boolean(window.wrapper)',returnByValue:true});if(r.result.value)break;await new Promise(r=>setTimeout(r,100));}
+  const result=await call('Runtime.evaluate',{awaitPromise:true,returnByValue:true,expression:`(async()=>{
+   const term=wrapper.term;
+   const write=s=>new Promise(r=>term.write(s,r));
+   const equal=(a,b)=>{if(JSON.stringify(a)!==JSON.stringify(b))throw Error(JSON.stringify({actual:a,expected:b}));};
+   await write('\\x1b[?1002h\\x1b[?1006h');
+   const screen=term.element.querySelector('.xterm-screen'), rect=screen.getBoundingClientRect();
+   const wheel=(deltaX,deltaY,mods={})=>{
+    sent.length=0;
+    const event=new WheelEvent('wheel',{clientX:rect.left+20,clientY:rect.top+20,deltaX,deltaY,deltaMode:1,bubbles:true,cancelable:true,...mods});
+    screen.dispatchEvent(event);
+    if(term._core.coreMouseService.areMouseEventsActive&&!event.defaultPrevented)throw Error('Wheel default was not prevented');
+    return sent.map(s=>Number(s.match(/<([0-9]+);/)[1]));
+   };
+   equal(wheel(-1,0),[66]);equal(wheel(1,0),[67]);
+   equal(wheel(0,-1,{shiftKey:true}),[68]);equal(wheel(0,1,{shiftKey:true}),[69]);
+   equal(wheel(0,-1),[64]);equal(wheel(0,1),[65]);
+   equal(wheel(1,-1),[67,64]);
+   equal(wheel(-1,0,{shiftKey:true,altKey:true,ctrlKey:true}),[94]);
+   for(let bits=0;bits<8;bits++) {
+    const mods={shiftKey:!!(bits&1),altKey:!!(bits&2),ctrlKey:!!(bits&4)};
+    for(const [dx,dy,code] of [[0,-1,64],[0,1,65],[-1,0,66],[1,0,67]])
+     equal(wheel(dx,dy,mods),[code+(bits<<2)]);
+   }
+   await write('\\x1b[?1002l');equal(wheel(1,0),[]);
+   wrapper.close();return 'ok';
+  })()`});
+  assert.equal(result.exceptionDetails,undefined,JSON.stringify(result.exceptionDetails));assert.equal(result.result.value,'ok');
+ }finally{
+  ws?.close();if(child.pid){try{process.kill(-child.pid,'SIGTERM');}catch{}}
+  server.closeAllConnections();await new Promise(r=>server.close(r));
+ }
+});

package/apps/jsmdcui/CHANGELOG.md

@@ -2,6 +2,50 @@
 
 All notable user-visible changes to jsmdcui are documented here.
 
+## [0.19.4] - 2026-10-26
+
+### Fixed
+
+- Catch failures during Go regexp conversion as well as compilation, and
+  bound the converter's nested-group recursion. An excessively nested rule
+  is disabled individually instead of throwing from `SyntaxDefinition` or
+  causing the loader to silently discard the entire syntax definition.
+  Other rules remain usable; this does not limit input line length.
+
+## [0.19.3] - 2026-10-26
+
+### Fixed
+
+- Restore Dockerfile highlighting and improve compatibility with Micro's
+  syntax definitions by translating Go regular-expression flags and POSIX
+  character classes into JavaScript equivalents. Scoped flags retain their
+  scope rather than changing the entire expression.
+- Fix nested highlighting regions, especially HTML and XML attributes:
+  closing a quoted attribute now returns to the surrounding tag, and closing
+  the tag returns to normal text. Unfinished attributes still carry their
+  highlighting state across lines.
+- Replace recursive region scanning with an iterative scanner so long,
+  minified lines can be highlighted through their final token without stack
+  exhaustion or truncation.
+- Prevent zero-width region cycles and cyclic syntax/state trees from looping
+  indefinitely. Zero-width matches advance safely over Unicode characters,
+  and NUL characters or isolated surrogate units do not leak region state.
+  These guards do not impose a timeout on an individual JavaScript RegExp.
+
+### Added
+
+- Add syntax samples and a reproducible comparison against Micro's Go
+  highlighter, including JavaScript, Python and Markdown with upstream syntax
+  definitions. See [the comparison guide](tests/syntax-parity/README.md) for
+  generating the HTML comparison locally; generated HTML is not bundled.
+
+### Changed
+
+- Markdown heading tests detect Bun's actual raw-HTML parsing behavior instead
+  of relying on version checks, accommodating the slash-tag behavior change
+  while preserving fail-closed coverage. The heading suites were verified on
+  Bun 1.4.0 through 1.4.4.
+
 ## [0.19.2] - 2026-09-21
 
 ### Added

package/apps/jsmdcui/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jsmdcui",
-  "version": "0.19.2",
+  "version": "0.19.4",
   "description": "Markdown as a Common UI for Terminals and Web Browsers",
   "type": "module",
   "main": "./src/index.js",