featuredrop 1.4.0 → 2.1.0

package/dist/markdown.cjs

@@ -0,0 +1,257 @@
+'use strict';
+
+var moduleApi = require('module');
+
+var _documentCurrentScript = typeof document !== 'undefined' ? document.currentScript : null;
+function _interopNamespace(e) {
+  if (e && e.__esModule) return e;
+  var n = Object.create(null);
+  if (e) {
+    Object.keys(e).forEach(function (k) {
+      if (k !== 'default') {
+        var d = Object.getOwnPropertyDescriptor(e, k);
+        Object.defineProperty(n, k, d.get ? d : {
+          enumerable: true,
+          get: function () { return e[k]; }
+        });
+      }
+    });
+  }
+  n.default = e;
+  return Object.freeze(n);
+}
+
+var moduleApi__namespace = /*#__PURE__*/_interopNamespace(moduleApi);
+
+// src/markdown.ts
+var dynamicRequire = typeof moduleApi__namespace.createRequire === "function" ? moduleApi__namespace.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('markdown.cjs', document.baseURI).href))) : null;
+var cachedMarked = null;
+var cachedShiki = null;
+function optionalRequire(name) {
+  if (!dynamicRequire) return null;
+  try {
+    return dynamicRequire(name);
+  } catch (error) {
+    if (error && typeof error === "object" && "code" in error && error.code === "MODULE_NOT_FOUND") {
+      return null;
+    }
+    return null;
+  }
+}
+function getMarked() {
+  if (cachedMarked !== null) return cachedMarked || null;
+  cachedMarked = optionalRequire("marked") ?? false;
+  return cachedMarked || null;
+}
+function getShiki() {
+  if (cachedShiki !== null) return cachedShiki || null;
+  cachedShiki = optionalRequire("shiki") ?? false;
+  return cachedShiki || null;
+}
+function escapeHtml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+function sanitizeUrl(url) {
+  if (!url) return null;
+  const trimmed = url.trim();
+  if (!trimmed) return null;
+  const lower = trimmed.toLowerCase();
+  if (lower.startsWith("javascript:")) return null;
+  if (lower.startsWith("data:")) return null;
+  if (lower.startsWith("vbscript:")) return null;
+  if (/['"<>\s]/.test(trimmed)) return null;
+  return trimmed;
+}
+function sanitizeHtml(html) {
+  return html.replace(/<script[\s\S]*?>[\s\S]*?<\/script>/gi, "").replace(/<style[\s\S]*?>[\s\S]*?<\/style>/gi, "").replace(/\s+on[a-z]+\s*=\s*("[^"]*"|'[^']*'|[^\s>]+)/gi, "").replace(/\s+(?:href|src|xlink:href)\s*=\s*("|')(?:javascript:|data:)[^"']*\1/gi, "");
+}
+function decodeAllowedEntities(html) {
+  const allowTags = [
+    "p",
+    "strong",
+    "em",
+    "a",
+    "code",
+    "pre",
+    "img",
+    "ul",
+    "ol",
+    "li",
+    "blockquote",
+    "h1",
+    "h2",
+    "h3",
+    "h4",
+    "h5",
+    "h6",
+    "br"
+  ];
+  return html.replace(/&lt;(\/?)([a-z0-9]+)([^>]*)&gt;/gi, (match, slash, tag, rest) => {
+    if (!allowTags.includes(tag.toLowerCase())) return match;
+    const decodedRest = rest.replace(/&quot;/g, '"').replace(/&#39;/g, "'").replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">");
+    return `<${slash}${tag}${decodedRest}>`;
+  });
+}
+function renderCodeBlock(code, language) {
+  const shiki = getShiki();
+  if (shiki?.codeToHtml) {
+    try {
+      const rendered = shiki.codeToHtml(code, { lang: language || "text", theme: "github-dark" });
+      if (typeof rendered === "string") return rendered;
+    } catch {
+    }
+  }
+  const langAttr = language ? ` class="language-${escapeHtml(language)}"` : "";
+  return `<pre><code${langAttr}>${escapeHtml(code)}</code></pre>`;
+}
+function inlineMarkdown(text) {
+  let result = escapeHtml(text);
+  const codeSpans = [];
+  result = result.replace(/`([^`]+)`/g, (_match, code) => {
+    const idx = codeSpans.length;
+    codeSpans.push(`<code>${escapeHtml(code)}</code>`);
+    return `\xA7\xA7CODE${idx}\xA7\xA7`;
+  });
+  result = result.replace(/!\[([^\]]*)\]\(([^)]+)\)/g, (_match, alt, url) => {
+    const safeUrl = sanitizeUrl(url);
+    const safeAlt = escapeHtml(alt ?? "");
+    if (!safeUrl) return safeAlt;
+    return `<img src="${escapeHtml(safeUrl)}" alt="${safeAlt}" />`;
+  });
+  result = result.replace(/\[([^\]]+)\]\(([^)]+)\)/g, (_match, label, url) => {
+    const safeUrl = sanitizeUrl(url);
+    const safeLabel = escapeHtml(label ?? "");
+    if (!safeUrl) return safeLabel;
+    return `<a href="${escapeHtml(safeUrl)}" target="_blank" rel="noopener noreferrer">${safeLabel}</a>`;
+  });
+  result = result.replace(/\*\*([^*]+)\*\*/g, "<strong>$1</strong>");
+  result = result.replace(/\*([^*]+)\*/g, "<em>$1</em>");
+  result = result.replace(/§§CODE(\d+)§§/g, (_m, idx) => codeSpans[Number(idx)] ?? "");
+  return result;
+}
+function fallbackParse(markdown) {
+  const lines = markdown.split(/\r?\n/);
+  const blocks = [];
+  let listBuffer = null;
+  let quoteBuffer = null;
+  let inCodeBlock = false;
+  let codeLang;
+  let codeLines = [];
+  const flushList = () => {
+    if (!listBuffer) return;
+    blocks.push(`<ul>${listBuffer.map((item) => `<li>${item}</li>`).join("")}</ul>`);
+    listBuffer = null;
+  };
+  const flushQuote = () => {
+    if (!quoteBuffer) return;
+    const content = quoteBuffer.map((line) => inlineMarkdown(line.trim())).join("<br>");
+    blocks.push(`<blockquote>${content}</blockquote>`);
+    quoteBuffer = null;
+  };
+  const flushCode = () => {
+    if (!inCodeBlock) return;
+    blocks.push(renderCodeBlock(codeLines.join("\n"), codeLang));
+    codeLines = [];
+    codeLang = void 0;
+    inCodeBlock = false;
+  };
+  for (const rawLine of lines) {
+    const line = rawLine.replace(/\s+$/, "");
+    const codeFence = line.match(/^```(.*)$/);
+    if (codeFence) {
+      if (inCodeBlock) {
+        flushCode();
+      } else {
+        flushList();
+        flushQuote();
+        inCodeBlock = true;
+        codeLang = codeFence[1]?.trim() || void 0;
+        codeLines = [];
+      }
+      continue;
+    }
+    if (inCodeBlock) {
+      codeLines.push(rawLine);
+      continue;
+    }
+    const listMatch = line.match(/^\s*[-*+]\s+(.*)$/);
+    if (listMatch) {
+      flushQuote();
+      listBuffer = listBuffer ?? [];
+      listBuffer.push(inlineMarkdown(listMatch[1].trim()));
+      continue;
+    }
+    if (listBuffer) flushList();
+    const headingMatch = line.match(/^(#{1,6})\s+(.*)$/);
+    if (headingMatch) {
+      flushQuote();
+      const level = headingMatch[1].length;
+      const content = inlineMarkdown(headingMatch[2].trim());
+      blocks.push(`<h${level}>${content}</h${level}>`);
+      continue;
+    }
+    const quoteMatch = line.match(/^>\s?(.*)$/);
+    if (quoteMatch) {
+      quoteBuffer = quoteBuffer ?? [];
+      quoteBuffer.push(quoteMatch[1]);
+      continue;
+    }
+    if (quoteBuffer) flushQuote();
+    if (!line.trim()) {
+      continue;
+    }
+    blocks.push(`<p>${inlineMarkdown(line.trim())}</p>`);
+  }
+  flushList();
+  flushQuote();
+  flushCode();
+  return blocks.join("\n");
+}
+function renderWithMarked(markdown, marked) {
+  if (!marked.parse) return null;
+  const renderer = marked.Renderer ? new marked.Renderer() : void 0;
+  if (renderer) {
+    renderer.link = (href, _title, text) => {
+      const safeUrl = sanitizeUrl(href);
+      if (!safeUrl) return escapeHtml(text);
+      return `<a href="${escapeHtml(safeUrl)}" target="_blank" rel="noopener noreferrer">${text}</a>`;
+    };
+    renderer.image = (href, _title, text) => {
+      const safeUrl = sanitizeUrl(href);
+      const safeAlt = escapeHtml(text ?? "");
+      if (!safeUrl) return safeAlt;
+      return `<img src="${escapeHtml(safeUrl)}" alt="${safeAlt}" />`;
+    };
+  }
+  const output = marked.parse(markdown, renderer ? { renderer } : void 0);
+  if (typeof output === "string") return output;
+  return output ? String(output) : null;
+}
+function parseDescription(markdown) {
+  if (!markdown) return "";
+  const marked = getMarked();
+  if (marked) {
+    try {
+      const rendered = renderWithMarked(markdown, marked);
+      if (rendered) {
+        const sanitized2 = sanitizeHtml(rendered);
+        const decoded2 = decodeAllowedEntities(sanitized2);
+        return sanitizeHtml(decoded2);
+      }
+    } catch {
+    }
+  }
+  if (/<[^>]+>/.test(markdown)) {
+    const sanitized2 = sanitizeHtml(markdown);
+    const decoded2 = decodeAllowedEntities(sanitized2);
+    return sanitizeHtml(decoded2);
+  }
+  const fallback = fallbackParse(markdown);
+  const sanitized = sanitizeHtml(fallback);
+  const decoded = decodeAllowedEntities(sanitized);
+  return sanitizeHtml(decoded);
+}
+
+exports.parseDescription = parseDescription;
+//# sourceMappingURL=markdown.cjs.map
+//# sourceMappingURL=markdown.cjs.map

package/dist/markdown.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/markdown.ts"],"names":["moduleApi","sanitized","decoded"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAqBA,IAAM,iBACJ,OAAiBA,oBAAA,CAAA,aAAA,KAAkB,aAAuBA,oBAAA,CAAA,aAAA,CAAc,8PAAe,CAAA,GAAI,IAAA;AAE7F,IAAI,YAAA,GAA4C,IAAA;AAChD,IAAI,WAAA,GAAwC,IAAA;AAE5C,SAAS,gBAAmB,IAAA,EAAwB;AAClD,EAAA,IAAI,CAAC,gBAAgB,OAAO,IAAA;AAC5B,EAAA,IAAI;AAEF,IAAA,OAAO,eAAe,IAAI,CAAA;AAAA,EAC5B,SAAS,KAAA,EAAgB;AACvB,IAAA,IAAI,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,IAAY,UAAU,KAAA,IAAU,KAAA,CAA4B,SAAS,kBAAA,EAAoB;AACrH,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEA,SAAS,SAAA,GAAiC;AACxC,EAAA,IAAI,YAAA,KAAiB,IAAA,EAAM,OAAO,YAAA,IAAgB,IAAA;AAClD,EAAA,YAAA,GAAe,eAAA,CAA8B,QAAQ,CAAA,IAAK,KAAA;AAC1D,EAAA,OAAO,YAAA,IAAgB,IAAA;AACzB;AAEA,SAAS,QAAA,GAA6B;AACpC,EAAA,IAAI,WAAA,KAAgB,IAAA,EAAM,OAAO,WAAA,IAAe,IAAA;AAChD,EAAA,WAAA,GAAc,eAAA,CAA2B,OAAO,CAAA,IAAK,KAAA;AACrD,EAAA,OAAO,WAAA,IAAe,IAAA;AACxB;AAEA,SAAS,WAAW,KAAA,EAAuB;AACzC,EAAA,OAAO,MACJ,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAA,CACrB,OAAA,CAAQ,MAAM,MAAM,CAAA,CACpB,QAAQ,IAAA,EAAM,MAAM,EACpB,OAAA,CAAQ,IAAA,EAAM,QAAQ,CAAA,CACtB,OAAA,CAAQ,MAAM,OAAO,CAAA;AAC1B;AAEA,SAAS,YAAY,GAAA,EAA+C;AAClE,EAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,EAAA,MAAM,OAAA,GAAU,IAAI,IAAA,EAAK;AACzB,EAAA,IAAI,CAAC,SAAS,OAAO,IAAA;AAErB,EAAA,MAAM,KAAA,GAAQ,QAAQ,WAAA,EAAY;AAClC,EAAA,IAAI,KAAA,CAAM,UAAA,CAAW,aAAa,CAAA,EAAG,OAAO,IAAA;AAC5C,EAAA,IAAI,KAAA,CAAM,UAAA,CAAW,OAAO,CAAA,EAAG,OAAO,IAAA;AACtC,EAAA,IAAI,KAAA,CAAM,UAAA,CAAW,WAAW,CAAA,EAAG,OAAO,IAAA;AAG1C,EAAA,IAAI,UAAA,CAAW,IAAA,CAAK,OAAO,CAAA,EAAG,OAAO,IAAA;AAErC,EAAA,OAAO,OAAA;AACT;AAEA,SAAS,aAAa,IAAA,EAAsB;AAC1C,EAAA,OAAO,IAAA,CAEJ,OAAA,CAAQ,sCAAA,EAAwC,EAAE,EAClD,OAAA,CAAQ,oCAAA,EAAsC,EAAE,CAAA,CAEhD,QAAQ,+CAAA,EAAiD,EAAE,CAAA,CAE3D,OAAA,CAAQ,yEAAyE,EAAE,CAAA;AACxF;AAEA,SAAS,sBAAsB,IAAA,EAAsB;AACnD,EAAA,MAAM,SAAA,GAAY;AAAA,IAChB,GAAA;AAAA,IACA,QAAA;AAAA,IACA,IAAA;AAAA,IACA,GAAA;AAAA,IACA,MAAA;AAAA,IACA,KAAA;AAAA,IACA,KAAA;AAAA,IACA,IAAA;AAAA,IACA,IAAA;AAAA,IACA,IAAA;AAAA,IACA,YAAA;AAAA,IACA,IAAA;AAAA,IACA,IAAA;AAAA,IACA,IAAA;AAAA,IACA,IAAA;AAAA,IACA,IAAA;AAAA,IACA,IAAA;AAAA,IACA;AAAA,GACF;AAGA,EAAA,OAAO,KAAK,OAAA,CAAQ,mCAAA,EAAqC,CAAC,KAAA,EAAO,KAAA,EAAO,KAAK,IAAA,KAAS;AACpF,IAAA,IAAI,CAAC,SAAA,CAAU,QAAA,CAAS,IAAI,WAAA,EAAa,GAAG,OAAO,KAAA;AACnD,IAAA,MAAM,WAAA,GAAc,KACjB,OAAA,CAAQ,SAAA,EAAW,GAAG,CAAA,CACtB,OAAA,CAAQ,UAAU,GAAG,CAAA,CACrB,QAAQ,QAAA,EAAU,GAAG,EACrB,OAAA,CAAQ,OAAA,EAAS,GAAG,CAAA,CACpB,OAAA,CAAQ,SAAS,GAAG,CAAA;AACvB,IAAA,OAAO,CAAA,CAAA,EAAI,KAAK,CAAA,EAAG,GAAG,GAAG,WAAW,CAAA,CAAA,CAAA;AAAA,EACtC,CAAC,CAAA;AACH;AAEA,SAAS,eAAA,CAAgB,MAAc,QAAA,EAAsC;AAC3E,EAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,EAAA,IAAI,OAAO,UAAA,EAAY;AACrB,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,KAAA,CAAM,UAAA,CAAW,IAAA,EAAM,EAAE,MAAM,QAAA,IAAY,MAAA,EAAQ,KAAA,EAAO,aAAA,EAAe,CAAA;AAC1F,MAAA,IAAI,OAAO,QAAA,KAAa,QAAA,EAAU,OAAO,QAAA;AAAA,IAC3C,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAEA,EAAA,MAAM,WAAW,QAAA,GAAW,CAAA,iBAAA,EAAoB,UAAA,CAAW,QAAQ,CAAC,CAAA,CAAA,CAAA,GAAM,EAAA;AAC1E,EAAA,OAAO,CAAA,UAAA,EAAa,QAAQ,CAAA,CAAA,EAAI,UAAA,CAAW,IAAI,CAAC,CAAA,aAAA,CAAA;AAClD;AAEA,SAAS,eAAe,IAAA,EAAsB;AAE5C,EAAA,IAAI,MAAA,GAAS,WAAW,IAAI,CAAA;AAG5B,EAAA,MAAM,YAAsB,EAAC;AAC7B,EAAA,MAAA,GAAS,MAAA,CAAO,OAAA,CAAQ,YAAA,EAAc,CAAC,QAAQ,IAAA,KAAS;AACtD,IAAA,MAAM,MAAM,SAAA,CAAU,MAAA;AACtB,IAAA,SAAA,CAAU,IAAA,CAAK,CAAA,MAAA,EAAS,UAAA,CAAW,IAAI,CAAC,CAAA,OAAA,CAAS,CAAA;AACjD,IAAA,OAAO,eAAS,GAAG,CAAA,QAAA,CAAA;AAAA,EACrB,CAAC,CAAA;AAGD,EAAA,MAAA,GAAS,OAAO,OAAA,CAAQ,2BAAA,EAA6B,CAAC,MAAA,EAAQ,KAAK,GAAA,KAAQ;AACzE,IAAA,MAAM,OAAA,GAAU,YAAY,GAAG,CAAA;AAC/B,IAAA,MAAM,OAAA,GAAU,UAAA,CAAW,GAAA,IAAO,EAAE,CAAA;AACpC,IAAA,IAAI,CAAC,SAAS,OAAO,OAAA;AACrB,IAAA,OAAO,CAAA,UAAA,EAAa,UAAA,CAAW,OAAO,CAAC,UAAU,OAAO,CAAA,IAAA,CAAA;AAAA,EAC1D,CAAC,CAAA;AAGD,EAAA,MAAA,GAAS,OAAO,OAAA,CAAQ,0BAAA,EAA4B,CAAC,MAAA,EAAQ,OAAO,GAAA,KAAQ;AAC1E,IAAA,MAAM,OAAA,GAAU,YAAY,GAAG,CAAA;AAC/B,IAAA,MAAM,SAAA,GAAY,UAAA,CAAW,KAAA,IAAS,EAAE,CAAA;AACxC,IAAA,IAAI,CAAC,SAAS,OAAO,SAAA;AACrB,IAAA,OAAO,CAAA,SAAA,EAAY,UAAA,CAAW,OAAO,CAAC,+CAA+C,SAAS,CAAA,IAAA,CAAA;AAAA,EAChG,CAAC,CAAA;AAGD,EAAA,MAAA,GAAS,MAAA,CAAO,OAAA,CAAQ,kBAAA,EAAoB,qBAAqB,CAAA;AACjE,EAAA,MAAA,GAAS,MAAA,CAAO,OAAA,CAAQ,cAAA,EAAgB,aAAa,CAAA;AAGrD,EAAA,MAAA,GAAS,MAAA,CAAO,OAAA,CAAQ,gBAAA,EAAkB,CAAC,EAAA,EAAI,GAAA,KAAQ,SAAA,CAAU,MAAA,CAAO,GAAG,CAAC,CAAA,IAAK,EAAE,CAAA;AAEnF,EAAA,OAAO,MAAA;AACT;AAEA,SAAS,cAAc,QAAA,EAA0B;AAC/C,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,OAAO,CAAA;AACpC,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,IAAI,UAAA,GAA8B,IAAA;AAClC,EAAA,IAAI,WAAA,GAA+B,IAAA;AACnC,EAAA,IAAI,WAAA,GAAc,KAAA;AAClB,EAAA,IAAI,QAAA;AACJ,EAAA,IAAI,YAAsB,EAAC;AAE3B,EAAA,MAAM,YAAY,MAAM;AACtB,IAAA,IAAI,CAAC,UAAA,EAAY;AACjB,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,IAAA,EAAO,UAAA,CAAW,GAAA,CAAI,CAAC,IAAA,KAAS,CAAA,IAAA,EAAO,IAAI,CAAA,KAAA,CAAO,CAAA,CAAE,IAAA,CAAK,EAAE,CAAC,CAAA,KAAA,CAAO,CAAA;AAC/E,IAAA,UAAA,GAAa,IAAA;AAAA,EACf,CAAA;AAEA,EAAA,MAAM,aAAa,MAAM;AACvB,IAAA,IAAI,CAAC,WAAA,EAAa;AAClB,IAAA,MAAM,OAAA,GAAU,WAAA,CAAY,GAAA,CAAI,CAAC,IAAA,KAAS,cAAA,CAAe,IAAA,CAAK,IAAA,EAAM,CAAC,CAAA,CAAE,IAAA,CAAK,MAAM,CAAA;AAClF,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,YAAA,EAAe,OAAO,CAAA,aAAA,CAAe,CAAA;AACjD,IAAA,WAAA,GAAc,IAAA;AAAA,EAChB,CAAA;AAEA,EAAA,MAAM,YAAY,MAAM;AACtB,IAAA,IAAI,CAAC,WAAA,EAAa;AAClB,IAAA,MAAA,CAAO,KAAK,eAAA,CAAgB,SAAA,CAAU,KAAK,IAAI,CAAA,EAAG,QAAQ,CAAC,CAAA;AAC3D,IAAA,SAAA,GAAY,EAAC;AACb,IAAA,QAAA,GAAW,MAAA;AACX,IAAA,WAAA,GAAc,KAAA;AAAA,EAChB,CAAA;AAEA,EAAA,KAAA,MAAW,WAAW,KAAA,EAAO;AAC3B,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAEvC,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,KAAA,CAAM,WAAW,CAAA;AACxC,IAAA,IAAI,SAAA,EAAW;AACb,MAAA,IAAI,WAAA,EAAa;AACf,QAAA,SAAA,EAAU;AAAA,MACZ,CAAA,MAAO;AACL,QAAA,SAAA,EAAU;AACV,QAAA,UAAA,EAAW;AACX,QAAA,WAAA,GAAc,IAAA;AACd,QAAA,QAAA,GAAW,SAAA,CAAU,CAAC,CAAA,EAAG,IAAA,EAAK,IAAK,MAAA;AACnC,QAAA,SAAA,GAAY,EAAC;AAAA,MACf;AACA,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,SAAA,CAAU,KAAK,OAAO,CAAA;AACtB,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,KAAA,CAAM,mBAAmB,CAAA;AAChD,IAAA,IAAI,SAAA,EAAW;AACb,MAAA,UAAA,EAAW;AACX,MAAA,UAAA,GAAa,cAAc,EAAC;AAC5B,MAAA,UAAA,CAAW,KAAK,cAAA,CAAe,SAAA,CAAU,CAAC,CAAA,CAAE,IAAA,EAAM,CAAC,CAAA;AACnD,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,YAAY,SAAA,EAAU;AAE1B,IAAA,MAAM,YAAA,GAAe,IAAA,CAAK,KAAA,CAAM,mBAAmB,CAAA;AACnD,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,UAAA,EAAW;AACX,MAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,CAAC,CAAA,CAAE,MAAA;AAC9B,MAAA,MAAM,UAAU,cAAA,CAAe,YAAA,CAAa,CAAC,CAAA,CAAE,MAAM,CAAA;AACrD,MAAA,MAAA,CAAO,KAAK,CAAA,EAAA,EAAK,KAAK,IAAI,OAAO,CAAA,GAAA,EAAM,KAAK,CAAA,CAAA,CAAG,CAAA;AAC/C,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,KAAA,CAAM,YAAY,CAAA;AAC1C,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,WAAA,GAAc,eAAe,EAAC;AAC9B,MAAA,WAAA,CAAY,IAAA,CAAK,UAAA,CAAW,CAAC,CAAC,CAAA;AAC9B,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,aAAa,UAAA,EAAW;AAE5B,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAK,EAAG;AAChB,MAAA;AAAA,IACF;AAEA,IAAA,MAAA,CAAO,KAAK,CAAA,GAAA,EAAM,cAAA,CAAe,KAAK,IAAA,EAAM,CAAC,CAAA,IAAA,CAAM,CAAA;AAAA,EACrD;AAEA,EAAA,SAAA,EAAU;AACV,EAAA,UAAA,EAAW;AACX,EAAA,SAAA,EAAU;AAEV,EAAA,OAAO,MAAA,CAAO,KAAK,IAAI,CAAA;AACzB;AAEA,SAAS,gBAAA,CAAiB,UAAkB,MAAA,EAAqC;AAC/E,EAAA,IAAI,CAAC,MAAA,CAAO,KAAA,EAAO,OAAO,IAAA;AAE1B,EAAA,MAAM,WAAW,MAAA,CAAO,QAAA,GAAW,IAAI,MAAA,CAAO,UAAS,GAAI,MAAA;AAE3D,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,QAAA,CAAS,IAAA,GAAO,CAAC,IAAA,EAAM,MAAA,EAAQ,IAAA,KAAS;AACtC,MAAA,MAAM,OAAA,GAAU,YAAY,IAAI,CAAA;AAChC,MAAA,IAAI,CAAC,OAAA,EAAS,OAAO,UAAA,CAAW,IAAI,CAAA;AACpC,MAAA,OAAO,CAAA,SAAA,EAAY,UAAA,CAAW,OAAO,CAAC,+CAA+C,IAAI,CAAA,IAAA,CAAA;AAAA,IAC3F,CAAA;AACA,IAAA,QAAA,CAAS,KAAA,GAAQ,CAAC,IAAA,EAAM,MAAA,EAAQ,IAAA,KAAS;AACvC,MAAA,MAAM,OAAA,GAAU,YAAY,IAAI,CAAA;AAChC,MAAA,MAAM,OAAA,GAAU,UAAA,CAAW,IAAA,IAAQ,EAAE,CAAA;AACrC,MAAA,IAAI,CAAC,SAAS,OAAO,OAAA;AACrB,MAAA,OAAO,CAAA,UAAA,EAAa,UAAA,CAAW,OAAO,CAAC,UAAU,OAAO,CAAA,IAAA,CAAA;AAAA,IAC1D,CAAA;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,GAAS,OAAO,KAAA,CAAM,QAAA,EAAU,WAAW,EAAE,QAAA,KAAa,MAAS,CAAA;AACzE,EAAA,IAAI,OAAO,MAAA,KAAW,QAAA,EAAU,OAAO,MAAA;AACvC,EAAA,OAAO,MAAA,GAAS,MAAA,CAAO,MAAM,CAAA,GAAI,IAAA;AACnC;AAQO,SAAS,iBAAiB,QAAA,EAA0B;AACzD,EAAA,IAAI,CAAC,UAAU,OAAO,EAAA;AAEtB,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,gBAAA,CAAiB,QAAA,EAAU,MAAM,CAAA;AAClD,MAAA,IAAI,QAAA,EAAU;AACZ,QAAA,MAAMC,UAAAA,GAAY,aAAa,QAAQ,CAAA;AACvC,QAAA,MAAMC,QAAAA,GAAU,sBAAsBD,UAAS,CAAA;AAC/C,QAAA,OAAO,aAAaC,QAAO,CAAA;AAAA,MAC7B;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAGA,EAAA,IAAI,SAAA,CAAU,IAAA,CAAK,QAAQ,CAAA,EAAG;AAC5B,IAAA,MAAMD,UAAAA,GAAY,aAAa,QAAQ,CAAA;AACvC,IAAA,MAAMC,QAAAA,GAAU,sBAAsBD,UAAS,CAAA;AAC/C,IAAA,OAAO,aAAaC,QAAO,CAAA;AAAA,EAC7B;AAEA,EAAA,MAAM,QAAA,GAAW,cAAc,QAAQ,CAAA;AACvC,EAAA,MAAM,SAAA,GAAY,aAAa,QAAQ,CAAA;AACvC,EAAA,MAAM,OAAA,GAAU,sBAAsB,SAAS,CAAA;AAC/C,EAAA,OAAO,aAAa,OAAO,CAAA;AAC7B","file":"markdown.cjs","sourcesContent":["import * as moduleApi from \"module\";\n\n// Lightweight markdown parser with optional `marked` + `shiki` support.\n// The function is synchronous and always returns sanitized HTML.\n\ntype MarkedRenderer = {\n  link?: (href: string | null, title: string | null, text: string) => string;\n  image?: (href: string | null, title: string | null, text: string) => string;\n  paragraph?: (text: string) => string;\n  heading?: (text: string, level: number) => string;\n};\n\ntype MarkedModule = {\n  Renderer?: new () => MarkedRenderer;\n  parse?: (markdown: string, options?: { renderer?: MarkedRenderer }) => string | Promise<string>;\n};\n\ntype ShikiLike = {\n  codeToHtml?: (code: string, options?: { lang?: string; theme?: string }) => string | Promise<string>;\n};\n\nconst dynamicRequire =\n  typeof moduleApi.createRequire === \"function\" ? moduleApi.createRequire(import.meta.url) : null;\n\nlet cachedMarked: MarkedModule | null | false = null;\nlet cachedShiki: ShikiLike | null | false = null;\n\nfunction optionalRequire<T>(name: string): T | null {\n  if (!dynamicRequire) return null;\n  try {\n    // Using dynamic require so missing optional peers don't break bundling/runtime.\n    return dynamicRequire(name) as T;\n  } catch (error: unknown) {\n    if (error && typeof error === \"object\" && \"code\" in error && (error as { code?: string }).code === \"MODULE_NOT_FOUND\") {\n      return null;\n    }\n    // Any other error should still be treated as a failure to keep parsing resilient.\n    return null;\n  }\n}\n\nfunction getMarked(): MarkedModule | null {\n  if (cachedMarked !== null) return cachedMarked || null;\n  cachedMarked = optionalRequire<MarkedModule>(\"marked\") ?? false;\n  return cachedMarked || null;\n}\n\nfunction getShiki(): ShikiLike | null {\n  if (cachedShiki !== null) return cachedShiki || null;\n  cachedShiki = optionalRequire<ShikiLike>(\"shiki\") ?? false;\n  return cachedShiki || null;\n}\n\nfunction escapeHtml(value: string): string {\n  return value\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&#39;\");\n}\n\nfunction sanitizeUrl(url: string | null | undefined): string | null {\n  if (!url) return null;\n  const trimmed = url.trim();\n  if (!trimmed) return null;\n\n  const lower = trimmed.toLowerCase();\n  if (lower.startsWith(\"javascript:\")) return null;\n  if (lower.startsWith(\"data:\")) return null;\n  if (lower.startsWith(\"vbscript:\")) return null;\n\n  // Disallow characters that can break attribute context\n  if (/['\"<>\\s]/.test(trimmed)) return null;\n\n  return trimmed;\n}\n\nfunction sanitizeHtml(html: string): string {\n  return html\n    // Remove script/style tags entirely\n    .replace(/<script[\\s\\S]*?>[\\s\\S]*?<\\/script>/gi, \"\")\n    .replace(/<style[\\s\\S]*?>[\\s\\S]*?<\\/style>/gi, \"\")\n    // Remove inline event handlers (on*)\n    .replace(/\\s+on[a-z]+\\s*=\\s*(\"[^\"]*\"|'[^']*'|[^\\s>]+)/gi, \"\")\n    // Remove javascript: or data: URLs in href/src/xlink:href\n    .replace(/\\s+(?:href|src|xlink:href)\\s*=\\s*(\"|')(?:javascript:|data:)[^\"']*\\1/gi, \"\");\n}\n\nfunction decodeAllowedEntities(html: string): string {\n  const allowTags = [\n    \"p\",\n    \"strong\",\n    \"em\",\n    \"a\",\n    \"code\",\n    \"pre\",\n    \"img\",\n    \"ul\",\n    \"ol\",\n    \"li\",\n    \"blockquote\",\n    \"h1\",\n    \"h2\",\n    \"h3\",\n    \"h4\",\n    \"h5\",\n    \"h6\",\n    \"br\",\n  ];\n\n  // Decode common entities inside allowed tags only\n  return html.replace(/&lt;(\\/?)([a-z0-9]+)([^>]*)&gt;/gi, (match, slash, tag, rest) => {\n    if (!allowTags.includes(tag.toLowerCase())) return match;\n    const decodedRest = rest\n      .replace(/&quot;/g, '\"')\n      .replace(/&#39;/g, \"'\")\n      .replace(/&amp;/g, \"&\")\n      .replace(/&lt;/g, \"<\")\n      .replace(/&gt;/g, \">\");\n    return `<${slash}${tag}${decodedRest}>`;\n  });\n}\n\nfunction renderCodeBlock(code: string, language: string | undefined): string {\n  const shiki = getShiki();\n  if (shiki?.codeToHtml) {\n    try {\n      const rendered = shiki.codeToHtml(code, { lang: language || \"text\", theme: \"github-dark\" });\n      if (typeof rendered === \"string\") return rendered;\n    } catch {\n      // Fall through to non-highlighted rendering\n    }\n  }\n\n  const langAttr = language ? ` class=\"language-${escapeHtml(language)}\"` : \"\";\n  return `<pre><code${langAttr}>${escapeHtml(code)}</code></pre>`;\n}\n\nfunction inlineMarkdown(text: string): string {\n  // Escape user-provided HTML before applying markdown conversions.\n  let result = escapeHtml(text);\n\n  // Protect inline code spans so subsequent replacements don't mangle them.\n  const codeSpans: string[] = [];\n  result = result.replace(/`([^`]+)`/g, (_match, code) => {\n    const idx = codeSpans.length;\n    codeSpans.push(`<code>${escapeHtml(code)}</code>`);\n    return `§§CODE${idx}§§`;\n  });\n\n  // Images: ![alt](url)\n  result = result.replace(/!\\[([^\\]]*)\\]\\(([^)]+)\\)/g, (_match, alt, url) => {\n    const safeUrl = sanitizeUrl(url);\n    const safeAlt = escapeHtml(alt ?? \"\");\n    if (!safeUrl) return safeAlt;\n    return `<img src=\"${escapeHtml(safeUrl)}\" alt=\"${safeAlt}\" />`;\n  });\n\n  // Links: [text](url)\n  result = result.replace(/\\[([^\\]]+)\\]\\(([^)]+)\\)/g, (_match, label, url) => {\n    const safeUrl = sanitizeUrl(url);\n    const safeLabel = escapeHtml(label ?? \"\");\n    if (!safeUrl) return safeLabel;\n    return `<a href=\"${escapeHtml(safeUrl)}\" target=\"_blank\" rel=\"noopener noreferrer\">${safeLabel}</a>`;\n  });\n\n  // Bold and italic (basic)\n  result = result.replace(/\\*\\*([^*]+)\\*\\*/g, \"<strong>$1</strong>\");\n  result = result.replace(/\\*([^*]+)\\*/g, \"<em>$1</em>\");\n\n  // Restore code spans\n  result = result.replace(/§§CODE(\\d+)§§/g, (_m, idx) => codeSpans[Number(idx)] ?? \"\");\n\n  return result;\n}\n\nfunction fallbackParse(markdown: string): string {\n  const lines = markdown.split(/\\r?\\n/);\n  const blocks: string[] = [];\n  let listBuffer: string[] | null = null;\n  let quoteBuffer: string[] | null = null;\n  let inCodeBlock = false;\n  let codeLang: string | undefined;\n  let codeLines: string[] = [];\n\n  const flushList = () => {\n    if (!listBuffer) return;\n    blocks.push(`<ul>${listBuffer.map((item) => `<li>${item}</li>`).join(\"\")}</ul>`);\n    listBuffer = null;\n  };\n\n  const flushQuote = () => {\n    if (!quoteBuffer) return;\n    const content = quoteBuffer.map((line) => inlineMarkdown(line.trim())).join(\"<br>\");\n    blocks.push(`<blockquote>${content}</blockquote>`);\n    quoteBuffer = null;\n  };\n\n  const flushCode = () => {\n    if (!inCodeBlock) return;\n    blocks.push(renderCodeBlock(codeLines.join(\"\\n\"), codeLang));\n    codeLines = [];\n    codeLang = undefined;\n    inCodeBlock = false;\n  };\n\n  for (const rawLine of lines) {\n    const line = rawLine.replace(/\\s+$/, \"\");\n\n    const codeFence = line.match(/^```(.*)$/);\n    if (codeFence) {\n      if (inCodeBlock) {\n        flushCode();\n      } else {\n        flushList();\n        flushQuote();\n        inCodeBlock = true;\n        codeLang = codeFence[1]?.trim() || undefined;\n        codeLines = [];\n      }\n      continue;\n    }\n\n    if (inCodeBlock) {\n      codeLines.push(rawLine);\n      continue;\n    }\n\n    const listMatch = line.match(/^\\s*[-*+]\\s+(.*)$/);\n    if (listMatch) {\n      flushQuote();\n      listBuffer = listBuffer ?? [];\n      listBuffer.push(inlineMarkdown(listMatch[1].trim()));\n      continue;\n    }\n\n    if (listBuffer) flushList();\n\n    const headingMatch = line.match(/^(#{1,6})\\s+(.*)$/);\n    if (headingMatch) {\n      flushQuote();\n      const level = headingMatch[1].length;\n      const content = inlineMarkdown(headingMatch[2].trim());\n      blocks.push(`<h${level}>${content}</h${level}>`);\n      continue;\n    }\n\n    const quoteMatch = line.match(/^>\\s?(.*)$/);\n    if (quoteMatch) {\n      quoteBuffer = quoteBuffer ?? [];\n      quoteBuffer.push(quoteMatch[1]);\n      continue;\n    }\n\n    if (quoteBuffer) flushQuote();\n\n    if (!line.trim()) {\n      continue;\n    }\n\n    blocks.push(`<p>${inlineMarkdown(line.trim())}</p>`);\n  }\n\n  flushList();\n  flushQuote();\n  flushCode();\n\n  return blocks.join(\"\\n\");\n}\n\nfunction renderWithMarked(markdown: string, marked: MarkedModule): string | null {\n  if (!marked.parse) return null;\n\n  const renderer = marked.Renderer ? new marked.Renderer() : undefined;\n\n  if (renderer) {\n    renderer.link = (href, _title, text) => {\n      const safeUrl = sanitizeUrl(href);\n      if (!safeUrl) return escapeHtml(text);\n      return `<a href=\"${escapeHtml(safeUrl)}\" target=\"_blank\" rel=\"noopener noreferrer\">${text}</a>`;\n    };\n    renderer.image = (href, _title, text) => {\n      const safeUrl = sanitizeUrl(href);\n      const safeAlt = escapeHtml(text ?? \"\");\n      if (!safeUrl) return safeAlt;\n      return `<img src=\"${escapeHtml(safeUrl)}\" alt=\"${safeAlt}\" />`;\n    };\n  }\n\n  const output = marked.parse(markdown, renderer ? { renderer } : undefined);\n  if (typeof output === \"string\") return output;\n  return output ? String(output) : null;\n}\n\n/**\n * Parse a feature description from markdown into sanitized HTML.\n * - Uses `marked` when installed (optional peer dep)\n * - Falls back to a tiny built-in parser when `marked` is absent\n * - Strips script tags, event handlers, and javascript:/data: URLs\n */\nexport function parseDescription(markdown: string): string {\n  if (!markdown) return \"\";\n\n  const marked = getMarked();\n  if (marked) {\n    try {\n      const rendered = renderWithMarked(markdown, marked);\n      if (rendered) {\n        const sanitized = sanitizeHtml(rendered);\n        const decoded = decodeAllowedEntities(sanitized);\n        return sanitizeHtml(decoded);\n      }\n    } catch {\n      // If marked fails for any reason, fall back to the tiny parser.\n    }\n  }\n\n  // Fast path: raw HTML provided without `marked` installed\n  if (/<[^>]+>/.test(markdown)) {\n    const sanitized = sanitizeHtml(markdown);\n    const decoded = decodeAllowedEntities(sanitized);\n    return sanitizeHtml(decoded);\n  }\n\n  const fallback = fallbackParse(markdown);\n  const sanitized = sanitizeHtml(fallback);\n  const decoded = decodeAllowedEntities(sanitized);\n  return sanitizeHtml(decoded);\n}\n"]}

package/dist/markdown.d.cts

@@ -0,0 +1,9 @@
+/**
+ * Parse a feature description from markdown into sanitized HTML.
+ * - Uses `marked` when installed (optional peer dep)
+ * - Falls back to a tiny built-in parser when `marked` is absent
+ * - Strips script tags, event handlers, and javascript:/data: URLs
+ */
+declare function parseDescription(markdown: string): string;
+
+export { parseDescription };

package/dist/markdown.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Parse a feature description from markdown into sanitized HTML.
+ * - Uses `marked` when installed (optional peer dep)
+ * - Falls back to a tiny built-in parser when `marked` is absent
+ * - Strips script tags, event handlers, and javascript:/data: URLs
+ */
+declare function parseDescription(markdown: string): string;
+
+export { parseDescription };

package/dist/markdown.js

@@ -0,0 +1,234 @@
+import * as moduleApi from 'module';
+
+// src/markdown.ts
+var dynamicRequire = typeof moduleApi.createRequire === "function" ? moduleApi.createRequire(import.meta.url) : null;
+var cachedMarked = null;
+var cachedShiki = null;
+function optionalRequire(name) {
+  if (!dynamicRequire) return null;
+  try {
+    return dynamicRequire(name);
+  } catch (error) {
+    if (error && typeof error === "object" && "code" in error && error.code === "MODULE_NOT_FOUND") {
+      return null;
+    }
+    return null;
+  }
+}
+function getMarked() {
+  if (cachedMarked !== null) return cachedMarked || null;
+  cachedMarked = optionalRequire("marked") ?? false;
+  return cachedMarked || null;
+}
+function getShiki() {
+  if (cachedShiki !== null) return cachedShiki || null;
+  cachedShiki = optionalRequire("shiki") ?? false;
+  return cachedShiki || null;
+}
+function escapeHtml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+function sanitizeUrl(url) {
+  if (!url) return null;
+  const trimmed = url.trim();
+  if (!trimmed) return null;
+  const lower = trimmed.toLowerCase();
+  if (lower.startsWith("javascript:")) return null;
+  if (lower.startsWith("data:")) return null;
+  if (lower.startsWith("vbscript:")) return null;
+  if (/['"<>\s]/.test(trimmed)) return null;
+  return trimmed;
+}
+function sanitizeHtml(html) {
+  return html.replace(/<script[\s\S]*?>[\s\S]*?<\/script>/gi, "").replace(/<style[\s\S]*?>[\s\S]*?<\/style>/gi, "").replace(/\s+on[a-z]+\s*=\s*("[^"]*"|'[^']*'|[^\s>]+)/gi, "").replace(/\s+(?:href|src|xlink:href)\s*=\s*("|')(?:javascript:|data:)[^"']*\1/gi, "");
+}
+function decodeAllowedEntities(html) {
+  const allowTags = [
+    "p",
+    "strong",
+    "em",
+    "a",
+    "code",
+    "pre",
+    "img",
+    "ul",
+    "ol",
+    "li",
+    "blockquote",
+    "h1",
+    "h2",
+    "h3",
+    "h4",
+    "h5",
+    "h6",
+    "br"
+  ];
+  return html.replace(/&lt;(\/?)([a-z0-9]+)([^>]*)&gt;/gi, (match, slash, tag, rest) => {
+    if (!allowTags.includes(tag.toLowerCase())) return match;
+    const decodedRest = rest.replace(/&quot;/g, '"').replace(/&#39;/g, "'").replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">");
+    return `<${slash}${tag}${decodedRest}>`;
+  });
+}
+function renderCodeBlock(code, language) {
+  const shiki = getShiki();
+  if (shiki?.codeToHtml) {
+    try {
+      const rendered = shiki.codeToHtml(code, { lang: language || "text", theme: "github-dark" });
+      if (typeof rendered === "string") return rendered;
+    } catch {
+    }
+  }
+  const langAttr = language ? ` class="language-${escapeHtml(language)}"` : "";
+  return `<pre><code${langAttr}>${escapeHtml(code)}</code></pre>`;
+}
+function inlineMarkdown(text) {
+  let result = escapeHtml(text);
+  const codeSpans = [];
+  result = result.replace(/`([^`]+)`/g, (_match, code) => {
+    const idx = codeSpans.length;
+    codeSpans.push(`<code>${escapeHtml(code)}</code>`);
+    return `\xA7\xA7CODE${idx}\xA7\xA7`;
+  });
+  result = result.replace(/!\[([^\]]*)\]\(([^)]+)\)/g, (_match, alt, url) => {
+    const safeUrl = sanitizeUrl(url);
+    const safeAlt = escapeHtml(alt ?? "");
+    if (!safeUrl) return safeAlt;
+    return `<img src="${escapeHtml(safeUrl)}" alt="${safeAlt}" />`;
+  });
+  result = result.replace(/\[([^\]]+)\]\(([^)]+)\)/g, (_match, label, url) => {
+    const safeUrl = sanitizeUrl(url);
+    const safeLabel = escapeHtml(label ?? "");
+    if (!safeUrl) return safeLabel;
+    return `<a href="${escapeHtml(safeUrl)}" target="_blank" rel="noopener noreferrer">${safeLabel}</a>`;
+  });
+  result = result.replace(/\*\*([^*]+)\*\*/g, "<strong>$1</strong>");
+  result = result.replace(/\*([^*]+)\*/g, "<em>$1</em>");
+  result = result.replace(/§§CODE(\d+)§§/g, (_m, idx) => codeSpans[Number(idx)] ?? "");
+  return result;
+}
+function fallbackParse(markdown) {
+  const lines = markdown.split(/\r?\n/);
+  const blocks = [];
+  let listBuffer = null;
+  let quoteBuffer = null;
+  let inCodeBlock = false;
+  let codeLang;
+  let codeLines = [];
+  const flushList = () => {
+    if (!listBuffer) return;
+    blocks.push(`<ul>${listBuffer.map((item) => `<li>${item}</li>`).join("")}</ul>`);
+    listBuffer = null;
+  };
+  const flushQuote = () => {
+    if (!quoteBuffer) return;
+    const content = quoteBuffer.map((line) => inlineMarkdown(line.trim())).join("<br>");
+    blocks.push(`<blockquote>${content}</blockquote>`);
+    quoteBuffer = null;
+  };
+  const flushCode = () => {
+    if (!inCodeBlock) return;
+    blocks.push(renderCodeBlock(codeLines.join("\n"), codeLang));
+    codeLines = [];
+    codeLang = void 0;
+    inCodeBlock = false;
+  };
+  for (const rawLine of lines) {
+    const line = rawLine.replace(/\s+$/, "");
+    const codeFence = line.match(/^```(.*)$/);
+    if (codeFence) {
+      if (inCodeBlock) {
+        flushCode();
+      } else {
+        flushList();
+        flushQuote();
+        inCodeBlock = true;
+        codeLang = codeFence[1]?.trim() || void 0;
+        codeLines = [];
+      }
+      continue;
+    }
+    if (inCodeBlock) {
+      codeLines.push(rawLine);
+      continue;
+    }
+    const listMatch = line.match(/^\s*[-*+]\s+(.*)$/);
+    if (listMatch) {
+      flushQuote();
+      listBuffer = listBuffer ?? [];
+      listBuffer.push(inlineMarkdown(listMatch[1].trim()));
+      continue;
+    }
+    if (listBuffer) flushList();
+    const headingMatch = line.match(/^(#{1,6})\s+(.*)$/);
+    if (headingMatch) {
+      flushQuote();
+      const level = headingMatch[1].length;
+      const content = inlineMarkdown(headingMatch[2].trim());
+      blocks.push(`<h${level}>${content}</h${level}>`);
+      continue;
+    }
+    const quoteMatch = line.match(/^>\s?(.*)$/);
+    if (quoteMatch) {
+      quoteBuffer = quoteBuffer ?? [];
+      quoteBuffer.push(quoteMatch[1]);
+      continue;
+    }
+    if (quoteBuffer) flushQuote();
+    if (!line.trim()) {
+      continue;
+    }
+    blocks.push(`<p>${inlineMarkdown(line.trim())}</p>`);
+  }
+  flushList();
+  flushQuote();
+  flushCode();
+  return blocks.join("\n");
+}
+function renderWithMarked(markdown, marked) {
+  if (!marked.parse) return null;
+  const renderer = marked.Renderer ? new marked.Renderer() : void 0;
+  if (renderer) {
+    renderer.link = (href, _title, text) => {
+      const safeUrl = sanitizeUrl(href);
+      if (!safeUrl) return escapeHtml(text);
+      return `<a href="${escapeHtml(safeUrl)}" target="_blank" rel="noopener noreferrer">${text}</a>`;
+    };
+    renderer.image = (href, _title, text) => {
+      const safeUrl = sanitizeUrl(href);
+      const safeAlt = escapeHtml(text ?? "");
+      if (!safeUrl) return safeAlt;
+      return `<img src="${escapeHtml(safeUrl)}" alt="${safeAlt}" />`;
+    };
+  }
+  const output = marked.parse(markdown, renderer ? { renderer } : void 0);
+  if (typeof output === "string") return output;
+  return output ? String(output) : null;
+}
+function parseDescription(markdown) {
+  if (!markdown) return "";
+  const marked = getMarked();
+  if (marked) {
+    try {
+      const rendered = renderWithMarked(markdown, marked);
+      if (rendered) {
+        const sanitized2 = sanitizeHtml(rendered);
+        const decoded2 = decodeAllowedEntities(sanitized2);
+        return sanitizeHtml(decoded2);
+      }
+    } catch {
+    }
+  }
+  if (/<[^>]+>/.test(markdown)) {
+    const sanitized2 = sanitizeHtml(markdown);
+    const decoded2 = decodeAllowedEntities(sanitized2);
+    return sanitizeHtml(decoded2);
+  }
+  const fallback = fallbackParse(markdown);
+  const sanitized = sanitizeHtml(fallback);
+  const decoded = decodeAllowedEntities(sanitized);
+  return sanitizeHtml(decoded);
+}
+
+export { parseDescription };
+//# sourceMappingURL=markdown.js.map
+//# sourceMappingURL=markdown.js.map

package/dist/markdown.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/markdown.ts"],"names":["sanitized","decoded"],"mappings":";;;AAqBA,IAAM,iBACJ,OAAiB,SAAA,CAAA,aAAA,KAAkB,aAAuB,SAAA,CAAA,aAAA,CAAc,MAAA,CAAA,IAAA,CAAY,GAAG,CAAA,GAAI,IAAA;AAE7F,IAAI,YAAA,GAA4C,IAAA;AAChD,IAAI,WAAA,GAAwC,IAAA;AAE5C,SAAS,gBAAmB,IAAA,EAAwB;AAClD,EAAA,IAAI,CAAC,gBAAgB,OAAO,IAAA;AAC5B,EAAA,IAAI;AAEF,IAAA,OAAO,eAAe,IAAI,CAAA;AAAA,EAC5B,SAAS,KAAA,EAAgB;AACvB,IAAA,IAAI,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,IAAY,UAAU,KAAA,IAAU,KAAA,CAA4B,SAAS,kBAAA,EAAoB;AACrH,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEA,SAAS,SAAA,GAAiC;AACxC,EAAA,IAAI,YAAA,KAAiB,IAAA,EAAM,OAAO,YAAA,IAAgB,IAAA;AAClD,EAAA,YAAA,GAAe,eAAA,CAA8B,QAAQ,CAAA,IAAK,KAAA;AAC1D,EAAA,OAAO,YAAA,IAAgB,IAAA;AACzB;AAEA,SAAS,QAAA,GAA6B;AACpC,EAAA,IAAI,WAAA,KAAgB,IAAA,EAAM,OAAO,WAAA,IAAe,IAAA;AAChD,EAAA,WAAA,GAAc,eAAA,CAA2B,OAAO,CAAA,IAAK,KAAA;AACrD,EAAA,OAAO,WAAA,IAAe,IAAA;AACxB;AAEA,SAAS,WAAW,KAAA,EAAuB;AACzC,EAAA,OAAO,MACJ,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAA,CACrB,OAAA,CAAQ,MAAM,MAAM,CAAA,CACpB,QAAQ,IAAA,EAAM,MAAM,EACpB,OAAA,CAAQ,IAAA,EAAM,QAAQ,CAAA,CACtB,OAAA,CAAQ,MAAM,OAAO,CAAA;AAC1B;AAEA,SAAS,YAAY,GAAA,EAA+C;AAClE,EAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,EAAA,MAAM,OAAA,GAAU,IAAI,IAAA,EAAK;AACzB,EAAA,IAAI,CAAC,SAAS,OAAO,IAAA;AAErB,EAAA,MAAM,KAAA,GAAQ,QAAQ,WAAA,EAAY;AAClC,EAAA,IAAI,KAAA,CAAM,UAAA,CAAW,aAAa,CAAA,EAAG,OAAO,IAAA;AAC5C,EAAA,IAAI,KAAA,CAAM,UAAA,CAAW,OAAO,CAAA,EAAG,OAAO,IAAA;AACtC,EAAA,IAAI,KAAA,CAAM,UAAA,CAAW,WAAW,CAAA,EAAG,OAAO,IAAA;AAG1C,EAAA,IAAI,UAAA,CAAW,IAAA,CAAK,OAAO,CAAA,EAAG,OAAO,IAAA;AAErC,EAAA,OAAO,OAAA;AACT;AAEA,SAAS,aAAa,IAAA,EAAsB;AAC1C,EAAA,OAAO,IAAA,CAEJ,OAAA,CAAQ,sCAAA,EAAwC,EAAE,EAClD,OAAA,CAAQ,oCAAA,EAAsC,EAAE,CAAA,CAEhD,QAAQ,+CAAA,EAAiD,EAAE,CAAA,CAE3D,OAAA,CAAQ,yEAAyE,EAAE,CAAA;AACxF;AAEA,SAAS,sBAAsB,IAAA,EAAsB;AACnD,EAAA,MAAM,SAAA,GAAY;AAAA,IAChB,GAAA;AAAA,IACA,QAAA;AAAA,IACA,IAAA;AAAA,IACA,GAAA;AAAA,IACA,MAAA;AAAA,IACA,KAAA;AAAA,IACA,KAAA;AAAA,IACA,IAAA;AAAA,IACA,IAAA;AAAA,IACA,IAAA;AAAA,IACA,YAAA;AAAA,IACA,IAAA;AAAA,IACA,IAAA;AAAA,IACA,IAAA;AAAA,IACA,IAAA;AAAA,IACA,IAAA;AAAA,IACA,IAAA;AAAA,IACA;AAAA,GACF;AAGA,EAAA,OAAO,KAAK,OAAA,CAAQ,mCAAA,EAAqC,CAAC,KAAA,EAAO,KAAA,EAAO,KAAK,IAAA,KAAS;AACpF,IAAA,IAAI,CAAC,SAAA,CAAU,QAAA,CAAS,IAAI,WAAA,EAAa,GAAG,OAAO,KAAA;AACnD,IAAA,MAAM,WAAA,GAAc,KACjB,OAAA,CAAQ,SAAA,EAAW,GAAG,CAAA,CACtB,OAAA,CAAQ,UAAU,GAAG,CAAA,CACrB,QAAQ,QAAA,EAAU,GAAG,EACrB,OAAA,CAAQ,OAAA,EAAS,GAAG,CAAA,CACpB,OAAA,CAAQ,SAAS,GAAG,CAAA;AACvB,IAAA,OAAO,CAAA,CAAA,EAAI,KAAK,CAAA,EAAG,GAAG,GAAG,WAAW,CAAA,CAAA,CAAA;AAAA,EACtC,CAAC,CAAA;AACH;AAEA,SAAS,eAAA,CAAgB,MAAc,QAAA,EAAsC;AAC3E,EAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,EAAA,IAAI,OAAO,UAAA,EAAY;AACrB,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,KAAA,CAAM,UAAA,CAAW,IAAA,EAAM,EAAE,MAAM,QAAA,IAAY,MAAA,EAAQ,KAAA,EAAO,aAAA,EAAe,CAAA;AAC1F,MAAA,IAAI,OAAO,QAAA,KAAa,QAAA,EAAU,OAAO,QAAA;AAAA,IAC3C,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAEA,EAAA,MAAM,WAAW,QAAA,GAAW,CAAA,iBAAA,EAAoB,UAAA,CAAW,QAAQ,CAAC,CAAA,CAAA,CAAA,GAAM,EAAA;AAC1E,EAAA,OAAO,CAAA,UAAA,EAAa,QAAQ,CAAA,CAAA,EAAI,UAAA,CAAW,IAAI,CAAC,CAAA,aAAA,CAAA;AAClD;AAEA,SAAS,eAAe,IAAA,EAAsB;AAE5C,EAAA,IAAI,MAAA,GAAS,WAAW,IAAI,CAAA;AAG5B,EAAA,MAAM,YAAsB,EAAC;AAC7B,EAAA,MAAA,GAAS,MAAA,CAAO,OAAA,CAAQ,YAAA,EAAc,CAAC,QAAQ,IAAA,KAAS;AACtD,IAAA,MAAM,MAAM,SAAA,CAAU,MAAA;AACtB,IAAA,SAAA,CAAU,IAAA,CAAK,CAAA,MAAA,EAAS,UAAA,CAAW,IAAI,CAAC,CAAA,OAAA,CAAS,CAAA;AACjD,IAAA,OAAO,eAAS,GAAG,CAAA,QAAA,CAAA;AAAA,EACrB,CAAC,CAAA;AAGD,EAAA,MAAA,GAAS,OAAO,OAAA,CAAQ,2BAAA,EAA6B,CAAC,MAAA,EAAQ,KAAK,GAAA,KAAQ;AACzE,IAAA,MAAM,OAAA,GAAU,YAAY,GAAG,CAAA;AAC/B,IAAA,MAAM,OAAA,GAAU,UAAA,CAAW,GAAA,IAAO,EAAE,CAAA;AACpC,IAAA,IAAI,CAAC,SAAS,OAAO,OAAA;AACrB,IAAA,OAAO,CAAA,UAAA,EAAa,UAAA,CAAW,OAAO,CAAC,UAAU,OAAO,CAAA,IAAA,CAAA;AAAA,EAC1D,CAAC,CAAA;AAGD,EAAA,MAAA,GAAS,OAAO,OAAA,CAAQ,0BAAA,EAA4B,CAAC,MAAA,EAAQ,OAAO,GAAA,KAAQ;AAC1E,IAAA,MAAM,OAAA,GAAU,YAAY,GAAG,CAAA;AAC/B,IAAA,MAAM,SAAA,GAAY,UAAA,CAAW,KAAA,IAAS,EAAE,CAAA;AACxC,IAAA,IAAI,CAAC,SAAS,OAAO,SAAA;AACrB,IAAA,OAAO,CAAA,SAAA,EAAY,UAAA,CAAW,OAAO,CAAC,+CAA+C,SAAS,CAAA,IAAA,CAAA;AAAA,EAChG,CAAC,CAAA;AAGD,EAAA,MAAA,GAAS,MAAA,CAAO,OAAA,CAAQ,kBAAA,EAAoB,qBAAqB,CAAA;AACjE,EAAA,MAAA,GAAS,MAAA,CAAO,OAAA,CAAQ,cAAA,EAAgB,aAAa,CAAA;AAGrD,EAAA,MAAA,GAAS,MAAA,CAAO,OAAA,CAAQ,gBAAA,EAAkB,CAAC,EAAA,EAAI,GAAA,KAAQ,SAAA,CAAU,MAAA,CAAO,GAAG,CAAC,CAAA,IAAK,EAAE,CAAA;AAEnF,EAAA,OAAO,MAAA;AACT;AAEA,SAAS,cAAc,QAAA,EAA0B;AAC/C,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,OAAO,CAAA;AACpC,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,IAAI,UAAA,GAA8B,IAAA;AAClC,EAAA,IAAI,WAAA,GAA+B,IAAA;AACnC,EAAA,IAAI,WAAA,GAAc,KAAA;AAClB,EAAA,IAAI,QAAA;AACJ,EAAA,IAAI,YAAsB,EAAC;AAE3B,EAAA,MAAM,YAAY,MAAM;AACtB,IAAA,IAAI,CAAC,UAAA,EAAY;AACjB,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,IAAA,EAAO,UAAA,CAAW,GAAA,CAAI,CAAC,IAAA,KAAS,CAAA,IAAA,EAAO,IAAI,CAAA,KAAA,CAAO,CAAA,CAAE,IAAA,CAAK,EAAE,CAAC,CAAA,KAAA,CAAO,CAAA;AAC/E,IAAA,UAAA,GAAa,IAAA;AAAA,EACf,CAAA;AAEA,EAAA,MAAM,aAAa,MAAM;AACvB,IAAA,IAAI,CAAC,WAAA,EAAa;AAClB,IAAA,MAAM,OAAA,GAAU,WAAA,CAAY,GAAA,CAAI,CAAC,IAAA,KAAS,cAAA,CAAe,IAAA,CAAK,IAAA,EAAM,CAAC,CAAA,CAAE,IAAA,CAAK,MAAM,CAAA;AAClF,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,YAAA,EAAe,OAAO,CAAA,aAAA,CAAe,CAAA;AACjD,IAAA,WAAA,GAAc,IAAA;AAAA,EAChB,CAAA;AAEA,EAAA,MAAM,YAAY,MAAM;AACtB,IAAA,IAAI,CAAC,WAAA,EAAa;AAClB,IAAA,MAAA,CAAO,KAAK,eAAA,CAAgB,SAAA,CAAU,KAAK,IAAI,CAAA,EAAG,QAAQ,CAAC,CAAA;AAC3D,IAAA,SAAA,GAAY,EAAC;AACb,IAAA,QAAA,GAAW,MAAA;AACX,IAAA,WAAA,GAAc,KAAA;AAAA,EAChB,CAAA;AAEA,EAAA,KAAA,MAAW,WAAW,KAAA,EAAO;AAC3B,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAEvC,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,KAAA,CAAM,WAAW,CAAA;AACxC,IAAA,IAAI,SAAA,EAAW;AACb,MAAA,IAAI,WAAA,EAAa;AACf,QAAA,SAAA,EAAU;AAAA,MACZ,CAAA,MAAO;AACL,QAAA,SAAA,EAAU;AACV,QAAA,UAAA,EAAW;AACX,QAAA,WAAA,GAAc,IAAA;AACd,QAAA,QAAA,GAAW,SAAA,CAAU,CAAC,CAAA,EAAG,IAAA,EAAK,IAAK,MAAA;AACnC,QAAA,SAAA,GAAY,EAAC;AAAA,MACf;AACA,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,SAAA,CAAU,KAAK,OAAO,CAAA;AACtB,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,KAAA,CAAM,mBAAmB,CAAA;AAChD,IAAA,IAAI,SAAA,EAAW;AACb,MAAA,UAAA,EAAW;AACX,MAAA,UAAA,GAAa,cAAc,EAAC;AAC5B,MAAA,UAAA,CAAW,KAAK,cAAA,CAAe,SAAA,CAAU,CAAC,CAAA,CAAE,IAAA,EAAM,CAAC,CAAA;AACnD,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,YAAY,SAAA,EAAU;AAE1B,IAAA,MAAM,YAAA,GAAe,IAAA,CAAK,KAAA,CAAM,mBAAmB,CAAA;AACnD,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,UAAA,EAAW;AACX,MAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,CAAC,CAAA,CAAE,MAAA;AAC9B,MAAA,MAAM,UAAU,cAAA,CAAe,YAAA,CAAa,CAAC,CAAA,CAAE,MAAM,CAAA;AACrD,MAAA,MAAA,CAAO,KAAK,CAAA,EAAA,EAAK,KAAK,IAAI,OAAO,CAAA,GAAA,EAAM,KAAK,CAAA,CAAA,CAAG,CAAA;AAC/C,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,KAAA,CAAM,YAAY,CAAA;AAC1C,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,WAAA,GAAc,eAAe,EAAC;AAC9B,MAAA,WAAA,CAAY,IAAA,CAAK,UAAA,CAAW,CAAC,CAAC,CAAA;AAC9B,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,aAAa,UAAA,EAAW;AAE5B,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAK,EAAG;AAChB,MAAA;AAAA,IACF;AAEA,IAAA,MAAA,CAAO,KAAK,CAAA,GAAA,EAAM,cAAA,CAAe,KAAK,IAAA,EAAM,CAAC,CAAA,IAAA,CAAM,CAAA;AAAA,EACrD;AAEA,EAAA,SAAA,EAAU;AACV,EAAA,UAAA,EAAW;AACX,EAAA,SAAA,EAAU;AAEV,EAAA,OAAO,MAAA,CAAO,KAAK,IAAI,CAAA;AACzB;AAEA,SAAS,gBAAA,CAAiB,UAAkB,MAAA,EAAqC;AAC/E,EAAA,IAAI,CAAC,MAAA,CAAO,KAAA,EAAO,OAAO,IAAA;AAE1B,EAAA,MAAM,WAAW,MAAA,CAAO,QAAA,GAAW,IAAI,MAAA,CAAO,UAAS,GAAI,MAAA;AAE3D,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,QAAA,CAAS,IAAA,GAAO,CAAC,IAAA,EAAM,MAAA,EAAQ,IAAA,KAAS;AACtC,MAAA,MAAM,OAAA,GAAU,YAAY,IAAI,CAAA;AAChC,MAAA,IAAI,CAAC,OAAA,EAAS,OAAO,UAAA,CAAW,IAAI,CAAA;AACpC,MAAA,OAAO,CAAA,SAAA,EAAY,UAAA,CAAW,OAAO,CAAC,+CAA+C,IAAI,CAAA,IAAA,CAAA;AAAA,IAC3F,CAAA;AACA,IAAA,QAAA,CAAS,KAAA,GAAQ,CAAC,IAAA,EAAM,MAAA,EAAQ,IAAA,KAAS;AACvC,MAAA,MAAM,OAAA,GAAU,YAAY,IAAI,CAAA;AAChC,MAAA,MAAM,OAAA,GAAU,UAAA,CAAW,IAAA,IAAQ,EAAE,CAAA;AACrC,MAAA,IAAI,CAAC,SAAS,OAAO,OAAA;AACrB,MAAA,OAAO,CAAA,UAAA,EAAa,UAAA,CAAW,OAAO,CAAC,UAAU,OAAO,CAAA,IAAA,CAAA;AAAA,IAC1D,CAAA;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,GAAS,OAAO,KAAA,CAAM,QAAA,EAAU,WAAW,EAAE,QAAA,KAAa,MAAS,CAAA;AACzE,EAAA,IAAI,OAAO,MAAA,KAAW,QAAA,EAAU,OAAO,MAAA;AACvC,EAAA,OAAO,MAAA,GAAS,MAAA,CAAO,MAAM,CAAA,GAAI,IAAA;AACnC;AAQO,SAAS,iBAAiB,QAAA,EAA0B;AACzD,EAAA,IAAI,CAAC,UAAU,OAAO,EAAA;AAEtB,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,gBAAA,CAAiB,QAAA,EAAU,MAAM,CAAA;AAClD,MAAA,IAAI,QAAA,EAAU;AACZ,QAAA,MAAMA,UAAAA,GAAY,aAAa,QAAQ,CAAA;AACvC,QAAA,MAAMC,QAAAA,GAAU,sBAAsBD,UAAS,CAAA;AAC/C,QAAA,OAAO,aAAaC,QAAO,CAAA;AAAA,MAC7B;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAGA,EAAA,IAAI,SAAA,CAAU,IAAA,CAAK,QAAQ,CAAA,EAAG;AAC5B,IAAA,MAAMD,UAAAA,GAAY,aAAa,QAAQ,CAAA;AACvC,IAAA,MAAMC,QAAAA,GAAU,sBAAsBD,UAAS,CAAA;AAC/C,IAAA,OAAO,aAAaC,QAAO,CAAA;AAAA,EAC7B;AAEA,EAAA,MAAM,QAAA,GAAW,cAAc,QAAQ,CAAA;AACvC,EAAA,MAAM,SAAA,GAAY,aAAa,QAAQ,CAAA;AACvC,EAAA,MAAM,OAAA,GAAU,sBAAsB,SAAS,CAAA;AAC/C,EAAA,OAAO,aAAa,OAAO,CAAA;AAC7B","file":"markdown.js","sourcesContent":["import * as moduleApi from \"module\";\n\n// Lightweight markdown parser with optional `marked` + `shiki` support.\n// The function is synchronous and always returns sanitized HTML.\n\ntype MarkedRenderer = {\n  link?: (href: string | null, title: string | null, text: string) => string;\n  image?: (href: string | null, title: string | null, text: string) => string;\n  paragraph?: (text: string) => string;\n  heading?: (text: string, level: number) => string;\n};\n\ntype MarkedModule = {\n  Renderer?: new () => MarkedRenderer;\n  parse?: (markdown: string, options?: { renderer?: MarkedRenderer }) => string | Promise<string>;\n};\n\ntype ShikiLike = {\n  codeToHtml?: (code: string, options?: { lang?: string; theme?: string }) => string | Promise<string>;\n};\n\nconst dynamicRequire =\n  typeof moduleApi.createRequire === \"function\" ? moduleApi.createRequire(import.meta.url) : null;\n\nlet cachedMarked: MarkedModule | null | false = null;\nlet cachedShiki: ShikiLike | null | false = null;\n\nfunction optionalRequire<T>(name: string): T | null {\n  if (!dynamicRequire) return null;\n  try {\n    // Using dynamic require so missing optional peers don't break bundling/runtime.\n    return dynamicRequire(name) as T;\n  } catch (error: unknown) {\n    if (error && typeof error === \"object\" && \"code\" in error && (error as { code?: string }).code === \"MODULE_NOT_FOUND\") {\n      return null;\n    }\n    // Any other error should still be treated as a failure to keep parsing resilient.\n    return null;\n  }\n}\n\nfunction getMarked(): MarkedModule | null {\n  if (cachedMarked !== null) return cachedMarked || null;\n  cachedMarked = optionalRequire<MarkedModule>(\"marked\") ?? false;\n  return cachedMarked || null;\n}\n\nfunction getShiki(): ShikiLike | null {\n  if (cachedShiki !== null) return cachedShiki || null;\n  cachedShiki = optionalRequire<ShikiLike>(\"shiki\") ?? false;\n  return cachedShiki || null;\n}\n\nfunction escapeHtml(value: string): string {\n  return value\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&#39;\");\n}\n\nfunction sanitizeUrl(url: string | null | undefined): string | null {\n  if (!url) return null;\n  const trimmed = url.trim();\n  if (!trimmed) return null;\n\n  const lower = trimmed.toLowerCase();\n  if (lower.startsWith(\"javascript:\")) return null;\n  if (lower.startsWith(\"data:\")) return null;\n  if (lower.startsWith(\"vbscript:\")) return null;\n\n  // Disallow characters that can break attribute context\n  if (/['\"<>\\s]/.test(trimmed)) return null;\n\n  return trimmed;\n}\n\nfunction sanitizeHtml(html: string): string {\n  return html\n    // Remove script/style tags entirely\n    .replace(/<script[\\s\\S]*?>[\\s\\S]*?<\\/script>/gi, \"\")\n    .replace(/<style[\\s\\S]*?>[\\s\\S]*?<\\/style>/gi, \"\")\n    // Remove inline event handlers (on*)\n    .replace(/\\s+on[a-z]+\\s*=\\s*(\"[^\"]*\"|'[^']*'|[^\\s>]+)/gi, \"\")\n    // Remove javascript: or data: URLs in href/src/xlink:href\n    .replace(/\\s+(?:href|src|xlink:href)\\s*=\\s*(\"|')(?:javascript:|data:)[^\"']*\\1/gi, \"\");\n}\n\nfunction decodeAllowedEntities(html: string): string {\n  const allowTags = [\n    \"p\",\n    \"strong\",\n    \"em\",\n    \"a\",\n    \"code\",\n    \"pre\",\n    \"img\",\n    \"ul\",\n    \"ol\",\n    \"li\",\n    \"blockquote\",\n    \"h1\",\n    \"h2\",\n    \"h3\",\n    \"h4\",\n    \"h5\",\n    \"h6\",\n    \"br\",\n  ];\n\n  // Decode common entities inside allowed tags only\n  return html.replace(/&lt;(\\/?)([a-z0-9]+)([^>]*)&gt;/gi, (match, slash, tag, rest) => {\n    if (!allowTags.includes(tag.toLowerCase())) return match;\n    const decodedRest = rest\n      .replace(/&quot;/g, '\"')\n      .replace(/&#39;/g, \"'\")\n      .replace(/&amp;/g, \"&\")\n      .replace(/&lt;/g, \"<\")\n      .replace(/&gt;/g, \">\");\n    return `<${slash}${tag}${decodedRest}>`;\n  });\n}\n\nfunction renderCodeBlock(code: string, language: string | undefined): string {\n  const shiki = getShiki();\n  if (shiki?.codeToHtml) {\n    try {\n      const rendered = shiki.codeToHtml(code, { lang: language || \"text\", theme: \"github-dark\" });\n      if (typeof rendered === \"string\") return rendered;\n    } catch {\n      // Fall through to non-highlighted rendering\n    }\n  }\n\n  const langAttr = language ? ` class=\"language-${escapeHtml(language)}\"` : \"\";\n  return `<pre><code${langAttr}>${escapeHtml(code)}</code></pre>`;\n}\n\nfunction inlineMarkdown(text: string): string {\n  // Escape user-provided HTML before applying markdown conversions.\n  let result = escapeHtml(text);\n\n  // Protect inline code spans so subsequent replacements don't mangle them.\n  const codeSpans: string[] = [];\n  result = result.replace(/`([^`]+)`/g, (_match, code) => {\n    const idx = codeSpans.length;\n    codeSpans.push(`<code>${escapeHtml(code)}</code>`);\n    return `§§CODE${idx}§§`;\n  });\n\n  // Images: ![alt](url)\n  result = result.replace(/!\\[([^\\]]*)\\]\\(([^)]+)\\)/g, (_match, alt, url) => {\n    const safeUrl = sanitizeUrl(url);\n    const safeAlt = escapeHtml(alt ?? \"\");\n    if (!safeUrl) return safeAlt;\n    return `<img src=\"${escapeHtml(safeUrl)}\" alt=\"${safeAlt}\" />`;\n  });\n\n  // Links: [text](url)\n  result = result.replace(/\\[([^\\]]+)\\]\\(([^)]+)\\)/g, (_match, label, url) => {\n    const safeUrl = sanitizeUrl(url);\n    const safeLabel = escapeHtml(label ?? \"\");\n    if (!safeUrl) return safeLabel;\n    return `<a href=\"${escapeHtml(safeUrl)}\" target=\"_blank\" rel=\"noopener noreferrer\">${safeLabel}</a>`;\n  });\n\n  // Bold and italic (basic)\n  result = result.replace(/\\*\\*([^*]+)\\*\\*/g, \"<strong>$1</strong>\");\n  result = result.replace(/\\*([^*]+)\\*/g, \"<em>$1</em>\");\n\n  // Restore code spans\n  result = result.replace(/§§CODE(\\d+)§§/g, (_m, idx) => codeSpans[Number(idx)] ?? \"\");\n\n  return result;\n}\n\nfunction fallbackParse(markdown: string): string {\n  const lines = markdown.split(/\\r?\\n/);\n  const blocks: string[] = [];\n  let listBuffer: string[] | null = null;\n  let quoteBuffer: string[] | null = null;\n  let inCodeBlock = false;\n  let codeLang: string | undefined;\n  let codeLines: string[] = [];\n\n  const flushList = () => {\n    if (!listBuffer) return;\n    blocks.push(`<ul>${listBuffer.map((item) => `<li>${item}</li>`).join(\"\")}</ul>`);\n    listBuffer = null;\n  };\n\n  const flushQuote = () => {\n    if (!quoteBuffer) return;\n    const content = quoteBuffer.map((line) => inlineMarkdown(line.trim())).join(\"<br>\");\n    blocks.push(`<blockquote>${content}</blockquote>`);\n    quoteBuffer = null;\n  };\n\n  const flushCode = () => {\n    if (!inCodeBlock) return;\n    blocks.push(renderCodeBlock(codeLines.join(\"\\n\"), codeLang));\n    codeLines = [];\n    codeLang = undefined;\n    inCodeBlock = false;\n  };\n\n  for (const rawLine of lines) {\n    const line = rawLine.replace(/\\s+$/, \"\");\n\n    const codeFence = line.match(/^```(.*)$/);\n    if (codeFence) {\n      if (inCodeBlock) {\n        flushCode();\n      } else {\n        flushList();\n        flushQuote();\n        inCodeBlock = true;\n        codeLang = codeFence[1]?.trim() || undefined;\n        codeLines = [];\n      }\n      continue;\n    }\n\n    if (inCodeBlock) {\n      codeLines.push(rawLine);\n      continue;\n    }\n\n    const listMatch = line.match(/^\\s*[-*+]\\s+(.*)$/);\n    if (listMatch) {\n      flushQuote();\n      listBuffer = listBuffer ?? [];\n      listBuffer.push(inlineMarkdown(listMatch[1].trim()));\n      continue;\n    }\n\n    if (listBuffer) flushList();\n\n    const headingMatch = line.match(/^(#{1,6})\\s+(.*)$/);\n    if (headingMatch) {\n      flushQuote();\n      const level = headingMatch[1].length;\n      const content = inlineMarkdown(headingMatch[2].trim());\n      blocks.push(`<h${level}>${content}</h${level}>`);\n      continue;\n    }\n\n    const quoteMatch = line.match(/^>\\s?(.*)$/);\n    if (quoteMatch) {\n      quoteBuffer = quoteBuffer ?? [];\n      quoteBuffer.push(quoteMatch[1]);\n      continue;\n    }\n\n    if (quoteBuffer) flushQuote();\n\n    if (!line.trim()) {\n      continue;\n    }\n\n    blocks.push(`<p>${inlineMarkdown(line.trim())}</p>`);\n  }\n\n  flushList();\n  flushQuote();\n  flushCode();\n\n  return blocks.join(\"\\n\");\n}\n\nfunction renderWithMarked(markdown: string, marked: MarkedModule): string | null {\n  if (!marked.parse) return null;\n\n  const renderer = marked.Renderer ? new marked.Renderer() : undefined;\n\n  if (renderer) {\n    renderer.link = (href, _title, text) => {\n      const safeUrl = sanitizeUrl(href);\n      if (!safeUrl) return escapeHtml(text);\n      return `<a href=\"${escapeHtml(safeUrl)}\" target=\"_blank\" rel=\"noopener noreferrer\">${text}</a>`;\n    };\n    renderer.image = (href, _title, text) => {\n      const safeUrl = sanitizeUrl(href);\n      const safeAlt = escapeHtml(text ?? \"\");\n      if (!safeUrl) return safeAlt;\n      return `<img src=\"${escapeHtml(safeUrl)}\" alt=\"${safeAlt}\" />`;\n    };\n  }\n\n  const output = marked.parse(markdown, renderer ? { renderer } : undefined);\n  if (typeof output === \"string\") return output;\n  return output ? String(output) : null;\n}\n\n/**\n * Parse a feature description from markdown into sanitized HTML.\n * - Uses `marked` when installed (optional peer dep)\n * - Falls back to a tiny built-in parser when `marked` is absent\n * - Strips script tags, event handlers, and javascript:/data: URLs\n */\nexport function parseDescription(markdown: string): string {\n  if (!markdown) return \"\";\n\n  const marked = getMarked();\n  if (marked) {\n    try {\n      const rendered = renderWithMarked(markdown, marked);\n      if (rendered) {\n        const sanitized = sanitizeHtml(rendered);\n        const decoded = decodeAllowedEntities(sanitized);\n        return sanitizeHtml(decoded);\n      }\n    } catch {\n      // If marked fails for any reason, fall back to the tiny parser.\n    }\n  }\n\n  // Fast path: raw HTML provided without `marked` installed\n  if (/<[^>]+>/.test(markdown)) {\n    const sanitized = sanitizeHtml(markdown);\n    const decoded = decodeAllowedEntities(sanitized);\n    return sanitizeHtml(decoded);\n  }\n\n  const fallback = fallbackParse(markdown);\n  const sanitized = sanitizeHtml(fallback);\n  const decoded = decodeAllowedEntities(sanitized);\n  return sanitizeHtml(decoded);\n}\n"]}