transcript-viewer 0.6.2__tar.gz → 0.7.1__tar.gz

{transcript_viewer-0.6.2 → transcript_viewer-0.7.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: transcript-viewer
-Version: 0.6.2
+Version: 0.7.1
 Summary: Browse agent transcripts in a local, dependency-free web viewer.
 License: MIT
 Requires-Python: >=3.12

{transcript_viewer-0.6.2 → transcript_viewer-0.7.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "transcript-viewer"
-version = "0.6.2"
+version = "0.7.1"
 description = "Browse agent transcripts in a local, dependency-free web viewer."
 readme = "README.md"
 requires-python = ">=3.12"

{transcript_viewer-0.6.2 → transcript_viewer-0.7.1}/src/transcript_viewer/page.html

@@ -36,6 +36,8 @@
   --user:var(--accent); --agent:var(--ink); --system:var(--muted); --tool:var(--accent);
   --user-bg:var(--soft); --agent-bg:transparent; --system-bg:transparent;
   --j-key:var(--accent); --j-str:var(--ink); --j-num:var(--muted); --j-lit:var(--muted);
+  --sh-cmd:var(--accent); --sh-str:var(--ink); --sh-flag:var(--muted);
+  --sh-op:var(--muted); --sh-var:var(--accent); --sh-com:var(--faint);
 }
 *{box-sizing:border-box;margin:0}
 a{color:var(--accent);text-decoration:none}
@@ -409,6 +411,29 @@ pre{background:var(--sunk);border-radius:7px;padding:10px;overflow:auto;font-siz
 
 /* JSON syntax colours */
 .j-key{color:var(--j-key)}
+/* A command reads as a command: one gutter mark, then the script as written. */
+.sh{background:var(--bg);border-radius:7px;padding:10px 12px 10px 26px;margin:0;
+  position:relative;font:12px/1.6 var(--font-mono);color:var(--ink);
+  /* Wrapped rather than scrolled: a command is read, and a line that runs off
+     the side is a line nobody reads. A continued line is indented so it stays
+     obvious which lines the shell would actually see as separate. */
+  white-space:pre-wrap;overflow-wrap:anywhere;text-indent:-1.4em;padding-left:calc(26px + 1.4em)}
+.sh::before{content:"$";position:absolute;left:11px;top:10px;color:var(--faint);
+  user-select:none;text-indent:0}
+.sh-cmd{color:var(--sh-cmd)}
+.sh-str{color:var(--sh-str)}
+.sh-flag{color:var(--sh-flag)}
+.sh-op{color:var(--sh-op);font-weight:500}
+.sh-var{color:var(--sh-var)}
+.sh-com{color:var(--sh-com);font-style:italic}
+/* What the call was for, beside what it was called. */
+.tdesc{color:var(--muted);font-size:12px;overflow:hidden;text-overflow:ellipsis;
+  white-space:nowrap;flex:1;min-width:0}
+.tflip{margin-left:auto;flex:none;font:11px/1 var(--font-mono);color:var(--faint);
+  border:1px solid var(--line);border-radius:20px;padding:3px 8px;cursor:pointer}
+.tflip:hover{color:var(--ink);border-color:var(--accent)}
+.turl{display:block;margin:0 0 8px;font-size:12.5px;overflow-wrap:anywhere}
+.tasked{color:var(--muted);font-size:12.5px;line-height:1.55}
 .j-str{color:var(--j-str)}
 .j-num{color:var(--j-num)}
 .j-lit{color:var(--j-lit)}
@@ -768,6 +793,170 @@ const escText = (s) =>
 
 // Colourise a JSON value. Runs over already-escaped text, so nothing it emits
 // can introduce markup.
+/* A shell command, coloured. Every piece is escaped as it is taken, so nothing
+   in a log can reach the DOM as markup, and the result is passed through
+   autolink so paths and URLs inside a command stay clickable. */
+const SH_OPS = "|&;<>()";
+
+function sh(src) {
+  const s = String(src ?? "");
+  let out = "",
+    i = 0,
+    // Whether the next word is the thing being run, rather than an argument.
+    fresh = true;
+  const put = (cls, text) => {
+    out += cls ? `<span class="${cls}">${esc(text)}</span>` : esc(text);
+  };
+
+  while (i < s.length) {
+    const ch = s[i];
+
+    if (ch === "\n") { out += "\n"; i++; fresh = true; continue; }
+    if (ch === " " || ch === "\t") { out += ch; i++; continue; }
+
+    // A # only starts a comment where a word could start.
+    if (ch === "#" && fresh) {
+      let j = s.indexOf("\n", i);
+      if (j < 0) j = s.length;
+      put("sh-com", s.slice(i, j));
+      i = j;
+      continue;
+    }
+
+    if (ch === "'" || ch === '"') {
+      let j = i + 1;
+      while (j < s.length) {
+        if (s[j] === "\\" && ch === '"') { j += 2; continue; }
+        if (s[j] === ch) { j++; break; }
+        j++;
+      }
+      put("sh-str", s.slice(i, j));
+      i = j;
+      fresh = false;
+      continue;
+    }
+
+    if (ch === "$") {
+      // $(…) is a command substitution: mark the opening and let what is inside
+      // be scanned as the command it is.
+      if (s[i + 1] === "(") {
+        put("sh-var", "$(");
+        i += 2;
+        fresh = true;
+        continue;
+      }
+      const m = /^\$(?:\{[^}]*\}|[A-Za-z_]\w*|[@*?#$!0-9])/.exec(s.slice(i, i + 200));
+      if (m) { put("sh-var", m[0]); i += m[0].length; fresh = false; continue; }
+      // A lone $ is just a character. Said explicitly, because falling through
+      // to the word reader below leaves it unable to move.
+      put("", "$");
+      i++;
+      fresh = false;
+      continue;
+    }
+
+    if (SH_OPS.includes(ch)) {
+      let j = i;
+      while (j < s.length && SH_OPS.includes(s[j])) j++;
+      const op = s.slice(i, j);
+      put("sh-op", op);
+      i = j;
+      // What follows a pipe or a semicolon is another command; what follows a
+      // redirect is the file it is being written to, which is not one.
+      fresh = !/[<>]/.test(op);
+      continue;
+    }
+
+    let j = i;
+    while (j < s.length && !" \t\n'\"$".includes(s[j]) && !SH_OPS.includes(s[j])) j++;
+    // Every character this reaches must be consumed by something. If a branch
+    // above ever stops matching a character it used to, this keeps the loop
+    // moving instead of hanging the page — which is what it did, on any command
+    // containing $( .
+    if (j === i) j = i + 1;
+    const word = s.slice(i, j);
+    put(fresh ? "sh-cmd" : word[0] === "-" ? "sh-flag" : "", word);
+    i = j;
+    fresh = false;
+  }
+  return out;
+}
+
+const shBlock = (command) => `<pre class="sh">${autolink(sh(command))}</pre>`;
+
+/* What a call is worth showing as, when it is not worth showing as JSON. Only
+   the shapes that carry a command or an address get a body of their own; the
+   rest gain a title, which is the part that was missing everywhere. */
+const TOOLVIEW = {
+  Bash: {
+    title: (a) => a.description || "",
+    body: (a) =>
+      shBlock(a.command || "") +
+      (a.timeout ? `<div class="tasked">timeout ${num(a.timeout)} ms</div>` : ""),
+  },
+  WebFetch: {
+    title: (a) => {
+      try { return new URL(a.url).hostname.replace(/^www\./, ""); }
+      catch (e) { return a.url || ""; }
+    },
+    body: (a) =>
+      `<div class="turl">${autolink(esc(a.url || ""))}</div>` +
+      (a.prompt ? `<div class="tasked">${esc(a.prompt)}</div>` : ""),
+  },
+  WebSearch: { title: (a) => a.query || "" },
+  // The end of a path is the part worth reading; the full one is on hover.
+  Read: { title: (a) => short(a.file_path) },
+  Write: { title: (a) => short(a.file_path) },
+  Edit: { title: (a) => short(a.file_path) },
+  NotebookEdit: { title: (a) => short(a.notebook_path) },
+  Skill: { title: (a) => a.skill || "" },
+  Task: { title: (a) => a.description || "" },
+  TaskCreate: { title: (a) => a.subject || a.description || "" },
+  ToolSearch: { title: (a) => a.query || "" },
+  Grep: { title: (a) => a.pattern || "" },
+  Glob: { title: (a) => a.pattern || "" },
+};
+
+/* Every call rendered so far, so one box can be redrawn without repainting the
+   page and losing the reader's place. */
+const CALLS = {};
+// Boxes the reader has flipped. Absent means "do as the page is doing".
+const TOOLRAW = {};
+
+const toolIsRaw = (id) => (id in TOOLRAW ? TOOLRAW[id] : raw);
+
+function toolBody(id) {
+  const held = CALLS[id];
+  if (!held) return "";
+  const { c, r } = held;
+  const view = TOOLVIEW[c.function_name];
+  const shown =
+    !toolIsRaw(id) && view && view.body
+      ? view.body(c.arguments || {})
+      : `<pre class="json">${hjson(c.arguments)}</pre>`;
+  return (
+    `<div class="io in"><span class="iol">call</span>${shown}</div>` +
+    (r && r.content
+      ? `<div class="io out"><span class="iol">output</span>${
+          typeof r.content === "string" ? pre(r.content) : body(r.content)
+        }</div>`
+      : "") +
+    (aiOn() ? callSummary(c.tool_call_id) : "")
+  );
+}
+
+/* Flip one box between what it says and what it is. Redrawing just this box
+   keeps every other box open and the page where the reader left it. */
+function flipTool(ev, id) {
+  ev.preventDefault();
+  ev.stopPropagation();
+  TOOLRAW[id] = !toolIsRaw(id);
+  const box = document.getElementById("tb-" + id);
+  if (box) box.innerHTML = toolBody(id);
+  const flip = document.getElementById("tf-" + id);
+  if (flip) flip.textContent = toolIsRaw(id) ? "formatted" : "raw";
+}
+
 function hjson(value, indent = 2) {
   let text;
   try {
@@ -1921,7 +2110,12 @@ function pick(key){
 
 const toggle=r=>{show[r]=!show[r];limit=PAGE_SIZE;render()};
 const more=()=>{limit+=PAGE_SIZE*4;render()};
-const toggleRaw=()=>{raw=!raw;render()};
+const toggleRaw=()=>{
+  raw=!raw;
+  // Boxes flipped by hand were disagreeing with the old setting, not this one.
+  for(const id of Object.keys(TOOLRAW))delete TOOLRAW[id];
+  render();
+};
 
 /* Open or close every tool call and branch at once. Applied to the elements
    already on screen rather than by repainting: a repaint would drop the reader
@@ -2096,7 +2290,8 @@ function trajectoryTab(t,e,branches,branchSteps,counts,q){
       <span class="fsep"></span>
       <span class="chip${OPEN_ALL?" on":""}" id="xall" onclick="toggleExpand()">${
         OPEN_ALL?"collapse all":"expand all"}</span>
-      <span class="chip${raw?" on":""}" onclick="toggleRaw()">raw text</span>
+      <span class="chip${raw?" on":""}" onclick="toggleRaw()"
+        title="Show messages and calls as they were recorded. A single box can still disagree.">raw</span>
       ${q?`<span class="hits">${num(total)} of ${num(t.steps.length)} match “${esc(query)}”</span>`:""}
     </div>
     ${shown.map(({s,i})=>step(s,t,0,i,"")).join("")
@@ -2324,15 +2519,18 @@ function step(s,ctx,depth,idx,prefix){
   for(const c of s.tool_calls||[]){
     const r=(s.observation?.results||[]).find(x=>x.source_call_id===c.tool_call_id);
     const refs=r?.subagent_trajectory_ref||[];
+    // An id of its own, so one box can be redrawn without repainting the page.
+    // A call recorded without one still needs somewhere to be kept.
+    const id=String(c.tool_call_id||`${key}c${Object.keys(CALLS).length}`);
+    CALLS[id]={c,r};
+    const view=TOOLVIEW[c.function_name];
+    const said=view&&view.title?String(view.title(c.arguments||{})||""):"";
     h+=`<details class="tool"${OPEN_ALL?" open":""}><summary><span class="tname">${esc(c.function_name)}</span>
-        ${refs.length?`<span class="pill br">delegates</span>`:""}</summary>
-      <div class="tbody">
-        <div class="io in"><span class="iol">call</span>
-          <pre class="json">${hjson(c.arguments)}</pre></div>
-        ${r?.content?`<div class="io out"><span class="iol">output</span>
-          ${typeof r.content==="string"?pre(r.content):body(r.content)}</div>`:""}
-        ${aiOn()?callSummary(c.tool_call_id):""}
-      </div></details>`;
+        ${said?`<span class="tdesc" title="${esc(said)}">${esc(said)}</span>`:""}
+        ${refs.length?`<span class="pill br">delegates</span>`:""}
+        <span class="tflip" id="tf-${esc(id)}" onclick="flipTool(event,'${esc(id)}')"
+          title="Show this call as it was recorded">${toolIsRaw(id)?"formatted":"raw"}</span></summary>
+      <div class="tbody" id="tb-${esc(id)}">${toolBody(id)}</div></details>`;
     for(const ref of refs)h+=branch(ref,ctx,depth);
   }
   return h+`</div>`;

transcript_viewer-0.7.1/tests/fixtures/big-command.json

@@ -0,0 +1 @@
+"cat > /Users/girish/Documents/personalwebsite/website/public/check-my-mac.sh <<'SCRIPT_EOF'\n#!/bin/bash\n#\n# check-my-mac.sh \u2014 check the parts of a personal security setup that live on\n# your Mac, and print a report you can paste back into the checklist at\n# https://girishgupta.com/beyond-the-parrot\n#\n#   bash check-my-mac.sh           readable summary\n#   bash check-my-mac.sh --json    JSON, for pasting into the checklist\n#\n# WHAT IT DOES AND DOESN'T DO\n#   It reads settings and reports them. That's all. It changes nothing,\n#   installs nothing, needs no sudo, and sends nothing anywhere \u2014 there is no\n#   network call in this file, and you can check that yourself.\n#\n#   It can see whether FileVault is on. It cannot see whether you froze your\n#   credit, enrolled a hardware key, or turned on a port-out PIN. Those are\n#   the items that matter most, and they stay manual on the checklist.\n#\n#   Checks that would need root report \"unknown\" rather than asking for your\n#   password. Nothing here should ever prompt for it. If something does, stop\n#   and work out why.\n#\n# Exit status: 0 if nothing failed, 1 if at least one check failed.\n\nset -uo pipefail\n\nJSON_ONLY=0\n[[ \"${1:-}\" == \"--json\" ]] && JSON_ONLY=1\n\nPASS=0\nFAIL=0\nUNKNOWN=0\nROWS=()\n\nrecord() {\n  local key=\"$1\" status=\"$2\" detail=\"$3\"\n  case \"$status\" in\n    pass) PASS=$((PASS + 1)) ;;\n    fail) FAIL=$((FAIL + 1)) ;;\n    *) UNKNOWN=$((UNKNOWN + 1)); status=\"unknown\" ;;\n  esac\n  local esc=${detail//\\\\/\\\\\\\\}\n  esc=${esc//\\\"/\\\\\\\"}\n  esc=$(printf '%s' \"$esc\" | tr -d '\\000-\\037')\n  ROWS+=(\"    \\\"$key\\\": { \\\"status\\\": \\\"$status\\\", \\\"detail\\\": \\\"$esc\\\" }\")\n  if [[ $JSON_ONLY -eq 0 ]]; then\n    local mark\n    case \"$status\" in\n      pass) mark=\" ok \" ;;\n      fail) mark=\"FAIL\" ;;\n      unknown) mark=\" ?  \" ;;\n    esac\n    printf '[%s] %-18s %s\\n' \"$mark\" \"$key\" \"$detail\"\n  fi\n}\n\nhave() { command -v \"$1\" >/dev/null 2>&1; }\n\nNOW=$(date +%s)\n\n# Days between a unix timestamp and now. Prints nothing if given nothing.\ndays_since() {\n  local then=\"${1:-}\"\n  [[ -n \"$then\" && \"$then\" =~ ^[0-9]+$ ]] || return 1\n  echo $(( (NOW - then) / 86400 ))\n}\n\nif [[ \"$(uname -s)\" != \"Darwin\" ]]; then\n  echo \"This one only knows how to check macOS. Detected: $(uname -s)\" >&2\n  exit 2\nfi\n\n[[ $JSON_ONLY -eq 0 ]] && {\n  echo\n  echo \"Checking $(sw_vers -productName) $(sw_vers -productVersion) on $(scutil --get ComputerName 2>/dev/null || hostname -s)\"\n  echo\n}\n\n# \u2500\u2500 Disk encryption \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Without this, your laptop is a filing cabinet with the key taped to it.\nfv=\"$(fdesetup status 2>/dev/null)\"\nif grep -qi \"FileVault is On\" <<<\"$fv\"; then\n  record \"encryption\" pass \"FileVault is on\"\nelif [[ -n \"$fv\" ]]; then\n  record \"encryption\" fail \"$fv \u2014 turn it on in System Settings > Privacy & Security\"\nelse\n  record \"encryption\" unknown \"could not read FileVault status\"\nfi\n\n# \u2500\u2500 Screen lock \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Two settings combine: how long until the screen sleeps, and the grace\n# period before a password is demanded. A short screensaver with a ten\n# minute grace period is not a lock.\nidle=$(defaults -currentHost read com.apple.screensaver idleTime 2>/dev/null)\nlock_raw=$(sysadminctl -screenLock status 2>&1 | tail -1)\ngrace=\"\"\ncase \"$lock_raw\" in\n  *immediate*) grace=0 ;;\n  *\"is off\"*) grace=off ;;\n  *[0-9]*seconds*) grace=$(grep -oE \"[0-9]+\" <<<\"$lock_raw\" | head -1) ;;\nesac\nif [[ \"$grace\" == \"off\" ]]; then\n  record \"screenlock\" fail \"no password is required after the screen sleeps\"\nelif [[ -n \"$idle\" && \"$idle\" =~ ^[0-9]+$ && \"$idle\" -eq 0 ]]; then\n  record \"screenlock\" fail \"the screen never sleeps on its own, so it never locks\"\nelif [[ -n \"$grace\" && -n \"$idle\" && \"$idle\" =~ ^[0-9]+$ ]]; then\n  total=$((idle + grace))\n  if [[ \"$total\" -le 300 ]]; then\n    record \"screenlock\" pass \"locks after ${total}s (${idle}s idle + ${grace}s grace)\"\n  else\n    record \"screenlock\" fail \"takes ${total}s to lock \u2014 aim for five minutes or less\"\n  fi\nelse\n  record \"screenlock\" unknown \"could not read the screen lock settings\"\nfi\n\n# \u2500\u2500 Automatic login \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# macOS can be set to log someone in at boot without asking for anything,\n# which turns a stolen laptop into an open laptop. FileVault mostly\n# suppresses it, so this matters most on machines without FileVault.\nautologin=$(defaults read /Library/Preferences/com.apple.loginwindow autoLoginUser 2>/dev/null)\nif [[ -n \"$autologin\" ]]; then\n  record \"auto-login\" fail \"this Mac logs in as '$autologin' at boot without a password\"\nelse\n  record \"auto-login\" pass \"no automatic login at boot\"\nfi\n\n# \u2500\u2500 Automatic updates \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Read the whole domain: individual keys are often absent, which means\n# \"left at the default\" (on), not \"off\". Then check the setting is actually\n# working \u2014 \"updates are enabled\" and \"updates are happening\" are different\n# claims, and only the second one keeps you patched.\nSU=/Library/Preferences/com.apple.SoftwareUpdate\nsu_dump=$(defaults read \"$SU\" 2>/dev/null)\nsu_key() { grep -oE \"^ *$1 = [0-9]+\" <<<\"$su_dump\" | grep -oE \"[0-9]+$\"; }\nif [[ -z \"$su_dump\" ]]; then\n  record \"updates\" unknown \"could not read the software update settings\"\nelse\n  auto_check=$(su_key AutomaticCheckEnabled)\n  crit=$(su_key CriticalUpdateInstall)\n  os_auto=$(su_key AutomaticallyInstallMacOSUpdates)\n\n  # Last time a check actually succeeded, as recorded by macOS itself.\n  last_su_raw=$(grep -oE 'LastSuccessfulDate = \"[^\"]+\"' <<<\"$su_dump\" | head -1 |\n                sed -E 's/.*\"([0-9-]+ [0-9:]+).*/\\1/')\n  last_su_epoch=\"\"\n  [[ -n \"$last_su_raw\" ]] &&\n    last_su_epoch=$(date -j -u -f \"%Y-%m-%d %H:%M:%S\" \"$last_su_raw\" +%s 2>/dev/null)\n  su_age=$(days_since \"$last_su_epoch\") || su_age=\"\"\n\n  if [[ \"${auto_check:-1}\" == \"0\" ]]; then\n    record \"updates\" fail \"automatic update checks are turned off\"\n  elif [[ \"${crit:-1}\" == \"0\" ]]; then\n    record \"updates\" fail \"security responses are not installed automatically\"\n  elif [[ -n \"$su_age\" && \"$su_age\" -gt 30 ]]; then\n    record \"updates\" fail \"automatic updates are on, but the last successful check was ${su_age} days ago\"\n  elif [[ -n \"$su_age\" ]]; then\n    record \"updates\" pass \"automatic updates on and checking (last successful check ${su_age}d ago)\"\n  else\n    record \"updates\" pass \"automatic updates on (security=${crit:-default}, macOS=${os_auto:-default})\"\n  fi\nfi\n\n# \u2500\u2500 Supported macOS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Apple ships security fixes for the current release and the two before it.\n# That list changes every autumn, so it lives here with a date attached: if\n# this script has gone stale the check says so instead of guessing at you.\nOS_TABLE_DATE=\"2026-08-21\"\nSUPPORTED_MAJORS=\"26 25 15 14\"\ntable_epoch=$(date -j -f \"%Y-%m-%d\" \"$OS_TABLE_DATE\" +%s 2>/dev/null)\ntable_age=$(days_since \"$table_epoch\") || table_age=\"\"\nmajor=$(sw_vers -productVersion | cut -d. -f1)\nif [[ -n \"$table_age\" && \"$table_age\" -gt 400 ]]; then\n  record \"supported-os\" unknown \"this script's list of supported macOS versions is ${table_age} days old \u2014 too stale to judge macOS $(sw_vers -productVersion)\"\nelif [[ \" $SUPPORTED_MAJORS \" == *\" $major \"* ]]; then\n  record \"supported-os\" pass \"macOS $(sw_vers -productVersion) still gets security updates\"\nelse\n  record \"supported-os\" fail \"macOS $(sw_vers -productVersion) is past its last security update\"\nfi\n\n# \u2500\u2500 System Integrity Protection \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# SIP stops even root from modifying system files or injecting into Apple's\n# own processes. It is on by default, and turning it off takes a deliberate\n# trip to Recovery \u2014 which people make for some dev tool and then forget.\nsip_raw=$(csrutil status 2>/dev/null)\nif grep -qi \"status: enabled\" <<<\"$sip_raw\"; then\n  record \"sip\" pass \"System Integrity Protection is on\"\nelif grep -qi \"status: disabled\" <<<\"$sip_raw\"; then\n  record \"sip\" fail \"System Integrity Protection is off \u2014 re-enable it from Recovery unless you know why it's off\"\nelif [[ -n \"$sip_raw\" ]]; then\n  record \"sip\" fail \"System Integrity Protection is partly disabled: $(tr -d '\\n' <<<\"$sip_raw\" | cut -c1-90)\"\nelse\n  record \"sip\" unknown \"could not read System Integrity Protection status\"\nfi\n\n# \u2500\u2500 Secure Boot \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Apple Silicon only. Full Security means the Mac will only boot a signed,\n# current OS. Reduced Security is what you get after enabling third-party\n# kernel extensions, and it is often deliberate \u2014 but it should be a choice\n# you remember making rather than one you find out about here.\nbridge=$(system_profiler SPiBridgeDataType 2>/dev/null)\nsb=$(grep -oE \"Secure Boot: .*\" <<<\"$bridge\" | head -1 | sed 's/Secure Boot: //')\nkext=$(grep -oE \"Allow All Kernel Extensions: .*\" <<<\"$bridge\" | head -1 | sed 's/.*: //')\nif [[ -z \"$bridge\" ]]; then\n  record \"secure-boot\" unknown \"no boot policy reported \u2014 Intel Macs don't have this\"\nelif [[ \"$sb\" == \"Full Security\" ]]; then\n  record \"secure-boot\" pass \"Secure Boot is at Full Security\"\nelif [[ -n \"$sb\" ]]; then\n  record \"secure-boot\" fail \"Secure Boot is at ${sb}${kext:+, third-party kernel extensions allowed: $kext}\"\nelse\n  record \"secure-boot\" unknown \"could not read the boot policy\"\nfi\n\n# \u2500\u2500 Firewall \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\nFW=/usr/libexec/ApplicationFirewall/socketfilterfw\nif [[ -x \"$FW\" ]]; then\n  if \"$FW\" --getglobalstate 2>/dev/null | grep -qi \"enabled\"; then\n    stealth=\"\"\n    \"$FW\" --getstealthmode 2>/dev/null | grep -qi \"on\" && stealth=\", stealth mode on\"\n    record \"firewall\" pass \"the built-in firewall is on$stealth\"\n  else\n    record \"firewall\" fail \"the firewall is off \u2014 System Settings > Network > Firewall\"\n  fi\nelse\n  record \"firewall\" unknown \"could not find socketfilterfw\"\nfi\n\n# \u2500\u2500 Gatekeeper \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\nif spctl --status 2>&1 | grep -qi \"assessments enabled\"; then\n  xp=$(defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist \\\n        CFBundleShortVersionString 2>/dev/null)\n  record \"gatekeeper\" pass \"Gatekeeper is on${xp:+, XProtect $xp}\"\nelse\n  record \"gatekeeper\" fail \"Gatekeeper is disabled \u2014 it is the thing that stops you double-clicking malware\"\nfi\n\n# \u2500\u2500 Services listening to the network \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Anything bound to 127.0.0.1 is talking to your own machine and is nobody\n# else's business; development tools do it constantly. What matters is a\n# service bound to every interface, because that is the one that answers\n# strangers when you join caf\u00e9 wifi.\n#\n# This uses netstat rather than lsof deliberately. lsof run as you only\n# reports your own sockets, and sshd runs as root \u2014 so an lsof check would\n# cheerfully report a clean bill of health on a Mac with Remote Login on.\nlisteners=$(netstat -an -p tcp 2>/dev/null | awk '/LISTEN/ {print $4}')\nif [[ -z \"$listeners\" ]]; then\n  record \"sharing\" unknown \"could not read the list of listening sockets\"\nelse\n  # Strip loopback, then reduce each address to its port number.\n  public_ports=$(grep -vE '^(127\\.0\\.0\\.1|::1|\\*\\.0$)' <<<\"$listeners\" |\n                 sed -E 's/.*[.:]([0-9]+)$/\\1/' | sort -un)\n  named=\"\"\n  for p in $public_ports; do\n    case \"$p\" in\n      22)   named=\"${named:+$named, }Remote Login (SSH)\" ;;\n      445)  named=\"${named:+$named, }File Sharing (SMB)\" ;;\n      548)  named=\"${named:+$named, }File Sharing (AFP)\" ;;\n      631)  named=\"${named:+$named, }Printer Sharing\" ;;\n      3283) named=\"${named:+$named, }Remote Management\" ;;\n      5900) named=\"${named:+$named, }Screen Sharing\" ;;\n      5000|7000) named=\"${named:+$named, }AirPlay Receiver\" ;;\n    esac\n  done\n  others=$(grep -cvE '^(22|445|548|631|3283|5900|5000|7000)$' <<<\"$public_ports\")\n  if [[ -n \"$named\" ]]; then\n    record \"sharing\" fail \"reachable from the network: $named \u2014 turn off what you don't use in System Settings > General > Sharing\"\n  elif [[ \"$others\" -gt 0 ]]; then\n    record \"sharing\" unknown \"$others service(s) listening on all interfaces, none of them a standard sharing service: $(tr '\\n' ' ' <<<\"$public_ports\")\"\n  else\n    record \"sharing\" pass \"nothing is listening to the network beyond your own machine\"\n  fi\nfi\n\n# \u2500\u2500 Guest account \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\nguest=$(defaults read /Library/Preferences/com.apple.loginwindow GuestEnabled 2>/dev/null)\nif [[ \"${guest:-0}\" == \"1\" ]]; then\n  record \"guest-account\" fail \"the guest account is enabled\"\nelse\n  record \"guest-account\" pass \"the guest account is off\"\nfi\n\n# \u2500\u2500 Find My \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# The thing that lets you wipe a laptop you are never getting back. Note\n# that the findmydeviced process runs whether or not the feature is on, so\n# it proves nothing; these two signals do.\nfmm=$(defaults read /Library/Preferences/com.apple.FindMyMac FMMEnabled 2>/dev/null)\nfmm_token=$(nvram -p 2>/dev/null | grep -c 'fmm-mobileme-token-FMM')\nif [[ \"${fmm:-0}\" == \"1\" || \"${fmm_token:-0}\" -gt 0 ]]; then\n  record \"find-my\" pass \"Find My Mac is on \u2014 a lost machine can be wiped remotely\"\nelif [[ -n \"$fmm\" || \"${fmm_token:-0}\" == \"0\" ]]; then\n  record \"find-my\" fail \"Find My Mac is off \u2014 System Settings > Apple Account > iCloud > Find My Mac\"\nelse\n  record \"find-my\" unknown \"could not read Find My status\"\nfi\n\n# \u2500\u2500 SSH keys \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Only relevant if you have them, and if you do, an unencrypted private key\n# is a password sitting in a file. ssh-keygen with an empty passphrase\n# succeeds only on a key that has none, and never prompts.\nif [[ -d \"$HOME/.ssh\" ]]; then\n  dir_mode=$(stat -f \"%A\" \"$HOME/.ssh\" 2>/dev/null)\n  bare=() loose=()\n  for k in \"$HOME\"/.ssh/id_* \"$HOME\"/.ssh/*.pem; do\n    [[ -f \"$k\" ]] || continue\n    [[ \"$k\" == *.pub ]] && continue\n    ssh-keygen -y -P \"\" -f \"$k\" >/dev/null 2>&1 </dev/null && bare+=(\"$(basename \"$k\")\")\n    mode=$(stat -f \"%A\" \"$k\" 2>/dev/null)\n    [[ -n \"$mode\" && \"$mode\" != \"600\" && \"$mode\" != \"400\" ]] && loose+=(\"$(basename \"$k\") is $mode\")\n  done\n  problems=\"\"\n  [[ ${#bare[@]} -gt 0 ]] && problems=\"no passphrase: ${bare[*]}\"\n  [[ ${#loose[@]} -gt 0 ]] && problems=\"${problems:+$problems; }readable by others: ${loose[*]}\"\n  [[ -n \"$dir_mode\" && \"$dir_mode\" != \"700\" ]] && problems=\"${problems:+$problems; }~/.ssh is $dir_mode, should be 700\"\n  if [[ -n \"$problems\" ]]; then\n    record \"ssh-keys\" fail \"$problems\"\n  else\n    record \"ssh-keys\" pass \"SSH keys and permissions look right\"\n  fi\nelse\n  record \"ssh-keys\" pass \"no ~/.ssh directory, so nothing to get wrong\"\nfi\n\n# \u2500\u2500 Password manager \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\npm=\"\"\nfor app in \"1Password\" \"Bitwarden\" \"Proton Pass\" \"Dashlane\"; do\n  [[ -d \"/Applications/$app.app\" ]] && { pm=\"$app\"; break; }\ndone\nif [[ -n \"$pm\" ]]; then\n  record \"password-manager\" pass \"$pm is installed\"\nelif [[ -d \"/System/Applications/Passwords.app\" ]]; then\n  record \"password-manager\" unknown \"no third-party manager found; Apple Passwords is available but this script can't tell whether you use it\"\nelse\n  record \"password-manager\" fail \"no password manager found in /Applications\"\nfi\n\n# \u2500\u2500 Backups \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# A backup you have never restored from is a hypothesis, not a backup \u2014 and\n# an app in /Applications is not even that. What matters is whether\n# something ran recently, so where a tool records its own history in a file\n# you can read, this reads it. Where it doesn't, it says so rather than\n# awarding a pass for owning the software.\nFRESH_DAYS=7\nbest_age=\"\"      # smallest number of days since a verified backup\nverified=\"\"      # tools with a real, dated last run\npresent=\"\"       # tools installed but unverifiable from here\n\nnote_verified() {\n  local name=\"$1\" age=\"$2\"\n  verified=\"${verified:+$verified; }$name (${age}d ago)\"\n  [[ -z \"$best_age\" || \"$age\" -lt \"$best_age\" ]] && best_age=\"$age\"\n}\n\n# Time Machine. A configured destination is not the point; a recent snapshot\n# is. Snapshot paths end in YYYY-MM-DD-HHMMSS.\nif have tmutil && tmutil destinationinfo >/dev/null 2>&1; then\n  latest=$(tmutil latestbackup 2>/dev/null | tail -1)\n  stamp=$(grep -oE '[0-9]{4}-[0-9]{2}-[0-9]{2}-[0-9]{6}' <<<\"$latest\" | tail -1)\n  if [[ -n \"$stamp\" ]]; then\n    tm_epoch=$(date -j -f \"%Y-%m-%d-%H%M%S\" \"$stamp\" +%s 2>/dev/null)\n    tm_age=$(days_since \"$tm_epoch\") && note_verified \"Time Machine\" \"$tm_age\"\n  else\n    present=\"${present:+$present, }Time Machine (destination set, but no snapshot this script can date)\"\n  fi\nfi\n\n# Arq. The agent keeps a world-readable log and writes a line on every\n# completed backup record, which is a far better signal than the app existing.\nif [[ -d /Applications/Arq.app ]]; then\n  arq_log=$(ls -t /Library/Logs/ArqAgent/*.log 2>/dev/null | head -1)\n  arq_done=\"\"\n  if [[ -n \"$arq_log\" && -r \"$arq_log\" ]]; then\n    arq_done=$(tail -c 2000000 \"$arq_log\" 2>/dev/null |\n               grep -oE '[0-9]{2}-[A-Za-z]{3}-[0-9]{4} [0-9]{2}:[0-9]{2}:[0-9]{2}' | tail -1)\n  fi\n  if [[ -n \"$arq_done\" ]]; then\n    arq_epoch=$(date -j -f \"%d-%b-%Y %H:%M:%S\" \"$arq_done\" +%s 2>/dev/null)\n    arq_age=$(days_since \"$arq_epoch\") && note_verified \"Arq\" \"$arq_age\"\n  else\n    present=\"${present:+$present, }Arq (installed, no readable backup record)\"\n  fi\nfi\n\n# Everything else: detectable, but without a log this script can honestly\n# read, so they count as \"something is here\" rather than \"you are covered\".\nfor app in \"Backblaze\" \"Carbon Copy Cloner\" \"SuperDuper!\" \"ChronoSync\"; do\n  [[ -d \"/Applications/$app.app\" ]] && present=\"${present:+$present, }$app (installed, last run not checkable from here)\"\ndone\nfor tool in restic borg kopia duplicacy rclone; do\n  have \"$tool\" && present=\"${present:+$present, }$tool (command-line tool present, schedule unknown)\"\ndone\n\nif [[ -n \"$best_age\" && \"$best_age\" -le \"$FRESH_DAYS\" ]]; then\n  record \"backups\" pass \"backed up within the last ${FRESH_DAYS} days \u2014 $verified\"\nelif [[ -n \"$best_age\" ]]; then\n  record \"backups\" fail \"the most recent backup was ${best_age} days ago \u2014 $verified\"\nelif [[ -n \"$present\" ]]; then\n  record \"backups\" unknown \"backup software found but no run this script can date: $present\"\nelse\n  record \"backups\" fail \"no backup software found and no Time Machine destination \u2014 one dead disk from losing everything\"\nfi\n\n# \u2500\u2500 Hardware security key \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Presence proves you own one. It says nothing about whether you enrolled it\n# anywhere, which is the part that matters, so this never reports a pass.\nif system_profiler SPUSBDataType 2>/dev/null | grep -qiE \"yubikey|security key\"; then\n  record \"hardware-key\" unknown \"a security key is plugged in \u2014 whether it's enrolled on your accounts can't be checked from here\"\nelse\n  record \"hardware-key\" unknown \"no security key plugged in right now; enrolment can't be checked from here either way\"\nfi\n\n# \u2500\u2500 Report \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\njson() {\n  echo \"{\"\n  echo \"  \\\"tool\\\": \\\"check-my-mac.sh\\\",\"\n  echo \"  \\\"version\\\": 2,\"\n  echo \"  \\\"generated\\\": \\\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\\\",\"\n  echo \"  \\\"platform\\\": \\\"macOS $(sw_vers -productVersion)\\\",\"\n  echo \"  \\\"summary\\\": { \\\"pass\\\": $PASS, \\\"fail\\\": $FAIL, \\\"unknown\\\": $UNKNOWN },\"\n  echo \"  \\\"checks\\\": {\"\n  local n=${#ROWS[@]} idx=0\n  for row in \"${ROWS[@]}\"; do\n    idx=$((idx + 1))\n    if [[ $idx -lt $n ]]; then echo \"$row,\"; else echo \"$row\"; fi\n  done\n  echo \"  }\"\n  echo \"}\"\n}\n\nif [[ $JSON_ONLY -eq 1 ]]; then\n  json\nelse\n  echo\n  echo \"$PASS passed, $FAIL failed, $UNKNOWN unknown.\"\n  echo\n  echo \"The things this cannot see \u2014 your credit freeze, your hardware keys,\"\n  echo \"your phone carrier's port-out PIN \u2014 are the ones worth doing first.\"\n  echo\n  echo \"To tick these off in the checklist:\"\n  echo \"  bash check-my-mac.sh --json | pbcopy\"\n  echo \"then paste into the box in the post.\"\n  echo\nfi\n\n[[ $FAIL -eq 0 ]]\nSCRIPT_EOF\nbash -n /Users/girish/Documents/personalwebsite/website/public/check-my-mac.sh && echo \"syntax OK\""

{transcript_viewer-0.6.2 → transcript_viewer-0.7.1}/tests/page.test.js

@@ -1480,3 +1480,196 @@ test("a failure to open leaves the reason on screen", async () => {
   assert.match(text.textContent, /Could not open your library/);
   assert.strictEqual(el.hidden, false, "a blank window would say nothing at all");
 });
+
+// ---- how a tool call reads ---------------------------------------------------
+
+test("a command is coloured as a command, not printed as JSON", () => {
+  const html = run(`return shBlock('ls -la /tmp')`);
+  assert.match(html, /class="sh"/, "it should be a shell block");
+  assert.match(html, /class="sh-cmd">ls</, "the thing being run is the command");
+  assert.match(html, /class="sh-flag">-la</, "a flag reads as a flag");
+});
+
+test("what follows a pipe is another command", () => {
+  const html = run(`return sh('grep -rn foo src/ | head -5')`);
+  const commands = [...html.matchAll(/class="sh-cmd">([^<]+)</g)].map((m) => m[1]);
+  assert.deepStrictEqual(commands, ["grep", "head"]);
+});
+
+test("a quoted string is one piece, whatever is inside it", () => {
+  const html = run(`return sh('grep "no assistant turns" src/')`);
+  assert.match(html, /class="sh-str">&quot;no assistant turns&quot;</);
+  // The words inside must not be mistaken for commands of their own.
+  const commands = [...html.matchAll(/class="sh-cmd">([^<]+)</g)].map((m) => m[1]);
+  assert.deepStrictEqual(commands, ["grep"]);
+});
+
+test("a comment is a comment only where a word could start", () => {
+  const commented = run(`return sh('# count them\\nwc -l x')`);
+  assert.match(commented, /class="sh-com"># count them</);
+  const inside = run(`return sh('curl https://x/a#b')`);
+  assert.ok(!/sh-com/.test(inside), "a # inside a word is part of the word");
+});
+
+test("a variable is picked out in either spelling", () => {
+  const html = run(`return sh('echo $HOME and \${PATH}')`);
+  const vars = [...html.matchAll(/class="sh-var">([^<]+)</g)].map((m) => m[1]);
+  assert.deepStrictEqual(vars, ["$HOME", "${PATH}"]);
+});
+
+test("markup in a command cannot reach the page as markup", () => {
+  const html = run(`return sh('echo "<img src=x onerror=alert(1)>"')`);
+  assert.ok(!html.includes("<img"), "it must be escaped");
+  assert.match(html, /&lt;img/);
+});
+
+test("a path in a command still opens in Finder, and a URL still opens", () => {
+  const withPath = run(`return shBlock('ls /Users/someone/Documents')`);
+  assert.match(withPath, /api\/reveal\?path=/, "a path should still reveal");
+  const withUrl = run(`return shBlock('curl -s https://pypi.org/simple/')`);
+  assert.match(withUrl, /<a href="https:\/\/pypi\.org\/simple\/"/);
+});
+
+test("a call says what it was for, beside what it was called", () => {
+  const title = run(
+    `return TOOLVIEW.Bash.title({command:"ls",description:"List vault root"})`,
+  );
+  assert.strictEqual(title, "List vault root");
+  const fetched = run(
+    `return TOOLVIEW.WebFetch.title({url:"https://help.obsidian.md/plugins/templates"})`,
+  );
+  assert.strictEqual(fetched, "help.obsidian.md");
+});
+
+test("a fetch shows its address as a link and its question as prose", () => {
+  const html = run(
+    `return TOOLVIEW.WebFetch.body({url:"https://example.com/a",prompt:"What does it say?"})`,
+  );
+  assert.match(html, /<a href="https:\/\/example\.com\/a"/);
+  assert.match(html, /What does it say\?/);
+});
+
+test("a malformed address does not stop the box drawing", () => {
+  const title = run(`return TOOLVIEW.WebFetch.title({url:"not a url"})`);
+  assert.strictEqual(title, "not a url");
+});
+
+test("one box can be shown raw without the rest following", () => {
+  const out = run(`
+    raw = false;
+    CALLS["a"] = {c:{function_name:"Bash",tool_call_id:"a",arguments:{command:"ls",description:"d"}}, r:null};
+    CALLS["b"] = {c:{function_name:"Bash",tool_call_id:"b",arguments:{command:"pwd",description:"d"}}, r:null};
+    TOOLRAW["a"] = true;
+    return [toolBody("a"), toolBody("b")];
+  `);
+  assert.match(out[0], /class="json"/, "the flipped one shows what was recorded");
+  assert.match(out[1], /class="sh"/, "its neighbour is untouched");
+});
+
+test("the page-wide raw setting is what a box does until it is told otherwise", () => {
+  const out = run(`
+    raw = true;
+    CALLS["c"] = {c:{function_name:"Bash",tool_call_id:"c",arguments:{command:"ls"}}, r:null};
+    const following = toolBody("c");
+    TOOLRAW["c"] = false;
+    const flipped = toolBody("c");
+    raw = false;
+    return [following, flipped];
+  `);
+  assert.match(out[0], /class="json"/, "it follows the page by default");
+  assert.match(out[1], /class="sh"/, "and can disagree once flipped");
+});
+
+test("a tool with no view of its own still gets its JSON", () => {
+  const html = run(`
+    CALLS["z"] = {c:{function_name:"SomethingNew",tool_call_id:"z",arguments:{a:1}}, r:null};
+    return toolBody("z");
+  `);
+  assert.match(html, /class="json"/);
+});
+
+test("a redirect target is a file, not a command", () => {
+  const html = run(`return sh('wc -l a.txt > /tmp/out.txt')`);
+  const commands = [...html.matchAll(/class="sh-cmd">([^<]+)</g)].map((m) => m[1]);
+  assert.deepStrictEqual(commands, ["wc"], "only wc is being run");
+});
+
+test("a subshell still starts a command", () => {
+  const html = run(`return sh('(cd /tmp && ls)')`);
+  const commands = [...html.matchAll(/class="sh-cmd">([^<]+)</g)].map((m) => m[1]);
+  assert.deepStrictEqual(commands, ["cd", "ls"]);
+});
+
+test("changing the page-wide setting means it, even for boxes flipped by hand", () => {
+  const out = run(`
+    raw = false;
+    CALLS["g"] = {c:{function_name:"Bash",tool_call_id:"g",arguments:{command:"ls"}}, r:null};
+    TOOLRAW["g"] = true;               // this box was asked for the recording
+    const before = toolBody("g");
+    render = () => {};                 // the repaint is not what is under test
+    toggleRaw();                        // now the whole page is
+    const after = toolBody("g");
+    return [before, after, raw];
+  `);
+  assert.match(out[0], /class="json"/, "it was showing the recording");
+  assert.match(out[1], /class="json"/, "and still does, because the page now says so");
+  assert.strictEqual(out[2], true);
+});
+
+test("a file path is titled by its end, where the name is", () => {
+  const title = run(
+    `return TOOLVIEW.Read.title({file_path:"/private/tmp/very/long/way/down/ARCHITECTURE.md"})`,
+  );
+  assert.strictEqual(title, "down/ARCHITECTURE.md");
+});
+
+test("a command substitution does not stop the scanner", () => {
+  // $( matched no branch and the word reader could not move past $, so the page
+  // hung for ever on any command using one. 58 of them in one real session.
+  const html = run(`return sh('echo $(date) and $(basename /a/b)')`);
+  assert.match(html, /sh-var/);
+  assert.ok(html.includes("date"), "what is inside must still be there");
+});
+
+test("a lone dollar is just a character", () => {
+  const html = run(`return sh('echo 5$ and $')`);
+  assert.ok(html.includes("5$"), "it should survive");
+});
+
+test("every character survives the scanner", () => {
+  // The strongest check there is: what goes in comes out, tags aside. A branch
+  // that stops matching shows up here as mangled text rather than as a hang.
+  const samples = [
+    "echo $(date)",
+    'for f in $HOME/*; do echo "$f"; done',
+    "awk '{print $1}' file | sort -u > /tmp/o",
+    "x=$((1+2)); echo $x $$ $? $",
+    "cat <<'EOF'\nliteral $(not a call)\nEOF",
+    "curl -s https://x/a#b -o /tmp/x && echo done # a comment",
+  ];
+  for (const src of samples) {
+    const out = run(`return sh(${JSON.stringify(src)})`);
+    const back = out
+      .replace(/<[^>]+>/g, "")
+      .replace(/&quot;/g, '"')
+      .replace(/&#39;/g, "'")
+      .replace(/&lt;/g, "<")
+      .replace(/&gt;/g, ">")
+      .replace(/&amp;/g, "&");
+    assert.strictEqual(back, src, `mangled: ${JSON.stringify(src)}`);
+  }
+});
+
+test("a real 20,000-character command draws, and quickly", () => {
+  // This exact command hung the page: 448 lines of heredoc with 58 command
+  // substitutions in it. Kept as a fixture because no invented sample had the
+  // shape that broke it.
+  const command = JSON.parse(
+    readFileSync(join(__dirname, "fixtures", "big-command.json"), "utf8"),
+  );
+  const started = Date.now();
+  const html = run(`return shBlock(${JSON.stringify(command)})`);
+  const took = Date.now() - started;
+  assert.ok(html.includes("class=\"sh\""), "it should render");
+  assert.ok(took < 2000, `took ${took}ms, which is a page nobody waits for`);
+});

{transcript_viewer-0.6.2 → transcript_viewer-0.7.1}/uv.lock

@@ -388,7 +388,7 @@ wheels = [
 
 [[package]]
 name = "transcript-viewer"
-version = "0.6.2"
+version = "0.7.1"
 source = { editable = "." }
 dependencies = [
     { name = "atif-make" },