murashit_codex-panel/tests/features/chat/ui/thread-stream/stream-markdown-renderer.test.ts

// @vitest-environment jsdom

import { TFile } from "obsidian";
import { beforeEach, describe, expect, it, vi } from "vitest";

import { renderStreamMarkdown } from "../../../../../src/features/chat/ui/thread-stream/markdown-renderer.obsidian";
import { notices } from "../../../../mocks/obsidian";
import { installObsidianDomShims } from "../../../../support/dom";

installObsidianDomShims();

describe("renderStreamMarkdown", () => {
  beforeEach(() => {
    notices.length = 0;
  });

  it("renders basic markdown through micromark", () => {
    const context = streamMarkdownContext();
    const parent = document.createElement("div");

    renderStreamMarkdown(parent, "# Title\n\n**bold** text", context);

    expect(parent.querySelector("h1")?.textContent).toBe("Title");
    expect(parent.querySelector("strong")?.textContent).toBe("bold");
    expect(parent.textContent).toBe("Title\nbold text");
  });

  it("escapes raw HTML while streaming", () => {
    const context = streamMarkdownContext();
    const parent = document.createElement("div");

    renderStreamMarkdown(parent, '<img src=x onerror="alert(1)">\n\n<script>alert(1)</script>', context);

    expect(parent.querySelector("img")).toBeNull();
    expect(parent.querySelector("script")).toBeNull();
    expect(parent.textContent).toContain('<img src=x onerror="alert(1)">');
    expect(parent.textContent).toContain("<script>alert(1)</script>");
  });

  it("neutralizes unsafe link protocols while streaming", () => {
    const openLinkText = vi.fn();
    const context = streamMarkdownContext({ openLinkText });
    const parent = document.createElement("div");

    renderStreamMarkdown(parent, "[Run](javascript:alert(1))", context);
    const link = parent.querySelector<HTMLAnchorElement>("a");
    link?.click();

    expect(link?.textContent).toBe("Run");
    expect(link?.getAttribute("href")).toBe("");
    expect(openLinkText).not.toHaveBeenCalled();
    expect(notices).toEqual([]);
  });

  it("leaves wikilinks as plain text while streaming", () => {
    const context = streamMarkdownContext();
    const parent = document.createElement("div");

    renderStreamMarkdown(parent, "[[Project Note]]", context);

    expect(parent.textContent).toBe("[[Project Note]]");
    expect(parent.querySelector("a")).toBeNull();
  });

  it("opens safe vault file links through Obsidian", () => {
    const openLinkText = vi.fn();
    const context = streamMarkdownContext({ openLinkText, vaultPath: "/Users/showhey/Vault", vaultFiles: ["docs/Guide.md"] });
    const parent = document.createElement("div");

    renderStreamMarkdown(parent, "[Guide](/Users/showhey/Vault/docs/Guide.md)", context);
    parent.querySelector<HTMLAnchorElement>("a")?.click();

    expect(openLinkText).toHaveBeenCalledWith("docs/Guide.md", "Inbox.md", false);
  });

  it("does not open absolute file links outside the vault", () => {
    const openLinkText = vi.fn();
    const context = streamMarkdownContext({ openLinkText, vaultPath: "/Users/showhey/Vault" });
    const parent = document.createElement("div");

    renderStreamMarkdown(parent, "[Readme](/Users/showhey/Other/README.md)", context);
    parent.querySelector<HTMLAnchorElement>("a")?.click();

    expect(openLinkText).not.toHaveBeenCalled();
    expect(notices).toEqual(["Cannot open files outside the vault."]);
  });

  it("prevents unresolved vault file links from navigating", () => {
    const openLinkText = vi.fn();
    const context = streamMarkdownContext({ openLinkText, vaultPath: "/Users/showhey/Vault" });
    const parent = document.createElement("div");

    renderStreamMarkdown(parent, "[Missing](/Users/showhey/Vault/docs/Missing.md)", context);
    const event = new MouseEvent("click", { bubbles: true, cancelable: true });
    parent.querySelector<HTMLAnchorElement>("a")?.dispatchEvent(event);

    expect(openLinkText).not.toHaveBeenCalled();
    expect(event.defaultPrevented).toBe(true);
    expect(notices).toEqual([]);
  });
});

function streamMarkdownContext(options: { openLinkText?: ReturnType<typeof vi.fn>; vaultPath?: string; vaultFiles?: string[] } = {}) {
  const files = new Map((options.vaultFiles ?? []).map((path) => [path, tFile(path)]));
  return {
    app: {
      workspace: {
        getActiveFile: vi.fn(() => tFile("Inbox.md")),
        openLinkText: options.openLinkText ?? vi.fn(),
      },
      vault: {
        configDir: "vault-config",
        getAbstractFileByPath: (path: string) => files.get(path) ?? null,
      },
    } as never,
    vaultPath: options.vaultPath ?? "/vault",
  };
}

function tFile(path: string): TFile {
  const basename = path.split("/").pop()?.replace(/\.md$/, "") ?? path;
  return Object.assign(new TFile(), { path, basename });
}