Implements Phases 1-8 of the TFTSR implementation plan. Rust backend (Tauri 2.x, src-tauri/): - Multi-provider AI: OpenAI-compatible, Anthropic, Gemini, Mistral, Ollama - PII detection engine: 11 regex patterns with overlap resolution - SQLCipher AES-256 encrypted database with 10 versioned migrations - 28 Tauri IPC commands for triage, analysis, document, and system ops - Ollama: hardware probe, model recommendations, pull/delete with events - RCA and blameless post-mortem Markdown document generators - PDF export via printpdf - Audit log: SHA-256 hash of every external data send - Integration stubs for Confluence, ServiceNow, Azure DevOps (v0.2) Frontend (React 18 + TypeScript + Vite, src/): - 9 pages: full triage workflow NewIssue→LogUpload→Triage→Resolution→RCA→Postmortem→History+Settings - 7 components: ChatWindow, TriageProgress, PiiDiffViewer, DocEditor, HardwareReport, ModelSelector, UI primitives - 3 Zustand stores: session, settings (persisted), history - Type-safe tauriCommands.ts matching Rust backend types exactly - 8 IT domain system prompts (Linux, Windows, Network, K8s, DB, Virt, HW, Obs) DevOps: - .woodpecker/test.yml: rustfmt, clippy, cargo test, tsc, vitest on every push - .woodpecker/release.yml: linux/amd64 + linux/arm64 builds, Gogs release upload Verified: - cargo check: zero errors - tsc --noEmit: zero errors - vitest run: 13/13 unit tests passing Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
176 lines
5.2 KiB
JavaScript
176 lines
5.2 KiB
JavaScript
/**
|
||
* @import {Root as HastRoot} from 'hast'
|
||
* @import {Root as MdastRoot} from 'mdast'
|
||
* @import {Options as ToHastOptions} from 'mdast-util-to-hast'
|
||
* @import {Processor} from 'unified'
|
||
* @import {VFile} from 'vfile'
|
||
*/
|
||
|
||
/**
|
||
* @typedef {Omit<ToHastOptions, 'file'>} Options
|
||
*
|
||
* @callback TransformBridge
|
||
* Bridge-mode.
|
||
*
|
||
* Runs the destination with the new hast tree.
|
||
* Discards result.
|
||
* @param {MdastRoot} tree
|
||
* Tree.
|
||
* @param {VFile} file
|
||
* File.
|
||
* @returns {Promise<undefined>}
|
||
* Nothing.
|
||
*
|
||
* @callback TransformMutate
|
||
* Mutate-mode.
|
||
*
|
||
* Further transformers run on the hast tree.
|
||
* @param {MdastRoot} tree
|
||
* Tree.
|
||
* @param {VFile} file
|
||
* File.
|
||
* @returns {HastRoot}
|
||
* Tree (hast).
|
||
*/
|
||
|
||
import {toHast} from 'mdast-util-to-hast'
|
||
|
||
/**
|
||
* Turn markdown into HTML.
|
||
*
|
||
* ##### Notes
|
||
*
|
||
* ###### Signature
|
||
*
|
||
* * if a processor is given,
|
||
* runs the (rehype) plugins used on it with a hast tree,
|
||
* then discards the result (*bridge mode*)
|
||
* * otherwise,
|
||
* returns a hast tree,
|
||
* the plugins used after `remarkRehype` are rehype plugins (*mutate mode*)
|
||
*
|
||
* > 👉 **Note**:
|
||
* > It’s highly unlikely that you want to pass a `processor`.
|
||
*
|
||
* ###### HTML
|
||
*
|
||
* Raw HTML is available in mdast as `html` nodes and can be embedded in hast
|
||
* as semistandard `raw` nodes.
|
||
* Most plugins ignore `raw` nodes but two notable ones don’t:
|
||
*
|
||
* * `rehype-stringify` also has an option `allowDangerousHtml` which will
|
||
* output the raw HTML.
|
||
* This is typically discouraged as noted by the option name but is useful if
|
||
* you completely trust authors
|
||
* * `rehype-raw` can handle the raw embedded HTML strings by parsing them
|
||
* into standard hast nodes (`element`, `text`, etc);
|
||
* this is a heavy task as it needs a full HTML parser,
|
||
* but it is the only way to support untrusted content
|
||
*
|
||
* ###### Footnotes
|
||
*
|
||
* Many options supported here relate to footnotes.
|
||
* Footnotes are not specified by CommonMark,
|
||
* which we follow by default.
|
||
* They are supported by GitHub,
|
||
* so footnotes can be enabled in markdown with `remark-gfm`.
|
||
*
|
||
* The options `footnoteBackLabel` and `footnoteLabel` define natural language
|
||
* that explains footnotes,
|
||
* which is hidden for sighted users but shown to assistive technology.
|
||
* When your page is not in English,
|
||
* you must define translated values.
|
||
*
|
||
* Back references use ARIA attributes,
|
||
* but the section label itself uses a heading that is hidden with an
|
||
* `sr-only` class.
|
||
* To show it to sighted users,
|
||
* define different attributes in `footnoteLabelProperties`.
|
||
*
|
||
* ###### Clobbering
|
||
*
|
||
* Footnotes introduces a problem,
|
||
* as it links footnote calls to footnote definitions on the page through `id`
|
||
* attributes generated from user content,
|
||
* which results in DOM clobbering.
|
||
*
|
||
* DOM clobbering is this:
|
||
*
|
||
* ```html
|
||
* <p id=x></p>
|
||
* <script>alert(x) // `x` now refers to the DOM `p#x` element</script>
|
||
* ```
|
||
*
|
||
* Elements by their ID are made available by browsers on the `window` object,
|
||
* which is a security risk.
|
||
* Using a prefix solves this problem.
|
||
*
|
||
* More information on how to handle clobbering and the prefix is explained in
|
||
* *Example: headings (DOM clobbering)* in `rehype-sanitize`.
|
||
*
|
||
* ###### Unknown nodes
|
||
*
|
||
* Unknown nodes are nodes with a type that isn’t in `handlers` or `passThrough`.
|
||
* The default behavior for unknown nodes is:
|
||
*
|
||
* * when the node has a `value`
|
||
* (and doesn’t have `data.hName`, `data.hProperties`, or `data.hChildren`,
|
||
* see later),
|
||
* create a hast `text` node
|
||
* * otherwise,
|
||
* create a `<div>` element (which could be changed with `data.hName`),
|
||
* with its children mapped from mdast to hast as well
|
||
*
|
||
* This behavior can be changed by passing an `unknownHandler`.
|
||
*
|
||
* @overload
|
||
* @param {Processor} processor
|
||
* @param {Readonly<Options> | null | undefined} [options]
|
||
* @returns {TransformBridge}
|
||
*
|
||
* @overload
|
||
* @param {Readonly<Options> | null | undefined} [options]
|
||
* @returns {TransformMutate}
|
||
*
|
||
* @overload
|
||
* @param {Readonly<Options> | Processor | null | undefined} [destination]
|
||
* @param {Readonly<Options> | null | undefined} [options]
|
||
* @returns {TransformBridge | TransformMutate}
|
||
*
|
||
* @param {Readonly<Options> | Processor | null | undefined} [destination]
|
||
* Processor or configuration (optional).
|
||
* @param {Readonly<Options> | null | undefined} [options]
|
||
* When a processor was given,
|
||
* configuration (optional).
|
||
* @returns {TransformBridge | TransformMutate}
|
||
* Transform.
|
||
*/
|
||
export default function remarkRehype(destination, options) {
|
||
if (destination && 'run' in destination) {
|
||
/**
|
||
* @type {TransformBridge}
|
||
*/
|
||
return async function (tree, file) {
|
||
// Cast because root in -> root out.
|
||
const hastTree = /** @type {HastRoot} */ (
|
||
toHast(tree, {file, ...options})
|
||
)
|
||
await destination.run(hastTree, file)
|
||
}
|
||
}
|
||
|
||
/**
|
||
* @type {TransformMutate}
|
||
*/
|
||
return function (tree, file) {
|
||
// Cast because root in -> root out.
|
||
// To do: in the future, disallow ` || options` fallback.
|
||
// With `unified-engine`, `destination` can be `undefined` but
|
||
// `options` will be the file set.
|
||
// We should not pass that as `options`.
|
||
return /** @type {HastRoot} */ (
|
||
toHast(tree, {file, ...(destination || options)})
|
||
)
|
||
}
|
||
}
|