- {message.content}
+
{!!message.sources?.length && (
diff --git a/frontend/tests/personal-agent-markdown.test.tsx b/frontend/tests/personal-agent-markdown.test.tsx
new file mode 100644
index 0000000..3809544
--- /dev/null
+++ b/frontend/tests/personal-agent-markdown.test.tsx
@@ -0,0 +1,304 @@
+import { afterEach, beforeEach, expect, test } from "bun:test";
+import { GlobalWindow } from "happy-dom";
+import { act } from "react";
+import type { Root } from "react-dom/client";
+import type { AgentMessage, ConversationDetail } from "../src/api/personalAgent";
+
+const conversationId = "markdown-regression";
+const conversationTitle = "Markdown 回归会话";
+const timestamp = "2026-01-01T00:00:00.000Z";
+const tableMarkdown = [
+ "| 能力方向 | 当前重点 | 下一步 |",
+ "| --- | --- | --- |",
+ "| TypeScript | **联合类型** | 编写类型守卫 |",
+ "| React | 状态管理 | 练习 `useState` |",
+].join("\n");
+
+let browser: GlobalWindow;
+let host: HTMLDivElement;
+let root: Root | undefined;
+let historyContent: string;
+let replyContent: string;
+let messages: AgentMessage[];
+let requests: string[];
+let sentMessages: Array<{ message: string; conversation_id: string | null }>;
+let unexpectedRequests: string[];
+let originalFetch: typeof fetch;
+const originals = new Map();
+
+const json = (data: unknown) => new Response(JSON.stringify(data), {
+ headers: { "Content-Type": "application/json" },
+});
+
+beforeEach(() => {
+ // GlobalWindow 复用宿主构造器，避免 Bun 的 VM 上下文缺少 SyntaxError；仍禁用页面脚本执行。
+ //
+ // GlobalWindow supplies host constructors missing from Bun's VM context; page script evaluation stays disabled.
+ browser = new GlobalWindow({
+ url: "http://localhost",
+ settings: {
+ enableJavaScriptEvaluation: false,
+ disableJavaScriptFileLoading: true,
+ disableCSSFileLoading: true,
+ navigation: { disableChildFrameNavigation: true },
+ },
+ });
+ Object.defineProperty(browser.HTMLElement.prototype, "scrollIntoView", {
+ configurable: true,
+ value: () => {},
+ });
+ for (const [key, value] of Object.entries({
+ window: browser,
+ document: browser.document,
+ navigator: browser.navigator,
+ localStorage: browser.localStorage,
+ HTMLElement: browser.HTMLElement,
+ Element: browser.Element,
+ Node: browser.Node,
+ MutationObserver: browser.MutationObserver,
+ getComputedStyle: browser.getComputedStyle.bind(browser),
+ requestAnimationFrame: browser.requestAnimationFrame.bind(browser),
+ cancelAnimationFrame: browser.cancelAnimationFrame.bind(browser),
+ IS_REACT_ACT_ENVIRONMENT: true,
+ })) {
+ originals.set(key, Object.getOwnPropertyDescriptor(globalThis, key));
+ Object.defineProperty(globalThis, key, { configurable: true, writable: true, value });
+ }
+ host = document.createElement("div");
+ document.body.append(host);
+ historyContent = `## 学习安排\n\n${tableMarkdown}`;
+ replyContent = `## 后续学习安排\n\n${tableMarkdown}`;
+ messages = [];
+ requests = [];
+ sentMessages = [];
+ unexpectedRequests = [];
+ originalFetch = globalThis.fetch;
+
+ // 只允许约定的内存 API 路由；未知请求直接失败，绝不转发到真实服务。
+ //
+ // Only the in-memory API routes below are allowed; unknown requests fail without forwarding.
+ globalThis.fetch = (async (input, options) => {
+ const url = new URL(typeof input === "string" || input instanceof URL ? input : input.url,
+ "http://localhost");
+ const method = (options?.method ?? (input instanceof Request ? input.method : "GET")).toUpperCase();
+ const request = `${method} ${url.pathname}`;
+ requests.push(request);
+ const summary = {
+ conversation_id: conversationId,
+ title: conversationTitle,
+ message_count: messages.length,
+ created_at: timestamp,
+ updated_at: timestamp,
+ };
+ if (url.origin === "http://localhost") {
+ if (request === "GET /api/personal-agent/documents") {
+ return json({ items: [], supported_extensions: [".md"], max_upload_bytes: 20 * 1024 * 1024 });
+ }
+ if (request === "GET /api/personal-agent/conversations") return json({ items: [summary] });
+ if (request === `GET /api/personal-agent/conversations/${conversationId}`) {
+ return json({ ...summary, user_id: "markdown-test-user", messages } satisfies ConversationDetail);
+ }
+ if (request === "POST /api/personal-agent/chat") {
+ const payload = JSON.parse(String(options?.body));
+ sentMessages.push(payload);
+ const reply: AgentMessage = {
+ role: "assistant", content: replyContent, created_at: timestamp, sources: [],
+ };
+ messages.push({ role: "user", content: payload.message, created_at: timestamp }, reply);
+ return json({ conversation_id: conversationId, title: conversationTitle, message: reply });
+ }
+ }
+ unexpectedRequests.push(request);
+ throw new Error(`Unexpected API request: ${request}`);
+ }) as typeof fetch;
+});
+
+afterEach(async () => {
+ try {
+ if (root) await act(async () => root!.unmount());
+ await browser.happyDOM.close();
+ } finally {
+ root = undefined;
+ globalThis.fetch = originalFetch;
+ for (const [key, descriptor] of originals) {
+ if (descriptor) Object.defineProperty(globalThis, key, descriptor);
+ else Reflect.deleteProperty(globalThis, key);
+ }
+ originals.clear();
+ }
+ expect(unexpectedRequests).toEqual([]);
+});
+
+async function settle() {
+ await act(async () => { await new Promise((resolve) => setTimeout(resolve, 0)); });
+}
+
+async function openHistory(initialMessages?: AgentMessage[]) {
+ messages = initialMessages ?? [
+ { role: "user", content: "请整理学习计划", created_at: timestamp },
+ { role: "assistant", content: historyContent, created_at: timestamp, sources: [] },
+ ];
+ // 独立运行时先安装 DOM，再加载真实页面；同进程中的 React DOM 可能已由其他测试加载。
+ //
+ // Install the DOM before loading the real page; another test may already have loaded React DOM in this process.
+ const [{ default: PersonalAgent }, { createRoot }] = await Promise.all([
+ import("../src/pages/PersonalAgent"), import("react-dom/client"),
+ ]);
+ root = createRoot(host);
+ await act(async () => { root!.render(('button[aria-label="收起资料库"]');
+ expect(collapseLibrary).not.toBeNull();
+ await act(async () => { collapseLibrary!.click(); });
+ expect(expectIsolatedFootnotes()).toEqual(initialMarkup);
+});
+
+test("历史消息不生成可执行的原始 HTML 或 javascript/data 危险链接", async () => {
+ historyContent = [
+ "## 安全渲染", "",
+ '', "",
+ '
', "",
+ '', "",
+ '原始链接', "",
+ "[危险脚本](javascript:alert%281%29)", "",
+ "[危险数据](data:text/html;base64,PHNjcmlwdD4=)", "",
+ "[安全链接](https://example.com/safe)",
+ ].join("\n");
+ await openHistory();
+ expect(texts(host, "h2")).toContain("安全渲染");
+ // 排除活动 HTML 节点及危险 href，不能仅凭 happy-dom 禁用脚本就判定安全。
+ //
+ // Exclude active HTML nodes and unsafe hrefs instead of relying only on happy-dom disabling scripts.
+ expect(host.querySelector("script, iframe, img, #raw-agent-html, [onerror], [onclick]")).toBeNull();
+ expect(Reflect.get(browser, "__agentMarkdownExecuted")).toBeUndefined();
+ expect(host.textContent).toContain("危险脚本");
+ expect(host.textContent).toContain("危险数据");
+ const unsafeLinks = Array.from(host.querySelectorAll("a[href]"))
+ .filter((link) => /^(?:javascript|vbscript|data):/i.test(link.getAttribute("href")!.trim()));
+ expect(unsafeLinks).toHaveLength(0);
+ const safeLink = Array.from(host.querySelectorAll("a")).find((link) => link.textContent === "安全链接");
+ expect(safeLink?.getAttribute("href")).toBe("https://example.com/safe");
+});
+
+test("继续聊点击建议问题后，新的 Agent 回复也渲染三列表格而非原始管道文本", async () => {
+ await openHistory([]);
+ expect(host.querySelectorAll("table")).toHaveLength(0);
+ // 通过建议问题的真实点击验证发送链路，避免 textarea 合成事件受 React DOM 模块加载顺序影响。
+ //
+ // Exercise sending through a real starter click, avoiding synthesized textarea events sensitive to React DOM import order.
+ const question = "结合我的错题，帮我安排一周复习计划";
+ const starter = Array.from(host.querySelectorAll("button"))
+ .find((button) => button.textContent === question);
+ expect(starter).toBeDefined();
+ await act(async () => { starter!.click(); });
+ await settle();
+ expect(requests).toContain("POST /api/personal-agent/chat");
+ expect(sentMessages).toEqual([{ message: question, conversation_id: conversationId }]);
+ expect(host.textContent).toContain(question);
+ expect(texts(host, "h2")).toContain("后续学习安排");
+ expectThreeColumnTable();
+});