fix: accept backtick DOMPurify markers and loop snapshot mocks

Match docs-bundled DOMPurify 3.4.14 version strings that use backticks,
and update session status tests to mock IAgentLoopService.snapshot.

Author: elkaix

apps/pythinker-code/src/tui/components/markdown/markdown.ts

@@ -169,4 +169,4 @@ export class Markdown extends Container {
   }
 }
 
-export { setMarkdownAltScreenActive, setMarkdownMermaidMode, setMarkdownRenderLatex, setMarkdownRenderRequester } from '../../utils/markdown-options';
+export { setMarkdownAltScreenActive, setMarkdownMermaidMode, setMarkdownRenderLatex, setMarkdownRenderRequester } from '#/tui/utils/markdown-options';

packages/agent-core-v2/test/app/sessionManager/sessionStatus.test.ts

@@ -141,7 +141,7 @@ describe('Session legacy status (best-effort runtime state)', () => {
         [IAgentPlanService, { status: () => Promise.resolve(null) }],
         [IAgentDynamicWorkflowService, { isActive: false }],
         [IAgentTowerService, { isActive: false }],
-        [IAgentLoopService, { status: () => ({ state: 'idle' }) }],
+        [IAgentLoopService, { snapshot: () => ({ state: 'idle' }) }],
         [IAgentTaskService, { list: () => [] }],
         [IAgentFullCompactionService, { compacting: null }],
       ]),
@@ -203,7 +203,7 @@ describe('Session legacy status (best-effort runtime state)', () => {
         [IAgentDynamicWorkflowService, { isActive: false }],
         [IAgentTowerService, { isActive: false }],
         [IModelService, { getDefaultModel: () => undefined }],
-        [IAgentLoopService, { status: () => ({ state: 'idle' }) }],
+        [IAgentLoopService, { snapshot: () => ({ state: 'idle' }) }],
         [IAgentTaskService, { list: () => [] }],
         [IAgentFullCompactionService, { compacting: null }],
       ]),
@@ -274,7 +274,7 @@ describe('Session legacy status (best-effort runtime state)', () => {
             },
           },
         ],
-        [IAgentLoopService, { status: () => ({ state: 'idle' }) }],
+        [IAgentLoopService, { snapshot: () => ({ state: 'idle' }) }],
         [IAgentTaskService, { list: () => [] }],
         [IAgentFullCompactionService, { compacting: null }],
       ]),
@@ -351,7 +351,7 @@ describe('Session legacy status (best-effort runtime state)', () => {
         [IAgentPlanService, { status: () => Promise.resolve(null) }],
         [IAgentDynamicWorkflowService, { isActive: false }],
         [IAgentTowerService, { isActive: false }],
-        [IAgentLoopService, { status: () => ({ state: 'idle' }) }],
+        [IAgentLoopService, { snapshot: () => ({ state: 'idle' }) }],
         [IAgentTaskService, { list: () => [] }],
         [IAgentFullCompactionService, { compacting: null }],
       ]),

scripts/security/check-artifacts.mjs

@@ -17,7 +17,7 @@ const vulnerableCode = [
   /\.version\s*=\s*["']3\.2\.7["']/,
   /\.version\s*=\s*["']3\.4\.7["']/,
 ];
-const safeCode = [/@license DOMPurify 3\.4\.14\b/, /\.version\s*=\s*["']3\.4\.14["']/];
+const safeCode = [/@license DOMPurify 3\.4\.14\b/, /\.version\s*=\s*["'`]3\.4\.14["'`]/];
 
 function compareVersions(left, right) {
   const parse = (value) => value.split('-')[0].split('.').map((part) => Number.parseInt(part, 10) || 0);