fix(frontend): single-layer tool summary escaping and registry tests

Author: clean6378-max-it

static/js/render/registry.test.js

@@ -41,7 +41,7 @@ describe('TOOL_USE_RENDERERS', () => {
         expect(html).toContain('<script>');
     });
 
-    it('renderReadUse escapes file path in body', () => {
+    it('renderReadUse escapes file path in body and summary', () => {
         const html = renderToolUse({
             name: 'Read',
             input: { file_path: 'C:\\tmp\\<evil>.txt' },
@@ -81,8 +81,8 @@ describe('getToolSummary', () => {
         expect(getToolSummary('Bash', { command: 'ls -la' })).toContain('ls -la');
     });
 
-    it('formats Read summary with escaped path', () => {
-        expect(getToolSummary('Read', { file_path: 'a<b' })).toContain('&lt;b');
+    it('formats Read summary as plain text (escaping deferred to wrapToolUse)', () => {
+        expect(getToolSummary('Read', { file_path: 'a<b' })).toBe('Read: a<b');
     });
 });
 
@@ -147,4 +147,11 @@ describe('renderToolResult fallback', () => {
         expect(html).toContain('Tool result (custom_type)');
         expect(html).toContain('tool-result');
     });
+
+    it('uses fallback when result_type is an inherited property (e.g. constructor)', () => {
+        const html = renderToolResult({ result_type: 'constructor' });
+        expect(html).toContain('Tool result (constructor)');
+        expect(html).toContain('tool-result');
+        expect(Object.prototype.hasOwnProperty.call(TOOL_RESULT_RENDERERS, 'constructor')).toBe(false);
+    });
 });

static/js/render/tool_use/summary.js

@@ -1,15 +1,16 @@
-import { esc, truncate } from '../../shared/utils.js';
+import { truncate } from '../../shared/utils.js';
 
+/** Plain-text summaries; HTML escaping happens in wrapToolUse / finishToolResult. */
 export function getToolSummary(name, inp) {
     if (name === 'Bash') return `Bash: ${truncate(inp.command || '', 80)}`;
-    if (name === 'Read') return `Read: ${esc(inp.file_path || '')}`;
-    if (name === 'Write') return `Write: ${esc(inp.file_path || '')}`;
-    if (name === 'Edit') return `Edit: ${esc(inp.file_path || '')}`;
-    if (name === 'Glob') return `Glob: ${esc(inp.pattern || '')}`;
-    if (name === 'Grep') return `Grep: /${esc(inp.pattern || '')}/` + (inp.path ? ` in ${esc(inp.path)}` : '');
+    if (name === 'Read') return `Read: ${inp.file_path || ''}`;
+    if (name === 'Write') return `Write: ${inp.file_path || ''}`;
+    if (name === 'Edit') return `Edit: ${inp.file_path || ''}`;
+    if (name === 'Glob') return `Glob: ${inp.pattern || ''}`;
+    if (name === 'Grep') return `Grep: /${inp.pattern || ''}/` + (inp.path ? ` in ${inp.path}` : '');
     if (name === 'WebFetch') return `Fetch: ${truncate(inp.url || '', 80)}`;
     if (name === 'WebSearch') return `Search: ${truncate(inp.query || '', 80)}`;
-    if (name === 'Task') return `Task: ${esc(inp.subagent_type || '')} - ${esc(inp.description || '')}`;
+    if (name === 'Task') return `Task: ${inp.subagent_type || ''} - ${inp.description || ''}`;
     if (name === 'TodoWrite') return 'TodoWrite';
     if (name === 'AskUserQuestion') return 'AskUserQuestion';
     return name;