fix(desktop,daemon): keep replacement-pattern sequences verbatim in export titles

[cactusrabbit]

Fixes #6795

Why

injectTitle() (both apps/desktop/src/main/pdf-export.ts and apps/desktop/src/main/artifact-export.ts) passes the user-derived title as the string replacement of String.prototype.replace, so ECMA-262 GetSubstitution expands $$, $&, $``, and $'inside it. Artifact titles containing those sequences were corrupted in exported PDFs/images — dropped$, broken <title>tags, and duplicated document tails.assembleExample()in the daemon'sstatic-resource.ts` interpolates skill-derived slides and titles through the same mechanism.

Changes

• apps/desktop/src/main/pdf-export.ts — use a function replacement in injectTitle (matching the sibling injectBaseHref pattern).
• apps/desktop/src/main/artifact-export.ts — same change in its injectTitle.
• apps/daemon/src/routes/static-resource.ts — harden both interpolations in assembleExample (slides + title) the same way.
• Regression tests:
  • apps/desktop/tests/main/export-title-replacement-patterns.test.ts — drives exportPdfFromHtml and exportArtifact with titles containing $$, $&, $``, $'` and asserts the loaded document keeps the title verbatim (HTML-escaped only) and the body intact.
  • apps/daemon/tests/assemble-example-title-patterns.test.ts — asserts assembleExample interpolates slides and titles verbatim.

Surface area

• UI — n/a (no visual change; corrects rendered export documents)
• Keyboard shortcut — none
• CLI / env var — none
• API / contract — none
• Extension point — none
• i18n keys — none
• New top-level dependency — none
• Default behavior change — exported documents with $-pattern titles now render correctly
• None — targeted bug fix + tests

Validation

• pnpm --filter @open-design/desktop exec vitest run -c vitest.config.ts tests/main/export-title-replacement-patterns.test.ts — 2 passed
• pnpm --filter @open-design/daemon exec vitest run -c vitest.config.ts tests/assemble-example-title-patterns.test.ts — 1 passed
• pnpm --filter @open-design/desktop typecheck — passed
• pnpm --filter @open-design/daemon typecheck — passed
• pnpm guard — all checks passed except a pre-existing ci.yml packaged-leaf boundary failure, untouched by this PR

[lefarcen]

Hey @cactusrabbit — thanks for the focused fix here. Extending the hardening to the daemon-side assembleExample() path as well makes the overall direction very clear.

Heads-up: PR #6796, PR #6891, and PR #6931 are already open against issue #6795 and touch the same export-title path, so maintainers will likely consolidate around one path here rather than land parallel fixes.

[lefarcen]

🧪 Queued for QA validation — this PR changes exported document output, so it needs a manual QA pass before merge. Nothing needed from you right now; we’ll update here once that pass is done. Thanks for the contribution.

[lefarcen]

Hey @cactusrabbit — the write-up here is already easy to follow, especially the concrete Why/Changes split and the regression-test callouts. One body-level thing before pool review: since the UI box is checked, could you add a quick before/after screenshot (or exported-document capture) showing one of the $-pattern titles rendered correctly? That would complete the template without changing the rest of the description.

[nettee]

@cactusrabbit I reviewed all five changed files and verified that the function replacements preserve literal JavaScript replacement-pattern sequences across the desktop PDF/image exporters and daemon example assembly. The focused desktop (2 tests) and daemon (1 test) regression suites pass, along with both package typechecks, the workspace typecheck, and the repository guard. This is a nicely focused fix with clear regression coverage—thank you for carefully closing the loop on #6795!

_{🔁 Powered by Looper · runner=reviewer · agent=codex · An autonomous AI dev team for your GitHub repos.}

[AmyShang-alt]

@cactusrabbit

Thanks for the contribution. I completed QA validation for this PR.

QA Acceptance Record

Scope:

• Desktop PDF/image export title injection and daemon example assembly for literal JavaScript replacement-pattern sequences.

Verified:

• Exact PR head a09f1b1.
• Focused desktop and daemon regression suites passed (3 tests total).
• Literal $$, $&amp;, $', and $` title sequences remained intact in Electron export validation; PDF metadata matched the supplied title.
• Real Electron toolbar export produced a complete 10-page PDF with visible titles and intact layout.
• Required CI checks are green.

Not verified:

• Packaged-app export was not repeated across every supported OS.

Risks / notes:

• The change is narrowly scoped and has direct regression coverage. No analytics or static-asset behavior changed.

Conclusion:

• Accepted.

[open-design-bot]

🎉 📡 You just leveled up to Giotto

📡 ✨ Sending steady signals.

🙌 Your contributions are sending a clear signal across the network: you care about making Open Design better. Keep transmitting.

💛 Thanks for helping Open Design move forward. Keep building in the open. 🚀

---

📊 Rank #174 among 600+ contributors

🔗 Share on X (English) · 分享到 X（中文）

[lefarcen]

Heads-up: PR #6931 is also still open for issue #6795. Its current head is focused on the desktop regression test, while this PR carries the desktop code changes plus the daemon hardening follow-up, so it would be good to coordinate the scopes and avoid landing overlapping fixes twice.