@abide/abide 0.121.0 → 0.121.1

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @abide/abide
 
+## 0.121.1
+
+### Patch Changes
+
+- 7d6571d: a pairing link written into an href survives the URL scheme check — abide-bridge: joins the safe set, and the render warning names the set it checked against (RULEBOOK 32.20, 44.40) ([`aaba479`](https://github.com/briancray/abide/commit/aaba479a86b318d2441e920b6f7cfd124cb6c75e))
+
 ## 0.121.0
 
 ### Minor Changes

package/docs/RULEBOOK.md

@@ -1959,8 +1959,8 @@ body.
 MUST NOT be built as a string.
 
 32.20 An interpolation in a URL-typed attribute MUST be scheme-checked, and a scheme outside
-`http:`, `https:`, `mailto:`, `tel:`, `blob:`, `data:` or a relative reference MUST be dropped and warned on
-`abide:render`, naming the attribute and not the value.
+`http:`, `https:`, `mailto:`, `tel:`, `blob:`, `data:`, `abide-bridge:` (44.40) or a relative
+reference MUST be dropped and warned on `abide:render`, naming the attribute and not the value.
 
 32.21 A control block MUST bind each reactive read and probe call in its subject once for the body.
 

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@abide/abide",
-    "version": "0.121.0",
+    "version": "0.121.1",
     "type": "module",
     "description": "Isomorphic type-safe framework for reactive async interfaces for humans and machines",
     "license": "MIT",

package/src/server/claudeCode.ts

@@ -8,6 +8,7 @@
 // directory, settings — is not an option here at all, and its built-in `tools` are a request the visitor
 // grants or does not: the bridge decides (44.15, 44.16, 44.29).
 
+import { BRIDGE_SCHEME } from '#shared/BRIDGE_SCHEME.ts'
 import { mounted } from '#shared/mount.ts'
 import { refuse } from '#shared/refuse.ts'
 
@@ -19,7 +20,6 @@ import {
     forwardOf,
     type Provider,
 } from './assistant.ts'
-import { BRIDGE_SCHEME } from './BRIDGE_SCHEME.ts'
 import { BRIDGE_VERSION } from './BRIDGE_VERSION.ts'
 import {
     followSignIn,

package/src/{server → shared}/BRIDGE_SCHEME.ts

@@ -1,3 +1,5 @@
 // 44.40 — the scheme a pairing link is written in, which the handler `abide-bridge install` registers
-// opens. The bridge spells it out as `PAIRING_SCHEME`, and a test holds the two equal.
+// opens. The bridge spells it out as `PAIRING_SCHEME`, and a test holds the two equal. A leaf in
+// #shared because both seams read it: the server mints the link, and 32.20's `safeUrl` lets a page
+// write it into an `href`.
 export const BRIDGE_SCHEME = 'abide-bridge'

package/src/shared/attributeText.ts

@@ -10,7 +10,7 @@ import { BOOLEAN_ATTRIBUTES } from './BOOLEAN_ATTRIBUTES.ts'
 import { escapeAttribute } from './escapeText.ts'
 import { RENDER_LOG } from './log.ts'
 import { textOf } from './Raw.ts'
-import { safeUrl } from './safeUrl.ts'
+import { SAFE_SCHEMES, safeUrl } from './safeUrl.ts'
 import { URL_ATTRIBUTES } from './URL_ATTRIBUTES.ts'
 
 /**
@@ -31,7 +31,7 @@ export function attributeText(name: string, value: unknown): string | null {
     const safe = safeUrl(text)
     if (safe !== text)
         RENDER_LOG.warning(
-            `abide: \`${name}\` was handed a URL whose scheme is not http:, https:, mailto:, tel:, blob: or data:, and is written empty. RULEBOOK 32.20.`,
+            `abide: \`${name}\` was handed a URL whose scheme is not one of ${[...SAFE_SCHEMES].join(' ')}, and is written empty. RULEBOOK 32.20.`,
         )
     return safe
 }

package/src/shared/safeUrl.ts

@@ -6,15 +6,22 @@
 //
 // The warning on `abide:render` the clause also asks for is `attributeText`'s, which knows the
 // attribute's name.
+//
+// `abide-bridge:` IS IN THE SET because abide mints it: a pairing's `link` (44.40) is written into an
+// `href` or the visitor cannot open it, and the docs' own pairing page does exactly that. It is the
+// one scheme, not custom schemes generally — what it opens asks the visitor before it does anything,
+// every time, naming the site it pairs with (44.42), so a link from anywhere can do no more than ask.
+import { BRIDGE_SCHEME } from './BRIDGE_SCHEME.ts'
 import { textOf } from './Raw.ts'
 
-const SAFE_SCHEMES = new Set([
+export const SAFE_SCHEMES = new Set([
     'http:',
     'https:',
     'mailto:',
     'tel:',
     'blob:',
     'data:',
+    `${BRIDGE_SCHEME}:`,
 ])
 
 /** A URL attribute's text, or `''` where its scheme is outside the safe set. */