@aria-framework/kit 0.1.0 → 0.2.0

package/README.md

@@ -70,11 +70,24 @@ splitName('Johan van der Merwe') // { first_name: 'Johan van der', last_name: 'M
 
 `splitName` splits on the **last** space (last word = surname). Compound
 surnames split imperfectly by design. If an app backfills a split in SQL,
-implement the same last-space rule and keep them in step. Also exported
-namespaced as `personName.{fullName,splitName}`.
+implement the same last-space rule and keep them in step.
+
+
+## isEmail — shared email-address validator (since 0.2.0)
+
+One definition of "looks like an email" for every form: trim, non-empty,
+≤254 chars (RFC 5321 cap), one `@` with a dotted domain. Pragmatic by design —
+mail servers are the real validators; this guards forms and lookups.
+
+```js
+if (!isEmail(req.body.email)) errors.push('A valid email is required.');
+```
 
 ## Changelog
 
+- **0.2.0** — added `isEmail(v)` (replaces per-route regex copies that had
+  already diverged on length handling); removed the redundant `personName`
+  namespace export — use the flat `fullName`/`splitName`.
 - **0.1.0** — first release. Extracted from Support101 `lib/` (safeReturnTo,
   likeEscape, fileSniff, trackingId, personName). One API change vs the app
   originals: `trackingId.generateUnique` takes an `isTaken(id)` callback

package/index.js

@@ -6,20 +6,22 @@
  *
  *   safeReturnTo(returnTo, {fallback, denyPrefix})  — open-redirect guard
  *   escapeLike(s)                                   — SQL LIKE escaping
+ *   isEmail(v)                                      — email-address validator
  *   fullName(first, last) / splitName(full)         — person-name helpers
  *   fileSniff.sniff(path) / fileSniff.matches(path, mime)
  *   trackingId.generate() / trackingId.generateUnique(isTaken, maxAttempts)
  */
 
 const { escapeLike } = require('./likeEscape');
+const { isEmail } = require('./isEmail');
 const { fullName, splitName } = require('./personName');
 
 module.exports = {
   safeReturnTo: require('./safeReturnTo'),
   escapeLike,
+  isEmail,
   fullName,
   splitName,
   fileSniff: require('./fileSniff'),
-  trackingId: require('./trackingId'),
-  personName: { fullName, splitName }
+  trackingId: require('./trackingId')
 };

package/isEmail.js

@@ -0,0 +1,22 @@
+/**
+ * Shared email-address validator — ONE definition of "looks like an email"
+ * across every form/entry point, so validation can't drift per route (the
+ * exact bug this replaces: four copy-pasted regexes where one form rejected
+ * over-long addresses, two accepted them, and one silently truncated).
+ *
+ * Deliberately pragmatic: the classic no-spaces one-@ shape plus the RFC 5321
+ * 254-char total-length cap. Not an RFC 5322 grammar — mail servers are the
+ * real validators; this guards forms and lookups.
+ *
+ * @param {*} v - candidate value (trimmed before testing; non-strings fail)
+ * @returns {boolean}
+ */
+
+const EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+
+function isEmail(v) {
+  const s = typeof v === 'string' ? v.trim() : '';
+  return s.length > 0 && s.length <= 254 && EMAIL_RE.test(s);
+}
+
+module.exports = { isEmail };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aria-framework/kit",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Aria App Framework — kit module. Small dependency-free server utilities: open-redirect guard (safeReturnTo), SQL LIKE escaping, magic-byte upload validation (fileSniff), Crockford base32 tracking IDs, and person-name compose/split helpers.",
   "license": "UNLICENSED",
   "private": false,
@@ -12,6 +12,7 @@
     "index.js",
     "safeReturnTo.js",
     "likeEscape.js",
+    "isEmail.js",
     "fileSniff.js",
     "trackingId.js",
     "personName.js"