@askrjs/cli 0.0.22 → 0.0.23

package/dist/ssg-config.d.ts

@@ -64,6 +64,8 @@ interface SsgOutputBudgets {
   };
 }
 interface SsgOutputReportConfig {
+  /** Deployment pathname prefix stripped from root-absolute asset references. */
+  basePath?: string;
   budgets?: SsgOutputBudgets;
   /** Number of largest pages retained in the summary. Defaults to 20. */
   largestPages?: number;

package/dist/ssg.js

@@ -404,7 +404,7 @@ function isReportableAsset(filePath) {
 async function removeSsgOutputReport(outputDir) {
 	await fs.rm(path.join(outputDir, REPORT_PATH), { force: true });
 }
-function localReference(reference, documentPath) {
+function localReference(reference, documentPath, basePath) {
 	let resolved;
 	try {
 		const portableDocumentPath = documentPath.replaceAll("\\", "/");
@@ -416,11 +416,25 @@ function localReference(reference, documentPath) {
 	}
 	if (resolved.origin !== "https://askr.invalid") return void 0;
 	try {
-		return decodeURIComponent(resolved.pathname).replace(/^\/+/, "");
+		let pathname = decodeURIComponent(resolved.pathname);
+		if (basePath && reference.startsWith("/") && (pathname === basePath || pathname.startsWith(`${basePath}/`))) pathname = pathname.slice(basePath.length);
+		return pathname.replace(/^\/+/, "");
 	} catch {
 		return;
 	}
 }
+function deploymentBasePath(value) {
+	if (value === void 0 || value === "" || value === "/") return "";
+	if (typeof value !== "string" || !value.startsWith("/") || value.startsWith("//") || value.includes("?") || value.includes("#") || value.includes("\\")) throw new Error("outputReport.basePath must be an absolute URL pathname");
+	let decoded;
+	try {
+		decoded = decodeURIComponent(value);
+	} catch {
+		throw new Error("outputReport.basePath must use valid URL encoding");
+	}
+	if (decoded.split("/").some((segment) => segment === "." || segment === "..")) throw new Error("outputReport.basePath must not contain dot-segment traversal");
+	return decoded.replace(/\/+$/, "");
+}
 function positiveCount(value, fallback, label) {
 	const resolved = value ?? fallback;
 	if (!Number.isSafeInteger(resolved) || resolved < 1) throw new Error(`${label} must be a positive integer`);
@@ -433,6 +447,7 @@ function validateByteBudget(budget, label) {
 	}
 }
 function validateConfig(config) {
+	const basePath = deploymentBasePath(config.basePath);
 	const budgets = config.budgets;
 	validateByteBudget(budgets?.routes, "outputReport.budgets.routes");
 	for (const [route, budget] of Object.entries(budgets?.routeOverrides ?? {})) if (budget !== false) validateByteBudget(budget, `route override ${route}`);
@@ -443,6 +458,7 @@ function validateConfig(config) {
 	for (const [route, share] of hydrationShares) if (share !== void 0 && share !== false && (!Number.isFinite(share) || share < 0 || share > 1)) throw new Error(`hydration share for ${route} must be from 0 through 1`);
 	positiveCount(config.largestPages, 20, "outputReport.largestPages");
 	positiveCount(config.largestAssets, 20, "outputReport.largestAssets");
+	return basePath;
 }
 function budgetViolations(report, budgets = {}) {
 	const violations = [];
@@ -474,7 +490,7 @@ function budgetViolations(report, budgets = {}) {
 	return violations;
 }
 async function writeSsgOutputReport(outputDir, routes, inspections, config = {}) {
-	validateConfig(config);
+	const basePath = validateConfig(config);
 	const assets = [];
 	for (const filePath of (await emittedFiles(outputDir)).filter(isReportableAsset)) {
 		const measured = size(await fs.readFile(path.join(outputDir, filePath)));
@@ -495,7 +511,7 @@ async function writeSsgOutputReport(outputDir, routes, inspections, config = {})
 		const referenced = (references, type) => {
 			const resolved = [];
 			for (const reference of references) {
-				const localPath = localReference(reference, inspection.filePath);
+				const localPath = localReference(reference, inspection.filePath, basePath);
 				if (!localPath) continue;
 				const asset = assetMap.get(localPath);
 				if (!asset) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askrjs/cli",
-  "version": "0.0.22",
+  "version": "0.0.23",
   "description": "Unified CLI for the Askr platform",
   "homepage": "https://github.com/askrjs/askr-cli#readme",
   "bugs": {