@burdenoff/fe-libs 2026.1023.5 → 2026.1023.7

package/dist/shell-native/deep-link-context.js

@@ -1,5 +1,6 @@
 import { DEFAULT_ACTIVE_CONTEXT_URL_PARAMS as e } from "../shared/providers/shell/ActiveContextStorage.js";
-import { isSafeInAppPath as t } from "./deep-link.js";
+import { isSafeInAppPath as t } from "../shared/navigation/inAppPath.js";
+import "./deep-link.js";
 //#region src/shell-native/deep-link-context.ts
 var n = /^(?:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}|c[a-z0-9]{8,32})$/i;
 function r(t, r = {}) {

package/dist/shell-native/deep-link.d.ts

@@ -1,3 +1,5 @@
+import { isSafeInAppPath } from '../shared/navigation/inAppPath';
+export { isSafeInAppPath };
 export type DeepLinkNavigator = (path: string) => void;
 /**
  * How long `bootNativeShell` waits for a router to call
@@ -5,12 +7,6 @@ export type DeepLinkNavigator = (path: string) => void;
  * through `history.pushState` + `popstate` (see `armDeepLinkFallback`).
  */
 export declare const DEFAULT_DEEP_LINK_FALLBACK_DELAY_MS = 4000;
-/**
- * True for a same-origin, in-app path: `/x`, `/x?y#z`. Refuses protocol-relative
- * (`//host`, `/\host`) and anything that is not a rooted path, so a deep link or
- * push payload can never steer the webview to another origin.
- */
-export declare function isSafeInAppPath(path: string): boolean;
 /**
  * Map a deep-link URL to an in-app SPA path. Handles both
  * `scheme://app/path?x` (custom scheme; host is the synthetic `app`) and

package/dist/shell-native/deep-link.js

@@ -1,19 +1,12 @@
 import { getDesktopBridge as e } from "../shared/native/desktop.js";
 import { isNativePluginAvailable as t } from "./platform.js";
 import { getLegacyElectronBridge as n } from "./desktop-bridge.js";
-import { App as r } from "@capacitor/app";
+import { isSafeInAppPath as r } from "../shared/navigation/inAppPath.js";
+import { App as i } from "@capacitor/app";
 //#region src/shell-native/deep-link.ts
-var i = 4e3, a = [], o = null, s = null, c = !1;
-function l(e) {
-	if (typeof e != "string" || !e.startsWith("/") || e.startsWith("//") || e.startsWith("/\\")) return !1;
-	for (let t = 0; t < e.length; t += 1) {
-		let n = e.charCodeAt(t);
-		if (n < 32 || n === 127) return !1;
-	}
-	return !0;
-}
+var a = 4e3, o = [], s = null, c = null, l = !1;
 function u(e) {
-	if (l(e) && !(typeof window > "u")) try {
+	if (r(e) && !(typeof window > "u")) try {
 		window.history.pushState(null, "", e);
 		let t = typeof PopStateEvent == "function" ? new PopStateEvent("popstate", { state: null }) : new Event("popstate");
 		window.dispatchEvent(t);
@@ -22,13 +15,13 @@ function u(e) {
 	}
 }
 function d() {
-	return o || (c ? u : null);
+	return s || (l ? u : null);
 }
 function f() {
 	let e = d();
-	if (!e || a.length === 0) return;
-	let t = a;
-	a = [];
+	if (!e || o.length === 0) return;
+	let t = o;
+	o = [];
 	for (let n of t) e(n);
 }
 function p(e) {
@@ -46,7 +39,7 @@ function m(e) {
 }
 async function h() {
 	if (t("App")) try {
-		await r.addListener("appUrlOpen", (e) => m(e.url));
+		await i.addListener("appUrlOpen", (e) => m(e.url));
 	} catch {}
 }
 function g() {
@@ -62,27 +55,27 @@ async function _() {
 	g(), await h();
 }
 function v(e) {
-	return o = e, f(), () => {
-		o === e && (o = null);
+	return s = e, f(), () => {
+		s === e && (s = null);
 	};
 }
 function y() {
-	o = null;
+	s = null;
 }
 function b(e) {
 	let t = d();
-	t ? t(e) : a.push(e);
+	t ? t(e) : o.push(e);
 }
-function x(e = i) {
-	S(), s = setTimeout(() => {
-		s = null, c = !0, !o && a.length > 0 && console.debug("[shell-native] no deep-link navigator registered; routing queued links via history"), f();
+function x(e = a) {
+	S(), c = setTimeout(() => {
+		c = null, l = !0, !s && o.length > 0 && console.debug("[shell-native] no deep-link navigator registered; routing queued links via history"), f();
 	}, Number.isFinite(e) && e > 0 ? e : 0);
 }
 function S() {
-	s !== null && clearTimeout(s), s = null, c = !1;
+	c !== null && clearTimeout(c), c = null, l = !1;
 }
 function C() {
-	S(), a = [], o = null;
+	S(), o = [], s = null;
 }
 //#endregion
-export { i as DEFAULT_DEEP_LINK_FALLBACK_DELAY_MS, x as armDeepLinkFallback, y as clearDeepLinkNavigator, p as deepLinkUrlToPath, S as disarmDeepLinkFallback, _ as installDeepLinkHandler, l as isSafeInAppPath, b as navigateDeepLinkPath, v as registerDeepLinkNavigator, C as resetDeepLinksForTests };
+export { a as DEFAULT_DEEP_LINK_FALLBACK_DELAY_MS, x as armDeepLinkFallback, y as clearDeepLinkNavigator, p as deepLinkUrlToPath, S as disarmDeepLinkFallback, _ as installDeepLinkHandler, b as navigateDeepLinkPath, v as registerDeepLinkNavigator, C as resetDeepLinksForTests };

package/dist/shell-native.js

@@ -13,7 +13,8 @@ import { impactFeedback as D, notificationFeedback as O, selectionFeedback as k
 import { showNativeToast as A } from "./shell-native/toast.js";
 import { shareContent as j } from "./shell-native/share.js";
 import { installNativeBridge as M } from "./shell-native/bridge.js";
-import { DEFAULT_DEEP_LINK_FALLBACK_DELAY_MS as N, armDeepLinkFallback as P, clearDeepLinkNavigator as F, deepLinkUrlToPath as I, disarmDeepLinkFallback as L, installDeepLinkHandler as R, isSafeInAppPath as z, navigateDeepLinkPath as B, registerDeepLinkNavigator as V, resetDeepLinksForTests as H } from "./shell-native/deep-link.js";
+import { isSafeInAppPath as N } from "./shared/navigation/inAppPath.js";
+import { DEFAULT_DEEP_LINK_FALLBACK_DELAY_MS as P, armDeepLinkFallback as F, clearDeepLinkNavigator as I, deepLinkUrlToPath as L, disarmDeepLinkFallback as R, installDeepLinkHandler as z, navigateDeepLinkPath as B, registerDeepLinkNavigator as V, resetDeepLinksForTests as H } from "./shell-native/deep-link.js";
 import { populateDeviceInfo as U } from "./shell-native/device.js";
 import { KEYBOARD_HEIGHT_CSS_VAR as W, KEYBOARD_OPEN_CLASS as G, configureKeyboard as K, keyboardHandlers as q } from "./shell-native/keyboard.js";
 import { NETWORK_STATUS_EVENT as J, getLastNetworkStatus as Y, installNetworkListener as X } from "./shell-native/network.js";
@@ -30,4 +31,4 @@ import { useDeepLinkNavigator as Ve } from "./shell-native/useDeepLinkNavigator.
 import { defineCapacitorConfig as He, isValidAllowNavigationRule as Ue } from "./shell-native/capacitor-config.js";
 import { defineWebManifest as We } from "./shell-native/web-manifest.js";
 import { SERVICE_WORKER_TEMPLATE as Ge, renderServiceWorker as Ke } from "./shell-native/service-worker.js";
-export { Te as APP_READY_EVENT, Ae as DARK_FAMILY_THEMES, Re as DEEP_LINK_CONTEXT_ID_PATTERN, _ as DEFAULT_AUTH_INTERCEPT_PREFIXES, N as DEFAULT_DEEP_LINK_FALLBACK_DELAY_MS, W as KEYBOARD_HEIGHT_CSS_VAR, G as KEYBOARD_OPEN_CLASS, t as NATIVE_PREVIEW_QUERY_PARAM, n as NATIVE_PREVIEW_STORAGE_KEY, J as NETWORK_STATUS_EVENT, Q as PUSH_TOKEN_EVENT, ve as PWA_INSTALLED_EVENT, ye as PWA_INSTALL_AVAILABLE_EVENT, be as PWA_UPDATE_READY_EVENT, Ge as SERVICE_WORKER_TEMPLATE, ne as SW_NOTIFICATION_CLICK_MESSAGE, re as SW_PUSH_SUBSCRIPTION_CHANGE_MESSAGE, ie as WEB_PUSH_MANIFEST_KEY, o as applyNativePlatformClass, r as applyNativePreview, je as applyStatusBarTheme, P as armDeepLinkFallback, Ee as armSplashSafetyTimer, Ie as bootNativeShell, F as clearDeepLinkNavigator, p as configureElectronGlobalKey, K as configureKeyboard, ze as createDeepLinkNavigator, b as createDefaultBackButtonHandlers, I as deepLinkUrlToPath, He as defineCapacitorConfig, We as defineWebManifest, L as disarmDeepLinkFallback, $ as emitPushToken, i as getActiveNativePreview, e as getDesktopBridge, m as getElectronGlobalKey, Y as getLastNetworkStatus, h as getLegacyElectronBridge, s as getNativePlatform, ae as getWebPushManifestConfig, oe as getWebPushSubscription, D as impactFeedback, x as installBackButtonHandler, R as installDeepLinkHandler, w as installExternalUrlOpener, f as installMobileRuntimeHooks, v as installNativeAuthNavigationIntercept, M as installNativeBridge, X as installNetworkListener, ee as installPushNotifications, ge as installPushOptIn, xe as installPwa, Se as installPwaPrompt, Me as installStatusBarThemeListener, se as installWebPushMessageBridge, De as isAppReady, Ne as isDarkThemeName, g as isDesktopShell, c as isNativePlatform, l as isNativePluginAvailable, u as isNativePreview, Ce as isPwaEligibleHost, d as isRealNativePlatform, z as isSafeInAppPath, Ue as isValidAllowNavigationRule, ce as isWebPushSupported, q as keyboardHandlers, Oe as markAppReady, B as navigateDeepLinkPath, O as notificationFeedback, Z as notifyOtaReady, T as openExternalUrl, Be as parseDeepLinkContext, U as populateDeviceInfo, V as registerDeepLinkNavigator, Ke as renderServiceWorker, te as requestPushPermission, le as requestWebPushPermission, ke as resetAppReadyForTests, H as resetDeepLinksForTests, Le as resetNativeShellBootForTests, _e as resetPushOptInForTests, we as resetPwaForTests, ue as resetWebPushForTests, Pe as resolveDocumentIsDark, a as resolveNativePreview, de as resolveVapidPublicKey, S as runBackButtonPrecedence, k as selectionFeedback, fe as serializeWebPushSubscription, j as shareContent, C as showNativeActionSheet, y as showNativeConfirm, A as showNativeToast, Fe as statusBarDetailIsDark, pe as subscribeWebPush, me as unsubscribeWebPush, he as urlBase64ToUint8Array, Ve as useDeepLinkNavigator, E as writeClipboardText };
+export { Te as APP_READY_EVENT, Ae as DARK_FAMILY_THEMES, Re as DEEP_LINK_CONTEXT_ID_PATTERN, _ as DEFAULT_AUTH_INTERCEPT_PREFIXES, P as DEFAULT_DEEP_LINK_FALLBACK_DELAY_MS, W as KEYBOARD_HEIGHT_CSS_VAR, G as KEYBOARD_OPEN_CLASS, t as NATIVE_PREVIEW_QUERY_PARAM, n as NATIVE_PREVIEW_STORAGE_KEY, J as NETWORK_STATUS_EVENT, Q as PUSH_TOKEN_EVENT, ve as PWA_INSTALLED_EVENT, ye as PWA_INSTALL_AVAILABLE_EVENT, be as PWA_UPDATE_READY_EVENT, Ge as SERVICE_WORKER_TEMPLATE, ne as SW_NOTIFICATION_CLICK_MESSAGE, re as SW_PUSH_SUBSCRIPTION_CHANGE_MESSAGE, ie as WEB_PUSH_MANIFEST_KEY, o as applyNativePlatformClass, r as applyNativePreview, je as applyStatusBarTheme, F as armDeepLinkFallback, Ee as armSplashSafetyTimer, Ie as bootNativeShell, I as clearDeepLinkNavigator, p as configureElectronGlobalKey, K as configureKeyboard, ze as createDeepLinkNavigator, b as createDefaultBackButtonHandlers, L as deepLinkUrlToPath, He as defineCapacitorConfig, We as defineWebManifest, R as disarmDeepLinkFallback, $ as emitPushToken, i as getActiveNativePreview, e as getDesktopBridge, m as getElectronGlobalKey, Y as getLastNetworkStatus, h as getLegacyElectronBridge, s as getNativePlatform, ae as getWebPushManifestConfig, oe as getWebPushSubscription, D as impactFeedback, x as installBackButtonHandler, z as installDeepLinkHandler, w as installExternalUrlOpener, f as installMobileRuntimeHooks, v as installNativeAuthNavigationIntercept, M as installNativeBridge, X as installNetworkListener, ee as installPushNotifications, ge as installPushOptIn, xe as installPwa, Se as installPwaPrompt, Me as installStatusBarThemeListener, se as installWebPushMessageBridge, De as isAppReady, Ne as isDarkThemeName, g as isDesktopShell, c as isNativePlatform, l as isNativePluginAvailable, u as isNativePreview, Ce as isPwaEligibleHost, d as isRealNativePlatform, N as isSafeInAppPath, Ue as isValidAllowNavigationRule, ce as isWebPushSupported, q as keyboardHandlers, Oe as markAppReady, B as navigateDeepLinkPath, O as notificationFeedback, Z as notifyOtaReady, T as openExternalUrl, Be as parseDeepLinkContext, U as populateDeviceInfo, V as registerDeepLinkNavigator, Ke as renderServiceWorker, te as requestPushPermission, le as requestWebPushPermission, ke as resetAppReadyForTests, H as resetDeepLinksForTests, Le as resetNativeShellBootForTests, _e as resetPushOptInForTests, we as resetPwaForTests, ue as resetWebPushForTests, Pe as resolveDocumentIsDark, a as resolveNativePreview, de as resolveVapidPublicKey, S as runBackButtonPrecedence, k as selectionFeedback, fe as serializeWebPushSubscription, j as shareContent, C as showNativeActionSheet, y as showNativeConfirm, A as showNativeToast, Fe as statusBarDetailIsDark, pe as subscribeWebPush, me as unsubscribeWebPush, he as urlBase64ToUint8Array, Ve as useDeepLinkNavigator, E as writeClipboardText };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/fe-libs",
-  "version": "2026.1023.5",
+  "version": "2026.1023.7",
   "description": "Burdenoff frontend primitives and domain libraries",
   "type": "module",
   "bin": {