@decidio/sdk 0.3.0 → 0.3.5

package/dist/signing.d.ts

@@ -74,6 +74,10 @@ export declare function assertJsonSafe(value: unknown, path?: string): void;
  *  rule is about the WIRE, not which credential (the interactive sign-in enforced this for
  *  session tokens while agent-token requests sailed through). localhost/127.0.0.1/[::1] stay
  *  allowed for local dev; https always allowed. Throws before anything is sent. */
+/** The URL as it may be ECHOED in a refusal: userinfo masked. The SDK treats URL userinfo as a credential
+ *  (it is refused as one), so no refusal may print it - every branch of assertSafeTransport echoes through
+ *  this, not the raw string (invariant-guard, 0.3.5). */
+export declare function redactUrl(u: string): string;
 export declare function assertSafeTransport(url: string, hasCredential: boolean): void;
 /** The ONE answer to "does this request carry a credential worth protecting?" (A6, 0.1.12).
  *  A signed identity proof is a credential too: sending it over remote plaintext disclosed

package/dist/signing.js

@@ -106,7 +106,17 @@ export function assertJsonSafe(value, path = "args") {
     };
     walk(value, path);
 }
+export function redactUrl(u) { return u.replace(/\/\/[^/@]*@/, "//***@"); }
 export function assertSafeTransport(url, hasCredential) {
+    if (typeof url !== "string") {
+        throw new Error(`[decidio] the gate URL is ${url === null ? "null" : typeof url}, not a string, so there is no host to send to. Decidio needs a full https URL (or http://localhost for local dev). Nothing was sent.`);
+    }
+    for (const ch of url) {
+        const cp = ch.codePointAt(0);
+        if (cp <= 0x20 || (cp >= 0x7f && cp <= 0x9f) || cp === 0xfeff) {
+            throw new Error(`[decidio] the gate URL ${JSON.stringify(redactUrl(url))} contains whitespace or a control character (U+${cp.toString(16).toUpperCase().padStart(4, "0")}) - a validator and a transport can read such a spelling differently, so it is refused as written. Remove it. Nothing was sent.`);
+        }
+    }
     let u;
     try {
         u = new URL(url);
@@ -114,9 +124,9 @@ export function assertSafeTransport(url, hasCredential) {
     catch {
         const spelled = url.replace(/[\t\r\n]/g, "").replace(/^[\s\u0000-\u001f\u0085\ufeff]+/, "");
         if (/^http:/i.test(spelled)) {
-            throw new Error(`[decidio] refusing to ${hasCredential ? "send credentials" : "send a request"} over plaintext http to ${JSON.stringify(url)} — that is not a complete absolute URL, so where the request would actually connect is undefined (the path is appended to it, which can turn it into a remote host). Set a full https URL, or http://localhost for local dev. Nothing was sent.`);
+            throw new Error(`[decidio] refusing to ${hasCredential ? "send credentials" : "send a request"} over plaintext http to ${JSON.stringify(redactUrl(url))} — that is not a complete absolute URL, so where the request would actually connect is undefined (the path is appended to it, which can turn it into a remote host). Set a full https URL, or http://localhost for local dev. Nothing was sent.`);
         }
-        throw new Error(`[decidio] the gate URL ${JSON.stringify(url)} is not an absolute URL, so there is no host to send to — where a request would actually connect depends entirely on whichever transport resolves it. Decidio needs a full https URL (or http://localhost for local dev). Nothing was sent.`);
+        throw new Error(`[decidio] the gate URL ${JSON.stringify(redactUrl(url))} is not an absolute URL, so there is no host to send to — where a request would actually connect depends entirely on whichever transport resolves it. Decidio needs a full https URL (or http://localhost for local dev). Nothing was sent.`);
     }
     if (u.protocol !== "http:" && u.protocol !== "https:") {
         throw new Error(`[decidio] the gate URL uses the ${u.protocol.replace(":", "")} scheme, which is not a Decidio endpoint — use https (or http://localhost for local dev). Nothing was sent.`);
@@ -124,6 +134,17 @@ export function assertSafeTransport(url, hasCredential) {
     if (u.username || u.password) {
         throw new Error(`[decidio] the gate URL carries credentials in the URL itself (${u.protocol}//user:***@${u.host}). Decidio authenticates with a bearer token; remove the user:password from the URL. Nothing was sent.`);
     }
+    if (u.hostname === "") {
+        throw new Error(`[decidio] the gate URL ${JSON.stringify(redactUrl(url))} has no host — there is nowhere for the request to go. Decidio needs a full https URL (or http://localhost for local dev). Nothing was sent.`);
+    }
+    {
+        const spelled = url.replace(/[\t\r\n]/g, "").replace(/^[\s\u0000-\u001f\u0085\ufeff]+/, "").toLowerCase();
+        const origin = `${u.protocol}//${u.host}`.toLowerCase();
+        const next = spelled.charAt(origin.length);
+        if (!spelled.startsWith(origin) || (next !== "" && next !== "/" && next !== "?" && next !== "#" && next !== ":")) {
+            throw new Error(`[decidio] the gate URL ${JSON.stringify(redactUrl(url))} is not written in canonical form — this parser reads it as ${origin}, but the raw spelling is what a transport receives, and a parser that normalizes differently can read it as another host entirely. Write it as ${origin}. Nothing was sent.`);
+        }
+    }
     if (u.protocol !== "http:")
         return;
     const host = u.hostname.toLowerCase();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decidio/sdk",
-  "version": "0.3.0",
+  "version": "0.3.5",
   "description": "One-line approval gate for AI-agent actions. Wrap a risky tool call with guard.protect(); Decidio's policy engine decides proceed | route | block, a human approves routed actions, and every outcome is sealed as a verifiable Authority Receipt.",
   "license": "Apache-2.0",
   "type": "module",
@@ -79,10 +79,10 @@
   "scripts": {
     "typecheck": "tsc --noEmit",
     "build": "node -e \"fs.rmSync('dist',{recursive:true,force:true})\" && tsc -p tsconfig.build.json && tsc -p tsconfig.types.json",
-    "prepublishOnly": "npm run typecheck && npm run build"
+    "prepublishOnly": "npm run typecheck && npm run build && node ../publish-boundary/check.mjs --only @decidio/sdk"
   },
   "dependencies": {
-    "@decidio/verify": "0.3.0"
+    "@decidio/verify": "0.3.5"
   },
   "author": "OmniTwin Technologies Inc.",
   "bugs": {