@dogsbay/minja 0.2.0-beta.100

package/dist/loader.d.ts

@@ -0,0 +1,73 @@
+/**
+ * File loaders for {% include %} statements
+ * Pluggable interface supporting different environments
+ */
+import type { Loader } from './types.js';
+/**
+ * Fetch-based loader for browsers and service workers
+ * Uses the Fetch API to load files
+ */
+export declare class FetchLoader implements Loader {
+    /**
+     * Load a file using fetch
+     * @param path - Path to load (relative or absolute URL)
+     * @param basePath - Base URL to resolve relative paths
+     * @returns File contents
+     */
+    load(path: string, basePath?: string): Promise<string>;
+}
+/**
+ * Options for {@link FileSystemLoader}.
+ */
+export interface FileSystemLoaderOptions {
+    /**
+     * Containment root for include targets. When set, every include is
+     * resolved with `realpath` (following symlinks) and must land INSIDE
+     * this directory — `{% include %}` otherwise reads any file the build
+     * process can, and a crafted include in an untrusted corpus publishes
+     * it into the site output (issue #027, same class as the VitePress
+     * `<<<` symlink escape). Relative `..` and absolute paths that stay
+     * inside the root remain legal. Unset = no containment (trusted
+     * input, backward compatible).
+     */
+    root?: string;
+}
+/**
+ * Filesystem loader for Node.js
+ * Uses fs.readFile to load files
+ */
+export declare class FileSystemLoader implements Loader {
+    private basePath;
+    private root?;
+    private realRoot?;
+    /**
+     * Create a filesystem loader
+     * @param basePath - Base directory for resolving relative paths
+     * @param options - See {@link FileSystemLoaderOptions}
+     */
+    constructor(basePath?: string, options?: FileSystemLoaderOptions);
+    /**
+     * Load a file from the filesystem
+     * @param path - Path to load (relative or absolute)
+     * @param basePath - Base path to resolve relative paths (overrides constructor basePath)
+     * @returns File contents
+     */
+    load(path: string, basePath?: string): Promise<string>;
+}
+/**
+ * Memory-based loader for testing
+ * Stores files in a Map
+ */
+export declare class MemoryLoader implements Loader {
+    private files;
+    constructor(files?: Record<string, string>);
+    /**
+     * Add a file to the memory loader
+     */
+    addFile(path: string, content: string): void;
+    /**
+     * Load a file from memory
+     */
+    load(path: string, basePath?: string): Promise<string>;
+}
+//# sourceMappingURL=loader.d.ts.map

package/dist/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../src/loader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAExC;;;GAGG;AACH,qBAAa,WAAY,YAAW,MAAM;IACxC;;;;;OAKG;IACG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAc7D;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;;;;;;;OASG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;GAGG;AACH,qBAAa,gBAAiB,YAAW,MAAM;IAC7C,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,IAAI,CAAC,CAAQ;IACrB,OAAO,CAAC,QAAQ,CAAC,CAAQ;IAEzB;;;;OAIG;gBACS,QAAQ,GAAE,MAAsB,EAAE,OAAO,GAAE,uBAA4B;IAKnF;;;;;OAKG;IACG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAiF7D;AAED;;;GAGG;AACH,qBAAa,YAAa,YAAW,MAAM;IACzC,OAAO,CAAC,KAAK,CAAqB;gBAEtB,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM;IAI9C;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAI5C;;OAEG;IACG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAc7D"}

package/dist/loader.js

@@ -0,0 +1,159 @@
+/**
+ * File loaders for {% include %} statements
+ * Pluggable interface supporting different environments
+ */
+/**
+ * Fetch-based loader for browsers and service workers
+ * Uses the Fetch API to load files
+ */
+export class FetchLoader {
+    /**
+     * Load a file using fetch
+     * @param path - Path to load (relative or absolute URL)
+     * @param basePath - Base URL to resolve relative paths
+     * @returns File contents
+     */
+    async load(path, basePath) {
+        const url = basePath ? new URL(path, basePath).href : path;
+        // Add cache busting parameter
+        const fetchUrl = `${url}?preventCache=${Date.now()}`;
+        const response = await fetch(fetchUrl);
+        if (!response.ok) {
+            throw new Error(`Failed to load ${url}: ${response.status} ${response.statusText}`);
+        }
+        return await response.text();
+    }
+}
+/**
+ * Filesystem loader for Node.js
+ * Uses fs.readFile to load files
+ */
+export class FileSystemLoader {
+    /**
+     * Create a filesystem loader
+     * @param basePath - Base directory for resolving relative paths
+     * @param options - See {@link FileSystemLoaderOptions}
+     */
+    constructor(basePath = process.cwd(), options = {}) {
+        this.basePath = basePath;
+        this.root = options.root;
+    }
+    /**
+     * Load a file from the filesystem
+     * @param path - Path to load (relative or absolute)
+     * @param basePath - Base path to resolve relative paths (overrides constructor basePath)
+     * @returns File contents
+     */
+    async load(path, basePath) {
+        // Dynamic import to avoid bundling fs in browser builds
+        const fs = await import('fs/promises');
+        const pathModule = await import('path');
+        const resolvedBasePath = basePath || this.basePath;
+        const resolvedPath = pathModule.isAbsolute(path)
+            ? path
+            : pathModule.resolve(resolvedBasePath, path);
+        if (this.root !== undefined) {
+            // Containment check runs BEFORE the read, on the realpath of both
+            // sides, so neither `..` traversal nor a symlink inside the root
+            // pointing outside it can smuggle a foreign file into the render.
+            const refuse = (detail) => {
+                // Named error so the renderer can tell a SECURITY refusal from an
+                // ordinary missing-include: soft handling (preserve-the-directive,
+                // `<!-- Include error -->`) must not apply — the render fails hard.
+                const err = new Error(`Refusing include outside the include root: ${detail}`);
+                err.name = 'IncludeContainmentError';
+                throw err;
+            };
+            if (this.realRoot === undefined) {
+                try {
+                    // Cached: containment is pinned to the root's topology at first
+                    // load. A root re-pointed mid-render would leave the previously
+                    // authorized set stale, but everything in it was legitimately
+                    // authorized once — and a target now escaping the OLD realpath
+                    // still refuses (fail-closed).
+                    this.realRoot = await fs.realpath(this.root);
+                }
+                catch (error) {
+                    // A root that doesn't resolve is a MISCONFIGURATION, not a
+                    // missing include — soft handling would gut every include while
+                    // the run "succeeds" with exit 0 (review finding). Fail hard.
+                    const message = error instanceof Error ? error.message : String(error);
+                    refuse(`include root ${this.root} does not resolve (${message})`);
+                }
+            }
+            // Lexical pre-check: a path that is outside the root BEFORE any
+            // symlink resolution is refused even when its target does not
+            // exist — otherwise `{% include "../not-yet-there" %}` degrades to
+            // a soft missing-include and the directive survives into output a
+            // later uncontained pass might resolve (review finding). Lexical
+            // containment can only REFUSE early, never allow: the realpath
+            // check below still runs for everything lexically inside.
+            const lexical = pathModule.resolve(resolvedPath);
+            if (lexical !== this.realRoot && !lexical.startsWith(this.realRoot + pathModule.sep) &&
+                lexical !== this.root && !lexical.startsWith(pathModule.resolve(this.root) + pathModule.sep)) {
+                refuse(`"${path}" resolves to ${lexical}, which is not inside ${this.realRoot}`);
+            }
+            let realTarget;
+            try {
+                realTarget = await fs.realpath(resolvedPath);
+            }
+            catch (error) {
+                // Target doesn't resolve — surface as an ordinary load failure;
+                // there is nothing to disclose (lexically it is inside the root).
+                const message = error instanceof Error ? error.message : String(error);
+                throw new Error(`Failed to load ${resolvedPath}: ${message}`);
+            }
+            if (realTarget !== this.realRoot && !realTarget.startsWith(this.realRoot + pathModule.sep)) {
+                refuse(`"${path}" resolves to ${realTarget}, which is not inside ${this.realRoot}`);
+            }
+            // Read the VETTED realpath, not the original: narrows the
+            // realpath→read race so a final-component symlink swap between the
+            // check and the read cannot redirect the read outside the root
+            // (parent-directory races remain, as in any realpath design).
+            try {
+                return await fs.readFile(realTarget, 'utf-8');
+            }
+            catch (error) {
+                const message = error instanceof Error ? error.message : String(error);
+                throw new Error(`Failed to load ${resolvedPath}: ${message}`);
+            }
+        }
+        try {
+            return await fs.readFile(resolvedPath, 'utf-8');
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            throw new Error(`Failed to load ${resolvedPath}: ${message}`);
+        }
+    }
+}
+/**
+ * Memory-based loader for testing
+ * Stores files in a Map
+ */
+export class MemoryLoader {
+    constructor(files = {}) {
+        this.files = new Map(Object.entries(files));
+    }
+    /**
+     * Add a file to the memory loader
+     */
+    addFile(path, content) {
+        this.files.set(path, content);
+    }
+    /**
+     * Load a file from memory
+     */
+    async load(path, basePath) {
+        // Simple path resolution for memory loader
+        const resolvedPath = basePath && !path.startsWith('/')
+            ? `${basePath}/${path}`.replace(/\/+/g, '/')
+            : path;
+        const content = this.files.get(resolvedPath);
+        if (content === undefined) {
+            throw new Error(`File not found: ${resolvedPath}`);
+        }
+        return content;
+    }
+}
+//# sourceMappingURL=loader.js.map

package/dist/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../src/loader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;;GAGG;AACH,MAAM,OAAO,WAAW;IACtB;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,QAAiB;QACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;QAE1D,8BAA8B;QAC9B,MAAM,QAAQ,GAAG,GAAG,GAAG,iBAAiB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAA;QAEpD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAA;QAEtC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,KAAK,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;QACrF,CAAC;QAED,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC9B,CAAC;CACF;AAmBD;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IAK3B;;;;OAIG;IACH,YAAY,WAAmB,OAAO,CAAC,GAAG,EAAE,EAAE,UAAmC,EAAE;QACjF,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;IAC1B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,QAAiB;QACxC,wDAAwD;QACxD,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAA;QACtC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAA;QAEvC,MAAM,gBAAgB,GAAG,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAA;QAClD,MAAM,YAAY,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;YAC9C,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;QAE9C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,kEAAkE;YAClE,iEAAiE;YACjE,kEAAkE;YAClE,MAAM,MAAM,GAAG,CAAC,MAAc,EAAS,EAAE;gBACvC,kEAAkE;gBAClE,mEAAmE;gBACnE,oEAAoE;gBACpE,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,8CAA8C,MAAM,EAAE,CAAC,CAAA;gBAC7E,GAAG,CAAC,IAAI,GAAG,yBAAyB,CAAA;gBACpC,MAAM,GAAG,CAAA;YACX,CAAC,CAAA;YACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAChC,IAAI,CAAC;oBACH,gEAAgE;oBAChE,gEAAgE;oBAChE,8DAA8D;oBAC9D,+DAA+D;oBAC/D,+BAA+B;oBAC/B,IAAI,CAAC,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAC9C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,2DAA2D;oBAC3D,gEAAgE;oBAChE,8DAA8D;oBAC9D,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;oBACtE,MAAM,CAAC,gBAAgB,IAAI,CAAC,IAAI,sBAAsB,OAAO,GAAG,CAAC,CAAA;gBACnE,CAAC;YACH,CAAC;YACD,gEAAgE;YAChE,8DAA8D;YAC9D,mEAAmE;YACnE,kEAAkE;YAClE,iEAAiE;YACjE,+DAA+D;YAC/D,0DAA0D;YAC1D,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;YAChD,IAAI,OAAO,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC;gBAChF,OAAO,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjG,MAAM,CAAC,IAAI,IAAI,iBAAiB,OAAO,yBAAyB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;YAClF,CAAC;YACD,IAAI,UAAkB,CAAA;YACtB,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;YAC9C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gEAAgE;gBAChE,kEAAkE;gBAClE,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBACtE,MAAM,IAAI,KAAK,CAAC,kBAAkB,YAAY,KAAK,OAAO,EAAE,CAAC,CAAA;YAC/D,CAAC;YACD,IAAI,UAAU,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3F,MAAM,CAAC,IAAI,IAAI,iBAAiB,UAAU,yBAAyB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;YACrF,CAAC;YACD,0DAA0D;YAC1D,mEAAmE;YACnE,+DAA+D;YAC/D,8DAA8D;YAC9D,IAAI,CAAC;gBACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;YAC/C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBACtE,MAAM,IAAI,KAAK,CAAC,kBAAkB,YAAY,KAAK,OAAO,EAAE,CAAC,CAAA;YAC/D,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,MAAM,IAAI,KAAK,CAAC,kBAAkB,YAAY,KAAK,OAAO,EAAE,CAAC,CAAA;QAC/D,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,YAAY;IAGvB,YAAY,QAAgC,EAAE;QAC5C,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;IAC7C,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAY,EAAE,OAAe;QACnC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,QAAiB;QACxC,2CAA2C;QAC3C,MAAM,YAAY,GAAG,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YACpD,CAAC,CAAC,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;YAC5C,CAAC,CAAC,IAAI,CAAA;QAER,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QAE5C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,mBAAmB,YAAY,EAAE,CAAC,CAAA;QACpD,CAAC;QAED,OAAO,OAAO,CAAA;IAChB,CAAC;CACF"}

package/dist/parser.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Template parser
+ * Converts template strings into AST (Abstract Syntax Tree)
+ */
+import type { ParseResult } from './types.js';
+export declare function parse(template: string): ParseResult;
+//# sourceMappingURL=parser.d.ts.map

package/dist/parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../src/parser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAW,WAAW,EAAc,MAAM,YAAY,CAAA;AAsDlE,wBAAgB,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,CAgmBnD"}