@file-viewer/cli 3.0.0

package/dist/url-security.js

@@ -0,0 +1,58 @@
+// eslint-disable-next-line no-control-regex -- reject controls before URL parsing
+const INVALID_URL_CHARACTERS = /[\u0000-\u001f\u007f\\]/;
+const isLoopbackHostname = (hostname) => {
+    const normalized = hostname.toLowerCase();
+    if (normalized === 'localhost' || normalized === '[::1]')
+        return true;
+    const octets = normalized.split('.');
+    return (octets.length === 4 &&
+        octets[0] === '127' &&
+        octets.every((octet) => /^\d{1,3}$/.test(octet) && Number(octet) <= 255));
+};
+const assertSafeNetworkUrl = (parsed, label) => {
+    if (!['http:', 'https:'].includes(parsed.protocol)) {
+        throw new Error(`${label} must use HTTPS, or HTTP on a loopback host.`);
+    }
+    if (parsed.username || parsed.password || parsed.search || parsed.hash) {
+        throw new Error(`${label} must not contain credentials, query parameters, or a fragment.`);
+    }
+    if (parsed.protocol === 'http:' && !isLoopbackHostname(parsed.hostname)) {
+        throw new Error(`${label} must use HTTPS unless the host is loopback.`);
+    }
+};
+export const normalizeFileViewerAssetBaseUrl = (value) => {
+    if (!value)
+        return undefined;
+    const normalized = value.trim();
+    if (!normalized ||
+        INVALID_URL_CHARACTERS.test(normalized) ||
+        normalized.startsWith('//') ||
+        normalized.includes('?') ||
+        normalized.includes('#')) {
+        throw new Error('Invalid assetBaseUrl. Queries, fragments, protocol-relative URLs, and control characters are not allowed.');
+    }
+    if (/^https?:\/\//i.test(normalized)) {
+        const parsed = new URL(normalized);
+        assertSafeNetworkUrl(parsed, 'assetBaseUrl');
+        return parsed.href.endsWith('/') ? parsed.href : `${parsed.href}/`;
+    }
+    if (/^(?:\/(?!\/)|\.\/|\.\.\/)/.test(normalized)) {
+        return normalized.endsWith('/') ? normalized : `${normalized}/`;
+    }
+    throw new Error('assetBaseUrl must be an explicit HTTPS URL, a loopback HTTP URL, or a relative/root URL.');
+};
+export const normalizeFileViewerRegistryUrl = (value) => {
+    const normalized = String(value || '').trim();
+    if (!normalized || INVALID_URL_CHARACTERS.test(normalized)) {
+        throw new Error('Invalid registry URL.');
+    }
+    let parsed;
+    try {
+        parsed = new URL(normalized);
+    }
+    catch {
+        throw new Error('Invalid registry URL.');
+    }
+    assertSafeNetworkUrl(parsed, 'Registry');
+    return parsed.href.endsWith('/') ? parsed.href : `${parsed.href}/`;
+};

package/package.json

@@ -0,0 +1,78 @@
+{
+  "name": "@file-viewer/cli",
+  "version": "3.0.0",
+  "private": false,
+  "type": "module",
+  "description": "Create or integrate a File Viewer project with framework detection, selectable formats, offline packages, and self-hosted assets.",
+  "keywords": [
+    "file-viewer",
+    "cli",
+    "preset",
+    "capability",
+    "vite",
+    "document-preview"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "author": {
+    "name": "Yu Wang",
+    "email": "admin@flyfish.dev"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/flyfish-dev/file-viewer.git",
+    "directory": "packages/tools/cli"
+  },
+  "homepage": "https://file-viewer.app/en/cli/",
+  "bugs": {
+    "url": "https://github.com/flyfish-dev/file-viewer/issues"
+  },
+  "funding": {
+    "type": "individual",
+    "url": "https://dev.flyfish.group/donate?source=npm"
+  },
+  "bin": {
+    "file-viewer": "./dist/cli.js",
+    "file-viewer-copy-assets": "./dist/copy-assets.js"
+  },
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./catalog": "./catalog/catalog.json",
+    "./cli": "./dist/cli.js",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "catalog",
+    "README.md",
+    "README.en.md",
+    "LICENSE"
+  ],
+  "dependencies": {
+    "@file-viewer/asset-installer": "3.0.0"
+  },
+  "devDependencies": {
+    "@file-viewer/assets-standard": "3.0.0",
+    "@types/node": "^25.9.2",
+    "typescript": "^6.0.3"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "license": "Apache-2.0",
+  "scripts": {
+    "stage-catalog": "node scripts/stage-catalog.mjs",
+    "verify-catalog": "node scripts/stage-catalog.mjs --check",
+    "build": "node scripts/stage-catalog.mjs && tsc -b tsconfig.json && node ../../../scripts/ensure-node-bin.mjs packages/tools/cli/dist/cli.js packages/tools/cli/dist/copy-assets.js && node --test test/*.test.mjs",
+    "type-check": "tsc -b tsconfig.json"
+  }
+}