@fluxy-chat/sdk 0.2.0 → 0.2.1

package/dist/index.js

@@ -12,6 +12,7 @@ export { useRooms } from "./use-rooms";
 import { FluxyChatRoomConnection } from "./room-connection";
 import { clampHistoryLimit, sortMessagesChronological } from "./message-history";
 import { normalizeRoomMembers } from "./room-rest";
+import { trimTrailingSlashes } from "./url-utils";
 const AUDIO_FILE_SUFFIXES = [".webm", ".m4a", ".mp3", ".wav", ".ogg"];
 function fileNameLooksLikeAudio(fileName) {
     const lower = fileName.toLowerCase();
@@ -31,12 +32,6 @@ function inferAttachmentKind(contentType, fileName) {
         return "audio";
     return "file";
 }
-function trimTrailingSlashes(url) {
-    let out = url;
-    while (out.endsWith("/"))
-        out = out.slice(0, -1);
-    return out;
-}
 function httpUrlToWebSocketBase(url) {
     if (url.startsWith("https://"))
         return `wss://${url.slice("https://".length)}`;

package/dist/realtime-provider.js

@@ -3,6 +3,7 @@ import { jsx as _jsx } from "react/jsx-runtime";
 import React from "react";
 import { FluxyChatClient } from "./index";
 import { decodeFluxyJwtPayload, jwtRefreshDelayMs } from "./jwt-utils";
+import { trimTrailingSlashes } from "./url-utils";
 import { FluxyRealtimeContext } from "./use-fluxy-chat";
 async function resolveAuthToken(provider) {
     if (typeof provider === "string") {
@@ -113,7 +114,7 @@ export function FluxyRealtimeProvider({ children, workerUrl, authTokenProvider,
         if (!token?.trim() || !userId.trim())
             return null;
         return new FluxyChatClient({
-            baseUrl: workerUrl.replace(/\/+$/, ""),
+            baseUrl: trimTrailingSlashes(workerUrl),
             userId,
             token,
         });

package/dist/url-utils.d.ts

@@ -0,0 +1,2 @@
+/** Strip trailing slashes without regex (avoids ReDoS on hostile URLs). */
+export declare function trimTrailingSlashes(url: string): string;

package/dist/url-utils.js

@@ -0,0 +1,7 @@
+/** Strip trailing slashes without regex (avoids ReDoS on hostile URLs). */
+export function trimTrailingSlashes(url) {
+    let out = url;
+    while (out.endsWith("/"))
+        out = out.slice(0, -1);
+    return out;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fluxy-chat/sdk",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Fluxychat JavaScript/TypeScript SDK — WebSocket rooms, REST messages, FluxyRealtimeProvider, useChat with loadMore",
   "license": "MIT",
   "author": "Fluxychat",
@@ -48,6 +48,8 @@
     "dist/room-rest.d.ts",
     "dist/agent-outbound.js",
     "dist/agent-outbound.d.ts",
+    "dist/url-utils.js",
+    "dist/url-utils.d.ts",
     "LICENSE",
     "README.md"
   ],