@lionrapid/core 0.1.4-beta.0 → 0.2.0

package/dist/browser/lionrapid.iife.dev.js

@@ -68,12 +68,23 @@ var LionRapid = (() => {
   })(LogLevel || {});
 
   // src/utils/logger.ts
-  var IS_PRODUCTION = false;
-  var IS_DEVELOPMENT = true;
-  var IS_CI = false;
-  var LIONRAPID_DEV = true;
-  var PERFORMANCE_TRACKING = true;
-  var LOG_LEVEL_ENV = "DEBUG";
+  var _ENV = typeof process !== "undefined" && process.env ? process.env : {};
+  var IS_PRODUCTION = _ENV.NODE_ENV === "production";
+  var IS_DEVELOPMENT = _ENV.NODE_ENV === "development";
+  var IS_CI = _ENV.CI === "true";
+  var LIONRAPID_DEV = _ENV.LIONRAPID_DEV === "true";
+  var PERFORMANCE_TRACKING = _ENV.LIONRAPID_PERFORMANCE_TRACKING === "true";
+  function readBrowserLogLevel() {
+    try {
+      if (typeof localStorage !== "undefined") {
+        const v = localStorage.getItem("LIONRAPID_LOG_LEVEL");
+        if (v && typeof v === "string") return v;
+      }
+    } catch {
+    }
+    return null;
+  }
+  var LOG_LEVEL_ENV = readBrowserLogLevel() || _ENV.LOG_LEVEL || "WARN";
   var Colors = {
     // Reset
     RESET: "\x1B[0m",
@@ -279,7 +290,7 @@ var LionRapid = (() => {
         case "NONE":
           return 4 /* NONE */;
         default:
-          return 0 /* DEBUG */;
+          return 2 /* WARN */;
       }
     }
     shouldEnableLogging() {
@@ -398,7 +409,9 @@ var LionRapid = (() => {
     constructor() {
       // ✅ Properly typed event listeners without `any`
       __publicField(this, "eventListeners", /* @__PURE__ */ new Map());
-      __publicField(this, "debugMode", true);
+      // Browser-safe: `process` is undeclared in browsers; guard before reading.
+      // Bundlers still substitute `process.env.NODE_ENV` at build time.
+      __publicField(this, "debugMode", typeof process !== "undefined" && true);
     }
     /**
      * Subscribe to events (PUBLIC API) - Fully type-safe
@@ -1255,7 +1268,8 @@ var LionRapid = (() => {
   function parseTranslationParams(secondParam, thirdParam) {
     let defaultValue;
     let params;
-    if (typeof secondParam === "object" && typeof thirdParam === "object" && true) {
+    const _isNotProd = typeof process === "undefined" || true;
+    if (typeof secondParam === "object" && typeof thirdParam === "object" && _isNotProd) {
       console.warn(
         "[LionRapid] Warning: Both secondParam and thirdParam are objects. Expected pattern: t(key, params, defaultValue) or t(key, defaultValue, params). Second object will be ignored as it cannot be a defaultValue."
       );
@@ -2199,6 +2213,27 @@ var LionRapid = (() => {
     }
   };
 
+  // src/content/safe-href.ts
+  var SAFE_SCHEME = /^[a-z][a-z0-9+.-]*:/i;
+  var ALLOWED_SCHEMES = /* @__PURE__ */ new Set(["http:", "https:", "mailto:", "tel:", "sms:"]);
+  function safeHref(href) {
+    if (!href) return "#";
+    const trimmed = href.trim();
+    if (!trimmed) return "#";
+    if (trimmed.startsWith("//")) {
+      return "#";
+    }
+    if (trimmed.startsWith("/") || trimmed.startsWith("?") || trimmed.startsWith("#") || trimmed.startsWith("./") || trimmed.startsWith("../")) {
+      return trimmed;
+    }
+    const schemeMatch = SAFE_SCHEME.exec(trimmed);
+    if (schemeMatch) {
+      const scheme = schemeMatch[0].toLowerCase();
+      return ALLOWED_SCHEMES.has(scheme) ? trimmed : "#";
+    }
+    return trimmed;
+  }
+
   // src/content/style-mapper/DefaultStyleMapper.ts
   var DefaultStyleMapper = class {
     constructor() {
@@ -2284,7 +2319,7 @@ var LionRapid = (() => {
         if (style.startsWith("hyperlink:")) {
           return {
             element: "a",
-            attrs: { href: style.slice("hyperlink:".length) }
+            attrs: { href: safeHref(style.slice("hyperlink:".length)) }
           };
         }
       }