@mearl/preset 3.0.0-beta.0 → 3.0.0-beta.1

package/dist/manifest.js

@@ -1,3 +1,4 @@
+import { validateInstallationOrigin } from './installation.js';
 import { valid, validRange } from 'semver';
 export class PresetError extends Error {
     code;
@@ -137,7 +138,17 @@ export function validatePreset(value) {
         fields(value.permissions, 'permissions', ['origins']);
         if ('origins' in value.permissions)
             stringArray(value.permissions.origins, 'permissions.origins');
-        result.permissions = { origins: [...(value.permissions.origins ?? [])] };
+        const origins = value.permissions.origins ?? [];
+        if (origins.length > 64)
+            invalid('permissions.origins', 'exceeds 64 scopes');
+        result.permissions = { origins: [...new Set(origins.map((origin, index) => {
+                    try {
+                        return validateInstallationOrigin(origin);
+                    }
+                    catch {
+                        return invalid(`permissions.origins[${index}]`, 'expected an explicit HTTP host scope');
+                    }
+                }))] };
     }
     if (JSON.stringify(result).length > 262_144)
         invalid('preset', 'manifest exceeds 256 Ki UTF-16 code units');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mearl/preset",
-  "version": "3.0.0-beta.0",
+  "version": "3.0.0-beta.1",
   "description": "Browser-compatible preset validation, inheritance and capability resolution for Mearl",
   "type": "module",
   "license": "Apache-2.0",
@@ -30,6 +30,11 @@
   "devDependencies": {
     "@types/semver": "^7.7.1"
   },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/F-loat/mearl.git",
+    "directory": "packages/preset"
+  },
   "scripts": {
     "build": "rm -rf dist/ && tsc",
     "typecheck": "tsc --noEmit",