@render-policy/core 0.1.0

package/dist/stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.js","sourceRoot":"","sources":["../src/stream.ts"],"names":[],"mappings":"AAmCA,MAAM,UAAU,kBAAkB,CAAC,MAAkB,EAAE,OAAsB,EAAE,GAAoB;IACjG,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC;IACxC,MAAM,QAAQ,GAAc,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,OAAO,CAAC,kBAAkB,IAAI,IAAI,CAAC;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC;IACpC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,KAAK,GAAG,KAAK,CAAC;IAElB,MAAM,MAAM,GAAG,CAAC,KAAc,EAAgB,EAAE;QAC9C,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,IAAI,IAAI;gBAAE,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;YAC5D,IAAI,cAAc,GAAG,KAAK,CAAC;YAC3B,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;gBACzC,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC;gBACxB,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC;YACpC,CAAC;YACD,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,IAAI;YAAE,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACxD,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5F,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,CAAC,KAAK;YACR,IAAI,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACtE,IAAI,IAAI,KAAK,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE;gBACZ,IAAI,CAAC,KAAK;oBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;QACL,CAAC;QACD,GAAG,CAAC,IAAI;YACN,IAAI,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACrE,IAAI,GAAG,IAAI,CAAC;YACZ,QAAQ,CAAC,GAAG,EAAE;gBACZ,IAAI,CAAC,KAAK;oBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;QACL,CAAC;QACD,GAAG;YACD,IAAI,KAAK;gBAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;YACpC,KAAK,GAAG,IAAI,CAAC;YACb,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QACD,KAAK;YACH,IAAI,GAAG,EAAE,CAAC;YACV,KAAK,GAAG,KAAK,CAAC;YACd,MAAM,CAAC,eAAe,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,IAAI;YACN,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK;YACP,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAG,GAAoF,YAAY,EAAE;IACpI,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,qBAAqB,KAAK,UAAU;QAAE,OAAO,cAAc,CAAC,GAA8D,CAAC,CAAC;IAClJ,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AAC5D,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,cAAc,CAAC,GAA4D;IACzF,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,MAAM,GAAwB,IAAI,CAAC;IACvC,OAAO,CAAC,MAAM,EAAE,EAAE;QAChB,MAAM,GAAG,MAAM,CAAC;QAChB,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,GAAG,CAAC,qBAAqB,CAAC,GAAG,EAAE;YAC7B,OAAO,GAAG,KAAK,CAAC;YAChB,MAAM,GAAG,GAAG,MAAM,CAAC;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,GAAG,EAAE,EAAE,CAAC;QACV,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAG,2BAA2B,CAAC;AAE7C,wGAAwG;AACxG,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,IAAI,IAAI,GAA4C,IAAI,CAAC;IACzD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QAC7B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,4DAA4D;YAC5D,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,SAAS;YACjD,IAAI,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QACxC,CAAC;aAAM,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACnF,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC5D,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,GAAG,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACzF,CAAC;AAED,6GAA6G;AAC7G,MAAM,gBAAgB,GAAG,sCAAsC,CAAC;AAChE,MAAM,4BAA4B,GAAG,2BAA2B,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,IAAI,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;IAE1B,MAAM,eAAe,GAAG,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,eAAe,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,eAAe,GAAG,CAAC,CAAC,EAAE,CAAC;QAC9E,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC3D,IAAI,KAAK,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC;QACvD,IAAI,KAAK,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG;YAAE,KAAK,IAAI,CAAC,CAAC;QACzD,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAElD,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,IAAI,EAAE,CAAC;QACT,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,aAAa,GAAG,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,MAAM;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC;IACxC,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;AACnH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,IAAY;IACjD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,IAAI,KAAK,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC7B,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/url.d.ts

@@ -0,0 +1,48 @@
+import type { CoreDecisionCode } from './decisions.js';
+import type { UrlHeuristics, UrlPolicy } from './policy.js';
+export interface ParsedUrl {
+    readonly raw: string;
+    /** The value after the same preprocessing browsers apply before parsing. */
+    readonly normalized: string;
+    /** Lower-case scheme the URL resolves to, as the browser would resolve it against the page. */
+    readonly scheme: string;
+    /** The resolved URL. For a relative URL without a known page base, the base is a placeholder origin. */
+    readonly url: URL;
+    /** True when the value resolves within the page's own origin without naming a scheme or host. */
+    readonly relative: boolean;
+}
+/** Why a URL was refused: a stable code for programs and a reason for people. */
+export interface UrlProblem {
+    readonly code: CoreDecisionCode;
+    readonly reason: string;
+}
+export type UrlVerdict = {
+    readonly ok: true;
+    readonly parsed: ParsedUrl;
+} | ({
+    readonly ok: false;
+    readonly normalized: string;
+} & UrlProblem);
+/**
+ * Browsers strip ASCII tab and newline anywhere in a URL, and leading/trailing
+ * C0 controls and spaces, before looking for a scheme. `java\tscript:` is `javascript:`.
+ */
+export declare function normalizeUrl(raw: string): string;
+/** A usable base for resolution: the page URL when it is http(s), else nothing. */
+export declare function usableBase(href: string | undefined | null): string | undefined;
+/**
+ * Scheme allowlist check, resolved the way the browser resolves the value against the page:
+ * `//host` takes the page's scheme, `http:path` on an http page stays on the page, and a
+ * declared scheme outside the allowlist is rejected before anything is parsed.
+ */
+export declare function checkUrl(raw: string, policy: Pick<UrlPolicy, 'allowedSchemes' | 'allowRelativeUrls'>, base?: string): UrlVerdict;
+/** Exact host match, or suffix match for `*.example.com` patterns when wildcards are allowed. */
+export declare function hostMatches(host: string, patterns: readonly string[], allowWildcards: boolean): boolean;
+/** Shannon entropy in bits per character. */
+export declare function shannonEntropy(text: string): number;
+/**
+ * Length and entropy heuristics against encoded payloads hidden in a URL
+ * (`/img/<base64 of the conversation>.png`). Returns the problem to block for, or null.
+ */
+export declare function checkUrlHeuristics(url: URL, heuristics: UrlHeuristics): UrlProblem | null;
+//# sourceMappingURL=url.d.ts.map

package/dist/url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../src/url.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE5D,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+FAA+F;IAC/F,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wGAAwG;IACxG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,iGAAiG;IACjG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,iFAAiF;AACjF,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,UAAU,GAClB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;CAAE,GACjD,CAAC;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,UAAU,CAAC,CAAC;AAMvE;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,mFAAmF;AACnF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAE9E;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,gBAAgB,GAAG,mBAAmB,CAAC,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,CAyBhI;AAED,iGAAiG;AACjG,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAavG;AAED,6CAA6C;AAC7C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAUnD;AAKD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,aAAa,GAAG,UAAU,GAAG,IAAI,CAgBzF"}

package/dist/url.js

@@ -0,0 +1,105 @@
+const SCHEME_RE = /^[a-z][a-z0-9+.-]*:/i;
+/** Stands in for the page when no base is known; anything that resolves elsewhere is not relative. */
+const PLACEHOLDER_BASE = 'https://relative.invalid/';
+/**
+ * Browsers strip ASCII tab and newline anywhere in a URL, and leading/trailing
+ * C0 controls and spaces, before looking for a scheme. `java\tscript:` is `javascript:`.
+ */
+export function normalizeUrl(raw) {
+    return raw.replace(/[\t\n\r]/g, '').replace(/^[\u0000- ]+|[\u0000- ]+$/g, '');
+}
+/** A usable base for resolution: the page URL when it is http(s), else nothing. */
+export function usableBase(href) {
+    return href && /^https?:\/\//i.test(href) ? href : undefined;
+}
+/**
+ * Scheme allowlist check, resolved the way the browser resolves the value against the page:
+ * `//host` takes the page's scheme, `http:path` on an http page stays on the page, and a
+ * declared scheme outside the allowlist is rejected before anything is parsed.
+ */
+export function checkUrl(raw, policy, base) {
+    const normalized = normalizeUrl(raw);
+    const declared = SCHEME_RE.test(normalized) ? normalized.slice(0, normalized.indexOf(':')).toLowerCase() : null;
+    if (declared !== null && !policy.allowedSchemes.includes(declared)) {
+        return { ok: false, code: 'scheme-not-allowed', reason: `scheme "${declared}" is not allowed`, normalized };
+    }
+    const baseHref = base ?? PLACEHOLDER_BASE;
+    let baseOrigin;
+    let url;
+    try {
+        baseOrigin = new URL(baseHref).origin;
+        url = new URL(normalized, baseHref);
+    }
+    catch {
+        return { ok: false, code: 'url-unparsable', reason: 'URL does not parse', normalized };
+    }
+    const scheme = url.protocol.slice(0, -1).toLowerCase();
+    if (!policy.allowedSchemes.includes(scheme)) {
+        return { ok: false, code: 'scheme-not-allowed', reason: `resolves to scheme "${scheme}", which is not allowed`, normalized };
+    }
+    const relative = declared === null && url.origin === baseOrigin;
+    if (relative && !policy.allowRelativeUrls) {
+        return { ok: false, code: 'relative-url-not-allowed', reason: 'relative URLs are not allowed', normalized };
+    }
+    return { ok: true, parsed: { raw, normalized, scheme, url, relative } };
+}
+/** Exact host match, or suffix match for `*.example.com` patterns when wildcards are allowed. */
+export function hostMatches(host, patterns, allowWildcards) {
+    const candidate = host.toLowerCase();
+    for (const raw of patterns) {
+        const pattern = raw.toLowerCase();
+        if (pattern.startsWith('*.')) {
+            if (!allowWildcards)
+                continue;
+            const suffix = pattern.slice(1);
+            if (candidate.endsWith(suffix) && candidate.length > suffix.length)
+                return true;
+            continue;
+        }
+        if (candidate === pattern)
+            return true;
+    }
+    return false;
+}
+/** Shannon entropy in bits per character. */
+export function shannonEntropy(text) {
+    if (text.length === 0)
+        return 0;
+    const counts = new Map();
+    for (const ch of text)
+        counts.set(ch, (counts.get(ch) ?? 0) + 1);
+    let entropy = 0;
+    for (const count of counts.values()) {
+        const p = count / text.length;
+        entropy -= p * Math.log2(p);
+    }
+    return entropy;
+}
+const HEX_RE = /^[0-9a-f]+$/i;
+const EXTENSION_RE = /\.[a-z0-9]{1,5}$/i;
+/**
+ * Length and entropy heuristics against encoded payloads hidden in a URL
+ * (`/img/<base64 of the conversation>.png`). Returns the problem to block for, or null.
+ */
+export function checkUrlHeuristics(url, heuristics) {
+    if (url.href.length > heuristics.maxLength) {
+        return { code: 'url-too-long', reason: `URL is longer than ${heuristics.maxLength} characters` };
+    }
+    const tokens = [];
+    for (const segment of url.pathname.split('/'))
+        tokens.push(segment);
+    for (const [key, value] of url.searchParams)
+        tokens.push(key, value);
+    if (url.hash.length > 1)
+        tokens.push(url.hash.slice(1));
+    for (const raw of tokens) {
+        const token = raw.replace(EXTENSION_RE, '');
+        if (token.length <= heuristics.maxTokenLength)
+            continue;
+        if (HEX_RE.test(token) || shannonEntropy(token) >= heuristics.minEntropy) {
+            return { code: 'url-encoded-payload', reason: `URL contains a ${token.length}-character token that looks like an encoded payload` };
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=url.js.map

package/dist/url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.js","sourceRoot":"","sources":["../src/url.ts"],"names":[],"mappings":"AAyBA,MAAM,SAAS,GAAG,sBAAsB,CAAC;AACzC,sGAAsG;AACtG,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AAErD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,UAAU,CAAC,IAA+B;IACxD,OAAO,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,MAA+D,EAAE,IAAa;IAClH,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAChH,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,WAAW,QAAQ,kBAAkB,EAAE,UAAU,EAAE,CAAC;IAC9G,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,IAAI,gBAAgB,CAAC;IAC1C,IAAI,UAAkB,CAAC;IACvB,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;QACtC,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,oBAAoB,EAAE,UAAU,EAAE,CAAC;IACzF,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,uBAAuB,MAAM,yBAAyB,EAAE,UAAU,EAAE,CAAC;IAC/H,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC;IAChE,IAAI,QAAQ,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,MAAM,EAAE,+BAA+B,EAAE,UAAU,EAAE,CAAC;IAC9G,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC;AAC1E,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,QAA2B,EAAE,cAAuB;IAC5F,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,cAAc;gBAAE,SAAS;YAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YAChF,SAAS;QACX,CAAC;QACD,IAAI,SAAS,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,EAAE,IAAI,IAAI;QAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAC9B,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,MAAM,GAAG,cAAc,CAAC;AAC9B,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAEzC;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAQ,EAAE,UAAyB;IACpE,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;QAC3C,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,sBAAsB,UAAU,CAAC,SAAS,aAAa,EAAE,CAAC;IACnG,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,YAAY;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACrE,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,MAAM,IAAI,UAAU,CAAC,cAAc;YAAE,SAAS;QACxD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;YACzE,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,kBAAkB,KAAK,CAAC,MAAM,qDAAqD,EAAE,CAAC;QACtI,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/window.d.ts

@@ -0,0 +1,15 @@
+import type { TrustedTypePolicyFactory } from 'trusted-types/lib/index.js';
+/**
+ * The part of a window the renderer needs: the document to create nodes in and the DOM
+ * constructors the HTML parser runs with. A browser window and a JSDOM window both fit.
+ * This is the library's own type on purpose: the sanitizer's dependency is an implementation
+ * detail, and its types never appear in the public API.
+ */
+export type RenderWindow = Pick<typeof globalThis, 'DocumentFragment' | 'HTMLTemplateElement' | 'Node' | 'Element' | 'NodeFilter' | 'NamedNodeMap' | 'HTMLFormElement' | 'DOMParser'> & {
+    readonly document: Document;
+    readonly trustedTypes?: TrustedTypePolicyFactory;
+    readonly requestAnimationFrame?: (callback: () => void) => number;
+};
+/** The given window, else the global one, else a clear error naming the package that needs it. */
+export declare function resolveWindow(win: RenderWindow | undefined, packageName?: string): RenderWindow;
+//# sourceMappingURL=window.d.ts.map

package/dist/window.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"window.d.ts","sourceRoot":"","sources":["../src/window.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAE3E;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,IAAI,CAC7B,OAAO,UAAU,EACjB,kBAAkB,GAAG,qBAAqB,GAAG,MAAM,GAAG,SAAS,GAAG,YAAY,GAAG,cAAc,GAAG,iBAAiB,GAAG,WAAW,CAClI,GAAG;IACF,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,wBAAwB,CAAC;IACjD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,MAAM,CAAC;CACnE,CAAC;AAEF,kGAAkG;AAClG,wBAAgB,aAAa,CAAC,GAAG,EAAE,YAAY,GAAG,SAAS,EAAE,WAAW,SAAwB,GAAG,YAAY,CAI9G"}

package/dist/window.js

@@ -0,0 +1,9 @@
+/** The given window, else the global one, else a clear error naming the package that needs it. */
+export function resolveWindow(win, packageName = '@render-policy/core') {
+    if (win)
+        return win;
+    if (typeof window !== 'undefined')
+        return window;
+    throw new Error(`${packageName}: no global window. Pass { window } (for example a JSDOM window) outside a browser.`);
+}
+//# sourceMappingURL=window.js.map

package/dist/window.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"window.js","sourceRoot":"","sources":["../src/window.ts"],"names":[],"mappings":"AAiBA,kGAAkG;AAClG,MAAM,UAAU,aAAa,CAAC,GAA6B,EAAE,WAAW,GAAG,qBAAqB;IAC9F,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,MAAiC,CAAC;IAC5E,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,qFAAqF,CAAC,CAAC;AACvH,CAAC"}

package/package.json

@@ -0,0 +1,62 @@
+{
+  "name": "@render-policy/core",
+  "version": "0.1.0",
+  "description": "Render agent-generated Markdown/HTML safely: sanitize into a DocumentFragment, insert with replaceChildren (never innerHTML), enforce a URL/host policy, stay Trusted Types compatible, handle streaming.",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./internal": {
+      "types": "./dist/internal.d.ts",
+      "import": "./dist/internal.js",
+      "default": "./dist/internal.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@types/trusted-types": "^2.0.7",
+    "dompurify": "^3.4.16",
+    "marked": "^18.0.14"
+  },
+  "keywords": [
+    "sanitize",
+    "xss",
+    "trusted-types",
+    "markdown",
+    "llm",
+    "agent",
+    "mcp",
+    "dompurify",
+    "security"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/shteynu/render-policy.git",
+    "directory": "packages/core"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "typesVersions": {
+    "*": {
+      "internal": [
+        "./dist/internal.d.ts"
+      ]
+    }
+  }
+}