@sockethub/platform-feeds 4.0.0-beta.0 → 4.0.0-beta.1

package/README.md

@@ -160,8 +160,12 @@ exhaustion, using the shared guarded fetch dispatcher from `@sockethub/util`:
 * The connection is refused if the destination resolves to a loopback, private,
   link-local, carrier-grade NAT, or otherwise non-public address — validated at
   the connection layer, so it also covers every redirect hop (no
-  check-then-fetch rebinding gap). IPv4-mapped, IPv4-compatible, and NAT64 IPv6
-  spellings of those ranges are normalized and blocked as well.
+  check-then-fetch rebinding gap). IPv4-mapped, IPv4-compatible, and
+  well-known NAT64 (`64:ff9b::/96`) embeddings are judged as the embedded IPv4
+  address, so a public embedding is allowed. The local-use NAT64 prefix
+  `64:ff9b:1::/48` is refused entirely. The same address rules apply to
+  metadata, CalDAV, and CardDAV; see
+  [Outbound URL guard](../../docs/configuration.md#outbound-url-guard).
 * Response bodies are capped (a missing or lying `Content-Length` does not
   bypass the cap).
 * Non-2xx responses fail the job with a descriptive error.

package/dist/index.js

@@ -41057,7 +41057,7 @@ var ActivityStreamSchema = {
 var package_default = {
   name: "@sockethub/schemas",
   description: "JSON schema files for validating Sockethub Activity Streams",
-  version: "3.0.0-beta.0",
+  version: "3.0.0-beta.1",
   type: "module",
   private: false,
   author: "Nick Jennings <nick@silverbucket.net>",
@@ -41127,7 +41127,7 @@ var package_default = {
     "ajv-formats": "^2.1.1",
     "ajv-formats-draft2019": "^1.6.1"
   },
-  gitHead: "75002ae8f15d7679bd58a9327f5a1d7eeaffa237",
+  gitHead: "06c9062f1cb5f0c0599fd979e6e91da79f08eda0",
   types: "./dist/index.d.ts"
 };
 
@@ -41289,7 +41289,8 @@ var SockethubConfigSchema = {
           type: "object",
           additionalProperties: false,
           properties: {
-            connectTimeoutMs: { type: "number" }
+            connectTimeoutMs: { type: "number" },
+            allowPrivateAddresses: { type: "boolean" }
           }
         },
         "@sockethub/platform-metadata": {
@@ -41379,11 +41380,23 @@ var SockethubConfigSchema = {
       type: "object",
       additionalProperties: false,
       properties: {
+        maxInstancesPerSession: {
+          type: "integer",
+          minimum: 0,
+          default: 10,
+          description: "Maximum persistent instances per socket session. 0 disables the cap."
+        },
+        maxInstancesPerIp: {
+          type: "integer",
+          minimum: 0,
+          default: 20,
+          description: "Maximum persistent instances per client IP, including HTTP actions. 0 disables the cap."
+        },
         maxPlatformInstances: {
           type: "number",
           minimum: 0,
           default: 100,
-          description: "Upper bound on concurrently running platform instances " + "(child processes). Each persistent-platform actor forks " + "its own process, so an unbounded count is a resource " + "exhaustion risk on public instances. 0 disables the cap."
+          description: "Upper bound on concurrently running persistent platform instances " + "(child processes). Each persistent-platform actor forks " + "its own process, so an unbounded count is a resource " + "exhaustion risk on public instances. 0 disables the cap."
         }
       }
     },
@@ -41564,33 +41577,66 @@ var SockethubConfigSchema = {
 };
 var SockethubConfigSchemaId = versionedSchemaId(SockethubConfigSchema.$id, package_default.version);
 
-// ../schemas/src/service-descriptor.ts
-var import_ajv = __toESM(require_ajv(), 1);
-var ajv = new import_ajv.default({ strictTypes: false, allErrors: true });
+// ../schemas/src/helpers/codegen.ts
+var available;
+var warned = false;
+function isCodegenAvailable() {
+  if (available === undefined) {
+    try {
+      new Function("return true");
+      available = true;
+    } catch {
+      available = false;
+    }
+  }
+  return available;
+}
+function warnCodegenUnavailable() {
+  if (warned) {
+    return;
+  }
+  warned = true;
+  console.warn("[@sockethub/schemas] Schema validation is disabled: this environment's Content Security Policy blocks `new Function`, which Ajv needs to compile schemas. The Sockethub server still validates every message.");
+}
 
 // ../schemas/src/validator.ts
-var import_ajv2 = __toESM(require_ajv(), 1);
+var import_ajv = __toESM(require_ajv(), 1);
 var import_ajv_formats = __toESM(require_dist(), 1);
 var import_ajv_formats_draft2019 = __toESM(require_ajv_formats_draft2019(), 1);
-var ajv2 = new import_ajv2.default({ strictTypes: false, allErrors: true });
-import_ajv_formats.default(ajv2);
-import_ajv_formats_draft2019.default(ajv2);
 var schemaURL = "https://sockethub.org/schemas/v0";
 var schemas = {};
 var systemContextsRegistered = false;
 schemas[`${schemaURL}/activity-stream`] = ActivityStreamSchema;
-for (const uri in schemas) {
-  ajv2.addSchema(schemas[uri], uri);
+var ajv;
+function getAjv() {
+  if (!isCodegenAvailable()) {
+    warnCodegenUnavailable();
+    return;
+  }
+  if (!ajv) {
+    const instance = new import_ajv.default({ strictTypes: false, allErrors: true });
+    import_ajv_formats.default(instance);
+    import_ajv_formats_draft2019.default(instance);
+    for (const uri in schemas) {
+      instance.addSchema(schemas[uri], uri);
+    }
+    ajv = instance;
+  }
+  return ajv;
 }
 function registerSystemContext(platformId, contextUrl) {
   registerPlatformContext(platformId, contextUrl, `${schemaURL}/context/${platformId}/messages`, `${schemaURL}/context/${platformId}/credentials`);
+  const instance = getAjv();
+  if (!instance) {
+    return;
+  }
   const messageSchemaRef = `${schemaURL}/context/${platformId}/messages`;
-  if (!ajv2.getSchema(messageSchemaRef)) {
-    ajv2.addSchema({}, messageSchemaRef);
+  if (!instance.getSchema(messageSchemaRef)) {
+    instance.addSchema({}, messageSchemaRef);
   }
   const credentialsSchemaRef = `${schemaURL}/context/${platformId}/credentials`;
-  if (!ajv2.getSchema(credentialsSchemaRef)) {
-    ajv2.addSchema({}, credentialsSchemaRef);
+  if (!instance.getSchema(credentialsSchemaRef)) {
+    instance.addSchema({}, credentialsSchemaRef);
   }
 }
 function registerSystemPlatformContexts() {
@@ -42076,7 +42122,7 @@ var import_podparse = __toESM(require_podparse(), 1);
 var package_default2 = {
   name: "@sockethub/platform-feeds",
   description: "A sockethub platform module implementing RSS/Atom functionality",
-  version: "4.0.0-beta.0",
+  version: "4.0.0-beta.1",
   type: "module",
   private: false,
   author: "Nick Jennings <nick@silverbucket.net>",
@@ -42121,24 +42167,24 @@ var package_default2 = {
     "clean:deps": "rm -rf node_modules"
   },
   dependencies: {
-    "@sockethub/util": "^1.0.0-beta.0",
+    "@sockethub/util": "^1.0.0-beta.1",
     "html-tags": "^3.3.1",
     htmlparser2: "^9.1.0",
     podparse: "^1.6.0"
   },
   devDependencies: {
-    "@sockethub/schemas": "^3.0.0-beta.0",
+    "@sockethub/schemas": "^3.0.0-beta.1",
     "@types/bun": "latest"
   },
   peerDependencies: {
-    "@sockethub/server": "5.0.0-beta.0"
+    "@sockethub/server": "5.0.0-beta.1"
   },
   peerDependenciesMeta: {
     "@sockethub/server": {
       optional: true
     }
   },
-  gitHead: "75002ae8f15d7679bd58a9327f5a1d7eeaffa237",
+  gitHead: "06c9062f1cb5f0c0599fd979e6e91da79f08eda0",
   types: "./dist/index.d.ts"
 };
 
@@ -42252,8 +42298,8 @@ var FEEDS_CONTEXT = buildCanonicalContext(schema_default.contextUrl);
 var basic = /\s?<!doctype html>|(<html\b[^>]*>|<body\b[^>]*>|<x-[^>]+>)+/i;
 var full = new RegExp(html_tags_default.map((tag) => `<${tag}\\b[^>]*>`).join("|"), "i");
 function isHtml(s) {
-  const limitedString = s.trim().slice(0, 1000);
-  return basic.test(limitedString) || full.test(s);
+  const limitedString = s.slice(0, 1000).trim();
+  return basic.test(limitedString) || full.test(limitedString);
 }
 
 class Feeds {
@@ -42403,4 +42449,4 @@ export {
   extractFetchParams
 };
 
-//# debugId=B33C7094A94498B464756E2164756E21
+//# debugId=79A32653B1566A3364756E2164756E21