@streamscloud/kit 0.36.0 → 0.37.0

package/dist/core/utils/href-validator.d.ts

@@ -1,4 +1,4 @@
-export type ValidationError = 'NotString' | 'Empty' | 'ControlChars' | 'DisallowedScheme' | 'MissingHost' | 'EmbeddedCredentials' | 'Relative' | 'BareRelative';
+export type ValidationError = 'NotString' | 'Empty' | 'ControlChars' | 'DisallowedScheme' | 'MissingHost' | 'UnknownHost' | 'EmbeddedCredentials' | 'Relative' | 'BareRelative';
 type DetailedResult = {
     valid: true;
 } | {
@@ -8,6 +8,10 @@ type DetailedResult = {
 export type ValidateOptions = {
     allowRelative?: 'all' | 'prefixed';
     allowedSchemes?: Set<string>;
+    /** Rejects a syntactically valid but hostless-looking host (`https://sdf`) — requires a public label+TLD shape, `localhost`, an IPv4 literal, or a bracketed IPv6 literal. */
+    requireNamedHost?: boolean;
+    /** With `requireNamedHost`, also accepts `localhost` / IPv4 / bracketed IPv6 as known hosts. */
+    allowLocalHosts?: boolean;
 };
 export declare const validateHref: (input: unknown, opts?: ValidateOptions) => DetailedResult;
 export {};

package/dist/core/utils/href-validator.js

@@ -1,4 +1,9 @@
 const DEFAULT_ALLOWED_SCHEMES = new Set(['http:', 'https:', 'mailto:', 'tel:']);
+// Shape check only, not full RFC 5891 punycode validation — a non-ICANN xn-- label (e.g. xn--1234) still passes.
+const PUBLIC_HOST = /^[a-z0-9-]+(\.[a-z0-9-]+)*\.([a-z]{2,}|xn--[a-z0-9-]{2,})$/i;
+const IPV4_HOST = /^\d{1,3}(\.\d{1,3}){3}$/;
+// A leading '[' is safe to trust here only because `new URL()` already parsed and validated the bracketed IPv6 literal.
+const isLocalHost = (hostname) => hostname === 'localhost' || IPV4_HOST.test(hostname) || hostname.startsWith('[');
 export const validateHref = (input, opts = {}) => {
     if (typeof input !== 'string') {
         return { valid: false, error: 'NotString' };
@@ -25,6 +30,12 @@ export const validateHref = (input, opts = {}) => {
         if (u.username || u.password) {
             return { valid: false, error: 'EmbeddedCredentials' };
         }
+        if (opts.requireNamedHost && (proto === 'http:' || proto === 'https:')) {
+            const knownHost = PUBLIC_HOST.test(u.hostname) || (!!opts.allowLocalHosts && isLocalHost(u.hostname));
+            if (!knownHost) {
+                return { valid: false, error: 'UnknownHost' };
+            }
+        }
         return { valid: true };
     }
     catch {

package/dist/core/validation/validation-schemas/index.d.ts

@@ -1,6 +1,7 @@
-export type { TextValidation, TextWithFormatValidation, NumberValidation, MinNumberValidation, ArrayValidation } from './types';
+export type { TextValidation, TextWithFormatValidation, NumberValidation, MinNumberValidation, ArrayValidation, UrlValidation } from './types';
 export { emailValidationSchema, nullableEmailValidationSchema } from './email-validation';
 export { textValidationSchema, formattedTextValidationSchema } from './text-validations';
 export { handleValidationSchema } from './handle-validations';
 export { numberValidationSchema, minNumberValidationSchema } from './number-validations';
 export { arrayValidationSchema } from './array-validations';
+export { urlValidationSchema } from './url-validation';

package/dist/core/validation/validation-schemas/index.js

@@ -3,3 +3,4 @@ export { textValidationSchema, formattedTextValidationSchema } from './text-vali
 export { handleValidationSchema } from './handle-validations';
 export { numberValidationSchema, minNumberValidationSchema } from './number-validations';
 export { arrayValidationSchema } from './array-validations';
+export { urlValidationSchema } from './url-validation';

package/dist/core/validation/validation-schemas/types.d.ts

@@ -5,6 +5,16 @@ export type TextValidation = {
 export type TextWithFormatValidation = TextValidation & {
     format: string;
 };
+export type UrlValidation = {
+    /** @default false */
+    required?: boolean;
+    maxLength?: number;
+    schemes?: Set<string>;
+    /** @default true */
+    requireNamedHost?: boolean;
+    /** @default true */
+    allowLocalHosts?: boolean;
+};
 export type NumberValidation = {
     minValue: number | null;
     maxValue: number | null;

package/dist/core/validation/validation-schemas/url-validation.d.ts

@@ -0,0 +1,3 @@
+import type { UrlValidation } from './types';
+import * as yup from 'yup';
+export declare const urlValidationSchema: (rules?: UrlValidation) => yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;

package/dist/core/validation/validation-schemas/url-validation.js

@@ -0,0 +1,13 @@
+import { validateHref } from '../../utils';
+import { ValidationLocalization } from './validation-localization';
+import * as yup from 'yup';
+const DEFAULT_SCHEMES = new Set(['http:', 'https:']);
+export const urlValidationSchema = (rules = {}) => {
+    const msg = new ValidationLocalization();
+    const allowedSchemes = rules.schemes ?? DEFAULT_SCHEMES;
+    const requireNamedHost = rules.requireNamedHost ?? true;
+    const allowLocalHosts = rules.allowLocalHosts ?? true;
+    const schema = yup.string().test('url', msg.url, (value) => !value || validateHref(value, { allowedSchemes, requireNamedHost, allowLocalHosts }).valid);
+    const withMaxLength = rules.maxLength === undefined ? schema : schema.max(rules.maxLength, msg.maxLength(rules.maxLength));
+    return rules.required ? withMaxLength.required(msg.required) : withMaxLength;
+};

package/dist/core/validation/validation-schemas/validation-localization.d.ts

@@ -8,4 +8,5 @@ export declare class ValidationLocalization {
     get minItems(): (count: number) => string;
     get maxItems(): (count: number) => string;
     get badFormat(): string;
+    get url(): string;
 }

package/dist/core/validation/validation-schemas/validation-localization.js

@@ -27,6 +27,9 @@ export class ValidationLocalization {
     get badFormat() {
         return loc.badFormat[AppLocale.current];
     }
+    get url() {
+        return loc.url[AppLocale.current];
+    }
 }
 const loc = {
     required: {
@@ -64,5 +67,9 @@ const loc = {
     badFormat: {
         en: 'Invalid format',
         no: 'Ugyldig format'
+    },
+    url: {
+        en: 'Please enter a valid URL',
+        no: 'Vennligst skriv inn en gyldig URL'
     }
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@streamscloud/kit",
-  "version": "0.36.0",
+  "version": "0.37.0",
   "author": "StreamsCloud",
   "repository": {
     "type": "git",