@tinacms/schema-tools 2.8.1 → 2.8.3

package/dist/errors.d.ts

@@ -0,0 +1,37 @@
+/** Path-collision fragment thrown by the @tinacms/graphql resolver. */
+export declare const ERR_ALREADY_EXISTS = "already exists";
+/** AsyncPoller lifecycle signals (tinacms internalClient). */
+export declare const ASYNC_POLLER_ERROR: {
+    readonly CANCELLED: "AsyncPoller: cancelled";
+    readonly TIMEOUT: "AsyncPoller: reached timeout";
+    readonly STATUS_UNKNOWN: "AsyncPoller: status unknown for too long, please check indexing progress on the TinaCloud dashboard";
+};
+export type AsyncPollerError = (typeof ASYNC_POLLER_ERROR)[keyof typeof ASYNC_POLLER_ERROR];
+/**
+ * Filesystem path-traversal prefix (CWE-22). The full emitted message MUST
+ * keep this exact prefix — do not reword.
+ *
+ * The path-traversal producers (the @tinacms/graphql filesystem and isomorphic
+ * bridges, and the @tinacms/cli path guard) inline this literal rather than
+ * importing the constant: those modules are loaded by jest from source across a
+ * package boundary, where importing the schema-tools ESM build throws "Cannot
+ * use import statement outside a module". This is the canonical reference for
+ * the string; keep the inlined literals byte-identical to it. The real contract
+ * is enforced by the `toThrow('Path traversal detected')` assertions in the
+ * bridge and CLI suites, not by this constant.
+ */
+export declare const ERR_PATH_TRAVERSAL = "Path traversal detected";
+/** TinaCloud: a document still has inbound references on delete/rename. */
+export declare const ERR_HAS_REFERENCES = "has references";
+/** TinaCloud: the branch schema has not finished indexing. */
+export declare const ERR_NOT_INDEXED = "has not been indexed by TinaCloud";
+/** TinaCloud: a branch with the given name already exists (editorial workflow). */
+export declare const ERR_BRANCH_EXISTS = "already exists";
+/**
+ * TinaCloud: branch-name conflict (editorial workflow fallback path). Broad by
+ * necessity — this matches the substring of an external server message we do
+ * not own, so it cannot be narrowed without risking a missed match. The
+ * structured `errorCode` switch above is the preferred path; this is the
+ * no-code fallback.
+ */
+export declare const ERR_BRANCH_CONFLICT = "conflict";

package/dist/index.d.ts

@@ -4,4 +4,6 @@ export * from './validate';
 export * from './util/namer';
 export * from './util/parseURL';
 export * from './util/normalizePath';
+export * from './util/relativePath';
 export * from './util/headingLevels';
+export * from './errors';

package/dist/index.js

@@ -1627,7 +1627,7 @@ const parseURL = (url) => {
   if (!isTinaCloud) {
     return {
       branch: null,
-      isLocalClient: true,
+      isLocalClient: false,
       clientId: null,
       host: params.host
     };
@@ -1642,7 +1642,7 @@ const parseURL = (url) => {
   const clientId = result == null ? void 0 : result.clientId;
   if (!branch || !clientId) {
     throw new Error(
-      `Invalid URL format provided. Expected: https://content.tinajs.io/<Version>/content/<ClientID>/github/<Branch> but but received ${url}`
+      `Invalid URL format provided. Expected: https://content.tinajs.io/<Version>/content/<ClientID>/github/<Branch> but received ${url}`
     );
   }
   return {
@@ -2812,6 +2812,9 @@ const validateSchema = ({ schema }) => {
     throw new Error(e);
   }
 };
+const RELATIVE_PATH_REGEX = /^[a-zA-Z0-9\-_./]+$/;
+const RELATIVE_PATH_ALLOWED_CHARS_MESSAGE = "Must contain only a-z, A-Z, 0-9, -, _, ., or /.";
+const isValidRelativePath = (value) => RELATIVE_PATH_REGEX.test(value);
 const isHeadingLevel = (value) => {
   switch (value) {
     case "h1":
@@ -2833,16 +2836,37 @@ const normalizeHeadingLevels = (configured) => {
   }
   return Array.from(seen);
 };
+const ERR_ALREADY_EXISTS = "already exists";
+const ASYNC_POLLER_ERROR = {
+  CANCELLED: "AsyncPoller: cancelled",
+  TIMEOUT: "AsyncPoller: reached timeout",
+  STATUS_UNKNOWN: "AsyncPoller: status unknown for too long, please check indexing progress on the TinaCloud dashboard"
+};
+const ERR_PATH_TRAVERSAL = "Path traversal detected";
+const ERR_HAS_REFERENCES = "has references";
+const ERR_NOT_INDEXED = "has not been indexed by TinaCloud";
+const ERR_BRANCH_EXISTS = "already exists";
+const ERR_BRANCH_CONFLICT = "conflict";
 export {
   ALL_HEADING_LEVELS,
+  ASYNC_POLLER_ERROR,
   CONTENT_FORMATS,
+  ERR_ALREADY_EXISTS,
+  ERR_BRANCH_CONFLICT,
+  ERR_BRANCH_EXISTS,
+  ERR_HAS_REFERENCES,
+  ERR_NOT_INDEXED,
+  ERR_PATH_TRAVERSAL,
   NAMER,
+  RELATIVE_PATH_ALLOWED_CHARS_MESSAGE,
+  RELATIVE_PATH_REGEX,
   TINA_HOST,
   TinaSchema,
   TinaSchemaValidationError,
   addNamespaceToSchema,
   canonicalPath,
   isHeadingLevel,
+  isValidRelativePath,
   normalizeHeadingLevels,
   normalizePath,
   parseURL,

package/dist/types/index.d.ts

@@ -446,6 +446,14 @@ interface AuthHooks {
 }
 type AuthOptions = AuthHooks & AuthProvider;
 export interface Config<CMSCallback = undefined, FormifyCallback = undefined, DocumentCreatorCallback = undefined, Store = undefined, SearchClient = undefined> {
+    /**
+     * Points the admin UI at a custom/self-hosted content API instead of TinaCloud.
+     *
+     * Can be a relative URL, such as `/api/tina/gql`, or an absolute URL, such as
+     * `https://example.com/api/content`. When set, the admin UI will not show the
+     * Local Mode banner; Local Mode is only detected when this option is unset and
+     * the content API resolves to `localhost`.
+     */
     contentApiUrlOverride?: string;
     authProvider?: AuthProvider;
     admin?: {

package/dist/util/relativePath.d.ts

@@ -0,0 +1,6 @@
+/** Allowlist for a relativePath segment (filename or folder name); source of truth shared with the resolver's validateRelativePath so the UI can reject invalid names inline. */
+export declare const RELATIVE_PATH_REGEX: RegExp;
+/** Inline form-validation message for {@link RELATIVE_PATH_REGEX}. */
+export declare const RELATIVE_PATH_ALLOWED_CHARS_MESSAGE = "Must contain only a-z, A-Z, 0-9, -, _, ., or /.";
+/** True when `value` contains only characters allowed in a relativePath. */
+export declare const isValidRelativePath: (value: string) => boolean;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@tinacms/schema-tools",
   "type": "module",
-  "version": "2.8.1",
+  "version": "2.8.3",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "files": [
@@ -24,7 +24,7 @@
     "ts-jest": "^29.2.5",
     "typescript": "^5.7.3",
     "yup": "^1.6.1",
-    "@tinacms/scripts": "1.6.1"
+    "@tinacms/scripts": "1.6.2"
   },
   "peerDependencies": {
     "react": ">=16.14.0",