@tinacms/schema-tools 2.8.2 → 2.8.3

package/dist/errors.d.ts

@@ -0,0 +1,37 @@
+/** Path-collision fragment thrown by the @tinacms/graphql resolver. */
+export declare const ERR_ALREADY_EXISTS = "already exists";
+/** AsyncPoller lifecycle signals (tinacms internalClient). */
+export declare const ASYNC_POLLER_ERROR: {
+    readonly CANCELLED: "AsyncPoller: cancelled";
+    readonly TIMEOUT: "AsyncPoller: reached timeout";
+    readonly STATUS_UNKNOWN: "AsyncPoller: status unknown for too long, please check indexing progress on the TinaCloud dashboard";
+};
+export type AsyncPollerError = (typeof ASYNC_POLLER_ERROR)[keyof typeof ASYNC_POLLER_ERROR];
+/**
+ * Filesystem path-traversal prefix (CWE-22). The full emitted message MUST
+ * keep this exact prefix — do not reword.
+ *
+ * The path-traversal producers (the @tinacms/graphql filesystem and isomorphic
+ * bridges, and the @tinacms/cli path guard) inline this literal rather than
+ * importing the constant: those modules are loaded by jest from source across a
+ * package boundary, where importing the schema-tools ESM build throws "Cannot
+ * use import statement outside a module". This is the canonical reference for
+ * the string; keep the inlined literals byte-identical to it. The real contract
+ * is enforced by the `toThrow('Path traversal detected')` assertions in the
+ * bridge and CLI suites, not by this constant.
+ */
+export declare const ERR_PATH_TRAVERSAL = "Path traversal detected";
+/** TinaCloud: a document still has inbound references on delete/rename. */
+export declare const ERR_HAS_REFERENCES = "has references";
+/** TinaCloud: the branch schema has not finished indexing. */
+export declare const ERR_NOT_INDEXED = "has not been indexed by TinaCloud";
+/** TinaCloud: a branch with the given name already exists (editorial workflow). */
+export declare const ERR_BRANCH_EXISTS = "already exists";
+/**
+ * TinaCloud: branch-name conflict (editorial workflow fallback path). Broad by
+ * necessity — this matches the substring of an external server message we do
+ * not own, so it cannot be narrowed without risking a missed match. The
+ * structured `errorCode` switch above is the preferred path; this is the
+ * no-code fallback.
+ */
+export declare const ERR_BRANCH_CONFLICT = "conflict";

package/dist/index.d.ts

@@ -4,4 +4,6 @@ export * from './validate';
 export * from './util/namer';
 export * from './util/parseURL';
 export * from './util/normalizePath';
+export * from './util/relativePath';
 export * from './util/headingLevels';
+export * from './errors';

package/dist/index.js

@@ -2812,6 +2812,9 @@ const validateSchema = ({ schema }) => {
     throw new Error(e);
   }
 };
+const RELATIVE_PATH_REGEX = /^[a-zA-Z0-9\-_./]+$/;
+const RELATIVE_PATH_ALLOWED_CHARS_MESSAGE = "Must contain only a-z, A-Z, 0-9, -, _, ., or /.";
+const isValidRelativePath = (value) => RELATIVE_PATH_REGEX.test(value);
 const isHeadingLevel = (value) => {
   switch (value) {
     case "h1":
@@ -2833,16 +2836,37 @@ const normalizeHeadingLevels = (configured) => {
   }
   return Array.from(seen);
 };
+const ERR_ALREADY_EXISTS = "already exists";
+const ASYNC_POLLER_ERROR = {
+  CANCELLED: "AsyncPoller: cancelled",
+  TIMEOUT: "AsyncPoller: reached timeout",
+  STATUS_UNKNOWN: "AsyncPoller: status unknown for too long, please check indexing progress on the TinaCloud dashboard"
+};
+const ERR_PATH_TRAVERSAL = "Path traversal detected";
+const ERR_HAS_REFERENCES = "has references";
+const ERR_NOT_INDEXED = "has not been indexed by TinaCloud";
+const ERR_BRANCH_EXISTS = "already exists";
+const ERR_BRANCH_CONFLICT = "conflict";
 export {
   ALL_HEADING_LEVELS,
+  ASYNC_POLLER_ERROR,
   CONTENT_FORMATS,
+  ERR_ALREADY_EXISTS,
+  ERR_BRANCH_CONFLICT,
+  ERR_BRANCH_EXISTS,
+  ERR_HAS_REFERENCES,
+  ERR_NOT_INDEXED,
+  ERR_PATH_TRAVERSAL,
   NAMER,
+  RELATIVE_PATH_ALLOWED_CHARS_MESSAGE,
+  RELATIVE_PATH_REGEX,
   TINA_HOST,
   TinaSchema,
   TinaSchemaValidationError,
   addNamespaceToSchema,
   canonicalPath,
   isHeadingLevel,
+  isValidRelativePath,
   normalizeHeadingLevels,
   normalizePath,
   parseURL,

package/dist/util/relativePath.d.ts

@@ -0,0 +1,6 @@
+/** Allowlist for a relativePath segment (filename or folder name); source of truth shared with the resolver's validateRelativePath so the UI can reject invalid names inline. */
+export declare const RELATIVE_PATH_REGEX: RegExp;
+/** Inline form-validation message for {@link RELATIVE_PATH_REGEX}. */
+export declare const RELATIVE_PATH_ALLOWED_CHARS_MESSAGE = "Must contain only a-z, A-Z, 0-9, -, _, ., or /.";
+/** True when `value` contains only characters allowed in a relativePath. */
+export declare const isValidRelativePath: (value: string) => boolean;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@tinacms/schema-tools",
   "type": "module",
-  "version": "2.8.2",
+  "version": "2.8.3",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "files": [