@usearazzo/validator 1.0.1-alpha.21 → 1.0.1-alpha.23

package/CHANGELOG.md

@@ -3,6 +3,14 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.0.1-alpha.23](https://github.com/usearazzo/arazzo-toolkit/compare/v1.0.1-alpha.22...v1.0.1-alpha.23) (2026-11-04)
+
+**Note:** Version bump only for package @usearazzo/validator
+
+## [1.0.1-alpha.22](https://github.com/usearazzo/arazzo-toolkit/compare/v1.0.1-alpha.21...v1.0.1-alpha.22) (2026-11-04)
+
+**Note:** Version bump only for package @usearazzo/validator
+
 ## [1.0.1-alpha.21](https://github.com/usearazzo/arazzo-toolkit/compare/v1.0.1-alpha.20...v1.0.1-alpha.21) (2026-11-03)
 
 **Note:** Version bump only for package @usearazzo/validator

package/dist/arazzo-validator.browser.js

@@ -195812,6 +195812,11 @@ const Ast = function fnast() {
     let depth = 0;
     xml += '<?xml version="1.0" encoding="utf-8"?>\n';
     xml += `<root nodes="${records.length / 2}" characters="${chars.length}">\n`;
+    xml += `<!--\n`;
+    xml += `  Caveat: AST node phrases may not be faithfully represented.\n`;
+    xml += `          Invalid XML characters are replaced with 0xFFFD.\n`;
+    xml += `          Special characters &<>"\' are escaped with XML entities.\n`;
+    xml += `-->\n`;
     xml += `<!-- input string -->\n`;
     xml += indent(depth + 2);
     xml += utils.charsToXmlString(chars);
@@ -196204,14 +196209,49 @@ const utilities = {
     }
     return String.fromCodePoint(...subChars);
   },
-  charsToXmlString: (chars, beg, len) =>
-    utilities
-      .charsToString(chars, beg, len)
+  charsToXmlString: (chars, beg, len) => {
+    function isInvalidXmlCodePoint(code) {
+      return (
+        !Number.isFinite(code) ||
+        code < 0 ||
+        code > 0x10ffff ||
+        (code >= 0x0000 && code <= 0x0008) ||
+        (code >= 0x000b && code <= 0x000c) ||
+        (code >= 0x000e && code <= 0x001f) ||
+        (code >= 0xd800 && code <= 0xdfff) ||
+        (code >= 0xfffe && code <= 0xffff)
+      );
+    }
+    let start = 0;
+    let finish = chars.length;
+
+    if (typeof beg === 'number') {
+      if (beg >= chars.length) {
+        return '';
+      }
+      start = beg < 0 ? 0 : beg;
+    }
+    if (typeof len === 'number') {
+      if (len <= 0) {
+        return '';
+      }
+      finish = len > chars.length - start ? chars.length : start + len;
+    }
+
+    const sanitized = chars.slice(start, finish).map((code) => (isInvalidXmlCodePoint(code) ? 0xfffd : code));
+    const CHUNK = 0x8000;
+    let out = '';
+    for (let i = 0; i < sanitized.length; i += CHUNK) {
+      out += String.fromCodePoint.apply(null, sanitized.slice(i, i + CHUNK));
+    }
+
+    return out
       .replace(/&/g, '&amp;')
       .replace(/</g, '&lt;')
       .replace(/>/g, '&gt;')
       .replace(/'/g, '&apos;')
-      .replace(/"/g, '&quot;'),
+      .replace(/"/g, '&quot;');
+  },
 };
 
 const identifiers = {