@valbuild/next 0.136.10 → 0.138.0

package/CHANGELOG.md

@@ -1,5 +1,63 @@
 # @valbuild/next
 
+## 0.138.0
+
+### Patch Changes
+
+- Updated dependencies [[`57af895`](https://github.com/valbuild/val/commit/57af8959cc46519a405b1ed7441623f8bf2e6d27), [`c523506`](https://github.com/valbuild/val/commit/c523506c8b5e148864f401c005b913330e436499), [`6216172`](https://github.com/valbuild/val/commit/62161729aa40f737590b0a8093c0394385fffd8d), [`40e933d`](https://github.com/valbuild/val/commit/40e933da7fe01cfe1c3f4a43c156f0b2f8a11f62), [`5876fe0`](https://github.com/valbuild/val/commit/5876fe075fdee1f76f1cdaa2488ac52c58c894a8), [`c523506`](https://github.com/valbuild/val/commit/c523506c8b5e148864f401c005b913330e436499)]:
+  - @valbuild/core@0.138.0
+  - @valbuild/ui@0.138.0
+  - @valbuild/server@0.138.0
+  - @valbuild/shared@0.138.0
+  - @valbuild/language-server@0.138.0
+  - @valbuild/mcp@0.138.0
+  - @valbuild/react@0.138.0
+
+## 0.137.0
+
+### Patch Changes
+
+- [#676](https://github.com/valbuild/val/pull/676) [`43b58f2`](https://github.com/valbuild/val/commit/43b58f2962840883badf91950da2c51b89d1c7cb) Thanks [@freekh](https://github.com/freekh)! - External page keys are now validated, and `mailto:` and `tel:` are allowed.
+
+  `externalPageRouter` documented a rule — a key must start with `https://` or
+  `http://` — and never enforced it: the validator collected the errors and then
+  returned an empty list, so a key like `discord.gg/val` or `/about` was accepted
+  in silence and behaved as a relative link on the site.
+
+  Fixing that made the rule itself worth looking at, because it was a rule about
+  the protocol standing in for a rule about links. A contact page's email address
+  and phone number are external pages to whoever maintains the list, and they
+  were refused. So the rule that is now enforced is a deny list rather than an
+  allow list: a key must have a scheme, and the scheme must not be one of
+  `javascript:`, `data:`, `vbscript:`, `file:` or `blob:` — which are not links
+  at all. An external page key ends up in an `href` in your site's own markup, so
+  those stay refused however the router is configured.
+
+  A project that wants to be stricter says so:
+
+  ```ts
+  s.record(item).router(externalPageRouter({ schemes: ["https", "mailto"] }));
+  ```
+
+  `initVal()` from `@valbuild/next` and `@valbuild/tanstack` hands you the
+  callable form, so the narrowed version typechecks in an app.
+
+  Val Studio applies the same rule while you type — it calls the same function —
+  and shows a narrowed project's own list in the message.
+
+  If your project has a key with no scheme at all, it will start showing a
+  validation error on that entry. Give it one, or move it out of the external
+  router.
+
+- Updated dependencies [[`8f60073`](https://github.com/valbuild/val/commit/8f60073e5490971a615cebbe8ea1243c67e43530), [`af7a4ba`](https://github.com/valbuild/val/commit/af7a4baa63da5d8a226166377a354cf2fc0c1d77), [`48ac9f0`](https://github.com/valbuild/val/commit/48ac9f06dd59a5b4ca60232b1ef198cf42f23aa6), [`daecf41`](https://github.com/valbuild/val/commit/daecf416f51990569a47a6a9ee9174b1a57f98c2), [`43b58f2`](https://github.com/valbuild/val/commit/43b58f2962840883badf91950da2c51b89d1c7cb), [`9b09bf3`](https://github.com/valbuild/val/commit/9b09bf38c9d5912f41fec1c18aa87455fd32f616), [`e2bfc0e`](https://github.com/valbuild/val/commit/e2bfc0e40383fe25d3ec0473d1032f6264a8939f), [`9b09bf3`](https://github.com/valbuild/val/commit/9b09bf38c9d5912f41fec1c18aa87455fd32f616), [`8e49bf4`](https://github.com/valbuild/val/commit/8e49bf41ad6a8ad3b01e502fb7ce0369baa316db), [`370d0df`](https://github.com/valbuild/val/commit/370d0df7ea45aeeafb4520318018d7c4e1c040d6), [`14877a8`](https://github.com/valbuild/val/commit/14877a85c5add4daa16836470b8739180a9fe8c6), [`beda04b`](https://github.com/valbuild/val/commit/beda04bd326cbab18ed103e8d43917b16f43bd8c)]:
+  - @valbuild/ui@0.137.0
+  - @valbuild/server@0.137.0
+  - @valbuild/shared@0.137.0
+  - @valbuild/core@0.137.0
+  - @valbuild/react@0.137.0
+  - @valbuild/language-server@0.137.0
+  - @valbuild/mcp@0.137.0
+
 ## 0.136.10
 
 ### Patch Changes

package/dist/declarations/src/initVal.d.ts

@@ -1,4 +1,4 @@
-import { type ValConfig, type InitVal, type ValConstructor, ValRouter } from "@valbuild/core";
+import { type ValConfig, type InitVal, type ValConstructor, ValRouter, ExternalPageRouter } from "@valbuild/core";
 import { raw } from "@valbuild/react/stega";
 import { getUnpatchedUnencodedVal } from "./getUnpatchedUnencodedVal.js";
 import { decodeValPathsOfString } from "./decodeValPathsOfString.js";
@@ -114,6 +114,11 @@ export declare const initVal: (config?: ValConfig) => InitVal & {
      * It is what `s.route()` links to when the destination is somewhere else -
      * a campaign site, a docs host, a social profile.
      *
+     * By default a key may use any scheme except the handful that are not links
+     * at all (`javascript:`, `data:`), so `mailto:` and `tel:` are ordinary
+     * keys. Call it - `externalPageRouter({ schemes: ["https", "mailto"] })` -
+     * to narrow that.
+     *
      * @example
      * const links = s.record(s.object({ title: s.string() }));
      * export default c.define(
@@ -122,6 +127,6 @@ export declare const initVal: (config?: ValConfig) => InitVal & {
      *   { "https://val.build": { title: "Val" } },
      * );
      */
-    externalPageRouter: ValRouter;
+    externalPageRouter: ExternalPageRouter;
 };
 export {};

package/dist/valbuild-next.cjs.dev.js

@@ -12,7 +12,7 @@ var NextImage = require('next/image');
 var jsxRuntime = require('react/jsx-runtime');
 var ValApp = require('./ValApp-294e5b53.cjs.dev.js');
 var ValModulesClient = require('./ValModulesClient-4ecabf99.cjs.dev.js');
-var version = require('./version-9431e957.cjs.dev.js');
+var version = require('./version-dd474cec.cjs.dev.js');
 var createForOfIteratorHelper = require('./createForOfIteratorHelper-0445603c.cjs.dev.js');
 require('./defineProperty-f90345d7.cjs.dev.js');
 require('./unsupportedIterableToArray-c8ab77c9.cjs.dev.js');

package/dist/valbuild-next.cjs.prod.js

@@ -12,7 +12,7 @@ var NextImage = require('next/image');
 var jsxRuntime = require('react/jsx-runtime');
 var ValApp = require('./ValApp-ab8a96fd.cjs.prod.js');
 var ValModulesClient = require('./ValModulesClient-10c0721c.cjs.prod.js');
-var version = require('./version-2ec73b93.cjs.prod.js');
+var version = require('./version-9b241040.cjs.prod.js');
 var createForOfIteratorHelper = require('./createForOfIteratorHelper-d4afcad8.cjs.prod.js');
 require('./defineProperty-8951f469.cjs.prod.js');
 require('./unsupportedIterableToArray-0d2087a2.cjs.prod.js');

package/dist/valbuild-next.esm.js

@@ -11,7 +11,7 @@ import NextImage from 'next/image';
 import { jsx } from 'react/jsx-runtime';
 export { ValApp } from './ValApp-3a70afe1.esm.js';
 export { ValModulesClient, useRegisterValModules } from './ValModulesClient-0dd601a1.esm.js';
-import { V as VERSION } from './version-70a32c2a.esm.js';
+import { V as VERSION } from './version-fa8db436.esm.js';
 import { _ as _createForOfIteratorHelper } from './createForOfIteratorHelper-5758a730.esm.js';
 import './defineProperty-cca5affa.esm.js';
 import './unsupportedIterableToArray-5baabfdc.esm.js';

package/dist/{version-2ec73b93.cjs.prod.js → version-9b241040.cjs.prod.js}

@@ -14,7 +14,7 @@ var packageJson = {
 		"next",
 		"react"
 	],
-	version: "0.136.10",
+	version: "0.138.0",
 	scripts: {
 		typecheck: "tsc --noEmit",
 		test: "jest"

package/dist/{version-9431e957.cjs.dev.js → version-dd474cec.cjs.dev.js}

@@ -14,7 +14,7 @@ var packageJson = {
 		"next",
 		"react"
 	],
-	version: "0.136.10",
+	version: "0.138.0",
 	scripts: {
 		typecheck: "tsc --noEmit",
 		test: "jest"

package/dist/{version-70a32c2a.esm.js → version-fa8db436.esm.js}

@@ -12,7 +12,7 @@ var packageJson = {
 		"next",
 		"react"
 	],
-	version: "0.136.10",
+	version: "0.138.0",
 	scripts: {
 		typecheck: "tsc --noEmit",
 		test: "jest"

package/package.json

@@ -12,7 +12,7 @@
     "next",
     "react"
   ],
-  "version": "0.136.10",
+  "version": "0.138.0",
   "main": "dist/valbuild-next.cjs.js",
   "module": "dist/valbuild-next.esm.js",
   "exports": {
@@ -47,13 +47,13 @@
   "dependencies": {
     "client-only": "^0.0.1",
     "server-only": "^0.0.1",
-    "@valbuild/core": "0.136.8",
-    "@valbuild/language-server": "0.136.10",
-    "@valbuild/server": "0.136.10",
-    "@valbuild/mcp": "0.136.10",
-    "@valbuild/ui": "0.136.10",
-    "@valbuild/shared": "0.136.10",
-    "@valbuild/react": "0.136.10"
+    "@valbuild/core": "0.138.0",
+    "@valbuild/language-server": "0.138.0",
+    "@valbuild/mcp": "0.138.0",
+    "@valbuild/react": "0.138.0",
+    "@valbuild/server": "0.138.0",
+    "@valbuild/shared": "0.138.0",
+    "@valbuild/ui": "0.138.0"
   },
   "devDependencies": {
     "@testing-library/react": "^16.3.3",

package/rsc/dist/valbuild-next-rsc.cjs.dev.js

@@ -12,7 +12,7 @@ var core = require('@valbuild/core');
 var React = require('react');
 var internal = require('@valbuild/shared/internal');
 var server = require('@valbuild/server');
-var version = require('../../dist/version-9431e957.cjs.dev.js');
+var version = require('../../dist/version-dd474cec.cjs.dev.js');
 require('../../dist/createForOfIteratorHelper-0445603c.cjs.dev.js');
 require('../../dist/unsupportedIterableToArray-c8ab77c9.cjs.dev.js');
 require('../../dist/slicedToArray-44036a76.cjs.dev.js');

package/rsc/dist/valbuild-next-rsc.cjs.prod.js

@@ -12,7 +12,7 @@ var core = require('@valbuild/core');
 var React = require('react');
 var internal = require('@valbuild/shared/internal');
 var server = require('@valbuild/server');
-var version = require('../../dist/version-2ec73b93.cjs.prod.js');
+var version = require('../../dist/version-9b241040.cjs.prod.js');
 require('../../dist/createForOfIteratorHelper-d4afcad8.cjs.prod.js');
 require('../../dist/unsupportedIterableToArray-0d2087a2.cjs.prod.js');
 require('../../dist/slicedToArray-ce613de6.cjs.prod.js');

package/rsc/dist/valbuild-next-rsc.esm.js

@@ -8,7 +8,7 @@ import { Internal } from '@valbuild/core';
 import { cache } from 'react';
 import { VAL_SESSION_COOKIE, memoizePerRequest } from '@valbuild/shared/internal';
 import { createValServer } from '@valbuild/server';
-import { V as VERSION } from '../../dist/version-70a32c2a.esm.js';
+import { V as VERSION } from '../../dist/version-fa8db436.esm.js';
 import '../../dist/createForOfIteratorHelper-5758a730.esm.js';
 import '../../dist/unsupportedIterableToArray-5baabfdc.esm.js';
 import '../../dist/slicedToArray-aa291011.esm.js';

package/server/dist/valbuild-next-server.cjs.dev.js

@@ -9,7 +9,7 @@ var objectSpread2 = require('../../dist/objectSpread2-58024783.cjs.dev.js');
 var core = require('@valbuild/core');
 var server = require('@valbuild/server');
 var server$1 = require('next/server');
-var version = require('../../dist/version-9431e957.cjs.dev.js');
+var version = require('../../dist/version-dd474cec.cjs.dev.js');
 var mcp = require('@valbuild/mcp');
 require('../../dist/unsupportedIterableToArray-c8ab77c9.cjs.dev.js');
 require('../../dist/defineProperty-f90345d7.cjs.dev.js');

package/server/dist/valbuild-next-server.cjs.prod.js

@@ -9,7 +9,7 @@ var objectSpread2 = require('../../dist/objectSpread2-13f847a9.cjs.prod.js');
 var core = require('@valbuild/core');
 var server = require('@valbuild/server');
 var server$1 = require('next/server');
-var version = require('../../dist/version-2ec73b93.cjs.prod.js');
+var version = require('../../dist/version-9b241040.cjs.prod.js');
 var mcp = require('@valbuild/mcp');
 require('../../dist/unsupportedIterableToArray-0d2087a2.cjs.prod.js');
 require('../../dist/defineProperty-8951f469.cjs.prod.js');

package/server/dist/valbuild-next-server.esm.js

@@ -6,7 +6,7 @@ import { Internal } from '@valbuild/core';
 import { createValApiRouter, createValServer } from '@valbuild/server';
 export { createPrettierFormatter } from '@valbuild/server';
 import { NextResponse } from 'next/server';
-import { V as VERSION } from '../../dist/version-70a32c2a.esm.js';
+import { V as VERSION } from '../../dist/version-fa8db436.esm.js';
 import { initValMcp as initValMcp$1 } from '@valbuild/mcp';
 import '../../dist/unsupportedIterableToArray-5baabfdc.esm.js';
 import '../../dist/defineProperty-cca5affa.esm.js';