@valbuild/tanstack 0.136.9 → 0.137.0

package/CHANGELOG.md

@@ -1,5 +1,62 @@
 # @valbuild/tanstack
 
+## 0.137.0
+
+### Patch Changes
+
+- [#676](https://github.com/valbuild/val/pull/676) [`43b58f2`](https://github.com/valbuild/val/commit/43b58f2962840883badf91950da2c51b89d1c7cb) Thanks [@freekh](https://github.com/freekh)! - External page keys are now validated, and `mailto:` and `tel:` are allowed.
+
+  `externalPageRouter` documented a rule — a key must start with `https://` or
+  `http://` — and never enforced it: the validator collected the errors and then
+  returned an empty list, so a key like `discord.gg/val` or `/about` was accepted
+  in silence and behaved as a relative link on the site.
+
+  Fixing that made the rule itself worth looking at, because it was a rule about
+  the protocol standing in for a rule about links. A contact page's email address
+  and phone number are external pages to whoever maintains the list, and they
+  were refused. So the rule that is now enforced is a deny list rather than an
+  allow list: a key must have a scheme, and the scheme must not be one of
+  `javascript:`, `data:`, `vbscript:`, `file:` or `blob:` — which are not links
+  at all. An external page key ends up in an `href` in your site's own markup, so
+  those stay refused however the router is configured.
+
+  A project that wants to be stricter says so:
+
+  ```ts
+  s.record(item).router(externalPageRouter({ schemes: ["https", "mailto"] }));
+  ```
+
+  `initVal()` from `@valbuild/next` and `@valbuild/tanstack` hands you the
+  callable form, so the narrowed version typechecks in an app.
+
+  Val Studio applies the same rule while you type — it calls the same function —
+  and shows a narrowed project's own list in the message.
+
+  If your project has a key with no scheme at all, it will start showing a
+  validation error on that entry. Give it one, or move it out of the external
+  router.
+
+- Updated dependencies [[`8f60073`](https://github.com/valbuild/val/commit/8f60073e5490971a615cebbe8ea1243c67e43530), [`af7a4ba`](https://github.com/valbuild/val/commit/af7a4baa63da5d8a226166377a354cf2fc0c1d77), [`48ac9f0`](https://github.com/valbuild/val/commit/48ac9f06dd59a5b4ca60232b1ef198cf42f23aa6), [`daecf41`](https://github.com/valbuild/val/commit/daecf416f51990569a47a6a9ee9174b1a57f98c2), [`43b58f2`](https://github.com/valbuild/val/commit/43b58f2962840883badf91950da2c51b89d1c7cb), [`9b09bf3`](https://github.com/valbuild/val/commit/9b09bf38c9d5912f41fec1c18aa87455fd32f616), [`e2bfc0e`](https://github.com/valbuild/val/commit/e2bfc0e40383fe25d3ec0473d1032f6264a8939f), [`9b09bf3`](https://github.com/valbuild/val/commit/9b09bf38c9d5912f41fec1c18aa87455fd32f616), [`8e49bf4`](https://github.com/valbuild/val/commit/8e49bf41ad6a8ad3b01e502fb7ce0369baa316db), [`370d0df`](https://github.com/valbuild/val/commit/370d0df7ea45aeeafb4520318018d7c4e1c040d6), [`14877a8`](https://github.com/valbuild/val/commit/14877a85c5add4daa16836470b8739180a9fe8c6), [`beda04b`](https://github.com/valbuild/val/commit/beda04bd326cbab18ed103e8d43917b16f43bd8c)]:
+  - @valbuild/ui@0.137.0
+  - @valbuild/server@0.137.0
+  - @valbuild/shared@0.137.0
+  - @valbuild/core@0.137.0
+  - @valbuild/react@0.137.0
+  - @valbuild/language-server@0.137.0
+  - @valbuild/mcp@0.137.0
+
+## 0.136.10
+
+### Patch Changes
+
+- Updated dependencies [[`fef29b0`](https://github.com/valbuild/val/commit/fef29b0d9e826e4e7e63a3ae61553137a3f9d280)]:
+  - @valbuild/ui@0.136.10
+  - @valbuild/server@0.136.10
+  - @valbuild/shared@0.136.10
+  - @valbuild/mcp@0.136.10
+  - @valbuild/react@0.136.10
+  - @valbuild/language-server@0.136.10
+
 ## 0.136.9
 
 ### Patch Changes

package/dist/declarations/src/initVal.d.ts

@@ -1,4 +1,4 @@
-import { type ValConfig, type InitVal, type ValConstructor, ValRouter } from "@valbuild/core";
+import { type ValConfig, type InitVal, type ValConstructor, ValRouter, ExternalPageRouter } from "@valbuild/core";
 import { raw } from "@valbuild/react/stega";
 import { getUnpatchedUnencodedVal } from "./getUnpatchedUnencodedVal.js";
 import { decodeValPathsOfString } from "./decodeValPathsOfString.js";
@@ -110,6 +110,11 @@ export declare const initVal: (config?: ValConfig) => InitVal & {
      * It is what `s.route()` links to when the destination is somewhere else -
      * a campaign site, a docs host, a social profile.
      *
+     * By default a key may use any scheme except the handful that are not links
+     * at all (`javascript:`, `data:`), so `mailto:` and `tel:` are ordinary
+     * keys. Call it - `externalPageRouter({ schemes: ["https", "mailto"] })` -
+     * to narrow that.
+     *
      * @example
      * const links = s.record(s.object({ title: s.string() }));
      * export default c.define(
@@ -118,6 +123,6 @@ export declare const initVal: (config?: ValConfig) => InitVal & {
      *   { "https://val.build": { title: "Val" } },
      * );
      */
-    externalPageRouter: ValRouter;
+    externalPageRouter: ExternalPageRouter;
 };
 export {};

package/dist/valbuild-tanstack.cjs.dev.js

@@ -2,7 +2,7 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = require('./version-cc264956.cjs.dev.js');
+var version = require('./version-be99b2ed.cjs.dev.js');
 var createForOfIteratorHelper = require('./createForOfIteratorHelper-e75681d7.cjs.dev.js');
 var core = require('@valbuild/core');
 var stega = require('@valbuild/react/stega');

package/dist/valbuild-tanstack.cjs.prod.js

@@ -2,7 +2,7 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = require('./version-450148e3.cjs.prod.js');
+var version = require('./version-3c9ea8b9.cjs.prod.js');
 var createForOfIteratorHelper = require('./createForOfIteratorHelper-0324e063.cjs.prod.js');
 var core = require('@valbuild/core');
 var stega = require('@valbuild/react/stega');

package/dist/valbuild-tanstack.esm.js

@@ -1,4 +1,4 @@
-import { _ as _asyncToGenerator, a as _regenerator, r as readValEnableCookie, V as VERSION$1 } from './version-a489c15a.esm.js';
+import { _ as _asyncToGenerator, a as _regenerator, r as readValEnableCookie, V as VERSION$1 } from './version-b24e6106.esm.js';
 import { _ as _objectSpread2, a as _slicedToArray, b as _createForOfIteratorHelper } from './createForOfIteratorHelper-485c2ce1.esm.js';
 import { Internal as Internal$1, initVal as initVal$1, DEFAULT_CONTENT_HOST } from '@valbuild/core';
 import * as core from '@valbuild/core';

package/dist/{version-450148e3.cjs.prod.js → version-3c9ea8b9.cjs.prod.js}

@@ -212,7 +212,7 @@ var packageJson = {
 		"tanstack-router",
 		"react"
 	],
-	version: "0.136.9",
+	version: "0.137.0",
 	scripts: {
 		typecheck: "tsc --noEmit",
 		test: "jest"

package/dist/{version-a489c15a.esm.js → version-b24e6106.esm.js}

@@ -210,7 +210,7 @@ var packageJson = {
 		"tanstack-router",
 		"react"
 	],
-	version: "0.136.9",
+	version: "0.137.0",
 	scripts: {
 		typecheck: "tsc --noEmit",
 		test: "jest"

package/dist/{version-cc264956.cjs.dev.js → version-be99b2ed.cjs.dev.js}

@@ -212,7 +212,7 @@ var packageJson = {
 		"tanstack-router",
 		"react"
 	],
-	version: "0.136.9",
+	version: "0.137.0",
 	scripts: {
 		typecheck: "tsc --noEmit",
 		test: "jest"

package/package.json

@@ -14,7 +14,7 @@
     "tanstack-router",
     "react"
   ],
-  "version": "0.136.9",
+  "version": "0.137.0",
   "main": "dist/valbuild-tanstack.cjs.js",
   "module": "dist/valbuild-tanstack.esm.js",
   "exports": {
@@ -42,13 +42,13 @@
     "exports": true
   },
   "dependencies": {
-    "@valbuild/core": "0.136.8",
-    "@valbuild/language-server": "0.136.9",
-    "@valbuild/mcp": "0.136.9",
-    "@valbuild/react": "0.136.9",
-    "@valbuild/server": "0.136.9",
-    "@valbuild/shared": "0.136.8",
-    "@valbuild/ui": "0.136.9"
+    "@valbuild/core": "0.137.0",
+    "@valbuild/language-server": "0.137.0",
+    "@valbuild/mcp": "0.137.0",
+    "@valbuild/react": "0.137.0",
+    "@valbuild/server": "0.137.0",
+    "@valbuild/shared": "0.137.0",
+    "@valbuild/ui": "0.137.0"
   },
   "devDependencies": {
     "@tanstack/react-router": "^1.170.33",

package/server/dist/valbuild-tanstack-server.cjs.dev.js

@@ -2,7 +2,7 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = require('../../dist/version-cc264956.cjs.dev.js');
+var version = require('../../dist/version-be99b2ed.cjs.dev.js');
 var core = require('@valbuild/core');
 var createForOfIteratorHelper = require('../../dist/createForOfIteratorHelper-e75681d7.cjs.dev.js');
 var server = require('@valbuild/server');

package/server/dist/valbuild-tanstack-server.cjs.prod.js

@@ -2,7 +2,7 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = require('../../dist/version-450148e3.cjs.prod.js');
+var version = require('../../dist/version-3c9ea8b9.cjs.prod.js');
 var core = require('@valbuild/core');
 var createForOfIteratorHelper = require('../../dist/createForOfIteratorHelper-0324e063.cjs.prod.js');
 var server = require('@valbuild/server');

package/server/dist/valbuild-tanstack-server.esm.js

@@ -1,4 +1,4 @@
-import { _ as _asyncToGenerator, a as _regenerator, V as VERSION, s as setValEnableCookieReader } from '../../dist/version-a489c15a.esm.js';
+import { _ as _asyncToGenerator, a as _regenerator, V as VERSION, s as setValEnableCookieReader } from '../../dist/version-b24e6106.esm.js';
 import { Internal } from '@valbuild/core';
 import { _ as _objectSpread2, a as _slicedToArray, d as _defineProperty } from '../../dist/createForOfIteratorHelper-485c2ce1.esm.js';
 import { createValApiRouter, createValServer } from '@valbuild/server';