@vibe-agent-toolkit/utils 0.2.0-rc.3 → 0.2.0-rc.5

package/dist/link-auth/transforms.js

@@ -1,52 +0,0 @@
-/**
- * Transform allowlist for linkAuth rewrite templates.
- *
- * Rewrite `to:` templates may call transforms over named regex captures —
- * e.g. `${base64url(u)}` for Microsoft Graph share-ids. The allowed set is
- * frozen in this file: adding a transform requires a VAT PR (see issue #113
- * design §4.1). There is no arbitrary-evaluation path.
- *
- * v1 inputs are assumed to be ASCII URL host/path captures. Non-ASCII edge
- * cases (lone surrogates) are pinned by tests so future regressions surface.
- */
-const TRANSFORMS = {
-    base64url: (s) => Buffer.from(s, 'utf8').toString('base64url'),
-    urlencode: (s) => encodeURIComponent(s),
-    lower: (s) => s.toLowerCase(),
-};
-/**
- * The closed allowlist of transform names. Callers parsing rewrite templates
- * can validate transform calls (e.g. `${base64url(u)}`) against this list at
- * config-load time, surfacing typos before any URL is rewritten.
- */
-export const ALLOWED_TRANSFORMS = Object.freeze(Object.keys(TRANSFORMS));
-/**
- * Thrown by `applyTransform` when called with a name not in the closed
- * allowlist. The message names the bad transform and the full allowlist so
- * a misconfigured macro surfaces a clear error at load time.
- */
-export class UnknownTransformError extends Error {
-    constructor(name) {
-        super(`Unknown transform "${name}". Allowed: ${ALLOWED_TRANSFORMS.join(', ')}.`);
-        this.name = 'UnknownTransformError';
-    }
-}
-/**
- * Dispatch a transform by name on a string input.
- *
- * Security claim: only the names in `ALLOWED_TRANSFORMS` resolve; any other
- * input throws `UnknownTransformError`. Lookup uses `Object.hasOwn` to block
- * prototype-chain keys (`toString`, `__proto__`, `constructor`, …) that a
- * `name in TRANSFORMS` check would let through.
- *
- * @throws {UnknownTransformError} if `name` is not in the allowlist
- * @throws {URIError} from `urlencode` on lone-surrogate inputs — deliberate;
- *   v1 callers pass URL-derived captures that cannot legally contain these
- */
-export function applyTransform(name, input) {
-    if (!Object.hasOwn(TRANSFORMS, name)) {
-        throw new UnknownTransformError(name);
-    }
-    return TRANSFORMS[name](input);
-}
-//# sourceMappingURL=transforms.js.map

package/dist/link-auth/transforms.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"transforms.js","sourceRoot":"","sources":["../../src/link-auth/transforms.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,MAAM,UAAU,GAAG;IACjB,SAAS,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;IACtE,SAAS,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC/C,KAAK,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE;CACS,CAAC;AAIjD;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,MAAM,CAAC,MAAM,CACvE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAoB,CAC3C,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,IAAY;QACtB,KAAK,CAAC,sBAAsB,IAAI,eAAe,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,KAAa;IACxD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,UAAU,CAAC,IAAqB,CAAC,CAAC,KAAK,CAAC,CAAC;AAClD,CAAC"}

package/dist/template-entry.d.ts

@@ -1,10 +0,0 @@
-/**
- * @vibe-agent-toolkit/utils/template
- *
- * Cached Handlebars rendering with HTML escaping disabled. Pure with respect
- * to Node builtins, but it pulls in `handlebars` (and transitively
- * `source-map`) — roughly 239KB bundled. Quarantined behind its own subpath
- * so importing a path helper never pays for it.
- */
-export * from './template.js';
-//# sourceMappingURL=template-entry.d.ts.map

package/dist/template-entry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"template-entry.d.ts","sourceRoot":"","sources":["../src/template-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,cAAc,eAAe,CAAC"}

package/dist/template-entry.js

@@ -1,10 +0,0 @@
-/**
- * @vibe-agent-toolkit/utils/template
- *
- * Cached Handlebars rendering with HTML escaping disabled. Pure with respect
- * to Node builtins, but it pulls in `handlebars` (and transitively
- * `source-map`) — roughly 239KB bundled. Quarantined behind its own subpath
- * so importing a path helper never pays for it.
- */
-export * from './template.js';
-//# sourceMappingURL=template-entry.js.map

package/dist/template-entry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"template-entry.js","sourceRoot":"","sources":["../src/template-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,cAAc,eAAe,CAAC"}

package/dist/template.d.ts

@@ -1,7 +0,0 @@
-/**
- * Render a Handlebars template with the given context.
- * Uses noEscape since this is for markdown content, not HTML.
- * Compiled templates are cached by template string.
- */
-export declare function renderTemplate(template: string, context: Record<string, unknown>): string;
-//# sourceMappingURL=template.d.ts.map

package/dist/template.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"template.d.ts","sourceRoot":"","sources":["../src/template.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CASzF"}

package/dist/template.js

@@ -1,18 +0,0 @@
-import Handlebars from 'handlebars';
-const templateCache = new Map();
-/**
- * Render a Handlebars template with the given context.
- * Uses noEscape since this is for markdown content, not HTML.
- * Compiled templates are cached by template string.
- */
-export function renderTemplate(template, context) {
-    let compiled = templateCache.get(template);
-    if (!compiled) {
-        // Safe: templates render markdown/plaintext, not HTML. No XSS risk.
-        // eslint-disable-next-line sonarjs/disabled-auto-escaping
-        compiled = Handlebars.compile(template, { noEscape: true });
-        templateCache.set(template, compiled);
-    }
-    return compiled(context);
-}
-//# sourceMappingURL=template.js.map

package/dist/template.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"template.js","sourceRoot":"","sources":["../src/template.ts"],"names":[],"mappings":"AAAA,OAAO,UAAU,MAAM,YAAY,CAAC;AAEpC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAsC,CAAC;AAEpE;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,OAAgC;IAC/E,IAAI,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,oEAAoE;QACpE,0DAA0D;QAC1D,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC"}