@zenalexa/unicli 0.212.1 → 0.213.0-beta.2

package/dist/engine/template.js

@@ -0,0 +1,378 @@
+/**
+ * Pipeline template engine — ${{ expression | filter | ... }} evaluation.
+ *
+ * Extracted from the legacy yaml-runner so per-step handlers can share a
+ * single implementation. The expression evaluator uses a null-prototype VM
+ * sandbox with a 50ms timeout and a deny-list for prototype-chain escape
+ * vectors; simple dotted access bypasses the VM for performance.
+ */
+import { runInNewContext } from "node:vm";
+/**
+ * Built-in pipe filters — used in template expressions like:
+ *   ${{ item.tags | join(', ') }}
+ *   ${{ args.word | urlencode }}
+ *   ${{ item.text | slice(0, 200) }}
+ */
+export const PIPE_FILTERS = {
+    join: (val, sep) => Array.isArray(val) ? val.join(String(sep ?? ", ")) : String(val ?? ""),
+    urlencode: (val) => encodeURIComponent(String(val ?? "")),
+    slice: (val, start, end) => {
+        const s = String(val ?? "");
+        return s.slice(Number(start) || 0, end !== undefined ? Number(end) : undefined);
+    },
+    replace: (val, search, replacement) => String(val ?? "").replace(new RegExp(String(search), "g"), String(replacement ?? "")),
+    lowercase: (val) => String(val ?? "").toLowerCase(),
+    uppercase: (val) => String(val ?? "").toUpperCase(),
+    trim: (val) => String(val ?? "").trim(),
+    default: (val, fallback) => val == null || val === "" ? fallback : val,
+    split: (val, sep) => String(val ?? "").split(String(sep ?? ",")),
+    first: (val) => (Array.isArray(val) ? val[0] : val),
+    last: (val) => (Array.isArray(val) ? val[val.length - 1] : val),
+    length: (val) => Array.isArray(val) ? val.length : String(val ?? "").length,
+    strip_html: (val) => String(val ?? "").replace(/<[^>]+>/g, ""),
+    truncate: (val, max) => {
+        const s = String(val ?? "");
+        const n = Number(max) || 100;
+        return s.length > n ? s.slice(0, n) + "..." : s;
+    },
+    slugify: (val) => {
+        return String(val ?? "")
+            .normalize("NFKD")
+            .replace(/[\u0300-\u036f]/g, "")
+            .toLowerCase()
+            .replace(/[^a-z0-9]+/g, "-")
+            .replace(/^-+|-+$/g, "");
+    },
+    sanitize: (val) => String(val ?? "")
+        .replace(/[<>:"/\\|?*\x00-\x1f]/g, "_")
+        .replace(/^\.+/, "")
+        .trim() || "download",
+    ext: (val) => {
+        try {
+            const pathname = new URL(String(val)).pathname;
+            const dot = pathname.lastIndexOf(".");
+            return dot > 0 ? pathname.slice(dot + 1) : "";
+        }
+        catch {
+            const s = String(val ?? "");
+            const dot = s.lastIndexOf(".");
+            return dot > 0 ? s.slice(dot + 1).split(/[?#]/)[0] : "";
+        }
+    },
+    basename: (val) => {
+        try {
+            const pathname = new URL(String(val)).pathname;
+            return pathname.split("/").pop() ?? "";
+        }
+        catch {
+            return (String(val ?? "")
+                .split("/")
+                .pop() ?? "");
+        }
+    },
+    keys: (val) => val && typeof val === "object" && !Array.isArray(val)
+        ? Object.keys(val)
+        : [],
+    json: (val) => JSON.stringify(val),
+    abs: (val) => Math.abs(Number(val) || 0),
+    round: (val) => Math.round(Number(val) || 0),
+    ceil: (val) => Math.ceil(Number(val) || 0),
+    floor: (val) => Math.floor(Number(val) || 0),
+    int: (val) => parseInt(String(val), 10) || 0,
+    float: (val) => parseFloat(String(val)) || 0,
+    str: (val) => String(val ?? ""),
+    reverse: (val) => Array.isArray(val)
+        ? [...val].reverse()
+        : String(val ?? "")
+            .split("")
+            .reverse()
+            .join(""),
+    unique: (val) => (Array.isArray(val) ? [...new Set(val)] : val),
+};
+/**
+ * Parse pipe filters from expression: "expr | filter1(arg) | filter2"
+ * Returns { baseExpr, filters: [{ name, args }] }
+ */
+function parsePipes(expr) {
+    // Only split on | that is NOT inside parentheses, quotes, or array syntax
+    const parts = [];
+    let current = "";
+    let depth = 0;
+    let inStr = null;
+    for (let i = 0; i < expr.length; i++) {
+        const ch = expr[i];
+        if (inStr) {
+            current += ch;
+            if (ch === inStr && expr[i - 1] !== "\\")
+                inStr = null;
+            continue;
+        }
+        if (ch === '"' || ch === "'") {
+            inStr = ch;
+            current += ch;
+            continue;
+        }
+        if (ch === "(" || ch === "[") {
+            depth++;
+            current += ch;
+            continue;
+        }
+        if (ch === ")" || ch === "]") {
+            depth--;
+            current += ch;
+            continue;
+        }
+        if (ch === "|" && depth === 0 && expr[i + 1] !== "|") {
+            // Check it's not || (logical OR)
+            parts.push(current.trim());
+            current = "";
+            continue;
+        }
+        current += ch;
+    }
+    parts.push(current.trim());
+    if (parts.length <= 1)
+        return { baseExpr: expr, filters: [] };
+    const baseExpr = parts[0];
+    const filters = parts.slice(1).map((f) => {
+        const m = f.match(/^(\w+)\((.*)\)$/s);
+        if (m) {
+            // Parse args — simple comma split respecting strings
+            const rawArgs = m[2].trim();
+            const args = rawArgs ? splitFilterArgs(rawArgs) : [];
+            return { name: m[1], args };
+        }
+        return { name: f.trim(), args: [] };
+    });
+    return { baseExpr, filters };
+}
+function splitFilterArgs(raw) {
+    const args = [];
+    let current = "";
+    let inStr = null;
+    let depth = 0;
+    for (const ch of raw) {
+        if (inStr) {
+            current += ch;
+            if (ch === inStr)
+                inStr = null;
+            continue;
+        }
+        if (ch === '"' || ch === "'") {
+            inStr = ch;
+            current += ch;
+            continue;
+        }
+        if (ch === "(") {
+            depth++;
+            current += ch;
+            continue;
+        }
+        if (ch === ")") {
+            depth--;
+            current += ch;
+            continue;
+        }
+        if (ch === "," && depth === 0) {
+            args.push(current.trim());
+            current = "";
+            continue;
+        }
+        current += ch;
+    }
+    args.push(current.trim());
+    return args;
+}
+/** Patterns that must never appear in evaluated expressions. */
+const FORBIDDEN_EXPR = /constructor|__proto__|prototype|globalThis|process|require|import\s*\(|eval\s*\(/;
+/**
+ * Safe expression evaluator using Node.js VM sandbox.
+ * Provides stronger isolation than `new Function()` with a 50ms timeout
+ * to prevent DoS. Simple dotted access (the most common case) uses a
+ * fast path that avoids the VM overhead entirely.
+ *
+ * Supports pipe filters: ${{ expr | join(', ') | slice(0, 100) }}
+ */
+export function evalExpression(expr, scope) {
+    try {
+        // Security: reject dangerous patterns
+        if (FORBIDDEN_EXPR.test(expr))
+            return undefined;
+        const { baseExpr, filters } = parsePipes(expr);
+        // Fast path: simple dotted access like "item.title" or "args.query"
+        if (/^[a-zA-Z_][\w.]*(\[\d+\])?$/.test(baseExpr)) {
+            let result = resolveDottedPath(baseExpr, scope);
+            for (const filter of filters) {
+                const filterFn = PIPE_FILTERS[filter.name];
+                if (!filterFn)
+                    continue;
+                const evaledArgs = filter.args.map((a) => resolveFilterArg(a, scope));
+                result = filterFn(result, ...evaledArgs);
+            }
+            return result;
+        }
+        // VM sandbox evaluation with 50ms timeout.
+        // SECURITY: Create a null-prototype sandbox to prevent prototype chain escape.
+        // Node.js vm is NOT a security boundary — host objects leak constructors.
+        // We mitigate by: (1) null-prototype sandbox, (2) frozen copies of built-ins,
+        // (3) contextCodeGeneration restriction, (4) FORBIDDEN_EXPR pre-check.
+        const sandbox = Object.create(null);
+        // Copy scope values (args, item, index, etc.) — shallow copy with null prototype
+        for (const [k, v] of Object.entries(scope)) {
+            sandbox[k] = v;
+        }
+        // Add safe built-ins as frozen copies (prevents constructor chain traversal)
+        sandbox.encodeURIComponent = encodeURIComponent;
+        sandbox.decodeURIComponent = decodeURIComponent;
+        sandbox.JSON = { parse: JSON.parse, stringify: JSON.stringify };
+        sandbox.Math = Object.freeze({ ...Math });
+        sandbox.parseInt = parseInt;
+        sandbox.parseFloat = parseFloat;
+        sandbox.isNaN = isNaN;
+        sandbox.isFinite = isFinite;
+        let result;
+        try {
+            result = runInNewContext(`(${baseExpr})`, sandbox, {
+                timeout: 50,
+                contextCodeGeneration: { strings: false, wasm: false },
+            });
+        }
+        catch {
+            return undefined;
+        }
+        // Apply pipe filters
+        for (const filter of filters) {
+            const filterFn = PIPE_FILTERS[filter.name];
+            if (!filterFn)
+                continue;
+            const evaledArgs = filter.args.map((a) => resolveFilterArg(a, scope));
+            result = filterFn(result, ...evaledArgs);
+        }
+        return result;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Resolve a dotted path like "item.tags[0]" against the scope object. */
+function resolveDottedPath(path, scope) {
+    // Handle array index: "item.tags[0]"
+    const cleanPath = path.replace(/\[(\d+)\]/g, ".$1");
+    const parts = cleanPath.split(".");
+    let current = scope[parts[0]];
+    for (let i = 1; i < parts.length; i++) {
+        if (current == null || typeof current !== "object")
+            return undefined;
+        current = current[parts[i]];
+    }
+    return current;
+}
+/** Resolve a single filter argument — string literal, number, or expression. */
+function resolveFilterArg(a, scope) {
+    // String literal
+    if ((a.startsWith("'") && a.endsWith("'")) ||
+        (a.startsWith('"') && a.endsWith('"'))) {
+        return a.slice(1, -1);
+    }
+    // Number
+    if (/^-?\d+(\.\d+)?$/.test(a))
+        return Number(a);
+    // Security check
+    if (FORBIDDEN_EXPR.test(a))
+        return a;
+    // Expression via VM (same hardened sandbox as evalExpression)
+    try {
+        const sandbox = Object.create(null);
+        for (const [k, v] of Object.entries(scope))
+            sandbox[k] = v;
+        sandbox.JSON = { parse: JSON.parse, stringify: JSON.stringify };
+        sandbox.Math = Object.freeze({ ...Math });
+        sandbox.parseInt = parseInt;
+        sandbox.parseFloat = parseFloat;
+        return runInNewContext(`(${a})`, sandbox, {
+            timeout: 50,
+            contextCodeGeneration: { strings: false, wasm: false },
+        });
+    }
+    catch {
+        return a;
+    }
+}
+/**
+ * Evaluate ${{ expression }} templates in a string.
+ * Returns the raw value if the entire string is a single expression,
+ * otherwise returns a string with interpolated values.
+ */
+export function evalTemplate(template, ctx) {
+    const fullMatch = template.match(/^\$\{\{\s*(.+?)\s*\}\}$/);
+    if (fullMatch) {
+        const result = evalExpression(fullMatch[1], buildScope(ctx));
+        return String(result ?? "");
+    }
+    return template.replace(/\$\{\{\s*(.+?)\s*\}\}/g, (_match, expr) => {
+        const result = evalExpression(expr, buildScope(ctx));
+        return String(result ?? "");
+    });
+}
+export function buildScope(ctx) {
+    const scope = {
+        args: ctx.args,
+        vars: ctx.vars ?? {},
+        base: ctx.base,
+        temp: ctx.temp ?? {},
+    };
+    if (ctx.data &&
+        typeof ctx.data === "object" &&
+        "item" in ctx.data) {
+        const d = ctx.data;
+        scope.item = d.item;
+        scope.index = d.index;
+    }
+    else {
+        scope.item = ctx.data;
+    }
+    return scope;
+}
+/**
+ * Recursively resolve ${{ }} templates in nested objects, arrays, and strings.
+ * Non-string primitives (numbers, booleans, null) pass through unchanged.
+ */
+export function resolveTemplateDeep(value, ctx) {
+    if (typeof value === "string") {
+        return evalTemplate(value, ctx);
+    }
+    if (Array.isArray(value)) {
+        return value.map((v) => resolveTemplateDeep(v, ctx));
+    }
+    if (value !== null && typeof value === "object") {
+        const result = {};
+        for (const [k, v] of Object.entries(value)) {
+            result[k] = resolveTemplateDeep(v, ctx);
+        }
+        return result;
+    }
+    return value;
+}
+/**
+ * Navigate nested object by dot-path: "data.list[].title"
+ */
+export function getNestedValue(obj, path) {
+    const parts = path.split(".");
+    let current = obj;
+    for (const part of parts) {
+        if (current == null)
+            return undefined;
+        if (part.endsWith("[]")) {
+            const key = part.slice(0, -2);
+            if (key) {
+                current = current[key];
+            }
+            // current should now be an array — continue traversing
+        }
+        else {
+            current = current[part];
+        }
+    }
+    return current;
+}
+//# sourceMappingURL=template.js.map

package/dist/engine/template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.js","sourceRoot":"","sources":["../../src/engine/template.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG1C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAoD;IAC3E,IAAI,EAAE,CAAC,GAAY,EAAE,GAAY,EAAE,EAAE,CACnC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;IACxE,SAAS,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAClE,KAAK,EAAE,CAAC,GAAY,EAAE,KAAc,EAAE,GAAY,EAAE,EAAE;QACpD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QAC5B,OAAO,CAAC,CAAC,KAAK,CACZ,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAClB,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAC5C,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC,GAAY,EAAE,MAAe,EAAE,WAAoB,EAAE,EAAE,CAC/D,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,OAAO,CACvB,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,EAC/B,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAC1B;IACH,SAAS,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;IAC5D,SAAS,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;IAC5D,IAAI,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;IAChD,OAAO,EAAE,CAAC,GAAY,EAAE,QAAiB,EAAE,EAAE,CAC3C,GAAG,IAAI,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG;IAC5C,KAAK,EAAE,CAAC,GAAY,EAAE,GAAY,EAAE,EAAE,CACpC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;IAC7C,KAAK,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5D,IAAI,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACxE,MAAM,EAAE,CAAC,GAAY,EAAE,EAAE,CACvB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,MAAM;IAC5D,UAAU,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;IACvE,QAAQ,EAAE,CAAC,GAAY,EAAE,GAAY,EAAE,EAAE;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;QAC7B,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,CAAC,GAAY,EAAE,EAAE;QACxB,OAAO,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;aACrB,SAAS,CAAC,MAAM,CAAC;aACjB,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;aAC/B,WAAW,EAAE;aACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;aAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC7B,CAAC;IACD,QAAQ,EAAE,CAAC,GAAY,EAAE,EAAE,CACzB,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;SACd,OAAO,CAAC,wBAAwB,EAAE,GAAG,CAAC;SACtC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;SACnB,IAAI,EAAE,IAAI,UAAU;IACzB,GAAG,EAAE,CAAC,GAAY,EAAE,EAAE;QACpB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACtC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;YAC5B,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAC/B,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,QAAQ,EAAE,CAAC,GAAY,EAAE,EAAE;QACzB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC/C,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CACL,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;iBACd,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,EAAE,IAAI,EAAE,CACf,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,EAAE,CAAC,GAAY,EAAE,EAAE,CACrB,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QACnD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAClB,CAAC,CAAC,EAAE;IACR,IAAI,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;IAC3C,GAAG,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjD,KAAK,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnD,KAAK,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrD,GAAG,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;IACrD,KAAK,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IACrD,GAAG,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;IACxC,OAAO,EAAE,CAAC,GAAY,EAAE,EAAE,CACxB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAChB,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,EAAE;QACpB,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;aACd,KAAK,CAAC,EAAE,CAAC;aACT,OAAO,EAAE;aACT,IAAI,CAAC,EAAE,CAAC;IACjB,MAAM,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;CACzE,CAAC;AAEF;;;GAGG;AACH,SAAS,UAAU,CAAC,IAAY;IAI9B,0EAA0E;IAC1E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAkB,IAAI,CAAC;IAEhC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,IAAI,EAAE,CAAC;YACd,IAAI,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI;gBAAE,KAAK,GAAG,IAAI,CAAC;YACvD,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,KAAK,GAAG,EAAE,CAAC;YACX,OAAO,IAAI,EAAE,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,KAAK,EAAE,CAAC;YACR,OAAO,IAAI,EAAE,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,KAAK,EAAE,CAAC;YACR,OAAO,IAAI,EAAE,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACrD,iCAAiC;YACjC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3B,OAAO,GAAG,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAE3B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAE9D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACvC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC;YACN,qDAAqD;YACrD,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,IAAI,EAAE,CAAC;YACd,IAAI,EAAE,KAAK,KAAK;gBAAE,KAAK,GAAG,IAAI,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,KAAK,GAAG,EAAE,CAAC;YACX,OAAO,IAAI,EAAE,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,KAAK,EAAE,CAAC;YACR,OAAO,IAAI,EAAE,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,KAAK,EAAE,CAAC;YACR,OAAO,IAAI,EAAE,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1B,OAAO,GAAG,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gEAAgE;AAChE,MAAM,cAAc,GAClB,kFAAkF,CAAC;AAErF;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,KAA8B;IAE9B,IAAI,CAAC;QACH,sCAAsC;QACtC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAEhD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAE/C,oEAAoE;QACpE,IAAI,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjD,IAAI,MAAM,GAAY,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACzD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC3C,IAAI,CAAC,QAAQ;oBAAE,SAAS;gBACxB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;gBACtE,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,2CAA2C;QAC3C,+EAA+E;QAC/E,0EAA0E;QAC1E,8EAA8E;QAC9E,uEAAuE;QACvE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAC;QAC/D,iFAAiF;QACjF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;QACD,6EAA6E;QAC7E,OAAO,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAChD,OAAO,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAChD,OAAO,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QAChE,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC5B,OAAO,CAAC,UAAU,GAAG,UAAU,CAAC;QAChC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;QACtB,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAE5B,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,eAAe,CAAC,IAAI,QAAQ,GAAG,EAAE,OAAO,EAAE;gBACjD,OAAO,EAAE,EAAE;gBACX,qBAAqB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;aACvD,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,qBAAqB;QACrB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,CAAC,QAAQ;gBAAE,SAAS;YACxB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YACtE,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,SAAS,iBAAiB,CACxB,IAAY,EACZ,KAA8B;IAE9B,qCAAqC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,OAAO,GAAY,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACrE,OAAO,GAAI,OAAmC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAChF,SAAS,gBAAgB,CAAC,CAAS,EAAE,KAA8B;IACjE,iBAAiB;IACjB,IACE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EACtC,CAAC;QACD,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,SAAS;IACT,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAChD,iBAAiB;IACjB,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACrC,8DAA8D;IAC9D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAC;QAC/D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QAChE,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC5B,OAAO,CAAC,UAAU,GAAG,UAAU,CAAC;QAChC,OAAO,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE;YACxC,OAAO,EAAE,EAAE;YACX,qBAAqB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;SACvD,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,GAAoB;IACjE,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC5D,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,QAAQ,CAAC,OAAO,CAAC,wBAAwB,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE;QACzE,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAoB;IAC7C,MAAM,KAAK,GAA4B;QACrC,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;QACpB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;KACrB,CAAC;IAEF,IACE,GAAG,CAAC,IAAI;QACR,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAC5B,MAAM,IAAK,GAAG,CAAC,IAAgC,EAC/C,CAAC;QACD,MAAM,CAAC,GAAG,GAAG,CAAC,IAA+B,CAAC;QAC9C,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QACpB,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IACxB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACxB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAc,EACd,GAAoB;IAEpB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACtE,MAAM,CAAC,CAAC,CAAC,GAAG,mBAAmB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY,EAAE,IAAY;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,GAAY,GAAG,CAAC;IAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,IAAI;YAAE,OAAO,SAAS,CAAC;QAEtC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,GAAG,EAAE,CAAC;gBACR,OAAO,GAAI,OAAmC,CAAC,GAAG,CAAC,CAAC;YACtD,CAAC;YACD,uDAAuD;QACzD,CAAC;aAAM,CAAC;YACN,OAAO,GAAI,OAAmC,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/engine/yaml-runner.d.ts

@@ -1,260 +1,11 @@
 /**
- * YAML Pipeline Execution Engine — the Flight Computer.
- *
- * Executes pipeline steps defined in YAML adapters:
- *   fetch    → HTTP request (GET/POST)
- *   select   → Extract nested field from response
- *   map      → Transform each item using template expressions
- *   filter   → Keep items matching a condition
- *   limit    → Cap the number of results
- *   html_to_md → Convert HTML to Markdown via turndown
- *   write_temp → Write content to a temp file (cleaned up after pipeline)
- *   evaluate → Run JS expression (for browser adapters, future)
- *
- * Template syntax: ${{ expression }}
- *   Available variables: item, index, args, base, temp
- */
-import type { PipelineStep } from "../types.js";
-import type { BrowserPage } from "../browser/page.js";
-import { type WebsocketStepConfig } from "./websocket.js";
-export interface PipelineOptions {
-    site?: string;
-    strategy?: string;
-}
-export type PipelineContext = {
-    data: unknown;
-    args: Record<string, unknown>;
-    vars: Record<string, unknown>;
-    base?: string;
-    cookieHeader?: string;
-    temp?: Record<string, string>;
-    tempDir?: string;
-    page?: BrowserPage;
-};
-/**
- * Structured pipeline error — designed for AI agent consumption.
- * An agent receiving this error can read the adapter YAML, understand
- * exactly what failed, and edit the file to fix it.
- */
-export declare class PipelineError extends Error {
-    readonly detail: {
-        step: number;
-        action: string;
-        config: unknown;
-        errorType: "http_error" | "selector_miss" | "empty_result" | "parse_error" | "timeout" | "expression_error" | "assertion_failed";
-        url?: string;
-        statusCode?: number;
-        responsePreview?: string;
-        suggestion: string;
-        /** true for transient failures (timeout, 429, 5xx), false for permanent (404, auth, config) */
-        retryable?: boolean;
-        /** Fallback commands the agent can try when this command fails */
-        alternatives?: string[];
-    };
-    constructor(message: string, detail: {
-        step: number;
-        action: string;
-        config: unknown;
-        errorType: "http_error" | "selector_miss" | "empty_result" | "parse_error" | "timeout" | "expression_error" | "assertion_failed";
-        url?: string;
-        statusCode?: number;
-        responsePreview?: string;
-        suggestion: string;
-        /** true for transient failures (timeout, 429, 5xx), false for permanent (404, auth, config) */
-        retryable?: boolean;
-        /** Fallback commands the agent can try when this command fails */
-        alternatives?: string[];
-    });
-    /** JSON output for AI agents — includes everything needed to self-repair */
-    toAgentJSON(adapterPath?: string): {
-        retryable: boolean;
-        alternatives: string[];
-        step: number;
-        action: string;
-        config: unknown;
-        errorType: "http_error" | "selector_miss" | "empty_result" | "parse_error" | "timeout" | "expression_error" | "assertion_failed";
-        url?: string;
-        statusCode?: number;
-        responsePreview?: string;
-        suggestion: string;
-        error: string;
-        adapter: string | undefined;
-    };
-}
-/**
- * SSRF defence — reject request URLs that point at non-http(s) schemes or
- * reserved local address ranges before we issue the fetch.
- *
- * The attack shape this blocks: a YAML adapter takes `${{ args.query }}`
- * and interpolates it into the request URL. An attacker (or a careless
- * template author) feeds a payload like `http://169.254.169.254/latest/meta-data/`
- * (AWS IMDS) or `http://127.0.0.1:19825/internal` (Uni-CLI daemon). Without
- * this guard the runner happily fetches it and returns the response —
- * leaking credentials or driving the daemon.
- *
- * The check is intentionally conservative: only http/https, and no loopback
- * / link-local / private metadata addresses. Set `UNICLI_ALLOW_LOCAL=1` to
- * bypass — useful for local dev / testing where a developer intentionally
- * targets `127.0.0.1` or a docker compose stack on a private subnet.
- */
-export declare function assertSafeRequestUrl(raw: string): void;
-/** Exposed for tests — reset the shared bus between runs. */
-export declare function __resetTransportBusForTests(): void;
-export declare function runPipeline(steps: PipelineStep[], args: Record<string, unknown>, base?: string, options?: PipelineOptions): Promise<unknown[]>;
-export interface AssertConfig {
-    url?: string;
-    selector?: string;
-    text?: string;
-    condition?: string;
-    message?: string;
-}
-export declare function stepAssert(ctx: PipelineContext, config: AssertConfig, stepIndex: number): Promise<PipelineContext>;
-export interface FetchConfig {
-    url: string;
-    method?: string;
-    params?: Record<string, unknown>;
-    headers?: Record<string, string>;
-    body?: unknown;
-    retry?: number;
-    backoff?: number;
-    cache?: number;
-}
-export declare function stepFetch(ctx: PipelineContext, config: FetchConfig): Promise<PipelineContext>;
-export declare function stepSelect(ctx: PipelineContext, path: string, stepIndex: number): PipelineContext;
-export declare function stepMap(ctx: PipelineContext, template: Record<string, string>): PipelineContext;
-export declare function stepFilter(ctx: PipelineContext, expr: string): PipelineContext;
-export declare function stepLimit(ctx: PipelineContext, config: unknown): PipelineContext;
-export declare function stepFetchText(ctx: PipelineContext, config: FetchConfig): Promise<PipelineContext>;
-export interface RssConfig {
-    fields?: Record<string, string>;
-}
-export declare function stepParseRss(ctx: PipelineContext, config: RssConfig | undefined): PipelineContext;
-export interface SortConfig {
-    by: string;
-    order?: "asc" | "desc";
-}
-export declare function stepSort(ctx: PipelineContext, config: SortConfig): PipelineContext;
-export interface ExecConfig {
-    command: string;
-    args?: string[];
-    parse?: "lines" | "json" | "csv" | "text";
-    timeout?: number;
-    stdin?: string;
-    env?: Record<string, string>;
-    output_file?: string;
-}
-export declare function stepExec(ctx: PipelineContext, config: ExecConfig): Promise<PipelineContext>;
-export declare function stepHtmlToMd(ctx: PipelineContext): PipelineContext;
-declare function buildScope(ctx: PipelineContext): Record<string, unknown>;
-export declare function stepSet(ctx: PipelineContext, config: Record<string, unknown>): PipelineContext;
-export declare function stepAppend(ctx: PipelineContext, key: string): PipelineContext;
-export declare function stepIf(ctx: PipelineContext, config: {
-    if: string;
-    then?: PipelineStep[];
-    else?: PipelineStep[];
-}, stepIndex: number, depth?: number): Promise<PipelineContext>;
-export interface EachConfig {
-    max?: number;
-    do: PipelineStep[];
-    until?: string;
-}
-export declare function stepEach(ctx: PipelineContext, config: EachConfig, stepIndex: number, depth: number): Promise<PipelineContext>;
-export declare function stepParallel(ctx: PipelineContext, branches: PipelineStep[], merge: string, stepIndex: number, depth: number): Promise<PipelineContext>;
-/**
- * Built-in pipe filters — used in template expressions like:
- *   ${{ item.tags | join(', ') }}
- *   ${{ args.word | urlencode }}
- *   ${{ item.text | slice(0, 200) }}
- */
-declare const PIPE_FILTERS: Record<string, (...args: unknown[]) => unknown>;
-/**
- * Safe expression evaluator using Node.js VM sandbox.
- * Provides stronger isolation than `new Function()` with a 50ms timeout
- * to prevent DoS. Simple dotted access (the most common case) uses a
- * fast path that avoids the VM overhead entirely.
- *
- * Supports pipe filters: ${{ expr | join(', ') | slice(0, 100) }}
- */
-declare function evalExpression(expr: string, scope: Record<string, unknown>): unknown;
-export interface WriteTempConfig {
-    filename: string;
-    content: string;
-}
-export declare function stepWriteTemp(ctx: PipelineContext, config: WriteTempConfig): PipelineContext;
-export interface NavigateConfig {
-    url: string;
-    settleMs?: number;
-    waitUntil?: "load" | "domcontentloaded" | "networkidle" | "commit";
-}
-export declare function stepNavigate(ctx: PipelineContext, config: NavigateConfig): Promise<PipelineContext>;
-export interface EvaluateConfig {
-    expression: string;
-}
-export declare function stepEvaluate(ctx: PipelineContext, config: EvaluateConfig | string): Promise<PipelineContext>;
-export interface ClickConfig {
-    selector?: string;
-    x?: number;
-    y?: number;
-    quads?: boolean;
-}
-export declare function stepClick(ctx: PipelineContext, config: ClickConfig | string): Promise<PipelineContext>;
-export interface TypeConfig {
-    text: string;
-    selector?: string;
-    submit?: boolean;
-}
-export declare function stepType(ctx: PipelineContext, config: TypeConfig): Promise<PipelineContext>;
-export interface WaitBrowserConfig {
-    ms?: number;
-    selector?: string;
-    timeout?: number;
-}
-export declare function stepWaitBrowser(ctx: PipelineContext, config: WaitBrowserConfig | number): Promise<PipelineContext>;
-export interface InterceptConfig {
-    trigger: string;
-    capture: string;
-    select?: string;
-    timeout?: number;
-    regex?: boolean;
-    all?: boolean;
-    captureText?: boolean;
-}
-export declare function stepIntercept(ctx: PipelineContext, config: InterceptConfig): Promise<PipelineContext>;
-export declare function stepPress(ctx: PipelineContext, config: unknown): Promise<PipelineContext>;
-export declare function stepScroll(ctx: PipelineContext, config: unknown): Promise<PipelineContext>;
-export declare function stepSnapshot(ctx: PipelineContext, config: unknown): Promise<PipelineContext>;
-export interface TapConfig {
-    store: string;
-    action: string;
-    capture: string;
-    timeout?: number;
-    select?: string;
-    framework?: "pinia" | "vuex" | "auto";
-    args?: unknown[];
-}
-export declare function stepTap(ctx: PipelineContext, config: TapConfig): Promise<PipelineContext>;
-export interface DownloadStepConfig {
-    url: string;
-    dir?: string;
-    filename?: string;
-    concurrency?: number;
-    skip_existing?: boolean;
-    use_ytdlp?: boolean;
-    type?: "auto" | "image" | "video" | "document";
-    content?: string;
-}
-export declare function stepDownload(ctx: PipelineContext, config: DownloadStepConfig): Promise<PipelineContext>;
-export declare function stepWebsocket(ctx: PipelineContext, config: WebsocketStepConfig): Promise<PipelineContext>;
-interface FieldDef {
-    selector: string;
-    type?: "text" | "number" | "html" | "attribute";
-    attribute?: string;
-    pattern?: string;
-}
-export interface ExtractConfig {
-    from: string;
-    fields: Record<string, FieldDef>;
-}
-export declare function stepExtract(ctx: PipelineContext, config: ExtractConfig): Promise<PipelineContext>;
-export { PIPE_FILTERS, evalExpression, buildScope };
+ * @deprecated since v0.213 — import from ./executor.js (runPipeline,
+ * PipelineError, assertSafeRequestUrl), ./step-registry.js (registerStep,
+ * StepHandler), ./template.js (evalExpression, PIPE_FILTERS), or the
+ * per-step file under ./steps/. This shim is removed in v0.214.
+ */
+export { runPipeline, PipelineError, assertSafeRequestUrl, type PipelineContext, type PipelineOptions, _resetTransportBusForTests } from "./executor.js";
+export { registerStep, getStep, listSteps, type StepHandler } from "./step-registry.js";
+export { PIPE_FILTERS, evalExpression, buildScope } from "./template.js";
+export { stepFetch, stepFetchText, stepParseRss, stepHtmlToMd, stepSelect, stepMap, stepFilter, stepSort, stepLimit, stepExec, stepWriteTemp, stepNavigate, stepEvaluate, stepClick, stepType, stepWaitBrowser, stepIntercept, stepPress, stepScroll, stepSnapshot, stepTap, stepExtract, stepSet, stepAppend, stepIf, stepEach, stepParallel, stepAssert, stepDownload, stepWebsocket, type FetchConfig, type RssConfig, type SortConfig, type ExecConfig, type WriteTempConfig, type NavigateConfig, type EvaluateConfig, type ClickConfig, type TypeConfig, type WaitBrowserConfig, type InterceptConfig, type TapConfig, type ExtractConfig, type AssertConfig, type EachConfig, type DownloadStepConfig } from "./steps/index.js";
 //# sourceMappingURL=yaml-runner.d.ts.map