agent-first-data 0.33.0 → 0.35.0

package/README.md

@@ -22,11 +22,11 @@ Useful names use TypeScript casing: `render`, `outputOptionsForPolicy`, `redacte
 ## Behavior Notes
 
 - Default redaction replaces every `_secret` or configured secret-name subtree with `***`, including objects and arrays.
-- `_url` fields scrub userinfo passwords and secret-named query parameters; surrounding whitespace is trimmed and internal whitespace redacts the whole field.
+- `_url` fields scrub userinfo passwords and secret-named query parameters; surrounding whitespace is trimmed, and internal whitespace or a `://` that is not the start of a clean URL redacts the whole field, where whitespace is the explicit Unicode `White_Space` set the spec enumerates, not the language's native predicate.
 - `OutputOptions.redaction.urlNames` applies URL treatment to exact legacy field names
   and recurses through collections. `redactUrlsInText` is explicit and scans
   only complete scheme URLs, never arbitrary prose secrets.
-- YAML keeps original keys and values (structure-preserving, like JSON), sorting keys by UTF-16 code unit order and quoting/escaping unsafe keys and string scalars. Plain strips formatting suffixes, formats values, sorts the same way, and renders nested objects/arrays as canonical JSON.
+- YAML keeps original keys and values (structure-preserving, like JSON), sorting keys by UTF-16 code unit order and quoting/escaping unsafe keys and string scalars. Plain strips formatting suffixes, formats values, sorts the same way, and renders nested objects/arrays as canonical JSON; it quotes a value only when it contains ASCII space, tab, newline, carriage return, form feed, vertical tab, NBSP, `=`, `"`, or `\`, and escapes `\`, `"`, newline, carriage return, tab, form feed, and vertical tab inside the quotes.
 - Logging records use `kind:"log"` with a nested `log` payload and a separate `level` field, so error-level logs are not terminal protocol errors.
 - `buildCliError(message, hint?)` returns a strict-ready CLI error with `error.retryable:false` and `trace:{}`.
 - Do not add a raw version/help pre-parser. Until the TypeScript `CliSpec` compiler lands, applications should keep lifecycle parsing in their own parser rather than claim AFDATA closed-world help compatibility.

package/assets/cli-spec-v1.schema.json

@@ -100,6 +100,10 @@
         "about": {
           "$ref": "#/$defs/nonEmpty"
         },
+        "reference_note": {
+          "description": "Prose for the generated CLI reference, rendered after this command's argument table. For the paragraph that belongs to no single argument — where a default is read from, what two options mean together — which would otherwise be hand-written into a file whose header says it is generated.",
+          "$ref": "#/$defs/nonEmpty"
+        },
         "arguments": {
           "type": "array",
           "items": {

package/dist/cli.js

@@ -110,8 +110,19 @@ export function parseOutputTo(value) {
     }
     throw new Error("invalid --output-to: expected split, stdout, or stderr");
 }
+const guardedProcessStreams = new WeakSet();
+function guardProcessStream(stream) {
+    if (guardedProcessStreams.has(stream))
+        return;
+    guardedProcessStreams.add(stream);
+    stream.on("error", (error) => {
+        if (error.code !== "EPIPE")
+            throw error;
+    });
+}
 /** Event writer bound to the process stdout stream. */
 const processStdoutWriter = (line) => {
+    guardProcessStream(process.stdout);
     process.stdout.write(line);
 };
 /**
@@ -121,6 +132,7 @@ const processStdoutWriter = (line) => {
  * `stderr-sink` marker is what no_stderr_policy.test.ts allows through.
  */
 const processStderrWriter = (line) => {
+    guardProcessStream(process.stderr); // stderr-sink: CliEmitter diagnostic channel
     process.stderr.write(line); // stderr-sink: CliEmitter diagnostic channel
 };
 /**

package/dist/format.js

@@ -1029,19 +1029,28 @@ function redactUrlFieldValue(s, secretNames) {
     const redacted = redactUrlInStr(s, secretNames);
     if (redacted !== null)
         return redacted;
-    const trimmed = s.trim();
+    let start = 0;
+    let end = s.length;
+    while (start < end && isSpanTerminatorWhitespace(s.charCodeAt(start)))
+        start += 1;
+    while (end > start && isSpanTerminatorWhitespace(s.charCodeAt(end - 1)))
+        end -= 1;
+    const trimmed = s.slice(start, end);
     if (trimmed !== s) {
         const trimmedRedacted = redactUrlInStr(trimmed, secretNames);
         if (trimmedRedacted !== null)
             return trimmedRedacted;
     }
     // Fail closed: a _url value we could not parse as a clean scheme-prefixed
-    // URL, yet which carries a credential sigil ('@' userinfo) or internal
-    // whitespace, is redacted wholesale rather than passed through. A schemeless
-    // connection string like user:pass@host/db has no scheme anchor for the
-    // surgical span logic above, so blanket redaction is the safe default.
-    if (/\s/.test(s) || s.includes("@"))
+    // URL, yet which carries a credential sigil ('@' userinfo), internal
+    // whitespace, or a '://' scheme separator, is redacted wholesale rather than
+    // passed through. A schemeless connection string like user:pass@host/db
+    // has no scheme anchor for the surgical span logic above, and a URL behind
+    // a non-whitespace prefix (a BOM, a zero-width space, a label) has one the
+    // span logic cannot reach, so blanket redaction is the safe default.
+    if ([...s].some(c => isSpanTerminatorWhitespace(c.charCodeAt(0))) || s.includes("@") || s.includes("://")) {
         return REDACTED_MARKER;
+    }
     return s;
 }
 /**
@@ -1629,7 +1638,8 @@ function isAmbiguousYamlKey(key) {
     if (["true", "false", "null", "~", ".nan", ".inf", "+.inf", "-.inf"].includes(key.toLowerCase())) {
         return true;
     }
-    return key.trim() !== "" && Number.isFinite(Number(key));
+    return ["inf", "infinity", "nan"].includes(key.replace(/^[+-]/, "").toLowerCase())
+        || /^[-+]?(?:[0-9]+\.?[0-9]*|\.[0-9]+)(?:[eE][-+]?[0-9]+)?$/.test(key);
 }
 function yamlScalar(value) {
     if (typeof value === "string")
@@ -1726,7 +1736,7 @@ function plainScalarRaw(value) {
 function quoteLogfmtValue(value) {
     if (value === "")
         return "";
-    if (!/[\s="\\]/.test(value))
+    if (!/[ \t\n\r\f\v\u00a0="\\]/.test(value))
         return value;
     const escaped = value
         .replace(/\\/g, "\\\\")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-first-data",
-  "version": "0.33.0",
+  "version": "0.35.0",
   "description": "A naming convention that lets AI agents understand your data without being told what it means, plus a CLI and library for reading Markdown structure and safely editing structured JSON, TOML, YAML, dotenv, and INI documents.",
   "license": "MIT",
   "repository": {
@@ -27,8 +27,8 @@
     "test": "tsx --test src/*.test.ts"
   },
   "devDependencies": {
-    "@types/node": "^26.1.2",
-    "tsx": "^4.23.10",
+    "@types/node": "^26.6.4",
+    "tsx": "^4.23.15",
     "typescript": "^7.0.2"
   },
   "dependencies": {