agent-sanitizer 2.52.0 → 2.54.0

package/types/gfm.d.mts

@@ -0,0 +1,8 @@
+/**
+ * A unified plugin adding GFM support: autolink literals, footnotes,
+ * strikethrough, tables and task lists — the same set, in the same order, as
+ * `remark-gfm`.
+ * @this {any} unified processor
+ * @returns {undefined}
+ */
+export default function remarkGfmFixed(this: any): undefined;

package/types/html.d.mts

@@ -111,10 +111,19 @@ export function sanitizeHtml(text: string): {
     unparseable?: true;
 } | null;
 /**
+ * `flagDigestValues` drops the digest exemption: an exact-digest-length hex
+ * value under a generic parameter name is reported as payload rather than read
+ * as a fingerprint. Off by default because the exemption is what keeps a
+ * cache-buster, an ETag and a commit id quiet; on for a caller whose cost of a
+ * missed 16-to-64-byte channel beats its cost of those false positives. Like
+ * every option this module takes, it can only ADD detection.
  * @param {string} url
+ * @param {{ flagDigestValues?: boolean }} [options]
  * @returns {string | null}
  */
-export function checkExfilUrl(url: string): string | null;
+export function checkExfilUrl(url: string, options?: {
+    flagDigestValues?: boolean;
+}): string | null;
 /**
  * Host of a flagged URL — enough for the warning to name the destination
  * without echoing the payload-bearing query/fragment.
@@ -133,9 +142,12 @@ export function urlHost(url: string): string;
  * link somebody has to follow. Both are reported; the caller uses it to decide
  * how loudly (see the exfil tier in ./output.mjs).
  * @param {string} text
+ * @param {{ flagDigestValues?: boolean }} [options] see {@link checkExfilUrl}
  * @returns {Array<{ isImage: boolean, autoFetched: boolean, reason: string, target: string }> | null}
  */
-export function detectExfil(text: string): Array<{
+export function detectExfil(text: string, options?: {
+    flagDigestValues?: boolean;
+}): Array<{
     isImage: boolean;
     autoFetched: boolean;
     reason: string;

package/types/index.d.mts

@@ -35,13 +35,19 @@
  * legitimate markup — matching the separate flags `sanitizeText` takes for the
  * tool-output pipeline, which needs Layer 3's detection without Layer 2's
  * splice.
+ *
+ * `flagDigestValues` widens Layer 3 only: it drops the digest exemption, so an
+ * exact-digest-length hex value under a generic parameter name is reported as
+ * payload rather than read as a cache-buster or an ETag. Off by default, and
+ * like `exfilScan` it can only ADD detection.
  * @param {string} text
- * @param {{ html?: boolean, exfilScan?: boolean } | null} [options]
+ * @param {{ html?: boolean, exfilScan?: boolean, flagDigestValues?: boolean } | null} [options]
  * @returns {Promise<{ cleaned: string, found: string[], warnings: string[], notes: string[], splices?: Array<{ placeholder: string, original: string }> }>}
  */
 export function sanitize(text: string, options?: {
     html?: boolean;
     exfilScan?: boolean;
+    flagDigestValues?: boolean;
 } | null): Promise<{
     cleaned: string;
     found: string[];

package/types/output.d.mts

@@ -38,6 +38,7 @@ export function deleteVerbatimSpans(text: string, spans: string[]): {
  * @typedef {{
  *   html?: boolean,
  *   exfilScan?: boolean,
+ *   flagDigestValues?: boolean,
  *   redact?: (text: string) => Promise<RedactResult|null> | (RedactResult|null),
  *   filterInjection?: (text: string) => Promise<Layer5Result|null> | (Layer5Result|null),
  *   sgrCarveOut?: boolean,
@@ -268,6 +269,7 @@ export type PipelineState = {
 export type SanitizeTextOptions = {
     html?: boolean;
     exfilScan?: boolean;
+    flagDigestValues?: boolean;
     redact?: (text: string) => Promise<RedactResult | null> | (RedactResult | null);
     filterInjection?: (text: string) => Promise<Layer5Result | null> | (Layer5Result | null);
     sgrCarveOut?: boolean;

package/types/vendor/gfm-autolink-literal.d.mts

@@ -0,0 +1,10 @@
+/**
+ * Create an extension for `micromark` to support GitHub autolink literal
+ * syntax.
+ *
+ * @returns {Extension}
+ *   Extension for `micromark` that can be passed in `extensions` to enable GFM
+ *   autolink literal syntax.
+ */
+export function gfmAutolinkLiteral(): Extension;
+import type { Extension } from 'micromark-util-types';