blume 1.7.3 → 2.0.1

package/dist/types/core/project.d.ts

@@ -2,6 +2,8 @@ import type { ResolvedConfig } from "./schema.ts";
 import type { ProjectContext } from "./types.ts";
 /** Locate the Blume config file for a project root, if any. */
 export declare const findConfigFile: (root: string) => string | null;
+/** Locate the project's `components.ts`/`.tsx` override file, if any. */
+export declare const findComponentsFile: (root: string) => string | null;
 /**
  * Resolve the generated runtime directory for a project. Defaults to
  * `<root>/.blume`; an override (e.g. `.blume-verify` for an isolated build that

package/dist/types/core/safe-href.d.ts

@@ -0,0 +1,2 @@
+/** Whether a link destination from imported content is safe to keep. */
+export declare const isSafeHref: (href: string) => boolean;

package/dist/types/core/safe-links.d.ts

@@ -0,0 +1,26 @@
+import type { Root } from "mdast";
+/** A link (or link definition) whose destination isn't safe. */
+export interface UnsafeLinkSpan {
+    /** End offset in the source, exclusive. */
+    end: number;
+    /** Start offset in the source. */
+    start: number;
+    /**
+     * What replaces it: the link's label, escaped so it can't form a link
+     * again; empty for a definition.
+     */
+    text: string;
+}
+/**
+ * The unsafe links in a parsed Markdown tree, in source order: inline and
+ * reference links (autolinks included) and link definitions whose parsed
+ * destination fails {@link isSafeHref}. The parsed `url` is what a browser
+ * would get, character references and all, so `javascript:` is caught.
+ */
+export declare const unsafeLinkSpans: (tree: Root) => UnsafeLinkSpan[];
+/**
+ * Markdown with every unsafe link reduced to its label text and every unsafe
+ * link definition removed. Everything else — safe links, raw HTML, code —
+ * passes through as written.
+ */
+export declare const neutralizeUnsafeLinks: (markdown: string) => string;