emdash 0.38.0 → 0.39.0

package/dist/validate-CyQ7I3xF.d.mts

@@ -0,0 +1,410 @@
+import { f as FieldType, n as CollectionAdminConfig } from "./types-DQeU2SR7.mjs";
+import { t as Database } from "./types-CbwqGOXm.mjs";
+import { d as Storage } from "./types-D4RGIc2I.mjs";
+import { i as SiteSettings } from "./types-gC6FAoa_.mjs";
+import { Kysely } from "kysely";
+
+//#region src/seed/types.d.ts
+/**
+ * Root seed file structure
+ */
+interface SeedFile {
+  /** JSON schema reference (optional) */
+  $schema?: string;
+  /** Seed format version */
+  version: "1";
+  /**
+   * Default locale for locale-bearing rows (menus, taxonomies, content) that
+   * omit an explicit `locale`. Lets a non-`en` single-locale project survive an
+   * `export-seed` → `seed` round-trip: `apply` runs outside the Astro runtime
+   * (no i18n config), so without this it would backfill the omitted locale as
+   * `en`. See #1421.
+   */
+  defaultLocale?: string;
+  /** Metadata about the seed */
+  meta?: {
+    name?: string;
+    description?: string;
+    author?: string;
+  };
+  /** Site settings */
+  settings?: Partial<SiteSettings>;
+  /** Collection definitions */
+  collections?: SeedCollection[];
+  /** Taxonomy definitions */
+  taxonomies?: SeedTaxonomy[];
+  /** Navigation menus */
+  menus?: SeedMenu[];
+  /** Redirect rules */
+  redirects?: SeedRedirect[];
+  /** Widget areas */
+  widgetAreas?: SeedWidgetArea[];
+  /** Sections (reusable content blocks, like WP patterns/reusable blocks) */
+  sections?: SeedSection[];
+  /** Bylines used for presentation credits */
+  bylines?: SeedByline[];
+  /** Sample content (organized by collection) */
+  content?: Record<string, SeedContentEntry[]>;
+}
+/**
+ * Collection definition in seed
+ */
+interface SeedCollection {
+  slug: string;
+  label: string;
+  labelSingular?: string;
+  description?: string;
+  icon?: string;
+  admin?: CollectionAdminConfig;
+  supports?: ("drafts" | "revisions" | "preview" | "scheduling" | "search" | "seo")[];
+  urlPattern?: string;
+  /** Require a slug before an entry can be published. Defaults to true. */
+  routable?: boolean;
+  /**
+   * Omit this collection from the admin sidebar and the dashboard quick
+   * actions. It stays reachable through the API, MCP, plugin hooks, and
+   * direct `/content/:collection` URLs.
+   */
+  hidden?: boolean;
+  /**
+   * Explicit position in the admin sidebar (ascending). Collections without
+   * a `sortOrder` keep the alphabetical order and follow the ordered ones.
+   */
+  sortOrder?: number;
+  /** Admin sidebar folder shared with other collections of the same group. */
+  group?: string;
+  /** Enable comments on this collection */
+  commentsEnabled?: boolean;
+  /** Take an edit lock when an entry is opened (defaults to true) */
+  editLocking?: boolean;
+  /** Field slug powering the admin list Title column (defaults to title display) */
+  titleField?: string;
+  /** Field slug (a datetime field) powering the admin list Date column (defaults to last-updated) */
+  dateField?: string;
+  fields: SeedField[];
+}
+/**
+ * Field definition in seed
+ */
+interface SeedField {
+  slug: string;
+  label: string;
+  type: FieldType;
+  required?: boolean;
+  unique?: boolean;
+  searchable?: boolean;
+  indexed?: boolean;
+  defaultValue?: unknown;
+  validation?: Record<string, unknown>;
+  widget?: string;
+  options?: Record<string, unknown>;
+}
+/**
+ * Taxonomy definition in seed. For multi-locale exports each locale variant
+ * is its own entry, linked via `translationOf` (referencing another entry's `id`).
+ */
+interface SeedTaxonomy {
+  /** Optional seed-local id, e.g. "tax:category:en". Target of `translationOf`. */
+  id?: string;
+  name: string;
+  label: string;
+  labelSingular?: string;
+  hierarchical: boolean;
+  collections: string[];
+  locale?: string;
+  translationOf?: string;
+  terms?: SeedTaxonomyTerm[];
+}
+/**
+ * Taxonomy term in seed
+ */
+interface SeedTaxonomyTerm {
+  /** Optional seed-local id, e.g. "term:category:news:en". */
+  id?: string;
+  slug: string;
+  label: string;
+  description?: string;
+  parent?: string;
+  locale?: string;
+  translationOf?: string;
+}
+/**
+ * Menu definition in seed
+ */
+interface SeedMenu {
+  /** Optional seed-local id, e.g. "menu:primary:en". */
+  id?: string;
+  name: string;
+  label: string;
+  locale?: string;
+  translationOf?: string;
+  items: SeedMenuItem[];
+}
+/**
+ * Menu item in seed
+ */
+interface SeedMenuItem {
+  /** Optional seed-local id, e.g. "item:primary:home:en". */
+  id?: string;
+  type: string;
+  label?: string;
+  url?: string;
+  ref?: string;
+  collection?: string;
+  target?: "_blank" | "_self";
+  titleAttr?: string;
+  cssClasses?: string;
+  locale?: string;
+  translationOf?: string;
+  children?: SeedMenuItem[];
+}
+/**
+ * Redirect definition in seed
+ */
+interface SeedRedirect {
+  source: string;
+  destination: string;
+  type?: 301 | 302 | 307 | 308;
+  enabled?: boolean;
+  groupName?: string | null;
+}
+/**
+ * Widget area definition in seed
+ */
+interface SeedWidgetArea {
+  name: string;
+  label: string;
+  description?: string;
+  widgets: SeedWidget[];
+}
+/**
+ * Widget in seed
+ */
+interface SeedWidget {
+  type: "content" | "menu" | "component";
+  title?: string;
+  content?: Array<{
+    _type: string;
+    _key?: string;
+    [key: string]: unknown;
+  }>;
+  menuName?: string;
+  componentId?: string;
+  props?: Record<string, unknown>;
+}
+/**
+ * Section (reusable content block) in seed
+ */
+interface SeedSection {
+  slug: string;
+  title: string;
+  description?: string;
+  /** Search keywords */
+  keywords?: string[];
+  /** Portable Text content */
+  content: Array<{
+    _type: string;
+    _key?: string;
+    [key: string]: unknown;
+  }>;
+  /** Source: "theme" for seed-provided, "import" for WP imports */
+  source?: "theme" | "import";
+}
+/**
+ * Byline profile in seed
+ */
+interface SeedByline {
+  /** Seed-local ID for byline references in content entries */
+  id: string;
+  slug: string;
+  displayName: string;
+  bio?: string;
+  websiteUrl?: string;
+  isGuest?: boolean;
+  /**
+   * Avatar for the byline, seeded as an already-stored media item. Unlike a
+   * content `$media` reference, nothing is downloaded: the caller supplies the
+   * `storageKey` of a file that already exists in the configured storage (the
+   * common case when seeding alongside a media migration). A `media` row is
+   * created and linked via `avatarMediaId`.
+   */
+  avatar?: SeedBylineAvatar;
+}
+interface SeedBylineAvatar {
+  /** Storage key of an avatar file that already exists in the configured storage. */
+  storageKey: string;
+  /** Alt text for the avatar image. */
+  alt?: string;
+  /** Filename for the media record. Defaults to the storage key's basename. */
+  filename?: string;
+  /** MIME type for the media record. Defaults to `image/jpeg`. */
+  mimeType?: string;
+  width?: number;
+  height?: number;
+}
+/**
+ * Content entry in seed
+ */
+interface SeedContentEntry {
+  /** Seed-local ID for $ref resolution */
+  id: string;
+  /** URL slug. May be omitted for entries in non-routable collections. */
+  slug?: string | null;
+  /** Publication status */
+  status?: "published" | "draft";
+  /** Content data (field slug -> value) */
+  data: Record<string, unknown>;
+  /** Taxonomy term assignments (taxonomy name -> term slugs) */
+  taxonomies?: Record<string, string[]>;
+  /** Ordered byline credits for this entry */
+  bylines?: SeedBylineCredit[];
+  /** BCP 47 locale code. When omitted, defaults to defaultLocale. */
+  locale?: string;
+  /**
+   * Seed-local ID of the source content entry this translates.
+   * Must reference another entry's `id` in the same collection.
+   */
+  translationOf?: string;
+}
+interface SeedBylineCredit {
+  /** Seed byline ID from root `bylines[]` */
+  byline: string;
+  roleLabel?: string;
+}
+/**
+ * Options for applying a seed
+ */
+interface SeedApplyOptions {
+  /**
+   * Include sample data: content entries, bylines, and taxonomy terms
+   * (default: false). Schema and structure (collections, fields, taxonomy
+   * definitions, menus, settings, redirects, widget areas, sections) are
+   * always applied.
+   */
+  includeContent?: boolean;
+  /**
+   * How to handle conflicts (default: "skip"). Site settings are processed
+   * per key: "skip" creates only missing keys, "update" overwrites supplied
+   * keys, and "error" stops at the first existing key without rolling back
+   * keys created earlier in the seed.
+   */
+  onConflict?: "skip" | "update" | "error";
+  /** Base path for local media files (for $media.file resolution) */
+  mediaBasePath?: string;
+  /**
+   * Storage adapter for media uploads.
+   * Required if seed contains $media references with URLs.
+   */
+  storage?: Storage;
+  /**
+   * Skip downloading and storing media for $media references.
+   *
+   * When true, $media references are resolved to a MediaValue
+   * that uses the original external URL directly as the `src`,
+   * with provider set to "external". No storage adapter is needed.
+   *
+   * Useful for playground/demo environments where media storage
+   * is unavailable or undesirable.
+   */
+  skipMediaDownload?: boolean;
+}
+/**
+ * Result of applying a seed
+ */
+interface SeedApplyResult {
+  collections: {
+    created: number;
+    skipped: number;
+    updated: number;
+  };
+  fields: {
+    created: number;
+    skipped: number;
+    updated: number;
+  };
+  taxonomies: {
+    created: number;
+    terms: number;
+  };
+  bylines: {
+    created: number;
+    skipped: number;
+    updated: number;
+  };
+  menus: {
+    created: number;
+    items: number;
+  };
+  redirects: {
+    created: number;
+    skipped: number;
+    updated: number;
+  };
+  widgetAreas: {
+    created: number;
+    widgets: number;
+  };
+  sections: {
+    created: number;
+    skipped: number;
+    updated: number;
+  };
+  settings: {
+    applied: number;
+  };
+  content: {
+    created: number;
+    skipped: number;
+    updated: number;
+  };
+  media: {
+    created: number;
+    skipped: number;
+  };
+}
+/**
+ * Validation result
+ */
+interface ValidationResult {
+  valid: boolean;
+  errors: string[];
+  warnings: string[];
+}
+//#endregion
+//#region src/seed/apply.d.ts
+/**
+ * Apply a seed file to the database
+ *
+ * This function is idempotent - safe to run multiple times.
+ *
+ * @param db - Kysely database instance
+ * @param seed - Seed file to apply
+ * @param options - Application options
+ * @returns Result summary
+ */
+declare function applySeed(db: Kysely<Database>, seed: SeedFile, options?: SeedApplyOptions): Promise<SeedApplyResult>;
+//#endregion
+//#region src/seed/default.d.ts
+declare const defaultSeed: SeedFile;
+//#endregion
+//#region src/seed/load.d.ts
+/**
+ * Load the seed file (user seed or default).
+ */
+declare function loadSeed(): Promise<SeedFile>;
+/**
+ * Load the user's seed file, or null if none exists.
+ */
+declare function loadUserSeed(): Promise<SeedFile | null>;
+//#endregion
+//#region src/seed/validate.d.ts
+/**
+ * Validate a seed file
+ *
+ * @param data - Unknown data to validate as a seed file
+ * @returns Validation result with errors and warnings
+ */
+declare function validateSeed(data: unknown): ValidationResult;
+//#endregion
+export { SeedTaxonomyTerm as _, applySeed as a, ValidationResult as b, SeedCollection as c, SeedFile as d, SeedMenu as f, SeedTaxonomy as g, SeedSection as h, defaultSeed as i, SeedContentEntry as l, SeedRedirect as m, loadSeed as n, SeedApplyOptions as o, SeedMenuItem as p, loadUserSeed as r, SeedApplyResult as s, validateSeed as t, SeedField as u, SeedWidget as v, SeedWidgetArea as y };
+//# sourceMappingURL=validate-CyQ7I3xF.d.mts.map

package/dist/validate-CyQ7I3xF.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-CyQ7I3xF.d.mts","names":[],"sources":["../src/seed/types.ts","../src/seed/apply.ts","../src/seed/default.ts","../src/seed/load.ts","../src/seed/validate.ts"],"mappings":";;;;;;;;;;UAciB,QAAA;EA8BH;EA5Bb,OAAA;EAkCY;EA/BZ,OAAA;EAqCW;;;;;;;EA5BX,aAAA;EAAA;EAGA,IAAA;IACC,IAAA;IACA,WAAA;IACA,MAAA;EAAA;EAIU;EAAX,QAAA,GAAW,OAAA,CAAQ,YAAA;EAGnB;EAAA,WAAA,GAAc,cAAA;EAGd;EAAA,UAAA,GAAa,YAAA;EAGb;EAAA,KAAA,GAAQ,QAAA;EAGR;EAAA,SAAA,GAAY,YAAA;EAGZ;EAAA,WAAA,GAAc,cAAA;EAGd;EAAA,QAAA,GAAW,WAAA;EAGX;EAAA,OAAA,GAAU,UAAA;EAGV;EAAA,OAAA,GAAU,MAAA,SAAe,gBAAA;AAAA;;;AAM1B;UAAiB,cAAA;EAChB,IAAA;EACA,KAAA;EACA,aAAA;EACA,WAAA;EACA,IAAA;EACA,KAAA,GAAQ,qBAAA;EACR,QAAA;EACA,UAAA;EAFQ;EAIR,QAAA;EAFA;;;;;EAQA,MAAA;EAWA;;;;EANA,SAAA;EAWiB;EATjB,KAAA;EAegB;EAbhB,eAAA;;EAEA,WAAA;EAoBa;EAlBb,UAAA;EAoBgB;EAlBhB,SAAA;EACA,MAAA,EAAQ,SAAA;AAAA;;;;UAMQ,SAAA;EAChB,IAAA;EACA,KAAA;EACA,IAAA,EAAM,SAAA;EACN,QAAA;EACA,MAAA;EACA,UAAA;EACA,OAAA;EACA,YAAA;EACA,UAAA,GAAa,MAAA;EACb,MAAA;EACA,OAAA,GAAU,MAAA;AAAA;;;;;UAOM,YAAA;EAKhB;EAHA,EAAA;EACA,IAAA;EACA,KAAA;EACA,aAAA;EACA,YAAA;EACA,WAAA;EACA,MAAA;EACA,aAAA;EACA,KAAA,GAAQ,gBAAA;AAAA;;;;UAMQ,gBAAA;EAIhB;EAFA,EAAA;EACA,IAAA;EACA,KAAA;EACA,WAAA;EACA,MAAA;EACA,MAAA;EACA,aAAA;AAAA;;;;UAMgB,QAAA;EAIhB;EAFA,EAAA;EACA,IAAA;EACA,KAAA;EACA,MAAA;EACA,aAAA;EACA,KAAA,EAAO,YAAA;AAAA;;;;UAMS,YAAA;EAGhB;EADA,EAAA;EACA,IAAA;EACA,KAAA;EACA,GAAA;EACA,GAAA;EACA,UAAA;EACA,MAAA;EACA,SAAA;EACA,UAAA;EACA,MAAA;EACA,aAAA;EACA,QAAA,GAAW,YAAA;AAAA;AAMZ;;;AAAA,UAAiB,YAAA;EAChB,MAAA;EACA,WAAA;EACA,IAAA;EACA,OAAA;EACA,SAAA;AAAA;;AAMD;;UAAiB,cAAA;EAChB,IAAA;EACA,KAAA;EACA,WAAA;EACA,OAAA,EAAS,UAAA;AAAA;;;;UAMO,UAAA;EAChB,IAAA;EACA,KAAA;EAGA,OAAA,GAAU,KAAA;IAAQ,KAAA;IAAe,IAAA;IAAA,CAAgB,GAAA;EAAA;EAGjD,QAAA;EAGA,WAAA;EACA,KAAA,GAAQ,MAAA;AAAA;;;;UAMQ,WAAA;EAChB,IAAA;EACA,KAAA;EACA,WAAA;;EAEA,QAAA;EAJA;EAMA,OAAA,EAAS,KAAA;IAAQ,KAAA;IAAe,IAAA;IAAA,CAAgB,GAAA;EAAA;EAA/B;EAEjB,MAAA;AAAA;;;;UAMgB,UAAA;EAAU;EAE1B,EAAA;EACA,IAAA;EACA,WAAA;EACA,GAAA;EACA,UAAA;EACA,OAAA;EADA;;;;;;AAYD;EAHC,MAAA,GAAS,gBAAA;AAAA;AAAA,UAGO,gBAAA;EAEhB;EAAA,UAAA;EAIA;EAFA,GAAA;EAKA;EAHA,QAAA;EAIM;EAFN,QAAA;EACA,KAAA;EACA,MAAA;AAAA;;;;UAMgB,gBAAA;EAiBU;EAf1B,EAAA;EAGA;EAAA,IAAA;EAMA;EAHA,MAAA;EAMA;EAHA,IAAA,EAAM,MAAA;EAMN;EAHA,UAAA,GAAa,MAAA;EAMb;EAHA,OAAA,GAAU,gBAAA;EASG;EANb,MAAA;EASgB;;;;EAHhB,aAAA;AAAA;AAAA,UAGgB,gBAAA;;EAEhB,MAAA;EACA,SAAA;AAAA;;;;UAMgB,gBAAA;EAoCC;;AAMlB;;;;EAnCC,cAAA;EAoCe;;;;;;EA5Bf,UAAA;EA8BA;EA3BA,aAAA;EA2B+B;;;;EArB/B,OAAA,GAAU,OAAA;EAuBV;;;;;;;;;;EAXA,iBAAA;AAAA;;;;UAMgB,eAAA;EAChB,WAAA;IAAe,OAAA;IAAiB,OAAA;IAAiB,OAAA;EAAA;EACjD,MAAA;IAAU,OAAA;IAAiB,OAAA;IAAiB,OAAA;EAAA;EAC5C,UAAA;IAAc,OAAA;IAAiB,KAAA;EAAA;EAC/B,OAAA;IAAW,OAAA;IAAiB,OAAA;IAAiB,OAAA;EAAA;EAC7C,KAAA;IAAS,OAAA;IAAiB,KAAA;EAAA;EAC1B,SAAA;IAAa,OAAA;IAAiB,OAAA;IAAiB,OAAA;EAAA;EAC/C,WAAA;IAAe,OAAA;IAAiB,OAAA;EAAA;EAChC,QAAA;IAAY,OAAA;IAAiB,OAAA;IAAiB,OAAA;EAAA;EAC9C,QAAA;IAAY,OAAA;EAAA;EACZ,OAAA;IAAW,OAAA;IAAiB,OAAA;IAAiB,OAAA;EAAA;EAC7C,KAAA;IAAS,OAAA;IAAiB,OAAA;EAAA;AAAA;;;;UAMV,gBAAA;EAChB,KAAA;EACA,MAAA;EACA,QAAA;AAAA;;;;;;;;;;;;;iBCnQqB,SAAA,CACrB,EAAA,EAAI,MAAA,CAAO,QAAA,GACX,IAAA,EAAM,QAAA,EACN,OAAA,GAAS,gBAAA,GACP,OAAA,CAAQ,eAAA;;;cC9GE,WAAA,EAAa,QAAA;;;;;;iBCcJ,QAAA,CAAA,GAAY,OAAA,CAAQ,QAAA;;;;iBAQpB,YAAA,CAAA,GAAgB,OAAA,CAAQ,QAAA;;;;AHjB9C;;;;;iBI6BgB,YAAA,CAAa,IAAA,YAAgB,gBAAA"}

package/dist/validate-DANX1-Qi.mjs

@@ -0,0 +1,120 @@
+//#region src/database/validate.ts
+/**
+* SQL Identifier Validation
+*
+* Validates identifiers (table names, column names, index names) before
+* they are used in raw SQL expressions. This is the primary defense against
+* SQL injection via dynamic identifier interpolation.
+*
+* @see AGENTS.md § Database: Never Interpolate Into SQL
+*/
+/**
+* Pattern for safe SQL identifiers.
+* Must start with a lowercase letter, followed by lowercase letters, digits, or underscores.
+*/
+const IDENTIFIER_PATTERN = /^[a-z][a-z0-9_]*$/;
+/**
+* Pattern for generic alphanumeric identifiers (case-insensitive).
+* Must start with a letter, followed by letters, digits, or underscores.
+*/
+const GENERIC_IDENTIFIER_PATTERN = /^[a-zA-Z][a-zA-Z0-9_]*$/;
+/**
+* Pattern for plugin identifiers.
+* Must start with a lowercase letter, followed by lowercase letters, digits, underscores, or hyphens.
+*/
+const PLUGIN_IDENTIFIER_PATTERN = /^[a-z][a-z0-9_-]*$/;
+/**
+* Pattern for plugin storage collection names.
+* Manifests declare these as free-form keys, so both cases and hyphens are
+* allowed; the charset still excludes quotes, whitespace, and punctuation.
+*/
+const STORAGE_COLLECTION_PATTERN = /^[a-zA-Z][a-zA-Z0-9_-]*$/;
+/**
+* Maximum length for SQL identifiers.
+* SQLite has no formal limit, but we cap at 128 for sanity.
+*/
+const MAX_IDENTIFIER_LENGTH = 128;
+/**
+* Error thrown when an identifier fails validation.
+*/
+var IdentifierError = class extends Error {
+	constructor(message, identifier) {
+		super(message);
+		this.identifier = identifier;
+		this.name = "IdentifierError";
+	}
+};
+/**
+* Validate that a string is a safe SQL identifier.
+*
+* Safe identifiers match `/^[a-z][a-z0-9_]*$/` and are at most 128 characters.
+* This prevents SQL injection when identifiers must be interpolated into raw SQL
+* (e.g., dynamic table names, column names in json_extract paths).
+*
+* @param value - The string to validate
+* @param label - Human-readable label for error messages (e.g., "field name", "table name")
+* @throws {IdentifierError} If the value is not a valid identifier
+*
+* @example
+* ```typescript
+* validateIdentifier(fieldName, "field name");
+* // safe to use in: json_extract(data, '$.${fieldName}')
+* ```
+*/
+function validateIdentifier(value, label = "identifier") {
+	if (!value || typeof value !== "string") throw new IdentifierError(`${label} must be a non-empty string`, String(value));
+	if (value.length > MAX_IDENTIFIER_LENGTH) throw new IdentifierError(`${label} must be ${MAX_IDENTIFIER_LENGTH} characters or less, got ${value.length}`, value);
+	if (!IDENTIFIER_PATTERN.test(value)) throw new IdentifierError(`${label} must match /^[a-z][a-z0-9_]*$/ (got "${value}")`, value);
+}
+/**
+* Validate that a string is a safe JSON field name for use in json_extract paths.
+*
+* More permissive than `validateIdentifier` — allows camelCase (mixed case)
+* since JSON keys in plugin storage data blobs commonly use camelCase.
+* Matches `/^[a-zA-Z][a-zA-Z0-9_]*$/`.
+*
+* @param value - The string to validate
+* @param label - Human-readable label for error messages
+* @throws {IdentifierError} If the value is not valid
+*/
+function validateJsonFieldName(value, label = "JSON field name") {
+	if (!value || typeof value !== "string") throw new IdentifierError(`${label} must be a non-empty string`, String(value));
+	if (value.length > MAX_IDENTIFIER_LENGTH) throw new IdentifierError(`${label} must be ${MAX_IDENTIFIER_LENGTH} characters or less, got ${value.length}`, value);
+	if (!GENERIC_IDENTIFIER_PATTERN.test(value)) throw new IdentifierError(`${label} must match /^[a-zA-Z][a-zA-Z0-9_]*$/ (got "${value}")`, value);
+}
+/**
+* Validate that a string is a safe SQL identifier, allowing hyphens.
+*
+* Like `validateIdentifier` but also permits hyphens, which appear in
+* plugin IDs (e.g., "my-plugin"). Matches `/^[a-z][a-z0-9_-]*$/`.
+*
+* @param value - The string to validate
+* @param label - Human-readable label for error messages
+* @throws {IdentifierError} If the value is not valid
+*/
+function validatePluginIdentifier(value, label = "plugin identifier") {
+	if (!value || typeof value !== "string") throw new IdentifierError(`${label} must be a non-empty string`, String(value));
+	if (value.length > MAX_IDENTIFIER_LENGTH) throw new IdentifierError(`${label} must be ${MAX_IDENTIFIER_LENGTH} characters or less, got ${value.length}`, value);
+	if (!PLUGIN_IDENTIFIER_PATTERN.test(value)) throw new IdentifierError(`${label} must match /^[a-z][a-z0-9_-]*$/ (got "${value}")`, value);
+}
+/**
+* Validate a plugin storage collection name.
+*
+* Collections are declared as free-form manifest keys and stored as opaque
+* text, so this is deliberately more permissive than `validateIdentifier`:
+* `form-submissions` and `formSubmissions` are legitimate. The charset still
+* rejects quotes and punctuation, keeping generated index names inert.
+*
+* @param value - The string to validate
+* @param label - Human-readable label for error messages
+* @throws {IdentifierError} If the value is not valid
+*/
+function validateStorageCollectionName(value, label = "collection name") {
+	if (!value || typeof value !== "string") throw new IdentifierError(`${label} must be a non-empty string`, String(value));
+	if (value.length > MAX_IDENTIFIER_LENGTH) throw new IdentifierError(`${label} must be ${MAX_IDENTIFIER_LENGTH} characters or less, got ${value.length}`, value);
+	if (!STORAGE_COLLECTION_PATTERN.test(value)) throw new IdentifierError(`${label} must match /^[a-zA-Z][a-zA-Z0-9_-]*$/ (got "${value}")`, value);
+}
+
+//#endregion
+export { validateStorageCollectionName as i, validateJsonFieldName as n, validatePluginIdentifier as r, validateIdentifier as t };
+//# sourceMappingURL=validate-DANX1-Qi.mjs.map

package/dist/validate-DANX1-Qi.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-DANX1-Qi.mjs","names":[],"sources":["../src/database/validate.ts"],"sourcesContent":["/**\n * SQL Identifier Validation\n *\n * Validates identifiers (table names, column names, index names) before\n * they are used in raw SQL expressions. This is the primary defense against\n * SQL injection via dynamic identifier interpolation.\n *\n * @see AGENTS.md § Database: Never Interpolate Into SQL\n */\n\n/**\n * Pattern for safe SQL identifiers.\n * Must start with a lowercase letter, followed by lowercase letters, digits, or underscores.\n */\nconst IDENTIFIER_PATTERN = /^[a-z][a-z0-9_]*$/;\n\n/**\n * Pattern for generic alphanumeric identifiers (case-insensitive).\n * Must start with a letter, followed by letters, digits, or underscores.\n */\nconst GENERIC_IDENTIFIER_PATTERN = /^[a-zA-Z][a-zA-Z0-9_]*$/;\n\n/**\n * Pattern for plugin identifiers.\n * Must start with a lowercase letter, followed by lowercase letters, digits, underscores, or hyphens.\n */\nconst PLUGIN_IDENTIFIER_PATTERN = /^[a-z][a-z0-9_-]*$/;\n\n/**\n * Pattern for plugin storage collection names.\n * Manifests declare these as free-form keys, so both cases and hyphens are\n * allowed; the charset still excludes quotes, whitespace, and punctuation.\n */\nconst STORAGE_COLLECTION_PATTERN = /^[a-zA-Z][a-zA-Z0-9_-]*$/;\n\n/**\n * Maximum length for SQL identifiers.\n * SQLite has no formal limit, but we cap at 128 for sanity.\n */\nconst MAX_IDENTIFIER_LENGTH = 128;\n\n/**\n * Error thrown when an identifier fails validation.\n */\nexport class IdentifierError extends Error {\n\tconstructor(\n\t\tmessage: string,\n\t\tpublic identifier: string,\n\t) {\n\t\tsuper(message);\n\t\tthis.name = \"IdentifierError\";\n\t}\n}\n\n/**\n * Validate that a string is a safe SQL identifier.\n *\n * Safe identifiers match `/^[a-z][a-z0-9_]*$/` and are at most 128 characters.\n * This prevents SQL injection when identifiers must be interpolated into raw SQL\n * (e.g., dynamic table names, column names in json_extract paths).\n *\n * @param value - The string to validate\n * @param label - Human-readable label for error messages (e.g., \"field name\", \"table name\")\n * @throws {IdentifierError} If the value is not a valid identifier\n *\n * @example\n * ```typescript\n * validateIdentifier(fieldName, \"field name\");\n * // safe to use in: json_extract(data, '$.${fieldName}')\n * ```\n */\nexport function validateIdentifier(value: string, label = \"identifier\"): void {\n\tif (!value || typeof value !== \"string\") {\n\t\tthrow new IdentifierError(`${label} must be a non-empty string`, String(value));\n\t}\n\n\tif (value.length > MAX_IDENTIFIER_LENGTH) {\n\t\tthrow new IdentifierError(\n\t\t\t`${label} must be ${MAX_IDENTIFIER_LENGTH} characters or less, got ${value.length}`,\n\t\t\tvalue,\n\t\t);\n\t}\n\n\tif (!IDENTIFIER_PATTERN.test(value)) {\n\t\tthrow new IdentifierError(`${label} must match /^[a-z][a-z0-9_]*$/ (got \"${value}\")`, value);\n\t}\n}\n\n/**\n * Validate that a string is a safe JSON field name for use in json_extract paths.\n *\n * More permissive than `validateIdentifier` — allows camelCase (mixed case)\n * since JSON keys in plugin storage data blobs commonly use camelCase.\n * Matches `/^[a-zA-Z][a-zA-Z0-9_]*$/`.\n *\n * @param value - The string to validate\n * @param label - Human-readable label for error messages\n * @throws {IdentifierError} If the value is not valid\n */\nexport function validateJsonFieldName(value: string, label = \"JSON field name\"): void {\n\tif (!value || typeof value !== \"string\") {\n\t\tthrow new IdentifierError(`${label} must be a non-empty string`, String(value));\n\t}\n\n\tif (value.length > MAX_IDENTIFIER_LENGTH) {\n\t\tthrow new IdentifierError(\n\t\t\t`${label} must be ${MAX_IDENTIFIER_LENGTH} characters or less, got ${value.length}`,\n\t\t\tvalue,\n\t\t);\n\t}\n\n\tif (!GENERIC_IDENTIFIER_PATTERN.test(value)) {\n\t\tthrow new IdentifierError(\n\t\t\t`${label} must match /^[a-zA-Z][a-zA-Z0-9_]*$/ (got \"${value}\")`,\n\t\t\tvalue,\n\t\t);\n\t}\n}\n\n/**\n * Validate that a string is a safe SQL identifier, allowing hyphens.\n *\n * Like `validateIdentifier` but also permits hyphens, which appear in\n * plugin IDs (e.g., \"my-plugin\"). Matches `/^[a-z][a-z0-9_-]*$/`.\n *\n * @param value - The string to validate\n * @param label - Human-readable label for error messages\n * @throws {IdentifierError} If the value is not valid\n */\nexport function validatePluginIdentifier(value: string, label = \"plugin identifier\"): void {\n\tif (!value || typeof value !== \"string\") {\n\t\tthrow new IdentifierError(`${label} must be a non-empty string`, String(value));\n\t}\n\n\tif (value.length > MAX_IDENTIFIER_LENGTH) {\n\t\tthrow new IdentifierError(\n\t\t\t`${label} must be ${MAX_IDENTIFIER_LENGTH} characters or less, got ${value.length}`,\n\t\t\tvalue,\n\t\t);\n\t}\n\n\tif (!PLUGIN_IDENTIFIER_PATTERN.test(value)) {\n\t\tthrow new IdentifierError(`${label} must match /^[a-z][a-z0-9_-]*$/ (got \"${value}\")`, value);\n\t}\n}\n\n/**\n * Validate a plugin storage collection name.\n *\n * Collections are declared as free-form manifest keys and stored as opaque\n * text, so this is deliberately more permissive than `validateIdentifier`:\n * `form-submissions` and `formSubmissions` are legitimate. The charset still\n * rejects quotes and punctuation, keeping generated index names inert.\n *\n * @param value - The string to validate\n * @param label - Human-readable label for error messages\n * @throws {IdentifierError} If the value is not valid\n */\nexport function validateStorageCollectionName(value: string, label = \"collection name\"): void {\n\tif (!value || typeof value !== \"string\") {\n\t\tthrow new IdentifierError(`${label} must be a non-empty string`, String(value));\n\t}\n\n\tif (value.length > MAX_IDENTIFIER_LENGTH) {\n\t\tthrow new IdentifierError(\n\t\t\t`${label} must be ${MAX_IDENTIFIER_LENGTH} characters or less, got ${value.length}`,\n\t\t\tvalue,\n\t\t);\n\t}\n\n\tif (!STORAGE_COLLECTION_PATTERN.test(value)) {\n\t\tthrow new IdentifierError(\n\t\t\t`${label} must match /^[a-zA-Z][a-zA-Z0-9_-]*$/ (got \"${value}\")`,\n\t\t\tvalue,\n\t\t);\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;AAcA,MAAM,qBAAqB;;;;;AAM3B,MAAM,6BAA6B;;;;;AAMnC,MAAM,4BAA4B;;;;;;AAOlC,MAAM,6BAA6B;;;;;AAMnC,MAAM,wBAAwB;;;;AAK9B,IAAa,kBAAb,cAAqC,MAAM;CAC1C,YACC,SACA,AAAO,YACN;AACD,QAAM,QAAQ;EAFP;AAGP,OAAK,OAAO;;;;;;;;;;;;;;;;;;;;AAqBd,SAAgB,mBAAmB,OAAe,QAAQ,cAAoB;AAC7E,KAAI,CAAC,SAAS,OAAO,UAAU,SAC9B,OAAM,IAAI,gBAAgB,GAAG,MAAM,8BAA8B,OAAO,MAAM,CAAC;AAGhF,KAAI,MAAM,SAAS,sBAClB,OAAM,IAAI,gBACT,GAAG,MAAM,WAAW,sBAAsB,2BAA2B,MAAM,UAC3E,MACA;AAGF,KAAI,CAAC,mBAAmB,KAAK,MAAM,CAClC,OAAM,IAAI,gBAAgB,GAAG,MAAM,wCAAwC,MAAM,KAAK,MAAM;;;;;;;;;;;;;AAe9F,SAAgB,sBAAsB,OAAe,QAAQ,mBAAyB;AACrF,KAAI,CAAC,SAAS,OAAO,UAAU,SAC9B,OAAM,IAAI,gBAAgB,GAAG,MAAM,8BAA8B,OAAO,MAAM,CAAC;AAGhF,KAAI,MAAM,SAAS,sBAClB,OAAM,IAAI,gBACT,GAAG,MAAM,WAAW,sBAAsB,2BAA2B,MAAM,UAC3E,MACA;AAGF,KAAI,CAAC,2BAA2B,KAAK,MAAM,CAC1C,OAAM,IAAI,gBACT,GAAG,MAAM,8CAA8C,MAAM,KAC7D,MACA;;;;;;;;;;;;AAcH,SAAgB,yBAAyB,OAAe,QAAQ,qBAA2B;AAC1F,KAAI,CAAC,SAAS,OAAO,UAAU,SAC9B,OAAM,IAAI,gBAAgB,GAAG,MAAM,8BAA8B,OAAO,MAAM,CAAC;AAGhF,KAAI,MAAM,SAAS,sBAClB,OAAM,IAAI,gBACT,GAAG,MAAM,WAAW,sBAAsB,2BAA2B,MAAM,UAC3E,MACA;AAGF,KAAI,CAAC,0BAA0B,KAAK,MAAM,CACzC,OAAM,IAAI,gBAAgB,GAAG,MAAM,yCAAyC,MAAM,KAAK,MAAM;;;;;;;;;;;;;;AAgB/F,SAAgB,8BAA8B,OAAe,QAAQ,mBAAyB;AAC7F,KAAI,CAAC,SAAS,OAAO,UAAU,SAC9B,OAAM,IAAI,gBAAgB,GAAG,MAAM,8BAA8B,OAAO,MAAM,CAAC;AAGhF,KAAI,MAAM,SAAS,sBAClB,OAAM,IAAI,gBACT,GAAG,MAAM,WAAW,sBAAsB,2BAA2B,MAAM,UAC3E,MACA;AAGF,KAAI,CAAC,2BAA2B,KAAK,MAAM,CAC1C,OAAM,IAAI,gBACT,GAAG,MAAM,+CAA+C,MAAM,KAC9D,MACA"}