gaoding-cli 1.0.0-alpha.5

package/dist/src/utils/entitlement.js

@@ -0,0 +1,146 @@
+export const ENTITLEMENT_PRICING_URL = "https://www.gaoding.com/pricing";
+const ENTITLEMENT_CODE_PATTERNS = [
+    /QUOTA/i,
+    /CREDIT/i,
+    /BALANCE/i,
+    /ENTITLEMENT/i,
+    /POINT/i,
+    /BEAN/i,
+    /COIN/i,
+    /INSUFFICIENT/i,
+    /NO_ENOUGH/i,
+    /NOT_ENOUGH/i,
+];
+const ENTITLEMENT_TEXT_PATTERNS = [
+    /(点数|稿豆).*(不足|不够|耗尽|用完)/,
+    /稿豆.*(不足|不够|耗尽|用完)/,
+    /权益.*(不足|不够|耗尽|用完|无法|不能)/,
+    /额度.*(不足|不够|耗尽|用完)/,
+    /余额.*(不足|不够)/,
+    /次数.*(不足|不够|耗尽|用完)/,
+    /配额.*(不足|不够|耗尽|用完)/,
+    /套餐.*(不足|不够|过期|升级)/,
+    /insufficient/i,
+    /not enough/i,
+    /quota/i,
+    /credit/i,
+    /balance/i,
+    /entitlement/i,
+];
+export function detectEntitlementIssue(input) {
+    const haystack = [
+        input.code,
+        input.errorName,
+        input.message,
+        collectStrings(input.detail).join(" "),
+    ].filter(Boolean).join(" ");
+    if (!haystack)
+        return undefined;
+    const hasCodeSignal = [input.code, input.errorName]
+        .filter(Boolean)
+        .some((value) => ENTITLEMENT_CODE_PATTERNS.some((pattern) => pattern.test(String(value))));
+    const hasTextSignal = ENTITLEMENT_TEXT_PATTERNS.some((pattern) => pattern.test(haystack));
+    if (!hasCodeSignal && !hasTextSignal)
+        return undefined;
+    const pricingUrl = resolveEntitlementPricingUrl();
+    return {
+        code: "ENTITLEMENT_INSUFFICIENT",
+        message: normalizeEntitlementMessage(input.message),
+        hint: `当前账号或组织权益不足，无法继续执行。请到权益页充值/升级后重试：${pricingUrl}`,
+        pricing_url: pricingUrl,
+        diagnostic_context: collectDiagnosticContext(input.detail),
+    };
+}
+export function resolveEntitlementPricingUrl() {
+    const override = process.env.GD_ENTITLEMENT_PRICING_URL ??
+        process.env.GAODING_ENTITLEMENT_PRICING_URL;
+    if (override?.trim())
+        return override.trim();
+    return ENTITLEMENT_PRICING_URL;
+}
+export function entitlementCliError(issue, detail) {
+    return {
+        code: issue.code,
+        type: "business",
+        message: issue.message,
+        hint: issue.hint,
+        retryable: false,
+        pricing_url: issue.pricing_url,
+        diagnostic_context: issue.diagnostic_context,
+        user_action_required: "purchase_or_switch_entitled_org",
+        allow_org_check: true,
+        forbidden_actions: [
+            "org.switch_without_user_choice",
+            "model.switch_for_entitlement",
+            "env.switch_for_entitlement",
+            "blind_retry",
+        ],
+        next_steps: [
+            `到权益页充值/升级：${issue.pricing_url}`,
+            "或切到一个有权益的团队后，重试原命令",
+            "如用户明确要求查看团队，再执行 gd-cli org list -f json",
+        ],
+        agent_message_template: `当前组织权益不足，生成没有继续执行。\n你可以到权益页充值/升级：<${issue.pricing_url}>\n` +
+            "也可以切到一个有权益的团队后让我继续处理。",
+        detail,
+    };
+}
+function normalizeEntitlementMessage(message) {
+    const trimmed = message?.trim();
+    if (!trimmed)
+        return "权益不足，无法继续执行";
+    if (/权益不足|点数不足|稿豆不足|额度不足|余额不足/.test(trimmed)) {
+        return trimmed;
+    }
+    return `权益不足，无法继续执行：${trimmed}`;
+}
+function collectStrings(value, out = [], depth = 0) {
+    if (value === null || value === undefined || depth > 5)
+        return out;
+    if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
+        out.push(String(value));
+        return out;
+    }
+    if (Array.isArray(value)) {
+        for (const item of value)
+            collectStrings(item, out, depth + 1);
+        return out;
+    }
+    if (typeof value === "object") {
+        for (const item of Object.values(value)) {
+            collectStrings(item, out, depth + 1);
+        }
+    }
+    return out;
+}
+function collectDiagnosticContext(value, depth = 0) {
+    if (!value || typeof value !== "object" || depth > 5)
+        return undefined;
+    const record = value;
+    const direct = record.diagnostic_context ?? record.diagnosticContext;
+    const normalized = normalizeDiagnosticContext(direct);
+    if (normalized)
+        return normalized;
+    for (const item of Object.values(record)) {
+        const nested = collectDiagnosticContext(item, depth + 1);
+        if (nested)
+            return nested;
+    }
+    return undefined;
+}
+function normalizeDiagnosticContext(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return undefined;
+    const out = {};
+    for (const [key, item] of Object.entries(value)) {
+        if (item === undefined || item === null || item === "")
+            continue;
+        if (typeof item === "string" ||
+            typeof item === "number" ||
+            typeof item === "boolean" ||
+            Array.isArray(item)) {
+            out[key] = item;
+        }
+    }
+    return Object.keys(out).length > 0 ? out : undefined;
+}

package/dist/src/utils/gd-home.d.ts

@@ -0,0 +1,7 @@
+export declare const DEFAULT_GD_DIR: string;
+export declare function resolveGdHome(): string;
+export declare function hasCustomGdHome(): boolean;
+export declare const GD_DIR: string;
+export declare const CREDENTIALS_FILE: string;
+export declare const REGISTRY_CACHE_FILE: string;
+export declare const SETTINGS_FILE: string;

package/dist/src/utils/gd-home.js

@@ -0,0 +1,26 @@
+import os from "node:os";
+import path from "node:path";
+export const DEFAULT_GD_DIR = path.join(os.homedir(), ".gd");
+export function resolveGdHome() {
+    const configured = readGdHomeEnv();
+    if (!configured?.trim())
+        return DEFAULT_GD_DIR;
+    return path.resolve(expandHome(configured.trim()));
+}
+export function hasCustomGdHome() {
+    return Boolean(readGdHomeEnv()?.trim());
+}
+export const GD_DIR = resolveGdHome();
+export const CREDENTIALS_FILE = path.join(GD_DIR, "credentials.json");
+export const REGISTRY_CACHE_FILE = path.join(GD_DIR, "registry-cache.json");
+export const SETTINGS_FILE = path.join(GD_DIR, "settings.json");
+function readGdHomeEnv() {
+    return process.env.GD_CLI_HOME ?? process.env.GAODING_CLI_HOME;
+}
+function expandHome(value) {
+    if (value === "~")
+        return os.homedir();
+    if (value.startsWith("~/"))
+        return path.join(os.homedir(), value.slice(2));
+    return value;
+}

package/dist/src/utils/help-verify.d.ts

@@ -0,0 +1,9 @@
+import type { Command } from "commander";
+/**
+ * 在命令 `-h` 底部追加一段「快速验证」单行示例（用于具体 Tool / Workflow 子命令）。
+ */
+export declare function appendVerifySnippet(cmd: Command, line: string): void;
+/** 按工具 id 附加对应示例；无映射则不加（避免误导） */
+export declare function appendToolQuickExample(cmd: Command, toolName: string): void;
+/** `gd-cli workflows run -h` 专用 */
+export declare function appendAppRunQuickExample(cmd: Command, _legacyPrefix?: string): void;

package/dist/src/utils/help-verify.js

@@ -0,0 +1,41 @@
+/** 各工具一条可复制命令（与 registry 中 tool id 一致） */
+const TOOL_QUICK_LINES = {
+    "asset.upload": "gd-cli tools call upload --file ./demo.jpg -f json",
+    upload: "gd-cli tools call upload --file ./demo.jpg -f json",
+    chat: 'gd-cli tools call chat --prompt "运动品牌主图要点" -f json',
+    cutout: "gd-cli tools call cutout --image https://www.gaoding.art/favicon.ico -f json",
+    title: 'gd-cli tools call title --prompt "北欧实木餐桌" -f json',
+    prompt: 'gd-cli tools call prompt --prompt "一只猫" -f json',
+    generate: 'gd-cli tools call generate --prompt "产品白底图，极简" --ratio 1:1 -f json',
+    edit: "gd-cli tools call edit --image https://www.gaoding.art/favicon.ico --style <风格> -f json",
+    expand: "gd-cli tools call expand --image https://www.gaoding.art/favicon.ico --width 1920 --height 1080 -f json",
+    erase: "gd-cli tools call erase --image https://www.gaoding.art/favicon.ico --mask https://example.com/mask.png -f json",
+    upscale: "gd-cli tools call upscale --image https://www.gaoding.art/favicon.ico -f json",
+    vectorize: "gd-cli tools call vectorize --image https://www.gaoding.art/favicon.ico -f json",
+    video: 'gd-cli tools call video --prompt "运动品牌短片" -f json',
+    "video-hd": "gd-cli tools call video-hd --file https://example.com/video.mp4 -f json",
+};
+const APP_RUN_QUICK_LINE = 'gd-cli workflows run listing-gallery --image ./product.jpg --brief "运动鞋" -f json';
+/**
+ * 在命令 `-h` 底部追加一段「快速验证」单行示例（用于具体 Tool / Workflow 子命令）。
+ */
+export function appendVerifySnippet(cmd, line) {
+    const text = `
+Cases：
+
+${line.trim()}
+`;
+    cmd.addHelpText("after", text);
+}
+/** 按工具 id 附加对应示例；无映射则不加（避免误导） */
+export function appendToolQuickExample(cmd, toolName) {
+    const line = TOOL_QUICK_LINES[toolName];
+    if (!line)
+        return;
+    appendVerifySnippet(cmd, line);
+}
+/** `gd-cli workflows run -h` 专用 */
+export function appendAppRunQuickExample(cmd, _legacyPrefix) {
+    void _legacyPrefix;
+    appendVerifySnippet(cmd, APP_RUN_QUICK_LINE);
+}

package/dist/src/utils/input-json.d.ts

@@ -0,0 +1,3 @@
+export declare function readJsonInput(ref: string): Promise<Record<string, unknown>>;
+export declare function applySetEntries(target: Record<string, unknown>, entries: unknown): void;
+export declare function collectArg(value: string, previous?: string[]): string[];

package/dist/src/utils/input-json.js

@@ -0,0 +1,61 @@
+import { readFile } from "node:fs/promises";
+import { resolve } from "node:path";
+export async function readJsonInput(ref) {
+    const raw = ref === "-" ? await readStdin() : await readFile(resolve(process.cwd(), ref), "utf8");
+    const trimmed = raw.trim();
+    if (!trimmed)
+        return {};
+    const parsed = JSON.parse(trimmed);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new Error("JSON 输入必须是 object");
+    }
+    return parsed;
+}
+export function applySetEntries(target, entries) {
+    if (!Array.isArray(entries))
+        return;
+    for (const entry of entries) {
+        const raw = String(entry);
+        const index = raw.indexOf("=");
+        if (index <= 0) {
+            throw new Error(`--set 必须是 key=value: ${raw}`);
+        }
+        const key = raw.slice(0, index).trim();
+        const value = raw.slice(index + 1);
+        if (!key)
+            throw new Error(`--set 缺少 key: ${raw}`);
+        target[key] = parseScalar(value);
+    }
+}
+export function collectArg(value, previous = []) {
+    previous.push(value);
+    return previous;
+}
+async function readStdin() {
+    const chunks = [];
+    for await (const chunk of process.stdin) {
+        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk)));
+    }
+    return Buffer.concat(chunks).toString("utf8");
+}
+function parseScalar(value) {
+    if (value === "true")
+        return true;
+    if (value === "false")
+        return false;
+    if (value === "null")
+        return null;
+    if (/^-?\d+(\.\d+)?$/.test(value))
+        return Number(value);
+    const trimmed = value.trim();
+    if ((trimmed.startsWith("{") && trimmed.endsWith("}")) ||
+        (trimmed.startsWith("[") && trimmed.endsWith("]"))) {
+        try {
+            return JSON.parse(trimmed);
+        }
+        catch {
+            return value;
+        }
+    }
+    return value;
+}

package/dist/src/utils/list-output-format.d.ts

@@ -0,0 +1,10 @@
+import type { Command } from "commander";
+/**
+ * 列表类命令：未显式指定 -f/--format 时，TTY 用 table，管道/非 TTY 用 json。
+ * 显式传入 -f json|text|table 时始终尊重用户选择。
+ */
+export declare function resolveListOutputFormat(subcommand: Command): string;
+/**
+ * 工具调用 / 应用运行 / 任务状态：未显式 -f 时，TTY 用 human（交付物可读），非 TTY 用 json。
+ */
+export declare function resolveInvokeOutputFormat(subcommand: Command): string;

package/dist/src/utils/list-output-format.js

@@ -0,0 +1,34 @@
+function getRoot(subcommand) {
+    return subcommand.parent?.parent ?? subcommand.parent;
+}
+function isImplicitFormat(root) {
+    const source = root?.getOptionValueSource("format");
+    return (source === undefined || source === "default" || source === "implied");
+}
+/**
+ * 列表类命令：未显式指定 -f/--format 时，TTY 用 table，管道/非 TTY 用 json。
+ * 显式传入 -f json|text|table 时始终尊重用户选择。
+ */
+export function resolveListOutputFormat(subcommand) {
+    const root = getRoot(subcommand);
+    const opts = (root?.opts() ?? {});
+    if (opts.json)
+        return "json";
+    const format = opts.format ?? "json";
+    if (!isImplicitFormat(root))
+        return format;
+    return process.stdout.isTTY ? "table" : "json";
+}
+/**
+ * 工具调用 / 应用运行 / 任务状态：未显式 -f 时，TTY 用 human（交付物可读），非 TTY 用 json。
+ */
+export function resolveInvokeOutputFormat(subcommand) {
+    const root = getRoot(subcommand);
+    const opts = (root?.opts() ?? {});
+    if (opts.json)
+        return "json";
+    const format = opts.format ?? "json";
+    if (!isImplicitFormat(root))
+        return format;
+    return process.stdout.isTTY ? "human" : "json";
+}

package/dist/src/utils/logger.d.ts

@@ -0,0 +1,6 @@
+export declare const logger: {
+    info(msg: string): void;
+    debug(msg: string): void;
+    warn(msg: string): void;
+    error(msg: string): void;
+};

package/dist/src/utils/logger.js

@@ -0,0 +1,19 @@
+import { isVerbose, isDebug } from "./config.js";
+export const logger = {
+    info(msg) {
+        if (isVerbose()) {
+            process.stderr.write(`[info] ${msg}\n`);
+        }
+    },
+    debug(msg) {
+        if (isDebug()) {
+            process.stderr.write(`[debug] ${msg}\n`);
+        }
+    },
+    warn(msg) {
+        process.stderr.write(`[warn] ${msg}\n`);
+    },
+    error(msg) {
+        process.stderr.write(`[error] ${msg}\n`);
+    },
+};

package/dist/src/utils/matting-compose.d.ts

@@ -0,0 +1,10 @@
+export interface ComposeMattingOptions {
+    /** 裁掉透明边，对齐前端 trim */
+    trim?: boolean;
+}
+/**
+ * 原图 + mask → 透明 PNG。
+ * mask 亮度作为 alpha（对齐前端 canvas destination-in）。
+ */
+export declare function composeMattingImage(sourceBuffer: Buffer, maskBuffer: Buffer, options?: ComposeMattingOptions): Promise<Buffer>;
+export declare function fetchImageBuffer(url: string): Promise<Buffer>;

package/dist/src/utils/matting-compose.js

@@ -0,0 +1,45 @@
+import sharp from "sharp";
+import { redactSensitiveText } from "./redact.js";
+import { assertSafeHttpUrl } from "./url-safety.js";
+/**
+ * 原图 + mask → 透明 PNG。
+ * mask 亮度作为 alpha（对齐前端 canvas destination-in）。
+ */
+export async function composeMattingImage(sourceBuffer, maskBuffer, options = {}) {
+    const { trim = true } = options;
+    const sourceMeta = await sharp(sourceBuffer).metadata();
+    const width = sourceMeta.width ?? 0;
+    const height = sourceMeta.height ?? 0;
+    if (!width || !height) {
+        throw new Error("composeMattingImage: invalid source dimensions");
+    }
+    const { data: rgba, info } = await sharp(sourceBuffer)
+        .resize(width, height, { fit: "fill" })
+        .ensureAlpha()
+        .raw()
+        .toBuffer({ resolveWithObject: true });
+    const alpha = await sharp(maskBuffer)
+        .resize(width, height, { fit: "fill" })
+        .grayscale()
+        .raw()
+        .toBuffer();
+    const pixels = width * height;
+    for (let i = 0; i < pixels; i += 1) {
+        rgba[i * 4 + 3] = alpha[i] ?? 0;
+    }
+    let pipeline = sharp(rgba, {
+        raw: { width: info.width, height: info.height, channels: 4 },
+    });
+    if (trim) {
+        pipeline = pipeline.trim();
+    }
+    return pipeline.png().toBuffer();
+}
+export async function fetchImageBuffer(url) {
+    const safeUrl = assertSafeHttpUrl(url, { context: "图片 URL" });
+    const response = await fetch(safeUrl);
+    if (!response.ok) {
+        throw new Error(redactSensitiveText(`下载图片失败 [${response.status}]: ${safeUrl}`));
+    }
+    return Buffer.from(await response.arrayBuffer());
+}

package/dist/src/utils/open-browser.d.ts

@@ -0,0 +1 @@
+export declare function openBrowser(url: string): Promise<void>;

package/dist/src/utils/open-browser.js

@@ -0,0 +1,4 @@
+import open from "open";
+export async function openBrowser(url) {
+    await open(url);
+}

package/dist/src/utils/output-path.d.ts

@@ -0,0 +1,5 @@
+export declare function resolveSafeOutputDir(outputDir: string): string;
+export declare function createUniqueOutputDir(root: string, preferredName: string): Promise<{
+    dir: string;
+    name: string;
+}>;

package/dist/src/utils/output-path.js

@@ -0,0 +1,70 @@
+import { mkdir } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+const PROTECTED_SEGMENTS = new Set([
+    ".aws",
+    ".azure",
+    ".docker",
+    ".gd",
+    ".gd-cli-dev",
+    ".git",
+    ".gnupg",
+    ".kube",
+    ".ssh",
+]);
+export function resolveSafeOutputDir(outputDir) {
+    const resolved = path.resolve(process.cwd(), outputDir);
+    const reason = unsafeOutputDirReason(resolved);
+    if (reason) {
+        throw new Error(`输出目录不安全：${resolved}（${reason}）`);
+    }
+    return resolved;
+}
+export async function createUniqueOutputDir(root, preferredName) {
+    for (let i = 0; i < 100; i += 1) {
+        const name = i === 0 ? preferredName : `${preferredName}-${i + 1}`;
+        const dir = path.join(root, name);
+        try {
+            await mkdir(dir, { recursive: false });
+            return { dir, name };
+        }
+        catch (error) {
+            if (!isAlreadyExists(error))
+                throw error;
+        }
+    }
+    throw new Error(`无法创建唯一输出目录：${path.join(root, preferredName)}`);
+}
+function unsafeOutputDirReason(resolved) {
+    const root = path.parse(resolved).root;
+    if (resolved === root)
+        return "不能写入文件系统根目录";
+    if (resolved === os.homedir())
+        return "不能直接写入家目录根";
+    const lowerSegments = resolved.split(path.sep).filter(Boolean).map((segment) => segment.toLowerCase());
+    const protectedSegment = lowerSegments.find((segment) => PROTECTED_SEGMENTS.has(segment));
+    if (protectedSegment)
+        return `包含受保护目录 ${protectedSegment}`;
+    const protectedRoots = [
+        "/bin",
+        "/etc",
+        "/sbin",
+        "/usr/bin",
+        "/usr/sbin",
+        path.join(os.homedir(), ".gd"),
+        path.join(os.homedir(), ".ssh"),
+    ];
+    for (const protectedRoot of protectedRoots) {
+        if (isSameOrChild(resolved, protectedRoot)) {
+            return `位于受保护目录 ${protectedRoot}`;
+        }
+    }
+    return null;
+}
+function isSameOrChild(target, parent) {
+    const relative = path.relative(parent, target);
+    return relative === "" || (!!relative && !relative.startsWith("..") && !path.isAbsolute(relative));
+}
+function isAlreadyExists(error) {
+    return !!error && typeof error === "object" && error.code === "EEXIST";
+}

package/dist/src/utils/redact.d.ts

@@ -0,0 +1,3 @@
+export declare function isSensitiveKey(key: string): boolean;
+export declare function redactSensitiveText(value: string): string;
+export declare function redactSensitiveValue<T>(value: T): T;

package/dist/src/utils/redact.js

@@ -0,0 +1,96 @@
+const REDACTED = "[REDACTED]";
+const REDACTED_URL = "[REDACTED_INTERNAL_URL]";
+const SENSITIVE_KEYS = new Set([
+    "ak",
+    "sk",
+    "token",
+    "access_token",
+    "refresh_token",
+    "upload_token",
+    "security_token",
+    "cookie",
+    "authorization",
+    "auth_key",
+    "signature",
+    "x-accesskey",
+    "x-signature",
+    "authorize_code",
+    "authorization_code",
+    "device_code",
+    "access_key_id",
+    "access_key_secret",
+    "secret",
+    "password",
+]);
+export function isSensitiveKey(key) {
+    return SENSITIVE_KEYS.has(normalizeKey(key));
+}
+export function redactSensitiveText(value) {
+    let out = value;
+    out = out.replace(/\bBearer\s+[A-Za-z0-9._~+/=-]+/gi, `Bearer ${REDACTED}`);
+    out = out.replace(/\b(Authorization|Cookie|X-AccessKey|X-Signature)\s*[:=]\s*([^\r\n,;]+)/gi, (_m, key) => `${key}: ${REDACTED}`);
+    out = out.replace(/([?&](?:ak|sk|auth_key|token|access_token|refresh_token|upload_token|security_token|signature|authorize_code|authorization_code|device_code|access_key_id|access_key_secret)=)[^&\s"'<>]+/gi, `$1${REDACTED}`);
+    out = out.replace(/(["']?)(ak|sk|auth_key|token|access_token|refresh_token|upload_token|security_token|cookie|authorization|signature|x-accesskey|x-signature|authorize_code|authorization_code|device_code|access_key_id|access_key_secret|secret|password)\1\s*[:=]\s*(["']?)[^"',\s}]+(\3)/gi, (_m, quote, key, valueQuote, endQuote) => `${quote}${key}${quote}: ${valueQuote}${REDACTED}${endQuote}`);
+    out = out.replace(/\b(AKIA|LTAI)[A-Z0-9]{12,}\b/g, REDACTED);
+    out = out.replace(/\bhttps?:\/\/[^\s"'<>]+/gi, (url) => {
+        if (isInternalUrl(url))
+            return REDACTED_URL;
+        return url;
+    });
+    return out;
+}
+export function redactSensitiveValue(value) {
+    return redactValue(value, new WeakSet());
+}
+function redactValue(value, seen) {
+    if (typeof value === "string")
+        return redactSensitiveText(value);
+    if (!value || typeof value !== "object")
+        return value;
+    if (seen.has(value))
+        return "[Circular]";
+    seen.add(value);
+    if (Array.isArray(value))
+        return value.map((item) => redactValue(item, seen));
+    const out = {};
+    for (const [key, item] of Object.entries(value)) {
+        out[key] = isSensitiveKey(key) ? REDACTED : redactValue(item, seen);
+    }
+    return out;
+}
+function normalizeKey(key) {
+    return key.trim().toLowerCase().replace(/-/g, "_");
+}
+function isInternalUrl(raw) {
+    try {
+        const parsed = new URL(raw);
+        const host = parsed.hostname.toLowerCase().replace(/^\[|\]$/g, "");
+        return isInternalHost(host);
+    }
+    catch {
+        return false;
+    }
+}
+function isInternalHost(host) {
+    if (host === "localhost" ||
+        host.endsWith(".localhost") ||
+        host === "metadata.google.internal" ||
+        host === "metadata" ||
+        host.endsWith(".local")) {
+        return true;
+    }
+    if (/^\d+\.\d+\.\d+\.\d+$/.test(host)) {
+        const [a = 0, b = 0] = host.split(".").map((part) => Number(part));
+        return (a === 0 ||
+            a === 10 ||
+            a === 127 ||
+            (a === 169 && b === 254) ||
+            (a === 172 && b >= 16 && b <= 31) ||
+            (a === 192 && b === 168));
+    }
+    return (host === "::1" ||
+        host === "::" ||
+        host.startsWith("fc") ||
+        host.startsWith("fd") ||
+        host.startsWith("fe80:"));
+}

package/dist/src/utils/reference-image.d.ts

@@ -0,0 +1,8 @@
+export interface ReferenceImageCheckOptions {
+    context: string;
+    imageRequired?: boolean;
+}
+export declare function isRemoteImageReference(value: string): boolean;
+export declare function firstReferenceImage(value: unknown): string | undefined;
+export declare function assertReferenceImageAvailable(value: unknown, options: ReferenceImageCheckOptions): string;
+export declare function referenceImageRequiredMessage(context: string): string;