timonel 2.2.0 → 2.3.0

package/dist/lib/helm.d.ts

@@ -1,32 +1,220 @@
 /**
- * Helpers to embed Helm template expressions while staying type-safe in TS.
+ * @fileoverview Helpers to embed Helm template expressions while staying type-safe in TypeScript.
  * We treat Helm placeholders as opaque strings that will be preserved in YAML.
+ * @since 0.1.0
+ */
+/**
+ * Creates a reference to a value in .Values of Helm
+ *
+ * Generates a Helm template expression that references a value
+ * in the chart's values.yaml file using dot notation.
+ *
+ * @param {string} path - Path to the value using dot notation (e.g., 'image.tag')
+ * @returns {string} Helm template expression (e.g., '{{ .Values.image.tag }}')
+ * @throws {Error} If the path is not valid for Helm templates
+ *
+ * @example
+ * ```typescript
+ * const imageTag = valuesRef('image.tag');
+ * // Returns: '{{ .Values.image.tag }}'
+ *
+ * const replicas = valuesRef('deployment.replicas');
+ * // Returns: '{{ .Values.deployment.replicas }}'
+ * ```
+ *
+ * @since 0.1.0
  */
-/** Create a .Values reference like {{ .Values.key }} */
 export declare function valuesRef(path: string): string;
-/** Create a required .Values reference with default: {{ required msg .Values.key }} */
+/**
+ * Creates a required reference to a value in .Values of Helm
+ *
+ * Similar to valuesRef, but uses Helm's 'required' function to
+ * ensure the value is present, failing chart rendering if not provided.
+ *
+ * @param {string} path - Path to the value using dot notation
+ * @param {string} [message] - Custom error message if value is missing
+ * @returns {string} Helm template expression with required validation
+ * @throws {Error} If the path is not valid for Helm templates
+ *
+ * @example
+ * ```typescript
+ * const dbPassword = requiredValuesRef('database.password', 'Database password is required');
+ * // Returns: '{{ required "Database password is required" .Values.database.password }}'
+ *
+ * const apiKey = requiredValuesRef('api.key');
+ * // Returns: '{{ required "api.key is required" .Values.api.key }}'
+ * ```
+ *
+ * @since 0.1.0
+ */
 export declare function requiredValuesRef(path: string, message?: string): string;
-/** Built-in Helm references */
+/**
+ * Built-in Helm references for release and chart metadata
+ *
+ * Object containing the most common references to Helm's built-in
+ * variables for release and chart information.
+ *
+ * @namespace helm
+ * @since 0.1.0
+ *
+ * @example
+ * ```typescript
+ * const deploymentName = `${helm.releaseName}-deployment`;
+ * // Uses: '{{ .Release.Name }}-deployment'
+ *
+ * const version = helm.chartVersion;
+ * // Uses: '{{ .Chart.Version }}'
+ * ```
+ */
 export declare const helm: {
+    /** Release name: {{ .Release.Name }} */
     releaseName: string;
+    /** Chart name: {{ .Chart.Name }} */
     chartName: string;
+    /** Chart version: {{ .Chart.Version }} */
     chartVersion: string;
+    /** Release namespace: {{ .Release.Namespace }} */
     namespace: string;
 };
-/** Quote a Helm template expression for safe YAML embedding */
+/**
+ * Quotes a Helm template expression for safe YAML embedding
+ *
+ * Ensures Helm template expressions are properly quoted to avoid
+ * YAML parsing issues when the expression contains special characters.
+ *
+ * @param {string} expr - Helm template expression to quote
+ * @returns {string} Quoted expression if it's a Helm template, otherwise unchanged
+ *
+ * @example
+ * ```typescript
+ * const quoted = quote('{{ .Values.image.tag }}');
+ * // Returns: "'{{ .Values.image.tag }}'"
+ *
+ * const normal = quote('nginx:1.21');
+ * // Returns: "nginx:1.21"
+ * ```
+ *
+ * @since 0.1.0
+ */
 export declare function quote(expr: string): string;
-/** Indent helper matching Helm indent fn: {{- n indent -}} */
+/**
+ * Indents text by specified number of spaces
+ *
+ * Helper function that matches Helm's indent function behavior,
+ * adding the specified number of spaces to each non-empty line.
+ *
+ * @param {number} n - Number of spaces to indent
+ * @param {string} expr - Text to indent
+ * @returns {string} Indented text
+ *
+ * @example
+ * ```typescript
+ * const indented = indent(4, 'line1\nline2');
+ * // Returns: "    line1\n    line2"
+ * ```
+ *
+ * @since 0.1.0
+ */
 export declare function indent(n: number, expr: string): string;
-/** Insert a call to a named Helm template: {{ template "name" . }} */
+/**
+ * Inserts a call to a named Helm template using template function
+ *
+ * @param {string} name - Name of the template to call
+ * @param {string} [context='.'] - Context to pass to the template
+ * @returns {string} Helm template expression
+ *
+ * @example
+ * ```typescript
+ * const tmpl = template('myapp.labels');
+ * // Returns: '{{ template "myapp.labels" . }}'
+ * ```
+ *
+ * @since 0.1.0
+ */
 export declare function template(name: string, context?: string): string;
-/** Insert a call to a named Helm template using include: {{ include "name" . }} */
+/**
+ * Inserts a call to a named Helm template using include function
+ *
+ * Preferred over template() as include allows piping and better error handling.
+ *
+ * @param {string} name - Name of the template to include
+ * @param {string} [context='.'] - Context to pass to the template
+ * @returns {string} Helm template expression
+ *
+ * @example
+ * ```typescript
+ * const tmpl = include('myapp.labels');
+ * // Returns: '{{ include "myapp.labels" . }}'
+ * ```
+ *
+ * @since 0.1.0
+ */
 export declare function include(name: string, context?: string): string;
-/** Numeric value from .Values with int cast: {{ .Values.path | int }} */
+/**
+ * Creates a numeric reference from .Values with int cast
+ *
+ * Generates a Helm template expression that casts the value to integer,
+ * truncating any decimal places.
+ *
+ * @param {string} path - Path to the value using dot notation
+ * @returns {string} Helm template expression with int cast
+ * @throws {Error} If the path is not valid for Helm templates
+ *
+ * @example
+ * ```typescript
+ * const replicas = numberRef('deployment.replicas');
+ * // Returns: '{{ .Values.deployment.replicas | int }}'
+ * ```
+ *
+ * @since 0.1.0
+ */
 export declare function numberRef(path: string): string;
-/** Boolean value from .Values with toBool cast: {{ .Values.path | toBool }} */
+/**
+ * Creates a boolean reference from .Values with toBool cast
+ *
+ * @param {string} path - Path to the value using dot notation
+ * @returns {string} Helm template expression with toBool cast
+ * @throws {Error} If the path is not valid for Helm templates
+ *
+ * @example
+ * ```typescript
+ * const enabled = boolRef('feature.enabled');
+ * // Returns: '{{ .Values.feature.enabled | toBool }}'
+ * ```
+ *
+ * @since 0.1.0
+ */
 export declare function boolRef(path: string): string;
-/** String value from .Values with toString cast: {{ .Values.path | toString }} */
+/**
+ * Creates a string reference from .Values with toString cast
+ *
+ * @param {string} path - Path to the value using dot notation
+ * @returns {string} Helm template expression with toString cast
+ * @throws {Error} If the path is not valid for Helm templates
+ *
+ * @example
+ * ```typescript
+ * const version = stringRef('app.version');
+ * // Returns: '{{ .Values.app.version | toString }}'
+ * ```
+ *
+ * @since 0.1.0
+ */
 export declare function stringRef(path: string): string;
-/** Float value from .Values with float64 cast: {{ .Values.path | float64 }} */
+/**
+ * Creates a float reference from .Values with float64 cast
+ *
+ * @param {string} path - Path to the value using dot notation
+ * @returns {string} Helm template expression with float64 cast
+ * @throws {Error} If the path is not valid for Helm templates
+ *
+ * @example
+ * ```typescript
+ * const ratio = floatRef('scaling.ratio');
+ * // Returns: '{{ .Values.scaling.ratio | float64 }}'
+ * ```
+ *
+ * @since 0.1.0
+ */
 export declare function floatRef(path: string): string;
 //# sourceMappingURL=helm.d.ts.map

package/dist/lib/helm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helm.d.ts","sourceRoot":"","sources":["../../src/lib/helm.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,wDAAwD;AACxD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAGxE;AAED,+BAA+B;AAC/B,eAAO,MAAM,IAAI;;;;;CAKhB,CAAC;AAEF,+DAA+D;AAC/D,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAM1C;AAED,8DAA8D;AAC9D,wBAAgB,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAMtD;AAED,sEAAsE;AACtE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,SAAM,GAAG,MAAM,CAE5D;AAED,mFAAmF;AACnF,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,SAAM,GAAG,MAAM,CAE3D;AAED,yEAAyE;AACzE,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED,+EAA+E;AAC/E,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE5C;AAED,kFAAkF;AAClF,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED,+EAA+E;AAC/E,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7C"}
+{"version":3,"file":"helm.d.ts","sourceRoot":"","sources":["../../src/lib/helm.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK9C;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAQxE;AAeD;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,IAAI;IACf,wCAAwC;;IAExC,oCAAoC;;IAEpC,0CAA0C;;IAE1C,kDAAkD;;CAEnD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAM1C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAMtD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,SAAM,GAAG,MAAM,CAE5D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,SAAM,GAAG,MAAM,CAE3D;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK9C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK5C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK9C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK7C"}

package/dist/lib/helm.js

@@ -1,24 +1,127 @@
 /**
- * Helpers to embed Helm template expressions while staying type-safe in TS.
+ * @fileoverview Helpers to embed Helm template expressions while staying type-safe in TypeScript.
  * We treat Helm placeholders as opaque strings that will be preserved in YAML.
+ * @since 0.1.0
+ */
+import { SecurityUtils } from './security.js';
+/**
+ * Creates a reference to a value in .Values of Helm
+ *
+ * Generates a Helm template expression that references a value
+ * in the chart's values.yaml file using dot notation.
+ *
+ * @param {string} path - Path to the value using dot notation (e.g., 'image.tag')
+ * @returns {string} Helm template expression (e.g., '{{ .Values.image.tag }}')
+ * @throws {Error} If the path is not valid for Helm templates
+ *
+ * @example
+ * ```typescript
+ * const imageTag = valuesRef('image.tag');
+ * // Returns: '{{ .Values.image.tag }}'
+ *
+ * const replicas = valuesRef('deployment.replicas');
+ * // Returns: '{{ .Values.deployment.replicas }}'
+ * ```
+ *
+ * @since 0.1.0
  */
-/** Create a .Values reference like {{ .Values.key }} */
 export function valuesRef(path) {
+    if (!isValidHelmPath(path)) {
+        throw new Error(`Invalid Helm template path: ${path}`);
+    }
     return `{{ .Values.${path} }}`;
 }
-/** Create a required .Values reference with default: {{ required msg .Values.key }} */
+/**
+ * Creates a required reference to a value in .Values of Helm
+ *
+ * Similar to valuesRef, but uses Helm's 'required' function to
+ * ensure the value is present, failing chart rendering if not provided.
+ *
+ * @param {string} path - Path to the value using dot notation
+ * @param {string} [message] - Custom error message if value is missing
+ * @returns {string} Helm template expression with required validation
+ * @throws {Error} If the path is not valid for Helm templates
+ *
+ * @example
+ * ```typescript
+ * const dbPassword = requiredValuesRef('database.password', 'Database password is required');
+ * // Returns: '{{ required "Database password is required" .Values.database.password }}'
+ *
+ * const apiKey = requiredValuesRef('api.key');
+ * // Returns: '{{ required "api.key is required" .Values.api.key }}'
+ * ```
+ *
+ * @since 0.1.0
+ */
 export function requiredValuesRef(path, message) {
+    if (!isValidHelmPath(path)) {
+        throw new Error(`Invalid Helm template path: ${path}`);
+    }
     const msg = message ?? `${path} is required`;
-    return `{{ required "${msg}" .Values.${path} }}`;
+    // Escape quotes and backslashes in message to prevent template injection
+    const escapedMsg = msg.replace(/\\/g, '\\\\').replace(/"/g, '\\"');
+    return `{{ required "${escapedMsg}" .Values.${path} }}`;
+}
+/**
+ * Validates Helm template path syntax with enhanced security
+ *
+ * @private
+ * @param {string} path - Path to validate
+ * @returns {boolean} True if path is valid for Helm templates
+ * @since 0.1.0
+ */
+function isValidHelmPath(path) {
+    // Use centralized validation from SecurityUtils
+    return SecurityUtils.isValidHelmTemplatePath(path);
 }
-/** Built-in Helm references */
+/**
+ * Built-in Helm references for release and chart metadata
+ *
+ * Object containing the most common references to Helm's built-in
+ * variables for release and chart information.
+ *
+ * @namespace helm
+ * @since 0.1.0
+ *
+ * @example
+ * ```typescript
+ * const deploymentName = `${helm.releaseName}-deployment`;
+ * // Uses: '{{ .Release.Name }}-deployment'
+ *
+ * const version = helm.chartVersion;
+ * // Uses: '{{ .Chart.Version }}'
+ * ```
+ */
 export const helm = {
+    /** Release name: {{ .Release.Name }} */
     releaseName: '{{ .Release.Name }}',
+    /** Chart name: {{ .Chart.Name }} */
     chartName: '{{ .Chart.Name }}',
+    /** Chart version: {{ .Chart.Version }} */
     chartVersion: '{{ .Chart.Version }}',
+    /** Release namespace: {{ .Release.Namespace }} */
     namespace: '{{ .Release.Namespace }}',
 };
-/** Quote a Helm template expression for safe YAML embedding */
+/**
+ * Quotes a Helm template expression for safe YAML embedding
+ *
+ * Ensures Helm template expressions are properly quoted to avoid
+ * YAML parsing issues when the expression contains special characters.
+ *
+ * @param {string} expr - Helm template expression to quote
+ * @returns {string} Quoted expression if it's a Helm template, otherwise unchanged
+ *
+ * @example
+ * ```typescript
+ * const quoted = quote('{{ .Values.image.tag }}');
+ * // Returns: "'{{ .Values.image.tag }}'"
+ *
+ * const normal = quote('nginx:1.21');
+ * // Returns: "nginx:1.21"
+ * ```
+ *
+ * @since 0.1.0
+ */
 export function quote(expr) {
     // ensure Helm templates are quoted to avoid YAML parsing issues
     if (expr.startsWith('{{') && expr.endsWith('}}')) {
@@ -26,7 +129,24 @@ export function quote(expr) {
     }
     return expr;
 }
-/** Indent helper matching Helm indent fn: {{- n indent -}} */
+/**
+ * Indents text by specified number of spaces
+ *
+ * Helper function that matches Helm's indent function behavior,
+ * adding the specified number of spaces to each non-empty line.
+ *
+ * @param {number} n - Number of spaces to indent
+ * @param {string} expr - Text to indent
+ * @returns {string} Indented text
+ *
+ * @example
+ * ```typescript
+ * const indented = indent(4, 'line1\nline2');
+ * // Returns: "    line1\n    line2"
+ * ```
+ *
+ * @since 0.1.0
+ */
 export function indent(n, expr) {
     const spaces = ' '.repeat(n);
     return expr
@@ -34,28 +154,129 @@ export function indent(n, expr) {
         .map((l) => (l.trim().length ? spaces + l : l))
         .join('\n');
 }
-/** Insert a call to a named Helm template: {{ template "name" . }} */
+/**
+ * Inserts a call to a named Helm template using template function
+ *
+ * @param {string} name - Name of the template to call
+ * @param {string} [context='.'] - Context to pass to the template
+ * @returns {string} Helm template expression
+ *
+ * @example
+ * ```typescript
+ * const tmpl = template('myapp.labels');
+ * // Returns: '{{ template "myapp.labels" . }}'
+ * ```
+ *
+ * @since 0.1.0
+ */
 export function template(name, context = '.') {
     return `{{ template "${name}" ${context} }}`;
 }
-/** Insert a call to a named Helm template using include: {{ include "name" . }} */
+/**
+ * Inserts a call to a named Helm template using include function
+ *
+ * Preferred over template() as include allows piping and better error handling.
+ *
+ * @param {string} name - Name of the template to include
+ * @param {string} [context='.'] - Context to pass to the template
+ * @returns {string} Helm template expression
+ *
+ * @example
+ * ```typescript
+ * const tmpl = include('myapp.labels');
+ * // Returns: '{{ include "myapp.labels" . }}'
+ * ```
+ *
+ * @since 0.1.0
+ */
 export function include(name, context = '.') {
     return `{{ include "${name}" ${context} }}`;
 }
-/** Numeric value from .Values with int cast: {{ .Values.path | int }} */
+/**
+ * Creates a numeric reference from .Values with int cast
+ *
+ * Generates a Helm template expression that casts the value to integer,
+ * truncating any decimal places.
+ *
+ * @param {string} path - Path to the value using dot notation
+ * @returns {string} Helm template expression with int cast
+ * @throws {Error} If the path is not valid for Helm templates
+ *
+ * @example
+ * ```typescript
+ * const replicas = numberRef('deployment.replicas');
+ * // Returns: '{{ .Values.deployment.replicas | int }}'
+ * ```
+ *
+ * @since 0.1.0
+ */
 export function numberRef(path) {
+    if (!isValidHelmPath(path)) {
+        throw new Error(`Invalid Helm template path: ${path}`);
+    }
     return `{{ .Values.${path} | int }}`;
 }
-/** Boolean value from .Values with toBool cast: {{ .Values.path | toBool }} */
+/**
+ * Creates a boolean reference from .Values with toBool cast
+ *
+ * @param {string} path - Path to the value using dot notation
+ * @returns {string} Helm template expression with toBool cast
+ * @throws {Error} If the path is not valid for Helm templates
+ *
+ * @example
+ * ```typescript
+ * const enabled = boolRef('feature.enabled');
+ * // Returns: '{{ .Values.feature.enabled | toBool }}'
+ * ```
+ *
+ * @since 0.1.0
+ */
 export function boolRef(path) {
+    if (!isValidHelmPath(path)) {
+        throw new Error(`Invalid Helm template path: ${path}`);
+    }
     return `{{ .Values.${path} | toBool }}`;
 }
-/** String value from .Values with toString cast: {{ .Values.path | toString }} */
+/**
+ * Creates a string reference from .Values with toString cast
+ *
+ * @param {string} path - Path to the value using dot notation
+ * @returns {string} Helm template expression with toString cast
+ * @throws {Error} If the path is not valid for Helm templates
+ *
+ * @example
+ * ```typescript
+ * const version = stringRef('app.version');
+ * // Returns: '{{ .Values.app.version | toString }}'
+ * ```
+ *
+ * @since 0.1.0
+ */
 export function stringRef(path) {
+    if (!isValidHelmPath(path)) {
+        throw new Error(`Invalid Helm template path: ${path}`);
+    }
     return `{{ .Values.${path} | toString }}`;
 }
-/** Float value from .Values with float64 cast: {{ .Values.path | float64 }} */
+/**
+ * Creates a float reference from .Values with float64 cast
+ *
+ * @param {string} path - Path to the value using dot notation
+ * @returns {string} Helm template expression with float64 cast
+ * @throws {Error} If the path is not valid for Helm templates
+ *
+ * @example
+ * ```typescript
+ * const ratio = floatRef('scaling.ratio');
+ * // Returns: '{{ .Values.scaling.ratio | float64 }}'
+ * ```
+ *
+ * @since 0.1.0
+ */
 export function floatRef(path) {
+    if (!isValidHelmPath(path)) {
+        throw new Error(`Invalid Helm template path: ${path}`);
+    }
     return `{{ .Values.${path} | float64 }}`;
 }
 //# sourceMappingURL=helm.js.map

package/dist/lib/helm.js.map

@@ -1 +1 @@
-{"version":3,"file":"helm.js","sourceRoot":"","sources":["../../src/lib/helm.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,wDAAwD;AACxD,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,cAAc,IAAI,KAAK,CAAC;AACjC,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAAgB;IAC9D,MAAM,GAAG,GAAG,OAAO,IAAI,GAAG,IAAI,cAAc,CAAC;IAC7C,OAAO,gBAAgB,GAAG,aAAa,IAAI,KAAK,CAAC;AACnD,CAAC;AAED,+BAA+B;AAC/B,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,WAAW,EAAE,qBAAqB;IAClC,SAAS,EAAE,mBAAmB;IAC9B,YAAY,EAAE,sBAAsB;IACpC,SAAS,EAAE,0BAA0B;CACtC,CAAC;AAEF,+DAA+D;AAC/D,MAAM,UAAU,KAAK,CAAC,IAAY;IAChC,gEAAgE;IAChE,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,IAAI,GAAG,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,MAAM,CAAC,CAAS,EAAE,IAAY;IAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAC9C,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,OAAO,GAAG,GAAG;IAClD,OAAO,gBAAgB,IAAI,KAAK,OAAO,KAAK,CAAC;AAC/C,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,OAAO,GAAG,GAAG;IACjD,OAAO,eAAe,IAAI,KAAK,OAAO,KAAK,CAAC;AAC9C,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,cAAc,IAAI,WAAW,CAAC;AACvC,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,cAAc,IAAI,cAAc,CAAC;AAC1C,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,cAAc,IAAI,gBAAgB,CAAC;AAC5C,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,cAAc,IAAI,eAAe,CAAC;AAC3C,CAAC"}
+{"version":3,"file":"helm.js","sourceRoot":"","sources":["../../src/lib/helm.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,cAAc,IAAI,KAAK,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAAgB;IAC9D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,IAAI,GAAG,IAAI,cAAc,CAAC;IAC7C,yEAAyE;IACzE,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnE,OAAO,gBAAgB,UAAU,aAAa,IAAI,KAAK,CAAC;AAC1D,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,gDAAgD;IAChD,OAAO,aAAa,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,wCAAwC;IACxC,WAAW,EAAE,qBAAqB;IAClC,oCAAoC;IACpC,SAAS,EAAE,mBAAmB;IAC9B,0CAA0C;IAC1C,YAAY,EAAE,sBAAsB;IACpC,kDAAkD;IAClD,SAAS,EAAE,0BAA0B;CACtC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,KAAK,CAAC,IAAY;IAChC,gEAAgE;IAChE,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,IAAI,GAAG,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,MAAM,CAAC,CAAS,EAAE,IAAY;IAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAC9C,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,OAAO,GAAG,GAAG;IAClD,OAAO,gBAAgB,IAAI,KAAK,OAAO,KAAK,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,OAAO,GAAG,GAAG;IACjD,OAAO,eAAe,IAAI,KAAK,OAAO,KAAK,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,cAAc,IAAI,WAAW,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,cAAc,IAAI,cAAc,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,cAAc,IAAI,gBAAgB,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,cAAc,IAAI,eAAe,CAAC;AAC3C,CAAC"}

package/dist/lib/security.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Security utilities for input validation and sanitization
+ * Focused on CLI tool security concerns: path traversal, injection prevention
+ */
+export declare class SecurityUtils {
+    /**
+     * Validates and sanitizes file paths to prevent path traversal attacks
+     * @param inputPath - The path to validate
+     * @param allowedBasePath - The base path that the input should be within
+     * @returns Sanitized path if valid
+     * @throws Error if path is invalid or contains traversal sequences
+     */
+    static validatePath(inputPath: string, allowedBasePath: string): string;
+    /**
+     * Sanitizes log messages to prevent log injection attacks
+     * @param message - The message to sanitize
+     * @returns Sanitized message with control characters removed
+     */
+    static sanitizeLogMessage(message: string): string;
+    /**
+     * Sanitizes environment names to prevent path traversal (CWE-22)
+     * @param env - Environment name to sanitize
+     * @returns Sanitized environment name
+     * @throws Error if environment name is invalid
+     */
+    static sanitizeEnvironmentName(env: string): string;
+    /**
+     * Validates TypeScript file extensions for dynamic imports
+     * @param filePath - The file path to validate
+     * @returns True if the file has a valid TypeScript extension
+     */
+    static isValidTypeScriptFile(filePath: string): boolean;
+    /**
+     * Validates Helm template path syntax
+     * @param templatePath - The template path to validate
+     * @returns True if the path is valid for Helm templates
+     */
+    static isValidHelmTemplatePath(templatePath: string): boolean;
+    /**
+     * Validates chart names according to Helm conventions
+     * @param chartName - Chart name to validate
+     * @returns True if chart name follows Helm naming rules
+     */
+    static isValidChartName(chartName: string): boolean;
+    /**
+     * Validates subchart names according to Helm conventions
+     * @param subchartName - Subchart name to validate
+     * @returns True if subchart name is valid
+     */
+    static isValidSubchartName(subchartName: string): boolean;
+}
+//# sourceMappingURL=security.d.ts.map

package/dist/lib/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/lib/security.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,qBAAa,aAAa;IACxB;;;;;;OAMG;IACH,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,MAAM;IA2BvE;;;;OAIG;IACH,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAgBlD;;;;;OAKG;IACH,MAAM,CAAC,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAmBnD;;;;OAIG;IACH,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAMvD;;;;OAIG;IACH,MAAM,CAAC,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAU7D;;;;OAIG;IACH,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAWnD;;;;OAIG;IACH,MAAM,CAAC,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;CAG1D"}