Function wrapUrlsForSlack

server/src/addie/security.ts:223–239

(text: string)

 * Only wraps URLs not already inside Slack link syntax (< >).
 */
export function wrapUrlsForSlack(text: string): string {
  // Match bare URLs (http/https) not already wrapped in < >
  // Use negative lookbehind for < and ensure URL isn't followed by >
  // Also skip URLs inside backtick code spans
  return text.replace(
    /(?<![<`])(https?:\/\/[^\s>)`]+)/g,
    (match, url, offset) => {
      // Check if we're inside a backtick code span
      const before = text.substring(0, offset);
      const backtickCount = (before.match(/`/g) || []).length;
      if (backtickCount % 2 === 1) {
        return match; // Inside code span, don't wrap
      }
      return `<${url}>`;
    }
  );
}

export interface BareJsonGuardResult {
  text: string;