Fix duplicated query string and hash in bare-domain links

[hyldmo]

The bug

When a URL's host is followed directly by ? or # with no path, the shortened text repeats the query string / hash:

Input	Shortened (before)	Expected
https://example.com?foo=bar	example.com?foo=bar?foo=bar	example.com?foo=bar
https://example.com#frag	example.com#frag#frag	example.com#frag

This is visible in the wild via Refined GitHub's shorten-links feature: a comment containing a bare-domain link with a query string (e.g. a CI preview-environment link like https://sub.example.com?preview_id=123) renders its link text with the query string twice, while the href stays correct.

Root cause

origin is parsed manually to avoid encoding/punycode issues:

const origin = href.split('/', 3).join('/');

This assumes a scheme://host/… shape. When there is no / between the host and the ?/#, the query/hash is absorbed into origin. The bare-domain branch (pathname === '/') then appends url.search / decodeURI(url.hash) a second time, producing the duplication.

A trailing slash (example.com/?foo=bar) makes split('/', 3) stop at the host, so the bug only triggers on the slash-less form — which is why no existing fixture caught it.

The fix

Strip any ?query/#hash from origin so it stays scheme://host[:port]:

-const origin = href.split('/', 3).join('/');
+const origin = href.split('/', 3).join('/').replace(/[?#].*/, '');

The replace is a no-op for any URL that has a path (i.e. every previously-handled case), so all existing snapshots are unchanged — the snapshot diff is purely additive.

Tests

Added bare-domain regression fixtures covering query + hash, across https (scheme stripped), http (scheme retained), www, and the already-working trailing-slash variant. npm test (xo + tsd + vitest, 141 tests) passes.