@adminforth/rich-editor 2.0.18 → 2.1.1

package/build.log

@@ -10,5 +10,5 @@ custom/package.json
 custom/quillEditor.vue
 custom/tsconfig.json
 
-sent 35,535 bytes  received 115 bytes  71,300.00 bytes/sec
-total size is 35,118  speedup is 0.99
+sent 35,541 bytes  received 115 bytes  71,312.00 bytes/sec
+total size is 35,118  speedup is 0.98

package/dist/index.d.ts

@@ -14,5 +14,6 @@ export default class RichEditorPlugin extends AdminForthPlugin {
     validateConfigAfterDiscover(adminforth: IAdminForth, resourceConfig: AdminForthResource): void;
     instanceUniqueRepresentation(pluginOptions: any): string;
     generateRecordContext(record: any, maxFields: number, inputFieldLimit: number, partsCount: number): string;
+    private parseBody;
     setupEndpoints(server: IHttpServer): void;
 }

package/dist/index.js

@@ -9,6 +9,10 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 };
 import { AdminForthPlugin, Filters, RateLimiter } from "adminforth";
 import * as cheerio from 'cheerio';
+import { z } from "zod";
+const doCompleteBodySchema = z.object({
+    record: z.record(z.string(), z.unknown()),
+}).strict();
 // options:
 // attachments: {
 //   attachmentResource: 'description_images',
@@ -214,13 +218,28 @@ export default class RichEditorPlugin extends AdminForthPlugin {
         });
         return JSON.stringify(Object.fromEntries(fields));
     }
+    parseBody(schema, body, response) {
+        const parsed = schema.safeParse(body !== null && body !== void 0 ? body : {});
+        if (!parsed.success) {
+            response.setStatus(400, '');
+            return {
+                ok: false,
+                error: { error: 'Request body validation failed', details: parsed.error.issues },
+            };
+        }
+        return { ok: true, data: parsed.data };
+    }
     setupEndpoints(server) {
         server.endpoint({
             method: 'POST',
             path: `/plugin/${this.pluginInstanceId}/doComplete`,
-            handler: (_a) => __awaiter(this, [_a], void 0, function* ({ body, headers }) {
+            handler: (_a) => __awaiter(this, [_a], void 0, function* ({ body, headers, response }) {
                 var _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o;
-                const { record } = body;
+                const parsed = this.parseBody(doCompleteBodySchema, body, response);
+                if ('error' in parsed)
+                    return parsed.error;
+                const data = parsed.data;
+                const { record } = data;
                 if (!record) {
                     return { completion: [] };
                 }
@@ -265,6 +284,11 @@ export default class RichEditorPlugin extends AdminForthPlugin {
                     maxTokens: (_o = (_m = (_l = this.options.completion) === null || _l === void 0 ? void 0 : _l.expert) === null || _m === void 0 ? void 0 : _m.maxTokens) !== null && _o !== void 0 ? _o : 50,
                 });
                 let suggestion = respContent;
+                if (!suggestion) {
+                    return {
+                        completion: []
+                    };
+                }
                 if (suggestion.startsWith(currentVal)) {
                     suggestion = suggestion.slice(currentVal.length);
                 }

package/index.ts

@@ -3,6 +3,11 @@ import type { IAdminForth, IHttpServer, AdminForthResource, AdminUser, IAdminFor
 import type { PluginOptions } from './types.js';
 import { AdminForthPlugin, Filters, RateLimiter } from "adminforth";
 import * as cheerio from 'cheerio';
+import { z } from "zod";
+
+const doCompleteBodySchema = z.object({
+  record: z.record(z.string(), z.unknown()),
+}).strict();
 
 
 // options:
@@ -270,12 +275,31 @@ export default class RichEditorPlugin extends AdminForthPlugin {
     return JSON.stringify(Object.fromEntries(fields));
   }
 
+  private parseBody<T>(
+    schema: z.ZodType<T>,
+    body: unknown,
+    response: { setStatus: (code: number, message: string) => void },
+  ): { ok: true; data: T } | { ok: false; error: { error: string; details: unknown } } {
+    const parsed = schema.safeParse(body ?? {});
+    if (!parsed.success) {
+      response.setStatus(400, '');
+      return {
+        ok: false,
+        error: { error: 'Request body validation failed', details: parsed.error.issues },
+      };
+    }
+    return { ok: true, data: parsed.data };
+  }
+
   setupEndpoints(server: IHttpServer) {
     server.endpoint({
       method: 'POST',
       path: `/plugin/${this.pluginInstanceId}/doComplete`,
-      handler: async ({ body, headers }) => {
-        const { record } = body;
+      handler: async ({ body, headers, response }) => {
+        const parsed = this.parseBody(doCompleteBodySchema, body, response);
+        if ('error' in parsed) return parsed.error;
+        const data = parsed.data;
+        const { record } = data;
 
         if (!record) {
           return { completion: [] };
@@ -333,6 +357,11 @@ export default class RichEditorPlugin extends AdminForthPlugin {
           maxTokens: this.options.completion?.expert?.maxTokens ?? 50,
         });
         let suggestion = respContent
+        if (!suggestion) {
+          return {
+            completion: []
+          };
+        }
         if (suggestion.startsWith(currentVal)) {
           suggestion = suggestion.slice(currentVal.length);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adminforth/rich-editor",
-  "version": "2.0.18",
+  "version": "2.1.1",
   "description": "Rich editor plugin for adminforth",
   "type": "module",
   "main": "dist/index.js",
@@ -23,14 +23,15 @@
   "author": "DevForth (https://devforth.io)",
   "license": "MIT",
   "dependencies": {
-    "cheerio": "^1.0.0"
+    "cheerio": "^1.0.0",
+    "zod": "^4.3.6"
   },
   "peerDependencies": {
-    "adminforth": "^3.6.21"
+    "adminforth": "^3.7.1"
   },
   "devDependencies": {
     "@types/node": "^22.10.7",
-    "adminforth": "^3.6.21",
+    "adminforth": "^3.7.1",
     "semantic-release": "^24.2.1",
     "semantic-release-slack-bot": "^4.0.2",
     "typescript": "^5.7.3"