@allegrocdp/preview 0.1.0-dev.14 → 0.1.0-dev.15

package/dist/cli.js

@@ -28,6 +28,10 @@ window.__ALLEGRO_TEMPLATE_RESOLVER__ = async function (slug) {
 };`;
 
 // src/scenarios.ts
+var SCENARIO_ID_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+function isValidScenarioId(id) {
+  return SCENARIO_ID_PATTERN.test(id);
+}
 function emptyPlacement() {
   return {
     target_selector: null,
@@ -471,7 +475,7 @@ function parsePlacement(raw) {
   if (raw.truncation_unit === "paragraphs") {
     placement.truncation_unit = raw.truncation_unit;
   }
-  if (typeof raw.truncation_count === "number" && Number.isFinite(raw.truncation_count)) {
+  if (typeof raw.truncation_count === "number" && Number.isInteger(raw.truncation_count) && raw.truncation_count > 0) {
     placement.truncation_count = raw.truncation_count;
   }
   if (raw.truncation_style === "cut") {
@@ -504,7 +508,6 @@ function readCustomScenario(scenariosDir, id) {
   if (typeof raw.name === "string" && raw.name.length > 0) {
     base.name = raw.name;
   }
-  base.placement = parsePlacement(raw);
   const hostHtmlPath = join(dir, "host.html");
   if (existsSync(hostHtmlPath)) {
     try {
@@ -512,6 +515,7 @@ function readCustomScenario(scenariosDir, id) {
       base.hostHtml = readFileSync(hostHtmlPath, "utf-8");
       const hostCssPath = join(dir, "host.css");
       base.hostCss = existsSync(hostCssPath) ? readFileSync(hostCssPath, "utf-8") : "";
+      base.placement = parsePlacement(raw);
     } catch (err) {
       base.parseError = err instanceof Error ? err.message : "Failed to read scenario host files";
       return base;
@@ -533,6 +537,12 @@ function scanCustomScenarios(baseDir) {
       if (!existsSync(join(scenariosDir, entry.name, "scenario.json"))) {
         continue;
       }
+      if (!isValidScenarioId(entry.name)) {
+        console.warn(
+          `[allegro-preview] Skipping scenario folder "${entry.name}": name must be a kebab-case slug (lowercase letters, digits, hyphens).`
+        );
+        continue;
+      }
       const scenario = readCustomScenario(scenariosDir, entry.name);
       if (scenario.parseError) {
         console.warn(`[allegro-preview] Skipping scenario "${entry.name}": ${scenario.parseError}`);
@@ -665,7 +675,7 @@ async function startServer(templatePath, port = 0, tenant = "") {
     const slug = typeof req.query.slug === "string" ? req.query.slug : "";
     const tab = typeof req.query.tab === "string" ? req.query.tab : "standalone";
     const sdkParam = typeof req.query.sdk === "string" ? req.query.sdk : void 0;
-    if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(tab)) {
+    if (!isValidScenarioId(tab)) {
       res.status(404).send("Scenario not found");
       return;
     }

package/dist/server.js

@@ -25,6 +25,10 @@ window.__ALLEGRO_TEMPLATE_RESOLVER__ = async function (slug) {
 };`;
 
 // src/scenarios.ts
+var SCENARIO_ID_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+function isValidScenarioId(id) {
+  return SCENARIO_ID_PATTERN.test(id);
+}
 function emptyPlacement() {
   return {
     target_selector: null,
@@ -468,7 +472,7 @@ function parsePlacement(raw) {
   if (raw.truncation_unit === "paragraphs") {
     placement.truncation_unit = raw.truncation_unit;
   }
-  if (typeof raw.truncation_count === "number" && Number.isFinite(raw.truncation_count)) {
+  if (typeof raw.truncation_count === "number" && Number.isInteger(raw.truncation_count) && raw.truncation_count > 0) {
     placement.truncation_count = raw.truncation_count;
   }
   if (raw.truncation_style === "cut") {
@@ -501,7 +505,6 @@ function readCustomScenario(scenariosDir, id) {
   if (typeof raw.name === "string" && raw.name.length > 0) {
     base.name = raw.name;
   }
-  base.placement = parsePlacement(raw);
   const hostHtmlPath = join(dir, "host.html");
   if (existsSync(hostHtmlPath)) {
     try {
@@ -509,6 +512,7 @@ function readCustomScenario(scenariosDir, id) {
       base.hostHtml = readFileSync(hostHtmlPath, "utf-8");
       const hostCssPath = join(dir, "host.css");
       base.hostCss = existsSync(hostCssPath) ? readFileSync(hostCssPath, "utf-8") : "";
+      base.placement = parsePlacement(raw);
     } catch (err) {
       base.parseError = err instanceof Error ? err.message : "Failed to read scenario host files";
       return base;
@@ -530,6 +534,12 @@ function scanCustomScenarios(baseDir) {
       if (!existsSync(join(scenariosDir, entry.name, "scenario.json"))) {
         continue;
       }
+      if (!isValidScenarioId(entry.name)) {
+        console.warn(
+          `[allegro-preview] Skipping scenario folder "${entry.name}": name must be a kebab-case slug (lowercase letters, digits, hyphens).`
+        );
+        continue;
+      }
       const scenario = readCustomScenario(scenariosDir, entry.name);
       if (scenario.parseError) {
         console.warn(`[allegro-preview] Skipping scenario "${entry.name}": ${scenario.parseError}`);
@@ -662,7 +672,7 @@ async function startServer(templatePath, port = 0, tenant = "") {
     const slug = typeof req.query.slug === "string" ? req.query.slug : "";
     const tab = typeof req.query.tab === "string" ? req.query.tab : "standalone";
     const sdkParam = typeof req.query.sdk === "string" ? req.query.sdk : void 0;
-    if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(tab)) {
+    if (!isValidScenarioId(tab)) {
       res.status(404).send("Scenario not found");
       return;
     }
@@ -825,5 +835,8 @@ allegro-preview \u2192 ${url}
 }
 export {
   escapeStyle,
+  parsePlacement,
+  readCustomScenario,
+  scanCustomScenarios,
   startServer
 };

package/package.json

@@ -1,7 +1,7 @@
 {
     "$schema": "https://json.schemastore.org/package.json",
     "name": "@allegrocdp/preview",
-    "version": "0.1.0-dev.14",
+    "version": "0.1.0-dev.15",
     "description": "Local dev server for previewing Allegro templates",
     "type": "module",
     "bin": {