@dcupl/common 2.0.0-beta.23 → 2.0.0-beta.24

package/dist/esm/index.d.ts

@@ -21,5 +21,6 @@ export * from './redact-url.js';
 export * from './resource-id.js';
 export * from './scheduling.js';
 export * from './script.controller.js';
+export * from './script-compiler.js';
 export * from './template-parser.js';
 export * from './types/index.js';

package/dist/esm/index.js

@@ -41,7 +41,7 @@ const b = {
       return performance.getEntriesByType(i);
   }
 };
-class qe {
+class Fe {
   data;
   enabled = !1;
   constructor() {
@@ -408,7 +408,7 @@ let X = class z {
     return { addedNodes: s, removedNodes: n, addedEdges: c, removedEdges: u, kindChanges: f };
   }
 };
-class Fe {
+class Pe {
   graph;
   nodeIndex;
   constructor() {
@@ -800,7 +800,7 @@ class g {
   }
 }
 const Y = new g();
-class Pe {
+class _e {
   constructor(e) {
     this.enabled = e, this.cache = /* @__PURE__ */ new Map(), this.cacheDependencies = /* @__PURE__ */ new Map();
   }
@@ -943,7 +943,7 @@ class Pe {
 const j = (i, e = "") => {
   if (!(typeof i != "string" || !i.startsWith("/") || !i.endsWith("/")))
     return { pattern: i.slice(1, -1), flags: e };
-}, _e = (i, e = "") => `${i}#${e}`, ze = (i) => `${i.gt}_${i.gte}_${i.lt}_${i.lte}_${i.eq}_${i.ne}`, je = (i) => `${i.gt}_${i.gte}_${i.lt}_${i.lte}_${i.eq}_${i.ne}`, Be = (i, e) => {
+}, ze = (i, e = "") => `${i}#${e}`, je = (i) => `${i.gt}_${i.gte}_${i.lt}_${i.lte}_${i.eq}_${i.ne}`, Be = (i) => `${i.gt}_${i.gte}_${i.lt}_${i.lte}_${i.eq}_${i.ne}`, Le = (i, e) => {
   const t = typeof e == "function" ? e : (r) => r[e];
   return [
     ...i.reduce((r, s) => {
@@ -951,7 +951,7 @@ const j = (i, e = "") => {
       return r.has(n) || r.set(n, s), r;
     }, /* @__PURE__ */ new Map()).values()
   ];
-}, Le = (i, e) => i.reduce(function(t, r) {
+}, Ue = (i, e) => i.reduce(function(t, r) {
   const s = typeof e == "function" ? e(r) : r[e];
   return Object.prototype.hasOwnProperty.call(t, s) || (t[s] = []), t[s].push(r), t;
 }, {});
@@ -961,7 +961,7 @@ function ee(i = 10) {
   for (let r = 0; r < i; r++) e += t.charAt(Math.floor(Math.random() * t.length));
   return e;
 }
-const Ue = (i) => i.replace(/\/+$/, ""), te = (i) => typeof i != "string" ? "" : i.replace(/[[\]{}()*+?.,\\^$|#]/g, "\\$&"), We = (i) => typeof i != "string" ? "" : i.replace(/\\([[\]{}()*+?.,\\^$|#])/g, "$1"), Ve = (i, e) => {
+const We = (i) => i.replace(/\/+$/, ""), te = (i) => typeof i != "string" ? "" : i.replace(/[[\]{}()*+?.,\\^$|#]/g, "\\$&"), Ve = (i) => typeof i != "string" ? "" : i.replace(/\\([[\]{}()*+?.,\\^$|#])/g, "$1"), He = (i, e) => {
   try {
     return re(i, e) >= 0;
   } catch {
@@ -978,7 +978,7 @@ const Ue = (i) => i.replace(/\/+$/, ""), te = (i) => typeof i != "string" ? "" :
   }
   return 0;
 }, T = (i) => /^\d+(\.\d+){0,2}$/.test(i);
-class He {
+class Je {
   key;
   parentCd;
   dcuplInitOptions;
@@ -1037,7 +1037,7 @@ const B = (i, e) => e ? typeof structuredClone < "u" ? structuredClone(i) : v(i)
   } catch {
     return n;
   }
-}, Je = (i) => (t, r, s) => {
+}, Ze = (i) => (t, r, s) => {
   const n = s.value;
   return s.value = function(...o) {
     const a = b.now(), c = this.cdRef, u = B(i, !0);
@@ -1053,7 +1053,7 @@ const B = (i, e) => e ? typeof structuredClone < "u" ? structuredClone(i) : v(i)
     return u.method = r, u.args = o, l && typeof l == "object" && "then" in l ? l.then((h) => q(this, c, u, a, f, h)) : q(this, c, u, a, f, l);
   }, s;
 };
-function Ze(i, e, t, r) {
+function Xe(i, e, t, r) {
   t.max || (t.max = 20);
   const s = [], n = t.transform ? r.transformValue(t.value, t.transform) : t.value;
   for (const [o, a] of e.entries()) {
@@ -1180,7 +1180,7 @@ function ce(i) {
   );
   return ne(e) ? e.getFullYear() !== i.year || e.getMonth() !== i.month - 1 || e.getDate() !== i.day ? /* @__PURE__ */ new Date(NaN) : e : /* @__PURE__ */ new Date(NaN);
 }
-function Xe(i, e, t) {
+function Ye(i, e, t) {
   if (i = i.trim(), e === "t") {
     const a = Number(i);
     return isNaN(a) ? /* @__PURE__ */ new Date(NaN) : new Date(a * 1e3);
@@ -2375,7 +2375,7 @@ class L {
   }
 }
 const N = new L();
-function Ye(i, e, t, r, s, n, o) {
+function et(i, e, t, r, s, n, o) {
   const a = t.excludeGroup ?? s, c = N.removeQuery({ groupKey: a }, v(r)), u = o.queryData(i, c, !1, n), f = e ? [...e.keys()] : [], d = new Set(f), l = n.get(s) ?? /* @__PURE__ */ new Map();
   if (!t.excludeUnresolved)
     for (const p of l.keys())
@@ -2856,7 +2856,7 @@ const be = /^\d{4}-\d{2}-\d{2}(T\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:\d{2})?
     });
   }
   return { properties: c, diagnostics: u };
-}, et = (i, e = !1) => Ee(i, typeof e == "boolean" ? { deep: e } : e).properties, Ne = (i) => Number(i) === i && i % 1 === 0, Ce = (i) => Number(i) === i && i % 1 !== 0, $e = (i) => {
+}, tt = (i, e = !1) => Ee(i, typeof e == "boolean" ? { deep: e } : e).properties, Ne = (i) => Number(i) === i && i % 1 === 0, Ce = (i) => Number(i) === i && i % 1 !== 0, $e = (i) => {
   switch (typeof i) {
     case "string":
       return "string";
@@ -2869,7 +2869,7 @@ const be = /^\d{4}-\d{2}-\d{2}(T\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:\d{2})?
     default:
       return "any";
   }
-}, tt = (i, e) => {
+}, rt = (i, e) => {
   const t = te(i.text || ""), r = e?.attributeKey || i.filterKey;
   let s;
   const n = e?.comparisonType || "containsIgnoreCase";
@@ -2933,7 +2933,7 @@ const be = /^\d{4}-\d{2}-\d{2}(T\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:\d{2})?
       }
     ]
   }), s;
-}, rt = (i, e) => {
+}, st = (i, e) => {
   const t = e?.attributeKey || i.filterKey;
   return {
     groupKey: i.filterKey,
@@ -2946,7 +2946,7 @@ const be = /^\d{4}-\d{2}-\d{2}(T\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:\d{2})?
       }
     ]
   };
-}, st = (i, e) => {
+}, nt = (i, e) => {
   const t = e?.attributeKey || i.filterKey, r = {
     groupKey: i.filterKey,
     queries: []
@@ -2961,7 +2961,7 @@ const be = /^\d{4}-\d{2}-\d{2}(T\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:\d{2})?
     operator: "eq",
     options: { invert: !0 }
   })), typeof i.gt < "u" && (r.groupType = "and", r.queries.push({ attribute: t, value: i.gt, operator: "gt" })), typeof i.lt < "u" && (r.groupType = "and", r.queries.push({ attribute: t, value: i.lt, operator: "lt" })), typeof i.gte < "u" && (r.groupType = "and", r.queries.push({ attribute: t, value: i.gte, operator: "gte" })), typeof i.lte < "u" && (r.groupType = "and", r.queries.push({ attribute: t, value: i.lte, operator: "lte" })), r;
-}, nt = (i, e) => {
+}, it = (i, e) => {
   const t = e?.attributeKey || i.filterKey, r = {
     groupKey: i.filterKey,
     queries: []
@@ -2974,8 +2974,8 @@ const be = /^\d{4}-\d{2}-\d{2}(T\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:\d{2})?
       operator: "eq"
     });
   }), r;
-}, it = (i) => !(typeof i.modelKey != "string" || !Array.isArray(i.queries));
-class ot {
+}, ot = (i) => !(typeof i.modelKey != "string" || !Array.isArray(i.queries));
+class at {
   constructor(e, t, r) {
     this.scriptController = e, this.globalItemService = t, this.modelParser = r;
   }
@@ -3365,7 +3365,7 @@ const Oe = /* @__PURE__ */ new Set([
   "manager-key",
   "sdk-key"
 ]);
-function at(i) {
+function ct(i) {
   const e = i.indexOf("?");
   if (e < 0) return i;
   const t = i.slice(e + 1).split("&").map((r) => {
@@ -3388,7 +3388,7 @@ function M(i, e = 0) {
   });
   return `${Re}${t}`;
 }
-function ct(i) {
+function ut(i) {
   const e = /* @__PURE__ */ new Map(), t = /* @__PURE__ */ new Set();
   return i.map((r) => {
     const s = `${r.key ?? ""}|${r.type}|${r.rawUrl ?? r.url}|${r.model ?? ""}`;
@@ -3398,7 +3398,7 @@ function ct(i) {
     return e.set(s, n + 1), t.add(o), o;
   });
 }
-function ut() {
+function ft() {
   const i = globalThis;
   return typeof i.scheduler?.yield == "function" ? i.scheduler.yield() : typeof i.setImmediate == "function" ? new Promise((e) => i.setImmediate(() => e())) : typeof i.MessageChannel == "function" ? new Promise((e) => {
     const t = new i.MessageChannel();
@@ -3407,9 +3407,14 @@ function ut() {
     }, t.port2.postMessage(null);
   }) : new Promise((e) => setTimeout(e, 0));
 }
-class ft {
+const Te = (i, e) => new Function(...e, i);
+class dt {
   scripts = /* @__PURE__ */ new Map();
   scriptFunctions = /* @__PURE__ */ new Map();
+  /** How script text becomes a function; hosts running untrusted code swap in a sandboxed compiler. */
+  compiler = Te;
+  /** `false` refuses to run any script; set from `DcuplInitOptions.scripting.enabled`. */
+  enabled = !0;
   constructor() {
   }
   keys() {
@@ -3433,7 +3438,7 @@ class ft {
     const r = this.getScript(e);
     if (!r)
       throw new Error(`Script ${e} not found`);
-    const s = this.getWrapperScript(r), n = new Function("script_type", ...t, s);
+    const s = this.getWrapperScript(r), n = this.compiler(s, ["script_type", ...t]);
     return this.scriptFunctions.set(e, n), n;
   }
   getWrapperScript(e) {
@@ -3443,6 +3448,8 @@ class ft {
       `;
   }
   executeScript(e, t, r) {
+    if (!this.enabled)
+      throw new Error("Scripting is disabled for this dcupl instance");
     if (!this.getScript(e))
       throw new Error(`Script ${e} not found`);
     r.context || (r.context = r.options || {});
@@ -3450,10 +3457,10 @@ class ft {
     return this.getScriptAsFn(e, n)(t, ...o);
   }
 }
-const dt = (i, e) => i ? (e || (e = {}), i.replace(/\$\{(.*?)\}/g, (t, r) => I(e, r.trim(), ""))) : "", lt = (i) => {
+const lt = (i, e) => i ? (e || (e = {}), i.replace(/\$\{(.*?)\}/g, (t, r) => I(e, r.trim(), ""))) : "", ht = (i) => {
   const e = /* @__PURE__ */ new Set();
   return i.replace(/\$\{(.*?)\}/g, (r, s) => (e.add(s.trim()), "")), { variables: Array.from(e).map((r) => ({ name: r })) };
-}, ht = [
+}, pt = [
   "any",
   "Array<date>",
   "Array<float>",
@@ -3465,7 +3472,7 @@ const dt = (i, e) => i ? (e || (e = {}), i.replace(/\$\{(.*?)\}/g, (t, r) => I(e
   "int",
   "json",
   "string"
-], pt = ["int", "float", "Array<int>", "Array<float>"], gt = ["date", "Array<date>"], yt = [
+], gt = ["int", "float", "Array<int>", "Array<float>"], yt = ["date", "Array<date>"], mt = [
   "eq",
   "in",
   "find",
@@ -3479,66 +3486,67 @@ const dt = (i, e) => i ? (e || (e = {}), i.replace(/\$\{(.*?)\}/g, (t, r) => I(e
 ];
 export {
   Ge as AUTHORED_RESOURCE_ID_PREFIX,
-  qe as AnalyticsController,
-  Fe as AttributeDependencyGraph,
-  Pe as CacheController,
-  He as ChangeDetector,
+  Fe as AnalyticsController,
+  Pe as AttributeDependencyGraph,
+  _e as CacheController,
+  Je as ChangeDetector,
   Re as DERIVED_RESOURCE_ID_PREFIX,
-  gt as DatePropertyTypes,
+  yt as DatePropertyTypes,
   L as DcuplQueryBuilder,
-  yt as DcuplQueryOperatorsAsArray,
+  mt as DcuplQueryOperatorsAsArray,
   de as DeepQueryService,
   X as DependencyGraph,
   xe as IndicesController,
   g as Logger,
-  pt as NumberPropertyTypes,
-  ht as PropertyTypesAsArray,
-  ot as QueryManager,
-  ft as ScriptController,
+  gt as NumberPropertyTypes,
+  pt as PropertyTypesAsArray,
+  at as QueryManager,
+  dt as ScriptController,
   B as clone,
   Ke as coerceStringType,
   re as compareVersions,
-  Ze as computeSuggestions,
+  Xe as computeSuggestions,
   m as deepQueryService,
+  Te as defaultScriptCompiler,
   te as escapeRegExp,
-  dt as evaluateTemplate,
-  rt as generateBooleanQuery,
+  lt as evaluateTemplate,
+  st as generateBooleanQuery,
   ee as generateKey,
-  st as generateNumberAndDateQuery,
-  nt as generateReferenceQuery,
-  tt as generateTextQuery,
+  nt as generateNumberAndDateQuery,
+  it as generateReferenceQuery,
+  rt as generateTextQuery,
   C as getAggregation,
-  je as getDateConstraintUid,
+  Be as getDateConstraintUid,
   $e as getDcuplPropertyTypeForNativeType,
   w as getDeepPathValues,
   me as getDistinct,
-  Ye as getFacets,
-  _e as getFilterEntryId,
-  ze as getNumberConstraintUid,
-  et as getPropertiesForData,
-  Le as groupBy,
-  Ve as hasMinimumVersion,
+  et as getFacets,
+  ze as getFilterEntryId,
+  je as getNumberConstraintUid,
+  tt as getPropertiesForData,
+  Ue as groupBy,
+  He as hasMinimumVersion,
   Ee as inferModel,
   se as isDateInstance,
   Ce as isFloat,
   Ne as isInt,
   ne as isValidDate,
-  it as isValidQueryStatement,
+  ot as isValidQueryStatement,
   T as isValidVersion,
   Y as logger,
   ke as looksDateLike,
-  Xe as parseDate,
+  Ye as parseDate,
   j as parseRegexLiteral,
-  lt as parseTemplate,
+  ht as parseTemplate,
   b as perf,
   U as pivot,
-  at as redactUrl,
-  Ue as removeTrailingSlash,
+  ct as redactUrl,
+  We as removeTrailingSlash,
   M as resolveResourceId,
-  ct as resolveResourceIds,
-  Je as trigger,
-  We as unescapeRegExp,
-  Be as uniqBy,
-  ut as yieldToEventLoop
+  ut as resolveResourceIds,
+  Ze as trigger,
+  Ve as unescapeRegExp,
+  Le as uniqBy,
+  ft as yieldToEventLoop
 };
 //# sourceMappingURL=index.js.map