@farcaster/frame-core 0.0.29 → 0.0.32

package/esm/schemas/shared.d.ts

@@ -1,53 +1,39 @@
-import type { z } from 'zod'
-export declare const secureUrlSchema: z.ZodString
-export declare const frameNameSchema: z.ZodString
-export declare const buttonTitleSchema: z.ZodString
-export declare const caip19TokenSchema: z.ZodString
-export declare const hexColorSchema: z.ZodString
-export declare const aspectRatioSchema: z.ZodUnion<
-  [z.ZodLiteral<'1:1'>, z.ZodLiteral<'3:2'>]
->
-export declare const encodedJsonFarcasterSignatureSchema: z.ZodObject<
-  {
-    header: z.ZodString
-    payload: z.ZodString
-    signature: z.ZodString
-  },
-  'strip',
-  z.ZodTypeAny,
-  {
-    header: string
-    payload: string
-    signature: string
-  },
-  {
-    header: string
-    payload: string
-    signature: string
-  }
->
-export type EncodedJsonFarcasterSignatureSchema = z.infer<
-  typeof encodedJsonFarcasterSignatureSchema
->
-export declare const jsonFarcasterSignatureHeaderSchema: z.ZodObject<
-  {
-    fid: z.ZodNumber
-    type: z.ZodLiteral<'app_key'>
-    key: z.ZodString
-  },
-  'strip',
-  z.ZodTypeAny,
-  {
-    type: 'app_key'
-    fid: number
-    key: string
-  },
-  {
-    type: 'app_key'
-    fid: number
-    key: string
-  }
->
-export type JsonFarcasterSignatureHeaderSchema = z.infer<
-  typeof jsonFarcasterSignatureHeaderSchema
->
+import { z } from 'zod';
+export declare const createSimpleStringSchema: ({ max, noSpaces, }?: {
+    max?: number;
+    noSpaces?: boolean;
+}) => z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>;
+export declare const secureUrlSchema: z.ZodString;
+export declare const frameNameSchema: z.ZodString;
+export declare const buttonTitleSchema: z.ZodString;
+export declare const caip19TokenSchema: z.ZodString;
+export declare const hexColorSchema: z.ZodString;
+export declare const aspectRatioSchema: z.ZodUnion<[z.ZodLiteral<"1:1">, z.ZodLiteral<"3:2">]>;
+export declare const encodedJsonFarcasterSignatureSchema: z.ZodObject<{
+    header: z.ZodString;
+    payload: z.ZodString;
+    signature: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    header: string;
+    payload: string;
+    signature: string;
+}, {
+    header: string;
+    payload: string;
+    signature: string;
+}>;
+export type EncodedJsonFarcasterSignatureSchema = z.infer<typeof encodedJsonFarcasterSignatureSchema>;
+export declare const jsonFarcasterSignatureHeaderSchema: z.ZodObject<{
+    fid: z.ZodNumber;
+    type: z.ZodLiteral<"app_key">;
+    key: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "app_key";
+    fid: number;
+    key: string;
+}, {
+    type: "app_key";
+    fid: number;
+    key: string;
+}>;
+export type JsonFarcasterSignatureHeaderSchema = z.infer<typeof jsonFarcasterSignatureHeaderSchema>;

package/esm/schemas/shared.js

@@ -1,30 +1,54 @@
-import { z } from 'zod'
+import { z } from 'zod';
+const SPECIAL_CHARS_PATTERN = /[@#$%^&*+=\/\\|~«»]/;
+const REPEATED_PUNCTUATION_PATTERN = /(!{2,}|\?{2,}|-{2,})/;
+// Unicode ranges for emoji detection:
+// \u{1F300}-\u{1F9FF} - Miscellaneous Symbols, Pictographs, Emoticons, Transport, Map, and Supplemental
+// \u{2702}-\u{27B0} - Dingbats
+// \u{2600}-\u{26FF} - Miscellaneous Symbols
+// \u{2B00}-\u{2BFF} - Miscellaneous Symbols and Arrows
+const EMOJI_PATTERN = /[\u{1F300}-\u{1F9FF}]|[\u{2702}-\u{27B0}]|[\u{2600}-\u{26FF}]|[\u{2B00}-\u{2BFF}]/u;
+export const createSimpleStringSchema = ({ max, noSpaces, } = {}) => {
+    const stringValidations = noSpaces
+        ? z
+            .string()
+            .max(max ?? Number.POSITIVE_INFINITY)
+            .regex(/^\S*$/, 'Spaces are not allowed')
+        : z.string().max(max ?? Number.POSITIVE_INFINITY);
+    return stringValidations
+        .refine((value) => !EMOJI_PATTERN.test(value), {
+        message: 'Emojis and symbols are not allowed',
+    })
+        .refine((value) => !SPECIAL_CHARS_PATTERN.test(value), {
+        message: 'Special characters (@, #, $, %, ^, &, *, +, =, /, \\, |, ~, «, ») are not allowed',
+    })
+        .refine((value) => !REPEATED_PUNCTUATION_PATTERN.test(value), {
+        message: 'Repeated punctuations (!!, ??, --) are not allowed',
+    });
+};
 export const secureUrlSchema = z
-  .string()
-  .url()
-  .startsWith('https://', { message: 'Must be an https url' })
-  .max(512)
-export const frameNameSchema = z.string().max(32)
-export const buttonTitleSchema = z.string().max(32)
-const CAIP_19_REGEX =
-  /^[-a-z0-9]{3,8}:[-_a-zA-Z0-9]{1,32}\/(?:[-a-z0-9]{3,8}:[-.%a-zA-Z0-9]{1,128}(?:\/[-.%a-zA-Z0-9]{1,78})?|native)$/
+    .string()
+    .url()
+    .startsWith('https://', { message: 'Must be an https url' })
+    .max(1024);
+export const frameNameSchema = z.string().max(32);
+export const buttonTitleSchema = z.string().max(32);
+const CAIP_19_REGEX = /^[-a-z0-9]{3,8}:[-_a-zA-Z0-9]{1,32}\/(?:[-a-z0-9]{3,8}:[-.%a-zA-Z0-9]{1,128}(?:\/[-.%a-zA-Z0-9]{1,78})?|native)$/;
 export const caip19TokenSchema = z
-  .string()
-  .regex(CAIP_19_REGEX, { message: 'Invalid CAIP-19 asset ID' })
+    .string()
+    .regex(CAIP_19_REGEX, { message: 'Invalid CAIP-19 asset ID' });
 export const hexColorSchema = z
-  .string()
-  .regex(/^#([0-9A-F]{3}|[0-9A-F]{6})$/i, {
-    message:
-      'Invalid hex color code. It should be in the format #RRGGBB or #RGB.',
-  })
-export const aspectRatioSchema = z.union([z.literal('1:1'), z.literal('3:2')])
+    .string()
+    .regex(/^#([0-9A-F]{3}|[0-9A-F]{6})$/i, {
+    message: 'Invalid hex color code. It should be in the format #RRGGBB or #RGB.',
+});
+export const aspectRatioSchema = z.union([z.literal('1:1'), z.literal('3:2')]);
 export const encodedJsonFarcasterSignatureSchema = z.object({
-  header: z.string(),
-  payload: z.string(),
-  signature: z.string(),
-})
+    header: z.string(),
+    payload: z.string(),
+    signature: z.string(),
+});
 export const jsonFarcasterSignatureHeaderSchema = z.object({
-  fid: z.number(),
-  type: z.literal('app_key'),
-  key: z.string().startsWith('0x'),
-})
+    fid: z.number(),
+    type: z.literal('app_key'),
+    key: z.string().startsWith('0x'),
+});