@frontmcp/uipack 0.6.3 → 0.7.2

package/esm/renderers/index.mjs

@@ -8,31 +8,18 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
-// libs/uipack/src/utils/escape-html.ts
-function escapeHtml(str) {
-  if (str === null || str === void 0) {
-    return "";
-  }
-  const s = String(str);
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
-function escapeJsString(str) {
-  return str.replace(/\\/g, "\\\\").replace(/'/g, "\\'").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
-function escapeScriptClose(jsonString) {
-  return jsonString.replace(/<\//g, "<\\/");
-}
-var init_escape_html = __esm({
-  "libs/uipack/src/utils/escape-html.ts"() {
-    "use strict";
-  }
-});
-
 // libs/uipack/src/utils/index.ts
+import {
+  safeStringify,
+  escapeHtml,
+  escapeHtmlAttr,
+  escapeJsString,
+  escapeScriptClose,
+  safeJsonForScript
+} from "@frontmcp/utils";
 var init_utils = __esm({
   "libs/uipack/src/utils/index.ts"() {
     "use strict";
-    init_escape_html();
   }
 });
 
@@ -881,6 +868,7 @@ var CLAUDE_PLATFORM = {
 };
 
 // libs/uipack/src/renderers/utils/detect.ts
+var MAX_TEMPLATE_LENGTH = 5e4;
 function isReactComponent(value) {
   if (typeof value !== "function") {
     return false;
@@ -909,6 +897,9 @@ function isTemplateBuilderFunction(fn) {
   return true;
 }
 function containsJsx(source) {
+  if (source.length > MAX_TEMPLATE_LENGTH) {
+    return false;
+  }
   if (/<[A-Z][a-zA-Z0-9]*(\s|>|\/)/.test(source)) {
     return true;
   }
@@ -933,6 +924,9 @@ function containsJsx(source) {
   return false;
 }
 function containsMdxSyntax(source) {
+  if (source.length > MAX_TEMPLATE_LENGTH) {
+    return false;
+  }
   if (/<[A-Z][a-zA-Z0-9]*/.test(source)) {
     return true;
   }

package/esm/runtime/index.mjs

@@ -8,25 +8,18 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
-// libs/uipack/src/utils/escape-html.ts
-function escapeHtml(str) {
-  if (str === null || str === void 0) {
-    return "";
-  }
-  const s = String(str);
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
-var init_escape_html = __esm({
-  "libs/uipack/src/utils/escape-html.ts"() {
-    "use strict";
-  }
-});
-
 // libs/uipack/src/utils/index.ts
+import {
+  safeStringify,
+  escapeHtml,
+  escapeHtmlAttr,
+  escapeJsString,
+  escapeScriptClose,
+  safeJsonForScript
+} from "@frontmcp/utils";
 var init_utils = __esm({
   "libs/uipack/src/utils/index.ts"() {
     "use strict";
-    init_escape_html();
   }
 });
 
@@ -1756,7 +1749,11 @@ FrontMcpBridge.prototype._setupDataToolCallHandler = function() {
 };
 `.trim();
 }
+var MAX_MINIFY_CODE_LENGTH = 5e5;
 function minifyJS(code) {
+  if (code.length > MAX_MINIFY_CODE_LENGTH) {
+    return code;
+  }
   return code.replace(/\/\*[\s\S]*?\*\//g, "").replace(/\/\/.*$/gm, "").replace(/\s+/g, " ").replace(/\s*([{};,:()[\]])\s*/g, "$1").replace(/;\}/g, "}").trim();
 }
 function generatePlatformBundle(platform, options = {}) {
@@ -2910,7 +2907,11 @@ function detectPIIType(value) {
   if (isIPv4(value)) return "IP";
   return null;
 }
+var MAX_PII_TEXT_LENGTH = 1e5;
 function redactPIIFromText(text) {
+  if (text.length > MAX_PII_TEXT_LENGTH) {
+    return text;
+  }
   let result = text;
   result = result.replace(PII_PATTERNS.creditCardInText, REDACTION_TOKENS.CARD);
   result = result.replace(PII_PATTERNS.ssnInText, REDACTION_TOKENS.ID);

package/esm/theme/index.mjs

@@ -679,7 +679,15 @@ function buildStyleBlock(theme) {
 
 // libs/uipack/src/theme/css-to-theme.ts
 var COLOR_VAR_REGEX = /--(color-[\w-]+):\s*([^;]+);/g;
+var MAX_CSS_INPUT_LENGTH = 1e5;
 function cssToTailwindTheme(userCss) {
+  if (userCss.length > MAX_CSS_INPUT_LENGTH) {
+    return {
+      themeBlock: "",
+      remainingCss: userCss,
+      colorVars: /* @__PURE__ */ new Map()
+    };
+  }
   const colorVars = /* @__PURE__ */ new Map();
   const regex = new RegExp(COLOR_VAR_REGEX.source, "g");
   let match;

package/esm/tool-template/index.mjs

@@ -8,25 +8,18 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
-// libs/uipack/src/utils/escape-html.ts
-function escapeHtml(str) {
-  if (str === null || str === void 0) {
-    return "";
-  }
-  const s = String(str);
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
-var init_escape_html = __esm({
-  "libs/uipack/src/utils/escape-html.ts"() {
-    "use strict";
-  }
-});
-
 // libs/uipack/src/utils/index.ts
+import {
+  safeStringify,
+  escapeHtml,
+  escapeHtmlAttr,
+  escapeJsString,
+  escapeScriptClose,
+  safeJsonForScript
+} from "@frontmcp/utils";
 var init_utils = __esm({
   "libs/uipack/src/utils/index.ts"() {
     "use strict";
-    init_escape_html();
   }
 });
 
@@ -1456,7 +1449,11 @@ FrontMcpBridge.prototype._setupDataToolCallHandler = function() {
 };
 `.trim();
 }
+var MAX_MINIFY_CODE_LENGTH = 5e5;
 function minifyJS(code) {
+  if (code.length > MAX_MINIFY_CODE_LENGTH) {
+    return code;
+  }
   return code.replace(/\/\*[\s\S]*?\*\//g, "").replace(/\/\/.*$/gm, "").replace(/\s+/g, " ").replace(/\s*([{};,:()[\]])\s*/g, "$1").replace(/;\}/g, "}").trim();
 }
 function generatePlatformBundle(platform, options = {}) {
@@ -2581,7 +2578,11 @@ function detectPIIType(value) {
   if (isIPv4(value)) return "IP";
   return null;
 }
+var MAX_PII_TEXT_LENGTH = 1e5;
 function redactPIIFromText(text) {
+  if (text.length > MAX_PII_TEXT_LENGTH) {
+    return text;
+  }
   let result = text;
   result = result.replace(PII_PATTERNS.creditCardInText, REDACTION_TOKENS.CARD);
   result = result.replace(PII_PATTERNS.ssnInText, REDACTION_TOKENS.ID);
@@ -2873,6 +2874,7 @@ function buildDataInjectionScript(options) {
 init_utils();
 
 // libs/uipack/src/renderers/utils/detect.ts
+var MAX_TEMPLATE_LENGTH = 5e4;
 function isReactComponent(value) {
   if (typeof value !== "function") {
     return false;
@@ -2901,6 +2903,9 @@ function isTemplateBuilderFunction(fn) {
   return true;
 }
 function containsJsx(source) {
+  if (source.length > MAX_TEMPLATE_LENGTH) {
+    return false;
+  }
   if (/<[A-Z][a-zA-Z0-9]*(\s|>|\/)/.test(source)) {
     return true;
   }
@@ -2925,6 +2930,9 @@ function containsJsx(source) {
   return false;
 }
 function containsMdxSyntax(source) {
+  if (source.length > MAX_TEMPLATE_LENGTH) {
+    return false;
+  }
   if (/<[A-Z][a-zA-Z0-9]*/.test(source)) {
     return true;
   }

package/esm/typings/index.mjs

@@ -358,7 +358,11 @@ function getSubpathFromSpecifier(specifier) {
   }
   return void 0;
 }
+var MAX_IMPORT_STATEMENT_LENGTH = 2e3;
 function parseImportStatement(statement) {
+  if (statement.length > MAX_IMPORT_STATEMENT_LENGTH) {
+    return null;
+  }
   const namedMatch = /import\s+(?:\{[^}]*\}|\*\s+as\s+\w+|\w+)\s+from\s+['"]([^'"]+)['"]/.exec(statement);
   if (namedMatch) {
     return namedMatch[1];

package/esm/utils/index.mjs

@@ -1,59 +1,12 @@
-// libs/uipack/src/utils/safe-stringify.ts
-function safeStringify(value, space) {
-  const seen = /* @__PURE__ */ new WeakSet();
-  try {
-    return JSON.stringify(
-      value,
-      (_key, val) => {
-        if (typeof val === "object" && val !== null) {
-          if (seen.has(val)) return "[Circular]";
-          seen.add(val);
-        }
-        return val;
-      },
-      space
-    );
-  } catch {
-    return JSON.stringify({ error: "Output could not be serialized" });
-  }
-}
-
-// libs/uipack/src/utils/escape-html.ts
-function escapeHtml(str) {
-  if (str === null || str === void 0) {
-    return "";
-  }
-  const s = String(str);
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
-function escapeHtmlAttr(str) {
-  return str.replace(/&/g, "&amp;").replace(/"/g, "&quot;");
-}
-function escapeJsString(str) {
-  return str.replace(/\\/g, "\\\\").replace(/'/g, "\\'").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
-function escapeScriptClose(jsonString) {
-  return jsonString.replace(/<\//g, "<\\/");
-}
-function safeJsonForScript(value) {
-  if (value === void 0) {
-    return "null";
-  }
-  try {
-    const jsonString = JSON.stringify(value, (_key, val) => {
-      if (typeof val === "bigint") {
-        return val.toString();
-      }
-      return val;
-    });
-    if (jsonString === void 0) {
-      return "null";
-    }
-    return escapeScriptClose(jsonString);
-  } catch {
-    return '{"error":"Value could not be serialized"}';
-  }
-}
+// libs/uipack/src/utils/index.ts
+import {
+  safeStringify,
+  escapeHtml,
+  escapeHtmlAttr,
+  escapeJsString,
+  escapeScriptClose,
+  safeJsonForScript
+} from "@frontmcp/utils";
 export {
   escapeHtml,
   escapeHtmlAttr,

package/esm/validation/index.mjs

@@ -1,11 +1,12 @@
-// libs/uipack/src/utils/escape-html.ts
-function escapeHtml(str) {
-  if (str === null || str === void 0) {
-    return "";
-  }
-  const s = String(str);
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
+// libs/uipack/src/utils/index.ts
+import {
+  safeStringify,
+  escapeHtml,
+  escapeHtmlAttr,
+  escapeJsString,
+  escapeScriptClose,
+  safeJsonForScript
+} from "@frontmcp/utils";
 
 // libs/uipack/src/validation/error-box.ts
 var errorIcon = `<svg class="w-5 h-5 flex-shrink-0" fill="none" stroke="currentColor" viewBox="0 0 24 24" aria-hidden="true">

package/handlebars/index.js

@@ -39,7 +39,7 @@ __export(handlebars_exports, {
   createHandlebarsRenderer: () => createHandlebarsRenderer,
   defaultValue: () => defaultValue,
   eq: () => eq,
-  escapeHtml: () => escapeHtml,
+  escapeHtml: () => import_utils.escapeHtml,
   extractAll: () => extractAll,
   extractExpressions: () => extractExpressions,
   extractInputPaths: () => extractInputPaths,
@@ -76,14 +76,8 @@ __export(handlebars_exports, {
 });
 module.exports = __toCommonJS(handlebars_exports);
 
-// libs/uipack/src/utils/escape-html.ts
-function escapeHtml(str) {
-  if (str === null || str === void 0) {
-    return "";
-  }
-  const s = String(str);
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
+// libs/uipack/src/utils/index.ts
+var import_utils = require("@frontmcp/utils");
 
 // libs/uipack/src/handlebars/helpers.ts
 function formatDate(date, format) {
@@ -266,7 +260,7 @@ function classNames(...classes) {
 }
 var builtinHelpers = {
   // Escaping
-  escapeHtml,
+  escapeHtml: import_utils.escapeHtml,
   // Formatting
   formatDate,
   formatCurrency,