@jmruthers/pace-core 0.5.181 → 0.5.183

package/src/utils/sessionTracking.ts

@@ -1,126 +0,0 @@
-import type { SupabaseClient } from '@supabase/supabase-js';
-
-// Define the tracking parameters locally since old RBAC types are removed
-interface TrackUserSessionParams {
-  p_session_type: 'event_switch' | 'session_expired';
-  p_event_id?: string;
-  p_app_id?: string;
-  ip_address?: string;
-  user_agent?: string;
-}
-
-/**
- * Hook for manual session tracking (event switches and session expiration).
- * 
- * Note: Login and logout tracking is automatically handled by UnifiedAuthProvider.
- * You should only use this hook for tracking event switches or session expirations.
- * 
- * @param supabaseClient - Supabase client instance
- * @param appName - Optional application name for tracking
- * @returns Object containing tracking functions for event switches and session expiration
- */
-export function useSessionTracking(supabaseClient: SupabaseClient, appName?: string) {
-  // Resolve app name to app_id
-  const resolveAppId = async (): Promise<string | undefined> => {
-    if (!appName) return undefined;
-    
-    try {
-      const { data, error } = await supabaseClient
-        .from('rbac_apps')
-        .select('id')
-        .eq('name', appName)
-        .eq('is_active', true)
-        .single();
-      
-      if (error || !data) {
-        console.warn('App not found or inactive:', appName);
-        return undefined;
-      }
-      
-      return data.id;
-    } catch (error) {
-      console.error('Failed to resolve app ID:', error);
-      return undefined;
-    }
-  };
-  /**
-   * Track an event switch
-   * @param eventId - ID of the event being switched to
-   */
-  const trackEventSwitch = async (eventId: string) => {
-    try {
-      const { data: { user } } = await supabaseClient.auth.getUser();
-      if (!user) {
-        console.warn('No authenticated user found for session tracking');
-        return;
-      }
-
-      const appId = await resolveAppId();
-
-      const params: TrackUserSessionParams = {
-        p_session_type: 'event_switch',
-        p_event_id: eventId,
-        p_app_id: appId
-      };
-
-      const { error } = await supabaseClient.rpc('rbac_session_track', {
-        p_user_id: user?.id,
-        p_session_type: params.p_session_type,
-        p_event_id: params.p_event_id,
-        p_app_id: params.p_app_id,
-        p_ip_address: params.ip_address,
-        p_user_agent: params.user_agent
-      });
-      
-      if (error) {
-        console.error('Failed to track event switch session:', error);
-      } else {
-        console.log('Event switch session tracked successfully');
-      }
-    } catch (error) {
-      console.error('Failed to track event switch:', error);
-    }
-  };
-
-  /**
-   * Track a session expiration
-   */
-  const trackSessionExpired = async () => {
-    try {
-      const { data: { user } } = await supabaseClient.auth.getUser();
-      if (!user) {
-        console.warn('No authenticated user found for session tracking');
-        return;
-      }
-
-      const appId = await resolveAppId();
-
-      const params: TrackUserSessionParams = {
-        p_session_type: 'session_expired',
-        p_app_id: appId
-      };
-
-      const { error } = await supabaseClient.rpc('rbac_session_track', {
-        p_user_id: user?.id,
-        p_session_type: params.p_session_type,
-        p_event_id: params.p_event_id,
-        p_app_id: params.p_app_id,
-        p_ip_address: params.ip_address,
-        p_user_agent: params.user_agent
-      });
-      
-      if (error) {
-        console.error('Failed to track session expiration:', error);
-      } else {
-        console.log('Session expiration tracked successfully');
-      }
-    } catch (error) {
-      console.error('Failed to track session expiration:', error);
-    }
-  };
-
-  return {
-    trackEventSwitch,
-    trackSessionExpired
-  };
-} 

package/src/utils/validation.ts

@@ -1,111 +0,0 @@
-/**
- * @file Internal utilities for validation module
- * @internal This file contains implementation details that should not be used directly
- */
-
-/**
- * Utility functions for validating data in the application
- */
-
-/**
- * Check if a string is a valid email
- */
-export function isValidEmail(email: string): boolean {
-  const emailPattern = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
-  return emailPattern.test(email);
-}
-
-/**
- * Check if a string is empty (either null, undefined, or just whitespace)
- */
-export function isEmpty(value: string | null | undefined): boolean {
-  return value === null || value === undefined || value.trim() === '';
-}
-
-/**
- * Check if a password meets minimum requirements
- */
-export function isStrongPassword(password: string): boolean {
-  // Minimum 8 characters, at least one uppercase, one lowercase, one number
-  const passwordPattern = /^(?=.*[a-z])(?=.*[A-Z])(?=.*\d).{8,}$/;
-  return passwordPattern.test(password);
-}
-
-/**
- * Check if a URL is valid
- */
-export function isValidUrl(url: string): boolean {
-  try {
-    new URL(url);
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-/**
- * Check if a date string is valid
- */
-export function isValidDate(dateStr: string): boolean {
-  const date = new Date(dateStr);
-  return !isNaN(date.getTime());
-}
-
-/**
- * Check if a value is within a range
- */
-export function isWithinRange(value: number, min: number, max: number): boolean {
-  return value >= min && value <= max;
-}
-
-/**
- * Check if a value matches a specific pattern
- */
-export function matchesPattern(value: string, pattern: RegExp): boolean {
-  return pattern.test(value);
-}
-
-/**
- * Utility function to deep merge objects for schema combination
- * @internal
- */
-export function deepMerge<T extends Record<string, unknown>>(
-  target: T, 
-  source: Record<string, unknown>
-): T {
-  const output = { ...target };
-  
-  if (isObject(target) && isObject(source)) {
-    Object.keys(source).forEach(key => {
-      if (isObject(source[key])) {
-        if (!(key in target)) {
-          Object.assign(output, { [key]: source[key] });
-        } else {
-          // Use a type assertion to safely handle the indexing
-          const targetKey = key as keyof typeof target;
-          const targetValue = target[targetKey];
-          
-          if (isObject(targetValue)) {
-            // Safe cast using type assertion
-            output[targetKey] = deepMerge(
-              targetValue as Record<string, unknown>,
-              source[key] as Record<string, unknown>
-            ) as unknown as T[keyof T];
-          }
-        }
-      } else {
-        Object.assign(output, { [key]: source[key] });
-      }
-    });
-  }
-  
-  return output as T;
-}
-
-/**
- * Type guard to check if a value is a plain object
- * @internal
- */
-export function isObject(item: unknown): item is Record<string, unknown> {
-  return item !== null && typeof item === 'object' && !Array.isArray(item);
-}

package/src/utils/validationUtils.ts

@@ -1,120 +0,0 @@
-
-/**
- * @file Validation utilities
- * 
- * Shared validation utilities with enhanced security
- */
-
-import { z } from 'zod';
-import { sanitizeUserInput, sanitizeFormData, type SanitizationOptions } from './sanitization';
-
-/**
- * Validates user input against a schema with automatic sanitization
- */
-export function validateUserInput<T>(
-  schema: z.ZodSchema<T>, 
-  data: unknown,
-  sanitizationRules?: Record<string, SanitizationOptions>
-): { success: boolean; data?: T; error?: string } {
-  return sanitizeFormData(data, schema, sanitizationRules);
-}
-
-/**
- * Sanitizes user input by removing potentially dangerous characters
- * @deprecated Use sanitizeUserInput from lib/sanitization instead
- */
-export function sanitizeUserInput_deprecated(input: string): string {
-  // Log deprecation warning
-  console.warn('sanitizeUserInput is deprecated. Use sanitizeUserInput from lib/sanitization instead.');
-  return sanitizeUserInput(input);
-}
-
-/**
- * Enhanced email validation with sanitization
- */
-export const emailSchema = z.string()
-  .transform(email => email.toLowerCase().trim())
-  .pipe(z.string().min(1, 'Email is required').email('Invalid email format').max(254, 'Email too long'));
-
-/**
- * Enhanced password validation
- */
-export const passwordSchema = z.string()
-  .min(8, 'Password must be at least 8 characters')
-  .max(128, 'Password too long')
-  .regex(/[A-Z]/, 'Password must contain at least one uppercase letter')
-  .regex(/[a-z]/, 'Password must contain at least one lowercase letter')
-  .regex(/[0-9]/, 'Password must contain at least one number')
-  .regex(/[^A-Za-z0-9]/, 'Password must contain at least one special character');
-
-/**
- * Username validation with sanitization
- */
-export const usernameSchema = z.string()
-  .transform(username => username.toLowerCase().trim())
-  .pipe(z.string().min(3, 'Username must be at least 3 characters').max(30, 'Username too long').regex(/^[a-zA-Z0-9_-]+$/, 'Username can only contain letters, numbers, hyphens, and underscores'));
-
-/**
- * Name validation with sanitization
- */
-export const nameSchema = z.string()
-  .min(1, 'Name is required')
-  .max(100, 'Name too long')
-  .refine(name => {
-    // Check for XSS attempts and other invalid patterns
-    const dangerousPatterns = [
-      /<script/i,
-      /<img/i,
-      /on\w+\s*=/i,
-      /javascript:/i,
-      /data:/i,
-      /vbscript:/i
-    ];
-    
-    return !dangerousPatterns.some(pattern => pattern.test(name));
-  }, 'Name contains invalid characters')
-  .transform(name => sanitizeUserInput(name, { 
-    allowHtml: false, 
-    maxLength: 100, 
-    trim: true 
-  }));
-
-/**
- * Phone number validation with sanitization
- */
-export const phoneSchema = z.string()
-  .min(10, 'Phone number must be at least 10 digits')
-  .max(20, 'Phone number too long')
-  .regex(/^[\+]?[0-9\s\-\(\)\.]+$/, 'Invalid phone number format')
-  .refine(phone => {
-    // Remove all non-digit characters and check length
-    const digitsOnly = phone.replace(/\D/g, '');
-    return digitsOnly.length >= 10 && digitsOnly.length <= 15;
-  }, 'Phone number must be between 10 and 15 digits');
-
-/**
- * URL validation with sanitization
- */
-export const urlSchema = z.string()
-  .min(1, 'URL is required')
-  .max(2048, 'URL too long')
-  .refine(url => {
-    try {
-      const parsed = new URL(url);
-      return ['http:', 'https:'].includes(parsed.protocol);
-    } catch {
-      return false;
-    }
-  }, 'Invalid URL format')
-  .refine(url => {
-    // Additional security checks
-    const dangerousPatterns = [
-      /javascript:/i,
-      /data:/i,
-      /vbscript:/i,
-      /file:/i,
-      /mailto:/i
-    ];
-    
-    return !dangerousPatterns.some(pattern => pattern.test(url));
-  }, 'URL contains invalid protocol');

package/src/validation/index.ts

@@ -1,12 +0,0 @@
-/**
- * @file Validation Module Exports
- * @package @jmruthers/pace-core
- * @module Validation
- * @since 0.1.0
- * 
- * Re-export validation utilities from utils/validation for convenience.
- * This provides a top-level validation entry point.
- */
-
-export * from '../utils/validation';
-