@jmruthers/pace-core 0.6.9 → 0.6.11

package/dist/chunk-C7ZQ5O4C.js

@@ -1,481 +0,0 @@
-import { formatInTimeZone, getTimezoneAbbreviation } from './chunk-FEJLJNWA.js';
-import { createLogger } from './chunk-TTRFSOKR.js';
-import { z } from 'zod';
-import { createClient } from '@supabase/supabase-js';
-import { parseISO, isValid } from 'date-fns';
-
-// src/utils/context/sessionTracking.ts
-var log = createLogger("SessionTracking");
-function useSessionTracking(supabaseClient, appName) {
-  const resolveAppId = async () => {
-    if (!appName) return void 0;
-    try {
-      const { data, error } = await supabaseClient.from("rbac_apps").select("id").eq("name", appName).eq("is_active", true).single();
-      if (error || !data) {
-        log.warn("App not found or inactive:", appName);
-        return void 0;
-      }
-      return data.id;
-    } catch (error) {
-      log.error("Failed to resolve app ID:", error);
-      return void 0;
-    }
-  };
-  const trackEventSwitch = async (eventId) => {
-    try {
-      const { data: { user } } = await supabaseClient.auth.getUser();
-      if (!user) {
-        log.warn("No authenticated user found for session tracking");
-        return;
-      }
-      const appId = await resolveAppId();
-      const params = {
-        p_session_type: "event_switch",
-        p_event_id: eventId,
-        p_app_id: appId
-      };
-      const { error } = await supabaseClient.rpc("rbac_session_track", {
-        p_user_id: user?.id,
-        p_session_type: params.p_session_type,
-        p_event_id: params.p_event_id,
-        p_app_id: params.p_app_id,
-        p_ip_address: params.ip_address,
-        p_user_agent: params.user_agent
-      });
-      if (error) {
-        log.error("Failed to track event switch session:", error);
-      }
-    } catch (error) {
-      log.error("Failed to track event switch:", error);
-    }
-  };
-  const trackSessionExpired = async () => {
-    try {
-      const { data: { user } } = await supabaseClient.auth.getUser();
-      if (!user) {
-        log.warn("No authenticated user found for session tracking");
-        return;
-      }
-      const appId = await resolveAppId();
-      const params = {
-        p_session_type: "session_expired",
-        p_app_id: appId
-      };
-      const { error } = await supabaseClient.rpc("rbac_session_track", {
-        p_user_id: user?.id,
-        p_session_type: params.p_session_type,
-        p_event_id: params.p_event_id,
-        p_app_id: params.p_app_id,
-        p_ip_address: params.ip_address,
-        p_user_agent: params.user_agent
-      });
-      if (error) {
-        log.error("Failed to track session expiration:", error);
-      }
-    } catch (error) {
-      log.error("Failed to track session expiration:", error);
-    }
-  };
-  return {
-    trackEventSwitch,
-    trackSessionExpired
-  };
-}
-var emailSchema = z.string().min(1, "Email is required").email("Invalid email format").max(254, "Email too long");
-var nameSchema = z.string().min(1, "Name is required").max(100, "Name too long").regex(/^[a-zA-Z\s'-]+$/, "Name contains invalid characters");
-var phoneSchema = z.string().regex(/^\+?[\d\s\-\(\)]+$/, "Invalid phone number format").min(10, "Phone number too short").max(20, "Phone number too long");
-var urlSchema = z.string().url("Invalid URL format").max(2048, "URL too long");
-var dateSchema = z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "Date must be in YYYY-MM-DD format").refine((date) => {
-  const parsed = new Date(date);
-  return !isNaN(parsed.getTime());
-}, "Invalid date");
-var COMMON_PASSWORDS = /* @__PURE__ */ new Set([
-  "password",
-  "123456",
-  "123456789",
-  "qwerty",
-  "abc123",
-  "password123",
-  "admin",
-  "letmein",
-  "welcome",
-  "monkey",
-  "1234567890",
-  "password1"
-]);
-var WEAK_PATTERNS = [
-  /^(.)\1+$/,
-  // All same character
-  /^(012|123|234|345|456|567|678|789|890|987|876|765|654|543|432|321|210)+/,
-  // Sequential numbers
-  /^(abc|bcd|cde|def|efg|fgh|ghi|hij|ijk|jkl|klm|lmn|mno|nop|opq|pqr|qrs|rst|stu|tuv|uvw|vwx|wxy|xyz)+/i
-  // Sequential letters
-];
-z.string().min(8, "Password must be at least 8 characters long").max(128, "Password must not exceed 128 characters").refine(
-  (password) => /[a-z]/.test(password),
-  "Password must contain at least one lowercase letter"
-).refine(
-  (password) => /[A-Z]/.test(password),
-  "Password must contain at least one uppercase letter"
-).refine(
-  (password) => /\d/.test(password),
-  "Password must contain at least one number"
-).refine(
-  (password) => /[!@#$%^&*()_+\-=\[\]{};':"\\|,.<>\/?]/.test(password),
-  "Password must contain at least one special character"
-).refine(
-  (password) => !COMMON_PASSWORDS.has(password.toLowerCase()),
-  "Password is too common. Please choose a stronger password"
-).refine(
-  (password) => !WEAK_PATTERNS.some((pattern) => pattern.test(password)),
-  "Password contains weak patterns. Please choose a more complex password"
-).refine(
-  (password) => {
-    const keyboardPatterns = ["qwerty", "asdfgh", "zxcvbn", "1234567890"];
-    return !keyboardPatterns.some(
-      (pattern) => password.toLowerCase().includes(pattern)
-    );
-  },
-  "Password contains keyboard patterns. Please choose a more secure password"
-);
-var passwordSchema = z.string().min(6, "Password must be at least 6 characters long").max(128, "Password must not exceed 128 characters");
-function calculatePasswordStrength(password) {
-  let score = 0;
-  const feedback = [];
-  if (password.length >= 8) score += 20;
-  else if (password.length >= 6) score += 10;
-  else feedback.push("Use at least 8 characters");
-  if (/[a-z]/.test(password)) score += 15;
-  else feedback.push("Add lowercase letters");
-  if (/[A-Z]/.test(password)) score += 15;
-  else feedback.push("Add uppercase letters");
-  if (/\d/.test(password)) score += 15;
-  else feedback.push("Add numbers");
-  if (/[!@#$%^&*()_+\-=\[\]{};':"\\|,.<>\/?]/.test(password)) score += 15;
-  else feedback.push("Add special characters");
-  if (password.length >= 12) score += 10;
-  if (/[^a-zA-Z0-9]/.test(password)) score += 10;
-  if (COMMON_PASSWORDS.has(password.toLowerCase())) {
-    score -= 30;
-    feedback.push("Avoid common passwords");
-  }
-  if (WEAK_PATTERNS.some((pattern) => pattern.test(password))) {
-    score -= 20;
-    feedback.push("Avoid predictable patterns");
-  }
-  let level;
-  if (score < 30) level = "very-weak";
-  else if (score < 50) level = "weak";
-  else if (score < 70) level = "fair";
-  else if (score < 90) level = "good";
-  else level = "strong";
-  return { score: Math.max(0, Math.min(100, score)), feedback, level };
-}
-var DEFAULT_OPTIONS = {
-  allowHtml: false,
-  allowedTags: [],
-  maxLength: 1e3,
-  trim: true,
-  removeScripts: true,
-  removeEvents: true
-};
-function sanitizeUserInput(input, options = {}) {
-  if (typeof input !== "string") {
-    return "";
-  }
-  const opts = { ...DEFAULT_OPTIONS, ...options };
-  let sanitized = input;
-  if (opts.trim) {
-    sanitized = sanitized.trim();
-  }
-  if (opts.maxLength && sanitized.length > opts.maxLength) {
-    sanitized = sanitized.substring(0, opts.maxLength);
-  }
-  if (!opts.allowHtml) {
-    sanitized = sanitized.replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#x27;").replace(/\//g, "&#x2F;");
-  } else if (opts.allowedTags && opts.allowedTags.length > 0) {
-    const allowedTagsRegex = new RegExp(`<(?!/?(?:${opts.allowedTags.join("|")})s*/?>)[^>]+>`, "gi");
-    sanitized = sanitized.replace(allowedTagsRegex, "");
-  }
-  if (opts.removeScripts) {
-    sanitized = sanitized.replace(/<script[^>]*>.*?<\/script>/gi, "").replace(/javascript:/gi, "").replace(/vbscript:/gi, "").replace(/data:/gi, "");
-  }
-  if (opts.removeEvents) {
-    sanitized = sanitized.replace(/on\w+\s*=/gi, "");
-  }
-  return sanitized;
-}
-function sanitizeEmail(email) {
-  if (typeof email !== "string") {
-    return "";
-  }
-  return email.trim().toLowerCase().replace(/[^\w@.-]/g, "");
-}
-function sanitizeFormData(data, schema, sanitizationRules) {
-  try {
-    if (sanitizationRules && typeof data === "object" && data !== null) {
-      const sanitizedData = { ...data };
-      Object.entries(sanitizationRules).forEach(([field, options]) => {
-        if (typeof sanitizedData[field] === "string") {
-          sanitizedData[field] = sanitizeUserInput(sanitizedData[field], options);
-        }
-      });
-      data = sanitizedData;
-    }
-    const result = schema.parse(data);
-    return { success: true, data: result };
-  } catch (error) {
-    if (error instanceof z.ZodError) {
-      return {
-        success: false,
-        error: error.errors.map((e) => e.message).join(", ")
-      };
-    }
-    return {
-      success: false,
-      error: "Validation failed"
-    };
-  }
-}
-var secureEmailSchema = z.string().min(1, "Email is required").email("Invalid email format").max(254, "Email too long").refine(
-  (email) => {
-    if (!email || typeof email !== "string") return false;
-    const domain = email.split("@")[1];
-    return domain && domain.includes(".") && domain.length > 3;
-  },
-  "Invalid email domain"
-).transform((email) => sanitizeEmail(email));
-z.string().min(1, "Email is required").email("Invalid email format");
-z.string().min(1, "Name is required").max(100, "Name too long").regex(/^[a-zA-Z\s'-]+$/, "Name contains invalid characters");
-z.string().regex(/^[\+]?[1-9][\d]{0,15}$/, "Invalid phone number format");
-z.string().url("Invalid URL format");
-z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "Invalid date format (YYYY-MM-DD)");
-z.object({
-  email: secureEmailSchema,
-  password: z.string().min(1, "Password is required")
-});
-
-// src/utils/app/appConfig.ts
-var currentAppConfig = null;
-function setAppConfig(config) {
-  currentAppConfig = config;
-}
-function getAppConfig() {
-  if (!currentAppConfig) {
-    const appName = import.meta.env.REACT_APP_NAME || "PACE";
-    return {
-      appName,
-      appId: appName
-    };
-  }
-  return currentAppConfig;
-}
-function getCurrentAppName() {
-  return getAppConfig().appName;
-}
-function getCurrentAppId() {
-  return getAppConfig().appId;
-}
-var ALLOWED_FILE_PATTERNS = [
-  /[\/\\]main\.(tsx?|jsx?)(\?|:|\s|$)/i,
-  /[\/\\]App\.(tsx?|jsx?)(\?|:|\s|$)/i,
-  /[\/\\]lib[\/\\]supabase\.(tsx?|jsx?)(\?|:|\s|$)/i,
-  /[\/\\]src[\/\\]supabase\.(tsx?|jsx?)(\?|:|\s|$)/i
-];
-function isAllowedContext() {
-  const isProduction = typeof process !== "undefined" && true || typeof import.meta !== "undefined" && import.meta.env?.MODE === "production" || typeof import.meta !== "undefined" && import.meta.env?.PROD === true;
-  try {
-    const stack = new Error().stack;
-    if (!stack) {
-      return isProduction;
-    }
-    const stackLines = stack.split("\n");
-    for (const line of stackLines) {
-      for (const pattern of ALLOWED_FILE_PATTERNS) {
-        if (pattern.test(line)) {
-          return true;
-        }
-      }
-    }
-    const hasMinifiedFiles = stackLines.some(
-      (line) => /index-[a-zA-Z0-9]+\.js/i.test(line) || /assets\/index-[a-zA-Z0-9]+\.js/i.test(line)
-    );
-    if (hasMinifiedFiles || isProduction) {
-      return true;
-    }
-    return false;
-  } catch {
-    return isProduction;
-  }
-}
-function createBaseClient(supabaseUrl, supabaseKey) {
-  if (!isAllowedContext()) {
-    const error = new Error(
-      "createBaseClient() can only be called from main.tsx, App.tsx, or lib/supabase.ts.\nThis is a security requirement to ensure the base client is only created once and passed to UnifiedAuthProvider.\nSee: https://github.com/jmruthers/pace-core/blob/main/packages/core/docs/standards/00-pace-core-compliance.md"
-    );
-    console.error("[pace-core Security Error]", error);
-    throw error;
-  }
-  return createClient(supabaseUrl, supabaseKey, {
-    auth: {
-      autoRefreshToken: true,
-      persistSession: true,
-      detectSessionInUrl: true,
-      flowType: "pkce"
-    }
-  });
-}
-function formatDate(date) {
-  const dateObj = typeof date === "string" || typeof date === "number" ? new Date(date) : date;
-  return dateObj.toLocaleDateString("en-GB", {
-    year: "numeric",
-    month: "short",
-    day: "numeric"
-  });
-}
-function formatTime(date) {
-  const dateObj = typeof date === "string" || typeof date === "number" ? new Date(date) : date;
-  return dateObj.toLocaleTimeString("en-GB", {
-    hour: "2-digit",
-    minute: "2-digit",
-    hour12: false
-  });
-}
-function formatDateTime(date) {
-  const dateObj = typeof date === "string" || typeof date === "number" ? new Date(date) : date;
-  return dateObj.toLocaleString("en-GB", {
-    year: "numeric",
-    month: "short",
-    day: "numeric",
-    hour: "2-digit",
-    minute: "2-digit",
-    hour12: false
-  });
-}
-function formatCurrency(value, currencyCode = "USD", locale = "en-US") {
-  return new Intl.NumberFormat(locale, {
-    style: "currency",
-    currency: currencyCode
-  }).format(value);
-}
-function formatNumber(value, options = {}, locale = "en-US") {
-  return new Intl.NumberFormat(locale, options).format(value);
-}
-function formatPercent(value, locale = "en-US", options) {
-  let decimals;
-  if (options && typeof options === "object") {
-    if (options.preserveDecimals) {
-      const valueStr = value.toString();
-      const decimalIndex = valueStr.indexOf(".");
-      if (decimalIndex !== -1) {
-        const detectedDecimals = valueStr.length - decimalIndex - 1;
-        const maxDecimals = options.maxDecimals ?? 10;
-        decimals = Math.min(detectedDecimals, maxDecimals);
-      } else {
-        decimals = 0;
-      }
-    } else {
-      decimals = options.decimals ?? 1;
-    }
-  } else {
-    decimals = 1;
-  }
-  return new Intl.NumberFormat(locale, {
-    style: "percent",
-    minimumFractionDigits: decimals,
-    maximumFractionDigits: decimals
-  }).format(value / 100);
-}
-function formatCompactNumber(value, locale = "en-US") {
-  return new Intl.NumberFormat(locale, {
-    notation: "compact",
-    compactDisplay: "short"
-  }).format(value);
-}
-function formatFileSize(bytes) {
-  if (bytes === 0) return "0 Bytes";
-  const k = 1024;
-  const sizes = ["Bytes", "KB", "MB", "GB", "TB", "PB"];
-  const i = Math.floor(Math.log(bytes) / Math.log(k));
-  return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + " " + sizes[i];
-}
-function formatDateTimeForDisplay(utcDate, timezone, options = {}) {
-  if (!utcDate) {
-    return "";
-  }
-  if (!timezone) {
-    return "";
-  }
-  try {
-    const { includeTimezone = true, format: formatStr = "MMM dd, yyyy HH:mm" } = options;
-    let dateObj;
-    if (typeof utcDate === "string") {
-      dateObj = parseISO(utcDate);
-    } else {
-      dateObj = utcDate;
-    }
-    if (!isValid(dateObj)) {
-      return "";
-    }
-    const formatted = formatInTimeZone(dateObj, timezone, formatStr);
-    if (includeTimezone) {
-      const tzAbbr = getTimezoneAbbreviation(dateObj, timezone);
-      return `${formatted} (${tzAbbr})`;
-    }
-    return formatted;
-  } catch {
-    return "";
-  }
-}
-function formatDateOnlyForDisplay(utcDate) {
-  if (!utcDate) {
-    return "";
-  }
-  try {
-    let dateObj;
-    if (typeof utcDate === "string") {
-      dateObj = parseISO(utcDate);
-    } else {
-      dateObj = utcDate;
-    }
-    if (!isValid(dateObj)) {
-      return "";
-    }
-    return dateObj.toLocaleDateString("en-GB", {
-      year: "numeric",
-      month: "long",
-      day: "numeric"
-    });
-  } catch {
-    return "";
-  }
-}
-function formatDateTimeForTable(utcDate, timezone) {
-  return formatDateTimeForDisplay(utcDate, timezone, {
-    includeTimezone: true,
-    format: "MMM dd, yyyy HH:mm"
-  });
-}
-function formatDateTimeForMap(utcDate, timezone) {
-  if (!utcDate || !timezone) {
-    return "";
-  }
-  try {
-    let dateObj;
-    if (typeof utcDate === "string") {
-      dateObj = parseISO(utcDate);
-    } else {
-      dateObj = utcDate;
-    }
-    if (!isValid(dateObj)) {
-      return "";
-    }
-    const formatted = formatInTimeZone(dateObj, timezone, "MMM dd, HH:mm");
-    const tzAbbr = getTimezoneAbbreviation(dateObj, timezone);
-    return `${formatted} ${tzAbbr}`;
-  } catch {
-    return "";
-  }
-}
-
-export { calculatePasswordStrength, createBaseClient, dateSchema, emailSchema, formatCompactNumber, formatCurrency, formatDate, formatDateOnlyForDisplay, formatDateTime, formatDateTimeForDisplay, formatDateTimeForMap, formatDateTimeForTable, formatFileSize, formatNumber, formatPercent, formatTime, getAppConfig, getCurrentAppId, getCurrentAppName, nameSchema, passwordSchema, phoneSchema, sanitizeFormData, sanitizeUserInput, setAppConfig, urlSchema, useSessionTracking };