@nestledjs/data-browser 0.1.7 → 0.1.8

package/lib/utils/secure-storage.js

@@ -1,145 +1,214 @@
-const c = "mi-admin-config", a = "1.0";
-const s = (e) => typeof e != "string" ? "" : e.replace(/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/gi, "").replace(/javascript:/gi, "").replace(/on\w+\s*=/gi, "").trim().substring(0, 1e3), f = (e) => Array.isArray(e) ? e.slice(0, 100).map((o) => s(o)).filter((o) => o.length > 0) : [], g = (e) => {
-  if (!e || typeof e != "object") return null;
-  const o = e, n = s(o.orderBy), t = s(o.orderDirection);
-  return !["asc", "desc"].includes(t) || !/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(n) ? null : { orderBy: n, orderDirection: t };
-}, d = (e) => {
-  if (!e || typeof e != "object") return !1;
-  const o = e;
-  if (o.version !== a || !o.models || typeof o.models != "object") return !1;
-  const n = o.models;
-  for (const [t, r] of Object.entries(n)) {
-    if (!/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(t)) return !1;
-    if (r && typeof r == "object") {
-      const l = r;
-      if (l.visibleColumns !== void 0 && !Array.isArray(l.visibleColumns)) return !1;
-      if (l.sortPreference !== void 0) {
-        const u = g(l.sortPreference);
-        if (l.sortPreference !== null && u === null) return !1;
+const ADMIN_CONFIG_KEY = "mi-admin-config";
+const ADMIN_CONFIG_VERSION = "1.0";
+const MAX_CONFIG_SIZE = 5e4;
+const sanitizeString = (value) => {
+  if (typeof value !== "string") return "";
+  return value.replace(/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/gi, "").replace(/javascript:/gi, "").replace(/on\w+\s*=/gi, "").trim().substring(0, 1e3);
+};
+const sanitizeArray = (value) => {
+  if (!Array.isArray(value)) return [];
+  return value.slice(0, 100).map((item) => sanitizeString(item)).filter((item) => item.length > 0);
+};
+const sanitizeSortPreference = (value) => {
+  if (!value || typeof value !== "object") return null;
+  const obj = value;
+  const orderBy = sanitizeString(obj.orderBy);
+  const orderDirection = sanitizeString(obj.orderDirection);
+  if (!["asc", "desc"].includes(orderDirection)) return null;
+  if (!/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(orderBy)) return null;
+  return { orderBy, orderDirection };
+};
+const validateAdminConfig = (config) => {
+  if (!config || typeof config !== "object") return false;
+  const configObj = config;
+  if (configObj.version !== ADMIN_CONFIG_VERSION) return false;
+  if (!configObj.models || typeof configObj.models !== "object") return false;
+  const models = configObj.models;
+  for (const [modelName, modelConfig] of Object.entries(models)) {
+    if (!/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(modelName)) return false;
+    if (modelConfig && typeof modelConfig === "object") {
+      const config2 = modelConfig;
+      if (config2.visibleColumns !== void 0 && !Array.isArray(config2.visibleColumns)) return false;
+      if (config2.sortPreference !== void 0) {
+        const sortPref = sanitizeSortPreference(config2.sortPreference);
+        if (config2.sortPreference !== null && sortPref === null) return false;
       }
-      if (l.searchFields !== void 0 && !Array.isArray(l.searchFields)) return !1;
+      if (config2.searchFields !== void 0 && !Array.isArray(config2.searchFields)) return false;
     }
   }
-  return !0;
-}, i = {
+  return true;
+};
+const SecureAdminLocalStorage = {
   // Get the full admin config with validation
   getConfig: () => {
     try {
-      const e = localStorage.getItem(c);
-      if (!e)
-        return { version: a, models: {} };
-      if (e.length > 5e4)
-        return console.warn("[AdminLocalStorage] Config exceeds size limit, resetting"), localStorage.removeItem(c), { version: a, models: {} };
-      const o = JSON.parse(e);
-      return d(o) ? o : (console.warn("[AdminLocalStorage] Invalid config detected, resetting"), localStorage.removeItem(c), { version: a, models: {} });
-    } catch (e) {
-      console.warn("[AdminLocalStorage] Failed to load config:", e);
+      const stored = localStorage.getItem(ADMIN_CONFIG_KEY);
+      if (!stored) {
+        return { version: ADMIN_CONFIG_VERSION, models: {} };
+      }
+      if (stored.length > MAX_CONFIG_SIZE) {
+        console.warn("[AdminLocalStorage] Config exceeds size limit, resetting");
+        localStorage.removeItem(ADMIN_CONFIG_KEY);
+        return { version: ADMIN_CONFIG_VERSION, models: {} };
+      }
+      const parsed = JSON.parse(stored);
+      if (!validateAdminConfig(parsed)) {
+        console.warn("[AdminLocalStorage] Invalid config detected, resetting");
+        localStorage.removeItem(ADMIN_CONFIG_KEY);
+        return { version: ADMIN_CONFIG_VERSION, models: {} };
+      }
+      return parsed;
+    } catch (error) {
+      console.warn("[AdminLocalStorage] Failed to load config:", error);
       try {
-        localStorage.removeItem(c);
+        localStorage.removeItem(ADMIN_CONFIG_KEY);
       } catch {
       }
-      return { version: a, models: {} };
+      return { version: ADMIN_CONFIG_VERSION, models: {} };
     }
   },
   // Save the full admin config with validation
-  setConfig: (e) => {
+  setConfig: (config) => {
     try {
-      if (!d(e))
-        return console.warn("[AdminLocalStorage] Invalid config provided"), !1;
-      const o = JSON.stringify(e);
-      return o.length > 5e4 ? (console.warn("[AdminLocalStorage] Config too large to store"), !1) : (localStorage.setItem(c, o), !0);
-    } catch (o) {
-      return console.warn("[AdminLocalStorage] Failed to save config:", o), !1;
+      if (!validateAdminConfig(config)) {
+        console.warn("[AdminLocalStorage] Invalid config provided");
+        return false;
+      }
+      const serialized = JSON.stringify(config);
+      if (serialized.length > MAX_CONFIG_SIZE) {
+        console.warn("[AdminLocalStorage] Config too large to store");
+        return false;
+      }
+      localStorage.setItem(ADMIN_CONFIG_KEY, serialized);
+      return true;
+    } catch (error) {
+      console.warn("[AdminLocalStorage] Failed to save config:", error);
+      return false;
     }
   },
   // Get visible columns for a specific model with sanitization
-  getColumnVisibility: (e) => {
-    var r;
-    const o = s(e);
-    if (!o) return null;
-    const t = (r = i.getConfig().models[o]) == null ? void 0 : r.visibleColumns;
-    return t ? f(t) : null;
+  getColumnVisibility: (modelName) => {
+    var _a;
+    const sanitizedModelName = sanitizeString(modelName);
+    if (!sanitizedModelName) return null;
+    const config = SecureAdminLocalStorage.getConfig();
+    const columns = (_a = config.models[sanitizedModelName]) == null ? void 0 : _a.visibleColumns;
+    return columns ? sanitizeArray(columns) : null;
   },
   // Set visible columns for a specific model with validation
-  setColumnVisibility: (e, o) => {
-    const n = s(e), t = f(o);
-    if (!n) return !1;
-    const r = i.getConfig();
-    return r.models[n] || (r.models[n] = {}), r.models[n].visibleColumns = t, i.setConfig(r);
+  setColumnVisibility: (modelName, visibleColumns) => {
+    const sanitizedModelName = sanitizeString(modelName);
+    const sanitizedColumns = sanitizeArray(visibleColumns);
+    if (!sanitizedModelName) return false;
+    const config = SecureAdminLocalStorage.getConfig();
+    if (!config.models[sanitizedModelName]) {
+      config.models[sanitizedModelName] = {};
+    }
+    config.models[sanitizedModelName].visibleColumns = sanitizedColumns;
+    return SecureAdminLocalStorage.setConfig(config);
   },
   // Get sort preference for a specific model with validation
-  getSortPreference: (e) => {
-    var r;
-    const o = s(e);
-    if (!o) return null;
-    const t = (r = i.getConfig().models[o]) == null ? void 0 : r.sortPreference;
-    return t ? g(t) : null;
+  getSortPreference: (modelName) => {
+    var _a;
+    const sanitizedModelName = sanitizeString(modelName);
+    if (!sanitizedModelName) return null;
+    const config = SecureAdminLocalStorage.getConfig();
+    const sortPref = (_a = config.models[sanitizedModelName]) == null ? void 0 : _a.sortPreference;
+    return sortPref ? sanitizeSortPreference(sortPref) : null;
   },
   // Set sort preference for a specific model with validation
-  setSortPreference: (e, o) => {
-    const n = s(e), t = g(o);
-    if (!n || !t) return !1;
-    const r = i.getConfig();
-    return r.models[n] || (r.models[n] = {}), r.models[n].sortPreference = t, i.setConfig(r);
+  setSortPreference: (modelName, sortPreference) => {
+    const sanitizedModelName = sanitizeString(modelName);
+    const sanitizedSortPref = sanitizeSortPreference(sortPreference);
+    if (!sanitizedModelName || !sanitizedSortPref) return false;
+    const config = SecureAdminLocalStorage.getConfig();
+    if (!config.models[sanitizedModelName]) {
+      config.models[sanitizedModelName] = {};
+    }
+    config.models[sanitizedModelName].sortPreference = sanitizedSortPref;
+    return SecureAdminLocalStorage.setConfig(config);
   },
   // Get search fields for a specific model with sanitization
-  getSearchFields: (e) => {
-    var r;
-    const o = s(e);
-    if (!o) return null;
-    const t = (r = i.getConfig().models[o]) == null ? void 0 : r.searchFields;
-    return t ? f(t) : null;
+  getSearchFields: (modelName) => {
+    var _a;
+    const sanitizedModelName = sanitizeString(modelName);
+    if (!sanitizedModelName) return null;
+    const config = SecureAdminLocalStorage.getConfig();
+    const searchFields = (_a = config.models[sanitizedModelName]) == null ? void 0 : _a.searchFields;
+    return searchFields ? sanitizeArray(searchFields) : null;
   },
   // Set search fields for a specific model with validation
-  setSearchFields: (e, o) => {
-    const n = s(e), t = f(o);
-    if (!n) return !1;
-    const r = i.getConfig();
-    return r.models[n] || (r.models[n] = {}), r.models[n].searchFields = t, i.setConfig(r);
+  setSearchFields: (modelName, searchFields) => {
+    const sanitizedModelName = sanitizeString(modelName);
+    const sanitizedFields = sanitizeArray(searchFields);
+    if (!sanitizedModelName) return false;
+    const config = SecureAdminLocalStorage.getConfig();
+    if (!config.models[sanitizedModelName]) {
+      config.models[sanitizedModelName] = {};
+    }
+    config.models[sanitizedModelName].searchFields = sanitizedFields;
+    return SecureAdminLocalStorage.setConfig(config);
   },
   // Export config as JSON string with validation
   exportConfig: () => {
     try {
-      const e = i.getConfig();
-      return d(e) ? JSON.stringify(e, null, 2) : (console.warn("[AdminLocalStorage] Cannot export invalid config"), null);
-    } catch (e) {
-      return console.warn("[AdminLocalStorage] Failed to export config:", e), null;
+      const config = SecureAdminLocalStorage.getConfig();
+      if (!validateAdminConfig(config)) {
+        console.warn("[AdminLocalStorage] Cannot export invalid config");
+        return null;
+      }
+      return JSON.stringify(config, null, 2);
+    } catch (error) {
+      console.warn("[AdminLocalStorage] Failed to export config:", error);
+      return null;
     }
   },
   // Import config from JSON string with comprehensive security validation
-  importConfig: (e) => {
+  importConfig: (configJson) => {
     try {
-      const o = s(e);
-      if (!o || o.length > 5e4)
-        return console.warn("[AdminLocalStorage] Invalid or oversized config JSON"), !1;
-      const n = JSON.parse(o);
-      if (!d(n))
-        return console.warn("[AdminLocalStorage] Failed config validation during import"), !1;
-      const t = JSON.stringify(n), r = [
+      const sanitizedJson = sanitizeString(configJson);
+      if (!sanitizedJson || sanitizedJson.length > MAX_CONFIG_SIZE) {
+        console.warn("[AdminLocalStorage] Invalid or oversized config JSON");
+        return false;
+      }
+      const config = JSON.parse(sanitizedJson);
+      if (!validateAdminConfig(config)) {
+        console.warn("[AdminLocalStorage] Failed config validation during import");
+        return false;
+      }
+      const serialized = JSON.stringify(config);
+      const suspiciousPatterns = [
         /<script/i,
         /javascript:/i,
         /on\w+\s*=/i,
         /eval\s*\(/i,
         /function\s*\(/i
       ];
-      for (const l of r)
-        if (l.test(t))
-          return console.warn("[AdminLocalStorage] Suspicious content detected in config"), !1;
-      return i.setConfig(n);
-    } catch (o) {
-      return console.warn("[AdminLocalStorage] Failed to import config:", o), !1;
+      for (const pattern of suspiciousPatterns) {
+        if (pattern.test(serialized)) {
+          console.warn("[AdminLocalStorage] Suspicious content detected in config");
+          return false;
+        }
+      }
+      return SecureAdminLocalStorage.setConfig(config);
+    } catch (error) {
+      console.warn("[AdminLocalStorage] Failed to import config:", error);
+      return false;
     }
   },
   // Clear all stored data (for security/privacy)
   clearConfig: () => {
     try {
-      return localStorage.removeItem(c), !0;
-    } catch (e) {
-      return console.warn("[AdminLocalStorage] Failed to clear config:", e), !1;
+      localStorage.removeItem(ADMIN_CONFIG_KEY);
+      return true;
+    } catch (error) {
+      console.warn("[AdminLocalStorage] Failed to clear config:", error);
+      return false;
     }
   }
-}, m = i;
+};
+const AdminLocalStorage = SecureAdminLocalStorage;
 export {
-  m as AdminLocalStorage,
-  i as SecureAdminLocalStorage
+  AdminLocalStorage,
+  SecureAdminLocalStorage
 };

package/lib/utils/string-utils.js

@@ -1,27 +1,39 @@
-function n(r) {
-  return r.replace(/([a-z])([A-Z])/g, "$1-$2").replace(/([A-Z])([A-Z][a-z])/g, "$1-$2").toLowerCase();
+function kebabCase(name) {
+  return name.replace(/([a-z])([A-Z])/g, "$1-$2").replace(/([A-Z])([A-Z][a-z])/g, "$1-$2").toLowerCase();
 }
-function s(r) {
-  return r.replace(/([a-z])([A-Z])/g, "$1 $2").replace(/([A-Z])([A-Z][a-z])/g, "$1 $2");
+function spacedWords(name) {
+  return name.replace(/([a-z])([A-Z])/g, "$1 $2").replace(/([A-Z])([A-Z][a-z])/g, "$1 $2");
 }
-function c(r) {
-  return r.replace(/([a-z])([A-Z])/g, "$1 $2").replace(/^./, (e) => e.toUpperCase());
+function formatFieldName(fieldName) {
+  return fieldName.replace(/([a-z])([A-Z])/g, "$1 $2").replace(/^./, (str) => str.toUpperCase());
 }
-function i(r) {
-  return r === r.toUpperCase() && r.length > 1 ? r.charAt(0).toUpperCase() + r.slice(1).toLowerCase() : r;
+function normalizeModelNameForDocument(modelName) {
+  if (modelName === modelName.toUpperCase() && modelName.length > 1) {
+    return modelName.charAt(0).toUpperCase() + modelName.slice(1).toLowerCase();
+  }
+  return modelName;
 }
-function u(r) {
-  return r.name ? r.name : r.title ? r.title : r.firstName && r.lastName ? `${r.firstName} ${r.lastName}` : r.firstName ? r.firstName : r.email ? r.email : r.id;
+function getItemDisplayName(item) {
+  if (item.name) return item.name;
+  if (item.title) return item.title;
+  if (item.firstName && item.lastName) return `${item.firstName} ${item.lastName}`;
+  if (item.firstName) return item.firstName;
+  if (item.email) return item.email;
+  return item.id;
 }
-function f(r) {
-  const t = ["name", "title", "email", "firstName", "lastName", "subject"].filter((a) => r.includes(a));
-  return t.length >= 1 ? t.slice(0, 2) : r.slice(0, Math.min(2, r.length));
+function getSmartSearchFields(availableFields) {
+  const primaryFields = ["name", "title", "email", "firstName", "lastName", "subject"];
+  const primaryMatches = primaryFields.filter((field) => availableFields.includes(field));
+  if (primaryMatches.length >= 1) {
+    return primaryMatches.slice(0, 2);
+  }
+  return availableFields.slice(0, Math.min(2, availableFields.length));
 }
 export {
-  c as formatFieldName,
-  u as getItemDisplayName,
-  f as getSmartSearchFields,
-  n as kebabCase,
-  i as normalizeModelNameForDocument,
-  s as spacedWords
+  formatFieldName,
+  getItemDisplayName,
+  getSmartSearchFields,
+  kebabCase,
+  normalizeModelNameForDocument,
+  spacedWords
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nestledjs/data-browser",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "Universal admin data browser for Nestled framework projects with full CRUD operations",
   "main": "./index.js",
   "module": "./index.js",
@@ -39,7 +39,7 @@
     "@heroicons/react": "^2.0.0",
     "@nestledjs/forms": "^0.5.0",
     "@nestledjs/helpers": "^0.1.0",
-    "@nestledjs/shared-components": "^0.1.7",
+    "@nestledjs/shared-components": "^0.1.8",
     "react": "^19.0.0",
     "react-router": "^7.0.0"
   },