@seed-ship/mcp-ui-solid 1.0.16 → 1.0.18

package/dist/mcp-ui-solid/src/services/validation.cjs

@@ -203,6 +203,36 @@ function validateComponent(component, limits = DEFAULT_RESOURCE_LIMITS) {
         });
       }
       break;
+    case "iframe":
+      const iframeParams = component.params;
+      if (!iframeParams.url) {
+        errors.push({
+          path: "params",
+          message: "Iframe component must have url",
+          code: "INVALID_IFRAME"
+        });
+      }
+      break;
+    case "image":
+      const imageParams = component.params;
+      if (!imageParams.url) {
+        errors.push({
+          path: "params",
+          message: "Image component must have url",
+          code: "INVALID_IMAGE"
+        });
+      }
+      break;
+    case "link":
+      const linkParams = component.params;
+      if (!linkParams.url) {
+        errors.push({
+          path: "params",
+          message: "Link component must have url",
+          code: "INVALID_LINK"
+        });
+      }
+      break;
     default:
       errors.push({
         path: "type",

package/dist/mcp-ui-solid/src/services/validation.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"validation.cjs","sources":["../../../../src/services/validation.ts"],"sourcesContent":["/**\n * Component Validation Service\n * Phase 0: Resource Limits & Schema Validation\n *\n * Validates LLM-generated components against:\n * - JSON schema\n * - Resource limits (data points, payload size, grid bounds)\n * - Security constraints (domain whitelist, XSS prevention)\n */\n\nimport type {\n  UIComponent,\n  UILayout,\n  ValidationResult,\n  ResourceLimits,\n  ChartComponentParams,\n  TableComponentParams,\n} from '../types'\n\n/**\n * Default resource limits (configurable via env)\n */\nexport const DEFAULT_RESOURCE_LIMITS: ResourceLimits = {\n  maxDataPoints: 1000,\n  maxTableRows: 100,\n  maxPayloadSize: 50 * 1024, // 50KB\n  renderTimeout: 5000, // 5 seconds\n}\n\n/**\n * Allowed iframe domains (whitelist)\n * Must match CSP frame-src directive\n */\nconst ALLOWED_IFRAME_DOMAINS = [\n  'quickchart.io',\n  'www.quickchart.io',\n  'deposium.com',\n  'deposium.vip',\n  'localhost',\n]\n\n/**\n * Validate grid position bounds (1-12 columns)\n */\nexport function validateGridPosition(position: UIComponent['position']): ValidationResult {\n  const errors: ValidationResult['errors'] = []\n\n  // ✅ PHASE 3 FIX: Defensive check for undefined position\n  if (!position) {\n    return {\n      valid: false,\n      errors: [\n        {\n          path: 'position',\n          message: 'Position is required',\n          code: 'MISSING_POSITION',\n        },\n      ],\n    }\n  }\n\n  if (position.colStart < 1 || position.colStart > 12) {\n    errors.push({\n      path: 'position.colStart',\n      message: 'Column start must be between 1 and 12',\n      code: 'INVALID_GRID_COL_START',\n    })\n  }\n\n  if (position.colSpan < 1 || position.colSpan > 12) {\n    errors.push({\n      path: 'position.colSpan',\n      message: 'Column span must be between 1 and 12',\n      code: 'INVALID_GRID_COL_SPAN',\n    })\n  }\n\n  if (position.colStart + position.colSpan - 1 > 12) {\n    errors.push({\n      path: 'position',\n      message: 'Column start + span exceeds grid width (12)',\n      code: 'GRID_OVERFLOW',\n    })\n  }\n\n  if (position.rowStart !== undefined && position.rowStart < 1) {\n    errors.push({\n      path: 'position.rowStart',\n      message: 'Row start must be >= 1',\n      code: 'INVALID_GRID_ROW_START',\n    })\n  }\n\n  if (position.rowSpan !== undefined && position.rowSpan < 1) {\n    errors.push({\n      path: 'position.rowSpan',\n      message: 'Row span must be >= 1',\n      code: 'INVALID_GRID_ROW_SPAN',\n    })\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  }\n}\n\n/**\n * Validate chart component against resource limits\n */\nexport function validateChartComponent(\n  params: ChartComponentParams,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const errors: ValidationResult['errors'] = []\n\n  // Validate data points count\n  const totalDataPoints = params.data.datasets.reduce(\n    (sum, dataset) => sum + dataset.data.length,\n    0\n  )\n\n  if (totalDataPoints > limits.maxDataPoints) {\n    errors.push({\n      path: 'params.data',\n      message: `Chart exceeds max data points: ${totalDataPoints} > ${limits.maxDataPoints}`,\n      code: 'RESOURCE_LIMIT_EXCEEDED',\n    })\n  }\n\n  // Validate labels match dataset length\n  const expectedLength = params.data.labels.length\n  for (const [index, dataset] of params.data.datasets.entries()) {\n    if (dataset.data.length !== expectedLength) {\n      errors.push({\n        path: `params.data.datasets[${index}]`,\n        message: `Dataset length mismatch: expected ${expectedLength}, got ${dataset.data.length}`,\n        code: 'DATA_LENGTH_MISMATCH',\n      })\n    }\n  }\n\n  // Validate numeric data\n  for (const [index, dataset] of params.data.datasets.entries()) {\n    for (const [dataIndex, value] of dataset.data.entries()) {\n      if (typeof value !== 'number' || !Number.isFinite(value)) {\n        errors.push({\n          path: `params.data.datasets[${index}].data[${dataIndex}]`,\n          message: `Invalid data value: ${value} (must be finite number)`,\n          code: 'INVALID_DATA_TYPE',\n        })\n      }\n    }\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  }\n}\n\n/**\n * Validate table component against resource limits\n */\nexport function validateTableComponent(\n  params: TableComponentParams,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const errors: ValidationResult['errors'] = []\n\n  // Validate row count\n  if (params.rows.length > limits.maxTableRows) {\n    errors.push({\n      path: 'params.rows',\n      message: `Table exceeds max rows: ${params.rows.length} > ${limits.maxTableRows}`,\n      code: 'RESOURCE_LIMIT_EXCEEDED',\n    })\n  }\n\n  // Validate columns\n  if (params.columns.length === 0) {\n    errors.push({\n      path: 'params.columns',\n      message: 'Table must have at least one column',\n      code: 'EMPTY_COLUMNS',\n    })\n  }\n\n  // Validate column keys are unique\n  const columnKeys = new Set<string>()\n  for (const [index, column] of params.columns.entries()) {\n    if (columnKeys.has(column.key)) {\n      errors.push({\n        path: `params.columns[${index}]`,\n        message: `Duplicate column key: ${column.key}`,\n        code: 'DUPLICATE_COLUMN_KEY',\n      })\n    }\n    columnKeys.add(column.key)\n  }\n\n  // Validate rows have valid data for defined columns\n  for (const [rowIndex, row] of params.rows.entries()) {\n    for (const column of params.columns) {\n      if (!(column.key in row)) {\n        errors.push({\n          path: `params.rows[${rowIndex}]`,\n          message: `Missing column key: ${column.key}`,\n          code: 'MISSING_COLUMN_DATA',\n        })\n      }\n    }\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  }\n}\n\n/**\n * Validate payload size\n */\nexport function validatePayloadSize(\n  component: UIComponent,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const payloadSize = JSON.stringify(component).length\n\n  if (payloadSize > limits.maxPayloadSize) {\n    return {\n      valid: false,\n      errors: [\n        {\n          path: 'component',\n          message: `Payload size exceeds limit: ${payloadSize} > ${limits.maxPayloadSize} bytes`,\n          code: 'PAYLOAD_TOO_LARGE',\n        },\n      ],\n    }\n  }\n\n  return { valid: true }\n}\n\n/**\n * Sanitize string to prevent XSS\n * Basic implementation - DOMPurify used at render time\n */\nexport function sanitizeString(input: string): string {\n  return input\n    .replace(/<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi, '')\n    .replace(/on\\w+=\"[^\"]*\"/gi, '')\n    .replace(/javascript:/gi, '')\n}\n\n/**\n * Validate iframe domain against whitelist\n */\nexport function validateIframeDomain(url: string): ValidationResult {\n  try {\n    const parsedUrl = new URL(url)\n    const domain = parsedUrl.hostname\n\n    const isAllowed = ALLOWED_IFRAME_DOMAINS.some(\n      (allowed) => domain === allowed || domain.endsWith(`.${allowed}`) || allowed === 'localhost'\n    )\n\n    if (!isAllowed) {\n      return {\n        valid: false,\n        errors: [\n          {\n            path: 'url',\n            message: `Domain not whitelisted: ${domain}`,\n            code: 'DOMAIN_NOT_WHITELISTED',\n          },\n        ],\n      }\n    }\n\n    return { valid: true }\n  } catch (error) {\n    return {\n      valid: false,\n      errors: [\n        {\n          path: 'url',\n          message: 'Invalid URL format',\n          code: 'INVALID_URL',\n        },\n      ],\n    }\n  }\n}\n\n/**\n * Validate entire component\n */\nexport function validateComponent(\n  component: UIComponent,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const errors: ValidationResult['errors'] = []\n\n  // Validate grid position\n  const gridResult = validateGridPosition(component.position)\n  if (!gridResult.valid) {\n    errors.push(...(gridResult.errors || []))\n  }\n\n  // Validate payload size\n  const sizeResult = validatePayloadSize(component, limits)\n  if (!sizeResult.valid) {\n    errors.push(...(sizeResult.errors || []))\n  }\n\n  // Type-specific validation\n  switch (component.type) {\n    case 'chart':\n      const chartResult = validateChartComponent(component.params as ChartComponentParams, limits)\n      if (!chartResult.valid) {\n        errors.push(...(chartResult.errors || []))\n      }\n      break\n\n    case 'table':\n      const tableResult = validateTableComponent(component.params as TableComponentParams, limits)\n      if (!tableResult.valid) {\n        errors.push(...(tableResult.errors || []))\n      }\n      break\n\n    case 'metric':\n      // Basic validation for metrics\n      const metricParams = component.params as any\n      if (!metricParams.title || !metricParams.value) {\n        errors.push({\n          path: 'params',\n          message: 'Metric must have title and value',\n          code: 'INVALID_METRIC',\n        })\n      }\n      break\n\n    case 'text':\n      // Basic validation for text\n      const textParams = component.params as any\n      if (!textParams.content) {\n        errors.push({\n          path: 'params',\n          message: 'Text component must have content',\n          code: 'INVALID_TEXT',\n        })\n      }\n      break\n\n    default:\n      errors.push({\n        path: 'type',\n        message: `Unknown component type: ${component.type}`,\n        code: 'UNKNOWN_COMPONENT_TYPE',\n      })\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  }\n}\n\n/**\n * Validate entire layout\n */\nexport function validateLayout(\n  layout: UILayout,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const errors: ValidationResult['errors'] = []\n\n  // Validate component count\n  if (layout.components.length === 0) {\n    errors.push({\n      path: 'components',\n      message: 'Layout must have at least one component',\n      code: 'EMPTY_LAYOUT',\n    })\n  }\n\n  if (layout.components.length > 12) {\n    errors.push({\n      path: 'components',\n      message: `Layout exceeds max components: ${layout.components.length} > 12`,\n      code: 'TOO_MANY_COMPONENTS',\n    })\n  }\n\n  // Validate each component\n  for (const [index, component] of layout.components.entries()) {\n    const result = validateComponent(component, limits)\n    if (!result.valid) {\n      errors.push(\n        ...(result.errors?.map((error) => ({\n          ...error,\n          path: `components[${index}].${error.path}`,\n        })) || [])\n      )\n    }\n  }\n\n  // Validate grid configuration\n  if (layout.grid.columns !== 12) {\n    errors.push({\n      path: 'grid.columns',\n      message: 'Grid must have 12 columns (Bootstrap-like)',\n      code: 'INVALID_GRID_COLUMNS',\n    })\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  }\n}\n"],"names":[],"mappings":";;AAsBO,MAAM,0BAA0C;AAAA,EACrD,eAAe;AAAA,EACf,cAAc;AAAA,EACd,gBAAgB,KAAK;AAAA;AAAA,EACrB,eAAe;AAAA;AACjB;AAiBO,SAAS,qBAAqB,UAAqD;AACxF,QAAM,SAAqC,CAAA;AAG3C,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ;AAAA,QACN;AAAA,UACE,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA;AAAA,MACR;AAAA,IACF;AAAA,EAEJ;AAEA,MAAI,SAAS,WAAW,KAAK,SAAS,WAAW,IAAI;AACnD,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,UAAU,KAAK,SAAS,UAAU,IAAI;AACjD,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,WAAW,SAAS,UAAU,IAAI,IAAI;AACjD,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,aAAa,UAAa,SAAS,WAAW,GAAG;AAC5D,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,YAAY,UAAa,SAAS,UAAU,GAAG;AAC1D,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,uBACd,QACA,SAAyB,yBACP;AAClB,QAAM,SAAqC,CAAA;AAG3C,QAAM,kBAAkB,OAAO,KAAK,SAAS;AAAA,IAC3C,CAAC,KAAK,YAAY,MAAM,QAAQ,KAAK;AAAA,IACrC;AAAA,EAAA;AAGF,MAAI,kBAAkB,OAAO,eAAe;AAC1C,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,kCAAkC,eAAe,MAAM,OAAO,aAAa;AAAA,MACpF,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,QAAM,iBAAiB,OAAO,KAAK,OAAO;AAC1C,aAAW,CAAC,OAAO,OAAO,KAAK,OAAO,KAAK,SAAS,WAAW;AAC7D,QAAI,QAAQ,KAAK,WAAW,gBAAgB;AAC1C,aAAO,KAAK;AAAA,QACV,MAAM,wBAAwB,KAAK;AAAA,QACnC,SAAS,qCAAqC,cAAc,SAAS,QAAQ,KAAK,MAAM;AAAA,QACxF,MAAM;AAAA,MAAA,CACP;AAAA,IACH;AAAA,EACF;AAGA,aAAW,CAAC,OAAO,OAAO,KAAK,OAAO,KAAK,SAAS,WAAW;AAC7D,eAAW,CAAC,WAAW,KAAK,KAAK,QAAQ,KAAK,WAAW;AACvD,UAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GAAG;AACxD,eAAO,KAAK;AAAA,UACV,MAAM,wBAAwB,KAAK,UAAU,SAAS;AAAA,UACtD,SAAS,uBAAuB,KAAK;AAAA,UACrC,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,uBACd,QACA,SAAyB,yBACP;AAClB,QAAM,SAAqC,CAAA;AAG3C,MAAI,OAAO,KAAK,SAAS,OAAO,cAAc;AAC5C,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,2BAA2B,OAAO,KAAK,MAAM,MAAM,OAAO,YAAY;AAAA,MAC/E,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,MAAI,OAAO,QAAQ,WAAW,GAAG;AAC/B,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,QAAM,iCAAiB,IAAA;AACvB,aAAW,CAAC,OAAO,MAAM,KAAK,OAAO,QAAQ,WAAW;AACtD,QAAI,WAAW,IAAI,OAAO,GAAG,GAAG;AAC9B,aAAO,KAAK;AAAA,QACV,MAAM,kBAAkB,KAAK;AAAA,QAC7B,SAAS,yBAAyB,OAAO,GAAG;AAAA,QAC5C,MAAM;AAAA,MAAA,CACP;AAAA,IACH;AACA,eAAW,IAAI,OAAO,GAAG;AAAA,EAC3B;AAGA,aAAW,CAAC,UAAU,GAAG,KAAK,OAAO,KAAK,WAAW;AACnD,eAAW,UAAU,OAAO,SAAS;AACnC,UAAI,EAAE,OAAO,OAAO,MAAM;AACxB,eAAO,KAAK;AAAA,UACV,MAAM,eAAe,QAAQ;AAAA,UAC7B,SAAS,uBAAuB,OAAO,GAAG;AAAA,UAC1C,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,oBACd,WACA,SAAyB,yBACP;AAClB,QAAM,cAAc,KAAK,UAAU,SAAS,EAAE;AAE9C,MAAI,cAAc,OAAO,gBAAgB;AACvC,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ;AAAA,QACN;AAAA,UACE,MAAM;AAAA,UACN,SAAS,+BAA+B,WAAW,MAAM,OAAO,cAAc;AAAA,UAC9E,MAAM;AAAA,QAAA;AAAA,MACR;AAAA,IACF;AAAA,EAEJ;AAEA,SAAO,EAAE,OAAO,KAAA;AAClB;AAwDO,SAAS,kBACd,WACA,SAAyB,yBACP;AAClB,QAAM,SAAqC,CAAA;AAG3C,QAAM,aAAa,qBAAqB,UAAU,QAAQ;AAC1D,MAAI,CAAC,WAAW,OAAO;AACrB,WAAO,KAAK,GAAI,WAAW,UAAU,CAAA,CAAG;AAAA,EAC1C;AAGA,QAAM,aAAa,oBAAoB,WAAW,MAAM;AACxD,MAAI,CAAC,WAAW,OAAO;AACrB,WAAO,KAAK,GAAI,WAAW,UAAU,CAAA,CAAG;AAAA,EAC1C;AAGA,UAAQ,UAAU,MAAA;AAAA,IAChB,KAAK;AACH,YAAM,cAAc,uBAAuB,UAAU,QAAgC,MAAM;AAC3F,UAAI,CAAC,YAAY,OAAO;AACtB,eAAO,KAAK,GAAI,YAAY,UAAU,CAAA,CAAG;AAAA,MAC3C;AACA;AAAA,IAEF,KAAK;AACH,YAAM,cAAc,uBAAuB,UAAU,QAAgC,MAAM;AAC3F,UAAI,CAAC,YAAY,OAAO;AACtB,eAAO,KAAK,GAAI,YAAY,UAAU,CAAA,CAAG;AAAA,MAC3C;AACA;AAAA,IAEF,KAAK;AAEH,YAAM,eAAe,UAAU;AAC/B,UAAI,CAAC,aAAa,SAAS,CAAC,aAAa,OAAO;AAC9C,eAAO,KAAK;AAAA,UACV,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AACA;AAAA,IAEF,KAAK;AAEH,YAAM,aAAa,UAAU;AAC7B,UAAI,CAAC,WAAW,SAAS;AACvB,eAAO,KAAK;AAAA,UACV,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AACA;AAAA,IAEF;AACE,aAAO,KAAK;AAAA,QACV,MAAM;AAAA,QACN,SAAS,2BAA2B,UAAU,IAAI;AAAA,QAClD,MAAM;AAAA,MAAA,CACP;AAAA,EAAA;AAGL,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,eACd,QACA,SAAyB,yBACP;;AAClB,QAAM,SAAqC,CAAA;AAG3C,MAAI,OAAO,WAAW,WAAW,GAAG;AAClC,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,OAAO,WAAW,SAAS,IAAI;AACjC,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,kCAAkC,OAAO,WAAW,MAAM;AAAA,MACnE,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,aAAW,CAAC,OAAO,SAAS,KAAK,OAAO,WAAW,WAAW;AAC5D,UAAM,SAAS,kBAAkB,WAAW,MAAM;AAClD,QAAI,CAAC,OAAO,OAAO;AACjB,aAAO;AAAA,QACL,KAAI,YAAO,WAAP,mBAAe,IAAI,CAAC,WAAW;AAAA,UACjC,GAAG;AAAA,UACH,MAAM,cAAc,KAAK,KAAK,MAAM,IAAI;AAAA,QAAA,QACnC,CAAA;AAAA,MAAC;AAAA,IAEZ;AAAA,EACF;AAGA,MAAI,OAAO,KAAK,YAAY,IAAI;AAC9B,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;;;;;;;;"}
+{"version":3,"file":"validation.cjs","sources":["../../../../src/services/validation.ts"],"sourcesContent":["/**\n * Component Validation Service\n * Phase 0: Resource Limits & Schema Validation\n *\n * Validates LLM-generated components against:\n * - JSON schema\n * - Resource limits (data points, payload size, grid bounds)\n * - Security constraints (domain whitelist, XSS prevention)\n */\n\nimport type {\n  UIComponent,\n  UILayout,\n  ValidationResult,\n  ResourceLimits,\n  ChartComponentParams,\n  TableComponentParams,\n} from '../types'\n\n/**\n * Default resource limits (configurable via env)\n */\nexport const DEFAULT_RESOURCE_LIMITS: ResourceLimits = {\n  maxDataPoints: 1000,\n  maxTableRows: 100,\n  maxPayloadSize: 50 * 1024, // 50KB\n  renderTimeout: 5000, // 5 seconds\n}\n\n/**\n * Allowed iframe domains (whitelist)\n * Must match CSP frame-src directive\n */\nconst ALLOWED_IFRAME_DOMAINS = [\n  'quickchart.io',\n  'www.quickchart.io',\n  'deposium.com',\n  'deposium.vip',\n  'localhost',\n]\n\n/**\n * Validate grid position bounds (1-12 columns)\n */\nexport function validateGridPosition(position: UIComponent['position']): ValidationResult {\n  const errors: ValidationResult['errors'] = []\n\n  // ✅ PHASE 3 FIX: Defensive check for undefined position\n  if (!position) {\n    return {\n      valid: false,\n      errors: [\n        {\n          path: 'position',\n          message: 'Position is required',\n          code: 'MISSING_POSITION',\n        },\n      ],\n    }\n  }\n\n  if (position.colStart < 1 || position.colStart > 12) {\n    errors.push({\n      path: 'position.colStart',\n      message: 'Column start must be between 1 and 12',\n      code: 'INVALID_GRID_COL_START',\n    })\n  }\n\n  if (position.colSpan < 1 || position.colSpan > 12) {\n    errors.push({\n      path: 'position.colSpan',\n      message: 'Column span must be between 1 and 12',\n      code: 'INVALID_GRID_COL_SPAN',\n    })\n  }\n\n  if (position.colStart + position.colSpan - 1 > 12) {\n    errors.push({\n      path: 'position',\n      message: 'Column start + span exceeds grid width (12)',\n      code: 'GRID_OVERFLOW',\n    })\n  }\n\n  if (position.rowStart !== undefined && position.rowStart < 1) {\n    errors.push({\n      path: 'position.rowStart',\n      message: 'Row start must be >= 1',\n      code: 'INVALID_GRID_ROW_START',\n    })\n  }\n\n  if (position.rowSpan !== undefined && position.rowSpan < 1) {\n    errors.push({\n      path: 'position.rowSpan',\n      message: 'Row span must be >= 1',\n      code: 'INVALID_GRID_ROW_SPAN',\n    })\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  }\n}\n\n/**\n * Validate chart component against resource limits\n */\nexport function validateChartComponent(\n  params: ChartComponentParams,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const errors: ValidationResult['errors'] = []\n\n  // Validate data points count\n  const totalDataPoints = params.data.datasets.reduce(\n    (sum, dataset) => sum + dataset.data.length,\n    0\n  )\n\n  if (totalDataPoints > limits.maxDataPoints) {\n    errors.push({\n      path: 'params.data',\n      message: `Chart exceeds max data points: ${totalDataPoints} > ${limits.maxDataPoints}`,\n      code: 'RESOURCE_LIMIT_EXCEEDED',\n    })\n  }\n\n  // Validate labels match dataset length\n  const expectedLength = params.data.labels.length\n  for (const [index, dataset] of params.data.datasets.entries()) {\n    if (dataset.data.length !== expectedLength) {\n      errors.push({\n        path: `params.data.datasets[${index}]`,\n        message: `Dataset length mismatch: expected ${expectedLength}, got ${dataset.data.length}`,\n        code: 'DATA_LENGTH_MISMATCH',\n      })\n    }\n  }\n\n  // Validate numeric data\n  for (const [index, dataset] of params.data.datasets.entries()) {\n    for (const [dataIndex, value] of dataset.data.entries()) {\n      if (typeof value !== 'number' || !Number.isFinite(value)) {\n        errors.push({\n          path: `params.data.datasets[${index}].data[${dataIndex}]`,\n          message: `Invalid data value: ${value} (must be finite number)`,\n          code: 'INVALID_DATA_TYPE',\n        })\n      }\n    }\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  }\n}\n\n/**\n * Validate table component against resource limits\n */\nexport function validateTableComponent(\n  params: TableComponentParams,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const errors: ValidationResult['errors'] = []\n\n  // Validate row count\n  if (params.rows.length > limits.maxTableRows) {\n    errors.push({\n      path: 'params.rows',\n      message: `Table exceeds max rows: ${params.rows.length} > ${limits.maxTableRows}`,\n      code: 'RESOURCE_LIMIT_EXCEEDED',\n    })\n  }\n\n  // Validate columns\n  if (params.columns.length === 0) {\n    errors.push({\n      path: 'params.columns',\n      message: 'Table must have at least one column',\n      code: 'EMPTY_COLUMNS',\n    })\n  }\n\n  // Validate column keys are unique\n  const columnKeys = new Set<string>()\n  for (const [index, column] of params.columns.entries()) {\n    if (columnKeys.has(column.key)) {\n      errors.push({\n        path: `params.columns[${index}]`,\n        message: `Duplicate column key: ${column.key}`,\n        code: 'DUPLICATE_COLUMN_KEY',\n      })\n    }\n    columnKeys.add(column.key)\n  }\n\n  // Validate rows have valid data for defined columns\n  for (const [rowIndex, row] of params.rows.entries()) {\n    for (const column of params.columns) {\n      if (!(column.key in row)) {\n        errors.push({\n          path: `params.rows[${rowIndex}]`,\n          message: `Missing column key: ${column.key}`,\n          code: 'MISSING_COLUMN_DATA',\n        })\n      }\n    }\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  }\n}\n\n/**\n * Validate payload size\n */\nexport function validatePayloadSize(\n  component: UIComponent,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const payloadSize = JSON.stringify(component).length\n\n  if (payloadSize > limits.maxPayloadSize) {\n    return {\n      valid: false,\n      errors: [\n        {\n          path: 'component',\n          message: `Payload size exceeds limit: ${payloadSize} > ${limits.maxPayloadSize} bytes`,\n          code: 'PAYLOAD_TOO_LARGE',\n        },\n      ],\n    }\n  }\n\n  return { valid: true }\n}\n\n/**\n * Sanitize string to prevent XSS\n * Basic implementation - DOMPurify used at render time\n */\nexport function sanitizeString(input: string): string {\n  return input\n    .replace(/<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi, '')\n    .replace(/on\\w+=\"[^\"]*\"/gi, '')\n    .replace(/javascript:/gi, '')\n}\n\n/**\n * Validate iframe domain against whitelist\n */\nexport function validateIframeDomain(url: string): ValidationResult {\n  try {\n    const parsedUrl = new URL(url)\n    const domain = parsedUrl.hostname\n\n    const isAllowed = ALLOWED_IFRAME_DOMAINS.some(\n      (allowed) => domain === allowed || domain.endsWith(`.${allowed}`) || allowed === 'localhost'\n    )\n\n    if (!isAllowed) {\n      return {\n        valid: false,\n        errors: [\n          {\n            path: 'url',\n            message: `Domain not whitelisted: ${domain}`,\n            code: 'DOMAIN_NOT_WHITELISTED',\n          },\n        ],\n      }\n    }\n\n    return { valid: true }\n  } catch (error) {\n    return {\n      valid: false,\n      errors: [\n        {\n          path: 'url',\n          message: 'Invalid URL format',\n          code: 'INVALID_URL',\n        },\n      ],\n    }\n  }\n}\n\n/**\n * Validate entire component\n */\nexport function validateComponent(\n  component: UIComponent,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const errors: ValidationResult['errors'] = []\n\n  // Validate grid position\n  const gridResult = validateGridPosition(component.position)\n  if (!gridResult.valid) {\n    errors.push(...(gridResult.errors || []))\n  }\n\n  // Validate payload size\n  const sizeResult = validatePayloadSize(component, limits)\n  if (!sizeResult.valid) {\n    errors.push(...(sizeResult.errors || []))\n  }\n\n  // Type-specific validation\n  switch (component.type) {\n    case 'chart':\n      const chartResult = validateChartComponent(component.params as ChartComponentParams, limits)\n      if (!chartResult.valid) {\n        errors.push(...(chartResult.errors || []))\n      }\n      break\n\n    case 'table':\n      const tableResult = validateTableComponent(component.params as TableComponentParams, limits)\n      if (!tableResult.valid) {\n        errors.push(...(tableResult.errors || []))\n      }\n      break\n\n    case 'metric':\n      // Basic validation for metrics\n      const metricParams = component.params as any\n      if (!metricParams.title || !metricParams.value) {\n        errors.push({\n          path: 'params',\n          message: 'Metric must have title and value',\n          code: 'INVALID_METRIC',\n        })\n      }\n      break\n\n    case 'text':\n      // Basic validation for text\n      const textParams = component.params as any\n      if (!textParams.content) {\n        errors.push({\n          path: 'params',\n          message: 'Text component must have content',\n          code: 'INVALID_TEXT',\n        })\n      }\n      break\n\n    case 'iframe':\n      // Basic validation for iframe\n      const iframeParams = component.params as any\n      if (!iframeParams.url) {\n        errors.push({\n          path: 'params',\n          message: 'Iframe component must have url',\n          code: 'INVALID_IFRAME',\n        })\n      }\n      break\n\n    case 'image':\n      // Basic validation for image\n      const imageParams = component.params as any\n      if (!imageParams.url) {\n        errors.push({\n          path: 'params',\n          message: 'Image component must have url',\n          code: 'INVALID_IMAGE',\n        })\n      }\n      break\n\n    case 'link':\n      // Basic validation for link\n      const linkParams = component.params as any\n      if (!linkParams.url) {\n        errors.push({\n          path: 'params',\n          message: 'Link component must have url',\n          code: 'INVALID_LINK',\n        })\n      }\n      break\n\n    default:\n      errors.push({\n        path: 'type',\n        message: `Unknown component type: ${component.type}`,\n        code: 'UNKNOWN_COMPONENT_TYPE',\n      })\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  }\n}\n\n/**\n * Validate entire layout\n */\nexport function validateLayout(\n  layout: UILayout,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const errors: ValidationResult['errors'] = []\n\n  // Validate component count\n  if (layout.components.length === 0) {\n    errors.push({\n      path: 'components',\n      message: 'Layout must have at least one component',\n      code: 'EMPTY_LAYOUT',\n    })\n  }\n\n  if (layout.components.length > 12) {\n    errors.push({\n      path: 'components',\n      message: `Layout exceeds max components: ${layout.components.length} > 12`,\n      code: 'TOO_MANY_COMPONENTS',\n    })\n  }\n\n  // Validate each component\n  for (const [index, component] of layout.components.entries()) {\n    const result = validateComponent(component, limits)\n    if (!result.valid) {\n      errors.push(\n        ...(result.errors?.map((error) => ({\n          ...error,\n          path: `components[${index}].${error.path}`,\n        })) || [])\n      )\n    }\n  }\n\n  // Validate grid configuration\n  if (layout.grid.columns !== 12) {\n    errors.push({\n      path: 'grid.columns',\n      message: 'Grid must have 12 columns (Bootstrap-like)',\n      code: 'INVALID_GRID_COLUMNS',\n    })\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  }\n}\n"],"names":[],"mappings":";;AAsBO,MAAM,0BAA0C;AAAA,EACrD,eAAe;AAAA,EACf,cAAc;AAAA,EACd,gBAAgB,KAAK;AAAA;AAAA,EACrB,eAAe;AAAA;AACjB;AAiBO,SAAS,qBAAqB,UAAqD;AACxF,QAAM,SAAqC,CAAA;AAG3C,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ;AAAA,QACN;AAAA,UACE,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA;AAAA,MACR;AAAA,IACF;AAAA,EAEJ;AAEA,MAAI,SAAS,WAAW,KAAK,SAAS,WAAW,IAAI;AACnD,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,UAAU,KAAK,SAAS,UAAU,IAAI;AACjD,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,WAAW,SAAS,UAAU,IAAI,IAAI;AACjD,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,aAAa,UAAa,SAAS,WAAW,GAAG;AAC5D,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,YAAY,UAAa,SAAS,UAAU,GAAG;AAC1D,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,uBACd,QACA,SAAyB,yBACP;AAClB,QAAM,SAAqC,CAAA;AAG3C,QAAM,kBAAkB,OAAO,KAAK,SAAS;AAAA,IAC3C,CAAC,KAAK,YAAY,MAAM,QAAQ,KAAK;AAAA,IACrC;AAAA,EAAA;AAGF,MAAI,kBAAkB,OAAO,eAAe;AAC1C,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,kCAAkC,eAAe,MAAM,OAAO,aAAa;AAAA,MACpF,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,QAAM,iBAAiB,OAAO,KAAK,OAAO;AAC1C,aAAW,CAAC,OAAO,OAAO,KAAK,OAAO,KAAK,SAAS,WAAW;AAC7D,QAAI,QAAQ,KAAK,WAAW,gBAAgB;AAC1C,aAAO,KAAK;AAAA,QACV,MAAM,wBAAwB,KAAK;AAAA,QACnC,SAAS,qCAAqC,cAAc,SAAS,QAAQ,KAAK,MAAM;AAAA,QACxF,MAAM;AAAA,MAAA,CACP;AAAA,IACH;AAAA,EACF;AAGA,aAAW,CAAC,OAAO,OAAO,KAAK,OAAO,KAAK,SAAS,WAAW;AAC7D,eAAW,CAAC,WAAW,KAAK,KAAK,QAAQ,KAAK,WAAW;AACvD,UAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GAAG;AACxD,eAAO,KAAK;AAAA,UACV,MAAM,wBAAwB,KAAK,UAAU,SAAS;AAAA,UACtD,SAAS,uBAAuB,KAAK;AAAA,UACrC,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,uBACd,QACA,SAAyB,yBACP;AAClB,QAAM,SAAqC,CAAA;AAG3C,MAAI,OAAO,KAAK,SAAS,OAAO,cAAc;AAC5C,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,2BAA2B,OAAO,KAAK,MAAM,MAAM,OAAO,YAAY;AAAA,MAC/E,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,MAAI,OAAO,QAAQ,WAAW,GAAG;AAC/B,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,QAAM,iCAAiB,IAAA;AACvB,aAAW,CAAC,OAAO,MAAM,KAAK,OAAO,QAAQ,WAAW;AACtD,QAAI,WAAW,IAAI,OAAO,GAAG,GAAG;AAC9B,aAAO,KAAK;AAAA,QACV,MAAM,kBAAkB,KAAK;AAAA,QAC7B,SAAS,yBAAyB,OAAO,GAAG;AAAA,QAC5C,MAAM;AAAA,MAAA,CACP;AAAA,IACH;AACA,eAAW,IAAI,OAAO,GAAG;AAAA,EAC3B;AAGA,aAAW,CAAC,UAAU,GAAG,KAAK,OAAO,KAAK,WAAW;AACnD,eAAW,UAAU,OAAO,SAAS;AACnC,UAAI,EAAE,OAAO,OAAO,MAAM;AACxB,eAAO,KAAK;AAAA,UACV,MAAM,eAAe,QAAQ;AAAA,UAC7B,SAAS,uBAAuB,OAAO,GAAG;AAAA,UAC1C,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,oBACd,WACA,SAAyB,yBACP;AAClB,QAAM,cAAc,KAAK,UAAU,SAAS,EAAE;AAE9C,MAAI,cAAc,OAAO,gBAAgB;AACvC,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ;AAAA,QACN;AAAA,UACE,MAAM;AAAA,UACN,SAAS,+BAA+B,WAAW,MAAM,OAAO,cAAc;AAAA,UAC9E,MAAM;AAAA,QAAA;AAAA,MACR;AAAA,IACF;AAAA,EAEJ;AAEA,SAAO,EAAE,OAAO,KAAA;AAClB;AAwDO,SAAS,kBACd,WACA,SAAyB,yBACP;AAClB,QAAM,SAAqC,CAAA;AAG3C,QAAM,aAAa,qBAAqB,UAAU,QAAQ;AAC1D,MAAI,CAAC,WAAW,OAAO;AACrB,WAAO,KAAK,GAAI,WAAW,UAAU,CAAA,CAAG;AAAA,EAC1C;AAGA,QAAM,aAAa,oBAAoB,WAAW,MAAM;AACxD,MAAI,CAAC,WAAW,OAAO;AACrB,WAAO,KAAK,GAAI,WAAW,UAAU,CAAA,CAAG;AAAA,EAC1C;AAGA,UAAQ,UAAU,MAAA;AAAA,IAChB,KAAK;AACH,YAAM,cAAc,uBAAuB,UAAU,QAAgC,MAAM;AAC3F,UAAI,CAAC,YAAY,OAAO;AACtB,eAAO,KAAK,GAAI,YAAY,UAAU,CAAA,CAAG;AAAA,MAC3C;AACA;AAAA,IAEF,KAAK;AACH,YAAM,cAAc,uBAAuB,UAAU,QAAgC,MAAM;AAC3F,UAAI,CAAC,YAAY,OAAO;AACtB,eAAO,KAAK,GAAI,YAAY,UAAU,CAAA,CAAG;AAAA,MAC3C;AACA;AAAA,IAEF,KAAK;AAEH,YAAM,eAAe,UAAU;AAC/B,UAAI,CAAC,aAAa,SAAS,CAAC,aAAa,OAAO;AAC9C,eAAO,KAAK;AAAA,UACV,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AACA;AAAA,IAEF,KAAK;AAEH,YAAM,aAAa,UAAU;AAC7B,UAAI,CAAC,WAAW,SAAS;AACvB,eAAO,KAAK;AAAA,UACV,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AACA;AAAA,IAEF,KAAK;AAEH,YAAM,eAAe,UAAU;AAC/B,UAAI,CAAC,aAAa,KAAK;AACrB,eAAO,KAAK;AAAA,UACV,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AACA;AAAA,IAEF,KAAK;AAEH,YAAM,cAAc,UAAU;AAC9B,UAAI,CAAC,YAAY,KAAK;AACpB,eAAO,KAAK;AAAA,UACV,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AACA;AAAA,IAEF,KAAK;AAEH,YAAM,aAAa,UAAU;AAC7B,UAAI,CAAC,WAAW,KAAK;AACnB,eAAO,KAAK;AAAA,UACV,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AACA;AAAA,IAEF;AACE,aAAO,KAAK;AAAA,QACV,MAAM;AAAA,QACN,SAAS,2BAA2B,UAAU,IAAI;AAAA,QAClD,MAAM;AAAA,MAAA,CACP;AAAA,EAAA;AAGL,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,eACd,QACA,SAAyB,yBACP;;AAClB,QAAM,SAAqC,CAAA;AAG3C,MAAI,OAAO,WAAW,WAAW,GAAG;AAClC,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,OAAO,WAAW,SAAS,IAAI;AACjC,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,kCAAkC,OAAO,WAAW,MAAM;AAAA,MACnE,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,aAAW,CAAC,OAAO,SAAS,KAAK,OAAO,WAAW,WAAW;AAC5D,UAAM,SAAS,kBAAkB,WAAW,MAAM;AAClD,QAAI,CAAC,OAAO,OAAO;AACjB,aAAO;AAAA,QACL,KAAI,YAAO,WAAP,mBAAe,IAAI,CAAC,WAAW;AAAA,UACjC,GAAG;AAAA,UACH,MAAM,cAAc,KAAK,KAAK,MAAM,IAAI;AAAA,QAAA,QACnC,CAAA;AAAA,MAAC;AAAA,IAEZ;AAAA,EACF;AAGA,MAAI,OAAO,KAAK,YAAY,IAAI;AAC9B,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;;;;;;;;"}

package/dist/mcp-ui-solid/src/services/validation.js

@@ -201,6 +201,36 @@ function validateComponent(component, limits = DEFAULT_RESOURCE_LIMITS) {
         });
       }
       break;
+    case "iframe":
+      const iframeParams = component.params;
+      if (!iframeParams.url) {
+        errors.push({
+          path: "params",
+          message: "Iframe component must have url",
+          code: "INVALID_IFRAME"
+        });
+      }
+      break;
+    case "image":
+      const imageParams = component.params;
+      if (!imageParams.url) {
+        errors.push({
+          path: "params",
+          message: "Image component must have url",
+          code: "INVALID_IMAGE"
+        });
+      }
+      break;
+    case "link":
+      const linkParams = component.params;
+      if (!linkParams.url) {
+        errors.push({
+          path: "params",
+          message: "Link component must have url",
+          code: "INVALID_LINK"
+        });
+      }
+      break;
     default:
       errors.push({
         path: "type",

package/dist/mcp-ui-solid/src/services/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sources":["../../../../src/services/validation.ts"],"sourcesContent":["/**\n * Component Validation Service\n * Phase 0: Resource Limits & Schema Validation\n *\n * Validates LLM-generated components against:\n * - JSON schema\n * - Resource limits (data points, payload size, grid bounds)\n * - Security constraints (domain whitelist, XSS prevention)\n */\n\nimport type {\n  UIComponent,\n  UILayout,\n  ValidationResult,\n  ResourceLimits,\n  ChartComponentParams,\n  TableComponentParams,\n} from '../types'\n\n/**\n * Default resource limits (configurable via env)\n */\nexport const DEFAULT_RESOURCE_LIMITS: ResourceLimits = {\n  maxDataPoints: 1000,\n  maxTableRows: 100,\n  maxPayloadSize: 50 * 1024, // 50KB\n  renderTimeout: 5000, // 5 seconds\n}\n\n/**\n * Allowed iframe domains (whitelist)\n * Must match CSP frame-src directive\n */\nconst ALLOWED_IFRAME_DOMAINS = [\n  'quickchart.io',\n  'www.quickchart.io',\n  'deposium.com',\n  'deposium.vip',\n  'localhost',\n]\n\n/**\n * Validate grid position bounds (1-12 columns)\n */\nexport function validateGridPosition(position: UIComponent['position']): ValidationResult {\n  const errors: ValidationResult['errors'] = []\n\n  // ✅ PHASE 3 FIX: Defensive check for undefined position\n  if (!position) {\n    return {\n      valid: false,\n      errors: [\n        {\n          path: 'position',\n          message: 'Position is required',\n          code: 'MISSING_POSITION',\n        },\n      ],\n    }\n  }\n\n  if (position.colStart < 1 || position.colStart > 12) {\n    errors.push({\n      path: 'position.colStart',\n      message: 'Column start must be between 1 and 12',\n      code: 'INVALID_GRID_COL_START',\n    })\n  }\n\n  if (position.colSpan < 1 || position.colSpan > 12) {\n    errors.push({\n      path: 'position.colSpan',\n      message: 'Column span must be between 1 and 12',\n      code: 'INVALID_GRID_COL_SPAN',\n    })\n  }\n\n  if (position.colStart + position.colSpan - 1 > 12) {\n    errors.push({\n      path: 'position',\n      message: 'Column start + span exceeds grid width (12)',\n      code: 'GRID_OVERFLOW',\n    })\n  }\n\n  if (position.rowStart !== undefined && position.rowStart < 1) {\n    errors.push({\n      path: 'position.rowStart',\n      message: 'Row start must be >= 1',\n      code: 'INVALID_GRID_ROW_START',\n    })\n  }\n\n  if (position.rowSpan !== undefined && position.rowSpan < 1) {\n    errors.push({\n      path: 'position.rowSpan',\n      message: 'Row span must be >= 1',\n      code: 'INVALID_GRID_ROW_SPAN',\n    })\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  }\n}\n\n/**\n * Validate chart component against resource limits\n */\nexport function validateChartComponent(\n  params: ChartComponentParams,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const errors: ValidationResult['errors'] = []\n\n  // Validate data points count\n  const totalDataPoints = params.data.datasets.reduce(\n    (sum, dataset) => sum + dataset.data.length,\n    0\n  )\n\n  if (totalDataPoints > limits.maxDataPoints) {\n    errors.push({\n      path: 'params.data',\n      message: `Chart exceeds max data points: ${totalDataPoints} > ${limits.maxDataPoints}`,\n      code: 'RESOURCE_LIMIT_EXCEEDED',\n    })\n  }\n\n  // Validate labels match dataset length\n  const expectedLength = params.data.labels.length\n  for (const [index, dataset] of params.data.datasets.entries()) {\n    if (dataset.data.length !== expectedLength) {\n      errors.push({\n        path: `params.data.datasets[${index}]`,\n        message: `Dataset length mismatch: expected ${expectedLength}, got ${dataset.data.length}`,\n        code: 'DATA_LENGTH_MISMATCH',\n      })\n    }\n  }\n\n  // Validate numeric data\n  for (const [index, dataset] of params.data.datasets.entries()) {\n    for (const [dataIndex, value] of dataset.data.entries()) {\n      if (typeof value !== 'number' || !Number.isFinite(value)) {\n        errors.push({\n          path: `params.data.datasets[${index}].data[${dataIndex}]`,\n          message: `Invalid data value: ${value} (must be finite number)`,\n          code: 'INVALID_DATA_TYPE',\n        })\n      }\n    }\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  }\n}\n\n/**\n * Validate table component against resource limits\n */\nexport function validateTableComponent(\n  params: TableComponentParams,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const errors: ValidationResult['errors'] = []\n\n  // Validate row count\n  if (params.rows.length > limits.maxTableRows) {\n    errors.push({\n      path: 'params.rows',\n      message: `Table exceeds max rows: ${params.rows.length} > ${limits.maxTableRows}`,\n      code: 'RESOURCE_LIMIT_EXCEEDED',\n    })\n  }\n\n  // Validate columns\n  if (params.columns.length === 0) {\n    errors.push({\n      path: 'params.columns',\n      message: 'Table must have at least one column',\n      code: 'EMPTY_COLUMNS',\n    })\n  }\n\n  // Validate column keys are unique\n  const columnKeys = new Set<string>()\n  for (const [index, column] of params.columns.entries()) {\n    if (columnKeys.has(column.key)) {\n      errors.push({\n        path: `params.columns[${index}]`,\n        message: `Duplicate column key: ${column.key}`,\n        code: 'DUPLICATE_COLUMN_KEY',\n      })\n    }\n    columnKeys.add(column.key)\n  }\n\n  // Validate rows have valid data for defined columns\n  for (const [rowIndex, row] of params.rows.entries()) {\n    for (const column of params.columns) {\n      if (!(column.key in row)) {\n        errors.push({\n          path: `params.rows[${rowIndex}]`,\n          message: `Missing column key: ${column.key}`,\n          code: 'MISSING_COLUMN_DATA',\n        })\n      }\n    }\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  }\n}\n\n/**\n * Validate payload size\n */\nexport function validatePayloadSize(\n  component: UIComponent,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const payloadSize = JSON.stringify(component).length\n\n  if (payloadSize > limits.maxPayloadSize) {\n    return {\n      valid: false,\n      errors: [\n        {\n          path: 'component',\n          message: `Payload size exceeds limit: ${payloadSize} > ${limits.maxPayloadSize} bytes`,\n          code: 'PAYLOAD_TOO_LARGE',\n        },\n      ],\n    }\n  }\n\n  return { valid: true }\n}\n\n/**\n * Sanitize string to prevent XSS\n * Basic implementation - DOMPurify used at render time\n */\nexport function sanitizeString(input: string): string {\n  return input\n    .replace(/<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi, '')\n    .replace(/on\\w+=\"[^\"]*\"/gi, '')\n    .replace(/javascript:/gi, '')\n}\n\n/**\n * Validate iframe domain against whitelist\n */\nexport function validateIframeDomain(url: string): ValidationResult {\n  try {\n    const parsedUrl = new URL(url)\n    const domain = parsedUrl.hostname\n\n    const isAllowed = ALLOWED_IFRAME_DOMAINS.some(\n      (allowed) => domain === allowed || domain.endsWith(`.${allowed}`) || allowed === 'localhost'\n    )\n\n    if (!isAllowed) {\n      return {\n        valid: false,\n        errors: [\n          {\n            path: 'url',\n            message: `Domain not whitelisted: ${domain}`,\n            code: 'DOMAIN_NOT_WHITELISTED',\n          },\n        ],\n      }\n    }\n\n    return { valid: true }\n  } catch (error) {\n    return {\n      valid: false,\n      errors: [\n        {\n          path: 'url',\n          message: 'Invalid URL format',\n          code: 'INVALID_URL',\n        },\n      ],\n    }\n  }\n}\n\n/**\n * Validate entire component\n */\nexport function validateComponent(\n  component: UIComponent,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const errors: ValidationResult['errors'] = []\n\n  // Validate grid position\n  const gridResult = validateGridPosition(component.position)\n  if (!gridResult.valid) {\n    errors.push(...(gridResult.errors || []))\n  }\n\n  // Validate payload size\n  const sizeResult = validatePayloadSize(component, limits)\n  if (!sizeResult.valid) {\n    errors.push(...(sizeResult.errors || []))\n  }\n\n  // Type-specific validation\n  switch (component.type) {\n    case 'chart':\n      const chartResult = validateChartComponent(component.params as ChartComponentParams, limits)\n      if (!chartResult.valid) {\n        errors.push(...(chartResult.errors || []))\n      }\n      break\n\n    case 'table':\n      const tableResult = validateTableComponent(component.params as TableComponentParams, limits)\n      if (!tableResult.valid) {\n        errors.push(...(tableResult.errors || []))\n      }\n      break\n\n    case 'metric':\n      // Basic validation for metrics\n      const metricParams = component.params as any\n      if (!metricParams.title || !metricParams.value) {\n        errors.push({\n          path: 'params',\n          message: 'Metric must have title and value',\n          code: 'INVALID_METRIC',\n        })\n      }\n      break\n\n    case 'text':\n      // Basic validation for text\n      const textParams = component.params as any\n      if (!textParams.content) {\n        errors.push({\n          path: 'params',\n          message: 'Text component must have content',\n          code: 'INVALID_TEXT',\n        })\n      }\n      break\n\n    default:\n      errors.push({\n        path: 'type',\n        message: `Unknown component type: ${component.type}`,\n        code: 'UNKNOWN_COMPONENT_TYPE',\n      })\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  }\n}\n\n/**\n * Validate entire layout\n */\nexport function validateLayout(\n  layout: UILayout,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const errors: ValidationResult['errors'] = []\n\n  // Validate component count\n  if (layout.components.length === 0) {\n    errors.push({\n      path: 'components',\n      message: 'Layout must have at least one component',\n      code: 'EMPTY_LAYOUT',\n    })\n  }\n\n  if (layout.components.length > 12) {\n    errors.push({\n      path: 'components',\n      message: `Layout exceeds max components: ${layout.components.length} > 12`,\n      code: 'TOO_MANY_COMPONENTS',\n    })\n  }\n\n  // Validate each component\n  for (const [index, component] of layout.components.entries()) {\n    const result = validateComponent(component, limits)\n    if (!result.valid) {\n      errors.push(\n        ...(result.errors?.map((error) => ({\n          ...error,\n          path: `components[${index}].${error.path}`,\n        })) || [])\n      )\n    }\n  }\n\n  // Validate grid configuration\n  if (layout.grid.columns !== 12) {\n    errors.push({\n      path: 'grid.columns',\n      message: 'Grid must have 12 columns (Bootstrap-like)',\n      code: 'INVALID_GRID_COLUMNS',\n    })\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  }\n}\n"],"names":[],"mappings":"AAsBO,MAAM,0BAA0C;AAAA,EACrD,eAAe;AAAA,EACf,cAAc;AAAA,EACd,gBAAgB,KAAK;AAAA;AAAA,EACrB,eAAe;AAAA;AACjB;AAiBO,SAAS,qBAAqB,UAAqD;AACxF,QAAM,SAAqC,CAAA;AAG3C,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ;AAAA,QACN;AAAA,UACE,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA;AAAA,MACR;AAAA,IACF;AAAA,EAEJ;AAEA,MAAI,SAAS,WAAW,KAAK,SAAS,WAAW,IAAI;AACnD,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,UAAU,KAAK,SAAS,UAAU,IAAI;AACjD,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,WAAW,SAAS,UAAU,IAAI,IAAI;AACjD,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,aAAa,UAAa,SAAS,WAAW,GAAG;AAC5D,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,YAAY,UAAa,SAAS,UAAU,GAAG;AAC1D,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,uBACd,QACA,SAAyB,yBACP;AAClB,QAAM,SAAqC,CAAA;AAG3C,QAAM,kBAAkB,OAAO,KAAK,SAAS;AAAA,IAC3C,CAAC,KAAK,YAAY,MAAM,QAAQ,KAAK;AAAA,IACrC;AAAA,EAAA;AAGF,MAAI,kBAAkB,OAAO,eAAe;AAC1C,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,kCAAkC,eAAe,MAAM,OAAO,aAAa;AAAA,MACpF,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,QAAM,iBAAiB,OAAO,KAAK,OAAO;AAC1C,aAAW,CAAC,OAAO,OAAO,KAAK,OAAO,KAAK,SAAS,WAAW;AAC7D,QAAI,QAAQ,KAAK,WAAW,gBAAgB;AAC1C,aAAO,KAAK;AAAA,QACV,MAAM,wBAAwB,KAAK;AAAA,QACnC,SAAS,qCAAqC,cAAc,SAAS,QAAQ,KAAK,MAAM;AAAA,QACxF,MAAM;AAAA,MAAA,CACP;AAAA,IACH;AAAA,EACF;AAGA,aAAW,CAAC,OAAO,OAAO,KAAK,OAAO,KAAK,SAAS,WAAW;AAC7D,eAAW,CAAC,WAAW,KAAK,KAAK,QAAQ,KAAK,WAAW;AACvD,UAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GAAG;AACxD,eAAO,KAAK;AAAA,UACV,MAAM,wBAAwB,KAAK,UAAU,SAAS;AAAA,UACtD,SAAS,uBAAuB,KAAK;AAAA,UACrC,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,uBACd,QACA,SAAyB,yBACP;AAClB,QAAM,SAAqC,CAAA;AAG3C,MAAI,OAAO,KAAK,SAAS,OAAO,cAAc;AAC5C,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,2BAA2B,OAAO,KAAK,MAAM,MAAM,OAAO,YAAY;AAAA,MAC/E,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,MAAI,OAAO,QAAQ,WAAW,GAAG;AAC/B,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,QAAM,iCAAiB,IAAA;AACvB,aAAW,CAAC,OAAO,MAAM,KAAK,OAAO,QAAQ,WAAW;AACtD,QAAI,WAAW,IAAI,OAAO,GAAG,GAAG;AAC9B,aAAO,KAAK;AAAA,QACV,MAAM,kBAAkB,KAAK;AAAA,QAC7B,SAAS,yBAAyB,OAAO,GAAG;AAAA,QAC5C,MAAM;AAAA,MAAA,CACP;AAAA,IACH;AACA,eAAW,IAAI,OAAO,GAAG;AAAA,EAC3B;AAGA,aAAW,CAAC,UAAU,GAAG,KAAK,OAAO,KAAK,WAAW;AACnD,eAAW,UAAU,OAAO,SAAS;AACnC,UAAI,EAAE,OAAO,OAAO,MAAM;AACxB,eAAO,KAAK;AAAA,UACV,MAAM,eAAe,QAAQ;AAAA,UAC7B,SAAS,uBAAuB,OAAO,GAAG;AAAA,UAC1C,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,oBACd,WACA,SAAyB,yBACP;AAClB,QAAM,cAAc,KAAK,UAAU,SAAS,EAAE;AAE9C,MAAI,cAAc,OAAO,gBAAgB;AACvC,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ;AAAA,QACN;AAAA,UACE,MAAM;AAAA,UACN,SAAS,+BAA+B,WAAW,MAAM,OAAO,cAAc;AAAA,UAC9E,MAAM;AAAA,QAAA;AAAA,MACR;AAAA,IACF;AAAA,EAEJ;AAEA,SAAO,EAAE,OAAO,KAAA;AAClB;AAwDO,SAAS,kBACd,WACA,SAAyB,yBACP;AAClB,QAAM,SAAqC,CAAA;AAG3C,QAAM,aAAa,qBAAqB,UAAU,QAAQ;AAC1D,MAAI,CAAC,WAAW,OAAO;AACrB,WAAO,KAAK,GAAI,WAAW,UAAU,CAAA,CAAG;AAAA,EAC1C;AAGA,QAAM,aAAa,oBAAoB,WAAW,MAAM;AACxD,MAAI,CAAC,WAAW,OAAO;AACrB,WAAO,KAAK,GAAI,WAAW,UAAU,CAAA,CAAG;AAAA,EAC1C;AAGA,UAAQ,UAAU,MAAA;AAAA,IAChB,KAAK;AACH,YAAM,cAAc,uBAAuB,UAAU,QAAgC,MAAM;AAC3F,UAAI,CAAC,YAAY,OAAO;AACtB,eAAO,KAAK,GAAI,YAAY,UAAU,CAAA,CAAG;AAAA,MAC3C;AACA;AAAA,IAEF,KAAK;AACH,YAAM,cAAc,uBAAuB,UAAU,QAAgC,MAAM;AAC3F,UAAI,CAAC,YAAY,OAAO;AACtB,eAAO,KAAK,GAAI,YAAY,UAAU,CAAA,CAAG;AAAA,MAC3C;AACA;AAAA,IAEF,KAAK;AAEH,YAAM,eAAe,UAAU;AAC/B,UAAI,CAAC,aAAa,SAAS,CAAC,aAAa,OAAO;AAC9C,eAAO,KAAK;AAAA,UACV,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AACA;AAAA,IAEF,KAAK;AAEH,YAAM,aAAa,UAAU;AAC7B,UAAI,CAAC,WAAW,SAAS;AACvB,eAAO,KAAK;AAAA,UACV,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AACA;AAAA,IAEF;AACE,aAAO,KAAK;AAAA,QACV,MAAM;AAAA,QACN,SAAS,2BAA2B,UAAU,IAAI;AAAA,QAClD,MAAM;AAAA,MAAA,CACP;AAAA,EAAA;AAGL,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,eACd,QACA,SAAyB,yBACP;AAnWb;AAoWL,QAAM,SAAqC,CAAA;AAG3C,MAAI,OAAO,WAAW,WAAW,GAAG;AAClC,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,OAAO,WAAW,SAAS,IAAI;AACjC,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,kCAAkC,OAAO,WAAW,MAAM;AAAA,MACnE,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,aAAW,CAAC,OAAO,SAAS,KAAK,OAAO,WAAW,WAAW;AAC5D,UAAM,SAAS,kBAAkB,WAAW,MAAM;AAClD,QAAI,CAAC,OAAO,OAAO;AACjB,aAAO;AAAA,QACL,KAAI,YAAO,WAAP,mBAAe,IAAI,CAAC,WAAW;AAAA,UACjC,GAAG;AAAA,UACH,MAAM,cAAc,KAAK,KAAK,MAAM,IAAI;AAAA,QAAA,QACnC,CAAA;AAAA,MAAC;AAAA,IAEZ;AAAA,EACF;AAGA,MAAI,OAAO,KAAK,YAAY,IAAI;AAC9B,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;"}
+{"version":3,"file":"validation.js","sources":["../../../../src/services/validation.ts"],"sourcesContent":["/**\n * Component Validation Service\n * Phase 0: Resource Limits & Schema Validation\n *\n * Validates LLM-generated components against:\n * - JSON schema\n * - Resource limits (data points, payload size, grid bounds)\n * - Security constraints (domain whitelist, XSS prevention)\n */\n\nimport type {\n  UIComponent,\n  UILayout,\n  ValidationResult,\n  ResourceLimits,\n  ChartComponentParams,\n  TableComponentParams,\n} from '../types'\n\n/**\n * Default resource limits (configurable via env)\n */\nexport const DEFAULT_RESOURCE_LIMITS: ResourceLimits = {\n  maxDataPoints: 1000,\n  maxTableRows: 100,\n  maxPayloadSize: 50 * 1024, // 50KB\n  renderTimeout: 5000, // 5 seconds\n}\n\n/**\n * Allowed iframe domains (whitelist)\n * Must match CSP frame-src directive\n */\nconst ALLOWED_IFRAME_DOMAINS = [\n  'quickchart.io',\n  'www.quickchart.io',\n  'deposium.com',\n  'deposium.vip',\n  'localhost',\n]\n\n/**\n * Validate grid position bounds (1-12 columns)\n */\nexport function validateGridPosition(position: UIComponent['position']): ValidationResult {\n  const errors: ValidationResult['errors'] = []\n\n  // ✅ PHASE 3 FIX: Defensive check for undefined position\n  if (!position) {\n    return {\n      valid: false,\n      errors: [\n        {\n          path: 'position',\n          message: 'Position is required',\n          code: 'MISSING_POSITION',\n        },\n      ],\n    }\n  }\n\n  if (position.colStart < 1 || position.colStart > 12) {\n    errors.push({\n      path: 'position.colStart',\n      message: 'Column start must be between 1 and 12',\n      code: 'INVALID_GRID_COL_START',\n    })\n  }\n\n  if (position.colSpan < 1 || position.colSpan > 12) {\n    errors.push({\n      path: 'position.colSpan',\n      message: 'Column span must be between 1 and 12',\n      code: 'INVALID_GRID_COL_SPAN',\n    })\n  }\n\n  if (position.colStart + position.colSpan - 1 > 12) {\n    errors.push({\n      path: 'position',\n      message: 'Column start + span exceeds grid width (12)',\n      code: 'GRID_OVERFLOW',\n    })\n  }\n\n  if (position.rowStart !== undefined && position.rowStart < 1) {\n    errors.push({\n      path: 'position.rowStart',\n      message: 'Row start must be >= 1',\n      code: 'INVALID_GRID_ROW_START',\n    })\n  }\n\n  if (position.rowSpan !== undefined && position.rowSpan < 1) {\n    errors.push({\n      path: 'position.rowSpan',\n      message: 'Row span must be >= 1',\n      code: 'INVALID_GRID_ROW_SPAN',\n    })\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  }\n}\n\n/**\n * Validate chart component against resource limits\n */\nexport function validateChartComponent(\n  params: ChartComponentParams,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const errors: ValidationResult['errors'] = []\n\n  // Validate data points count\n  const totalDataPoints = params.data.datasets.reduce(\n    (sum, dataset) => sum + dataset.data.length,\n    0\n  )\n\n  if (totalDataPoints > limits.maxDataPoints) {\n    errors.push({\n      path: 'params.data',\n      message: `Chart exceeds max data points: ${totalDataPoints} > ${limits.maxDataPoints}`,\n      code: 'RESOURCE_LIMIT_EXCEEDED',\n    })\n  }\n\n  // Validate labels match dataset length\n  const expectedLength = params.data.labels.length\n  for (const [index, dataset] of params.data.datasets.entries()) {\n    if (dataset.data.length !== expectedLength) {\n      errors.push({\n        path: `params.data.datasets[${index}]`,\n        message: `Dataset length mismatch: expected ${expectedLength}, got ${dataset.data.length}`,\n        code: 'DATA_LENGTH_MISMATCH',\n      })\n    }\n  }\n\n  // Validate numeric data\n  for (const [index, dataset] of params.data.datasets.entries()) {\n    for (const [dataIndex, value] of dataset.data.entries()) {\n      if (typeof value !== 'number' || !Number.isFinite(value)) {\n        errors.push({\n          path: `params.data.datasets[${index}].data[${dataIndex}]`,\n          message: `Invalid data value: ${value} (must be finite number)`,\n          code: 'INVALID_DATA_TYPE',\n        })\n      }\n    }\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  }\n}\n\n/**\n * Validate table component against resource limits\n */\nexport function validateTableComponent(\n  params: TableComponentParams,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const errors: ValidationResult['errors'] = []\n\n  // Validate row count\n  if (params.rows.length > limits.maxTableRows) {\n    errors.push({\n      path: 'params.rows',\n      message: `Table exceeds max rows: ${params.rows.length} > ${limits.maxTableRows}`,\n      code: 'RESOURCE_LIMIT_EXCEEDED',\n    })\n  }\n\n  // Validate columns\n  if (params.columns.length === 0) {\n    errors.push({\n      path: 'params.columns',\n      message: 'Table must have at least one column',\n      code: 'EMPTY_COLUMNS',\n    })\n  }\n\n  // Validate column keys are unique\n  const columnKeys = new Set<string>()\n  for (const [index, column] of params.columns.entries()) {\n    if (columnKeys.has(column.key)) {\n      errors.push({\n        path: `params.columns[${index}]`,\n        message: `Duplicate column key: ${column.key}`,\n        code: 'DUPLICATE_COLUMN_KEY',\n      })\n    }\n    columnKeys.add(column.key)\n  }\n\n  // Validate rows have valid data for defined columns\n  for (const [rowIndex, row] of params.rows.entries()) {\n    for (const column of params.columns) {\n      if (!(column.key in row)) {\n        errors.push({\n          path: `params.rows[${rowIndex}]`,\n          message: `Missing column key: ${column.key}`,\n          code: 'MISSING_COLUMN_DATA',\n        })\n      }\n    }\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  }\n}\n\n/**\n * Validate payload size\n */\nexport function validatePayloadSize(\n  component: UIComponent,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const payloadSize = JSON.stringify(component).length\n\n  if (payloadSize > limits.maxPayloadSize) {\n    return {\n      valid: false,\n      errors: [\n        {\n          path: 'component',\n          message: `Payload size exceeds limit: ${payloadSize} > ${limits.maxPayloadSize} bytes`,\n          code: 'PAYLOAD_TOO_LARGE',\n        },\n      ],\n    }\n  }\n\n  return { valid: true }\n}\n\n/**\n * Sanitize string to prevent XSS\n * Basic implementation - DOMPurify used at render time\n */\nexport function sanitizeString(input: string): string {\n  return input\n    .replace(/<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi, '')\n    .replace(/on\\w+=\"[^\"]*\"/gi, '')\n    .replace(/javascript:/gi, '')\n}\n\n/**\n * Validate iframe domain against whitelist\n */\nexport function validateIframeDomain(url: string): ValidationResult {\n  try {\n    const parsedUrl = new URL(url)\n    const domain = parsedUrl.hostname\n\n    const isAllowed = ALLOWED_IFRAME_DOMAINS.some(\n      (allowed) => domain === allowed || domain.endsWith(`.${allowed}`) || allowed === 'localhost'\n    )\n\n    if (!isAllowed) {\n      return {\n        valid: false,\n        errors: [\n          {\n            path: 'url',\n            message: `Domain not whitelisted: ${domain}`,\n            code: 'DOMAIN_NOT_WHITELISTED',\n          },\n        ],\n      }\n    }\n\n    return { valid: true }\n  } catch (error) {\n    return {\n      valid: false,\n      errors: [\n        {\n          path: 'url',\n          message: 'Invalid URL format',\n          code: 'INVALID_URL',\n        },\n      ],\n    }\n  }\n}\n\n/**\n * Validate entire component\n */\nexport function validateComponent(\n  component: UIComponent,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const errors: ValidationResult['errors'] = []\n\n  // Validate grid position\n  const gridResult = validateGridPosition(component.position)\n  if (!gridResult.valid) {\n    errors.push(...(gridResult.errors || []))\n  }\n\n  // Validate payload size\n  const sizeResult = validatePayloadSize(component, limits)\n  if (!sizeResult.valid) {\n    errors.push(...(sizeResult.errors || []))\n  }\n\n  // Type-specific validation\n  switch (component.type) {\n    case 'chart':\n      const chartResult = validateChartComponent(component.params as ChartComponentParams, limits)\n      if (!chartResult.valid) {\n        errors.push(...(chartResult.errors || []))\n      }\n      break\n\n    case 'table':\n      const tableResult = validateTableComponent(component.params as TableComponentParams, limits)\n      if (!tableResult.valid) {\n        errors.push(...(tableResult.errors || []))\n      }\n      break\n\n    case 'metric':\n      // Basic validation for metrics\n      const metricParams = component.params as any\n      if (!metricParams.title || !metricParams.value) {\n        errors.push({\n          path: 'params',\n          message: 'Metric must have title and value',\n          code: 'INVALID_METRIC',\n        })\n      }\n      break\n\n    case 'text':\n      // Basic validation for text\n      const textParams = component.params as any\n      if (!textParams.content) {\n        errors.push({\n          path: 'params',\n          message: 'Text component must have content',\n          code: 'INVALID_TEXT',\n        })\n      }\n      break\n\n    case 'iframe':\n      // Basic validation for iframe\n      const iframeParams = component.params as any\n      if (!iframeParams.url) {\n        errors.push({\n          path: 'params',\n          message: 'Iframe component must have url',\n          code: 'INVALID_IFRAME',\n        })\n      }\n      break\n\n    case 'image':\n      // Basic validation for image\n      const imageParams = component.params as any\n      if (!imageParams.url) {\n        errors.push({\n          path: 'params',\n          message: 'Image component must have url',\n          code: 'INVALID_IMAGE',\n        })\n      }\n      break\n\n    case 'link':\n      // Basic validation for link\n      const linkParams = component.params as any\n      if (!linkParams.url) {\n        errors.push({\n          path: 'params',\n          message: 'Link component must have url',\n          code: 'INVALID_LINK',\n        })\n      }\n      break\n\n    default:\n      errors.push({\n        path: 'type',\n        message: `Unknown component type: ${component.type}`,\n        code: 'UNKNOWN_COMPONENT_TYPE',\n      })\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  }\n}\n\n/**\n * Validate entire layout\n */\nexport function validateLayout(\n  layout: UILayout,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const errors: ValidationResult['errors'] = []\n\n  // Validate component count\n  if (layout.components.length === 0) {\n    errors.push({\n      path: 'components',\n      message: 'Layout must have at least one component',\n      code: 'EMPTY_LAYOUT',\n    })\n  }\n\n  if (layout.components.length > 12) {\n    errors.push({\n      path: 'components',\n      message: `Layout exceeds max components: ${layout.components.length} > 12`,\n      code: 'TOO_MANY_COMPONENTS',\n    })\n  }\n\n  // Validate each component\n  for (const [index, component] of layout.components.entries()) {\n    const result = validateComponent(component, limits)\n    if (!result.valid) {\n      errors.push(\n        ...(result.errors?.map((error) => ({\n          ...error,\n          path: `components[${index}].${error.path}`,\n        })) || [])\n      )\n    }\n  }\n\n  // Validate grid configuration\n  if (layout.grid.columns !== 12) {\n    errors.push({\n      path: 'grid.columns',\n      message: 'Grid must have 12 columns (Bootstrap-like)',\n      code: 'INVALID_GRID_COLUMNS',\n    })\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  }\n}\n"],"names":[],"mappings":"AAsBO,MAAM,0BAA0C;AAAA,EACrD,eAAe;AAAA,EACf,cAAc;AAAA,EACd,gBAAgB,KAAK;AAAA;AAAA,EACrB,eAAe;AAAA;AACjB;AAiBO,SAAS,qBAAqB,UAAqD;AACxF,QAAM,SAAqC,CAAA;AAG3C,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ;AAAA,QACN;AAAA,UACE,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA;AAAA,MACR;AAAA,IACF;AAAA,EAEJ;AAEA,MAAI,SAAS,WAAW,KAAK,SAAS,WAAW,IAAI;AACnD,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,UAAU,KAAK,SAAS,UAAU,IAAI;AACjD,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,WAAW,SAAS,UAAU,IAAI,IAAI;AACjD,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,aAAa,UAAa,SAAS,WAAW,GAAG;AAC5D,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,YAAY,UAAa,SAAS,UAAU,GAAG;AAC1D,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,uBACd,QACA,SAAyB,yBACP;AAClB,QAAM,SAAqC,CAAA;AAG3C,QAAM,kBAAkB,OAAO,KAAK,SAAS;AAAA,IAC3C,CAAC,KAAK,YAAY,MAAM,QAAQ,KAAK;AAAA,IACrC;AAAA,EAAA;AAGF,MAAI,kBAAkB,OAAO,eAAe;AAC1C,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,kCAAkC,eAAe,MAAM,OAAO,aAAa;AAAA,MACpF,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,QAAM,iBAAiB,OAAO,KAAK,OAAO;AAC1C,aAAW,CAAC,OAAO,OAAO,KAAK,OAAO,KAAK,SAAS,WAAW;AAC7D,QAAI,QAAQ,KAAK,WAAW,gBAAgB;AAC1C,aAAO,KAAK;AAAA,QACV,MAAM,wBAAwB,KAAK;AAAA,QACnC,SAAS,qCAAqC,cAAc,SAAS,QAAQ,KAAK,MAAM;AAAA,QACxF,MAAM;AAAA,MAAA,CACP;AAAA,IACH;AAAA,EACF;AAGA,aAAW,CAAC,OAAO,OAAO,KAAK,OAAO,KAAK,SAAS,WAAW;AAC7D,eAAW,CAAC,WAAW,KAAK,KAAK,QAAQ,KAAK,WAAW;AACvD,UAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GAAG;AACxD,eAAO,KAAK;AAAA,UACV,MAAM,wBAAwB,KAAK,UAAU,SAAS;AAAA,UACtD,SAAS,uBAAuB,KAAK;AAAA,UACrC,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,uBACd,QACA,SAAyB,yBACP;AAClB,QAAM,SAAqC,CAAA;AAG3C,MAAI,OAAO,KAAK,SAAS,OAAO,cAAc;AAC5C,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,2BAA2B,OAAO,KAAK,MAAM,MAAM,OAAO,YAAY;AAAA,MAC/E,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,MAAI,OAAO,QAAQ,WAAW,GAAG;AAC/B,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,QAAM,iCAAiB,IAAA;AACvB,aAAW,CAAC,OAAO,MAAM,KAAK,OAAO,QAAQ,WAAW;AACtD,QAAI,WAAW,IAAI,OAAO,GAAG,GAAG;AAC9B,aAAO,KAAK;AAAA,QACV,MAAM,kBAAkB,KAAK;AAAA,QAC7B,SAAS,yBAAyB,OAAO,GAAG;AAAA,QAC5C,MAAM;AAAA,MAAA,CACP;AAAA,IACH;AACA,eAAW,IAAI,OAAO,GAAG;AAAA,EAC3B;AAGA,aAAW,CAAC,UAAU,GAAG,KAAK,OAAO,KAAK,WAAW;AACnD,eAAW,UAAU,OAAO,SAAS;AACnC,UAAI,EAAE,OAAO,OAAO,MAAM;AACxB,eAAO,KAAK;AAAA,UACV,MAAM,eAAe,QAAQ;AAAA,UAC7B,SAAS,uBAAuB,OAAO,GAAG;AAAA,UAC1C,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,oBACd,WACA,SAAyB,yBACP;AAClB,QAAM,cAAc,KAAK,UAAU,SAAS,EAAE;AAE9C,MAAI,cAAc,OAAO,gBAAgB;AACvC,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ;AAAA,QACN;AAAA,UACE,MAAM;AAAA,UACN,SAAS,+BAA+B,WAAW,MAAM,OAAO,cAAc;AAAA,UAC9E,MAAM;AAAA,QAAA;AAAA,MACR;AAAA,IACF;AAAA,EAEJ;AAEA,SAAO,EAAE,OAAO,KAAA;AAClB;AAwDO,SAAS,kBACd,WACA,SAAyB,yBACP;AAClB,QAAM,SAAqC,CAAA;AAG3C,QAAM,aAAa,qBAAqB,UAAU,QAAQ;AAC1D,MAAI,CAAC,WAAW,OAAO;AACrB,WAAO,KAAK,GAAI,WAAW,UAAU,CAAA,CAAG;AAAA,EAC1C;AAGA,QAAM,aAAa,oBAAoB,WAAW,MAAM;AACxD,MAAI,CAAC,WAAW,OAAO;AACrB,WAAO,KAAK,GAAI,WAAW,UAAU,CAAA,CAAG;AAAA,EAC1C;AAGA,UAAQ,UAAU,MAAA;AAAA,IAChB,KAAK;AACH,YAAM,cAAc,uBAAuB,UAAU,QAAgC,MAAM;AAC3F,UAAI,CAAC,YAAY,OAAO;AACtB,eAAO,KAAK,GAAI,YAAY,UAAU,CAAA,CAAG;AAAA,MAC3C;AACA;AAAA,IAEF,KAAK;AACH,YAAM,cAAc,uBAAuB,UAAU,QAAgC,MAAM;AAC3F,UAAI,CAAC,YAAY,OAAO;AACtB,eAAO,KAAK,GAAI,YAAY,UAAU,CAAA,CAAG;AAAA,MAC3C;AACA;AAAA,IAEF,KAAK;AAEH,YAAM,eAAe,UAAU;AAC/B,UAAI,CAAC,aAAa,SAAS,CAAC,aAAa,OAAO;AAC9C,eAAO,KAAK;AAAA,UACV,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AACA;AAAA,IAEF,KAAK;AAEH,YAAM,aAAa,UAAU;AAC7B,UAAI,CAAC,WAAW,SAAS;AACvB,eAAO,KAAK;AAAA,UACV,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AACA;AAAA,IAEF,KAAK;AAEH,YAAM,eAAe,UAAU;AAC/B,UAAI,CAAC,aAAa,KAAK;AACrB,eAAO,KAAK;AAAA,UACV,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AACA;AAAA,IAEF,KAAK;AAEH,YAAM,cAAc,UAAU;AAC9B,UAAI,CAAC,YAAY,KAAK;AACpB,eAAO,KAAK;AAAA,UACV,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AACA;AAAA,IAEF,KAAK;AAEH,YAAM,aAAa,UAAU;AAC7B,UAAI,CAAC,WAAW,KAAK;AACnB,eAAO,KAAK;AAAA,UACV,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AACA;AAAA,IAEF;AACE,aAAO,KAAK;AAAA,QACV,MAAM;AAAA,QACN,SAAS,2BAA2B,UAAU,IAAI;AAAA,QAClD,MAAM;AAAA,MAAA,CACP;AAAA,EAAA;AAGL,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,eACd,QACA,SAAyB,yBACP;AAvYb;AAwYL,QAAM,SAAqC,CAAA;AAG3C,MAAI,OAAO,WAAW,WAAW,GAAG;AAClC,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,OAAO,WAAW,SAAS,IAAI;AACjC,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,kCAAkC,OAAO,WAAW,MAAM;AAAA,MACnE,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,aAAW,CAAC,OAAO,SAAS,KAAK,OAAO,WAAW,WAAW;AAC5D,UAAM,SAAS,kBAAkB,WAAW,MAAM;AAClD,QAAI,CAAC,OAAO,OAAO;AACjB,aAAO;AAAA,QACL,KAAI,YAAO,WAAP,mBAAe,IAAI,CAAC,WAAW;AAAA,UACjC,GAAG;AAAA,UACH,MAAM,cAAc,KAAK,KAAK,MAAM,IAAI;AAAA,QAAA,QACnC,CAAA;AAAA,MAAC;AAAA,IAEZ;AAAA,EACF;AAGA,MAAI,OAAO,KAAK,YAAY,IAAI;AAC9B,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;"}

package/dist/services/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/services/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,QAAQ,EACR,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,UAAU,CAAA;AAEjB;;GAEG;AACH,eAAO,MAAM,uBAAuB,EAAE,cAKrC,CAAA;AAcD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,GAAG,gBAAgB,CA6DxF;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,oBAAoB,EAC5B,MAAM,GAAE,cAAwC,GAC/C,gBAAgB,CA8ClB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,oBAAoB,EAC5B,MAAM,GAAE,cAAwC,GAC/C,gBAAgB,CAmDlB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,WAAW,EACtB,MAAM,GAAE,cAAwC,GAC/C,gBAAgB,CAiBlB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKpD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAmClE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,WAAW,EACtB,MAAM,GAAE,cAAwC,GAC/C,gBAAgB,CAmElB;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,QAAQ,EAChB,MAAM,GAAE,cAAwC,GAC/C,gBAAgB,CA8ClB"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/services/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,QAAQ,EACR,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,UAAU,CAAA;AAEjB;;GAEG;AACH,eAAO,MAAM,uBAAuB,EAAE,cAKrC,CAAA;AAcD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,GAAG,gBAAgB,CA6DxF;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,oBAAoB,EAC5B,MAAM,GAAE,cAAwC,GAC/C,gBAAgB,CA8ClB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,oBAAoB,EAC5B,MAAM,GAAE,cAAwC,GAC/C,gBAAgB,CAmDlB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,WAAW,EACtB,MAAM,GAAE,cAAwC,GAC/C,gBAAgB,CAiBlB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKpD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAmClE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,WAAW,EACtB,MAAM,GAAE,cAAwC,GAC/C,gBAAgB,CAuGlB;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,QAAQ,EAChB,MAAM,GAAE,cAAwC,GAC/C,gBAAgB,CA8ClB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seed-ship/mcp-ui-solid",
-  "version": "1.0.16",
+  "version": "1.0.18",
   "description": "SolidJS components for rendering MCP-generated UI resources",
   "type": "module",
   "main": "./dist/index.cjs",