@updog/data-editor 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,15 @@
+# Changelog
+
+All notable changes to `@updog/data-editor` and `@updog/data-editor-wc` are documented here. Both packages ship in lockstep — a single entry covers both.
+
+This project follows [Semantic Versioning](https://semver.org/). While the version is `0.x`, minor version bumps may include breaking changes; we will call them out explicitly.
+
+## [0.1.0] — 2026-04-21
+
+First public release.
+
+### Added
+
+- `@updog/data-editor` — React SDK with virtualized grid, CSV/XLSX import, validation, undo/redo, find & replace, multi-source data merging.
+- `@updog/data-editor-wc` — framework-agnostic Web Component wrapper (`<updog-editor>`). Works in vanilla HTML, Angular, Vue.
+- Commercial license via API key issued through [updog.tech](https://updog.tech).

package/LICENSE

@@ -0,0 +1,259 @@
+Copyright (c) 2026 Mikhail Kutateladze. All rights reserved.
+
+================================================================================
+                         UPDOG SDK — COMMERCIAL LICENSE
+                                  Version 1.0
+================================================================================
+
+--------------------------------------------------------------------------------
+1. DEFINITIONS
+--------------------------------------------------------------------------------
+
+"Licensor"        Mikhail Kutateladze, the copyright holder of the Software.
+
+"Software"        The Updog SDK, including all source code, compiled artifacts,
+                  documentation, and associated files distributed as an npm
+                  package or otherwise.
+
+"User"            Any individual or legal entity that downloads, installs,
+                  integrates, or uses the Software.
+
+"License Key"     A unique credential issued by the Licensor that identifies
+                  the User's subscription tier and permitted domains.
+
+"Permitted
+ Environment"     Any environment listed in Section 3 of this License.
+
+"Production Use"  Any use of the Software on a domain, host, or environment
+                  not listed in Section 3, including any use intended for
+                  real users or business operations regardless of how the
+                  environment is labelled. For the avoidance of doubt, any
+                  environment not explicitly listed in Section 3 — including
+                  self-hosted, internal, staging on custom domains, and
+                  VPN-protected environments — is considered Production Use.
+
+"Root Domain"     The registered domain name and its subdomains
+                  (e.g. "example.com" covers "app.example.com").
+
+"Domain"          A publicly accessible hostname or domain name through which
+                  the User's Application is served.
+
+"Application"     Software developed by the User that integrates the Software.
+
+--------------------------------------------------------------------------------
+2. LICENSE GRANT
+--------------------------------------------------------------------------------
+
+Subject to the terms and conditions of this License, the Licensor hereby grants
+the User a limited, non-exclusive, non-transferable, non-sublicensable license
+to use and integrate the Software solely as permitted herein.
+
+The User may copy and modify the Software solely as necessary to integrate and
+run it within the User's Application (e.g. bundling, minification,
+transpilation, tree-shaking). No other modification rights are granted.
+
+The Software may include mechanisms intended to verify the validity of a
+License Key or the Domain on which the Software is used.
+
+--------------------------------------------------------------------------------
+3. FREE USE — PERMITTED ENVIRONMENTS
+--------------------------------------------------------------------------------
+
+The Software may be used free of charge, without a License Key, solely when
+running on or served from one of the following environments:
+
+  Loopback / local development:
+    - localhost
+    - 127.0.0.1
+    - 0.0.0.0
+    - ::1
+
+  Reserved TLDs:
+    - *.local
+    - *.test
+    - *.localhost
+
+  Deployment preview platforms:
+    - *.vercel.app
+    - *.netlify.app
+    - *.pages.dev
+    - *.fly.dev
+    - *.railway.app
+
+  Cloud IDEs and sandboxes:
+    - *.gitpod.io
+    - *.github.dev
+    - *.app.github.dev
+    - *.stackblitz.io
+    - *.codesandbox.io
+    - *.idx.dev
+    - *.replit.dev
+
+  Tunneling tools:
+    - *.ngrok-free.app
+    - *.ngrok.io
+    - *.loca.lt
+
+The User is solely responsible for ensuring that the Software is used only
+within Permitted Environments when operating without a valid License Key.
+
+--------------------------------------------------------------------------------
+4. COMMERCIAL USE — LICENSE KEY REQUIRED
+--------------------------------------------------------------------------------
+
+A valid License Key must be obtained from the Licensor before using the
+Software for any Production Use. This includes, without limitation:
+
+  - Custom domains (e.g. yourapp.com, app.yourcompany.io)
+  - Internal company domains and intranets
+  - Self-hosted infrastructure
+  - Any environment accessible to end users outside of Section 3
+
+License Keys are issued per Root Domain or per subscription tier as described
+on the Licensor's official website. A separate License Key is required for
+each Root Domain unless the applicable subscription plan expressly permits
+multiple domains.
+
+To obtain a License Key, visit: https://updog.tech
+
+--------------------------------------------------------------------------------
+5. RESTRICTIONS
+--------------------------------------------------------------------------------
+
+Unless expressly permitted in writing by the Licensor, the User may NOT:
+
+  a) Redistribute, sublicense, sell, rent, lease, or otherwise transfer the
+     Software or any rights therein to any third party. This restriction does
+     not prohibit distribution of the Software as compiled or bundled within
+     the User's Application;
+
+  b) Reverse engineer or decompile the Software except to the limited extent
+     expressly permitted by applicable law and only where the Licensor has
+     not made the relevant information available;
+
+  c) Remove, alter, or obscure any copyright, trademark, or proprietary
+     notices contained in the Software;
+
+  d) Publicly disclose or share any License Key. The User must take reasonable
+     steps to protect the confidentiality of any License Key issued to them.
+
+The above restrictions do not prohibit the User from independently developing
+software with similar functionality, provided such software is written entirely
+from scratch without copying or deriving from the Software.
+
+--------------------------------------------------------------------------------
+6. THIRD-PARTY OPEN SOURCE COMPONENTS
+--------------------------------------------------------------------------------
+
+The Software may include third-party open source components subject to their
+respective licenses. Such components are not governed by this License. A list
+of third-party components and their applicable licenses is available in the
+Software's repository.
+
+--------------------------------------------------------------------------------
+7. COMPLIANCE
+--------------------------------------------------------------------------------
+
+The Licensor may, upon reasonable written notice, request information
+reasonably necessary to verify the User's compliance with this License. The
+User agrees to cooperate in good faith with any such verification request.
+Failure to provide such information within a reasonable time may be treated
+as a breach of this License.
+
+--------------------------------------------------------------------------------
+8. OWNERSHIP
+--------------------------------------------------------------------------------
+
+The Software is licensed, not sold. The Licensor retains all right, title, and
+interest in and to the Software, including all intellectual property rights
+therein. This License does not grant the User any ownership rights in the
+Software.
+
+--------------------------------------------------------------------------------
+9. UPDATES AND VERSIONS
+--------------------------------------------------------------------------------
+
+This License applies to all versions of the Software unless a separate license
+is expressly provided with a specific version. Updated versions of this License
+apply only to new versions of the Software released after the update.
+
+--------------------------------------------------------------------------------
+10. LICENSE TRANSFER
+--------------------------------------------------------------------------------
+
+This License is personal to the User and may not be assigned or transferred
+to any third party without the prior written consent of the Licensor. Any
+attempted assignment without such consent is void. Notwithstanding the
+foregoing, a User that is a legal entity may transfer this License to a
+successor entity in connection with a merger, acquisition, or sale of all or
+substantially all of its assets, provided the Licensor is notified in writing
+within thirty (30) days of such transfer.
+
+--------------------------------------------------------------------------------
+11. NO WARRANTY
+--------------------------------------------------------------------------------
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. THE LICENSOR DOES NOT
+WARRANT THAT THE SOFTWARE WILL BE ERROR-FREE OR UNINTERRUPTED.
+
+--------------------------------------------------------------------------------
+12. LIMITATION OF LIABILITY
+--------------------------------------------------------------------------------
+
+TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL THE
+LICENSOR BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR
+PUNITIVE DAMAGES, OR DAMAGES FOR LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR
+OTHER INTANGIBLE LOSSES, ARISING OUT OF OR IN CONNECTION WITH THIS LICENSE OR
+THE USE OF THE SOFTWARE, EVEN IF THE LICENSOR HAS BEEN ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGES.
+
+THE LICENSOR'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THIS
+LICENSE SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNT PAID BY THE USER FOR
+THE SOFTWARE IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED
+US DOLLARS (USD $100).
+
+--------------------------------------------------------------------------------
+13. TERMINATION
+--------------------------------------------------------------------------------
+
+This License is effective until terminated. It will terminate automatically,
+without notice, if the User breaches any term of this License. In addition,
+any License Key will be automatically revoked, and the associated license will
+terminate, upon non-payment of applicable fees, chargeback, or fraudulent
+payment. Upon termination, the User must immediately cease all use of the
+Software.
+
+Sections 5, 8, 11, 12, and 14 survive termination of this License.
+
+--------------------------------------------------------------------------------
+14. GOVERNING LAW
+--------------------------------------------------------------------------------
+
+This License shall be governed by and construed in accordance with the laws of
+the United Arab Emirates. Any disputes arising under this License shall be
+subject to the exclusive jurisdiction of the courts of the United Arab Emirates.
+
+--------------------------------------------------------------------------------
+15. EXPORT COMPLIANCE
+--------------------------------------------------------------------------------
+
+The User may not export, re-export, or transfer the Software in violation of
+any applicable export control laws or regulations, including those of the
+United Arab Emirates and any other jurisdiction applicable to the User.
+
+--------------------------------------------------------------------------------
+16. ENTIRE AGREEMENT
+--------------------------------------------------------------------------------
+
+This License constitutes the entire agreement between the User and the Licensor
+with respect to the Software and supersedes all prior or contemporaneous
+understandings or agreements relating to the Software.
+
+--------------------------------------------------------------------------------
+
+For licensing inquiries: admin@updog.tech
+Website: https://updog.tech
+
+================================================================================

package/README.md

@@ -0,0 +1,219 @@
+# @updog/data-editor
+
+Enterprise-grade spreadsheet editor SDK for React. Designed for editing large datasets (100k+ rows) with multi-source data merging, file imports, validation, and undo/redo.
+
+## Requirements
+
+- React 18.x or 19.x
+- An API key — this is a **commercial SDK**. Sign up at [updog.tech](https://updog.tech) to create an account and get a key. The editor will not render without one.
+
+## Installation
+
+```bash
+npm install @updog/data-editor
+```
+
+## Quick Start
+
+```tsx
+import { DataEditor } from "@updog/data-editor";
+import "@updog/data-editor/styles.css";
+
+function App() {
+  const [open, setOpen] = useState(false);
+
+  const columns = [
+    { id: "name", title: "Name", width: 150 },
+    { id: "email", title: "Email", width: 260 },
+  ];
+
+  const loadData = async (onChunk) => {
+    const res = await fetch("/api/employees");
+    onChunk(await res.json());
+  };
+
+  const onComplete = (result) => {
+    console.log(result.valid, result.invalid, result.deleted);
+    setOpen(false);
+  };
+
+  return (
+    <>
+      <button onClick={() => setOpen(true)}>Open Editor</button>
+      <DataEditor
+        apiKey="your-api-key"
+        open={open}
+        onClose={() => setOpen(false)}
+        columns={columns}
+        primaryKey="id"
+        loadData={loadData}
+        onComplete={onComplete}
+      />
+    </>
+  );
+}
+```
+
+## Inline Mode
+
+Render the editor directly in the DOM without a modal overlay:
+
+```tsx
+<DataEditor
+  mode="inline"
+  apiKey="your-api-key"
+  columns={columns}
+  primaryKey="id"
+  loadData={loadData}
+  onComplete={onComplete}
+/>
+```
+
+## Props
+
+| Prop | Type | Required | Default | Description |
+|---|---|---|---|---|
+| `mode` | `"modal"` \| `"inline"` | No | `"modal"` | Rendering mode |
+| `apiKey` | `string` | Yes | — | License key |
+| `open` | `boolean` | Modal only | — | Controls modal visibility. Required in modal mode only |
+| `onClose` | `() => void` | Modal only | — | Called when user initiates close. Required in modal mode only |
+| `columns` | `DataEditorColumn[]` | Yes | — | Column definitions |
+| `primaryKey` | `keyof TRow` | Yes | — | Unique row identifier column |
+| `loadData` | `(onChunk) => Promise<void>` | No | — | Async data loader with chunked delivery |
+| `onComplete` | `(result, actions) => void` | No | — | Called on submit with valid/invalid/deleted rows |
+| `variant` | `"editor"` \| `"uploader"` | No | `"editor"` | UI mode |
+| `translations` | `DataEditorTranslations` | No | — | i18n overrides |
+| `locale` | `string` | No | `"en"` | BCP 47 locale tag |
+| `enableDeleteRow` | `"all"` \| `"new"` \| `false` | No | `false` | Row deletion policy |
+| `enableAddRow` | `boolean` | No | `true` | Show "Add row" option |
+| `importFormats` | `DataEditorFormat[]` | No | all | Allowed import formats |
+| `exportFormats` | `DataEditorFormat[]` | No | all | Allowed export formats |
+| `rowHeight` | `number` | No | `34` | Row height in pixels |
+| `headerHeight` | `number` | No | `36` | Header height in pixels |
+| `readonly` | `boolean` | No | `false` | Hide write-oriented UI |
+| `rtl` | `boolean` | No | `false` | Right-to-left layout |
+| `className` | `string` | No | — | CSS class for the modal |
+
+## Column Configuration
+
+```tsx
+const columns: DataEditorColumn[] = [
+  {
+    id: "email",
+    title: "Email",
+    width: 260,
+
+    // Validation — single or array of validators
+    validate: (value, row) => {
+      if (!value) return { level: "error", message: "Required" };
+      if (!String(value).includes("@")) return { level: "warning", message: "Invalid email" };
+      return null;
+    },
+
+    // Uniqueness constraint
+    unique: true,
+
+    // Cross-field validation — revalidate these columns when this one changes
+    dependentFields: ["confirmEmail"],
+
+    // Cell editor: "text" (default), "date", or "select"
+    editor: { type: "select", options: [{ id: "us", text: "United States" }] },
+
+    // Visual formatting (display only, does not change data)
+    formatter: (value) => value.toLowerCase(),
+
+    // Data transformation on input
+    transformer: (value) => String(value).trim(),
+
+    // Filter panel configuration
+    filter: { type: "select" },
+  },
+];
+```
+
+## Built-in Validators
+
+```tsx
+import { useDataEditorValidators } from "@updog/data-editor";
+
+function App() {
+  const { required, numeric, email, date, endDateAfterStart } = useDataEditorValidators();
+
+  const columns = [
+    { id: "email", title: "Email", validate: [required, email] },
+    { id: "salary", title: "Salary", validate: numeric },
+    { id: "startDate", title: "Start", validate: date, editor: { type: "date" } },
+    {
+      id: "endDate",
+      title: "End",
+      validate: [date, endDateAfterStart("startDate")],
+      dependentFields: ["startDate"],
+      editor: { type: "date" },
+    },
+  ];
+}
+```
+
+## Data Loading
+
+Data is loaded in chunks to avoid blocking the UI:
+
+```tsx
+const loadData = async (onChunk) => {
+  // Load from API in pages
+  for (let page = 0; page < totalPages; page++) {
+    const res = await fetch(`/api/employees?page=${page}`);
+    const rows = await res.json();
+    onChunk(rows); // Each chunk is immediately rendered
+  }
+};
+```
+
+## Submission Result
+
+```tsx
+const onComplete = (result, actions) => {
+  // result.valid    — rows that pass all validation
+  // result.invalid  — rows with validation errors
+  // result.deleted  — rows marked for deletion
+  // result.newCount, result.editedCount, result.deletedCount
+
+  // actions.reset() — clear all changes and reload
+};
+```
+
+## Import/Export Formats
+
+Supported formats: `"csv"`, `"tsv"`, `"xlsx"`, `"json"`, `"xml"`.
+
+```tsx
+// Only allow CSV and XLSX import, disable export
+<DataEditor
+  importFormats={["csv", "xlsx"]}
+  exportFormats={[]}
+/>
+```
+
+## Non-React Usage
+
+For Angular, Vue, or vanilla JS, use the Web Component package:
+
+```bash
+npm install @updog/data-editor-wc
+```
+
+See [@updog/data-editor-wc](https://www.npmjs.com/package/@updog/data-editor-wc) for details.
+
+## Key Features
+
+- Virtualized grid — smooth scrolling with 100k+ rows
+- Multi-source data — backend data + multiple CSV/XLSX imports merged into one view
+- Smart CSV column matching — auto-maps imported columns with 90%+ accuracy
+- Undo/redo — Cmd+Z / Cmd+Shift+Z with batch support
+- Find & replace — search across all columns with match highlighting
+- Cell validation — custom validators, uniqueness constraints, cross-field dependencies
+- Dirty tracking — distinguishes new vs edited rows, detects value reverts
+
+## License
+
+Commercial — see [LICENSE](./LICENSE) for the full terms of the Updog SDK Commercial License v1.0. Contact `admin@updog.tech` for enterprise licensing questions. Third-party dependencies bundled with this package are listed in `THIRD_PARTY_NOTICES.txt`.

package/SECURITY.md

@@ -0,0 +1,24 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Email `admin@updog.tech` with a description of the issue, steps to reproduce, and any relevant proof-of-concept code. We will acknowledge receipt within 72 hours and keep you updated as we investigate.
+
+Please do not file public issues or post to forums before we have had a chance to triage and patch.
+
+## Supported Versions
+
+Only the most recent minor version of `@updog/data-editor` and `@updog/data-editor-wc` receives security updates. Older versions are not patched.
+
+## Scope
+
+In scope:
+- Cross-site scripting via data rendered inside the editor grid, cells, dropdowns, or modal chrome.
+- License-validation bypass.
+- Memory corruption in file parsing (CSV, XLSX).
+- Any vulnerability that lets a user of the host page access data or functionality they should not.
+
+Out of scope:
+- Security issues in a host application's own code that embeds the SDK.
+- Denial of service via arbitrarily large user-provided files.
+- Issues requiring a compromised NPM registry, CDN, or customer API key.