aios-core 4.2.13 → 4.2.14

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (97) hide show
  1. package/.aios-core/core/code-intel/helpers/dev-helper.js +206 -0
  2. package/.aios-core/core/registry/registry-schema.json +166 -166
  3. package/.aios-core/core/synapse/diagnostics/collectors/hook-collector.js +3 -3
  4. package/.aios-core/data/entity-registry.yaml +27 -0
  5. package/.aios-core/development/scripts/approval-workflow.js +642 -642
  6. package/.aios-core/development/scripts/backup-manager.js +606 -606
  7. package/.aios-core/development/scripts/branch-manager.js +389 -389
  8. package/.aios-core/development/scripts/code-quality-improver.js +1311 -1311
  9. package/.aios-core/development/scripts/commit-message-generator.js +849 -849
  10. package/.aios-core/development/scripts/conflict-resolver.js +674 -674
  11. package/.aios-core/development/scripts/dependency-analyzer.js +637 -637
  12. package/.aios-core/development/scripts/diff-generator.js +351 -351
  13. package/.aios-core/development/scripts/elicitation-engine.js +384 -384
  14. package/.aios-core/development/scripts/elicitation-session-manager.js +299 -299
  15. package/.aios-core/development/scripts/git-wrapper.js +461 -461
  16. package/.aios-core/development/scripts/manifest-preview.js +244 -244
  17. package/.aios-core/development/scripts/metrics-tracker.js +775 -775
  18. package/.aios-core/development/scripts/modification-validator.js +554 -554
  19. package/.aios-core/development/scripts/pattern-learner.js +1224 -1224
  20. package/.aios-core/development/scripts/performance-analyzer.js +757 -757
  21. package/.aios-core/development/scripts/refactoring-suggester.js +1138 -1138
  22. package/.aios-core/development/scripts/rollback-handler.js +530 -530
  23. package/.aios-core/development/scripts/security-checker.js +358 -358
  24. package/.aios-core/development/scripts/template-engine.js +239 -239
  25. package/.aios-core/development/scripts/template-validator.js +278 -278
  26. package/.aios-core/development/scripts/test-generator.js +843 -843
  27. package/.aios-core/development/scripts/transaction-manager.js +589 -589
  28. package/.aios-core/development/scripts/usage-tracker.js +673 -673
  29. package/.aios-core/development/scripts/validate-filenames.js +226 -226
  30. package/.aios-core/development/scripts/version-tracker.js +526 -526
  31. package/.aios-core/development/scripts/yaml-validator.js +396 -396
  32. package/.aios-core/development/tasks/build-autonomous.md +10 -4
  33. package/.aios-core/development/tasks/create-service.md +23 -0
  34. package/.aios-core/development/tasks/dev-develop-story.md +12 -6
  35. package/.aios-core/development/tasks/dev-suggest-refactoring.md +7 -1
  36. package/.aios-core/development/tasks/publish-npm.md +3 -3
  37. package/.aios-core/hooks/unified/README.md +1 -1
  38. package/.aios-core/install-manifest.yaml +65 -61
  39. package/.aios-core/manifests/schema/manifest-schema.json +190 -190
  40. package/.aios-core/product/templates/component-react-tmpl.tsx +98 -98
  41. package/.aios-core/product/templates/engine/schemas/adr.schema.json +102 -102
  42. package/.aios-core/product/templates/engine/schemas/dbdr.schema.json +205 -205
  43. package/.aios-core/product/templates/engine/schemas/epic.schema.json +175 -175
  44. package/.aios-core/product/templates/engine/schemas/pmdr.schema.json +175 -175
  45. package/.aios-core/product/templates/engine/schemas/prd-v2.schema.json +300 -300
  46. package/.aios-core/product/templates/engine/schemas/prd.schema.json +152 -152
  47. package/.aios-core/product/templates/engine/schemas/story.schema.json +222 -222
  48. package/.aios-core/product/templates/engine/schemas/task.schema.json +154 -154
  49. package/.aios-core/product/templates/eslintrc-security.json +32 -32
  50. package/.aios-core/product/templates/github-actions-cd.yml +212 -212
  51. package/.aios-core/product/templates/github-actions-ci.yml +172 -172
  52. package/.aios-core/product/templates/shock-report-tmpl.html +502 -502
  53. package/.aios-core/product/templates/token-exports-css-tmpl.css +240 -240
  54. package/.aios-core/quality/schemas/quality-metrics.schema.json +233 -233
  55. package/.aios-core/scripts/migrate-framework-docs.sh +300 -300
  56. package/README.en.md +747 -0
  57. package/README.md +4 -2
  58. package/bin/aios.js +7 -4
  59. package/package.json +1 -1
  60. package/packages/aios-pro-cli/src/recover.js +1 -1
  61. package/packages/installer/src/wizard/ide-config-generator.js +6 -6
  62. package/packages/installer/src/wizard/pro-setup.js +3 -3
  63. package/scripts/package-synapse.js +5 -5
  64. package/scripts/validate-package-completeness.js +3 -3
  65. package/.aios-core/.session/current-session.json +0 -14
  66. package/.aios-core/data/registry-update-log.jsonl +0 -191
  67. package/.aios-core/docs/SHARD-TRANSLATION-GUIDE.md +0 -335
  68. package/.aios-core/docs/component-creation-guide.md +0 -458
  69. package/.aios-core/docs/session-update-pattern.md +0 -307
  70. package/.aios-core/docs/standards/AIOS-FRAMEWORK-MASTER.md +0 -1963
  71. package/.aios-core/docs/standards/AIOS-LIVRO-DE-OURO-V2.1-SUMMARY.md +0 -1190
  72. package/.aios-core/docs/standards/AIOS-LIVRO-DE-OURO-V2.1.md +0 -439
  73. package/.aios-core/docs/standards/AIOS-LIVRO-DE-OURO.md +0 -5398
  74. package/.aios-core/docs/standards/V3-ARCHITECTURAL-DECISIONS.md +0 -523
  75. package/.aios-core/docs/template-syntax.md +0 -267
  76. package/.aios-core/docs/troubleshooting-guide.md +0 -625
  77. package/.aios-core/infrastructure/tests/utilities-audit-results.json +0 -501
  78. package/.aios-core/manifests/agents.csv +0 -29
  79. package/.aios-core/manifests/tasks.csv +0 -198
  80. package/.aios-core/manifests/workers.csv +0 -204
  81. package/.claude/rules/agent-authority.md +0 -105
  82. package/.claude/rules/coderabbit-integration.md +0 -93
  83. package/.claude/rules/ids-principles.md +0 -112
  84. package/.claude/rules/story-lifecycle.md +0 -139
  85. package/.claude/rules/workflow-execution.md +0 -150
  86. package/pro/README.md +0 -66
  87. package/pro/license/degradation.js +0 -220
  88. package/pro/license/errors.js +0 -450
  89. package/pro/license/feature-gate.js +0 -354
  90. package/pro/license/index.js +0 -181
  91. package/pro/license/license-api.js +0 -651
  92. package/pro/license/license-cache.js +0 -523
  93. package/pro/license/license-crypto.js +0 -303
  94. package/scripts/glue/README.md +0 -355
  95. package/scripts/glue/compose-agent-prompt.cjs +0 -362
  96. /package/.claude/hooks/{precompact-session-digest.js → precompact-session-digest.cjs} +0 -0
  97. /package/.claude/hooks/{synapse-engine.js → synapse-engine.cjs} +0 -0
@@ -1,279 +1,279 @@
1
- /**
2
- * Template Validator for AIOS-FULLSTACK
3
- * Validates component templates for required structure and placeholders
4
- * @module template-validator
5
- */
6
-
7
- const fs = require('fs-extra');
8
- const _path = require('path');
9
- const _yaml = require('js-yaml');
10
- const TemplateEngine = require('./template-engine');
11
-
12
- class TemplateValidator {
13
- constructor() {
14
- this.engine = new TemplateEngine();
15
- this.requiredVariables = {
16
- agent: [
17
- 'AGENT_NAME',
18
- 'AGENT_ID',
19
- 'AGENT_TITLE',
20
- 'AGENT_ICON',
21
- 'WHEN_TO_USE',
22
- 'PERSONA_ROLE',
23
- 'PERSONA_STYLE',
24
- 'PERSONA_IDENTITY',
25
- 'PERSONA_FOCUS'
26
- ],
27
- task: [
28
- 'TASK_TITLE',
29
- 'TASK_ID',
30
- 'AGENT_NAME',
31
- 'VERSION',
32
- 'TASK_DESCRIPTION',
33
- 'OUTPUT_DESCRIPTION'
34
- ],
35
- workflow: [
36
- 'WORKFLOW_ID',
37
- 'WORKFLOW_NAME',
38
- 'WORKFLOW_DESCRIPTION',
39
- 'WORKFLOW_VERSION',
40
- 'WORKFLOW_TYPE',
41
- 'AUTHOR',
42
- 'CREATED_DATE',
43
- 'LAST_MODIFIED'
44
- ]
45
- };
46
- }
47
-
48
- /**
49
- * Validate a template file
50
- * @param {string} templatePath - Path to template file
51
- * @param {string} templateType - Type of template (agent, task, workflow)
52
- * @returns {Promise<Object>} Validation result
53
- */
54
- async validateTemplateFile(templatePath, templateType) {
55
- try {
56
- const template = await fs.readFile(templatePath, 'utf8');
57
- return this.validateTemplate(template, templateType);
58
- } catch (error) {
59
- return {
60
- valid: false,
61
- errors: [`Failed to read template file: ${error.message}`]
62
- };
63
- }
64
- }
65
-
66
- /**
67
- * Validate a template string
68
- * @param {string} template - Template content
69
- * @param {string} templateType - Type of template
70
- * @returns {Object} Validation result
71
- */
72
- validateTemplate(template, templateType) {
73
- const errors = [];
74
- const warnings = [];
75
-
76
- // Check template type is valid
77
- if (!this.requiredVariables[templateType]) {
78
- return {
79
- valid: false,
80
- errors: [`Unknown template type: ${templateType}`]
81
- };
82
- }
83
-
84
- // Validate required variables
85
- const requiredVars = this.requiredVariables[templateType];
86
- const validation = this.engine.validateTemplate(template, requiredVars);
87
-
88
- if (!validation.valid) {
89
- errors.push(`Missing required variables: ${validation.missing.join(', ')}`);
90
- }
91
-
92
- // Check for balanced conditionals
93
- const conditionalCheck = this.checkBalancedConditionals(template);
94
- if (!conditionalCheck.valid) {
95
- errors.push(...conditionalCheck.errors);
96
- }
97
-
98
- // Check for balanced loops
99
- const loopCheck = this.checkBalancedLoops(template);
100
- if (!loopCheck.valid) {
101
- errors.push(...loopCheck.errors);
102
- }
103
-
104
- // Template-specific validation
105
- const specificCheck = this.validateSpecificTemplate(template, templateType);
106
- if (!specificCheck.valid) {
107
- errors.push(...specificCheck.errors);
108
- }
109
- warnings.push(...specificCheck.warnings);
110
-
111
- // Check for potential security issues
112
- const securityCheck = this.checkSecurityIssues(template);
113
- if (!securityCheck.valid) {
114
- errors.push(...securityCheck.errors);
115
- }
116
- warnings.push(...securityCheck.warnings);
117
-
118
- return {
119
- valid: errors.length === 0,
120
- errors,
121
- warnings,
122
- variables: this.engine.getTemplateVariables(template)
123
- };
124
- }
125
-
126
- /**
127
- * Check for balanced conditional blocks
128
- * @private
129
- */
130
- checkBalancedConditionals(template) {
131
- const errors = [];
132
- const openTags = template.match(/\{\{#IF_([^}]+)\}\}/g) || [];
133
- const closeTags = template.match(/\{\{\/IF_([^}]+)\}\}/g) || [];
134
-
135
- const openConditions = openTags.map(tag => tag.match(/IF_([^}]+)/)[1]);
136
- const closeConditions = closeTags.map(tag => tag.match(/IF_([^}]+)/)[1]);
137
-
138
- // Check each open has a close
139
- for (const condition of openConditions) {
140
- if (!closeConditions.includes(condition)) {
141
- errors.push(`Unclosed conditional: {{#IF_${condition}}}`);
142
- }
143
- }
144
-
145
- // Check each close has an open
146
- for (const condition of closeConditions) {
147
- if (!openConditions.includes(condition)) {
148
- errors.push(`Unexpected closing tag: {{/IF_${condition}}}`);
149
- }
150
- }
151
-
152
- return { valid: errors.length === 0, errors };
153
- }
154
-
155
- /**
156
- * Check for balanced loop blocks
157
- * @private
158
- */
159
- checkBalancedLoops(template) {
160
- const errors = [];
161
- const openTags = template.match(/\{\{#EACH_([^}]+)\}\}/g) || [];
162
- const closeTags = template.match(/\{\{\/EACH_([^}]+)\}\}/g) || [];
163
-
164
- const openLoops = openTags.map(tag => tag.match(/EACH_([^}]+)/)[1]);
165
- const closeLoops = closeTags.map(tag => tag.match(/EACH_([^}]+)/)[1]);
166
-
167
- // Check each open has a close
168
- for (const loop of openLoops) {
169
- if (!closeLoops.includes(loop)) {
170
- errors.push(`Unclosed loop: {{#EACH_${loop}}}`);
171
- }
172
- }
173
-
174
- // Check each close has an open
175
- for (const loop of closeLoops) {
176
- if (!openLoops.includes(loop)) {
177
- errors.push(`Unexpected closing tag: {{/EACH_${loop}}}`);
178
- }
179
- }
180
-
181
- return { valid: errors.length === 0, errors };
182
- }
183
-
184
- /**
185
- * Template-specific validation
186
- * @private
187
- */
188
- validateSpecificTemplate(template, templateType) {
189
- const errors = [];
190
- const warnings = [];
191
-
192
- switch (templateType) {
193
- case 'agent':
194
- // Check for YAML structure
195
- if (!template.includes('agent:') || !template.includes('persona:')) {
196
- errors.push('Agent template must include agent: and persona: sections');
197
- }
198
- if (!template.includes('commands:')) {
199
- warnings.push('Agent template should include commands: section');
200
- }
201
- break;
202
-
203
- case 'task':
204
- // Check for markdown headers
205
- if (!template.includes('# {{TASK_TITLE}}')) {
206
- warnings.push('Task template should start with # {{TASK_TITLE}}');
207
- }
208
- if (!template.includes('## Workflow')) {
209
- warnings.push('Task template should include ## Workflow section');
210
- }
211
- break;
212
-
213
- case 'workflow':
214
- // Check for YAML structure
215
- if (!template.includes('workflow:') || !template.includes('steps:')) {
216
- errors.push('Workflow template must include workflow: and steps: sections');
217
- }
218
- if (!template.includes('metadata:')) {
219
- warnings.push('Workflow template should include metadata: section');
220
- }
221
- break;
222
- }
223
-
224
- return { valid: errors.length === 0, errors, warnings };
225
- }
226
-
227
- /**
228
- * Check for potential security issues in template
229
- * @private
230
- */
231
- checkSecurityIssues(template) {
232
- const errors = [];
233
- const warnings = [];
234
-
235
- // Check for dangerous patterns
236
- const dangerousPatterns = [
237
- { pattern: /eval\s*\(/, message: 'Template contains eval() - security risk' },
238
- { pattern: /Function\s*\(/, message: 'Template contains Function() - security risk' },
239
- { pattern: /require\s*\([^'"]+\)/, message: 'Dynamic require detected - potential security risk' },
240
- { pattern: /<script/i, message: 'Script tags detected in template' }
241
- ];
242
-
243
- for (const { pattern, message } of dangerousPatterns) {
244
- if (pattern.test(template)) {
245
- errors.push(message);
246
- }
247
- }
248
-
249
- // Check for suspicious patterns
250
- if (template.includes('__proto__') || template.includes('constructor')) {
251
- warnings.push('Template contains potentially dangerous property access');
252
- }
253
-
254
- return { valid: errors.length === 0, errors, warnings };
255
- }
256
-
257
- /**
258
- * Get required variables for a template type
259
- * @param {string} templateType - Type of template
260
- * @returns {string[]} Array of required variable names
261
- */
262
- getRequiredVariables(templateType) {
263
- return this.requiredVariables[templateType] || [];
264
- }
265
-
266
- /**
267
- * Add custom required variables for a template type
268
- * @param {string} templateType - Type of template
269
- * @param {string[]} variables - Additional required variables
270
- */
271
- addRequiredVariables(templateType, variables) {
272
- if (!this.requiredVariables[templateType]) {
273
- this.requiredVariables[templateType] = [];
274
- }
275
- this.requiredVariables[templateType].push(...variables);
276
- }
277
- }
278
-
1
+ /**
2
+ * Template Validator for AIOS-FULLSTACK
3
+ * Validates component templates for required structure and placeholders
4
+ * @module template-validator
5
+ */
6
+
7
+ const fs = require('fs-extra');
8
+ const _path = require('path');
9
+ const _yaml = require('js-yaml');
10
+ const TemplateEngine = require('./template-engine');
11
+
12
+ class TemplateValidator {
13
+ constructor() {
14
+ this.engine = new TemplateEngine();
15
+ this.requiredVariables = {
16
+ agent: [
17
+ 'AGENT_NAME',
18
+ 'AGENT_ID',
19
+ 'AGENT_TITLE',
20
+ 'AGENT_ICON',
21
+ 'WHEN_TO_USE',
22
+ 'PERSONA_ROLE',
23
+ 'PERSONA_STYLE',
24
+ 'PERSONA_IDENTITY',
25
+ 'PERSONA_FOCUS'
26
+ ],
27
+ task: [
28
+ 'TASK_TITLE',
29
+ 'TASK_ID',
30
+ 'AGENT_NAME',
31
+ 'VERSION',
32
+ 'TASK_DESCRIPTION',
33
+ 'OUTPUT_DESCRIPTION'
34
+ ],
35
+ workflow: [
36
+ 'WORKFLOW_ID',
37
+ 'WORKFLOW_NAME',
38
+ 'WORKFLOW_DESCRIPTION',
39
+ 'WORKFLOW_VERSION',
40
+ 'WORKFLOW_TYPE',
41
+ 'AUTHOR',
42
+ 'CREATED_DATE',
43
+ 'LAST_MODIFIED'
44
+ ]
45
+ };
46
+ }
47
+
48
+ /**
49
+ * Validate a template file
50
+ * @param {string} templatePath - Path to template file
51
+ * @param {string} templateType - Type of template (agent, task, workflow)
52
+ * @returns {Promise<Object>} Validation result
53
+ */
54
+ async validateTemplateFile(templatePath, templateType) {
55
+ try {
56
+ const template = await fs.readFile(templatePath, 'utf8');
57
+ return this.validateTemplate(template, templateType);
58
+ } catch (error) {
59
+ return {
60
+ valid: false,
61
+ errors: [`Failed to read template file: ${error.message}`]
62
+ };
63
+ }
64
+ }
65
+
66
+ /**
67
+ * Validate a template string
68
+ * @param {string} template - Template content
69
+ * @param {string} templateType - Type of template
70
+ * @returns {Object} Validation result
71
+ */
72
+ validateTemplate(template, templateType) {
73
+ const errors = [];
74
+ const warnings = [];
75
+
76
+ // Check template type is valid
77
+ if (!this.requiredVariables[templateType]) {
78
+ return {
79
+ valid: false,
80
+ errors: [`Unknown template type: ${templateType}`]
81
+ };
82
+ }
83
+
84
+ // Validate required variables
85
+ const requiredVars = this.requiredVariables[templateType];
86
+ const validation = this.engine.validateTemplate(template, requiredVars);
87
+
88
+ if (!validation.valid) {
89
+ errors.push(`Missing required variables: ${validation.missing.join(', ')}`);
90
+ }
91
+
92
+ // Check for balanced conditionals
93
+ const conditionalCheck = this.checkBalancedConditionals(template);
94
+ if (!conditionalCheck.valid) {
95
+ errors.push(...conditionalCheck.errors);
96
+ }
97
+
98
+ // Check for balanced loops
99
+ const loopCheck = this.checkBalancedLoops(template);
100
+ if (!loopCheck.valid) {
101
+ errors.push(...loopCheck.errors);
102
+ }
103
+
104
+ // Template-specific validation
105
+ const specificCheck = this.validateSpecificTemplate(template, templateType);
106
+ if (!specificCheck.valid) {
107
+ errors.push(...specificCheck.errors);
108
+ }
109
+ warnings.push(...specificCheck.warnings);
110
+
111
+ // Check for potential security issues
112
+ const securityCheck = this.checkSecurityIssues(template);
113
+ if (!securityCheck.valid) {
114
+ errors.push(...securityCheck.errors);
115
+ }
116
+ warnings.push(...securityCheck.warnings);
117
+
118
+ return {
119
+ valid: errors.length === 0,
120
+ errors,
121
+ warnings,
122
+ variables: this.engine.getTemplateVariables(template)
123
+ };
124
+ }
125
+
126
+ /**
127
+ * Check for balanced conditional blocks
128
+ * @private
129
+ */
130
+ checkBalancedConditionals(template) {
131
+ const errors = [];
132
+ const openTags = template.match(/\{\{#IF_([^}]+)\}\}/g) || [];
133
+ const closeTags = template.match(/\{\{\/IF_([^}]+)\}\}/g) || [];
134
+
135
+ const openConditions = openTags.map(tag => tag.match(/IF_([^}]+)/)[1]);
136
+ const closeConditions = closeTags.map(tag => tag.match(/IF_([^}]+)/)[1]);
137
+
138
+ // Check each open has a close
139
+ for (const condition of openConditions) {
140
+ if (!closeConditions.includes(condition)) {
141
+ errors.push(`Unclosed conditional: {{#IF_${condition}}}`);
142
+ }
143
+ }
144
+
145
+ // Check each close has an open
146
+ for (const condition of closeConditions) {
147
+ if (!openConditions.includes(condition)) {
148
+ errors.push(`Unexpected closing tag: {{/IF_${condition}}}`);
149
+ }
150
+ }
151
+
152
+ return { valid: errors.length === 0, errors };
153
+ }
154
+
155
+ /**
156
+ * Check for balanced loop blocks
157
+ * @private
158
+ */
159
+ checkBalancedLoops(template) {
160
+ const errors = [];
161
+ const openTags = template.match(/\{\{#EACH_([^}]+)\}\}/g) || [];
162
+ const closeTags = template.match(/\{\{\/EACH_([^}]+)\}\}/g) || [];
163
+
164
+ const openLoops = openTags.map(tag => tag.match(/EACH_([^}]+)/)[1]);
165
+ const closeLoops = closeTags.map(tag => tag.match(/EACH_([^}]+)/)[1]);
166
+
167
+ // Check each open has a close
168
+ for (const loop of openLoops) {
169
+ if (!closeLoops.includes(loop)) {
170
+ errors.push(`Unclosed loop: {{#EACH_${loop}}}`);
171
+ }
172
+ }
173
+
174
+ // Check each close has an open
175
+ for (const loop of closeLoops) {
176
+ if (!openLoops.includes(loop)) {
177
+ errors.push(`Unexpected closing tag: {{/EACH_${loop}}}`);
178
+ }
179
+ }
180
+
181
+ return { valid: errors.length === 0, errors };
182
+ }
183
+
184
+ /**
185
+ * Template-specific validation
186
+ * @private
187
+ */
188
+ validateSpecificTemplate(template, templateType) {
189
+ const errors = [];
190
+ const warnings = [];
191
+
192
+ switch (templateType) {
193
+ case 'agent':
194
+ // Check for YAML structure
195
+ if (!template.includes('agent:') || !template.includes('persona:')) {
196
+ errors.push('Agent template must include agent: and persona: sections');
197
+ }
198
+ if (!template.includes('commands:')) {
199
+ warnings.push('Agent template should include commands: section');
200
+ }
201
+ break;
202
+
203
+ case 'task':
204
+ // Check for markdown headers
205
+ if (!template.includes('# {{TASK_TITLE}}')) {
206
+ warnings.push('Task template should start with # {{TASK_TITLE}}');
207
+ }
208
+ if (!template.includes('## Workflow')) {
209
+ warnings.push('Task template should include ## Workflow section');
210
+ }
211
+ break;
212
+
213
+ case 'workflow':
214
+ // Check for YAML structure
215
+ if (!template.includes('workflow:') || !template.includes('steps:')) {
216
+ errors.push('Workflow template must include workflow: and steps: sections');
217
+ }
218
+ if (!template.includes('metadata:')) {
219
+ warnings.push('Workflow template should include metadata: section');
220
+ }
221
+ break;
222
+ }
223
+
224
+ return { valid: errors.length === 0, errors, warnings };
225
+ }
226
+
227
+ /**
228
+ * Check for potential security issues in template
229
+ * @private
230
+ */
231
+ checkSecurityIssues(template) {
232
+ const errors = [];
233
+ const warnings = [];
234
+
235
+ // Check for dangerous patterns
236
+ const dangerousPatterns = [
237
+ { pattern: /eval\s*\(/, message: 'Template contains eval() - security risk' },
238
+ { pattern: /Function\s*\(/, message: 'Template contains Function() - security risk' },
239
+ { pattern: /require\s*\([^'"]+\)/, message: 'Dynamic require detected - potential security risk' },
240
+ { pattern: /<script/i, message: 'Script tags detected in template' }
241
+ ];
242
+
243
+ for (const { pattern, message } of dangerousPatterns) {
244
+ if (pattern.test(template)) {
245
+ errors.push(message);
246
+ }
247
+ }
248
+
249
+ // Check for suspicious patterns
250
+ if (template.includes('__proto__') || template.includes('constructor')) {
251
+ warnings.push('Template contains potentially dangerous property access');
252
+ }
253
+
254
+ return { valid: errors.length === 0, errors, warnings };
255
+ }
256
+
257
+ /**
258
+ * Get required variables for a template type
259
+ * @param {string} templateType - Type of template
260
+ * @returns {string[]} Array of required variable names
261
+ */
262
+ getRequiredVariables(templateType) {
263
+ return this.requiredVariables[templateType] || [];
264
+ }
265
+
266
+ /**
267
+ * Add custom required variables for a template type
268
+ * @param {string} templateType - Type of template
269
+ * @param {string[]} variables - Additional required variables
270
+ */
271
+ addRequiredVariables(templateType, variables) {
272
+ if (!this.requiredVariables[templateType]) {
273
+ this.requiredVariables[templateType] = [];
274
+ }
275
+ this.requiredVariables[templateType].push(...variables);
276
+ }
277
+ }
278
+
279
279
  module.exports = TemplateValidator;