mgv-backoffice 1.8.0 → 1.11.0

package/src/utils/httpColors.test.ts

@@ -0,0 +1,62 @@
+import { describe, it, expect } from 'vitest'
+import {
+  methodBadgeSolid,
+  methodBadgeBright,
+  statusBadgeSolid,
+  statusBadgeTinted,
+} from './httpColors'
+
+describe('methodBadgeSolid', () => {
+  it('maps known methods (case-insensitive)', () => {
+    expect(methodBadgeSolid('GET')).toBe('bg-blue-600')
+    expect(methodBadgeSolid('get')).toBe('bg-blue-600')
+    expect(methodBadgeSolid('DELETE')).toBe('bg-red-600')
+  })
+
+  it('falls back to gray for missing/unknown methods', () => {
+    expect(methodBadgeSolid()).toBe('bg-gray-600')
+    expect(methodBadgeSolid('TRACE')).toBe('bg-gray-600')
+  })
+})
+
+describe('methodBadgeBright', () => {
+  it('maps known methods', () => {
+    expect(methodBadgeBright('POST')).toBe('bg-green-500')
+  })
+
+  it('falls back to gray', () => {
+    expect(methodBadgeBright()).toBe('bg-gray-500')
+    expect(methodBadgeBright('WAT')).toBe('bg-gray-500')
+  })
+})
+
+describe('statusBadgeSolid', () => {
+  it('buckets by status class', () => {
+    expect(statusBadgeSolid(204)).toBe('bg-emerald-600')
+    expect(statusBadgeSolid(301)).toBe('bg-blue-600')
+    expect(statusBadgeSolid(404)).toBe('bg-amber-600')
+    expect(statusBadgeSolid(500)).toBe('bg-red-600')
+  })
+
+  it('falls back to gray for missing/unknown codes', () => {
+    expect(statusBadgeSolid()).toBe('bg-gray-600')
+    expect(statusBadgeSolid(100)).toBe('bg-gray-600')
+  })
+})
+
+describe('statusBadgeTinted', () => {
+  it('returns dark-theme classes', () => {
+    expect(statusBadgeTinted(200, true)).toBe('bg-green-500/15 text-green-400')
+    expect(statusBadgeTinted(404, true)).toBe('bg-yellow-500/15 text-yellow-400')
+    expect(statusBadgeTinted(500, true)).toBe('bg-red-500/15 text-red-400')
+  })
+
+  it('returns light-theme classes', () => {
+    expect(statusBadgeTinted(200, false)).toBe('bg-green-100 text-green-800')
+    expect(statusBadgeTinted(404, false)).toBe('bg-yellow-100 text-yellow-800')
+  })
+
+  it('defaults a missing status to 2xx', () => {
+    expect(statusBadgeTinted(undefined, false)).toBe('bg-green-100 text-green-800')
+  })
+})

package/src/utils/pnl.test.ts

@@ -0,0 +1,45 @@
+import { describe, it, expect } from 'vitest'
+import { computePnL } from './pnl'
+
+describe('computePnL', () => {
+  it('computes absolute and percent PnL for a profitable position', () => {
+    expect(computePnL({ buyPrice: 100, lastPrice: 110, filledQty: 5 })).toEqual({
+      pnlUsd: 50,
+      pnlPct: 10,
+    })
+  })
+
+  it('computes a loss', () => {
+    expect(computePnL({ buyPrice: 100, lastPrice: 90, filledQty: 2 })).toEqual({
+      pnlUsd: -20,
+      pnlPct: -10,
+    })
+  })
+
+  it('accepts numeric strings', () => {
+    expect(computePnL({ buyPrice: '100', lastPrice: '110', filledQty: '5' })).toEqual({
+      pnlUsd: 50,
+      pnlPct: 10,
+    })
+  })
+
+  it('returns nulls when any input is missing', () => {
+    const nulls = { pnlUsd: null, pnlPct: null }
+    expect(computePnL({ buyPrice: null, lastPrice: 110, filledQty: 5 })).toEqual(nulls)
+    expect(computePnL({ buyPrice: 100, lastPrice: undefined, filledQty: 5 })).toEqual(nulls)
+    expect(computePnL({ buyPrice: 100, lastPrice: 110, filledQty: null })).toEqual(nulls)
+  })
+
+  it('returns nulls for non-finite inputs (guards Number(null) === 0 footgun)', () => {
+    expect(computePnL({ buyPrice: 100, lastPrice: 'abc', filledQty: 5 })).toEqual({
+      pnlUsd: null,
+      pnlPct: null,
+    })
+  })
+
+  it('returns nulls when buyPrice is not positive', () => {
+    const nulls = { pnlUsd: null, pnlPct: null }
+    expect(computePnL({ buyPrice: 0, lastPrice: 110, filledQty: 5 })).toEqual(nulls)
+    expect(computePnL({ buyPrice: -5, lastPrice: 110, filledQty: 5 })).toEqual(nulls)
+  })
+})

package/src/utils/sanitizeHtml.test.ts

@@ -0,0 +1,77 @@
+import { describe, it, expect } from 'vitest'
+import { sanitizeHtml, isSafeHref } from './sanitizeHtml'
+
+describe('sanitizeHtml', () => {
+  it('returns empty string for falsy input', () => {
+    expect(sanitizeHtml(null)).toBe('')
+    expect(sanitizeHtml(undefined)).toBe('')
+    expect(sanitizeHtml('')).toBe('')
+  })
+
+  it('keeps allow-listed formatting tags', () => {
+    expect(sanitizeHtml('<b>bold</b>')).toBe('<b>bold</b>')
+    expect(sanitizeHtml('<p>para</p>')).toBe('<p>para</p>')
+  })
+
+  it('drops script tags and their contents', () => {
+    expect(sanitizeHtml('<p>Hi<script>alert(1)</script></p>')).toBe('<p>Hi</p>')
+  })
+
+  it('drops style/iframe contents entirely', () => {
+    expect(sanitizeHtml('<div><style>.x{}</style>text</div>')).toBe('<div>text</div>')
+    expect(sanitizeHtml('<iframe src="x"></iframe>after')).toBe('after')
+  })
+
+  it('unwraps disallowed elements to their text', () => {
+    expect(sanitizeHtml('<h1>Title</h1>')).toBe('Title')
+  })
+
+  it('strips inline event handlers and other attributes', () => {
+    expect(sanitizeHtml('<p onclick="evil()">hi</p>')).toBe('<p>hi</p>')
+    expect(sanitizeHtml('<span class="x" style="color:red">y</span>')).toBe('<span>y</span>')
+  })
+
+  it('hardens safe anchors with rel/target', () => {
+    const out = sanitizeHtml('<a href="https://example.com">link</a>')
+    expect(out).toContain('href="https://example.com"')
+    expect(out).toContain('rel="noopener noreferrer"')
+    expect(out).toContain('target="_blank"')
+  })
+
+  it('strips unsafe href schemes', () => {
+    const out = sanitizeHtml('<a href="javascript:alert(1)">x</a>')
+    expect(out).not.toContain('javascript')
+    expect(out).not.toContain('href')
+    // No surviving href means no link-hardening attributes are added.
+    expect(out).not.toContain('target')
+  })
+
+  it('preserves the title attribute on anchors', () => {
+    const out = sanitizeHtml('<a href="https://x.io" title="hi">x</a>')
+    expect(out).toContain('title="hi"')
+  })
+})
+
+describe('isSafeHref', () => {
+  it('accepts safe schemes and relative/anchor links', () => {
+    expect(isSafeHref('http://x.com')).toBe(true)
+    expect(isSafeHref('https://x.com')).toBe(true)
+    expect(isSafeHref('mailto:a@b.com')).toBe(true)
+    expect(isSafeHref('tel:+123')).toBe(true)
+    expect(isSafeHref('/relative/path')).toBe(true)
+    expect(isSafeHref('#anchor')).toBe(true)
+    expect(isSafeHref('')).toBe(true)
+  })
+
+  it('rejects dangerous schemes', () => {
+    expect(isSafeHref('javascript:alert(1)')).toBe(false)
+    expect(isSafeHref('data:text/html,<script>')).toBe(false)
+    expect(isSafeHref('vbscript:msgbox')).toBe(false)
+    expect(isSafeHref('file:///etc/passwd')).toBe(false)
+  })
+
+  it('is case- and whitespace-insensitive', () => {
+    expect(isSafeHref('  JAVASCRIPT:alert(1)  ')).toBe(false)
+    expect(isSafeHref('  HTTPS://x.com  ')).toBe(true)
+  })
+})

package/src/utils/util.test.ts

@@ -0,0 +1,28 @@
+import { describe, it, expect } from 'vitest'
+import { getBaseColor, getBaseColorOf } from './util'
+import { AlertEnum } from '../enums/AlertEnum'
+import { ColorsEnums } from '../enums/ColorsEnums'
+
+describe('getBaseColor', () => {
+  it('maps each alert variant to a Tailwind colour name', () => {
+    expect(getBaseColor(AlertEnum.ERROR)).toBe('red')
+    expect(getBaseColor(AlertEnum.SUCCESS)).toBe('green')
+    expect(getBaseColor(AlertEnum.INFO)).toBe('gray')
+    expect(getBaseColor(AlertEnum.WARNING)).toBe('yellow')
+  })
+})
+
+describe('getBaseColorOf', () => {
+  it('maps each colour enum to a Tailwind colour name', () => {
+    expect(getBaseColorOf(ColorsEnums.GREEN)).toBe('green')
+    expect(getBaseColorOf(ColorsEnums.RED)).toBe('red')
+    expect(getBaseColorOf(ColorsEnums.BLUE)).toBe('blue')
+    expect(getBaseColorOf(ColorsEnums.YELLOW)).toBe('yellow')
+    expect(getBaseColorOf(ColorsEnums.BLACK)).toBe('black')
+    expect(getBaseColorOf(ColorsEnums.GRAY)).toBe('gray')
+  })
+
+  it('returns an empty string for NONE', () => {
+    expect(getBaseColorOf(ColorsEnums.NONE)).toBe('')
+  })
+})

package/tailwind.safelist.css

@@ -86,7 +86,9 @@
 
 /* ── BaseSpinner ──────────────────────────────────────────── */
 @source inline("
-  border-2 border-gray-200 border-t-blue-500 animate-spin
+  w-4 h-4 w-6 h-6 w-8 h-8 w-12 h-12 border-2 border-4
+  border-gray-200 rounded-full animate-spin
+  border-t-{blue,emerald,sky,indigo,teal,purple,red,amber}-500
 ");
 
 /* ── BaseRow ──────────────────────────────────────────────── */

package/tailwind.safelist.js

@@ -226,10 +226,19 @@ const safelist = [
   'text-green-500',
 
   // ── BaseSpinner ────────────────────────────────────────────
-  'border-2',
+  'w-4', 'h-4', 'w-6', 'h-6', 'w-8', 'h-8', 'w-12', 'h-12',
+  'border-2', 'border-4',
   'border-gray-200',
-  'border-t-blue-500',
+  'rounded-full',
   'animate-spin',
+  'border-t-blue-500',
+  'border-t-emerald-500',
+  'border-t-sky-500',
+  'border-t-indigo-500',
+  'border-t-teal-500',
+  'border-t-purple-500',
+  'border-t-red-500',
+  'border-t-amber-500',
 
   // ── BaseRow ────────────────────────────────────────────────
   'block',