slicejs-web-framework 3.1.2 → 3.1.3

package/.worktrees/bundling-v2-precompiled-registrars/api/middleware/securityMiddleware.js

@@ -1,253 +0,0 @@
-// api/middleware/securityMiddleware.js
-import path from 'path';
-
-/**
- * Middleware de seguridad para prevenir acceso directo malicioso
- * pero permitir que la aplicación cargue sus dependencias normalmente
- */
-export function securityMiddleware(options = {}) {
-  const {
-    allowedExtensions = ['.js', '.css', '.html', '.json', '.svg', '.png', '.jpg', '.jpeg', '.gif', '.woff', '.woff2', '.ttf'],
-    blockedPaths = [
-      '/node_modules',
-      '/package.json',
-      '/package-lock.json',
-      '/.env',
-      '/.git'
-    ],
-    allowPublicAssets = true
-  } = options;
-
-  return (req, res, next) => {
-    const requestPath = req.path;
-    
-    // 1. Bloquear acceso a rutas definitivamente sensibles (configuración, dependencias)
-    const isBlockedPath = blockedPaths.some(blocked => 
-      requestPath.startsWith(blocked) || requestPath.includes(blocked)
-    );
-    
-    if (isBlockedPath) {
-      console.warn(`🚫 Blocked access to sensitive path: ${requestPath}`);
-      return res.status(403).json({
-        error: 'Forbidden',
-        message: 'Access to this resource is not allowed',
-        path: requestPath
-      });
-    }
-
-    // 2. Permitir acceso a assets públicos
-    if (allowPublicAssets) {
-      const publicPaths = ['/assets', '/public', '/images', '/styles'];
-      const isPublicAsset = publicPaths.some(publicPath => 
-        requestPath.startsWith(publicPath)
-      );
-      
-      if (isPublicAsset) {
-        return next();
-      }
-    }
-
-    // 3. Validar extensiones de archivo
-    const fileExtension = path.extname(requestPath).toLowerCase();
-    
-    if (fileExtension && !allowedExtensions.includes(fileExtension)) {
-      console.warn(`🚫 Blocked file type: ${requestPath}`);
-      return res.status(403).json({
-        error: 'Forbidden',
-        message: 'File type not allowed',
-        extension: fileExtension
-      });
-    }
-
-    // 4. Prevenir path traversal attacks
-    const normalizedPath = path.normalize(requestPath);
-    if (normalizedPath.includes('..') || normalizedPath.includes('~')) {
-      console.warn(`🚫 Path traversal attempt: ${requestPath}`);
-      return res.status(403).json({
-        error: 'Forbidden',
-        message: 'Invalid path',
-        path: requestPath
-      });
-    }
-
-    // Todo está bien, continuar
-    next();
-  };
-}
-
-/**
- * Middleware específico para proteger archivos del framework Slice.js
- * PERMITE acceso cuando viene desde la propia aplicación (Referer válido)
- * BLOQUEA acceso directo desde navegador o herramientas externas
- */
-export function sliceFrameworkProtection(options = {}) {
-  const { 
-    port = 3000, 
-    strictMode = false,
-    allowedDomains = [] // Dominios personalizados permitidos
-  } = options;
-  
-  return (req, res, next) => {
-    const requestPath = req.path;
-
-    // Rutas del framework que requieren verificación
-    const frameworkPaths = [
-      '/Slice/Components/Structural',
-      '/Slice/Core',
-      '/Slice/Services'
-    ];
-
-    const isFrameworkFile = frameworkPaths.some(fwPath => 
-      requestPath.startsWith(fwPath)
-    );
-
-    if (!isFrameworkFile) {
-      return next();
-    }
-
-    // Verificar el origen de la petición
-    const referer = req.get('Referer') || req.get('Referrer');
-    const origin = req.get('Origin');
-    const host = req.get('Host');
-    
-    // Construir lista de orígenes válidos dinámicamente
-    const validOrigins = [
-      `http://localhost:${port}`,
-      `http://127.0.0.1:${port}`,
-      `http://0.0.0.0:${port}`,
-      `https://localhost:${port}`,
-      ...allowedDomains // Dominios personalizados del usuario
-    ];
-    
-    // Si hay un Host header, agregarlo automáticamente
-    if (host) {
-      validOrigins.push(`http://${host}`);
-      validOrigins.push(`https://${host}`);
-    }
-
-    // Verificar si la petición viene de un origen válido
-    const hasValidReferer = referer && validOrigins.some(valid => referer.startsWith(valid));
-    const hasValidOrigin = origin && validOrigins.some(valid => origin === valid);
-    const isSameHost = host && referer && referer.includes(host);
-    
-    // Permitir si viene desde la aplicación
-    if (hasValidReferer || hasValidOrigin || isSameHost) {
-      return next();
-    }
-
-    // En modo estricto, bloquear todo acceso sin referer válido
-    if (strictMode) {
-      console.warn(`🚫 Blocked direct framework file access: ${requestPath}`);
-      return res.status(403).json({
-        error: 'Framework Protection',
-        message: 'Direct access to Slice.js framework files is blocked',
-        tip: 'Framework files must be loaded through the application',
-        path: requestPath
-      });
-    }
-
-    // En modo normal (desarrollo), permitir pero advertir
-    console.warn(`⚠️  Framework file accessed without valid referer: ${requestPath}`);
-    next();
-  };
-}
-
-/**
- * Middleware para logging de peticiones sospechosas
- */
-export function suspiciousRequestLogger() {
-  const suspiciousPatterns = [
-    /\.\.\//, // Path traversal
-    /~/, // Home directory access
-    /\.env/, // Environment files
-    /\.git/, // Git files
-    /package\.json/, // Package files
-    /package-lock\.json/,
-    /node_modules/, // Dependencies
-  ];
-
-  return (req, res, next) => {
-    const requestPath = req.path;
-    
-    const isSuspicious = suspiciousPatterns.some(pattern => 
-      pattern.test(requestPath)
-    );
-
-    if (isSuspicious) {
-      const clientIp = req.ip || req.connection.remoteAddress;
-      console.warn(`⚠️  Suspicious request: ${requestPath} from ${clientIp}`);
-    }
-
-    next();
-  };
-}
-
-/**
- * Middleware para bloquear acceso directo vía navegador (typing en la URL)
- * pero permitir peticiones desde scripts (fetch, import, etc.)
- */
-export function directAccessProtection(options = {}) {
-  const { protectedPaths = [] } = options;
-  
-  return (req, res, next) => {
-    const requestPath = req.path;
-    
-    const isProtectedPath = protectedPaths.some(protectedPath => 
-      requestPath.startsWith(protectedPath)
-    );
-    
-    if (!isProtectedPath) {
-      return next();
-    }
-
-    // Detectar acceso directo: 
-    // - No tiene Referer (usuario escribió la URL directamente)
-    // - Accept header indica navegación HTML
-    const referer = req.get('Referer');
-    const accept = req.get('Accept') || '';
-    
-    const isDirectBrowserAccess = !referer && accept.includes('text/html');
-    
-    if (isDirectBrowserAccess) {
-      console.warn(`🚫 Blocked direct browser access: ${requestPath}`);
-      return res.status(403).send(`
-        <!DOCTYPE html>
-        <html>
-        <head>
-          <title>Access Denied</title>
-          <style>
-            body { 
-              font-family: system-ui; 
-              max-width: 600px; 
-              margin: 100px auto; 
-              padding: 20px;
-            }
-            h1 { color: #d32f2f; }
-            code { 
-              background: #f5f5f5; 
-              padding: 2px 6px; 
-              border-radius: 3px;
-            }
-          </style>
-        </head>
-        <body>
-          <h1>🚫 Direct Access Denied</h1>
-          <p>This file cannot be accessed directly.</p>
-          <p>Path: <code>${requestPath}</code></p>
-          <p>Framework files are automatically loaded by the application.</p>
-          <p><a href="/">← Return to application</a></p>
-        </body>
-        </html>
-      `);
-    }
-
-    next();
-  };
-}
-
-export default {
-  securityMiddleware,
-  sliceFrameworkProtection,
-  suspiciousRequestLogger,
-  directAccessProtection
-};

package/.worktrees/bundling-v2-precompiled-registrars/package.json

@@ -1,37 +0,0 @@
-{
-  "name": "slicejs-web-framework",
-  "version": "2.4.8",
-  "description": "",
-  "engines": {
-    "node": ">=20"
-  },
-  "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1",
-    "slice:init": "node node_modules/slicejs-cli/client.js init",
-    "slice:create": "node node_modules/slicejs-cli/client.js component create",
-    "slice:delete": "node node_modules/slicejs-cli/client.js component delete",
-    "slice:list": "node node_modules/slicejs-cli/client.js component list",
-    "slice:start": "node api/index.js",
-    "format": "prettier --write \"**/*.js\"",
-    "run": "node api/index.js",
-    "development": "npm run",
-    "slice:modify": "node node_modules/slicejs-cli/client.js modify"
-  },
-  "keywords": [],
-  "author": "",
-  "license": "ISC",
-  "type": "module",
-  "dependencies": {
-    "express": "^4.19.2"
-  },
-  "devDependencies": {
-    "prettier": "3.3.3"
-  },
-  "prettier": {
-    "trailingComma": "es5",
-    "tabWidth": 3,
-    "semi": true,
-    "singleQuote": true,
-    "printWidth": 120
-  }
-}

package/.worktrees/bundling-v2-precompiled-registrars/sliceConfig.schema.json

@@ -1,109 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://slicejs.local/sliceConfig.schema.json",
-  "title": "Slice.js Config",
-  "type": "object",
-  "additionalProperties": true,
-  "properties": {
-    "debugger": {
-      "type": "object",
-      "additionalProperties": true,
-      "properties": {
-        "enabled": { "type": "boolean" },
-        "click": { "type": "string", "enum": ["right", "left"] }
-      }
-    },
-    "stylesManager": {
-      "type": "object",
-      "additionalProperties": true,
-      "properties": {
-        "requestedStyles": { "type": "array", "items": { "type": "string" } }
-      }
-    },
-    "themeManager": {
-      "type": "object",
-      "additionalProperties": true,
-      "properties": {
-        "enabled": { "type": "boolean" },
-        "defaultTheme": { "type": "string" },
-        "saveThemeLocally": { "type": "boolean" },
-        "useBrowserTheme": { "type": "boolean" }
-      }
-    },
-    "logger": {
-      "type": "object",
-      "additionalProperties": true,
-      "properties": {
-        "enabled": { "type": "boolean" },
-        "showLogs": { "type": "object", "additionalProperties": true }
-      }
-    },
-    "events": {
-      "type": "object",
-      "additionalProperties": true,
-      "properties": {
-        "enabled": { "type": "boolean" },
-        "ui": {
-          "type": "object",
-          "additionalProperties": true,
-          "properties": {
-            "enabled": { "type": "boolean" },
-            "shortcut": { "type": "string" }
-          }
-        }
-      }
-    },
-    "context": {
-      "type": "object",
-      "additionalProperties": true,
-      "properties": {
-        "enabled": { "type": "boolean" },
-        "ui": {
-          "type": "object",
-          "additionalProperties": true,
-          "properties": {
-            "enabled": { "type": "boolean" },
-            "shortcut": { "type": "string" }
-          }
-        }
-      }
-    },
-    "paths": {
-      "type": "object",
-      "additionalProperties": true,
-      "properties": {
-        "components": { "type": "object", "additionalProperties": true },
-        "themes": { "type": "string" },
-        "styles": { "type": "string" },
-        "routesFile": { "type": "string" }
-      },
-      "required": ["components", "themes", "styles", "routesFile"]
-    },
-    "router": {
-      "type": "object",
-      "additionalProperties": true,
-      "properties": {
-        "defaultRoute": { "type": "string" }
-      }
-    },
-    "loading": {
-      "type": "object",
-      "additionalProperties": true,
-      "properties": {
-        "enabled": { "type": "boolean" }
-      }
-    },
-    "publicFolders": {
-      "type": "array",
-      "items": { "type": "string" }
-    },
-    "server": {
-      "type": "object",
-      "additionalProperties": true,
-      "properties": {
-        "port": { "type": "number" },
-        "host": { "type": "string" }
-      }
-    }
-  }
-}

package/.worktrees/bundling-v2-precompiled-registrars/src/App/index.html

@@ -1,22 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-  <head>
-    <meta charset="UTF-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <title>Slice - Documentation</title>
-    <link rel="icon" type="image/x-icon" href="/../../images/favicon.ico" />
-    <link rel="stylesheet" type="text/css" href="/App/style.css" />
-
-    <!-- Prism -->
-
-   
-
-    <!-- Eliminar Prism despues-->
-  </head>
-
-  <body>
-    <div id="app">
-      <script src="/App/index.js" type="module"></script>
-    </div>
-  </body>
-</html>

package/.worktrees/bundling-v2-precompiled-registrars/src/App/index.js

@@ -1,23 +0,0 @@
-import Slice from '/Slice/Slice.js';
-
-
-/*
-slice.router.beforeEach(async (to, from, next) => {
-  
-   if(to.metadata.private){
-      const isAuthenticated = await //fetchlogic for validation
-      if(!isAuthenticated){
-         return next({ path: '/login', replace: true });
-      }
-      return next();
-   }
-   
-   return next();
-});
-
-
-If any beforeEach or afterEach is defined, start the router after defining them
-
-await slice.router.start();
-
-*/

package/.worktrees/bundling-v2-precompiled-registrars/src/App/style.css

@@ -1,40 +0,0 @@
-/* :root {
-  --docs-width: 64%;
-}
-slice-layout {
-  display: flex;
-  justify-content: center;
-}
-
-p {
-  text-align: justify;
-}
-h1 {
-  padding-top: 10px;
-  padding-bottom: 10px;
-  border-bottom: 1px solid var(--secondary-background-color);
-}
-h2 {
-  padding-top: 10px;
-}
-.grid-container {
-  overflow-x: auto;
-}
-@media only screen and (max-width: 770px) {
-  :root {
-    --docs-width: 100%;
-  }
-}
-* {
-  font-family: var(--font-family);
-}
-.docs_container {
-  color: var(--font-primary-color);
-  margin-top: 100px;
-  overflow-y: scroll;
-  overflow-x: hidden;
-  width: var(--docs-width);
-  padding-left: 10px;
-  padding-right: 10px;
-  padding-bottom: 25px;
-} */

package/.worktrees/bundling-v2-precompiled-registrars/src/Components/AppComponents/HomePage/HomePage.css

@@ -1,201 +0,0 @@
-/* Home page styles */
-slice-home-page {
-  display: block;
-  width: 100%;
-  font-family: var(--font-family);
-  color: var(--font-primary-color);
-}
-
-/* ── HERO ── */
-.hero-section {
-  min-height: 80vh;
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  text-align: center;
-  padding: 7rem 2rem 5rem;
-  background-color: var(--primary-background-color);
-  position: relative;
-  overflow: hidden;
-}
-
-.hero-section::before {
-  content: '';
-  position: absolute;
-  top: -150px;
-  left: 50%;
-  transform: translateX(-50%);
-  width: 700px;
-  height: 700px;
-  background: radial-gradient(
-    circle,
-    rgba(var(--primary-color-rgb), 0.07) 0%,
-    transparent 70%
-  );
-  pointer-events: none;
-}
-
-.hero-content {
-  max-width: 640px;
-  position: relative;
-  z-index: 1;
-}
-
-.hero-badge {
-  display: inline-block;
-  background: rgba(var(--primary-color-rgb), 0.1);
-  color: var(--primary-color);
-  font-size: 0.75rem;
-  font-weight: 700;
-  letter-spacing: 0.08em;
-  text-transform: uppercase;
-  padding: 0.3rem 0.85rem;
-  border-radius: 20px;
-  margin-bottom: 1.5rem;
-}
-
-.hero-title {
-  font-size: 3rem;
-  font-weight: 800;
-  color: var(--font-primary-color);
-  line-height: 1.1;
-  margin-bottom: 1rem;
-  letter-spacing: -0.03em;
-}
-
-.hero-title .highlight {
-  color: var(--primary-color);
-}
-
-.hero-sub {
-  font-size: 1.05rem;
-  color: var(--font-secondary-color);
-  margin-bottom: 2rem;
-  line-height: 1.6;
-}
-
-.hero-cta {
-  display: flex;
-  gap: 0.75rem;
-  justify-content: center;
-  margin-bottom: 2.5rem;
-}
-
-.hero-chips {
-  display: flex;
-  gap: 0.5rem;
-  justify-content: center;
-  flex-wrap: wrap;
-}
-
-.hero-chip {
-  background: white;
-  border: 1px solid var(--disabled-color);
-  color: var(--primary-color);
-  font-size: 0.75rem;
-  font-weight: 600;
-  padding: 0.3rem 0.75rem;
-  border-radius: 20px;
-  box-shadow: var(--box-shadow-primary);
-}
-
-/* ── FEATURES ── */
-.features-section {
-  padding: 5rem 2rem;
-  background: white;
-  border-top: 1px solid var(--disabled-color);
-}
-
-.section-header {
-  text-align: center;
-  margin-bottom: 2.5rem;
-}
-
-.section-label {
-  font-size: 0.72rem;
-  font-weight: 700;
-  color: var(--accent-color);
-  text-transform: uppercase;
-  letter-spacing: 0.1em;
-  margin-bottom: 0.4rem;
-}
-
-.section-title {
-  font-size: 1.9rem;
-  font-weight: 800;
-  color: var(--font-primary-color);
-  letter-spacing: -0.02em;
-}
-
-.feature-grid {
-  display: grid;
-  grid-template-columns: repeat(3, 1fr);
-  gap: 1.2rem;
-  max-width: 820px;
-  margin: 0 auto;
-}
-
-.feature-item {
-  background: var(--primary-background-color);
-  border-radius: 10px;
-  padding: 1.4rem 1.2rem;
-  border: 1px solid var(--disabled-color);
-  transition: box-shadow 0.2s, transform 0.15s;
-}
-
-.feature-item:hover {
-  box-shadow: var(--box-shadow-primary);
-  transform: translateY(-2px);
-}
-
-.feature-title {
-  font-size: 0.9rem;
-  font-weight: 700;
-  color: var(--font-primary-color);
-  margin-bottom: 0.35rem;
-}
-
-.feature-description {
-  font-size: 0.78rem;
-  color: var(--medium-color);
-  line-height: 1.5;
-}
-
-/* ── SHOWCASE ── */
-.showcase-section {
-  padding: 5rem 2rem;
-  background: var(--primary-background-color);
-  border-top: 1px solid var(--disabled-color);
-}
-
-.showcase-grid {
-  display: grid;
-  grid-template-columns: repeat(auto-fit, minmax(200px, 1fr));
-  gap: 1rem;
-  max-width: 860px;
-  margin: 0 auto;
-}
-
-.comp-card {
-  background: white;
-  border-radius: 10px;
-  padding: 1.3rem 1.2rem;
-  border: 1px solid var(--disabled-color);
-  box-shadow: 0 2px 8px rgba(var(--primary-color-rgb), 0.06);
-}
-
-.comp-label {
-  font-size: 0.65rem;
-  font-weight: 700;
-  color: var(--medium-color);
-  text-transform: uppercase;
-  letter-spacing: 0.1em;
-  margin-bottom: 0.75rem;
-}
-
-.comp-demo {
-  display: flex;
-  align-items: center;
-  gap: 0.6rem;
-  flex-wrap: wrap;
-}