treege 3.0.0-beta.26 → 3.0.0-beta.28

package/dist/renderer/types/renderer.d.ts

@@ -120,7 +120,9 @@ export type TreegeRendererComponents = {
     /**
      * Custom group container renderer
      */
-    group?: (props: NodeRenderProps) => ReactNode;
+    group?: (props: NodeRenderProps & {
+        children?: ReactNode;
+    }) => ReactNode;
     /**
      * Custom form wrapper
      */
@@ -129,10 +131,20 @@ export type TreegeRendererComponents = {
         onSubmit: (e: FormEvent) => void;
     }) => ReactNode;
     /**
-     * Custom submit button (pure button without wrapper)
+     * Custom submit button (supports both web and native variants)
+     * Web variant: { label?: string; disabled?: boolean; ...otherHTMLAttributes }
+     * Native variant: { children?: ReactNode; disabled?: boolean; isSubmitting?: boolean; onPress?: () => void }
      */
     submitButton?: (props: {
         label?: string;
+        disabled?: boolean;
+        [key: string]: unknown;
+    } | {
+        children?: ReactNode;
+        disabled?: boolean;
+        isSubmitting?: boolean;
+        onPress?: () => void;
+        [key: string]: unknown;
     }) => ReactNode;
     /**
      * Custom submit button wrapper (e.g., for tooltip with missing fields)
@@ -175,7 +187,11 @@ export type TreegeRendererConfig = {
 /**
  * Props for the TreegeRenderer component
  */
-export type TreegeRendererProps = {
+export interface TreegeRendererProps {
+    /**
+     * Additional class name for the renderer container
+     */
+    className?: string;
     /**
      * Custom component renderers
      */
@@ -222,4 +238,4 @@ export type TreegeRendererProps = {
      * Validation mode
      */
     validationMode?: "onChange" | "onSubmit";
-};
+}

package/dist/renderer/utils/sanitize.native.d.ts

@@ -0,0 +1,69 @@
+/**
+ * React Native implementation of sanitization utilities
+ * Does not use DOMPurify as it depends on browser DOM
+ */
+/**
+ * Configuration for sanitization
+ */
+interface SanitizeOptions {
+    /**
+     * Allow only plain text (strip all HTML tags)
+     * @default true
+     */
+    plainTextOnly?: boolean;
+    /**
+     * Custom allowed tags (when plainTextOnly is false)
+     * Note: In React Native, HTML tags are always stripped
+     */
+    allowedTags?: string[];
+    /**
+     * Custom allowed attributes (when plainTextOnly is false)
+     * Note: In React Native, attributes are not applicable
+     */
+    allowedAttributes?: string[];
+}
+/**
+ * Sanitizes user input to prevent XSS attacks
+ *
+ * React Native implementation that strips all HTML tags and decodes entities.
+ * Since React Native doesn't render HTML, we focus on cleaning text content.
+ *
+ * @param input - The string to sanitize
+ * @param options - Sanitization options (maintained for API compatibility)
+ * @returns Sanitized string safe for rendering
+ *
+ * @example
+ * sanitize('<script>alert("xss")</script>Hello')
+ * // => 'Hello'
+ *
+ * @example
+ * sanitize('<b>Bold text</b><script>alert("xss")</script>')
+ * // => 'Bold text'
+ */
+export declare const sanitize: (input: string | undefined | null, _options?: SanitizeOptions) => string;
+/**
+ * Sanitizes data from HTTP responses
+ *
+ * This function recursively sanitizes all string values in an object or array.
+ * Useful for cleaning data received from external APIs before displaying it.
+ *
+ * Protection against:
+ * - Circular references: Uses WeakSet to detect and handle circular objects
+ * - Deep nesting attacks: Limits recursion depth to prevent DoS
+ * - XSS attacks: Sanitizes all string values
+ *
+ * @param data - The data to sanitize (can be any type)
+ * @param options - Sanitization options
+ * @param depth - Current recursion depth (internal use)
+ * @param seen - WeakSet to track visited objects (internal use)
+ * @returns Sanitized data with same structure
+ *
+ * @example
+ * sanitizeHttpResponse({
+ *   name: 'John <script>xss</script>',
+ *   nested: { title: 'Hello <b>world</b>' }
+ * })
+ * // => { name: 'John ', nested: { title: 'Hello world' } }
+ */
+export declare const sanitizeHttpResponse: (data: unknown, options?: SanitizeOptions, depth?: number, seen?: WeakSet<object>) => unknown;
+export {};

package/dist/renderer/utils/submit.d.ts

@@ -33,7 +33,7 @@ export interface SubmitResult {
  *
  * @param config - Submit configuration from the submit button node
  * @param formValues - Current form values
- * @param inputNodes - All input nodes (required when sendFormData is true)
+ * @param inputNodes - All input nodes (required when sendAllFormValues is true)
  * @returns Promise with submission result
  */
 export declare const submitFormData: (config: SubmitConfig, formValues: FormValues, inputNodes: Node<InputNodeData>[]) => Promise<SubmitResult>;

package/dist/renderer-native.d.ts

@@ -0,0 +1,2 @@
+export * from './renderer/index.native'
+export {}