Function getValidScripts

src/lib/ScriptUtils.js:17–53

(scripts, className, field)

 * @returns {Object} - { validScripts: Array, validator: Function|null }
 */
export function getValidScripts(scripts, className, field) {
  let validator = null;
  const validScripts = (scripts || []).filter(script => {
    if (script.classes?.includes(className)) {
      return true;
    }
    for (const scriptClass of script?.classes || []) {
      if (scriptClass?.name !== className) {
        continue;
      }
      const fields = scriptClass?.fields || [];
      if (scriptClass?.fields.includes(field) || scriptClass?.fields.includes('*')) {
        return true;
      }
      for (const currentField of fields) {
        if (Object.prototype.toString.call(currentField) === '[object Object]') {
          if (currentField.name === field) {
            if (typeof currentField.validator === 'string') {
              // SAFETY: eval() is used here on validator strings from trusted admin-controlled
              // dashboard configuration only (not user input). These validators are used solely
              // for UI validation logic to enable/disable script menu items. This is an accepted
              // tradeoff in this trusted admin context. If requirements change, consider replacing
              // with Function constructor or a safer expression parser.
              validator = eval(currentField.validator);
            } else {
              validator = currentField.validator;
            }
            return true;
          }
        }
      }
    }
    return false;
  });

  return { validScripts, validator };
}

/**
 * Checks if a script response is a ScriptResponse with a form definition.