npm - @authup/server-core - Versions diffs - 1.0.0-beta.63 → 1.0.0-beta.64 - Mend

@authup/server-core 1.0.0-beta.63 → 1.0.0-beta.64

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (710) hide show

package/dist/adapters/http/ui/theme/contract/constants.d.ts DELETED Viewed

@@ -1,120 +0,0 @@
-/**
- * The theme CONTRACT: the on-disk layout, the manifest vocabulary and the
- * URL space a theme occupies. Everything here is portable — no node APIs,
- * no HTTP — so a browser-side theme editor or a CLI validator can share it
- * verbatim. Serving concerns (headers, caches, mounts) live one level up.
- */
-export declare const THEME_MANIFEST_FILE_NAME = "theme.json";
-/**
- * The ONLY sub-directory reachable over HTTP. The mount root is
- * `<themeDirectoryPath>/assets`, never the theme root, so `theme.json`
- * (and any future non-public file) is unreachable by construction rather
- * than by an extension filter a later edit could loosen.
- */
-export declare const THEME_ASSETS_DIRECTORY_NAME = "assets";
-export declare const THEME_FRAGMENTS_DIRECTORY_NAME = "fragments";
-/**
- * Raw markup spliced into `<head>`. Read only when the operator opts in
- * via `themeFragmentsEnabled`: a fragment is unsanitized markup on the
- * IdP origin, so it must be a deliberate decision and never a consequence
- * of dropping a file into the mounted directory.
- *
- * Head-only by design. There is deliberately no in-`<body>` slot: a
- * fragment rendered next to the consent buttons is a strictly better
- * consent-forgery primitive than one in `<head>` (it could relabel or
- * overlay Allow with no CSS at all).
- */
-export declare const THEME_HEAD_FRAGMENT_FILE_NAME = "head.html";
-export declare const THEME_HEAD_FRAGMENT_MAX_LENGTH: number;
-/** The path segment the theme's `assets/` directory is served under. */
-export declare const THEME_ASSET_MOUNT_PATH = "theme";
-/**
- * A manifest declares the contract version it was written against. An
- * unknown version fails the boot instead of being partially understood.
- */
-export declare const THEME_MANIFEST_VERSION = 1;
-/**
- * Token names are validated by GRAMMAR, not against a closed list of the
- * `--authup-*` properties the theme packages happen to declare today.
- *
- * A closed list would have to live here, and this package cannot depend on
- * `@authup/client-web-kit-theme`, so nothing could bind the two and it
- * would rot in both directions: a newly added CSS token would fail
- * validation for a legitimate override, and a removed one would stay
- * accepted. The grammar cannot rot.
- *
- * It is NOT sufficient for an untrusted (per-realm) token source, and a
- * later rung must not adopt it unchanged. Values are guarded by a denylist
- * of CSS functions, and a denylist over a language that keeps gaining
- * functions leaks by construction: `image-set()` and `src()` already had
- * to be added after `url()`. Filesystem input is operator trust, equal to
- * the process, so a denylist is proportionate here. Untrusted input needs
- * an allowlist of accepted value SHAPES (a colour, a length, a keyword)
- * per token, which is a different validator.
- */
-export declare const THEME_TOKEN_NAME_PATTERN: RegExp;
-export declare const THEME_TOKEN_VALUE_MAX_LENGTH = 256;
-/**
- * Keeps a token value from closing the declaration block, opening a tag,
- * starting a new at-rule or comment, or turning the server-emitted token
- * block into a request-emitting sink. Layer 2 (`theme.css`) may of course
- * use `url()`; that asymmetry is deliberate and documented.
- *
- * `{` is forbidden alongside `}`: it opens a block inside the declaration,
- * which swallows the rule that follows. One stray brace in a light token
- * silently absorbs the whole `.dark` rule, so dark mode stops applying
- * with no error anywhere.
- *
- * Vendor prefixes are covered (`-webkit-image-set(`), and so is whitespace
- * before the paren; escapes cannot be used to smuggle a name past this
- * because `\` is forbidden outright.
- */
-export declare const THEME_TOKEN_VALUE_FORBIDDEN_PATTERN: RegExp;
-/**
- * Every asset kind a theme may contain, and the content type it is pinned
- * to when served. Notably excludes `.html` and `.js`, so a stray document
- * or script in the mounted directory can never be served from the IdP
- * origin.
- */
-export declare const THEME_ASSET_CONTENT_TYPES: Record<string, string>;
-/**
- * Derived, never hand-maintained: the allowlist and the content-type map
- * must describe the same set, or a servable extension would be sent with
- * an undefined content type.
- */
-export declare const THEME_ASSET_EXTENSIONS: string[];
-/**
- * The subset a `logo` may use. Derived from the content-type map so a new
- * image type is servable and usable as a logo in one edit.
- */
-export declare const THEME_IMAGE_EXTENSIONS: string[];
-/**
- * Emitted by server-core from a manifest's `logo`, never authored as a raw
- * token: the value carries a `url()`, which the token grammar forbids for
- * operator-supplied values so the token block cannot become a
- * request-emitting sink. The href is built from an already-validated asset
- * path.
- */
-export declare const THEME_LOGO_TOKENS: readonly [{
-    readonly image: "--authup-auth-logo-image";
-    readonly markVisibility: "--authup-auth-logo-mark-visibility";
-}, {
-    readonly image: "--authup-account-logo-image";
-    readonly markVisibility: "--authup-account-logo-mark-visibility";
-}];
-/**
- * The CSS layer the token block is emitted into.
- *
- * A layer name not present in the bundle's `@layer` statement is appended
- * LAST in the layer order, so it beats `@layer authup` (the kit tokens)
- * and `@layer base` (the app theme's brand rebinds and its `.dark` flips)
- * without needing `!important`. Inside the block `.dark` beats `:root` by
- * source order, so dark mode keeps working.
- *
- * Deliberately NOT an inline `style` attribute on `<html>`: that would win
- * permanently, and the color-mode switcher flips the `.dark` class
- * client-side with no reload, which would freeze the brand at whatever the
- * cookie said at render time.
- */
-export declare const THEME_CSS_LAYER_NAME = "authup-theme";
-//# sourceMappingURL=constants.d.ts.map

package/dist/adapters/http/ui/theme/contract/constants.d.ts.map DELETED Viewed

@@ -1 +0,0 @@

- {"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/ui/theme/contract/constants.ts"],"names":[],"mappings":"AAOA;;;;;GAKG;AAEH,eAAO,MAAM,wBAAwB,eAAe,CAAC;AAErD;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,WAAW,CAAC;AAEpD,eAAO,MAAM,8BAA8B,cAAc,CAAC;AAE1D;;;;;;;;;;GAUG;AACH,eAAO,MAAM,6BAA6B,cAAc,CAAC;AAEzD,eAAO,MAAM,8BAA8B,QAAY,CAAC;AAExD,wEAAwE;AACxE,eAAO,MAAM,sBAAsB,UAAU,CAAC;AAE9C;;;GAGG;AACH,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,wBAAwB,QAAwB,CAAC;AAE9D,eAAO,MAAM,4BAA4B,MAAM,CAAC;AA8BhD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,mCAAmC,QAG/C,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,EAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAY7D,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,UAAyC,CAAC;AAE7E;;;GAGG;AACH,eAAO,MAAM,sBAAsB,UACkD,CAAC;AAEtF;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;;;;;;EAGpB,CAAC;AAEX;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,oBAAoB,iBAAiB,CAAC"}

package/dist/adapters/http/ui/theme/contract/constants.mjs DELETED Viewed

@@ -1,136 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-//#region src/adapters/http/ui/theme/contract/constants.ts
-/**
-* The theme CONTRACT: the on-disk layout, the manifest vocabulary and the
-* URL space a theme occupies. Everything here is portable — no node APIs,
-* no HTTP — so a browser-side theme editor or a CLI validator can share it
-* verbatim. Serving concerns (headers, caches, mounts) live one level up.
-*/ const THEME_MANIFEST_FILE_NAME = "theme.json";
-/**
-* The ONLY sub-directory reachable over HTTP. The mount root is
-* `<themeDirectoryPath>/assets`, never the theme root, so `theme.json`
-* (and any future non-public file) is unreachable by construction rather
-* than by an extension filter a later edit could loosen.
-*/ const THEME_ASSETS_DIRECTORY_NAME = "assets";
-const THEME_FRAGMENTS_DIRECTORY_NAME = "fragments";
-/**
-* Raw markup spliced into `<head>`. Read only when the operator opts in
-* via `themeFragmentsEnabled`: a fragment is unsanitized markup on the
-* IdP origin, so it must be a deliberate decision and never a consequence
-* of dropping a file into the mounted directory.
-*
-* Head-only by design. There is deliberately no in-`<body>` slot: a
-* fragment rendered next to the consent buttons is a strictly better
-* consent-forgery primitive than one in `<head>` (it could relabel or
-* overlay Allow with no CSS at all).
-*/ const THEME_HEAD_FRAGMENT_FILE_NAME = "head.html";
-const THEME_HEAD_FRAGMENT_MAX_LENGTH = 65536;
-/** The path segment the theme's `assets/` directory is served under. */ const THEME_ASSET_MOUNT_PATH = "theme";
-/**
-* A manifest declares the contract version it was written against. An
-* unknown version fails the boot instead of being partially understood.
-*/ const THEME_MANIFEST_VERSION = 1;
-/**
-* Token names are validated by GRAMMAR, not against a closed list of the
-* `--authup-*` properties the theme packages happen to declare today.
-*
-* A closed list would have to live here, and this package cannot depend on
-* `@authup/client-web-kit-theme`, so nothing could bind the two and it
-* would rot in both directions: a newly added CSS token would fail
-* validation for a legitimate override, and a removed one would stay
-* accepted. The grammar cannot rot.
-*
-* It is NOT sufficient for an untrusted (per-realm) token source, and a
-* later rung must not adopt it unchanged. Values are guarded by a denylist
-* of CSS functions, and a denylist over a language that keeps gaining
-* functions leaks by construction: `image-set()` and `src()` already had
-* to be added after `url()`. Filesystem input is operator trust, equal to
-* the process, so a denylist is proportionate here. Untrusted input needs
-* an allowlist of accepted value SHAPES (a colour, a length, a keyword)
-* per token, which is a different validator.
-*/ const THEME_TOKEN_NAME_PATTERN = /^--[a-z][a-z0-9-]*$/;
-const THEME_TOKEN_VALUE_MAX_LENGTH = 256;
-/**
-* Keeps a token value from closing the declaration block, opening a tag,
-* starting a new at-rule or comment, or turning the server-emitted token
-* block into a request-emitting sink. Layer 2 (`theme.css`) may of course
-* use `url()`; that asymmetry is deliberate and documented.
-*
-* `{` is forbidden alongside `}`: it opens a block inside the declaration,
-* which swallows the rule that follows. One stray brace in a light token
-* silently absorbs the whole `.dark` rule, so dark mode stops applying
-* with no error anywhere.
-*
-* Vendor prefixes are covered (`-webkit-image-set(`), and so is whitespace
-* before the paren; escapes cannot be used to smuggle a name past this
-* because `\` is forbidden outright.
-*/ const THEME_TOKEN_VALUE_FORBIDDEN_PATTERN = new RegExp(`[{}<>;@\\\\]|\\/\\*|(?:^|[^a-z0-9-])(?:-[a-z]+-)?(?:${[
-	"url",
-	"expression",
-	"image",
-	"image-set",
-	"src",
-	"cross-fade",
-	"element",
-	"paint"
-].join("|")})\\s*\\(`, "i");
-/**
-* Every asset kind a theme may contain, and the content type it is pinned
-* to when served. Notably excludes `.html` and `.js`, so a stray document
-* or script in the mounted directory can never be served from the IdP
-* origin.
-*/ const THEME_ASSET_CONTENT_TYPES = {
-	".css": "text/css; charset=utf-8",
-	".svg": "image/svg+xml",
-	".png": "image/png",
-	".jpg": "image/jpeg",
-	".jpeg": "image/jpeg",
-	".gif": "image/gif",
-	".webp": "image/webp",
-	".avif": "image/avif",
-	".ico": "image/x-icon",
-	".woff": "font/woff",
-	".woff2": "font/woff2"
-};
-/**
-* Derived, never hand-maintained: the allowlist and the content-type map
-* must describe the same set, or a servable extension would be sent with
-* an undefined content type.
-*/ const THEME_ASSET_EXTENSIONS = Object.keys(THEME_ASSET_CONTENT_TYPES);
-/**
-* The subset a `logo` may use. Derived from the content-type map so a new
-* image type is servable and usable as a logo in one edit.
-*/ const THEME_IMAGE_EXTENSIONS = THEME_ASSET_EXTENSIONS.filter((extension) => THEME_ASSET_CONTENT_TYPES[extension].startsWith("image/"));
-/**
-* Emitted by server-core from a manifest's `logo`, never authored as a raw
-* token: the value carries a `url()`, which the token grammar forbids for
-* operator-supplied values so the token block cannot become a
-* request-emitting sink. The href is built from an already-validated asset
-* path.
-*/ const THEME_LOGO_TOKENS = [{
-	image: "--authup-auth-logo-image",
-	markVisibility: "--authup-auth-logo-mark-visibility"
-}, {
-	image: "--authup-account-logo-image",
-	markVisibility: "--authup-account-logo-mark-visibility"
-}];
-/**
-* The CSS layer the token block is emitted into.
-*
-* A layer name not present in the bundle's `@layer` statement is appended
-* LAST in the layer order, so it beats `@layer authup` (the kit tokens)
-* and `@layer base` (the app theme's brand rebinds and its `.dark` flips)
-* without needing `!important`. Inside the block `.dark` beats `:root` by
-* source order, so dark mode keeps working.
-*
-* Deliberately NOT an inline `style` attribute on `<html>`: that would win
-* permanently, and the color-mode switcher flips the `.dark` class
-* client-side with no reload, which would freeze the brand at whatever the
-* cookie said at render time.
-*/ const THEME_CSS_LAYER_NAME = "authup-theme";
-//#endregion
-export { THEME_ASSETS_DIRECTORY_NAME, THEME_ASSET_CONTENT_TYPES, THEME_ASSET_EXTENSIONS, THEME_ASSET_MOUNT_PATH, THEME_CSS_LAYER_NAME, THEME_FRAGMENTS_DIRECTORY_NAME, THEME_HEAD_FRAGMENT_FILE_NAME, THEME_HEAD_FRAGMENT_MAX_LENGTH, THEME_IMAGE_EXTENSIONS, THEME_LOGO_TOKENS, THEME_MANIFEST_FILE_NAME, THEME_MANIFEST_VERSION, THEME_TOKEN_NAME_PATTERN, THEME_TOKEN_VALUE_FORBIDDEN_PATTERN, THEME_TOKEN_VALUE_MAX_LENGTH };
-//# sourceMappingURL=constants.mjs.map

package/dist/adapters/http/ui/theme/contract/constants.mjs.map DELETED Viewed

@@ -1 +0,0 @@

- {"version":3,"file":"constants.mjs","names":["THEME_MANIFEST_FILE_NAME","THEME_ASSETS_DIRECTORY_NAME","THEME_FRAGMENTS_DIRECTORY_NAME","THEME_HEAD_FRAGMENT_FILE_NAME","THEME_HEAD_FRAGMENT_MAX_LENGTH","THEME_ASSET_MOUNT_PATH","THEME_MANIFEST_VERSION","THEME_TOKEN_NAME_PATTERN","THEME_TOKEN_VALUE_MAX_LENGTH","THEME_TOKEN_VALUE_FORBIDDEN_FUNCTIONS","THEME_TOKEN_VALUE_FORBIDDEN_PATTERN","RegExp","join","THEME_ASSET_CONTENT_TYPES","THEME_ASSET_EXTENSIONS","Object","keys","THEME_IMAGE_EXTENSIONS","filter","extension","startsWith","THEME_LOGO_TOKENS","image","markVisibility","THEME_CSS_LAYER_NAME"],"sources":["../../../../../../src/adapters/http/ui/theme/contract/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\n/**\n * The theme CONTRACT: the on-disk layout, the manifest vocabulary and the\n * URL space a theme occupies. Everything here is portable — no node APIs,\n * no HTTP — so a browser-side theme editor or a CLI validator can share it\n * verbatim. Serving concerns (headers, caches, mounts) live one level up.\n */\n\nexport const THEME_MANIFEST_FILE_NAME = 'theme.json';\n\n/**\n * The ONLY sub-directory reachable over HTTP. The mount root is\n * `<themeDirectoryPath>/assets`, never the theme root, so `theme.json`\n * (and any future non-public file) is unreachable by construction rather\n * than by an extension filter a later edit could loosen.\n */\nexport const THEME_ASSETS_DIRECTORY_NAME = 'assets';\n\nexport const THEME_FRAGMENTS_DIRECTORY_NAME = 'fragments';\n\n/**\n * Raw markup spliced into `<head>`. Read only when the operator opts in\n * via `themeFragmentsEnabled`: a fragment is unsanitized markup on the\n * IdP origin, so it must be a deliberate decision and never a consequence\n * of dropping a file into the mounted directory.\n *\n * Head-only by design. There is deliberately no in-`<body>` slot: a\n * fragment rendered next to the consent buttons is a strictly better\n * consent-forgery primitive than one in `<head>` (it could relabel or\n * overlay Allow with no CSS at all).\n */\nexport const THEME_HEAD_FRAGMENT_FILE_NAME = 'head.html';\n\nexport const THEME_HEAD_FRAGMENT_MAX_LENGTH = 64 * 1024;\n\n/** The path segment the theme's `assets/` directory is served under. */\nexport const THEME_ASSET_MOUNT_PATH = 'theme';\n\n/**\n * A manifest declares the contract version it was written against. An\n * unknown version fails the boot instead of being partially understood.\n */\nexport const THEME_MANIFEST_VERSION = 1;\n\n/**\n * Token names are validated by GRAMMAR, not against a closed list of the\n * `--authup-*` properties the theme packages happen to declare today.\n *\n * A closed list would have to live here, and this package cannot depend on\n * `@authup/client-web-kit-theme`, so nothing could bind the two and it\n * would rot in both directions: a newly added CSS token would fail\n * validation for a legitimate override, and a removed one would stay\n * accepted. The grammar cannot rot.\n *\n * It is NOT sufficient for an untrusted (per-realm) token source, and a\n * later rung must not adopt it unchanged. Values are guarded by a denylist\n * of CSS functions, and a denylist over a language that keeps gaining\n * functions leaks by construction: `image-set()` and `src()` already had\n * to be added after `url()`. Filesystem input is operator trust, equal to\n * the process, so a denylist is proportionate here. Untrusted input needs\n * an allowlist of accepted value SHAPES (a colour, a length, a keyword)\n * per token, which is a different validator.\n */\nexport const THEME_TOKEN_NAME_PATTERN = /^--[a-z][a-z0-9-]*$/;\n\nexport const THEME_TOKEN_VALUE_MAX_LENGTH = 256;\n\n/**\n * Every CSS function that can load a remote resource.\n *\n * Blocking `url(` alone does not close the request-emitting-sink hole:\n * `image-set()`, `image()`, `src()` and `cross-fade()` all take a bare\n * string URL, and a token like `--authup-auth-logo-image` is substituted\n * straight into an image-accepting property. `element()` and `paint()`\n * cannot fetch, but they render document content into a paint sink and\n * have no business in an operator token either.\n *\n * A denylist over function names is still a denylist, so this list is the\n * floor rather than the argument: the values it guards are operator\n * authored, and an operator can already ship arbitrary CSS through\n * `theme.css`. It exists so a value cannot QUIETLY do something the\n * grammar advertises as impossible. A per-realm (untrusted) token source\n * must not reuse it as-is; see the note on the name pattern below.\n */\nconst THEME_TOKEN_VALUE_FORBIDDEN_FUNCTIONS = [\n 'url',\n 'expression',\n 'image',\n 'image-set',\n 'src',\n 'cross-fade',\n 'element',\n 'paint',\n];\n\n/**\n * Keeps a token value from closing the declaration block, opening a tag,\n * starting a new at-rule or comment, or turning the server-emitted token\n * block into a request-emitting sink. Layer 2 (`theme.css`) may of course\n * use `url()`; that asymmetry is deliberate and documented.\n *\n * `{` is forbidden alongside `}`: it opens a block inside the declaration,\n * which swallows the rule that follows. One stray brace in a light token\n * silently absorbs the whole `.dark` rule, so dark mode stops applying\n * with no error anywhere.\n *\n * Vendor prefixes are covered (`-webkit-image-set(`), and so is whitespace\n * before the paren; escapes cannot be used to smuggle a name past this\n * because `\\` is forbidden outright.\n */\nexport const THEME_TOKEN_VALUE_FORBIDDEN_PATTERN = new RegExp(\n `[{}<>;@\\\\\\\\]|\\\\/\\\\*|(?:^|[^a-z0-9-])(?:-[a-z]+-)?(?:${THEME_TOKEN_VALUE_FORBIDDEN_FUNCTIONS.join('|')})\\\\s*\\\\(`,\n 'i',\n);\n\n/**\n * Every asset kind a theme may contain, and the content type it is pinned\n * to when served. Notably excludes `.html` and `.js`, so a stray document\n * or script in the mounted directory can never be served from the IdP\n * origin.\n */\nexport const THEME_ASSET_CONTENT_TYPES : Record<string, string> = {\n '.css': 'text/css; charset=utf-8',\n '.svg': 'image/svg+xml',\n '.png': 'image/png',\n '.jpg': 'image/jpeg',\n '.jpeg': 'image/jpeg',\n '.gif': 'image/gif',\n '.webp': 'image/webp',\n '.avif': 'image/avif',\n '.ico': 'image/x-icon',\n '.woff': 'font/woff',\n '.woff2': 'font/woff2',\n};\n\n/**\n * Derived, never hand-maintained: the allowlist and the content-type map\n * must describe the same set, or a servable extension would be sent with\n * an undefined content type.\n */\nexport const THEME_ASSET_EXTENSIONS = Object.keys(THEME_ASSET_CONTENT_TYPES);\n\n/**\n * The subset a `logo` may use. Derived from the content-type map so a new\n * image type is servable and usable as a logo in one edit.\n */\nexport const THEME_IMAGE_EXTENSIONS = THEME_ASSET_EXTENSIONS\n .filter((extension) => THEME_ASSET_CONTENT_TYPES[extension].startsWith('image/'));\n\n/**\n * Emitted by server-core from a manifest's `logo`, never authored as a raw\n * token: the value carries a `url()`, which the token grammar forbids for\n * operator-supplied values so the token block cannot become a\n * request-emitting sink. The href is built from an already-validated asset\n * path.\n */\nexport const THEME_LOGO_TOKENS = [\n { image: '--authup-auth-logo-image', markVisibility: '--authup-auth-logo-mark-visibility' },\n { image: '--authup-account-logo-image', markVisibility: '--authup-account-logo-mark-visibility' },\n] as const;\n\n/**\n * The CSS layer the token block is emitted into.\n *\n * A layer name not present in the bundle's `@layer` statement is appended\n * LAST in the layer order, so it beats `@layer authup` (the kit tokens)\n * and `@layer base` (the app theme's brand rebinds and its `.dark` flips)\n * without needing `!important`. Inside the block `.dark` beats `:root` by\n * source order, so dark mode keeps working.\n *\n * Deliberately NOT an inline `style` attribute on `<html>`: that would win\n * permanently, and the color-mode switcher flips the `.dark` class\n * client-side with no reload, which would freeze the brand at whatever the\n * cookie said at render time.\n */\nexport const THEME_CSS_LAYER_NAME = 'authup-theme';\n"],"mappings":";;;;;;;;;GAcA,MAAaA,2BAA2B;;;;;;GAQxC,MAAaC,8BAA8B;AAE3C,MAAaC,iCAAiC;;;;;;;;;;;GAa9C,MAAaC,gCAAgC;AAE7C,MAAaC,iCAAiC;yEAG9C,MAAaC,yBAAyB;;;;GAMtC,MAAaC,yBAAyB;;;;;;;;;;;;;;;;;;;GAqBtC,MAAaC,2BAA2B;AAExC,MAAaC,+BAA+B;;;;;;;;;;;;;;;GA6C5C,MAAaE,sCAAsC,IAAIC,OACnD,uDAAuDF;CA1BvD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AAmBuDA,CAAAA,CAAsCG,KAAK,GAAA,EAAK,WACvG,GAAA;;;;;;GASJ,MAAaC,4BAAqD;CAC9D,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,SAAS;CACT,SAAS;CACT,QAAQ;CACR,SAAS;CACT,UAAU;AACd;;;;;GAOA,MAAaC,yBAAyBC,OAAOC,KAAKH,yBAAAA;;;;GAMlD,MAAaI,yBAAyBH,uBACjCI,QAAQC,cAAcN,0BAA0BM,UAAU,CAACC,WAAW,QAAA,CAAA;;;;;;;GAS3E,MAAaC,oBAAoB,CAC7B;CAAEC,OAAO;CAA4BC,gBAAgB;AAAqC,GAC1F;CAAED,OAAO;CAA+BC,gBAAgB;AAAwC,CACnG;;;;;;;;;;;;;;GAgBD,MAAaC,uBAAuB"}

package/dist/adapters/http/ui/theme/contract/head.d.ts DELETED Viewed

@@ -1,12 +0,0 @@
-import type { ThemeManifest } from './types.ts';
-export declare function escapeHtml(value: string): string;
-/**
- * The `<style>`/`<link>` block injected before `</head>`.
- *
- * Every value here has already passed the manifest grammar (no `<`, `>`,
- * `}`, `;` or `@` in a token value; asset paths are alphanumeric plus
- * `._/-`), so the emitted CSS cannot be broken out of. The title is the
- * one free-form field and is HTML-escaped.
- */
-export declare function buildThemeHead(manifest: ThemeManifest, basePath: string, fragment?: string): string;
-//# sourceMappingURL=head.d.ts.map

package/dist/adapters/http/ui/theme/contract/head.d.ts.map DELETED Viewed

	@@ -1 +0,0 @@
1	- {"version":3,"file":"head.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/ui/theme/contract/head.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAI,MAAM,CAMjD;AA2CD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC1B,QAAQ,EAAE,aAAa,EACvB,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,MAAM,GACjB,MAAM,CAuDT"}

package/dist/adapters/http/ui/theme/contract/head.mjs DELETED Viewed

@@ -1,61 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { THEME_ASSETS_DIRECTORY_NAME, THEME_ASSET_MOUNT_PATH, THEME_CSS_LAYER_NAME, THEME_LOGO_TOKENS } from "./constants.mjs";
-//#region src/adapters/http/ui/theme/contract/head.ts
-function escapeHtml(value) {
-	return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
-}
-/**
-* Turn a manifest asset path (`assets/logo.svg`) into the href it is
-* served under.
-*
-* Built with the base path up front rather than via rebaseAssetURLs, which
-* only rewrites the fixed `/public/` and `/account/` vite bases.
-*/ function buildAssetURL(assetPath, basePath) {
-	const name = assetPath.slice(`${THEME_ASSETS_DIRECTORY_NAME}/`.length);
-	return `${basePath}/${THEME_ASSET_MOUNT_PATH}/${name}`;
-}
-/**
-* The token pair that swaps the built-in mark for an operator image, for
-* one color mode. Empty when that mode declares no logo, so the other
-* mode's rule (or the built-in mark) stands.
-*/ function buildLogoTokens(logo, basePath) {
-	const tokens = {};
-	if (!logo) return tokens;
-	const url = buildAssetURL(logo, basePath);
-	for (const pair of THEME_LOGO_TOKENS) {
-		tokens[pair.image] = `url("${url}")`;
-		tokens[pair.markVisibility] = "hidden";
-	}
-	return tokens;
-}
-function buildTokenRule(selector, tokens) {
-	return `${selector}{${Object.keys(tokens).map((name) => `${name}:${tokens[name]}`).join(";")}}`;
-}
-/**
-* The `<style>`/`<link>` block injected before `</head>`.
-*
-* Every value here has already passed the manifest grammar (no `<`, `>`,
-* `}`, `;` or `@` in a token value; asset paths are alphanumeric plus
-* `._/-`), so the emitted CSS cannot be broken out of. The title is the
-* one free-form field and is HTML-escaped.
-*/ function buildThemeHead(manifest, basePath, fragment) {
-	const parts = [];
-	const rules = [];
-	const tokens = buildLogoTokens(manifest.logo, basePath);
-	Object.assign(tokens, manifest.tokens);
-	const tokensDark = buildLogoTokens(manifest.logoDark, basePath);
-	Object.assign(tokensDark, manifest.tokensDark);
-	if (Object.keys(tokens).length > 0) rules.push(buildTokenRule(":root", tokens));
-	if (Object.keys(tokensDark).length > 0) rules.push(buildTokenRule(".dark", tokensDark));
-	if (rules.length > 0) parts.push(`<style>@layer ${THEME_CSS_LAYER_NAME}{${rules.join("")}}</style>`);
-	if (manifest.favicon) parts.push(`<link rel="icon" href="${escapeHtml(buildAssetURL(manifest.favicon, basePath))}">`);
-	if (manifest.stylesheet) parts.push(`<link rel="stylesheet" href="${escapeHtml(buildAssetURL(manifest.stylesheet, basePath))}">`);
-	if (fragment) parts.push(fragment);
-	return parts.join("");
-}
-//#endregion
-export { buildThemeHead, escapeHtml };
-//# sourceMappingURL=head.mjs.map

package/dist/adapters/http/ui/theme/contract/head.mjs.map DELETED Viewed

@@ -1 +0,0 @@

- {"version":3,"file":"head.mjs","names":["THEME_ASSETS_DIRECTORY_NAME","THEME_ASSET_MOUNT_PATH","THEME_CSS_LAYER_NAME","THEME_LOGO_TOKENS","escapeHtml","value","replace","buildAssetURL","assetPath","basePath","name","slice","length","buildLogoTokens","logo","tokens","url","pair","image","markVisibility","buildTokenRule","selector","declarations","Object","keys","map","join","buildThemeHead","manifest","fragment","parts","rules","assign","tokensDark","logoDark","push","favicon","stylesheet"],"sources":["../../../../../../src/adapters/http/ui/theme/contract/head.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n THEME_ASSETS_DIRECTORY_NAME,\n THEME_ASSET_MOUNT_PATH,\n THEME_CSS_LAYER_NAME,\n THEME_LOGO_TOKENS,\n} from './constants.ts';\nimport type { ThemeManifest } from './types.ts';\n\nexport function escapeHtml(value: string) : string {\n return value\n .replace(/&/g, '&')\n .replace(/</g, '<')\n .replace(/>/g, '>')\n .replace(/\"/g, '"');\n}\n\n/**\n * Turn a manifest asset path (`assets/logo.svg`) into the href it is\n * served under.\n *\n * Built with the base path up front rather than via rebaseAssetURLs, which\n * only rewrites the fixed `/public/` and `/account/` vite bases.\n */\nfunction buildAssetURL(assetPath: string, basePath: string) : string {\n const name = assetPath.slice(`${THEME_ASSETS_DIRECTORY_NAME}/`.length);\n\n return `${basePath}/${THEME_ASSET_MOUNT_PATH}/${name}`;\n}\n\n/**\n * The token pair that swaps the built-in mark for an operator image, for\n * one color mode. Empty when that mode declares no logo, so the other\n * mode's rule (or the built-in mark) stands.\n */\nfunction buildLogoTokens(logo: string | undefined, basePath: string) : Record<string, string> {\n const tokens : Record<string, string> = {};\n if (!logo) {\n return tokens;\n }\n\n const url = buildAssetURL(logo, basePath);\n for (const pair of THEME_LOGO_TOKENS) {\n tokens[pair.image] = `url(\"${url}\")`;\n tokens[pair.markVisibility] = 'hidden';\n }\n\n return tokens;\n}\n\nfunction buildTokenRule(selector: string, tokens: Record<string, string>) : string {\n const declarations = Object.keys(tokens)\n .map((name) => `${name}:${tokens[name]}`)\n .join(';');\n\n return `${selector}{${declarations}}`;\n}\n\n/**\n * The `<style>`/`<link>` block injected before `</head>`.\n *\n * Every value here has already passed the manifest grammar (no `<`, `>`,\n * `}`, `;` or `@` in a token value; asset paths are alphanumeric plus\n * `._/-`), so the emitted CSS cannot be broken out of. The title is the\n * one free-form field and is HTML-escaped.\n */\nexport function buildThemeHead(\n manifest: ThemeManifest,\n basePath: string,\n fragment?: string,\n) : string {\n const parts : string[] = [];\n\n const rules : string[] = [];\n\n // The logo is a manifest field rather than a raw token because its\n // value needs url(), which the token grammar forbids. Merged before\n // the authored tokens so an explicit token of the same name still wins.\n //\n // `logo` and `logoDark` are emitted into their own rule, so a brand\n // whose mark is dark-on-light can ship a light-on-dark variant instead\n // of disappearing against the dark card. Each mode carries the\n // mark-visibility flag alongside its image, which makes all three\n // combinations coherent:\n // logo only -> one image, inherited by dark mode\n // both -> a per-mode image\n // logoDark only -> the built-in mark in light, the operator's in dark\n const tokens = buildLogoTokens(manifest.logo, basePath);\n Object.assign(tokens, manifest.tokens);\n\n const tokensDark = buildLogoTokens(manifest.logoDark, basePath);\n Object.assign(tokensDark, manifest.tokensDark);\n\n if (Object.keys(tokens).length > 0) {\n rules.push(buildTokenRule(':root', tokens));\n }\n // After :root, so it wins inside the layer by source order and the\n // color-mode switcher keeps working.\n if (Object.keys(tokensDark).length > 0) {\n rules.push(buildTokenRule('.dark', tokensDark));\n }\n\n if (rules.length > 0) {\n parts.push(`<style>@layer ${THEME_CSS_LAYER_NAME}{${rules.join('')}}</style>`);\n }\n\n if (manifest.favicon) {\n parts.push(`<link rel=\"icon\" href=\"${escapeHtml(buildAssetURL(manifest.favicon, basePath))}\">`);\n }\n\n // Last, so the operator stylesheet wins over the token block above it.\n if (manifest.stylesheet) {\n parts.push(`<link rel=\"stylesheet\" href=\"${escapeHtml(buildAssetURL(manifest.stylesheet, basePath))}\">`);\n }\n\n // After the stylesheet, so a fragment can override everything the\n // manifest emitted. Passed through verbatim: it is operator-authored\n // markup, and a partial sanitizer would be worse than none because it\n // invites treating fragments as untrusted-safe. The controls are that\n // it is filesystem-only, off by default, and head-only.\n if (fragment) {\n parts.push(fragment);\n }\n\n return parts.join('');\n}\n"],"mappings":";;;;;AAeA,SAAgBI,WAAWC,OAAa;CACpC,OAAOA,MACFC,QAAQ,MAAM,OAAA,CAAA,CACdA,QAAQ,MAAM,MAAA,CAAA,CACdA,QAAQ,MAAM,MAAA,CAAA,CACdA,QAAQ,MAAM,QAAA;AACvB;;;;;;;GASA,SAASC,cAAcC,WAAmBC,UAAgB;CACtD,MAAMC,OAAOF,UAAUG,MAAM,GAAGX,4BAA4B,GAAGY,MAAM;CAErE,OAAO,GAAGH,SAAS,GAAGR,uBAAuB,GAAGS;AACpD;;;;;GAOA,SAASG,gBAAgBC,MAA0BL,UAAgB;CAC/D,MAAMM,SAAkC,CAAC;CACzC,IAAI,CAACD,MACD,OAAOC;CAGX,MAAMC,MAAMT,cAAcO,MAAML,QAAAA;CAChC,KAAK,MAAMQ,QAAQd,mBAAmB;EAClCY,OAAOE,KAAKC,SAAS,QAAQF,IAAI;EACjCD,OAAOE,KAAKE,kBAAkB;CAClC;CAEA,OAAOJ;AACX;AAEA,SAASK,eAAeC,UAAkBN,QAA8B;CAKpE,OAAO,GAAGM,SAAS,GAJEE,OAAOC,KAAKT,MAAAA,CAAAA,CAC5BU,KAAKf,SAAS,GAAGA,KAAK,GAAGK,OAAOL,OAAO,CAAA,CACvCgB,KAAK,GAEYJ,EAAa;AACvC;;;;;;;;GAUA,SAAgBK,eACZC,UACAnB,UACAoB,UAAiB;CAEjB,MAAMC,QAAmB,CAAA;CAEzB,MAAMC,QAAmB,CAAA;CAczB,MAAMhB,SAASF,gBAAgBe,SAASd,MAAML,QAAAA;CAC9Cc,OAAOS,OAAOjB,QAAQa,SAASb,MAAM;CAErC,MAAMkB,aAAapB,gBAAgBe,SAASM,UAAUzB,QAAAA;CACtDc,OAAOS,OAAOC,YAAYL,SAASK,UAAU;CAE7C,IAAIV,OAAOC,KAAKT,MAAAA,CAAAA,CAAQH,SAAS,GAC7BmB,MAAMI,KAAKf,eAAe,SAASL,MAAAA,CAAAA;CAIvC,IAAIQ,OAAOC,KAAKS,UAAAA,CAAAA,CAAYrB,SAAS,GACjCmB,MAAMI,KAAKf,eAAe,SAASa,UAAAA,CAAAA;CAGvC,IAAIF,MAAMnB,SAAS,GACfkB,MAAMK,KAAK,iBAAiBjC,qBAAqB,GAAG6B,MAAML,KAAK,EAAA,EAAI,UAAU;CAGjF,IAAIE,SAASQ,SACTN,MAAMK,KAAK,0BAA0B/B,WAAWG,cAAcqB,SAASQ,SAAS3B,QAAAA,CAAAA,EAAW,GAAG;CAIlG,IAAImB,SAASS,YACTP,MAAMK,KAAK,gCAAgC/B,WAAWG,cAAcqB,SAASS,YAAY5B,QAAAA,CAAAA,EAAW,GAAG;CAQ3G,IAAIoB,UACAC,MAAMK,KAAKN,QAAAA;CAGf,OAAOC,MAAMJ,KAAK,EAAA;AACtB"}

package/dist/adapters/http/ui/theme/contract/index.d.ts DELETED Viewed

@@ -1,6 +0,0 @@
-export * from './constants.ts';
-export * from './head.ts';
-export * from './manifest.ts';
-export * from './types.ts';
-export * from './utils.ts';
-//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/ui/theme/contract/index.d.ts.map DELETED Viewed

	@@ -1 +0,0 @@
1	- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/ui/theme/contract/index.ts"],"names":[],"mappings":"AAOA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC"}

package/dist/adapters/http/ui/theme/contract/index.mjs DELETED Viewed

@@ -1,8 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { THEME_ASSETS_DIRECTORY_NAME, THEME_ASSET_CONTENT_TYPES, THEME_ASSET_EXTENSIONS, THEME_ASSET_MOUNT_PATH, THEME_CSS_LAYER_NAME, THEME_FRAGMENTS_DIRECTORY_NAME, THEME_HEAD_FRAGMENT_FILE_NAME, THEME_HEAD_FRAGMENT_MAX_LENGTH, THEME_IMAGE_EXTENSIONS, THEME_LOGO_TOKENS, THEME_MANIFEST_FILE_NAME, THEME_MANIFEST_VERSION, THEME_TOKEN_NAME_PATTERN, THEME_TOKEN_VALUE_FORBIDDEN_PATTERN, THEME_TOKEN_VALUE_MAX_LENGTH } from "./constants.mjs";
-import { buildThemeHead, escapeHtml } from "./head.mjs";
-import { themeAssetExtension } from "./utils.mjs";
-import { ThemeManifestValidator, parseThemeManifest } from "./manifest.mjs";
-export { THEME_ASSETS_DIRECTORY_NAME, THEME_ASSET_CONTENT_TYPES, THEME_ASSET_EXTENSIONS, THEME_ASSET_MOUNT_PATH, THEME_CSS_LAYER_NAME, THEME_FRAGMENTS_DIRECTORY_NAME, THEME_HEAD_FRAGMENT_FILE_NAME, THEME_HEAD_FRAGMENT_MAX_LENGTH, THEME_IMAGE_EXTENSIONS, THEME_LOGO_TOKENS, THEME_MANIFEST_FILE_NAME, THEME_MANIFEST_VERSION, THEME_TOKEN_NAME_PATTERN, THEME_TOKEN_VALUE_FORBIDDEN_PATTERN, THEME_TOKEN_VALUE_MAX_LENGTH, ThemeManifestValidator, buildThemeHead, escapeHtml, parseThemeManifest, themeAssetExtension };

package/dist/adapters/http/ui/theme/contract/manifest.d.ts DELETED Viewed

@@ -1,25 +0,0 @@
-import { Container } from 'validup';
-import type { ThemeManifest } from './types.ts';
-/**
- * Validator for the operator-authored `theme.json`.
- *
- * A validup Container over zod mounts, matching ConfigValidator: this file
- * is config, not an API payload, and the config-shaped precedent in this
- * codebase is validup. It also means a second consumer (a per-realm token
- * map, an admin-console form, a CLI `theme validate`) reuses these rules
- * instead of restating them.
- *
- * No validator groups: there is one source and one shape. A per-realm
- * surface that accepts a narrower manifest than a file does would add one.
- */
-export declare class ThemeManifestValidator extends Container<ThemeManifest> {
-    protected initialize(): void;
-}
-/**
- * Validate a parsed `theme.json`. On failure the thrown error names the
- * file and renders every issue as `<path>: <message>`, matching
- * FileProvisioningSource: a bad entry must never abort a boot with nothing
- * to act on.
- */
-export declare function parseThemeManifest(input: unknown, filePath: string): Promise<ThemeManifest>;
-//# sourceMappingURL=manifest.d.ts.map

package/dist/adapters/http/ui/theme/contract/manifest.d.ts.map DELETED Viewed

@@ -1 +0,0 @@

- {"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/ui/theme/contract/manifest.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,SAAS,EAAiC,MAAM,SAAS,CAAC;AAWnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAwChD;;;;;;;;;;;GAWG;AACH,qBAAa,sBAAuB,SAAQ,SAAS,CAAC,aAAa,CAAC;cAC7C,UAAU;CAYhC;AAqBD;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAI,OAAO,CAAC,aAAa,CAAC,CA2BlG"}

package/dist/adapters/http/ui/theme/contract/manifest.mjs DELETED Viewed

@@ -1,77 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { THEME_ASSETS_DIRECTORY_NAME, THEME_ASSET_EXTENSIONS, THEME_IMAGE_EXTENSIONS, THEME_TOKEN_NAME_PATTERN, THEME_TOKEN_VALUE_FORBIDDEN_PATTERN } from "./constants.mjs";
-import { themeAssetExtension } from "./utils.mjs";
-import { AuthupError } from "@authup/errors";
-import { Container, isValidupError, stringifyPath } from "validup";
-import { createValidator } from "@validup/zod";
-import { z } from "zod";
-//#region src/adapters/http/ui/theme/contract/manifest.ts
-const assetPathSchema = z.string().regex(new RegExp(`^${THEME_ASSETS_DIRECTORY_NAME}/[a-zA-Z0-9][a-zA-Z0-9._/-]*$`), `must be a path inside '${THEME_ASSETS_DIRECTORY_NAME}/'`).refine((value) => !value.split("/").includes(".."), "must not contain a \"..\" segment").refine((value) => THEME_ASSET_EXTENSIONS.includes(themeAssetExtension(value)), `must end in one of: ${THEME_ASSET_EXTENSIONS.join(", ")}`);
-/**
-* A logo must be an image. The general asset allowlist also covers CSS and
-* fonts, which would silently render as nothing here.
-*/ const logoPathSchema = assetPathSchema.refine((value) => THEME_IMAGE_EXTENSIONS.includes(themeAssetExtension(value)), `must be an image (${THEME_IMAGE_EXTENSIONS.join(", ")})`);
-const tokenMapSchema = z.record(z.string().regex(THEME_TOKEN_NAME_PATTERN, "must be a lowercase CSS custom property name (e.g. --authup-auth-accent)"), z.string().min(1).max(256).refine((value) => !THEME_TOKEN_VALUE_FORBIDDEN_PATTERN.test(value), "must not contain }, <, >, ;, @, \\, /*, url( or expression("));
-/**
-* Validator for the operator-authored `theme.json`.
-*
-* A validup Container over zod mounts, matching ConfigValidator: this file
-* is config, not an API payload, and the config-shaped precedent in this
-* codebase is validup. It also means a second consumer (a per-realm token
-* map, an admin-console form, a CLI `theme validate`) reuses these rules
-* instead of restating them.
-*
-* No validator groups: there is one source and one shape. A per-realm
-* surface that accepts a narrower manifest than a file does would add one.
-*/ var ThemeManifestValidator = class extends Container {
-	initialize() {
-		super.initialize();
-		this.mount("version", createValidator(z.literal(1)));
-		this.mount("title", { optional: true }, createValidator(z.string().min(1).max(200)));
-		this.mount("favicon", { optional: true }, createValidator(assetPathSchema));
-		this.mount("logo", { optional: true }, createValidator(logoPathSchema));
-		this.mount("logoDark", { optional: true }, createValidator(logoPathSchema));
-		this.mount("stylesheet", { optional: true }, createValidator(assetPathSchema));
-		this.mount("tokens", { optional: true }, createValidator(tokenMapSchema));
-		this.mount("tokensDark", { optional: true }, createValidator(tokenMapSchema));
-	}
-};
-const validator = new ThemeManifestValidator();
-/**
-* Every key the validator mounts. Validup STRIPS an unmounted key rather
-* than rejecting it, and a silently-ignored `stylesheets` typo is the exact
-* failure mode this feature must not have, so unknown keys are rejected
-* explicitly before the run.
-*/ const KNOWN_KEYS = [
-	"version",
-	"title",
-	"favicon",
-	"logo",
-	"logoDark",
-	"stylesheet",
-	"tokens",
-	"tokensDark"
-];
-/**
-* Validate a parsed `theme.json`. On failure the thrown error names the
-* file and renders every issue as `<path>: <message>`, matching
-* FileProvisioningSource: a bad entry must never abort a boot with nothing
-* to act on.
-*/ async function parseThemeManifest(input, filePath) {
-	if (typeof input !== "object" || input === null || Array.isArray(input)) throw new AuthupError(`The theme manifest "${filePath}" must contain an object at its root.`);
-	const unknown = Object.keys(input).filter((key) => !KNOWN_KEYS.includes(key));
-	if (unknown.length > 0) throw new AuthupError(`The theme manifest "${filePath}" is invalid.\n${unknown.map((key) => `  ${key}: unknown property`).join("\n")}`);
-	try {
-		return await validator.run(input);
-	} catch (e) {
-		if (!isValidupError(e)) throw e;
-		const issues = e.issues.map((issue) => `  ${stringifyPath(issue.path)}: ${issue.message}`).join("\n");
-		throw new AuthupError(`The theme manifest "${filePath}" is invalid.\n${issues}`);
-	}
-}
-//#endregion
-export { ThemeManifestValidator, parseThemeManifest };
-//# sourceMappingURL=manifest.mjs.map

package/dist/adapters/http/ui/theme/contract/manifest.mjs.map DELETED Viewed

@@ -1 +0,0 @@

- {"version":3,"file":"manifest.mjs","names":["AuthupError","createValidator","Container","isValidupError","stringifyPath","z","THEME_ASSETS_DIRECTORY_NAME","THEME_ASSET_EXTENSIONS","THEME_IMAGE_EXTENSIONS","THEME_MANIFEST_VERSION","THEME_TOKEN_NAME_PATTERN","THEME_TOKEN_VALUE_FORBIDDEN_PATTERN","THEME_TOKEN_VALUE_MAX_LENGTH","themeAssetExtension","assetPathSchema","string","regex","RegExp","refine","value","split","includes","join","logoPathSchema","tokenMapSchema","record","min","max","test","ThemeManifestValidator","initialize","mount","literal","optional","validator","KNOWN_KEYS","parseThemeManifest","input","filePath","Array","isArray","unknown","Object","keys","filter","key","length","map","run","e","issues","issue","path","message"],"sources":["../../../../../../src/adapters/http/ui/theme/contract/manifest.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { AuthupError } from '@authup/errors';\nimport { createValidator } from '@validup/zod';\nimport { Container, isValidupError, stringifyPath } from 'validup';\nimport { z } from 'zod';\nimport {\n THEME_ASSETS_DIRECTORY_NAME,\n THEME_ASSET_EXTENSIONS,\n THEME_IMAGE_EXTENSIONS,\n THEME_MANIFEST_VERSION,\n THEME_TOKEN_NAME_PATTERN,\n THEME_TOKEN_VALUE_FORBIDDEN_PATTERN,\n THEME_TOKEN_VALUE_MAX_LENGTH,\n} from './constants.ts';\nimport type { ThemeManifest } from './types.ts';\nimport { themeAssetExtension } from './utils.ts';\n\nconst assetPathSchema = z.string()\n .regex(\n new RegExp(`^${THEME_ASSETS_DIRECTORY_NAME}/[a-zA-Z0-9][a-zA-Z0-9._/-]*$`),\n `must be a path inside '${THEME_ASSETS_DIRECTORY_NAME}/'`,\n )\n .refine(\n (value) => !value.split('/').includes('..'),\n 'must not contain a \"..\" segment',\n )\n .refine(\n (value) => THEME_ASSET_EXTENSIONS.includes(themeAssetExtension(value)),\n `must end in one of: ${THEME_ASSET_EXTENSIONS.join(', ')}`,\n );\n\n/**\n * A logo must be an image. The general asset allowlist also covers CSS and\n * fonts, which would silently render as nothing here.\n */\nconst logoPathSchema = assetPathSchema.refine(\n (value) => THEME_IMAGE_EXTENSIONS.includes(themeAssetExtension(value)),\n `must be an image (${THEME_IMAGE_EXTENSIONS.join(', ')})`,\n);\n\nconst tokenMapSchema = z.record(\n z.string().regex(\n THEME_TOKEN_NAME_PATTERN,\n 'must be a lowercase CSS custom property name (e.g. --authup-auth-accent)',\n ),\n z.string()\n .min(1)\n .max(THEME_TOKEN_VALUE_MAX_LENGTH)\n .refine(\n (value) => !THEME_TOKEN_VALUE_FORBIDDEN_PATTERN.test(value),\n 'must not contain }, <, >, ;, @, \\\\, /*, url( or expression(',\n ),\n);\n\n/**\n * Validator for the operator-authored `theme.json`.\n *\n * A validup Container over zod mounts, matching ConfigValidator: this file\n * is config, not an API payload, and the config-shaped precedent in this\n * codebase is validup. It also means a second consumer (a per-realm token\n * map, an admin-console form, a CLI `theme validate`) reuses these rules\n * instead of restating them.\n *\n * No validator groups: there is one source and one shape. A per-realm\n * surface that accepts a narrower manifest than a file does would add one.\n */\nexport class ThemeManifestValidator extends Container<ThemeManifest> {\n protected override initialize() {\n super.initialize();\n\n this.mount('version', createValidator(z.literal(THEME_MANIFEST_VERSION)));\n this.mount('title', { optional: true }, createValidator(z.string().min(1).max(200)));\n this.mount('favicon', { optional: true }, createValidator(assetPathSchema));\n this.mount('logo', { optional: true }, createValidator(logoPathSchema));\n this.mount('logoDark', { optional: true }, createValidator(logoPathSchema));\n this.mount('stylesheet', { optional: true }, createValidator(assetPathSchema));\n this.mount('tokens', { optional: true }, createValidator(tokenMapSchema));\n this.mount('tokensDark', { optional: true }, createValidator(tokenMapSchema));\n }\n}\n\nconst validator = new ThemeManifestValidator();\n\n/**\n * Every key the validator mounts. Validup STRIPS an unmounted key rather\n * than rejecting it, and a silently-ignored `stylesheets` typo is the exact\n * failure mode this feature must not have, so unknown keys are rejected\n * explicitly before the run.\n */\nconst KNOWN_KEYS = [\n 'version',\n 'title',\n 'favicon',\n 'logo',\n 'logoDark',\n 'stylesheet',\n 'tokens',\n 'tokensDark',\n];\n\n/**\n * Validate a parsed `theme.json`. On failure the thrown error names the\n * file and renders every issue as `<path>: <message>`, matching\n * FileProvisioningSource: a bad entry must never abort a boot with nothing\n * to act on.\n */\nexport async function parseThemeManifest(input: unknown, filePath: string) : Promise<ThemeManifest> {\n if (typeof input !== 'object' || input === null || Array.isArray(input)) {\n throw new AuthupError(`The theme manifest \"${filePath}\" must contain an object at its root.`);\n }\n\n const unknown = Object.keys(input).filter((key) => !KNOWN_KEYS.includes(key));\n if (unknown.length > 0) {\n throw new AuthupError(\n `The theme manifest \"${filePath}\" is invalid.\\n${unknown\n .map((key) => ` ${key}: unknown property`)\n .join('\\n')}`,\n );\n }\n\n try {\n return await validator.run(input as Record<string, any>) as ThemeManifest;\n } catch (e) {\n if (!isValidupError(e)) {\n throw e;\n }\n\n const issues = e.issues\n .map((issue) => ` ${stringifyPath(issue.path)}: ${issue.message}`)\n .join('\\n');\n\n throw new AuthupError(`The theme manifest \"${filePath}\" is invalid.\\n${issues}`);\n }\n}\n"],"mappings":";;;;;;;;;;AAuBA,MAAMc,kBAAkBT,EAAEU,OAAM,CAAA,CAC3BC,MACG,IAAIC,OAAO,IAAIX,4BAA4B,8BAA8B,GACzE,0BAA0BA,4BAA4B,GAAG,CAAA,CAE5DY,QACIC,UAAU,CAACA,MAAMC,MAAM,GAAA,CAAA,CAAKC,SAAS,IAAA,GACtC,mCAAA,CAAA,CAEHH,QACIC,UAAUZ,uBAAuBc,SAASR,oBAAoBM,KAAAA,CAAAA,GAC/D,uBAAuBZ,uBAAuBe,KAAK,IAAA,GAAO;;;;GAOlE,MAAMC,iBAAiBT,gBAAgBI,QAClCC,UAAUX,uBAAuBa,SAASR,oBAAoBM,KAAAA,CAAAA,GAC/D,qBAAqBX,uBAAuBc,KAAK,IAAA,EAAM,EAAE;AAG7D,MAAME,iBAAiBnB,EAAEoB,OACrBpB,EAAEU,OAAM,CAAA,CAAGC,MACPN,0BACA,0EAAA,GAEJL,EAAEU,OAAM,CAAA,CACHW,IAAI,CAAA,CAAA,CACJC,IAAAA,GAAIf,CAAAA,CACJM,QACIC,UAAU,CAACR,oCAAoCiB,KAAKT,KAAAA,GACrD,6DAAA,CAAA;;;;;;;;;;;;GAgBZ,IAAaU,yBAAb,cAA4C3B,UAAAA;CACrB4B,aAAa;EAC5B,MAAMA,WAAAA;EAEN,KAAKC,MAAM,WAAW9B,gBAAgBI,EAAE2B,QAAAA,CAAQvB,CAAAA,CAAAA;EAChD,KAAKsB,MAAM,SAAS,EAAEE,UAAU,KAAK,GAAGhC,gBAAgBI,EAAEU,OAAM,CAAA,CAAGW,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAA;EAC9E,KAAKI,MAAM,WAAW,EAAEE,UAAU,KAAK,GAAGhC,gBAAgBa,eAAAA,CAAAA;EAC1D,KAAKiB,MAAM,QAAQ,EAAEE,UAAU,KAAK,GAAGhC,gBAAgBsB,cAAAA,CAAAA;EACvD,KAAKQ,MAAM,YAAY,EAAEE,UAAU,KAAK,GAAGhC,gBAAgBsB,cAAAA,CAAAA;EAC3D,KAAKQ,MAAM,cAAc,EAAEE,UAAU,KAAK,GAAGhC,gBAAgBa,eAAAA,CAAAA;EAC7D,KAAKiB,MAAM,UAAU,EAAEE,UAAU,KAAK,GAAGhC,gBAAgBuB,cAAAA,CAAAA;EACzD,KAAKO,MAAM,cAAc,EAAEE,UAAU,KAAK,GAAGhC,gBAAgBuB,cAAAA,CAAAA;CACjE;AACJ;AAEA,MAAMU,YAAY,IAAIL,uBAAAA;;;;;;GAQtB,MAAMM,aAAa;CACf;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACH;;;;;;GAQD,eAAsBC,mBAAmBC,OAAgBC,UAAgB;CACrE,IAAI,OAAOD,UAAU,YAAYA,UAAU,QAAQE,MAAMC,QAAQH,KAAAA,GAC7D,MAAM,IAAIrC,YAAY,uBAAuBsC,SAAS,sCAAsC;CAGhG,MAAMG,UAAUC,OAAOC,KAAKN,KAAAA,CAAAA,CAAOO,QAAQC,QAAQ,CAACV,WAAWd,SAASwB,GAAAA,CAAAA;CACxE,IAAIJ,QAAQK,SAAS,GACjB,MAAM,IAAI9C,YACN,uBAAuBsC,SAAS,iBAAiBG,QAC5CM,KAAKF,QAAQ,KAAKA,IAAI,mBAAmB,CAAA,CACzCvB,KAAK,IAAA,GAAO;CAIzB,IAAI;EACA,OAAO,MAAMY,UAAUc,IAAIX,KAAAA;CAC/B,SAASY,GAAG;EACR,IAAI,CAAC9C,eAAe8C,CAAAA,GAChB,MAAMA;EAGV,MAAMC,SAASD,EAAEC,OACZH,KAAKI,UAAU,KAAK/C,cAAc+C,MAAMC,IAAI,EAAE,IAAID,MAAME,SAAS,CAAA,CACjE/B,KAAK,IAAA;EAEV,MAAM,IAAItB,YAAY,uBAAuBsC,SAAS,iBAAiBY,QAAQ;CACnF;AACJ"}

package/dist/adapters/http/ui/theme/contract/types.d.ts DELETED Viewed

@@ -1,26 +0,0 @@
-/**
- * The operator-authored `theme.json`, after validation.
- *
- * `favicon` / `logo` / `stylesheet` are theme-relative paths inside
- * `assets/`; they are emitted as `<basePath>/theme/<name>` hrefs.
- */
-export type ThemeManifest = {
-    version: number;
-    title?: string;
-    favicon?: string;
-    /**
-     * Replaces the built-in logo mark on both consoles. Maps onto the
-     * `--authup-{auth,account}-logo-*` token pairs.
-     */
-    logo?: string;
-    /**
-     * Dark-mode variant of `logo`. Without it dark mode inherits `logo`,
-     * which is wrong for a mark that is dark-on-light. Usable on its own to
-     * override only dark mode.
-     */
-    logoDark?: string;
-    stylesheet?: string;
-    tokens?: Record<string, string>;
-    tokensDark?: Record<string, string>;
-};
-//# sourceMappingURL=types.d.ts.map

package/dist/adapters/http/ui/theme/contract/types.d.ts.map DELETED Viewed

@@ -1 +0,0 @@

- {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/ui/theme/contract/types.ts"],"names":[],"mappings":"AAOA;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC,CAAC"}

package/dist/adapters/http/ui/theme/contract/utils.d.ts DELETED Viewed

@@ -1,11 +0,0 @@
-/**
- * Lowercased file extension of a theme-relative path, including the dot
- * (`assets/logo.SVG` -> `.svg`); empty when there is none.
- *
- * Hand-rolled rather than `node:path`'s extname so this folder stays free
- * of node APIs and can be consumed by a browser-side theme editor.
- * Manifest paths are always POSIX and already grammar-checked, so the
- * separator handling extname does is not needed here.
- */
-export declare function themeAssetExtension(value: string): string;
-//# sourceMappingURL=utils.d.ts.map

package/dist/adapters/http/ui/theme/contract/utils.d.ts.map DELETED Viewed

	@@ -1 +0,0 @@
1	- {"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/ui/theme/contract/utils.ts"],"names":[],"mappings":"AAOA;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAI,MAAM,CAS1D"}

package/dist/adapters/http/ui/theme/contract/utils.mjs DELETED Viewed

@@ -1,22 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-//#region src/adapters/http/ui/theme/contract/utils.ts
-/**
-* Lowercased file extension of a theme-relative path, including the dot
-* (`assets/logo.SVG` -> `.svg`); empty when there is none.
-*
-* Hand-rolled rather than `node:path`'s extname so this folder stays free
-* of node APIs and can be consumed by a browser-side theme editor.
-* Manifest paths are always POSIX and already grammar-checked, so the
-* separator handling extname does is not needed here.
-*/ function themeAssetExtension(value) {
-	const name = value.slice(value.lastIndexOf("/") + 1);
-	const index = name.lastIndexOf(".");
-	if (index <= 0) return "";
-	return name.slice(index).toLowerCase();
-}
-//#endregion
-export { themeAssetExtension };
-//# sourceMappingURL=utils.mjs.map

package/dist/adapters/http/ui/theme/contract/utils.mjs.map DELETED Viewed

@@ -1 +0,0 @@

- {"version":3,"file":"utils.mjs","names":["themeAssetExtension","value","name","slice","lastIndexOf","index","toLowerCase"],"sources":["../../../../../../src/adapters/http/ui/theme/contract/utils.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\n/**\n * Lowercased file extension of a theme-relative path, including the dot\n * (`assets/logo.SVG` -> `.svg`); empty when there is none.\n *\n * Hand-rolled rather than `node:path`'s extname so this folder stays free\n * of node APIs and can be consumed by a browser-side theme editor.\n * Manifest paths are always POSIX and already grammar-checked, so the\n * separator handling extname does is not needed here.\n */\nexport function themeAssetExtension(value: string) : string {\n const name = value.slice(value.lastIndexOf('/') + 1);\n const index = name.lastIndexOf('.');\n\n if (index <= 0) {\n return '';\n }\n\n return name.slice(index).toLowerCase();\n}\n"],"mappings":";;;;;;;;;;;;GAgBA,SAAgBA,oBAAoBC,OAAa;CAC7C,MAAMC,OAAOD,MAAME,MAAMF,MAAMG,YAAY,GAAA,IAAO,CAAA;CAClD,MAAMC,QAAQH,KAAKE,YAAY,GAAA;CAE/B,IAAIC,SAAS,GACT,OAAO;CAGX,OAAOH,KAAKC,MAAME,KAAAA,CAAAA,CAAOC,YAAW;AACxC"}

package/dist/adapters/http/ui/theme/index.d.ts DELETED Viewed

@@ -1,7 +0,0 @@
-export * from './contract/index.ts';
-export * from './apply.ts';
-export * from './assets.ts';
-export * from './constants.ts';
-export * from './module.ts';
-export * from './types.ts';
-//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/ui/theme/index.d.ts.map DELETED Viewed

	@@ -1 +0,0 @@
1	- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/ui/theme/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AAEpC,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}