@autobusal/utilities 1.5.5 → 1.7.0

package/check-backticks.mjs

@@ -34,7 +34,18 @@
 import { readdirSync, readFileSync, statSync } from 'node:fs';
 import { join } from 'node:path';
 
-const OPEN = /styled(?:\.\w+|\([^)]*\))(?:<[^>]*>)?`/g;
+/*
+ * Claude - 2026-08-30: `css` was missing from this, and the miss was not
+ * theoretical - magus's own `columnStyles = css<{...}>\`` carried a comment
+ * quoting a theme token in backticks, this script reported "clean", and the
+ * build then failed with a parse error pointing somewhere else entirely.
+ *
+ * A shared `css` block is the same template literal as `styled.x` and
+ * breaks in exactly the same way, so it has to be scanned the same way.
+ * `keyframes` and `createGlobalStyle` are here for the same reason before
+ * somebody finds them the hard way.
+ */
+const OPEN = /(?:styled(?:\.\w+|\([^)]*\))|css|keyframes|createGlobalStyle)(?:<[^>]*>)?`/g;
 
 const walk = (dir) => readdirSync(dir).flatMap((entry) => {
   const path = join(dir, entry);

package/date.tsx

@@ -102,4 +102,41 @@ export const futureDate = (days: number): string => {
   dayAfter.setDate(today.getDate() + days);
 
   return prepareDate(dayAfter);
-};
+};
+/**
+ * A prepared d/m/Y date as the API's own Y-m-d.
+ *
+ * Claude - 2026-11-03. The calendar fields post d/m/Y, which the endpoints
+ * built for them validate with date_format:d/m/Y; the ones that take a plain
+ * `date` (a recorded payout, a settlement) read "31/12/2026" the American
+ * way and refuse it. Convert at the edge; anything that is not a prepared
+ * date is passed through untouched.
+ */
+export const isoDate = (prepared?: string | null): string => {
+  if (!isPreparedDate(prepared)) {
+    return prepared ?? '';
+  }
+
+  const [ day, month, year ] = String(prepared).split('/');
+
+  return `${ year }-${ month }-${ day }`;
+};
+
+/**
+ * The other direction: a date input's yyyy-mm-dd as the d/m/Y most obtapi
+ * list filters parse (Carbon::createFromFormat('d/m/Y')).
+ *
+ * Claude - 2026-11-04 (dashboard simplification, wave 7). The shared Filters
+ * toolbar writes native date inputs (yyyy-mm-dd) into the URL; the invoice
+ * and API-log endpoints still read d/m/Y. Anything that is not yyyy-mm-dd -
+ * an old d/m/Y bookmark, an empty value - passes through untouched.
+ */
+export const dmyDate = (value?: string | null): string => {
+  const match = /^(\d{4})-(\d{2})-(\d{2})$/.exec(value ?? '');
+
+  if (match === null) {
+    return value ?? '';
+  }
+
+  return `${ match[3] }/${ match[2] }/${ match[1] }`;
+};

package/form.tsx

@@ -94,4 +94,4 @@ export const Display = (err: (FieldError | Merge<FieldError, FieldErrorsImpl<any
       { err.message as string }
     </Error>
   );
-}
+}

package/index.ts

@@ -1,5 +1,6 @@
-import { createDate, prepareDate, isPreparedDate, getFormattedShort, getDayParts, differenceYears, futureDate } from './date';
+import { createDate, prepareDate, isPreparedDate, isoDate, dmyDate, getFormattedShort, getDayParts, differenceYears, futureDate } from './date';
 import { Validate, Display } from './form';
+import { serverErrors } from './serverErrors';
 import { error, notify, success } from './notify';
 import { getAllowed, getLanguages, getPayments } from './options';
 import { getSex, getOptionsSex } from './passengers';
@@ -12,12 +13,15 @@ export {
   sanitizeHtml,
   Validate,
   Display,
+  serverErrors,
   error,
   notify,
   success,
   createDate,
   prepareDate,
   isPreparedDate,
+  isoDate,
+  dmyDate,
   getFormattedShort,
   getDayParts,
   differenceYears,

package/package.json

@@ -1,10 +1,13 @@
 {
   "name": "@autobusal/utilities",
-  "version": "1.5.5",
+  "version": "1.7.0",
   "author": "Ferjolt Ozuni",
   "type": "module",
   "main": "index.ts",
   "dependencies": {
     "dompurify": "^3.4.14"
+  },
+  "publishConfig": {
+    "access": "public"
   }
 }

package/serverErrors.ts

@@ -0,0 +1,27 @@
+/**
+ * The field errors of a failed save, keyed by field.
+ *
+ * Claude - 2026-11-03 (dashboard simplification, wave 0). Laravel answers a
+ * rejected form with 422 and `{ message, errors: { field: [text] } }`; the
+ * API client toasts the message and the fields stayed silent, so the admin
+ * had to guess which of forty inputs the server meant. Pure: an Axios error
+ * in, a flat map out (the first message per field - one is enough under an
+ * input), an empty map for anything that is not a 422. Viewer takes it as
+ * `errors` and puts each message under its own field.
+ *
+ * A nested Laravel key (title.en) is passed through unchanged -
+ * react-hook-form resolves dotted names itself.
+ */
+export const serverErrors = (error: unknown): Record<string, string> => {
+  const response = (error as { response?: { status?: number, data?: { errors?: Record<string, string[] | string> } } } | null | undefined)?.response;
+
+  if (response === undefined || response.status !== 422 || response.data?.errors === undefined || response.data.errors === null) {
+    return {};
+  }
+
+  return Object.fromEntries(
+    Object.entries(response.data.errors)
+      .map(([ field, messages ]) => [ field, Array.isArray(messages) ? String(messages[0] ?? '') : String(messages) ])
+      .filter(([ , message ]) => message !== '')
+  );
+};

package/CHANGELOG.md

@@ -1,83 +0,0 @@
-# Changelog
-
-## 1.5.5 (2026-08-29)
-
-- New isPreparedDate(): whether a string is a d/m/Y date the app can work with - createDate turns anything else into an Invalid Date, which is how the search URL's literal 'none' produced a January calendar.
-
-## 1.5.4 (2026-08-28)
-
-- DisplayStatus renders status 4 (awaiting approval) as a badge instead of a blank cell in the admin agent/visitor/API-consumer lists (sweep #61).
-
-## 1.5.3
-
-### Fixed
-
-- **The backtick guard tripped on prose about styled-components**, and was refusing to publish the whole repo. Its opening pattern matches `styled.x` followed by a backtick as *text*, so a JSDoc line describing another file - "labels as `<span>` (Viewer/styles.ts: `Label = styled.span`)" - opened a template no code had opened, and every comment up to the next `` `; `` in the file counted as inside it. A comment about the hazard tripping the guard against the hazard. Openings found inside comments are now ignored; backticks inside comments, which are the thing being hunted, still are not.
-
-## 1.5.2
-
-### Changed
-
-- DOMPurify raised to `^3.4.14` for GHSA-55q2-fjhq-7xh7. It rates as moderate, which understates it here: DOMPurify is what `sanitizeHtml` is, so it sits directly on the path every piece of admin-authored and model-generated HTML takes before reaching a browser.
-
-## 1.5.1
-
-### Changed
-
-- **`error` collapses repeats into one toast** - it now raises the toast
-  under an id, defaulting to the message itself, so a page whose parallel
-  queries all fail the same way shows one red box rather than a stack of
-  identical ones. Existing call sites need no change. A repeat of the same
-  failure once the toast has gone still raises a fresh one.
-
-## 1.5.0
-
-### Added
-
-- **`GetStatus` knows status 4, "awaiting approval"** - distinct from 3
-  (pending, waiting on the account to finish its own form) and from 2
-  (suspended, a decision already taken against it).
-
-
-## 1.4.1
-
-### Changed
-
-- **Gender can be "not declared".** `getOptionsSex` gains it as the first
-  option and `getSex` reports it, instead of treating everything that is not
-  `1` as male — which is what three existing rows with no value were already
-  rendering as.
-
-  Carried by `null`: the `visitors`.`sex` column has always been nullable, so
-  nothing migrated. The option's id is `''`, which Laravel's
-  `ConvertEmptyStringsToNull` turns into a real null on the way in, so "not
-  declared" is the *absence* of a value at every layer rather than a magic
-  number each one has to learn.
-
-  Deliberately not shared with the checkout passenger forms — those build
-  their own field, and gender there is a per-route requirement a carrier can
-  insist on. A profile is the person; a passenger record is what a carrier
-  demands in order to board them.
-
-## 1.4.0
-
-### Added
-
-- **`check-backticks.mjs`**, moved here from the autobusal repo root so the
-  apps can run it too.
-
-  A backtick used as quoting inside a styled-components template *terminates
-  the template*. The bundler then reports a syntax error somewhere further
-  down, pointing at a line that is perfectly fine — so the search starts in
-  the wrong place every time. Per the script's own history that cost five
-  build failures in one session before anyone connected the two.
-
-  It only ever guarded `packages`, and the trap is not confined there: it bit
-  `magus/src` the moment a public page grew its own styled-components, with
-  nothing watching. Each app's `prebuild` now runs it over its own `src`
-  (first, so a broken template stops the build before it spends minutes
-  copying files), and `publish.sh` still runs it over `packages`.
-
-  One script with three callers, rather than a copy per repo that drifts.
-
-  Takes the directory to scan as its argument.