@c9up/station 0.1.15 → 0.1.16

package/dist/loginLimiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loginLimiter.js","sourceRoot":"","sources":["../src/loginLimiter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA0BH,6FAA6F;AAC7F,MAAM,UAAU,SAAS,CAAC,EAAU,EAAE,UAAkB;IACvD,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,QAAQ,GAAG,OAAO,CAAC;AAEzB,MAAM,OAAO,kBAAkB;IACrB,YAAY,CAAS;IACrB,SAAS,CAAS;IAClB,QAAQ,GAAG,IAAI,GAAG,EAA8C,CAAC;IAE1E,YAAY,WAAW,GAAG,CAAC,EAAE,aAAa,GAAG,GAAG;QAC/C,IAAI,CAAC,YAAY,GAAG,eAAe,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAChE,IAAI,CAAC,SAAS,GAAG,eAAe,CAAC,eAAe,EAAE,aAAa,CAAC,GAAG,IAAI,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,IAAc;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC1C,IAAI,OAAO,CAAC,KAAK,GAAG,OAAO,EAAE,CAAC;gBAC7B,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC;gBACxB,OAAO,GAAG,OAAO,CAAC,OAAO,GAAG,GAAG,CAAC;YACjC,CAAC;QACF,CAAC;QACD,OAAO;YACN,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC,YAAY;YACrC,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;SACzD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAG,IAAc;QAC5B,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnD,CAAC;IAED,UAAU,CAAC,GAAW,EAAE,GAAW;QAClC,IAAI,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;YACjD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACrC,kEAAkE;YAClE,oEAAoE;YACpE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,iBAAiB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;YAC/D,CAAC;YACD,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACpD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,KAAK,CAAC;IACd,CAAC;IAED,SAAS,CAAC,GAAW;QACpB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ;YAAE,OAAO,SAAS,CAAC;QACpD,IAAI,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,KAAK,CAAC,OAAO,IAAI,GAAG;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;;gBAC/C,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC7D,CAAC;CACD;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,KAAa;IACpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACd,oCAAoC,KAAK,yCAAyC,MAAM,CAAC,KAAK,CAAC,EAAE,CACjG,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/types.d.ts

@@ -13,9 +13,44 @@ export interface AuditEvent {
     readonly userId?: unknown;
     readonly before?: Readonly<Record<string, unknown>>;
     readonly after?: Readonly<Record<string, unknown>>;
+    /**
+     * On an edit, the secret columns whose value changed. Their values are
+     * replaced with `"[redacted]"` in `before`/`after` (unless the resource
+     * sets `auditSecrets`), so this is how a password change stays visible.
+     */
+    readonly redactedChanges?: ReadonlyArray<string>;
+    /** Client IP of the request that made the change. */
+    readonly ip?: string;
+    readonly userAgent?: string;
+    /** `X-Request-Id` of that request, when the proxy or client set one. */
+    readonly requestId?: string;
     readonly at: Date;
 }
 export type AuditSink = (event: AuditEvent) => void | Promise<void>;
+/** What a {@link SecurityAuditEvent} records. */
+export type SecurityAuditAction = "login" | "login_failed" | "login_throttled" | "logout" | "denied" | "csrf_denied";
+/**
+ * A sign-in, sign-out or refusal on the admin surface, sent to the
+ * `station.audit` sink so brute force and probing show up in the trail.
+ */
+export interface SecurityAuditEvent {
+    readonly action: SecurityAuditAction;
+    /** The authenticated user, when one is known. */
+    readonly userId?: unknown;
+    /** The email a sign-in attempt submitted. */
+    readonly identifier?: string;
+    /** For `denied` on a resource action: its slug, action and permission. */
+    readonly resource?: string;
+    readonly resourceAction?: ResourceAction;
+    /** For `denied`: the permission or role that was missing. */
+    readonly permission?: string;
+    readonly path?: string;
+    readonly ip?: string;
+    readonly userAgent?: string;
+    readonly requestId?: string;
+    readonly at: Date;
+}
+export type SecurityAuditSink = (event: SecurityAuditEvent) => void | Promise<void>;
 /**
  * Per-field override for the auto-generated form (Story 54.5). Station
  * infers the form from the entity's `@Column` metadata; consumers can
@@ -23,7 +58,10 @@ export type AuditSink = (event: AuditEvent) => void | Promise<void>;
  * others.
  */
 export interface FormFieldOverride {
-    /** Hide the field from the form entirely (still rendered on show). */
+    /**
+     * Hide the field from the form. A hidden field is not writable either: a
+     * body carrying it is ignored and a hidden boolean keeps its stored value.
+     */
     hidden?: boolean;
     /** Override the rendered `<input type>`. */
     inputType?: "text" | "number" | "email" | "password" | "date" | "datetime-local" | "checkbox" | "textarea";
@@ -34,6 +72,14 @@ export interface FormFieldOverride {
     /** Mark the field as required at the HTML level. */
     required?: boolean;
 }
+/** Per-view options for the list and show pages. */
+export interface ResourceViewOptions {
+    /**
+     * The columns the view renders, in this order. When omitted, every column
+     * except secrets (`serializeAs: null` or a credential-like name) is shown.
+     */
+    columns?: ReadonlyArray<string>;
+}
 export interface ResourceOptions<TEntity> {
     /** Entity class (Atlas `@Entity()`-decorated constructor). */
     entity: new (...args: never[]) => TEntity;
@@ -49,6 +95,13 @@ export interface ResourceOptions<TEntity> {
      * so apps don't silently lose audit visibility.
      */
     audit?: AuditSink;
+    /**
+     * Hand secret column values (`serializeAs: null` or a credential-like
+     * name) to the audit sink as they are. Off by default: they are replaced
+     * with `"[redacted]"`, because audit logs usually land in a less protected
+     * store than the table they describe.
+     */
+    auditSecrets?: boolean;
     /**
      * Invoked when the audit sink throws (Story 54.6 hardening, retro
      * 2026-06-01). The mutation has already committed, so this is a
@@ -65,6 +118,18 @@ export interface ResourceOptions<TEntity> {
      * the inferred defaults.
      */
     formFields?: Readonly<Record<string, FormFieldOverride>>;
+    /** Columns of the list page. */
+    list?: ResourceViewOptions;
+    /** Columns of the show page. */
+    show?: ResourceViewOptions;
+    /**
+     * The columns a create/edit may set, and the fields the form shows. When
+     * omitted: every column except the framework-managed ones, secrets
+     * (`serializeAs: null` or a credential-like name) and `formFields` marked
+     * `hidden`. A secret listed here is write-only: the form renders it empty
+     * and an empty submission keeps the stored value.
+     */
+    editable?: ReadonlyArray<string>;
 }
 export interface Resource<TEntity = unknown> {
     /** The entity class passed in. */
@@ -77,9 +142,17 @@ export interface Resource<TEntity = unknown> {
     readonly actions: ReadonlyArray<ResourceAction>;
     /** Optional audit sink (Story 54.6). */
     readonly audit?: AuditSink;
+    /** Whether audit snapshots keep secret column values. */
+    readonly auditSecrets: boolean;
     /** Optional audit-failure observability hook (Story 54.6 hardening). */
     readonly onAuditError?: (event: AuditEvent, error: unknown) => void;
     /** Frozen per-field overrides for the inferred form (Story 54.5). */
     readonly formFields: Readonly<Record<string, FormFieldOverride>>;
+    /** Frozen list-page options. */
+    readonly list: Readonly<ResourceViewOptions>;
+    /** Frozen show-page options. */
+    readonly show: Readonly<ResourceViewOptions>;
+    /** Frozen editable allow-list; undefined means the default set. */
+    readonly editable?: ReadonlyArray<string>;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;AAE7E,eAAO,MAAM,gBAAgB,EAAE,aAAa,CAAC,cAAc,CAMzD,CAAC;AAEH;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEpE;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IACjC,sEAAsE;IACtE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,4CAA4C;IAC5C,SAAS,CAAC,EACP,MAAM,GACN,QAAQ,GACR,OAAO,GACP,UAAU,GACV,MAAM,GACN,gBAAgB,GAChB,UAAU,GACV,UAAU,CAAC;IACd,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,eAAe,CAAC,OAAO;IACvC,8DAA8D;IAC9D,MAAM,EAAE,KACP,GAAG,IAAI,EAAE,KAAK,EAAE,KACZ,OAAO,CAAC;IACb,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,OAAO,CAAC,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IACxC,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAC3D;;;;OAIG;IACH,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,QAAQ,CAAC,OAAO,GAAG,OAAO;IAC1C,kCAAkC;IAClC,QAAQ,CAAC,MAAM,EAAE,KAChB,GAAG,IAAI,EAAE,KAAK,EAAE,KACZ,OAAO,CAAC;IACb,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sFAAsF;IACtF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,8FAA8F;IAC9F,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IAChD,wCAAwC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACpE,qEAAqE;IACrE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;CACjE"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;AAE7E,eAAO,MAAM,gBAAgB,EAAE,aAAa,CAAC,cAAc,CAMzD,CAAC;AAEH;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACjD,qDAAqD;IACrD,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEpE,iDAAiD;AACjD,MAAM,MAAM,mBAAmB,GAC5B,OAAO,GACP,cAAc,GACd,iBAAiB,GACjB,QAAQ,GACR,QAAQ,GACR,aAAa,CAAC;AAEjB;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,iDAAiD;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,6CAA6C;IAC7C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,6DAA6D;IAC7D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,MAAM,iBAAiB,GAAG,CAC/B,KAAK,EAAE,kBAAkB,KACrB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1B;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IACjC;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,4CAA4C;IAC5C,SAAS,CAAC,EACP,MAAM,GACN,QAAQ,GACR,OAAO,GACP,UAAU,GACV,MAAM,GACN,gBAAgB,GAChB,UAAU,GACV,UAAU,CAAC;IACd,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,oDAAoD;AACpD,MAAM,WAAW,mBAAmB;IACnC;;;OAGG;IACH,OAAO,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,eAAe,CAAC,OAAO;IACvC,8DAA8D;IAC9D,MAAM,EAAE,KACP,GAAG,IAAI,EAAE,KAAK,EAAE,KACZ,OAAO,CAAC;IACb,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,OAAO,CAAC,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IACxC,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAC3D;;;;OAIG;IACH,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACzD,gCAAgC;IAChC,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B,gCAAgC;IAChC,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,QAAQ,CAAC,OAAO,GAAG,OAAO;IAC1C,kCAAkC;IAClC,QAAQ,CAAC,MAAM,EAAE,KAChB,GAAG,IAAI,EAAE,KAAK,EAAE,KACZ,OAAO,CAAC;IACb,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sFAAsF;IACtF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,8FAA8F;IAC9F,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IAChD,wCAAwC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,yDAAyD;IACzD,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,wEAAwE;IACxE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACpE,qEAAqE;IACrE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACjE,gCAAgC;IAChC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAC7C,gCAAgC;IAChC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAC7C,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC1C"}

package/dist/views/form.d.ts

@@ -39,6 +39,12 @@ export interface FormPageInput {
     values?: Readonly<Record<string, unknown>>;
     /** Validation errors keyed by column propertyKey. */
     errors?: Readonly<Record<string, string>>;
+    /**
+     * Fields rendered empty whatever their stored or submitted value (secrets).
+     * A `password` input is always treated this way: a credential, even a hash,
+     * is never shipped back inside the page.
+     */
+    writeOnly?: ReadonlySet<string>;
     /**
      * Whether the host has a CSRF token in the per-request store. When true the
      * template emits `{{ csrfField() }}`; the handler derives it from

package/dist/views/form.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"form.d.ts","sourceRoot":"","sources":["../../src/views/form.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAQ/D,KAAK,SAAS,GAAG,WAAW,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC;AAE7D,MAAM,WAAW,aAAa;IAC7B,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxC;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3C,qDAAqD;IACrD,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1C;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,+DAA+D;AAC/D,MAAM,WAAW,SAAS;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,SAAS,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACd;AAKD,MAAM,MAAM,aAAa,GAAG;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,SAAS,EAAE,CAAC;CACpB,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,aAAa,GAAG,aAAa,CAmCtE"}
+{"version":3,"file":"form.d.ts","sourceRoot":"","sources":["../../src/views/form.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAQ/D,KAAK,SAAS,GAAG,WAAW,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC;AAE7D,MAAM,WAAW,aAAa;IAC7B,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxC;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3C,qDAAqD;IACrD,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1C;;;;OAIG;IACH,SAAS,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAChC;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,+DAA+D;AAC/D,MAAM,WAAW,SAAS;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,SAAS,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACd;AAKD,MAAM,MAAM,aAAa,GAAG;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,SAAS,EAAE,CAAC;CACpB,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,aAAa,GAAG,aAAa,CAiDtE"}

package/dist/views/form.js

@@ -25,7 +25,7 @@ const SKIPPED_COLUMN_NAMES = new Set([
     "deleted_at",
 ]);
 export function buildFormViewModel(input) {
-    const { resource, columns, pkColumn, row, values, errors, csrfEnabled } = input;
+    const { resource, columns, pkColumn, row, values, errors, csrfEnabled, writeOnly, } = input;
     const isEdit = row !== undefined;
     const slug = encodeURIComponent(resource.name);
     const id = isEdit ? String(row[pkColumn] ?? "") : "";
@@ -41,7 +41,7 @@ export function buildFormViewModel(input) {
         : ["New ", resource.label].join("");
     const fields = columns
         .filter((c) => !shouldSkipColumn(c, pkColumn, resource.formFields[c.propertyKey]))
-        .map((c) => buildField(c, values ?? row, errors, resource.formFields[c.propertyKey]));
+        .map((c) => buildField(c, values ?? row, errors, resource.formFields[c.propertyKey], writeOnly?.has(c.propertyKey) === true));
     return {
         title: heading,
         heading,
@@ -53,10 +53,10 @@ export function buildFormViewModel(input) {
         fields,
     };
 }
-function buildField(c, source, errors, override) {
+function buildField(c, source, errors, override, writeOnly) {
     const inputType = override?.inputType ?? inferInputType(c);
     const name = c.propertyKey;
-    const rawValue = source?.[name];
+    const rawValue = writeOnly || inputType === "password" ? undefined : source?.[name];
     const isCheckbox = inputType === "checkbox";
     const value = rawValue === undefined || rawValue === null ? "" : String(rawValue);
     return {

package/dist/views/form.js.map

@@ -1 +1 @@
-{"version":3,"file":"form.js","sourceRoot":"","sources":["../../src/views/form.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IACzD,YAAY;IACZ,YAAY;IACZ,YAAY;CACZ,CAAC,CAAC;AA2DH,MAAM,UAAU,kBAAkB,CAAC,KAAoB;IACtD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GACtE,KAAK,CAAC;IACP,MAAM,MAAM,GAAG,GAAG,KAAK,SAAS,CAAC;IACjC,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,iEAAiE;IACjE,wEAAwE;IACxE,MAAM,MAAM,GAAG,MAAM;QACpB,CAAC,CAAC,UAAU,IAAI,IAAI,kBAAkB,CAAC,EAAE,CAAC,EAAE;QAC5C,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC;IACpB,kEAAkE;IAClE,8EAA8E;IAC9E,MAAM,OAAO,GAAG,MAAM;QACrB,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAErC,MAAM,MAAM,GAAG,OAAO;SACpB,MAAM,CACN,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CACzE;SACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACV,UAAU,CAAC,CAAC,EAAE,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CACxE,CAAC;IAEH,OAAO;QACN,KAAK,EAAE,OAAO;QACd,OAAO;QACP,MAAM;QACN,MAAM;QACN,SAAS,EAAE,MAAM;QACjB,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QACzC,WAAW,EAAE,WAAW,KAAK,IAAI;QACjC,MAAM;KACN,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAClB,CAAiB,EACjB,MAAqD,EACrD,MAAoD,EACpD,QAAuC;IAEvC,MAAM,SAAS,GAAG,QAAQ,EAAE,SAAS,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC;IAC3B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,SAAS,KAAK,UAAU,CAAC;IAC5C,MAAM,KAAK,GACV,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrE,OAAO;QACN,IAAI;QACJ,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC;QACxC,SAAS;QACT,UAAU;QACV,UAAU,EAAE,SAAS,KAAK,UAAU;QACpC,KAAK;QACL,QAAQ,EAAE,QAAQ,EAAE,QAAQ,KAAK,IAAI;QACrC,WAAW,EAAE,QAAQ,EAAE,WAAW,IAAI,EAAE;QACxC,cAAc,EAAE,QAAQ,EAAE,WAAW,KAAK,SAAS;QACnD,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK;QAC/C,KAAK,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE;KAC3B,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACxB,CAAiB,EACjB,QAAgB,EAChB,QAAuC;IAEvC,IAAI,QAAQ,EAAE,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3C,mEAAmE;IACnE,mEAAmE;IACnE,+DAA+D;IAC/D,kEAAkE;IAClE,yBAAyB;IACzB,IAAI,CAAC,CAAC,WAAW,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACrE,IAAI,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,CAAiB;IACxC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAC1C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClE,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACnC,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,gBAAgB,CAAC;IACzE,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAC9D,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IACjD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,WAAmB;IACpC,2BAA2B;IAC3B,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC"}
+{"version":3,"file":"form.js","sourceRoot":"","sources":["../../src/views/form.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IACzD,YAAY;IACZ,YAAY;IACZ,YAAY;CACZ,CAAC,CAAC;AAiEH,MAAM,UAAU,kBAAkB,CAAC,KAAoB;IACtD,MAAM,EACL,QAAQ,EACR,OAAO,EACP,QAAQ,EACR,GAAG,EACH,MAAM,EACN,MAAM,EACN,WAAW,EACX,SAAS,GACT,GAAG,KAAK,CAAC;IACV,MAAM,MAAM,GAAG,GAAG,KAAK,SAAS,CAAC;IACjC,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,iEAAiE;IACjE,wEAAwE;IACxE,MAAM,MAAM,GAAG,MAAM;QACpB,CAAC,CAAC,UAAU,IAAI,IAAI,kBAAkB,CAAC,EAAE,CAAC,EAAE;QAC5C,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC;IACpB,kEAAkE;IAClE,8EAA8E;IAC9E,MAAM,OAAO,GAAG,MAAM;QACrB,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAErC,MAAM,MAAM,GAAG,OAAO;SACpB,MAAM,CACN,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CACzE;SACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACV,UAAU,CACT,CAAC,EACD,MAAM,IAAI,GAAG,EACb,MAAM,EACN,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,EAClC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,IAAI,CACtC,CACD,CAAC;IAEH,OAAO;QACN,KAAK,EAAE,OAAO;QACd,OAAO;QACP,MAAM;QACN,MAAM;QACN,SAAS,EAAE,MAAM;QACjB,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QACzC,WAAW,EAAE,WAAW,KAAK,IAAI;QACjC,MAAM;KACN,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAClB,CAAiB,EACjB,MAAqD,EACrD,MAAoD,EACpD,QAAuC,EACvC,SAAkB;IAElB,MAAM,SAAS,GAAG,QAAQ,EAAE,SAAS,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC;IAC3B,MAAM,QAAQ,GACb,SAAS,IAAI,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,SAAS,KAAK,UAAU,CAAC;IAC5C,MAAM,KAAK,GACV,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrE,OAAO;QACN,IAAI;QACJ,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC;QACxC,SAAS;QACT,UAAU;QACV,UAAU,EAAE,SAAS,KAAK,UAAU;QACpC,KAAK;QACL,QAAQ,EAAE,QAAQ,EAAE,QAAQ,KAAK,IAAI;QACrC,WAAW,EAAE,QAAQ,EAAE,WAAW,IAAI,EAAE;QACxC,cAAc,EAAE,QAAQ,EAAE,WAAW,KAAK,SAAS;QACnD,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK;QAC/C,KAAK,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE;KAC3B,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACxB,CAAiB,EACjB,QAAgB,EAChB,QAAuC;IAEvC,IAAI,QAAQ,EAAE,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3C,mEAAmE;IACnE,mEAAmE;IACnE,+DAA+D;IAC/D,kEAAkE;IAClE,yBAAyB;IACzB,IAAI,CAAC,CAAC,WAAW,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACrE,IAAI,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,CAAiB;IACxC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAC1C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClE,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACnC,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,gBAAgB,CAAC;IACzE,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAC9D,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IACjD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,WAAmB;IACpC,2BAA2B;IAC3B,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC"}

package/dist/views/login.d.ts

@@ -7,8 +7,8 @@
  *
  * Pure `(input) => LoginViewModel` builder (Story 57.3): every value reaches
  * HTML through `templates/login.inker`'s `{{ }}` auto-escape (the retired
- * `escape.ts` no longer runs here), so a tampered `?error=…` query parameter
- * cannot smuggle markup into the page. The CSRF hidden input is emitted by
+ * `escape.ts` no longer runs here). `error` only ever carries a message
+ * Station produced; the handler never reads it from the URL. The CSRF hidden input is emitted by
  * inker's canonical `{{ csrfField() }}` helper, guarded by the precomputed
  * `csrfEnabled` boolean.
  */

package/dist/views/login.js

@@ -7,8 +7,8 @@
  *
  * Pure `(input) => LoginViewModel` builder (Story 57.3): every value reaches
  * HTML through `templates/login.inker`'s `{{ }}` auto-escape (the retired
- * `escape.ts` no longer runs here), so a tampered `?error=…` query parameter
- * cannot smuggle markup into the page. The CSRF hidden input is emitted by
+ * `escape.ts` no longer runs here). `error` only ever carries a message
+ * Station produced; the handler never reads it from the URL. The CSRF hidden input is emitted by
  * inker's canonical `{{ csrfField() }}` helper, guarded by the precomputed
  * `csrfEnabled` boolean.
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@c9up/station",
-  "version": "0.1.15",
+  "version": "0.1.16",
   "description": "Station — admin scaffolding for the Ream framework. Declarative resource catalogue (defineResource) backing list/show/create/edit/destroy routes, audit, policies.",
   "license": "MIT",
   "type": "module",