@data-club/ai-hub 0.0.1

package/dist/auth/passwordPolicy.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Client-side mirror of the §8.5 password policy enforced server-side at
+ * `packages/ai-hub-server/src/auth/passwordPolicy.ts`.
+ *
+ * The change-password form re-runs this check before submit so the user
+ * sees the error without a round-trip; the server is authoritative — if
+ * the two ever disagree, the server wins (the form re-renders the server's
+ * error banner). The duplication is deliberate (two 5-line regex checks)
+ * because we don't want the React package to import server-only deps just
+ * to share five lines of policy.
+ *
+ * **If you tighten the policy, change it in both files** — there is a
+ * regression test that locks both modules' behavior against the same
+ * fixture set so divergence shows up as a CI failure.
+ *
+ * @see SPECIFICATIONS.md §8.5 — password complexity
+ * @see ../../../ai-hub-server/src/auth/passwordPolicy.ts — server source-of-truth
+ */
+/** Minimum length for a new password (§8.5). */
+export declare const PASSWORD_MIN_LENGTH = 8;
+/** Minimum distinct character categories required (§8.5). */
+export declare const PASSWORD_REQUIRED_CATEGORIES = 2;
+/** Machine-readable codes the client validator emits. */
+export type ClientPasswordPolicyErrorCode = "password_too_short" | "password_too_simple";
+/** Result of `validatePasswordPolicyClient`. */
+export type ClientPasswordPolicyResult = {
+    ok: true;
+} | {
+    ok: false;
+    code: ClientPasswordPolicyErrorCode;
+};
+/**
+ * Returns whether the candidate satisfies the §8.5 policy. Used by the
+ * change-password form to disable submit / surface an inline error before
+ * issuing a request.
+ *
+ * @param password - the candidate plaintext password.
+ * @returns `{ ok: true }` or a discriminated failure code.
+ */
+export declare function validatePasswordPolicyClient(password: string): ClientPasswordPolicyResult;
+/**
+ * Counts how many of the three §8.5 categories the password matches.
+ *
+ * - letter — any Unicode letter (`\p{L}`)
+ * - digit — any Unicode number (`\p{N}`)
+ * - special — anything else that isn't whitespace (`\s`)
+ *
+ * Whitespace deliberately doesn't tick the special box — we want at least
+ * one meaningfully non-letter, non-digit character.
+ *
+ * @param password - the candidate plaintext password.
+ * @returns the count in `[0, 3]`.
+ */
+export declare function countCharacterCategoriesClient(password: string): number;
+//# sourceMappingURL=passwordPolicy.d.ts.map

package/dist/auth/passwordPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passwordPolicy.d.ts","sourceRoot":"","sources":["../../src/auth/passwordPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,gDAAgD;AAChD,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,6DAA6D;AAC7D,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAE9C,yDAAyD;AACzD,MAAM,MAAM,6BAA6B,GACrC,oBAAoB,GACpB,qBAAqB,CAAC;AAE1B,gDAAgD;AAChD,MAAM,MAAM,0BAA0B,GAClC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,6BAA6B,CAAA;CAAE,CAAC;AAEvD;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,MAAM,GACf,0BAA0B,CAQ5B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMvE"}

package/dist/auth/passwordPolicy.js

@@ -0,0 +1,63 @@
+/**
+ * Client-side mirror of the §8.5 password policy enforced server-side at
+ * `packages/ai-hub-server/src/auth/passwordPolicy.ts`.
+ *
+ * The change-password form re-runs this check before submit so the user
+ * sees the error without a round-trip; the server is authoritative — if
+ * the two ever disagree, the server wins (the form re-renders the server's
+ * error banner). The duplication is deliberate (two 5-line regex checks)
+ * because we don't want the React package to import server-only deps just
+ * to share five lines of policy.
+ *
+ * **If you tighten the policy, change it in both files** — there is a
+ * regression test that locks both modules' behavior against the same
+ * fixture set so divergence shows up as a CI failure.
+ *
+ * @see SPECIFICATIONS.md §8.5 — password complexity
+ * @see ../../../ai-hub-server/src/auth/passwordPolicy.ts — server source-of-truth
+ */
+/** Minimum length for a new password (§8.5). */
+export const PASSWORD_MIN_LENGTH = 8;
+/** Minimum distinct character categories required (§8.5). */
+export const PASSWORD_REQUIRED_CATEGORIES = 2;
+/**
+ * Returns whether the candidate satisfies the §8.5 policy. Used by the
+ * change-password form to disable submit / surface an inline error before
+ * issuing a request.
+ *
+ * @param password - the candidate plaintext password.
+ * @returns `{ ok: true }` or a discriminated failure code.
+ */
+export function validatePasswordPolicyClient(password) {
+    if (password.length < PASSWORD_MIN_LENGTH) {
+        return { ok: false, code: "password_too_short" };
+    }
+    if (countCharacterCategoriesClient(password) < PASSWORD_REQUIRED_CATEGORIES) {
+        return { ok: false, code: "password_too_simple" };
+    }
+    return { ok: true };
+}
+/**
+ * Counts how many of the three §8.5 categories the password matches.
+ *
+ * - letter — any Unicode letter (`\p{L}`)
+ * - digit — any Unicode number (`\p{N}`)
+ * - special — anything else that isn't whitespace (`\s`)
+ *
+ * Whitespace deliberately doesn't tick the special box — we want at least
+ * one meaningfully non-letter, non-digit character.
+ *
+ * @param password - the candidate plaintext password.
+ * @returns the count in `[0, 3]`.
+ */
+export function countCharacterCategoriesClient(password) {
+    let count = 0;
+    if (/\p{L}/u.test(password))
+        count++;
+    if (/\p{N}/u.test(password))
+        count++;
+    if (/[^\p{L}\p{N}\s]/u.test(password))
+        count++;
+    return count;
+}
+//# sourceMappingURL=passwordPolicy.js.map

package/dist/auth/passwordPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passwordPolicy.js","sourceRoot":"","sources":["../../src/auth/passwordPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,gDAAgD;AAChD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,6DAA6D;AAC7D,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAY9C;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAgB;IAEhB,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,8BAA8B,CAAC,QAAQ,CAAC,GAAG,4BAA4B,EAAE,CAAC;QAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,8BAA8B,CAAC,QAAgB;IAC7D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,CAAC;IACrC,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,CAAC;IACrC,IAAI,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,CAAC;IAC/C,OAAO,KAAK,CAAC;AACf,CAAC"}