@entropy-softworks/ui 2026.7.31

package/lib/utils/fetch.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `fetch` with a timeout abort signal merged onto the caller's own signal.
+ * The default timeout is 15s. Pass `Infinity` to disable the timeout
+ * (the caller's own `signal` still applies). Passing `0` aborts
+ * immediately — almost never what you want — so we treat any
+ * non-positive value as "no timeout" to avoid the footgun.
+ *
+ * **Lockstep duplicate** of `vault/clients/shared/src/utils/fetch.ts`.
+ * `@vault/shared` is the vault-specific lower layer; `@entropy-softworks/ui`
+ * is the cross-portfolio UI package. Neither can depend on the other
+ * (shared → ui would invert layering; ui → shared would chain every
+ * downstream Entropy Softworks app to vault). The function is small,
+ * pure, and stable; keep both copies byte-identical and update both
+ * when changing.
+ */
+export declare function fetchWithTimeout(url: string, options?: RequestInit, timeoutMs?: number): Promise<Response>;
+//# sourceMappingURL=fetch.d.ts.map

package/lib/utils/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../src/utils/fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,WAAgB,EACzB,SAAS,SAAQ,GAChB,OAAO,CAAC,QAAQ,CAAC,CAanB"}

package/lib/utils/fetch.js

@@ -0,0 +1,29 @@
+/**
+ * `fetch` with a timeout abort signal merged onto the caller's own signal.
+ * The default timeout is 15s. Pass `Infinity` to disable the timeout
+ * (the caller's own `signal` still applies). Passing `0` aborts
+ * immediately — almost never what you want — so we treat any
+ * non-positive value as "no timeout" to avoid the footgun.
+ *
+ * **Lockstep duplicate** of `vault/clients/shared/src/utils/fetch.ts`.
+ * `@vault/shared` is the vault-specific lower layer; `@entropy-softworks/ui`
+ * is the cross-portfolio UI package. Neither can depend on the other
+ * (shared → ui would invert layering; ui → shared would chain every
+ * downstream Entropy Softworks app to vault). The function is small,
+ * pure, and stable; keep both copies byte-identical and update both
+ * when changing.
+ */
+export function fetchWithTimeout(url, options = {}, timeoutMs = 15000) {
+    const controller = new AbortController();
+    const id = timeoutMs > 0 && Number.isFinite(timeoutMs)
+        ? setTimeout(() => controller.abort(), timeoutMs)
+        : null;
+    const signals = [controller.signal, options.signal].filter((s) => s != null);
+    const combinedSignal = signals.length > 1 ? AbortSignal.any(signals) : controller.signal;
+    return fetch(url, { ...options, signal: combinedSignal }).finally(() => {
+        if (id !== null) {
+            clearTimeout(id);
+        }
+    });
+}
+//# sourceMappingURL=fetch.js.map

package/lib/utils/fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.js","sourceRoot":"","sources":["../../src/utils/fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAW,EACX,UAAuB,EAAE,EACzB,SAAS,GAAG,KAAK;IAEjB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,EAAE,GACN,SAAS,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QACzC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAoB,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/F,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;IACzF,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QACrE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,YAAY,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/lib/utils/http-error.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Parse an Entropy Softworks server error response into a single user-
+ * facing string. Falls back to `fallback` when the body isn't valid
+ * JSON or doesn't follow the expected `{ error: { message, details? } }`
+ * shape. Detail arrays longer than `MAX_DETAILS` are truncated so a
+ * runaway server response can't produce an unreadable toast.
+ */
+export interface ServerErrorBody {
+    error: {
+        message: string;
+        details?: string[];
+        code?: string;
+    };
+}
+/**
+ * Error subclass that carries the server's machine-readable
+ * `error.code` and HTTP `status` alongside the human-readable
+ * message. UI code can branch on `code` (e.g. `INVALID_CREDENTIALS`,
+ * `ACCOUNT_LOCKED`, `EMAIL_NOT_VERIFIED`) instead of substring-
+ * matching against an English message that breaks under i18n.
+ */
+export declare class ApiError extends Error {
+    readonly code: string | undefined;
+    readonly status: number;
+    readonly details: readonly string[] | undefined;
+    constructor(message: string, options: {
+        code?: string;
+        status: number;
+        details?: readonly string[];
+    });
+}
+export declare function extractErrorMessage(response: Response, fallback: string): Promise<string>;
+/**
+ * Like `extractErrorMessage` but returns a structured `ApiError` so
+ * callers can branch on `code` / `status`. Use this when the caller
+ * is throwing and downstream consumers need machine-readable
+ * classification; use `extractErrorMessage` when all you need is a
+ * toast string.
+ */
+export declare function extractApiError(response: Response, fallback: string): Promise<ApiError>;
+//# sourceMappingURL=http-error.d.ts.map

package/lib/utils/http-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-error.d.ts","sourceRoot":"","sources":["../../src/utils/http-error.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE;QACL,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAID;;;;;;GAMG;AACH,qBAAa,QAAS,SAAQ,KAAK;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;gBAG9C,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE;CAQ1E;AAED,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAY/F;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAkB7F"}

package/lib/utils/http-error.js

@@ -0,0 +1,63 @@
+const MAX_DETAILS = 5;
+/**
+ * Error subclass that carries the server's machine-readable
+ * `error.code` and HTTP `status` alongside the human-readable
+ * message. UI code can branch on `code` (e.g. `INVALID_CREDENTIALS`,
+ * `ACCOUNT_LOCKED`, `EMAIL_NOT_VERIFIED`) instead of substring-
+ * matching against an English message that breaks under i18n.
+ */
+export class ApiError extends Error {
+    code;
+    status;
+    details;
+    constructor(message, options) {
+        super(message);
+        this.name = "ApiError";
+        this.code = options.code;
+        this.status = options.status;
+        this.details = options.details;
+    }
+}
+export async function extractErrorMessage(response, fallback) {
+    try {
+        const error = await response.json();
+        const details = error.error.details;
+        if (details && details.length > 0) {
+            const shown = details.slice(0, MAX_DETAILS).join(", ");
+            return details.length > MAX_DETAILS ? `${shown}, …` : shown;
+        }
+        return error.error.message || fallback;
+    }
+    catch {
+        return fallback;
+    }
+}
+/**
+ * Like `extractErrorMessage` but returns a structured `ApiError` so
+ * callers can branch on `code` / `status`. Use this when the caller
+ * is throwing and downstream consumers need machine-readable
+ * classification; use `extractErrorMessage` when all you need is a
+ * toast string.
+ */
+export async function extractApiError(response, fallback) {
+    let message = fallback;
+    let code;
+    let details;
+    try {
+        const error = await response.json();
+        if (error.error.details && error.error.details.length > 0) {
+            details = error.error.details.slice(0, MAX_DETAILS);
+            const shown = details.join(", ");
+            message = error.error.details.length > MAX_DETAILS ? `${shown}, …` : shown;
+        }
+        else {
+            message = error.error.message || fallback;
+        }
+        code = error.error.code;
+    }
+    catch {
+        // Non-JSON body — keep fallback message, no code.
+    }
+    return new ApiError(message, { code, status: response.status, details });
+}
+//# sourceMappingURL=http-error.js.map

package/lib/utils/http-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-error.js","sourceRoot":"","sources":["../../src/utils/http-error.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB;;;;;;GAMG;AACH,MAAM,OAAO,QAAS,SAAQ,KAAK;IACxB,IAAI,CAAqB;IACzB,MAAM,CAAS;IACf,OAAO,CAAgC;IAEhD,YACE,OAAe,EACf,OAAuE;QAEvE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAkB,EAAE,QAAgB;IAC5E,IAAI,CAAC;QACH,MAAM,KAAK,GAAoB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;QACpC,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvD,OAAO,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAC9D,CAAC;QACD,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAkB,EAAE,QAAgB;IACxE,IAAI,OAAO,GAAG,QAAQ,CAAC;IACvB,IAAI,IAAwB,CAAC;IAC7B,IAAI,OAA6B,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,KAAK,GAAoB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACrD,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAC7E,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC;QAC5C,CAAC;QACD,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAC3E,CAAC"}

package/lib/utils/index.d.ts

@@ -0,0 +1,11 @@
+export { apiFetch } from "./api-fetch";
+export { cn } from "./cn";
+export { getErrorMessage } from "./error";
+export { darkPalette, getPalette, lightPalette, usePalette, type ColorScheme, type Palette, } from "./palette";
+export { clearClipboardNow, copyToClipboard } from "./clipboard";
+export { loadSetting, saveSetting } from "./settings-storage";
+export { debounce } from "./debounce";
+export { ApiError, extractApiError, extractErrorMessage } from "./http-error";
+export { generatePassword, type GeneratePasswordOptions } from "./password";
+export { validateEmail, validatePassword, validateUsername, type PasswordValidation, type UsernameValidation, } from "./validation";
+//# sourceMappingURL=index.d.ts.map

package/lib/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,EAAE,EAAE,MAAM,MAAM,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EACL,WAAW,EACX,UAAU,EACV,YAAY,EACZ,UAAU,EACV,KAAK,WAAW,EAChB,KAAK,OAAO,GACb,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,KAAK,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAC5E,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,GACxB,MAAM,cAAc,CAAC"}

package/lib/utils/index.js

@@ -0,0 +1,11 @@
+export { apiFetch } from "./api-fetch";
+export { cn } from "./cn";
+export { getErrorMessage } from "./error";
+export { darkPalette, getPalette, lightPalette, usePalette, } from "./palette";
+export { clearClipboardNow, copyToClipboard } from "./clipboard";
+export { loadSetting, saveSetting } from "./settings-storage";
+export { debounce } from "./debounce";
+export { ApiError, extractApiError, extractErrorMessage } from "./http-error";
+export { generatePassword } from "./password";
+export { validateEmail, validatePassword, validateUsername, } from "./validation";
+//# sourceMappingURL=index.js.map

package/lib/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,EAAE,EAAE,MAAM,MAAM,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EACL,WAAW,EACX,UAAU,EACV,YAAY,EACZ,UAAU,GAGX,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAgC,MAAM,YAAY,CAAC;AAC5E,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,gBAAgB,GAGjB,MAAM,cAAc,CAAC"}

package/lib/utils/palette.d.ts

@@ -0,0 +1,46 @@
+/**
+ * JavaScript-side representation of the same color tokens NativeWind
+ * exposes as CSS variables in `styles/globals.css`. Components that need
+ * a palette object (RN-Web inline styles, SVG `stroke`, etc.) consume
+ * this so the values stay in lockstep with the className-based theming.
+ *
+ * Always read via `usePalette()` (or `getPalette(scheme)` for non-hook
+ * call sites) — the table mirrors `:root` for light and `.dark` for
+ * dark.
+ */
+export interface Palette {
+    background: string;
+    foreground: string;
+    card: string;
+    cardForeground: string;
+    popover: string;
+    popoverForeground: string;
+    primary: string;
+    primaryForeground: string;
+    secondary: string;
+    secondaryForeground: string;
+    muted: string;
+    mutedForeground: string;
+    accent: string;
+    accentForeground: string;
+    destructive: string;
+    destructiveForeground: string;
+    border: string;
+    input: string;
+    inputBorder: string;
+    ring: string;
+    placeholder: string;
+}
+export declare const lightPalette: Palette;
+export declare const darkPalette: Palette;
+export type ColorScheme = "light" | "dark";
+export declare function getPalette(scheme: ColorScheme): Palette;
+/**
+ * Returns the active palette + scheme. Re-renders the caller when the
+ * OS / class-toggled theme flips.
+ */
+export declare function usePalette(): {
+    scheme: ColorScheme;
+    palette: Palette;
+};
+//# sourceMappingURL=palette.d.ts.map

package/lib/utils/palette.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"palette.d.ts","sourceRoot":"","sources":["../../src/utils/palette.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,MAAM,WAAW,OAAO;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,YAAY,EAAE,OAsB1B,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,OAsBzB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,MAAM,CAAC;AAE3C,wBAAgB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAEvD;AAED;;;GAGG;AACH,wBAAgB,UAAU,IAAI;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAQtE"}

package/lib/utils/palette.js

@@ -0,0 +1,75 @@
+/**
+ * JavaScript-side representation of the same color tokens NativeWind
+ * exposes as CSS variables in `styles/globals.css`. Components that need
+ * a palette object (RN-Web inline styles, SVG `stroke`, etc.) consume
+ * this so the values stay in lockstep with the className-based theming.
+ *
+ * Always read via `usePalette()` (or `getPalette(scheme)` for non-hook
+ * call sites) — the table mirrors `:root` for light and `.dark` for
+ * dark.
+ */
+import { useMemo } from "react";
+import { useColorScheme } from "nativewind";
+export const lightPalette = {
+    background: "rgb(255, 255, 255)",
+    foreground: "rgb(0, 0, 0)",
+    card: "rgb(255, 255, 255)",
+    cardForeground: "rgb(0, 0, 0)",
+    popover: "rgb(255, 255, 255)",
+    popoverForeground: "rgb(0, 0, 0)",
+    primary: "rgb(0, 0, 0)",
+    primaryForeground: "rgb(255, 255, 255)",
+    secondary: "rgb(245, 245, 245)",
+    secondaryForeground: "rgb(0, 0, 0)",
+    muted: "rgb(245, 245, 245)",
+    mutedForeground: "rgb(115, 115, 115)",
+    accent: "rgb(245, 245, 245)",
+    accentForeground: "rgb(0, 0, 0)",
+    destructive: "rgb(239, 68, 68)",
+    destructiveForeground: "rgb(255, 255, 255)",
+    border: "rgb(229, 229, 229)",
+    input: "rgb(255, 255, 255)",
+    inputBorder: "rgb(229, 229, 229)",
+    ring: "rgb(0, 0, 0)",
+    placeholder: "rgb(163, 163, 163)",
+};
+export const darkPalette = {
+    background: "rgb(0, 0, 0)",
+    foreground: "rgb(255, 255, 255)",
+    card: "rgb(0, 0, 0)",
+    cardForeground: "rgb(255, 255, 255)",
+    popover: "rgb(0, 0, 0)",
+    popoverForeground: "rgb(255, 255, 255)",
+    primary: "rgb(255, 255, 255)",
+    primaryForeground: "rgb(0, 0, 0)",
+    secondary: "rgb(38, 38, 38)",
+    secondaryForeground: "rgb(255, 255, 255)",
+    muted: "rgb(38, 38, 38)",
+    mutedForeground: "rgb(163, 163, 163)",
+    accent: "rgb(38, 38, 38)",
+    accentForeground: "rgb(255, 255, 255)",
+    destructive: "rgb(127, 29, 29)",
+    destructiveForeground: "rgb(255, 255, 255)",
+    border: "rgb(38, 38, 38)",
+    input: "rgb(0, 0, 0)",
+    inputBorder: "rgb(38, 38, 38)",
+    ring: "rgb(255, 255, 255)",
+    placeholder: "rgb(115, 115, 115)",
+};
+export function getPalette(scheme) {
+    return scheme === "dark" ? darkPalette : lightPalette;
+}
+/**
+ * Returns the active palette + scheme. Re-renders the caller when the
+ * OS / class-toggled theme flips.
+ */
+export function usePalette() {
+    const { colorScheme } = useColorScheme();
+    const scheme = colorScheme === "dark" ? "dark" : "light";
+    // Memoize the wrapper so callers using the result as a useMemo /
+    // useCallback dep see a stable reference until the scheme actually
+    // changes. The contained `palette` is already a module-level cached
+    // singleton; only the wrapper object was being re-created.
+    return useMemo(() => ({ scheme, palette: getPalette(scheme) }), [scheme]);
+}
+//# sourceMappingURL=palette.js.map

package/lib/utils/palette.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"palette.js","sourceRoot":"","sources":["../../src/utils/palette.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AA0B5C,MAAM,CAAC,MAAM,YAAY,GAAY;IACnC,UAAU,EAAE,oBAAoB;IAChC,UAAU,EAAE,cAAc;IAC1B,IAAI,EAAE,oBAAoB;IAC1B,cAAc,EAAE,cAAc;IAC9B,OAAO,EAAE,oBAAoB;IAC7B,iBAAiB,EAAE,cAAc;IACjC,OAAO,EAAE,cAAc;IACvB,iBAAiB,EAAE,oBAAoB;IACvC,SAAS,EAAE,oBAAoB;IAC/B,mBAAmB,EAAE,cAAc;IACnC,KAAK,EAAE,oBAAoB;IAC3B,eAAe,EAAE,oBAAoB;IACrC,MAAM,EAAE,oBAAoB;IAC5B,gBAAgB,EAAE,cAAc;IAChC,WAAW,EAAE,kBAAkB;IAC/B,qBAAqB,EAAE,oBAAoB;IAC3C,MAAM,EAAE,oBAAoB;IAC5B,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EAAE,oBAAoB;IACjC,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,oBAAoB;CAClC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAY;IAClC,UAAU,EAAE,cAAc;IAC1B,UAAU,EAAE,oBAAoB;IAChC,IAAI,EAAE,cAAc;IACpB,cAAc,EAAE,oBAAoB;IACpC,OAAO,EAAE,cAAc;IACvB,iBAAiB,EAAE,oBAAoB;IACvC,OAAO,EAAE,oBAAoB;IAC7B,iBAAiB,EAAE,cAAc;IACjC,SAAS,EAAE,iBAAiB;IAC5B,mBAAmB,EAAE,oBAAoB;IACzC,KAAK,EAAE,iBAAiB;IACxB,eAAe,EAAE,oBAAoB;IACrC,MAAM,EAAE,iBAAiB;IACzB,gBAAgB,EAAE,oBAAoB;IACtC,WAAW,EAAE,kBAAkB;IAC/B,qBAAqB,EAAE,oBAAoB;IAC3C,MAAM,EAAE,iBAAiB;IACzB,KAAK,EAAE,cAAc;IACrB,WAAW,EAAE,iBAAiB;IAC9B,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EAAE,oBAAoB;CAClC,CAAC;AAIF,MAAM,UAAU,UAAU,CAAC,MAAmB;IAC5C,OAAO,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,EAAE,WAAW,EAAE,GAAG,cAAc,EAAE,CAAC;IACzC,MAAM,MAAM,GAAgB,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACtE,iEAAiE;IACjE,mEAAmE;IACnE,oEAAoE;IACpE,2DAA2D;IAC3D,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5E,CAAC"}

package/lib/utils/password.d.ts

@@ -0,0 +1,20 @@
+export interface GeneratePasswordOptions {
+    /** Output length in characters. */
+    length: number;
+    includeUppercase?: boolean;
+    includeLowercase?: boolean;
+    includeNumbers?: boolean;
+    includeSymbols?: boolean;
+    /** Drop ambiguous glyphs (`i l 1 L o 0 O`). */
+    excludeSimilar?: boolean;
+}
+/**
+ * Generate a random password using CSPRNG bytes (`@noble/ciphers`) with
+ * rejection sampling so the output distribution stays uniform across
+ * the chosen character set — `b % len` modulo-bias is rejected by
+ * trimming the byte range to a multiple of `len`.
+ *
+ * Throws when every character class is disabled (no charset).
+ */
+export declare function generatePassword(opts: GeneratePasswordOptions): string;
+//# sourceMappingURL=password.d.ts.map

package/lib/utils/password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../src/utils/password.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,uBAAuB;IACtC,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,+CAA+C;IAC/C,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,uBAAuB,GAAG,MAAM,CAoCtE"}

package/lib/utils/password.js

@@ -0,0 +1,51 @@
+import { randomBytes } from "@noble/ciphers/utils.js";
+const UPPERCASE = "ABCDEFGHIJKLMNOPQRSTUVWXYZ";
+const LOWERCASE = "abcdefghijklmnopqrstuvwxyz";
+const NUMBERS = "0123456789";
+const SYMBOLS = "!@#$%^&*()_+-=[]{}|;:,.<>?";
+const SIMILAR = "il1Lo0O";
+/**
+ * Generate a random password using CSPRNG bytes (`@noble/ciphers`) with
+ * rejection sampling so the output distribution stays uniform across
+ * the chosen character set — `b % len` modulo-bias is rejected by
+ * trimming the byte range to a multiple of `len`.
+ *
+ * Throws when every character class is disabled (no charset).
+ */
+export function generatePassword(opts) {
+    let charset = "";
+    if (opts.includeUppercase ?? true) {
+        charset += UPPERCASE;
+    }
+    if (opts.includeLowercase ?? true) {
+        charset += LOWERCASE;
+    }
+    if (opts.includeNumbers ?? true) {
+        charset += NUMBERS;
+    }
+    if (opts.includeSymbols ?? true) {
+        charset += SYMBOLS;
+    }
+    if (opts.excludeSimilar) {
+        charset = charset
+            .split("")
+            .filter((c) => !SIMILAR.includes(c))
+            .join("");
+    }
+    if (charset.length === 0) {
+        throw new Error("generatePassword: at least one character class must be enabled");
+    }
+    const limit = Math.floor(256 / charset.length) * charset.length;
+    let out = "";
+    while (out.length < opts.length) {
+        const bytes = randomBytes(opts.length - out.length + 16);
+        for (let i = 0; i < bytes.length && out.length < opts.length; i++) {
+            const b = bytes[i] ?? 0;
+            if (b < limit) {
+                out += charset.charAt(b % charset.length);
+            }
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=password.js.map

package/lib/utils/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../src/utils/password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,MAAM,SAAS,GAAG,4BAA4B,CAAC;AAC/C,MAAM,SAAS,GAAG,4BAA4B,CAAC;AAC/C,MAAM,OAAO,GAAG,YAAY,CAAC;AAC7B,MAAM,OAAO,GAAG,4BAA4B,CAAC;AAC7C,MAAM,OAAO,GAAG,SAAS,CAAC;AAa1B;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA6B;IAC5D,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,EAAE,CAAC;QAClC,OAAO,IAAI,SAAS,CAAC;IACvB,CAAC;IACD,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,EAAE,CAAC;QAClC,OAAO,IAAI,SAAS,CAAC;IACvB,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC;QAChC,OAAO,IAAI,OAAO,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC;QAChC,OAAO,IAAI,OAAO,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,OAAO,GAAG,OAAO;aACd,KAAK,CAAC,EAAE,CAAC;aACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;aACnC,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAChE,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,OAAO,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClE,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACxB,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC;gBACd,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/lib/utils/settings-storage.d.ts

@@ -0,0 +1,3 @@
+export declare function loadSetting(key: string, fallback: boolean): Promise<boolean>;
+export declare function saveSetting(key: string, value: boolean): Promise<void>;
+//# sourceMappingURL=settings-storage.d.ts.map

package/lib/utils/settings-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-storage.d.ts","sourceRoot":"","sources":["../../src/utils/settings-storage.ts"],"names":[],"mappings":"AA+BA,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAkBlF;AAED,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB5E"}

package/lib/utils/settings-storage.js

@@ -0,0 +1,62 @@
+import { Platform } from "react-native";
+import * as SecureStore from "expo-secure-store";
+/**
+ * Boolean preference storage shared across platforms.
+ *
+ * Web persists via `localStorage` so behaviour matches the native
+ * SecureStore path (also persistent). The web tier is origin-isolated
+ * but not encrypted at rest — don't use this for secrets, only for UX
+ * preferences whose disclosure is acceptable. Security-sensitive policy
+ * (e.g. enforced auto-lock) belongs server-side.
+ */
+const WEB_STORAGE_AVAILABLE = Platform.OS === "web" && typeof window !== "undefined" && !!window.localStorage;
+let warnedNoStorage = false;
+function warnNoStorage(action) {
+    if (warnedNoStorage) {
+        return;
+    }
+    warnedNoStorage = true;
+    if (!__DEV__) {
+        return;
+    }
+    console.warn(`[settings-storage] ${action} failed: localStorage unavailable; using fallbacks for this session.`);
+}
+export async function loadSetting(key, fallback) {
+    try {
+        if (Platform.OS === "web") {
+            if (!WEB_STORAGE_AVAILABLE) {
+                warnNoStorage("load");
+                return fallback;
+            }
+            const v = window.localStorage.getItem(key);
+            return v !== null ? v === "true" : fallback;
+        }
+        const v = await SecureStore.getItemAsync(key);
+        return v !== null ? v === "true" : fallback;
+    }
+    catch (e) {
+        if (__DEV__) {
+            console.warn(`[settings-storage] load(${key}) threw:`, e);
+        }
+        return fallback;
+    }
+}
+export async function saveSetting(key, value) {
+    try {
+        if (Platform.OS === "web") {
+            if (!WEB_STORAGE_AVAILABLE) {
+                warnNoStorage("save");
+                return;
+            }
+            window.localStorage.setItem(key, String(value));
+            return;
+        }
+        await SecureStore.setItemAsync(key, String(value));
+    }
+    catch (e) {
+        if (__DEV__) {
+            console.warn(`[settings-storage] save(${key}) threw:`, e);
+        }
+    }
+}
+//# sourceMappingURL=settings-storage.js.map

package/lib/utils/settings-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-storage.js","sourceRoot":"","sources":["../../src/utils/settings-storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,KAAK,WAAW,MAAM,mBAAmB,CAAC;AAEjD;;;;;;;;GAQG;AAEH,MAAM,qBAAqB,GACzB,QAAQ,CAAC,EAAE,KAAK,KAAK,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;AAElF,IAAI,eAAe,GAAG,KAAK,CAAC;AAC5B,SAAS,aAAa,CAAC,MAAuB;IAC5C,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IACD,eAAe,GAAG,IAAI,CAAC;IACvB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IAED,OAAO,CAAC,IAAI,CACV,sBAAsB,MAAM,sEAAsE,CACnG,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,QAAiB;IAC9D,IAAI,CAAC;QACH,IAAI,QAAQ,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBAC3B,aAAa,CAAC,MAAM,CAAC,CAAC;gBACtB,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3C,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC9C,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC9C,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,2BAA2B,GAAG,UAAU,EAAE,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,KAAc;IAC3D,IAAI,CAAC;QACH,IAAI,QAAQ,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBAC3B,aAAa,CAAC,MAAM,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QACD,MAAM,WAAW,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,2BAA2B,GAAG,UAAU,EAAE,CAAC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;AACH,CAAC"}

package/lib/utils/validation.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Input validators used by the UI to surface preview feedback before
+ * the user hits the server. The Entropy Softworks application servers
+ * enforce these same rules authoritatively (see `entropy-auth`'s
+ * `password::policy` / `Validation`); these implementations are kept
+ * deliberately strict to avoid false positives on the client.
+ *
+ * Email: a permissive `local@host.tld` shape — anything stricter risks
+ * rejecting valid addresses, and the server validates anyway.
+ *
+ * Password: matches the default `entropy-auth` policy (≥8 chars, mixed
+ * case, digit, symbol). Apps that opt their server into a different
+ * policy can ignore the `valid` result and let the server be the source
+ * of truth.
+ *
+ * Username: 3–30 chars, ASCII alnum + underscore.
+ */
+export interface PasswordValidation {
+    valid: boolean;
+    errors: string[];
+}
+export interface UsernameValidation {
+    valid: boolean;
+    error?: string;
+}
+export declare function validateEmail(email: string): boolean;
+export declare function validatePassword(password: string): PasswordValidation;
+export declare function validateUsername(username: string): UsernameValidation;
+//# sourceMappingURL=validation.d.ts.map

package/lib/utils/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AASD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,CAkBrE;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,CAWrE"}

package/lib/utils/validation.js

@@ -0,0 +1,58 @@
+/**
+ * Input validators used by the UI to surface preview feedback before
+ * the user hits the server. The Entropy Softworks application servers
+ * enforce these same rules authoritatively (see `entropy-auth`'s
+ * `password::policy` / `Validation`); these implementations are kept
+ * deliberately strict to avoid false positives on the client.
+ *
+ * Email: a permissive `local@host.tld` shape — anything stricter risks
+ * rejecting valid addresses, and the server validates anyway.
+ *
+ * Password: matches the default `entropy-auth` policy (≥8 chars, mixed
+ * case, digit, symbol). Apps that opt their server into a different
+ * policy can ignore the `valid` result and let the server be the source
+ * of truth.
+ *
+ * Username: 3–30 chars, ASCII alnum + underscore.
+ */
+const EMAIL = /^[^\s@]+@[^\s@]+\.[^\s@]{2,}$/;
+const UPPER = /[A-Z]/;
+const LOWER = /[a-z]/;
+const DIGIT = /[0-9]/;
+const SYMBOL = /[!@#$%^&*()_+\-=[\]{}|;:,.<>?]/;
+const USERNAME = /^[a-zA-Z0-9_]+$/;
+export function validateEmail(email) {
+    return EMAIL.test(email);
+}
+export function validatePassword(password) {
+    const errors = [];
+    if (password.length < 8) {
+        errors.push("Password must be at least 8 characters");
+    }
+    if (!UPPER.test(password)) {
+        errors.push("Password must contain at least one uppercase letter");
+    }
+    if (!LOWER.test(password)) {
+        errors.push("Password must contain at least one lowercase letter");
+    }
+    if (!DIGIT.test(password)) {
+        errors.push("Password must contain at least one number");
+    }
+    if (!SYMBOL.test(password)) {
+        errors.push("Password must contain at least one special character");
+    }
+    return { valid: errors.length === 0, errors };
+}
+export function validateUsername(username) {
+    if (username.length < 3 || username.length > 30) {
+        return { valid: false, error: "Username must be between 3 and 30 characters" };
+    }
+    if (!USERNAME.test(username)) {
+        return {
+            valid: false,
+            error: "Username can only contain letters, numbers, and underscores",
+        };
+    }
+    return { valid: true };
+}
+//# sourceMappingURL=validation.js.map

package/lib/utils/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAYH,MAAM,KAAK,GAAG,+BAA+B,CAAC;AAC9C,MAAM,KAAK,GAAG,OAAO,CAAC;AACtB,MAAM,KAAK,GAAG,OAAO,CAAC;AACtB,MAAM,KAAK,GAAG,OAAO,CAAC;AACtB,MAAM,MAAM,GAAG,gCAAgC,CAAC;AAChD,MAAM,QAAQ,GAAG,iBAAiB,CAAC;AAEnC,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,6DAA6D;SACrE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC"}