@franzzemen/brokenstock-shell 0.9.2 → 0.9.4

package/README.md

@@ -15,5 +15,6 @@ Shared Angular shell library for Brokenstock web applications. Provides the foun
 - **Injection token configuration:** `SHELL_APP_NAME`, `SHELL_AUTH_URLS`, `SHELL_MENU_ITEMS`, `SHELL_COMMANDS`
 - **Content projection:** App-specific status bar items projected through `<shell-root>` into the status bar
 - **Command pattern:** `@Injectable` classes implementing `CommandDefinition`, registered via `SHELL_COMMANDS` token
+- **Questions and screen keys:** `CommandService.ask` leaves a question open in the terminal (the next line answers it, Esc cancels); `ScreenKeysService` gives a screen keys of its own on its routes (Ctrl allowed, live in the terminal) — see the guide
 - **Signal-based state:** All services use Angular signals; no RxJS in public APIs
 - **Peer dependencies:** Angular 21, Material, CDK, @franzzemen/identity, @franzzemen/utility, zod, rxjs

package/fesm2022/franzzemen-brokenstock-shell.mjs

@@ -1,5 +1,5 @@
 import * as i0 from '@angular/core';
-import { InjectionToken, makeEnvironmentProviders, signal, computed, Injectable, inject, input, Directive, isDevMode, effect, untracked, HostListener, ViewChild, ViewEncapsulation, ChangeDetectionStrategy, Component, DestroyRef, NgZone, viewChild, afterNextRender, output } from '@angular/core';
+import { InjectionToken, makeEnvironmentProviders, signal, computed, Injectable, inject, input, Directive, isDevMode, effect, untracked, HostListener, ViewChild, ViewEncapsulation, ChangeDetectionStrategy, Component, DestroyRef, NgZone, PLATFORM_ID, viewChild, afterNextRender, output } from '@angular/core';
 import * as i2$1 from '@angular/router';
 import { Router, RouterLink, RouterLinkActive, ActivatedRoute, RouterOutlet } from '@angular/router';
 import { BEARER_TOKEN_REGEX, HttpHeader, USERNAME_REGEX, PASSWORD_REGEX } from '@franzzemen/utility';
@@ -11,9 +11,9 @@ import { NG_VALIDATORS, FormsModule } from '@angular/forms';
 import { Marked } from 'marked';
 import { gfmHeadingId } from 'marked-gfm-heading-id';
 import fm from 'front-matter';
-import { NgClass, CommonModule, DOCUMENT, DatePipe } from '@angular/common';
+import { NgClass, CommonModule, DOCUMENT, isPlatformBrowser, DatePipe } from '@angular/common';
 import { Title, Meta } from '@angular/platform-browser';
-import { z } from 'zod/v4';
+import { array, string } from 'zod/v4';
 import * as i1 from '@angular/material/icon';
 import { MatIconModule } from '@angular/material/icon';
 import * as i2 from '@angular/material/tooltip';
@@ -2844,6 +2844,111 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.2", ngImpor
             args: [{ providedIn: 'root' }]
         }], ctorParameters: () => [] });
 
+/*
+Created by Franz Zemen 2026-10-18
+License Type: UNLICENSED
+
+Keys a screen owns while it is open: trading hotkeys (live-trading-foundation.prd.md D24, E8;
+live-trading.prd.md D34).
+
+`KeyboardShortcutService` cannot do this job, and is not changed to: it allows only Alt and Shift
+and switches itself off inside any input. Hotkeys need the opposite on both counts:
+
+- **Ctrl is allowed** (the defaults are Shift+F1 and Ctrl+F1). Meta (the Windows/Command key) never
+  matches.
+- **They work while the cursor is in the command terminal**, the one input that is not a place to
+  type a number. They do NOT fire while focus is in any other input, textarea, select or editable
+  element: a key there is typing.
+- **Matched on `event.code`**, the physical key, never the character produced.
+- **Held-down repeats are ignored** (`event.repeat`): one order per press.
+- **Only on the routes a registration names.**
+
+When a handler takes a key, the browser's own action for it is prevented and it goes no further.
+*/
+/** The class the command terminal's input carries; keys typed there still reach a screen's keys. */
+const TERMINAL_INPUT_CLASS = 'terminal-input';
+/** True when the key is typed into a box other than the command terminal. */
+function isTypingElsewhere(target) {
+    const el = target;
+    if (!el || typeof el.tagName !== 'string')
+        return false;
+    if (el.classList?.contains(TERMINAL_INPUT_CLASS))
+        return false;
+    if (el.isContentEditable)
+        return true;
+    const tag = el.tagName.toUpperCase();
+    if (tag === 'TEXTAREA' || tag === 'SELECT')
+        return true;
+    if (tag !== 'INPUT')
+        return false;
+    const type = (el.type || 'text').toLowerCase();
+    return !['checkbox', 'radio', 'button', 'submit', 'reset', 'range', 'color', 'file', 'image'].includes(type);
+}
+/** Exactly this combination: the key, and these modifiers and no others. */
+function comboMatches(combo, e) {
+    return e.code === combo.code && e.ctrlKey === combo.ctrl && e.shiftKey === combo.shift && e.altKey === combo.alt && !e.metaKey;
+}
+/** Whether a keydown may reach a screen's keys at all. */
+function isEligibleKey(e) {
+    return !e.repeat && !e.isComposing && !isTypingElsewhere(e.target);
+}
+class ScreenKeysService {
+    #document = inject(DOCUMENT);
+    #zone = inject(NgZone);
+    #router = inject(Router);
+    #registrations = new Set();
+    #listening = false;
+    constructor() {
+        if (!isPlatformBrowser(inject(PLATFORM_ID)))
+            return;
+        inject(DestroyRef).onDestroy(() => this.#document.removeEventListener('keydown', this.#onKey, true));
+    }
+    /** Registers keys for a screen; returns the function that removes them. */
+    register(registration) {
+        this.#registrations.add(registration);
+        if (!this.#listening) {
+            this.#listening = true;
+            // Capture phase, so a screen's key is seen before a focused control can act on it.
+            this.#zone.runOutsideAngular(() => this.#document.addEventListener('keydown', this.#onKey, true));
+        }
+        return () => this.#registrations.delete(registration);
+    }
+    #onKey = (e) => {
+        if (this.#registrations.size === 0 || !isEligibleKey(e))
+            return;
+        const url = this.#router.url;
+        for (const r of this.#registrations) {
+            if (!matchesRoute(url, r.routes))
+                continue;
+            const taken = this.#zone.run(() => r.handle(e));
+            if (taken) {
+                e.preventDefault();
+                e.stopPropagation();
+                return;
+            }
+        }
+    };
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "22.1.2", ngImport: i0, type: ScreenKeysService, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "22.1.2", ngImport: i0, type: ScreenKeysService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.2", ngImport: i0, type: ScreenKeysService, decorators: [{
+            type: Injectable,
+            args: [{ providedIn: 'root' }]
+        }], ctorParameters: () => [] });
+
+/*
+ * The only door to zod in the shell (projects review-defects-2026-10.prd.md E20, D25).
+ *
+ * Library files import `* as z` from HERE, never from 'zod', so call sites read as before
+ * (`z.array(z.string())`) but the app's bundler sees a module re-exporting two functions and can
+ * drop the rest. Importing `{z}` from 'zod/v4' hands it the whole library as one object instead:
+ * 454 kB in the browser's first download in a measured test bundle, against 79 kB this way.
+ *
+ * A command needing another zod function adds it below; the compiler refuses anything not listed.
+ * `zod-door.spec.ts` fails if any other library file imports zod directly. Specs are exempt: they
+ * never reach a bundle.
+ */
+
 const FAQ_USAGE = 'faq\n' +
     'faq <key>\n' +
     'faq search <term>\n' +
@@ -2864,7 +2969,7 @@ class FaqCommand {
         this.usage = FAQ_USAGE;
         this.requiresAuth = false;
         this.scope = 'global';
-        this.argsSchema = z.array(z.string()).max(50);
+        this.argsSchema = array(string()).max(50);
     }
     execute(args) {
         const ts = () => new Date();
@@ -3065,7 +3170,7 @@ class PendingPromptState {
     }
 }
 
-const CommandInputSchema = z.string().trim().min(1, 'Command cannot be empty');
+const CommandInputSchema = string().trim().min(1, 'Command cannot be empty');
 class CommandService {
     #prompts;
     /**
@@ -4490,5 +4595,5 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.2", ngImpor
  * Generated bundle index. Do not edit.
  */
 
-export { AuthenticationService, AuthenticatorError, AuthenticatorSettings, CLEAR_USAGE, CODE_STEP, CodeDialog, CommandRegistryService, CommandService, CommandTerminal, ConfirmDialog, FAQ_CONTENT_LOADER, FAQ_DEV_EDITOR, FAQ_DEV_MODE, FAQ_DEV_WORKSPACE_ROOT, FAQ_PUBLIC_PUBLISHER, FAQ_PUBLIC_SITE_BASE_URL, FaqAuthoringPanel, FaqHistoryService, FaqMarkdownRendererService, FaqModal, FaqService, HELP_USAGE, HttpFaqContentLoader, KeyboardShortcutService, Login, MainContent, PendingPromptState, PhoneLayoutService, PublicFaqIndex, PublicFaqPage, PublicFaqToc, RecoveryCodes, RegexValidatorDirective, SESSION_TOKEN_KEY, SHELL_APP_NAME, SHELL_AUTH_URLS, SHELL_COMMANDS, SHELL_MENU_ITEMS, SHELL_PHONE_MEDIA_QUERY, SHELL_POST_LOGIN_ROUTE, SHELL_SHARED_SESSION, SessionTokenStore, Shell, SideMenu, StatusBar, TOO_MANY_ATTEMPTS, TerminalFocusService, TerminalVisibilityService, ThemeService, ThinkingService, answerEcho, audienceAllowed, authGuard, authInterceptor, authenticatorMessage, buildFallbackChain, buildLoginBody, decideRenewal, guestGuard, isYes, matchesRoute, openCodeDialog, provideShellConfig, recoveryCodesFile, tokenize };
+export { AuthenticationService, AuthenticatorError, AuthenticatorSettings, CLEAR_USAGE, CODE_STEP, CodeDialog, CommandRegistryService, CommandService, CommandTerminal, ConfirmDialog, FAQ_CONTENT_LOADER, FAQ_DEV_EDITOR, FAQ_DEV_MODE, FAQ_DEV_WORKSPACE_ROOT, FAQ_PUBLIC_PUBLISHER, FAQ_PUBLIC_SITE_BASE_URL, FaqAuthoringPanel, FaqHistoryService, FaqMarkdownRendererService, FaqModal, FaqService, HELP_USAGE, HttpFaqContentLoader, KeyboardShortcutService, Login, MainContent, PendingPromptState, PhoneLayoutService, PublicFaqIndex, PublicFaqPage, PublicFaqToc, RecoveryCodes, RegexValidatorDirective, SESSION_TOKEN_KEY, SHELL_APP_NAME, SHELL_AUTH_URLS, SHELL_COMMANDS, SHELL_MENU_ITEMS, SHELL_PHONE_MEDIA_QUERY, SHELL_POST_LOGIN_ROUTE, SHELL_SHARED_SESSION, ScreenKeysService, SessionTokenStore, Shell, SideMenu, StatusBar, TERMINAL_INPUT_CLASS, TOO_MANY_ATTEMPTS, TerminalFocusService, TerminalVisibilityService, ThemeService, ThinkingService, answerEcho, audienceAllowed, authGuard, authInterceptor, authenticatorMessage, buildFallbackChain, buildLoginBody, comboMatches, decideRenewal, guestGuard, isEligibleKey, isTypingElsewhere, isYes, matchesRoute, openCodeDialog, provideShellConfig, recoveryCodesFile, tokenize };
 //# sourceMappingURL=franzzemen-brokenstock-shell.mjs.map