@freightos/freightwind 2.1.3 → 2.1.4

package/dist/types/components/chip.d.ts

@@ -10,7 +10,7 @@ export interface ChipProps {
     children?: string;
 }
 declare const chipVariants: (props?: ({
-    variant?: "default" | "info" | "success" | "warning" | "error" | "neutral" | "highlight" | "notice" | null | undefined;
+    variant?: "default" | "success" | "error" | "info" | "warning" | "neutral" | "highlight" | "notice" | null | undefined;
 } & import("class-variance-authority/dist/types").ClassProp) | undefined) => string;
 declare function Chip({ variant, icon, closable, onClose, badge, children, }: ChipProps): import("react/jsx-runtime").JSX.Element | null;
 export { Chip, chipVariants };

package/dist/types/components/upload.d.ts

@@ -0,0 +1,66 @@
+import { type HTMLAttributes } from 'react';
+import { type VariantProps } from 'class-variance-authority';
+export type UploadVariant = 'rectangle' | 'square';
+export type ForbiddenReason = 'multiple' | 'type' | 'size' | 'extension' | 'custom';
+export type UploadFile = File | {
+    name: string;
+};
+export type UploadTranslator = (key: string) => string;
+declare const uploadVariants: (props?: ({
+    variant?: "square" | "rectangle" | null | undefined;
+    state?: "default" | "disabled" | "forbidden" | "uploading" | "uploading-spinner" | "success" | "error" | null | undefined;
+} & import("class-variance-authority/dist/types").ClassProp) | undefined) => string;
+export interface UploadProps extends Omit<HTMLAttributes<HTMLLabelElement>, 'onChange'>, VariantProps<typeof uploadVariants> {
+    /** Test automation identifier. Rendered as `data-test-id` on the root and propagated to inner DOM nodes. */
+    dataTestId: string;
+    /** Layout variant. */
+    variant?: UploadVariant;
+    /** Single associated file (controlled). Pass `{ name: string }` for SSR display-only previews. */
+    value?: UploadFile | null;
+    /** Multiple associated files (controlled). Overrides `value` when provided. */
+    files?: UploadFile[];
+    /** Max number of files allowed. Omit or set to 1 for single-file mode. Exceeding this → forbidden. */
+    maxFiles?: number;
+    /** MIME types / extensions accepted. Pass an array, e.g. `['application/pdf', '.png']`. */
+    accept?: string[];
+    /** Max bytes per file. Exceeding this → forbidden. */
+    maxSize?: number;
+    /** Drives the error visual state (red frame + red icon). */
+    isError?: boolean;
+    /** Disables the surface (gray border, no interaction, no remove allowed). */
+    isDisabled?: boolean;
+    /** Stretch the surface to fill its parent's width and height. */
+    isFillContainer?: boolean;
+    /** Override copy per state. Pass any subset; falls back to defaults. */
+    labels?: Partial<{
+        idleTitle: string;
+        idleSubtitle: string;
+        idleCompact: string;
+        uploading: string;
+        forbidden: Partial<Record<ForbiddenReason, {
+            title: string;
+            subtitle: string;
+            compact?: string;
+        }>>;
+    }>;
+    /** Optional translation function for all built-in copy. Defaults to identity. */
+    t?: UploadTranslator;
+    /** Fires when one or more files are selected or dropped. The component flips to `uploading` after this fires; call `setIsUploading(false)` when your async upload completes. Pass an optional `progress` value (0–1) to drive the determinate progress bar; omit it for the indeterminate animation. */
+    onUpload?: (files: File[], setIsUploading: (v: boolean, progress?: number) => void) => void;
+    /** Fires when the trash button is clicked. Removes ALL files. */
+    onRemove?: () => void;
+    /** Fires when an invalid drag/drop is detected. */
+    onForbidden?: (reason: ForbiddenReason) => void;
+    /** A11y label override for the surface. */
+    ariaLabel?: string;
+    /** Seed the internal uploading state on mount. Useful for static demos and Storybook. */
+    defaultUploading?: boolean;
+    /** Seed the initial progress value (0–1) when defaultUploading is true. Disables the indeterminate animation and shows a static determinate bar. */
+    defaultUploadProgress?: number;
+    /** Seed the forbidden state on mount with a specific reason. Useful for static demos and Storybook. */
+    defaultForbidden?: ForbiddenReason;
+    /** Controls the uploading display: 'progress' = text + progress bar (default); 'spinner' = 32×32 spinner only (no text — enforced for square too). */
+    uploadingStyle?: 'progress' | 'spinner';
+}
+export declare const Upload: import("react").ForwardRefExoticComponent<UploadProps & import("react").RefAttributes<HTMLLabelElement>>;
+export { uploadVariants };

package/dist/types/index.d.ts

@@ -2,3 +2,5 @@ export { cn } from './lib/utils';
 export { useStableId } from './lib/use-stable-id';
 export { iconMap, renderInputIcon } from './lib/icon-utils';
 export type { IconName, InputShellSize } from './lib/icon-utils';
+export { Upload, uploadVariants } from './components/upload';
+export type { UploadProps, UploadVariant, UploadFile, ForbiddenReason, UploadTranslator } from './components/upload';

package/dist/types/lib/file-extensions.d.ts

@@ -0,0 +1,52 @@
+/**
+ * MIME-type → extensions map sourced from the IANA / Apache / Nginx MIME database
+ * (https://github.com/jshttp/mime-db). Keys are canonical MIME types
+ * (e.g. `image/aces`); values are the extensions that legitimately produce that
+ * type, without a leading dot and in lowercase.
+ *
+ * Used to validate uploaded files: reject when the browser-reported `File.type`
+ * is unknown, **and** cross-check that the filename's extension matches the set
+ * registered for that type. This catches "extension spoofing" — e.g. a `.exe`
+ * renamed to `.jpg` will report `application/x-msdownload` (or empty), which
+ * does not list `jpg`, so it fails validation.
+ */
+export declare const VALID_MIME_TYPES: Readonly<Record<string, readonly string[]>>;
+/**
+ * Flat set of every extension known to {@link VALID_MIME_TYPES}, used by the
+ * extension-only fast path ({@link hasValidExtension}). Derived once at module
+ * load — kept in sync with the map automatically.
+ */
+export declare const VALID_FILE_EXTENSIONS: ReadonlySet<string>;
+/**
+ * Normalize a filename or raw extension to a lowercase no-dot extension token.
+ * Returns null if no extension is present.
+ */
+export declare function normalizeExtension(input: string): string | null;
+/**
+ * Returns true when the given filename ends in a recognized extension.
+ * Files with no extension, or extensions that aren't in {@link VALID_FILE_EXTENSIONS},
+ * are rejected as "fake" / nonsense.
+ *
+ * Prefer {@link validateFileType} when a `File` object is available — it catches
+ * extension spoofing that this function cannot.
+ */
+export declare function hasValidExtension(filename: string): boolean;
+/**
+ * Strict file validation: the browser-reported MIME type must be known, AND the
+ * filename's extension must be one of the extensions registered for that type.
+ *
+ * Rejects:
+ *  - files with no extension
+ *  - files whose `type` is empty or unknown to {@link VALID_MIME_TYPES}
+ *  - files whose extension does not match the registered list for `file.type`
+ *    (extension-spoofing guard, e.g. `.exe` renamed to `.jpg`)
+ *
+ * `file.type` comparison is case-insensitive; some browsers lowercase but a few
+ * legacy ones don't.
+ */
+export declare function validateFileType(file: File): boolean;
+/**
+ * Look up every MIME type that legitimately produces the given extension.
+ * Useful for `accept`-attribute construction or reverse diagnostics.
+ */
+export declare function getMimeTypesForExtension(extension: string): readonly string[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@freightos/freightwind",
-  "version": "2.1.3",
+  "version": "2.1.4",
   "private": false,
   "description": "FreightWind Design System — icons, constants, and utilities for Freightos applications",
   "main": "./dist/cjs/index.js",
@@ -96,6 +96,8 @@
     }
   },
   "dependencies": {
+    "@radix-ui/react-direction": "^1.1.0",
+    "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "tailwind-merge": "^3.4.0"
   }