@ghub/identity-chrome 0.0.0-stage → 0.2.0

package/dist/tint.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The coloured initial's seven tints (sheet 32), and how one is picked.
+ *
+ * Tints of the seven product mark hues at L 0.84, C 0.07, with the initial in
+ * mark ink at 600: ink on tint measures 9.8 to 11.2, so the initial passes 4.5
+ * at any size on every host.
+ *
+ * **Picked by a stable id, never by the name**, so a person keeps their colour
+ * when they change their name and two people of the same name do not share one.
+ * Identity picks it from the Identity's id and sends only the result; a product
+ * hashes its own user id the same way for somebody with no Identity. Identity
+ * keeps a copy of `avatarTint` in step by hand, because this package is public
+ * and Identity does not depend on it: the vectors in `tint.test.ts` are the
+ * contract between the two.
+ */
+/** Tide, Harbour, Iris, Rose, Ember, Amber, Moss: the order the index counts in. */
+export declare const AVATAR_TINTS: readonly ["oklch(0.84 0.06 200)", "oklch(0.84 0.06 258)", "oklch(0.84 0.07 296)", "oklch(0.85 0.07 355)", "oklch(0.85 0.07 33)", "oklch(0.87 0.08 70)", "oklch(0.85 0.07 148)"];
+/** Mark ink: the initial on every tint. */
+export declare const AVATAR_INK = "#141c1e";
+/** Which of the seven tints a stable id gets: FNV-1a over its UTF-16 code units, modulo seven. */
+export declare function avatarTint(id: string): number;
+//# sourceMappingURL=tint.d.ts.map

package/dist/tint.js

@@ -0,0 +1,41 @@
+"use strict";
+/**
+ * The coloured initial's seven tints (sheet 32), and how one is picked.
+ *
+ * Tints of the seven product mark hues at L 0.84, C 0.07, with the initial in
+ * mark ink at 600: ink on tint measures 9.8 to 11.2, so the initial passes 4.5
+ * at any size on every host.
+ *
+ * **Picked by a stable id, never by the name**, so a person keeps their colour
+ * when they change their name and two people of the same name do not share one.
+ * Identity picks it from the Identity's id and sends only the result; a product
+ * hashes its own user id the same way for somebody with no Identity. Identity
+ * keeps a copy of `avatarTint` in step by hand, because this package is public
+ * and Identity does not depend on it: the vectors in `tint.test.ts` are the
+ * contract between the two.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AVATAR_INK = exports.AVATAR_TINTS = void 0;
+exports.avatarTint = avatarTint;
+/** Tide, Harbour, Iris, Rose, Ember, Amber, Moss: the order the index counts in. */
+exports.AVATAR_TINTS = [
+    "oklch(0.84 0.06 200)",
+    "oklch(0.84 0.06 258)",
+    "oklch(0.84 0.07 296)",
+    "oklch(0.85 0.07 355)",
+    "oklch(0.85 0.07 33)",
+    "oklch(0.87 0.08 70)",
+    "oklch(0.85 0.07 148)",
+];
+/** Mark ink: the initial on every tint. */
+exports.AVATAR_INK = "#141c1e";
+/** Which of the seven tints a stable id gets: FNV-1a over its UTF-16 code units, modulo seven. */
+function avatarTint(id) {
+    let hash = 0x811c9dc5;
+    for (let i = 0; i < id.length; i += 1) {
+        hash ^= id.charCodeAt(i);
+        hash = Math.imul(hash, 0x01000193);
+    }
+    return (hash >>> 0) % exports.AVATAR_TINTS.length;
+}
+//# sourceMappingURL=tint.js.map

package/dist/types.d.ts

@@ -0,0 +1,83 @@
+/**
+ * What the header controls are told. These are the shapes GPlatform Identity
+ * answers with, kept in step by hand with `ChromeView` there: this package is
+ * public and cannot depend on that one, so a change to either is a change to
+ * both.
+ */
+/** One tile in the apps picker. */
+export interface ChromeTile {
+    slug: string;
+    displayName: string;
+    /** Where the tile goes. Only ever an http or https address: anything else is dropped on arrival. */
+    homeUrl: string;
+    /** Identity's address for the icon, or null until one is uploaded. */
+    iconUrl: string | null;
+    /** Whether this is the product the person is in. */
+    current: boolean;
+}
+/** What the person's own Identity adds to the account popup. Never a name: the product shows its own. */
+export interface ChromePerson {
+    hasIdentity: boolean;
+    avatarUrl: string | null;
+    /**
+     * Which of the seven avatar tints the Identity's id picks (0 to 6, `avatarTint`),
+     * so the coloured initial is the same in every product. Null without an Identity,
+     * and from an Identity too old to send it.
+     */
+    tint: number | null;
+}
+/**
+ * Where the account popup's own links go on Identity: the pill and the pencil.
+ * Identity sends them, like the footer, so its address can move without a
+ * release here. Null when they were not sent or any is not a web address, and
+ * then neither the pill nor the pencil is drawn.
+ */
+export interface ChromeIdentityLinks {
+    /** "Manage your Identity account". */
+    accountUrl: string;
+    /** The pencil on the picture: the profile screen, where the picture is set. */
+    pictureUrl: string;
+    /** "Set up your Identity": registration, saying which product sent them and never carrying an address. */
+    setupUrl: string;
+    /** Identity's own mark for the pill, at an address that always leads to the current file. */
+    iconUrl: string | null;
+}
+/**
+ * The account popup's two footer links, the same in every product. Identity sends
+ * them, so a moved address needs no new release of this package. Null when they
+ * were not sent or either is not a web address, and then the footer is not drawn.
+ */
+export interface ChromeLegal {
+    termsUrl: string;
+    privacyUrl: string;
+}
+/** The person, the products they have, the public ones they do not, Identity's own links and the footer. */
+export interface ChromeView {
+    person: ChromePerson;
+    yours: ChromeTile[];
+    more: ChromeTile[];
+    identity: ChromeIdentityLinks | null;
+    legal: ChromeLegal | null;
+}
+/** The public half alone, for painting the lower group before the personal one arrives. */
+export interface ChromePublicView {
+    more: ChromeTile[];
+    legal: ChromeLegal | null;
+}
+/**
+ * A product's name and marks as Identity keeps them: the one place they live, so
+ * a product reads its own here for its top bar, title and favicon, and a rename or
+ * a new mark reaches every product without a release.
+ */
+export interface CatalogueEntry {
+    slug: string;
+    displayName: string;
+    homeUrl: string;
+    /** The colour mark, at an address that never changes its file. Null until one is uploaded. */
+    iconUrl: string | null;
+    /** The one colour mark, the same way. */
+    monoIconUrl: string | null;
+    /** When the entry or a mark last changed, ISO. */
+    updatedAt: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * What the header controls are told. These are the shapes GPlatform Identity
+ * answers with, kept in step by hand with `ChromeView` there: this package is
+ * public and cannot depend on that one, so a change to either is a change to
+ * both.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/validate.d.ts

@@ -0,0 +1,22 @@
+/**
+ * What is believed about an answer before it is drawn.
+ *
+ * A tile's address becomes a link on every page of every product that mounts the
+ * controls, and an icon's address becomes an image source. Both come over the
+ * network, from a service that is trusted and not infallible, so the shape is
+ * checked and an address with any scheme but http or https is **dropped, not
+ * repaired**: a `javascript:` link is script on the host's page, and a tile that
+ * goes nowhere is a smaller fault than that.
+ *
+ * Applied to the cached copy as well as to a fresh answer, because the cache is
+ * storage anybody on the device can write.
+ */
+import type { CatalogueEntry, ChromePublicView, ChromeView } from "./types.js";
+/** An absolute http or https address, or null. */
+export declare function safeUrl(value: unknown): string | null;
+/** A view that can be drawn, or null where the answer is not one. */
+export declare function parseView(value: unknown): ChromeView | null;
+export declare function parsePublicView(value: unknown): ChromePublicView | null;
+/** A catalogue entry that can be drawn, or null where the answer is not one. */
+export declare function parseCatalogueEntry(value: unknown): CatalogueEntry | null;
+//# sourceMappingURL=validate.d.ts.map

package/dist/validate.js

@@ -0,0 +1,148 @@
+"use strict";
+/**
+ * What is believed about an answer before it is drawn.
+ *
+ * A tile's address becomes a link on every page of every product that mounts the
+ * controls, and an icon's address becomes an image source. Both come over the
+ * network, from a service that is trusted and not infallible, so the shape is
+ * checked and an address with any scheme but http or https is **dropped, not
+ * repaired**: a `javascript:` link is script on the host's page, and a tile that
+ * goes nowhere is a smaller fault than that.
+ *
+ * Applied to the cached copy as well as to a fresh answer, because the cache is
+ * storage anybody on the device can write.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.safeUrl = safeUrl;
+exports.parseView = parseView;
+exports.parsePublicView = parsePublicView;
+exports.parseCatalogueEntry = parseCatalogueEntry;
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** An absolute http or https address, or null. */
+function safeUrl(value) {
+    if (typeof value !== "string" || value.length > 2048)
+        return null;
+    try {
+        const url = new URL(value);
+        return url.protocol === "https:" || url.protocol === "http:" ? url.href : null;
+    }
+    catch {
+        return null;
+    }
+}
+function tileOf(value) {
+    if (!isRecord(value))
+        return null;
+    const { slug, displayName, homeUrl, iconUrl, current } = value;
+    if (typeof slug !== "string" ||
+        slug === "" ||
+        typeof displayName !== "string" ||
+        displayName === "") {
+        return null;
+    }
+    const href = safeUrl(homeUrl);
+    if (href === null)
+        return null;
+    return {
+        slug,
+        displayName,
+        homeUrl: href,
+        iconUrl: iconUrl === null || iconUrl === undefined ? null : safeUrl(iconUrl),
+        current: current === true,
+    };
+}
+function tilesOf(value) {
+    if (!Array.isArray(value))
+        return null;
+    return value.map(tileOf).filter((tile) => tile !== null);
+}
+/**
+ * Both footer links, or null. Missing is not a broken answer: an older Identity or
+ * an older cached copy has none, and the popup draws no footer rather than nothing.
+ */
+function legalOf(value) {
+    if (!isRecord(value))
+        return null;
+    const termsUrl = safeUrl(value["termsUrl"]);
+    const privacyUrl = safeUrl(value["privacyUrl"]);
+    return termsUrl === null || privacyUrl === null ? null : { termsUrl, privacyUrl };
+}
+/** All three of Identity's links, or null, the same way as the footer. */
+function identityOf(value) {
+    if (!isRecord(value))
+        return null;
+    const accountUrl = safeUrl(value["accountUrl"]);
+    const pictureUrl = safeUrl(value["pictureUrl"]);
+    const setupUrl = safeUrl(value["setupUrl"]);
+    if (accountUrl === null || pictureUrl === null || setupUrl === null)
+        return null;
+    const icon = value["iconUrl"];
+    return {
+        accountUrl,
+        pictureUrl,
+        setupUrl,
+        iconUrl: icon === null || icon === undefined ? null : safeUrl(icon),
+    };
+}
+/** One of the seven tints, or null for anything else. */
+function tintOf(value) {
+    return typeof value === "number" && Number.isInteger(value) && value >= 0 && value < 7
+        ? value
+        : null;
+}
+/** A view that can be drawn, or null where the answer is not one. */
+function parseView(value) {
+    if (!isRecord(value) || !isRecord(value["person"]))
+        return null;
+    const person = value["person"];
+    const yours = tilesOf(value["yours"]);
+    const more = tilesOf(value["more"]);
+    if (yours === null || more === null)
+        return null;
+    if (typeof person["hasIdentity"] !== "boolean")
+        return null;
+    const avatar = person["avatarUrl"];
+    return {
+        person: {
+            hasIdentity: person["hasIdentity"],
+            avatarUrl: avatar === null || avatar === undefined ? null : safeUrl(avatar),
+            tint: tintOf(person["tint"]),
+        },
+        yours,
+        more,
+        identity: identityOf(value["identity"]),
+        legal: legalOf(value["legal"]),
+    };
+}
+function parsePublicView(value) {
+    if (!isRecord(value))
+        return null;
+    const more = tilesOf(value["more"]);
+    return more === null ? null : { more, legal: legalOf(value["legal"]) };
+}
+/** A catalogue entry that can be drawn, or null where the answer is not one. */
+function parseCatalogueEntry(value) {
+    if (!isRecord(value))
+        return null;
+    const { slug, displayName, homeUrl, iconUrl, monoIconUrl, updatedAt } = value;
+    if (typeof slug !== "string" ||
+        slug === "" ||
+        typeof displayName !== "string" ||
+        displayName === "") {
+        return null;
+    }
+    const home = safeUrl(homeUrl);
+    if (home === null || typeof updatedAt !== "string")
+        return null;
+    return {
+        slug,
+        displayName,
+        homeUrl: home,
+        iconUrl: iconUrl === null || iconUrl === undefined ? null : safeUrl(iconUrl),
+        monoIconUrl: monoIconUrl === null || monoIconUrl === undefined ? null : safeUrl(monoIconUrl),
+        updatedAt,
+    };
+}
+//# sourceMappingURL=validate.js.map

package/package.json

@@ -1,6 +1,64 @@
 {
   "name": "@ghub/identity-chrome",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.2.0",
+  "description": "The shared header controls of the Gelhaus Solutions products: the apps picker and the account popup, as custom elements with shadow DOM and as React wrappers. The browser half (state, cache, the last list held for an outage) and the server half (the token calls and a route handler). No dependencies.",
+  "author": "Gelhaus Solutions (Enno Gelhaus) <egelhaus@ennogelhaus.de> (https://ennogelhaus.de)",
+  "homepage": "https://ennogelhaus.de",
+  "license": "SEE LICENSE IN LICENSE",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Gelhaus-Solutions/GHub-Packages.git",
+    "directory": "packages/identity-chrome"
+  },
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./server": {
+      "types": "./dist/server.d.ts",
+      "default": "./dist/server.js"
+    },
+    "./react": {
+      "types": "./dist/react.d.ts",
+      "default": "./dist/react.js"
+    }
+  },
+  "files": [
+    "dist",
+    "!dist/.tsbuildinfo",
+    "!dist/**/*.map",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "peerDependencies": {
+    "react": ">=19"
+  },
+  "peerDependenciesMeta": {
+    "react": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@types/node": "^22.19.7",
+    "@types/react": "^19.3.0",
+    "jsdom": "^30.1.1",
+    "react": "19.2.8",
+    "typescript": "5.9.3",
+    "vitest": "^4.1.8"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "dev": "tsc -p tsconfig.build.json --watch --preserveWatchOutput",
+    "lint": "eslint \"src/**/*.ts\"",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
+  }
 }