@hadoku/task-ui-components 0.0.0-stage → 4.20.3

package/dist/lib/settingsClient.js

@@ -0,0 +1,140 @@
+const CONTENT_LEVEL_PATH = "/prefs/api/v1/content-level";
+const SESSION_NAME = "/session/name";
+const SESSION_WHOAMI = "/session/whoami";
+const WHOAMI_GLOBAL = "__hadokuWhoami";
+const REQUEST_TIMEOUT_MS = 8e3;
+function sessionHeaders(extra) {
+  const headers = { "Content-Type": "application/json", ...extra };
+  const sid = typeof window !== "undefined" ? localStorage.getItem("hadoku_session_id") : null;
+  if (sid) headers["X-Session-Id"] = sid;
+  return headers;
+}
+async function getContentLevel() {
+  try {
+    const res = await fetch(CONTENT_LEVEL_PATH, {
+      credentials: "same-origin",
+      headers: sessionHeaders(),
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
+    });
+    if (!res.ok) return null;
+    return await res.json();
+  } catch {
+    return null;
+  }
+}
+async function setContentLevel(level) {
+  try {
+    const res = await fetch(CONTENT_LEVEL_PATH, {
+      method: "PUT",
+      credentials: "same-origin",
+      headers: sessionHeaders(),
+      body: JSON.stringify({ level }),
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
+    });
+    if (!res.ok) return null;
+    const stored = await res.json();
+    patchSnapshot((prev) => ({ ...prev, content: stored }));
+    return stored;
+  } catch {
+    return null;
+  }
+}
+async function setDisplayName(name) {
+  try {
+    const res = await fetch(SESSION_NAME, {
+      method: "POST",
+      credentials: "same-origin",
+      headers: sessionHeaders(),
+      body: JSON.stringify({ name }),
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
+    });
+    if (!res.ok) return null;
+    const body = await res.json();
+    patchSnapshot((prev) => ({ ...prev, identity: { ...prev.identity, name: body.name } }));
+    return body.name;
+  } catch {
+    return null;
+  }
+}
+function sharedWhoami() {
+  const g = globalThis;
+  g[WHOAMI_GLOBAL] ??= fetch(SESSION_WHOAMI, {
+    credentials: "same-origin",
+    headers: sessionHeaders(),
+    signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
+  }).then((res) => res.ok ? res.json() : null).catch(() => null);
+  return g[WHOAMI_GLOBAL];
+}
+async function whoami() {
+  if (typeof window === "undefined") return { userType: "public", name: null };
+  try {
+    const body = await sharedWhoami();
+    if (!body?.valid) return { userType: "public", name: null };
+    return { userType: body.userType ?? "public", name: body.name ?? null };
+  } catch {
+    return { userType: "public", name: null };
+  }
+}
+function switchKeyHref() {
+  return "/auth?switch=1&return=" + encodeURIComponent(window.location.pathname + window.location.search + window.location.hash);
+}
+const SIGN_IN_MODULE = "/auth/sign-in.js";
+let signInModule = null;
+function loadSignIn() {
+  signInModule ??= import(
+    /* @vite-ignore */
+    SIGN_IN_MODULE
+  ).then(
+    (m) => typeof m.signIn === "function" ? m.signIn : null,
+    () => {
+      signInModule = null;
+      return null;
+    }
+  );
+  return signInModule;
+}
+let snapshot = null;
+function prefetchSettings(hints = {}) {
+  snapshot ??= resolveSettings(hints);
+  return snapshot;
+}
+async function resolveSettings(hints) {
+  const selfResolving = hints.userType === void 0 && typeof window !== "undefined";
+  const bodyPromise = selfResolving ? sharedWhoami() : Promise.resolve(null);
+  const identityPromise = hints.userType !== void 0 ? Promise.resolve({ userType: hints.userType, name: hints.name ?? null }) : whoami();
+  const contentPromise = bodyPromise.then((body) => {
+    const carried = contentFromWhoami(body);
+    if (carried) return carried;
+    if (looksSignedIn(hints.userType)) return getContentLevel();
+    return identityPromise.then((id) => id.userType === "public" ? null : getContentLevel());
+  });
+  const [identity, content] = await Promise.all([identityPromise, contentPromise]);
+  return { identity, content };
+}
+function contentFromWhoami(body) {
+  if (!body?.valid) return null;
+  const { contentLevel, maxContentLevel } = body;
+  if (typeof contentLevel !== "number" || typeof maxContentLevel !== "number") return null;
+  if (maxContentLevel < 1) return null;
+  return { level: contentLevel, maxLevel: maxContentLevel };
+}
+function looksSignedIn(hinted) {
+  if (hinted !== void 0) return hinted !== "public";
+  if (typeof window === "undefined") return false;
+  const cached = localStorage.getItem("hadoku_user_type");
+  return cached !== null && cached !== "public";
+}
+function patchSnapshot(patch) {
+  if (!snapshot) return;
+  snapshot = snapshot.then(patch);
+}
+export {
+  getContentLevel,
+  loadSignIn,
+  prefetchSettings,
+  setContentLevel,
+  setDisplayName,
+  switchKeyHref,
+  whoami
+};
+//# sourceMappingURL=settingsClient.js.map

package/dist/lib/settingsClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settingsClient.js","sources":["../../src/lib/settingsClient.ts"],"sourcesContent":["/**\n * Client for the unified user-settings modal (ConnectedSettings).\n *\n * Two concerns, both cookie-authed against the hadoku.me edge-router, which\n * resolves the `hadoku_session` cookie / `X-Session-Id` header → X-User-Key +\n * X-User-Id for the backend:\n *   - display name  → POST /session/name                   (edge-router, self rename)\n *   - content level → GET/PUT /prefs/api/v1/content-level  (prefs-api)\n *\n * Switching keys goes through the SITE's sign-in client, never a call of ours:\n * see `loadSignIn()`, with `switchKeyHref()` as the fallback.\n *\n * These are same-origin relative paths, so ConnectedSettings is portable to any\n * app served under hadoku.me with zero wiring. Off-origin (e.g. a Storybook or\n * a non-hadoku host) every call resolves to null and the UI degrades to a\n * read-only shell — it never throws.\n *\n * The raw key is never held in the browser (the auth page deliberately drops\n * it), so name + content-level changes go through session identity, not a key\n * header, and no app ever asks for a key at all.\n *\n * WHEN THESE RUN\n * --------------\n * Everything the popout displays is resolved at PAGE LOAD, not on gear-click —\n * see `prefetchSettings()`. Opening settings must cost zero requests. Pinned by\n * `e2e/settings-prefetch.spec.ts` in hadoku-task.\n */\n\n/** Edge-router / prefs-api endpoints (same-origin relative). */\nconst CONTENT_LEVEL_PATH = '/prefs/api/v1/content-level'\nconst SESSION_NAME = '/session/name'\nconst SESSION_WHOAMI = '/session/whoami'\n\n/**\n * The ecosystem's shared boot-whoami promise. hadoku_site's `mf-loader.js`\n * kicks `GET /session/whoami` in parallel with the micro-frontend's module\n * import and parks the promise here precisely so the app it loads doesn't\n * resolve identity a second time; @wolffm/prefs-client already consumes it\n * under the same name. Reading it is what makes settings' identity free.\n *\n * Absent outside that shell (standalone vite, Capacitor, Storybook) — there we\n * fetch, and publish the result under the same key so the next reader is free\n * too.\n */\nconst WHOAMI_GLOBAL = '__hadokuWhoami'\n\n/**\n * Raw whoami body, as both mf-loader and this module see it off the wire.\n *\n * `contentLevel` / `maxContentLevel` are OPTIONAL because the shape is\n * versioned by whatever edge-router is deployed, not by this bundle. They\n * arrive from edge-router ≥ the 2026-08-07 change, which reports the level\n * `authGate` had already resolved to stamp X-Hadoku-Content-Level. When they\n * are absent we fall back to the standalone GET — see resolveSettings.\n */\ninterface WhoamiBody {\n  valid?: boolean\n  userType?: Tier\n  name?: string | null\n  contentLevel?: number\n  maxContentLevel?: number\n}\n\n// Hard timeout on every settings request. Without it, a request throttled by\n// the browser (e.g. the tab going to the background) leaves the caller's\n// \"saving\" flag stuck true — which disabled the content-level pills until the\n// tab regained focus. AbortSignal.timeout guarantees the promise settles.\nconst REQUEST_TIMEOUT_MS = 8000\n\n/** Session-id header the same way whoami() sends it (cookie is the fallback). */\nfunction sessionHeaders(extra?: Record<string, string>): Record<string, string> {\n  const headers: Record<string, string> = { 'Content-Type': 'application/json', ...extra }\n  const sid = typeof window !== 'undefined' ? localStorage.getItem('hadoku_session_id') : null\n  if (sid) headers['X-Session-Id'] = sid\n  return headers\n}\n\nexport interface ContentLevelState {\n  /** Current global content-visibility level (1 = safest default). */\n  level: number\n  /** Highest level this caller's tier may select (friend=3, admin=4). */\n  maxLevel: number\n}\n\n/** GET the caller's current content level + tier ceiling. null on error. */\nexport async function getContentLevel(): Promise<ContentLevelState | null> {\n  try {\n    const res = await fetch(CONTENT_LEVEL_PATH, {\n      credentials: 'same-origin',\n      headers: sessionHeaders(),\n      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)\n    })\n    if (!res.ok) return null\n    return (await res.json()) as ContentLevelState\n  } catch {\n    return null\n  }\n}\n\n/** PUT a new content level. Server clamps to the tier ceiling → 400 if out of\n *  range. Returns the stored state on success, null on any failure. */\nexport async function setContentLevel(level: number): Promise<ContentLevelState | null> {\n  try {\n    const res = await fetch(CONTENT_LEVEL_PATH, {\n      method: 'PUT',\n      credentials: 'same-origin',\n      headers: sessionHeaders(),\n      body: JSON.stringify({ level }),\n      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)\n    })\n    if (!res.ok) return null\n    const stored = (await res.json()) as ContentLevelState\n    patchSnapshot(prev => ({ ...prev, content: stored }))\n    return stored\n  } catch {\n    return null\n  }\n}\n\n/** POST a new display name for the signed-in user. Returns the stored name\n *  (may differ from the request for wp-* protected keys) or null on failure. */\nexport async function setDisplayName(name: string): Promise<string | null> {\n  try {\n    const res = await fetch(SESSION_NAME, {\n      method: 'POST',\n      credentials: 'same-origin',\n      headers: sessionHeaders(),\n      body: JSON.stringify({ name }),\n      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)\n    })\n    if (!res.ok) return null\n    const body = (await res.json()) as { ok: boolean; name: string | null }\n    patchSnapshot(prev => ({ ...prev, identity: { ...prev.identity, name: body.name } }))\n    return body.name\n  } catch {\n    return null\n  }\n}\n\n/**\n * The hadoku tier ladder, LOW to HIGH: `public < friend < service < wife < admin`.\n * Mirrors TIER_RANK in @wolffm/worker-utils, which this browser bundle cannot\n * import (it would pull hono into the client). A tier missing here does not\n * error — it fails the union and, worse, drops out of every `Record<Tier, …>`\n * lookup, so the caller renders as if unrecognised. Keep it complete.\n */\nexport type Tier = 'public' | 'friend' | 'service' | 'wife' | 'admin'\n\nexport interface Identity {\n  userType: Tier\n  name: string | null\n}\n\n/**\n * The page's one whoami body, resolved at most once no matter how many callers.\n *\n * Under the hadoku.me shell this costs NO request: mf-loader kicks whoami in\n * parallel with the micro-frontend's module import and parks the promise on\n * WHOAMI_GLOBAL for exactly this reason (@wolffm/prefs-client reads the same\n * key). Elsewhere — standalone vite, Capacitor, Storybook — we fetch once and\n * publish under the same key so the next reader is free too.\n *\n * Resolves to null rather than throwing on any failure.\n */\nfunction sharedWhoami(): Promise<WhoamiBody | null> {\n  const g = globalThis as { [WHOAMI_GLOBAL]?: Promise<WhoamiBody | null> }\n  g[WHOAMI_GLOBAL] ??= fetch(SESSION_WHOAMI, {\n    credentials: 'same-origin',\n    headers: sessionHeaders(),\n    signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)\n  })\n    .then(res => (res.ok ? (res.json() as Promise<WhoamiBody>) : null))\n    .catch(() => null)\n  return g[WHOAMI_GLOBAL]\n}\n\n/**\n * Resolve the signed-in caller's tier + display name from the edge-router.\n * Returns { userType: 'public', name: null } for anonymous / off-origin / any\n * failure — never throws, so ConnectedSettings can render unconditionally.\n */\nexport async function whoami(): Promise<Identity> {\n  if (typeof window === 'undefined') return { userType: 'public', name: null }\n  try {\n    const body = await sharedWhoami()\n    if (!body?.valid) return { userType: 'public', name: null }\n    return { userType: body.userType ?? 'public', name: body.name ?? null }\n  } catch {\n    return { userType: 'public', name: null }\n  }\n}\n\n/**\n * Where a \"Switch key\" control sends the user when the inline sign-in client\n * (`loadSignIn()`) can't be loaded: the site's sign-in page, which brings them\n * back here afterwards.\n *\n * A browser session is created ONLY by /auth (hadoku_site, 2026-10-25): every\n * render of that page carries an edge-signed funnel token and the device\n * fingerprint, and /session/create alerts on — and will refuse — a sign-in\n * without them. So an app never posts a key itself.\n *\n * `switch=1` stops /auth from sending an already signed-in visitor straight\n * back, which would make switching impossible. `return` is this page's path,\n * query and hash; /auth redirects there with the new session cookie, and the\n * shell's mf-loader resyncs the localStorage mirror (hadoku_session_id /\n * hadoku_user_type) from /session/whoami on that load, so nothing here writes it.\n */\nexport function switchKeyHref(): string {\n  return (\n    '/auth?switch=1&return=' +\n    encodeURIComponent(window.location.pathname + window.location.search + window.location.hash)\n  )\n}\n\n/** What the site's sign-in client resolves to on success. */\nexport interface SignInResult {\n  valid: boolean\n  userType?: string\n  sessionId?: string\n}\n\n/** `signIn` from hadoku.me's `/auth/sign-in.js`. Resolves on success; throws an\n *  `Error` carrying the server's message on a refused or empty key. */\nexport type SignIn = (key: string) => Promise<SignInResult>\n\n/**\n * The site serves its sign-in page's own client as a module, so an app can sign\n * in INLINE on the same code path as /auth: a fresh funnel token per call, the\n * device fingerprint, and the `/session/create` post that sets the cookie (and\n * writes the hadoku_session_id / hadoku_user_type mirror). This package never\n * posts /session/create itself — a direct post would skip the fingerprint and\n * read as off-funnel — and it does not vendor a copy.\n *\n * The specifier is a VARIABLE on purpose. A literal `import('/auth/sign-in.js')`\n * would have every bundler that re-bundles this package (hadoku_site's build\n * among them) try to resolve the path at build time; this one is only ever\n * resolved by the browser, against whatever origin the page is on. For the\n * same reason it is typed here (`SignIn`) rather than by an ambient module\n * declaration, which only a literal specifier would pick up.\n *\n * The module starts collecting the fingerprint as soon as it evaluates, so call\n * this when a sign-in form OPENS, not when it submits. Memoised; resolves to\n * null when the module can't be loaded (a dev server that isn't hadoku.me),\n * which is the caller's cue to fall back to `switchKeyHref()`.\n */\nconst SIGN_IN_MODULE = '/auth/sign-in.js'\nlet signInModule: Promise<SignIn | null> | null = null\n\nexport function loadSignIn(): Promise<SignIn | null> {\n  signInModule ??= import(/* @vite-ignore */ SIGN_IN_MODULE).then(\n    (m: { signIn?: unknown }) => (typeof m.signIn === 'function' ? (m.signIn as SignIn) : null),\n    () => {\n      // Let a later open retry: a failed fetch is not cached by the browser.\n      signInModule = null\n      return null\n    }\n  )\n  return signInModule\n}\n\n/* ------------------------------------------------------------------ *\n * Prefetch\n * ------------------------------------------------------------------ */\n\n/** Everything the settings popout displays, resolved together. */\nexport interface SettingsSnapshot {\n  identity: Identity\n  /** null = public caller (no pill) or the request failed. */\n  content: ContentLevelState | null\n}\n\n/** Identity the host already knows, so we don't ask the server for it again. */\nexport interface SettingsPrefetchHints {\n  /** Caller's tier. When supplied, whoami is skipped entirely. */\n  userType?: Tier\n  /** Caller's display name. Only meaningful alongside `userType`. */\n  name?: string | null\n}\n\nlet snapshot: Promise<SettingsSnapshot> | null = null\n\n/**\n * Resolve — once per page load — everything the settings popout shows.\n *\n * This is THE entry point, and it is called from ConnectedSettings' MOUNT, not\n * from its open handler. Settings data is user identity: it is known at boot,\n * it doesn't change while the page is up, and making the gear the trigger left\n * the panel on screen but blank for a round trip (measured on prod: whoami\n * 167ms and content-level 186ms, issued concurrently). It now rides along with\n * the app's own boot traffic and the click costs nothing.\n *\n * Idempotent and shared: every caller after the first gets the same promise, so\n * N mounted consumers still produce at most one whoami for the whole page.\n * Mutations below write through to it rather than invalidating, so a remount\n * never shows a value the user just changed.\n *\n * Against a current edge-router this issues NO requests of its own at all — the\n * level rides on the whoami the shell already had in flight. See\n * resolveSettings for the fallback when it doesn't.\n */\nexport function prefetchSettings(hints: SettingsPrefetchHints = {}): Promise<SettingsSnapshot> {\n  snapshot ??= resolveSettings(hints)\n  return snapshot\n}\n\nasync function resolveSettings(hints: SettingsPrefetchHints): Promise<SettingsSnapshot> {\n  // The whoami body, not just the adapted identity — edge-router carries the\n  // content level on it (see below), and reading the raw body is how we get at\n  // it without a second request.\n  //\n  // Skipped entirely when the host supplied identity: that prop exists for apps\n  // that CANNOT reach /session/whoami (conjure sits behind a path-prefixed shim\n  // where it 404s), so asking anyway would spend a request to learn nothing.\n  const selfResolving = hints.userType === undefined && typeof window !== 'undefined'\n  const bodyPromise = selfResolving ? sharedWhoami() : Promise.resolve(null)\n\n  const identityPromise: Promise<Identity> =\n    hints.userType !== undefined\n      ? Promise.resolve({ userType: hints.userType, name: hints.name ?? null })\n      : whoami()\n\n  // PREFERRED PATH: take the level straight off whoami.\n  //\n  // edge-router's authGate has already resolved it (registry key → userId →\n  // prefs D1) to stamp X-Hadoku-Content-Level, so reporting it on whoami costs\n  // it nothing — and it saves us a proxied round trip to prefs-api that\n  // measured 132-420ms against prod. Better still, whoami is in flight before\n  // this bundle has even loaded, so the value is here the moment we ask.\n  //\n  // FALLBACK: the standalone GET, for any edge-router older than the\n  // 2026-08-07 change, and for callers not behind it at all (Capacitor,\n  // Storybook, a non-hadoku host). Gated on identity because the pill is\n  // hidden for public callers — fetching an anonymous visitor's level is a\n  // guaranteed-wasted request on every page view. `hadoku_user_type` is\n  // written by the loader before anything mounts, so where it already says\n  // \"signed in\" the fallback goes out concurrently rather than behind whoami.\n  const contentPromise = bodyPromise.then(body => {\n    const carried = contentFromWhoami(body)\n    if (carried) return carried\n    if (looksSignedIn(hints.userType)) return getContentLevel()\n    return identityPromise.then(id => (id.userType === 'public' ? null : getContentLevel()))\n  })\n\n  const [identity, content] = await Promise.all([identityPromise, contentPromise])\n  return { identity, content }\n}\n\n/**\n * Adapt the content level off a whoami body, or null if that edge-router\n * doesn't report it.\n *\n * Both fields are required, and both must be numbers: a body carrying a level\n * without its ceiling would render a pill with zero segments — worse than the\n * fallback fetch, because it looks like a working control that offers nothing.\n */\nfunction contentFromWhoami(body: WhoamiBody | null): ContentLevelState | null {\n  if (!body?.valid) return null\n  const { contentLevel, maxContentLevel } = body\n  if (typeof contentLevel !== 'number' || typeof maxContentLevel !== 'number') return null\n  if (maxContentLevel < 1) return null\n  return { level: contentLevel, maxLevel: maxContentLevel }\n}\n\n/** Best-effort \"is this caller signed in?\" from state available synchronously. */\nfunction looksSignedIn(hinted?: Tier): boolean {\n  if (hinted !== undefined) return hinted !== 'public'\n  if (typeof window === 'undefined') return false\n  const cached = localStorage.getItem('hadoku_user_type')\n  return cached !== null && cached !== 'public'\n}\n\n/** Keep the prefetched snapshot in step with a successful mutation. */\nfunction patchSnapshot(patch: (prev: SettingsSnapshot) => SettingsSnapshot) {\n  if (!snapshot) return\n  snapshot = snapshot.then(patch)\n}\n"],"names":[],"mappings":"AA6BA,MAAM,qBAAqB;AAC3B,MAAM,eAAe;AACrB,MAAM,iBAAiB;AAavB,MAAM,gBAAgB;AAuBtB,MAAM,qBAAqB;AAG3B,SAAS,eAAe,OAAwD;AAC9E,QAAM,UAAkC,EAAE,gBAAgB,oBAAoB,GAAG,MAAA;AACjF,QAAM,MAAM,OAAO,WAAW,cAAc,aAAa,QAAQ,mBAAmB,IAAI;AACxF,MAAI,IAAK,SAAQ,cAAc,IAAI;AACnC,SAAO;AACT;AAUA,eAAsB,kBAAqD;AACzE,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,oBAAoB;AAAA,MAC1C,aAAa;AAAA,MACb,SAAS,eAAA;AAAA,MACT,QAAQ,YAAY,QAAQ,kBAAkB;AAAA,IAAA,CAC/C;AACD,QAAI,CAAC,IAAI,GAAI,QAAO;AACpB,WAAQ,MAAM,IAAI,KAAA;AAAA,EACpB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,eAAsB,gBAAgB,OAAkD;AACtF,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,oBAAoB;AAAA,MAC1C,QAAQ;AAAA,MACR,aAAa;AAAA,MACb,SAAS,eAAA;AAAA,MACT,MAAM,KAAK,UAAU,EAAE,OAAO;AAAA,MAC9B,QAAQ,YAAY,QAAQ,kBAAkB;AAAA,IAAA,CAC/C;AACD,QAAI,CAAC,IAAI,GAAI,QAAO;AACpB,UAAM,SAAU,MAAM,IAAI,KAAA;AAC1B,kBAAc,WAAS,EAAE,GAAG,MAAM,SAAS,SAAS;AACpD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,eAAsB,eAAe,MAAsC;AACzE,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,cAAc;AAAA,MACpC,QAAQ;AAAA,MACR,aAAa;AAAA,MACb,SAAS,eAAA;AAAA,MACT,MAAM,KAAK,UAAU,EAAE,MAAM;AAAA,MAC7B,QAAQ,YAAY,QAAQ,kBAAkB;AAAA,IAAA,CAC/C;AACD,QAAI,CAAC,IAAI,GAAI,QAAO;AACpB,UAAM,OAAQ,MAAM,IAAI,KAAA;AACxB,kBAAc,CAAA,UAAS,EAAE,GAAG,MAAM,UAAU,EAAE,GAAG,KAAK,UAAU,MAAM,KAAK,KAAA,IAAS;AACpF,WAAO,KAAK;AAAA,EACd,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AA2BA,SAAS,eAA2C;AAClD,QAAM,IAAI;AACV,IAAE,aAAa,MAAM,MAAM,gBAAgB;AAAA,IACzC,aAAa;AAAA,IACb,SAAS,eAAA;AAAA,IACT,QAAQ,YAAY,QAAQ,kBAAkB;AAAA,EAAA,CAC/C,EACE,KAAK,CAAA,QAAQ,IAAI,KAAM,IAAI,KAAA,IAAiC,IAAK,EACjE,MAAM,MAAM,IAAI;AACnB,SAAO,EAAE,aAAa;AACxB;AAOA,eAAsB,SAA4B;AAChD,MAAI,OAAO,WAAW,YAAa,QAAO,EAAE,UAAU,UAAU,MAAM,KAAA;AACtE,MAAI;AACF,UAAM,OAAO,MAAM,aAAA;AACnB,QAAI,CAAC,MAAM,MAAO,QAAO,EAAE,UAAU,UAAU,MAAM,KAAA;AACrD,WAAO,EAAE,UAAU,KAAK,YAAY,UAAU,MAAM,KAAK,QAAQ,KAAA;AAAA,EACnE,QAAQ;AACN,WAAO,EAAE,UAAU,UAAU,MAAM,KAAA;AAAA,EACrC;AACF;AAkBO,SAAS,gBAAwB;AACtC,SACE,2BACA,mBAAmB,OAAO,SAAS,WAAW,OAAO,SAAS,SAAS,OAAO,SAAS,IAAI;AAE/F;AAiCA,MAAM,iBAAiB;AACvB,IAAI,eAA8C;AAE3C,SAAS,aAAqC;AACnD,mBAAiB;AAAA;AAAA,IAA0B;AAAA,IAAgB;AAAA,IACzD,CAAC,MAA6B,OAAO,EAAE,WAAW,aAAc,EAAE,SAAoB;AAAA,IACtF,MAAM;AAEJ,qBAAe;AACf,aAAO;AAAA,IACT;AAAA,EAAA;AAEF,SAAO;AACT;AAqBA,IAAI,WAA6C;AAqB1C,SAAS,iBAAiB,QAA+B,IAA+B;AAC7F,eAAa,gBAAgB,KAAK;AAClC,SAAO;AACT;AAEA,eAAe,gBAAgB,OAAyD;AAQtF,QAAM,gBAAgB,MAAM,aAAa,UAAa,OAAO,WAAW;AACxE,QAAM,cAAc,gBAAgB,aAAA,IAAiB,QAAQ,QAAQ,IAAI;AAEzE,QAAM,kBACJ,MAAM,aAAa,SACf,QAAQ,QAAQ,EAAE,UAAU,MAAM,UAAU,MAAM,MAAM,QAAQ,KAAA,CAAM,IACtE,OAAA;AAiBN,QAAM,iBAAiB,YAAY,KAAK,CAAA,SAAQ;AAC9C,UAAM,UAAU,kBAAkB,IAAI;AACtC,QAAI,QAAS,QAAO;AACpB,QAAI,cAAc,MAAM,QAAQ,UAAU,gBAAA;AAC1C,WAAO,gBAAgB,KAAK,CAAA,OAAO,GAAG,aAAa,WAAW,OAAO,iBAAkB;AAAA,EACzF,CAAC;AAED,QAAM,CAAC,UAAU,OAAO,IAAI,MAAM,QAAQ,IAAI,CAAC,iBAAiB,cAAc,CAAC;AAC/E,SAAO,EAAE,UAAU,QAAA;AACrB;AAUA,SAAS,kBAAkB,MAAmD;AAC5E,MAAI,CAAC,MAAM,MAAO,QAAO;AACzB,QAAM,EAAE,cAAc,gBAAA,IAAoB;AAC1C,MAAI,OAAO,iBAAiB,YAAY,OAAO,oBAAoB,SAAU,QAAO;AACpF,MAAI,kBAAkB,EAAG,QAAO;AAChC,SAAO,EAAE,OAAO,cAAc,UAAU,gBAAA;AAC1C;AAGA,SAAS,cAAc,QAAwB;AAC7C,MAAI,WAAW,OAAW,QAAO,WAAW;AAC5C,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,QAAM,SAAS,aAAa,QAAQ,kBAAkB;AACtD,SAAO,WAAW,QAAQ,WAAW;AACvC;AAGA,SAAS,cAAc,OAAqD;AAC1E,MAAI,CAAC,SAAU;AACf,aAAW,SAAS,KAAK,KAAK;AAChC;"}

package/dist/lib/themeScope.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Where a popup (tooltip bubble, dropdown list) should be portalled.
+ *
+ * Theme tokens are scoped: HadokuThemeRoot puts `data-theme` on the app
+ * container, and a nested `[data-theme]` scope (a theme preview, an embedded
+ * board) can sit inside that. A popup must render inside the SAME scope as its
+ * anchor, or it paints in the wrong theme — portalled to <body>, it loses the
+ * container's tokens entirely.
+ *
+ * Rendering it in place keeps the theme but breaks on any ancestor with a
+ * `transform`, which becomes the containing block for `position: fixed` and
+ * drags the popup off its anchor. The nearest `[data-theme]` ancestor is the
+ * best of both: the right tokens, and above every transform between the
+ * anchor and the theme root. When the only match is <html>, <body> takes it —
+ * :root tokens reach body, and a portal into <html> itself would sit outside
+ * the document's body.
+ */
+export declare function themeScopeOf(anchor: Element | null): HTMLElement | null;
+//# sourceMappingURL=themeScope.d.ts.map

package/dist/lib/themeScope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"themeScope.d.ts","sourceRoot":"","sources":["../../src/lib/themeScope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,GAAG,WAAW,GAAG,IAAI,CAKvE"}

package/dist/lib/themeScope.js

@@ -0,0 +1,10 @@
+function themeScopeOf(anchor) {
+  if (!anchor) return null;
+  const scope = anchor.closest("[data-theme]");
+  if (!scope || scope === document.documentElement) return document.body;
+  return scope;
+}
+export {
+  themeScopeOf
+};
+//# sourceMappingURL=themeScope.js.map

package/dist/lib/themeScope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"themeScope.js","sources":["../../src/lib/themeScope.ts"],"sourcesContent":["/**\n * Where a popup (tooltip bubble, dropdown list) should be portalled.\n *\n * Theme tokens are scoped: HadokuThemeRoot puts `data-theme` on the app\n * container, and a nested `[data-theme]` scope (a theme preview, an embedded\n * board) can sit inside that. A popup must render inside the SAME scope as its\n * anchor, or it paints in the wrong theme — portalled to <body>, it loses the\n * container's tokens entirely.\n *\n * Rendering it in place keeps the theme but breaks on any ancestor with a\n * `transform`, which becomes the containing block for `position: fixed` and\n * drags the popup off its anchor. The nearest `[data-theme]` ancestor is the\n * best of both: the right tokens, and above every transform between the\n * anchor and the theme root. When the only match is <html>, <body> takes it —\n * :root tokens reach body, and a portal into <html> itself would sit outside\n * the document's body.\n */\nexport function themeScopeOf(anchor: Element | null): HTMLElement | null {\n  if (!anchor) return null\n  const scope = anchor.closest<HTMLElement>('[data-theme]')\n  if (!scope || scope === document.documentElement) return document.body\n  return scope\n}\n"],"names":[],"mappings":"AAiBO,SAAS,aAAa,QAA4C;AACvE,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,QAAQ,OAAO,QAAqB,cAAc;AACxD,MAAI,CAAC,SAAS,UAAU,SAAS,wBAAwB,SAAS;AAClE,SAAO;AACT;"}

package/dist/lib/titleTooltips.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Card tooltips for every `title=` on a page, with no change to the markup.
+ *
+ *   import { installTitleTooltips } from '@wolffm/task-ui-components/title-tooltips'
+ *   import '@wolffm/task-ui-components/tooltip.css'
+ *   installTitleTooltips()
+ *
+ * hadoku_site calls this once from its shell, which covers every
+ * micro-frontend at once; an app does not call it itself. Framework-free and
+ * React-free on purpose: the shell has no React, and this must not pull a
+ * second copy into the page.
+ *
+ * One delegated listener set on the document. On hover (mouse only — touch
+ * never showed a native title either) or keyboard focus, the nearest element
+ * carrying `title` lends it to the bubble: the attribute moves to
+ * `data-hdk-title` for as long as the bubble is up, which is what stops the
+ * browser drawing its own on top, and goes back the moment it closes. So
+ * outside a hover the DOM is exactly what the app rendered, and code or a
+ * framework that reads or re-sets `title` sees its own value. A title the
+ * app changes mid-hover (a MutationObserver watches the anchor) re-stashes and
+ * updates the open bubble.
+ *
+ * Same contract as <Tooltip>: hover or focus shows it, Escape dismisses it
+ * until the pointer leaves, the pointer can move onto the bubble, a press
+ * closes it, and the anchor gets `aria-describedby` while it is up (skipped
+ * when the title only repeats the aria-label). The bubble is portalled into
+ * the anchor's theme scope, so a nested `[data-theme]` gets its own colours.
+ *
+ * Opt out per subtree with `data-native-title`.
+ */
+import { type TooltipPlacement } from './tooltipPlacement';
+export interface TitleTooltipOptions {
+    /** Hover delay before showing, ms. Focus shows immediately. */
+    delay?: number;
+    placement?: TooltipPlacement;
+}
+export declare function installTitleTooltips(options?: TitleTooltipOptions): () => void;
+//# sourceMappingURL=titleTooltips.d.ts.map

package/dist/lib/titleTooltips.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"titleTooltips.d.ts","sourceRoot":"","sources":["../../src/lib/titleTooltips.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAGH,OAAO,EAAgB,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAExE,MAAM,WAAW,mBAAmB;IAClC,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,gBAAgB,CAAA;CAC7B;AAQD,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,mBAAwB,GAAG,MAAM,IAAI,CA6LlF"}

package/dist/lib/titleTooltips.js

@@ -0,0 +1,166 @@
+import { themeScopeOf } from "./themeScope.js";
+import { placeTooltip } from "./tooltipPlacement.js";
+const HIDE_GRACE_MS = 120;
+const STASH = "data-hdk-title";
+const BUBBLE_ID = "hdk-title-tooltip";
+let uninstallCurrent = null;
+function installTitleTooltips(options = {}) {
+  if (uninstallCurrent) return uninstallCurrent;
+  const delay = options.delay ?? 300;
+  const placement = options.placement ?? "top";
+  let anchor = null;
+  let bubble = null;
+  let timer;
+  let dismissed = null;
+  const observer = new MutationObserver(() => {
+    if (!anchor || !anchor.hasAttribute("title")) return;
+    stash(anchor);
+    if (bubble) {
+      bubble.textContent = anchor.getAttribute(STASH);
+      place();
+    }
+  });
+  function stash(el) {
+    el.setAttribute(STASH, el.getAttribute("title") ?? "");
+    el.removeAttribute("title");
+  }
+  function restore(el) {
+    const text = el.getAttribute(STASH);
+    if (text === null) return;
+    el.removeAttribute(STASH);
+    if (!el.hasAttribute("title")) el.setAttribute("title", text);
+  }
+  function titledFrom(target) {
+    if (!(target instanceof Element)) return null;
+    const el = target.closest(`[title], [${STASH}]`);
+    if (!el || el.tagName === "IFRAME" || el.closest("[data-native-title]")) return null;
+    return (el.getAttribute("title") ?? el.getAttribute(STASH) ?? "").trim() ? el : null;
+  }
+  function place() {
+    if (!anchor || !bubble) return;
+    if (!anchor.isConnected) {
+      hide(0);
+      return;
+    }
+    const p = placeTooltip(
+      placement,
+      anchor.getBoundingClientRect(),
+      bubble.offsetWidth,
+      bubble.offsetHeight
+    );
+    bubble.style.left = `${p.left}px`;
+    bubble.style.top = `${p.top}px`;
+    bubble.style.setProperty("--hdk-tooltip-arrow", `${p.arrow}px`);
+    bubble.className = `hdk-tooltip hdk-tooltip--card hdk-tooltip--plain hdk-tooltip--${p.side} hdk-tooltip--visible`;
+  }
+  function arm(el, after) {
+    clearTimeout(timer);
+    if (el !== anchor) {
+      release();
+      anchor = el;
+      stash(el);
+      observer.observe(el, { attributes: true, attributeFilter: ["title"] });
+    }
+    if (dismissed === el) return;
+    timer = setTimeout(open, after);
+  }
+  function open() {
+    if (!anchor) return;
+    const scope = themeScopeOf(anchor);
+    if (!scope) return;
+    if (!bubble) {
+      bubble = document.createElement("div");
+      bubble.id = BUBBLE_ID;
+      bubble.setAttribute("role", "tooltip");
+      bubble.addEventListener("pointerenter", () => clearTimeout(timer));
+      bubble.addEventListener("pointerleave", () => hide(HIDE_GRACE_MS));
+    }
+    const text = anchor.getAttribute(STASH) ?? "";
+    bubble.textContent = text;
+    bubble.className = `hdk-tooltip hdk-tooltip--card hdk-tooltip--plain hdk-tooltip--${placement}`;
+    bubble.style.left = "0px";
+    bubble.style.top = "0px";
+    if (bubble.parentNode !== scope) scope.appendChild(bubble);
+    if (text !== anchor.getAttribute("aria-label")) {
+      const ids = (anchor.getAttribute("aria-describedby") ?? "").split(/\s+/).filter(Boolean);
+      if (!ids.includes(BUBBLE_ID))
+        anchor.setAttribute("aria-describedby", [...ids, BUBBLE_ID].join(" "));
+    }
+    place();
+    window.addEventListener("scroll", place, true);
+    window.addEventListener("resize", place);
+  }
+  function release() {
+    window.removeEventListener("scroll", place, true);
+    window.removeEventListener("resize", place);
+    bubble?.remove();
+    if (!anchor) return;
+    observer.disconnect();
+    const ids = (anchor.getAttribute("aria-describedby") ?? "").split(/\s+/).filter((id) => id && id !== BUBBLE_ID);
+    if (ids.length) anchor.setAttribute("aria-describedby", ids.join(" "));
+    else anchor.removeAttribute("aria-describedby");
+    restore(anchor);
+    anchor = null;
+  }
+  function hide(after) {
+    clearTimeout(timer);
+    if (after === 0) release();
+    else timer = setTimeout(release, after);
+  }
+  const onPointerOver = (e) => {
+    if (e.pointerType !== "mouse") return;
+    if (bubble && bubble.contains(e.target)) return;
+    const el = titledFrom(e.target);
+    if (el && el === anchor && bubble?.isConnected) clearTimeout(timer);
+    else if (el) arm(el, delay);
+  };
+  const onPointerOut = (e) => {
+    if (e.pointerType !== "mouse") return;
+    const to = e.relatedTarget;
+    if (dismissed && !(to && dismissed.contains(to))) dismissed = null;
+    if (!anchor || to && (anchor.contains(to) || bubble?.contains(to))) return;
+    hide(HIDE_GRACE_MS);
+  };
+  const onPointerDown = () => {
+    if (anchor) dismissed = anchor;
+    hide(0);
+  };
+  const onFocusIn = (e) => {
+    const target = e.target;
+    if (!(target instanceof Element) || !target.matches(":focus-visible")) return;
+    const el = titledFrom(target);
+    if (el) {
+      dismissed = null;
+      arm(el, 0);
+    }
+  };
+  const onFocusOut = (e) => {
+    if (anchor && anchor.contains(e.target)) hide(0);
+  };
+  const onKeyDown = (e) => {
+    if (e.key !== "Escape" || !anchor || !bubble?.isConnected) return;
+    dismissed = anchor;
+    hide(0);
+  };
+  document.addEventListener("pointerover", onPointerOver);
+  document.addEventListener("pointerout", onPointerOut);
+  document.addEventListener("pointerdown", onPointerDown, true);
+  document.addEventListener("focusin", onFocusIn);
+  document.addEventListener("focusout", onFocusOut);
+  document.addEventListener("keydown", onKeyDown);
+  uninstallCurrent = () => {
+    hide(0);
+    document.removeEventListener("pointerover", onPointerOver);
+    document.removeEventListener("pointerout", onPointerOut);
+    document.removeEventListener("pointerdown", onPointerDown, true);
+    document.removeEventListener("focusin", onFocusIn);
+    document.removeEventListener("focusout", onFocusOut);
+    document.removeEventListener("keydown", onKeyDown);
+    uninstallCurrent = null;
+  };
+  return uninstallCurrent;
+}
+export {
+  installTitleTooltips
+};
+//# sourceMappingURL=titleTooltips.js.map

package/dist/lib/titleTooltips.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"titleTooltips.js","sources":["../../src/lib/titleTooltips.ts"],"sourcesContent":["/**\n * Card tooltips for every `title=` on a page, with no change to the markup.\n *\n *   import { installTitleTooltips } from '@wolffm/task-ui-components/title-tooltips'\n *   import '@wolffm/task-ui-components/tooltip.css'\n *   installTitleTooltips()\n *\n * hadoku_site calls this once from its shell, which covers every\n * micro-frontend at once; an app does not call it itself. Framework-free and\n * React-free on purpose: the shell has no React, and this must not pull a\n * second copy into the page.\n *\n * One delegated listener set on the document. On hover (mouse only — touch\n * never showed a native title either) or keyboard focus, the nearest element\n * carrying `title` lends it to the bubble: the attribute moves to\n * `data-hdk-title` for as long as the bubble is up, which is what stops the\n * browser drawing its own on top, and goes back the moment it closes. So\n * outside a hover the DOM is exactly what the app rendered, and code or a\n * framework that reads or re-sets `title` sees its own value. A title the\n * app changes mid-hover (a MutationObserver watches the anchor) re-stashes and\n * updates the open bubble.\n *\n * Same contract as <Tooltip>: hover or focus shows it, Escape dismisses it\n * until the pointer leaves, the pointer can move onto the bubble, a press\n * closes it, and the anchor gets `aria-describedby` while it is up (skipped\n * when the title only repeats the aria-label). The bubble is portalled into\n * the anchor's theme scope, so a nested `[data-theme]` gets its own colours.\n *\n * Opt out per subtree with `data-native-title`.\n */\n\nimport { themeScopeOf } from './themeScope'\nimport { placeTooltip, type TooltipPlacement } from './tooltipPlacement'\n\nexport interface TitleTooltipOptions {\n  /** Hover delay before showing, ms. Focus shows immediately. */\n  delay?: number\n  placement?: TooltipPlacement\n}\n\nconst HIDE_GRACE_MS = 120\nconst STASH = 'data-hdk-title'\nconst BUBBLE_ID = 'hdk-title-tooltip'\n\nlet uninstallCurrent: (() => void) | null = null\n\nexport function installTitleTooltips(options: TitleTooltipOptions = {}): () => void {\n  if (uninstallCurrent) return uninstallCurrent\n  const delay = options.delay ?? 300\n  const placement = options.placement ?? 'top'\n\n  let anchor: Element | null = null\n  let bubble: HTMLDivElement | null = null\n  let timer: ReturnType<typeof setTimeout> | undefined\n  // Escape closes the bubble until the pointer leaves that anchor (WCAG 1.4.13).\n  let dismissed: Element | null = null\n\n  const observer = new MutationObserver(() => {\n    if (!anchor || !anchor.hasAttribute('title')) return\n    stash(anchor)\n    if (bubble) {\n      bubble.textContent = anchor.getAttribute(STASH)\n      place()\n    }\n  })\n\n  function stash(el: Element) {\n    el.setAttribute(STASH, el.getAttribute('title') ?? '')\n    el.removeAttribute('title')\n  }\n\n  function restore(el: Element) {\n    const text = el.getAttribute(STASH)\n    if (text === null) return\n    el.removeAttribute(STASH)\n    if (!el.hasAttribute('title')) el.setAttribute('title', text)\n  }\n\n  function titledFrom(target: EventTarget | null): Element | null {\n    if (!(target instanceof Element)) return null\n    // The stash too: while the bubble is up the anchor carries data-hdk-title,\n    // not title, and a pointerover on its own icon must still find IT rather\n    // than a titled ancestor.\n    const el = target.closest(`[title], [${STASH}]`)\n    if (!el || el.tagName === 'IFRAME' || el.closest('[data-native-title]')) return null\n    return (el.getAttribute('title') ?? el.getAttribute(STASH) ?? '').trim() ? el : null\n  }\n\n  function place() {\n    if (!anchor || !bubble) return\n    if (!anchor.isConnected) {\n      hide(0)\n      return\n    }\n    const p = placeTooltip(\n      placement,\n      anchor.getBoundingClientRect(),\n      bubble.offsetWidth,\n      bubble.offsetHeight\n    )\n    bubble.style.left = `${p.left}px`\n    bubble.style.top = `${p.top}px`\n    bubble.style.setProperty('--hdk-tooltip-arrow', `${p.arrow}px`)\n    bubble.className = `hdk-tooltip hdk-tooltip--card hdk-tooltip--plain hdk-tooltip--${p.side} hdk-tooltip--visible`\n  }\n\n  /** Take the title off `el` now (before the browser's own ~1s delay runs\n   *  out) and open the bubble after `after` ms. */\n  function arm(el: Element, after: number) {\n    clearTimeout(timer)\n    if (el !== anchor) {\n      release()\n      anchor = el\n      stash(el)\n      observer.observe(el, { attributes: true, attributeFilter: ['title'] })\n    }\n    if (dismissed === el) return\n    timer = setTimeout(open, after)\n  }\n\n  function open() {\n    if (!anchor) return\n    const scope = themeScopeOf(anchor)\n    if (!scope) return\n    if (!bubble) {\n      bubble = document.createElement('div')\n      bubble.id = BUBBLE_ID\n      bubble.setAttribute('role', 'tooltip')\n      bubble.addEventListener('pointerenter', () => clearTimeout(timer))\n      bubble.addEventListener('pointerleave', () => hide(HIDE_GRACE_MS))\n    }\n    const text = anchor.getAttribute(STASH) ?? ''\n    bubble.textContent = text\n    // Parked invisibly at the origin so it can be measured, then placed.\n    bubble.className = `hdk-tooltip hdk-tooltip--card hdk-tooltip--plain hdk-tooltip--${placement}`\n    bubble.style.left = '0px'\n    bubble.style.top = '0px'\n    if (bubble.parentNode !== scope) scope.appendChild(bubble)\n    if (text !== anchor.getAttribute('aria-label')) {\n      const ids = (anchor.getAttribute('aria-describedby') ?? '').split(/\\s+/).filter(Boolean)\n      if (!ids.includes(BUBBLE_ID))\n        anchor.setAttribute('aria-describedby', [...ids, BUBBLE_ID].join(' '))\n    }\n    place()\n    window.addEventListener('scroll', place, true)\n    window.addEventListener('resize', place)\n  }\n\n  /** Close the bubble and hand the anchor its title back. */\n  function release() {\n    window.removeEventListener('scroll', place, true)\n    window.removeEventListener('resize', place)\n    bubble?.remove()\n    if (!anchor) return\n    observer.disconnect()\n    const ids = (anchor.getAttribute('aria-describedby') ?? '')\n      .split(/\\s+/)\n      .filter(id => id && id !== BUBBLE_ID)\n    if (ids.length) anchor.setAttribute('aria-describedby', ids.join(' '))\n    else anchor.removeAttribute('aria-describedby')\n    restore(anchor)\n    anchor = null\n  }\n\n  function hide(after: number) {\n    clearTimeout(timer)\n    if (after === 0) release()\n    else timer = setTimeout(release, after)\n  }\n\n  const onPointerOver = (e: PointerEvent) => {\n    if (e.pointerType !== 'mouse') return\n    if (bubble && bubble.contains(e.target as Node)) return\n    // Back over the anchor of a bubble still up: just cancel the pending hide.\n    // Over it with no bubble (inside the hide grace, or after a dismissal\n    // that has since cleared), arm it again — otherwise it stays silent.\n    const el = titledFrom(e.target)\n    if (el && el === anchor && bubble?.isConnected) clearTimeout(timer)\n    else if (el) arm(el, delay)\n  }\n\n  const onPointerOut = (e: PointerEvent) => {\n    if (e.pointerType !== 'mouse') return\n    const to = e.relatedTarget as Node | null\n    // Checked before `anchor`: a dismissal has already released the anchor.\n    if (dismissed && !(to && dismissed.contains(to))) dismissed = null\n    if (!anchor || (to && (anchor.contains(to) || bubble?.contains(to)))) return\n    hide(HIDE_GRACE_MS)\n  }\n\n  // A press closes it, as it does a native title: the click usually opens\n  // something the bubble would sit on top of.\n  const onPointerDown = () => {\n    if (anchor) dismissed = anchor\n    hide(0)\n  }\n\n  const onFocusIn = (e: FocusEvent) => {\n    const target = e.target\n    if (!(target instanceof Element) || !target.matches(':focus-visible')) return\n    const el = titledFrom(target)\n    if (el) {\n      dismissed = null\n      arm(el, 0)\n    }\n  }\n\n  const onFocusOut = (e: FocusEvent) => {\n    if (anchor && anchor.contains(e.target as Node)) hide(0)\n  }\n\n  const onKeyDown = (e: KeyboardEvent) => {\n    if (e.key !== 'Escape' || !anchor || !bubble?.isConnected) return\n    dismissed = anchor\n    hide(0)\n  }\n\n  document.addEventListener('pointerover', onPointerOver)\n  document.addEventListener('pointerout', onPointerOut)\n  document.addEventListener('pointerdown', onPointerDown, true)\n  document.addEventListener('focusin', onFocusIn)\n  document.addEventListener('focusout', onFocusOut)\n  document.addEventListener('keydown', onKeyDown)\n\n  uninstallCurrent = () => {\n    hide(0)\n    document.removeEventListener('pointerover', onPointerOver)\n    document.removeEventListener('pointerout', onPointerOut)\n    document.removeEventListener('pointerdown', onPointerDown, true)\n    document.removeEventListener('focusin', onFocusIn)\n    document.removeEventListener('focusout', onFocusOut)\n    document.removeEventListener('keydown', onKeyDown)\n    uninstallCurrent = null\n  }\n  return uninstallCurrent\n}\n"],"names":[],"mappings":";;AAwCA,MAAM,gBAAgB;AACtB,MAAM,QAAQ;AACd,MAAM,YAAY;AAElB,IAAI,mBAAwC;AAErC,SAAS,qBAAqB,UAA+B,IAAgB;AAClF,MAAI,iBAAkB,QAAO;AAC7B,QAAM,QAAQ,QAAQ,SAAS;AAC/B,QAAM,YAAY,QAAQ,aAAa;AAEvC,MAAI,SAAyB;AAC7B,MAAI,SAAgC;AACpC,MAAI;AAEJ,MAAI,YAA4B;AAEhC,QAAM,WAAW,IAAI,iBAAiB,MAAM;AAC1C,QAAI,CAAC,UAAU,CAAC,OAAO,aAAa,OAAO,EAAG;AAC9C,UAAM,MAAM;AACZ,QAAI,QAAQ;AACV,aAAO,cAAc,OAAO,aAAa,KAAK;AAC9C,YAAA;AAAA,IACF;AAAA,EACF,CAAC;AAED,WAAS,MAAM,IAAa;AAC1B,OAAG,aAAa,OAAO,GAAG,aAAa,OAAO,KAAK,EAAE;AACrD,OAAG,gBAAgB,OAAO;AAAA,EAC5B;AAEA,WAAS,QAAQ,IAAa;AAC5B,UAAM,OAAO,GAAG,aAAa,KAAK;AAClC,QAAI,SAAS,KAAM;AACnB,OAAG,gBAAgB,KAAK;AACxB,QAAI,CAAC,GAAG,aAAa,OAAO,EAAG,IAAG,aAAa,SAAS,IAAI;AAAA,EAC9D;AAEA,WAAS,WAAW,QAA4C;AAC9D,QAAI,EAAE,kBAAkB,SAAU,QAAO;AAIzC,UAAM,KAAK,OAAO,QAAQ,aAAa,KAAK,GAAG;AAC/C,QAAI,CAAC,MAAM,GAAG,YAAY,YAAY,GAAG,QAAQ,qBAAqB,EAAG,QAAO;AAChF,YAAQ,GAAG,aAAa,OAAO,KAAK,GAAG,aAAa,KAAK,KAAK,IAAI,KAAA,IAAS,KAAK;AAAA,EAClF;AAEA,WAAS,QAAQ;AACf,QAAI,CAAC,UAAU,CAAC,OAAQ;AACxB,QAAI,CAAC,OAAO,aAAa;AACvB,WAAK,CAAC;AACN;AAAA,IACF;AACA,UAAM,IAAI;AAAA,MACR;AAAA,MACA,OAAO,sBAAA;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,IAAA;AAET,WAAO,MAAM,OAAO,GAAG,EAAE,IAAI;AAC7B,WAAO,MAAM,MAAM,GAAG,EAAE,GAAG;AAC3B,WAAO,MAAM,YAAY,uBAAuB,GAAG,EAAE,KAAK,IAAI;AAC9D,WAAO,YAAY,iEAAiE,EAAE,IAAI;AAAA,EAC5F;AAIA,WAAS,IAAI,IAAa,OAAe;AACvC,iBAAa,KAAK;AAClB,QAAI,OAAO,QAAQ;AACjB,cAAA;AACA,eAAS;AACT,YAAM,EAAE;AACR,eAAS,QAAQ,IAAI,EAAE,YAAY,MAAM,iBAAiB,CAAC,OAAO,GAAG;AAAA,IACvE;AACA,QAAI,cAAc,GAAI;AACtB,YAAQ,WAAW,MAAM,KAAK;AAAA,EAChC;AAEA,WAAS,OAAO;AACd,QAAI,CAAC,OAAQ;AACb,UAAM,QAAQ,aAAa,MAAM;AACjC,QAAI,CAAC,MAAO;AACZ,QAAI,CAAC,QAAQ;AACX,eAAS,SAAS,cAAc,KAAK;AACrC,aAAO,KAAK;AACZ,aAAO,aAAa,QAAQ,SAAS;AACrC,aAAO,iBAAiB,gBAAgB,MAAM,aAAa,KAAK,CAAC;AACjE,aAAO,iBAAiB,gBAAgB,MAAM,KAAK,aAAa,CAAC;AAAA,IACnE;AACA,UAAM,OAAO,OAAO,aAAa,KAAK,KAAK;AAC3C,WAAO,cAAc;AAErB,WAAO,YAAY,iEAAiE,SAAS;AAC7F,WAAO,MAAM,OAAO;AACpB,WAAO,MAAM,MAAM;AACnB,QAAI,OAAO,eAAe,MAAO,OAAM,YAAY,MAAM;AACzD,QAAI,SAAS,OAAO,aAAa,YAAY,GAAG;AAC9C,YAAM,OAAO,OAAO,aAAa,kBAAkB,KAAK,IAAI,MAAM,KAAK,EAAE,OAAO,OAAO;AACvF,UAAI,CAAC,IAAI,SAAS,SAAS;AACzB,eAAO,aAAa,oBAAoB,CAAC,GAAG,KAAK,SAAS,EAAE,KAAK,GAAG,CAAC;AAAA,IACzE;AACA,UAAA;AACA,WAAO,iBAAiB,UAAU,OAAO,IAAI;AAC7C,WAAO,iBAAiB,UAAU,KAAK;AAAA,EACzC;AAGA,WAAS,UAAU;AACjB,WAAO,oBAAoB,UAAU,OAAO,IAAI;AAChD,WAAO,oBAAoB,UAAU,KAAK;AAC1C,YAAQ,OAAA;AACR,QAAI,CAAC,OAAQ;AACb,aAAS,WAAA;AACT,UAAM,OAAO,OAAO,aAAa,kBAAkB,KAAK,IACrD,MAAM,KAAK,EACX,OAAO,CAAA,OAAM,MAAM,OAAO,SAAS;AACtC,QAAI,IAAI,OAAQ,QAAO,aAAa,oBAAoB,IAAI,KAAK,GAAG,CAAC;AAAA,QAChE,QAAO,gBAAgB,kBAAkB;AAC9C,YAAQ,MAAM;AACd,aAAS;AAAA,EACX;AAEA,WAAS,KAAK,OAAe;AAC3B,iBAAa,KAAK;AAClB,QAAI,UAAU,EAAG,SAAA;AAAA,QACZ,SAAQ,WAAW,SAAS,KAAK;AAAA,EACxC;AAEA,QAAM,gBAAgB,CAAC,MAAoB;AACzC,QAAI,EAAE,gBAAgB,QAAS;AAC/B,QAAI,UAAU,OAAO,SAAS,EAAE,MAAc,EAAG;AAIjD,UAAM,KAAK,WAAW,EAAE,MAAM;AAC9B,QAAI,MAAM,OAAO,UAAU,QAAQ,0BAA0B,KAAK;AAAA,aACzD,GAAI,KAAI,IAAI,KAAK;AAAA,EAC5B;AAEA,QAAM,eAAe,CAAC,MAAoB;AACxC,QAAI,EAAE,gBAAgB,QAAS;AAC/B,UAAM,KAAK,EAAE;AAEb,QAAI,aAAa,EAAE,MAAM,UAAU,SAAS,EAAE,GAAI,aAAY;AAC9D,QAAI,CAAC,UAAW,OAAO,OAAO,SAAS,EAAE,KAAK,QAAQ,SAAS,EAAE,GAAK;AACtE,SAAK,aAAa;AAAA,EACpB;AAIA,QAAM,gBAAgB,MAAM;AAC1B,QAAI,OAAQ,aAAY;AACxB,SAAK,CAAC;AAAA,EACR;AAEA,QAAM,YAAY,CAAC,MAAkB;AACnC,UAAM,SAAS,EAAE;AACjB,QAAI,EAAE,kBAAkB,YAAY,CAAC,OAAO,QAAQ,gBAAgB,EAAG;AACvE,UAAM,KAAK,WAAW,MAAM;AAC5B,QAAI,IAAI;AACN,kBAAY;AACZ,UAAI,IAAI,CAAC;AAAA,IACX;AAAA,EACF;AAEA,QAAM,aAAa,CAAC,MAAkB;AACpC,QAAI,UAAU,OAAO,SAAS,EAAE,MAAc,QAAQ,CAAC;AAAA,EACzD;AAEA,QAAM,YAAY,CAAC,MAAqB;AACtC,QAAI,EAAE,QAAQ,YAAY,CAAC,UAAU,CAAC,QAAQ,YAAa;AAC3D,gBAAY;AACZ,SAAK,CAAC;AAAA,EACR;AAEA,WAAS,iBAAiB,eAAe,aAAa;AACtD,WAAS,iBAAiB,cAAc,YAAY;AACpD,WAAS,iBAAiB,eAAe,eAAe,IAAI;AAC5D,WAAS,iBAAiB,WAAW,SAAS;AAC9C,WAAS,iBAAiB,YAAY,UAAU;AAChD,WAAS,iBAAiB,WAAW,SAAS;AAE9C,qBAAmB,MAAM;AACvB,SAAK,CAAC;AACN,aAAS,oBAAoB,eAAe,aAAa;AACzD,aAAS,oBAAoB,cAAc,YAAY;AACvD,aAAS,oBAAoB,eAAe,eAAe,IAAI;AAC/D,aAAS,oBAAoB,WAAW,SAAS;AACjD,aAAS,oBAAoB,YAAY,UAAU;AACnD,aAAS,oBAAoB,WAAW,SAAS;AACjD,uBAAmB;AAAA,EACrB;AACA,SAAO;AACT;"}

package/dist/lib/tooltipPlacement.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Where a tooltip bubble goes, shared by <Tooltip> and installTitleTooltips so
+ * the React and framework-free bubbles sit, flip and clamp identically.
+ */
+export type TooltipPlacement = 'top' | 'bottom' | 'left' | 'right';
+export interface Placed {
+    side: TooltipPlacement;
+    left: number;
+    top: number;
+    /** Arrow offset along the bubble edge, so it still points at the anchor after clamping. */
+    arrow: number;
+}
+export declare function placeTooltip(preferred: TooltipPlacement, a: DOMRect, w: number, h: number): Placed;
+//# sourceMappingURL=tooltipPlacement.d.ts.map

package/dist/lib/tooltipPlacement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tooltipPlacement.d.ts","sourceRoot":"","sources":["../../src/lib/tooltipPlacement.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAA;AAElE,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,gBAAgB,CAAA;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,2FAA2F;IAC3F,KAAK,EAAE,MAAM,CAAA;CACd;AA0BD,wBAAgB,YAAY,CAC1B,SAAS,EAAE,gBAAgB,EAC3B,CAAC,EAAE,OAAO,EACV,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,GACR,MAAM,CAcR"}

package/dist/lib/tooltipPlacement.js

@@ -0,0 +1,34 @@
+const GAP = 8;
+const EDGE = 8;
+const OPPOSITE = {
+  top: "bottom",
+  bottom: "top",
+  left: "right",
+  right: "left"
+};
+function fits(side, a, w, h) {
+  if (side === "top") return a.top - GAP - h >= EDGE;
+  if (side === "bottom") return a.bottom + GAP + h <= window.innerHeight - EDGE;
+  if (side === "left") return a.left - GAP - w >= EDGE;
+  return a.right + GAP + w <= window.innerWidth - EDGE;
+}
+function snap(v) {
+  const dpr = window.devicePixelRatio || 1;
+  return Math.round(v * dpr) / dpr;
+}
+function placeTooltip(preferred, a, w, h) {
+  const side = fits(preferred, a, w, h) || !fits(OPPOSITE[preferred], a, w, h) ? preferred : OPPOSITE[preferred];
+  const clamp = (v, max) => Math.min(Math.max(v, EDGE), max - EDGE);
+  if (side === "top" || side === "bottom") {
+    const left2 = snap(clamp(a.left + a.width / 2 - w / 2, window.innerWidth - w));
+    const top2 = snap(side === "top" ? a.top - GAP - h : a.bottom + GAP);
+    return { side, left: left2, top: top2, arrow: a.left + a.width / 2 - left2 };
+  }
+  const top = snap(clamp(a.top + a.height / 2 - h / 2, window.innerHeight - h));
+  const left = snap(side === "left" ? a.left - GAP - w : a.right + GAP);
+  return { side, left, top, arrow: a.top + a.height / 2 - top };
+}
+export {
+  placeTooltip
+};
+//# sourceMappingURL=tooltipPlacement.js.map

package/dist/lib/tooltipPlacement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tooltipPlacement.js","sources":["../../src/lib/tooltipPlacement.ts"],"sourcesContent":["/**\n * Where a tooltip bubble goes, shared by <Tooltip> and installTitleTooltips so\n * the React and framework-free bubbles sit, flip and clamp identically.\n */\n\nexport type TooltipPlacement = 'top' | 'bottom' | 'left' | 'right'\n\nexport interface Placed {\n  side: TooltipPlacement\n  left: number\n  top: number\n  /** Arrow offset along the bubble edge, so it still points at the anchor after clamping. */\n  arrow: number\n}\n\nconst GAP = 8\nconst EDGE = 8\n\nconst OPPOSITE: Record<TooltipPlacement, TooltipPlacement> = {\n  top: 'bottom',\n  bottom: 'top',\n  left: 'right',\n  right: 'left'\n}\n\nfunction fits(side: TooltipPlacement, a: DOMRect, w: number, h: number) {\n  if (side === 'top') return a.top - GAP - h >= EDGE\n  if (side === 'bottom') return a.bottom + GAP + h <= window.innerHeight - EDGE\n  if (side === 'left') return a.left - GAP - w >= EDGE\n  return a.right + GAP + w <= window.innerWidth - EDGE\n}\n\n/** Onto the device-pixel grid. A bubble at a fractional offset draws its 1px\n *  border antialiased across two rows of the screen — a blurred edge. */\nfunction snap(v: number) {\n  const dpr = window.devicePixelRatio || 1\n  return Math.round(v * dpr) / dpr\n}\n\nexport function placeTooltip(\n  preferred: TooltipPlacement,\n  a: DOMRect,\n  w: number,\n  h: number\n): Placed {\n  const side =\n    fits(preferred, a, w, h) || !fits(OPPOSITE[preferred], a, w, h)\n      ? preferred\n      : OPPOSITE[preferred]\n  const clamp = (v: number, max: number) => Math.min(Math.max(v, EDGE), max - EDGE)\n  if (side === 'top' || side === 'bottom') {\n    const left = snap(clamp(a.left + a.width / 2 - w / 2, window.innerWidth - w))\n    const top = snap(side === 'top' ? a.top - GAP - h : a.bottom + GAP)\n    return { side, left, top, arrow: a.left + a.width / 2 - left }\n  }\n  const top = snap(clamp(a.top + a.height / 2 - h / 2, window.innerHeight - h))\n  const left = snap(side === 'left' ? a.left - GAP - w : a.right + GAP)\n  return { side, left, top, arrow: a.top + a.height / 2 - top }\n}\n"],"names":["left","top"],"mappings":"AAeA,MAAM,MAAM;AACZ,MAAM,OAAO;AAEb,MAAM,WAAuD;AAAA,EAC3D,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,OAAO;AACT;AAEA,SAAS,KAAK,MAAwB,GAAY,GAAW,GAAW;AACtE,MAAI,SAAS,MAAO,QAAO,EAAE,MAAM,MAAM,KAAK;AAC9C,MAAI,SAAS,SAAU,QAAO,EAAE,SAAS,MAAM,KAAK,OAAO,cAAc;AACzE,MAAI,SAAS,OAAQ,QAAO,EAAE,OAAO,MAAM,KAAK;AAChD,SAAO,EAAE,QAAQ,MAAM,KAAK,OAAO,aAAa;AAClD;AAIA,SAAS,KAAK,GAAW;AACvB,QAAM,MAAM,OAAO,oBAAoB;AACvC,SAAO,KAAK,MAAM,IAAI,GAAG,IAAI;AAC/B;AAEO,SAAS,aACd,WACA,GACA,GACA,GACQ;AACR,QAAM,OACJ,KAAK,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,SAAS,SAAS,GAAG,GAAG,GAAG,CAAC,IAC1D,YACA,SAAS,SAAS;AACxB,QAAM,QAAQ,CAAC,GAAW,QAAgB,KAAK,IAAI,KAAK,IAAI,GAAG,IAAI,GAAG,MAAM,IAAI;AAChF,MAAI,SAAS,SAAS,SAAS,UAAU;AACvC,UAAMA,QAAO,KAAK,MAAM,EAAE,OAAO,EAAE,QAAQ,IAAI,IAAI,GAAG,OAAO,aAAa,CAAC,CAAC;AAC5E,UAAMC,OAAM,KAAK,SAAS,QAAQ,EAAE,MAAM,MAAM,IAAI,EAAE,SAAS,GAAG;AAClE,WAAO,EAAE,MAAM,MAAAD,OAAM,KAAAC,MAAK,OAAO,EAAE,OAAO,EAAE,QAAQ,IAAID,MAAAA;AAAAA,EAC1D;AACA,QAAM,MAAM,KAAK,MAAM,EAAE,MAAM,EAAE,SAAS,IAAI,IAAI,GAAG,OAAO,cAAc,CAAC,CAAC;AAC5E,QAAM,OAAO,KAAK,SAAS,SAAS,EAAE,OAAO,MAAM,IAAI,EAAE,QAAQ,GAAG;AACpE,SAAO,EAAE,MAAM,MAAM,KAAK,OAAO,EAAE,MAAM,EAAE,SAAS,IAAI,IAAA;AAC1D;"}

package/dist/modal.css

@@ -0,0 +1,129 @@
+/* Modal styles for @wolffm/task-ui-components.
+ *
+ * The component shipped without these, which is why it had one adopter: every
+ * other app hand-rolled a dialog rather than reproduce the stylesheet. Import
+ * alongside the other component CSS:
+ *   import '@wolffm/task-ui-components/modal.css'
+ *
+ * Tokens only, so it themes with everything else across all 18 themes.
+ */
+
+.modal-overlay {
+  position: fixed;
+  inset: 0;
+  background-color: var(--color-bg-overlay);
+  display: flex;
+  align-items: flex-start;
+  justify-content: center;
+  padding: 8vh 16px;
+  z-index: 50;
+}
+
+.modal-card {
+  background-color: var(--color-bg-card);
+  color: var(--color-text);
+  border: 1px solid var(--color-border);
+  border-radius: var(--hdk-radius-lg);
+  padding: 20px;
+  width: min(440px, 92vw);
+  max-height: 84vh;
+  overflow: auto;
+  box-shadow: var(--hdk-shadow-lg);
+}
+
+/* The card takes focus on open so Escape works before anything inside is
+ * focused; it must not draw a focus ring for that. Controls keep theirs. */
+.modal-card:focus {
+  outline: none;
+}
+
+/* A dialog that needs room — a review step, a side-by-side. */
+.modal-card--wide {
+  width: min(680px, 94vw);
+}
+
+.modal-head {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  margin: 0 0 14px;
+}
+
+.modal-card h3 {
+  margin: 0;
+  font-size: var(--hdk-text-lg);
+  font-weight: 600;
+}
+
+.modal-card label {
+  display: block;
+  color: var(--color-text-secondary);
+  font-size: var(--hdk-text-sm);
+  margin: 12px 0 5px;
+}
+
+.modal-input {
+  width: 100%;
+  font: inherit;
+  font-size: var(--hdk-text-sm);
+  color: var(--color-text);
+  background-color: var(--color-bg-alt);
+  border: 1px solid var(--color-border);
+  border-radius: var(--hdk-radius);
+  padding: 9px 11px;
+}
+
+.modal-input:focus {
+  outline: none;
+  border-color: var(--color-primary);
+}
+
+.modal-actions {
+  display: flex;
+  justify-content: flex-end;
+  gap: var(--hdk-space-sm);
+  margin-top: 18px;
+}
+
+.modal-button {
+  font: inherit;
+  font-size: var(--hdk-text-sm);
+  padding: 8px 14px;
+  border-radius: var(--hdk-radius);
+  border: 1px solid var(--color-border);
+  background: none;
+  color: var(--color-text);
+  cursor: pointer;
+}
+
+.modal-button:hover:not(:disabled) {
+  border-color: var(--color-primary);
+}
+
+.modal-button:disabled {
+  opacity: 0.5;
+  cursor: not-allowed;
+}
+
+.modal-button--primary {
+  background-color: var(--color-primary);
+  border-color: var(--color-primary);
+  color: var(--color-on-primary);
+}
+
+/* The destructive button carries its accent on the border, not the label.
+ * `--color-danger` as bare text on the card misses AA in 11 of 18 themes —
+ * the same unvalidated accent-over-surface pair that check-usage now gates. */
+.modal-button--danger {
+  border-color: var(--color-danger);
+  color: var(--color-text);
+}
+
+/* Filled on hover, so the label takes `on-danger` — NOT `on-primary`, which is
+ * derived from primary's luminance and misses AA on a danger fill in 9 of 18
+ * themes. `on-danger` over `danger` is the pair check-contrast guarantees. */
+.modal-button--danger:hover:not(:disabled) {
+  background-color: var(--color-danger);
+  border-color: var(--color-danger);
+  color: var(--color-on-danger);
+}