@helixui/library 2.1.2-next.52 → 2.1.2-next.54

package/dist/shared/{hx-patient-banner-BKiN7nIE.js → hx-patient-banner-uE6gqLpT.js}

@@ -1,26 +1,26 @@
-import { css as c, LitElement as v, nothing as p, html as b } from "lit";
-import "./document-token-adoption-DuYNKd4k.js";
-import { property as a, state as f, query as h, customElement as u } from "lit/decorators.js";
-const _ = c`
+import { css as f, nothing as p, html as b } from "lit";
+import { property as i, state as c, query as h, customElement as v } from "lit/decorators.js";
+import { H as u } from "./helix-element-BNEYeiys.js";
+const _ = f`
   :host {
     display: block;
     width: 100%;
 
     /* ─── Private token vars (3-tier cascade) ─── */
-    --_bg: var(--hx-patient-banner-bg, var(--hx-color-neutral-50, #f9fafb));
-    --_border-color: var(--hx-patient-banner-border-color, var(--hx-color-neutral-200, #e5e7eb));
+    --_bg: var(--hx-patient-banner-bg, var(--hx-color-neutral-50, #f8fafc));
+    --_border-color: var(--hx-patient-banner-border-color, var(--hx-color-neutral-200, #e2e8f0));
     --_padding: var(
       --hx-patient-banner-padding,
       var(--hx-space-3, 0.75rem) var(--hx-space-4, 1rem)
     );
     --_gap: var(--hx-patient-banner-gap, var(--hx-space-4, 1rem));
     --_font-family: var(--hx-patient-banner-font-family, var(--hx-font-family-sans, sans-serif));
-    --_label-color: var(--hx-patient-banner-label-color, var(--hx-color-neutral-500, #6b7280));
+    --_label-color: var(--hx-patient-banner-label-color, var(--hx-color-neutral-500, #64748b));
     --_label-font-size: var(--hx-patient-banner-label-font-size, var(--hx-font-size-xs, 0.75rem));
-    --_value-color: var(--hx-patient-banner-value-color, var(--hx-color-neutral-900, #111827));
+    --_value-color: var(--hx-patient-banner-value-color, var(--hx-color-neutral-900, #0f172a));
     --_value-font-size: var(--hx-patient-banner-value-font-size, var(--hx-font-size-sm, 0.875rem));
     --_photo-size: var(--hx-patient-banner-photo-size, var(--hx-space-10, 2.5rem));
-    --_photo-bg: var(--hx-patient-banner-photo-bg, var(--hx-color-neutral-200, #e5e7eb));
+    --_photo-bg: var(--hx-patient-banner-photo-bg, var(--hx-color-neutral-200, #e2e8f0));
   }
 
   * {
@@ -47,9 +47,9 @@ const _ = c`
     flex-shrink: 0;
     width: var(--_photo-size);
     height: var(--_photo-size);
-    /* Minimum 44x44px touch target for interactive photo content. */
-    min-width: 44px;
-    min-height: 44px;
+    /* Minimum touch target for interactive photo content (WCAG 2.5.8). */
+    min-width: var(--hx-touch-target-size, 44px);
+    min-height: var(--hx-touch-target-size, 44px);
     border-radius: var(--hx-border-radius-full, 9999px);
     overflow: hidden;
     display: flex;
@@ -102,7 +102,7 @@ const _ = c`
     border-bottom-color: var(--hx-color-error-400, #f87171);
     background-color: var(--hx-color-error-50, #fef2f2);
     /* Darken label color to maintain 4.5:1 contrast on error-50 background. */
-    --_label-color: var(--hx-patient-banner-label-color, var(--hx-color-neutral-700, #374151));
+    --_label-color: var(--hx-patient-banner-label-color, var(--hx-color-neutral-700, #334155));
   }
 
   :host([aria-invalid='true']) .banner::before {
@@ -113,7 +113,7 @@ const _ = c`
     top: 0;
     bottom: 0;
     width: var(--hx-border-width-thick, 4px);
-    background-color: var(--hx-color-error-500, #ef4444);
+    background-color: var(--hx-color-error-500, #dc2626);
     border-radius: 0;
   }
 
@@ -140,13 +140,33 @@ const _ = c`
       animation: none !important;
     }
   }
+
+  /* ─── Forced Colors (Windows High Contrast) ─── */
+
+  @media (forced-colors: active) {
+    .banner {
+      border-bottom-color: CanvasText;
+    }
+
+    :host([aria-invalid='true']) .banner {
+      border-bottom-color: LinkText;
+    }
+
+    :host([aria-invalid='true']) .banner::before {
+      background-color: LinkText;
+    }
+
+    .banner__photo-area {
+      border: 1px solid CanvasText;
+    }
+  }
 `;
-var m = Object.defineProperty, g = Object.getOwnPropertyDescriptor, i = (e, l, n, o) => {
-  for (var r = o > 1 ? void 0 : o ? g(l, n) : l, s = e.length - 1, d; s >= 0; s--)
-    (d = e[s]) && (r = (o ? d(l, n, r) : d(r)) || r);
-  return o && r && m(l, n, r), r;
+var m = Object.defineProperty, g = Object.getOwnPropertyDescriptor, a = (e, l, o, n) => {
+  for (var r = n > 1 ? void 0 : n ? g(l, o) : l, s = e.length - 1, d; s >= 0; s--)
+    (d = e[s]) && (r = (n ? d(l, o, r) : d(r)) || r);
+  return n && r && m(l, o, r), r;
 };
-let t = class extends v {
+let t = class extends u {
   constructor() {
     super(...arguments), this.patientId = "", this.labelPatient = "Patient identification", this.labelName = "Patient name", this.labelMrn = "MRN", this.labelDob = "Date of birth", this.labelAllergies = "Allergies", this.labelCodeStatus = "Code status", this.enforceIdentifierRule = !0, this._identifierCount = 0, this._isViolating = !1;
   }
@@ -161,8 +181,8 @@ let t = class extends v {
   _countPopulatedIdentifiers() {
     let e = 0;
     const l = [this._nameSlot, this._mrnSlot, this._dobSlot];
-    for (const n of l)
-      n && n.assignedNodes({ flatten: !0 }).length > 0 && e++;
+    for (const o of l)
+      o && o.assignedNodes({ flatten: !0 }).length > 0 && e++;
     return e;
   }
   _checkIdentifierRule() {
@@ -242,29 +262,29 @@ let t = class extends v {
   }
 };
 t.styles = [_];
-i([
-  a({ type: String, attribute: "patient-id" })
+a([
+  i({ type: String, attribute: "patient-id" })
 ], t.prototype, "patientId", 2);
-i([
-  a({ type: String, attribute: "label-patient" })
+a([
+  i({ type: String, attribute: "label-patient" })
 ], t.prototype, "labelPatient", 2);
-i([
-  a({ type: String, attribute: "label-name" })
+a([
+  i({ type: String, attribute: "label-name" })
 ], t.prototype, "labelName", 2);
-i([
-  a({ type: String, attribute: "label-mrn" })
+a([
+  i({ type: String, attribute: "label-mrn" })
 ], t.prototype, "labelMrn", 2);
-i([
-  a({ type: String, attribute: "label-dob" })
+a([
+  i({ type: String, attribute: "label-dob" })
 ], t.prototype, "labelDob", 2);
-i([
-  a({ type: String, attribute: "label-allergies" })
+a([
+  i({ type: String, attribute: "label-allergies" })
 ], t.prototype, "labelAllergies", 2);
-i([
-  a({ type: String, attribute: "label-code-status" })
+a([
+  i({ type: String, attribute: "label-code-status" })
 ], t.prototype, "labelCodeStatus", 2);
-i([
-  a({
+a([
+  i({
     attribute: "enforce-identifier-rule",
     reflect: !0,
     converter: {
@@ -273,25 +293,25 @@ i([
     }
   })
 ], t.prototype, "enforceIdentifierRule", 2);
-i([
-  f()
+a([
+  c()
 ], t.prototype, "_identifierCount", 2);
-i([
-  f()
+a([
+  c()
 ], t.prototype, "_isViolating", 2);
-i([
+a([
   h('slot[name="name"]')
 ], t.prototype, "_nameSlot", 2);
-i([
+a([
   h('slot[name="mrn"]')
 ], t.prototype, "_mrnSlot", 2);
-i([
+a([
   h('slot[name="dob"]')
 ], t.prototype, "_dobSlot", 2);
-t = i([
-  u("hx-patient-banner")
+t = a([
+  v("hx-patient-banner")
 ], t);
 export {
   t as H
 };
-//# sourceMappingURL=hx-patient-banner-BKiN7nIE.js.map
+//# sourceMappingURL=hx-patient-banner-uE6gqLpT.js.map

package/dist/shared/hx-patient-banner-uE6gqLpT.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hx-patient-banner-uE6gqLpT.js","sources":["../../src/components/hx-patient-banner/hx-patient-banner.styles.ts","../../src/components/hx-patient-banner/hx-patient-banner.ts"],"sourcesContent":["import { css } from 'lit';\n\nexport const helixPatientBannerStyles = css`\n  :host {\n    display: block;\n    width: 100%;\n\n    /* ─── Private token vars (3-tier cascade) ─── */\n    --_bg: var(--hx-patient-banner-bg, var(--hx-color-neutral-50, #f8fafc));\n    --_border-color: var(--hx-patient-banner-border-color, var(--hx-color-neutral-200, #e2e8f0));\n    --_padding: var(\n      --hx-patient-banner-padding,\n      var(--hx-space-3, 0.75rem) var(--hx-space-4, 1rem)\n    );\n    --_gap: var(--hx-patient-banner-gap, var(--hx-space-4, 1rem));\n    --_font-family: var(--hx-patient-banner-font-family, var(--hx-font-family-sans, sans-serif));\n    --_label-color: var(--hx-patient-banner-label-color, var(--hx-color-neutral-500, #64748b));\n    --_label-font-size: var(--hx-patient-banner-label-font-size, var(--hx-font-size-xs, 0.75rem));\n    --_value-color: var(--hx-patient-banner-value-color, var(--hx-color-neutral-900, #0f172a));\n    --_value-font-size: var(--hx-patient-banner-value-font-size, var(--hx-font-size-sm, 0.875rem));\n    --_photo-size: var(--hx-patient-banner-photo-size, var(--hx-space-10, 2.5rem));\n    --_photo-bg: var(--hx-patient-banner-photo-bg, var(--hx-color-neutral-200, #e2e8f0));\n  }\n\n  * {\n    box-sizing: border-box;\n  }\n\n  /* ─── Banner Container ─── */\n\n  .banner {\n    display: flex;\n    align-items: center;\n    gap: var(--_gap);\n    padding: var(--_padding);\n    background-color: var(--_bg);\n    border-bottom: var(--hx-border-width-thin, 1px) solid var(--_border-color);\n    font-family: var(--_font-family);\n    width: 100%;\n    position: relative;\n  }\n\n  /* ─── Photo Area ─── */\n\n  .banner__photo-area {\n    flex-shrink: 0;\n    width: var(--_photo-size);\n    height: var(--_photo-size);\n    /* Minimum touch target for interactive photo content (WCAG 2.5.8). */\n    min-width: var(--hx-touch-target-size, 44px);\n    min-height: var(--hx-touch-target-size, 44px);\n    border-radius: var(--hx-border-radius-full, 9999px);\n    overflow: hidden;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    background-color: var(--_photo-bg);\n  }\n\n  /* ─── Fields Grid ─── */\n\n  .banner__fields {\n    display: flex;\n    flex-wrap: wrap;\n    gap: var(--_gap);\n    flex: 1;\n    min-width: 0;\n  }\n\n  /* ─── Individual Field ─── */\n\n  .field {\n    display: flex;\n    flex-direction: column;\n    gap: var(--hx-space-1, 0.25rem);\n    min-width: 0;\n  }\n\n  .field__label {\n    font-size: var(--_label-font-size);\n    color: var(--_label-color);\n    font-weight: var(--hx-font-weight-medium, 500);\n    line-height: var(--hx-line-height-tight, 1.25);\n    white-space: nowrap;\n  }\n\n  .field__value {\n    font-size: var(--_value-font-size);\n    color: var(--_value-color);\n    font-weight: var(--hx-font-weight-normal, 400);\n    line-height: var(--hx-line-height-normal, 1.5);\n    display: flex;\n    align-items: center;\n    gap: var(--hx-space-1, 0.25rem);\n  }\n\n  /* ─── Identifier Rule Violation ─── */\n  /* Visual indicator when Joint Commission two-identifier rule is not met. */\n\n  :host([aria-invalid='true']) .banner {\n    border-bottom-color: var(--hx-color-error-400, #f87171);\n    background-color: var(--hx-color-error-50, #fef2f2);\n    /* Darken label color to maintain 4.5:1 contrast on error-50 background. */\n    --_label-color: var(--hx-patient-banner-label-color, var(--hx-color-neutral-700, #334155));\n  }\n\n  :host([aria-invalid='true']) .banner::before {\n    content: '';\n    display: block;\n    position: absolute;\n    inset-inline-start: 0;\n    top: 0;\n    bottom: 0;\n    width: var(--hx-border-width-thick, 4px);\n    background-color: var(--hx-color-error-500, #dc2626);\n    border-radius: 0;\n  }\n\n  /* ─── Visually-hidden violation live region ─── */\n  /* Announces identifier rule violations to screen readers without visible text. */\n\n  .violation-message {\n    position: absolute;\n    width: 1px;\n    height: 1px;\n    padding: 0;\n    margin: -1px;\n    overflow: hidden;\n    clip: rect(0, 0, 0, 0);\n    white-space: nowrap;\n    border-width: 0;\n  }\n\n  /* ─── Motion reduction ─── */\n\n  @media (prefers-reduced-motion: reduce) {\n    * {\n      transition: none !important;\n      animation: none !important;\n    }\n  }\n\n  /* ─── Forced Colors (Windows High Contrast) ─── */\n\n  @media (forced-colors: active) {\n    .banner {\n      border-bottom-color: CanvasText;\n    }\n\n    :host([aria-invalid='true']) .banner {\n      border-bottom-color: LinkText;\n    }\n\n    :host([aria-invalid='true']) .banner::before {\n      background-color: LinkText;\n    }\n\n    .banner__photo-area {\n      border: 1px solid CanvasText;\n    }\n  }\n`;\n","import { html, nothing, type PropertyValues } from 'lit';\nimport '../../utilities/document-token-adoption.js';\nimport { customElement, property, state, query } from 'lit/decorators.js';\nimport { HelixElement } from '../../base/index.js';\nimport { helixPatientBannerStyles } from './hx-patient-banner.styles.js';\n\n/**\n * Patient identification banner implementing Joint Commission NPSG.01.01.01 two-identifier rule.\n * Renders as a landmark region containing named slots for patient identification fields.\n * Integrates with hx-phi-field for HIPAA-compliant display of masked identifiers.\n *\n * ## Security Model — Event Composition\n *\n * This component dispatches and propagates two categories of composed events:\n *\n * ### `hx-identifier-rule-violation` (dispatched by this component)\n * Fired with `composed: true` when the two-identifier rule is violated. The event detail\n * contains only structural metadata (`populatedIdentifiers` count, `requiredIdentifiers`\n * count) and the `patientId` attribute value. **No raw PHI is included.**\n *\n * The `patientId` is a developer-provided attribute intended as a correlation key for\n * application logic — it should be an opaque internal identifier (e.g., a UUID or\n * encounter ID), not a human-readable identifier like an MRN or SSN.\n *\n * ### `hx-phi-access` (bubbles from slotted hx-phi-field children)\n * Slotted `hx-phi-field` elements dispatch `hx-phi-access` with `composed: true`. These\n * events bubble through this component's shadow DOM via slot projection. This component\n * does NOT re-dispatch or modify these events. See `hx-phi-field` documentation for the\n * security model of those events.\n *\n * ### Consumer Responsibilities\n *\n * - **Multi-tenant isolation**: In micro-frontend architectures where multiple patient\n *   contexts share a document, scope event listeners to the appropriate DOM subtree.\n *   Both `hx-phi-access` and `hx-identifier-rule-violation` use `composed: true` and\n *   will bubble through shared ancestors across shadow boundaries.\n * - **patientId hygiene**: Set the `patient-id` attribute to an opaque internal\n *   identifier, not a human-readable clinical identifier. This value appears in\n *   composed events that cross shadow boundaries.\n *\n * @summary Patient identification banner with two-identifier rule enforcement.\n *\n * @tag hx-patient-banner\n *\n * @slot photo - Optional patient photo slot.\n * @slot name - Patient name field content.\n * @slot mrn - Medical record number field content. Use hx-phi-field for HIPAA compliance.\n * @slot dob - Date of birth field content. Use hx-phi-field for HIPAA compliance.\n * @slot allergies - Allergy status/flag content.\n * @slot code-status - Code status content.\n *\n * @csspart banner - The outer banner container.\n * @csspart photo-area - The photo slot wrapper.\n * @csspart fields - The fields grid container.\n * @csspart field - An individual field container (applied to all field wrappers).\n * @csspart field-label - The field label element.\n * @csspart field-value - The field value slot wrapper.\n * @csspart violation-message - The visually-hidden identifier rule violation status message.\n *\n * @fires {CustomEvent<PatientIdentifierRuleViolationDetail>} hx-identifier-rule-violation -\n *   Fired when fewer than 2 identifier slots are populated and enforce-identifier-rule is\n *   true. Contains structural metadata only — no raw PHI. Dispatched with `composed: true`.\n *\n * @cssprop [--hx-patient-banner-bg=var(--hx-color-neutral-50,#f9fafb)] - Banner background color.\n * @cssprop [--hx-patient-banner-border-color=var(--hx-color-neutral-200,#e5e7eb)] - Banner border color.\n * @cssprop [--hx-patient-banner-padding=var(--hx-space-3,0.75rem) var(--hx-space-4,1rem)] - Banner padding.\n * @cssprop [--hx-patient-banner-gap=var(--hx-space-4,1rem)] - Gap between banner fields.\n * @cssprop [--hx-patient-banner-font-family=var(--hx-font-family-sans,sans-serif)] - Banner font family.\n * @cssprop [--hx-patient-banner-label-color=var(--hx-color-neutral-500,#6b7280)] - Field label color.\n * @cssprop [--hx-patient-banner-label-font-size=var(--hx-font-size-xs,0.75rem)] - Field label font size.\n * @cssprop [--hx-patient-banner-value-color=var(--hx-color-neutral-900,#111827)] - Field value color.\n * @cssprop [--hx-patient-banner-value-font-size=var(--hx-font-size-sm,0.875rem)] - Field value font size.\n * @cssprop [--hx-patient-banner-photo-size=var(--hx-space-10,2.5rem)] - Photo area size.\n * @cssprop [--hx-patient-banner-photo-bg=var(--hx-color-neutral-200,#e5e7eb)] - Photo area background color when empty.\n */\n@customElement('hx-patient-banner')\nexport class HelixPatientBanner extends HelixElement {\n  static override styles = [helixPatientBannerStyles];\n\n  // ─── Public Properties ───\n\n  /**\n   * Optional patient ID used as context in identifier rule violation events.\n   * @attr patient-id\n   */\n  @property({ type: String, attribute: 'patient-id' })\n  patientId: string = '';\n\n  /**\n   * Accessible label for the banner landmark region.\n   * @attr label-patient\n   */\n  @property({ type: String, attribute: 'label-patient' })\n  labelPatient: string = 'Patient identification';\n\n  /**\n   * Visible label for the name field.\n   * @attr label-name\n   */\n  @property({ type: String, attribute: 'label-name' })\n  labelName: string = 'Patient name';\n\n  /**\n   * Visible label for the MRN field.\n   * @attr label-mrn\n   */\n  @property({ type: String, attribute: 'label-mrn' })\n  labelMrn: string = 'MRN';\n\n  /**\n   * Visible label for the date of birth field.\n   * @attr label-dob\n   */\n  @property({ type: String, attribute: 'label-dob' })\n  labelDob: string = 'Date of birth';\n\n  /**\n   * Visible label for the allergies field.\n   * @attr label-allergies\n   */\n  @property({ type: String, attribute: 'label-allergies' })\n  labelAllergies: string = 'Allergies';\n\n  /**\n   * Visible label for the code status field.\n   * @attr label-code-status\n   */\n  @property({ type: String, attribute: 'label-code-status' })\n  labelCodeStatus: string = 'Code status';\n\n  /**\n   * Whether to enforce the Joint Commission NPSG.01.01.01 two-identifier rule.\n   * When true, fires hx-identifier-rule-violation if fewer than 2 identifier\n   * slots (name, mrn, dob) are populated.\n   * @attr enforce-identifier-rule\n   */\n  @property({\n    attribute: 'enforce-identifier-rule',\n    reflect: true,\n    converter: {\n      fromAttribute: (value: string | null) => value !== 'false',\n      toAttribute: (value: boolean) => String(value),\n    },\n  })\n  enforceIdentifierRule: boolean = true;\n\n  // ─── Internal State ───\n\n  /** @internal */\n  @state() private _identifierCount: number = 0;\n\n  /** @internal */\n  @state() private _isViolating: boolean = false;\n\n  // ─── Slot Queries ───\n\n  /** @internal */\n  @query('slot[name=\"name\"]') private _nameSlot!: HTMLSlotElement | null;\n\n  /** @internal */\n  @query('slot[name=\"mrn\"]') private _mrnSlot!: HTMLSlotElement | null;\n\n  /** @internal */\n  @query('slot[name=\"dob\"]') private _dobSlot!: HTMLSlotElement | null;\n\n  // ─── Lifecycle ───\n\n  override connectedCallback(): void {\n    super.connectedCallback();\n    this.setAttribute('role', 'banner');\n    this.setAttribute('aria-label', this.labelPatient);\n  }\n\n  protected override updated(changedProperties: PropertyValues<this>): void {\n    super.updated(changedProperties);\n\n    if (changedProperties.has('labelPatient')) {\n      this.setAttribute('aria-label', this.labelPatient);\n    }\n\n    if (changedProperties.has('enforceIdentifierRule')) {\n      this._checkIdentifierRule();\n    }\n  }\n\n  // ─── Private Helpers ───\n\n  private _countPopulatedIdentifiers(): number {\n    let count = 0;\n\n    const slots = [this._nameSlot, this._mrnSlot, this._dobSlot];\n    for (const slot of slots) {\n      if (slot && slot.assignedNodes({ flatten: true }).length > 0) {\n        count++;\n      }\n    }\n\n    return count;\n  }\n\n  private _checkIdentifierRule(): void {\n    const count = this._countPopulatedIdentifiers();\n    this._identifierCount = count;\n\n    if (this.enforceIdentifierRule && count < 2) {\n      this._isViolating = true;\n      this.setAttribute('aria-invalid', 'true');\n      this.dispatchEvent(\n        new CustomEvent<PatientIdentifierRuleViolationDetail>('hx-identifier-rule-violation', {\n          bubbles: true,\n          composed: true,\n          detail: {\n            populatedIdentifiers: count,\n            requiredIdentifiers: 2,\n            patientId: this.patientId,\n          },\n        }),\n      );\n    } else {\n      this._isViolating = false;\n      this.removeAttribute('aria-invalid');\n    }\n  }\n\n  // ─── Event Handlers ───\n\n  private _handleSlotChange(): void {\n    this._checkIdentifierRule();\n  }\n\n  // ─── Render ───\n\n  override render() {\n    const violationMessage = this._isViolating\n      ? `Warning: patient identification incomplete. ${this._identifierCount} of 2 required identifiers present.`\n      : nothing;\n\n    return html`\n      <div part=\"banner\" class=\"banner\">\n        <div part=\"photo-area\" class=\"banner__photo-area\" aria-hidden=\"true\">\n          <slot name=\"photo\"></slot>\n        </div>\n\n        <div part=\"fields\" class=\"banner__fields\">\n          <div part=\"field\" class=\"field\">\n            <span part=\"field-label\" class=\"field__label\">${this.labelName}</span>\n            <div part=\"field-value\" class=\"field__value\">\n              <slot name=\"name\" @slotchange=${this._handleSlotChange}></slot>\n            </div>\n          </div>\n\n          <div part=\"field\" class=\"field\">\n            <span part=\"field-label\" class=\"field__label\">${this.labelMrn}</span>\n            <div part=\"field-value\" class=\"field__value\">\n              <slot name=\"mrn\" @slotchange=${this._handleSlotChange}></slot>\n            </div>\n          </div>\n\n          <div part=\"field\" class=\"field\">\n            <span part=\"field-label\" class=\"field__label\">${this.labelDob}</span>\n            <div part=\"field-value\" class=\"field__value\">\n              <slot name=\"dob\" @slotchange=${this._handleSlotChange}></slot>\n            </div>\n          </div>\n\n          <div part=\"field\" class=\"field\">\n            <span part=\"field-label\" class=\"field__label\">${this.labelAllergies}</span>\n            <div part=\"field-value\" class=\"field__value\">\n              <slot name=\"allergies\"></slot>\n            </div>\n          </div>\n\n          <div part=\"field\" class=\"field\">\n            <span part=\"field-label\" class=\"field__label\">${this.labelCodeStatus}</span>\n            <div part=\"field-value\" class=\"field__value\">\n              <slot name=\"code-status\"></slot>\n            </div>\n          </div>\n        </div>\n      </div>\n\n      ${violationMessage !== nothing\n        ? html`<div\n            part=\"violation-message\"\n            class=\"violation-message\"\n            role=\"alert\"\n            aria-live=\"assertive\"\n          >\n            ${violationMessage}\n          </div>`\n        : nothing}\n    `;\n  }\n}\n\n/**\n * Event detail for identifier rule violations. Contains only structural metadata\n * about the validation state — never raw PHI values.\n *\n * **Security note**: The `patientId` field reflects the `patient-id` HTML attribute,\n * which should be set to an opaque internal identifier (UUID, encounter ID), not a\n * human-readable clinical identifier. This value crosses shadow DOM boundaries via\n * `composed: true` events.\n */\nexport interface PatientIdentifierRuleViolationDetail {\n  /** Number of identifier slots currently populated (0, 1, or 2). */\n  populatedIdentifiers: number;\n  /** Minimum required identifiers per NPSG.01.01.01 (always 2). */\n  requiredIdentifiers: number;\n  /** Opaque patient identifier from the patient-id attribute. Should NOT contain raw PHI. */\n  patientId: string;\n}\n\ndeclare global {\n  interface HTMLElementTagNameMap {\n    'hx-patient-banner': HelixPatientBanner;\n  }\n}\n"],"names":["helixPatientBannerStyles","css","HelixPatientBanner","HelixElement","changedProperties","count","slots","slot","violationMessage","nothing","html","__decorateClass","property","value","state","query","customElement"],"mappings":";;;AAEO,MAAMA,IAA2BC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;;;;AC0EjC,IAAMC,IAAN,cAAiCC,EAAa;AAAA,EAA9C,cAAA;AAAA,UAAA,GAAA,SAAA,GAUL,KAAA,YAAoB,IAOpB,KAAA,eAAuB,0BAOvB,KAAA,YAAoB,gBAOpB,KAAA,WAAmB,OAOnB,KAAA,WAAmB,iBAOnB,KAAA,iBAAyB,aAOzB,KAAA,kBAA0B,eAgB1B,KAAA,wBAAiC,IAKxB,KAAQ,mBAA2B,GAGnC,KAAQ,eAAwB;AAAA,EAAA;AAAA;AAAA,EAehC,oBAA0B;AACjC,UAAM,kBAAA,GACN,KAAK,aAAa,QAAQ,QAAQ,GAClC,KAAK,aAAa,cAAc,KAAK,YAAY;AAAA,EACnD;AAAA,EAEmB,QAAQC,GAA+C;AACxE,UAAM,QAAQA,CAAiB,GAE3BA,EAAkB,IAAI,cAAc,KACtC,KAAK,aAAa,cAAc,KAAK,YAAY,GAG/CA,EAAkB,IAAI,uBAAuB,KAC/C,KAAK,qBAAA;AAAA,EAET;AAAA;AAAA,EAIQ,6BAAqC;AAC3C,QAAIC,IAAQ;AAEZ,UAAMC,IAAQ,CAAC,KAAK,WAAW,KAAK,UAAU,KAAK,QAAQ;AAC3D,eAAWC,KAAQD;AACjB,MAAIC,KAAQA,EAAK,cAAc,EAAE,SAAS,GAAA,CAAM,EAAE,SAAS,KACzDF;AAIJ,WAAOA;AAAA,EACT;AAAA,EAEQ,uBAA6B;AACnC,UAAMA,IAAQ,KAAK,2BAAA;AACnB,SAAK,mBAAmBA,GAEpB,KAAK,yBAAyBA,IAAQ,KACxC,KAAK,eAAe,IACpB,KAAK,aAAa,gBAAgB,MAAM,GACxC,KAAK;AAAA,MACH,IAAI,YAAkD,gCAAgC;AAAA,QACpF,SAAS;AAAA,QACT,UAAU;AAAA,QACV,QAAQ;AAAA,UACN,sBAAsBA;AAAA,UACtB,qBAAqB;AAAA,UACrB,WAAW,KAAK;AAAA,QAAA;AAAA,MAClB,CACD;AAAA,IAAA,MAGH,KAAK,eAAe,IACpB,KAAK,gBAAgB,cAAc;AAAA,EAEvC;AAAA;AAAA,EAIQ,oBAA0B;AAChC,SAAK,qBAAA;AAAA,EACP;AAAA;AAAA,EAIS,SAAS;AAChB,UAAMG,IAAmB,KAAK,eAC1B,+CAA+C,KAAK,gBAAgB,wCACpEC;AAEJ,WAAOC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,4DAQiD,KAAK,SAAS;AAAA;AAAA,8CAE5B,KAAK,iBAAiB;AAAA;AAAA;AAAA;AAAA;AAAA,4DAKR,KAAK,QAAQ;AAAA;AAAA,6CAE5B,KAAK,iBAAiB;AAAA;AAAA;AAAA;AAAA;AAAA,4DAKP,KAAK,QAAQ;AAAA;AAAA,6CAE5B,KAAK,iBAAiB;AAAA;AAAA;AAAA;AAAA;AAAA,4DAKP,KAAK,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,4DAOnB,KAAK,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAQxEF,MAAqBC,IACnBC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,cAMIF,CAAgB;AAAA,oBAEpBC,CAAO;AAAA;AAAA,EAEf;AACF;AAzNaP,EACK,SAAS,CAACF,CAAwB;AASlDW,EAAA;AAAA,EADCC,EAAS,EAAE,MAAM,QAAQ,WAAW,cAAc;AAAA,GATxCV,EAUX,WAAA,aAAA,CAAA;AAOAS,EAAA;AAAA,EADCC,EAAS,EAAE,MAAM,QAAQ,WAAW,iBAAiB;AAAA,GAhB3CV,EAiBX,WAAA,gBAAA,CAAA;AAOAS,EAAA;AAAA,EADCC,EAAS,EAAE,MAAM,QAAQ,WAAW,cAAc;AAAA,GAvBxCV,EAwBX,WAAA,aAAA,CAAA;AAOAS,EAAA;AAAA,EADCC,EAAS,EAAE,MAAM,QAAQ,WAAW,aAAa;AAAA,GA9BvCV,EA+BX,WAAA,YAAA,CAAA;AAOAS,EAAA;AAAA,EADCC,EAAS,EAAE,MAAM,QAAQ,WAAW,aAAa;AAAA,GArCvCV,EAsCX,WAAA,YAAA,CAAA;AAOAS,EAAA;AAAA,EADCC,EAAS,EAAE,MAAM,QAAQ,WAAW,mBAAmB;AAAA,GA5C7CV,EA6CX,WAAA,kBAAA,CAAA;AAOAS,EAAA;AAAA,EADCC,EAAS,EAAE,MAAM,QAAQ,WAAW,qBAAqB;AAAA,GAnD/CV,EAoDX,WAAA,mBAAA,CAAA;AAgBAS,EAAA;AAAA,EARCC,EAAS;AAAA,IACR,WAAW;AAAA,IACX,SAAS;AAAA,IACT,WAAW;AAAA,MACT,eAAe,CAACC,MAAyBA,MAAU;AAAA,MACnD,aAAa,CAACA,MAAmB,OAAOA,CAAK;AAAA,IAAA;AAAA,EAC/C,CACD;AAAA,GAnEUX,EAoEX,WAAA,yBAAA,CAAA;AAKiBS,EAAA;AAAA,EAAhBG,EAAA;AAAM,GAzEIZ,EAyEM,WAAA,oBAAA,CAAA;AAGAS,EAAA;AAAA,EAAhBG,EAAA;AAAM,GA5EIZ,EA4EM,WAAA,gBAAA,CAAA;AAKmBS,EAAA;AAAA,EAAnCI,EAAM,mBAAmB;AAAA,GAjFfb,EAiFyB,WAAA,aAAA,CAAA;AAGDS,EAAA;AAAA,EAAlCI,EAAM,kBAAkB;AAAA,GApFdb,EAoFwB,WAAA,YAAA,CAAA;AAGAS,EAAA;AAAA,EAAlCI,EAAM,kBAAkB;AAAA,GAvFdb,EAuFwB,WAAA,YAAA,CAAA;AAvFxBA,IAANS,EAAA;AAAA,EADNK,EAAc,mBAAmB;AAAA,GACrBd,CAAA;"}

package/dist/shared/{hx-phi-field-DD1qcBSO.js → hx-phi-field-BC_XowhC.js}

@@ -1,7 +1,8 @@
-import { css as c, LitElement as p, html as h } from "lit";
-import "./document-token-adoption-DuYNKd4k.js";
-import { property as n, state as u, customElement as f } from "lit/decorators.js";
-const m = c`
+import { css as c, html as h } from "lit";
+import { classMap as u } from "lit/directives/class-map.js";
+import { property as n, state as p, customElement as f } from "lit/decorators.js";
+import { H as m } from "./helix-element-BNEYeiys.js";
+const _ = c`
   :host {
     display: inline-flex;
   }
@@ -20,12 +21,12 @@ const m = c`
   .phi-field__value--masked {
     user-select: none;
     -webkit-user-select: none;
-    color: var(--hx-phi-field-masked-color, var(--hx-color-neutral-500, #6b7280));
+    color: var(--hx-phi-field-masked-color, var(--hx-color-neutral-500, #64748b));
     letter-spacing: var(--hx-phi-field-letter-spacing, 0.1em);
   }
 
   .phi-field__value--revealed {
-    color: var(--hx-phi-field-value-color, var(--hx-color-neutral-900, #111827));
+    color: var(--hx-phi-field-value-color, var(--hx-color-neutral-900, #0f172a));
   }
 
   /* ─── Screen Reader Status ─── */
@@ -47,9 +48,12 @@ const m = c`
   .phi-field__toggle {
     display: inline-flex;
     align-items: center;
+    justify-content: center;
     background: none;
     border: none;
     padding: var(--hx-space-1, 0.25rem);
+    min-width: var(--hx-touch-target-min, 2.75rem);
+    min-height: var(--hx-touch-target-min, 2.75rem);
     color: var(--hx-phi-field-toggle-color, var(--hx-color-primary-500, #2563eb));
     cursor: pointer;
     line-height: 1;
@@ -113,49 +117,117 @@ const m = c`
     }
   }
 `;
-var _ = Object.defineProperty, b = Object.getOwnPropertyDescriptor, s = (e, t, l, r) => {
-  for (var i = r > 1 ? void 0 : r ? b(t, l) : t, o = e.length - 1, d; o >= 0; o--)
-    (d = e[o]) && (i = (r ? d(t, l, i) : d(i)) || i);
-  return r && i && _(t, l, i), i;
+var b = Object.defineProperty, v = Object.getOwnPropertyDescriptor, r = (e, t, s, o) => {
+  for (var a = o > 1 ? void 0 : o ? v(t, s) : t, l = e.length - 1, d; l >= 0; l--)
+    (d = e[l]) && (a = (o ? d(t, s, a) : d(a)) || a);
+  return o && a && b(t, s, a), a;
 };
-let a = class extends p {
+let i = class extends m {
   constructor() {
-    super(...arguments), this.data = "", this.fieldType = "ssn", this.fieldId = "", this.clipboardTimeout = 3e4, this.label = "", this.disabled = !1, this._masked = !0, this._clipboardTimer = null;
+    super(...arguments), this.data = "", this.fieldType = "ssn", this.fieldId = "", this.clipboardTimeout = 3e4, this.label = "", this.autoHideDelay = 60, this.disabled = !1, this._masked = !0, this._clipboardTimer = null, this._autoHideTimer = null, this._boundHandleVisibilityChange = () => {
+      document.visibilityState === "hidden" && (this._masked && this._clipboardTimer === null || this._clearClipboard());
+    }, this._boundResetAutoHideTimer = () => {
+      this._resetAutoHideTimer();
+    };
   }
-  // ─── Lifecycle ───
   connectedCallback() {
-    super.connectedCallback(), this.setAttribute("autocomplete", "off"), this.hasAttribute("data");
+    if (super.connectedCallback(), this.setAttribute("autocomplete", "off"), document.addEventListener("visibilitychange", this._boundHandleVisibilityChange), this.hasAttribute("data")) {
+      const e = this.getAttribute("data");
+      e !== null && (this.data = e), this.removeAttribute("data");
+    }
   }
   disconnectedCallback() {
-    super.disconnectedCallback(), this._cancelClipboardTimer();
+    super.disconnectedCallback(), this._cancelClipboardTimer(), this._cancelAutoHideTimer(), document.removeEventListener("visibilitychange", this._boundHandleVisibilityChange);
   }
   // ─── Private Helpers ───
   /** @internal */
   _cancelClipboardTimer() {
     this._clipboardTimer !== null && (clearTimeout(this._clipboardTimer), this._clipboardTimer = null);
   }
-  /** @internal */
-  _scheduleClipboardClear() {
-    this._cancelClipboardTimer(), this._clipboardTimer = setTimeout(() => {
-      this._clearClipboard();
-    }, this.clipboardTimeout);
+  /** @internal Cancel the auto-hide timer if running. */
+  _cancelAutoHideTimer() {
+    this._autoHideTimer !== null && (clearTimeout(this._autoHideTimer), this._autoHideTimer = null), this._removeAutoHideInteractionListeners();
   }
-  /** @internal */
-  _clearClipboard() {
-    var e;
-    this._clipboardTimer = null, typeof navigator < "u" && navigator.clipboard && ((e = navigator == null ? void 0 : navigator.clipboard) == null || e.writeText("").catch(() => {
-    })), this.dispatchEvent(
+  /** @internal Start the auto-hide countdown. Resets if already running. */
+  _scheduleAutoHide() {
+    this._cancelAutoHideTimer(), !(this.autoHideDelay <= 0) && (this._addAutoHideInteractionListeners(), this._autoHideTimer = setTimeout(() => {
+      this._autoHideTimer = null, this._autoHide();
+    }, this.autoHideDelay * 1e3));
+  }
+  /** @internal Reset the auto-hide timer on user interaction. */
+  _resetAutoHideTimer() {
+    this._autoHideTimer !== null && this._scheduleAutoHide();
+  }
+  /** @internal Auto-hide PHI and dispatch audit event. */
+  _autoHide() {
+    this._masked || (this._removeAutoHideInteractionListeners(), this._masked = !0, this.dispatchEvent(
       new CustomEvent("hx-phi-access", {
         bubbles: !0,
         composed: !0,
         detail: {
           fieldId: this.fieldId || this.id || "",
-          action: "clipboard-clear",
+          action: "auto-hide",
           timestamp: (/* @__PURE__ */ new Date()).toISOString(),
           fieldType: this.fieldType
         }
       })
-    ), this._masked = !0;
+    ));
+  }
+  /** @internal Add interaction listeners to reset auto-hide timer. */
+  _addAutoHideInteractionListeners() {
+    for (const e of i._AUTO_HIDE_INTERACTION_EVENTS)
+      this.addEventListener(e, this._boundResetAutoHideTimer);
+  }
+  /** @internal Remove interaction listeners. */
+  _removeAutoHideInteractionListeners() {
+    for (const e of i._AUTO_HIDE_INTERACTION_EVENTS)
+      this.removeEventListener(e, this._boundResetAutoHideTimer);
+  }
+  /** @internal */
+  _scheduleClipboardClear() {
+    this._cancelClipboardTimer(), this._clipboardTimer = setTimeout(() => {
+      this._clearClipboard();
+    }, this.clipboardTimeout);
+  }
+  /** @internal */
+  _clearClipboard() {
+    this._cancelClipboardTimer(), this._cancelAutoHideTimer(), this._masked = !0;
+    const e = (t) => {
+      this.dispatchEvent(
+        new CustomEvent("hx-phi-access", {
+          bubbles: !0,
+          composed: !0,
+          detail: {
+            fieldId: this.fieldId || this.id || "",
+            action: t ? "clipboard-clear" : "clipboard-clear-failed",
+            timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+            fieldType: this.fieldType
+          }
+        })
+      );
+    };
+    if (typeof navigator > "u") {
+      e(!1);
+      return;
+    }
+    try {
+      const t = navigator.clipboard;
+      if (!t) {
+        e(!1);
+        return;
+      }
+      const s = t.writeText;
+      if (typeof s != "function") {
+        e(!1);
+        return;
+      }
+      Promise.resolve(s.call(t, "")).then(
+        () => e(!0),
+        () => e(!1)
+      );
+    } catch {
+      e(!1);
+    }
   }
   /** @internal */
   _getMaskedValue() {
@@ -167,11 +239,11 @@ let a = class extends p {
       }
       case "mrn": {
         const e = this.data.split(""), t = [];
-        e.forEach((o, d) => {
-          /[a-zA-Z0-9]/.test(o) && t.push(d);
+        e.forEach((l, d) => {
+          /[a-zA-Z0-9]/.test(l) && t.push(d);
         });
-        const l = Math.min(4, t.length), r = t.length - l, i = new Set(t.slice(0, r));
-        return e.map((o, d) => i.has(d) ? "*" : o).join("");
+        const s = Math.min(4, t.length), o = t.length - s, a = new Set(t.slice(0, o));
+        return e.map((l, d) => a.has(d) ? "*" : l).join("");
       }
       case "dob":
         return this.data.replace(/\d/g, "*");
@@ -197,7 +269,7 @@ let a = class extends p {
           fieldType: this.fieldType
         }
       })
-    ), this._masked ? (this._masked = !1, this._scheduleClipboardClear()) : (this._cancelClipboardTimer(), this._masked = !0));
+    ), this._masked ? (this._masked = !1, this._scheduleClipboardClear(), this._scheduleAutoHide()) : (this._cancelAutoHideTimer(), this._masked = !0));
   }
   /** @internal */
   _handleCopy(e) {
@@ -247,11 +319,11 @@ let a = class extends p {
   }
   // ─── Render ───
   render() {
-    const e = this.label || "Protected health information", t = `${e} is masked`, l = `${e} is revealed`, r = `Reveal ${e.toLowerCase()}`, i = `Hide ${e.toLowerCase()}`;
+    const e = this.label || "Protected health information", t = `${e} is masked`, s = `${e} is revealed`, o = `Reveal ${e.toLowerCase()}`, a = `Hide ${e.toLowerCase()}`;
     return h`
       <div
         part="container"
-        class="phi-field${this.disabled ? " phi-field--disabled" : ""}"
+        class=${u({ "phi-field": !0, "phi-field--disabled": this.disabled })}
         @copy=${this._handleCopy}
         @paste=${this._handlePaste}
       >
@@ -264,14 +336,14 @@ let a = class extends p {
               >${this.data}</span
             >`}
         <span role="status" aria-live="polite" aria-atomic="true" class="phi-field__status">
-          ${this._masked ? t : l}
+          ${this._masked ? t : s}
         </span>
         <button
           part="toggle"
           class="phi-field__toggle"
           type="button"
           ?disabled=${this.disabled}
-          aria-label=${this._masked ? r : i}
+          aria-label=${this._masked ? o : a}
           aria-pressed=${String(!this._masked)}
           @click=${this._handleToggle}
         >
@@ -281,32 +353,42 @@ let a = class extends p {
     `;
   }
 };
-a.styles = [m];
-s([
+i.styles = [_];
+i._AUTO_HIDE_INTERACTION_EVENTS = [
+  "mouseenter",
+  "mousemove",
+  "focusin",
+  "keydown",
+  "pointerdown"
+];
+r([
   n({ attribute: !1 })
-], a.prototype, "data", 2);
-s([
+], i.prototype, "data", 2);
+r([
   n({ type: String, reflect: !0, attribute: "field-type" })
-], a.prototype, "fieldType", 2);
-s([
+], i.prototype, "fieldType", 2);
+r([
   n({ type: String, attribute: "field-id" })
-], a.prototype, "fieldId", 2);
-s([
+], i.prototype, "fieldId", 2);
+r([
   n({ type: Number, attribute: "clipboard-timeout" })
-], a.prototype, "clipboardTimeout", 2);
-s([
+], i.prototype, "clipboardTimeout", 2);
+r([
   n({ type: String })
-], a.prototype, "label", 2);
-s([
+], i.prototype, "label", 2);
+r([
+  n({ type: Number, attribute: "auto-hide-delay" })
+], i.prototype, "autoHideDelay", 2);
+r([
   n({ type: Boolean, reflect: !0 })
-], a.prototype, "disabled", 2);
-s([
-  u()
-], a.prototype, "_masked", 2);
-a = s([
+], i.prototype, "disabled", 2);
+r([
+  p()
+], i.prototype, "_masked", 2);
+i = r([
   f("hx-phi-field")
-], a);
+], i);
 export {
-  a as H
+  i as H
 };
-//# sourceMappingURL=hx-phi-field-DD1qcBSO.js.map
+//# sourceMappingURL=hx-phi-field-BC_XowhC.js.map

package/dist/shared/hx-phi-field-BC_XowhC.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hx-phi-field-BC_XowhC.js","sources":["../../src/components/hx-phi-field/hx-phi-field.styles.ts","../../src/components/hx-phi-field/hx-phi-field.ts"],"sourcesContent":["import { css } from 'lit';\n\nexport const helixPhiFieldStyles = css`\n  :host {\n    display: inline-flex;\n  }\n\n  /* ─── Container ─── */\n\n  .phi-field {\n    display: inline-flex;\n    align-items: center;\n    gap: var(--hx-space-2, 0.5rem);\n    font-family: var(--hx-phi-field-font-family, var(--hx-font-family-mono, monospace));\n  }\n\n  /* ─── Value ─── */\n\n  .phi-field__value--masked {\n    user-select: none;\n    -webkit-user-select: none;\n    color: var(--hx-phi-field-masked-color, var(--hx-color-neutral-500, #64748b));\n    letter-spacing: var(--hx-phi-field-letter-spacing, 0.1em);\n  }\n\n  .phi-field__value--revealed {\n    color: var(--hx-phi-field-value-color, var(--hx-color-neutral-900, #0f172a));\n  }\n\n  /* ─── Screen Reader Status ─── */\n\n  .phi-field__status {\n    position: absolute;\n    width: 1px;\n    height: 1px;\n    overflow: hidden;\n    clip: rect(0, 0, 0, 0);\n    white-space: nowrap;\n    border: 0;\n    padding: 0;\n    margin: -1px;\n  }\n\n  /* ─── Toggle Button ─── */\n\n  .phi-field__toggle {\n    display: inline-flex;\n    align-items: center;\n    justify-content: center;\n    background: none;\n    border: none;\n    padding: var(--hx-space-1, 0.25rem);\n    min-width: var(--hx-touch-target-min, 2.75rem);\n    min-height: var(--hx-touch-target-min, 2.75rem);\n    color: var(--hx-phi-field-toggle-color, var(--hx-color-primary-500, #2563eb));\n    cursor: pointer;\n    line-height: 1;\n    border-radius: var(--hx-border-radius-sm, 0.25rem);\n  }\n\n  .phi-field__toggle:focus-visible {\n    outline: var(--hx-focus-ring-width, 2px) solid\n      var(\n        --hx-phi-field-focus-ring-color,\n        var(--hx-focus-ring-color, var(--hx-color-primary-500, #2563eb))\n      );\n    outline-offset: var(--hx-focus-ring-offset, 2px);\n  }\n\n  .phi-field__toggle:hover {\n    opacity: var(--hx-opacity-90, 0.9);\n  }\n\n  .phi-field__toggle:active {\n    opacity: var(--hx-opacity-50, 0.5);\n  }\n\n  .phi-field__toggle svg {\n    width: 1em;\n    height: 1em;\n    pointer-events: none;\n  }\n\n  /* ─── Disabled State ─── */\n\n  :host([disabled]) {\n    opacity: var(--hx-phi-field-disabled-opacity, var(--hx-opacity-50, 0.5));\n    pointer-events: none;\n    cursor: not-allowed;\n  }\n\n  .phi-field--disabled .phi-field__toggle {\n    cursor: not-allowed;\n  }\n\n  /* ─── Reduced Motion ─── */\n\n  @media (prefers-reduced-motion: reduce) {\n    .phi-field__toggle {\n      transition: none;\n    }\n  }\n\n  /* ─── Forced Colors (Windows High Contrast Mode) ─── */\n\n  @media (forced-colors: active) {\n    .phi-field__toggle {\n      border: 1px solid ButtonText;\n      forced-color-adjust: none;\n    }\n\n    .phi-field__toggle:focus-visible {\n      outline: 2px solid Highlight;\n      outline-offset: 2px;\n    }\n  }\n`;\n","import { html, type TemplateResult } from 'lit';\nimport { classMap } from 'lit/directives/class-map.js';\nimport '../../utilities/document-token-adoption.js';\nimport { customElement, property, state } from 'lit/decorators.js';\nimport { HelixElement } from '../../base/index.js';\nimport { helixPhiFieldStyles } from './hx-phi-field.styles.js';\nimport { devWarn } from '../../utils/dev-warn.js';\n\n/**\n * HIPAA-compliant field component for rendering masked Protected Health Information (PHI).\n * PHI is masked by default and only rendered to the DOM when explicitly revealed. Access\n * events are fired on reveal, hide, and clipboard auto-clear for audit trail purposes.\n *\n * ## Security Model — Event Composition\n *\n * The `hx-phi-access` event is dispatched with `composed: true` so it crosses shadow DOM\n * boundaries and reaches application-level audit listeners. This is intentional — audit\n * trail events MUST reach the host application regardless of shadow DOM nesting depth.\n *\n * **PHI is never included in event details.** The `PhiAccessEventDetail` payload contains\n * only audit metadata: `fieldId`, `action`, `timestamp`, and `fieldType`. The actual PHI\n * value (the `data` property) is deliberately excluded from all dispatched events.\n *\n * ### Consumer Responsibilities\n *\n * - **Audit logging**: Listen for `hx-phi-access` at the application root to build a\n *   HIPAA-compliant access audit trail. The `fieldId` and `timestamp` fields correlate\n *   access events to specific data elements without exposing the data itself.\n * - **Multi-tenant isolation**: In micro-frontend architectures where multiple patient\n *   contexts share a document, consumers MUST scope their `hx-phi-access` listeners to\n *   the appropriate DOM subtree (e.g., listen on a container element rather than\n *   `document`). Composed events from one patient context will bubble through shared\n *   ancestors.\n * - **Do not extend event details with PHI**: When wrapping this component, never add\n *   the raw `data` value to re-dispatched events. The separation of audit metadata from\n *   PHI content is a deliberate security boundary.\n *\n * @summary HIPAA-compliant field for rendering masked Protected Health Information.\n *\n * @tag hx-phi-field\n *\n * @csspart container - The outer wrapper element.\n * @csspart value - The value display span (masked or revealed).\n * @csspart toggle - The reveal/hide toggle button.\n *\n * @fires {CustomEvent<PhiAccessEventDetail>} hx-phi-access - Fired on reveal, hide,\n *   auto-hide, clipboard-clear, and clipboard-clear-failed actions. Contains audit\n *   metadata only — never raw PHI. Dispatched with `composed: true` to cross shadow\n *   boundaries for application-level audit listeners.\n *\n * @cssprop [--hx-phi-field-font-family=var(--hx-font-family-mono,monospace)] - Font family for the masked value.\n * @cssprop [--hx-phi-field-value-color=var(--hx-color-neutral-900,#111827)] - Value text color.\n * @cssprop [--hx-phi-field-masked-color=var(--hx-color-neutral-500,#6b7280)] - Masked value text color.\n * @cssprop [--hx-phi-field-toggle-color=var(--hx-color-primary-500,#2563eb)] - Toggle button color.\n * @cssprop [--hx-phi-field-focus-ring-color=var(--hx-focus-ring-color,var(--hx-color-primary-500,#2563eb))] - Focus ring color.\n * @cssprop [--hx-phi-field-disabled-opacity=var(--hx-opacity-50,0.5)] - Opacity applied when the field is disabled.\n * @cssprop [--hx-phi-field-auto-hide-warning-color=var(--hx-color-warning-500,#f59e0b)] - Color for auto-hide countdown warning (future use).\n */\n@customElement('hx-phi-field')\nexport class HelixPhiField extends HelixElement {\n  static override styles = [helixPhiFieldStyles];\n\n  // ─── Public Properties ───\n\n  /**\n   * The Protected Health Information value to display or mask.\n   * Must be set via the JavaScript property (`element.data = \"...\"`) — not as an HTML attribute.\n   * Setting PHI as an HTML attribute exposes it in the DOM and browser caches (HIPAA violation).\n   */\n  @property({ attribute: false })\n  data: string = '';\n\n  /**\n   * The type of PHI field. Controls the masking pattern applied.\n   * @attr field-type\n   */\n  @property({ type: String, reflect: true, attribute: 'field-type' })\n  fieldType: 'ssn' | 'mrn' | 'dob' | 'insurance' = 'ssn';\n\n  /**\n   * Identifier used in audit events. Falls back to the element's id attribute.\n   * @attr field-id\n   */\n  @property({ type: String, attribute: 'field-id' })\n  fieldId: string = '';\n\n  /**\n   * Milliseconds after clipboard write before the clipboard is automatically cleared.\n   * Defaults to 30000 (30 seconds).\n   * @attr clipboard-timeout\n   */\n  @property({ type: Number, attribute: 'clipboard-timeout' })\n  clipboardTimeout: number = 30000;\n\n  /**\n   * Accessible label describing the PHI field. Used as a prefix in screen reader\n   * announcements (e.g., \"Social Security Number is masked\").\n   * @attr label\n   */\n  @property({ type: String })\n  label: string = '';\n\n  /**\n   * Seconds of inactivity after reveal before PHI is automatically re-masked.\n   * Prevents PHI from remaining visible indefinitely when a clinician walks away.\n   * Set to 0 to disable auto-hide. Defaults to 60 seconds.\n   * @attr auto-hide-delay\n   */\n  @property({ type: Number, attribute: 'auto-hide-delay' })\n  autoHideDelay: number = 60;\n\n  /**\n   * When set, disables all interaction with the field and prevents reveal.\n   * @attr disabled\n   * @reflect\n   */\n  @property({ type: Boolean, reflect: true })\n  disabled: boolean = false;\n\n  // ─── Internal State ───\n\n  /** @internal */\n  @state() private _masked = true;\n\n  /** @internal */\n  private _clipboardTimer: ReturnType<typeof setTimeout> | null = null;\n\n  /** @internal Timer ID for auto-re-mask after reveal. */\n  private _autoHideTimer: ReturnType<typeof setTimeout> | null = null;\n\n  // ─── Lifecycle ───\n\n  /** @internal Bound reference for visibilitychange listener cleanup. */\n  private readonly _boundHandleVisibilityChange = (): void => {\n    if (document.visibilityState !== 'hidden') return;\n    // Only clear if the field has been revealed (unmasked) or an active\n    // clipboard-clear timer is running. Otherwise there's nothing to clear,\n    // and emitting hx-phi-access with action: 'clipboard-clear' would pollute\n    // the HIPAA audit log with events for fields that were never accessed.\n    if (this._masked && this._clipboardTimer === null) return;\n    this._clearClipboard();\n  };\n\n  /** @internal Bound reference for interaction-based auto-hide timer reset. */\n  private readonly _boundResetAutoHideTimer = (): void => {\n    this._resetAutoHideTimer();\n  };\n\n  override connectedCallback(): void {\n    super.connectedCallback();\n    // Enforce HIPAA compliance: prevent browser autofill on the host element\n    this.setAttribute('autocomplete', 'off');\n    // HIPAA: Clear clipboard immediately when tab is hidden (prevents PHI exposure\n    // when setTimeout is throttled in backgrounded tabs on mobile/laptop lid close).\n    document.addEventListener('visibilitychange', this._boundHandleVisibilityChange);\n    // FS-029: PHI SSR/attribute exposure prevention.\n    // If a developer (or server-rendered HTML) mistakenly sets PHI via the\n    // `data` HTML attribute, the raw value is readable in the DOM source before\n    // JavaScript initialises — a HIPAA risk on SSR pages. We recover the value\n    // into the JS-only property and then immediately remove the attribute so\n    // that no PHI is ever left exposed in the DOM tree or HTML source.\n    if (this.hasAttribute('data')) {\n      devWarn(\n        'hx-phi-field',\n        'Setting PHI via the `data` HTML attribute is not supported and exposes sensitive data in the DOM source. Use the `data` JS property (element.data = \"...\") instead.',\n      );\n      // Rescue the value into the private property so the component still works,\n      // then strip the attribute so the raw PHI is no longer readable in the DOM.\n      const rawValue = this.getAttribute('data');\n      if (rawValue !== null) {\n        this.data = rawValue;\n      }\n      this.removeAttribute('data');\n    }\n  }\n\n  override disconnectedCallback(): void {\n    super.disconnectedCallback();\n    this._cancelClipboardTimer();\n    this._cancelAutoHideTimer();\n    document.removeEventListener('visibilitychange', this._boundHandleVisibilityChange);\n  }\n\n  // ─── Private Helpers ───\n\n  /** @internal */\n  private _cancelClipboardTimer(): void {\n    if (this._clipboardTimer !== null) {\n      clearTimeout(this._clipboardTimer);\n      this._clipboardTimer = null;\n    }\n  }\n\n  /** @internal Cancel the auto-hide timer if running. */\n  private _cancelAutoHideTimer(): void {\n    if (this._autoHideTimer !== null) {\n      clearTimeout(this._autoHideTimer);\n      this._autoHideTimer = null;\n    }\n    this._removeAutoHideInteractionListeners();\n  }\n\n  /** @internal Start the auto-hide countdown. Resets if already running. */\n  private _scheduleAutoHide(): void {\n    this._cancelAutoHideTimer();\n    if (this.autoHideDelay <= 0) return;\n\n    this._addAutoHideInteractionListeners();\n    this._autoHideTimer = setTimeout(() => {\n      this._autoHideTimer = null;\n      this._autoHide();\n    }, this.autoHideDelay * 1000);\n  }\n\n  /** @internal Reset the auto-hide timer on user interaction. */\n  private _resetAutoHideTimer(): void {\n    if (this._autoHideTimer === null) return;\n    this._scheduleAutoHide();\n  }\n\n  /** @internal Auto-hide PHI and dispatch audit event. */\n  private _autoHide(): void {\n    if (this._masked) return;\n\n    this._removeAutoHideInteractionListeners();\n    // Do NOT cancel the clipboard-clear timer — same reasoning as the manual\n    // hide branch of `_handleToggle`. A reveal may have resulted in a copy,\n    // and cancelling the scheduled clear would leave PHI on the clipboard\n    // past the auto-hide ceiling.\n    this._masked = true;\n\n    this.dispatchEvent(\n      new CustomEvent<PhiAccessEventDetail>('hx-phi-access', {\n        bubbles: true,\n        composed: true,\n        detail: {\n          fieldId: this.fieldId || this.id || '',\n          action: 'auto-hide',\n          timestamp: new Date().toISOString(),\n          fieldType: this.fieldType,\n        },\n      }),\n    );\n  }\n\n  /** @internal Interaction events that reset the auto-hide timer. */\n  private static readonly _AUTO_HIDE_INTERACTION_EVENTS = [\n    'mouseenter',\n    'mousemove',\n    'focusin',\n    'keydown',\n    'pointerdown',\n  ] as const;\n\n  /** @internal Add interaction listeners to reset auto-hide timer. */\n  private _addAutoHideInteractionListeners(): void {\n    for (const event of HelixPhiField._AUTO_HIDE_INTERACTION_EVENTS) {\n      this.addEventListener(event, this._boundResetAutoHideTimer);\n    }\n  }\n\n  /** @internal Remove interaction listeners. */\n  private _removeAutoHideInteractionListeners(): void {\n    for (const event of HelixPhiField._AUTO_HIDE_INTERACTION_EVENTS) {\n      this.removeEventListener(event, this._boundResetAutoHideTimer);\n    }\n  }\n\n  /** @internal */\n  private _scheduleClipboardClear(): void {\n    this._cancelClipboardTimer();\n    this._clipboardTimer = setTimeout(() => {\n      this._clearClipboard();\n    }, this.clipboardTimeout);\n  }\n\n  /** @internal */\n  private _clearClipboard(): void {\n    // Cancel any pending scheduled clear. When `_clearClipboard` is invoked\n    // from the setTimeout callback the timer has already fired and this is a\n    // no-op; when invoked from the visibilitychange pre-emption path it stops\n    // the scheduled timer from firing again and dispatching a duplicate\n    // clipboard-clear audit event.\n    this._cancelClipboardTimer();\n    // Also cancel the auto-hide timer and remove its interaction listeners.\n    // `_clearClipboard` force-masks the field below, so any scheduled auto-hide\n    // is now moot. Without this call the setTimeout stays pending and the\n    // `mouseenter / mousemove / focusin / keydown / pointerdown` listeners\n    // stay attached to the host; when the auto-hide timer later fires,\n    // `_autoHide()` early-returns on `this._masked` WITHOUT removing the\n    // listeners, leaking them until the next scheduleAutoHide/cancelAutoHideTimer\n    // path runs. `_cancelAutoHideTimer` already closes both — one call suffices.\n    this._cancelAutoHideTimer();\n    this._masked = true;\n\n    // `navigator.clipboard.writeText` requires transient user activation in\n    // Chrome and Safari. The clipboard-clear timer fires async (activation\n    // expired) and the visibilitychange pre-emption path has no activation\n    // at all — both can reject silently. Dispatching an unconditional\n    // clipboard-clear audit event in that case would be MISLEADING: the\n    // audit trail would claim PHI was cleared while it in fact remains on\n    // the clipboard. Instead we observe the writeText outcome and dispatch\n    // `clipboard-clear` only on confirmed success, or `clipboard-clear-failed`\n    // when the API is unavailable or the promise rejects. This gives\n    // HIPAA audit consumers an accurate signal and lets them escalate\n    // failures (prompt the user, flag the session, etc).\n    const dispatchOutcome = (succeeded: boolean): void => {\n      this.dispatchEvent(\n        new CustomEvent<PhiAccessEventDetail>('hx-phi-access', {\n          bubbles: true,\n          composed: true,\n          detail: {\n            fieldId: this.fieldId || this.id || '',\n            action: succeeded ? 'clipboard-clear' : 'clipboard-clear-failed',\n            timestamp: new Date().toISOString(),\n            fieldType: this.fieldType,\n          },\n        }),\n      );\n    };\n\n    if (typeof navigator === 'undefined') {\n      dispatchOutcome(false);\n      return;\n    }\n\n    // Every remaining clipboard interaction — including the `navigator.clipboard`\n    // read itself — runs inside this try. The Clipboard API's property descriptor\n    // is UA-defined, so `navigator.clipboard` can legally be an accessor that\n    // throws synchronously. Same for `clipboard.writeText`. Pulling the read\n    // inside the try ensures any sync throw resolves to `clipboard-clear-failed`\n    // instead of an uncaught error that would silently drop the HIPAA audit event.\n    //\n    // `navigator.clipboard` is captured exactly once and the same reference is\n    // used for both the method read and the call's receiver. A shim that exposes\n    // `navigator.clipboard` as a getter returning a fresh object per read (rare\n    // but legal) would otherwise let us grab `writeText` from object A and invoke\n    // it against object B — brand/instance checks inside a real polyfill would\n    // then fail and the call would reject spuriously.\n    //\n    // Promise.resolve() on a non-thenable still resolves, so the then() path\n    // normalizes the return value shape for us.\n    try {\n      const clipboard = navigator.clipboard;\n      if (!clipboard) {\n        dispatchOutcome(false);\n        return;\n      }\n      const writeText = clipboard.writeText;\n      if (typeof writeText !== 'function') {\n        dispatchOutcome(false);\n        return;\n      }\n      void Promise.resolve(writeText.call(clipboard, '')).then(\n        () => dispatchOutcome(true),\n        () => dispatchOutcome(false),\n      );\n    } catch {\n      dispatchOutcome(false);\n    }\n  }\n\n  /** @internal */\n  private _getMaskedValue(): string {\n    if (!this.data) return '';\n\n    switch (this.fieldType) {\n      case 'ssn': {\n        // Format: xxx-xx-xxxx → ***-**-xxxx (show last 4 digits)\n        // Match the separator-delimited pattern first\n        const ssnMatch = this.data.match(/^(\\d{3})(-?)(\\d{2})(-?)(\\d{4})$/);\n        if (ssnMatch) {\n          return `***${ssnMatch[2]}**${ssnMatch[4]}${ssnMatch[5]}`;\n        }\n        // Fallback: mask all but last 4 chars\n        return this.data.slice(0, -4).replace(/\\d/g, '*') + this.data.slice(-4);\n      }\n\n      case 'mrn': {\n        // Mask all but last 4 alphanumeric characters, preserve separators\n        const chars = this.data.split('');\n        const alphanumericIndices: number[] = [];\n        chars.forEach((ch, i) => {\n          if (/[a-zA-Z0-9]/.test(ch)) {\n            alphanumericIndices.push(i);\n          }\n        });\n        const revealCount = Math.min(4, alphanumericIndices.length);\n        const maskUntilIdx = alphanumericIndices.length - revealCount;\n        const indicesToMask = new Set(alphanumericIndices.slice(0, maskUntilIdx));\n        return chars.map((ch, i) => (indicesToMask.has(i) ? '*' : ch)).join('');\n      }\n\n      case 'dob': {\n        // Replace ALL digits with *, preserve separators\n        return this.data.replace(/\\d/g, '*');\n      }\n\n      case 'insurance': {\n        // Format: xxxx-xxxx-xxxx-xxxx → ****-****-****-xxxx (show last 4 digits)\n        const insMatch = this.data.match(/^(\\d{4})(-?)(\\d{4})(-?)(\\d{4})(-?)(\\d{4})$/);\n        if (insMatch) {\n          return `****${insMatch[2]}****${insMatch[4]}****${insMatch[6]}${insMatch[7]}`;\n        }\n        // Fallback: mask all but last 4 chars\n        return this.data.slice(0, -4).replace(/[a-zA-Z0-9]/g, '*') + this.data.slice(-4);\n      }\n\n      default: {\n        // Exhaustive check — fieldType is typed, but guard defensively\n        const _exhaustive: never = this.fieldType;\n        return _exhaustive;\n      }\n    }\n  }\n\n  // ─── Event Handlers ───\n\n  /** @internal */\n  private _handleToggle(): void {\n    if (this.disabled) return;\n\n    // Dispatch BEFORE toggling state so action reflects the upcoming state\n    this.dispatchEvent(\n      new CustomEvent<PhiAccessEventDetail>('hx-phi-access', {\n        bubbles: true,\n        composed: true,\n        detail: {\n          fieldId: this.fieldId || this.id || '',\n          action: this._masked ? 'reveal' : 'hide',\n          timestamp: new Date().toISOString(),\n          fieldType: this.fieldType,\n        },\n      }),\n    );\n\n    if (this._masked) {\n      // Revealing: start clipboard clear timer and auto-hide timer\n      this._masked = false;\n      this._scheduleClipboardClear();\n      this._scheduleAutoHide();\n    } else {\n      // Hiding: cancel the auto-hide countdown (purpose already served — the\n      // field is hidden). Do NOT cancel the clipboard-clear timer — the user\n      // may have copied PHI while the field was revealed, and cancelling here\n      // would strand it on the clipboard if the tab later backgrounds. The\n      // timer fires naturally at `clipboardTimeout`, and the visibilitychange\n      // handler will pre-empt it if the tab hides sooner.\n      this._cancelAutoHideTimer();\n      this._masked = true;\n    }\n  }\n\n  /** @internal */\n  private _handleCopy(e: ClipboardEvent): void {\n    if (this._masked) {\n      e.preventDefault();\n    }\n  }\n\n  /** @internal */\n  private _handlePaste(e: ClipboardEvent): void {\n    if (this._masked) {\n      e.preventDefault();\n    }\n  }\n\n  // ─── Render Helpers ───\n\n  /** @internal */\n  private _renderEyeIcon(): TemplateResult {\n    return html`\n      <svg\n        xmlns=\"http://www.w3.org/2000/svg\"\n        viewBox=\"0 0 24 24\"\n        fill=\"none\"\n        stroke=\"currentColor\"\n        stroke-width=\"2\"\n        stroke-linecap=\"round\"\n        stroke-linejoin=\"round\"\n        aria-hidden=\"true\"\n      >\n        <path d=\"M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z\" />\n        <circle cx=\"12\" cy=\"12\" r=\"3\" />\n      </svg>\n    `;\n  }\n\n  /** @internal */\n  private _renderEyeOffIcon(): TemplateResult {\n    return html`\n      <svg\n        xmlns=\"http://www.w3.org/2000/svg\"\n        viewBox=\"0 0 24 24\"\n        fill=\"none\"\n        stroke=\"currentColor\"\n        stroke-width=\"2\"\n        stroke-linecap=\"round\"\n        stroke-linejoin=\"round\"\n        aria-hidden=\"true\"\n      >\n        <path d=\"M17.94 17.94A10.07 10.07 0 0 1 12 20c-7 0-11-8-11-8a18.45 18.45 0 0 1 5.06-5.94\" />\n        <path d=\"M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 11 8 11 8a18.5 18.5 0 0 1-2.16 3.19\" />\n        <line x1=\"1\" y1=\"1\" x2=\"23\" y2=\"23\" />\n      </svg>\n    `;\n  }\n\n  // ─── Render ───\n\n  override render() {\n    const fieldLabel = this.label || 'Protected health information';\n    const maskedLabel = `${fieldLabel} is masked`;\n    const revealedLabel = `${fieldLabel} is revealed`;\n    const revealActionLabel = `Reveal ${fieldLabel.toLowerCase()}`;\n    const hideActionLabel = `Hide ${fieldLabel.toLowerCase()}`;\n\n    return html`\n      <div\n        part=\"container\"\n        class=${classMap({ 'phi-field': true, 'phi-field--disabled': this.disabled })}\n        @copy=${this._handleCopy}\n        @paste=${this._handlePaste}\n      >\n        ${this._masked\n          ? html`<span\n              part=\"value\"\n              class=\"phi-field__value phi-field__value--masked\"\n              aria-hidden=\"true\"\n              >${this._getMaskedValue()}</span\n            >`\n          : html`<span part=\"value\" class=\"phi-field__value phi-field__value--revealed\"\n              >${this.data}</span\n            >`}\n        <span role=\"status\" aria-live=\"polite\" aria-atomic=\"true\" class=\"phi-field__status\">\n          ${this._masked ? maskedLabel : revealedLabel}\n        </span>\n        <button\n          part=\"toggle\"\n          class=\"phi-field__toggle\"\n          type=\"button\"\n          ?disabled=${this.disabled}\n          aria-label=${this._masked ? revealActionLabel : hideActionLabel}\n          aria-pressed=${String(!this._masked)}\n          @click=${this._handleToggle}\n        >\n          ${this._masked ? this._renderEyeIcon() : this._renderEyeOffIcon()}\n        </button>\n      </div>\n    `;\n  }\n}\n\n/**\n * Audit metadata for PHI access events. This interface intentionally contains\n * only identifiers and action metadata — never raw PHI values. The separation\n * of audit trail data from PHI content is a deliberate HIPAA security boundary.\n *\n * **Security invariant**: No field in this interface should ever contain the\n * actual protected health information (SSN digits, MRN value, date of birth,\n * insurance number). The `fieldId` is a developer-assigned logical identifier,\n * not the PHI value itself.\n */\nexport interface PhiAccessEventDetail {\n  /** Developer-assigned logical identifier for the field (NOT the PHI value). */\n  fieldId: string;\n  /**\n   * The action that triggered the audit event.\n   *\n   * - `clipboard-clear`: `navigator.clipboard.writeText('')` resolved successfully\n   *   — the clipboard has been confirmed cleared.\n   * - `clipboard-clear-failed`: the clipboard API was unavailable OR `writeText('')`\n   *   rejected (most commonly because the browser required transient user\n   *   activation that the timer or visibilitychange pre-emption path did not\n   *   provide). The clipboard MAY still contain PHI. HIPAA audit consumers\n   *   should treat this as an actionable event — prompt the user to manually\n   *   clear their clipboard, flag the session, or escalate per policy.\n   */\n  action: 'reveal' | 'hide' | 'auto-hide' | 'clipboard-clear' | 'clipboard-clear-failed';\n  /** ISO 8601 timestamp of the access event. */\n  timestamp: string;\n  /** The category of PHI this field contains. */\n  fieldType: 'ssn' | 'mrn' | 'dob' | 'insurance';\n}\n\ndeclare global {\n  interface HTMLElementTagNameMap {\n    'hx-phi-field': HelixPhiField;\n  }\n}\n"],"names":["helixPhiFieldStyles","css","HelixPhiField","HelixElement","rawValue","event","dispatchOutcome","succeeded","clipboard","writeText","ssnMatch","chars","alphanumericIndices","ch","i","revealCount","maskUntilIdx","indicesToMask","insMatch","html","fieldLabel","maskedLabel","revealedLabel","revealActionLabel","hideActionLabel","classMap","__decorateClass","property","state","customElement"],"mappings":";;;;AAEO,MAAMA,IAAsBC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;;;;ACyD5B,IAAMC,IAAN,cAA4BC,EAAa;AAAA,EAAzC,cAAA;AAAA,UAAA,GAAA,SAAA,GAWL,KAAA,OAAe,IAOf,KAAA,YAAiD,OAOjD,KAAA,UAAkB,IAQlB,KAAA,mBAA2B,KAQ3B,KAAA,QAAgB,IAShB,KAAA,gBAAwB,IAQxB,KAAA,WAAoB,IAKX,KAAQ,UAAU,IAG3B,KAAQ,kBAAwD,MAGhE,KAAQ,iBAAuD,MAK/D,KAAiB,+BAA+B,MAAY;AAC1D,MAAI,SAAS,oBAAoB,aAK7B,KAAK,WAAW,KAAK,oBAAoB,QAC7C,KAAK,gBAAA;AAAA,IACP,GAGA,KAAiB,2BAA2B,MAAY;AACtD,WAAK,oBAAA;AAAA,IACP;AAAA,EAAA;AAAA,EAES,oBAA0B;AAajC,QAZA,MAAM,kBAAA,GAEN,KAAK,aAAa,gBAAgB,KAAK,GAGvC,SAAS,iBAAiB,oBAAoB,KAAK,4BAA4B,GAO3E,KAAK,aAAa,MAAM,GAAG;AAO7B,YAAMC,IAAW,KAAK,aAAa,MAAM;AACzC,MAAIA,MAAa,SACf,KAAK,OAAOA,IAEd,KAAK,gBAAgB,MAAM;AAAA,IAC7B;AAAA,EACF;AAAA,EAES,uBAA6B;AACpC,UAAM,qBAAA,GACN,KAAK,sBAAA,GACL,KAAK,qBAAA,GACL,SAAS,oBAAoB,oBAAoB,KAAK,4BAA4B;AAAA,EACpF;AAAA;AAAA;AAAA,EAKQ,wBAA8B;AACpC,IAAI,KAAK,oBAAoB,SAC3B,aAAa,KAAK,eAAe,GACjC,KAAK,kBAAkB;AAAA,EAE3B;AAAA;AAAA,EAGQ,uBAA6B;AACnC,IAAI,KAAK,mBAAmB,SAC1B,aAAa,KAAK,cAAc,GAChC,KAAK,iBAAiB,OAExB,KAAK,oCAAA;AAAA,EACP;AAAA;AAAA,EAGQ,oBAA0B;AAEhC,IADA,KAAK,qBAAA,GACD,OAAK,iBAAiB,OAE1B,KAAK,iCAAA,GACL,KAAK,iBAAiB,WAAW,MAAM;AACrC,WAAK,iBAAiB,MACtB,KAAK,UAAA;AAAA,IACP,GAAG,KAAK,gBAAgB,GAAI;AAAA,EAC9B;AAAA;AAAA,EAGQ,sBAA4B;AAClC,IAAI,KAAK,mBAAmB,QAC5B,KAAK,kBAAA;AAAA,EACP;AAAA;AAAA,EAGQ,YAAkB;AACxB,IAAI,KAAK,YAET,KAAK,oCAAA,GAKL,KAAK,UAAU,IAEf,KAAK;AAAA,MACH,IAAI,YAAkC,iBAAiB;AAAA,QACrD,SAAS;AAAA,QACT,UAAU;AAAA,QACV,QAAQ;AAAA,UACN,SAAS,KAAK,WAAW,KAAK,MAAM;AAAA,UACpC,QAAQ;AAAA,UACR,YAAW,oBAAI,KAAA,GAAO,YAAA;AAAA,UACtB,WAAW,KAAK;AAAA,QAAA;AAAA,MAClB,CACD;AAAA,IAAA;AAAA,EAEL;AAAA;AAAA,EAYQ,mCAAyC;AAC/C,eAAWC,KAASH,EAAc;AAChC,WAAK,iBAAiBG,GAAO,KAAK,wBAAwB;AAAA,EAE9D;AAAA;AAAA,EAGQ,sCAA4C;AAClD,eAAWA,KAASH,EAAc;AAChC,WAAK,oBAAoBG,GAAO,KAAK,wBAAwB;AAAA,EAEjE;AAAA;AAAA,EAGQ,0BAAgC;AACtC,SAAK,sBAAA,GACL,KAAK,kBAAkB,WAAW,MAAM;AACtC,WAAK,gBAAA;AAAA,IACP,GAAG,KAAK,gBAAgB;AAAA,EAC1B;AAAA;AAAA,EAGQ,kBAAwB;AAM9B,SAAK,sBAAA,GASL,KAAK,qBAAA,GACL,KAAK,UAAU;AAaf,UAAMC,IAAkB,CAACC,MAA6B;AACpD,WAAK;AAAA,QACH,IAAI,YAAkC,iBAAiB;AAAA,UACrD,SAAS;AAAA,UACT,UAAU;AAAA,UACV,QAAQ;AAAA,YACN,SAAS,KAAK,WAAW,KAAK,MAAM;AAAA,YACpC,QAAQA,IAAY,oBAAoB;AAAA,YACxC,YAAW,oBAAI,KAAA,GAAO,YAAA;AAAA,YACtB,WAAW,KAAK;AAAA,UAAA;AAAA,QAClB,CACD;AAAA,MAAA;AAAA,IAEL;AAEA,QAAI,OAAO,YAAc,KAAa;AACpC,MAAAD,EAAgB,EAAK;AACrB;AAAA,IACF;AAkBA,QAAI;AACF,YAAME,IAAY,UAAU;AAC5B,UAAI,CAACA,GAAW;AACd,QAAAF,EAAgB,EAAK;AACrB;AAAA,MACF;AACA,YAAMG,IAAYD,EAAU;AAC5B,UAAI,OAAOC,KAAc,YAAY;AACnC,QAAAH,EAAgB,EAAK;AACrB;AAAA,MACF;AACA,MAAK,QAAQ,QAAQG,EAAU,KAAKD,GAAW,EAAE,CAAC,EAAE;AAAA,QAClD,MAAMF,EAAgB,EAAI;AAAA,QAC1B,MAAMA,EAAgB,EAAK;AAAA,MAAA;AAAA,IAE/B,QAAQ;AACN,MAAAA,EAAgB,EAAK;AAAA,IACvB;AAAA,EACF;AAAA;AAAA,EAGQ,kBAA0B;AAChC,QAAI,CAAC,KAAK,KAAM,QAAO;AAEvB,YAAQ,KAAK,WAAA;AAAA,MACX,KAAK,OAAO;AAGV,cAAMI,IAAW,KAAK,KAAK,MAAM,iCAAiC;AAClE,eAAIA,IACK,MAAMA,EAAS,CAAC,CAAC,KAAKA,EAAS,CAAC,CAAC,GAAGA,EAAS,CAAC,CAAC,KAGjD,KAAK,KAAK,MAAM,GAAG,EAAE,EAAE,QAAQ,OAAO,GAAG,IAAI,KAAK,KAAK,MAAM,EAAE;AAAA,MACxE;AAAA,MAEA,KAAK,OAAO;AAEV,cAAMC,IAAQ,KAAK,KAAK,MAAM,EAAE,GAC1BC,IAAgC,CAAA;AACtC,QAAAD,EAAM,QAAQ,CAACE,GAAIC,MAAM;AACvB,UAAI,cAAc,KAAKD,CAAE,KACvBD,EAAoB,KAAKE,CAAC;AAAA,QAE9B,CAAC;AACD,cAAMC,IAAc,KAAK,IAAI,GAAGH,EAAoB,MAAM,GACpDI,IAAeJ,EAAoB,SAASG,GAC5CE,IAAgB,IAAI,IAAIL,EAAoB,MAAM,GAAGI,CAAY,CAAC;AACxE,eAAOL,EAAM,IAAI,CAACE,GAAIC,MAAOG,EAAc,IAAIH,CAAC,IAAI,MAAMD,CAAG,EAAE,KAAK,EAAE;AAAA,MACxE;AAAA,MAEA,KAAK;AAEH,eAAO,KAAK,KAAK,QAAQ,OAAO,GAAG;AAAA,MAGrC,KAAK,aAAa;AAEhB,cAAMK,IAAW,KAAK,KAAK,MAAM,4CAA4C;AAC7E,eAAIA,IACK,OAAOA,EAAS,CAAC,CAAC,OAAOA,EAAS,CAAC,CAAC,OAAOA,EAAS,CAAC,CAAC,GAAGA,EAAS,CAAC,CAAC,KAGtE,KAAK,KAAK,MAAM,GAAG,EAAE,EAAE,QAAQ,gBAAgB,GAAG,IAAI,KAAK,KAAK,MAAM,EAAE;AAAA,MACjF;AAAA,MAEA;AAGE,eAD2B,KAAK;AAAA,IAElC;AAAA,EAEJ;AAAA;AAAA;AAAA,EAKQ,gBAAsB;AAC5B,IAAI,KAAK,aAGT,KAAK;AAAA,MACH,IAAI,YAAkC,iBAAiB;AAAA,QACrD,SAAS;AAAA,QACT,UAAU;AAAA,QACV,QAAQ;AAAA,UACN,SAAS,KAAK,WAAW,KAAK,MAAM;AAAA,UACpC,QAAQ,KAAK,UAAU,WAAW;AAAA,UAClC,YAAW,oBAAI,KAAA,GAAO,YAAA;AAAA,UACtB,WAAW,KAAK;AAAA,QAAA;AAAA,MAClB,CACD;AAAA,IAAA,GAGC,KAAK,WAEP,KAAK,UAAU,IACf,KAAK,wBAAA,GACL,KAAK,kBAAA,MAQL,KAAK,qBAAA,GACL,KAAK,UAAU;AAAA,EAEnB;AAAA;AAAA,EAGQ,YAAY,GAAyB;AAC3C,IAAI,KAAK,WACP,EAAE,eAAA;AAAA,EAEN;AAAA;AAAA,EAGQ,aAAa,GAAyB;AAC5C,IAAI,KAAK,WACP,EAAE,eAAA;AAAA,EAEN;AAAA;AAAA;AAAA,EAKQ,iBAAiC;AACvC,WAAOC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeT;AAAA;AAAA,EAGQ,oBAAoC;AAC1C,WAAOA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBT;AAAA;AAAA,EAIS,SAAS;AAChB,UAAMC,IAAa,KAAK,SAAS,gCAC3BC,IAAc,GAAGD,CAAU,cAC3BE,IAAgB,GAAGF,CAAU,gBAC7BG,IAAoB,UAAUH,EAAW,YAAA,CAAa,IACtDI,IAAkB,QAAQJ,EAAW,YAAA,CAAa;AAExD,WAAOD;AAAA;AAAA;AAAA,gBAGKM,EAAS,EAAE,aAAa,IAAM,uBAAuB,KAAK,UAAU,CAAC;AAAA,gBACrE,KAAK,WAAW;AAAA,iBACf,KAAK,YAAY;AAAA;AAAA,UAExB,KAAK,UACHN;AAAA;AAAA;AAAA;AAAA,iBAIK,KAAK,iBAAiB;AAAA,iBAE3BA;AAAA,iBACK,KAAK,IAAI;AAAA,cACZ;AAAA;AAAA,YAEF,KAAK,UAAUE,IAAcC,CAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,sBAMhC,KAAK,QAAQ;AAAA,uBACZ,KAAK,UAAUC,IAAoBC,CAAe;AAAA,yBAChD,OAAO,CAAC,KAAK,OAAO,CAAC;AAAA,mBAC3B,KAAK,aAAa;AAAA;AAAA,YAEzB,KAAK,UAAU,KAAK,mBAAmB,KAAK,mBAAmB;AAAA;AAAA;AAAA;AAAA,EAIzE;AACF;AA5eatB,EACK,SAAS,CAACF,CAAmB;AADlCE,EA2La,gCAAgC;AAAA,EACtD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAtLAwB,EAAA;AAAA,EADCC,EAAS,EAAE,WAAW,GAAA,CAAO;AAAA,GAVnBzB,EAWX,WAAA,QAAA,CAAA;AAOAwB,EAAA;AAAA,EADCC,EAAS,EAAE,MAAM,QAAQ,SAAS,IAAM,WAAW,cAAc;AAAA,GAjBvDzB,EAkBX,WAAA,aAAA,CAAA;AAOAwB,EAAA;AAAA,EADCC,EAAS,EAAE,MAAM,QAAQ,WAAW,YAAY;AAAA,GAxBtCzB,EAyBX,WAAA,WAAA,CAAA;AAQAwB,EAAA;AAAA,EADCC,EAAS,EAAE,MAAM,QAAQ,WAAW,qBAAqB;AAAA,GAhC/CzB,EAiCX,WAAA,oBAAA,CAAA;AAQAwB,EAAA;AAAA,EADCC,EAAS,EAAE,MAAM,OAAA,CAAQ;AAAA,GAxCfzB,EAyCX,WAAA,SAAA,CAAA;AASAwB,EAAA;AAAA,EADCC,EAAS,EAAE,MAAM,QAAQ,WAAW,mBAAmB;AAAA,GAjD7CzB,EAkDX,WAAA,iBAAA,CAAA;AAQAwB,EAAA;AAAA,EADCC,EAAS,EAAE,MAAM,SAAS,SAAS,IAAM;AAAA,GAzD/BzB,EA0DX,WAAA,YAAA,CAAA;AAKiBwB,EAAA;AAAA,EAAhBE,EAAA;AAAM,GA/DI1B,EA+DM,WAAA,WAAA,CAAA;AA/DNA,IAANwB,EAAA;AAAA,EADNG,EAAc,cAAc;AAAA,GAChB3B,CAAA;"}