@jini-ai/ui-kit 0.6.17 → 0.6.23

package/CHANGELOG.md

@@ -1,5 +1,13 @@
+## 0.6.23
+
+- Security hardening.
+
 # @jini-ai/ui-kit
 
+## 0.6.19
+
+- Released with the fixed `@jini-ai/*` group; no changes of its own.
+
 ## 0.6.17
 
 ### Patch Changes

package/dist/attrs.d.ts

@@ -15,4 +15,17 @@ export type AgentAttrsPort = (required: {
     role?: AgentSpec['role'];
     label?: string;
 }) => KitAttrs;
+/**
+ * Keeps ordinary control props while excluding agent addressing from a semantic secret, including
+ * after reveal changes its native input type. Caller metadata cannot override the private marker.
+ * @param required.attrs - Input or reveal-control props; never mutated.
+ * @returns A fresh props object with only the enforced agent privacy marker.
+ * @complexity O(n) time and space in the number of supplied props; no I/O or effects.
+ * @overallScore 100
+ */
+export declare function secretControlAttrs<T extends object>({ attrs }: {
+    attrs: T;
+}, _optional?: Record<string, never>): Omit<T, `data-agent-${string}`> & {
+    'data-agent-private': '';
+};
 //# sourceMappingURL=attrs.d.ts.map

package/dist/attrs.js

@@ -1,2 +1,13 @@
-export {};
+/**
+ * Keeps ordinary control props while excluding agent addressing from a semantic secret, including
+ * after reveal changes its native input type. Caller metadata cannot override the private marker.
+ * @param required.attrs - Input or reveal-control props; never mutated.
+ * @returns A fresh props object with only the enforced agent privacy marker.
+ * @complexity O(n) time and space in the number of supplied props; no I/O or effects.
+ * @overallScore 100
+ */
+export function secretControlAttrs({ attrs }, _optional = {}) {
+    const ordinary = Object.entries(attrs).filter(([name]) => !name.toLowerCase().startsWith('data-agent-'));
+    return { ...Object.fromEntries(ordinary), 'data-agent-private': '' };
+}
 //# sourceMappingURL=attrs.js.map

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 export { KIT_CONTRACT, kitSpec, kitParts, implementedComponents } from './kit-contract.js';
 export type { KitComponentName, ImplementedComponentName, KitPart } from './kit-contract.js';
 export type { KitAttrs, AgentSpec, AgentAttrsPort } from './attrs.js';
+export { secretControlAttrs } from './attrs.js';
 export { needs, assertKitContract, KitConfigError } from './needs.js';
 export type { KitNeeds } from './needs.js';
 export { planConfirm, createConfirmController } from './confirm.js';

package/dist/index.js

@@ -1,4 +1,5 @@
 export { KIT_CONTRACT, kitSpec, kitParts, implementedComponents } from './kit-contract.js';
+export { secretControlAttrs } from './attrs.js';
 export { needs, assertKitContract, KitConfigError } from './needs.js';
 export { planConfirm, createConfirmController } from './confirm.js';
 export { createToastService } from './toast.js';

package/dist/react/SecretInput.js

@@ -2,6 +2,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { forwardRef } from 'react';
 import { useSecretReveal } from './secret-reveal.hooks.js';
 import { eyeIcon } from './native/Controls.hooks.js';
+import { secretControlAttrs } from '../attrs.js';
 /** Masked native input with controlled or local reveal state. Keep its toggle outside a label:
  * the toggle's name must never join the input's accessible name. Hosts own styling and copy.
  * @complexity O(1). */
@@ -9,6 +10,6 @@ export const SecretInput = forwardRef(function SecretInput(props, ref) {
     // The toggle props are pulled off so they never reach the DOM `<input>`.
     const { label, toggleLabels, toggleAttrs, revealed, onRevealedChange, ...inputProps } = props;
     const reveal = useSecretReveal({ value: inputProps.value, labels: toggleLabels ?? { show: `Show ${label}`, hide: `Hide ${label}` } }, { ...(revealed === undefined ? {} : { revealed }), ...(onRevealedChange ? { onRevealedChange } : {}) });
-    return _jsxs("span", { className: "jini-secret", children: [_jsx("input", { ...inputProps, spellCheck: false, ref: ref, type: reveal.inputType }), _jsx("button", { ...toggleAttrs, type: "button", className: "jini-secret-toggle", "aria-label": reveal.toggleLabel, title: reveal.toggleLabel, disabled: inputProps.disabled, onClick: reveal.toggle, children: eyeIcon({ revealed: reveal.revealed }) })] });
+    return _jsxs("span", { className: "jini-secret", children: [_jsx("input", { ...secretControlAttrs({ attrs: inputProps }), spellCheck: false, ref: ref, type: reveal.inputType }), _jsx("button", { ...secretControlAttrs({ attrs: toggleAttrs ?? {} }), type: "button", className: "jini-secret-toggle", "aria-label": reveal.toggleLabel, title: reveal.toggleLabel, disabled: inputProps.disabled, onClick: reveal.toggle, children: eyeIcon({ revealed: reveal.revealed }) })] });
 });
 //# sourceMappingURL=SecretInput.js.map

package/dist/react/native/Controls.hooks.d.ts

@@ -34,8 +34,12 @@ export declare function useNativeIconButton(required: IconButtonProps, _optional
 export declare function eyeIcon(required: {
     revealed: boolean;
 }, _optional?: Record<string, never>): import("react").ReactSVGElement;
+/** Maps native field props; a revealed password remains a private secret rather than a text field.
+ * @complexity O(p) time and space in secret field props; O(1) for ordinary fields.
+ * @overallScore 100 */
 export declare function useNativeTextField(required: TextFieldProps, _optional?: Record<string, never>): {
     toggle: {
+        'data-agent-private': string;
         'data-jini-part': string;
         className: string;
         type: "button";

package/dist/react/native/Controls.hooks.js

@@ -1,4 +1,5 @@
 import { createElement, useId, useState } from 'react';
+import { secretControlAttrs } from '../../attrs.js';
 export function useNativeButton(required, _optional = {}) {
     const readyState = required.disabled ? 'disabled' : 'ready';
     return { children: required.children, props: { 'data-jini-part': 'kit.button', ref: required.ref, className: `jini-btn jini-btn-${required.variant ?? 'primary'} ${required.className ?? ''}`.trim(),
@@ -44,14 +45,17 @@ function useSecretReveal(required, _optional = {}) {
         return { type: required.type ?? 'text', toggle: null };
     // The name flips Show/Hide; no `aria-pressed` on top, or screen readers hear the state twice.
     const labels = required.secretToggleLabels ?? { show: `Show ${required.label}`, hide: `Hide ${required.label}` };
-    return { type: revealed ? 'text' : 'password', toggle: { 'data-jini-part': 'kit.secret-toggle', className: 'jini-secret-toggle', type: 'button',
+    return { type: revealed ? 'text' : 'password', toggle: { 'data-agent-private': '', 'data-jini-part': 'kit.secret-toggle', className: 'jini-secret-toggle', type: 'button',
             'aria-label': revealed ? labels.hide : labels.show, disabled: required.disabled,
             onClick: () => setRevealed(shown => !shown), children: eyeIcon({ revealed }) } };
 }
+/** Maps native field props; a revealed password remains a private secret rather than a text field.
+ * @complexity O(p) time and space in secret field props; O(1) for ordinary fields.
+ * @overallScore 100 */
 export function useNativeTextField(required, _optional = {}) {
     const vm = useField(required);
     const reveal = useSecretReveal(required);
-    return { ...vm, toggle: reveal.toggle, props: { ...vm.props, id: vm.id, ref: required.ref, type: reveal.type, value: required.value,
+    return { ...vm, toggle: reveal.toggle, props: { ...(reveal.toggle ? secretControlAttrs({ attrs: vm.props }) : vm.props), id: vm.id, ref: required.ref, type: reveal.type, value: required.value,
             // Off on a secret: once revealed as type="text", enhanced spellcheck would send it to a cloud service.
             spellCheck: reveal.toggle ? false : undefined,
             placeholder: required.placeholder, onChange: (event) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jini-ai/ui-kit",
-  "version": "0.6.17",
+  "version": "0.6.23",
   "description": "Framework-free UI contract, injected React facades and native defaults.",
   "license": "Apache-2.0",
   "repository": {