@nxgt/material-core 0.9.0 → 0.10.0

package/CHANGELOG.md

@@ -1,5 +1,46 @@
 # @nxgt/material-core
 
+## 0.10.0
+
+### Minor Changes
+
+- [#535](https://github.com/softistx/nxgt-material/pull/535) [`a088c1c`](https://github.com/softistx/nxgt-material/commit/a088c1c8f08f8c4483fe0ba0e35eedfbe1b193f9) Thanks [@SteveGT96](https://github.com/SteveGT96)! - Three form and focus helpers, the same names in both libraries (softistx/nxgt-material#500). Fixes [#500](https://github.com/softistx/nxgt-material/issues/500).
+  
+  - **`useFocusOnMount<T>(focus?)`** (`@nxgt/material/hooks`, `@nxgt/material-vue/composables`, auto-imported by the Nuxt module): the element takes focus once mounted, and again whenever `focus` turns true. Put it on the heading of what replaced the content the user acted on (a wizard's next step, "Message sent"), with `tabIndex={-1}` / `tabindex="-1"`. React returns a `RefObject`, Vue a `ShallowRef` to bind with `ref="…"`.
+  - **`useSubmitOnce(busy?)`** (same entries): one submit in flight. `const submitOnce = useSubmitOnce(); <form onSubmit={submitOnce(handleSubmit(save))}>` (Vue: `const onSubmit = submitOnce(handleSubmit(save))`) drops a double click or a second Enter until `save` ends; a dropped call's event has its default prevented. Return the request's promise, or pass its busy flag (Vue: a ref or getter): the guard then opens once the flag was true and is false again, for the submit that was on its way when it rose. Without `busy`, a handler that returns no promise (an early `return`) opens the guard at once. The framework-free `createSubmitGuard()` and `busySettler(guard)` are re-exported by both from `@nxgt/material-core/submit-guard`.
+  - **`useCodeResolver(schema, { translate, codeOf?, language? })`** (`@nxgt/material/components`, `@nxgt/material-vue/components`): a zod 4 schema's errors worded in the page's language. A refinement carrying `params.code` (`.refine(isFree, { params: { code: 'errors.taken' } })`) reads as your translator's words for that code, every other issue as `zodLocaleError`'s, with your `material.zod.*` overrides. `createCodeErrorMap`, `defaultCodeOf`, `isEmptyRequired` and the type `CodeIssue` are exported beside it. React returns a react-hook-form `Resolver` (`useForm({ resolver })`); Vue a computed vee-validate `TypedSchema` (`useForm({ validationSchema })`), so a language switch re-words the errors on screen.
+  - `@nxgt/material-core` adds `/submit-guard` (`createSubmitGuard` with `once(run, { settleSync })`, a run-scoped `settle(run)` and `pendingRun()`, and `busySettler`) and `/code-errors` (`createCodeErrorMap`, `defaultCodeOf`, `isEmptyRequired`): the error map is typed by shape, with no zod dependency.
+  
+  An app with a local copy marked `To extract to material (request [#500](https://github.com/softistx/nxgt-material/issues/500))` — `useFocusOnMount`, `createSubmitGuard` / `useSubmitOnce`, `useCodeResolver` and the code error map behind it — can delete it and import the same names from `@nxgt/material` / `@nxgt/material-vue` (`createSubmitGuard` and `createCodeErrorMap` from `@nxgt/material-core/submit-guard` and `/code-errors`). A local `useSubmitOnce(busy)` keeps its call; a local code error map becomes `useCodeResolver(schema, { translate, codeOf })`, with `codeOf: (issue) => (isEmptyRequired(issue) ? '<your required code>' : defaultCodeOf(issue))` where empty required fields had a code of their own.
+
+- [#544](https://github.com/softistx/nxgt-material/pull/544) [`e071e15`](https://github.com/softistx/nxgt-material/commit/e071e15a1d3b31c7e8fe7ad83d5a206687d18d9f) Thanks [@SteveGT96](https://github.com/SteveGT96)! - Signed-out pages and two-step verification: `AuthCard`, `EnrolmentSecret` and `RecoveryCodes`, the same names in both libraries (`@nxgt/material/components`, `@nxgt/material-vue/components`, registered by the Nuxt module). Fixes [#498](https://github.com/softistx/nxgt-material/issues/498).
+  
+  - **`AuthCard`** (Storybook `Navigation & layout/AuthCard`): the frame of a sign-in, sign-up or reset page. One `<main tabIndex={-1}>` (focusable by script, never by Tab), a centred card whose `title` is the page's `h1`, a `description`, a `notice` above the form (`noticeTone` `'info'` | `'success'` | `'warning'` are `role="status"`, `'error'` is `role="alert"`), `focusTitle` to move the focus to the `h1` on an end state ("Check your inbox"), a row above the card for `brand` and `toolbar` (rendered only when one is given), a `banner` above it and a `footer` under the card. Padded with `max(1rem, env(safe-area-inset-*))` by classes, no inline style. Vue: the same props, and slots `title`, `description`, `notice`, `brand`, `toolbar`, `banner`, `footer`.
+  - **`EnrolmentSecret`** (`Data display/EnrolmentSecret`): a TOTP enrolment — the `otpauth://` URI's QR code (the library's `QRCode`, level M, named "QR code to scan with your authenticator app"), the URI as a link ("Open in your authenticator app": a phone cannot scan its own screen) and the secret in groups of four in a group named "Setup key", with a `CopyButton` that copies it without spaces and announces "Key copied". `uri`, `secret`, `showQrCode` (default `true`), `qrSize` (default `192`) and a prop per label. Side by side once the component is 28rem wide, stacked on a phone, the key wrapping inside the card.
+  - **`RecoveryCodes`** (`Data display/RecoveryCodes`): one-time codes shown once, in a card. An ordered list named "Recovery codes"; "Copy codes" (one per line, announced "Codes copied" / "Copy failed" by the component's own polite status region, no `Toaster` needed); "Download" (a text file: `fileHeading`, `fileNote`, a blank line, the codes; `fileName` defaults to `recovery-codes.txt`); "Print" (the card alone, through the new print rules in `styles.css`); and "I have saved these codes", which "Done" requires: pressed before, it moves the focus to the box, marks it `aria-invalid` and says "Tick the box once your codes are safe". `title` / `titleAs` (`h2` by default), `description`, `warning` (`false` hides it), `focusTitle` (default `true`), `onDone` (the "Done" button shows only with it; Vue: `@done`), `saved` / `onSavedChange` (Vue: `v-model:saved`) and `labels`.
+  
+  ```tsx
+  <AuthCard title="Two-step verification" brand={<Logo />} toolbar={<LanguageSwitcher />}>
+    <EnrolmentSecret uri={enrolment.uri} secret={enrolment.secret} />
+  </AuthCard>
+  <RecoveryCodes codes={codes} fileHeading={`Recovery codes for ${email}`} saved={saved} onSavedChange={setSaved} onDone={done} />
+  ```
+  
+  ```vue
+  <RecoveryCodes v-model:saved="saved" :codes="codes" :file-heading="`Recovery codes for ${email}`" @done="done" />
+  ```
+  
+  `groupSecret`, `recoveryCodesText` and `downloadText` are re-exported beside them. `@nxgt/material-core` adds `/two-factor`: `groupSecret(secret, size = 4)`, `recoveryCodesText(codes, { heading?, note? })` and `downloadText(text, fileName, { type? })` (an object URL revoked a minute later, as `/pdf-download` does: both now share one helper). It also adds `/print-only`: `printOnly(element, name?)` prints one element of the page through `data-nxgt-print` on `<html>` and `data-nxgt-print-target` on the element, removed on `afterprint` or once a blocking `print()` returns; the rules are the new `print-only.css` in each library's `styles.css`, and both libraries re-export `printOnly`, `PRINT_ATTRIBUTE` and `PRINT_TARGET_ATTRIBUTE` from `/lib`. `CopyButton` and `RecoveryCodes` share the copy-and-announce state; `CopyButton` behaves as before. In `@nxgt/material-vue`, `Checkbox` now shows a `#helper-text` (or `#label`) slot that is added after the first render.
+  
+  Migration: local copies marked `To extract to material (request [#498](https://github.com/softistx/nxgt-material/issues/498))` can be deleted. A local sign-in frame becomes `AuthCard` (its subtitle is `description`; brand, language switcher and banner go in `brand`, `toolbar` and `banner`). A local enrolment block becomes `EnrolmentSecret uri secret`, and a local grouping helper `groupSecret`. A local recovery-codes display becomes `RecoveryCodes`, a local file builder `recoveryCodesText(codes, { heading, note })`, and a local print-only rule `printOnly`; the app keeps its wording (`title`, `description`, `fileHeading`, `fileNote`, `labels`), its data loading and its navigation guard while `saved` is false.
+
+## 0.9.1
+
+### Patch Changes
+
+- [#541](https://github.com/softistx/nxgt-material/pull/541) [`6d10133`](https://github.com/softistx/nxgt-material/commit/6d1013356e8c42631166b6281081811912e31323) Thanks [@SteveGT96](https://github.com/SteveGT96)! - The roadmaps plan one Vite plugin for the setup, and list the strict Content
+  Security Policy as shipped.
+
 ## 0.9.0
 
 ### Minor Changes

package/README.md

@@ -13,11 +13,15 @@ rule, a field's first reachable control (`/focus-control`) and its `aria-describ
 (`/escape-forward`), the Toaster's guard against a tap's emulated hover
 (`/touch-hover`), the focus a toast's action hands back (`/toast-focus`), a
 table row's activation, the zod error map's issue messages
-(`/zod-issue-messages`), the page's Content Security Policy nonce
-(`/csp-nonce`), an object built on its first use (`/lazy-object`), the Vite
-plugin that bundles pdfkit's standard fonts and a `build.assetsInlineLimit`
-that keeps fonts out of `data:` URIs, and the Node-only resolution of those
-fonts that the Next.js helper and the Nuxt module run at build time.
+(`/zod-issue-messages`), a zod error map that words an issue by its code
+(`/code-errors`), the page's Content Security Policy nonce (`/csp-nonce`), an
+object built on its first use (`/lazy-object`), one submit in flight
+(`/submit-guard`), the two-step verification helpers (`/two-factor`: a TOTP
+secret grouped to be typed, the recovery codes' text file, a text download),
+printing one element of the page (`/print-only`), the Vite plugin that
+bundles pdfkit's standard fonts and a `build.assetsInlineLimit` that keeps
+fonts out of `data:` URIs, and the Node-only resolution of those fonts that
+the Next.js helper and the Nuxt module run at build time.
 
 **You usually do not install it yourself.** Both libraries depend on it and
 re-export what they always exported, at the same subpaths:
@@ -100,6 +104,10 @@ built-in.
 | `/debounce` | `debounce`, the type `Debounced` — a function called once calls pause, with `cancel` and `flush` (`SearchField`'s `debounceMs`) |
 | `/text-match` | `foldText`, `matchesText` — case- and accent-insensitive matching (`'e'` finds "École"), lowercased for a locale |
 | `/async-search` | `createAsyncSearch`, `searchAnnouncement`, `DEFAULT_SEARCH_DEBOUNCE_MS`, `DEFAULT_MIN_QUERY_LENGTH` and the types `AsyncSearch`, `AsyncSearchConfig`, `AsyncSearchState`, `AsyncSearchStatus`, `SearchFn`, `SearchContext`, `SearchAnnouncement` — `Autocomplete`'s server search: debounced, each run aborting the last, a stale response dropped |
+| `/submit-guard` | `createSubmitGuard`, `busySettler` and the types `SubmitGuard`, `SubmitOnceOptions` — one submit in flight until its request ends, behind both libraries' `useSubmitOnce` |
+| `/code-errors` | `createCodeErrorMap`, `defaultCodeOf`, `isEmptyRequired` and the types `CodeErrorMap`, `CodeErrorMapOptions`, `CodeIssue` — a zod 4 error map that words an issue by the code it carries (a refinement's `params.code`), behind both libraries' `useCodeResolver` |
+| `/two-factor` | `groupSecret`, `recoveryCodesText`, `downloadText` and the types `RecoveryCodesTextOptions`, `DownloadTextOptions` — a TOTP secret in groups of four, the recovery codes as a text file, and saving a text file, behind both libraries' `EnrolmentSecret` and `RecoveryCodes` |
+| `/print-only` | `printOnly`, `PRINT_ATTRIBUTE`, `PRINT_TARGET_ATTRIBUTE` — printing one element of the page with no inline style, behind `RecoveryCodes`' Print button; re-exported by both libraries' `/lib` |
 | `/file-preview` | `fileKind`, `describeFile`, `safePreviewUrl`, `readTextPreview`, `FilePreviewHttpError`, `FilePreviewUnsafeUrlError`, `TEXT_PREVIEW_MAX_BYTES`, `fileExtension`, `fileNameFromUrl`, `dataUrlType`, `kindOfMimeType`, `normaliseMimeType`, `isTextFileKind`, `TEXT_FILE_KINDS` and the types `FileKind`, `FileKindInput`, `DescribedFile`, `FilePreviewSource`, `TextPreview` — `FilePreview`'s kind detection, URL allow-list and text reader |
 | `/vite` | `pdfkitStandardFonts()`, `cspAssetsInlineLimit` — see below |
 | `/pdfkit-fonts` | **Node only.** `pdfkitStandardFontDirs`, `pdfkitStandardFontFiles`, `PDFKIT_STANDARD_FONTS`, the types `PdfkitStandardFont` and `PdfkitFontsWarn` — where the app's pdfkit keeps its standard fonts, for a server tracer |
@@ -457,6 +465,132 @@ what a combobox's polite live region says: the failure, else "loading",
 else the count once the query has settled — `null` while the user is still
 typing.
 
+### One submit in flight: `/submit-guard`
+
+`createSubmitGuard()` returns `{ once, settle, pendingRun }`. `once(run)` wraps a
+handler so it runs only when no submit is on its way: a second click, or
+Enter, before the first request ends is dropped (its event, if it carries
+one, has its default prevented, so the browser does not submit the form on
+its own). `settle()` opens the guard again; a `run` that returns a promise
+opens it when that promise ends, fulfilled or rejected, and a `run` that
+throws opens it and rethrows. Any other result keeps it closed until
+`settle()` — unless `once(run, { settleSync: true })`, which opens it at
+once. So: **return the request's promise, or follow the request with a busy
+flag.** The wrapper returns `run`'s result — its promise as one that settles
+the same way, so a rejection still reaches the caller.
+
+`pendingRun()` is the run on its way (an increasing number, `undefined` when
+open), and `settle(run)` opens the guard only while that run is still the one
+on its way. `busySettler(guard)` uses them: call the function it returns
+with each value of a busy flag, and once the flag was true and is false
+again it settles the run that was on its way when the flag rose — never a
+newer one.
+
+```ts
+import { createSubmitGuard } from '@nxgt/material-core/submit-guard';
+
+const guard = createSubmitGuard();
+const submit = guard.once((event: SubmitEvent) => {
+	event.preventDefault();
+	return fetch('/api/subscribe', { method: 'POST', body: new FormData(form) });
+});
+form.addEventListener('submit', submit); // a second submit before the reply is dropped
+```
+
+Both libraries wrap it as `useSubmitOnce(busy?)`: `busy` is a boolean in
+React (`useSubmitOnce(navigation.state !== 'idle')`) and a ref or a getter in
+Vue (`useSubmitOnce(() => pending.value)`), followed through `busySettler`.
+Without `busy`, the hooks pass `settleSync: true`, so a handler that returns
+early does not lock the form.
+
+### Errors worded by code: `/code-errors`
+
+`createCodeErrorMap({ translate, codeOf?, fallback })` is a zod 4 error map
+(typed by shape: this package does not depend on zod). An issue's code —
+by default `defaultCodeOf`: a custom issue's `params.code`, when it is a
+string — is worded by `translate(code, params)`; when there is no code, or
+`translate` returns `undefined` or the code itself (a translator's answer for
+a key it lacks), `fallback(issue)` words it. `isEmptyRequired(issue)` tells
+an empty required field (a string shorter than one character, or a missing
+value), to give it a code of its own.
+
+```ts
+import { z } from 'zod';
+import {
+	createCodeErrorMap,
+	defaultCodeOf,
+	isEmptyRequired,
+} from '@nxgt/material-core/code-errors';
+
+const words: Record<string, string> = {
+	'errors.taken': 'This name is already taken.',
+	'errors.required': 'Please fill this in.',
+};
+const error = createCodeErrorMap({
+	translate: (code) => words[code],
+	codeOf: (issue) => (isEmptyRequired(issue) ? 'errors.required' : defaultCodeOf(issue)),
+	fallback: () => undefined, // zod's own message
+});
+
+const schema = z.object({
+	username: z.string().min(1).refine((name) => name !== 'admin', { params: { code: 'errors.taken' } }),
+});
+schema.safeParse({ username: 'admin' }, { error }); // "This name is already taken."
+```
+
+Both libraries wrap it as `useCodeResolver(schema)`, with their
+`zodLocaleError` as the fallback and the page's language.
+
+### Two-step verification: `/two-factor`
+
+`groupSecret(secret, size = 4)` reads a TOTP secret in groups, as a person
+types it into an authenticator app (`"JBSWY3DPEHPK3PXP"` → `"JBSW Y3DP EHPK
+3PXP"`); whitespace already in it is dropped first. `recoveryCodesText(codes,
+{ heading?, note? })` is the text file a person keeps: the heading, the note,
+a blank line, one code per line and a trailing newline (a line not given is
+left out). `downloadText(text, fileName, { type? })` saves it through an
+object URL and a temporary `<a download>`, revoked a minute later,
+as `/pdf-download` does (its `OBJECT_URL_TTL_MS`).
+
+```ts
+import {
+	downloadText,
+	groupSecret,
+	recoveryCodesText,
+} from '@nxgt/material-core/two-factor';
+
+groupSecret('JBSWY3DPEHPK3PXP'); // "JBSW Y3DP EHPK 3PXP"
+const text = recoveryCodesText(['7KQ2-M9XD', 'P4TW-8HZC'], {
+	heading: 'Recovery codes for ada@example.com',
+	note: 'Each code works once.',
+});
+downloadText(text, 'recovery-codes.txt');
+```
+
+Both libraries' `EnrolmentSecret` and `RecoveryCodes` are built on them.
+
+### Printing one element: `/print-only`
+
+`printOnly(element, name?)` prints that element and nothing else of the
+page: it sets `data-nxgt-print="<name>"` on `<html>` and
+`data-nxgt-print-target` on the element, calls `window.print()`, and removes
+both on `afterprint`, or as soon as `print()` returns where it blocks until
+the dialog closes. It returns a function that removes them at once; call it
+when the element unmounts. No inline style and no new window: the hiding is
+the libraries' stylesheet (`print-only.css`, in their `styles.css`),
+which under print media and `html[data-nxgt-print]` shows only the target.
+
+```ts
+import { printOnly } from '@nxgt/material-core/print-only';
+
+const stop = printOnly(document.querySelector('#codes') as HTMLElement, 'recovery-codes');
+// when the element unmounts:
+stop();
+```
+
+Both libraries re-export it from `/lib` (`@nxgt/material/lib`,
+`@nxgt/material-vue/lib`); `RecoveryCodes`' Print button uses it.
+
 ### The emoji list's groups: `/emoji-groups`
 
 How both libraries' `EmojiList` groups, searches and names its emojis:

package/dist/chunks/index-15vj9xbx.js

@@ -0,0 +1,26 @@
+// src/lib/save-blob.ts
+var OBJECT_URL_TTL_MS2 = 60000;
+function revokeLater(url) {
+  window.setTimeout(() => URL.revokeObjectURL(url), OBJECT_URL_TTL_MS2);
+}
+function clickLink(href, attributes) {
+  const link = document.createElement("a");
+  link.href = href;
+  for (const [name, value] of Object.entries(attributes)) {
+    link.setAttribute(name, value);
+  }
+  link.style.display = "none";
+  document.body.append(link);
+  link.click();
+  link.remove();
+}
+function saveBlob(blob, fileName) {
+  const url = URL.createObjectURL(blob);
+  clickLink(url, { download: fileName });
+  revokeLater(url);
+}
+
+export { OBJECT_URL_TTL_MS2, revokeLater, clickLink, saveBlob };
+
+//# debugId=3BAD8691A74B531364756E2164756E21
+//# sourceMappingURL=index-15vj9xbx.js.map

package/dist/chunks/index-15vj9xbx.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/lib/save-blob.ts"],
+  "sourcesContent": [
+    "/**\n * Saving a Blob as a file through a temporary `<a download>`: what\n * `/pdf-download` and `/two-factor`'s `downloadText` share. Reads the DOM\n * only when called.\n */\n\n/**\n * How long an object URL outlives the click that started its download or\n * opened its tab. Revoking it synchronously cancels the download in Firefox\n * and Safari, which read the URL after `click()` returns.\n */\nexport const OBJECT_URL_TTL_MS = 60_000;\n\nexport function revokeLater(url: string) {\n\twindow.setTimeout(() => URL.revokeObjectURL(url), OBJECT_URL_TTL_MS);\n}\n\nexport function clickLink(href: string, attributes: Record<string, string>) {\n\tconst link = document.createElement('a');\n\tlink.href = href;\n\tfor (const [name, value] of Object.entries(attributes)) {\n\t\tlink.setAttribute(name, value);\n\t}\n\tlink.style.display = 'none';\n\t// Firefox ignores a click on a link that is not in the document.\n\tdocument.body.append(link);\n\tlink.click();\n\tlink.remove();\n}\n\n/** Saves a Blob under `fileName`, and revokes its URL once the save began. */\nexport function saveBlob(blob: Blob, fileName: string) {\n\tconst url = URL.createObjectURL(blob);\n\tclickLink(url, { download: fileName });\n\trevokeLater(url);\n}\n"
+  ],
+  "mappings": ";AAWO,IAAM,qBAAoB;AAE1B,SAAS,WAAW,CAAC,KAAa;AAAA,EACxC,OAAO,WAAW,MAAM,IAAI,gBAAgB,GAAG,GAAG,kBAAiB;AAAA;AAG7D,SAAS,SAAS,CAAC,MAAc,YAAoC;AAAA,EAC3E,MAAM,OAAO,SAAS,cAAc,GAAG;AAAA,EACvC,KAAK,OAAO;AAAA,EACZ,YAAY,MAAM,UAAU,OAAO,QAAQ,UAAU,GAAG;AAAA,IACvD,KAAK,aAAa,MAAM,KAAK;AAAA,EAC9B;AAAA,EACA,KAAK,MAAM,UAAU;AAAA,EAErB,SAAS,KAAK,OAAO,IAAI;AAAA,EACzB,KAAK,MAAM;AAAA,EACX,KAAK,OAAO;AAAA;AAIN,SAAS,QAAQ,CAAC,MAAY,UAAkB;AAAA,EACtD,MAAM,MAAM,IAAI,gBAAgB,IAAI;AAAA,EACpC,UAAU,KAAK,EAAE,UAAU,SAAS,CAAC;AAAA,EACrC,YAAY,GAAG;AAAA;",
+  "debugId": "3BAD8691A74B531364756E2164756E21",
+  "names": []
+}

package/dist/chunks/{index-h3vjydz7.js → index-r93kpbtg.js}

@@ -7,9 +7,13 @@ import {
 import {
   resolvePdfFileName2
 } from "./index-paaaedrm.js";
+import {
+  revokeLater,
+  clickLink,
+  saveBlob
+} from "./index-15vj9xbx.js";
 
 // src/lib/pdf-download.ts
-var OBJECT_URL_TTL_MS2 = 60000;
 function fetchInit(source) {
   if (!isPdfUrlSource2(source))
     return;
@@ -39,25 +43,6 @@ async function resolvePdfBlob(source, getData) {
     return null;
   }
 }
-function revokeLater(url) {
-  window.setTimeout(() => URL.revokeObjectURL(url), OBJECT_URL_TTL_MS2);
-}
-function clickLink(href, attributes) {
-  const link = document.createElement("a");
-  link.href = href;
-  for (const [name, value] of Object.entries(attributes)) {
-    link.setAttribute(name, value);
-  }
-  link.style.display = "none";
-  document.body.append(link);
-  link.click();
-  link.remove();
-}
-function saveBlob(blob, fileName) {
-  const url = URL.createObjectURL(blob);
-  clickLink(url, { download: fileName });
-  revokeLater(url);
-}
 function openInNewTab(href) {
   clickLink(href, { target: "_blank", rel: "noopener" });
 }
@@ -107,7 +92,7 @@ async function printPdfFile2(source, options = {}) {
   document.body.append(frame);
 }
 
-export { OBJECT_URL_TTL_MS2, downloadPdfFile2, printPdfFile2 };
+export { downloadPdfFile2, printPdfFile2 };
 
-//# debugId=77B6E1C9EF4463B464756E2164756E21
-//# sourceMappingURL=index-h3vjydz7.js.map
+//# debugId=3B08A2D665AEF3C464756E2164756E21
+//# sourceMappingURL=index-r93kpbtg.js.map

package/dist/chunks/index-r93kpbtg.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/lib/pdf-download.ts"],
+  "sourcesContent": [
+    "import { resolvePdfFileName } from './pdf-file-name';\nimport {\n\tcopyPdfData,\n\tisBlob,\n\tisPdfUrlSource,\n\ttype PdfSource,\n\tpdfSourceUrl,\n} from './pdf-source';\nimport { clickLink, revokeLater, saveBlob } from './save-blob';\n\nexport { OBJECT_URL_TTL_MS } from './save-blob';\n\nexport type PdfFileOptions = {\n\t/** Name of the saved file; `.pdf` is added when missing. */\n\tfileName?: string;\n\t/**\n\t * Name used when neither `fileName`, a `File`'s name nor the URL gives\n\t * one: `document`, or its translation.\n\t */\n\tdefaultName?: string;\n\t/**\n\t * Bytes of the document the reader already loaded. Saving them needs no\n\t * second request, and works for a cross-origin URL, where the `download`\n\t * attribute is ignored.\n\t */\n\tgetData?: () =>\n\t\t| Uint8Array\n\t\t| null\n\t\t| undefined\n\t\t| Promise<Uint8Array | null | undefined>;\n};\n\nfunction fetchInit(source: PdfSource): RequestInit | undefined {\n\tif (!isPdfUrlSource(source)) return undefined;\n\treturn {\n\t\theaders: source.httpHeaders,\n\t\tcredentials: source.withCredentials ? 'include' : 'same-origin',\n\t};\n}\n\nasync function resolvePdfBlob(\n\tsource: PdfSource,\n\tgetData: PdfFileOptions['getData'],\n): Promise<Blob | null> {\n\tconst url = pdfSourceUrl(source);\n\tif (url === null) {\n\t\t// A Blob or bytes: a Blob copies what it is given.\n\t\treturn isBlob(source)\n\t\t\t? source\n\t\t\t: new Blob([copyPdfData(source as ArrayBuffer | Uint8Array)], {\n\t\t\t\t\ttype: 'application/pdf',\n\t\t\t\t});\n\t}\n\ttry {\n\t\tconst bytes = await getData?.();\n\t\tif (bytes?.byteLength) {\n\t\t\treturn new Blob([copyPdfData(bytes)], { type: 'application/pdf' });\n\t\t}\n\t} catch {\n\t\t/* the document may be gone; fetch it instead */\n\t}\n\ttry {\n\t\tconst init = fetchInit(source);\n\t\tconst response = await (init ? fetch(url, init) : fetch(url));\n\t\treturn response.ok ? await response.blob() : null;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nfunction openInNewTab(href: string) {\n\tclickLink(href, { target: '_blank', rel: 'noopener' });\n}\n\n/**\n * The URL a new tab may open when the document could not be read. None for\n * a URL with headers: a tab sends no `Authorization`, so it would only show\n * the server's refusal.\n */\nfunction fallbackUrl(source: PdfSource) {\n\tif (isPdfUrlSource(source) && source.httpHeaders) return null;\n\treturn pdfSourceUrl(source);\n}\n\n/**\n * Downloads the PDF under its resolved name. A URL is saved from the loaded\n * bytes or fetched; when neither works (CORS), it opens in a new tab, which\n * a popup blocker may stop once the click's activation has expired. A URL\n * with headers never opens in a tab: it would load without them.\n */\nexport async function downloadPdfFile(\n\tsource: PdfSource,\n\toptions: PdfFileOptions = {},\n) {\n\tconst name = resolvePdfFileName(\n\t\tsource,\n\t\toptions.fileName,\n\t\toptions.defaultName,\n\t);\n\tconst blob = await resolvePdfBlob(source, options.getData);\n\tconst url = fallbackUrl(source);\n\tif (blob) saveBlob(blob, name);\n\telse if (url !== null) openInNewTab(url);\n}\n\n/**\n * Prints the PDF from a same-origin object URL in a hidden frame. When the\n * browser refuses (a PDF plugin that blocks `print()`, a cross-origin URL\n * that could not be fetched), the document opens in a new tab instead.\n */\nexport async function printPdfFile(\n\tsource: PdfSource,\n\toptions: Pick<PdfFileOptions, 'getData'> = {},\n) {\n\tconst blob = await resolvePdfBlob(source, options.getData);\n\tif (!blob) {\n\t\tconst url = fallbackUrl(source);\n\t\tif (url !== null) openInNewTab(url);\n\t\treturn;\n\t}\n\tconst url = URL.createObjectURL(blob);\n\tconst frame = document.createElement('iframe');\n\tframe.setAttribute('aria-hidden', 'true');\n\tframe.style.position = 'fixed';\n\tframe.style.right = '0';\n\tframe.style.bottom = '0';\n\tframe.style.width = '0';\n\tframe.style.height = '0';\n\tframe.style.border = '0';\n\tframe.src = url;\n\tframe.onload = () => {\n\t\ttry {\n\t\t\tframe.contentWindow?.focus();\n\t\t\tframe.contentWindow?.print();\n\t\t} catch {\n\t\t\topenInNewTab(url);\n\t\t} finally {\n\t\t\twindow.setTimeout(() => frame.remove(), 1000);\n\t\t\trevokeLater(url);\n\t\t}\n\t};\n\tdocument.body.append(frame);\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;AAgCA,SAAS,SAAS,CAAC,QAA4C;AAAA,EAC9D,IAAI,CAAC,gBAAe,MAAM;AAAA,IAAG;AAAA,EAC7B,OAAO;AAAA,IACN,SAAS,OAAO;AAAA,IAChB,aAAa,OAAO,kBAAkB,YAAY;AAAA,EACnD;AAAA;AAGD,eAAe,cAAc,CAC5B,QACA,SACuB;AAAA,EACvB,MAAM,MAAM,cAAa,MAAM;AAAA,EAC/B,IAAI,QAAQ,MAAM;AAAA,IAEjB,OAAO,QAAO,MAAM,IACjB,SACA,IAAI,KAAK,CAAC,aAAY,MAAkC,CAAC,GAAG;AAAA,MAC5D,MAAM;AAAA,IACP,CAAC;AAAA,EACJ;AAAA,EACA,IAAI;AAAA,IACH,MAAM,QAAQ,MAAM,UAAU;AAAA,IAC9B,IAAI,OAAO,YAAY;AAAA,MACtB,OAAO,IAAI,KAAK,CAAC,aAAY,KAAK,CAAC,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAAA,IAClE;AAAA,IACC,MAAM;AAAA,EAGR,IAAI;AAAA,IACH,MAAM,OAAO,UAAU,MAAM;AAAA,IAC7B,MAAM,WAAW,OAAO,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,GAAG;AAAA,IAC3D,OAAO,SAAS,KAAK,MAAM,SAAS,KAAK,IAAI;AAAA,IAC5C,MAAM;AAAA,IACP,OAAO;AAAA;AAAA;AAIT,SAAS,YAAY,CAAC,MAAc;AAAA,EACnC,UAAU,MAAM,EAAE,QAAQ,UAAU,KAAK,WAAW,CAAC;AAAA;AAQtD,SAAS,WAAW,CAAC,QAAmB;AAAA,EACvC,IAAI,gBAAe,MAAM,KAAK,OAAO;AAAA,IAAa,OAAO;AAAA,EACzD,OAAO,cAAa,MAAM;AAAA;AAS3B,eAAsB,gBAAe,CACpC,QACA,UAA0B,CAAC,GAC1B;AAAA,EACD,MAAM,OAAO,oBACZ,QACA,QAAQ,UACR,QAAQ,WACT;AAAA,EACA,MAAM,OAAO,MAAM,eAAe,QAAQ,QAAQ,OAAO;AAAA,EACzD,MAAM,MAAM,YAAY,MAAM;AAAA,EAC9B,IAAI;AAAA,IAAM,SAAS,MAAM,IAAI;AAAA,EACxB,SAAI,QAAQ;AAAA,IAAM,aAAa,GAAG;AAAA;AAQxC,eAAsB,aAAY,CACjC,QACA,UAA2C,CAAC,GAC3C;AAAA,EACD,MAAM,OAAO,MAAM,eAAe,QAAQ,QAAQ,OAAO;AAAA,EACzD,IAAI,CAAC,MAAM;AAAA,IACV,MAAM,MAAM,YAAY,MAAM;AAAA,IAC9B,IAAI,QAAQ;AAAA,MAAM,aAAa,GAAG;AAAA,IAClC;AAAA,EACD;AAAA,EACA,MAAM,MAAM,IAAI,gBAAgB,IAAI;AAAA,EACpC,MAAM,QAAQ,SAAS,cAAc,QAAQ;AAAA,EAC7C,MAAM,aAAa,eAAe,MAAM;AAAA,EACxC,MAAM,MAAM,WAAW;AAAA,EACvB,MAAM,MAAM,QAAQ;AAAA,EACpB,MAAM,MAAM,SAAS;AAAA,EACrB,MAAM,MAAM,QAAQ;AAAA,EACpB,MAAM,MAAM,SAAS;AAAA,EACrB,MAAM,MAAM,SAAS;AAAA,EACrB,MAAM,MAAM;AAAA,EACZ,MAAM,SAAS,MAAM;AAAA,IACpB,IAAI;AAAA,MACH,MAAM,eAAe,MAAM;AAAA,MAC3B,MAAM,eAAe,MAAM;AAAA,MAC1B,MAAM;AAAA,MACP,aAAa,GAAG;AAAA,cACf;AAAA,MACD,OAAO,WAAW,MAAM,MAAM,OAAO,GAAG,IAAI;AAAA,MAC5C,YAAY,GAAG;AAAA;AAAA;AAAA,EAGjB,SAAS,KAAK,OAAO,KAAK;AAAA;",
+  "debugId": "3B08A2D665AEF3C464756E2164756E21",
+  "names": []
+}

package/dist/index.js

@@ -12,10 +12,9 @@ import {
   resolvePdfFileName2
 } from "./chunks/index-paaaedrm.js";
 import {
-  OBJECT_URL_TTL_MS2,
   downloadPdfFile2,
   printPdfFile2
-} from "./chunks/index-h3vjydz7.js";
+} from "./chunks/index-r93kpbtg.js";
 import {
   MAX_FRACTION_DIGITS2,
   fractionDigitsOption2
@@ -44,6 +43,9 @@ import {
   pdfBytesResponse2,
   toWebStream2
 } from "./chunks/index-2gcgcmc0.js";
+import {
+  OBJECT_URL_TTL_MS2
+} from "./chunks/index-15vj9xbx.js";
 import {
   text2,
   heading2,
@@ -129,5 +131,5 @@ export {
   totals2 as totals
 };
 
-//# debugId=1DC0C9D608FB064D64756E2164756E21
+//# debugId=E96D8B40D58DC02064756E2164756E21
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "1DC0C9D608FB064D64756E2164756E21",
+  "debugId": "E96D8B40D58DC02064756E2164756E21",
   "names": []
 }

package/dist/lib/code-errors.d.ts

@@ -0,0 +1,75 @@
+/**
+ * The part of a zod issue a code error map reads, by shape: core has no zod
+ * dependency, and every issue zod 4 hands an error map is assignable to it.
+ */
+export type CodeIssue = {
+    readonly code: string;
+    /** A custom issue's params: `.refine(…, { params: { code } })`. */
+    readonly params?: Record<string, unknown> | undefined;
+    /** The value that failed. */
+    readonly input?: unknown;
+    /** What a size issue measured: `'string'`, `'number'`, `'array'`… */
+    readonly origin?: string | undefined;
+    readonly minimum?: unknown;
+    readonly maximum?: unknown;
+    readonly expected?: unknown;
+    readonly message?: string | undefined;
+};
+/** The words for an issue, or `undefined` to let zod word it. */
+export type CodeErrorMap = (issue: CodeIssue) => string | undefined;
+export type CodeErrorMapOptions = {
+    /**
+     * The app's words for `code`, interpolating `params` (the custom issue's
+     * params, so `{ code, min: 3 }` can read "At least 3"). `undefined`, or
+     * the code returned verbatim (what a translator does with a key it lacks),
+     * means there are no words for it: `fallback` words the issue instead.
+     */
+    translate: (code: string, params: Record<string, unknown> | undefined) => string | undefined;
+    /**
+     * Which code an issue carries. Defaults to {@link defaultCodeOf}: a custom
+     * issue's `params.code`, when it is a string.
+     */
+    codeOf?: (issue: CodeIssue) => string | undefined;
+    /**
+     * Words an issue with no code, or one whose code has no words: the
+     * libraries pass `zodLocaleError({ language, translate })`.
+     */
+    fallback: CodeErrorMap;
+};
+/** A custom issue's `params.code`, when it is a string; otherwise none. */
+export declare function defaultCodeOf(issue: CodeIssue): string | undefined;
+/**
+ * Whether an issue only says the field was left empty: a string shorter than
+ * one character (`z.string().min(1)`), or a value of the wrong type that is
+ * not there at all (`undefined` or `null`).
+ *
+ * @example
+ * ```ts
+ * createCodeErrorMap({
+ *   translate,
+ *   fallback,
+ *   codeOf: (issue) =>
+ *     isEmptyRequired(issue) ? 'errors.required' : defaultCodeOf(issue),
+ * });
+ * ```
+ */
+export declare function isEmptyRequired(issue: CodeIssue): boolean;
+/**
+ * A zod 4 error map that words an issue by the code it carries, in the
+ * app's words: a refinement's `params.code` (an API error code, say) reads
+ * as `translate(code, params)`. An issue with no code, or whose code
+ * `translate` has no words for, is worded by `fallback`.
+ *
+ * @example
+ * ```ts
+ * import { createCodeErrorMap } from '@nxgt/material-core/code-errors';
+ *
+ * const error = createCodeErrorMap({
+ *   translate: (code, params) => translate(code, params, language),
+ *   fallback: zodLocaleError({ language, translate }),
+ * });
+ * schema.safeParse(values, { error });
+ * ```
+ */
+export declare function createCodeErrorMap({ translate, codeOf, fallback, }: CodeErrorMapOptions): CodeErrorMap;
+//# sourceMappingURL=code-errors.d.ts.map

package/dist/lib/code-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-errors.d.ts","sourceRoot":"","sources":["../../src/lib/code-errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mEAAmE;IACnE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACtD,6BAA6B;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC,CAAC;AAEF,iEAAiE;AACjE,MAAM,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,SAAS,KAAK,MAAM,GAAG,SAAS,CAAC;AAEpE,MAAM,MAAM,mBAAmB,GAAG;IACjC;;;;;OAKG;IACH,SAAS,EAAE,CACV,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,KACvC,MAAM,GAAG,SAAS,CAAC;IACxB;;;OAGG;IACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,MAAM,GAAG,SAAS,CAAC;IAClD;;;OAGG;IACH,QAAQ,EAAE,YAAY,CAAC;CACvB,CAAC;AAEF,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAIlE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAMzD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,EAClC,SAAS,EACT,MAAsB,EACtB,QAAQ,GACR,EAAE,mBAAmB,GAAG,YAAY,CASpC"}

package/dist/lib/code-errors.js

@@ -0,0 +1,37 @@
+// src/lib/code-errors.ts
+function defaultCodeOf(issue) {
+  if (issue.code !== "custom")
+    return;
+  const code = issue.params?.code;
+  return typeof code === "string" ? code : undefined;
+}
+function isEmptyRequired(issue) {
+  if (issue.code === "too_small")
+    return issue.origin === "string" && Number(issue.minimum) === 1;
+  if (issue.code === "invalid_type")
+    return issue.input === undefined || issue.input === null;
+  return false;
+}
+function createCodeErrorMap({
+  translate,
+  codeOf = defaultCodeOf,
+  fallback
+}) {
+  return (issue) => {
+    const code = codeOf(issue);
+    if (code) {
+      const words = translate(code, issue.params);
+      if (words !== undefined && words !== code)
+        return words;
+    }
+    return fallback(issue);
+  };
+}
+export {
+  createCodeErrorMap,
+  defaultCodeOf,
+  isEmptyRequired
+};
+
+//# debugId=7DC5306E81E48FAB64756E2164756E21
+//# sourceMappingURL=code-errors.js.map

package/dist/lib/code-errors.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/lib/code-errors.ts"],
+  "sourcesContent": [
+    "/**\n * The part of a zod issue a code error map reads, by shape: core has no zod\n * dependency, and every issue zod 4 hands an error map is assignable to it.\n */\nexport type CodeIssue = {\n\treadonly code: string;\n\t/** A custom issue's params: `.refine(…, { params: { code } })`. */\n\treadonly params?: Record<string, unknown> | undefined;\n\t/** The value that failed. */\n\treadonly input?: unknown;\n\t/** What a size issue measured: `'string'`, `'number'`, `'array'`… */\n\treadonly origin?: string | undefined;\n\treadonly minimum?: unknown;\n\treadonly maximum?: unknown;\n\treadonly expected?: unknown;\n\treadonly message?: string | undefined;\n};\n\n/** The words for an issue, or `undefined` to let zod word it. */\nexport type CodeErrorMap = (issue: CodeIssue) => string | undefined;\n\nexport type CodeErrorMapOptions = {\n\t/**\n\t * The app's words for `code`, interpolating `params` (the custom issue's\n\t * params, so `{ code, min: 3 }` can read \"At least 3\"). `undefined`, or\n\t * the code returned verbatim (what a translator does with a key it lacks),\n\t * means there are no words for it: `fallback` words the issue instead.\n\t */\n\ttranslate: (\n\t\tcode: string,\n\t\tparams: Record<string, unknown> | undefined,\n\t) => string | undefined;\n\t/**\n\t * Which code an issue carries. Defaults to {@link defaultCodeOf}: a custom\n\t * issue's `params.code`, when it is a string.\n\t */\n\tcodeOf?: (issue: CodeIssue) => string | undefined;\n\t/**\n\t * Words an issue with no code, or one whose code has no words: the\n\t * libraries pass `zodLocaleError({ language, translate })`.\n\t */\n\tfallback: CodeErrorMap;\n};\n\n/** A custom issue's `params.code`, when it is a string; otherwise none. */\nexport function defaultCodeOf(issue: CodeIssue): string | undefined {\n\tif (issue.code !== 'custom') return undefined;\n\tconst code = issue.params?.code;\n\treturn typeof code === 'string' ? code : undefined;\n}\n\n/**\n * Whether an issue only says the field was left empty: a string shorter than\n * one character (`z.string().min(1)`), or a value of the wrong type that is\n * not there at all (`undefined` or `null`).\n *\n * @example\n * ```ts\n * createCodeErrorMap({\n *   translate,\n *   fallback,\n *   codeOf: (issue) =>\n *     isEmptyRequired(issue) ? 'errors.required' : defaultCodeOf(issue),\n * });\n * ```\n */\nexport function isEmptyRequired(issue: CodeIssue): boolean {\n\tif (issue.code === 'too_small')\n\t\treturn issue.origin === 'string' && Number(issue.minimum) === 1;\n\tif (issue.code === 'invalid_type')\n\t\treturn issue.input === undefined || issue.input === null;\n\treturn false;\n}\n\n/**\n * A zod 4 error map that words an issue by the code it carries, in the\n * app's words: a refinement's `params.code` (an API error code, say) reads\n * as `translate(code, params)`. An issue with no code, or whose code\n * `translate` has no words for, is worded by `fallback`.\n *\n * @example\n * ```ts\n * import { createCodeErrorMap } from '@nxgt/material-core/code-errors';\n *\n * const error = createCodeErrorMap({\n *   translate: (code, params) => translate(code, params, language),\n *   fallback: zodLocaleError({ language, translate }),\n * });\n * schema.safeParse(values, { error });\n * ```\n */\nexport function createCodeErrorMap({\n\ttranslate,\n\tcodeOf = defaultCodeOf,\n\tfallback,\n}: CodeErrorMapOptions): CodeErrorMap {\n\treturn (issue) => {\n\t\tconst code = codeOf(issue);\n\t\tif (code) {\n\t\t\tconst words = translate(code, issue.params);\n\t\t\tif (words !== undefined && words !== code) return words;\n\t\t}\n\t\treturn fallback(issue);\n\t};\n}\n"
+  ],
+  "mappings": ";AA6CO,SAAS,aAAa,CAAC,OAAsC;AAAA,EACnE,IAAI,MAAM,SAAS;AAAA,IAAU;AAAA,EAC7B,MAAM,OAAO,MAAM,QAAQ;AAAA,EAC3B,OAAO,OAAO,SAAS,WAAW,OAAO;AAAA;AAkBnC,SAAS,eAAe,CAAC,OAA2B;AAAA,EAC1D,IAAI,MAAM,SAAS;AAAA,IAClB,OAAO,MAAM,WAAW,YAAY,OAAO,MAAM,OAAO,MAAM;AAAA,EAC/D,IAAI,MAAM,SAAS;AAAA,IAClB,OAAO,MAAM,UAAU,aAAa,MAAM,UAAU;AAAA,EACrD,OAAO;AAAA;AAoBD,SAAS,kBAAkB;AAAA,EACjC;AAAA,EACA,SAAS;AAAA,EACT;AAAA,GACqC;AAAA,EACrC,OAAO,CAAC,UAAU;AAAA,IACjB,MAAM,OAAO,OAAO,KAAK;AAAA,IACzB,IAAI,MAAM;AAAA,MACT,MAAM,QAAQ,UAAU,MAAM,MAAM,MAAM;AAAA,MAC1C,IAAI,UAAU,aAAa,UAAU;AAAA,QAAM,OAAO;AAAA,IACnD;AAAA,IACA,OAAO,SAAS,KAAK;AAAA;AAAA;",
+  "debugId": "7DC5306E81E48FAB64756E2164756E21",
+  "names": []
+}

package/dist/lib/pdf-download.d.ts

@@ -1,10 +1,5 @@
 import { type PdfSource } from './pdf-source';
-/**
- * How long an object URL outlives the click that started its download or
- * opened its tab. Revoking it synchronously cancels the download in Firefox
- * and Safari, which read the URL after `click()` returns.
- */
-export declare const OBJECT_URL_TTL_MS = 60000;
+export { OBJECT_URL_TTL_MS } from './save-blob';
 export type PdfFileOptions = {
     /** Name of the saved file; `.pdf` is added when missing. */
     fileName?: string;

package/dist/lib/pdf-download.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pdf-download.d.ts","sourceRoot":"","sources":["../../src/lib/pdf-download.ts"],"names":[],"mappings":"AACA,OAAO,EAIN,KAAK,SAAS,EAEd,MAAM,cAAc,CAAC;AAEtB;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,QAAS,CAAC;AAExC,MAAM,MAAM,cAAc,GAAG;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MACP,UAAU,GACV,IAAI,GACJ,SAAS,GACT,OAAO,CAAC,UAAU,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;CAC1C,CAAC;AA8EF;;;;;GAKG;AACH,wBAAsB,eAAe,CACpC,MAAM,EAAE,SAAS,EACjB,OAAO,GAAE,cAAmB,iBAW5B;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CACjC,MAAM,EAAE,SAAS,EACjB,OAAO,GAAE,IAAI,CAAC,cAAc,EAAE,SAAS,CAAM,iBA8B7C"}
+{"version":3,"file":"pdf-download.d.ts","sourceRoot":"","sources":["../../src/lib/pdf-download.ts"],"names":[],"mappings":"AACA,OAAO,EAIN,KAAK,SAAS,EAEd,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,MAAM,cAAc,GAAG;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MACP,UAAU,GACV,IAAI,GACJ,SAAS,GACT,OAAO,CAAC,UAAU,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;CAC1C,CAAC;AAsDF;;;;;GAKG;AACH,wBAAsB,eAAe,CACpC,MAAM,EAAE,SAAS,EACjB,OAAO,GAAE,cAAmB,iBAW5B;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CACjC,MAAM,EAAE,SAAS,EACjB,OAAO,GAAE,IAAI,CAAC,cAAc,EAAE,SAAS,CAAM,iBA8B7C"}

package/dist/lib/pdf-download.js

@@ -1,8 +1,10 @@
 import {
-  OBJECT_URL_TTL_MS2,
   downloadPdfFile2,
   printPdfFile2
-} from "../chunks/index-h3vjydz7.js";
+} from "../chunks/index-r93kpbtg.js";
+import {
+  OBJECT_URL_TTL_MS2
+} from "../chunks/index-15vj9xbx.js";
 import"../chunks/index-paaaedrm.js";
 import"../chunks/index-5r6rzp43.js";
 export {
@@ -11,5 +13,5 @@ export {
   printPdfFile2 as printPdfFile
 };
 
-//# debugId=A31116C0601A104A64756E2164756E21
+//# debugId=ACA699EE49816B1764756E2164756E21
 //# sourceMappingURL=pdf-download.js.map

package/dist/lib/pdf-download.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "A31116C0601A104A64756E2164756E21",
+  "debugId": "ACA699EE49816B1764756E2164756E21",
   "names": []
 }

package/dist/lib/print-only.d.ts

@@ -0,0 +1,29 @@
+/**
+ * `@nxgt/material-core/print-only` — prints one element of the page and
+ * nothing else, without an inline style or a new window: the page's
+ * stylesheet does the hiding. Both libraries ship the rules (`print-only.css`,
+ * through their `styles.css`): under
+ * `html[data-nxgt-print]`, print media shows only `[data-nxgt-print-target]`.
+ * Reads the DOM only when called.
+ */
+/** Set on `<html>` while printing, to the `name` given to {@link printOnly}. */
+export declare const PRINT_ATTRIBUTE = "data-nxgt-print";
+/** Set on the element being printed. */
+export declare const PRINT_TARGET_ATTRIBUTE = "data-nxgt-print-target";
+/**
+ * Marks `target` as the only thing to print, opens the browser's print
+ * dialog and unmarks it once printing is over: on `afterprint`, or as soon as
+ * `print()` returns where it blocks until the dialog closes (it fired
+ * `beforeprint` before returning). The returned function unmarks it at once —
+ * call it when the element goes away, for a browser whose `print()` returns
+ * early and never says it is done.
+ *
+ * @example
+ * ```ts
+ * const stop = printOnly(card, 'recovery-codes');
+ * // later, when the card unmounts:
+ * stop();
+ * ```
+ */
+export declare function printOnly(target: HTMLElement, name?: string): () => void;
+//# sourceMappingURL=print-only.d.ts.map

package/dist/lib/print-only.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"print-only.d.ts","sourceRoot":"","sources":["../../src/lib/print-only.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,gFAAgF;AAChF,eAAO,MAAM,eAAe,oBAAoB,CAAC;AACjD,wCAAwC;AACxC,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAE/D;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,SAAY,GAAG,MAAM,IAAI,CA0B3E"}

package/dist/lib/print-only.js

@@ -0,0 +1,39 @@
+// src/lib/print-only.ts
+var PRINT_ATTRIBUTE = "data-nxgt-print";
+var PRINT_TARGET_ATTRIBUTE = "data-nxgt-print-target";
+function printOnly(target, name = "element") {
+  const doc = target.ownerDocument;
+  const view = doc.defaultView ?? window;
+  const root = doc.documentElement;
+  let began = false;
+  const onBegin = () => {
+    began = true;
+  };
+  const clear = () => {
+    view.removeEventListener("beforeprint", onBegin);
+    view.removeEventListener("afterprint", clear);
+    root.removeAttribute(PRINT_ATTRIBUTE);
+    target.removeAttribute(PRINT_TARGET_ATTRIBUTE);
+  };
+  root.setAttribute(PRINT_ATTRIBUTE, name);
+  target.setAttribute(PRINT_TARGET_ATTRIBUTE, "");
+  view.addEventListener("beforeprint", onBegin);
+  view.addEventListener("afterprint", clear);
+  try {
+    view.print();
+  } catch (error) {
+    clear();
+    throw error;
+  }
+  if (began)
+    clear();
+  return clear;
+}
+export {
+  PRINT_ATTRIBUTE,
+  PRINT_TARGET_ATTRIBUTE,
+  printOnly
+};
+
+//# debugId=BF8B5FF251A0F79964756E2164756E21
+//# sourceMappingURL=print-only.js.map

package/dist/lib/print-only.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/lib/print-only.ts"],
+  "sourcesContent": [
+    "/**\n * `@nxgt/material-core/print-only` — prints one element of the page and\n * nothing else, without an inline style or a new window: the page's\n * stylesheet does the hiding. Both libraries ship the rules (`print-only.css`,\n * through their `styles.css`): under\n * `html[data-nxgt-print]`, print media shows only `[data-nxgt-print-target]`.\n * Reads the DOM only when called.\n */\n\n/** Set on `<html>` while printing, to the `name` given to {@link printOnly}. */\nexport const PRINT_ATTRIBUTE = 'data-nxgt-print';\n/** Set on the element being printed. */\nexport const PRINT_TARGET_ATTRIBUTE = 'data-nxgt-print-target';\n\n/**\n * Marks `target` as the only thing to print, opens the browser's print\n * dialog and unmarks it once printing is over: on `afterprint`, or as soon as\n * `print()` returns where it blocks until the dialog closes (it fired\n * `beforeprint` before returning). The returned function unmarks it at once —\n * call it when the element goes away, for a browser whose `print()` returns\n * early and never says it is done.\n *\n * @example\n * ```ts\n * const stop = printOnly(card, 'recovery-codes');\n * // later, when the card unmounts:\n * stop();\n * ```\n */\nexport function printOnly(target: HTMLElement, name = 'element'): () => void {\n\tconst doc = target.ownerDocument;\n\tconst view = doc.defaultView ?? window;\n\tconst root = doc.documentElement;\n\tlet began = false;\n\tconst onBegin = () => {\n\t\tbegan = true;\n\t};\n\tconst clear = () => {\n\t\tview.removeEventListener('beforeprint', onBegin);\n\t\tview.removeEventListener('afterprint', clear);\n\t\troot.removeAttribute(PRINT_ATTRIBUTE);\n\t\ttarget.removeAttribute(PRINT_TARGET_ATTRIBUTE);\n\t};\n\troot.setAttribute(PRINT_ATTRIBUTE, name);\n\ttarget.setAttribute(PRINT_TARGET_ATTRIBUTE, '');\n\tview.addEventListener('beforeprint', onBegin);\n\tview.addEventListener('afterprint', clear);\n\ttry {\n\t\tview.print();\n\t} catch (error) {\n\t\tclear();\n\t\tthrow error;\n\t}\n\tif (began) clear();\n\treturn clear;\n}\n"
+  ],
+  "mappings": ";AAUO,IAAM,kBAAkB;AAExB,IAAM,yBAAyB;AAiB/B,SAAS,SAAS,CAAC,QAAqB,OAAO,WAAuB;AAAA,EAC5E,MAAM,MAAM,OAAO;AAAA,EACnB,MAAM,OAAO,IAAI,eAAe;AAAA,EAChC,MAAM,OAAO,IAAI;AAAA,EACjB,IAAI,QAAQ;AAAA,EACZ,MAAM,UAAU,MAAM;AAAA,IACrB,QAAQ;AAAA;AAAA,EAET,MAAM,QAAQ,MAAM;AAAA,IACnB,KAAK,oBAAoB,eAAe,OAAO;AAAA,IAC/C,KAAK,oBAAoB,cAAc,KAAK;AAAA,IAC5C,KAAK,gBAAgB,eAAe;AAAA,IACpC,OAAO,gBAAgB,sBAAsB;AAAA;AAAA,EAE9C,KAAK,aAAa,iBAAiB,IAAI;AAAA,EACvC,OAAO,aAAa,wBAAwB,EAAE;AAAA,EAC9C,KAAK,iBAAiB,eAAe,OAAO;AAAA,EAC5C,KAAK,iBAAiB,cAAc,KAAK;AAAA,EACzC,IAAI;AAAA,IACH,KAAK,MAAM;AAAA,IACV,OAAO,OAAO;AAAA,IACf,MAAM;AAAA,IACN,MAAM;AAAA;AAAA,EAEP,IAAI;AAAA,IAAO,MAAM;AAAA,EACjB,OAAO;AAAA;",
+  "debugId": "BF8B5FF251A0F79964756E2164756E21",
+  "names": []
+}

package/dist/lib/save-blob.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Saving a Blob as a file through a temporary `<a download>`: what
+ * `/pdf-download` and `/two-factor`'s `downloadText` share. Reads the DOM
+ * only when called.
+ */
+/**
+ * How long an object URL outlives the click that started its download or
+ * opened its tab. Revoking it synchronously cancels the download in Firefox
+ * and Safari, which read the URL after `click()` returns.
+ */
+export declare const OBJECT_URL_TTL_MS = 60000;
+export declare function revokeLater(url: string): void;
+export declare function clickLink(href: string, attributes: Record<string, string>): void;
+/** Saves a Blob under `fileName`, and revokes its URL once the save began. */
+export declare function saveBlob(blob: Blob, fileName: string): void;
+//# sourceMappingURL=save-blob.d.ts.map

package/dist/lib/save-blob.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"save-blob.d.ts","sourceRoot":"","sources":["../../src/lib/save-blob.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,QAAS,CAAC;AAExC,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,QAEtC;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAWzE;AAED,8EAA8E;AAC9E,wBAAgB,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,QAIpD"}

package/dist/lib/submit-guard.d.ts

@@ -0,0 +1,72 @@
+/** How {@link SubmitGuard.once} treats what `run` returns. */
+export type SubmitOnceOptions = {
+    /**
+     * A result that is not a promise (a handler that returned early, say)
+     * settles the guard at once. Default `false`: the guard then waits for
+     * `settle()`, which suits a request followed by a busy flag
+     * ({@link busySettler}). Without one, return the request's promise or set
+     * this.
+     */
+    settleSync?: boolean;
+};
+/** One submit in flight: see {@link createSubmitGuard}. */
+export type SubmitGuard = {
+    /**
+     * `run`, wrapped so it runs only when no submit is on its way. The wrapper
+     * returns what `run` returned — a promise as one that settles as `run`'s
+     * does, rejection included — or `undefined` when the call was dropped.
+     * A dropped call whose first argument is an event (a form's `submit`)
+     * has its default prevented, so it never falls back to the browser's own
+     * submission, which would reload the page.
+     */
+    once<A extends unknown[], R>(run: (...args: A) => R, options?: SubmitOnceOptions): (...args: A) => R | undefined;
+    /**
+     * Opens the guard again: the next call goes through. Given a run (from
+     * {@link SubmitGuard.pendingRun}), only while that run is still the one
+     * on its way: a late `settle(run)` never reopens it over a newer one.
+     */
+    settle(run?: number): void;
+    /** The run on its way (an increasing number), or `undefined` when open. */
+    pendingRun(): number | undefined;
+};
+/**
+ * Lets one submit through until the request it started settles. A second
+ * click, or Enter, before the busy state renders (a disabled or loading
+ * button only stops clicks once rendered, and never Enter) would post again,
+ * and may abort the first request mid-call.
+ *
+ * `settle()` opens it again. A `run` that returns a promise settles it when
+ * that promise ends, fulfilled or rejected; a `run` that throws settles it
+ * and rethrows; any other result keeps it closed until `settle()`, unless
+ * `once(run, { settleSync: true })`. So: return the request's promise, or
+ * follow the request with a busy flag ({@link busySettler}). The guard never
+ * swallows a rejection: the promise the wrapper returns rejects as `run`'s
+ * did, for the caller to handle (left unhandled, it is reported as `run`'s
+ * would have been), and the guard adds no promise of its own that could
+ * reject unhandled.
+ *
+ * @example
+ * ```ts
+ * const guard = createSubmitGuard();
+ * const submit = guard.once((values: Values) => save(values));
+ * form.addEventListener('submit', (event) => {
+ *   event.preventDefault();
+ *   submit(read(form)); // a second submit before `save` ends is dropped
+ * });
+ * ```
+ */
+export declare function createSubmitGuard(): SubmitGuard;
+/**
+ * Follows a request's busy flag for `guard`: call the function it returns
+ * with each value of the flag. Once the flag was true and is false again, it
+ * settles the run that was on its way when the flag rose — never a newer one
+ * — or, when none was, the run on its way when it falls.
+ *
+ * @example
+ * ```ts
+ * const onBusy = busySettler(guard);
+ * router.subscribe((state) => onBusy(state.navigation.state !== 'idle'));
+ * ```
+ */
+export declare function busySettler(guard: SubmitGuard): (busy: boolean) => void;
+//# sourceMappingURL=submit-guard.d.ts.map

package/dist/lib/submit-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"submit-guard.d.ts","sourceRoot":"","sources":["../../src/lib/submit-guard.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,MAAM,MAAM,iBAAiB,GAAG;IAC/B;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,2DAA2D;AAC3D,MAAM,MAAM,WAAW,GAAG;IACzB;;;;;;;OAOG;IACH,IAAI,CAAC,CAAC,SAAS,OAAO,EAAE,EAAE,CAAC,EAC1B,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,EACtB,OAAO,CAAC,EAAE,iBAAiB,GACzB,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;IACjC;;;;OAIG;IACH,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,2EAA2E;IAC3E,UAAU,IAAI,MAAM,GAAG,SAAS,CAAC;CACjC,CAAC;AAcF;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,iBAAiB,IAAI,WAAW,CAuC/C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,WAAW,GAAG,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAcvE"}

package/dist/lib/submit-guard.js

@@ -0,0 +1,69 @@
+// src/lib/submit-guard.ts
+var preventDefault = (event) => {
+  const target = event;
+  if (typeof target?.preventDefault === "function")
+    event.preventDefault();
+};
+var isThenable = (value) => typeof value === "object" && value !== null && typeof value.then === "function";
+function createSubmitGuard() {
+  let pending = false;
+  let run = 0;
+  const settle = (id) => {
+    if (id === undefined || id === run)
+      pending = false;
+  };
+  return {
+    once(submit, options = {}) {
+      return (...args) => {
+        if (pending) {
+          preventDefault(args[0]);
+          return;
+        }
+        pending = true;
+        run += 1;
+        const id = run;
+        let ran;
+        try {
+          ran = submit(...args);
+        } catch (error) {
+          settle(id);
+          throw error;
+        }
+        if (!isThenable(ran)) {
+          if (options.settleSync)
+            settle(id);
+          return ran;
+        }
+        const settled = Promise.resolve(ran).finally(() => settle(id));
+        return settled;
+      };
+    },
+    settle,
+    pendingRun: () => pending ? run : undefined
+  };
+}
+function busySettler(guard) {
+  let rose = false;
+  let runAtRise;
+  return (busy) => {
+    if (busy) {
+      if (!rose)
+        runAtRise = guard.pendingRun();
+      rose = true;
+      return;
+    }
+    if (!rose)
+      return;
+    rose = false;
+    const run = runAtRise ?? guard.pendingRun();
+    if (run !== undefined)
+      guard.settle(run);
+  };
+}
+export {
+  busySettler,
+  createSubmitGuard
+};
+
+//# debugId=0F5FC92C3A2BF8E064756E2164756E21
+//# sourceMappingURL=submit-guard.js.map

package/dist/lib/submit-guard.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/lib/submit-guard.ts"],
+  "sourcesContent": [
+    "/** How {@link SubmitGuard.once} treats what `run` returns. */\nexport type SubmitOnceOptions = {\n\t/**\n\t * A result that is not a promise (a handler that returned early, say)\n\t * settles the guard at once. Default `false`: the guard then waits for\n\t * `settle()`, which suits a request followed by a busy flag\n\t * ({@link busySettler}). Without one, return the request's promise or set\n\t * this.\n\t */\n\tsettleSync?: boolean;\n};\n\n/** One submit in flight: see {@link createSubmitGuard}. */\nexport type SubmitGuard = {\n\t/**\n\t * `run`, wrapped so it runs only when no submit is on its way. The wrapper\n\t * returns what `run` returned — a promise as one that settles as `run`'s\n\t * does, rejection included — or `undefined` when the call was dropped.\n\t * A dropped call whose first argument is an event (a form's `submit`)\n\t * has its default prevented, so it never falls back to the browser's own\n\t * submission, which would reload the page.\n\t */\n\tonce<A extends unknown[], R>(\n\t\trun: (...args: A) => R,\n\t\toptions?: SubmitOnceOptions,\n\t): (...args: A) => R | undefined;\n\t/**\n\t * Opens the guard again: the next call goes through. Given a run (from\n\t * {@link SubmitGuard.pendingRun}), only while that run is still the one\n\t * on its way: a late `settle(run)` never reopens it over a newer one.\n\t */\n\tsettle(run?: number): void;\n\t/** The run on its way (an increasing number), or `undefined` when open. */\n\tpendingRun(): number | undefined;\n};\n\n/** Prevents the default of a dropped call's event, if it carries one. */\nconst preventDefault = (event: unknown) => {\n\tconst target = event as { preventDefault?: unknown } | null;\n\tif (typeof target?.preventDefault === 'function')\n\t\t(event as Event).preventDefault();\n};\n\nconst isThenable = (value: unknown): value is PromiseLike<unknown> =>\n\ttypeof value === 'object' &&\n\tvalue !== null &&\n\ttypeof (value as { then?: unknown }).then === 'function';\n\n/**\n * Lets one submit through until the request it started settles. A second\n * click, or Enter, before the busy state renders (a disabled or loading\n * button only stops clicks once rendered, and never Enter) would post again,\n * and may abort the first request mid-call.\n *\n * `settle()` opens it again. A `run` that returns a promise settles it when\n * that promise ends, fulfilled or rejected; a `run` that throws settles it\n * and rethrows; any other result keeps it closed until `settle()`, unless\n * `once(run, { settleSync: true })`. So: return the request's promise, or\n * follow the request with a busy flag ({@link busySettler}). The guard never\n * swallows a rejection: the promise the wrapper returns rejects as `run`'s\n * did, for the caller to handle (left unhandled, it is reported as `run`'s\n * would have been), and the guard adds no promise of its own that could\n * reject unhandled.\n *\n * @example\n * ```ts\n * const guard = createSubmitGuard();\n * const submit = guard.once((values: Values) => save(values));\n * form.addEventListener('submit', (event) => {\n *   event.preventDefault();\n *   submit(read(form)); // a second submit before `save` ends is dropped\n * });\n * ```\n */\nexport function createSubmitGuard(): SubmitGuard {\n\tlet pending = false;\n\t// Which run is on its way: an older run's promise (or busy flag) ending\n\t// late never reopens the guard over a newer one.\n\tlet run = 0;\n\tconst settle = (id?: number) => {\n\t\tif (id === undefined || id === run) pending = false;\n\t};\n\treturn {\n\t\tonce(submit, options = {}) {\n\t\t\treturn (...args) => {\n\t\t\t\tif (pending) {\n\t\t\t\t\tpreventDefault(args[0]);\n\t\t\t\t\treturn undefined;\n\t\t\t\t}\n\t\t\t\tpending = true;\n\t\t\t\trun += 1;\n\t\t\t\tconst id = run;\n\t\t\t\tlet ran: ReturnType<typeof submit>;\n\t\t\t\ttry {\n\t\t\t\t\tran = submit(...args);\n\t\t\t\t} catch (error) {\n\t\t\t\t\tsettle(id);\n\t\t\t\t\tthrow error;\n\t\t\t\t}\n\t\t\t\tif (!isThenable(ran)) {\n\t\t\t\t\tif (options.settleSync) settle(id);\n\t\t\t\t\treturn ran;\n\t\t\t\t}\n\t\t\t\t// The one chain on `ran`, handed back: a rejection reaches the\n\t\t\t\t// caller, never a second, unhandled promise. It is the same\n\t\t\t\t// promise type for a native promise (`Promise.resolve` returns it).\n\t\t\t\tconst settled = Promise.resolve(ran).finally(() => settle(id));\n\t\t\t\treturn settled as unknown as typeof ran;\n\t\t\t};\n\t\t},\n\t\tsettle,\n\t\tpendingRun: () => (pending ? run : undefined),\n\t};\n}\n\n/**\n * Follows a request's busy flag for `guard`: call the function it returns\n * with each value of the flag. Once the flag was true and is false again, it\n * settles the run that was on its way when the flag rose — never a newer one\n * — or, when none was, the run on its way when it falls.\n *\n * @example\n * ```ts\n * const onBusy = busySettler(guard);\n * router.subscribe((state) => onBusy(state.navigation.state !== 'idle'));\n * ```\n */\nexport function busySettler(guard: SubmitGuard): (busy: boolean) => void {\n\tlet rose = false;\n\tlet runAtRise: number | undefined;\n\treturn (busy) => {\n\t\tif (busy) {\n\t\t\tif (!rose) runAtRise = guard.pendingRun();\n\t\t\trose = true;\n\t\t\treturn;\n\t\t}\n\t\tif (!rose) return;\n\t\trose = false;\n\t\tconst run = runAtRise ?? guard.pendingRun();\n\t\tif (run !== undefined) guard.settle(run);\n\t};\n}\n"
+  ],
+  "mappings": ";AAqCA,IAAM,iBAAiB,CAAC,UAAmB;AAAA,EAC1C,MAAM,SAAS;AAAA,EACf,IAAI,OAAO,QAAQ,mBAAmB;AAAA,IACpC,MAAgB,eAAe;AAAA;AAGlC,IAAM,aAAa,CAAC,UACnB,OAAO,UAAU,YACjB,UAAU,QACV,OAAQ,MAA6B,SAAS;AA4BxC,SAAS,iBAAiB,GAAgB;AAAA,EAChD,IAAI,UAAU;AAAA,EAGd,IAAI,MAAM;AAAA,EACV,MAAM,SAAS,CAAC,OAAgB;AAAA,IAC/B,IAAI,OAAO,aAAa,OAAO;AAAA,MAAK,UAAU;AAAA;AAAA,EAE/C,OAAO;AAAA,IACN,IAAI,CAAC,QAAQ,UAAU,CAAC,GAAG;AAAA,MAC1B,OAAO,IAAI,SAAS;AAAA,QACnB,IAAI,SAAS;AAAA,UACZ,eAAe,KAAK,EAAE;AAAA,UACtB;AAAA,QACD;AAAA,QACA,UAAU;AAAA,QACV,OAAO;AAAA,QACP,MAAM,KAAK;AAAA,QACX,IAAI;AAAA,QACJ,IAAI;AAAA,UACH,MAAM,OAAO,GAAG,IAAI;AAAA,UACnB,OAAO,OAAO;AAAA,UACf,OAAO,EAAE;AAAA,UACT,MAAM;AAAA;AAAA,QAEP,IAAI,CAAC,WAAW,GAAG,GAAG;AAAA,UACrB,IAAI,QAAQ;AAAA,YAAY,OAAO,EAAE;AAAA,UACjC,OAAO;AAAA,QACR;AAAA,QAIA,MAAM,UAAU,QAAQ,QAAQ,GAAG,EAAE,QAAQ,MAAM,OAAO,EAAE,CAAC;AAAA,QAC7D,OAAO;AAAA;AAAA;AAAA,IAGT;AAAA,IACA,YAAY,MAAO,UAAU,MAAM;AAAA,EACpC;AAAA;AAeM,SAAS,WAAW,CAAC,OAA6C;AAAA,EACxE,IAAI,OAAO;AAAA,EACX,IAAI;AAAA,EACJ,OAAO,CAAC,SAAS;AAAA,IAChB,IAAI,MAAM;AAAA,MACT,IAAI,CAAC;AAAA,QAAM,YAAY,MAAM,WAAW;AAAA,MACxC,OAAO;AAAA,MACP;AAAA,IACD;AAAA,IACA,IAAI,CAAC;AAAA,MAAM;AAAA,IACX,OAAO;AAAA,IACP,MAAM,MAAM,aAAa,MAAM,WAAW;AAAA,IAC1C,IAAI,QAAQ;AAAA,MAAW,MAAM,OAAO,GAAG;AAAA;AAAA;",
+  "debugId": "0F5FC92C3A2BF8E064756E2164756E21",
+  "names": []
+}

package/dist/lib/two-factor.d.ts

@@ -0,0 +1,37 @@
+/**
+ * A secret in groups of `size` characters (4 by default), as one reads it
+ * out to type it: `"JBSWY3DPEHPK3PXP"` → `"JBSW Y3DP EHPK 3PXP"`. Whitespace
+ * already in it is dropped first, so a grouped secret groups the same.
+ */
+export declare function groupSecret(secret: string, size?: number): string;
+export type RecoveryCodesTextOptions = {
+    /** The file's first line: what the codes are for (an account, a product). */
+    heading?: string;
+    /** Its second line: how to use them ("Each code works once."). */
+    note?: string;
+};
+/**
+ * The recovery codes as the text file a person keeps: the heading, the note,
+ * a blank line, then one code per line and a trailing newline. A heading or
+ * note left out (or empty) is a line left out; with neither, the file is the
+ * codes alone.
+ *
+ * @example
+ * ```ts
+ * recoveryCodesText(['A-1', 'B-2'], { heading: 'Codes for ada@example.com', note: 'Each works once.' });
+ * // "Codes for ada@example.com\nEach works once.\n\nA-1\nB-2\n"
+ * ```
+ */
+export declare function recoveryCodesText(codes: readonly string[], { heading, note }?: RecoveryCodesTextOptions): string;
+export type DownloadTextOptions = {
+    /** The file's media type; `text/plain;charset=utf-8` by default. */
+    type?: string;
+};
+/**
+ * Saves `text` as a file named `fileName`, through an object URL and a
+ * temporary `<a download>`; the URL is revoked a minute later
+ * (`OBJECT_URL_TTL_MS`), as revoking it at once cancels the download in
+ * Firefox and Safari.
+ */
+export declare function downloadText(text: string, fileName: string, options?: DownloadTextOptions): void;
+//# sourceMappingURL=two-factor.d.ts.map

package/dist/lib/two-factor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"two-factor.d.ts","sourceRoot":"","sources":["../../src/lib/two-factor.ts"],"names":[],"mappings":"AASA;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,SAAI,GAAG,MAAM,CAS5D;AAED,MAAM,MAAM,wBAAwB,GAAG;IACtC,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAChC,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,EAAE,OAAO,EAAE,IAAI,EAAE,GAAE,wBAA6B,GAC9C,MAAM,CAIR;AAED,MAAM,MAAM,mBAAmB,GAAG;IACjC,oEAAoE;IACpE,IAAI,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,YAAY,CAC3B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,mBAAwB,GAC/B,IAAI,CAGN"}

package/dist/lib/two-factor.js

@@ -0,0 +1,38 @@
+import {
+  saveBlob
+} from "../chunks/index-15vj9xbx.js";
+
+// src/lib/two-factor.ts
+function groupSecret(secret, size = 4) {
+  const raw = secret.replace(/\s+/g, "");
+  const step = Math.floor(size);
+  if (!(step >= 1))
+    return raw;
+  const groups = [];
+  for (let start = 0;start < raw.length; start += step) {
+    groups.push(raw.slice(start, start + step));
+  }
+  return groups.join(" ");
+}
+function recoveryCodesText(codes, { heading, note } = {}) {
+  const head = [heading, note].filter((line) => Boolean(line));
+  const body = `${codes.join(`
+`)}
+`;
+  return head.length ? `${head.join(`
+`)}
+
+${body}` : body;
+}
+function downloadText(text, fileName, options = {}) {
+  const type = options.type ?? "text/plain;charset=utf-8";
+  saveBlob(new Blob([text], { type }), fileName);
+}
+export {
+  downloadText,
+  groupSecret,
+  recoveryCodesText
+};
+
+//# debugId=86107FED2A9CC6B264756E2164756E21
+//# sourceMappingURL=two-factor.js.map

package/dist/lib/two-factor.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/lib/two-factor.ts"],
+  "sourcesContent": [
+    "/**\n * `@nxgt/material-core/two-factor` — the framework-free part of both\n * libraries' `EnrolmentSecret` and `RecoveryCodes`: a TOTP secret grouped\n * to be typed by hand, the recovery codes as a text file, and saving that\n * file. Reads the DOM only when called. Printing one element of the page is\n * `/print-only`.\n */\nimport { saveBlob } from './save-blob';\n\n/**\n * A secret in groups of `size` characters (4 by default), as one reads it\n * out to type it: `\"JBSWY3DPEHPK3PXP\"` → `\"JBSW Y3DP EHPK 3PXP\"`. Whitespace\n * already in it is dropped first, so a grouped secret groups the same.\n */\nexport function groupSecret(secret: string, size = 4): string {\n\tconst raw = secret.replace(/\\s+/g, '');\n\tconst step = Math.floor(size);\n\tif (!(step >= 1)) return raw;\n\tconst groups: string[] = [];\n\tfor (let start = 0; start < raw.length; start += step) {\n\t\tgroups.push(raw.slice(start, start + step));\n\t}\n\treturn groups.join(' ');\n}\n\nexport type RecoveryCodesTextOptions = {\n\t/** The file's first line: what the codes are for (an account, a product). */\n\theading?: string;\n\t/** Its second line: how to use them (\"Each code works once.\"). */\n\tnote?: string;\n};\n\n/**\n * The recovery codes as the text file a person keeps: the heading, the note,\n * a blank line, then one code per line and a trailing newline. A heading or\n * note left out (or empty) is a line left out; with neither, the file is the\n * codes alone.\n *\n * @example\n * ```ts\n * recoveryCodesText(['A-1', 'B-2'], { heading: 'Codes for ada@example.com', note: 'Each works once.' });\n * // \"Codes for ada@example.com\\nEach works once.\\n\\nA-1\\nB-2\\n\"\n * ```\n */\nexport function recoveryCodesText(\n\tcodes: readonly string[],\n\t{ heading, note }: RecoveryCodesTextOptions = {},\n): string {\n\tconst head = [heading, note].filter((line): line is string => Boolean(line));\n\tconst body = `${codes.join('\\n')}\\n`;\n\treturn head.length ? `${head.join('\\n')}\\n\\n${body}` : body;\n}\n\nexport type DownloadTextOptions = {\n\t/** The file's media type; `text/plain;charset=utf-8` by default. */\n\ttype?: string;\n};\n\n/**\n * Saves `text` as a file named `fileName`, through an object URL and a\n * temporary `<a download>`; the URL is revoked a minute later\n * (`OBJECT_URL_TTL_MS`), as revoking it at once cancels the download in\n * Firefox and Safari.\n */\nexport function downloadText(\n\ttext: string,\n\tfileName: string,\n\toptions: DownloadTextOptions = {},\n): void {\n\tconst type = options.type ?? 'text/plain;charset=utf-8';\n\tsaveBlob(new Blob([text], { type }), fileName);\n}\n"
+  ],
+  "mappings": ";;;;;AAcO,SAAS,WAAW,CAAC,QAAgB,OAAO,GAAW;AAAA,EAC7D,MAAM,MAAM,OAAO,QAAQ,QAAQ,EAAE;AAAA,EACrC,MAAM,OAAO,KAAK,MAAM,IAAI;AAAA,EAC5B,IAAI,EAAE,QAAQ;AAAA,IAAI,OAAO;AAAA,EACzB,MAAM,SAAmB,CAAC;AAAA,EAC1B,SAAS,QAAQ,EAAG,QAAQ,IAAI,QAAQ,SAAS,MAAM;AAAA,IACtD,OAAO,KAAK,IAAI,MAAM,OAAO,QAAQ,IAAI,CAAC;AAAA,EAC3C;AAAA,EACA,OAAO,OAAO,KAAK,GAAG;AAAA;AAsBhB,SAAS,iBAAiB,CAChC,SACE,SAAS,SAAmC,CAAC,GACtC;AAAA,EACT,MAAM,OAAO,CAAC,SAAS,IAAI,EAAE,OAAO,CAAC,SAAyB,QAAQ,IAAI,CAAC;AAAA,EAC3E,MAAM,OAAO,GAAG,MAAM,KAAK;AAAA,CAAI;AAAA;AAAA,EAC/B,OAAO,KAAK,SAAS,GAAG,KAAK,KAAK;AAAA,CAAI;AAAA;AAAA,EAAQ,SAAS;AAAA;AAcjD,SAAS,YAAY,CAC3B,MACA,UACA,UAA+B,CAAC,GACzB;AAAA,EACP,MAAM,OAAO,QAAQ,QAAQ;AAAA,EAC7B,SAAS,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,KAAK,CAAC,GAAG,QAAQ;AAAA;",
+  "debugId": "86107FED2A9CC6B264756E2164756E21",
+  "names": []
+}

package/docs/roadmap.md

@@ -6,18 +6,33 @@ major they target.
 
 ## Now
 
-- **The page's Content Security Policy nonce** (`/csp-nonce`) — one place
-  both libraries read the nonce from, so every `<style>` they create carries
-  it under a strict `style-src-elem`, and a `build.assetsInlineLimit`
-  (`cspAssetsInlineLimit` in `/vite`) that keeps fonts out of `data:` URIs.
-  Shipped here first; both libraries use it now.
-
-- **Built on first use** (`/lazy-object`) — `buildOnce` and `lazyObject`,
-  with which both libraries build their zod schemas on first use rather
-  than at import, so an app under a strict CSP can configure zod first.
+Nothing is in progress.
 
 ## Next
 
+- **One Vite plugin for the whole setup** — `nxgtMaterial()` is implemented
+  once in `/vite` and re-exported by `@nxgt/material/vite` and
+  `@nxgt/material-vue/vite`, so both libraries get the same one-call setup.
+  Every option is on by default and each can be turned off or refined; the
+  helpers that exist today (`cspAssetsInlineLimit` and the others) stay
+  exported.
+  - `csp`: a nonce placeholder through `html.cspNonce` and
+    `applyCspNonce(html, nonce)`; zod's jitless mode as an inline nonced
+    script in `index.html` (`ZOD_JITLESS_SCRIPT` for server rendering); the
+    recommended policy sent by the dev server as Report-Only.
+  - `fonts`: the KaTeX fonts emitted as files, and `sans: 'inter'` for a
+    self-hosted Inter.
+  - `styles`: a build that fails with the exact fix when the stylesheet import
+    or the `@source` line is missing.
+  - `pdf`: pdfkit's standard fonts handled automatically when
+    `@react-pdf/renderer` is installed, and `bundle: true` (the Nuxt module's
+    `pdf.bundleStandardFonts` today) for a server that has no
+    `node_modules`.
+  - Nuxt: the Nuxt module takes the same options.
+  - Server helpers: `createCspNonce()` (Web Crypto) and `cspPolicy({ ... })`,
+    which returns `{ directives, header }` as `@nxgt/material`'s
+    Content Security Policy guide describes; `NonceProvider`'s `nonce`
+    becomes optional on the client. Ships as minors.
 - **The shared media player** — the player state machine (playback, queue and
   shuffle, chapters, transcript sync, resume position, quality levels, Wake
   Lock), its keyboard shortcuts and the shortcut-help list, so
@@ -46,6 +61,8 @@ major they target.
 
 ## Not planned
 
+- **A Next.js plugin** — the plugin targets Vite only. No supported consumer
+  builds with Next.js, and `withNxgtPrint` stays the config helper for it.
 - **Components.** This package stays framework-free: React components are in
   `@nxgt/material`, Vue ones in `@nxgt/material-vue`.
 - **A fake DOM for tests.** The one the libraries' own tests use is the
@@ -59,6 +76,22 @@ major they target.
 
 ## Shipped
 
+- **Two-step verification helpers and printing one element** (`/two-factor`,
+  `/print-only`) — a TOTP secret grouped to be typed by hand, the recovery
+  codes as a text file, saving a text file, and printing one element of the
+  page with no inline style, behind both libraries' `EnrolmentSecret` and
+  `RecoveryCodes`. 0.10.0.
+- **One submit in flight and errors worded by code** (`/submit-guard`,
+  `/code-errors`) — the guard behind both libraries' `useSubmitOnce`, and the
+  zod error map behind their `useCodeResolver`, which words a refinement's
+  `params.code` in the app's words and leaves the rest to a fallback. 0.10.0.
+- **The page's Content Security Policy nonce** (`/csp-nonce`) — one place both
+  libraries read the nonce from, so every `<style>` they create carries it
+  under a strict `style-src-elem`, and `cspAssetsInlineLimit` (`/vite`), which
+  keeps fonts out of `data:` URIs. 0.9.0.
+- **Built on first use** (`/lazy-object`) — `buildOnce` and `lazyObject`, with
+  which both libraries build their zod schemas on first use rather than at
+  import, so an app under a strict CSP can configure zod first. 0.9.0.
 - **Debounce, text matching and the async search** (`/debounce`,
   `/text-match`, `/async-search`) — the debounce both libraries'
   `SearchField` kept a copy of each, accent- and case-insensitive matching,

package/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "@nxgt/material-core",
-	"version": "0.9.0",
-	"description": "The framework-free core of @nxgt/material and @nxgt/material-vue: the PDF document model and its react-pdf renderer, print formatters, PDF file helpers, the PDF viewer's pure modules, the currency digits, the file-size formatter, the field-blur layers, a field's first focusable control, the aria-describedby joiner, the inert background of a modal layer, Escape forwarded while an overlay closes, the Toaster's touch-hover guard and its focus hand-back, the page's Content Security Policy nonce, an object built on first use, the zod issue messages, the date range presets, the debounce, accent-insensitive text matching and the race-free async search behind Autocomplete and SearchField, the file preview's kind detection and text reader, the pdfkit fonts Vite plugin, a CSP-safe Vite assetsInlineLimit and the Node-only pdfkit fonts resolution for Next.js and Nuxt builds",
+	"version": "0.10.0",
+	"description": "The framework-free core of @nxgt/material and @nxgt/material-vue: the PDF document model and its react-pdf renderer, print formatters, PDF file helpers, the PDF viewer's pure modules, the currency digits, the file-size formatter, the field-blur layers, a field's first focusable control, the aria-describedby joiner, the inert background of a modal layer, Escape forwarded while an overlay closes, the Toaster's touch-hover guard and its focus hand-back, the page's Content Security Policy nonce, an object built on first use, the zod issue messages, the date range presets, the debounce, accent-insensitive text matching and the race-free async search behind Autocomplete and SearchField, the submit guard, the code error map, the two-factor helpers (a grouped TOTP secret, the recovery codes' file, a text download), printing one element of the page, the file preview's kind detection and text reader, the pdfkit fonts Vite plugin, a CSP-safe Vite assetsInlineLimit and the Node-only pdfkit fonts resolution for Next.js and Nuxt builds",
 	"license": "MIT",
 	"bugs": {
 		"email": "stevegires@gmail.com"
@@ -183,6 +183,26 @@
 			"import": "./dist/lib/async-search.js",
 			"default": "./dist/lib/async-search.js"
 		},
+		"./submit-guard": {
+			"types": "./dist/lib/submit-guard.d.ts",
+			"import": "./dist/lib/submit-guard.js",
+			"default": "./dist/lib/submit-guard.js"
+		},
+		"./code-errors": {
+			"types": "./dist/lib/code-errors.d.ts",
+			"import": "./dist/lib/code-errors.js",
+			"default": "./dist/lib/code-errors.js"
+		},
+		"./print-only": {
+			"types": "./dist/lib/print-only.d.ts",
+			"import": "./dist/lib/print-only.js",
+			"default": "./dist/lib/print-only.js"
+		},
+		"./two-factor": {
+			"types": "./dist/lib/two-factor.d.ts",
+			"import": "./dist/lib/two-factor.js",
+			"default": "./dist/lib/two-factor.js"
+		},
 		"./file-preview": {
 			"types": "./dist/file-preview/index.d.ts",
 			"import": "./dist/file-preview/index.js",
@@ -264,6 +284,10 @@
 			"src/lib/debounce.ts",
 			"src/lib/text-match.ts",
 			"src/lib/async-search.ts",
+			"src/lib/submit-guard.ts",
+			"src/lib/code-errors.ts",
+			"src/lib/two-factor.ts",
+			"src/lib/print-only.ts",
 			"src/file-preview/index.ts",
 			"src/pdf-viewer/index.ts",
 			"src/vite/index.ts",

package/dist/chunks/index-h3vjydz7.js.map

@@ -1,10 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/pdf-download.ts"],
-  "sourcesContent": [
-    "import { resolvePdfFileName } from './pdf-file-name';\nimport {\n\tcopyPdfData,\n\tisBlob,\n\tisPdfUrlSource,\n\ttype PdfSource,\n\tpdfSourceUrl,\n} from './pdf-source';\n\n/**\n * How long an object URL outlives the click that started its download or\n * opened its tab. Revoking it synchronously cancels the download in Firefox\n * and Safari, which read the URL after `click()` returns.\n */\nexport const OBJECT_URL_TTL_MS = 60_000;\n\nexport type PdfFileOptions = {\n\t/** Name of the saved file; `.pdf` is added when missing. */\n\tfileName?: string;\n\t/**\n\t * Name used when neither `fileName`, a `File`'s name nor the URL gives\n\t * one: `document`, or its translation.\n\t */\n\tdefaultName?: string;\n\t/**\n\t * Bytes of the document the reader already loaded. Saving them needs no\n\t * second request, and works for a cross-origin URL, where the `download`\n\t * attribute is ignored.\n\t */\n\tgetData?: () =>\n\t\t| Uint8Array\n\t\t| null\n\t\t| undefined\n\t\t| Promise<Uint8Array | null | undefined>;\n};\n\nfunction fetchInit(source: PdfSource): RequestInit | undefined {\n\tif (!isPdfUrlSource(source)) return undefined;\n\treturn {\n\t\theaders: source.httpHeaders,\n\t\tcredentials: source.withCredentials ? 'include' : 'same-origin',\n\t};\n}\n\nasync function resolvePdfBlob(\n\tsource: PdfSource,\n\tgetData: PdfFileOptions['getData'],\n): Promise<Blob | null> {\n\tconst url = pdfSourceUrl(source);\n\tif (url === null) {\n\t\t// A Blob or bytes: a Blob copies what it is given.\n\t\treturn isBlob(source)\n\t\t\t? source\n\t\t\t: new Blob([copyPdfData(source as ArrayBuffer | Uint8Array)], {\n\t\t\t\t\ttype: 'application/pdf',\n\t\t\t\t});\n\t}\n\ttry {\n\t\tconst bytes = await getData?.();\n\t\tif (bytes?.byteLength) {\n\t\t\treturn new Blob([copyPdfData(bytes)], { type: 'application/pdf' });\n\t\t}\n\t} catch {\n\t\t/* the document may be gone; fetch it instead */\n\t}\n\ttry {\n\t\tconst init = fetchInit(source);\n\t\tconst response = await (init ? fetch(url, init) : fetch(url));\n\t\treturn response.ok ? await response.blob() : null;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nfunction revokeLater(url: string) {\n\twindow.setTimeout(() => URL.revokeObjectURL(url), OBJECT_URL_TTL_MS);\n}\n\nfunction clickLink(href: string, attributes: Record<string, string>) {\n\tconst link = document.createElement('a');\n\tlink.href = href;\n\tfor (const [name, value] of Object.entries(attributes)) {\n\t\tlink.setAttribute(name, value);\n\t}\n\tlink.style.display = 'none';\n\t// Firefox ignores a click on a link that is not in the document.\n\tdocument.body.append(link);\n\tlink.click();\n\tlink.remove();\n}\n\n/** Saves a Blob under `fileName`, and revokes its URL once the save began. */\nfunction saveBlob(blob: Blob, fileName: string) {\n\tconst url = URL.createObjectURL(blob);\n\tclickLink(url, { download: fileName });\n\trevokeLater(url);\n}\n\nfunction openInNewTab(href: string) {\n\tclickLink(href, { target: '_blank', rel: 'noopener' });\n}\n\n/**\n * The URL a new tab may open when the document could not be read. None for\n * a URL with headers: a tab sends no `Authorization`, so it would only show\n * the server's refusal.\n */\nfunction fallbackUrl(source: PdfSource) {\n\tif (isPdfUrlSource(source) && source.httpHeaders) return null;\n\treturn pdfSourceUrl(source);\n}\n\n/**\n * Downloads the PDF under its resolved name. A URL is saved from the loaded\n * bytes or fetched; when neither works (CORS), it opens in a new tab, which\n * a popup blocker may stop once the click's activation has expired. A URL\n * with headers never opens in a tab: it would load without them.\n */\nexport async function downloadPdfFile(\n\tsource: PdfSource,\n\toptions: PdfFileOptions = {},\n) {\n\tconst name = resolvePdfFileName(\n\t\tsource,\n\t\toptions.fileName,\n\t\toptions.defaultName,\n\t);\n\tconst blob = await resolvePdfBlob(source, options.getData);\n\tconst url = fallbackUrl(source);\n\tif (blob) saveBlob(blob, name);\n\telse if (url !== null) openInNewTab(url);\n}\n\n/**\n * Prints the PDF from a same-origin object URL in a hidden frame. When the\n * browser refuses (a PDF plugin that blocks `print()`, a cross-origin URL\n * that could not be fetched), the document opens in a new tab instead.\n */\nexport async function printPdfFile(\n\tsource: PdfSource,\n\toptions: Pick<PdfFileOptions, 'getData'> = {},\n) {\n\tconst blob = await resolvePdfBlob(source, options.getData);\n\tif (!blob) {\n\t\tconst url = fallbackUrl(source);\n\t\tif (url !== null) openInNewTab(url);\n\t\treturn;\n\t}\n\tconst url = URL.createObjectURL(blob);\n\tconst frame = document.createElement('iframe');\n\tframe.setAttribute('aria-hidden', 'true');\n\tframe.style.position = 'fixed';\n\tframe.style.right = '0';\n\tframe.style.bottom = '0';\n\tframe.style.width = '0';\n\tframe.style.height = '0';\n\tframe.style.border = '0';\n\tframe.src = url;\n\tframe.onload = () => {\n\t\ttry {\n\t\t\tframe.contentWindow?.focus();\n\t\t\tframe.contentWindow?.print();\n\t\t} catch {\n\t\t\topenInNewTab(url);\n\t\t} finally {\n\t\t\twindow.setTimeout(() => frame.remove(), 1000);\n\t\t\trevokeLater(url);\n\t\t}\n\t};\n\tdocument.body.append(frame);\n}\n"
-  ],
-  "mappings": ";;;;;;;;;;;AAcO,IAAM,qBAAoB;AAsBjC,SAAS,SAAS,CAAC,QAA4C;AAAA,EAC9D,IAAI,CAAC,gBAAe,MAAM;AAAA,IAAG;AAAA,EAC7B,OAAO;AAAA,IACN,SAAS,OAAO;AAAA,IAChB,aAAa,OAAO,kBAAkB,YAAY;AAAA,EACnD;AAAA;AAGD,eAAe,cAAc,CAC5B,QACA,SACuB;AAAA,EACvB,MAAM,MAAM,cAAa,MAAM;AAAA,EAC/B,IAAI,QAAQ,MAAM;AAAA,IAEjB,OAAO,QAAO,MAAM,IACjB,SACA,IAAI,KAAK,CAAC,aAAY,MAAkC,CAAC,GAAG;AAAA,MAC5D,MAAM;AAAA,IACP,CAAC;AAAA,EACJ;AAAA,EACA,IAAI;AAAA,IACH,MAAM,QAAQ,MAAM,UAAU;AAAA,IAC9B,IAAI,OAAO,YAAY;AAAA,MACtB,OAAO,IAAI,KAAK,CAAC,aAAY,KAAK,CAAC,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAAA,IAClE;AAAA,IACC,MAAM;AAAA,EAGR,IAAI;AAAA,IACH,MAAM,OAAO,UAAU,MAAM;AAAA,IAC7B,MAAM,WAAW,OAAO,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,GAAG;AAAA,IAC3D,OAAO,SAAS,KAAK,MAAM,SAAS,KAAK,IAAI;AAAA,IAC5C,MAAM;AAAA,IACP,OAAO;AAAA;AAAA;AAIT,SAAS,WAAW,CAAC,KAAa;AAAA,EACjC,OAAO,WAAW,MAAM,IAAI,gBAAgB,GAAG,GAAG,kBAAiB;AAAA;AAGpE,SAAS,SAAS,CAAC,MAAc,YAAoC;AAAA,EACpE,MAAM,OAAO,SAAS,cAAc,GAAG;AAAA,EACvC,KAAK,OAAO;AAAA,EACZ,YAAY,MAAM,UAAU,OAAO,QAAQ,UAAU,GAAG;AAAA,IACvD,KAAK,aAAa,MAAM,KAAK;AAAA,EAC9B;AAAA,EACA,KAAK,MAAM,UAAU;AAAA,EAErB,SAAS,KAAK,OAAO,IAAI;AAAA,EACzB,KAAK,MAAM;AAAA,EACX,KAAK,OAAO;AAAA;AAIb,SAAS,QAAQ,CAAC,MAAY,UAAkB;AAAA,EAC/C,MAAM,MAAM,IAAI,gBAAgB,IAAI;AAAA,EACpC,UAAU,KAAK,EAAE,UAAU,SAAS,CAAC;AAAA,EACrC,YAAY,GAAG;AAAA;AAGhB,SAAS,YAAY,CAAC,MAAc;AAAA,EACnC,UAAU,MAAM,EAAE,QAAQ,UAAU,KAAK,WAAW,CAAC;AAAA;AAQtD,SAAS,WAAW,CAAC,QAAmB;AAAA,EACvC,IAAI,gBAAe,MAAM,KAAK,OAAO;AAAA,IAAa,OAAO;AAAA,EACzD,OAAO,cAAa,MAAM;AAAA;AAS3B,eAAsB,gBAAe,CACpC,QACA,UAA0B,CAAC,GAC1B;AAAA,EACD,MAAM,OAAO,oBACZ,QACA,QAAQ,UACR,QAAQ,WACT;AAAA,EACA,MAAM,OAAO,MAAM,eAAe,QAAQ,QAAQ,OAAO;AAAA,EACzD,MAAM,MAAM,YAAY,MAAM;AAAA,EAC9B,IAAI;AAAA,IAAM,SAAS,MAAM,IAAI;AAAA,EACxB,SAAI,QAAQ;AAAA,IAAM,aAAa,GAAG;AAAA;AAQxC,eAAsB,aAAY,CACjC,QACA,UAA2C,CAAC,GAC3C;AAAA,EACD,MAAM,OAAO,MAAM,eAAe,QAAQ,QAAQ,OAAO;AAAA,EACzD,IAAI,CAAC,MAAM;AAAA,IACV,MAAM,MAAM,YAAY,MAAM;AAAA,IAC9B,IAAI,QAAQ;AAAA,MAAM,aAAa,GAAG;AAAA,IAClC;AAAA,EACD;AAAA,EACA,MAAM,MAAM,IAAI,gBAAgB,IAAI;AAAA,EACpC,MAAM,QAAQ,SAAS,cAAc,QAAQ;AAAA,EAC7C,MAAM,aAAa,eAAe,MAAM;AAAA,EACxC,MAAM,MAAM,WAAW;AAAA,EACvB,MAAM,MAAM,QAAQ;AAAA,EACpB,MAAM,MAAM,SAAS;AAAA,EACrB,MAAM,MAAM,QAAQ;AAAA,EACpB,MAAM,MAAM,SAAS;AAAA,EACrB,MAAM,MAAM,SAAS;AAAA,EACrB,MAAM,MAAM;AAAA,EACZ,MAAM,SAAS,MAAM;AAAA,IACpB,IAAI;AAAA,MACH,MAAM,eAAe,MAAM;AAAA,MAC3B,MAAM,eAAe,MAAM;AAAA,MAC1B,MAAM;AAAA,MACP,aAAa,GAAG;AAAA,cACf;AAAA,MACD,OAAO,WAAW,MAAM,MAAM,OAAO,GAAG,IAAI;AAAA,MAC5C,YAAY,GAAG;AAAA;AAAA;AAAA,EAGjB,SAAS,KAAK,OAAO,KAAK;AAAA;",
-  "debugId": "77B6E1C9EF4463B464756E2164756E21",
-  "names": []
-}