@nxgt/material 2.13.0 → 2.14.0

package/CHANGELOG.md

@@ -1,5 +1,54 @@
 # @nxgt/material
 
+## 2.14.0
+
+### Minor Changes
+
+- [#479](https://github.com/softistx/nxgt-material/pull/479) [`6850b50`](https://github.com/softistx/nxgt-material/commit/6850b50d3832b401e32ea25aa356dde9b5684193) Thanks [@SteveGT96](https://github.com/SteveGT96)! - KaTeX's fonts (`Markdown` maths) ship as files: the compiled stylesheet `dist/material.css` no longer inlines its 60 fonts as `data:` URIs, and goes from 1.76 MB to 0.32 MB (about 1 MB to 46 KB gzipped). Its `@font-face` rules point at the 20 `woff2` files in `dist/fonts/katex/`, beside it, through a relative `url()`, so a strict `font-src 'self'` allows them and a browser downloads a font only when a formula draws from it. KaTeX's layout CSS stays in the stylesheet.
+  
+  **Migration:** nothing to import. A bundler that processes the compiled stylesheet (`@import "@nxgt/material"`) emits the fonts as files (Vite inlines the 3.6 KB `KaTeX_Size3` font unless `assetsInlineLimit` is set: see the CSP guide's KaTeX fonts section). An app that serves `dist/material.css` itself must serve `dist/fonts/` beside it, at the same relative path; without it, math renders in the system fonts (`\mathbb`, large delimiters and roots look wrong), the rest of the page is unaffected. The Tailwind route (`styles.css`) is unchanged.
+
+- [#474](https://github.com/softistx/nxgt-material/pull/474) [`f4185a4`](https://github.com/softistx/nxgt-material/commit/f4185a49a03100e107092927eedf59893b5bd73a) Thanks [@SteveGT96](https://github.com/SteveGT96)! - `NonceProvider` gives the page's Content Security Policy nonce to every component below it. Render it once at the root, on the server and on the client, with the request's nonce: `<NonceProvider nonce={nonce}>` (the same value as `renderToPipeableStream(app, { nonce })`; on the client, `getCspNonce()`). A nested `NonceProvider` without a `nonce` inherits the outer one's.
+  
+  - `ScrollArea` and `Select` pass it to the `<style>` Radix renders, and `RichTextEditor` sets tiptap's `injectNonce` from it (an `injectNonce` you pass still wins).
+  - The modals' scroll lock (Radix, through `react-style-singleton`) now reads the nonce `NonceProvider` keeps: the bundled `get-nonce` is replaced by `@nxgt/material-core/csp-nonce`, which also finds the nonce in the page (`<meta name="csp-nonce">`, a `<script nonce>`) without a provider. **Migration:** search for `__webpack_nonce__ = ` in your client entry, written for the scroll lock as the CSP guide of 2.9.0 advised, and remove it, wrapping the app in `NonceProvider` instead; a page without one needs nothing when the server writes the nonce into it.
+  - `useCspNonce()` (`@nxgt/material/hooks`) returns the provider's nonce for a `<style>` of your own; `undefined` outside one, on the server and the client alike, so hydration matches.
+  - `getCspNonce()` and `setCspNonce()` are re-exported from `@nxgt/material-core/csp-nonce` by `@nxgt/material/lib` and the main entry. `setCspNonce` does nothing on a server.
+  
+  `NonceProvider` keeps the nonce for the code outside React (`setCspNonce`) in an insertion effect, never during render, so one request's nonce never reaches another's. The CSP guide has a `NonceProvider` section.
+
+- [#478](https://github.com/softistx/nxgt-material/pull/478) [`525ca57`](https://github.com/softistx/nxgt-material/commit/525ca577bb5e186a84a900088ec286bcca6c8b94) Thanks [@SteveGT96](https://github.com/SteveGT96)! - No component of the library injects a `<style>` without a nonce any more, so a strict Content Security Policy (`style-src-elem 'self' 'nonce-…'`, no `'unsafe-inline'`) runs `Toaster`, `Drawer`, `InputOTP` and `ImageCropper` without a violation report.
+  
+  - sonner (`Toaster`), vaul (`Drawer`) and input-otp (`InputOTP`) used to add their CSS as a `<style>` element at runtime. That CSS is now in the library's stylesheet (`styles.css` and `dist/material.css`), and the bundled copies of those packages no longer inject it.
+  - `ImageCropper` passes react-easy-crop's `disableAutomaticStylesInjection`; its CSS was already in the stylesheet.
+  - `Spinner` (variant `4`) and `PdfReader` no longer render a `<style>` element: their keyframes, search highlights and night mode are in the stylesheet (`spinner.css`, `pdf-viewer.css`).
+  
+  **Migration:** none for an app that imports the stylesheet, as the README asks (`@import "@nxgt/material/styles.css"` in a Tailwind app, or `@nxgt/material`'s `dist/material.css`): the toast and drawer styles now come from that file. An app that imports only the JavaScript, with neither stylesheet, rendered toasts and drawers styled by the injected CSS and now renders them unstyled: import the stylesheet. A route served `'unsafe-inline'` in `style-src-elem` only for `Toaster`, `Drawer`, `InputOTP` or `ImageCropper` (as the CSP guide advised) can drop it and keep the nonce; mermaid diagrams still need it (see the guide's known gaps).
+  
+  **Cascade:** sonner's and vaul's CSS now sits where your app `@import`s our stylesheet, not at the end of `<head>`, so an app rule on `[data-sonner-*]` or `[data-vaul-*]` with equal specificity now wins over ours. vaul's global keyframe names (`fadeIn`, `fadeOut`, `slideFromBottom`, …) can also be overridden by a keyframes rule of your own with the same name: search your CSS for `@keyframes (fadeIn|fadeOut|slide(From|To)(Bottom|Top|Left|Right))` and rename yours.
+
+- [#480](https://github.com/softistx/nxgt-material/pull/480) [`634a58e`](https://github.com/softistx/nxgt-material/commit/634a58e3353ebe340e87b0f21858396aa4354654) Thanks [@SteveGT96](https://github.com/SteveGT96)! - zod is no longer bundled, and the library builds no zod schema while it loads, so a page under a strict Content Security Policy (a `script-src` without `'unsafe-eval'`) can stop zod's `new Function` probe with one `z.config({ jitless: true })`.
+  
+  - `zod` stays a dependency (`^4.4.3`), imported at runtime: the library now uses the zod your app resolves, one copy when your range overlaps.
+  - New `openingHoursSchema()`: the zod schema of one `OpeningHour`, built on the first call and the same schema after. `AttributeForm` builds its schema when it first renders, not at import.
+  - `OpeningHoursSchema` is **deprecated** (removed in 3.0). It still works: it is built on its first use and behaves as `openingHoursSchema()`'s schema (`.parse`, `.safeParse`, `.shape`, `.extend`, `instanceof z.ZodObject`), but it is not the same object (`===`), and a `.meta()` or `registry.add()` on it is not seen through the factory's schema.
+  
+  **Migration:**
+  
+  1. Install zod in the app if it is not there yet (`bun add zod`): a strict package manager (pnpm) does not let the app import a package it does not list. Keep it inside `^4.4.3`.
+  2. Search for `OpeningHoursSchema` and replace it with `openingHoursSchema()` (a call), for example `z.array(openingHoursSchema())`.
+  3. Under a strict CSP, call `z.config({ jitless: true })` in a module the client entry imports first, before the first schema is built; the `EvalError` / `'unsafe-eval'` report from zod then stops. Build your own schemas inside functions when their module may load before that one. `docs/guides/csp.md`, "zod and `'unsafe-eval'`".
+
+### Patch Changes
+
+- [#467](https://github.com/softistx/nxgt-material/pull/467) [`f621c1e`](https://github.com/softistx/nxgt-material/commit/f621c1e0c75974cd6d1c22728719d47c1acd9a24) Thanks [@SteveGT96](https://github.com/SteveGT96)! - A Content Security Policy guide (`docs/guides/csp.md`): the directives to send, the components that still inject a `<style>`, the zod and KaTeX settings, a self-hosted font, the per-request nonce; troubleshooting entries for the reports a strict policy sends, and a roadmap line.
+
+- [#481](https://github.com/softistx/nxgt-material/pull/481) [`6facbb0`](https://github.com/softistx/nxgt-material/commit/6facbb0d05b67b4235f1451369e5b85d9c59fc54) Thanks [@SteveGT96](https://github.com/SteveGT96)! - The CSP guide shows how to self-host Inter under a strict `font-src` (`@fontsource-variable/inter`, the `--font-sans` token, the fallback stack, `cspAssetsInlineLimit`, now also exported by `@nxgt/material/vite`), the theming guide has a Fonts section, and troubleshooting has an entry for a font refused from Google Fonts. The guide's last section, now "Status", states the CSP work is complete.
+
+- [#479](https://github.com/softistx/nxgt-material/pull/479) [`e10c717`](https://github.com/softistx/nxgt-material/commit/e10c717bb6e3b74f444a2551b72314ddcd6c864c) Thanks [@SteveGT96](https://github.com/SteveGT96)! - `@import "@nxgt/material"` (and `@nxgt/material-vue`) in CSS now resolves to the stylesheet under Vite and esbuild: the `style` condition comes before `import` in the `.` export, because those tools always add `import` when they resolve a CSS `@import`.
+- Updated dependencies [[`3a2889d`](https://github.com/softistx/nxgt-material/commit/3a2889d71f1bfc9039ef43db916f3be3bf287ccd), [`634a58e`](https://github.com/softistx/nxgt-material/commit/634a58e3353ebe340e87b0f21858396aa4354654)]:
+  - @nxgt/material-core@0.9.0
+
 ## 2.13.0
 
 ### Minor Changes

package/README.md

@@ -64,6 +64,12 @@ bun add react react-dom react-hook-form react-redux @reduxjs/toolkit @tanstack/r
 | `@tanstack/react-table` `^9` | `DataTable` |
 | `react-use` `^17` | `useTheme`, `useIsMobile`, `ScrollProgress` (`useScroll` / `useWindowScroll`), other hooks |
 
+**zod** (`^4.4.3`) is a dependency, imported at runtime, not bundled: the
+library uses the zod your app resolves. With a strict package manager (pnpm),
+add it to the app (`bun add zod`) when your own code imports it. Under a
+strict Content Security Policy, call `z.config({ jitless: true })` first:
+[zod and `'unsafe-eval'`](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/guides/csp.md#zod-and-unsafe-eval).
+
 **Optional peers**, installed only by the app that imports the entry needing
 them: `@react-pdf/renderer` `^4.9` and `react-pdf-tailwind` `^3` for
 `@nxgt/material/print`; `leaflet`, `react-leaflet`, `@react-leaflet/core`,
@@ -88,6 +94,8 @@ In the app's root stylesheet, in this order:
 @source "../node_modules/@nxgt/material/";
 ```
 
+Toaster, Drawer and InputOTP take their CSS from this stylesheet: without it they render unstyled.
+
 `styles.css` is the **source** `@theme` layer (colours, `--radius`, `dark`,
 fonts), so it runs through *your* Tailwind build. The `@source` line is
 required, and nothing warns you when it is missing. Tailwind v4 does not scan
@@ -103,7 +111,9 @@ tokens from this entry file to autocomplete them in your components.
 
 In a Tailwind app, do not also import the compiled `style` condition on
 `@nxgt/material` (`dist/material.css`). Take the tokens and let the app
-generate the utilities. The compiled file is for apps without Tailwind.
+generate the utilities. The compiled file is for apps without Tailwind. It
+loads KaTeX's fonts (`Markdown` maths) as files from `dist/fonts/katex/`,
+beside it, which `font-src 'self'` allows (Vite inlines the 3.6 KB `KaTeX_Size3` font unless `assetsInlineLimit` is set: see the CSP guide's KaTeX fonts section); no extra import is needed.
 
 ### Icons
 
@@ -130,12 +140,12 @@ into a tarball. A missing sheet renders nothing, with no error and no fallback.
 | `@nxgt/material/components` | UI components and `*FormField` wrappers ([Components](#components)) |
 | `@nxgt/material/print` | PDF documents over `@react-pdf/renderer`: the `PrintDocument` page shell, the print blocks, and `PrintDataTable`, `PrintKeyValue` and `PrintMetric` from column definitions and plain rows; documents as plain data (`pdfDocument` and its builders); `downloadPdf`, `openPdf`, `usePdfFile` and `pdfResponse` to get the file in one call — **its own entry, and not in the barrel above** ([printing guide](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/guides/printing.md)) |
 | `@nxgt/material/map` | Leaflet maps, markers, a location field — **its own entry, not in the barrel, and browser-only** ([maps guide](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/guides/maps.md)) |
-| `@nxgt/material/vite` | build-time helpers for consumers: `pdfkitStandardFonts()` ([printing guide](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/guides/printing.md)) |
+| `@nxgt/material/vite` | build-time helpers for consumers: `pdfkitStandardFonts()` ([printing guide](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/guides/printing.md)), `cspAssetsInlineLimit`, a `build.assetsInlineLimit` that never inlines a font ([CSP guide](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/guides/csp.md#katex-fonts)) |
 | `@nxgt/material/next` | `withNxgtPrint(nextConfig)`: the `next.config.ts` a Next.js route handler that imports `/print` needs, `output: 'standalone'` included. Node only, no dependency on `next` ([printing guide](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/guides/printing.md#nextjs-serverexternalpackages-and-output-standalone)) |
-| `@nxgt/material/hooks` | `useTheme`, `useIsClient`, `useIsMobile`, `useLocalizedDate`, … ([helpers](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/guides/helpers.md#nxgtmaterialhooks)) |
+| `@nxgt/material/hooks` | `useTheme`, `useIsClient`, `useIsMobile`, `useLocalizedDate`, `useCspNonce`, … ([helpers](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/guides/helpers.md#nxgtmaterialhooks)) |
 | `@nxgt/material/dnd` | `@dnd-kit` primitives ([helpers](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/guides/helpers.md#nxgtmaterialdnd)) |
 | `@nxgt/material/i18n` | `I18nProvider`, `mergeResources`, `createTranslator` ([i18n guide](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/guides/i18n.md)) |
-| `@nxgt/material/lib` | `cn`, `clientOnly`, date, number and storage utilities, `useSliceReducer` ([helpers](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/guides/helpers.md#nxgtmateriallib)) |
+| `@nxgt/material/lib` | `cn`, `clientOnly`, date, number and storage utilities, `useSliceReducer`, `getCspNonce` / `setCspNonce` ([helpers](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/guides/helpers.md#nxgtmateriallib)) |
 | `@nxgt/material/models` | `Status<T>` |
 | `@nxgt/material/types` | shared function types (`PromiseOr`, `FunctionOr`, …) |
 | `@nxgt/material/styles.css` | source Tailwind v4 tokens. **This** is the file the app imports |
@@ -251,6 +261,7 @@ Each area a consumer starts from has its own page under `docs/guides/`.
 | [Printing](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/guides/printing.md) | producing PDFs with `@nxgt/material/print` and getting the file in one call (download, new tab, preview, server `Response`) — its own entry since 2.0.0, with optional peers, a bundling trap on SSR servers, and the `next.config.ts` a Next.js route handler (and `output: 'standalone'`) needs |
 | [Maps](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/guides/maps.md) | using `@nxgt/material/map` — browser-only, optional leaflet peers, `map.css` |
 | [SSR](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/guides/ssr.md) | rendering on a server: what the barrels guarantee, and `import()` + `clientOnly` for browser-only code |
+| [Content Security Policy](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/guides/csp.md) | serving a strict CSP: the directives, `NonceProvider` and the per-request nonce, the components that still inject a `<style>`, the zod and KaTeX settings, a self-hosted font |
 | [Helpers](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/guides/helpers.md) | the non-component subpaths: `/lib`, `/hooks`, `/i18n`, `/models`, `/types`, `/dnd` |
 
 **Upgrading to 2.x**: print moved to `@nxgt/material/print` in 2.0.0, and
@@ -294,6 +305,7 @@ React-only today: `Combobox` (not planned in Vue) and `StepperIndicator`.
 | <img src="https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/previews/primitives-toggle.webp" width="120" alt="Toggle"> | [`Toggle`](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/components/primitives.md#toggle) | Pressable on / off button: default or outlined, three sizes. | `Toggle` |
 | <img src="https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/previews/primitives-togglegroup.webp" width="120" alt="ToggleGroup"> | [`ToggleGroup`](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/components/primitives.md#togglegroup), `ToggleGroupItem`, `ToggleGroupSeparator` | Single or multiple toggle group sharing variant and size. | `ToggleGroup`, `ToggleGroupItem` |
 | — | [`Activity`](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/components/primitives.md#activity) | React `<Activity>` switched by a boolean `visible`. | `Activity` |
+| — | [`NonceProvider`](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/components/primitives.md#nonceprovider) | Gives the page's CSP nonce to every component below; `useCspNonce()` reads it ([CSP guide](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/guides/csp.md#nonceprovider)). | `NonceProvider` |
 
 ### Buttons & actions
 
@@ -340,7 +352,7 @@ React-only today: `Combobox` (not planned in Vue) and `StepperIndicator`.
 | <img src="https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/previews/form-fields-attributes.webp" width="120" alt="AttributesField"> | [`AttributesField`](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/components/form-fields.md#attributes), `AttributesList`, `AttributeDialog`, `AttributeForm`, `AttributeValuesForm` · `AttributesFormField`, `AttributeValuesFormFieldSet`, `AttributeValueFormField` | Editor for typed custom attributes (string, number, date, select, rich text…). | `AttributesField`, `AttributesList`, `AttributeDialog`, `AttributeForm`, `AttributeValuesForm`, `AttributesFormField`, `AttributeValuesFormFieldSet`, `AttributeValueFormField` |
 | <img src="https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/previews/form-fields-contacts.webp" width="120" alt="Contacts"> | [`Contacts`](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/components/form-fields.md#contacts), `ContactDialog`, `ContactItem` (deprecated) · `ContactsFormField` | Typed contact list (phone, email, URL…) with an add / edit dialog. | `Contacts`, `ContactItem`, `ContactDialog`, `ContactsFormField` |
 | <img src="https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/previews/form-fields-postaladdress.webp" width="120" alt="PostalAddress"> | [`PostalAddress`](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/components/form-fields.md#postaladdress), `PostalAddressDialog` · `PostalAddressFormField` | Address card with an edit dialog. | `PostalAddress`, `PostalAddressDialog`, `PostalAddressFormField` |
-| <img src="https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/previews/form-fields-openinghours.webp" width="120" alt="OpeningHours"> | [`OpeningHours`](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/components/form-fields.md#openinghours), `OpeningHoursDialog`, `OpeningHoursItem` (deprecated) · `OpeningHoursFormField` | Weekly opening hours with an add / edit dialog. | `OpeningHours`, `OpeningHoursDialog`, `OpeningHoursItem`, `OpeningHoursFormField` |
+| <img src="https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/previews/form-fields-openinghours.webp" width="120" alt="OpeningHours"> | [`OpeningHours`](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/components/form-fields.md#openinghours), `OpeningHoursDialog`, `OpeningHoursItem` (deprecated) · `OpeningHoursFormField` | Weekly opening hours with an add / edit dialog. | `OpeningHours`, `OpeningHoursDialog`, `OpeningHoursItem`, `OpeningHoursFormField`, `openingHoursSchema()` (`OpeningHoursSchema` deprecated) |
 
 ### Date & time
 
@@ -516,6 +528,7 @@ The ones that cost the most time. Every error message, with its fix, is in
 | Symptom | Fix |
 | --- | --- |
 | Components render unstyled, no console error | `@source "../node_modules/@nxgt/material/";` in your stylesheet |
+| Toast or drawer unstyled | import `@nxgt/material/styles.css` (or `dist/material.css`) |
 | `<Icon>` is blank | serve `public/assets/icons/sprites/<style>.svg` |
 | `window is not defined` at server boot | load `@nxgt/material/map` through `import()` + `clientOnly` ([maps](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/guides/maps.md#browser-only)) |
 | `Cannot find package '@nxgt/material-core'` at server boot | add `@nxgt/material-core` wherever `@nxgt/material` is in `ssr.noExternal` or `--external` ([troubleshooting](https://cdn.jsdelivr.net/npm/@nxgt/material@2/docs/troubleshooting.md#cannot-find-package-nxgtmaterial-core)) |

package/dist/{blockDiagram-BEXU5L5S-CQaNV8rX.js → blockDiagram-BEXU5L5S-Cn9cG3vt.js}

@@ -12,7 +12,7 @@ import "./chunk-7PRAP22T-0C6_H8Li.js";
 import { i as se, n as ce, o as le, r as ue, s as de } from "./chunk-J5ZVWO5B-DmRRmhon.js";
 import "./chunk-7INBJB4K-k-I67NSP.js";
 import { i as fe, r as pe } from "./chunk-5DYCD2WN-Cd1zazNp.js";
-import { a as me, c as he, i as ge, l as _e } from "./chunk-Z7XXMR3K-D4uKosJW.js";
+import { a as me, c as he, i as ge, l as _e } from "./chunk-Z7XXMR3K-BzO1efzA.js";
 //#region ../../node_modules/es-toolkit/dist/compat/predicate/isArray.mjs
 function ve(e) {
 	return Array.isArray(e);

package/dist/{chunk-3FUC2YCW-DmtO_Y9L.js → chunk-3FUC2YCW-XrT5pZo5.js}

@@ -5,7 +5,7 @@ import { n as r } from "./chunk-Y2CYZVJY-BAad7w_K.js";
 import { b as i, x as a } from "./chunk-O7XYJQB3-BChweQ_V.js";
 import { o } from "./chunk-7INBJB4K-k-I67NSP.js";
 import { i as s, n as c, r as l, t as u } from "./chunk-5DYCD2WN-Cd1zazNp.js";
-import { a as d, c as f, i as p, n as m, r as h, t as g, u as _ } from "./chunk-Z7XXMR3K-D4uKosJW.js";
+import { a as d, c as f, i as p, n as m, r as h, t as g, u as _ } from "./chunk-Z7XXMR3K-BzO1efzA.js";
 import { r as v, t as y } from "./chunk-UA2S7LBM-ChuksCDg.js";
 //#region ../../node_modules/mermaid/dist/chunks/mermaid.core/chunk-3FUC2YCW.mjs
 function b(e, { edgePathsClass: t = "edges edgePaths" } = {}) {

package/dist/{chunk-7M6MHVWA-BQ0cJz5u.js → chunk-7M6MHVWA-Uf-8NCRF.js}

@@ -9,7 +9,7 @@ import { a as b } from "./chunk-7INBJB4K-k-I67NSP.js";
 import { t as x } from "./chunk-GWA4HPMP-B8jXI0Tl.js";
 import { t as S } from "./chunk-XXDRQBXY-dKXxu_aj.js";
 import { t as C } from "./chunk-WEXAMYUT-CbFOhEve.js";
-import { r as w, t as T } from "./chunk-GNY47TPC-DiVMvIit.js";
+import { r as w, t as T } from "./chunk-GNY47TPC-CGgBmY0O.js";
 import { n as E, t as D } from "./chunk-LNGE3PJU-DJjGTS7O.js";
 //#region ../../node_modules/mermaid/dist/chunks/mermaid.core/chunk-7M6MHVWA.mjs
 var ie = "flowchart-", ae = class {

package/dist/{chunk-GNY47TPC-DiVMvIit.js → chunk-GNY47TPC-CGgBmY0O.js}

@@ -5,7 +5,7 @@ import { b as r, s as i } from "./chunk-O7XYJQB3-BChweQ_V.js";
 import { t as a } from "./chunk-DUW6YSOI-9R-v-IIp.js";
 import { o } from "./chunk-7INBJB4K-k-I67NSP.js";
 import { r as s } from "./chunk-5DYCD2WN-Cd1zazNp.js";
-import { a as c, c as l, i as u, l as d } from "./chunk-Z7XXMR3K-D4uKosJW.js";
+import { a as c, c as l, i as u, l as d } from "./chunk-Z7XXMR3K-BzO1efzA.js";
 import { r as f } from "./chunk-UA2S7LBM-ChuksCDg.js";
 //#region ../../node_modules/mermaid/dist/chunks/mermaid.core/chunk-GNY47TPC.mjs
 var p = {
@@ -30,7 +30,7 @@ var p = {
 ], h = /* @__PURE__ */ Object.create(null), g = /* @__PURE__ */ n((e) => {
 	for (let t of e) h[t.name] = t;
 }, "registerLayoutLoaders"), _ = /* @__PURE__ */ n(() => {
-	let e = /* @__PURE__ */ n(async () => await import("./elk-276RUBZZ-BxXn1nvc.js"), "loader");
+	let e = /* @__PURE__ */ n(async () => await import("./elk-276RUBZZ-Dr2yBM7k.js"), "loader");
 	return [{
 		name: "elk",
 		loader: e,
@@ -45,11 +45,11 @@ var p = {
 	g([
 		{
 			name: "dagre",
-			loader: /* @__PURE__ */ n(async () => await import("./dagre-6A5THRUB-BvQAvoOX.js"), "loader")
+			loader: /* @__PURE__ */ n(async () => await import("./dagre-6A5THRUB-BOuRxJdA.js"), "loader")
 		},
 		{
 			name: "swimlane",
-			loader: /* @__PURE__ */ n(async () => await import("./swimlanes-2SLR337P-BwEtm09G.js"), "loader")
+			loader: /* @__PURE__ */ n(async () => await import("./swimlanes-2SLR337P-BwCqwEoR.js"), "loader")
 		},
 		{
 			name: "cose-bilkent",

package/dist/{chunk-NETBCI7D-B5Av2fJk.js → chunk-NETBCI7D-g-jPsM9q.js}

@@ -1,5 +1,5 @@
 import { n as e } from "./chunk-Y2CYZVJY-BAad7w_K.js";
-import { o as t } from "./chunk-Z7XXMR3K-D4uKosJW.js";
+import { o as t } from "./chunk-Z7XXMR3K-BzO1efzA.js";
 //#region ../../node_modules/mermaid/dist/chunks/mermaid.core/chunk-NETBCI7D.mjs
 var n = 5, r = 1e-5, i = 2, a = .6, o = 1e-6;
 function s(e) {

package/dist/{chunk-Z7XXMR3K-D4uKosJW.js → chunk-Z7XXMR3K-BzO1efzA.js}

@@ -1,4 +1,4 @@
-import { st as e } from "./components-C-y3kTRm.js";
+import { st as e } from "./components-qTUjhFuo.js";
 import { n as t, t as n } from "./src-CsLQInsN.js";
 import { _ as r, a as i, i as a, n as o, o as s, p as c, r as l, t as u, u as d, v as f } from "./step-Dt43c9X4.js";
 import { K as p, g as m, q as h, u as g } from "./chunk-ZIGJFQKS-9VXArDKF.js";

package/dist/{classDiagram-v2-NBCMYWYE-BYktffst.js → classDiagram-v2-NBCMYWYE-7WgpfVcn.js}

@@ -9,12 +9,12 @@ import "./chunk-7PRAP22T-0C6_H8Li.js";
 import { i as v, n as y, o as b, r as x } from "./chunk-J5ZVWO5B-DmRRmhon.js";
 import "./chunk-7INBJB4K-k-I67NSP.js";
 import "./chunk-5DYCD2WN-Cd1zazNp.js";
-import "./chunk-Z7XXMR3K-D4uKosJW.js";
+import "./chunk-Z7XXMR3K-BzO1efzA.js";
 import { t as S } from "./chunk-GWA4HPMP-B8jXI0Tl.js";
 import { t as C } from "./chunk-XXDRQBXY-dKXxu_aj.js";
 import { t as w } from "./chunk-WEXAMYUT-CbFOhEve.js";
 import "./chunk-UA2S7LBM-ChuksCDg.js";
-import { r as T, t as E } from "./chunk-GNY47TPC-DiVMvIit.js";
+import { r as T, t as E } from "./chunk-GNY47TPC-CGgBmY0O.js";
 //#region ../../node_modules/mermaid/dist/chunks/mermaid.core/classDiagram-v2-NBCMYWYE.mjs
 var D = (function() {
 	var e = /* @__PURE__ */ i(function(e, t, n, r) {

package/dist/components/components.css

@@ -3,10 +3,21 @@
  * styles.css and never dist/material.css, gets it too: only
  * dist/material.css collected a component's own CSS import.
  *
- * PdfReader: react-pdf's text layer (selection, search highlights) and
- * pdf.js's annotation layer (links, notes, form widgets). */
+ * PdfReader: react-pdf's text layer (selection, search highlights),
+ * pdf.js's annotation layer (links, notes, form widgets), and our highlights
+ * and night mode. */
 @import "react-pdf/dist/Page/TextLayer.css";
 @import "react-pdf/dist/Page/AnnotationLayer.css";
+@import "./ui/media/pdf-viewer/pdf-viewer.css";
+/* What sonner (Toaster), vaul (Drawer) and input-otp (InputOTP) would inject
+ * as `<style>` elements at runtime: the build strips those injections
+ * (build/strip-style-injection.ts), so a strict CSP needs no 'unsafe-inline'.
+ * Spinner's variant 4 keyframes, for the same reason. */
+@import "sonner/dist/styles.css";
+@import "./ui/overlays/drawer/vaul-drawer.css";
+@import "./ui/overlays/drawer/vaul-keyframes.css";
+@import "./ui/fields/otp-field/input-otp.css";
+@import "./ui/feedback/spinner/spinner.css";
 /* KaTeX (Markdown), highlight.js (RichTextEditor code blocks),
  * react-easy-crop (ImageCropper), the code theme (CodeBlock), and the few
  * components styled by a stylesheet of their own rather than by classes. */

package/dist/components/ui/feedback/spinner/spinner.css

@@ -0,0 +1,28 @@
+@keyframes spin {
+	to {
+		transform: rotate(360deg);
+	}
+}
+
+@keyframes spin2 {
+	0% {
+		stroke-dasharray: 1, 800;
+		stroke-dashoffset: 0;
+	}
+	50% {
+		stroke-dasharray: 400, 400;
+		stroke-dashoffset: -200px;
+	}
+	100% {
+		stroke-dasharray: 800, 1;
+		stroke-dashoffset: -800px;
+	}
+}
+
+.spin2 {
+	transform-origin: center;
+	animation:
+		spin2 1.5s ease-in-out infinite,
+		spin 2s linear infinite;
+	animation-direction: alternate;
+}

package/dist/components/ui/fields/otp-field/input-otp.css

@@ -0,0 +1,48 @@
+/* The rules input-otp (React, 1.4.2) and vue-input-otp (0.4.0) add on mount,
+ * through `insertRule` into a `<style id="input-otp-style">`: the hidden
+ * input's caret, selection and autofill stay invisible behind the slots.
+ * Here so a strict CSP blocks nothing. @nxgt/material strips input-otp's
+ * injection at build (build/strip-style-injection.ts); vue-input-otp is
+ * external, still injects, and takes the nonce (NonceProvider). The same file
+ * in both libraries (scripts/shared-paths.ts). */
+/* biome-ignore-all lint/complexity/noImportantStyles: input-otp's own rules */
+[data-input-otp]::selection {
+	background: transparent !important;
+	color: transparent !important;
+}
+
+/* Two rules: a browser that does not know one pseudo-class drops the list. */
+[data-input-otp]:autofill {
+	background: transparent !important;
+	color: transparent !important;
+	border-color: transparent !important;
+	opacity: 0 !important;
+	box-shadow: none !important;
+	-webkit-box-shadow: none !important;
+	-webkit-text-fill-color: transparent !important;
+}
+
+[data-input-otp]:-webkit-autofill {
+	background: transparent !important;
+	color: transparent !important;
+	border-color: transparent !important;
+	opacity: 0 !important;
+	box-shadow: none !important;
+	-webkit-box-shadow: none !important;
+	-webkit-text-fill-color: transparent !important;
+}
+
+@supports (-webkit-touch-callout: none) {
+	[data-input-otp] {
+		letter-spacing: -0.6em !important;
+		font-weight: 100 !important;
+		font-stretch: ultra-condensed;
+		font-optical-sizing: none !important;
+		left: -1px !important;
+		right: 1px !important;
+	}
+}
+
+[data-input-otp] + * {
+	pointer-events: all !important;
+}

package/dist/components/ui/media/pdf-viewer/pdf-viewer.css

@@ -0,0 +1,24 @@
+/* PdfReader's search highlights and night mode. react-pdf's text and
+ * annotation layers are imported from react-pdf by components.css. The same
+ * rules as @nxgt/material-vue's pdf-viewer.css, which also holds its text
+ * layer. */
+
+.pdf-highlight {
+	background: oklch(0.9 0.18 85);
+	color: black;
+	border-radius: 2px;
+}
+
+.pdf-highlight[data-current] {
+	outline: 2px solid var(--color-primary);
+	outline-offset: 1px;
+}
+
+.dark .pdf-highlight {
+	background: oklch(0.75 0.18 85);
+	color: black;
+}
+
+.pdf-night-page {
+	filter: invert(0.9) hue-rotate(180deg);
+}

package/dist/components/ui/overlays/drawer/vaul-drawer.css

@@ -0,0 +1,199 @@
+/*! vaul 1.1.2's stylesheet (MIT, Emil Kowalski), its rules. vaul injects it as a
+ * `<style>` at module load; the library build strips that call
+ * (build/strip-style-injection.ts, which pins the injected text) and ships
+ * it here instead, so a strict CSP needs no 'unsafe-inline'. `vaul/style.css`
+ * is not in vaul's `exports`, hence the copy: update it with vaul.
+ *
+ * Left out: `[data-vaul-handle-hitarea]: { … }` under `(pointer: fine)`, an
+ * invalid selector every browser drops.
+ *
+ * MIT License. Copyright (c) 2023 Emil Kowalski
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED. See vaul's LICENSE.md for the full text.
+ */
+[data-vaul-drawer] {
+	touch-action: none;
+	will-change: transform;
+	transition: transform 0.5s cubic-bezier(0.32, 0.72, 0, 1);
+	animation-duration: 0.5s;
+	animation-timing-function: cubic-bezier(0.32, 0.72, 0, 1);
+}
+
+[data-vaul-drawer][data-vaul-snap-points="false"][data-vaul-drawer-direction="bottom"][data-state="open"] {
+	animation-name: slideFromBottom;
+}
+[data-vaul-drawer][data-vaul-snap-points="false"][data-vaul-drawer-direction="bottom"][data-state="closed"] {
+	animation-name: slideToBottom;
+}
+
+[data-vaul-drawer][data-vaul-snap-points="false"][data-vaul-drawer-direction="top"][data-state="open"] {
+	animation-name: slideFromTop;
+}
+[data-vaul-drawer][data-vaul-snap-points="false"][data-vaul-drawer-direction="top"][data-state="closed"] {
+	animation-name: slideToTop;
+}
+
+[data-vaul-drawer][data-vaul-snap-points="false"][data-vaul-drawer-direction="left"][data-state="open"] {
+	animation-name: slideFromLeft;
+}
+[data-vaul-drawer][data-vaul-snap-points="false"][data-vaul-drawer-direction="left"][data-state="closed"] {
+	animation-name: slideToLeft;
+}
+
+[data-vaul-drawer][data-vaul-snap-points="false"][data-vaul-drawer-direction="right"][data-state="open"] {
+	animation-name: slideFromRight;
+}
+[data-vaul-drawer][data-vaul-snap-points="false"][data-vaul-drawer-direction="right"][data-state="closed"] {
+	animation-name: slideToRight;
+}
+
+[data-vaul-drawer][data-vaul-snap-points="true"][data-vaul-drawer-direction="bottom"] {
+	transform: translate3d(0, var(--initial-transform, 100%), 0);
+}
+
+[data-vaul-drawer][data-vaul-snap-points="true"][data-vaul-drawer-direction="top"] {
+	transform: translate3d(0, calc(var(--initial-transform, 100%) * -1), 0);
+}
+
+[data-vaul-drawer][data-vaul-snap-points="true"][data-vaul-drawer-direction="left"] {
+	transform: translate3d(calc(var(--initial-transform, 100%) * -1), 0, 0);
+}
+
+[data-vaul-drawer][data-vaul-snap-points="true"][data-vaul-drawer-direction="right"] {
+	transform: translate3d(var(--initial-transform, 100%), 0, 0);
+}
+
+[data-vaul-drawer][data-vaul-delayed-snap-points="true"][data-vaul-drawer-direction="top"] {
+	transform: translate3d(0, var(--snap-point-height, 0), 0);
+}
+
+[data-vaul-drawer][data-vaul-delayed-snap-points="true"][data-vaul-drawer-direction="bottom"] {
+	transform: translate3d(0, var(--snap-point-height, 0), 0);
+}
+
+[data-vaul-drawer][data-vaul-delayed-snap-points="true"][data-vaul-drawer-direction="left"] {
+	transform: translate3d(var(--snap-point-height, 0), 0, 0);
+}
+
+[data-vaul-drawer][data-vaul-delayed-snap-points="true"][data-vaul-drawer-direction="right"] {
+	transform: translate3d(var(--snap-point-height, 0), 0, 0);
+}
+
+[data-vaul-overlay][data-vaul-snap-points="false"] {
+	animation-duration: 0.5s;
+	animation-timing-function: cubic-bezier(0.32, 0.72, 0, 1);
+}
+[data-vaul-overlay][data-vaul-snap-points="false"][data-state="open"] {
+	animation-name: fadeIn;
+}
+[data-vaul-overlay][data-state="closed"] {
+	animation-name: fadeOut;
+}
+
+[data-vaul-animate="false"] {
+	/* biome-ignore lint/complexity/noImportantStyles: vaul's own rule */
+	animation: none !important;
+}
+
+[data-vaul-overlay][data-vaul-snap-points="true"] {
+	opacity: 0;
+	transition: opacity 0.5s cubic-bezier(0.32, 0.72, 0, 1);
+}
+
+[data-vaul-overlay][data-vaul-snap-points="true"] {
+	opacity: 1;
+}
+
+[data-vaul-drawer]:not([data-vaul-custom-container="true"])::after {
+	content: "";
+	position: absolute;
+	background: inherit;
+	background-color: inherit;
+}
+
+[data-vaul-drawer][data-vaul-drawer-direction="top"]::after {
+	top: initial;
+	bottom: 100%;
+	left: 0;
+	right: 0;
+	height: 200%;
+}
+
+[data-vaul-drawer][data-vaul-drawer-direction="bottom"]::after {
+	top: 100%;
+	bottom: initial;
+	left: 0;
+	right: 0;
+	height: 200%;
+}
+
+[data-vaul-drawer][data-vaul-drawer-direction="left"]::after {
+	left: initial;
+	right: 100%;
+	top: 0;
+	bottom: 0;
+	width: 200%;
+}
+
+[data-vaul-drawer][data-vaul-drawer-direction="right"]::after {
+	left: 100%;
+	right: initial;
+	top: 0;
+	bottom: 0;
+	width: 200%;
+}
+
+[data-vaul-overlay][data-vaul-snap-points="true"]:not(
+	[data-vaul-snap-points-overlay="true"]
+):not([data-state="closed"]) {
+	opacity: 0;
+}
+
+[data-vaul-overlay][data-vaul-snap-points-overlay="true"] {
+	opacity: 1;
+}
+
+[data-vaul-handle] {
+	display: block;
+	position: relative;
+	opacity: 0.7;
+	background: #e2e2e4;
+	margin-left: auto;
+	margin-right: auto;
+	height: 5px;
+	width: 32px;
+	border-radius: 1rem;
+	touch-action: pan-y;
+}
+
+[data-vaul-handle]:active,
+[data-vaul-handle]:hover {
+	opacity: 1;
+}
+
+[data-vaul-handle-hitarea] {
+	position: absolute;
+	left: 50%;
+	top: 50%;
+	transform: translate(-50%, -50%);
+	width: max(100%, 2.75rem); /* 44px */
+	height: max(100%, 2.75rem); /* 44px */
+	touch-action: inherit;
+}
+
+@media (hover: hover) and (pointer: fine) {
+	[data-vaul-drawer] {
+		user-select: none;
+	}
+}