@ofidj/entry 3.10.1 → 3.11.0

package/model.js

@@ -0,0 +1,406 @@
+// The entry, as data.
+//
+// Everything a person is told and every rule deciding what they are told, with
+// no markup and no DOM. A screen is a value here: the copy, the state, and
+// which controls are live. Rendering it is somebody else's business —
+// `@ofidj/entry/dom` renders it as HTML strings, and a React or Vue app renders
+// the same value as components without re-deriving a single sentence.
+//
+// That split is the point. The wording and the rules are what took the arguing;
+// a `<label>` is not. When the two lived together the only way to reuse either
+// was to accept both, so an app on another view layer had to copy the sentences
+// out — which is how the service agreement ended up existing in four versions
+// that no test could diff.
+// ---------------------------------------------------------------------------
+// What a refusal means
+// ---------------------------------------------------------------------------
+const AGREEMENT_REQUIRED = "agreement_required";
+// Whether this refusal means the person owes this app its agreement.
+//
+// The API answers 409 with `code: agreement_required` and the agreement itself,
+// but the SDK's FidjError carries a code and a reason and has no room for a
+// body — so the code arrives as a number, as a name, or as the whole body
+// squeezed into a string, depending on which call refused. All three mean the
+// same thing, and guessing wrong costs a person the screen that lets them in.
+export function agreementRequired(error) {
+    if (!error || typeof error !== "object")
+        return false;
+    const detail = error;
+    if (detail.code === 409)
+        return true;
+    for (const field of [detail.code, detail.reason, detail.message]) {
+        if (typeof field === "string" && field.includes(AGREEMENT_REQUIRED))
+            return true;
+    }
+    return false;
+}
+// The agreement the refusal carried, which is the one the API compared against.
+//
+// Fetching it again would usually give the same answer and occasionally not:
+// an owner who publishes a new version between the refusal and the refetch
+// would have the person accept text the API is about to call stale. Both halves
+// are required — a version with no text is nothing to read, and text with no
+// version is nothing to record.
+export function agreementFromRefusal(error) {
+    if (!agreementRequired(error))
+        return null;
+    const details = error.details;
+    const agreement = details?.agreement;
+    if (typeof agreement?.version !== "string" || !agreement.version)
+        return null;
+    if (typeof agreement?.text !== "string" || !agreement.text)
+        return null;
+    return { version: agreement.version, text: agreement.text };
+}
+// What the SDK says when POST /v3/users answered 201: the account was created
+// by this very call, so there is no session and the link is what will make one.
+//
+// It returns the address rather than a boolean because the wait has to name it,
+// and the address the account was created with is the one the link went to —
+// not whatever is in the field by the time this is read.
+export function verificationPending(error) {
+    if (!error || typeof error !== "object")
+        return null;
+    const detail = error;
+    if (detail.reason !== "verification-required")
+        return null;
+    const email = detail.details?.email;
+    return { email: typeof email === "string" ? email : "" };
+}
+export function signInErrorMessage(error) {
+    const detail = error;
+    const reason = typeof detail?.reason === "string"
+        ? detail.reason
+        : typeof detail?.message === "string"
+            ? detail.message
+            : "";
+    if (detail?.code === 429)
+        return "Too many attempts. Please wait before trying again.";
+    if (reason === "unknown-user")
+        return "We could not sign in to this account. Check the email and password.";
+    if (reason === "already exists - inconsistent request")
+        return "An account already uses this email. Check the password or sign in instead.";
+    if (/ECONNREFUSED|ENOTFOUND|ETIMEDOUT|ECONNRESET|EHOSTUNREACH|network/i.test(reason))
+        return "We cannot reach Fidj right now. Please try again.";
+    return "We could not sign in to this account. Please try again.";
+}
+// ---------------------------------------------------------------------------
+// What an acceptance is worth
+// ---------------------------------------------------------------------------
+// The rule, with nothing to read it off.
+//
+// A tick is evidence only if it was live and only if it names a version: the
+// version travels with the checkbox so that what is recorded is what was
+// displayed, and acceptance of a version nobody was shown is not evidence.
+// `@ofidj/entry/dom` reads these three facts off a form element; a React app
+// reads them off its own state and asks the same question here.
+export function acceptance(state) {
+    if (!state.checked || state.disabled || !state.version)
+        return null;
+    return { termsAccepted: true, termsVersion: state.version };
+}
+// Both doors, but not side by side.
+//
+// An app that delegates to Fidj still has people who would rather type an
+// address and a password than be sent somewhere, so the credential form stays —
+// folded away under a line of text rather than standing in front of the door
+// most people should take. Offering the two as equals asked every arrival to
+// choose between them, and the one that looked like an ordinary login won by
+// looking ordinary.
+//
+// "Continue with Fidj" alone borrows the grammar of an optional social login —
+// that button always sits next to an email and a password — so on an app whose
+// accounts *are* Fidj accounts, the missing form reads as something broken. The
+// explanation therefore comes before the button, not as reassurance after it,
+// and nothing presupposes an account the person may not have yet.
+//
+// `hint` is passed in rather than read: remembering is a browser fact, and a
+// model that reaches for `localStorage` is a model that cannot be rendered on a
+// server or tested without one.
+export function providerEntryModel(options) {
+    const { title, hint = "", isFidjItself = false, shape = "button", hasCredentials = false, } = options;
+    const both = shape === "both" && hasCredentials;
+    // The app's own form and nothing else. Nothing is folded away because there
+    // is no second way in to fold it under, and the trade-off is stated plainly:
+    // on this path it is this site that holds the password.
+    if (shape === "inline") {
+        return {
+            shape,
+            lead: isFidjItself
+                ? "One account across every app that uses Fidj, and a separate set of choices for each one."
+                : `${title} accounts are Fidj accounts. Sign in below — ${title} handles your password itself on this page.`,
+            door: null,
+            forget: null,
+            disclosure: null,
+        };
+    }
+    const lead = hint
+        ? `You signed in here with Fidj before. ${title} accounts are Fidj accounts — continue as yourself, or use another.`
+        : both
+            ? `${title} accounts are Fidj accounts. Fidj asks in a window of its own, so this site never sees your password.`
+            : isFidjItself
+                ? "One account across every app that uses Fidj, and a separate set of choices for each one. Fidj asks in a window of its own; this page stays where it is."
+                : `${title} accounts are Fidj accounts. You will sign in — or create yours — in a Fidj window, so this site never sees your password.`;
+    // The accent is the Fidj mark, and this is the one control on the screen that
+    // is Fidj's rather than the app's. It is also the door the app would rather
+    // people took, and those two happen to want the same thing.
+    const door = {
+        id: "fidj-entry",
+        name: "entry",
+        value: "fidj",
+        kind: "primary",
+        label: hint
+            ? `Continue as ${hint}`
+            : isFidjItself
+                ? "Sign in"
+                : "Sign in with Fidj",
+    };
+    const forget = hint
+        ? { id: "forget-hint", kind: "quiet", label: "Use a different account" }
+        : null;
+    return {
+        shape,
+        lead,
+        door,
+        forget,
+        // Fidj is the only door: it collects the agreement itself, a moment later,
+        // on the screen that names the app — and records it with its version.
+        disclosure: both
+            ? { label: "Inline form", controls: "email-entry", expanded: false }
+            : null,
+    };
+}
+// Screen three. The text and the version come from the app's own agreement, and
+// the version travels with the acceptance so that what is recorded is what was
+// displayed.
+export function agreementModel(title, agreement, state = {}) {
+    return {
+        heading: "Before you continue",
+        lead: `${title} asks you to accept its service agreement. Your optional privacy choices stay separate, and you can change them at any time.`,
+        versionLabel: `Version ${agreement.version ?? ""}`,
+        version: String(agreement.version ?? ""),
+        text: String(agreement.text ?? ""),
+        checkboxLabel: `I accept the service agreement for ${title}.`,
+        submitLabel: "Sign in",
+        submitDisabled: !state.checked,
+    };
+}
+// The wait, underneath the form that started it.
+//
+// Creating an account never signs anybody in: the account exists, it has no
+// session, and the link is what finishes the sign-in. But that is not a place
+// somebody was taken to, so it does not get a screen — it appears below the
+// credentials they just submitted, which stay where they are.
+//
+// That is also what makes a mistyped address recoverable without a control of
+// its own: the address field is still on screen, still filled in, still
+// editable. Correcting it and pressing Create an account again is the repair,
+// and it reads as one because nothing moved.
+export function verificationWaitModel(state) {
+    return {
+        status: "Your account is created. Waiting for you to open the link sent to",
+        email: state.email,
+        fineprint: "This continues on its own once you have. The link may take a minute, and it sometimes lands in spam. Wrong address? Correct it above and create the account again.",
+        notice: state.error
+            ? { kind: "error", text: state.error }
+            : state.resent
+                ? {
+                    kind: "info",
+                    text: "The link was sent again. Only the newest one works.",
+                }
+                : null,
+        resendLabel: "Send the link again",
+    };
+}
+// The four account screens. My account is shown inside the app; the recovery
+// and verification ones are reached without a session and stand alone.
+export function accountModel(route, state) {
+    const empty = {
+        heading: "",
+        intro: "",
+        fields: [],
+        hint: "",
+        submitLabel: "",
+        alternative: null,
+        status: "",
+        extras: [],
+    };
+    if (route === "forgot")
+        return {
+            ...empty,
+            heading: "Reset your password",
+            intro: "We’ll email you a link to choose a new password for your shared Fidj account.",
+            fields: [
+                {
+                    id: "recovery-email",
+                    label: "Email address",
+                    type: "email",
+                    autocomplete: "email",
+                    required: true,
+                },
+            ],
+            submitLabel: "Send reset link",
+        };
+    if (route === "reset")
+        return {
+            ...empty,
+            heading: "Choose a new password",
+            intro: "This changes your Fidj password across all your apps and signs out existing sessions.",
+            fields: state.linkToken
+                ? [
+                    {
+                        id: "new-password",
+                        label: "New password",
+                        type: "password",
+                        autocomplete: "new-password",
+                        minlength: 12,
+                        required: true,
+                    },
+                    {
+                        id: "confirm-password",
+                        label: "Confirm password",
+                        type: "password",
+                        autocomplete: "new-password",
+                        minlength: 12,
+                        required: true,
+                    },
+                ]
+                : [],
+            hint: state.linkToken
+                ? "Use at least 12 characters (up to 72 UTF-8 bytes)."
+                : "",
+            submitLabel: state.linkToken ? "Save new password" : "",
+            alternative: state.linkToken
+                ? null
+                : {
+                    text: "Request a new link if you no longer have an active reset link.",
+                    href: "#/forgot",
+                    label: "Request a reset link",
+                },
+        };
+    if (route === "verify")
+        return {
+            ...empty,
+            heading: state.verificationConfirmed
+                ? "Email verified"
+                : "Verify your email",
+            intro: state.verificationConfirmed
+                ? "Your account is ready. Return to your app to continue."
+                : "Confirm that this email address belongs to you.",
+            submitLabel: !state.verificationConfirmed && state.linkToken
+                ? "Confirm email address"
+                : "",
+            alternative: !state.verificationConfirmed && !state.linkToken
+                ? {
+                    text: "Sign in to your account to request a new verification email.",
+                }
+                : null,
+        };
+    return {
+        ...empty,
+        heading: "My Fidj account",
+        intro: "Your identity is shared across your apps. Privacy choices remain separate for each app.",
+        status: state.emailVerified
+            ? "Your email address is verified."
+            : "Your email is not verified yet.",
+        alternative: { text: "", href: "#/forgot", label: "Reset my password" },
+        extras: [
+            {
+                id: "check-verification",
+                kind: "secondary",
+                label: "Refresh verification status",
+            },
+            ...(state.emailVerified
+                ? []
+                : [
+                    {
+                        id: "resend-verification",
+                        kind: "secondary",
+                        label: "Send verification email",
+                    },
+                ]),
+        ],
+    };
+}
+// Both doors, and what was already typed. The entry is rebuilt on every render
+// and a refused sign-in is a render, so the values come back in rather than
+// being lost with the markup that held them.
+export function credentialsModel(state) {
+    return {
+        email: {
+            id: "email",
+            label: "Email",
+            type: "email",
+            autocomplete: "username",
+            value: state.email,
+            placeholder: "you@company.com",
+        },
+        password: {
+            id: "password",
+            label: "Password",
+            type: "password",
+            autocomplete: "current-password",
+            value: state.password,
+            placeholder: "••••••••••",
+        },
+        forgot: { href: "#/forgot", label: "Forgot?" },
+        reveal: { id: "reveal", kind: "quiet", label: "Show" },
+        submit: {
+            id: "entry-credentials",
+            name: "entry",
+            value: "credentials",
+            kind: "primary",
+            label: "Continue",
+        },
+        signup: {
+            id: "entry-signup",
+            name: "signup",
+            value: "true",
+            kind: "secondary",
+            label: "Create an account",
+        },
+    };
+}
+// A window that opened on its own, over the page somebody was on, owes them the
+// way out before it asks for anything. Naming the app they came from is also the
+// only thing on this screen that they can check against what they were doing a
+// second ago — which is exactly what a page asking for a password should offer.
+export function returnNoticeModel(asking) {
+    return `When you are done, this window closes and takes you back to ${asking}.`;
+}
+// ---------------------------------------------------------------------------
+// The wait resolves by itself
+// ---------------------------------------------------------------------------
+// Screen two resolves by itself, which means asking. A failed check is not an
+// answer: a browser that lost its connection has learned nothing about the
+// address, so it keeps waiting rather than reporting anything.
+export function pollVerification(options) {
+    const interval = options.intervalMs ?? 4000;
+    let stopped = false;
+    let timer;
+    const stop = () => {
+        stopped = true;
+        clearTimeout(timer);
+    };
+    const ask = async () => {
+        if (stopped)
+            return;
+        let verified = false;
+        try {
+            verified = await options.check();
+        }
+        catch {
+            // Nothing was learned. Wait, and ask again.
+        }
+        if (stopped)
+            return;
+        if (verified) {
+            options.onVerified();
+            return;
+        }
+        timer = setTimeout(ask, interval);
+    };
+    timer = setTimeout(ask, interval);
+    return stop;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ofidj/entry",
-  "version": "3.10.1",
+  "version": "3.11.0",
   "description": "The Fidj entry: sign-in, account recovery, the service agreement and the design system, shared verbatim by Fidj, the generated apps and the console.",
   "license": "MIT",
   "publishConfig": {
@@ -14,6 +14,14 @@
       "types": "./index.d.ts",
       "default": "./index.js"
     },
+    "./dom": {
+      "types": "./dom.d.ts",
+      "default": "./dom.js"
+    },
+    "./window": {
+      "types": "./window.d.ts",
+      "default": "./window.js"
+    },
     "./tokens.css": "./tokens.css",
     "./fonts.css": "./fonts.css",
     "./style.css": "./style.css"

package/remembered.d.ts

@@ -0,0 +1,3 @@
+export declare function signInHint(appId: string): string;
+export declare function rememberSignIn(appId: string, label: string): void;
+export declare function forgetSignIn(appId: string): void;

package/remembered.js

@@ -0,0 +1,33 @@
+// What this browser remembers about the last person to sign in here.
+//
+// Not DOM and not a view layer, so it sits at the root beside the model: a
+// React app needs this exactly as much as a hand-written one. It is the only
+// browser API the root touches, every call is guarded, and a runtime without
+// storage gets "nobody was here" rather than an exception — which is also the
+// right answer in a private window.
+const hintKey = (appId) => "fidj.entry." + appId;
+export function signInHint(appId) {
+    try {
+        return localStorage.getItem(hintKey(appId)) || "";
+    }
+    catch {
+        return "";
+    }
+}
+// Remembered on this app's own origin, about this app's own member: no
+// cross-site question is asked, and none is answered. Signing out forgets, so a
+// shared browser does not show the next person an address.
+export function rememberSignIn(appId, label) {
+    try {
+        if (label)
+            localStorage.setItem(hintKey(appId), label);
+    }
+    catch { }
+}
+export function forgetSignIn(appId) {
+    try {
+        localStorage.removeItem(hintKey(appId));
+    }
+    catch { }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/window.d.ts

@@ -0,0 +1 @@
+export { openProviderWindow, relayProviderAnswer, type ProviderWindow, } from "./provider-window.js";

package/window.js

@@ -0,0 +1,7 @@
+// The Fidj window, and the answer it relays back.
+//
+// A subpath of its own because it is neither pure nor a view layer: it drives
+// `window.open` and `postMessage`, which every framework reaches for the same
+// way. An app on React or Vue uses this exactly as a hand-written shell does.
+export { openProviderWindow, relayProviderAnswer, } from "./provider-window.js";
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoid2luZG93LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vc3JjL3dpbmRvdy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxrREFBa0Q7QUFDbEQsRUFBRTtBQUNGLDhFQUE4RTtBQUM5RSw4RUFBOEU7QUFDOUUsOEVBQThFO0FBQzlFLE9BQU8sRUFDTCxrQkFBa0IsRUFDbEIsbUJBQW1CLEdBRXBCLE1BQU0sc0JBQXNCLENBQUMifQ==

package/screens.d.ts

@@ -1,19 +0,0 @@
-export declare const escape: (value: unknown) => string;
-export declare function masthead(logo: string, title: string): string;
-export declare function highlightCells(entries?: Array<{
-    heading: string;
-    body: string;
-}>): string;
-export declare function badgeStrip(entries?: string[]): string;
-export declare function credentialFields(state: {
-    email: string;
-    password: string;
-}): string;
-export type AccountState = {
-    linkToken?: string;
-    verificationConfirmed?: boolean;
-    emailVerified?: boolean;
-    accountEmail?: string;
-};
-export declare function accountForm(route: string, state: AccountState): string;
-export declare function returnNotice(asking: string): string;

package/screens.js

@@ -1,52 +0,0 @@
-// The screens the entry draws, as markup.
-//
-// Lifted out of generator-fidj's content.ts, where the only way to ship them
-// was to generate an app. What stayed behind is the shell that holds them:
-// the sign-in screen nests signin-trust inside its inner div and the
-// interaction screen makes it a sibling, so a single shell builder would have
-// had to change one of them. That is a decision, not a move.
-export const escape = (value) => String(value ?? "").replace(/[&<>"']/g, (char) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[char]);
-// The app's own mark beside its own name, decorative because the name is right
-// there: every shell opens with this.
-export function masthead(logo, title) {
-    return `<header class="signin-masthead"><img class="app-mark" src="${escape(logo)}" alt=""><strong>${escape(title)}</strong></header>`;
-}
-export function highlightCells(entries) {
-    if (!entries?.length)
-        return "";
-    return `<div class="signin-highlights">${entries
-        .map((entry, index) => `<article><p class="eyebrow">${String(index + 1).padStart(2, "0")}</p><h2>${escape(entry.heading)}</h2><p>${escape(entry.body)}</p></article>`)
-        .join("")}</div>`;
-}
-export function badgeStrip(entries) {
-    if (!entries?.length)
-        return "";
-    return `<footer class="signin-badges">${entries
-        .map((entry) => `<span>${escape(entry)}</span>`)
-        .join("")}</footer>`;
-}
-// Both doors, and what was already typed. The entry is rebuilt on every render
-// and a refused sign-in is a render, so the values come back in rather than
-// being lost with the markup that held them.
-export function credentialFields(state) {
-    return `<label for="email">Email</label><input id="email" type="email" value="${escape(state.email)}" placeholder="you@company.com" autocomplete="username"><div class="field-head"><label for="password">Password</label><a href="#/forgot">Forgot?</a></div><div class="password-field"><input id="password" type="password" value="${escape(state.password)}" placeholder="••••••••••" autocomplete="current-password"><button type="button" id="reveal" aria-controls="password">Show</button></div><button class="primary" type="submit" name="entry" value="credentials">Continue</button><button class="secondary" type="submit" name="signup" value="true">Create an account</button>`;
-}
-// The four account screens. My account is shown inside the app; the recovery
-// and verification ones are reached without a session and stand alone.
-export function accountForm(route, state) {
-    return route === "forgot"
-        ? `<h2>Reset your password</h2><p>We’ll email you a link to choose a new password for your shared Fidj account.</p><form id="recovery"><label for="recovery-email">Email address</label><input id="recovery-email" type="email" autocomplete="email" required><button class="primary">Send reset link</button></form>`
-        : route === "reset"
-            ? `<h2>Choose a new password</h2><p>This changes your Fidj password across all your apps and signs out existing sessions.</p>${state.linkToken ? '<form id="recovery"><label for="new-password">New password</label><input id="new-password" type="password" autocomplete="new-password" minlength="12" required><label for="confirm-password">Confirm password</label><input id="confirm-password" type="password" autocomplete="new-password" minlength="12" required><p>Use at least 12 characters (up to 72 UTF-8 bytes).</p><button class="primary">Save new password</button></form>' : '<p>Request a new link if you no longer have an active reset link.</p><a href="#/forgot">Request a reset link</a>'}`
-            : route === "verify"
-                ? `<h2>${state.verificationConfirmed ? "Email verified" : "Verify your email"}</h2>${state.verificationConfirmed ? "<p>Your account is ready. Return to your app to continue.</p>" : "<p>Confirm that this email address belongs to you.</p>"}${state.verificationConfirmed ? "" : state.linkToken ? '<form id="recovery"><button class="primary">Confirm email address</button></form>' : "<p>Sign in to your account to request a new verification email.</p>"}`
-                : `<h2>My Fidj account</h2><p class="account-identity">Signed in as <strong>${escape(state.accountEmail)}</strong></p><p>Your identity is shared across your apps. Privacy choices remain separate for each app.</p><p id="verification-status">${state.emailVerified ? "Your email address is verified." : "Your email is not verified yet."}</p><button id="check-verification">Refresh verification status</button>${state.emailVerified ? "" : '<button id="resend-verification">Send verification email</button>'}<p><a href="#/forgot">Reset my password</a></p>`;
-}
-// A window that opened on its own, over the page somebody was on, owes them the
-// way out before it asks for anything. Naming the app they came from is also the
-// only thing on this screen that they can check against what they were doing a
-// second ago — which is exactly what a page asking for a password should offer.
-export function returnNotice(asking) {
-    return `<p class="signin-return" role="note">When you are done, this window closes and takes you back to ${escape(asking)}.</p>`;
-}
-//# sourceMappingURL=data:application/json;base64,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

package/service-agreement.d.ts

@@ -1,13 +0,0 @@
-export declare function agreementMarkup(): string;
-export declare function acceptedAgreement(form: HTMLFormElement): {
-    termsAccepted: boolean;
-    termsVersion: string;
-} | null;
-export declare function signInErrorMessage(error: unknown): "Too many attempts. Please wait before trying again." | "We could not sign in to this account. Check the email and password." | "An account already uses this email. Check the password or sign in instead." | "We cannot reach Fidj right now. Please try again." | "We could not sign in to this account. Please try again.";
-export declare function bindAgreement(form: HTMLFormElement | null, title: string, endpoint: string, appId: string, checked?: boolean): Promise<void>;
-export declare function signInHint(appId: string): string;
-export declare function rememberSignIn(appId: string, label: string): void;
-export declare function forgetSignIn(appId: string): void;
-export type SigninShape = "button" | "inline" | "both";
-export declare function providerEntry(title: string, appId: string, credentials: string, isFidjItself?: boolean, shape?: SigninShape): string;
-export declare function showEmailEntry(open: boolean, focus?: boolean): void;