@package-broker/ui 0.19.8 → 2.0.0-rc.2

package/dist/components/vulnerability-status.js

@@ -0,0 +1,49 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { Badge } from './ui/badge.js';
+import { Time } from './ui/time.js';
+const REASONS = {
+    not_checked: 'Not checked',
+    disabled: 'Vulnerability checks disabled',
+    unsupported_version: 'Not checked: unsupported version',
+    pending: 'Not checked yet',
+    upstream_unavailable: 'Check unavailable; no result yet',
+    incomplete: 'Check incomplete; no complete result yet',
+    expired: 'Outdated result',
+};
+const PRESENTATION = {
+    affected: { icon: '!', color: 'border-red-200 bg-red-50 text-red-800' },
+    not_affected: { icon: 'i', color: 'border-blue-200 bg-blue-50 text-blue-800' },
+    unknown: { icon: '?', color: 'border-neutral-200 bg-neutral-100 text-neutral-700' },
+    stale: { icon: '◷', color: 'border-amber-300 bg-amber-50 text-amber-900' },
+};
+function advisoryLink(id) {
+    return id.length <= 200 && /^[A-Za-z0-9]/.test(id) && !/[^A-Za-z0-9._-]/.test(id)
+        ? `https://osv.dev/vulnerability/${encodeURIComponent(id)}`
+        : undefined;
+}
+export function VulnerabilityStatus({ assessment, sourceType, }) {
+    const { status, reason } = assessment;
+    const masked = status === 'unknown' && reason === 'not_checked';
+    const visiblePrivate = ['vcs', 'composer_repository', 'npm_registry', 'hosted'].includes(sourceType);
+    const label = status === 'affected'
+        ? `Known advisories: ${assessment.advisoryCount}`
+        : status === 'not_affected'
+            ? 'No known advisories'
+            : status === 'stale'
+                ? 'Outdated result'
+                : masked && visiblePrivate
+                    ? 'Not checked: private package'
+                    : reason === null
+                        ? 'Not checked'
+                        : REASONS[reason];
+    const presentation = PRESENTATION[status];
+    return (_jsxs("div", { className: "space-y-2 text-sm", children: [_jsxs(Badge, { variant: "outline", className: presentation.color, children: [_jsx("span", { "aria-hidden": "true", children: presentation.icon }), " ", label] }), masked ? (_jsx("p", { children: "Only verified public proxy packages are checked." })) : (_jsxs(_Fragment, { children: [assessment.source === 'osv' ? (_jsxs("p", { children: ["OSV \u00B7 ", status === 'stale' ? 'Last checked' : 'checked', ' ', _jsx(Time, { value: assessment.fetchedAt, fallback: "No successful check yet" })] })) : null, status === 'stale' && assessment.lastKnownStatus !== null ? (_jsx("p", { children: assessment.lastKnownStatus === 'affected'
+                            ? `Last result: known advisories: ${assessment.advisoryCount}`
+                            : 'Last result: no known advisories' })) : null, _jsxs("details", { children: [_jsx("summary", { className: "cursor-pointer", children: "Advisory check details" }), status === 'stale' && reason === 'incomplete' ? (_jsx("p", { children: "Check incomplete; last complete result shown." })) : null, assessment.advisoryCount > 0 && !assessment.detailsComplete ? (_jsx("p", { children: "Advisory details pending" })) : null, assessment.advisoriesTruncated ? (_jsxs("p", { children: ["Showing ", assessment.advisories.length, " of ", assessment.advisoryCount, " advisories"] })) : null, assessment.advisories.length > 0 ? (_jsx("ul", { className: "list-disc pl-5", children: assessment.advisories.map((advisory) => {
+                                    const href = advisoryLink(advisory.id);
+                                    return (_jsxs("li", { children: [href ? (_jsx("a", { href: href, target: "_blank", rel: "noopener noreferrer", referrerPolicy: "no-referrer", className: "underline", children: advisory.id })) : (advisory.id), ' · ', advisory.severity.level === 'unknown'
+                                                ? 'Severity unavailable'
+                                                : `Severity: ${advisory.severity.level}`, advisory.detailsFetchedAt === null ? (_jsx("span", { children: " \u00B7 Advisory details pending" })) : (_jsxs("span", { children: [' ', "\u00B7 Details fetched ", _jsx(Time, { value: advisory.detailsFetchedAt })] }))] }, advisory.id));
+                                }) })) : null] })] }))] }));
+}
+//# sourceMappingURL=vulnerability-status.js.map

package/dist/components/vulnerability-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vulnerability-status.js","sourceRoot":"","sources":["../../src/components/vulnerability-status.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAKpC,MAAM,OAAO,GAAG;IACd,WAAW,EAAE,aAAa;IAC1B,QAAQ,EAAE,+BAA+B;IACzC,mBAAmB,EAAE,kCAAkC;IACvD,OAAO,EAAE,iBAAiB;IAC1B,oBAAoB,EAAE,kCAAkC;IACxD,UAAU,EAAE,0CAA0C;IACtD,OAAO,EAAE,iBAAiB;CAClB,CAAC;AACX,MAAM,YAAY,GAAG;IACnB,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,uCAAuC,EAAE;IACvE,YAAY,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,0CAA0C,EAAE;IAC9E,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,oDAAoD,EAAE;IACnF,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,6CAA6C,EAAE;CAClE,CAAC;AAEX,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,EAAE,CAAC,MAAM,IAAI,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/E,CAAC,CAAC,iCAAiC,kBAAkB,CAAC,EAAE,CAAC,EAAE;QAC3D,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,EAClC,UAAU,EACV,UAAU,GAIX;IACC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,aAAa,CAAC;IAChE,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,QAAQ,CACtF,UAAU,CACX,CAAC;IACF,MAAM,KAAK,GACT,MAAM,KAAK,UAAU;QACnB,CAAC,CAAC,qBAAqB,UAAU,CAAC,aAAa,EAAE;QACjD,CAAC,CAAC,MAAM,KAAK,cAAc;YACzB,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,MAAM,KAAK,OAAO;gBAClB,CAAC,CAAC,iBAAiB;gBACnB,CAAC,CAAC,MAAM,IAAI,cAAc;oBACxB,CAAC,CAAC,8BAA8B;oBAChC,CAAC,CAAC,MAAM,KAAK,IAAI;wBACf,CAAC,CAAC,aAAa;wBACf,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,CACL,eAAK,SAAS,EAAC,mBAAmB,aAChC,MAAC,KAAK,IAAC,OAAO,EAAC,SAAS,EAAC,SAAS,EAAE,YAAY,CAAC,KAAK,aACpD,8BAAkB,MAAM,YAAE,YAAY,CAAC,IAAI,GAAQ,OAAE,KAAK,IACpD,EACP,MAAM,CAAC,CAAC,CAAC,CACR,2EAAuD,CACxD,CAAC,CAAC,CAAC,CACF,8BACG,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAC7B,uCACS,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAC3D,KAAC,IAAI,IAAC,KAAK,EAAE,UAAU,CAAC,SAAS,EAAE,QAAQ,EAAC,yBAAyB,GAAG,IACtE,CACL,CAAC,CAAC,CAAC,IAAI,EACP,MAAM,KAAK,OAAO,IAAI,UAAU,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,CAC3D,sBACG,UAAU,CAAC,eAAe,KAAK,UAAU;4BACxC,CAAC,CAAC,kCAAkC,UAAU,CAAC,aAAa,EAAE;4BAC9D,CAAC,CAAC,kCAAkC,GACpC,CACL,CAAC,CAAC,CAAC,IAAI,EACR,8BACE,kBAAS,SAAS,EAAC,gBAAgB,uCAAiC,EACnE,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,CAC/C,wEAAoD,CACrD,CAAC,CAAC,CAAC,IAAI,EACP,UAAU,CAAC,aAAa,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,CAC7D,mDAA+B,CAChC,CAAC,CAAC,CAAC,IAAI,EACP,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAChC,oCACW,UAAU,CAAC,UAAU,CAAC,MAAM,UAAM,UAAU,CAAC,aAAa,mBACjE,CACL,CAAC,CAAC,CAAC,IAAI,EACP,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAClC,aAAI,SAAS,EAAC,gBAAgB,YAC3B,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;oCACtC,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oCACvC,OAAO,CACL,yBACG,IAAI,CAAC,CAAC,CAAC,CACN,YACE,IAAI,EAAE,IAAI,EACV,MAAM,EAAC,QAAQ,EACf,GAAG,EAAC,qBAAqB,EACzB,cAAc,EAAC,aAAa,EAC5B,SAAS,EAAC,WAAW,YAEpB,QAAQ,CAAC,EAAE,GACV,CACL,CAAC,CAAC,CAAC,CACF,QAAQ,CAAC,EAAE,CACZ,EACA,KAAK,EACL,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS;gDACpC,CAAC,CAAC,sBAAsB;gDACxB,CAAC,CAAC,aAAa,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,EACzC,QAAQ,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,CACpC,8DAAwC,CACzC,CAAC,CAAC,CAAC,CACF,2BACG,GAAG,6BACc,KAAC,IAAI,IAAC,KAAK,EAAE,QAAQ,CAAC,gBAAgB,GAAI,IACvD,CACR,KAzBM,QAAQ,CAAC,EAAE,CA0Bf,CACN,CAAC;gCACJ,CAAC,CAAC,GACC,CACN,CAAC,CAAC,CAAC,IAAI,IACA,IACT,CACJ,IACG,CACP,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export declare const UI_ASSETS_DIR = "assets";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa,WAAW,CAAC"}

package/dist/index.js

@@ -0,0 +1,2 @@
+export const UI_ASSETS_DIR = 'assets';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAC"}

package/dist/lib/use-merged-refs.d.ts

@@ -0,0 +1,3 @@
+import { type Ref } from 'react';
+export declare function useMergedRefs<T>(first: Ref<T> | undefined, second: Ref<T> | undefined): (element: T | null) => () => void;
+//# sourceMappingURL=use-merged-refs.d.ts.map

package/dist/lib/use-merged-refs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-merged-refs.d.ts","sourceRoot":"","sources":["../../src/lib/use-merged-refs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,GAAG,EAAE,MAAM,OAAO,CAAC;AAE9C,wBAAgB,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,aAExE,CAAC,GAAG,IAAI,gBAiBrB"}

package/dist/lib/use-merged-refs.js

@@ -0,0 +1,22 @@
+import { useCallback } from 'react';
+export function useMergedRefs(first, second) {
+    return useCallback((element) => {
+        const cleanups = [first, second].map((ref) => {
+            if (typeof ref === 'function') {
+                const cleanup = ref(element);
+                return typeof cleanup === 'function' ? cleanup : () => ref(null);
+            }
+            if (ref)
+                ref.current = element;
+            return () => {
+                if (ref)
+                    ref.current = null;
+            };
+        });
+        return () => {
+            for (const cleanup of cleanups)
+                cleanup();
+        };
+    }, [first, second]);
+}
+//# sourceMappingURL=use-merged-refs.js.map

package/dist/lib/use-merged-refs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-merged-refs.js","sourceRoot":"","sources":["../../src/lib/use-merged-refs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAY,MAAM,OAAO,CAAC;AAE9C,MAAM,UAAU,aAAa,CAAI,KAAyB,EAAE,MAA0B;IACpF,OAAO,WAAW,CAChB,CAAC,OAAiB,EAAE,EAAE;QACpB,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC3C,IAAI,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;gBAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC7B,OAAO,OAAO,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,GAAG;gBAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;YAC/B,OAAO,GAAG,EAAE;gBACV,IAAI,GAAG;oBAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;YAC9B,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,EAAE;YACV,KAAK,MAAM,OAAO,IAAI,QAAQ;gBAAE,OAAO,EAAE,CAAC;QAC5C,CAAC,CAAC;IACJ,CAAC,EACD,CAAC,KAAK,EAAE,MAAM,CAAC,CAChB,CAAC;AACJ,CAAC"}

package/dist/lib/utils.d.ts

@@ -0,0 +1,4 @@
+import { type ClassValue } from 'clsx';
+export declare function cn(...inputs: ClassValue[]): string;
+export declare function portalContainer(): HTMLElement | undefined;
+//# sourceMappingURL=utils.d.ts.map

package/dist/lib/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/lib/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,UAAU,EAAE,MAAM,MAAM,CAAC;AAG7C,wBAAgB,EAAE,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAElD;AAED,wBAAgB,eAAe,IAAI,WAAW,GAAG,SAAS,CAGzD"}

package/dist/lib/utils.js

@@ -0,0 +1,11 @@
+import { clsx } from 'clsx';
+import { twMerge } from 'tailwind-merge';
+export function cn(...inputs) {
+    return twMerge(clsx(inputs));
+}
+export function portalContainer() {
+    if (typeof document === 'undefined')
+        return undefined;
+    return document.getElementById('root') ?? undefined;
+}
+//# sourceMappingURL=utils.js.map

package/dist/lib/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/lib/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAmB,MAAM,MAAM,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEzC,MAAM,UAAU,EAAE,CAAC,GAAG,MAAoB;IACxC,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,IAAI,OAAO,QAAQ,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IACtD,OAAO,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;AACtD,CAAC"}

package/dist/main.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=main.d.ts.map

package/dist/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.tsx"],"names":[],"mappings":""}

package/dist/main.js

@@ -0,0 +1,9 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { StrictMode } from 'react';
+import { createRoot } from 'react-dom/client';
+import { App } from './app.js';
+const container = document.getElementById('root');
+if (!container)
+    throw new Error('Missing #root element');
+createRoot(container).render(_jsx(StrictMode, { children: _jsx(App, {}) }));
+//# sourceMappingURL=main.js.map

package/dist/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,MAAM,SAAS,GAAG,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;AAClD,IAAI,CAAC,SAAS;IAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;AAEzD,UAAU,CAAC,SAAS,CAAC,CAAC,MAAM,CAC1B,KAAC,UAAU,cACT,KAAC,GAAG,KAAG,GACI,CACd,CAAC"}

package/dist/manifest.d.ts

@@ -0,0 +1,8 @@
+export { UI_CONTENT_TYPES, parseUiManifest } from '@package-broker/core/platform/ui-manifest';
+export type { UiContentType, UiManifestFile, UiManifest, } from '@package-broker/core/platform/ui-manifest';
+export declare function findInlineCode(html: string): string[];
+export declare function checkBudget(total: number, budget: number): {
+    ok: boolean;
+    limit: number;
+};
+//# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AAC9F,YAAY,EACV,aAAa,EACb,cAAc,EACd,UAAU,GACX,MAAM,2CAA2C,CAAC;AAInD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAQrD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAGzF"}

package/dist/manifest.js

@@ -0,0 +1,21 @@
+export { UI_CONTENT_TYPES, parseUiManifest } from '@package-broker/core/platform/ui-manifest';
+const BUDGET_GROWTH_PERCENT = 10;
+export function findInlineCode(html) {
+    const found = [];
+    if (/<script\b(?![^>]*(?<![\w-])src\s*=)[^>]*>/i.test(html))
+        found.push('inline script');
+    if (/<style\b/i.test(html))
+        found.push('style element');
+    if (/<[a-z][^>]*\sstyle\s*=/i.test(html))
+        found.push('style attribute');
+    if (/<[a-z][^>]*\son[a-z]+\s*=/i.test(html))
+        found.push('event handler attribute');
+    if (/javascript:/i.test(html))
+        found.push('javascript URL');
+    return found;
+}
+export function checkBudget(total, budget) {
+    const limit = Math.floor((budget * (100 + BUDGET_GROWTH_PERCENT)) / 100);
+    return { ok: total <= limit, limit };
+}
+//# sourceMappingURL=manifest.js.map

package/dist/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AAO9F,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAEjC,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACzF,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACxD,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACxE,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACnF,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC5D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,MAAc;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,GAAG,qBAAqB,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;IACzE,OAAO,EAAE,EAAE,EAAE,KAAK,IAAI,KAAK,EAAE,KAAK,EAAE,CAAC;AACvC,CAAC"}

package/dist/page-hash.d.ts

@@ -0,0 +1,23 @@
+export type HashRoute = 'projects' | 'access' | 'sources' | 'packages' | 'tokens' | 'audit' | 'import' | 'login' | 'setup' | 'reauth';
+declare const FILTER_LIMITS: {
+    readonly project: 64;
+    readonly status: 64;
+    readonly source: 26;
+    readonly projectId: 26;
+    readonly q: 200;
+    readonly after: 4096;
+    readonly package: 26;
+    readonly versionAfter: 4096;
+    readonly cursor: 4096;
+    readonly run: 26;
+    readonly actor: 200;
+    readonly action: 200;
+    readonly filterProject: 200;
+    readonly limit: 3;
+};
+export type ListFilters = {
+    readonly [K in keyof typeof FILTER_LIMITS]?: string | null | undefined;
+};
+export declare function buildListFilterHash(route: HashRoute, filters?: ListFilters): string;
+export {};
+//# sourceMappingURL=page-hash.d.ts.map

package/dist/page-hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-hash.d.ts","sourceRoot":"","sources":["../src/page-hash.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GACjB,UAAU,GACV,QAAQ,GACR,SAAS,GACT,UAAU,GACV,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,OAAO,GACP,OAAO,GACP,QAAQ,CAAC;AAEb,QAAA,MAAM,aAAa;;;;;;;;;;;;;;;CAeT,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,EAAE,CAAC,IAAI,MAAM,OAAO,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS;CACvE,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,GAAE,WAAgB,GAAG,MAAM,CAuBvF"}

package/dist/page-hash.js

@@ -0,0 +1,45 @@
+const FILTER_LIMITS = {
+    project: 64,
+    status: 64,
+    source: 26,
+    projectId: 26,
+    q: 200,
+    after: 4096,
+    package: 26,
+    versionAfter: 4096,
+    cursor: 4096,
+    run: 26,
+    actor: 200,
+    action: 200,
+    filterProject: 200,
+    limit: 3,
+};
+export function buildListFilterHash(route, filters = {}) {
+    const entries = [];
+    for (const name of Object.keys(FILTER_LIMITS)) {
+        const value = filters[name];
+        if (value == null || value.length === 0 || value.length > FILTER_LIMITS[name])
+            continue;
+        if (name === 'project' && /[^A-Za-z0-9._-]/.test(value))
+            continue;
+        if ((name === 'source' || name === 'projectId') &&
+            (route !== 'packages' || !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/.test(value)))
+            continue;
+        if ((name === 'package' || name === 'versionAfter') && route !== 'packages')
+            continue;
+        if ((name === 'run' || name === 'cursor') && route !== 'import')
+            continue;
+        if (['actor', 'action', 'filterProject', 'limit'].includes(name) && route !== 'audit')
+            continue;
+        if ((name === 'package' || name === 'run') && !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/.test(value))
+            continue;
+        try {
+            entries.push(`${name}=${encodeURIComponent(value)}`);
+        }
+        catch {
+            // A lone surrogate cannot be encoded as a URI component.
+        }
+    }
+    return `#/${route}${entries.length === 0 ? '' : `?${entries.join('&')}`}`;
+}
+//# sourceMappingURL=page-hash.js.map

package/dist/page-hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-hash.js","sourceRoot":"","sources":["../src/page-hash.ts"],"names":[],"mappings":"AAYA,MAAM,aAAa,GAAG;IACpB,OAAO,EAAE,EAAE;IACX,MAAM,EAAE,EAAE;IACV,MAAM,EAAE,EAAE;IACV,SAAS,EAAE,EAAE;IACb,CAAC,EAAE,GAAG;IACN,KAAK,EAAE,IAAI;IACX,OAAO,EAAE,EAAE;IACX,YAAY,EAAE,IAAI;IAClB,MAAM,EAAE,IAAI;IACZ,GAAG,EAAE,EAAE;IACP,KAAK,EAAE,GAAG;IACV,MAAM,EAAE,GAAG;IACX,aAAa,EAAE,GAAG;IAClB,KAAK,EAAE,CAAC;CACA,CAAC;AAMX,MAAM,UAAU,mBAAmB,CAAC,KAAgB,EAAE,UAAuB,EAAE;IAC7E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAA0B,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC;YAAE,SAAS;QACxF,IAAI,IAAI,KAAK,SAAS,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QAClE,IACE,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,WAAW,CAAC;YAC3C,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAEtE,SAAS;QACX,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,cAAc,CAAC,IAAI,KAAK,KAAK,UAAU;YAAE,SAAS;QACtF,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,QAAQ,CAAC,IAAI,KAAK,KAAK,QAAQ;YAAE,SAAS;QAC1E,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,OAAO;YAAE,SAAS;QAChG,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC;YACxF,SAAS;QACX,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,yDAAyD;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,KAAK,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;AAC5E,CAAC"}

package/dist/pages/access.d.ts

@@ -0,0 +1,69 @@
+import type { operations } from '../api-types.js';
+import { type ShellServices, type ReplayResult } from '../auth.js';
+import { type ManagementQuery } from './management.js';
+type Role = operations['listRoles']['responses'][200]['content']['application/json']['items'][number];
+type GrantInput = operations['createGrant']['requestBody']['content']['application/json'];
+type RoleInput = operations['createRole']['requestBody']['content']['application/json'];
+type RoleChanges = operations['updateRole']['requestBody']['content']['application/json'];
+interface Grant {
+    id: string;
+    principalId: string | null;
+    principalName: string | null;
+    kind: string;
+    roleId: string;
+    roleName: string;
+    revision: number;
+    createdAt: string;
+}
+export type AccessQuery = ManagementQuery;
+export declare const parseAccessHash: (hash: string) => AccessQuery;
+export declare const buildAccessHash: (query: AccessQuery) => string;
+interface AccessState {
+    query: AccessQuery;
+    roles: Role[];
+    grants: Grant[];
+    next: string | null;
+    organization: string[];
+    permissions: string[];
+    loading: boolean;
+    listError: boolean;
+    busy: boolean;
+    stale: boolean;
+    notice: string | null;
+}
+export declare function accessViewModel(state: AccessState): {
+    roles: {
+        id: string;
+        isSystem: boolean;
+        key: string;
+        name: string;
+        permissions: string[];
+        protectsLastHolder: boolean;
+        revision: number;
+        scope: "organization" | "project";
+    }[];
+    grants: Grant[];
+    writeRoles: boolean;
+    writeGrants: boolean;
+};
+export declare function createAccessController(services: ShellServices): {
+    snapshot: () => AccessState;
+    subscribe: (listener: () => void) => () => void;
+    load: (query: AccessQuery, notice?: string | null) => Promise<void>;
+    createGrant(body: GrantInput): Promise<void>;
+    changeGrant(id: string, roleId: string): Promise<void>;
+    revoke(id: string): Promise<void>;
+    createRole(body: RoleInput): Promise<void>;
+    updateRole(id: string, body: RoleChanges): Promise<void>;
+    deleteRole(id: string): Promise<void>;
+    replayed(result: ReplayResult): Promise<void>;
+    dispose(): void;
+};
+type AccessController = ReturnType<typeof createAccessController>;
+export declare function AccessView({ state, controller, }: {
+    state: AccessState;
+    controller: AccessController;
+}): import("react").JSX.Element;
+export declare function AccessPage(): import("react").JSX.Element;
+export {};
+//# sourceMappingURL=access.d.ts.map

package/dist/pages/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../src/pages/access.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,EAAe,KAAK,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAWhF,OAAO,EAWL,KAAK,eAAe,EACrB,MAAM,iBAAiB,CAAC;AAEzB,KAAK,IAAI,GACP,UAAU,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5F,KAAK,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,CAAC,kBAAkB,CAAC,CAAC;AAC1F,KAAK,SAAS,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,CAAC,kBAAkB,CAAC,CAAC;AACxF,KAAK,WAAW,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,CAAC,kBAAkB,CAAC,CAAC;AAC1F,UAAU,KAAK;IACb,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,MAAM,MAAM,WAAW,GAAG,eAAe,CAAC;AAE1C,eAAO,MAAM,eAAe,GAAI,MAAM,MAAM,KAAG,WAA+C,CAAC;AAC/F,eAAO,MAAM,eAAe,GAAI,OAAO,WAAW,WACoC,CAAC;AACvF,UAAU,WAAW;IACnB,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAGD,wBAAgB,eAAe,CAAC,KAAK,EAAE,WAAW;;;;;;;;;;;;;;EAkBjD;AACD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,aAAa;;;kBAgBjC,WAAW,WAAU,MAAM,GAAG,IAAI,KAAU,OAAO,CAAC,IAAI,CAAC;sBAoI1D,UAAU;oBAaZ,MAAM,UAAU,MAAM;eAmB3B,MAAM;qBAcA,SAAS;mBAMX,MAAM,QAAQ,WAAW;mBAWzB,MAAM;qBAUJ,YAAY;;EAgBtC;AACD,KAAK,gBAAgB,GAAG,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAElE,wBAAgB,UAAU,CAAC,EACzB,KAAK,EACL,UAAU,GACX,EAAE;IACD,KAAK,EAAE,WAAW,CAAC;IACnB,UAAU,EAAE,gBAAgB,CAAC;CAC9B,+BAgSA;AACD,wBAAgB,UAAU,gCA2BzB"}