@portnet/ui 6.0.2 → 6.0.3

package/dist/v2/utils/apiError.js.map

@@ -1 +1 @@
-{"version":3,"file":"apiError.js","names":["DEFAULT_API_ERROR_MESSAGE","exports","readPath","source","path","current","_iterator","_createForOfIteratorHelper","_step","s","n","done","key","value","_typeof","undefined","Reflect","get","err","e","f","asNonEmptyString","length","TRANSPORT_MESSAGE_PATTERNS","isTransportMessage","some","pattern","test","trim","asUserFacingMessage","text","getApiErrorMessage","error","_ref","_ref2","_ref3","_asNonEmptyString","fallback","arguments","getApiErrorDetail","getApiErrorStatus","bodyStatus","status"],"sources":["../../../src/lib/v2/utils/apiError.ts"],"sourcesContent":["/**\r\n * apiError — narrow an `unknown` rejection into something displayable.\r\n *\r\n * ─────────────────────────────────────────────────────────────────────────────\r\n * WHY THIS BELONGS IN THE LIBRARY (capability gap G-04)\r\n *\r\n * The Platform TypeScript Guidelines mandate `useUnknownInCatchVariables`, so\r\n * `catch (e)` binds `unknown` in EVERY saga of EVERY consuming module. The same\r\n * guidelines forbid `any` and unsafe assertions. Between those two rules sits a\r\n * narrowing helper that the library did not provide — so each module wrote its\r\n * own, and the observed outcome was that they wrote it the forbidden way:\r\n *\r\n *     (error as { response?: { data?: { message?: unknown } } }).response\r\n *\r\n * i.e. an unchecked assertion on an `unknown`, used to work around a flag the\r\n * platform imposes. Two modules audited (`procuration-portnet-fe`,\r\n * `procuration-fe`) had independently reached for exactly that construct.\r\n * A mandated strict-mode flag with no sanctioned escape hatch produces\r\n * unsanctioned ones.\r\n *\r\n * Implementation notes\r\n * --------------------\r\n * `readPath` walks nested objects using the `in` operator, which narrows without\r\n * an assertion, and `Reflect.get`, which returns the value as `unknown` rather\r\n * than widening anything to `any`. No assertion appears anywhere in this file.\r\n *\r\n * Deliberately DUCK-TYPED rather than built on `axios.isAxiosError`. Three\r\n * reasons: this library must not take a hard axios dependency for a string\r\n * helper; a plain object shaped like an axios error (a hand-rolled reject, a\r\n * test double, a non-axios transport) still resolves correctly; and the check\r\n * stays valid across axios majors.\r\n * ─────────────────────────────────────────────────────────────────────────────\r\n *\r\n *   getApiErrorMessage(err)                          → backend message, or the default\r\n *   getApiErrorMessage(err, \"Échec de l'envoi.\")     → custom fallback\r\n *   getApiErrorStatus(err)                           → 404 | undefined\r\n *\r\n * Envelope keys read, in order: `data.body`, `data.message`, `data.error`.\r\n * Three keys because three PORTNET back-ends chose differently; see the\r\n * resolution-order note on `getApiErrorMessage` before adding a fourth.\r\n */\r\n\r\n/**\r\n * Default user-facing fallback. French per Charter §09 (voice, vouvoiement) and\r\n * §09.3 (no raw technical detail — never \"Erreur 422 Unprocessable Entity\").\r\n * Override per call site when a screen can say something more useful.\r\n */\r\nexport const DEFAULT_API_ERROR_MESSAGE =\r\n  \"Une erreur est survenue. Veuillez réessayer.\";\r\n\r\n/**\r\n * Walk `path` through nested non-null objects, returning the value at the end,\r\n * or `undefined` if any hop is missing. Assertion-free.\r\n */\r\nconst readPath = (source: unknown, path: readonly string[]): unknown => {\r\n  let current: unknown = source;\r\n\r\n  for (const key of path) {\r\n    if (typeof current !== \"object\" || current === null || !(key in current)) {\r\n      return undefined;\r\n    }\r\n    current = Reflect.get(current, key);\r\n  }\r\n\r\n  return current;\r\n};\r\n\r\nconst asNonEmptyString = (value: unknown): string | undefined =>\r\n  typeof value === \"string\" && value.length > 0 ? value : undefined;\r\n\r\n/**\r\n * Transport-layer phrasings that must NEVER reach a user — capability gap G-07.\r\n *\r\n * ──────────────────────────────────────────────────────────────────────\r\n * THE DEFECT THIS FIXES\r\n *\r\n * `getApiErrorMessage` resolved `error.message` BEFORE its fallback. An\r\n * `AxiosError` always has `.message`, so on any server error carrying no\r\n * `response.data.message` — a 500 with an empty body, a gateway error, a\r\n * timeout — step 3 won and the user was shown:\r\n *\r\n *     \"Request failed with status code 500\"\r\n *\r\n * English, technical, and precisely the shape Charter §09.3 names as forbidden\r\n * (\"✗ « Erreur 422 — Unprocessable Entity »\"). Worse, it made every consuming\r\n * module's carefully-written French fallback effectively UNREACHABLE — the\r\n * argument was accepted and then almost never used. Found during the\r\n * `procuration-portnet-fe` Area 10 audit, where 12 call sites pass a considered\r\n * fallback that could essentially never render.\r\n *\r\n * WHY A DENY-LIST AND NOT SIMPLY DROPPING STEP 3\r\n *\r\n * Step 3 also carries LEGITIMATE messages: any `throw new Error(\"Ce titre ne\r\n * peut pas être supprimé car il est en cours de validation.\")` in module code\r\n * arrives through exactly the same path. Removing the hop would trade a leak of\r\n * technical strings for the loss of real business messages across the whole\r\n * platform — a worse outcome. So the hop stays and only transport phrasings are\r\n * suppressed.\r\n *\r\n * The list is deliberately CONSERVATIVE: anything not recognised passes through,\r\n * on the assumption a human wrote it. A false negative shows one ugly string; a\r\n * false positive silently replaces a real business message with a generic\r\n * fallback, which is the more damaging error.\r\n *\r\n * Sourced from axios's own message construction (`settle`, `AxiosError` codes\r\n * ECONNABORTED / ETIMEDOUT / ERR_NETWORK / ERR_CANCELED) plus the Node socket\r\n * phrasing that surfaces through SSR and test doubles.\r\n * ──────────────────────────────────────────────────────────────────────\r\n */\r\nconst TRANSPORT_MESSAGE_PATTERNS: readonly RegExp[] = [\r\n  /^request failed with status code \\d+$/i,\r\n  /^network error$/i,\r\n  /^timeout of \\d+ms exceeded$/i,\r\n  /^timeout exceeded$/i,\r\n  /^request aborted$/i,\r\n  /^canceled$/i,\r\n  /^unsupported protocol/i,\r\n  /^maximum content size exceeded$/i,\r\n  /^socket hang up$/i,\r\n  /* ── errno codes and axios error codes ── CASE-SENSITIVE, DELIBERATELY ─────\r\n   *\r\n   * These two are the only patterns here NOT marked `/i`, and the asymmetry is\r\n   * load-bearing. errno constants are uppercase by universal convention\r\n   * (`ETIMEDOUT`, `ECONNREFUSED`, `ENOTFOUND`, `EPIPE`), so an uppercase-only\r\n   * match identifies them precisely. Matching case-insensitively would make\r\n   * `/^e[a-z]+$/i` swallow ordinary French words beginning with \"e\" — \"erreur\",\r\n   * \"expiré\", \"échec\" — turning a real business message into a generic fallback,\r\n   * which is the more damaging failure this list is tuned against.\r\n   *\r\n   * ⚠ An earlier version of the first pattern was `/^ec[a-z]+$/i`, which matched\r\n   * `ECONNREFUSED` (it begins \"EC\") but silently MISSED `ETIMEDOUT` (\"ET\"),\r\n   * despite the comment claiming otherwise. The unit test caught it. Do not\r\n   * narrow the prefix again: the family is \"E + uppercase word\", not \"EC...\".\r\n   *\r\n   * Residual, accepted: an all-caps single word like \"ERREUR\" is treated as an\r\n   * errno code. A module should not be throwing all-caps single-word messages at\r\n   * users, and replacing one with a proper French fallback is an improvement. */\r\n  /^E[A-Z]{3,}$/, // errno: ETIMEDOUT, ECONNREFUSED, ECONNRESET, ENOTFOUND, EPIPE\r\n  /^ERR_[A-Z_]+$/, // axios: ERR_NETWORK, ERR_CANCELED, ERR_BAD_RESPONSE\r\n];\r\n\r\n/** Is this string an axios/transport artefact rather than something for a user? */\r\nconst isTransportMessage = (value: string): boolean =>\r\n  TRANSPORT_MESSAGE_PATTERNS.some((pattern) => pattern.test(value.trim()));\r\n\r\n/**\r\n * `error.message`, but only when it is fit to show a user.\r\n *\r\n * Suppresses transport phrasings (G-07) so the caller's French fallback is\r\n * reached instead. Module-thrown `Error` messages pass through untouched.\r\n */\r\nconst asUserFacingMessage = (value: unknown): string | undefined => {\r\n  const text = asNonEmptyString(value);\r\n  if (text === undefined) return undefined;\r\n  return isTransportMessage(text) ? undefined : text;\r\n};\r\n\r\n/**\r\n * Best available human-readable message for a rejection of unknown shape.\r\n *\r\n * Resolution order, first match wins:\r\n *   1. the rejection itself, when it is a non-empty string;\r\n *   2. `error.response.data.body`    — the SAME envelope's third key;\r\n *   3. `error.response.data.message` — the backend's own message;\r\n *   4. `error.response.data.error`   — the SAME envelope's alternate key;\r\n *   5. `error.message` — **only when it is not a transport artefact** (G-07);\r\n *   6. `fallback`.\r\n *\r\n * Step 4 closes capability gap G-08. Several PORTNET back-ends populate\r\n * `data.error` rather than `data.message` (addpe-fe declares BOTH on its\r\n * `ApiErrorBody` and read both at seven call sites), so a helper that stopped at\r\n * `data.message` skipped a real business message and fell through to the generic\r\n * fallback — which made it non-substitutable for the module-local extractors it\r\n * exists to replace. Strictly additive: what step 4 now catches previously\r\n * reached step 5 or 6.\r\n *\r\n * Step 2 closes G-08bis — the same defect, a third key. `caution-ui`'s axios\r\n * interceptor reads `error.response.data.body ?? error.response.data.message`,\r\n * so on that back-end a helper stopping at `message` again skipped a real\r\n * business message. Without step 2 the helper was non-substitutable there and\r\n * the module would have had to keep its own assertion-based extractor.\r\n *\r\n * WHY STEP 2 SITS BEFORE `message` AND NOT AFTER `error`.\r\n * `caution-ui` uses `??`, which is direct evidence that a single response can\r\n * carry both keys and that `body` is the one that back-end means. Appending\r\n * `body` at the end of the envelope hops would therefore have SILENTLY FLIPPED\r\n * which message its users see. Placing it first preserves that precedence, and\r\n * is provably a no-op for every module that does not populate `body`: `readPath`\r\n * returns `undefined` and resolution falls straight through to `message`.\r\n *\r\n * The one case this perturbs is a back-end that populates BOTH `body` and\r\n * `message` while intending `message` to win. No such module exists in the\r\n * portfolio — addpe-fe's `ApiErrorBody` declares `message` and `error`, not\r\n * `body` — and a module in that position should say so here rather than have the\r\n * order guessed for it.\r\n *\r\n * Step 5 is filtered: `\"Request failed with status code 500\"`, `\"Network Error\"`,\r\n * timeouts and errno codes are SUPPRESSED so the caller's own French copy is\r\n * used instead (Charter §09.3 — no raw technical detail). A message a module\r\n * threw deliberately still passes through. Use `getApiErrorDetail` when you want\r\n * the unfiltered string for a log.\r\n *\r\n * Never throws and never returns an empty string, so it is safe to render\r\n * directly into a toast or a `Banner`.\r\n *\r\n * @param error    The caught value. `unknown` by design.\r\n * @param fallback Message when nothing usable is found.\r\n */\r\nexport function getApiErrorMessage(\r\n  error: unknown,\r\n  fallback: string = DEFAULT_API_ERROR_MESSAGE\r\n): string {\r\n  if (typeof error === \"string\" && error.length > 0) return error;\r\n\r\n  return (\r\n    asNonEmptyString(readPath(error, [\"response\", \"data\", \"body\"])) ??\r\n    asNonEmptyString(readPath(error, [\"response\", \"data\", \"message\"])) ??\r\n    asNonEmptyString(readPath(error, [\"response\", \"data\", \"error\"])) ??\r\n    asUserFacingMessage(readPath(error, [\"message\"])) ??\r\n    fallback\r\n  );\r\n}\r\n\r\n/**\r\n * Unfiltered technical detail for LOGGING — never for display.\r\n *\r\n * `getApiErrorMessage` deliberately suppresses transport phrasings (G-07), which\r\n * is right for a toast and wrong for a console or an APM breadcrumb, where\r\n * `\"Request failed with status code 502\"` is exactly what an operator needs. This\r\n * is the escape hatch: it returns the raw `error.message` when there is one,\r\n * whatever its shape.\r\n *\r\n * Pair them:\r\n *\r\n *     toast(getApiErrorMessage(err, \"Échec de l'envoi.\"), \"error\");\r\n *     console.error(\"[submit]\", getApiErrorStatus(err), getApiErrorDetail(err));\r\n */\r\nexport function getApiErrorDetail(error: unknown): string | undefined {\r\n  if (typeof error === \"string\" && error.length > 0) return error;\r\n  return asNonEmptyString(readPath(error, [\"message\"]));\r\n}\r\n\r\n/**\r\n * HTTP status carried by a rejection, when there is one.\r\n *\r\n * Resolution order, first numeric match wins:\r\n *   1. `error.response.data.status` — a BODY-level status;\r\n *   2. `error.response.status`       — the transport status.\r\n *\r\n * Returns `undefined` for a network drop, a timeout, or any non-HTTP rejection —\r\n * which is the signal callers use to distinguish \"the server answered with an\r\n * error\" from \"there was no answer at all\" (Charter R-4.3: a status-less failure\r\n * is a network banner, not a toast).\r\n *\r\n * Step 1 closes G-08ter, the status-side counterpart of the envelope-key gaps\r\n * G-08 / G-08bis. Several PORTNET back-ends put the meaningful status in the\r\n * BODY: caution-ui's axios interceptor reads\r\n * `error.response.data.status ?? error.response.status` and routes on the\r\n * result (404 -> not-found page, 500 -> server-error page, 401 -> re-login), and\r\n * its RESPONSE interceptor does the same for success handling. A helper reading\r\n * only the transport status was therefore not substitutable there — the module\r\n * had to keep a hand-written `HttpErrorLike` interface and assert onto it, which\r\n * is exactly the anti-pattern G-04 exists to end. Closing the message side\r\n * (G-08bis) without the status side would have left that assertion in place for\r\n * the sake of one field.\r\n *\r\n * Body-first ordering mirrors the module's own `??` and is provably a no-op for\r\n * every back-end that does not populate `data.status`: `readPath` returns\r\n * `undefined` and resolution falls through to the transport status.\r\n *\r\n * BOTH hops are numeric-guarded, which is a deliberate tightening over the\r\n * module code being replaced. That code did `String(status)` on whatever it\r\n * found, so a body carrying `status: \"ERROR\"` produced a `String` switch miss\r\n * and fell to the default toast branch; here a non-numeric `data.status` is\r\n * ignored and the real transport status is used instead. That is the more useful\r\n * answer, and it keeps the return type honest — the signature promises a number.\r\n */\r\nexport function getApiErrorStatus(error: unknown): number | undefined {\r\n  const bodyStatus = readPath(error, [\"response\", \"data\", \"status\"]);\r\n  if (typeof bodyStatus === \"number\") return bodyStatus;\r\n\r\n  const status = readPath(error, [\"response\", \"status\"]);\r\n  return typeof status === \"number\" ? status : undefined;\r\n}\r\n"],"mappings":";;;;;;;;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACO,IAAMA,yBAAyB,GAAAC,OAAA,CAAAD,yBAAA,GACpC,8CAA8C;;AAEhD;AACA;AACA;AACA;AACA,IAAME,QAAQ,GAAG,SAAXA,QAAQA,CAAIC,MAAe,EAAEC,IAAuB,EAAc;EACtE,IAAIC,OAAgB,GAAGF,MAAM;EAAC,IAAAG,SAAA,GAAAC,0BAAA,CAEZH,IAAI;IAAAI,KAAA;EAAA;IAAtB,KAAAF,SAAA,CAAAG,CAAA,MAAAD,KAAA,GAAAF,SAAA,CAAAI,CAAA,IAAAC,IAAA,GAAwB;MAAA,IAAbC,GAAG,GAAAJ,KAAA,CAAAK,KAAA;MACZ,IAAIC,OAAA,CAAOT,OAAO,MAAK,QAAQ,IAAIA,OAAO,KAAK,IAAI,IAAI,EAAEO,GAAG,IAAIP,OAAO,CAAC,EAAE;QACxE,OAAOU,SAAS;MAClB;MACAV,OAAO,GAAGW,OAAO,CAACC,GAAG,CAACZ,OAAO,EAAEO,GAAG,CAAC;IACrC;EAAC,SAAAM,GAAA;IAAAZ,SAAA,CAAAa,CAAA,CAAAD,GAAA;EAAA;IAAAZ,SAAA,CAAAc,CAAA;EAAA;EAED,OAAOf,OAAO;AAChB,CAAC;AAED,IAAMgB,gBAAgB,GAAG,SAAnBA,gBAAgBA,CAAIR,KAAc;EAAA,OACtC,OAAOA,KAAK,KAAK,QAAQ,IAAIA,KAAK,CAACS,MAAM,GAAG,CAAC,GAAGT,KAAK,GAAGE,SAAS;AAAA;;AAEnE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAMQ,0BAA6C,GAAG,CACpD,wCAAwC,EACxC,kBAAkB,EAClB,8BAA8B,EAC9B,qBAAqB,EACrB,oBAAoB,EACpB,aAAa,EACb,wBAAwB,EACxB,kCAAkC,EAClC,mBAAmB;AACnB;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACE,cAAc;AAAE;AAChB,eAAe,CAAE;AAAA,CAClB;;AAED;AACA,IAAMC,kBAAkB,GAAG,SAArBA,kBAAkBA,CAAIX,KAAa;EAAA,OACvCU,0BAA0B,CAACE,IAAI,CAAC,UAACC,OAAO;IAAA,OAAKA,OAAO,CAACC,IAAI,CAACd,KAAK,CAACe,IAAI,CAAC,CAAC,CAAC;EAAA,EAAC;AAAA;;AAE1E;AACA;AACA;AACA;AACA;AACA;AACA,IAAMC,mBAAmB,GAAG,SAAtBA,mBAAmBA,CAAIhB,KAAc,EAAyB;EAClE,IAAMiB,IAAI,GAAGT,gBAAgB,CAACR,KAAK,CAAC;EACpC,IAAIiB,IAAI,KAAKf,SAAS,EAAE,OAAOA,SAAS;EACxC,OAAOS,kBAAkB,CAACM,IAAI,CAAC,GAAGf,SAAS,GAAGe,IAAI;AACpD,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,kBAAkBA,CAChCC,KAAc,EAEN;EAAA,IAAAC,IAAA,EAAAC,KAAA,EAAAC,KAAA,EAAAC,iBAAA;EAAA,IADRC,QAAgB,GAAAC,SAAA,CAAAhB,MAAA,QAAAgB,SAAA,QAAAvB,SAAA,GAAAuB,SAAA,MAAGtC,yBAAyB;EAE5C,IAAI,OAAOgC,KAAK,KAAK,QAAQ,IAAIA,KAAK,CAACV,MAAM,GAAG,CAAC,EAAE,OAAOU,KAAK;EAE/D,QAAAC,IAAA,IAAAC,KAAA,IAAAC,KAAA,IAAAC,iBAAA,GACEf,gBAAgB,CAACnB,QAAQ,CAAC8B,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,cAAAI,iBAAA,cAAAA,iBAAA,GAC/Df,gBAAgB,CAACnB,QAAQ,CAAC8B,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,cAAAG,KAAA,cAAAA,KAAA,GAClEd,gBAAgB,CAACnB,QAAQ,CAAC8B,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,cAAAE,KAAA,cAAAA,KAAA,GAChEL,mBAAmB,CAAC3B,QAAQ,CAAC8B,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,cAAAC,IAAA,cAAAA,IAAA,GACjDI,QAAQ;AAEZ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASE,iBAAiBA,CAACP,KAAc,EAAsB;EACpE,IAAI,OAAOA,KAAK,KAAK,QAAQ,IAAIA,KAAK,CAACV,MAAM,GAAG,CAAC,EAAE,OAAOU,KAAK;EAC/D,OAAOX,gBAAgB,CAACnB,QAAQ,CAAC8B,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;AACvD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASQ,iBAAiBA,CAACR,KAAc,EAAsB;EACpE,IAAMS,UAAU,GAAGvC,QAAQ,CAAC8B,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;EAClE,IAAI,OAAOS,UAAU,KAAK,QAAQ,EAAE,OAAOA,UAAU;EAErD,IAAMC,MAAM,GAAGxC,QAAQ,CAAC8B,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;EACtD,OAAO,OAAOU,MAAM,KAAK,QAAQ,GAAGA,MAAM,GAAG3B,SAAS;AACxD","ignoreList":[]}
+{"version":3,"file":"apiError.js","names":["DEFAULT_API_ERROR_MESSAGE","exports","readPath","source","path","current","key","undefined","Reflect","get","asNonEmptyString","value","length","TRANSPORT_MESSAGE_PATTERNS","isTransportMessage","some","pattern","test","trim","asUserFacingMessage","text","getApiErrorMessage","error","fallback","getApiErrorDetail","getApiErrorStatus","bodyStatus","status"],"sources":["../../../src/lib/v2/utils/apiError.ts"],"sourcesContent":["/**\r\n * apiError — narrow an `unknown` rejection into something displayable.\r\n *\r\n * ─────────────────────────────────────────────────────────────────────────────\r\n * WHY THIS BELONGS IN THE LIBRARY (capability gap G-04)\r\n *\r\n * The Platform TypeScript Guidelines mandate `useUnknownInCatchVariables`, so\r\n * `catch (e)` binds `unknown` in EVERY saga of EVERY consuming module. The same\r\n * guidelines forbid `any` and unsafe assertions. Between those two rules sits a\r\n * narrowing helper that the library did not provide — so each module wrote its\r\n * own, and the observed outcome was that they wrote it the forbidden way:\r\n *\r\n *     (error as { response?: { data?: { message?: unknown } } }).response\r\n *\r\n * i.e. an unchecked assertion on an `unknown`, used to work around a flag the\r\n * platform imposes. Two modules audited (`procuration-portnet-fe`,\r\n * `procuration-fe`) had independently reached for exactly that construct.\r\n * A mandated strict-mode flag with no sanctioned escape hatch produces\r\n * unsanctioned ones.\r\n *\r\n * Implementation notes\r\n * --------------------\r\n * `readPath` walks nested objects using the `in` operator, which narrows without\r\n * an assertion, and `Reflect.get`, which returns the value as `unknown` rather\r\n * than widening anything to `any`. No assertion appears anywhere in this file.\r\n *\r\n * Deliberately DUCK-TYPED rather than built on `axios.isAxiosError`. Three\r\n * reasons: this library must not take a hard axios dependency for a string\r\n * helper; a plain object shaped like an axios error (a hand-rolled reject, a\r\n * test double, a non-axios transport) still resolves correctly; and the check\r\n * stays valid across axios majors.\r\n * ─────────────────────────────────────────────────────────────────────────────\r\n *\r\n *   getApiErrorMessage(err)                          → backend message, or the default\r\n *   getApiErrorMessage(err, \"Échec de l'envoi.\")     → custom fallback\r\n *   getApiErrorStatus(err)                           → 404 | undefined\r\n *\r\n * Envelope keys read, in order: `data.body`, `data.message`, `data.error`.\r\n * Three keys because three PORTNET back-ends chose differently; see the\r\n * resolution-order note on `getApiErrorMessage` before adding a fourth.\r\n */\r\n\r\n/**\r\n * Default user-facing fallback. French per Charter §09 (voice, vouvoiement) and\r\n * §09.3 (no raw technical detail — never \"Erreur 422 Unprocessable Entity\").\r\n * Override per call site when a screen can say something more useful.\r\n */\r\nexport const DEFAULT_API_ERROR_MESSAGE =\r\n  \"Une erreur est survenue. Veuillez réessayer.\";\r\n\r\n/**\r\n * Walk `path` through nested non-null objects, returning the value at the end,\r\n * or `undefined` if any hop is missing. Assertion-free.\r\n */\r\nconst readPath = (source: unknown, path: readonly string[]): unknown => {\r\n  let current: unknown = source;\r\n\r\n  for (const key of path) {\r\n    if (typeof current !== \"object\" || current === null || !(key in current)) {\r\n      return undefined;\r\n    }\r\n    current = Reflect.get(current, key);\r\n  }\r\n\r\n  return current;\r\n};\r\n\r\nconst asNonEmptyString = (value: unknown): string | undefined =>\r\n  typeof value === \"string\" && value.length > 0 ? value : undefined;\r\n\r\n/**\r\n * Transport-layer phrasings that must NEVER reach a user — capability gap G-07.\r\n *\r\n * ──────────────────────────────────────────────────────────────────────\r\n * THE DEFECT THIS FIXES\r\n *\r\n * `getApiErrorMessage` resolved `error.message` BEFORE its fallback. An\r\n * `AxiosError` always has `.message`, so on any server error carrying no\r\n * `response.data.message` — a 500 with an empty body, a gateway error, a\r\n * timeout — step 3 won and the user was shown:\r\n *\r\n *     \"Request failed with status code 500\"\r\n *\r\n * English, technical, and precisely the shape Charter §09.3 names as forbidden\r\n * (\"✗ « Erreur 422 — Unprocessable Entity »\"). Worse, it made every consuming\r\n * module's carefully-written French fallback effectively UNREACHABLE — the\r\n * argument was accepted and then almost never used. Found during the\r\n * `procuration-portnet-fe` Area 10 audit, where 12 call sites pass a considered\r\n * fallback that could essentially never render.\r\n *\r\n * WHY A DENY-LIST AND NOT SIMPLY DROPPING STEP 3\r\n *\r\n * Step 3 also carries LEGITIMATE messages: any `throw new Error(\"Ce titre ne\r\n * peut pas être supprimé car il est en cours de validation.\")` in module code\r\n * arrives through exactly the same path. Removing the hop would trade a leak of\r\n * technical strings for the loss of real business messages across the whole\r\n * platform — a worse outcome. So the hop stays and only transport phrasings are\r\n * suppressed.\r\n *\r\n * The list is deliberately CONSERVATIVE: anything not recognised passes through,\r\n * on the assumption a human wrote it. A false negative shows one ugly string; a\r\n * false positive silently replaces a real business message with a generic\r\n * fallback, which is the more damaging error.\r\n *\r\n * Sourced from axios's own message construction (`settle`, `AxiosError` codes\r\n * ECONNABORTED / ETIMEDOUT / ERR_NETWORK / ERR_CANCELED) plus the Node socket\r\n * phrasing that surfaces through SSR and test doubles.\r\n * ──────────────────────────────────────────────────────────────────────\r\n */\r\nconst TRANSPORT_MESSAGE_PATTERNS: readonly RegExp[] = [\r\n  /^request failed with status code \\d+$/i,\r\n  /^network error$/i,\r\n  /^timeout of \\d+ms exceeded$/i,\r\n  /^timeout exceeded$/i,\r\n  /^request aborted$/i,\r\n  /^canceled$/i,\r\n  /^unsupported protocol/i,\r\n  /^maximum content size exceeded$/i,\r\n  /^socket hang up$/i,\r\n  /* ── errno codes and axios error codes ── CASE-SENSITIVE, DELIBERATELY ─────\r\n   *\r\n   * These two are the only patterns here NOT marked `/i`, and the asymmetry is\r\n   * load-bearing. errno constants are uppercase by universal convention\r\n   * (`ETIMEDOUT`, `ECONNREFUSED`, `ENOTFOUND`, `EPIPE`), so an uppercase-only\r\n   * match identifies them precisely. Matching case-insensitively would make\r\n   * `/^e[a-z]+$/i` swallow ordinary French words beginning with \"e\" — \"erreur\",\r\n   * \"expiré\", \"échec\" — turning a real business message into a generic fallback,\r\n   * which is the more damaging failure this list is tuned against.\r\n   *\r\n   * ⚠ An earlier version of the first pattern was `/^ec[a-z]+$/i`, which matched\r\n   * `ECONNREFUSED` (it begins \"EC\") but silently MISSED `ETIMEDOUT` (\"ET\"),\r\n   * despite the comment claiming otherwise. The unit test caught it. Do not\r\n   * narrow the prefix again: the family is \"E + uppercase word\", not \"EC...\".\r\n   *\r\n   * Residual, accepted: an all-caps single word like \"ERREUR\" is treated as an\r\n   * errno code. A module should not be throwing all-caps single-word messages at\r\n   * users, and replacing one with a proper French fallback is an improvement. */\r\n  /^E[A-Z]{3,}$/, // errno: ETIMEDOUT, ECONNREFUSED, ECONNRESET, ENOTFOUND, EPIPE\r\n  /^ERR_[A-Z_]+$/, // axios: ERR_NETWORK, ERR_CANCELED, ERR_BAD_RESPONSE\r\n];\r\n\r\n/** Is this string an axios/transport artefact rather than something for a user? */\r\nconst isTransportMessage = (value: string): boolean =>\r\n  TRANSPORT_MESSAGE_PATTERNS.some((pattern) => pattern.test(value.trim()));\r\n\r\n/**\r\n * `error.message`, but only when it is fit to show a user.\r\n *\r\n * Suppresses transport phrasings (G-07) so the caller's French fallback is\r\n * reached instead. Module-thrown `Error` messages pass through untouched.\r\n */\r\nconst asUserFacingMessage = (value: unknown): string | undefined => {\r\n  const text = asNonEmptyString(value);\r\n  if (text === undefined) return undefined;\r\n  return isTransportMessage(text) ? undefined : text;\r\n};\r\n\r\n/**\r\n * Best available human-readable message for a rejection of unknown shape.\r\n *\r\n * Resolution order, first match wins:\r\n *   1. the rejection itself, when it is a non-empty string;\r\n *   2. `error.response.data.body`    — the SAME envelope's third key;\r\n *   3. `error.response.data.message` — the backend's own message;\r\n *   4. `error.response.data.error`   — the SAME envelope's alternate key;\r\n *   5. `error.message` — **only when it is not a transport artefact** (G-07);\r\n *   6. `fallback`.\r\n *\r\n * Step 4 closes capability gap G-08. Several PORTNET back-ends populate\r\n * `data.error` rather than `data.message` (addpe-fe declares BOTH on its\r\n * `ApiErrorBody` and read both at seven call sites), so a helper that stopped at\r\n * `data.message` skipped a real business message and fell through to the generic\r\n * fallback — which made it non-substitutable for the module-local extractors it\r\n * exists to replace. Strictly additive: what step 4 now catches previously\r\n * reached step 5 or 6.\r\n *\r\n * Step 2 closes G-08bis — the same defect, a third key. `caution-ui`'s axios\r\n * interceptor reads `error.response.data.body ?? error.response.data.message`,\r\n * so on that back-end a helper stopping at `message` again skipped a real\r\n * business message. Without step 2 the helper was non-substitutable there and\r\n * the module would have had to keep its own assertion-based extractor.\r\n *\r\n * WHY STEP 2 SITS BEFORE `message` AND NOT AFTER `error`.\r\n * `caution-ui` uses `??`, which is direct evidence that a single response can\r\n * carry both keys and that `body` is the one that back-end means. Appending\r\n * `body` at the end of the envelope hops would therefore have SILENTLY FLIPPED\r\n * which message its users see. Placing it first preserves that precedence, and\r\n * is provably a no-op for every module that does not populate `body`: `readPath`\r\n * returns `undefined` and resolution falls straight through to `message`.\r\n *\r\n * The one case this perturbs is a back-end that populates BOTH `body` and\r\n * `message` while intending `message` to win. No such module exists in the\r\n * portfolio — addpe-fe's `ApiErrorBody` declares `message` and `error`, not\r\n * `body` — and a module in that position should say so here rather than have the\r\n * order guessed for it.\r\n *\r\n * Step 5 is filtered: `\"Request failed with status code 500\"`, `\"Network Error\"`,\r\n * timeouts and errno codes are SUPPRESSED so the caller's own French copy is\r\n * used instead (Charter §09.3 — no raw technical detail). A message a module\r\n * threw deliberately still passes through. Use `getApiErrorDetail` when you want\r\n * the unfiltered string for a log.\r\n *\r\n * Never throws and never returns an empty string, so it is safe to render\r\n * directly into a toast or a `Banner`.\r\n *\r\n * @param error    The caught value. `unknown` by design.\r\n * @param fallback Message when nothing usable is found.\r\n */\r\nexport function getApiErrorMessage(\r\n  error: unknown,\r\n  fallback: string = DEFAULT_API_ERROR_MESSAGE\r\n): string {\r\n  if (typeof error === \"string\" && error.length > 0) return error;\r\n\r\n  return (\r\n    asNonEmptyString(readPath(error, [\"response\", \"data\", \"body\"])) ??\r\n    asNonEmptyString(readPath(error, [\"response\", \"data\", \"message\"])) ??\r\n    asNonEmptyString(readPath(error, [\"response\", \"data\", \"error\"])) ??\r\n    asUserFacingMessage(readPath(error, [\"message\"])) ??\r\n    fallback\r\n  );\r\n}\r\n\r\n/**\r\n * Unfiltered technical detail for LOGGING — never for display.\r\n *\r\n * `getApiErrorMessage` deliberately suppresses transport phrasings (G-07), which\r\n * is right for a toast and wrong for a console or an APM breadcrumb, where\r\n * `\"Request failed with status code 502\"` is exactly what an operator needs. This\r\n * is the escape hatch: it returns the raw `error.message` when there is one,\r\n * whatever its shape.\r\n *\r\n * Pair them:\r\n *\r\n *     toast(getApiErrorMessage(err, \"Échec de l'envoi.\"), \"error\");\r\n *     console.error(\"[submit]\", getApiErrorStatus(err), getApiErrorDetail(err));\r\n */\r\nexport function getApiErrorDetail(error: unknown): string | undefined {\r\n  if (typeof error === \"string\" && error.length > 0) return error;\r\n  return asNonEmptyString(readPath(error, [\"message\"]));\r\n}\r\n\r\n/**\r\n * HTTP status carried by a rejection, when there is one.\r\n *\r\n * Resolution order, first numeric match wins:\r\n *   1. `error.response.data.status` — a BODY-level status;\r\n *   2. `error.response.status`       — the transport status.\r\n *\r\n * Returns `undefined` for a network drop, a timeout, or any non-HTTP rejection —\r\n * which is the signal callers use to distinguish \"the server answered with an\r\n * error\" from \"there was no answer at all\" (Charter R-4.3: a status-less failure\r\n * is a network banner, not a toast).\r\n *\r\n * Step 1 closes G-08ter, the status-side counterpart of the envelope-key gaps\r\n * G-08 / G-08bis. Several PORTNET back-ends put the meaningful status in the\r\n * BODY: caution-ui's axios interceptor reads\r\n * `error.response.data.status ?? error.response.status` and routes on the\r\n * result (404 -> not-found page, 500 -> server-error page, 401 -> re-login), and\r\n * its RESPONSE interceptor does the same for success handling. A helper reading\r\n * only the transport status was therefore not substitutable there — the module\r\n * had to keep a hand-written `HttpErrorLike` interface and assert onto it, which\r\n * is exactly the anti-pattern G-04 exists to end. Closing the message side\r\n * (G-08bis) without the status side would have left that assertion in place for\r\n * the sake of one field.\r\n *\r\n * Body-first ordering mirrors the module's own `??` and is provably a no-op for\r\n * every back-end that does not populate `data.status`: `readPath` returns\r\n * `undefined` and resolution falls through to the transport status.\r\n *\r\n * BOTH hops are numeric-guarded, which is a deliberate tightening over the\r\n * module code being replaced. That code did `String(status)` on whatever it\r\n * found, so a body carrying `status: \"ERROR\"` produced a `String` switch miss\r\n * and fell to the default toast branch; here a non-numeric `data.status` is\r\n * ignored and the real transport status is used instead. That is the more useful\r\n * answer, and it keeps the return type honest — the signature promises a number.\r\n */\r\nexport function getApiErrorStatus(error: unknown): number | undefined {\r\n  const bodyStatus = readPath(error, [\"response\", \"data\", \"status\"]);\r\n  if (typeof bodyStatus === \"number\") return bodyStatus;\r\n\r\n  const status = readPath(error, [\"response\", \"status\"]);\r\n  return typeof status === \"number\" ? status : undefined;\r\n}\r\n"],"mappings":";;;;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACO,MAAMA,yBAAyB,GAAAC,OAAA,CAAAD,yBAAA,GACpC,8CAA8C;;AAEhD;AACA;AACA;AACA;AACA,MAAME,QAAQ,GAAGA,CAACC,MAAe,EAAEC,IAAuB,KAAc;EACtE,IAAIC,OAAgB,GAAGF,MAAM;EAE7B,KAAK,MAAMG,GAAG,IAAIF,IAAI,EAAE;IACtB,IAAI,OAAOC,OAAO,KAAK,QAAQ,IAAIA,OAAO,KAAK,IAAI,IAAI,EAAEC,GAAG,IAAID,OAAO,CAAC,EAAE;MACxE,OAAOE,SAAS;IAClB;IACAF,OAAO,GAAGG,OAAO,CAACC,GAAG,CAACJ,OAAO,EAAEC,GAAG,CAAC;EACrC;EAEA,OAAOD,OAAO;AAChB,CAAC;AAED,MAAMK,gBAAgB,GAAIC,KAAc,IACtC,OAAOA,KAAK,KAAK,QAAQ,IAAIA,KAAK,CAACC,MAAM,GAAG,CAAC,GAAGD,KAAK,GAAGJ,SAAS;;AAEnE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMM,0BAA6C,GAAG,CACpD,wCAAwC,EACxC,kBAAkB,EAClB,8BAA8B,EAC9B,qBAAqB,EACrB,oBAAoB,EACpB,aAAa,EACb,wBAAwB,EACxB,kCAAkC,EAClC,mBAAmB;AACnB;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACE,cAAc;AAAE;AAChB,eAAe,CAAE;AAAA,CAClB;;AAED;AACA,MAAMC,kBAAkB,GAAIH,KAAa,IACvCE,0BAA0B,CAACE,IAAI,CAAEC,OAAO,IAAKA,OAAO,CAACC,IAAI,CAACN,KAAK,CAACO,IAAI,CAAC,CAAC,CAAC,CAAC;;AAE1E;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,mBAAmB,GAAIR,KAAc,IAAyB;EAClE,MAAMS,IAAI,GAAGV,gBAAgB,CAACC,KAAK,CAAC;EACpC,IAAIS,IAAI,KAAKb,SAAS,EAAE,OAAOA,SAAS;EACxC,OAAOO,kBAAkB,CAACM,IAAI,CAAC,GAAGb,SAAS,GAAGa,IAAI;AACpD,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,kBAAkBA,CAChCC,KAAc,EACdC,QAAgB,GAAGvB,yBAAyB,EACpC;EACR,IAAI,OAAOsB,KAAK,KAAK,QAAQ,IAAIA,KAAK,CAACV,MAAM,GAAG,CAAC,EAAE,OAAOU,KAAK;EAE/D,OACEZ,gBAAgB,CAACR,QAAQ,CAACoB,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAC/DZ,gBAAgB,CAACR,QAAQ,CAACoB,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,IAClEZ,gBAAgB,CAACR,QAAQ,CAACoB,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAChEH,mBAAmB,CAACjB,QAAQ,CAACoB,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IACjDC,QAAQ;AAEZ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,iBAAiBA,CAACF,KAAc,EAAsB;EACpE,IAAI,OAAOA,KAAK,KAAK,QAAQ,IAAIA,KAAK,CAACV,MAAM,GAAG,CAAC,EAAE,OAAOU,KAAK;EAC/D,OAAOZ,gBAAgB,CAACR,QAAQ,CAACoB,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;AACvD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASG,iBAAiBA,CAACH,KAAc,EAAsB;EACpE,MAAMI,UAAU,GAAGxB,QAAQ,CAACoB,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;EAClE,IAAI,OAAOI,UAAU,KAAK,QAAQ,EAAE,OAAOA,UAAU;EAErD,MAAMC,MAAM,GAAGzB,QAAQ,CAACoB,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;EACtD,OAAO,OAAOK,MAAM,KAAK,QAAQ,GAAGA,MAAM,GAAGpB,SAAS;AACxD","ignoreList":[]}

package/dist/v2/utils/contrast.js

@@ -8,7 +8,6 @@ exports.contrastRatio = contrastRatio;
 exports.parseColor = parseColor;
 exports.passesContrast = passesContrast;
 exports.relativeLuminance = relativeLuminance;
-function _typeof(obj) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (obj) { return typeof obj; } : function (obj) { return obj && "function" == typeof Symbol && obj.constructor === Symbol && obj !== Symbol.prototype ? "symbol" : typeof obj; }, _typeof(obj); }
 /**
  * WCAG 2.1 contrast utilities — Portnet UI v2
  *
@@ -27,13 +26,13 @@ function _typeof(obj) { "@babel/helpers - typeof"; return _typeof = "function" =
 /* ── WCAG AA thresholds (exported for caller readability) ──────── */
 
 /** Normal text contrast ratio threshold (AA). */
-var WCAG_AA_NORMAL = exports.WCAG_AA_NORMAL = 4.5;
+const WCAG_AA_NORMAL = exports.WCAG_AA_NORMAL = 4.5;
 
 /** Large text (≥ 18pt or ≥ 14pt bold) contrast ratio threshold (AA). */
-var WCAG_AA_LARGE = exports.WCAG_AA_LARGE = 3.0;
+const WCAG_AA_LARGE = exports.WCAG_AA_LARGE = 3.0;
 
 /** UI components & graphical objects contrast ratio threshold (AA 1.4.11). */
-var WCAG_AA_UI_NON_TEXT = exports.WCAG_AA_UI_NON_TEXT = 3.0;
+const WCAG_AA_UI_NON_TEXT = exports.WCAG_AA_UI_NON_TEXT = 3.0;
 
 /* ── Color parsing ───────────────────────── */
 
@@ -55,11 +54,11 @@ var WCAG_AA_UI_NON_TEXT = exports.WCAG_AA_UI_NON_TEXT = 3.0;
  */
 function parseColor(input) {
   if (typeof input !== "string") return null;
-  var s = input.trim();
+  const s = input.trim();
 
   // Hex (3, 6, or 8 digits; alpha dropped if present)
-  var hexMatch = s.match(/^#([0-9a-fA-F]{3}|[0-9a-fA-F]{6}|[0-9a-fA-F]{8})$/);
-  var hex = hexMatch === null || hexMatch === void 0 ? void 0 : hexMatch[1];
+  const hexMatch = s.match(/^#([0-9a-fA-F]{3}|[0-9a-fA-F]{6}|[0-9a-fA-F]{8})$/);
+  const hex = hexMatch?.[1];
   if (hex) {
     if (hex.length === 3) {
       return {
@@ -77,17 +76,16 @@ function parseColor(input) {
   }
 
   // rgb() / rgba() — alpha dropped
-  var rgbMatch = s.match(/^rgba?\(\s*(\d{1,3})\s*,\s*(\d{1,3})\s*,\s*(\d{1,3})/);
+  const rgbMatch = s.match(/^rgba?\(\s*(\d{1,3})\s*,\s*(\d{1,3})\s*,\s*(\d{1,3})/);
   if (rgbMatch) {
-    var _rgbMatch$, _rgbMatch$2, _rgbMatch$3;
-    var r = parseInt((_rgbMatch$ = rgbMatch[1]) !== null && _rgbMatch$ !== void 0 ? _rgbMatch$ : "", 10);
-    var g = parseInt((_rgbMatch$2 = rgbMatch[2]) !== null && _rgbMatch$2 !== void 0 ? _rgbMatch$2 : "", 10);
-    var b = parseInt((_rgbMatch$3 = rgbMatch[3]) !== null && _rgbMatch$3 !== void 0 ? _rgbMatch$3 : "", 10);
+    const r = parseInt(rgbMatch[1] ?? "", 10);
+    const g = parseInt(rgbMatch[2] ?? "", 10);
+    const b = parseInt(rgbMatch[3] ?? "", 10);
     if (Number.isFinite(r) && r >= 0 && r <= 255 && Number.isFinite(g) && g >= 0 && g <= 255 && Number.isFinite(b) && b >= 0 && b <= 255) {
       return {
-        r: r,
-        g: g,
-        b: b
+        r,
+        g,
+        b
       };
     }
   }
@@ -98,7 +96,7 @@ function parseColor(input) {
 
 /** sRGB channel → linear-light conversion per WCAG 2.1. */
 function srgbChannelToLinear(c) {
-  var cs = c / 255;
+  const cs = c / 255;
   return cs <= 0.03928 ? cs / 12.92 : Math.pow((cs + 0.055) / 1.055, 2.4);
 }
 
@@ -108,14 +106,16 @@ function srgbChannelToLinear(c) {
  * Returns a number in 0..1, or null if input is invalid.
  */
 function relativeLuminance(rgb) {
-  if (!rgb || _typeof(rgb) !== "object") return null;
-  var r = rgb.r,
-    g = rgb.g,
-    b = rgb.b;
+  if (!rgb || typeof rgb !== "object") return null;
+  const {
+    r,
+    g,
+    b
+  } = rgb;
   if (!Number.isFinite(r) || !Number.isFinite(g) || !Number.isFinite(b)) return null;
-  var R = srgbChannelToLinear(r);
-  var G = srgbChannelToLinear(g);
-  var B = srgbChannelToLinear(b);
+  const R = srgbChannelToLinear(r);
+  const G = srgbChannelToLinear(g);
+  const B = srgbChannelToLinear(b);
   return 0.2126 * R + 0.7152 * G + 0.0722 * B;
 }
 
@@ -127,13 +127,13 @@ function relativeLuminance(rgb) {
  * [1.0, 21.0], or null if either input is unparseable.
  */
 function contrastRatio(c1, c2) {
-  var rgb1 = typeof c1 === "string" ? parseColor(c1) : c1;
-  var rgb2 = typeof c2 === "string" ? parseColor(c2) : c2;
-  var L1 = relativeLuminance(rgb1);
-  var L2 = relativeLuminance(rgb2);
+  const rgb1 = typeof c1 === "string" ? parseColor(c1) : c1;
+  const rgb2 = typeof c2 === "string" ? parseColor(c2) : c2;
+  const L1 = relativeLuminance(rgb1);
+  const L2 = relativeLuminance(rgb2);
   if (L1 == null || L2 == null) return null;
-  var lighter = Math.max(L1, L2);
-  var darker = Math.min(L1, L2);
+  const lighter = Math.max(L1, L2);
+  const darker = Math.min(L1, L2);
   return (lighter + 0.05) / (darker + 0.05);
 }
 
@@ -146,10 +146,9 @@ function contrastRatio(c1, c2) {
  * `level` accepts "normal" | "large" | "ui". Unknown levels default
  * to the strictest threshold.
  */
-function passesContrast(ratio) {
-  var level = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : "normal";
+function passesContrast(ratio, level = "normal") {
   if (ratio == null || !Number.isFinite(ratio)) return false;
-  var threshold;
+  let threshold;
   switch (level) {
     case "large":
       threshold = WCAG_AA_LARGE;

package/dist/v2/utils/contrast.js.map

@@ -1 +1 @@
-{"version":3,"file":"contrast.js","names":["WCAG_AA_NORMAL","exports","WCAG_AA_LARGE","WCAG_AA_UI_NON_TEXT","parseColor","input","s","trim","hexMatch","match","hex","length","r","parseInt","charAt","g","b","slice","rgbMatch","_rgbMatch$","_rgbMatch$2","_rgbMatch$3","Number","isFinite","srgbChannelToLinear","c","cs","Math","pow","relativeLuminance","rgb","_typeof","R","G","B","contrastRatio","c1","c2","rgb1","rgb2","L1","L2","lighter","max","darker","min","passesContrast","ratio","level","arguments","undefined","threshold"],"sources":["../../../src/lib/v2/utils/contrast.ts"],"sourcesContent":["/**\r\n * WCAG 2.1 contrast utilities — Portnet UI v2\r\n *\r\n * Reference: https://www.w3.org/TR/WCAG21/#dfn-contrast-ratio\r\n *\r\n * Pure functions, framework-agnostic, no deps. Reusable by any\r\n * host module that needs to validate a runtime brand override\r\n * against WCAG 1.4.3 AA (typical scenario: a host-shell event\r\n * injects a tenant brand and the consumer wants to dev-warn when\r\n * the resulting accent/foreground pair drops below 4.5:1).\r\n *\r\n * Also used by the dark-mode work (F29) to audit dual-mode token\r\n * pairs and by Storybook contrast stories.\r\n */\r\n\r\n/* ── WCAG AA thresholds (exported for caller readability) ──────── */\r\n\r\n/** Normal text contrast ratio threshold (AA). */\r\nexport const WCAG_AA_NORMAL = 4.5;\r\n\r\n/** Large text (≥ 18pt or ≥ 14pt bold) contrast ratio threshold (AA). */\r\nexport const WCAG_AA_LARGE = 3.0;\r\n\r\n/** UI components & graphical objects contrast ratio threshold (AA 1.4.11). */\r\nexport const WCAG_AA_UI_NON_TEXT = 3.0;\r\n\r\n/* ── Color parsing ───────────────────────── */\r\n\r\ntype RGB = { r: number; g: number; b: number };\r\n\r\n/**\r\n * Parse a CSS color string into an { r, g, b } object with 0..255\r\n * channels. Returns null for unparseable input.\r\n *\r\n * Supported formats:\r\n *   - \"#RGB\"      (3-digit hex shorthand)\r\n *   - \"#RRGGBB\"   (6-digit hex)\r\n *   - \"#RRGGBBAA\" (8-digit hex; alpha channel is dropped)\r\n *   - \"rgb(r, g, b)\"\r\n *   - \"rgba(r, g, b, a)\" (alpha dropped)\r\n *\r\n * HSL / HWB / LAB / named-colors are NOT supported — the v2 token\r\n * surface and observed host-shell brand payloads are always hex\r\n * or rgb(). A wider parser can be swapped in later without\r\n * changing the public API of this function.\r\n */\r\nexport function parseColor(input: unknown): RGB | null {\r\n  if (typeof input !== \"string\") return null;\r\n  const s = input.trim();\r\n\r\n  // Hex (3, 6, or 8 digits; alpha dropped if present)\r\n  const hexMatch = s.match(/^#([0-9a-fA-F]{3}|[0-9a-fA-F]{6}|[0-9a-fA-F]{8})$/);\r\n  const hex = hexMatch?.[1];\r\n  if (hex) {\r\n    if (hex.length === 3) {\r\n      return {\r\n        r: parseInt(hex.charAt(0) + hex.charAt(0), 16),\r\n        g: parseInt(hex.charAt(1) + hex.charAt(1), 16),\r\n        b: parseInt(hex.charAt(2) + hex.charAt(2), 16),\r\n      };\r\n    }\r\n    // 6 or 8 digit — first 6 chars are RGB\r\n    return {\r\n      r: parseInt(hex.slice(0, 2), 16),\r\n      g: parseInt(hex.slice(2, 4), 16),\r\n      b: parseInt(hex.slice(4, 6), 16),\r\n    };\r\n  }\r\n\r\n  // rgb() / rgba() — alpha dropped\r\n  const rgbMatch = s.match(\r\n    /^rgba?\\(\\s*(\\d{1,3})\\s*,\\s*(\\d{1,3})\\s*,\\s*(\\d{1,3})/\r\n  );\r\n  if (rgbMatch) {\r\n    const r = parseInt(rgbMatch[1] ?? \"\", 10);\r\n    const g = parseInt(rgbMatch[2] ?? \"\", 10);\r\n    const b = parseInt(rgbMatch[3] ?? \"\", 10);\r\n    if (\r\n      Number.isFinite(r) && r >= 0 && r <= 255 &&\r\n      Number.isFinite(g) && g >= 0 && g <= 255 &&\r\n      Number.isFinite(b) && b >= 0 && b <= 255\r\n    ) {\r\n      return { r, g, b };\r\n    }\r\n  }\r\n\r\n  return null;\r\n}\r\n\r\n/* ── Luminance & ratio ───────────────────── */\r\n\r\n/** sRGB channel → linear-light conversion per WCAG 2.1. */\r\nfunction srgbChannelToLinear(c: number): number {\r\n  const cs = c / 255;\r\n  return cs <= 0.03928 ? cs / 12.92 : Math.pow((cs + 0.055) / 1.055, 2.4);\r\n}\r\n\r\n/**\r\n * Compute relative luminance of an sRGB color per WCAG 2.1.\r\n * Accepts an { r, g, b } object (channels in 0..255).\r\n * Returns a number in 0..1, or null if input is invalid.\r\n */\r\nexport function relativeLuminance(rgb: RGB | null | undefined): number | null {\r\n  if (!rgb || typeof rgb !== \"object\") return null;\r\n  const { r, g, b } = rgb;\r\n  if (\r\n    !Number.isFinite(r) || !Number.isFinite(g) || !Number.isFinite(b)\r\n  ) return null;\r\n  const R = srgbChannelToLinear(r);\r\n  const G = srgbChannelToLinear(g);\r\n  const B = srgbChannelToLinear(b);\r\n  return 0.2126 * R + 0.7152 * G + 0.0722 * B;\r\n}\r\n\r\n/**\r\n * WCAG contrast ratio between two colors.\r\n *\r\n * Accepts either CSS color strings (parsed via parseColor) or\r\n * already-parsed { r, g, b } objects. Returns a number in\r\n * [1.0, 21.0], or null if either input is unparseable.\r\n */\r\nexport function contrastRatio(\r\n  c1: string | RGB,\r\n  c2: string | RGB\r\n): number | null {\r\n  const rgb1 = typeof c1 === \"string\" ? parseColor(c1) : c1;\r\n  const rgb2 = typeof c2 === \"string\" ? parseColor(c2) : c2;\r\n  const L1 = relativeLuminance(rgb1);\r\n  const L2 = relativeLuminance(rgb2);\r\n  if (L1 == null || L2 == null) return null;\r\n  const lighter = Math.max(L1, L2);\r\n  const darker  = Math.min(L1, L2);\r\n  return (lighter + 0.05) / (darker + 0.05);\r\n}\r\n\r\n/**\r\n * Verdict helper — `passesContrast(ratio, \"normal\")` returns true\r\n * if the ratio meets the requested WCAG AA threshold. Returns\r\n * false on null ratios so callers can treat unparseable inputs as\r\n * failures.\r\n *\r\n * `level` accepts \"normal\" | \"large\" | \"ui\". Unknown levels default\r\n * to the strictest threshold.\r\n */\r\nexport function passesContrast(\r\n  ratio: number | null | undefined,\r\n  level: \"normal\" | \"large\" | \"ui\" = \"normal\"\r\n): boolean {\r\n  if (ratio == null || !Number.isFinite(ratio)) return false;\r\n  let threshold: number;\r\n  switch (level) {\r\n    case \"large\":\r\n      threshold = WCAG_AA_LARGE;\r\n      break;\r\n    case \"ui\":\r\n      threshold = WCAG_AA_UI_NON_TEXT;\r\n      break;\r\n    case \"normal\":\r\n    default:\r\n      threshold = WCAG_AA_NORMAL;\r\n      break;\r\n  }\r\n  return ratio >= threshold;\r\n}\r\n"],"mappings":";;;;;;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;;AAEA;AACO,IAAMA,cAAc,GAAAC,OAAA,CAAAD,cAAA,GAAG,GAAG;;AAEjC;AACO,IAAME,aAAa,GAAAD,OAAA,CAAAC,aAAA,GAAG,GAAG;;AAEhC;AACO,IAAMC,mBAAmB,GAAAF,OAAA,CAAAE,mBAAA,GAAG,GAAG;;AAEtC;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,UAAUA,CAACC,KAAc,EAAc;EACrD,IAAI,OAAOA,KAAK,KAAK,QAAQ,EAAE,OAAO,IAAI;EAC1C,IAAMC,CAAC,GAAGD,KAAK,CAACE,IAAI,CAAC,CAAC;;EAEtB;EACA,IAAMC,QAAQ,GAAGF,CAAC,CAACG,KAAK,CAAC,mDAAmD,CAAC;EAC7E,IAAMC,GAAG,GAAGF,QAAQ,aAARA,QAAQ,uBAARA,QAAQ,CAAG,CAAC,CAAC;EACzB,IAAIE,GAAG,EAAE;IACP,IAAIA,GAAG,CAACC,MAAM,KAAK,CAAC,EAAE;MACpB,OAAO;QACLC,CAAC,EAAEC,QAAQ,CAACH,GAAG,CAACI,MAAM,CAAC,CAAC,CAAC,GAAGJ,GAAG,CAACI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC9CC,CAAC,EAAEF,QAAQ,CAACH,GAAG,CAACI,MAAM,CAAC,CAAC,CAAC,GAAGJ,GAAG,CAACI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC9CE,CAAC,EAAEH,QAAQ,CAACH,GAAG,CAACI,MAAM,CAAC,CAAC,CAAC,GAAGJ,GAAG,CAACI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;MAC/C,CAAC;IACH;IACA;IACA,OAAO;MACLF,CAAC,EAAEC,QAAQ,CAACH,GAAG,CAACO,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;MAChCF,CAAC,EAAEF,QAAQ,CAACH,GAAG,CAACO,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;MAChCD,CAAC,EAAEH,QAAQ,CAACH,GAAG,CAACO,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;IACjC,CAAC;EACH;;EAEA;EACA,IAAMC,QAAQ,GAAGZ,CAAC,CAACG,KAAK,CACtB,sDACF,CAAC;EACD,IAAIS,QAAQ,EAAE;IAAA,IAAAC,UAAA,EAAAC,WAAA,EAAAC,WAAA;IACZ,IAAMT,CAAC,GAAGC,QAAQ,EAAAM,UAAA,GAACD,QAAQ,CAAC,CAAC,CAAC,cAAAC,UAAA,cAAAA,UAAA,GAAI,EAAE,EAAE,EAAE,CAAC;IACzC,IAAMJ,CAAC,GAAGF,QAAQ,EAAAO,WAAA,GAACF,QAAQ,CAAC,CAAC,CAAC,cAAAE,WAAA,cAAAA,WAAA,GAAI,EAAE,EAAE,EAAE,CAAC;IACzC,IAAMJ,CAAC,GAAGH,QAAQ,EAAAQ,WAAA,GAACH,QAAQ,CAAC,CAAC,CAAC,cAAAG,WAAA,cAAAA,WAAA,GAAI,EAAE,EAAE,EAAE,CAAC;IACzC,IACEC,MAAM,CAACC,QAAQ,CAACX,CAAC,CAAC,IAAIA,CAAC,IAAI,CAAC,IAAIA,CAAC,IAAI,GAAG,IACxCU,MAAM,CAACC,QAAQ,CAACR,CAAC,CAAC,IAAIA,CAAC,IAAI,CAAC,IAAIA,CAAC,IAAI,GAAG,IACxCO,MAAM,CAACC,QAAQ,CAACP,CAAC,CAAC,IAAIA,CAAC,IAAI,CAAC,IAAIA,CAAC,IAAI,GAAG,EACxC;MACA,OAAO;QAAEJ,CAAC,EAADA,CAAC;QAAEG,CAAC,EAADA,CAAC;QAAEC,CAAC,EAADA;MAAE,CAAC;IACpB;EACF;EAEA,OAAO,IAAI;AACb;;AAEA;;AAEA;AACA,SAASQ,mBAAmBA,CAACC,CAAS,EAAU;EAC9C,IAAMC,EAAE,GAAGD,CAAC,GAAG,GAAG;EAClB,OAAOC,EAAE,IAAI,OAAO,GAAGA,EAAE,GAAG,KAAK,GAAGC,IAAI,CAACC,GAAG,CAAC,CAACF,EAAE,GAAG,KAAK,IAAI,KAAK,EAAE,GAAG,CAAC;AACzE;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASG,iBAAiBA,CAACC,GAA2B,EAAiB;EAC5E,IAAI,CAACA,GAAG,IAAIC,OAAA,CAAOD,GAAG,MAAK,QAAQ,EAAE,OAAO,IAAI;EAChD,IAAQlB,CAAC,GAAWkB,GAAG,CAAflB,CAAC;IAAEG,CAAC,GAAQe,GAAG,CAAZf,CAAC;IAAEC,CAAC,GAAKc,GAAG,CAATd,CAAC;EACf,IACE,CAACM,MAAM,CAACC,QAAQ,CAACX,CAAC,CAAC,IAAI,CAACU,MAAM,CAACC,QAAQ,CAACR,CAAC,CAAC,IAAI,CAACO,MAAM,CAACC,QAAQ,CAACP,CAAC,CAAC,EACjE,OAAO,IAAI;EACb,IAAMgB,CAAC,GAAGR,mBAAmB,CAACZ,CAAC,CAAC;EAChC,IAAMqB,CAAC,GAAGT,mBAAmB,CAACT,CAAC,CAAC;EAChC,IAAMmB,CAAC,GAAGV,mBAAmB,CAACR,CAAC,CAAC;EAChC,OAAO,MAAM,GAAGgB,CAAC,GAAG,MAAM,GAAGC,CAAC,GAAG,MAAM,GAAGC,CAAC;AAC7C;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,aAAaA,CAC3BC,EAAgB,EAChBC,EAAgB,EACD;EACf,IAAMC,IAAI,GAAG,OAAOF,EAAE,KAAK,QAAQ,GAAGhC,UAAU,CAACgC,EAAE,CAAC,GAAGA,EAAE;EACzD,IAAMG,IAAI,GAAG,OAAOF,EAAE,KAAK,QAAQ,GAAGjC,UAAU,CAACiC,EAAE,CAAC,GAAGA,EAAE;EACzD,IAAMG,EAAE,GAAGX,iBAAiB,CAACS,IAAI,CAAC;EAClC,IAAMG,EAAE,GAAGZ,iBAAiB,CAACU,IAAI,CAAC;EAClC,IAAIC,EAAE,IAAI,IAAI,IAAIC,EAAE,IAAI,IAAI,EAAE,OAAO,IAAI;EACzC,IAAMC,OAAO,GAAGf,IAAI,CAACgB,GAAG,CAACH,EAAE,EAAEC,EAAE,CAAC;EAChC,IAAMG,MAAM,GAAIjB,IAAI,CAACkB,GAAG,CAACL,EAAE,EAAEC,EAAE,CAAC;EAChC,OAAO,CAACC,OAAO,GAAG,IAAI,KAAKE,MAAM,GAAG,IAAI,CAAC;AAC3C;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASE,cAAcA,CAC5BC,KAAgC,EAEvB;EAAA,IADTC,KAAgC,GAAAC,SAAA,CAAAtC,MAAA,QAAAsC,SAAA,QAAAC,SAAA,GAAAD,SAAA,MAAG,QAAQ;EAE3C,IAAIF,KAAK,IAAI,IAAI,IAAI,CAACzB,MAAM,CAACC,QAAQ,CAACwB,KAAK,CAAC,EAAE,OAAO,KAAK;EAC1D,IAAII,SAAiB;EACrB,QAAQH,KAAK;IACX,KAAK,OAAO;MACVG,SAAS,GAAGjD,aAAa;MACzB;IACF,KAAK,IAAI;MACPiD,SAAS,GAAGhD,mBAAmB;MAC/B;IACF,KAAK,QAAQ;IACb;MACEgD,SAAS,GAAGnD,cAAc;MAC1B;EACJ;EACA,OAAO+C,KAAK,IAAII,SAAS;AAC3B","ignoreList":[]}
+{"version":3,"file":"contrast.js","names":["WCAG_AA_NORMAL","exports","WCAG_AA_LARGE","WCAG_AA_UI_NON_TEXT","parseColor","input","s","trim","hexMatch","match","hex","length","r","parseInt","charAt","g","b","slice","rgbMatch","Number","isFinite","srgbChannelToLinear","c","cs","Math","pow","relativeLuminance","rgb","R","G","B","contrastRatio","c1","c2","rgb1","rgb2","L1","L2","lighter","max","darker","min","passesContrast","ratio","level","threshold"],"sources":["../../../src/lib/v2/utils/contrast.ts"],"sourcesContent":["/**\r\n * WCAG 2.1 contrast utilities — Portnet UI v2\r\n *\r\n * Reference: https://www.w3.org/TR/WCAG21/#dfn-contrast-ratio\r\n *\r\n * Pure functions, framework-agnostic, no deps. Reusable by any\r\n * host module that needs to validate a runtime brand override\r\n * against WCAG 1.4.3 AA (typical scenario: a host-shell event\r\n * injects a tenant brand and the consumer wants to dev-warn when\r\n * the resulting accent/foreground pair drops below 4.5:1).\r\n *\r\n * Also used by the dark-mode work (F29) to audit dual-mode token\r\n * pairs and by Storybook contrast stories.\r\n */\r\n\r\n/* ── WCAG AA thresholds (exported for caller readability) ──────── */\r\n\r\n/** Normal text contrast ratio threshold (AA). */\r\nexport const WCAG_AA_NORMAL = 4.5;\r\n\r\n/** Large text (≥ 18pt or ≥ 14pt bold) contrast ratio threshold (AA). */\r\nexport const WCAG_AA_LARGE = 3.0;\r\n\r\n/** UI components & graphical objects contrast ratio threshold (AA 1.4.11). */\r\nexport const WCAG_AA_UI_NON_TEXT = 3.0;\r\n\r\n/* ── Color parsing ───────────────────────── */\r\n\r\ntype RGB = { r: number; g: number; b: number };\r\n\r\n/**\r\n * Parse a CSS color string into an { r, g, b } object with 0..255\r\n * channels. Returns null for unparseable input.\r\n *\r\n * Supported formats:\r\n *   - \"#RGB\"      (3-digit hex shorthand)\r\n *   - \"#RRGGBB\"   (6-digit hex)\r\n *   - \"#RRGGBBAA\" (8-digit hex; alpha channel is dropped)\r\n *   - \"rgb(r, g, b)\"\r\n *   - \"rgba(r, g, b, a)\" (alpha dropped)\r\n *\r\n * HSL / HWB / LAB / named-colors are NOT supported — the v2 token\r\n * surface and observed host-shell brand payloads are always hex\r\n * or rgb(). A wider parser can be swapped in later without\r\n * changing the public API of this function.\r\n */\r\nexport function parseColor(input: unknown): RGB | null {\r\n  if (typeof input !== \"string\") return null;\r\n  const s = input.trim();\r\n\r\n  // Hex (3, 6, or 8 digits; alpha dropped if present)\r\n  const hexMatch = s.match(/^#([0-9a-fA-F]{3}|[0-9a-fA-F]{6}|[0-9a-fA-F]{8})$/);\r\n  const hex = hexMatch?.[1];\r\n  if (hex) {\r\n    if (hex.length === 3) {\r\n      return {\r\n        r: parseInt(hex.charAt(0) + hex.charAt(0), 16),\r\n        g: parseInt(hex.charAt(1) + hex.charAt(1), 16),\r\n        b: parseInt(hex.charAt(2) + hex.charAt(2), 16),\r\n      };\r\n    }\r\n    // 6 or 8 digit — first 6 chars are RGB\r\n    return {\r\n      r: parseInt(hex.slice(0, 2), 16),\r\n      g: parseInt(hex.slice(2, 4), 16),\r\n      b: parseInt(hex.slice(4, 6), 16),\r\n    };\r\n  }\r\n\r\n  // rgb() / rgba() — alpha dropped\r\n  const rgbMatch = s.match(\r\n    /^rgba?\\(\\s*(\\d{1,3})\\s*,\\s*(\\d{1,3})\\s*,\\s*(\\d{1,3})/\r\n  );\r\n  if (rgbMatch) {\r\n    const r = parseInt(rgbMatch[1] ?? \"\", 10);\r\n    const g = parseInt(rgbMatch[2] ?? \"\", 10);\r\n    const b = parseInt(rgbMatch[3] ?? \"\", 10);\r\n    if (\r\n      Number.isFinite(r) && r >= 0 && r <= 255 &&\r\n      Number.isFinite(g) && g >= 0 && g <= 255 &&\r\n      Number.isFinite(b) && b >= 0 && b <= 255\r\n    ) {\r\n      return { r, g, b };\r\n    }\r\n  }\r\n\r\n  return null;\r\n}\r\n\r\n/* ── Luminance & ratio ───────────────────── */\r\n\r\n/** sRGB channel → linear-light conversion per WCAG 2.1. */\r\nfunction srgbChannelToLinear(c: number): number {\r\n  const cs = c / 255;\r\n  return cs <= 0.03928 ? cs / 12.92 : Math.pow((cs + 0.055) / 1.055, 2.4);\r\n}\r\n\r\n/**\r\n * Compute relative luminance of an sRGB color per WCAG 2.1.\r\n * Accepts an { r, g, b } object (channels in 0..255).\r\n * Returns a number in 0..1, or null if input is invalid.\r\n */\r\nexport function relativeLuminance(rgb: RGB | null | undefined): number | null {\r\n  if (!rgb || typeof rgb !== \"object\") return null;\r\n  const { r, g, b } = rgb;\r\n  if (\r\n    !Number.isFinite(r) || !Number.isFinite(g) || !Number.isFinite(b)\r\n  ) return null;\r\n  const R = srgbChannelToLinear(r);\r\n  const G = srgbChannelToLinear(g);\r\n  const B = srgbChannelToLinear(b);\r\n  return 0.2126 * R + 0.7152 * G + 0.0722 * B;\r\n}\r\n\r\n/**\r\n * WCAG contrast ratio between two colors.\r\n *\r\n * Accepts either CSS color strings (parsed via parseColor) or\r\n * already-parsed { r, g, b } objects. Returns a number in\r\n * [1.0, 21.0], or null if either input is unparseable.\r\n */\r\nexport function contrastRatio(\r\n  c1: string | RGB,\r\n  c2: string | RGB\r\n): number | null {\r\n  const rgb1 = typeof c1 === \"string\" ? parseColor(c1) : c1;\r\n  const rgb2 = typeof c2 === \"string\" ? parseColor(c2) : c2;\r\n  const L1 = relativeLuminance(rgb1);\r\n  const L2 = relativeLuminance(rgb2);\r\n  if (L1 == null || L2 == null) return null;\r\n  const lighter = Math.max(L1, L2);\r\n  const darker  = Math.min(L1, L2);\r\n  return (lighter + 0.05) / (darker + 0.05);\r\n}\r\n\r\n/**\r\n * Verdict helper — `passesContrast(ratio, \"normal\")` returns true\r\n * if the ratio meets the requested WCAG AA threshold. Returns\r\n * false on null ratios so callers can treat unparseable inputs as\r\n * failures.\r\n *\r\n * `level` accepts \"normal\" | \"large\" | \"ui\". Unknown levels default\r\n * to the strictest threshold.\r\n */\r\nexport function passesContrast(\r\n  ratio: number | null | undefined,\r\n  level: \"normal\" | \"large\" | \"ui\" = \"normal\"\r\n): boolean {\r\n  if (ratio == null || !Number.isFinite(ratio)) return false;\r\n  let threshold: number;\r\n  switch (level) {\r\n    case \"large\":\r\n      threshold = WCAG_AA_LARGE;\r\n      break;\r\n    case \"ui\":\r\n      threshold = WCAG_AA_UI_NON_TEXT;\r\n      break;\r\n    case \"normal\":\r\n    default:\r\n      threshold = WCAG_AA_NORMAL;\r\n      break;\r\n  }\r\n  return ratio >= threshold;\r\n}\r\n"],"mappings":";;;;;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;;AAEA;AACO,MAAMA,cAAc,GAAAC,OAAA,CAAAD,cAAA,GAAG,GAAG;;AAEjC;AACO,MAAME,aAAa,GAAAD,OAAA,CAAAC,aAAA,GAAG,GAAG;;AAEhC;AACO,MAAMC,mBAAmB,GAAAF,OAAA,CAAAE,mBAAA,GAAG,GAAG;;AAEtC;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,UAAUA,CAACC,KAAc,EAAc;EACrD,IAAI,OAAOA,KAAK,KAAK,QAAQ,EAAE,OAAO,IAAI;EAC1C,MAAMC,CAAC,GAAGD,KAAK,CAACE,IAAI,CAAC,CAAC;;EAEtB;EACA,MAAMC,QAAQ,GAAGF,CAAC,CAACG,KAAK,CAAC,mDAAmD,CAAC;EAC7E,MAAMC,GAAG,GAAGF,QAAQ,GAAG,CAAC,CAAC;EACzB,IAAIE,GAAG,EAAE;IACP,IAAIA,GAAG,CAACC,MAAM,KAAK,CAAC,EAAE;MACpB,OAAO;QACLC,CAAC,EAAEC,QAAQ,CAACH,GAAG,CAACI,MAAM,CAAC,CAAC,CAAC,GAAGJ,GAAG,CAACI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC9CC,CAAC,EAAEF,QAAQ,CAACH,GAAG,CAACI,MAAM,CAAC,CAAC,CAAC,GAAGJ,GAAG,CAACI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC9CE,CAAC,EAAEH,QAAQ,CAACH,GAAG,CAACI,MAAM,CAAC,CAAC,CAAC,GAAGJ,GAAG,CAACI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;MAC/C,CAAC;IACH;IACA;IACA,OAAO;MACLF,CAAC,EAAEC,QAAQ,CAACH,GAAG,CAACO,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;MAChCF,CAAC,EAAEF,QAAQ,CAACH,GAAG,CAACO,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;MAChCD,CAAC,EAAEH,QAAQ,CAACH,GAAG,CAACO,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;IACjC,CAAC;EACH;;EAEA;EACA,MAAMC,QAAQ,GAAGZ,CAAC,CAACG,KAAK,CACtB,sDACF,CAAC;EACD,IAAIS,QAAQ,EAAE;IACZ,MAAMN,CAAC,GAAGC,QAAQ,CAACK,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;IACzC,MAAMH,CAAC,GAAGF,QAAQ,CAACK,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;IACzC,MAAMF,CAAC,GAAGH,QAAQ,CAACK,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;IACzC,IACEC,MAAM,CAACC,QAAQ,CAACR,CAAC,CAAC,IAAIA,CAAC,IAAI,CAAC,IAAIA,CAAC,IAAI,GAAG,IACxCO,MAAM,CAACC,QAAQ,CAACL,CAAC,CAAC,IAAIA,CAAC,IAAI,CAAC,IAAIA,CAAC,IAAI,GAAG,IACxCI,MAAM,CAACC,QAAQ,CAACJ,CAAC,CAAC,IAAIA,CAAC,IAAI,CAAC,IAAIA,CAAC,IAAI,GAAG,EACxC;MACA,OAAO;QAAEJ,CAAC;QAAEG,CAAC;QAAEC;MAAE,CAAC;IACpB;EACF;EAEA,OAAO,IAAI;AACb;;AAEA;;AAEA;AACA,SAASK,mBAAmBA,CAACC,CAAS,EAAU;EAC9C,MAAMC,EAAE,GAAGD,CAAC,GAAG,GAAG;EAClB,OAAOC,EAAE,IAAI,OAAO,GAAGA,EAAE,GAAG,KAAK,GAAGC,IAAI,CAACC,GAAG,CAAC,CAACF,EAAE,GAAG,KAAK,IAAI,KAAK,EAAE,GAAG,CAAC;AACzE;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASG,iBAAiBA,CAACC,GAA2B,EAAiB;EAC5E,IAAI,CAACA,GAAG,IAAI,OAAOA,GAAG,KAAK,QAAQ,EAAE,OAAO,IAAI;EAChD,MAAM;IAAEf,CAAC;IAAEG,CAAC;IAAEC;EAAE,CAAC,GAAGW,GAAG;EACvB,IACE,CAACR,MAAM,CAACC,QAAQ,CAACR,CAAC,CAAC,IAAI,CAACO,MAAM,CAACC,QAAQ,CAACL,CAAC,CAAC,IAAI,CAACI,MAAM,CAACC,QAAQ,CAACJ,CAAC,CAAC,EACjE,OAAO,IAAI;EACb,MAAMY,CAAC,GAAGP,mBAAmB,CAACT,CAAC,CAAC;EAChC,MAAMiB,CAAC,GAAGR,mBAAmB,CAACN,CAAC,CAAC;EAChC,MAAMe,CAAC,GAAGT,mBAAmB,CAACL,CAAC,CAAC;EAChC,OAAO,MAAM,GAAGY,CAAC,GAAG,MAAM,GAAGC,CAAC,GAAG,MAAM,GAAGC,CAAC;AAC7C;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,aAAaA,CAC3BC,EAAgB,EAChBC,EAAgB,EACD;EACf,MAAMC,IAAI,GAAG,OAAOF,EAAE,KAAK,QAAQ,GAAG5B,UAAU,CAAC4B,EAAE,CAAC,GAAGA,EAAE;EACzD,MAAMG,IAAI,GAAG,OAAOF,EAAE,KAAK,QAAQ,GAAG7B,UAAU,CAAC6B,EAAE,CAAC,GAAGA,EAAE;EACzD,MAAMG,EAAE,GAAGV,iBAAiB,CAACQ,IAAI,CAAC;EAClC,MAAMG,EAAE,GAAGX,iBAAiB,CAACS,IAAI,CAAC;EAClC,IAAIC,EAAE,IAAI,IAAI,IAAIC,EAAE,IAAI,IAAI,EAAE,OAAO,IAAI;EACzC,MAAMC,OAAO,GAAGd,IAAI,CAACe,GAAG,CAACH,EAAE,EAAEC,EAAE,CAAC;EAChC,MAAMG,MAAM,GAAIhB,IAAI,CAACiB,GAAG,CAACL,EAAE,EAAEC,EAAE,CAAC;EAChC,OAAO,CAACC,OAAO,GAAG,IAAI,KAAKE,MAAM,GAAG,IAAI,CAAC;AAC3C;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASE,cAAcA,CAC5BC,KAAgC,EAChCC,KAAgC,GAAG,QAAQ,EAClC;EACT,IAAID,KAAK,IAAI,IAAI,IAAI,CAACxB,MAAM,CAACC,QAAQ,CAACuB,KAAK,CAAC,EAAE,OAAO,KAAK;EAC1D,IAAIE,SAAiB;EACrB,QAAQD,KAAK;IACX,KAAK,OAAO;MACVC,SAAS,GAAG3C,aAAa;MACzB;IACF,KAAK,IAAI;MACP2C,SAAS,GAAG1C,mBAAmB;MAC/B;IACF,KAAK,QAAQ;IACb;MACE0C,SAAS,GAAG7C,cAAc;MAC1B;EACJ;EACA,OAAO2C,KAAK,IAAIE,SAAS;AAC3B","ignoreList":[]}

package/dist/v2/utils/cx.js

@@ -4,42 +4,22 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.cx = cx;
-exports["default"] = void 0;
-function _slicedToArray(arr, i) { return _arrayWithHoles(arr) || _iterableToArrayLimit(arr, i) || _unsupportedIterableToArray(arr, i) || _nonIterableRest(); }
-function _nonIterableRest() { throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); }
-function _iterableToArrayLimit(arr, i) { var _i = null == arr ? null : "undefined" != typeof Symbol && arr[Symbol.iterator] || arr["@@iterator"]; if (null != _i) { var _s, _e, _x, _r, _arr = [], _n = !0, _d = !1; try { if (_x = (_i = _i.call(arr)).next, 0 === i) { if (Object(_i) !== _i) return; _n = !1; } else for (; !(_n = (_s = _x.call(_i)).done) && (_arr.push(_s.value), _arr.length !== i); _n = !0) { ; } } catch (err) { _d = !0, _e = err; } finally { try { if (!_n && null != _i["return"] && (_r = _i["return"](), Object(_r) !== _r)) return; } finally { if (_d) throw _e; } } return _arr; } }
-function _arrayWithHoles(arr) { if (Array.isArray(arr)) return arr; }
-function _typeof(obj) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (obj) { return typeof obj; } : function (obj) { return obj && "function" == typeof Symbol && obj.constructor === Symbol && obj !== Symbol.prototype ? "symbol" : typeof obj; }, _typeof(obj); }
-function _toConsumableArray(arr) { return _arrayWithoutHoles(arr) || _iterableToArray(arr) || _unsupportedIterableToArray(arr) || _nonIterableSpread(); }
-function _nonIterableSpread() { throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); }
-function _unsupportedIterableToArray(o, minLen) { if (!o) return; if (typeof o === "string") return _arrayLikeToArray(o, minLen); var n = Object.prototype.toString.call(o).slice(8, -1); if (n === "Object" && o.constructor) n = o.constructor.name; if (n === "Map" || n === "Set") return Array.from(o); if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _arrayLikeToArray(o, minLen); }
-function _iterableToArray(iter) { if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) return Array.from(iter); }
-function _arrayWithoutHoles(arr) { if (Array.isArray(arr)) return _arrayLikeToArray(arr); }
-function _arrayLikeToArray(arr, len) { if (len == null || len > arr.length) len = arr.length; for (var i = 0, arr2 = new Array(len); i < len; i++) { arr2[i] = arr[i]; } return arr2; }
+exports.default = void 0;
 /**
  * cx — minimal classnames composer
  *
  *   cx("a", cond && "b", { "c": isC })  →  "a b c"
  */
 
-function cx() {
-  var out = [];
-  for (var _len = arguments.length, args = new Array(_len), _key = 0; _key < _len; _key++) {
-    args[_key] = arguments[_key];
-  }
-  for (var _i = 0, _args = args; _i < _args.length; _i++) {
-    var a = _args[_i];
+function cx(...args) {
+  const out = [];
+  for (const a of args) {
     if (!a) continue;
-    if (typeof a === "string" || typeof a === "number") out.push(String(a));else if (Array.isArray(a)) out.push(cx.apply(void 0, _toConsumableArray(a)));else if (_typeof(a) === "object") {
-      for (var _i2 = 0, _Object$entries = Object.entries(a); _i2 < _Object$entries.length; _i2++) {
-        var _Object$entries$_i = _slicedToArray(_Object$entries[_i2], 2),
-          k = _Object$entries$_i[0],
-          v = _Object$entries$_i[1];
-        if (v) out.push(k);
-      }
+    if (typeof a === "string" || typeof a === "number") out.push(String(a));else if (Array.isArray(a)) out.push(cx(...a));else if (typeof a === "object") {
+      for (const [k, v] of Object.entries(a)) if (v) out.push(k);
     }
   }
   return out.join(" ");
 }
-var _default = exports["default"] = cx;
+var _default = exports.default = cx;
 //# sourceMappingURL=cx.js.map

package/dist/v2/utils/cx.js.map

@@ -1 +1 @@
-{"version":3,"file":"cx.js","names":["cx","out","_len","arguments","length","args","Array","_key","_i","_args","a","push","String","isArray","apply","_toConsumableArray","_typeof","_i2","_Object$entries","Object","entries","_Object$entries$_i","_slicedToArray","k","v","join","_default","exports"],"sources":["../../../src/lib/v2/utils/cx.ts"],"sourcesContent":["/**\r\n * cx — minimal classnames composer\r\n *\r\n *   cx(\"a\", cond && \"b\", { \"c\": isC })  →  \"a b c\"\r\n */\r\ntype ClassValue =\r\n  | string\r\n  | number\r\n  | null\r\n  | undefined\r\n  | boolean\r\n  | ClassValue[]\r\n  | Record<string, unknown>;\r\n\r\nexport function cx(...args: ClassValue[]): string {\r\n  const out: string[] = [];\r\n  for (const a of args) {\r\n    if (!a) continue;\r\n    if (typeof a === \"string\" || typeof a === \"number\") out.push(String(a));\r\n    else if (Array.isArray(a)) out.push(cx(...a));\r\n    else if (typeof a === \"object\") {\r\n      for (const [k, v] of Object.entries(a)) if (v) out.push(k);\r\n    }\r\n  }\r\n  return out.join(\" \");\r\n}\r\n\r\nexport default cx;\r\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AACA;AACA;AACA;AACA;;AAUO,SAASA,EAAEA,CAAA,EAAgC;EAChD,IAAMC,GAAa,GAAG,EAAE;EAAC,SAAAC,IAAA,GAAAC,SAAA,CAAAC,MAAA,EADLC,IAAI,OAAAC,KAAA,CAAAJ,IAAA,GAAAK,IAAA,MAAAA,IAAA,GAAAL,IAAA,EAAAK,IAAA;IAAJF,IAAI,CAAAE,IAAA,IAAAJ,SAAA,CAAAI,IAAA;EAAA;EAExB,SAAAC,EAAA,MAAAC,KAAA,GAAgBJ,IAAI,EAAAG,EAAA,GAAAC,KAAA,CAAAL,MAAA,EAAAI,EAAA,IAAE;IAAjB,IAAME,CAAC,GAAAD,KAAA,CAAAD,EAAA;IACV,IAAI,CAACE,CAAC,EAAE;IACR,IAAI,OAAOA,CAAC,KAAK,QAAQ,IAAI,OAAOA,CAAC,KAAK,QAAQ,EAAET,GAAG,CAACU,IAAI,CAACC,MAAM,CAACF,CAAC,CAAC,CAAC,CAAC,KACnE,IAAIJ,KAAK,CAACO,OAAO,CAACH,CAAC,CAAC,EAAET,GAAG,CAACU,IAAI,CAACX,EAAE,CAAAc,KAAA,SAAAC,kBAAA,CAAIL,CAAC,EAAC,CAAC,CAAC,KACzC,IAAIM,OAAA,CAAON,CAAC,MAAK,QAAQ,EAAE;MAC9B,SAAAO,GAAA,MAAAC,eAAA,GAAqBC,MAAM,CAACC,OAAO,CAACV,CAAC,CAAC,EAAAO,GAAA,GAAAC,eAAA,CAAAd,MAAA,EAAAa,GAAA;QAAjC,IAAAI,kBAAA,GAAAC,cAAA,CAAAJ,eAAA,CAAAD,GAAA;UAAOM,CAAC,GAAAF,kBAAA;UAAEG,CAAC,GAAAH,kBAAA;QAAwB,IAAIG,CAAC,EAAEvB,GAAG,CAACU,IAAI,CAACY,CAAC,CAAC;MAAC;IAC7D;EACF;EACA,OAAOtB,GAAG,CAACwB,IAAI,CAAC,GAAG,CAAC;AACtB;AAAC,IAAAC,QAAA,GAAAC,OAAA,cAEc3B,EAAE","ignoreList":[]}
+{"version":3,"file":"cx.js","names":["cx","args","out","a","push","String","Array","isArray","k","v","Object","entries","join","_default","exports","default"],"sources":["../../../src/lib/v2/utils/cx.ts"],"sourcesContent":["/**\r\n * cx — minimal classnames composer\r\n *\r\n *   cx(\"a\", cond && \"b\", { \"c\": isC })  →  \"a b c\"\r\n */\r\ntype ClassValue =\r\n  | string\r\n  | number\r\n  | null\r\n  | undefined\r\n  | boolean\r\n  | ClassValue[]\r\n  | Record<string, unknown>;\r\n\r\nexport function cx(...args: ClassValue[]): string {\r\n  const out: string[] = [];\r\n  for (const a of args) {\r\n    if (!a) continue;\r\n    if (typeof a === \"string\" || typeof a === \"number\") out.push(String(a));\r\n    else if (Array.isArray(a)) out.push(cx(...a));\r\n    else if (typeof a === \"object\") {\r\n      for (const [k, v] of Object.entries(a)) if (v) out.push(k);\r\n    }\r\n  }\r\n  return out.join(\" \");\r\n}\r\n\r\nexport default cx;\r\n"],"mappings":";;;;;;;AAAA;AACA;AACA;AACA;AACA;;AAUO,SAASA,EAAEA,CAAC,GAAGC,IAAkB,EAAU;EAChD,MAAMC,GAAa,GAAG,EAAE;EACxB,KAAK,MAAMC,CAAC,IAAIF,IAAI,EAAE;IACpB,IAAI,CAACE,CAAC,EAAE;IACR,IAAI,OAAOA,CAAC,KAAK,QAAQ,IAAI,OAAOA,CAAC,KAAK,QAAQ,EAAED,GAAG,CAACE,IAAI,CAACC,MAAM,CAACF,CAAC,CAAC,CAAC,CAAC,KACnE,IAAIG,KAAK,CAACC,OAAO,CAACJ,CAAC,CAAC,EAAED,GAAG,CAACE,IAAI,CAACJ,EAAE,CAAC,GAAGG,CAAC,CAAC,CAAC,CAAC,KACzC,IAAI,OAAOA,CAAC,KAAK,QAAQ,EAAE;MAC9B,KAAK,MAAM,CAACK,CAAC,EAAEC,CAAC,CAAC,IAAIC,MAAM,CAACC,OAAO,CAACR,CAAC,CAAC,EAAE,IAAIM,CAAC,EAAEP,GAAG,CAACE,IAAI,CAACI,CAAC,CAAC;IAC5D;EACF;EACA,OAAON,GAAG,CAACU,IAAI,CAAC,GAAG,CAAC;AACtB;AAAC,IAAAC,QAAA,GAAAC,OAAA,CAAAC,OAAA,GAEcf,EAAE","ignoreList":[]}

package/dist/v2/utils/fileDownload.js

@@ -3,7 +3,7 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports["default"] = void 0;
+exports.default = void 0;
 exports.downloadBase64File = downloadBase64File;
 exports.downloadBlobFile = downloadBlobFile;
 exports.getMimeType = getMimeType;
@@ -37,7 +37,7 @@ exports.openBase64FileInTab = openBase64FileInTab;
  * browser download the file rather than attempt to render it — the safe
  * default for an unknown payload.
  */
-var MIME_TYPES = Object.freeze({
+const MIME_TYPES = Object.freeze({
   // Documents
   pdf: "application/pdf",
   doc: "application/msword",
@@ -66,8 +66,7 @@ var MIME_TYPES = Object.freeze({
  * @returns The mapped MIME type, or "application/octet-stream".
  */
 function getMimeType(extension) {
-  var _MIME_TYPES$extension;
-  return (_MIME_TYPES$extension = MIME_TYPES[extension.toLowerCase()]) !== null && _MIME_TYPES$extension !== void 0 ? _MIME_TYPES$extension : "application/octet-stream";
+  return MIME_TYPES[extension.toLowerCase()] ?? "application/octet-stream";
 }
 
 /**
@@ -91,15 +90,15 @@ function downloadBase64File(base64Data, fileName, extension) {
   if (typeof document === "undefined" || typeof atob === "undefined") {
     return false;
   }
-  var url = null;
-  var link = null;
+  let url = null;
+  let link = null;
   try {
-    var binary = atob(base64Data);
-    var bytes = new Uint8Array(binary.length);
-    for (var i = 0; i < binary.length; i += 1) {
+    const binary = atob(base64Data);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i += 1) {
       bytes[i] = binary.charCodeAt(i);
     }
-    var blob = new Blob([bytes], {
+    const blob = new Blob([bytes], {
       type: getMimeType(extension)
     });
     url = URL.createObjectURL(blob);
@@ -130,7 +129,7 @@ function downloadBase64File(base64Data, fileName, extension) {
  * revoking early shows the user a blank tab, while being late costs one
  * short-lived blob.
  */
-var PREVIEW_REVOKE_DELAY_MS = 60000;
+const PREVIEW_REVOKE_DELAY_MS = 60_000;
 
 /**
  * Decode a base64 payload and open it in a new tab for preview.
@@ -160,22 +159,20 @@ function openBase64FileInTab(base64Data, extension) {
   if (typeof window === "undefined" || typeof atob === "undefined") {
     return false;
   }
-  var url = null;
+  let url = null;
   try {
-    var binary = atob(base64Data);
-    var bytes = new Uint8Array(binary.length);
-    for (var i = 0; i < binary.length; i += 1) {
+    const binary = atob(base64Data);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i += 1) {
       bytes[i] = binary.charCodeAt(i);
     }
-    var blob = new Blob([bytes], {
+    const blob = new Blob([bytes], {
       type: getMimeType(extension)
     });
     url = URL.createObjectURL(blob);
     window.open(url, "_blank", "noopener,noreferrer");
-    var revokeTarget = url;
-    window.setTimeout(function () {
-      return URL.revokeObjectURL(revokeTarget);
-    }, PREVIEW_REVOKE_DELAY_MS);
+    const revokeTarget = url;
+    window.setTimeout(() => URL.revokeObjectURL(revokeTarget), PREVIEW_REVOKE_DELAY_MS);
     return true;
   } catch (error) {
     // Revoke straight away here: nothing consumed the URL on this path.
@@ -207,8 +204,8 @@ function downloadBlobFile(blob, fileName) {
   if (typeof document === "undefined" || typeof URL === "undefined") {
     return false;
   }
-  var url = null;
-  var link = null;
+  let url = null;
+  let link = null;
   try {
     url = URL.createObjectURL(blob);
     link = document.createElement("a");
@@ -226,11 +223,11 @@ function downloadBlobFile(blob, fileName) {
     if (url) URL.revokeObjectURL(url);
   }
 }
-var fileDownloadApi = {
-  getMimeType: getMimeType,
-  downloadBase64File: downloadBase64File,
-  openBase64FileInTab: openBase64FileInTab,
-  downloadBlobFile: downloadBlobFile
+const fileDownloadApi = {
+  getMimeType,
+  downloadBase64File,
+  openBase64FileInTab,
+  downloadBlobFile
 };
-var _default = exports["default"] = fileDownloadApi;
+var _default = exports.default = fileDownloadApi;
 //# sourceMappingURL=fileDownload.js.map

package/dist/v2/utils/fileDownload.js.map

@@ -1 +1 @@
-{"version":3,"file":"fileDownload.js","names":["MIME_TYPES","Object","freeze","pdf","doc","docx","xls","xlsx","csv","txt","png","jpg","jpeg","gif","bmp","webp","svg","ico","tiff","tif","getMimeType","extension","_MIME_TYPES$extension","toLowerCase","downloadBase64File","base64Data","fileName","document","atob","url","link","binary","bytes","Uint8Array","length","i","charCodeAt","blob","Blob","type","URL","createObjectURL","createElement","href","download","body","appendChild","click","error","console","parentNode","removeChild","revokeObjectURL","PREVIEW_REVOKE_DELAY_MS","openBase64FileInTab","window","open","revokeTarget","setTimeout","downloadBlobFile","fileDownloadApi","_default","exports"],"sources":["../../../src/lib/v2/utils/fileDownload.ts"],"sourcesContent":["/**\r\n * File download utilities — Portnet UI v2\r\n *\r\n * Turns a base64 payload from the API into a browser download. Every GU\r\n * module that lets a user retrieve an attached document needs this, and\r\n * before this file each one carried its own copy of the same\r\n * atob → Uint8Array → Blob → anchor sequence plus its own MIME map.\r\n *\r\n * DEPENDENCY-FREE ON PURPOSE. Multi-file (zip) bundling is deliberately NOT\r\n * here: it needs a zip library, and making that a hard dependency of the\r\n * design system would put it in every module's bundle against the\r\n * R-8.2 budget (180 KB gz initial JS) for a capability only\r\n * document-heavy modules use. If it is promoted later it belongs behind an\r\n * OPTIONAL peer dependency, the way PdfViewer sits behind pdfjs-dist and\r\n * @react-pdf-viewer/* in peerDependenciesMeta.\r\n *\r\n * Charter ref: §09.3 — the caller owns the user-facing message; these\r\n * return a boolean rather than throwing so a failure surfaces as copy\r\n * (R-4.4) instead of an unhandled rejection.\r\n */\r\n\r\n/**\r\n * Extension → MIME type for the formats the platform accepts as\r\n * attachments.\r\n *\r\n * Anything unmapped resolves to application/octet-stream, which makes the\r\n * browser download the file rather than attempt to render it — the safe\r\n * default for an unknown payload.\r\n */\r\nconst MIME_TYPES: Readonly<Record<string, string>> = Object.freeze({\r\n  // Documents\r\n  pdf: \"application/pdf\",\r\n  doc: \"application/msword\",\r\n  docx: \"application/vnd.openxmlformats-officedocument.wordprocessingml.document\",\r\n  xls: \"application/vnd.ms-excel\",\r\n  xlsx: \"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet\",\r\n  csv: \"text/csv\",\r\n  txt: \"text/plain\",\r\n\r\n  // Images\r\n  png: \"image/png\",\r\n  jpg: \"image/jpeg\",\r\n  jpeg: \"image/jpeg\",\r\n  gif: \"image/gif\",\r\n  bmp: \"image/bmp\",\r\n  webp: \"image/webp\",\r\n  svg: \"image/svg+xml\",\r\n  ico: \"image/x-icon\",\r\n  tiff: \"image/tiff\",\r\n  tif: \"image/tiff\",\r\n});\r\n\r\n/**\r\n * Resolve the MIME type for a file extension.\r\n *\r\n * @param extension - Extension WITHOUT a leading dot. Case-insensitive.\r\n * @returns The mapped MIME type, or \"application/octet-stream\".\r\n */\r\nexport function getMimeType(extension: string): string {\r\n  return MIME_TYPES[extension.toLowerCase()] ?? \"application/octet-stream\";\r\n}\r\n\r\n/**\r\n * Decode a base64 payload and hand it to the browser as a download.\r\n *\r\n * @param base64Data - Base64 WITHOUT a `data:` prefix, as the getFile /\r\n *                     downloadFile endpoints return it.\r\n * @param fileName   - Filename offered to the user. The extension is NOT\r\n *                     appended automatically; pass it already suffixed if\r\n *                     you want one.\r\n * @param extension  - Used only to resolve the Blob's MIME type.\r\n * @returns true on success; false if decoding failed or there is no DOM.\r\n *\r\n * @example\r\n * const ok = downloadBase64File(body.content, body.fileName, body.extension);\r\n * if (!ok) toast(\"Le téléchargement a échoué. Veuillez réessayer.\", \"error\");\r\n */\r\nexport function downloadBase64File(\r\n  base64Data: string,\r\n  fileName: string,\r\n  extension: string,\r\n): boolean {\r\n  // Guarded rather than assumed: this runs in jsdom under test and could be\r\n  // reached during SSR. The host modules' copies of this threw in both.\r\n  if (typeof document === \"undefined\" || typeof atob === \"undefined\") {\r\n    return false;\r\n  }\r\n\r\n  let url: string | null = null;\r\n  let link: HTMLAnchorElement | null = null;\r\n\r\n  try {\r\n    const binary = atob(base64Data);\r\n    const bytes = new Uint8Array(binary.length);\r\n    for (let i = 0; i < binary.length; i += 1) {\r\n      bytes[i] = binary.charCodeAt(i);\r\n    }\r\n\r\n    const blob = new Blob([bytes], { type: getMimeType(extension) });\r\n\r\n    url = URL.createObjectURL(blob);\r\n    link = document.createElement(\"a\");\r\n    link.href = url;\r\n    link.download = fileName;\r\n    document.body.appendChild(link);\r\n    link.click();\r\n    return true;\r\n  } catch (error) {\r\n    // eslint-disable-next-line no-console\r\n    console.error(\"[@portnet/ui] downloadBase64File failed:\", error);\r\n    return false;\r\n  } finally {\r\n    // finally, not the happy path: the host copies leaked both the anchor\r\n    // and the object URL whenever click() or appendChild threw.\r\n    if (link && link.parentNode) link.parentNode.removeChild(link);\r\n    if (url) URL.revokeObjectURL(url);\r\n  }\r\n}\r\n\r\n/**\r\n * Delay before revoking a preview's object URL.\r\n *\r\n * It CANNOT be revoked synchronously: the newly opened tab still has to fetch\r\n * the blob. There is no portable \"that tab finished loading\" signal for a blob\r\n * URL, so a timeout is the only cross-browser option. Deliberately generous:\r\n * revoking early shows the user a blank tab, while being late costs one\r\n * short-lived blob.\r\n */\r\nconst PREVIEW_REVOKE_DELAY_MS = 60_000;\r\n\r\n/**\r\n * Decode a base64 payload and open it in a new tab for preview.\r\n *\r\n * Companion to downloadBase64File: every document-bearing GU module offers a\r\n * « Visualiser » action next to « Télécharger », and each carried its own copy of\r\n * this atob -> Uint8Array -> Blob -> window.open sequence. NONE of those copies\r\n * revoked the object URL, so every preview leaked a blob for the lifetime of the\r\n * page.\r\n *\r\n * RETURN VALUE — read this before relying on it. `window.open` returns null BY\r\n * SPECIFICATION when \"noopener\" is set, so a blocked popup is indistinguishable\r\n * from a successful one. `true` therefore means \"decoded and the open call was\r\n * issued without throwing\" — NOT \"the tab is on screen\". Do not use it to claim\r\n * success to the user; use `false` to report a genuine failure (bad payload, no\r\n * DOM). Dropping \"noopener\" would make blocked-popup detection possible but\r\n * would hand the opened tab a window.opener reference — not a trade worth making\r\n * for a diagnostic.\r\n *\r\n * @param base64Data - Base64 WITHOUT a `data:` prefix.\r\n * @param extension  - Resolves the Blob MIME type. Required for inline\r\n *                     rendering: with the wrong type the browser downloads the\r\n *                     file instead of displaying it.\r\n * @returns false if there is no DOM or the payload could not be decoded.\r\n */\r\nexport function openBase64FileInTab(base64Data: string, extension: string): boolean {\r\n  if (typeof window === \"undefined\" || typeof atob === \"undefined\") {\r\n    return false;\r\n  }\r\n  let url: string | null = null;\r\n  try {\r\n    const binary = atob(base64Data);\r\n    const bytes = new Uint8Array(binary.length);\r\n    for (let i = 0; i < binary.length; i += 1) {\r\n      bytes[i] = binary.charCodeAt(i);\r\n    }\r\n    const blob = new Blob([bytes], { type: getMimeType(extension) });\r\n    url = URL.createObjectURL(blob);\r\n    window.open(url, \"_blank\", \"noopener,noreferrer\");\r\n    const revokeTarget = url;\r\n    window.setTimeout(() => URL.revokeObjectURL(revokeTarget), PREVIEW_REVOKE_DELAY_MS);\r\n    return true;\r\n  } catch (error) {\r\n    // Revoke straight away here: nothing consumed the URL on this path.\r\n    if (url) URL.revokeObjectURL(url);\r\n    // eslint-disable-next-line no-console\r\n    console.error(\"[@portnet/ui] openBase64FileInTab failed:\", error);\r\n    return false;\r\n  }\r\n}\r\n\r\n/**\r\n * Hand an already-materialised Blob to the browser as a download.\r\n *\r\n * Companion to downloadBase64File for endpoints that return a binary body\r\n * directly (axios `responseType: \"blob\"`) instead of base64 — Excel exports,\r\n * server-generated PDFs. Host modules built the anchor by hand for this too,\r\n * and every copy found so far never revoked the object URL.\r\n *\r\n * Revoked synchronously in `finally`, unlike openBase64FileInTab: a download is\r\n * snapshotted by the browser at click() time, so nothing needs the URL\r\n * afterwards — only a preview in another tab does.\r\n *\r\n * @param blob     - The payload. Its own `type` is used as-is; no MIME lookup,\r\n *                   the server already declared it.\r\n * @param fileName - Filename offered to the user, extension included.\r\n * @returns true on success; false if there is no DOM.\r\n */\r\nexport function downloadBlobFile(blob: Blob, fileName: string): boolean {\r\n  if (typeof document === \"undefined\" || typeof URL === \"undefined\") {\r\n    return false;\r\n  }\r\n  let url: string | null = null;\r\n  let link: HTMLAnchorElement | null = null;\r\n  try {\r\n    url = URL.createObjectURL(blob);\r\n    link = document.createElement(\"a\");\r\n    link.href = url;\r\n    link.download = fileName;\r\n    document.body.appendChild(link);\r\n    link.click();\r\n    return true;\r\n  } catch (error) {\r\n    // eslint-disable-next-line no-console\r\n    console.error(\"[@portnet/ui] downloadBlobFile failed:\", error);\r\n    return false;\r\n  } finally {\r\n    if (link && link.parentNode) link.parentNode.removeChild(link);\r\n    if (url) URL.revokeObjectURL(url);\r\n  }\r\n}\r\n\r\nconst fileDownloadApi = {\r\n  getMimeType,\r\n  downloadBase64File,\r\n  openBase64FileInTab,\r\n  downloadBlobFile,\r\n};\r\nexport default fileDownloadApi;\r\n"],"mappings":";;;;;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAMA,UAA4C,GAAGC,MAAM,CAACC,MAAM,CAAC;EACjE;EACAC,GAAG,EAAE,iBAAiB;EACtBC,GAAG,EAAE,oBAAoB;EACzBC,IAAI,EAAE,yEAAyE;EAC/EC,GAAG,EAAE,0BAA0B;EAC/BC,IAAI,EAAE,mEAAmE;EACzEC,GAAG,EAAE,UAAU;EACfC,GAAG,EAAE,YAAY;EAEjB;EACAC,GAAG,EAAE,WAAW;EAChBC,GAAG,EAAE,YAAY;EACjBC,IAAI,EAAE,YAAY;EAClBC,GAAG,EAAE,WAAW;EAChBC,GAAG,EAAE,WAAW;EAChBC,IAAI,EAAE,YAAY;EAClBC,GAAG,EAAE,eAAe;EACpBC,GAAG,EAAE,cAAc;EACnBC,IAAI,EAAE,YAAY;EAClBC,GAAG,EAAE;AACP,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,WAAWA,CAACC,SAAiB,EAAU;EAAA,IAAAC,qBAAA;EACrD,QAAAA,qBAAA,GAAOtB,UAAU,CAACqB,SAAS,CAACE,WAAW,CAAC,CAAC,CAAC,cAAAD,qBAAA,cAAAA,qBAAA,GAAI,0BAA0B;AAC1E;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASE,kBAAkBA,CAChCC,UAAkB,EAClBC,QAAgB,EAChBL,SAAiB,EACR;EACT;EACA;EACA,IAAI,OAAOM,QAAQ,KAAK,WAAW,IAAI,OAAOC,IAAI,KAAK,WAAW,EAAE;IAClE,OAAO,KAAK;EACd;EAEA,IAAIC,GAAkB,GAAG,IAAI;EAC7B,IAAIC,IAA8B,GAAG,IAAI;EAEzC,IAAI;IACF,IAAMC,MAAM,GAAGH,IAAI,CAACH,UAAU,CAAC;IAC/B,IAAMO,KAAK,GAAG,IAAIC,UAAU,CAACF,MAAM,CAACG,MAAM,CAAC;IAC3C,KAAK,IAAIC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGJ,MAAM,CAACG,MAAM,EAAEC,CAAC,IAAI,CAAC,EAAE;MACzCH,KAAK,CAACG,CAAC,CAAC,GAAGJ,MAAM,CAACK,UAAU,CAACD,CAAC,CAAC;IACjC;IAEA,IAAME,IAAI,GAAG,IAAIC,IAAI,CAAC,CAACN,KAAK,CAAC,EAAE;MAAEO,IAAI,EAAEnB,WAAW,CAACC,SAAS;IAAE,CAAC,CAAC;IAEhEQ,GAAG,GAAGW,GAAG,CAACC,eAAe,CAACJ,IAAI,CAAC;IAC/BP,IAAI,GAAGH,QAAQ,CAACe,aAAa,CAAC,GAAG,CAAC;IAClCZ,IAAI,CAACa,IAAI,GAAGd,GAAG;IACfC,IAAI,CAACc,QAAQ,GAAGlB,QAAQ;IACxBC,QAAQ,CAACkB,IAAI,CAACC,WAAW,CAAChB,IAAI,CAAC;IAC/BA,IAAI,CAACiB,KAAK,CAAC,CAAC;IACZ,OAAO,IAAI;EACb,CAAC,CAAC,OAAOC,KAAK,EAAE;IACd;IACAC,OAAO,CAACD,KAAK,CAAC,0CAA0C,EAAEA,KAAK,CAAC;IAChE,OAAO,KAAK;EACd,CAAC,SAAS;IACR;IACA;IACA,IAAIlB,IAAI,IAAIA,IAAI,CAACoB,UAAU,EAAEpB,IAAI,CAACoB,UAAU,CAACC,WAAW,CAACrB,IAAI,CAAC;IAC9D,IAAID,GAAG,EAAEW,GAAG,CAACY,eAAe,CAACvB,GAAG,CAAC;EACnC;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAMwB,uBAAuB,GAAG,KAAM;;AAEtC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,mBAAmBA,CAAC7B,UAAkB,EAAEJ,SAAiB,EAAW;EAClF,IAAI,OAAOkC,MAAM,KAAK,WAAW,IAAI,OAAO3B,IAAI,KAAK,WAAW,EAAE;IAChE,OAAO,KAAK;EACd;EACA,IAAIC,GAAkB,GAAG,IAAI;EAC7B,IAAI;IACF,IAAME,MAAM,GAAGH,IAAI,CAACH,UAAU,CAAC;IAC/B,IAAMO,KAAK,GAAG,IAAIC,UAAU,CAACF,MAAM,CAACG,MAAM,CAAC;IAC3C,KAAK,IAAIC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGJ,MAAM,CAACG,MAAM,EAAEC,CAAC,IAAI,CAAC,EAAE;MACzCH,KAAK,CAACG,CAAC,CAAC,GAAGJ,MAAM,CAACK,UAAU,CAACD,CAAC,CAAC;IACjC;IACA,IAAME,IAAI,GAAG,IAAIC,IAAI,CAAC,CAACN,KAAK,CAAC,EAAE;MAAEO,IAAI,EAAEnB,WAAW,CAACC,SAAS;IAAE,CAAC,CAAC;IAChEQ,GAAG,GAAGW,GAAG,CAACC,eAAe,CAACJ,IAAI,CAAC;IAC/BkB,MAAM,CAACC,IAAI,CAAC3B,GAAG,EAAE,QAAQ,EAAE,qBAAqB,CAAC;IACjD,IAAM4B,YAAY,GAAG5B,GAAG;IACxB0B,MAAM,CAACG,UAAU,CAAC;MAAA,OAAMlB,GAAG,CAACY,eAAe,CAACK,YAAY,CAAC;IAAA,GAAEJ,uBAAuB,CAAC;IACnF,OAAO,IAAI;EACb,CAAC,CAAC,OAAOL,KAAK,EAAE;IACd;IACA,IAAInB,GAAG,EAAEW,GAAG,CAACY,eAAe,CAACvB,GAAG,CAAC;IACjC;IACAoB,OAAO,CAACD,KAAK,CAAC,2CAA2C,EAAEA,KAAK,CAAC;IACjE,OAAO,KAAK;EACd;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASW,gBAAgBA,CAACtB,IAAU,EAAEX,QAAgB,EAAW;EACtE,IAAI,OAAOC,QAAQ,KAAK,WAAW,IAAI,OAAOa,GAAG,KAAK,WAAW,EAAE;IACjE,OAAO,KAAK;EACd;EACA,IAAIX,GAAkB,GAAG,IAAI;EAC7B,IAAIC,IAA8B,GAAG,IAAI;EACzC,IAAI;IACFD,GAAG,GAAGW,GAAG,CAACC,eAAe,CAACJ,IAAI,CAAC;IAC/BP,IAAI,GAAGH,QAAQ,CAACe,aAAa,CAAC,GAAG,CAAC;IAClCZ,IAAI,CAACa,IAAI,GAAGd,GAAG;IACfC,IAAI,CAACc,QAAQ,GAAGlB,QAAQ;IACxBC,QAAQ,CAACkB,IAAI,CAACC,WAAW,CAAChB,IAAI,CAAC;IAC/BA,IAAI,CAACiB,KAAK,CAAC,CAAC;IACZ,OAAO,IAAI;EACb,CAAC,CAAC,OAAOC,KAAK,EAAE;IACd;IACAC,OAAO,CAACD,KAAK,CAAC,wCAAwC,EAAEA,KAAK,CAAC;IAC9D,OAAO,KAAK;EACd,CAAC,SAAS;IACR,IAAIlB,IAAI,IAAIA,IAAI,CAACoB,UAAU,EAAEpB,IAAI,CAACoB,UAAU,CAACC,WAAW,CAACrB,IAAI,CAAC;IAC9D,IAAID,GAAG,EAAEW,GAAG,CAACY,eAAe,CAACvB,GAAG,CAAC;EACnC;AACF;AAEA,IAAM+B,eAAe,GAAG;EACtBxC,WAAW,EAAXA,WAAW;EACXI,kBAAkB,EAAlBA,kBAAkB;EAClB8B,mBAAmB,EAAnBA,mBAAmB;EACnBK,gBAAgB,EAAhBA;AACF,CAAC;AAAC,IAAAE,QAAA,GAAAC,OAAA,cACaF,eAAe","ignoreList":[]}
+{"version":3,"file":"fileDownload.js","names":["MIME_TYPES","Object","freeze","pdf","doc","docx","xls","xlsx","csv","txt","png","jpg","jpeg","gif","bmp","webp","svg","ico","tiff","tif","getMimeType","extension","toLowerCase","downloadBase64File","base64Data","fileName","document","atob","url","link","binary","bytes","Uint8Array","length","i","charCodeAt","blob","Blob","type","URL","createObjectURL","createElement","href","download","body","appendChild","click","error","console","parentNode","removeChild","revokeObjectURL","PREVIEW_REVOKE_DELAY_MS","openBase64FileInTab","window","open","revokeTarget","setTimeout","downloadBlobFile","fileDownloadApi","_default","exports","default"],"sources":["../../../src/lib/v2/utils/fileDownload.ts"],"sourcesContent":["/**\r\n * File download utilities — Portnet UI v2\r\n *\r\n * Turns a base64 payload from the API into a browser download. Every GU\r\n * module that lets a user retrieve an attached document needs this, and\r\n * before this file each one carried its own copy of the same\r\n * atob → Uint8Array → Blob → anchor sequence plus its own MIME map.\r\n *\r\n * DEPENDENCY-FREE ON PURPOSE. Multi-file (zip) bundling is deliberately NOT\r\n * here: it needs a zip library, and making that a hard dependency of the\r\n * design system would put it in every module's bundle against the\r\n * R-8.2 budget (180 KB gz initial JS) for a capability only\r\n * document-heavy modules use. If it is promoted later it belongs behind an\r\n * OPTIONAL peer dependency, the way PdfViewer sits behind pdfjs-dist and\r\n * @react-pdf-viewer/* in peerDependenciesMeta.\r\n *\r\n * Charter ref: §09.3 — the caller owns the user-facing message; these\r\n * return a boolean rather than throwing so a failure surfaces as copy\r\n * (R-4.4) instead of an unhandled rejection.\r\n */\r\n\r\n/**\r\n * Extension → MIME type for the formats the platform accepts as\r\n * attachments.\r\n *\r\n * Anything unmapped resolves to application/octet-stream, which makes the\r\n * browser download the file rather than attempt to render it — the safe\r\n * default for an unknown payload.\r\n */\r\nconst MIME_TYPES: Readonly<Record<string, string>> = Object.freeze({\r\n  // Documents\r\n  pdf: \"application/pdf\",\r\n  doc: \"application/msword\",\r\n  docx: \"application/vnd.openxmlformats-officedocument.wordprocessingml.document\",\r\n  xls: \"application/vnd.ms-excel\",\r\n  xlsx: \"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet\",\r\n  csv: \"text/csv\",\r\n  txt: \"text/plain\",\r\n\r\n  // Images\r\n  png: \"image/png\",\r\n  jpg: \"image/jpeg\",\r\n  jpeg: \"image/jpeg\",\r\n  gif: \"image/gif\",\r\n  bmp: \"image/bmp\",\r\n  webp: \"image/webp\",\r\n  svg: \"image/svg+xml\",\r\n  ico: \"image/x-icon\",\r\n  tiff: \"image/tiff\",\r\n  tif: \"image/tiff\",\r\n});\r\n\r\n/**\r\n * Resolve the MIME type for a file extension.\r\n *\r\n * @param extension - Extension WITHOUT a leading dot. Case-insensitive.\r\n * @returns The mapped MIME type, or \"application/octet-stream\".\r\n */\r\nexport function getMimeType(extension: string): string {\r\n  return MIME_TYPES[extension.toLowerCase()] ?? \"application/octet-stream\";\r\n}\r\n\r\n/**\r\n * Decode a base64 payload and hand it to the browser as a download.\r\n *\r\n * @param base64Data - Base64 WITHOUT a `data:` prefix, as the getFile /\r\n *                     downloadFile endpoints return it.\r\n * @param fileName   - Filename offered to the user. The extension is NOT\r\n *                     appended automatically; pass it already suffixed if\r\n *                     you want one.\r\n * @param extension  - Used only to resolve the Blob's MIME type.\r\n * @returns true on success; false if decoding failed or there is no DOM.\r\n *\r\n * @example\r\n * const ok = downloadBase64File(body.content, body.fileName, body.extension);\r\n * if (!ok) toast(\"Le téléchargement a échoué. Veuillez réessayer.\", \"error\");\r\n */\r\nexport function downloadBase64File(\r\n  base64Data: string,\r\n  fileName: string,\r\n  extension: string,\r\n): boolean {\r\n  // Guarded rather than assumed: this runs in jsdom under test and could be\r\n  // reached during SSR. The host modules' copies of this threw in both.\r\n  if (typeof document === \"undefined\" || typeof atob === \"undefined\") {\r\n    return false;\r\n  }\r\n\r\n  let url: string | null = null;\r\n  let link: HTMLAnchorElement | null = null;\r\n\r\n  try {\r\n    const binary = atob(base64Data);\r\n    const bytes = new Uint8Array(binary.length);\r\n    for (let i = 0; i < binary.length; i += 1) {\r\n      bytes[i] = binary.charCodeAt(i);\r\n    }\r\n\r\n    const blob = new Blob([bytes], { type: getMimeType(extension) });\r\n\r\n    url = URL.createObjectURL(blob);\r\n    link = document.createElement(\"a\");\r\n    link.href = url;\r\n    link.download = fileName;\r\n    document.body.appendChild(link);\r\n    link.click();\r\n    return true;\r\n  } catch (error) {\r\n    // eslint-disable-next-line no-console\r\n    console.error(\"[@portnet/ui] downloadBase64File failed:\", error);\r\n    return false;\r\n  } finally {\r\n    // finally, not the happy path: the host copies leaked both the anchor\r\n    // and the object URL whenever click() or appendChild threw.\r\n    if (link && link.parentNode) link.parentNode.removeChild(link);\r\n    if (url) URL.revokeObjectURL(url);\r\n  }\r\n}\r\n\r\n/**\r\n * Delay before revoking a preview's object URL.\r\n *\r\n * It CANNOT be revoked synchronously: the newly opened tab still has to fetch\r\n * the blob. There is no portable \"that tab finished loading\" signal for a blob\r\n * URL, so a timeout is the only cross-browser option. Deliberately generous:\r\n * revoking early shows the user a blank tab, while being late costs one\r\n * short-lived blob.\r\n */\r\nconst PREVIEW_REVOKE_DELAY_MS = 60_000;\r\n\r\n/**\r\n * Decode a base64 payload and open it in a new tab for preview.\r\n *\r\n * Companion to downloadBase64File: every document-bearing GU module offers a\r\n * « Visualiser » action next to « Télécharger », and each carried its own copy of\r\n * this atob -> Uint8Array -> Blob -> window.open sequence. NONE of those copies\r\n * revoked the object URL, so every preview leaked a blob for the lifetime of the\r\n * page.\r\n *\r\n * RETURN VALUE — read this before relying on it. `window.open` returns null BY\r\n * SPECIFICATION when \"noopener\" is set, so a blocked popup is indistinguishable\r\n * from a successful one. `true` therefore means \"decoded and the open call was\r\n * issued without throwing\" — NOT \"the tab is on screen\". Do not use it to claim\r\n * success to the user; use `false` to report a genuine failure (bad payload, no\r\n * DOM). Dropping \"noopener\" would make blocked-popup detection possible but\r\n * would hand the opened tab a window.opener reference — not a trade worth making\r\n * for a diagnostic.\r\n *\r\n * @param base64Data - Base64 WITHOUT a `data:` prefix.\r\n * @param extension  - Resolves the Blob MIME type. Required for inline\r\n *                     rendering: with the wrong type the browser downloads the\r\n *                     file instead of displaying it.\r\n * @returns false if there is no DOM or the payload could not be decoded.\r\n */\r\nexport function openBase64FileInTab(base64Data: string, extension: string): boolean {\r\n  if (typeof window === \"undefined\" || typeof atob === \"undefined\") {\r\n    return false;\r\n  }\r\n  let url: string | null = null;\r\n  try {\r\n    const binary = atob(base64Data);\r\n    const bytes = new Uint8Array(binary.length);\r\n    for (let i = 0; i < binary.length; i += 1) {\r\n      bytes[i] = binary.charCodeAt(i);\r\n    }\r\n    const blob = new Blob([bytes], { type: getMimeType(extension) });\r\n    url = URL.createObjectURL(blob);\r\n    window.open(url, \"_blank\", \"noopener,noreferrer\");\r\n    const revokeTarget = url;\r\n    window.setTimeout(() => URL.revokeObjectURL(revokeTarget), PREVIEW_REVOKE_DELAY_MS);\r\n    return true;\r\n  } catch (error) {\r\n    // Revoke straight away here: nothing consumed the URL on this path.\r\n    if (url) URL.revokeObjectURL(url);\r\n    // eslint-disable-next-line no-console\r\n    console.error(\"[@portnet/ui] openBase64FileInTab failed:\", error);\r\n    return false;\r\n  }\r\n}\r\n\r\n/**\r\n * Hand an already-materialised Blob to the browser as a download.\r\n *\r\n * Companion to downloadBase64File for endpoints that return a binary body\r\n * directly (axios `responseType: \"blob\"`) instead of base64 — Excel exports,\r\n * server-generated PDFs. Host modules built the anchor by hand for this too,\r\n * and every copy found so far never revoked the object URL.\r\n *\r\n * Revoked synchronously in `finally`, unlike openBase64FileInTab: a download is\r\n * snapshotted by the browser at click() time, so nothing needs the URL\r\n * afterwards — only a preview in another tab does.\r\n *\r\n * @param blob     - The payload. Its own `type` is used as-is; no MIME lookup,\r\n *                   the server already declared it.\r\n * @param fileName - Filename offered to the user, extension included.\r\n * @returns true on success; false if there is no DOM.\r\n */\r\nexport function downloadBlobFile(blob: Blob, fileName: string): boolean {\r\n  if (typeof document === \"undefined\" || typeof URL === \"undefined\") {\r\n    return false;\r\n  }\r\n  let url: string | null = null;\r\n  let link: HTMLAnchorElement | null = null;\r\n  try {\r\n    url = URL.createObjectURL(blob);\r\n    link = document.createElement(\"a\");\r\n    link.href = url;\r\n    link.download = fileName;\r\n    document.body.appendChild(link);\r\n    link.click();\r\n    return true;\r\n  } catch (error) {\r\n    // eslint-disable-next-line no-console\r\n    console.error(\"[@portnet/ui] downloadBlobFile failed:\", error);\r\n    return false;\r\n  } finally {\r\n    if (link && link.parentNode) link.parentNode.removeChild(link);\r\n    if (url) URL.revokeObjectURL(url);\r\n  }\r\n}\r\n\r\nconst fileDownloadApi = {\r\n  getMimeType,\r\n  downloadBase64File,\r\n  openBase64FileInTab,\r\n  downloadBlobFile,\r\n};\r\nexport default fileDownloadApi;\r\n"],"mappings":";;;;;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMA,UAA4C,GAAGC,MAAM,CAACC,MAAM,CAAC;EACjE;EACAC,GAAG,EAAE,iBAAiB;EACtBC,GAAG,EAAE,oBAAoB;EACzBC,IAAI,EAAE,yEAAyE;EAC/EC,GAAG,EAAE,0BAA0B;EAC/BC,IAAI,EAAE,mEAAmE;EACzEC,GAAG,EAAE,UAAU;EACfC,GAAG,EAAE,YAAY;EAEjB;EACAC,GAAG,EAAE,WAAW;EAChBC,GAAG,EAAE,YAAY;EACjBC,IAAI,EAAE,YAAY;EAClBC,GAAG,EAAE,WAAW;EAChBC,GAAG,EAAE,WAAW;EAChBC,IAAI,EAAE,YAAY;EAClBC,GAAG,EAAE,eAAe;EACpBC,GAAG,EAAE,cAAc;EACnBC,IAAI,EAAE,YAAY;EAClBC,GAAG,EAAE;AACP,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,WAAWA,CAACC,SAAiB,EAAU;EACrD,OAAOrB,UAAU,CAACqB,SAAS,CAACC,WAAW,CAAC,CAAC,CAAC,IAAI,0BAA0B;AAC1E;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,kBAAkBA,CAChCC,UAAkB,EAClBC,QAAgB,EAChBJ,SAAiB,EACR;EACT;EACA;EACA,IAAI,OAAOK,QAAQ,KAAK,WAAW,IAAI,OAAOC,IAAI,KAAK,WAAW,EAAE;IAClE,OAAO,KAAK;EACd;EAEA,IAAIC,GAAkB,GAAG,IAAI;EAC7B,IAAIC,IAA8B,GAAG,IAAI;EAEzC,IAAI;IACF,MAAMC,MAAM,GAAGH,IAAI,CAACH,UAAU,CAAC;IAC/B,MAAMO,KAAK,GAAG,IAAIC,UAAU,CAACF,MAAM,CAACG,MAAM,CAAC;IAC3C,KAAK,IAAIC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGJ,MAAM,CAACG,MAAM,EAAEC,CAAC,IAAI,CAAC,EAAE;MACzCH,KAAK,CAACG,CAAC,CAAC,GAAGJ,MAAM,CAACK,UAAU,CAACD,CAAC,CAAC;IACjC;IAEA,MAAME,IAAI,GAAG,IAAIC,IAAI,CAAC,CAACN,KAAK,CAAC,EAAE;MAAEO,IAAI,EAAElB,WAAW,CAACC,SAAS;IAAE,CAAC,CAAC;IAEhEO,GAAG,GAAGW,GAAG,CAACC,eAAe,CAACJ,IAAI,CAAC;IAC/BP,IAAI,GAAGH,QAAQ,CAACe,aAAa,CAAC,GAAG,CAAC;IAClCZ,IAAI,CAACa,IAAI,GAAGd,GAAG;IACfC,IAAI,CAACc,QAAQ,GAAGlB,QAAQ;IACxBC,QAAQ,CAACkB,IAAI,CAACC,WAAW,CAAChB,IAAI,CAAC;IAC/BA,IAAI,CAACiB,KAAK,CAAC,CAAC;IACZ,OAAO,IAAI;EACb,CAAC,CAAC,OAAOC,KAAK,EAAE;IACd;IACAC,OAAO,CAACD,KAAK,CAAC,0CAA0C,EAAEA,KAAK,CAAC;IAChE,OAAO,KAAK;EACd,CAAC,SAAS;IACR;IACA;IACA,IAAIlB,IAAI,IAAIA,IAAI,CAACoB,UAAU,EAAEpB,IAAI,CAACoB,UAAU,CAACC,WAAW,CAACrB,IAAI,CAAC;IAC9D,IAAID,GAAG,EAAEW,GAAG,CAACY,eAAe,CAACvB,GAAG,CAAC;EACnC;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMwB,uBAAuB,GAAG,MAAM;;AAEtC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,mBAAmBA,CAAC7B,UAAkB,EAAEH,SAAiB,EAAW;EAClF,IAAI,OAAOiC,MAAM,KAAK,WAAW,IAAI,OAAO3B,IAAI,KAAK,WAAW,EAAE;IAChE,OAAO,KAAK;EACd;EACA,IAAIC,GAAkB,GAAG,IAAI;EAC7B,IAAI;IACF,MAAME,MAAM,GAAGH,IAAI,CAACH,UAAU,CAAC;IAC/B,MAAMO,KAAK,GAAG,IAAIC,UAAU,CAACF,MAAM,CAACG,MAAM,CAAC;IAC3C,KAAK,IAAIC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGJ,MAAM,CAACG,MAAM,EAAEC,CAAC,IAAI,CAAC,EAAE;MACzCH,KAAK,CAACG,CAAC,CAAC,GAAGJ,MAAM,CAACK,UAAU,CAACD,CAAC,CAAC;IACjC;IACA,MAAME,IAAI,GAAG,IAAIC,IAAI,CAAC,CAACN,KAAK,CAAC,EAAE;MAAEO,IAAI,EAAElB,WAAW,CAACC,SAAS;IAAE,CAAC,CAAC;IAChEO,GAAG,GAAGW,GAAG,CAACC,eAAe,CAACJ,IAAI,CAAC;IAC/BkB,MAAM,CAACC,IAAI,CAAC3B,GAAG,EAAE,QAAQ,EAAE,qBAAqB,CAAC;IACjD,MAAM4B,YAAY,GAAG5B,GAAG;IACxB0B,MAAM,CAACG,UAAU,CAAC,MAAMlB,GAAG,CAACY,eAAe,CAACK,YAAY,CAAC,EAAEJ,uBAAuB,CAAC;IACnF,OAAO,IAAI;EACb,CAAC,CAAC,OAAOL,KAAK,EAAE;IACd;IACA,IAAInB,GAAG,EAAEW,GAAG,CAACY,eAAe,CAACvB,GAAG,CAAC;IACjC;IACAoB,OAAO,CAACD,KAAK,CAAC,2CAA2C,EAAEA,KAAK,CAAC;IACjE,OAAO,KAAK;EACd;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASW,gBAAgBA,CAACtB,IAAU,EAAEX,QAAgB,EAAW;EACtE,IAAI,OAAOC,QAAQ,KAAK,WAAW,IAAI,OAAOa,GAAG,KAAK,WAAW,EAAE;IACjE,OAAO,KAAK;EACd;EACA,IAAIX,GAAkB,GAAG,IAAI;EAC7B,IAAIC,IAA8B,GAAG,IAAI;EACzC,IAAI;IACFD,GAAG,GAAGW,GAAG,CAACC,eAAe,CAACJ,IAAI,CAAC;IAC/BP,IAAI,GAAGH,QAAQ,CAACe,aAAa,CAAC,GAAG,CAAC;IAClCZ,IAAI,CAACa,IAAI,GAAGd,GAAG;IACfC,IAAI,CAACc,QAAQ,GAAGlB,QAAQ;IACxBC,QAAQ,CAACkB,IAAI,CAACC,WAAW,CAAChB,IAAI,CAAC;IAC/BA,IAAI,CAACiB,KAAK,CAAC,CAAC;IACZ,OAAO,IAAI;EACb,CAAC,CAAC,OAAOC,KAAK,EAAE;IACd;IACAC,OAAO,CAACD,KAAK,CAAC,wCAAwC,EAAEA,KAAK,CAAC;IAC9D,OAAO,KAAK;EACd,CAAC,SAAS;IACR,IAAIlB,IAAI,IAAIA,IAAI,CAACoB,UAAU,EAAEpB,IAAI,CAACoB,UAAU,CAACC,WAAW,CAACrB,IAAI,CAAC;IAC9D,IAAID,GAAG,EAAEW,GAAG,CAACY,eAAe,CAACvB,GAAG,CAAC;EACnC;AACF;AAEA,MAAM+B,eAAe,GAAG;EACtBvC,WAAW;EACXG,kBAAkB;EAClB8B,mBAAmB;EACnBK;AACF,CAAC;AAAC,IAAAE,QAAA,GAAAC,OAAA,CAAAC,OAAA,GACaH,eAAe","ignoreList":[]}