@portnet/ui 6.0.2 → 6.0.3

package/dist/esm/v2/utils/fileDownload.js.map

@@ -1 +1 @@
-{"version":3,"file":"fileDownload.js","names":["MIME_TYPES","Object","freeze","pdf","doc","docx","xls","xlsx","csv","txt","png","jpg","jpeg","gif","bmp","webp","svg","ico","tiff","tif","getMimeType","extension","_MIME_TYPES$extension","toLowerCase","downloadBase64File","base64Data","fileName","document","atob","url","link","binary","bytes","Uint8Array","length","i","charCodeAt","blob","Blob","type","URL","createObjectURL","createElement","href","download","body","appendChild","click","error","console","parentNode","removeChild","revokeObjectURL","PREVIEW_REVOKE_DELAY_MS","openBase64FileInTab","window","open","revokeTarget","setTimeout","downloadBlobFile","fileDownloadApi"],"sources":["../../../../src/lib/v2/utils/fileDownload.ts"],"sourcesContent":["/**\r\n * File download utilities — Portnet UI v2\r\n *\r\n * Turns a base64 payload from the API into a browser download. Every GU\r\n * module that lets a user retrieve an attached document needs this, and\r\n * before this file each one carried its own copy of the same\r\n * atob → Uint8Array → Blob → anchor sequence plus its own MIME map.\r\n *\r\n * DEPENDENCY-FREE ON PURPOSE. Multi-file (zip) bundling is deliberately NOT\r\n * here: it needs a zip library, and making that a hard dependency of the\r\n * design system would put it in every module's bundle against the\r\n * R-8.2 budget (180 KB gz initial JS) for a capability only\r\n * document-heavy modules use. If it is promoted later it belongs behind an\r\n * OPTIONAL peer dependency, the way PdfViewer sits behind pdfjs-dist and\r\n * @react-pdf-viewer/* in peerDependenciesMeta.\r\n *\r\n * Charter ref: §09.3 — the caller owns the user-facing message; these\r\n * return a boolean rather than throwing so a failure surfaces as copy\r\n * (R-4.4) instead of an unhandled rejection.\r\n */\r\n\r\n/**\r\n * Extension → MIME type for the formats the platform accepts as\r\n * attachments.\r\n *\r\n * Anything unmapped resolves to application/octet-stream, which makes the\r\n * browser download the file rather than attempt to render it — the safe\r\n * default for an unknown payload.\r\n */\r\nconst MIME_TYPES: Readonly<Record<string, string>> = Object.freeze({\r\n  // Documents\r\n  pdf: \"application/pdf\",\r\n  doc: \"application/msword\",\r\n  docx: \"application/vnd.openxmlformats-officedocument.wordprocessingml.document\",\r\n  xls: \"application/vnd.ms-excel\",\r\n  xlsx: \"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet\",\r\n  csv: \"text/csv\",\r\n  txt: \"text/plain\",\r\n\r\n  // Images\r\n  png: \"image/png\",\r\n  jpg: \"image/jpeg\",\r\n  jpeg: \"image/jpeg\",\r\n  gif: \"image/gif\",\r\n  bmp: \"image/bmp\",\r\n  webp: \"image/webp\",\r\n  svg: \"image/svg+xml\",\r\n  ico: \"image/x-icon\",\r\n  tiff: \"image/tiff\",\r\n  tif: \"image/tiff\",\r\n});\r\n\r\n/**\r\n * Resolve the MIME type for a file extension.\r\n *\r\n * @param extension - Extension WITHOUT a leading dot. Case-insensitive.\r\n * @returns The mapped MIME type, or \"application/octet-stream\".\r\n */\r\nexport function getMimeType(extension: string): string {\r\n  return MIME_TYPES[extension.toLowerCase()] ?? \"application/octet-stream\";\r\n}\r\n\r\n/**\r\n * Decode a base64 payload and hand it to the browser as a download.\r\n *\r\n * @param base64Data - Base64 WITHOUT a `data:` prefix, as the getFile /\r\n *                     downloadFile endpoints return it.\r\n * @param fileName   - Filename offered to the user. The extension is NOT\r\n *                     appended automatically; pass it already suffixed if\r\n *                     you want one.\r\n * @param extension  - Used only to resolve the Blob's MIME type.\r\n * @returns true on success; false if decoding failed or there is no DOM.\r\n *\r\n * @example\r\n * const ok = downloadBase64File(body.content, body.fileName, body.extension);\r\n * if (!ok) toast(\"Le téléchargement a échoué. Veuillez réessayer.\", \"error\");\r\n */\r\nexport function downloadBase64File(\r\n  base64Data: string,\r\n  fileName: string,\r\n  extension: string,\r\n): boolean {\r\n  // Guarded rather than assumed: this runs in jsdom under test and could be\r\n  // reached during SSR. The host modules' copies of this threw in both.\r\n  if (typeof document === \"undefined\" || typeof atob === \"undefined\") {\r\n    return false;\r\n  }\r\n\r\n  let url: string | null = null;\r\n  let link: HTMLAnchorElement | null = null;\r\n\r\n  try {\r\n    const binary = atob(base64Data);\r\n    const bytes = new Uint8Array(binary.length);\r\n    for (let i = 0; i < binary.length; i += 1) {\r\n      bytes[i] = binary.charCodeAt(i);\r\n    }\r\n\r\n    const blob = new Blob([bytes], { type: getMimeType(extension) });\r\n\r\n    url = URL.createObjectURL(blob);\r\n    link = document.createElement(\"a\");\r\n    link.href = url;\r\n    link.download = fileName;\r\n    document.body.appendChild(link);\r\n    link.click();\r\n    return true;\r\n  } catch (error) {\r\n    // eslint-disable-next-line no-console\r\n    console.error(\"[@portnet/ui] downloadBase64File failed:\", error);\r\n    return false;\r\n  } finally {\r\n    // finally, not the happy path: the host copies leaked both the anchor\r\n    // and the object URL whenever click() or appendChild threw.\r\n    if (link && link.parentNode) link.parentNode.removeChild(link);\r\n    if (url) URL.revokeObjectURL(url);\r\n  }\r\n}\r\n\r\n/**\r\n * Delay before revoking a preview's object URL.\r\n *\r\n * It CANNOT be revoked synchronously: the newly opened tab still has to fetch\r\n * the blob. There is no portable \"that tab finished loading\" signal for a blob\r\n * URL, so a timeout is the only cross-browser option. Deliberately generous:\r\n * revoking early shows the user a blank tab, while being late costs one\r\n * short-lived blob.\r\n */\r\nconst PREVIEW_REVOKE_DELAY_MS = 60_000;\r\n\r\n/**\r\n * Decode a base64 payload and open it in a new tab for preview.\r\n *\r\n * Companion to downloadBase64File: every document-bearing GU module offers a\r\n * « Visualiser » action next to « Télécharger », and each carried its own copy of\r\n * this atob -> Uint8Array -> Blob -> window.open sequence. NONE of those copies\r\n * revoked the object URL, so every preview leaked a blob for the lifetime of the\r\n * page.\r\n *\r\n * RETURN VALUE — read this before relying on it. `window.open` returns null BY\r\n * SPECIFICATION when \"noopener\" is set, so a blocked popup is indistinguishable\r\n * from a successful one. `true` therefore means \"decoded and the open call was\r\n * issued without throwing\" — NOT \"the tab is on screen\". Do not use it to claim\r\n * success to the user; use `false` to report a genuine failure (bad payload, no\r\n * DOM). Dropping \"noopener\" would make blocked-popup detection possible but\r\n * would hand the opened tab a window.opener reference — not a trade worth making\r\n * for a diagnostic.\r\n *\r\n * @param base64Data - Base64 WITHOUT a `data:` prefix.\r\n * @param extension  - Resolves the Blob MIME type. Required for inline\r\n *                     rendering: with the wrong type the browser downloads the\r\n *                     file instead of displaying it.\r\n * @returns false if there is no DOM or the payload could not be decoded.\r\n */\r\nexport function openBase64FileInTab(base64Data: string, extension: string): boolean {\r\n  if (typeof window === \"undefined\" || typeof atob === \"undefined\") {\r\n    return false;\r\n  }\r\n  let url: string | null = null;\r\n  try {\r\n    const binary = atob(base64Data);\r\n    const bytes = new Uint8Array(binary.length);\r\n    for (let i = 0; i < binary.length; i += 1) {\r\n      bytes[i] = binary.charCodeAt(i);\r\n    }\r\n    const blob = new Blob([bytes], { type: getMimeType(extension) });\r\n    url = URL.createObjectURL(blob);\r\n    window.open(url, \"_blank\", \"noopener,noreferrer\");\r\n    const revokeTarget = url;\r\n    window.setTimeout(() => URL.revokeObjectURL(revokeTarget), PREVIEW_REVOKE_DELAY_MS);\r\n    return true;\r\n  } catch (error) {\r\n    // Revoke straight away here: nothing consumed the URL on this path.\r\n    if (url) URL.revokeObjectURL(url);\r\n    // eslint-disable-next-line no-console\r\n    console.error(\"[@portnet/ui] openBase64FileInTab failed:\", error);\r\n    return false;\r\n  }\r\n}\r\n\r\n/**\r\n * Hand an already-materialised Blob to the browser as a download.\r\n *\r\n * Companion to downloadBase64File for endpoints that return a binary body\r\n * directly (axios `responseType: \"blob\"`) instead of base64 — Excel exports,\r\n * server-generated PDFs. Host modules built the anchor by hand for this too,\r\n * and every copy found so far never revoked the object URL.\r\n *\r\n * Revoked synchronously in `finally`, unlike openBase64FileInTab: a download is\r\n * snapshotted by the browser at click() time, so nothing needs the URL\r\n * afterwards — only a preview in another tab does.\r\n *\r\n * @param blob     - The payload. Its own `type` is used as-is; no MIME lookup,\r\n *                   the server already declared it.\r\n * @param fileName - Filename offered to the user, extension included.\r\n * @returns true on success; false if there is no DOM.\r\n */\r\nexport function downloadBlobFile(blob: Blob, fileName: string): boolean {\r\n  if (typeof document === \"undefined\" || typeof URL === \"undefined\") {\r\n    return false;\r\n  }\r\n  let url: string | null = null;\r\n  let link: HTMLAnchorElement | null = null;\r\n  try {\r\n    url = URL.createObjectURL(blob);\r\n    link = document.createElement(\"a\");\r\n    link.href = url;\r\n    link.download = fileName;\r\n    document.body.appendChild(link);\r\n    link.click();\r\n    return true;\r\n  } catch (error) {\r\n    // eslint-disable-next-line no-console\r\n    console.error(\"[@portnet/ui] downloadBlobFile failed:\", error);\r\n    return false;\r\n  } finally {\r\n    if (link && link.parentNode) link.parentNode.removeChild(link);\r\n    if (url) URL.revokeObjectURL(url);\r\n  }\r\n}\r\n\r\nconst fileDownloadApi = {\r\n  getMimeType,\r\n  downloadBase64File,\r\n  openBase64FileInTab,\r\n  downloadBlobFile,\r\n};\r\nexport default fileDownloadApi;\r\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAMA,UAA4C,GAAGC,MAAM,CAACC,MAAM,CAAC;EACjE;EACAC,GAAG,EAAE,iBAAiB;EACtBC,GAAG,EAAE,oBAAoB;EACzBC,IAAI,EAAE,yEAAyE;EAC/EC,GAAG,EAAE,0BAA0B;EAC/BC,IAAI,EAAE,mEAAmE;EACzEC,GAAG,EAAE,UAAU;EACfC,GAAG,EAAE,YAAY;EAEjB;EACAC,GAAG,EAAE,WAAW;EAChBC,GAAG,EAAE,YAAY;EACjBC,IAAI,EAAE,YAAY;EAClBC,GAAG,EAAE,WAAW;EAChBC,GAAG,EAAE,WAAW;EAChBC,IAAI,EAAE,YAAY;EAClBC,GAAG,EAAE,eAAe;EACpBC,GAAG,EAAE,cAAc;EACnBC,IAAI,EAAE,YAAY;EAClBC,GAAG,EAAE;AACP,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,WAAWA,CAACC,SAAiB,EAAU;EAAA,IAAAC,qBAAA;EACrD,QAAAA,qBAAA,GAAOtB,UAAU,CAACqB,SAAS,CAACE,WAAW,CAAC,CAAC,CAAC,cAAAD,qBAAA,cAAAA,qBAAA,GAAI,0BAA0B;AAC1E;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASE,kBAAkBA,CAChCC,UAAkB,EAClBC,QAAgB,EAChBL,SAAiB,EACR;EACT;EACA;EACA,IAAI,OAAOM,QAAQ,KAAK,WAAW,IAAI,OAAOC,IAAI,KAAK,WAAW,EAAE;IAClE,OAAO,KAAK;EACd;EAEA,IAAIC,GAAkB,GAAG,IAAI;EAC7B,IAAIC,IAA8B,GAAG,IAAI;EAEzC,IAAI;IACF,IAAMC,MAAM,GAAGH,IAAI,CAACH,UAAU,CAAC;IAC/B,IAAMO,KAAK,GAAG,IAAIC,UAAU,CAACF,MAAM,CAACG,MAAM,CAAC;IAC3C,KAAK,IAAIC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGJ,MAAM,CAACG,MAAM,EAAEC,CAAC,IAAI,CAAC,EAAE;MACzCH,KAAK,CAACG,CAAC,CAAC,GAAGJ,MAAM,CAACK,UAAU,CAACD,CAAC,CAAC;IACjC;IAEA,IAAME,IAAI,GAAG,IAAIC,IAAI,CAAC,CAACN,KAAK,CAAC,EAAE;MAAEO,IAAI,EAAEnB,WAAW,CAACC,SAAS;IAAE,CAAC,CAAC;IAEhEQ,GAAG,GAAGW,GAAG,CAACC,eAAe,CAACJ,IAAI,CAAC;IAC/BP,IAAI,GAAGH,QAAQ,CAACe,aAAa,CAAC,GAAG,CAAC;IAClCZ,IAAI,CAACa,IAAI,GAAGd,GAAG;IACfC,IAAI,CAACc,QAAQ,GAAGlB,QAAQ;IACxBC,QAAQ,CAACkB,IAAI,CAACC,WAAW,CAAChB,IAAI,CAAC;IAC/BA,IAAI,CAACiB,KAAK,CAAC,CAAC;IACZ,OAAO,IAAI;EACb,CAAC,CAAC,OAAOC,KAAK,EAAE;IACd;IACAC,OAAO,CAACD,KAAK,CAAC,0CAA0C,EAAEA,KAAK,CAAC;IAChE,OAAO,KAAK;EACd,CAAC,SAAS;IACR;IACA;IACA,IAAIlB,IAAI,IAAIA,IAAI,CAACoB,UAAU,EAAEpB,IAAI,CAACoB,UAAU,CAACC,WAAW,CAACrB,IAAI,CAAC;IAC9D,IAAID,GAAG,EAAEW,GAAG,CAACY,eAAe,CAACvB,GAAG,CAAC;EACnC;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAMwB,uBAAuB,GAAG,KAAM;;AAEtC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,mBAAmBA,CAAC7B,UAAkB,EAAEJ,SAAiB,EAAW;EAClF,IAAI,OAAOkC,MAAM,KAAK,WAAW,IAAI,OAAO3B,IAAI,KAAK,WAAW,EAAE;IAChE,OAAO,KAAK;EACd;EACA,IAAIC,GAAkB,GAAG,IAAI;EAC7B,IAAI;IACF,IAAME,MAAM,GAAGH,IAAI,CAACH,UAAU,CAAC;IAC/B,IAAMO,KAAK,GAAG,IAAIC,UAAU,CAACF,MAAM,CAACG,MAAM,CAAC;IAC3C,KAAK,IAAIC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGJ,MAAM,CAACG,MAAM,EAAEC,CAAC,IAAI,CAAC,EAAE;MACzCH,KAAK,CAACG,CAAC,CAAC,GAAGJ,MAAM,CAACK,UAAU,CAACD,CAAC,CAAC;IACjC;IACA,IAAME,IAAI,GAAG,IAAIC,IAAI,CAAC,CAACN,KAAK,CAAC,EAAE;MAAEO,IAAI,EAAEnB,WAAW,CAACC,SAAS;IAAE,CAAC,CAAC;IAChEQ,GAAG,GAAGW,GAAG,CAACC,eAAe,CAACJ,IAAI,CAAC;IAC/BkB,MAAM,CAACC,IAAI,CAAC3B,GAAG,EAAE,QAAQ,EAAE,qBAAqB,CAAC;IACjD,IAAM4B,YAAY,GAAG5B,GAAG;IACxB0B,MAAM,CAACG,UAAU,CAAC;MAAA,OAAMlB,GAAG,CAACY,eAAe,CAACK,YAAY,CAAC;IAAA,GAAEJ,uBAAuB,CAAC;IACnF,OAAO,IAAI;EACb,CAAC,CAAC,OAAOL,KAAK,EAAE;IACd;IACA,IAAInB,GAAG,EAAEW,GAAG,CAACY,eAAe,CAACvB,GAAG,CAAC;IACjC;IACAoB,OAAO,CAACD,KAAK,CAAC,2CAA2C,EAAEA,KAAK,CAAC;IACjE,OAAO,KAAK;EACd;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASW,gBAAgBA,CAACtB,IAAU,EAAEX,QAAgB,EAAW;EACtE,IAAI,OAAOC,QAAQ,KAAK,WAAW,IAAI,OAAOa,GAAG,KAAK,WAAW,EAAE;IACjE,OAAO,KAAK;EACd;EACA,IAAIX,GAAkB,GAAG,IAAI;EAC7B,IAAIC,IAA8B,GAAG,IAAI;EACzC,IAAI;IACFD,GAAG,GAAGW,GAAG,CAACC,eAAe,CAACJ,IAAI,CAAC;IAC/BP,IAAI,GAAGH,QAAQ,CAACe,aAAa,CAAC,GAAG,CAAC;IAClCZ,IAAI,CAACa,IAAI,GAAGd,GAAG;IACfC,IAAI,CAACc,QAAQ,GAAGlB,QAAQ;IACxBC,QAAQ,CAACkB,IAAI,CAACC,WAAW,CAAChB,IAAI,CAAC;IAC/BA,IAAI,CAACiB,KAAK,CAAC,CAAC;IACZ,OAAO,IAAI;EACb,CAAC,CAAC,OAAOC,KAAK,EAAE;IACd;IACAC,OAAO,CAACD,KAAK,CAAC,wCAAwC,EAAEA,KAAK,CAAC;IAC9D,OAAO,KAAK;EACd,CAAC,SAAS;IACR,IAAIlB,IAAI,IAAIA,IAAI,CAACoB,UAAU,EAAEpB,IAAI,CAACoB,UAAU,CAACC,WAAW,CAACrB,IAAI,CAAC;IAC9D,IAAID,GAAG,EAAEW,GAAG,CAACY,eAAe,CAACvB,GAAG,CAAC;EACnC;AACF;AAEA,IAAM+B,eAAe,GAAG;EACtBxC,WAAW,EAAXA,WAAW;EACXI,kBAAkB,EAAlBA,kBAAkB;EAClB8B,mBAAmB,EAAnBA,mBAAmB;EACnBK,gBAAgB,EAAhBA;AACF,CAAC;AACD,eAAeC,eAAe","ignoreList":[]}
+{"version":3,"file":"fileDownload.js","names":["MIME_TYPES","Object","freeze","pdf","doc","docx","xls","xlsx","csv","txt","png","jpg","jpeg","gif","bmp","webp","svg","ico","tiff","tif","getMimeType","extension","toLowerCase","downloadBase64File","base64Data","fileName","document","atob","url","link","binary","bytes","Uint8Array","length","i","charCodeAt","blob","Blob","type","URL","createObjectURL","createElement","href","download","body","appendChild","click","error","console","parentNode","removeChild","revokeObjectURL","PREVIEW_REVOKE_DELAY_MS","openBase64FileInTab","window","open","revokeTarget","setTimeout","downloadBlobFile","fileDownloadApi"],"sources":["../../../../src/lib/v2/utils/fileDownload.ts"],"sourcesContent":["/**\r\n * File download utilities — Portnet UI v2\r\n *\r\n * Turns a base64 payload from the API into a browser download. Every GU\r\n * module that lets a user retrieve an attached document needs this, and\r\n * before this file each one carried its own copy of the same\r\n * atob → Uint8Array → Blob → anchor sequence plus its own MIME map.\r\n *\r\n * DEPENDENCY-FREE ON PURPOSE. Multi-file (zip) bundling is deliberately NOT\r\n * here: it needs a zip library, and making that a hard dependency of the\r\n * design system would put it in every module's bundle against the\r\n * R-8.2 budget (180 KB gz initial JS) for a capability only\r\n * document-heavy modules use. If it is promoted later it belongs behind an\r\n * OPTIONAL peer dependency, the way PdfViewer sits behind pdfjs-dist and\r\n * @react-pdf-viewer/* in peerDependenciesMeta.\r\n *\r\n * Charter ref: §09.3 — the caller owns the user-facing message; these\r\n * return a boolean rather than throwing so a failure surfaces as copy\r\n * (R-4.4) instead of an unhandled rejection.\r\n */\r\n\r\n/**\r\n * Extension → MIME type for the formats the platform accepts as\r\n * attachments.\r\n *\r\n * Anything unmapped resolves to application/octet-stream, which makes the\r\n * browser download the file rather than attempt to render it — the safe\r\n * default for an unknown payload.\r\n */\r\nconst MIME_TYPES: Readonly<Record<string, string>> = Object.freeze({\r\n  // Documents\r\n  pdf: \"application/pdf\",\r\n  doc: \"application/msword\",\r\n  docx: \"application/vnd.openxmlformats-officedocument.wordprocessingml.document\",\r\n  xls: \"application/vnd.ms-excel\",\r\n  xlsx: \"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet\",\r\n  csv: \"text/csv\",\r\n  txt: \"text/plain\",\r\n\r\n  // Images\r\n  png: \"image/png\",\r\n  jpg: \"image/jpeg\",\r\n  jpeg: \"image/jpeg\",\r\n  gif: \"image/gif\",\r\n  bmp: \"image/bmp\",\r\n  webp: \"image/webp\",\r\n  svg: \"image/svg+xml\",\r\n  ico: \"image/x-icon\",\r\n  tiff: \"image/tiff\",\r\n  tif: \"image/tiff\",\r\n});\r\n\r\n/**\r\n * Resolve the MIME type for a file extension.\r\n *\r\n * @param extension - Extension WITHOUT a leading dot. Case-insensitive.\r\n * @returns The mapped MIME type, or \"application/octet-stream\".\r\n */\r\nexport function getMimeType(extension: string): string {\r\n  return MIME_TYPES[extension.toLowerCase()] ?? \"application/octet-stream\";\r\n}\r\n\r\n/**\r\n * Decode a base64 payload and hand it to the browser as a download.\r\n *\r\n * @param base64Data - Base64 WITHOUT a `data:` prefix, as the getFile /\r\n *                     downloadFile endpoints return it.\r\n * @param fileName   - Filename offered to the user. The extension is NOT\r\n *                     appended automatically; pass it already suffixed if\r\n *                     you want one.\r\n * @param extension  - Used only to resolve the Blob's MIME type.\r\n * @returns true on success; false if decoding failed or there is no DOM.\r\n *\r\n * @example\r\n * const ok = downloadBase64File(body.content, body.fileName, body.extension);\r\n * if (!ok) toast(\"Le téléchargement a échoué. Veuillez réessayer.\", \"error\");\r\n */\r\nexport function downloadBase64File(\r\n  base64Data: string,\r\n  fileName: string,\r\n  extension: string,\r\n): boolean {\r\n  // Guarded rather than assumed: this runs in jsdom under test and could be\r\n  // reached during SSR. The host modules' copies of this threw in both.\r\n  if (typeof document === \"undefined\" || typeof atob === \"undefined\") {\r\n    return false;\r\n  }\r\n\r\n  let url: string | null = null;\r\n  let link: HTMLAnchorElement | null = null;\r\n\r\n  try {\r\n    const binary = atob(base64Data);\r\n    const bytes = new Uint8Array(binary.length);\r\n    for (let i = 0; i < binary.length; i += 1) {\r\n      bytes[i] = binary.charCodeAt(i);\r\n    }\r\n\r\n    const blob = new Blob([bytes], { type: getMimeType(extension) });\r\n\r\n    url = URL.createObjectURL(blob);\r\n    link = document.createElement(\"a\");\r\n    link.href = url;\r\n    link.download = fileName;\r\n    document.body.appendChild(link);\r\n    link.click();\r\n    return true;\r\n  } catch (error) {\r\n    // eslint-disable-next-line no-console\r\n    console.error(\"[@portnet/ui] downloadBase64File failed:\", error);\r\n    return false;\r\n  } finally {\r\n    // finally, not the happy path: the host copies leaked both the anchor\r\n    // and the object URL whenever click() or appendChild threw.\r\n    if (link && link.parentNode) link.parentNode.removeChild(link);\r\n    if (url) URL.revokeObjectURL(url);\r\n  }\r\n}\r\n\r\n/**\r\n * Delay before revoking a preview's object URL.\r\n *\r\n * It CANNOT be revoked synchronously: the newly opened tab still has to fetch\r\n * the blob. There is no portable \"that tab finished loading\" signal for a blob\r\n * URL, so a timeout is the only cross-browser option. Deliberately generous:\r\n * revoking early shows the user a blank tab, while being late costs one\r\n * short-lived blob.\r\n */\r\nconst PREVIEW_REVOKE_DELAY_MS = 60_000;\r\n\r\n/**\r\n * Decode a base64 payload and open it in a new tab for preview.\r\n *\r\n * Companion to downloadBase64File: every document-bearing GU module offers a\r\n * « Visualiser » action next to « Télécharger », and each carried its own copy of\r\n * this atob -> Uint8Array -> Blob -> window.open sequence. NONE of those copies\r\n * revoked the object URL, so every preview leaked a blob for the lifetime of the\r\n * page.\r\n *\r\n * RETURN VALUE — read this before relying on it. `window.open` returns null BY\r\n * SPECIFICATION when \"noopener\" is set, so a blocked popup is indistinguishable\r\n * from a successful one. `true` therefore means \"decoded and the open call was\r\n * issued without throwing\" — NOT \"the tab is on screen\". Do not use it to claim\r\n * success to the user; use `false` to report a genuine failure (bad payload, no\r\n * DOM). Dropping \"noopener\" would make blocked-popup detection possible but\r\n * would hand the opened tab a window.opener reference — not a trade worth making\r\n * for a diagnostic.\r\n *\r\n * @param base64Data - Base64 WITHOUT a `data:` prefix.\r\n * @param extension  - Resolves the Blob MIME type. Required for inline\r\n *                     rendering: with the wrong type the browser downloads the\r\n *                     file instead of displaying it.\r\n * @returns false if there is no DOM or the payload could not be decoded.\r\n */\r\nexport function openBase64FileInTab(base64Data: string, extension: string): boolean {\r\n  if (typeof window === \"undefined\" || typeof atob === \"undefined\") {\r\n    return false;\r\n  }\r\n  let url: string | null = null;\r\n  try {\r\n    const binary = atob(base64Data);\r\n    const bytes = new Uint8Array(binary.length);\r\n    for (let i = 0; i < binary.length; i += 1) {\r\n      bytes[i] = binary.charCodeAt(i);\r\n    }\r\n    const blob = new Blob([bytes], { type: getMimeType(extension) });\r\n    url = URL.createObjectURL(blob);\r\n    window.open(url, \"_blank\", \"noopener,noreferrer\");\r\n    const revokeTarget = url;\r\n    window.setTimeout(() => URL.revokeObjectURL(revokeTarget), PREVIEW_REVOKE_DELAY_MS);\r\n    return true;\r\n  } catch (error) {\r\n    // Revoke straight away here: nothing consumed the URL on this path.\r\n    if (url) URL.revokeObjectURL(url);\r\n    // eslint-disable-next-line no-console\r\n    console.error(\"[@portnet/ui] openBase64FileInTab failed:\", error);\r\n    return false;\r\n  }\r\n}\r\n\r\n/**\r\n * Hand an already-materialised Blob to the browser as a download.\r\n *\r\n * Companion to downloadBase64File for endpoints that return a binary body\r\n * directly (axios `responseType: \"blob\"`) instead of base64 — Excel exports,\r\n * server-generated PDFs. Host modules built the anchor by hand for this too,\r\n * and every copy found so far never revoked the object URL.\r\n *\r\n * Revoked synchronously in `finally`, unlike openBase64FileInTab: a download is\r\n * snapshotted by the browser at click() time, so nothing needs the URL\r\n * afterwards — only a preview in another tab does.\r\n *\r\n * @param blob     - The payload. Its own `type` is used as-is; no MIME lookup,\r\n *                   the server already declared it.\r\n * @param fileName - Filename offered to the user, extension included.\r\n * @returns true on success; false if there is no DOM.\r\n */\r\nexport function downloadBlobFile(blob: Blob, fileName: string): boolean {\r\n  if (typeof document === \"undefined\" || typeof URL === \"undefined\") {\r\n    return false;\r\n  }\r\n  let url: string | null = null;\r\n  let link: HTMLAnchorElement | null = null;\r\n  try {\r\n    url = URL.createObjectURL(blob);\r\n    link = document.createElement(\"a\");\r\n    link.href = url;\r\n    link.download = fileName;\r\n    document.body.appendChild(link);\r\n    link.click();\r\n    return true;\r\n  } catch (error) {\r\n    // eslint-disable-next-line no-console\r\n    console.error(\"[@portnet/ui] downloadBlobFile failed:\", error);\r\n    return false;\r\n  } finally {\r\n    if (link && link.parentNode) link.parentNode.removeChild(link);\r\n    if (url) URL.revokeObjectURL(url);\r\n  }\r\n}\r\n\r\nconst fileDownloadApi = {\r\n  getMimeType,\r\n  downloadBase64File,\r\n  openBase64FileInTab,\r\n  downloadBlobFile,\r\n};\r\nexport default fileDownloadApi;\r\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMA,UAA4C,GAAGC,MAAM,CAACC,MAAM,CAAC;EACjE;EACAC,GAAG,EAAE,iBAAiB;EACtBC,GAAG,EAAE,oBAAoB;EACzBC,IAAI,EAAE,yEAAyE;EAC/EC,GAAG,EAAE,0BAA0B;EAC/BC,IAAI,EAAE,mEAAmE;EACzEC,GAAG,EAAE,UAAU;EACfC,GAAG,EAAE,YAAY;EAEjB;EACAC,GAAG,EAAE,WAAW;EAChBC,GAAG,EAAE,YAAY;EACjBC,IAAI,EAAE,YAAY;EAClBC,GAAG,EAAE,WAAW;EAChBC,GAAG,EAAE,WAAW;EAChBC,IAAI,EAAE,YAAY;EAClBC,GAAG,EAAE,eAAe;EACpBC,GAAG,EAAE,cAAc;EACnBC,IAAI,EAAE,YAAY;EAClBC,GAAG,EAAE;AACP,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,WAAWA,CAACC,SAAiB,EAAU;EACrD,OAAOrB,UAAU,CAACqB,SAAS,CAACC,WAAW,CAAC,CAAC,CAAC,IAAI,0BAA0B;AAC1E;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,kBAAkBA,CAChCC,UAAkB,EAClBC,QAAgB,EAChBJ,SAAiB,EACR;EACT;EACA;EACA,IAAI,OAAOK,QAAQ,KAAK,WAAW,IAAI,OAAOC,IAAI,KAAK,WAAW,EAAE;IAClE,OAAO,KAAK;EACd;EAEA,IAAIC,GAAkB,GAAG,IAAI;EAC7B,IAAIC,IAA8B,GAAG,IAAI;EAEzC,IAAI;IACF,MAAMC,MAAM,GAAGH,IAAI,CAACH,UAAU,CAAC;IAC/B,MAAMO,KAAK,GAAG,IAAIC,UAAU,CAACF,MAAM,CAACG,MAAM,CAAC;IAC3C,KAAK,IAAIC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGJ,MAAM,CAACG,MAAM,EAAEC,CAAC,IAAI,CAAC,EAAE;MACzCH,KAAK,CAACG,CAAC,CAAC,GAAGJ,MAAM,CAACK,UAAU,CAACD,CAAC,CAAC;IACjC;IAEA,MAAME,IAAI,GAAG,IAAIC,IAAI,CAAC,CAACN,KAAK,CAAC,EAAE;MAAEO,IAAI,EAAElB,WAAW,CAACC,SAAS;IAAE,CAAC,CAAC;IAEhEO,GAAG,GAAGW,GAAG,CAACC,eAAe,CAACJ,IAAI,CAAC;IAC/BP,IAAI,GAAGH,QAAQ,CAACe,aAAa,CAAC,GAAG,CAAC;IAClCZ,IAAI,CAACa,IAAI,GAAGd,GAAG;IACfC,IAAI,CAACc,QAAQ,GAAGlB,QAAQ;IACxBC,QAAQ,CAACkB,IAAI,CAACC,WAAW,CAAChB,IAAI,CAAC;IAC/BA,IAAI,CAACiB,KAAK,CAAC,CAAC;IACZ,OAAO,IAAI;EACb,CAAC,CAAC,OAAOC,KAAK,EAAE;IACd;IACAC,OAAO,CAACD,KAAK,CAAC,0CAA0C,EAAEA,KAAK,CAAC;IAChE,OAAO,KAAK;EACd,CAAC,SAAS;IACR;IACA;IACA,IAAIlB,IAAI,IAAIA,IAAI,CAACoB,UAAU,EAAEpB,IAAI,CAACoB,UAAU,CAACC,WAAW,CAACrB,IAAI,CAAC;IAC9D,IAAID,GAAG,EAAEW,GAAG,CAACY,eAAe,CAACvB,GAAG,CAAC;EACnC;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMwB,uBAAuB,GAAG,MAAM;;AAEtC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,mBAAmBA,CAAC7B,UAAkB,EAAEH,SAAiB,EAAW;EAClF,IAAI,OAAOiC,MAAM,KAAK,WAAW,IAAI,OAAO3B,IAAI,KAAK,WAAW,EAAE;IAChE,OAAO,KAAK;EACd;EACA,IAAIC,GAAkB,GAAG,IAAI;EAC7B,IAAI;IACF,MAAME,MAAM,GAAGH,IAAI,CAACH,UAAU,CAAC;IAC/B,MAAMO,KAAK,GAAG,IAAIC,UAAU,CAACF,MAAM,CAACG,MAAM,CAAC;IAC3C,KAAK,IAAIC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGJ,MAAM,CAACG,MAAM,EAAEC,CAAC,IAAI,CAAC,EAAE;MACzCH,KAAK,CAACG,CAAC,CAAC,GAAGJ,MAAM,CAACK,UAAU,CAACD,CAAC,CAAC;IACjC;IACA,MAAME,IAAI,GAAG,IAAIC,IAAI,CAAC,CAACN,KAAK,CAAC,EAAE;MAAEO,IAAI,EAAElB,WAAW,CAACC,SAAS;IAAE,CAAC,CAAC;IAChEO,GAAG,GAAGW,GAAG,CAACC,eAAe,CAACJ,IAAI,CAAC;IAC/BkB,MAAM,CAACC,IAAI,CAAC3B,GAAG,EAAE,QAAQ,EAAE,qBAAqB,CAAC;IACjD,MAAM4B,YAAY,GAAG5B,GAAG;IACxB0B,MAAM,CAACG,UAAU,CAAC,MAAMlB,GAAG,CAACY,eAAe,CAACK,YAAY,CAAC,EAAEJ,uBAAuB,CAAC;IACnF,OAAO,IAAI;EACb,CAAC,CAAC,OAAOL,KAAK,EAAE;IACd;IACA,IAAInB,GAAG,EAAEW,GAAG,CAACY,eAAe,CAACvB,GAAG,CAAC;IACjC;IACAoB,OAAO,CAACD,KAAK,CAAC,2CAA2C,EAAEA,KAAK,CAAC;IACjE,OAAO,KAAK;EACd;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASW,gBAAgBA,CAACtB,IAAU,EAAEX,QAAgB,EAAW;EACtE,IAAI,OAAOC,QAAQ,KAAK,WAAW,IAAI,OAAOa,GAAG,KAAK,WAAW,EAAE;IACjE,OAAO,KAAK;EACd;EACA,IAAIX,GAAkB,GAAG,IAAI;EAC7B,IAAIC,IAA8B,GAAG,IAAI;EACzC,IAAI;IACFD,GAAG,GAAGW,GAAG,CAACC,eAAe,CAACJ,IAAI,CAAC;IAC/BP,IAAI,GAAGH,QAAQ,CAACe,aAAa,CAAC,GAAG,CAAC;IAClCZ,IAAI,CAACa,IAAI,GAAGd,GAAG;IACfC,IAAI,CAACc,QAAQ,GAAGlB,QAAQ;IACxBC,QAAQ,CAACkB,IAAI,CAACC,WAAW,CAAChB,IAAI,CAAC;IAC/BA,IAAI,CAACiB,KAAK,CAAC,CAAC;IACZ,OAAO,IAAI;EACb,CAAC,CAAC,OAAOC,KAAK,EAAE;IACd;IACAC,OAAO,CAACD,KAAK,CAAC,wCAAwC,EAAEA,KAAK,CAAC;IAC9D,OAAO,KAAK;EACd,CAAC,SAAS;IACR,IAAIlB,IAAI,IAAIA,IAAI,CAACoB,UAAU,EAAEpB,IAAI,CAACoB,UAAU,CAACC,WAAW,CAACrB,IAAI,CAAC;IAC9D,IAAID,GAAG,EAAEW,GAAG,CAACY,eAAe,CAACvB,GAAG,CAAC;EACnC;AACF;AAEA,MAAM+B,eAAe,GAAG;EACtBvC,WAAW;EACXG,kBAAkB;EAClB8B,mBAAmB;EACnBK;AACF,CAAC;AACD,eAAeC,eAAe","ignoreList":[]}

package/dist/esm/v2/utils/fileValidation.js

@@ -0,0 +1,209 @@
+/**
+ * fileValidation — is this file allowed to be uploaded?
+ *
+ *   const POLICY = { extensions: ["pdf", "png", "jpg", "jpeg", "doc", "docx"] };
+ *
+ *   const rejection = getFileRejection(file, POLICY);
+ *   if (rejection) toast(rejection.message, "error");
+ *
+ *   <Dropzone accept={toAcceptAttribute(POLICY.extensions)} … />
+ *
+ * ─────────────────────────────────────────────────────────────────────────────
+ * WHY THIS BELONGS IN THE LIBRARY (capability gap G-52)
+ *
+ * `Dropzone` takes an `accept` attribute and reports `DropzoneRejection`, but it
+ * validates nothing: the browser's `accept` is a FILE-PICKER FILTER, not a
+ * control. It is trivially bypassed — drag and drop ignores it, and so does
+ * "All files" in the picker on most platforms. So the library asked every host
+ * to decide, itself, whether a dropped file is acceptable, and every host wrote:
+ *
+ *   - an extension allow-list (business policy — rightly theirs), AND
+ *   - a deny-list of executables and scripts, AND
+ *   - an extension↔MIME cross-check with its browser tolerances.
+ *
+ * The last two are NOT business policy. They are one security decision, and a
+ * security decision copied into every module is a security decision that WILL
+ * drift: the day a file type has to be added to the deny-list, nobody can say
+ * which of the fifteen GU modules received it. Worse, divergence here is
+ * SILENT — a module missing an entry looks exactly like a module that has it,
+ * until something gets uploaded.
+ *
+ * So the split this file draws: the HOST owns which extensions its business
+ * accepts; the LIBRARY owns the executable deny-list and the MIME cross-check.
+ *
+ * Raised from `autorisation-admis-pour-conforme-fe` (Area 5), which carried a
+ * 21-entry executable deny-list and a six-extension MIME table locally.
+ *
+ * NOT A SUBSTITUTE FOR SERVER-SIDE VALIDATION, and this must stay written down:
+ * everything here runs in a browser the user controls. Its purpose is to give a
+ * CLEAR, IMMEDIATE reason (R-4.1, R-4.4) instead of a server rejection after a
+ * full upload. The back-end remains the authority.
+ * ─────────────────────────────────────────────────────────────────────────────
+ */
+
+/**
+ * Executables, scripts and installers — refused whatever the host's policy says.
+ *
+ * Checked FIRST, and the order carries meaning: a `.exe` gets a message naming
+ * it as a dangerous file, not a vague "unsupported type", because those are not
+ * the same information for the person at the screen.
+ *
+ * Windows-centric because GU workstations are: PE binaries, the cmd/PowerShell
+ * script families, installer packages, and the HTML-application and
+ * control-panel shims that are executable despite innocuous extensions.
+ */
+const EXECUTABLE_EXTENSIONS = new Set(["exe", "dll", "bat", "cmd", "com", "pif", "scr", "msi", "msu", "msp", "vbs", "vbe", "jse", "wsf", "wsh", "ps1", "psm1", "psc1", "cpl", "msc", "hta"]);
+
+/**
+ * Accepted MIME types per extension.
+ *
+ * DELIBERATELY NOT `getMimeType` from ./fileDownload, though both map
+ * extensions to MIME types. That one answers "what type should I stamp on this
+ * Blob" — ONE canonical value. This one answers "what types may a browser
+ * plausibly report for this extension" — a SET, including variants no canonical
+ * table would contain (`image/jpg` is not a registered type, and browsers send
+ * it anyway). Collapsing the two would reject valid files.
+ */
+const MIME_BY_EXTENSION = Object.freeze({
+  pdf: ["application/pdf"],
+  png: ["image/png"],
+  jpg: ["image/jpeg", "image/jpg"],
+  jpeg: ["image/jpeg", "image/jpg"],
+  gif: ["image/gif"],
+  webp: ["image/webp"],
+  tif: ["image/tiff"],
+  tiff: ["image/tiff"],
+  txt: ["text/plain"],
+  csv: ["text/csv", "application/csv", "text/plain"],
+  doc: ["application/msword"],
+  docx: ["application/vnd.openxmlformats-officedocument.wordprocessingml.document"],
+  xls: ["application/vnd.ms-excel"],
+  xlsx: ["application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"],
+  ppt: ["application/vnd.ms-powerpoint"],
+  pptx: ["application/vnd.openxmlformats-officedocument.presentationml.presentation"]
+});
+
+/**
+ * Extensions whose reported MIME type cannot be trusted, so
+ * `application/octet-stream` is tolerated for them.
+ *
+ * WITHOUT THIS TOLERANCE A LEGITIMATE `.docx` IS REFUSED on some machines —
+ * Office documents are frequently reported as `application/octet-stream`
+ * depending on browser and OS, and the refusal would be INTERMITTENT, which is
+ * the hardest kind to diagnose from a support ticket. The extension has already
+ * been checked against the host's allow-list at that point, so the tolerance
+ * does not widen what is accepted, only what is believed.
+ */
+const UNRELIABLE_MIME_EXTENSIONS = new Set(["doc", "docx", "xls", "xlsx", "ppt", "pptx", "csv"]);
+
+/** Why a file was refused. `reason` is for branching and logs, not for display. */
+
+const DEFAULT_EXECUTABLE_MESSAGE = "Les fichiers exécutables, scripts et installeurs ne sont pas autorisés.";
+
+/** Lowercased extension of a file name, or `""` when there is none. */
+const extensionOf = fileName => {
+  if (!fileName) return "";
+  const parts = fileName.split(".");
+  /* A name with no dot has no extension: "rapport" must not be read as having
+     extension "rapport", which a bare `pop()` would do. */
+  if (parts.length < 2) return "";
+  return (parts[parts.length - 1] ?? "").toLowerCase();
+};
+
+/**
+ * Human list of the accepted types — "PDF, PNG, JPG, JPEG, DOC, DOCX."
+ *
+ * Order is the host's: the list is read by a person, and a host lists its most
+ * common format first for a reason. Sorting it here would silently reorder
+ * copy the host wrote deliberately.
+ */
+export function describeAcceptedTypes(extensions) {
+  return `${extensions.map(ext => ext.toUpperCase()).join(", ")}.`;
+}
+
+/**
+ * The `accept` attribute for an input or `Dropzone` — ".pdf,.png,.jpg".
+ *
+ * A picker filter, never a control: see the note on server-side validation in
+ * the file header.
+ */
+export function toAcceptAttribute(extensions) {
+  return extensions.map(ext => `.${ext.toLowerCase()}`).join(",");
+}
+
+/**
+ * Is this an executable, a script or an installer?
+ *
+ * Exported on its own because a host may want to refuse those EARLIER than its
+ * own policy check — on a bulk drop, for instance, where one dangerous file
+ * should stop the whole batch rather than be listed among type mismatches.
+ *
+ * Permissive parameter type on purpose: callers routinely pass an item pulled
+ * out of a `FileList` without having checked it.
+ */
+export function isForbiddenExecutable(file) {
+  const ext = extensionOf(file?.name);
+  return ext !== "" && EXECUTABLE_EXTENSIONS.has(ext);
+}
+
+/** Does the file satisfy `policy` (and the library's own deny-list)? */
+export function isAcceptedFile(file, policy) {
+  return getFileRejection(file, policy) === null;
+}
+
+/**
+ * Why this file cannot be uploaded, or `null` when it can.
+ *
+ * Order of checks is load-bearing:
+ *   1. executable / script / installer — named as such;
+ *   2. extension against the host's allow-list;
+ *   3. reported MIME type against the extension.
+ *
+ * MIME RULES, both deliberate: an EMPTY type is accepted (some browsers report
+ * none, and the extension has just been checked), and `application/octet-stream`
+ * is accepted for the extensions listed in `UNRELIABLE_MIME_EXTENSIONS`. An
+ * extension with no entry in the MIME table is accepted on its extension alone
+ * — the table is a cross-check, not a second allow-list, and a host adding a
+ * format to its policy must not have it refused by a table it cannot see.
+ */
+export function getFileRejection(file, policy) {
+  const executableMessage = policy.labels?.executable ?? DEFAULT_EXECUTABLE_MESSAGE;
+  const typeMessage = policy.labels?.type ?? `Types autorisés : ${describeAcceptedTypes(policy.extensions)}`;
+  if (isForbiddenExecutable(file)) {
+    return {
+      reason: "executable",
+      message: executableMessage
+    };
+  }
+  const ext = extensionOf(file?.name);
+  if (ext === "") return {
+    reason: "extension",
+    message: typeMessage
+  };
+  const accepted = policy.extensions.some(allowed => allowed.toLowerCase() === ext);
+  if (!accepted) return {
+    reason: "extension",
+    message: typeMessage
+  };
+  const mime = (file?.type ?? "").trim().toLowerCase();
+  if (mime === "") return null;
+  if (mime === "application/octet-stream" && UNRELIABLE_MIME_EXTENSIONS.has(ext)) {
+    return null;
+  }
+  const expected = MIME_BY_EXTENSION[ext];
+  if (expected === undefined) return null;
+  if (expected.includes(mime)) return null;
+  return {
+    reason: "mime",
+    message: typeMessage
+  };
+}
+const fileValidationApi = {
+  isForbiddenExecutable,
+  isAcceptedFile,
+  getFileRejection,
+  describeAcceptedTypes,
+  toAcceptAttribute
+};
+export default fileValidationApi;
+//# sourceMappingURL=fileValidation.js.map

package/dist/esm/v2/utils/fileValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileValidation.js","names":["EXECUTABLE_EXTENSIONS","Set","MIME_BY_EXTENSION","Object","freeze","pdf","png","jpg","jpeg","gif","webp","tif","tiff","txt","csv","doc","docx","xls","xlsx","ppt","pptx","UNRELIABLE_MIME_EXTENSIONS","DEFAULT_EXECUTABLE_MESSAGE","extensionOf","fileName","parts","split","length","toLowerCase","describeAcceptedTypes","extensions","map","ext","toUpperCase","join","toAcceptAttribute","isForbiddenExecutable","file","name","has","isAcceptedFile","policy","getFileRejection","executableMessage","labels","executable","typeMessage","type","reason","message","accepted","some","allowed","mime","trim","expected","undefined","includes","fileValidationApi"],"sources":["../../../../src/lib/v2/utils/fileValidation.ts"],"sourcesContent":["/**\r\n * fileValidation — is this file allowed to be uploaded?\r\n *\r\n *   const POLICY = { extensions: [\"pdf\", \"png\", \"jpg\", \"jpeg\", \"doc\", \"docx\"] };\r\n *\r\n *   const rejection = getFileRejection(file, POLICY);\r\n *   if (rejection) toast(rejection.message, \"error\");\r\n *\r\n *   <Dropzone accept={toAcceptAttribute(POLICY.extensions)} … />\r\n *\r\n * ─────────────────────────────────────────────────────────────────────────────\r\n * WHY THIS BELONGS IN THE LIBRARY (capability gap G-52)\r\n *\r\n * `Dropzone` takes an `accept` attribute and reports `DropzoneRejection`, but it\r\n * validates nothing: the browser's `accept` is a FILE-PICKER FILTER, not a\r\n * control. It is trivially bypassed — drag and drop ignores it, and so does\r\n * \"All files\" in the picker on most platforms. So the library asked every host\r\n * to decide, itself, whether a dropped file is acceptable, and every host wrote:\r\n *\r\n *   - an extension allow-list (business policy — rightly theirs), AND\r\n *   - a deny-list of executables and scripts, AND\r\n *   - an extension↔MIME cross-check with its browser tolerances.\r\n *\r\n * The last two are NOT business policy. They are one security decision, and a\r\n * security decision copied into every module is a security decision that WILL\r\n * drift: the day a file type has to be added to the deny-list, nobody can say\r\n * which of the fifteen GU modules received it. Worse, divergence here is\r\n * SILENT — a module missing an entry looks exactly like a module that has it,\r\n * until something gets uploaded.\r\n *\r\n * So the split this file draws: the HOST owns which extensions its business\r\n * accepts; the LIBRARY owns the executable deny-list and the MIME cross-check.\r\n *\r\n * Raised from `autorisation-admis-pour-conforme-fe` (Area 5), which carried a\r\n * 21-entry executable deny-list and a six-extension MIME table locally.\r\n *\r\n * NOT A SUBSTITUTE FOR SERVER-SIDE VALIDATION, and this must stay written down:\r\n * everything here runs in a browser the user controls. Its purpose is to give a\r\n * CLEAR, IMMEDIATE reason (R-4.1, R-4.4) instead of a server rejection after a\r\n * full upload. The back-end remains the authority.\r\n * ─────────────────────────────────────────────────────────────────────────────\r\n */\r\n\r\n/**\r\n * Executables, scripts and installers — refused whatever the host's policy says.\r\n *\r\n * Checked FIRST, and the order carries meaning: a `.exe` gets a message naming\r\n * it as a dangerous file, not a vague \"unsupported type\", because those are not\r\n * the same information for the person at the screen.\r\n *\r\n * Windows-centric because GU workstations are: PE binaries, the cmd/PowerShell\r\n * script families, installer packages, and the HTML-application and\r\n * control-panel shims that are executable despite innocuous extensions.\r\n */\r\nconst EXECUTABLE_EXTENSIONS: ReadonlySet<string> = new Set([\r\n  \"exe\", \"dll\", \"bat\", \"cmd\", \"com\", \"pif\", \"scr\",\r\n  \"msi\", \"msu\", \"msp\",\r\n  \"vbs\", \"vbe\", \"jse\", \"wsf\", \"wsh\",\r\n  \"ps1\", \"psm1\", \"psc1\",\r\n  \"cpl\", \"msc\", \"hta\",\r\n]);\r\n\r\n/**\r\n * Accepted MIME types per extension.\r\n *\r\n * DELIBERATELY NOT `getMimeType` from ./fileDownload, though both map\r\n * extensions to MIME types. That one answers \"what type should I stamp on this\r\n * Blob\" — ONE canonical value. This one answers \"what types may a browser\r\n * plausibly report for this extension\" — a SET, including variants no canonical\r\n * table would contain (`image/jpg` is not a registered type, and browsers send\r\n * it anyway). Collapsing the two would reject valid files.\r\n */\r\nconst MIME_BY_EXTENSION: Readonly<Record<string, readonly string[]>> =\r\n  Object.freeze({\r\n    pdf: [\"application/pdf\"],\r\n    png: [\"image/png\"],\r\n    jpg: [\"image/jpeg\", \"image/jpg\"],\r\n    jpeg: [\"image/jpeg\", \"image/jpg\"],\r\n    gif: [\"image/gif\"],\r\n    webp: [\"image/webp\"],\r\n    tif: [\"image/tiff\"],\r\n    tiff: [\"image/tiff\"],\r\n    txt: [\"text/plain\"],\r\n    csv: [\"text/csv\", \"application/csv\", \"text/plain\"],\r\n    doc: [\"application/msword\"],\r\n    docx: [\r\n      \"application/vnd.openxmlformats-officedocument.wordprocessingml.document\",\r\n    ],\r\n    xls: [\"application/vnd.ms-excel\"],\r\n    xlsx: [\r\n      \"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet\",\r\n    ],\r\n    ppt: [\"application/vnd.ms-powerpoint\"],\r\n    pptx: [\r\n      \"application/vnd.openxmlformats-officedocument.presentationml.presentation\",\r\n    ],\r\n  });\r\n\r\n/**\r\n * Extensions whose reported MIME type cannot be trusted, so\r\n * `application/octet-stream` is tolerated for them.\r\n *\r\n * WITHOUT THIS TOLERANCE A LEGITIMATE `.docx` IS REFUSED on some machines —\r\n * Office documents are frequently reported as `application/octet-stream`\r\n * depending on browser and OS, and the refusal would be INTERMITTENT, which is\r\n * the hardest kind to diagnose from a support ticket. The extension has already\r\n * been checked against the host's allow-list at that point, so the tolerance\r\n * does not widen what is accepted, only what is believed.\r\n */\r\nconst UNRELIABLE_MIME_EXTENSIONS: ReadonlySet<string> = new Set([\r\n  \"doc\", \"docx\", \"xls\", \"xlsx\", \"ppt\", \"pptx\", \"csv\",\r\n]);\r\n\r\n/** Why a file was refused. `reason` is for branching and logs, not for display. */\r\nexport type FileRejectionReason = \"executable\" | \"extension\" | \"mime\";\r\n\r\nexport interface FileRejection {\r\n  reason: FileRejectionReason;\r\n  /** Ready to render (French, Charter §09.3 — what, and what is accepted). */\r\n  message: string;\r\n}\r\n\r\nexport interface FileAcceptPolicy {\r\n  /**\r\n   * Extensions the HOST's business accepts, without a leading dot,\r\n   * case-insensitive. This is the only part of the decision that belongs to the\r\n   * host — an empty list accepts nothing, which is a programming error rather\r\n   * than a policy, so it is treated as \"refuse everything\" and not as \"allow\".\r\n   */\r\n  extensions: readonly string[];\r\n  /** Overrides for the default messages. Keep them in French, verb + object. */\r\n  labels?:\r\n    | {\r\n        executable?: string | undefined;\r\n        type?: string | undefined;\r\n      }\r\n    | undefined;\r\n}\r\n\r\nconst DEFAULT_EXECUTABLE_MESSAGE =\r\n  \"Les fichiers exécutables, scripts et installeurs ne sont pas autorisés.\";\r\n\r\n/** Lowercased extension of a file name, or `\"\"` when there is none. */\r\nconst extensionOf = (fileName: string | undefined): string => {\r\n  if (!fileName) return \"\";\r\n  const parts = fileName.split(\".\");\r\n  /* A name with no dot has no extension: \"rapport\" must not be read as having\r\n     extension \"rapport\", which a bare `pop()` would do. */\r\n  if (parts.length < 2) return \"\";\r\n  return (parts[parts.length - 1] ?? \"\").toLowerCase();\r\n};\r\n\r\n/**\r\n * Human list of the accepted types — \"PDF, PNG, JPG, JPEG, DOC, DOCX.\"\r\n *\r\n * Order is the host's: the list is read by a person, and a host lists its most\r\n * common format first for a reason. Sorting it here would silently reorder\r\n * copy the host wrote deliberately.\r\n */\r\nexport function describeAcceptedTypes(\r\n  extensions: readonly string[]\r\n): string {\r\n  return `${extensions.map((ext) => ext.toUpperCase()).join(\", \")}.`;\r\n}\r\n\r\n/**\r\n * The `accept` attribute for an input or `Dropzone` — \".pdf,.png,.jpg\".\r\n *\r\n * A picker filter, never a control: see the note on server-side validation in\r\n * the file header.\r\n */\r\nexport function toAcceptAttribute(extensions: readonly string[]): string {\r\n  return extensions.map((ext) => `.${ext.toLowerCase()}`).join(\",\");\r\n}\r\n\r\n/**\r\n * Is this an executable, a script or an installer?\r\n *\r\n * Exported on its own because a host may want to refuse those EARLIER than its\r\n * own policy check — on a bulk drop, for instance, where one dangerous file\r\n * should stop the whole batch rather than be listed among type mismatches.\r\n *\r\n * Permissive parameter type on purpose: callers routinely pass an item pulled\r\n * out of a `FileList` without having checked it.\r\n */\r\nexport function isForbiddenExecutable(file?: File | null | undefined): boolean {\r\n  const ext = extensionOf(file?.name);\r\n  return ext !== \"\" && EXECUTABLE_EXTENSIONS.has(ext);\r\n}\r\n\r\n/** Does the file satisfy `policy` (and the library's own deny-list)? */\r\nexport function isAcceptedFile(\r\n  file: File | null | undefined,\r\n  policy: FileAcceptPolicy\r\n): boolean {\r\n  return getFileRejection(file, policy) === null;\r\n}\r\n\r\n/**\r\n * Why this file cannot be uploaded, or `null` when it can.\r\n *\r\n * Order of checks is load-bearing:\r\n *   1. executable / script / installer — named as such;\r\n *   2. extension against the host's allow-list;\r\n *   3. reported MIME type against the extension.\r\n *\r\n * MIME RULES, both deliberate: an EMPTY type is accepted (some browsers report\r\n * none, and the extension has just been checked), and `application/octet-stream`\r\n * is accepted for the extensions listed in `UNRELIABLE_MIME_EXTENSIONS`. An\r\n * extension with no entry in the MIME table is accepted on its extension alone\r\n * — the table is a cross-check, not a second allow-list, and a host adding a\r\n * format to its policy must not have it refused by a table it cannot see.\r\n */\r\nexport function getFileRejection(\r\n  file: File | null | undefined,\r\n  policy: FileAcceptPolicy\r\n): FileRejection | null {\r\n  const executableMessage =\r\n    policy.labels?.executable ?? DEFAULT_EXECUTABLE_MESSAGE;\r\n  const typeMessage =\r\n    policy.labels?.type ??\r\n    `Types autorisés : ${describeAcceptedTypes(policy.extensions)}`;\r\n\r\n  if (isForbiddenExecutable(file)) {\r\n    return { reason: \"executable\", message: executableMessage };\r\n  }\r\n\r\n  const ext = extensionOf(file?.name);\r\n  if (ext === \"\") return { reason: \"extension\", message: typeMessage };\r\n\r\n  const accepted = policy.extensions.some(\r\n    (allowed) => allowed.toLowerCase() === ext\r\n  );\r\n  if (!accepted) return { reason: \"extension\", message: typeMessage };\r\n\r\n  const mime = (file?.type ?? \"\").trim().toLowerCase();\r\n  if (mime === \"\") return null;\r\n  if (mime === \"application/octet-stream\" && UNRELIABLE_MIME_EXTENSIONS.has(ext)) {\r\n    return null;\r\n  }\r\n\r\n  const expected = MIME_BY_EXTENSION[ext];\r\n  if (expected === undefined) return null;\r\n  if (expected.includes(mime)) return null;\r\n\r\n  return { reason: \"mime\", message: typeMessage };\r\n}\r\n\r\nconst fileValidationApi = {\r\n  isForbiddenExecutable,\r\n  isAcceptedFile,\r\n  getFileRejection,\r\n  describeAcceptedTypes,\r\n  toAcceptAttribute,\r\n};\r\nexport default fileValidationApi;\r\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMA,qBAA0C,GAAG,IAAIC,GAAG,CAAC,CACzD,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAC/C,KAAK,EAAE,KAAK,EAAE,KAAK,EACnB,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EACjC,KAAK,EAAE,MAAM,EAAE,MAAM,EACrB,KAAK,EAAE,KAAK,EAAE,KAAK,CACpB,CAAC;;AAEF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,iBAA8D,GAClEC,MAAM,CAACC,MAAM,CAAC;EACZC,GAAG,EAAE,CAAC,iBAAiB,CAAC;EACxBC,GAAG,EAAE,CAAC,WAAW,CAAC;EAClBC,GAAG,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;EAChCC,IAAI,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;EACjCC,GAAG,EAAE,CAAC,WAAW,CAAC;EAClBC,IAAI,EAAE,CAAC,YAAY,CAAC;EACpBC,GAAG,EAAE,CAAC,YAAY,CAAC;EACnBC,IAAI,EAAE,CAAC,YAAY,CAAC;EACpBC,GAAG,EAAE,CAAC,YAAY,CAAC;EACnBC,GAAG,EAAE,CAAC,UAAU,EAAE,iBAAiB,EAAE,YAAY,CAAC;EAClDC,GAAG,EAAE,CAAC,oBAAoB,CAAC;EAC3BC,IAAI,EAAE,CACJ,yEAAyE,CAC1E;EACDC,GAAG,EAAE,CAAC,0BAA0B,CAAC;EACjCC,IAAI,EAAE,CACJ,mEAAmE,CACpE;EACDC,GAAG,EAAE,CAAC,+BAA+B,CAAC;EACtCC,IAAI,EAAE,CACJ,2EAA2E;AAE/E,CAAC,CAAC;;AAEJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,0BAA+C,GAAG,IAAIpB,GAAG,CAAC,CAC9D,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CACnD,CAAC;;AAEF;;AA0BA,MAAMqB,0BAA0B,GAC9B,yEAAyE;;AAE3E;AACA,MAAMC,WAAW,GAAIC,QAA4B,IAAa;EAC5D,IAAI,CAACA,QAAQ,EAAE,OAAO,EAAE;EACxB,MAAMC,KAAK,GAAGD,QAAQ,CAACE,KAAK,CAAC,GAAG,CAAC;EACjC;AACF;EACE,IAAID,KAAK,CAACE,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE;EAC/B,OAAO,CAACF,KAAK,CAACA,KAAK,CAACE,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,EAAEC,WAAW,CAAC,CAAC;AACtD,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,qBAAqBA,CACnCC,UAA6B,EACrB;EACR,OAAO,GAAGA,UAAU,CAACC,GAAG,CAAEC,GAAG,IAAKA,GAAG,CAACC,WAAW,CAAC,CAAC,CAAC,CAACC,IAAI,CAAC,IAAI,CAAC,GAAG;AACpE;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,iBAAiBA,CAACL,UAA6B,EAAU;EACvE,OAAOA,UAAU,CAACC,GAAG,CAAEC,GAAG,IAAK,IAAIA,GAAG,CAACJ,WAAW,CAAC,CAAC,EAAE,CAAC,CAACM,IAAI,CAAC,GAAG,CAAC;AACnE;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASE,qBAAqBA,CAACC,IAA8B,EAAW;EAC7E,MAAML,GAAG,GAAGT,WAAW,CAACc,IAAI,EAAEC,IAAI,CAAC;EACnC,OAAON,GAAG,KAAK,EAAE,IAAIhC,qBAAqB,CAACuC,GAAG,CAACP,GAAG,CAAC;AACrD;;AAEA;AACA,OAAO,SAASQ,cAAcA,CAC5BH,IAA6B,EAC7BI,MAAwB,EACf;EACT,OAAOC,gBAAgB,CAACL,IAAI,EAAEI,MAAM,CAAC,KAAK,IAAI;AAChD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,gBAAgBA,CAC9BL,IAA6B,EAC7BI,MAAwB,EACF;EACtB,MAAME,iBAAiB,GACrBF,MAAM,CAACG,MAAM,EAAEC,UAAU,IAAIvB,0BAA0B;EACzD,MAAMwB,WAAW,GACfL,MAAM,CAACG,MAAM,EAAEG,IAAI,IACnB,qBAAqBlB,qBAAqB,CAACY,MAAM,CAACX,UAAU,CAAC,EAAE;EAEjE,IAAIM,qBAAqB,CAACC,IAAI,CAAC,EAAE;IAC/B,OAAO;MAAEW,MAAM,EAAE,YAAY;MAAEC,OAAO,EAAEN;IAAkB,CAAC;EAC7D;EAEA,MAAMX,GAAG,GAAGT,WAAW,CAACc,IAAI,EAAEC,IAAI,CAAC;EACnC,IAAIN,GAAG,KAAK,EAAE,EAAE,OAAO;IAAEgB,MAAM,EAAE,WAAW;IAAEC,OAAO,EAAEH;EAAY,CAAC;EAEpE,MAAMI,QAAQ,GAAGT,MAAM,CAACX,UAAU,CAACqB,IAAI,CACpCC,OAAO,IAAKA,OAAO,CAACxB,WAAW,CAAC,CAAC,KAAKI,GACzC,CAAC;EACD,IAAI,CAACkB,QAAQ,EAAE,OAAO;IAAEF,MAAM,EAAE,WAAW;IAAEC,OAAO,EAAEH;EAAY,CAAC;EAEnE,MAAMO,IAAI,GAAG,CAAChB,IAAI,EAAEU,IAAI,IAAI,EAAE,EAAEO,IAAI,CAAC,CAAC,CAAC1B,WAAW,CAAC,CAAC;EACpD,IAAIyB,IAAI,KAAK,EAAE,EAAE,OAAO,IAAI;EAC5B,IAAIA,IAAI,KAAK,0BAA0B,IAAIhC,0BAA0B,CAACkB,GAAG,CAACP,GAAG,CAAC,EAAE;IAC9E,OAAO,IAAI;EACb;EAEA,MAAMuB,QAAQ,GAAGrD,iBAAiB,CAAC8B,GAAG,CAAC;EACvC,IAAIuB,QAAQ,KAAKC,SAAS,EAAE,OAAO,IAAI;EACvC,IAAID,QAAQ,CAACE,QAAQ,CAACJ,IAAI,CAAC,EAAE,OAAO,IAAI;EAExC,OAAO;IAAEL,MAAM,EAAE,MAAM;IAAEC,OAAO,EAAEH;EAAY,CAAC;AACjD;AAEA,MAAMY,iBAAiB,GAAG;EACxBtB,qBAAqB;EACrBI,cAAc;EACdE,gBAAgB;EAChBb,qBAAqB;EACrBM;AACF,CAAC;AACD,eAAeuB,iBAAiB","ignoreList":[]}

package/dist/esm/v2/utils/fmtDate.js

@@ -0,0 +1,111 @@
+/**
+ * fmtDate / fmtDateTime — render a date for DISPLAY.
+ *
+ *   fmtDate("2026-03-05T14:30:00Z")        → "05/03/2026"
+ *   fmtDateTime("2026-03-05T14:30:00Z")    → "05/03/2026 15:30"   (local time)
+ *   fmtDate(undefined)                     → "—"
+ *   fmtDate("pas une date")                → "—"
+ *   fmtDate(d, { absent: "" })             → "" when there is no date
+ *
+ * ─────────────────────────────────────────────────────────────────────────────
+ * WHY THIS BELONGS IN THE LIBRARY (capability gap G-51)
+ *
+ * The library already owns the money side of the same job — `fmtMoney`, same
+ * folder, same "—" for an absent value, for the same reason: a table cell must
+ * never read "NaN". It owned nothing for dates, which every GU screen renders
+ * far more often than amounts. So every module wrote its own, and the copies
+ * shared one defect:
+ *
+ *     const fullformatDate = (stringDate) => {
+ *       const date = new Date(stringDate);
+ *       const day = formatIntoTwoDigits(date.getDate());
+ *       …
+ *
+ * `new Date(undefined)` is an INVALID DATE whose every accessor returns `NaN`,
+ * so the helper rendered, literally:
+ *
+ *     NaN/NaN/NaN NaN:NaN
+ *
+ * on any optional field — an update date, a visit date, a closure date — which
+ * is most of them. In `autorisation-admis-pour-conforme-fe` the guard had been
+ * added at CALL SITES one lot after another (lots 4 to 7) before being pulled
+ * into the module's own helper: treating the symptom eight times, because the
+ * one place where it cannot be forgotten is the formatter itself. That is the
+ * argument for owning it here rather than in each module.
+ *
+ * Two smaller things the same copies carried, fixed here by construction: a
+ * two-digit helper that returned `"08"` (string) or `12` (number) depending on
+ * the value, and an absent date rendered as an EMPTY string — indistinguishable
+ * from a cell that failed to render, where "—" says "we looked, there is
+ * nothing".
+ *
+ * WHY NO `moment`, THOUGH THE PACKAGE ALREADY DEPENDS ON IT
+ *
+ * `moment` is here for the pickers, and specifically for STRICT parsing against
+ * an explicit format (`patterns/_pickerSerialisation`) — reading
+ * `"31-12-2026"` back without guessing. That is the right use of it.
+ *
+ * Rendering an already-parsed instant as two numbers and a year is not. This
+ * folder is dependency-free on purpose (see `fileDownload`), and
+ * `moment(someString)` with no format falls back to `new Date` WHILE EMITTING A
+ * CONSOLE DEPRECATION WARNING — noise a display helper called once per table
+ * cell must not produce. Native padding has neither cost.
+ *
+ * TIME ZONE, STATED RATHER THAN IMPLIED. The output is in the VIEWER'S local
+ * zone (`getDate`, `getHours`…), which is what the module helpers this replaces
+ * did, and what a user expects of "date de dépôt". An instant sent as
+ * `…T23:30:00Z` therefore reads as the next day in Casablanca. If a screen ever
+ * needs the server's calendar day regardless of the reader, that is a DIFFERENT
+ * function and must be argued for on its own — silently switching this one to
+ * UTC would move dates by a day across the whole platform.
+ * ─────────────────────────────────────────────────────────────────────────────
+ */
+
+/** What a formatter accepts: an API string, an epoch, or a `Date`. */
+
+/** The platform's absence mark — same value `fmtMoney` returns. */
+const ABSENT = "—";
+const pad2 = value => String(value).padStart(2, "0");
+
+/**
+ * Parse an input into a USABLE `Date`, or `null`.
+ *
+ * `null` for every unusable case — absent, empty string, unparseable, or an
+ * Invalid Date — so no caller can accidentally format `NaN`. The empty-string
+ * check is explicit because `new Date("")` is Invalid while `new Date(0)` is a
+ * legitimate instant (1970), and a falsy test would conflate them.
+ */
+const toUsableDate = value => {
+  if (value === null || value === undefined || value === "") return null;
+  const date = value instanceof Date ? value : new Date(value);
+  return Number.isNaN(date.getTime()) ? null : date;
+};
+
+/**
+ * Day, month and year — `DD/MM/YYYY`.
+ *
+ * @param value - API string, epoch, or `Date`. Absent or unparseable → `absent`.
+ */
+export function fmtDate(value, opts = {}) {
+  const date = toUsableDate(value);
+  if (date === null) return opts.absent ?? ABSENT;
+  return `${pad2(date.getDate())}/${pad2(date.getMonth() + 1)}/${date.getFullYear()}`;
+}
+
+/**
+ * Day, month, year, then hours and minutes — `DD/MM/YYYY HH:mm`.
+ *
+ * Seconds are deliberately absent: no GU screen displays them, and a second
+ * shown is a second a reader tries to interpret.
+ */
+export function fmtDateTime(value, opts = {}) {
+  const date = toUsableDate(value);
+  if (date === null) return opts.absent ?? ABSENT;
+  return `${fmtDate(date, opts)} ${pad2(date.getHours())}:${pad2(date.getMinutes())}`;
+}
+const fmtDateApi = {
+  fmtDate,
+  fmtDateTime
+};
+export default fmtDateApi;
+//# sourceMappingURL=fmtDate.js.map

package/dist/esm/v2/utils/fmtDate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fmtDate.js","names":["ABSENT","pad2","value","String","padStart","toUsableDate","undefined","date","Date","Number","isNaN","getTime","fmtDate","opts","absent","getDate","getMonth","getFullYear","fmtDateTime","getHours","getMinutes","fmtDateApi"],"sources":["../../../../src/lib/v2/utils/fmtDate.ts"],"sourcesContent":["/**\r\n * fmtDate / fmtDateTime — render a date for DISPLAY.\r\n *\r\n *   fmtDate(\"2026-03-05T14:30:00Z\")        → \"05/03/2026\"\r\n *   fmtDateTime(\"2026-03-05T14:30:00Z\")    → \"05/03/2026 15:30\"   (local time)\r\n *   fmtDate(undefined)                     → \"—\"\r\n *   fmtDate(\"pas une date\")                → \"—\"\r\n *   fmtDate(d, { absent: \"\" })             → \"\" when there is no date\r\n *\r\n * ─────────────────────────────────────────────────────────────────────────────\r\n * WHY THIS BELONGS IN THE LIBRARY (capability gap G-51)\r\n *\r\n * The library already owns the money side of the same job — `fmtMoney`, same\r\n * folder, same \"—\" for an absent value, for the same reason: a table cell must\r\n * never read \"NaN\". It owned nothing for dates, which every GU screen renders\r\n * far more often than amounts. So every module wrote its own, and the copies\r\n * shared one defect:\r\n *\r\n *     const fullformatDate = (stringDate) => {\r\n *       const date = new Date(stringDate);\r\n *       const day = formatIntoTwoDigits(date.getDate());\r\n *       …\r\n *\r\n * `new Date(undefined)` is an INVALID DATE whose every accessor returns `NaN`,\r\n * so the helper rendered, literally:\r\n *\r\n *     NaN/NaN/NaN NaN:NaN\r\n *\r\n * on any optional field — an update date, a visit date, a closure date — which\r\n * is most of them. In `autorisation-admis-pour-conforme-fe` the guard had been\r\n * added at CALL SITES one lot after another (lots 4 to 7) before being pulled\r\n * into the module's own helper: treating the symptom eight times, because the\r\n * one place where it cannot be forgotten is the formatter itself. That is the\r\n * argument for owning it here rather than in each module.\r\n *\r\n * Two smaller things the same copies carried, fixed here by construction: a\r\n * two-digit helper that returned `\"08\"` (string) or `12` (number) depending on\r\n * the value, and an absent date rendered as an EMPTY string — indistinguishable\r\n * from a cell that failed to render, where \"—\" says \"we looked, there is\r\n * nothing\".\r\n *\r\n * WHY NO `moment`, THOUGH THE PACKAGE ALREADY DEPENDS ON IT\r\n *\r\n * `moment` is here for the pickers, and specifically for STRICT parsing against\r\n * an explicit format (`patterns/_pickerSerialisation`) — reading\r\n * `\"31-12-2026\"` back without guessing. That is the right use of it.\r\n *\r\n * Rendering an already-parsed instant as two numbers and a year is not. This\r\n * folder is dependency-free on purpose (see `fileDownload`), and\r\n * `moment(someString)` with no format falls back to `new Date` WHILE EMITTING A\r\n * CONSOLE DEPRECATION WARNING — noise a display helper called once per table\r\n * cell must not produce. Native padding has neither cost.\r\n *\r\n * TIME ZONE, STATED RATHER THAN IMPLIED. The output is in the VIEWER'S local\r\n * zone (`getDate`, `getHours`…), which is what the module helpers this replaces\r\n * did, and what a user expects of \"date de dépôt\". An instant sent as\r\n * `…T23:30:00Z` therefore reads as the next day in Casablanca. If a screen ever\r\n * needs the server's calendar day regardless of the reader, that is a DIFFERENT\r\n * function and must be argued for on its own — silently switching this one to\r\n * UTC would move dates by a day across the whole platform.\r\n * ─────────────────────────────────────────────────────────────────────────────\r\n */\r\n\r\n/** What a formatter accepts: an API string, an epoch, or a `Date`. */\r\nexport type FmtDateInput = string | number | Date | null | undefined;\r\n\r\nexport type FmtDateOptions = {\r\n  /**\r\n   * Rendered when there is no usable date. Defaults to the em dash used as the\r\n   * platform's absence mark in tables and detail sheets.\r\n   *\r\n   * Pass `\"\"` where an empty cell is the deliberate choice — a DataGrid column\r\n   * that must stay visually quiet, or a value on its way into a search payload,\r\n   * since an em dash travelling to a back-end as a criterion is worse than\r\n   * nothing. Both cases exist in the module this was raised from.\r\n   *\r\n   * NO `separator` OPTION, and that is a correction rather than an omission.\r\n   * The first draft had one, justified by a module helper documented as feeding\r\n   * search criteria \"d'où le séparateur paramétrable\". A grep of the module\r\n   * showed that helper has ZERO importers: the justification was dead code, so\r\n   * the knob was speculative surface on a certified API (§2.8 — minimum API\r\n   * surface). The emitted format is the charter's `DD/MM/YYYY`; a host needing\r\n   * another separator should say why here.\r\n   */\r\n  absent?: string | undefined;\r\n};\r\n\r\n/** The platform's absence mark — same value `fmtMoney` returns. */\r\nconst ABSENT = \"—\";\r\n\r\nconst pad2 = (value: number): string => String(value).padStart(2, \"0\");\r\n\r\n/**\r\n * Parse an input into a USABLE `Date`, or `null`.\r\n *\r\n * `null` for every unusable case — absent, empty string, unparseable, or an\r\n * Invalid Date — so no caller can accidentally format `NaN`. The empty-string\r\n * check is explicit because `new Date(\"\")` is Invalid while `new Date(0)` is a\r\n * legitimate instant (1970), and a falsy test would conflate them.\r\n */\r\nconst toUsableDate = (value: FmtDateInput): Date | null => {\r\n  if (value === null || value === undefined || value === \"\") return null;\r\n  const date = value instanceof Date ? value : new Date(value);\r\n  return Number.isNaN(date.getTime()) ? null : date;\r\n};\r\n\r\n/**\r\n * Day, month and year — `DD/MM/YYYY`.\r\n *\r\n * @param value - API string, epoch, or `Date`. Absent or unparseable → `absent`.\r\n */\r\nexport function fmtDate(value: FmtDateInput, opts: FmtDateOptions = {}): string {\r\n  const date = toUsableDate(value);\r\n  if (date === null) return opts.absent ?? ABSENT;\r\n\r\n  return `${pad2(date.getDate())}/${pad2(\r\n    date.getMonth() + 1\r\n  )}/${date.getFullYear()}`;\r\n}\r\n\r\n/**\r\n * Day, month, year, then hours and minutes — `DD/MM/YYYY HH:mm`.\r\n *\r\n * Seconds are deliberately absent: no GU screen displays them, and a second\r\n * shown is a second a reader tries to interpret.\r\n */\r\nexport function fmtDateTime(\r\n  value: FmtDateInput,\r\n  opts: FmtDateOptions = {}\r\n): string {\r\n  const date = toUsableDate(value);\r\n  if (date === null) return opts.absent ?? ABSENT;\r\n\r\n  return `${fmtDate(date, opts)} ${pad2(date.getHours())}:${pad2(\r\n    date.getMinutes()\r\n  )}`;\r\n}\r\n\r\nconst fmtDateApi = { fmtDate, fmtDateTime };\r\nexport default fmtDateApi;\r\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;;AAwBA;AACA,MAAMA,MAAM,GAAG,GAAG;AAElB,MAAMC,IAAI,GAAIC,KAAa,IAAaC,MAAM,CAACD,KAAK,CAAC,CAACE,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;;AAEtE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,YAAY,GAAIH,KAAmB,IAAkB;EACzD,IAAIA,KAAK,KAAK,IAAI,IAAIA,KAAK,KAAKI,SAAS,IAAIJ,KAAK,KAAK,EAAE,EAAE,OAAO,IAAI;EACtE,MAAMK,IAAI,GAAGL,KAAK,YAAYM,IAAI,GAAGN,KAAK,GAAG,IAAIM,IAAI,CAACN,KAAK,CAAC;EAC5D,OAAOO,MAAM,CAACC,KAAK,CAACH,IAAI,CAACI,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,GAAGJ,IAAI;AACnD,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA,OAAO,SAASK,OAAOA,CAACV,KAAmB,EAAEW,IAAoB,GAAG,CAAC,CAAC,EAAU;EAC9E,MAAMN,IAAI,GAAGF,YAAY,CAACH,KAAK,CAAC;EAChC,IAAIK,IAAI,KAAK,IAAI,EAAE,OAAOM,IAAI,CAACC,MAAM,IAAId,MAAM;EAE/C,OAAO,GAAGC,IAAI,CAACM,IAAI,CAACQ,OAAO,CAAC,CAAC,CAAC,IAAId,IAAI,CACpCM,IAAI,CAACS,QAAQ,CAAC,CAAC,GAAG,CACpB,CAAC,IAAIT,IAAI,CAACU,WAAW,CAAC,CAAC,EAAE;AAC3B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,WAAWA,CACzBhB,KAAmB,EACnBW,IAAoB,GAAG,CAAC,CAAC,EACjB;EACR,MAAMN,IAAI,GAAGF,YAAY,CAACH,KAAK,CAAC;EAChC,IAAIK,IAAI,KAAK,IAAI,EAAE,OAAOM,IAAI,CAACC,MAAM,IAAId,MAAM;EAE/C,OAAO,GAAGY,OAAO,CAACL,IAAI,EAAEM,IAAI,CAAC,IAAIZ,IAAI,CAACM,IAAI,CAACY,QAAQ,CAAC,CAAC,CAAC,IAAIlB,IAAI,CAC5DM,IAAI,CAACa,UAAU,CAAC,CAClB,CAAC,EAAE;AACL;AAEA,MAAMC,UAAU,GAAG;EAAET,OAAO;EAAEM;AAAY,CAAC;AAC3C,eAAeG,UAAU","ignoreList":[]}

package/dist/esm/v2/utils/fmtMoney.js

@@ -46,33 +46,31 @@
  * an unmatched-but-valid tag negotiates down to fr-FR instead of to the host.
  * The `try/catch` is still required for genuinely malformed input.
  */
-var FALLBACK_LOCALE = "fr-FR";
-export default function fmtMoney(n) {
-  var currency = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : "";
-  var opts = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : {};
+const FALLBACK_LOCALE = "fr-FR";
+export default function fmtMoney(n, currency = "", opts = {}) {
   if (n == null || n === "") return "—";
-  var num = typeof n === "number" ? n : Number(n);
+  const num = typeof n === "number" ? n : Number(n);
   if (!Number.isFinite(num)) return "—";
-  var locale = opts.locale || FALLBACK_LOCALE;
-  var formatOpts = {};
+  const locale = opts.locale || FALLBACK_LOCALE;
+  const formatOpts = {};
   if (opts.minimumFractionDigits != null) {
     formatOpts.minimumFractionDigits = opts.minimumFractionDigits;
   }
   if (opts.maximumFractionDigits != null) {
     formatOpts.maximumFractionDigits = opts.maximumFractionDigits;
   }
-  var formatted;
+  let formatted;
   try {
     /* Requested locale first, fr-FR as the declared next preference — see
      * FALLBACK_LOCALE. A resolvable request ("en-US") still wins outright; an
      * unmatched-but-well-formed tag lands on fr-FR rather than on the host's
      * default locale. */
     formatted = new Intl.NumberFormat([locale, FALLBACK_LOCALE], formatOpts).format(num);
-  } catch (_unused) {
+  } catch {
     /* Reached only for a STRUCTURALLY invalid tag (RangeError) or a non-string
      * value from an untyped host — negotiation cannot help there. */
     formatted = new Intl.NumberFormat(FALLBACK_LOCALE, formatOpts).format(num);
   }
-  return currency ? "".concat(formatted, " ").concat(currency) : formatted;
+  return currency ? `${formatted} ${currency}` : formatted;
 }
 //# sourceMappingURL=fmtMoney.js.map

package/dist/esm/v2/utils/fmtMoney.js.map

@@ -1 +1 @@
-{"version":3,"file":"fmtMoney.js","names":["FALLBACK_LOCALE","fmtMoney","n","currency","arguments","length","undefined","opts","num","Number","isFinite","locale","formatOpts","minimumFractionDigits","maximumFractionDigits","formatted","Intl","NumberFormat","format","_unused","concat"],"sources":["../../../../src/lib/v2/utils/fmtMoney.ts"],"sourcesContent":["/**\r\n * fmtMoney — format a number with locale-aware grouping.\r\n *\r\n * Returns \"—\" for null / empty / non-finite inputs (graceful empty\r\n * cells in tables — never \"NaN\" or \"∞\").\r\n *\r\n * Defaults to \"fr-FR\" for back-compat with v1 callers; pass `locale`\r\n * (BCP-47 tag) to format under any locale supported by the runtime\r\n * Intl.NumberFormat. Currency placement is a trailing suffix in the\r\n * locale-formatted number; future evolution toward `style:\"currency\"`\r\n * (locale-correct symbol position, proper RTL handling) is deliberately\r\n * deferred to avoid breaking consumers that grep on the suffix.\r\n *\r\n *   fmtMoney(1234567.5)                              → \"1 234 567,5\"\r\n *   fmtMoney(1234567.5, \"EUR\")                       → \"1 234 567,5 EUR\"\r\n *   fmtMoney(1234567.5, \"EUR\", { locale: \"en-US\" })  → \"1,234,567.5 EUR\"\r\n *   fmtMoney(1234.5,    \"\",    { minimumFractionDigits: 2 })\r\n *                                                    → \"1 234,50\"\r\n *   fmtMoney(null) / fmtMoney(\"abc\") / fmtMoney(Infinity) → \"—\"\r\n */\r\ntype FmtMoneyOptions = {\r\n  locale?: string;\r\n  minimumFractionDigits?: number;\r\n  maximumFractionDigits?: number;\r\n};\r\n\r\n/**\r\n * The locale every unresolvable request falls back to.\r\n *\r\n * ── WHY THIS IS NEGOTIATED, NOT JUST CAUGHT ─────────────────────────────\r\n *\r\n * The previous implementation relied ONLY on `try/catch`, on the assumption that\r\n * an unusable locale throws `RangeError`. It does not — and the gap was a live\r\n * defect, not a theoretical one:\r\n *\r\n *   `Intl.NumberFormat` throws only on a STRUCTURALLY INVALID tag. A tag that is\r\n *   well-formed but has no data does NOT throw — it negotiates, and with a single\r\n *   unmatched tag the negotiation lands on the RUNTIME DEFAULT LOCALE.\r\n *\r\n * `\"not-a-real-locale\"` is well-formed: `not` parses as a 3-letter language\r\n * subtag and `-a-real-locale` as a singleton `a` extension sequence. So it never\r\n * threw, the `catch` never ran, and the result was formatted in whatever locale\r\n * the host happened to default to. On a German or Spanish host that renders\r\n * `\"1.234,5\"` — dot grouping — inside a French application.\r\n *\r\n * That is a real consistency breach (Charter §09: a French UI formats numbers in\r\n * French), and it is invisible on a French dev machine, which is exactly why it\r\n * survived: the unit test caught it only because CI ran under a non-FR default.\r\n *\r\n * Listing the fallback as the SECOND preference makes the guarantee explicit:\r\n * an unmatched-but-valid tag negotiates down to fr-FR instead of to the host.\r\n * The `try/catch` is still required for genuinely malformed input.\r\n */\r\nconst FALLBACK_LOCALE = \"fr-FR\";\r\n\r\nexport default function fmtMoney(\r\n  n: number | string | null | undefined,\r\n  currency: string = \"\",\r\n  opts: FmtMoneyOptions = {}\r\n): string {\r\n  if (n == null || n === \"\") return \"—\";\r\n  const num = typeof n === \"number\" ? n : Number(n);\r\n  if (!Number.isFinite(num)) return \"—\";\r\n\r\n  const locale = opts.locale || FALLBACK_LOCALE;\r\n\r\n  const formatOpts: Intl.NumberFormatOptions = {};\r\n  if (opts.minimumFractionDigits != null) {\r\n    formatOpts.minimumFractionDigits = opts.minimumFractionDigits;\r\n  }\r\n  if (opts.maximumFractionDigits != null) {\r\n    formatOpts.maximumFractionDigits = opts.maximumFractionDigits;\r\n  }\r\n\r\n  let formatted: string;\r\n  try {\r\n    /* Requested locale first, fr-FR as the declared next preference — see\r\n     * FALLBACK_LOCALE. A resolvable request (\"en-US\") still wins outright; an\r\n     * unmatched-but-well-formed tag lands on fr-FR rather than on the host's\r\n     * default locale. */\r\n    formatted = new Intl.NumberFormat(\r\n      [locale, FALLBACK_LOCALE],\r\n      formatOpts\r\n    ).format(num);\r\n  } catch {\r\n    /* Reached only for a STRUCTURALLY invalid tag (RangeError) or a non-string\r\n     * value from an untyped host — negotiation cannot help there. */\r\n    formatted = new Intl.NumberFormat(FALLBACK_LOCALE, formatOpts).format(num);\r\n  }\r\n\r\n  return currency ? `${formatted} ${currency}` : formatted;\r\n}\r\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAOA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAMA,eAAe,GAAG,OAAO;AAE/B,eAAe,SAASC,QAAQA,CAC9BC,CAAqC,EAG7B;EAAA,IAFRC,QAAgB,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,EAAE;EAAA,IACrBG,IAAqB,GAAAH,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAE1B,IAAIF,CAAC,IAAI,IAAI,IAAIA,CAAC,KAAK,EAAE,EAAE,OAAO,GAAG;EACrC,IAAMM,GAAG,GAAG,OAAON,CAAC,KAAK,QAAQ,GAAGA,CAAC,GAAGO,MAAM,CAACP,CAAC,CAAC;EACjD,IAAI,CAACO,MAAM,CAACC,QAAQ,CAACF,GAAG,CAAC,EAAE,OAAO,GAAG;EAErC,IAAMG,MAAM,GAAGJ,IAAI,CAACI,MAAM,IAAIX,eAAe;EAE7C,IAAMY,UAAoC,GAAG,CAAC,CAAC;EAC/C,IAAIL,IAAI,CAACM,qBAAqB,IAAI,IAAI,EAAE;IACtCD,UAAU,CAACC,qBAAqB,GAAGN,IAAI,CAACM,qBAAqB;EAC/D;EACA,IAAIN,IAAI,CAACO,qBAAqB,IAAI,IAAI,EAAE;IACtCF,UAAU,CAACE,qBAAqB,GAAGP,IAAI,CAACO,qBAAqB;EAC/D;EAEA,IAAIC,SAAiB;EACrB,IAAI;IACF;AACJ;AACA;AACA;IACIA,SAAS,GAAG,IAAIC,IAAI,CAACC,YAAY,CAC/B,CAACN,MAAM,EAAEX,eAAe,CAAC,EACzBY,UACF,CAAC,CAACM,MAAM,CAACV,GAAG,CAAC;EACf,CAAC,CAAC,OAAAW,OAAA,EAAM;IACN;AACJ;IACIJ,SAAS,GAAG,IAAIC,IAAI,CAACC,YAAY,CAACjB,eAAe,EAAEY,UAAU,CAAC,CAACM,MAAM,CAACV,GAAG,CAAC;EAC5E;EAEA,OAAOL,QAAQ,MAAAiB,MAAA,CAAML,SAAS,OAAAK,MAAA,CAAIjB,QAAQ,IAAKY,SAAS;AAC1D","ignoreList":[]}
+{"version":3,"file":"fmtMoney.js","names":["FALLBACK_LOCALE","fmtMoney","n","currency","opts","num","Number","isFinite","locale","formatOpts","minimumFractionDigits","maximumFractionDigits","formatted","Intl","NumberFormat","format"],"sources":["../../../../src/lib/v2/utils/fmtMoney.ts"],"sourcesContent":["/**\r\n * fmtMoney — format a number with locale-aware grouping.\r\n *\r\n * Returns \"—\" for null / empty / non-finite inputs (graceful empty\r\n * cells in tables — never \"NaN\" or \"∞\").\r\n *\r\n * Defaults to \"fr-FR\" for back-compat with v1 callers; pass `locale`\r\n * (BCP-47 tag) to format under any locale supported by the runtime\r\n * Intl.NumberFormat. Currency placement is a trailing suffix in the\r\n * locale-formatted number; future evolution toward `style:\"currency\"`\r\n * (locale-correct symbol position, proper RTL handling) is deliberately\r\n * deferred to avoid breaking consumers that grep on the suffix.\r\n *\r\n *   fmtMoney(1234567.5)                              → \"1 234 567,5\"\r\n *   fmtMoney(1234567.5, \"EUR\")                       → \"1 234 567,5 EUR\"\r\n *   fmtMoney(1234567.5, \"EUR\", { locale: \"en-US\" })  → \"1,234,567.5 EUR\"\r\n *   fmtMoney(1234.5,    \"\",    { minimumFractionDigits: 2 })\r\n *                                                    → \"1 234,50\"\r\n *   fmtMoney(null) / fmtMoney(\"abc\") / fmtMoney(Infinity) → \"—\"\r\n */\r\ntype FmtMoneyOptions = {\r\n  locale?: string | undefined;\r\n  minimumFractionDigits?: number | undefined;\r\n  maximumFractionDigits?: number | undefined;\r\n};\r\n\r\n/**\r\n * The locale every unresolvable request falls back to.\r\n *\r\n * ── WHY THIS IS NEGOTIATED, NOT JUST CAUGHT ─────────────────────────────\r\n *\r\n * The previous implementation relied ONLY on `try/catch`, on the assumption that\r\n * an unusable locale throws `RangeError`. It does not — and the gap was a live\r\n * defect, not a theoretical one:\r\n *\r\n *   `Intl.NumberFormat` throws only on a STRUCTURALLY INVALID tag. A tag that is\r\n *   well-formed but has no data does NOT throw — it negotiates, and with a single\r\n *   unmatched tag the negotiation lands on the RUNTIME DEFAULT LOCALE.\r\n *\r\n * `\"not-a-real-locale\"` is well-formed: `not` parses as a 3-letter language\r\n * subtag and `-a-real-locale` as a singleton `a` extension sequence. So it never\r\n * threw, the `catch` never ran, and the result was formatted in whatever locale\r\n * the host happened to default to. On a German or Spanish host that renders\r\n * `\"1.234,5\"` — dot grouping — inside a French application.\r\n *\r\n * That is a real consistency breach (Charter §09: a French UI formats numbers in\r\n * French), and it is invisible on a French dev machine, which is exactly why it\r\n * survived: the unit test caught it only because CI ran under a non-FR default.\r\n *\r\n * Listing the fallback as the SECOND preference makes the guarantee explicit:\r\n * an unmatched-but-valid tag negotiates down to fr-FR instead of to the host.\r\n * The `try/catch` is still required for genuinely malformed input.\r\n */\r\nconst FALLBACK_LOCALE = \"fr-FR\";\r\n\r\nexport default function fmtMoney(\r\n  n: number | string | null | undefined,\r\n  currency: string = \"\",\r\n  opts: FmtMoneyOptions = {}\r\n): string {\r\n  if (n == null || n === \"\") return \"—\";\r\n  const num = typeof n === \"number\" ? n : Number(n);\r\n  if (!Number.isFinite(num)) return \"—\";\r\n\r\n  const locale = opts.locale || FALLBACK_LOCALE;\r\n\r\n  const formatOpts: Intl.NumberFormatOptions = {};\r\n  if (opts.minimumFractionDigits != null) {\r\n    formatOpts.minimumFractionDigits = opts.minimumFractionDigits;\r\n  }\r\n  if (opts.maximumFractionDigits != null) {\r\n    formatOpts.maximumFractionDigits = opts.maximumFractionDigits;\r\n  }\r\n\r\n  let formatted: string;\r\n  try {\r\n    /* Requested locale first, fr-FR as the declared next preference — see\r\n     * FALLBACK_LOCALE. A resolvable request (\"en-US\") still wins outright; an\r\n     * unmatched-but-well-formed tag lands on fr-FR rather than on the host's\r\n     * default locale. */\r\n    formatted = new Intl.NumberFormat(\r\n      [locale, FALLBACK_LOCALE],\r\n      formatOpts\r\n    ).format(num);\r\n  } catch {\r\n    /* Reached only for a STRUCTURALLY invalid tag (RangeError) or a non-string\r\n     * value from an untyped host — negotiation cannot help there. */\r\n    formatted = new Intl.NumberFormat(FALLBACK_LOCALE, formatOpts).format(num);\r\n  }\r\n\r\n  return currency ? `${formatted} ${currency}` : formatted;\r\n}\r\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAOA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMA,eAAe,GAAG,OAAO;AAE/B,eAAe,SAASC,QAAQA,CAC9BC,CAAqC,EACrCC,QAAgB,GAAG,EAAE,EACrBC,IAAqB,GAAG,CAAC,CAAC,EAClB;EACR,IAAIF,CAAC,IAAI,IAAI,IAAIA,CAAC,KAAK,EAAE,EAAE,OAAO,GAAG;EACrC,MAAMG,GAAG,GAAG,OAAOH,CAAC,KAAK,QAAQ,GAAGA,CAAC,GAAGI,MAAM,CAACJ,CAAC,CAAC;EACjD,IAAI,CAACI,MAAM,CAACC,QAAQ,CAACF,GAAG,CAAC,EAAE,OAAO,GAAG;EAErC,MAAMG,MAAM,GAAGJ,IAAI,CAACI,MAAM,IAAIR,eAAe;EAE7C,MAAMS,UAAoC,GAAG,CAAC,CAAC;EAC/C,IAAIL,IAAI,CAACM,qBAAqB,IAAI,IAAI,EAAE;IACtCD,UAAU,CAACC,qBAAqB,GAAGN,IAAI,CAACM,qBAAqB;EAC/D;EACA,IAAIN,IAAI,CAACO,qBAAqB,IAAI,IAAI,EAAE;IACtCF,UAAU,CAACE,qBAAqB,GAAGP,IAAI,CAACO,qBAAqB;EAC/D;EAEA,IAAIC,SAAiB;EACrB,IAAI;IACF;AACJ;AACA;AACA;IACIA,SAAS,GAAG,IAAIC,IAAI,CAACC,YAAY,CAC/B,CAACN,MAAM,EAAER,eAAe,CAAC,EACzBS,UACF,CAAC,CAACM,MAAM,CAACV,GAAG,CAAC;EACf,CAAC,CAAC,MAAM;IACN;AACJ;IACIO,SAAS,GAAG,IAAIC,IAAI,CAACC,YAAY,CAACd,eAAe,EAAES,UAAU,CAAC,CAACM,MAAM,CAACV,GAAG,CAAC;EAC5E;EAEA,OAAOF,QAAQ,GAAG,GAAGS,SAAS,IAAIT,QAAQ,EAAE,GAAGS,SAAS;AAC1D","ignoreList":[]}

package/dist/esm/v2/utils/formikErrors.js

@@ -0,0 +1,78 @@
+/**
+ * flattenFormikErrors — Formik's nested `errors` → the flat list
+ * `FormErrorSummary` consumes (capability gap G-38).
+ *
+ * ─────────────────────────────────────────────────────────────────────────────
+ * WHY THIS BELONGS IN THE LIBRARY
+ *
+ * The library already owns BOTH ends of the failed-submit recipe that R-FV.2
+ * and R-FV.3 make mandatory:
+ *
+ *   · `FormErrorSummary`  — the banner at the top of the form, whose items are
+ *                           `{ name, message }` and whose `onItemClick` hands
+ *                           back the field NAME;
+ *   · `FormikErrorFocus` / `focusFieldByName` — the counterpart that moves
+ *                           focus, resolving that same name as `[name="…"]`.
+ *
+ * What it never shipped is the step between them. Formik's `errors` mirrors the
+ * shape of `values` — a nested object whose leaves are message strings — and
+ * nothing in the library turned that tree into the flat list both ends speak.
+ * So every Formik host wrote the recursion itself, which is a duplication the
+ * Platform TypeScript Guidelines forbid outright, and which the library invited
+ * by publishing the type (`FormErrorSummaryError`) without the one function
+ * that produces it.
+ *
+ * >>> THE FAILURE MODE IS THE PATH, AND IT IS INVISIBLE TO REVIEW. Every
+ * >>> re-implementation gets `{ name, message }` right and the ACCUMULATED PATH
+ * >>> subtly wrong — a missing separator, a skipped array index, a `[0]`
+ * >>> written where Formik writes `.0`. Nothing throws. The banner renders,
+ * >>> lists the right messages, and its jump button targets a field that does
+ * >>> not exist: `focusFieldByName` finds no node and the click does nothing.
+ * >>> A user staring at a rejected form clicks the one affordance offered to
+ * >>> find the offending field, and it silently fails.
+ * >>>
+ * >>> Promoted from `refonte-frontend` (Area 5), where it had already been
+ * >>> extracted once — out of a single page and into module-common — for
+ * >>> exactly this reason, when a second form needed it. The next module along
+ * >>> would have been the third copy. <<<
+ * ─────────────────────────────────────────────────────────────────────────────
+ *
+ * ARRAY ERRORS ARE TRAVERSED AS OBJECTS, DELIBERATELY. `Yup.array()` produces
+ * errors keyed by index, so the path becomes `beneficiaires.0.nom` — dot,
+ * not bracket. That is the form Formik itself produces and therefore the form
+ * the corresponding field's `name` attribute carries, which is what makes the
+ * path usable by `focusFieldByName` and by `setFieldValue` alike. Rewriting it
+ * as `beneficiaires[0].nom` would read more naturally and match nothing.
+ *
+ * Non-string leaves that are not objects (a `false`, a `null` left by a custom
+ * validator) yield nothing rather than an item with an empty message: a summary
+ * line with no text is worse than one line fewer, since it is clickable, blank,
+ * and lists no reason.
+ *
+ * Usage:
+ *
+ *   <FormErrorSummary
+ *     errors={flattenFormikErrors(formik.errors)}
+ *     onItemClick={focusFieldByName}
+ *   />
+ *
+ * The `FormErrorSummaryError` import is TYPE-ONLY and therefore erased at
+ * build time: this util does not depend on ./patterns at runtime, and the
+ * item shape keeps a single declaration next to the component that renders it
+ * rather than being restated here.
+ */
+export function flattenFormikErrors(errors, prefix = "") {
+  if (!errors || typeof errors !== "object") return [];
+  return Object.entries(errors).flatMap(([key, value]) => {
+    const path = prefix ? `${prefix}.${key}` : key;
+    if (typeof value === "string") {
+      return value.length > 0 ? [{
+        name: path,
+        message: value
+      }] : [];
+    }
+    return flattenFormikErrors(value, path);
+  });
+}
+export default flattenFormikErrors;
+//# sourceMappingURL=formikErrors.js.map

package/dist/esm/v2/utils/formikErrors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formikErrors.js","names":["flattenFormikErrors","errors","prefix","Object","entries","flatMap","key","value","path","length","name","message"],"sources":["../../../../src/lib/v2/utils/formikErrors.ts"],"sourcesContent":["import type { FormErrorSummaryError } from \"../patterns/FormErrorSummary\";\r\n\r\n/**\r\n * flattenFormikErrors — Formik's nested `errors` → the flat list\r\n * `FormErrorSummary` consumes (capability gap G-38).\r\n *\r\n * ─────────────────────────────────────────────────────────────────────────────\r\n * WHY THIS BELONGS IN THE LIBRARY\r\n *\r\n * The library already owns BOTH ends of the failed-submit recipe that R-FV.2\r\n * and R-FV.3 make mandatory:\r\n *\r\n *   · `FormErrorSummary`  — the banner at the top of the form, whose items are\r\n *                           `{ name, message }` and whose `onItemClick` hands\r\n *                           back the field NAME;\r\n *   · `FormikErrorFocus` / `focusFieldByName` — the counterpart that moves\r\n *                           focus, resolving that same name as `[name=\"…\"]`.\r\n *\r\n * What it never shipped is the step between them. Formik's `errors` mirrors the\r\n * shape of `values` — a nested object whose leaves are message strings — and\r\n * nothing in the library turned that tree into the flat list both ends speak.\r\n * So every Formik host wrote the recursion itself, which is a duplication the\r\n * Platform TypeScript Guidelines forbid outright, and which the library invited\r\n * by publishing the type (`FormErrorSummaryError`) without the one function\r\n * that produces it.\r\n *\r\n * >>> THE FAILURE MODE IS THE PATH, AND IT IS INVISIBLE TO REVIEW. Every\r\n * >>> re-implementation gets `{ name, message }` right and the ACCUMULATED PATH\r\n * >>> subtly wrong — a missing separator, a skipped array index, a `[0]`\r\n * >>> written where Formik writes `.0`. Nothing throws. The banner renders,\r\n * >>> lists the right messages, and its jump button targets a field that does\r\n * >>> not exist: `focusFieldByName` finds no node and the click does nothing.\r\n * >>> A user staring at a rejected form clicks the one affordance offered to\r\n * >>> find the offending field, and it silently fails.\r\n * >>>\r\n * >>> Promoted from `refonte-frontend` (Area 5), where it had already been\r\n * >>> extracted once — out of a single page and into module-common — for\r\n * >>> exactly this reason, when a second form needed it. The next module along\r\n * >>> would have been the third copy. <<<\r\n * ─────────────────────────────────────────────────────────────────────────────\r\n *\r\n * ARRAY ERRORS ARE TRAVERSED AS OBJECTS, DELIBERATELY. `Yup.array()` produces\r\n * errors keyed by index, so the path becomes `beneficiaires.0.nom` — dot,\r\n * not bracket. That is the form Formik itself produces and therefore the form\r\n * the corresponding field's `name` attribute carries, which is what makes the\r\n * path usable by `focusFieldByName` and by `setFieldValue` alike. Rewriting it\r\n * as `beneficiaires[0].nom` would read more naturally and match nothing.\r\n *\r\n * Non-string leaves that are not objects (a `false`, a `null` left by a custom\r\n * validator) yield nothing rather than an item with an empty message: a summary\r\n * line with no text is worse than one line fewer, since it is clickable, blank,\r\n * and lists no reason.\r\n *\r\n * Usage:\r\n *\r\n *   <FormErrorSummary\r\n *     errors={flattenFormikErrors(formik.errors)}\r\n *     onItemClick={focusFieldByName}\r\n *   />\r\n *\r\n * The `FormErrorSummaryError` import is TYPE-ONLY and therefore erased at\r\n * build time: this util does not depend on ./patterns at runtime, and the\r\n * item shape keeps a single declaration next to the component that renders it\r\n * rather than being restated here.\r\n */\r\nexport function flattenFormikErrors(\r\n  errors: unknown,\r\n  prefix = \"\"\r\n): FormErrorSummaryError[] {\r\n  if (!errors || typeof errors !== \"object\") return [];\r\n  return Object.entries(errors as Record<string, unknown>).flatMap(\r\n    ([key, value]) => {\r\n      const path = prefix ? `${prefix}.${key}` : key;\r\n      if (typeof value === \"string\") {\r\n        return value.length > 0 ? [{ name: path, message: value }] : [];\r\n      }\r\n      return flattenFormikErrors(value, path);\r\n    }\r\n  );\r\n}\r\n\r\nexport default flattenFormikErrors;\r\n"],"mappings":"AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASA,mBAAmBA,CACjCC,MAAe,EACfC,MAAM,GAAG,EAAE,EACc;EACzB,IAAI,CAACD,MAAM,IAAI,OAAOA,MAAM,KAAK,QAAQ,EAAE,OAAO,EAAE;EACpD,OAAOE,MAAM,CAACC,OAAO,CAACH,MAAiC,CAAC,CAACI,OAAO,CAC9D,CAAC,CAACC,GAAG,EAAEC,KAAK,CAAC,KAAK;IAChB,MAAMC,IAAI,GAAGN,MAAM,GAAG,GAAGA,MAAM,IAAII,GAAG,EAAE,GAAGA,GAAG;IAC9C,IAAI,OAAOC,KAAK,KAAK,QAAQ,EAAE;MAC7B,OAAOA,KAAK,CAACE,MAAM,GAAG,CAAC,GAAG,CAAC;QAAEC,IAAI,EAAEF,IAAI;QAAEG,OAAO,EAAEJ;MAAM,CAAC,CAAC,GAAG,EAAE;IACjE;IACA,OAAOP,mBAAmB,CAACO,KAAK,EAAEC,IAAI,CAAC;EACzC,CACF,CAAC;AACH;AAEA,eAAeR,mBAAmB","ignoreList":[]}