@postgres.ai/shared 4.0.3 → 4.1.0

package/dist/styles/global.scss

@@ -0,0 +1,29 @@
+@import './vars';
+
+* {
+  margin: 0;
+  padding: 0;
+  box-sizing: border-box;
+}
+
+body {
+  font-family: $font-family-text;
+  font-size: $font-size-main;
+  -webkit-font-smoothing: antialiased;
+  -moz-osx-font-smoothing: grayscale;
+}
+
+code {
+  font-family: $font-family-code;
+}
+
+button {
+  font-family: inherit;
+  font-size: inherit;
+}
+
+#root {
+  height: 100vh;
+  display: flex;
+  flex-direction: column;
+}

package/dist/styles/mixins.scss

@@ -0,0 +1,30 @@
+// Screen width.
+@mixin screen-max-width ($width) {
+  @media screen and (max-width: $width) {
+    @content;
+  }
+}
+
+@mixin sm {
+  @include screen-max-width(600px) {
+    @content;
+  }
+}
+
+// Transitions.
+@mixin transition($properties, $duration, $function)  {
+  $transition: ();
+  @for $i from 1 through length($properties) {
+    $transition: append($transition, $duration nth($properties, $i) $function, $separator: comma);
+  }
+
+  transition: $transition;
+}
+
+@mixin touch-transition ($properties) {
+  @include transition(($properties), .2s, ease-out);
+}
+
+@mixin animation-transition ($properties) {
+  @include transition(($properties), .4s, ease-out);
+}

package/dist/styles/vars.scss

@@ -0,0 +1,43 @@
+// Colors.
+$color-white: #fff;
+
+$color-white--100: #FBFBFB;
+
+$color-black: #000;
+
+$color-gray-100: #CCD7DA;
+$color-gray: #b4b4b4;
+
+$color-gray-semi-dark: #808080;
+
+$color-gray-dark: #444;
+
+$color-gray-darkest: #333;
+$color-gray-darkest--hover: darken($color-gray-darkest, 5);
+
+$color-orange: #ff6212;
+$color-orange--hover: darken($color-orange, 10);
+
+$color-status-ok: #0db94d;
+$color-status-warning: #fd8411;
+$color-status-error: #ff2020;
+$color-status-waiting: #ffad5f;
+$color-status-unknown: #c0c0c0; // prev color-gray
+
+
+$color-blue-main: #0F879D;
+$color-blue-dark: #026173;
+
+// Fonts.
+$font-family-text: 'Roboto', sans-serif;
+$font-family-code: 'Roboto Mono', monospace;
+
+// Typography.
+$font-size-small: 12px;
+$font-size-main: 14px;
+
+// Shadows.
+$box-shadow-layer: 0 2px 6px rgba(0, 0, 0, 0.1);
+
+// Sizes.
+$border-radius--small: 4px;

package/dist/tsconfig.build.json

@@ -0,0 +1,36 @@
+{
+    "extends": "./tsconfig.json",
+    "compilerOptions": {
+      "rootDir": ".",
+      "outDir": "dist",
+      "declaration": true,
+      "emitDeclarationOnly": false,
+      "noEmit": false,
+      "module": "esnext",
+      "target": "es2019",
+      "moduleResolution": "node",
+      "jsx": "react-jsx",
+      "resolveJsonModule": true,
+      "esModuleInterop": true
+    },
+    "include": [
+      "components/**/*",
+      "config/**/*",
+      "helpers/**/*",
+      "hooks/**/*",
+      "icons/**/*",
+      "pages/**/*",
+      "stores/**/*",
+      "styles/**/*",
+      "types/**/*",
+      "utils/**/*",
+      "react-app-env.d.ts",
+    ],
+    "exclude": [
+      "node_modules",
+      "dist",
+      "meta.json",
+      "**/*.test.ts",
+      "**/*.test.tsx"
+    ]
+  }

package/dist/tsconfig.json

@@ -0,0 +1,30 @@
+{
+  "compilerOptions": {
+    "target": "es5",
+    "lib": [
+      "dom",
+      "dom.iterable",
+      "esnext"
+    ],
+    "allowJs": true,
+    "skipLibCheck": true,
+    "esModuleInterop": true,
+    "allowSyntheticDefaultImports": true,
+    "strict": true,
+    "forceConsistentCasingInFileNames": true,
+    "noFallthroughCasesInSwitch": true,
+    "module": "esnext",
+    "moduleResolution": "node",
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "noEmit": true,
+    "jsx": "react-jsx",
+    "baseUrl": ".",
+    "paths": {
+      "@postgres.ai/shared/*": ["./*"]
+    }
+  },
+  "include": [
+    "."
+  ]
+}

package/{types → dist/types}/api/endpoints/createClone.d.ts

@@ -5,7 +5,7 @@ export declare type CreateClone = (args: {
     snapshotId: string;
     dbUser: string;
     dbPassword: string;
-    isProtected: boolean;
+    protectionDurationMinutes: string;
     branch?: string;
 }) => Promise<{
     response: Clone | null;

package/{types → dist/types}/api/endpoints/updateClone.d.ts

@@ -3,6 +3,7 @@ export declare type UpdateClone = (args: {
     cloneId: string;
     clone: {
         isProtected: boolean;
+        protectionDurationMinutes?: number;
     };
 }) => Promise<{
     response: true | null;

package/{types → dist/types}/api/entities/clone.d.ts

@@ -8,9 +8,12 @@ export declare type CloneDto = {
         message: string;
     };
     protected: boolean;
+    protectedTill?: string;
     metadata: {
         cloneDiffSize: number;
         cloningTime: number;
+        protectionLeaseDurationMinutes?: number;
+        protectionMaxDurationMinutes?: number;
     };
     db: {
         username: string;
@@ -22,6 +25,7 @@ export declare type CloneDto = {
 export declare const formatCloneDto: (dto: CloneDto) => {
     createdAt: string;
     createdAtDate: Date;
+    protectedTillDate: Date | null;
     snapshot: {
         createdAtDate: Date;
         dataStateAtDate: Date;
@@ -43,9 +47,12 @@ export declare const formatCloneDto: (dto: CloneDto) => {
         message: string;
     };
     protected: boolean;
+    protectedTill?: string | undefined;
     metadata: {
         cloneDiffSize: number;
         cloningTime: number;
+        protectionLeaseDurationMinutes?: number;
+        protectionMaxDurationMinutes?: number;
     };
     db: {
         username: string;

package/{types → dist/types}/api/entities/clone.js

@@ -10,5 +10,6 @@ export const formatCloneDto = (dto) => ({
     ...dto,
     createdAt: dto.createdAt,
     createdAtDate: parseDate(dto.createdAt),
+    protectedTillDate: dto.protectedTill ? parseDate(dto.protectedTill) : null,
     snapshot: dto.snapshot ? formatSnapshotDto(dto.snapshot) : null,
 });

package/{types → dist/types}/api/entities/config.js

@@ -1,7 +1,7 @@
 import { formatDatabases, formatDumpCustomOptions, getImageMajorVersion, getImageType, isSeDockerImage, } from '@postgres.ai/shared/pages/Instance/Configuration/utils';
 import { formatTuningParams } from '../endpoints/testDbSource';
 export const formatConfig = (config) => {
-    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q, _r, _s, _t, _u, _v, _w, _x, _y, _z, _0, _1, _2, _3, _4, _5, _6, _7, _8, _9, _10, _11, _12, _13, _14, _15, _16, _17, _18, _19, _20, _21, _22, _23, _24, _25, _26, _27, _28, _29, _30, _31, _32, _33, _34, _35, _36, _37, _38, _39, _40, _41, _42;
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q, _r, _s, _t, _u, _v, _w, _x, _y, _z, _0, _1, _2, _3, _4, _5, _6, _7, _8, _9, _10, _11, _12, _13, _14, _15, _16, _17, _18, _19, _20, _21, _22, _23, _24, _25, _26, _27, _28, _29, _30, _31, _32, _33, _34, _35, _36, _37, _38, _39, _40, _41, _42, _43, _44, _45;
     const dockerImage = (_a = config.databaseContainer) === null || _a === void 0 ? void 0 : _a.dockerImage;
     return {
         debug: (_b = config.global) === null || _b === void 0 ? void 0 : _b.debug,
@@ -27,12 +27,12 @@ export const formatConfig = (config) => {
         port: (_2 = (_1 = (_0 = (_z = (_y = (_x = config.retrieval) === null || _x === void 0 ? void 0 : _x.spec) === null || _y === void 0 ? void 0 : _y.logicalDump) === null || _z === void 0 ? void 0 : _z.options) === null || _0 === void 0 ? void 0 : _0.source) === null || _1 === void 0 ? void 0 : _1.connection) === null || _2 === void 0 ? void 0 : _2.port,
         username: (_8 = (_7 = (_6 = (_5 = (_4 = (_3 = config.retrieval) === null || _3 === void 0 ? void 0 : _3.spec) === null || _4 === void 0 ? void 0 : _4.logicalDump) === null || _5 === void 0 ? void 0 : _5.options) === null || _6 === void 0 ? void 0 : _6.source) === null || _7 === void 0 ? void 0 : _7.connection) === null || _8 === void 0 ? void 0 : _8.username,
         password: (_14 = (_13 = (_12 = (_11 = (_10 = (_9 = config.retrieval) === null || _9 === void 0 ? void 0 : _9.spec) === null || _10 === void 0 ? void 0 : _10.logicalDump) === null || _11 === void 0 ? void 0 : _11.options) === null || _12 === void 0 ? void 0 : _12.source) === null || _13 === void 0 ? void 0 : _13.connection) === null || _14 === void 0 ? void 0 : _14.password,
-        databases: formatDatabases((_18 = (_17 = (_16 = (_15 = config.retrieval) === null || _15 === void 0 ? void 0 : _15.spec) === null || _16 === void 0 ? void 0 : _16.logicalDump) === null || _17 === void 0 ? void 0 : _17.options) === null || _18 === void 0 ? void 0 : _18.databases),
-        dumpParallelJobs: (_22 = (_21 = (_20 = (_19 = config.retrieval) === null || _19 === void 0 ? void 0 : _19.spec) === null || _20 === void 0 ? void 0 : _20.logicalDump) === null || _21 === void 0 ? void 0 : _21.options) === null || _22 === void 0 ? void 0 : _22.parallelJobs,
-        dumpIgnoreErrors: (_26 = (_25 = (_24 = (_23 = config.retrieval) === null || _23 === void 0 ? void 0 : _23.spec) === null || _24 === void 0 ? void 0 : _24.logicalDump) === null || _25 === void 0 ? void 0 : _25.options) === null || _26 === void 0 ? void 0 : _26.ignoreErrors,
-        restoreParallelJobs: (_30 = (_29 = (_28 = (_27 = config.retrieval) === null || _27 === void 0 ? void 0 : _27.spec) === null || _28 === void 0 ? void 0 : _28.logicalRestore) === null || _29 === void 0 ? void 0 : _29.options) === null || _30 === void 0 ? void 0 : _30.parallelJobs,
-        restoreIgnoreErrors: (_34 = (_33 = (_32 = (_31 = config.retrieval) === null || _31 === void 0 ? void 0 : _31.spec) === null || _32 === void 0 ? void 0 : _32.logicalRestore) === null || _33 === void 0 ? void 0 : _33.options) === null || _34 === void 0 ? void 0 : _34.ignoreErrors,
-        pgDumpCustomOptions: formatDumpCustomOptions(((_38 = (_37 = (_36 = (_35 = config.retrieval) === null || _35 === void 0 ? void 0 : _35.spec) === null || _36 === void 0 ? void 0 : _36.logicalDump) === null || _37 === void 0 ? void 0 : _37.options) === null || _38 === void 0 ? void 0 : _38.customOptions) || null),
-        pgRestoreCustomOptions: formatDumpCustomOptions(((_42 = (_41 = (_40 = (_39 = config.retrieval) === null || _39 === void 0 ? void 0 : _39.spec) === null || _40 === void 0 ? void 0 : _40.logicalRestore) === null || _41 === void 0 ? void 0 : _41.options) === null || _42 === void 0 ? void 0 : _42.customOptions) || null),
+        databases: formatDatabases((_19 = (_18 = (_17 = (_16 = (_15 = config.retrieval) === null || _15 === void 0 ? void 0 : _15.spec) === null || _16 === void 0 ? void 0 : _16.logicalDump) === null || _17 === void 0 ? void 0 : _17.options) === null || _18 === void 0 ? void 0 : _18.databases) !== null && _19 !== void 0 ? _19 : null),
+        dumpParallelJobs: (_23 = (_22 = (_21 = (_20 = config.retrieval) === null || _20 === void 0 ? void 0 : _20.spec) === null || _21 === void 0 ? void 0 : _21.logicalDump) === null || _22 === void 0 ? void 0 : _22.options) === null || _23 === void 0 ? void 0 : _23.parallelJobs,
+        dumpIgnoreErrors: (_27 = (_26 = (_25 = (_24 = config.retrieval) === null || _24 === void 0 ? void 0 : _24.spec) === null || _25 === void 0 ? void 0 : _25.logicalDump) === null || _26 === void 0 ? void 0 : _26.options) === null || _27 === void 0 ? void 0 : _27.ignoreErrors,
+        restoreParallelJobs: (_31 = (_30 = (_29 = (_28 = config.retrieval) === null || _28 === void 0 ? void 0 : _28.spec) === null || _29 === void 0 ? void 0 : _29.logicalRestore) === null || _30 === void 0 ? void 0 : _30.options) === null || _31 === void 0 ? void 0 : _31.parallelJobs,
+        restoreIgnoreErrors: (_35 = (_34 = (_33 = (_32 = config.retrieval) === null || _32 === void 0 ? void 0 : _32.spec) === null || _33 === void 0 ? void 0 : _33.logicalRestore) === null || _34 === void 0 ? void 0 : _34.options) === null || _35 === void 0 ? void 0 : _35.ignoreErrors,
+        pgDumpCustomOptions: formatDumpCustomOptions((_40 = (_39 = (_38 = (_37 = (_36 = config.retrieval) === null || _36 === void 0 ? void 0 : _36.spec) === null || _37 === void 0 ? void 0 : _37.logicalDump) === null || _38 === void 0 ? void 0 : _38.options) === null || _39 === void 0 ? void 0 : _39.customOptions) !== null && _40 !== void 0 ? _40 : null),
+        pgRestoreCustomOptions: formatDumpCustomOptions((_45 = (_44 = (_43 = (_42 = (_41 = config.retrieval) === null || _41 === void 0 ? void 0 : _41.spec) === null || _42 === void 0 ? void 0 : _42.logicalRestore) === null || _43 === void 0 ? void 0 : _43.options) === null || _44 === void 0 ? void 0 : _44.customOptions) !== null && _45 !== void 0 ? _45 : null),
     };
 };

package/{types → dist/types}/api/entities/instance.d.ts

@@ -61,6 +61,7 @@ export declare const formatInstanceDto: (dto: InstanceDto) => {
             clones: {
                 createdAt: string;
                 createdAtDate: Date;
+                protectedTillDate: Date | null;
                 snapshot: {
                     createdAtDate: Date;
                     dataStateAtDate: Date;
@@ -82,9 +83,12 @@ export declare const formatInstanceDto: (dto: InstanceDto) => {
                     message: string;
                 };
                 protected: boolean;
+                protectedTill?: string | undefined;
                 metadata: {
                     cloneDiffSize: number;
                     cloningTime: number;
+                    protectionLeaseDurationMinutes?: number | undefined;
+                    protectionMaxDurationMinutes?: number | undefined;
                 };
                 db: {
                     username: string;
@@ -93,6 +97,8 @@ export declare const formatInstanceDto: (dto: InstanceDto) => {
                 };
             }[];
             expectedCloningTime: number;
+            protectionLeaseDurationMinutes: number | undefined;
+            protectionMaxDurationMinutes: number | undefined;
         };
         pools: import("./pool").PoolDto[] | null;
         dataSize: number | null;

package/{types → dist/types}/api/entities/instanceState.d.ts

@@ -5,6 +5,8 @@ export declare type InstanceStateDto = {
         clones: CloneDto[];
         expectedCloningTime: number;
         numClones?: number;
+        protectionLeaseDurationMinutes?: number;
+        protectionMaxDurationMinutes?: number;
     };
     status: {
         code: 'OK' | 'WARNING' | 'NO_RESPONSE';
@@ -64,6 +66,7 @@ export declare const formatInstanceStateDto: (dto: InstanceStateDto) => {
         clones: {
             createdAt: string;
             createdAtDate: Date;
+            protectedTillDate: Date | null;
             snapshot: {
                 createdAtDate: Date;
                 dataStateAtDate: Date;
@@ -85,9 +88,12 @@ export declare const formatInstanceStateDto: (dto: InstanceStateDto) => {
                 message: string;
             };
             protected: boolean;
+            protectedTill?: string | undefined;
             metadata: {
                 cloneDiffSize: number;
                 cloningTime: number;
+                protectionLeaseDurationMinutes?: number | undefined;
+                protectionMaxDurationMinutes?: number | undefined;
             };
             db: {
                 username: string;
@@ -96,6 +102,8 @@ export declare const formatInstanceStateDto: (dto: InstanceStateDto) => {
             };
         }[];
         expectedCloningTime: number;
+        protectionLeaseDurationMinutes: number | undefined;
+        protectionMaxDurationMinutes: number | undefined;
     };
     pools: PoolDto[] | null;
     dataSize: number | null;

package/{types → dist/types}/api/entities/instanceState.js

@@ -1,7 +1,7 @@
 import { formatCloneDto, } from '@postgres.ai/shared/types/api/entities/clone';
 import { formatPoolDto, } from '@postgres.ai/shared/types/api/entities/pool';
 export const formatInstanceStateDto = (dto) => {
-    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p;
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q, _r;
     if (!dto)
         return null;
     const pools = (_b = (_a = dto.pools) === null || _a === void 0 ? void 0 : _a.map(formatPoolDto)) !== null && _b !== void 0 ? _b : null;
@@ -35,8 +35,10 @@ export const formatInstanceStateDto = (dto) => {
         cloning: {
             clones: clones,
             expectedCloningTime: expectedCloningTime,
+            protectionLeaseDurationMinutes: (_o = dto.cloning) === null || _o === void 0 ? void 0 : _o.protectionLeaseDurationMinutes,
+            protectionMaxDurationMinutes: (_p = dto.cloning) === null || _p === void 0 ? void 0 : _p.protectionMaxDurationMinutes,
         },
         pools,
-        dataSize: (_p = (_o = dto.dataSize) !== null && _o !== void 0 ? _o : pools === null || pools === void 0 ? void 0 : pools.reduce((sum, pool) => pool.fileSystem.dataSize + sum, 0)) !== null && _p !== void 0 ? _p : null,
+        dataSize: (_r = (_q = dto.dataSize) !== null && _q !== void 0 ? _q : pools === null || pools === void 0 ? void 0 : pools.reduce((sum, pool) => pool.fileSystem.dataSize + sum, 0)) !== null && _r !== void 0 ? _r : null,
     };
 };

package/helpers/getEntropy.ts

@@ -0,0 +1,278 @@
+const replaceChars = '!@$&*'
+const sepChars = '_-., '
+const otherSpecialChars = '“#%"()+/:;<=>?[\\]^{|}~'
+const lowerChars = 'abcdefghijklmnopqrstuvwxyz'
+const upperChars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ'
+const digitsChars = '0123456789'
+export const MIN_ENTROPY = 60
+
+function getBase(password: string): number {
+  let uniqueChars: string[] = []
+  for (const c of password) {
+    if (!uniqueChars.includes(c)) {
+      uniqueChars.push(c)
+    }
+  }
+  let hasReplace = false
+  let hasSep = false
+  let hasOtherSpecial = false
+  let hasLower = false
+  let hasUpper = false
+  let hasDigits = false
+  let base = 0
+
+  for (let i = 0; i < uniqueChars.length; i++) {
+    switch (true) {
+      case replaceChars.includes(uniqueChars[i]):
+        hasReplace = true
+        break
+      case sepChars.includes(uniqueChars[i]):
+        hasSep = true
+        break
+      case otherSpecialChars.includes(uniqueChars[i]):
+        hasOtherSpecial = true
+        break
+      case lowerChars.includes(uniqueChars[i]):
+        hasLower = true
+        break
+      case upperChars.includes(uniqueChars[i]):
+        hasUpper = true
+        break
+      case digitsChars.includes(uniqueChars[i]):
+        hasDigits = true
+        break
+      default:
+        base++
+        break
+    }
+  }
+  if (hasReplace) {
+    base += replaceChars.length
+  }
+  if (hasSep) {
+    base += sepChars.length
+  }
+  if (hasOtherSpecial) {
+    base += otherSpecialChars.length
+  }
+  if (hasLower) {
+    base += lowerChars.length
+  }
+  if (hasUpper) {
+    base += upperChars.length
+  }
+  if (hasDigits) {
+    base += digitsChars.length
+  }
+  return base
+}
+const seqNums = '0123456789'
+const seqKeyboard0 = 'qwertyuiop'
+const seqKeyboard1 = 'asdfghjkl'
+const seqKeyboard2 = 'zxcvbnm'
+const seqAlphabet = 'abcdefghijklmnopqrstuvwxyz'
+function removeMoreThanTwoFromSequence(s: string, seq: string): string {
+  const seqRunes: string[] = Array.from(seq)
+  let runes: string[] = Array.from(s)
+  let matches = 0
+  for (let i = 0; i < runes.length; i++) {
+    for (let j = 0; j < seqRunes.length; j++) {
+      if (i >= runes.length) {
+        break
+      }
+      const r = runes[i]
+      const r2 = seqRunes[j]
+      if (r !== r2) {
+        matches = 0
+        continue
+      }
+      // found a match, advance the counter
+      matches++
+      if (matches > 2) {
+        runes.splice(i, 1)
+      } else {
+        i++
+      }
+    }
+  }
+  return runes.join('')
+}
+function getReversedString(s: string): string {
+  const rune: string[] = Array.from(s)
+  const n = rune.length
+  for (let i = 0; i < Math.floor(n / 2); i++) {
+    ;[rune[i], rune[n - 1 - i]] = [rune[n - 1 - i], rune[i]]
+  }
+  return rune.join('')
+}
+function removeMoreThanTwoRepeatingChars(s: string): string {
+  let prevPrev: string = ''
+  let prev: string = ''
+  const runes: string[] = Array.from(s)
+  for (let i = 0; i < runes.length; i++) {
+    const r = runes[i]
+    if (r === prev && r === prevPrev) {
+      runes.splice(i, 1)
+      i--
+    }
+    prevPrev = prev
+    prev = r
+  }
+  return runes.join('')
+}
+function getLength(password: string): number {
+  password = removeMoreThanTwoRepeatingChars(password)
+  password = removeMoreThanTwoFromSequence(password, seqNums)
+  password = removeMoreThanTwoFromSequence(password, seqKeyboard0)
+  password = removeMoreThanTwoFromSequence(password, seqKeyboard1)
+  password = removeMoreThanTwoFromSequence(password, seqKeyboard2)
+  password = removeMoreThanTwoFromSequence(password, seqAlphabet)
+  password = removeMoreThanTwoFromSequence(password, getReversedString(seqNums))
+  password = removeMoreThanTwoFromSequence(
+    password,
+    getReversedString(seqKeyboard0),
+  )
+  password = removeMoreThanTwoFromSequence(
+    password,
+    getReversedString(seqKeyboard1),
+  )
+  password = removeMoreThanTwoFromSequence(
+    password,
+    getReversedString(seqKeyboard2),
+  )
+  password = removeMoreThanTwoFromSequence(
+    password,
+    getReversedString(seqAlphabet),
+  )
+  return password.length
+}
+export function getEntropy(password: string): number {
+  return getEntropyInternal(password)
+}
+function getEntropyInternal(password: string): number {
+  const base = getBase(password)
+  const length = getLength(password)
+  // calculate log2(base^length)
+  return logPow(base, length, 2)
+}
+function logX(base: number, n: number): number {
+  if (base == 0) {
+    return 0
+  } else {
+    return Math.log2(n) / Math.log2(base)
+  }
+}
+function logPow(expBase: number, pow: number, logBase: number): number {
+  let total = 0
+  for (let i = 0; i < pow; i++) {
+    total += logX(logBase, expBase)
+  }
+  return total
+}
+
+function getSecureRandomInt(max: number): number {
+  const array = new Uint32Array(1)
+  crypto.getRandomValues(array)
+  return array[0] % max
+}
+
+/**
+ * generates a cryptographically secure random password with guaranteed character diversity
+ *
+ * @param length - desired password length, constrained to 4-128 characters (default: 16)
+ * @returns a random password containing at least one character from each category:
+ *          lowercase letters, uppercase letters, digits, and special characters (!@$&*_-.)
+ */
+export function generatePassword(length: number = 16): string {
+  const minLength = 4
+  const maxLength = 128
+  const actualLength = Math.max(Math.min(length, maxLength), minLength)
+
+  const lowercase = 'abcdefghijklmnopqrstuvwxyz'
+  const uppercase = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ'
+  const digits = '0123456789'
+  const special = '!@$&*_-.'
+  const allChars = lowercase + uppercase + digits + special
+
+  let password = ''
+  // ensure at least one character from each category
+  password += lowercase[getSecureRandomInt(lowercase.length)]
+  password += uppercase[getSecureRandomInt(uppercase.length)]
+  password += digits[getSecureRandomInt(digits.length)]
+  password += special[getSecureRandomInt(special.length)]
+
+  // fill the rest with random characters
+  for (let i = password.length; i < actualLength; i++) {
+    password += allChars[getSecureRandomInt(allChars.length)]
+  }
+
+  // shuffle the password to randomize positions (Fisher-Yates)
+  const shuffled = password.split('')
+  for (let i = shuffled.length - 1; i > 0; i--) {
+    const j = getSecureRandomInt(i + 1);
+    [shuffled[i], shuffled[j]] = [shuffled[j], shuffled[i]]
+  }
+
+  return shuffled.join('')
+}
+
+export function validatePassword(password: string, minEntropy: number): string {
+  const entropy: number = getEntropy(password)
+  if (entropy >= minEntropy) {
+    return ''
+  }
+
+  let hasReplace: boolean = false
+  let hasSep: boolean = false
+  let hasOtherSpecial: boolean = false
+  let hasLower: boolean = false
+  let hasUpper: boolean = false
+  let hasDigits: boolean = false
+
+  for (const c of password) {
+    switch (true) {
+      case replaceChars.includes(c):
+        hasReplace = true
+        break
+      case sepChars.includes(c):
+        hasSep = true
+        break
+      case otherSpecialChars.includes(c):
+        hasOtherSpecial = true
+        break
+      case lowerChars.includes(c):
+        hasLower = true
+        break
+      case upperChars.includes(c):
+        hasUpper = true
+        break
+      case digitsChars.includes(c):
+        hasDigits = true
+        break
+    }
+  }
+
+  const allMessages: string[] = []
+
+  if (!hasOtherSpecial || !hasSep || !hasReplace) {
+    allMessages.push('including more special characters')
+  }
+  if (!hasLower) {
+    allMessages.push('using lowercase letters')
+  }
+  if (!hasUpper) {
+    allMessages.push('using uppercase letters')
+  }
+  if (!hasDigits) {
+    allMessages.push('using numbers')
+  }
+
+  if (allMessages.length > 0) {
+    const errorMessage: string = `Weak password, try ${allMessages.join(
+      ', ',
+    )} or using a longer password`
+    return errorMessage
+  }
+
+  return 'Weak password, try using a longer password'
+}

package/helpers/localStorage.ts

@@ -0,0 +1,15 @@
+const keys = {
+  // Keep this name.
+  authToken: 'token',
+}
+
+export class LocalStorage {
+  // Auth token.
+  getAuthToken = () => window.localStorage.getItem(keys.authToken)
+
+  setAuthToken = (value: string) => window.localStorage.setItem(keys.authToken, value)
+
+  removeAuthToken = () => window.localStorage.removeItem(keys.authToken)
+}
+
+export const localStorage = new LocalStorage()