@sjolystinnovation/app-kit 0.7.0 → 0.9.0

package/README.md

@@ -566,6 +566,46 @@ From `@sjolystinnovation/app-kit/ui`. A labelled text field with the same look a
 <TextInput label="Email" name="email" type="email" required error={errors.email} />
 ```
 
+### `TextArea`
+
+From `@sjolystinnovation/app-kit/ui`. A labelled multi-line field with the same look, label and
+error handling as `TextInput`. It takes the other `<textarea>` attributes too, and works controlled
+or uncontrolled.
+
+```tsx
+<TextArea label="Description" name="description" rows={4} maxRows={10} error={errors.description} />
+```
+
+| Prop | Type | Default | Description |
+| --- | --- | --- | --- |
+| `label` | `string` | | Visible label, tied to the text area. |
+| `error` | `string` | | Message shown under the field, read out with it by screen readers. |
+| `autoGrow` | `boolean` | `true` | Grows with its text from `rows` lines up to `maxRows`, and has no resize handle. With `false` it keeps its size and shows the handle. |
+| `rows` | `number` | `3` | Lines shown when empty. |
+| `maxRows` | `number` | `12` | The most lines an auto-growing box shows before it scrolls. |
+| `className` | `string` | | Classes for placing the field, on the outer element. |
+
+### `Toggle`
+
+From `@sjolystinnovation/app-kit/ui`. An on and off switch for a setting that takes effect at once.
+It takes the other `<button>` attributes too.
+
+```tsx
+<Toggle label="Email notifications" checked={enabled} onChange={setEnabled} />
+<Toggle aria-label="VAT" checked={vat} onChange={setVat} disabled={saving} />
+```
+
+| Prop | Type | Description |
+| --- | --- | --- |
+| `checked` | `boolean` | Whether the switch is on. |
+| `onChange` | `(checked: boolean) => void` | Called with the new state. A callback that ignores it also fits. |
+| `label` | `string` | Visible text after the switch. It names the switch, and a click on it flips the switch. |
+| `aria-label` | `string` | The switch's name when there is no `label`. One of the two is required. |
+| `disabled` | `boolean` | Greys the switch out and ignores clicks. |
+| `className` | `string` | Classes for placing it, on the outer element. |
+
+An `onClick` that calls `event.preventDefault()` stops the change.
+
 ### `Alert`
 
 ```tsx
@@ -613,6 +653,24 @@ toast passes through, and so do the error states of `toast.promise`.
 import { toast } from "@sjolystinnovation/app-kit/toast";
 ```
 
+### `passwordSchema(strings?)`
+
+From `@sjolystinnovation/app-kit/validation`. A zod schema for a new password, with the rules the APIs
+enforce through ASP.NET Identity: at least 8 characters, with a lowercase letter, an uppercase letter
+and a digit. No symbol is needed. Identity counts only ASCII, so the letters are A to Z and the digits
+0 to 9, and "Å" does not count as uppercase. Identity sets no upper limit. An app whose API does adds
+it with `.max()`. A failing password gets one issue per rule it breaks, each with its message from
+`strings`. Missing messages fall back to `defaultPasswordStrings`, which are English.
+
+```ts
+import { passwordSchema } from "@sjolystinnovation/app-kit/validation";
+
+const result = passwordSchema({ uppercase: "Ta med en stor bokstav fra A til Z." }).safeParse(newPassword);
+const gargeRule = passwordSchema().max(128, "Be at most 128 characters long.");
+```
+
+`PASSWORD_MIN_LENGTH` holds the minimum, for hint text.
+
 ## Theming
 
 The components draw every colour, corner radius and label size from theme variables with a light
@@ -656,6 +714,9 @@ selector such as `.dark` for a scoped theme:
 | `--input-focus-ring-width` | `2px` |
 | `--color-input-toggle` | gray 400, the show password icon |
 | `--color-input-toggle-hover` | gray 600 |
+| `--color-toggle-on` | `var(--color-primary)`, the track of a `Toggle` that is on |
+| `--color-toggle-off` | gray 200, the track of a `Toggle` that is off |
+| `--color-toggle-thumb` | white |
 | `--radius-button` | `var(--radius-lg)` |
 | `--color-button-primary-bg` | `var(--color-primary)` |
 | `--color-button-primary-text` | `var(--color-primary-foreground)` |
@@ -680,6 +741,7 @@ with it and has to set the ones it uses itself.
 
 - Next.js 16, React 19, next-auth 4.24 or later and axios 1.20 or later, as peer dependencies the
   app installs itself.
+- For `@sjolystinnovation/app-kit/validation`: zod 4, as an optional peer dependency.
 - For `@sjolystinnovation/app-kit/toast`: sonner 2, as an optional peer dependency. Install a single
   copy, because two copies keep two separate toast stores.
 - `jsonwebtoken` comes with the package. `@sjolystinnovation/app-kit/auth` uses it on the server.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sjolystinnovation/app-kit",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "description": "Building blocks for Next.js apps that sign in against a JWT API through next-auth",
   "license": "Apache-2.0",
   "author": "Sjølyst Innovation AS",
@@ -24,6 +24,7 @@
     "./server": "./src/server/index.ts",
     "./ui": "./src/ui/index.ts",
     "./toast": "./src/toast/index.ts",
+    "./validation": "./src/validation/index.ts",
     "./styles.css": "./src/styles.css"
   },
   "files": [
@@ -44,11 +45,15 @@
     "next-auth": "^4.24",
     "react": "^19",
     "react-dom": "^19",
-    "sonner": "^2"
+    "sonner": "^2",
+    "zod": "^4"
   },
   "peerDependenciesMeta": {
     "sonner": {
       "optional": true
+    },
+    "zod": {
+      "optional": true
     }
   },
   "devDependencies": {
@@ -67,7 +72,8 @@
     "react-dom": "^19.3.0",
     "sonner": "^2.0.8",
     "typescript": "^6.0.3",
-    "vitest": "^5.0.3"
+    "vitest": "^5.0.3",
+    "zod": "^4.6.5"
   },
   "keywords": [
     "next.js",

package/src/styles.css

@@ -41,6 +41,10 @@
   --color-input-toggle: var(--color-gray-400);
   --color-input-toggle-hover: var(--color-gray-600);
 
+  --color-toggle-on: var(--color-primary);
+  --color-toggle-off: var(--color-gray-200);
+  --color-toggle-thumb: var(--color-white);
+
   --radius-button: var(--radius-lg);
   --color-button-primary-bg: var(--color-primary);
   --color-button-primary-text: var(--color-primary-foreground);

package/src/ui/TextArea.tsx

@@ -0,0 +1,62 @@
+"use client";
+
+import { useCallback, useEffect, useRef, type TextareaHTMLAttributes } from "react";
+import { FieldError, FieldLabel, inputClass, useField } from "./field";
+
+export interface TextAreaProps extends TextareaHTMLAttributes<HTMLTextAreaElement> {
+  label: string;
+  error?: string | undefined;
+  /**
+   * Classes for placing the field, such as a margin. They go on the outer element, which holds the
+   * label, the text area and the error. Restyle the field through the theme variables.
+   */
+  className?: string | undefined;
+  /** Grows with its text, from `rows` lines up to `maxRows` lines. On by default. */
+  autoGrow?: boolean | undefined;
+  /** The most lines an auto-growing box shows before it scrolls. Defaults to 12. */
+  maxRows?: number | undefined;
+}
+
+export function TextArea({ label, error, className, autoGrow = true, maxRows = 12, rows = 3, onInput, ...props }: TextAreaProps) {
+  const field = useField(props, error);
+  const ref = useRef<HTMLTextAreaElement>(null);
+
+  const resize = useCallback(() => {
+    const el = ref.current;
+    if (!el || !autoGrow) return;
+    const style = getComputedStyle(el);
+    const lineHeight = parseFloat(style.lineHeight) || 20;
+    const padding = parseFloat(style.paddingTop) + parseFloat(style.paddingBottom);
+    // scrollHeight covers the content and padding. A border-box height also needs the border.
+    const border = parseFloat(style.borderTopWidth) + parseFloat(style.borderBottomWidth);
+    const boxFor = (lines: number) => lineHeight * lines + padding + border;
+    el.style.height = "auto";
+    el.style.height = `${Math.min(Math.max(el.scrollHeight + border, boxFor(Number(rows))), boxFor(maxRows))}px`;
+  }, [autoGrow, rows, maxRows]);
+
+  // A controlled box grows when its value changes. An uncontrolled one grows as it is typed in.
+  useEffect(resize, [resize, props.value]);
+
+  const handleInput = (event: Parameters<NonNullable<TextAreaProps["onInput"]>>[0]) => {
+    onInput?.(event);
+    resize();
+  };
+
+  return (
+    <div className={className}>
+      <FieldLabel htmlFor={field.inputId} required={props.required}>
+        {label}
+      </FieldLabel>
+      <textarea
+        {...props}
+        {...field.inputProps}
+        ref={ref}
+        rows={rows}
+        onInput={handleInput}
+        // An auto-growing box has no resize handle. The next keystroke would undo the drag.
+        className={inputClass(error, autoGrow ? "leading-relaxed resize-none" : "leading-relaxed resize-y")}
+      />
+      <FieldError id={field.errorId} error={error} />
+    </div>
+  );
+}

package/src/ui/Toggle.tsx

@@ -0,0 +1,55 @@
+"use client";
+
+import type { ButtonHTMLAttributes, MouseEvent } from "react";
+import { cx } from "./cx";
+
+type ToggleBase = Omit<ButtonHTMLAttributes<HTMLButtonElement>, "onChange" | "role" | "type" | "aria-checked"> & {
+  checked: boolean;
+  /** Called with the new state when the switch is flipped. */
+  onChange: (checked: boolean) => void;
+};
+
+/** A switch needs a name. Either a visible `label`, or an `aria-label` when there is none. */
+export type ToggleProps = ToggleBase & ({ label: string } | { label?: undefined; "aria-label": string });
+
+/** An on and off switch, for a setting that takes effect at once. */
+export function Toggle({ checked, onChange, label, className, disabled, onClick, ...props }: ToggleProps) {
+  const handleClick = (event: MouseEvent<HTMLButtonElement>) => {
+    onClick?.(event);
+    if (!event.defaultPrevented) onChange(!checked);
+  };
+
+  const button = (
+    <button
+      {...props}
+      type="button"
+      role="switch"
+      aria-checked={checked}
+      disabled={disabled}
+      onClick={handleClick}
+      className={cx(
+        "relative inline-flex h-6 w-11 shrink-0 items-center rounded-full transition-colors focus:outline-hidden focus-visible:ring-(length:--input-focus-ring-width) focus-visible:ring-input-focus-ring focus-visible:ring-offset-2 disabled:cursor-not-allowed disabled:opacity-50",
+        checked ? "bg-toggle-on" : "bg-toggle-off",
+        label === undefined && className,
+      )}
+    >
+      <span
+        aria-hidden="true"
+        className={cx(
+          "inline-block h-5 w-5 rounded-full bg-toggle-thumb shadow-sm transition-transform motion-reduce:transition-none",
+          checked ? "translate-x-5" : "translate-x-0.5",
+        )}
+      />
+    </button>
+  );
+
+  if (label === undefined) return button;
+
+  // The label wraps the switch, so the text names it and a click on the text flips it.
+  return (
+    <label className={cx("inline-flex items-center gap-2.5 text-field-label font-medium text-field-label-text select-none", disabled ? "cursor-not-allowed" : "cursor-pointer", className)}>
+      {button}
+      {label}
+    </label>
+  );
+}

package/src/ui/field.tsx

@@ -1,10 +1,16 @@
 "use client";
 
-import { useId, type InputHTMLAttributes, type ReactNode } from "react";
+import { useId, type AriaAttributes, type ReactNode } from "react";
 import { cx } from "./cx";
 
+/** The props of a field control that useField reads. An `<input>` and a `<textarea>` both have them. */
+export type FieldControlProps = Pick<AriaAttributes, "aria-required" | "aria-invalid" | "aria-describedby"> & {
+  id?: string | undefined;
+  required?: boolean | undefined;
+};
+
 /** The ids and aria attributes a labelled input needs, from the caller's own props. */
-export function useField(props: Pick<InputHTMLAttributes<HTMLInputElement>, "id" | "required" | "aria-required" | "aria-invalid" | "aria-describedby">, error: string | undefined) {
+export function useField(props: FieldControlProps, error: string | undefined) {
   // A generated id ties the label to its own control, even when two fields on a page share a name.
   const generated = useId();
   const inputId = props.id ?? generated;

package/src/ui/index.ts

@@ -6,6 +6,10 @@ export { SignInRejected, defaultCredentialsFormStrings } from "./credentialsForm
 export type { CredentialsFormStrings } from "./credentialsFormStrings";
 export { PasswordInput } from "./PasswordInput";
 export type { PasswordInputProps } from "./PasswordInput";
+export { TextArea } from "./TextArea";
+export type { TextAreaProps } from "./TextArea";
 export { TextInput } from "./TextInput";
 export type { TextInputProps } from "./TextInput";
+export { Toggle } from "./Toggle";
+export type { ToggleProps } from "./Toggle";
 export type { TextOverrides } from "./withDefaults";

package/src/validation/index.ts

@@ -0,0 +1,2 @@
+export { PASSWORD_MIN_LENGTH, defaultPasswordStrings, passwordSchema } from "./password";
+export type { PasswordStrings } from "./password";

package/src/validation/password.ts

@@ -0,0 +1,37 @@
+import { z } from "zod";
+import { withDefaults, type TextOverrides } from "../ui/withDefaults";
+
+/** The fewest characters a password may have. */
+export const PASSWORD_MIN_LENGTH = 8;
+
+/** The message for each password rule that fails. */
+export interface PasswordStrings {
+  tooShort: string;
+  lowercase: string;
+  uppercase: string;
+  digit: string;
+}
+
+export const defaultPasswordStrings: PasswordStrings = {
+  tooShort: `Use at least ${PASSWORD_MIN_LENGTH} characters.`,
+  lowercase: "Include a lowercase letter from a to z.",
+  uppercase: "Include an uppercase letter from A to Z.",
+  digit: "Include a digit from 0 to 9.",
+};
+
+/**
+ * A zod schema for a new password, with the rules the APIs enforce through ASP.NET Identity. Identity
+ * counts only ASCII letters and digits, so "Å" is neither an uppercase nor a lowercase letter here.
+ * Length counts UTF-16 code units, as Identity does. There is no upper limit, because Identity has
+ * none. An app whose API sets one adds it with `.max()`. A failing password gets one issue per rule
+ * it breaks.
+ */
+export function passwordSchema(strings?: TextOverrides<PasswordStrings>) {
+  const text = withDefaults(defaultPasswordStrings, strings);
+  return z
+    .string()
+    .min(PASSWORD_MIN_LENGTH, text.tooShort)
+    .regex(/[a-z]/, text.lowercase)
+    .regex(/[A-Z]/, text.uppercase)
+    .regex(/[0-9]/, text.digit);
+}