@skillcdn/console 0.4.0 → 0.4.1

package/src/schemas.ts

@@ -167,6 +167,18 @@ export const restProviderSchema = z.object({
   key: z.enum(PROVIDER_KEYS),
   /** What people read on the button. */
   label: z.string(),
+  /**
+   * Who this way in lets in, for the line under the button: the organization at the git host
+   * whose members are in, the Workspace domains whose accounts are, or neither, where only the
+   * logins an administrator listed get in. Answered from 0.4.1; read as optional, so that a
+   * console built on this package reads an older console's answer.
+   */
+  admits: z.optional(
+    z.object({
+      organization: z.nullable(z.string()),
+      domains: z.array(z.string()),
+    }),
+  ),
 });
 export type RestProvider = z.infer<typeof restProviderSchema>;
 
@@ -1095,9 +1107,10 @@ export const restPackConnectStartedSchema = z.object({
 export type RestPackConnectStarted = z.infer<typeof restPackConnectStartedSchema>;
 
 /**
- * `GET .../pack-token/connect`: how the connection stands. Nothing asked; waiting for the
- * person, with what they were shown; connected, the token kept and the project as it stands; or
- * ended short of a token, and why.
+ * `GET .../pack-token/connect` and `POST .../pack-token/connect/claim`: how the connection
+ * stands. Nothing asked; waiting for the person, with what they were shown; connected, which
+ * only the claim answers (ADR-0046), the token kept and the project as it stands; or ended
+ * short of a token, and why.
  */
 const packConnectNone = z.object({ status: z.literal("none") });
 const packConnectPending = z.object({
@@ -1119,7 +1132,7 @@ export const restPackConnectSchema = z.union([
 ]);
 export type RestPackConnect = z.infer<typeof restPackConnectSchema>;
 
-/** `GET /api/v1/workspace/pack-token/connect`: the same, for the workspace's token, with the workspace as it stands once connected. */
+/** `GET /api/v1/workspace/pack-token/connect` and `POST .../connect/claim`: the same, for the workspace's token, with the workspace as it stands once connected. */
 export const restWorkspacePackConnectSchema = z.union([
   packConnectNone,
   packConnectPending,

package/src/styles/console.css

@@ -2168,15 +2168,67 @@ select.sc-input {
   text-align: left;
 }
 
+/* The ways in, one under the other, each a button with who gets in through it under it. */
 .sc-sign-in-ways {
-  display: flex;
-  flex-wrap: wrap;
-  justify-content: center;
-  gap: var(--sc-space-3);
+  display: grid;
+  justify-items: center;
+  gap: var(--sc-space-4);
+  margin-top: var(--sc-space-2);
 }
 
+.sc-sign-in-way {
+  display: grid;
+  justify-items: center;
+  gap: var(--sc-space-2);
+  width: 100%;
+}
+
+/* The button is the page's one call: wide, a step taller than a control, the provider's mark
+   before its words. */
 .sc-sign-in-button {
-  justify-self: center;
+  width: 100%;
+  max-width: 20rem;
+  min-height: 2.75rem;
+  gap: var(--sc-space-3);
+  font-size: var(--sc-text-md);
+}
+
+.sc-sign-in-button:focus-visible {
+  outline: var(--sc-focus-ring);
+  outline-offset: 3px;
+  border-radius: var(--sc-radius-md);
+}
+
+/* On the way to the provider: the button keeps its color and turns its ring in the text's color. */
+.sc-sign-in-button-going {
+  cursor: progress;
+}
+
+.sc-sign-in-spinner .sc-spinner-ring {
+  width: 1rem;
+  height: 1rem;
+  border-color: color-mix(in srgb, var(--sc-color-accent-contrast) 40%, transparent);
+  border-top-color: var(--sc-color-accent-contrast);
+}
+
+.sc-sign-in-mark {
+  flex: none;
+}
+
+/* A mark in colors of its own sits on a light tile, whatever the button's color. */
+.sc-sign-in-mark-tile {
+  display: grid;
+  place-items: center;
+  width: 1.5rem;
+  height: 1.5rem;
+  border-radius: var(--sc-radius-full);
+  background: var(--sc-color-accent-contrast);
+}
+
+.sc-sign-in-admits {
+  margin: 0;
+  color: var(--sc-color-text-muted);
+  font-size: var(--sc-text-xs);
 }
 
 /* Prose: what people and agents write, rendered from Markdown. Element selectors on purpose. */

package/src/web.ts

@@ -32,14 +32,15 @@ const CONTENT_TYPES: Readonly<Record<string, string>> = {
 
 /**
  * Pages show what people and agents wrote, which is untrusted. Nothing inline runs, nothing
- * loads from elsewhere but pictures over https, and nobody frames the page.
+ * loads from elsewhere, a picture from elsewhere coming through the console (ADR-0048), and
+ * nobody frames the page.
  */
 const PAGE_HEADERS: Readonly<Record<string, string>> = {
   "content-security-policy": [
     "default-src 'self'",
     "script-src 'self'",
     "style-src 'self'",
-    "img-src 'self' data: https:",
+    "img-src 'self' data:",
     "font-src 'self'",
     "connect-src 'self'",
     "object-src 'none'",