@things-factory/auth-ui 10.1.215 → 10.1.219

package/translations/zh.json

@@ -1,5 +1,4 @@
 {
-  "button.accept invitation": "接受邀请",
   "button.activate": "激活",
   "button.add passkey": "添加通行密钥",
   "button.close": "关闭",
@@ -36,7 +35,7 @@
   "button.stand it here": "在此建立",
   "button.submit": "提交",
   "button.terminate contract": "终止合同",
-  "button.transfer owner": "转让所有权",
+  "button.transfer owner": "指定为$t(term.domain)所有者",
   "button.withdraw": "撤回邀请",
   "error.cannot_modify_system_subdomain": "无法修改'system'子域。",
   "error.domain not allowed": "此域名对此用户不可用",
@@ -119,8 +118,6 @@
   "label.draft": "草稿",
   "label.email": "电子邮件",
   "label.inactive-user": "非活动用户",
-  "label.invitation code": "邀请码",
-  "label.invitations": "邀请",
   "label.invite customer": "邀请客户或合作伙伴",
   "label.invite user": "邀请用户",
   "label.language": "语言",
@@ -137,7 +134,6 @@
   "label.search_domain": "搜索$t(term.domain)",
   "label.select_domain": "选择$t(term.domain)",
   "label.send activation email": "发送激活电子邮件",
-  "label.send invitation": "发送邀请邮件",
   "label.signin with": "通过 {title} 登录",
   "label.state": "状态",
   "label.subject": "主题",
@@ -163,7 +159,7 @@
   "text.are you sure you want to delete x": "删除 {x}？此操作无法撤销。",
   "text.are_you_sure_to_delete_x": "您确定是否删除{x}？",
   "text.are_you_sure_to_terminate_contract": "您确定要终止合同吗?",
-  "text.are_you_sure_to_transfer_owner": "您确定要转移业主权限?",
+  "text.are_you_sure_to_transfer_owner": "确定将此用户指定为$t(term.domain)所有者吗?",
   "text.are_you_sure_to_x": "您确定是否{x}?",
   "text.are_you_sure_to_x_user": "您确定要删除用户{x}?",
   "text.attribute management": "属性管理",
@@ -175,14 +171,31 @@
   "text.bound applications": "已绑定应用程序",
   "text.cannot_delete": "无法删除",
   "text.change password": "修改密码",
-  "text.choose a password to finish joining": "设置密码后即可加入。",
   "text.click login history": "如果您想查看最近的登录记录，请点击这里。",
   "text.completed": "已完成",
   "text.confirm password": "认证密码",
-  "text.confirm the address this invitation was sent to": "请输入收到邀请的邮箱地址。",
   "text.copied": "已复制",
   "text.copying needs a secure connection": "复制需要安全连接 — 请手动选择并复制该值",
   "text.could not be saved": "保存失败 — 原因请看上方提示",
+  "text.could not look up the account": "无法确认账户。",
+  "button.issue link": "发放链接",
+  "button.copied": "已复制",
+  "button.reissue setup link": "重新发放设置链接",
+  "button.password reset link": "密码重置链接",
+  "label.how the link travels": "传递方式",
+  "label.send by mail": "通过邮件发送",
+  "label.copy the link": "复制链接",
+  "label.password-setup-pending-user": "待设置",
+  "title.password setup link": "密码设置链接",
+  "title.set a new password": "设置新密码",
+  "text.a new link retires the last one": "该账户正在等待设置密码。发放新链接后，旧链接将无法使用。",
+  "text.the current password stops and sessions end": "发放后当前密码立即失效，已登录的会话也会断开。由本人通过链接设置新密码。",
+  "text.the link works once for 48 hours and asks for the address": "链接在48小时内可使用一次，打开时会要求输入此邮箱地址。",
+  "text.hand it over yourself": "通过即时通讯或纸面亲自转交",
+  "text.the link was mailed to x until y": "已将链接发送至 {x}。可使用至 {y}。",
+  "text.this link is shown only now until y": "此链接仅此时显示一次。可使用至 {y}，丢失请重新发放。",
+  "text.an account is made and a setup link handed over": "创建账户并转交密码设置链接。本人在48小时内通过该链接设置密码。",
+  "text.the address this link was sent for": "收到此链接的邮箱地址",
   "text.could not register": "注册失败 — 原因见上方提示",
   "text.create role": "创建角色",
   "text.credentials": "凭据",
@@ -202,19 +215,17 @@
   "text.inherited from x": "继承自 {x}",
   "text.invalid-email": "电子邮件地址格式不正确",
   "text.invalid-username": "请输入 ID 或电子邮件地址",
-  "text.invitation resent": "已重新发送邀请邮件。",
   "text.missing against template": "缺少 {count} 项",
   "text.new password": "新密码",
-  "text.no account so an invitation will be mailed": "尚无账号，将发送邀请邮件，由本人设置密码。",
   "text.no domain available": "抱歉，没有$t(term.domain)名",
   "text.no role to show": "打开此页面时未指定角色",
   "text.not issued": "未签发",
   "text.opens nothing, receives approvals": "opens nothing — this seat receives approvals",
-  "text.owner_transfer_completed": "所有权转让成功。",
+  "text.owner_transfer_completed": "已指定为$t(term.domain)所有者。",
   "text.password rule": "输入的密码必须15个字符或8字符包括号码和小写字符",
   "text.passwords do not match": "密码不匹配",
   "text.pick a seat to see what it opens": "Pick a seat to see what it opens.",
-  "text.please enter the email of the user you want to transfer owner": "请录入所有权接收人的邮件。",
+  "text.please enter the email of the user you want to transfer owner": "请输入要指定为$t(term.domain)所有者的用户邮箱。",
   "text.please_fill_all_required_fields": "请填写所有必填字段",
   "text.privilege no longer declared": "已没有代码需要此权限",
   "text.register new appliance": "注册终端设备",
@@ -236,14 +247,12 @@
   "text.the appliance could not be loaded": "无法读取终端设备",
   "text.the application could not be loaded": "无法读取应用程序",
   "text.the binding could not be loaded": "无法读取绑定",
-  "text.the code is printed in the invitation email": "邀请邮件中以文字形式提供了该邀请码。",
   "text.the current access token stops working immediately": "当前访问令牌将立即失效，使用它的地方需要换成新的令牌。",
   "text.the current secret stops working immediately": "当前密钥将立即失效，使用它的地方需要换成新的密钥。",
   "text.the list could not be loaded": "无法加载列表",
   "text.this credential has been revoked": "该凭据已被撤销。在生成新的访问令牌之前，此设备无法访问系统。",
   "text.this domain is top level and inherits from nowhere": "顶级$t(term.domain) — 没有可继承的来源",
   "text.this field is required": "此项为必填",
-  "text.this invitation cannot be used": "该邀请无法使用。",
   "text.this plant may call the seat what it likes": "Call the seat whatever this plant calls it.",
   "text.this role no longer exists": "此角色已不存在",
   "text.token expiry time": "令牌过期时间",
@@ -259,11 +268,9 @@
   "text.x_cannot_delete": "{x}无法删除",
   "text.x_created_successfully": "{x}创建成功",
   "text.x_deleted_successfully": "{x}删除成功",
-  "text.you have joined. sign in to continue": "已加入。请登录。",
   "text.your account is locked": "您的账号已被锁定",
   "text.your account is not activated": "您的账号还没验证",
   "text.your email address": "您的邮件地址",
-  "title.accept invitation": "接受邀请",
   "title.activate account": "激活帐户",
   "title.add template privileges": "添加模板权限",
   "title.attribute model": "属性模型",
@@ -280,7 +287,7 @@
   "title.move to this domain": "移动到此$t(term.domain)名",
   "title.nothing selected": "未选择",
   "title.open attributes view": "打开属性视图",
-  "title.owner_transfer": "业主权限转移",
+  "title.owner_transfer": "指定$t(term.domain)所有者",
   "title.partners": "合作伙伴",
   "title.passkey offer": "添加通行密钥",
   "title.protected-privileges": "受保护的权限",
@@ -290,6 +297,7 @@
   "title.sign in": "登录",
   "title.sign up": "注册",
   "title.unlock account": "解锁帐户",
+  "title.user details": "用户详情",
   "button.add what it can do": "添加可执行的操作",
   "button.drop": "移除",
   "button.edit privileges": "编辑权限",
@@ -314,8 +322,11 @@
   "label.passkey": "通行密钥",
   "label.read": "读取",
   "label.write": "写入",
-  "text.account exists so joins immediately": "该账户已存在。添加后即可立即进入。",
-  "text.account will be created with the default password": "尚无使用此邮箱的账户。将使用默认密码创建账户并添加，密码需要您亲自告知对方。",
+  "text.add user puts an account into this domain": "一个账户可在多个$t(term.domain)中使用。通过邮箱找到账户，加入此$t(term.domain)并分配角色。",
+  "label.account exists": "已有账户时",
+  "text.they join this domain at once": "立即加入此$t(term.domain)。",
+  "label.no account": "没有账户时",
+  "text.roles decide the screens they open": "决定加入者可以打开的画面。",
   "text.add_domain_owner_description": "将所有者权限授予$t(term.domain)的一名成员。",
   "text.and x more": "等另外 {x} 个",
   "text.are_you_sure_to_remove_domain_owner": "确定要解除 {x} 的$t(term.domain)所有者身份吗?",
@@ -343,7 +354,6 @@
   "text.nothing is on for this role yet": "此角色尚未开放任何内容。请在下方添加可执行的操作。",
   "text.nothing matches x": "没有模块名称包含“{x}”。",
   "text.owner opens everything without a role": "所有者无需角色即可打开所有页面。其他用户需要角色。",
-  "text.password becomes the default and must be told to them": "密码将恢复为默认值。不会发送邮件，请亲自告知对方新密码。",
   "text.pick a module on the left": "在左侧选择模块，即可看到此角色在该模块中能做什么。",
   "text.please enter username or email": "请输入用户名或邮箱",
   "text.please try again": "请稍后再试。",

package/dist-client/components/accept-invitation.d.ts

@@ -1,47 +0,0 @@
-import '@material/web/icon/icon.js';
-import '@material/web/button/elevated-button.js';
-import '@material/web/textfield/filled-text-field.js';
-import '@operato/i18n/ox-i18n.js';
-import '@operato/i18n/ox-i18n-selector.js';
-import '@operato/layout/ox-snack-bar.js';
-import { AbstractAuthPage } from './abstract-auth-page.js';
-/**
- * Accepting an invitation.
- *
- * ── Why the token is not in the address ─────────────────────────────────────
- * The link is `…/accept-invitation#<token>`, and a browser does not send what follows the `#`.
- * So the request that loads this page carries nothing, and the token stays out of server access
- * logs, proxy logs and `Referer`. This page reads it from the fragment and then clears it from
- * the address bar, so it does not sit in the browser's history either.
- *
- * The one place it can still travel is the mail being forwarded, and nothing about where the
- * token sits can prevent that. So the address it was sent to is asked for as well: holding the
- * link is not enough on its own.
- *
- * ── Why the password fields only appear after a try ─────────────────────────
- * Whether an address already has an account is not this page's to announce. It sends what it
- * has, and the server answers `invitation-needs-a-password` when it needs one — so the extra
- * fields appear for the person who is actually creating an account, and nobody learns anything
- * by loading the page.
- */
-export declare class AcceptInvitation extends AbstractAuthPage {
-    static styles: import("lit").CSSResult[];
-    get pageName(): string;
-    get actionUrl(): string;
-    get title(): string;
-    /** Read from the fragment on connect. Empty when the link was opened without one. */
-    token?: string;
-    /** The server asked for a password, so this person is creating an account. */
-    needsPassword?: boolean;
-    /** Joined. The page stops being a form and says where to go. */
-    joined?: boolean;
-    busy?: boolean;
-    connectedCallback(): void;
-    render(): import("lit-html").TemplateResult<1>;
-    private renderDone;
-    private renderForm;
-    private renderNewAccount;
-    private fieldValue;
-    submit(): Promise<void>;
-    private accept;
-}

package/dist-client/components/accept-invitation.js

@@ -1,258 +0,0 @@
-import { __decorate, __metadata } from "tslib";
-import '@material/web/icon/icon.js';
-import '@material/web/button/elevated-button.js';
-import '@material/web/textfield/filled-text-field.js';
-import '@operato/i18n/ox-i18n.js';
-import '@operato/i18n/ox-i18n-selector.js';
-import '@operato/layout/ox-snack-bar.js';
-import { css, html, nothing } from 'lit';
-import { property } from 'lit/decorators.js';
-import { i18next } from '@operato/i18n';
-import { AUTH_STYLE_SIGN } from '../auth-style-sign.js';
-import { EntryControlSizeStyles } from '../entry-control-size-styles.js';
-import { AbstractAuthPage } from './abstract-auth-page.js';
-import { readLinkToken } from '../utils/link-token.js';
-/**
- * Accepting an invitation.
- *
- * ── Why the token is not in the address ─────────────────────────────────────
- * The link is `…/accept-invitation#<token>`, and a browser does not send what follows the `#`.
- * So the request that loads this page carries nothing, and the token stays out of server access
- * logs, proxy logs and `Referer`. This page reads it from the fragment and then clears it from
- * the address bar, so it does not sit in the browser's history either.
- *
- * The one place it can still travel is the mail being forwarded, and nothing about where the
- * token sits can prevent that. So the address it was sent to is asked for as well: holding the
- * link is not enough on its own.
- *
- * ── Why the password fields only appear after a try ─────────────────────────
- * Whether an address already has an account is not this page's to announce. It sends what it
- * has, and the server answers `invitation-needs-a-password` when it needs one — so the extra
- * fields appear for the person who is actually creating an account, and nobody learns anything
- * by loading the page.
- */
-export class AcceptInvitation extends AbstractAuthPage {
-    static { this.styles = [
-        EntryControlSizeStyles,
-        css `
-      :host {
-        position: relative;
-        overflow: hidden;
-
-        display: flex;
-        flex-direction: row;
-
-        width: 100vw;
-        height: 100vh;
-        height: 100dvh;
-      }
-
-      .note {
-        margin: 0 0 var(--spacing-medium) 0;
-        font-size: 0.85rem;
-        line-height: 1.5;
-        color: var(--md-sys-color-on-surface-variant);
-      }
-    `,
-        AUTH_STYLE_SIGN
-    ]; }
-    get pageName() {
-        return 'accept invitation';
-    }
-    /*
-     * ⚠ `/auth/…` — the server router carries that prefix. This read `/accept-invitation` until
-     * 2026-09-24, which is no route; see the note beside `ACCEPT_INVITATION_PATH` in auth-base.
-     */
-    get actionUrl() {
-        return '/auth/accept-invitation';
-    }
-    get title() {
-        return 'accept invitation';
-    }
-    connectedCallback() {
-        super.connectedCallback();
-        const { token, clean } = readLinkToken(window.location.href);
-        this.token = token;
-        /*
-         * Taken out of the address bar and out of this history entry. `replaceState` rather than
-         * `pushState`: going back should not put the token back on screen.
-         */
-        if (clean && clean !== window.location.href) {
-            window.history.replaceState(null, '', clean);
-        }
-    }
-    render() {
-        const { icon, title, description } = this.applicationMeta;
-        const { disableUserFavoredLanguage, languages } = this.data || {};
-        return html `
-      <div class="wrap">
-        <div class="auth-brand">
-          <img src=${icon} />
-          <strong class="name">${title}</strong>
-          <span class="welcome-msg">${description}</span>
-        </div>
-
-        <div class="auth-form">
-          <h3><ox-i18n msgid="title.accept invitation"></ox-i18n></h3>
-
-          ${this.joined ? this.renderDone() : this.renderForm(disableUserFavoredLanguage, languages)}
-        </div>
-      </div>
-
-      <ox-snack-bar id="snackbar"></ox-snack-bar>
-    `;
-    }
-    renderDone() {
-        return html `
-      <p class="note">${i18next.t('text.you have joined. sign in to continue')}</p>
-      <md-elevated-button @click=${() => (window.location.href = '/auth/signin')}>
-        <ox-i18n msgid="button.sign in"></ox-i18n>
-      </md-elevated-button>
-    `;
-    }
-    renderForm(disableUserFavoredLanguage, languages) {
-        return html `
-      <form id="form" @keypress=${(e) => e.key === 'Enter' && this.accept()}>
-        <p class="note">${i18next.t('text.confirm the address this invitation was sent to')}</p>
-
-        <div class="field">
-          <md-filled-text-field
-            name="email"
-            type="email"
-            label=${String(i18next.t('field.email'))}
-            autocomplete="email"
-            required
-            ><md-icon slot="leading-icon">mail</md-icon></md-filled-text-field
-          >
-        </div>
-
-        ${this.token
-            ? nothing
-            : html `
-              <div class="field">
-                <md-filled-text-field
-                  name="token"
-                  label=${String(i18next.t('label.invitation code'))}
-                  supporting-text=${String(i18next.t('text.the code is printed in the invitation email'))}
-                  autocomplete="off"
-                  required
-                  ><md-icon slot="leading-icon">key</md-icon></md-filled-text-field
-                >
-              </div>
-            `}
-        ${this.needsPassword ? this.renderNewAccount() : nothing}
-
-        <md-elevated-button id="submit-button" type="button" ?disabled=${this.busy} @click=${() => this.accept()}>
-          <ox-i18n msgid="button.accept invitation"></ox-i18n>
-        </md-elevated-button>
-
-        ${!disableUserFavoredLanguage
-            ? html `<div id="locale-area">
-              <label for="locale-selector"><md-icon>language</md-icon></label>
-              <ox-i18n-selector
-                id="locale-selector"
-                value=${i18next.language || 'en-US'}
-                .languages=${languages}
-                @change=${(e) => e.detail && i18next.changeLanguage(e.detail)}
-              ></ox-i18n-selector>
-            </div>`
-            : nothing}
-      </form>
-    `;
-    }
-    renderNewAccount() {
-        return html `
-      <p class="note">${i18next.t('text.choose a password to finish joining')}</p>
-
-      <div class="field">
-        <md-filled-text-field name="name" label=${String(i18next.t('field.name'))} autocomplete="name"
-          ><md-icon slot="leading-icon">person</md-icon></md-filled-text-field
-        >
-      </div>
-
-      <div class="field">
-        <md-filled-text-field
-          name="password"
-          type="password"
-          label=${String(i18next.t('label.password'))}
-          autocomplete="new-password"
-          required
-          ><md-icon slot="leading-icon">password</md-icon></md-filled-text-field
-        >
-      </div>
-    `;
-    }
-    /*
-     * ⚠ Not called `valueOf`. Overriding `Object.prototype.valueOf` with a different signature
-     * makes the class type unassignable to `Object`, and every `@property` decorator on it then
-     * fails to resolve — with an error that talks about decorators and never mentions the method.
-     */
-    fieldValue(name) {
-        return this.renderRoot.querySelector(`[name="${name}"]`)?.value?.trim() || '';
-    }
-    /*
-     * The base class calls this to commit the page. It does not submit the form element: the
-     * answer here is read rather than navigated to, because a refusal can mean "now ask for a
-     * password" instead of "stop".
-     */
-    async submit() {
-        await this.accept();
-    }
-    async accept() {
-        if (this.busy) {
-            return;
-        }
-        this.busy = true;
-        this.message = '';
-        try {
-            const response = await fetch(this.actionUrl, {
-                method: 'POST',
-                headers: { 'Content-Type': 'application/json' },
-                body: JSON.stringify({
-                    token: this.token || this.fieldValue('token'),
-                    email: this.fieldValue('email'),
-                    name: this.fieldValue('name'),
-                    password: this.fieldValue('password')
-                })
-            });
-            if (response.ok) {
-                this.joined = true;
-                return;
-            }
-            const refusal = await response.json().catch(() => ({}));
-            /*
-             * The one refusal that is not the end of the attempt — it means this person has no account
-             * yet, which is exactly who this page is for.
-             */
-            if (refusal?.refusal?.code === 'invitation-needs-a-password' || refusal?.code === 'invitation-needs-a-password') {
-                this.needsPassword = true;
-                this.message = String(i18next.t('text.choose a password to finish joining'));
-                return;
-            }
-            this.message = refusal?.message || String(i18next.t('text.this invitation cannot be used'));
-        }
-        catch (e) {
-            this.message = String(i18next.t('text.this invitation cannot be used'));
-        }
-        finally {
-            this.busy = false;
-        }
-    }
-}
-__decorate([
-    property({ type: String }),
-    __metadata("design:type", String)
-], AcceptInvitation.prototype, "token", void 0);
-__decorate([
-    property({ type: Boolean }),
-    __metadata("design:type", Boolean)
-], AcceptInvitation.prototype, "needsPassword", void 0);
-__decorate([
-    property({ type: Boolean }),
-    __metadata("design:type", Boolean)
-], AcceptInvitation.prototype, "joined", void 0);
-__decorate([
-    property({ type: Boolean }),
-    __metadata("design:type", Boolean)
-], AcceptInvitation.prototype, "busy", void 0);
-//# sourceMappingURL=accept-invitation.js.map

package/dist-client/components/accept-invitation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"accept-invitation.js","sourceRoot":"","sources":["../../client/components/accept-invitation.ts"],"names":[],"mappings":";AAAA,OAAO,4BAA4B,CAAA;AACnC,OAAO,yCAAyC,CAAA;AAChD,OAAO,8CAA8C,CAAA;AAErD,OAAO,0BAA0B,CAAA;AACjC,OAAO,mCAAmC,CAAA;AAC1C,OAAO,iCAAiC,CAAA;AAExC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,KAAK,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAE5C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAEvC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAA;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAEtD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,gBAAiB,SAAQ,gBAAgB;aAC7C,WAAM,GAAG;QACd,sBAAsB;QACtB,GAAG,CAAA;;;;;;;;;;;;;;;;;;;KAmBF;QACD,eAAe;KAChB,CAAA;IAED,IAAI,QAAQ;QACV,OAAO,mBAAmB,CAAA;IAC5B,CAAC;IAED;;;OAGG;IACH,IAAI,SAAS;QACX,OAAO,yBAAyB,CAAA;IAClC,CAAC;IAED,IAAI,KAAK;QACP,OAAO,mBAAmB,CAAA;IAC5B,CAAC;IAaD,iBAAiB;QACf,KAAK,CAAC,iBAAiB,EAAE,CAAA;QAEzB,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QAE5D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAElB;;;WAGG;QACH,IAAI,KAAK,IAAI,KAAK,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC;IAED,MAAM;QACJ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,eAAe,CAAA;QACzD,MAAM,EAAE,0BAA0B,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAA;QAEjE,OAAO,IAAI,CAAA;;;qBAGM,IAAI;iCACQ,KAAK;sCACA,WAAW;;;;;;YAMrC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,0BAA0B,EAAE,SAAS,CAAC;;;;;KAK/F,CAAA;IACH,CAAC;IAEO,UAAU;QAChB,OAAO,IAAI,CAAA;wBACS,OAAO,CAAC,CAAC,CAAC,2CAA2C,CAAC;mCAC3C,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,cAAc,CAAC;;;KAG3E,CAAA;IACH,CAAC;IAEO,UAAU,CAAC,0BAAmC,EAAE,SAAc;QACpE,OAAO,IAAI,CAAA;kCACmB,CAAC,CAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE;0BAChE,OAAO,CAAC,CAAC,CAAC,sDAAsD,CAAC;;;;;;oBAMvE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;;;;;;;UAO1C,IAAI,CAAC,KAAK;YACV,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,IAAI,CAAA;;;;0BAIU,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;oCAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC;;;;;;aAM5F;UACH,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,OAAO;;yEAES,IAAI,CAAC,IAAI,WAAW,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE;;;;UAItG,CAAC,0BAA0B;YAC3B,CAAC,CAAC,IAAI,CAAA;;;;wBAIQ,OAAO,CAAC,QAAQ,IAAI,OAAO;6BACtB,SAAS;0BACZ,CAAC,CAAc,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,MAAa,CAAC;;mBAE9E;YACT,CAAC,CAAC,OAAO;;KAEd,CAAA;IACH,CAAC;IAEO,gBAAgB;QACtB,OAAO,IAAI,CAAA;wBACS,OAAO,CAAC,CAAC,CAAC,0CAA0C,CAAC;;;kDAG3B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;;;;;;;;;kBAS/D,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;;;;;;KAMhD,CAAA;IACH,CAAC;IAED;;;;OAIG;IACK,UAAU,CAAC,IAAY;QAC7B,OAAQ,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,UAAU,IAAI,IAAI,CAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACxF,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;IACrB,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAM;QACR,CAAC;QAED,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAA;QAEjB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE;gBAC3C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC7C,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC/B,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;oBAC7B,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;iBACtC,CAAC;aACH,CAAC,CAAA;YAEF,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;gBAClB,OAAM;YACR,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAEvD;;;eAGG;YACH,IAAI,OAAO,EAAE,OAAO,EAAE,IAAI,KAAK,6BAA6B,IAAI,OAAO,EAAE,IAAI,KAAK,6BAA6B,EAAE,CAAC;gBAChH,IAAI,CAAC,aAAa,GAAG,IAAI,CAAA;gBACzB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAA;gBAC5E,OAAM;YACR,CAAC;YAED,IAAI,CAAC,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAA;QAC7F,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAA;QACzE,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,IAAI,GAAG,KAAK,CAAA;QACnB,CAAC;IACH,CAAC;;AAjM2B;IAA3B,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;+CAAe;AAGb;IAA5B,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;;uDAAwB;AAGvB;IAA5B,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;;gDAAiB;AAEhB;IAA5B,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;;8CAAe","sourcesContent":["import '@material/web/icon/icon.js'\nimport '@material/web/button/elevated-button.js'\nimport '@material/web/textfield/filled-text-field.js'\n\nimport '@operato/i18n/ox-i18n.js'\nimport '@operato/i18n/ox-i18n-selector.js'\nimport '@operato/layout/ox-snack-bar.js'\n\nimport { css, html, nothing } from 'lit'\nimport { property } from 'lit/decorators.js'\n\nimport { i18next } from '@operato/i18n'\n\nimport { AUTH_STYLE_SIGN } from '../auth-style-sign.js'\nimport { EntryControlSizeStyles } from '../entry-control-size-styles.js'\nimport { AbstractAuthPage } from './abstract-auth-page.js'\nimport { readLinkToken } from '../utils/link-token.js'\n\n/**\n * Accepting an invitation.\n *\n * ── Why the token is not in the address ─────────────────────────────────────\n * The link is `…/accept-invitation#<token>`, and a browser does not send what follows the `#`.\n * So the request that loads this page carries nothing, and the token stays out of server access\n * logs, proxy logs and `Referer`. This page reads it from the fragment and then clears it from\n * the address bar, so it does not sit in the browser's history either.\n *\n * The one place it can still travel is the mail being forwarded, and nothing about where the\n * token sits can prevent that. So the address it was sent to is asked for as well: holding the\n * link is not enough on its own.\n *\n * ── Why the password fields only appear after a try ─────────────────────────\n * Whether an address already has an account is not this page's to announce. It sends what it\n * has, and the server answers `invitation-needs-a-password` when it needs one — so the extra\n * fields appear for the person who is actually creating an account, and nobody learns anything\n * by loading the page.\n */\nexport class AcceptInvitation extends AbstractAuthPage {\n  static styles = [\n    EntryControlSizeStyles,\n    css`\n      :host {\n        position: relative;\n        overflow: hidden;\n\n        display: flex;\n        flex-direction: row;\n\n        width: 100vw;\n        height: 100vh;\n        height: 100dvh;\n      }\n\n      .note {\n        margin: 0 0 var(--spacing-medium) 0;\n        font-size: 0.85rem;\n        line-height: 1.5;\n        color: var(--md-sys-color-on-surface-variant);\n      }\n    `,\n    AUTH_STYLE_SIGN\n  ]\n\n  get pageName() {\n    return 'accept invitation'\n  }\n\n  /*\n   * ⚠ `/auth/…` — the server router carries that prefix. This read `/accept-invitation` until\n   * 2026-09-24, which is no route; see the note beside `ACCEPT_INVITATION_PATH` in auth-base.\n   */\n  get actionUrl() {\n    return '/auth/accept-invitation'\n  }\n\n  get title() {\n    return 'accept invitation'\n  }\n\n  /** Read from the fragment on connect. Empty when the link was opened without one. */\n  @property({ type: String }) token?: string\n\n  /** The server asked for a password, so this person is creating an account. */\n  @property({ type: Boolean }) needsPassword?: boolean\n\n  /** Joined. The page stops being a form and says where to go. */\n  @property({ type: Boolean }) joined?: boolean\n\n  @property({ type: Boolean }) busy?: boolean\n\n  connectedCallback() {\n    super.connectedCallback()\n\n    const { token, clean } = readLinkToken(window.location.href)\n\n    this.token = token\n\n    /*\n     * Taken out of the address bar and out of this history entry. `replaceState` rather than\n     * `pushState`: going back should not put the token back on screen.\n     */\n    if (clean && clean !== window.location.href) {\n      window.history.replaceState(null, '', clean)\n    }\n  }\n\n  render() {\n    const { icon, title, description } = this.applicationMeta\n    const { disableUserFavoredLanguage, languages } = this.data || {}\n\n    return html`\n      <div class=\"wrap\">\n        <div class=\"auth-brand\">\n          <img src=${icon} />\n          <strong class=\"name\">${title}</strong>\n          <span class=\"welcome-msg\">${description}</span>\n        </div>\n\n        <div class=\"auth-form\">\n          <h3><ox-i18n msgid=\"title.accept invitation\"></ox-i18n></h3>\n\n          ${this.joined ? this.renderDone() : this.renderForm(disableUserFavoredLanguage, languages)}\n        </div>\n      </div>\n\n      <ox-snack-bar id=\"snackbar\"></ox-snack-bar>\n    `\n  }\n\n  private renderDone() {\n    return html`\n      <p class=\"note\">${i18next.t('text.you have joined. sign in to continue')}</p>\n      <md-elevated-button @click=${() => (window.location.href = '/auth/signin')}>\n        <ox-i18n msgid=\"button.sign in\"></ox-i18n>\n      </md-elevated-button>\n    `\n  }\n\n  private renderForm(disableUserFavoredLanguage: boolean, languages: any) {\n    return html`\n      <form id=\"form\" @keypress=${(e: KeyboardEvent) => e.key === 'Enter' && this.accept()}>\n        <p class=\"note\">${i18next.t('text.confirm the address this invitation was sent to')}</p>\n\n        <div class=\"field\">\n          <md-filled-text-field\n            name=\"email\"\n            type=\"email\"\n            label=${String(i18next.t('field.email'))}\n            autocomplete=\"email\"\n            required\n            ><md-icon slot=\"leading-icon\">mail</md-icon></md-filled-text-field\n          >\n        </div>\n\n        ${this.token\n          ? nothing\n          : html`\n              <div class=\"field\">\n                <md-filled-text-field\n                  name=\"token\"\n                  label=${String(i18next.t('label.invitation code'))}\n                  supporting-text=${String(i18next.t('text.the code is printed in the invitation email'))}\n                  autocomplete=\"off\"\n                  required\n                  ><md-icon slot=\"leading-icon\">key</md-icon></md-filled-text-field\n                >\n              </div>\n            `}\n        ${this.needsPassword ? this.renderNewAccount() : nothing}\n\n        <md-elevated-button id=\"submit-button\" type=\"button\" ?disabled=${this.busy} @click=${() => this.accept()}>\n          <ox-i18n msgid=\"button.accept invitation\"></ox-i18n>\n        </md-elevated-button>\n\n        ${!disableUserFavoredLanguage\n          ? html`<div id=\"locale-area\">\n              <label for=\"locale-selector\"><md-icon>language</md-icon></label>\n              <ox-i18n-selector\n                id=\"locale-selector\"\n                value=${i18next.language || 'en-US'}\n                .languages=${languages}\n                @change=${(e: CustomEvent) => e.detail && i18next.changeLanguage(e.detail as any)}\n              ></ox-i18n-selector>\n            </div>`\n          : nothing}\n      </form>\n    `\n  }\n\n  private renderNewAccount() {\n    return html`\n      <p class=\"note\">${i18next.t('text.choose a password to finish joining')}</p>\n\n      <div class=\"field\">\n        <md-filled-text-field name=\"name\" label=${String(i18next.t('field.name'))} autocomplete=\"name\"\n          ><md-icon slot=\"leading-icon\">person</md-icon></md-filled-text-field\n        >\n      </div>\n\n      <div class=\"field\">\n        <md-filled-text-field\n          name=\"password\"\n          type=\"password\"\n          label=${String(i18next.t('label.password'))}\n          autocomplete=\"new-password\"\n          required\n          ><md-icon slot=\"leading-icon\">password</md-icon></md-filled-text-field\n        >\n      </div>\n    `\n  }\n\n  /*\n   * ⚠ Not called `valueOf`. Overriding `Object.prototype.valueOf` with a different signature\n   * makes the class type unassignable to `Object`, and every `@property` decorator on it then\n   * fails to resolve — with an error that talks about decorators and never mentions the method.\n   */\n  private fieldValue(name: string): string {\n    return (this.renderRoot.querySelector(`[name=\"${name}\"]`) as any)?.value?.trim() || ''\n  }\n\n  /*\n   * The base class calls this to commit the page. It does not submit the form element: the\n   * answer here is read rather than navigated to, because a refusal can mean \"now ask for a\n   * password\" instead of \"stop\".\n   */\n  async submit() {\n    await this.accept()\n  }\n\n  private async accept() {\n    if (this.busy) {\n      return\n    }\n\n    this.busy = true\n    this.message = ''\n\n    try {\n      const response = await fetch(this.actionUrl, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({\n          token: this.token || this.fieldValue('token'),\n          email: this.fieldValue('email'),\n          name: this.fieldValue('name'),\n          password: this.fieldValue('password')\n        })\n      })\n\n      if (response.ok) {\n        this.joined = true\n        return\n      }\n\n      const refusal = await response.json().catch(() => ({}))\n\n      /*\n       * The one refusal that is not the end of the attempt — it means this person has no account\n       * yet, which is exactly who this page is for.\n       */\n      if (refusal?.refusal?.code === 'invitation-needs-a-password' || refusal?.code === 'invitation-needs-a-password') {\n        this.needsPassword = true\n        this.message = String(i18next.t('text.choose a password to finish joining'))\n        return\n      }\n\n      this.message = refusal?.message || String(i18next.t('text.this invitation cannot be used'))\n    } catch (e) {\n      this.message = String(i18next.t('text.this invitation cannot be used'))\n    } finally {\n      this.busy = false\n    }\n  }\n}\n"]}

package/dist-client/entries/auth/accept-invitation.d.ts

@@ -1,3 +0,0 @@
-import { AcceptInvitation } from '../../components/accept-invitation.js';
-export declare class AuthAcceptInvitation extends AcceptInvitation {
-}

package/dist-client/entries/auth/accept-invitation.js

@@ -1,10 +0,0 @@
-import { __decorate } from "tslib";
-import { customElement } from 'lit/decorators.js';
-import { AcceptInvitation } from '../../components/accept-invitation.js';
-let AuthAcceptInvitation = class AuthAcceptInvitation extends AcceptInvitation {
-};
-AuthAcceptInvitation = __decorate([
-    customElement('auth-accept-invitation')
-], AuthAcceptInvitation);
-export { AuthAcceptInvitation };
-//# sourceMappingURL=accept-invitation.js.map

package/dist-client/entries/auth/accept-invitation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"accept-invitation.js","sourceRoot":"","sources":["../../../client/entries/auth/accept-invitation.ts"],"names":[],"mappings":";AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAEjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAA;AAGjE,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,gBAAgB;CAAG,CAAA;AAAhD,oBAAoB;IADhC,aAAa,CAAC,wBAAwB,CAAC;GAC3B,oBAAoB,CAA4B","sourcesContent":["import { customElement } from 'lit/decorators.js'\n\nimport { AcceptInvitation } from '../../components/accept-invitation.js'\n\n@customElement('auth-accept-invitation')\nexport class AuthAcceptInvitation extends AcceptInvitation {}\n"]}

package/dist-client/pages/invitation/invitation-list-query.test.js

@@ -1,69 +0,0 @@
-import { readFileSync } from 'fs';
-import { join } from 'path';
-/**
- * The invitation list must not ask for the token.
- *
- * The token in an invitation mail is not a reference to a credential — it **is** the credential.
- * Whoever holds it joins the domain, and for somebody with no account yet it creates one. It is
- * not a GraphQL field on `Invitation` at all, for that reason; this holds the screen to the same
- * line so that restoring the field later does not quietly put it in a grid cell.
- *
- * A credential in a grid cell is a credential in plain text beside a name — in every screenshot,
- * on every shared display, for everyone who can open the screen. The people who *can* open this
- * one are administrators, which is exactly who has it open on a projector.
- *
- * ⚠ Comments are stripped before searching. The prose above says `token` several times
- * explaining why it is absent; searching the raw file would find the explanation and pass over a
- * query that really asks for it.
- */
-function source(name) {
-    const text = readFileSync(join(__dirname, name), 'utf-8');
-    return text.replace(/\/\*[\s\S]*?\*\//g, '').replace(/^[ \t]*\/\/.*$/gm, '');
-}
-describe('the invitation list query', () => {
-    it('does not ask for the token', () => {
-        expect(source('./invitations.ts')).not.toContain('token');
-    });
-    it('asks for the fields the columns render', () => {
-        const text = source('./invitations.ts');
-        for (const field of ['email', 'state', 'createdAt', 'expiresAt', 'acceptedAt', 'roles', 'creator']) {
-            expect(text).toContain(field);
-        }
-    });
-    it('reads the state the server resolves, not the stored column', () => {
-        /*
-         * ⚠ `status` is what is written down; `state` is what the server answers after measuring a
-         * pending row against the clock. Showing `status` would call an invitation live for as long
-         * as nothing had been round to mark it expired.
-         */
-        const text = source('./invitations.ts');
-        expect(text).toContain('state');
-        expect(text).not.toMatch(/name:\s*'status'/);
-    });
-    it('passes the grist options through, so paging and sorting reach the server', () => {
-        const text = source('./invitations.ts');
-        expect(text).toContain('$pagination: Pagination');
-        expect(text).toContain('$sortings: [Sorting!]');
-        expect(text).toContain('$filters: [Filter!]');
-    });
-});
-describe('the accept page', () => {
-    function componentSource() {
-        return readFileSync(join(__dirname, '..', '..', 'components', 'accept-invitation.ts'), 'utf-8')
-            .replace(/\/\*[\s\S]*?\*\//g, '')
-            .replace(/^[ \t]*\/\/.*$/gm, '');
-    }
-    it('takes the token out of the address as well as reading it', () => {
-        /*
-         * ⚠ Reading the fragment is half of it. The fragment keeps the token out of server and proxy
-         * logs; replacing the address is what keeps it out of the browser history and off the screen.
-         * A page that read it and left it in the bar would undo the reason it is in the fragment.
-         */
-        expect(componentSource()).toContain('replaceState');
-    });
-    it('never puts the token in a field the reader can see', () => {
-        const text = componentSource();
-        expect(text).not.toMatch(/\.value=\$\{[^}]*\btoken\b[^}]*\}/);
-    });
-});
-//# sourceMappingURL=invitation-list-query.test.js.map

package/dist-client/pages/invitation/invitation-list-query.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"invitation-list-query.test.js","sourceRoot":"","sources":["../../../client/pages/invitation/invitation-list-query.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B;;;;;;;;;;;;;;;GAeG;AACH,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAA;IAEzD,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAA;AAC9E,CAAC;AAED,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAEvC,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;YACnG,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC/B,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE;;;;WAIG;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAEvC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAC/B,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,IAAI,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAEvC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAA;QACjD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAA;QAC/C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,SAAS,eAAe;QACtB,OAAO,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,sBAAsB,CAAC,EAAE,OAAO,CAAC;aAC5F,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;aAChC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAA;IACpC,CAAC;IAED,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE;;;;WAIG;QACH,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,IAAI,GAAG,eAAe,EAAE,CAAA;QAE9B,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA","sourcesContent":["import { readFileSync } from 'fs'\nimport { join } from 'path'\n\n/**\n * The invitation list must not ask for the token.\n *\n * The token in an invitation mail is not a reference to a credential — it **is** the credential.\n * Whoever holds it joins the domain, and for somebody with no account yet it creates one. It is\n * not a GraphQL field on `Invitation` at all, for that reason; this holds the screen to the same\n * line so that restoring the field later does not quietly put it in a grid cell.\n *\n * A credential in a grid cell is a credential in plain text beside a name — in every screenshot,\n * on every shared display, for everyone who can open the screen. The people who *can* open this\n * one are administrators, which is exactly who has it open on a projector.\n *\n * ⚠ Comments are stripped before searching. The prose above says `token` several times\n * explaining why it is absent; searching the raw file would find the explanation and pass over a\n * query that really asks for it.\n */\nfunction source(name: string): string {\n  const text = readFileSync(join(__dirname, name), 'utf-8')\n\n  return text.replace(/\\/\\*[\\s\\S]*?\\*\\//g, '').replace(/^[ \\t]*\\/\\/.*$/gm, '')\n}\n\ndescribe('the invitation list query', () => {\n  it('does not ask for the token', () => {\n    expect(source('./invitations.ts')).not.toContain('token')\n  })\n\n  it('asks for the fields the columns render', () => {\n    const text = source('./invitations.ts')\n\n    for (const field of ['email', 'state', 'createdAt', 'expiresAt', 'acceptedAt', 'roles', 'creator']) {\n      expect(text).toContain(field)\n    }\n  })\n\n  it('reads the state the server resolves, not the stored column', () => {\n    /*\n     * ⚠ `status` is what is written down; `state` is what the server answers after measuring a\n     * pending row against the clock. Showing `status` would call an invitation live for as long\n     * as nothing had been round to mark it expired.\n     */\n    const text = source('./invitations.ts')\n\n    expect(text).toContain('state')\n    expect(text).not.toMatch(/name:\\s*'status'/)\n  })\n\n  it('passes the grist options through, so paging and sorting reach the server', () => {\n    const text = source('./invitations.ts')\n\n    expect(text).toContain('$pagination: Pagination')\n    expect(text).toContain('$sortings: [Sorting!]')\n    expect(text).toContain('$filters: [Filter!]')\n  })\n})\n\ndescribe('the accept page', () => {\n  function componentSource(): string {\n    return readFileSync(join(__dirname, '..', '..', 'components', 'accept-invitation.ts'), 'utf-8')\n      .replace(/\\/\\*[\\s\\S]*?\\*\\//g, '')\n      .replace(/^[ \\t]*\\/\\/.*$/gm, '')\n  }\n\n  it('takes the token out of the address as well as reading it', () => {\n    /*\n     * ⚠ Reading the fragment is half of it. The fragment keeps the token out of server and proxy\n     * logs; replacing the address is what keeps it out of the browser history and off the screen.\n     * A page that read it and left it in the bar would undo the reason it is in the fragment.\n     */\n    expect(componentSource()).toContain('replaceState')\n  })\n\n  it('never puts the token in a field the reader can see', () => {\n    const text = componentSource()\n\n    expect(text).not.toMatch(/\\.value=\\$\\{[^}]*\\btoken\\b[^}]*\\}/)\n  })\n})\n"]}