@toa.io/extensions.configuration 1.0.0-alpha.272 → 1.0.0-alpha.274

package/ui/src/lib/tools/uuid.test.ts

@@ -0,0 +1,28 @@
+import { describe, it, expect } from 'vitest'
+import { toUuid } from './uuid'
+
+describe('toUuid', () => {
+  it('formats 32-hex into 8-4-4-4-12 UUID shape', () => {
+    expect(toUuid('0123456789abcdef0123456789abcdef'))
+      .toBe('01234567-89ab-cdef-0123-456789abcdef')
+  })
+
+  it('lowercases hex', () => {
+    expect(toUuid('0123456789ABCDEF0123456789ABCDEF'))
+      .toBe('01234567-89ab-cdef-0123-456789abcdef')
+  })
+
+  it('is deterministic', () => {
+    const hex = 'deadbeefcafebabe0011223344556677'
+
+    expect(toUuid(hex)).toBe(toUuid(hex))
+  })
+
+  it.each([
+    ['short', 'abc'],
+    ['long', '0123456789abcdef0123456789abcdef00'],
+    ['non-hex', '0123456789abcdef0123456789abcdeZ'],
+  ])('throws on %s input', (_, input) => {
+    expect(() => toUuid(input)).toThrow()
+  })
+})

package/ui/src/lib/tools/uuid.ts

@@ -0,0 +1,9 @@
+const HEX32 = /^[0-9a-f]{32}$/i
+
+export function toUuid(hex32: string): string {
+  if (!HEX32.test(hex32)) throw new Error(`toUuid: expected 32-hex, got ${hex32}`)
+
+  const h = hex32.toLowerCase()
+
+  return `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20, 32)}`
+}

package/ui/src/lib/typeset.css

@@ -0,0 +1,502 @@
+/*
+ * shadcn/typeset — vendored.
+ *
+ * Source:   https://ui.shadcn.com/typeset.css (docs https://ui.shadcn.com/docs/typeset)
+ * Snapshot: 2026-08-05
+ *
+ * Typeset has no registry entry and no npm package — it ships as a file plus a
+ * web builder, so an update is a diff against a fresh download. One rule
+ * deviates from upstream, marked at the rule; keep every other change out of
+ * this file so that diff stays readable.
+ *
+ * This file ships as-is: the globals item installs it at the consumer's
+ * src/lib/typeset.css and merges the matching @import into their stylesheet.
+ */
+
+@layer components {
+  .typeset {
+    --typeset-font-body: inherit;
+    --typeset-font-heading: var(--font-heading);
+    --typeset-font-mono: var(--font-mono);
+    --typeset-size: 1em;
+    --typeset-leading: 1.75;
+    --typeset-flow: 1.25em;
+  }
+}
+
+@layer components {
+  .typeset {
+    font-family: var(--typeset-font-body);
+    font-size: calc(var(--typeset-size) * 1.125);
+    line-height: var(--typeset-leading);
+    color: var(--color-foreground, currentColor);
+    overflow-wrap: break-word;
+    margin-trim: block-start;
+
+    @media (min-width: 48rem), print {
+      font-size: var(--typeset-size);
+    }
+
+    --typeset-muted: var(
+      --color-muted-foreground,
+      color-mix(in oklab, currentColor 60%, transparent)
+    );
+    --typeset-rule: var(
+      --color-border,
+      color-mix(in oklab, currentColor 20%, transparent)
+    );
+  }
+
+  .typeset
+    *:not(
+      :where(
+        .not-typeset,
+        [data-not-typeset],
+        .not-typeset *,
+        [data-not-typeset] *
+      )
+    ) {
+    /* Paragraphs. */
+    &:where(p) {
+      margin-block-start: var(--typeset-flow);
+      margin-block-end: 0;
+    }
+
+    /* Headings. */
+    &:where(h1, h2, h3, h4, h5, h6) {
+      color: var(--color-foreground, currentColor);
+      font-family: var(--typeset-font-heading);
+      font-weight: 600;
+      margin-block-end: 0;
+    }
+    &:where(h1) {
+      font-size: 1.75em;
+      line-height: 1.3;
+      margin-block-start: var(--typeset-flow);
+    }
+    &:where(h2) {
+      font-size: 1.25em;
+      line-height: 1.4;
+      margin-block-start: calc(var(--typeset-flow) * 1.4);
+    }
+    &:where(h3) {
+      font-size: 1.125em;
+      line-height: 1.45;
+      margin-block-start: var(--typeset-flow);
+    }
+    &:where(h4) {
+      font-size: 1em;
+      line-height: 1.5;
+      margin-block-start: var(--typeset-flow);
+    }
+    &:where(h5) {
+      font-size: 0.875em;
+      line-height: 1.5;
+      font-weight: 500;
+      color: var(--typeset-muted);
+      margin-block-start: calc(var(--typeset-flow) / 0.875);
+    }
+    &:where(h6) {
+      font-size: 0.8125em;
+      line-height: 1.5;
+      font-weight: 500;
+      letter-spacing: 0.08em;
+      text-transform: uppercase;
+      color: var(--typeset-muted);
+      margin-block-start: calc(var(--typeset-flow) / 0.8125);
+    }
+    /* Anchors. */
+    &:where([id]) {
+      scroll-margin-block-start: var(--typeset-flow);
+    }
+
+    /* Headings own the space below them. */
+    &:where(h1 + *, h2 + *, h3 + *, h4 + *, h5 + *, h6 + *) {
+      margin-block-start: 1em;
+    }
+    &:where(:is(h1, h2, h3, h4) :is(code)) {
+      font-size: 0.9em;
+    }
+
+    /* Links. */
+    &:where(a) {
+      color: inherit;
+      font-weight: 500;
+      text-decoration-line: underline;
+      text-decoration-color: color-mix(in oklab, currentColor 30%, transparent);
+    }
+    &:where(a:hover) {
+      text-decoration-color: currentColor;
+    }
+    &:where(a:focus-visible) {
+      outline: 2px solid var(--color-ring, currentColor);
+      outline-offset: 2px;
+      border-radius: 0.125em;
+    }
+    &:where(:is(h1, h2, h3, h4, h5, h6) :is(a)) {
+      font-weight: inherit;
+    }
+
+    /* Inline semantics. */
+    &:where(strong, b) {
+      font-weight: 600;
+    }
+    &:where(:is(h1, h2, h3, h4) :is(strong, b)) {
+      font-weight: 600;
+    }
+    &:where(mark) {
+      background-color: color-mix(
+        in oklab,
+        oklch(0.86 0.17 95) 40%,
+        transparent
+      );
+      color: inherit;
+      padding: 0.05em 0.15em;
+      border-radius: 0.2em;
+    }
+    &:where(abbr[title]) {
+      text-decoration-line: underline;
+      text-decoration-style: dotted;
+      text-underline-offset: 0.2em;
+      cursor: help;
+    }
+    &:where(del, s) {
+      color: var(--typeset-muted);
+      text-decoration-line: line-through;
+    }
+    &:where(sup, sub) {
+      font-size: 0.75em;
+      line-height: 0;
+      position: relative;
+      vertical-align: baseline;
+    }
+    &:where(sup) {
+      top: -0.5em;
+    }
+    &:where(sub) {
+      bottom: -0.25em;
+    }
+    &:where(sup a) {
+      text-decoration-line: none;
+      font-weight: 500;
+    }
+
+    /* Lists. */
+    &:where(ul) {
+      list-style-type: disc;
+    }
+    &:where(ol) {
+      list-style-type: decimal;
+    }
+    /* Scoped to the root: upstream's bare `ul ul` counts a structural list
+     * wrapping the container as a level. */
+    &:where(.typeset ul ul) {
+      list-style-type: circle;
+    }
+    &:where(.typeset ul ul ul) {
+      list-style-type: square;
+    }
+    &:where(ol[type="a" i]) {
+      list-style-type: lower-alpha;
+    }
+    &:where(ol[type="i" i]) {
+      list-style-type: lower-roman;
+    }
+    &:where(ol[type="A" s]) {
+      list-style-type: upper-alpha;
+    }
+    &:where(ol[type="I" s]) {
+      list-style-type: upper-roman;
+    }
+    &:where(ul, ol) {
+      margin-block-start: var(--typeset-flow);
+      margin-block-end: 0;
+      padding-inline-start: 1.5em;
+    }
+    &:where(li) {
+      margin-block-start: 0.5em;
+      padding-inline-start: 0.4em;
+    }
+    &:where(li > p, li > ul, li > ol) {
+      margin-block-start: 0.5em;
+    }
+    &:where(ul > li)::marker {
+      color: var(--typeset-muted);
+    }
+    &:where(ol > li)::marker {
+      color: var(--typeset-muted);
+    }
+
+    /* GFM task lists. */
+    &:where(ul.contains-task-list) {
+      list-style-type: none;
+      padding-inline-start: 0.25em;
+    }
+    &:where(li.task-list-item > input[type="checkbox"]) {
+      margin-inline-end: 0.5em;
+      vertical-align: -0.1em;
+      accent-color: var(--color-primary, currentColor);
+    }
+
+    /* Disclosures. */
+    &:where(details) {
+      margin-block-start: var(--typeset-flow);
+      margin-block-end: 0;
+    }
+    &:where(summary) {
+      cursor: pointer;
+      font-weight: 500;
+    }
+    &:where(summary)::marker {
+      color: var(--typeset-muted);
+    }
+
+    /* Keyboard keys. */
+    &:where(kbd) {
+      font-family: inherit;
+      font-size: 0.85em;
+      font-weight: 500;
+      border: 1px solid var(--typeset-rule);
+      border-block-end-width: 2px;
+      border-radius: min(calc(var(--radius, 0.5em) * 0.6), 0.35em);
+      padding: 0.0625em 0.35em;
+    }
+
+    /* Definition lists. */
+    &:where(dl) {
+      margin-block-start: var(--typeset-flow);
+      margin-block-end: 0;
+    }
+    &:where(dt) {
+      font-weight: 500;
+      margin-block-start: 1em;
+    }
+    &:where(dt + dt) {
+      margin-block-start: 0.25em;
+    }
+    &:where(dd) {
+      margin-block-start: 0.25em;
+      margin-inline-start: 0;
+      padding-inline-start: 1em;
+      color: var(--typeset-muted);
+    }
+
+    /* Inline code. */
+    &:where(:not(pre) > code) {
+      background-color: var(
+        --color-muted,
+        color-mix(in oklab, currentColor 8%, transparent)
+      );
+      font-family: var(--typeset-font-mono);
+      font-size: 0.85em;
+      border-radius: min(calc(var(--radius, 0.5em) * 0.6), 0.35em);
+      padding: 0.125em 0.3em;
+    }
+
+    /* Code blocks. */
+    &:where(pre) {
+      background-color: var(
+        --color-muted,
+        color-mix(in oklab, currentColor 8%, transparent)
+      );
+      font-family: var(--typeset-font-mono);
+      font-size: 0.875em;
+      line-height: 1.5;
+      tab-size: 2;
+      direction: ltr;
+      border-radius: var(--radius, 0.5em);
+      padding: 0.75em 1em;
+      overflow-x: auto;
+      margin-block-start: calc(var(--typeset-flow) / 0.875);
+      margin-block-end: 0;
+    }
+    &:where(pre code) {
+      background-color: transparent;
+      font-family: inherit;
+      font-size: inherit;
+      padding: 0;
+      border-radius: 0;
+    }
+
+    /* Blockquote. */
+    &:where(blockquote) {
+      border-inline-start: 2px solid var(--typeset-rule);
+      padding-inline-start: 1em;
+      margin-block-start: var(--typeset-flow);
+      margin-block-end: 0;
+      margin-inline: 0;
+    }
+
+    /* Dividers. */
+    &:where(hr) {
+      border: 0;
+      border-block-start: 1px solid var(--typeset-rule);
+      margin-block-start: calc(var(--typeset-flow) * 2.4);
+      margin-block-end: 0;
+    }
+    &:where(hr + h1, hr + h2, hr + h3, hr + h4) {
+      margin-block-start: var(--typeset-flow);
+    }
+
+    /* GFM footnotes. */
+    &:where(.footnotes, [data-footnotes]) {
+      margin-block-start: calc(var(--typeset-flow) * 2);
+      border-block-start: 1px solid var(--typeset-rule);
+      padding-block-start: var(--typeset-flow);
+      font-size: 0.875em;
+      color: var(--typeset-muted);
+    }
+
+    /* Math. */
+    &:where(math[display="block"]) {
+      margin-block-start: var(--typeset-flow);
+      margin-block-end: 0;
+      overflow-x: auto;
+      overflow-y: hidden;
+      padding-block: 0.25em;
+    }
+
+    /* Media. */
+    &:where(img, video) {
+      border-radius: var(--radius, 0.5em);
+      max-width: 100%;
+      height: auto;
+      margin-block-start: var(--typeset-flow);
+      margin-block-end: 0;
+    }
+    &:where(p img) {
+      margin-block-start: 0;
+    }
+    &:where(figure) {
+      margin-block-start: var(--typeset-flow);
+      margin-block-end: 0;
+      margin-inline: 0;
+    }
+    &:where(figcaption, caption) {
+      color: var(--typeset-muted);
+      font-size: 0.875em;
+      text-align: center;
+      margin-block-start: calc(0.75em / 0.875);
+    }
+    &:where(caption) {
+      caption-side: bottom;
+    }
+
+    /* Tables. Separators sit on cells, not tr:last-child: append-safe.
+       Bare tables stay real tables (keep their semantics) and wrap to fit. */
+    &:where(table) {
+      max-width: 100%;
+      font-size: 1em;
+      line-height: 1.5;
+      font-variant-numeric: tabular-nums;
+      border-collapse: separate;
+      border-spacing: 0;
+      border-block-end: 1px solid var(--typeset-rule);
+      margin-block-start: var(--typeset-flow);
+      margin-block-end: 0;
+    }
+
+    /* Horizontal scroll for any wide block. Wrap it and the wrapper owns the
+       flow margin. Tables shrink to fit, so widen the table to make it scroll
+       instead of compress. */
+    &:where(.typeset-scroll) {
+      overflow-x: auto;
+      margin-block-start: var(--typeset-flow);
+    }
+    &:where(.typeset-scroll > *) {
+      margin-block-start: 0;
+    }
+    &:where(.typeset-scroll table) {
+      width: max-content;
+      max-width: none;
+    }
+    &:where(thead th) {
+      font-weight: 500;
+      text-align: start;
+      white-space: nowrap;
+      padding: 0.65em 1em;
+    }
+    &:where(:is(tbody, tfoot) :is(td, th)) {
+      padding: 0.75em 1em;
+      text-align: start;
+      vertical-align: top;
+      border-block-start: 1px solid var(--typeset-rule);
+    }
+    &:where(tbody th, tfoot th) {
+      font-weight: 500;
+    }
+    &:where(th:first-child, td:first-child) {
+      padding-inline-start: 0;
+    }
+    &:where(th[align="center"], td[align="center"]) {
+      text-align: center;
+    }
+    &:where(th[align="right"], td[align="right"]) {
+      text-align: end;
+    }
+
+    /* Blocks inside list items keep the list's tighter rhythm. */
+    &:where(li > blockquote, li > table, li > figure) {
+      margin-block-start: 0.5em;
+    }
+    &:where(li > pre) {
+      margin-block-start: calc(0.5em / 0.875);
+    }
+
+    @media print {
+      &:where(pre, table, blockquote, figure) {
+        break-inside: avoid;
+      }
+      &:where(h1, h2, h3, h4) {
+        break-after: avoid;
+      }
+    }
+
+    /* Forced colors strips the code background, so give it a border. */
+    @media (forced-colors: active) {
+      &:where(:not(pre) > code) {
+        border: 1px solid;
+      }
+    }
+  }
+
+  /* First child adds no space above. Last so it wins ties. */
+  .typeset
+    > :where(:first-child):not(
+      :where(
+        .not-typeset,
+        [data-not-typeset],
+        .not-typeset *,
+        [data-not-typeset] *
+      )
+    ),
+  .typeset
+    > :where(:first-child)
+    > :where(:first-child):not(
+      :where(
+        .not-typeset,
+        [data-not-typeset],
+        .not-typeset *,
+        [data-not-typeset] *
+      )
+    ),
+  .typeset
+    :where(
+      li > :first-child,
+      blockquote > :first-child,
+      td > :first-child,
+      th > :first-child,
+      dd > :first-child,
+      figure > :first-child,
+      figure > picture > img
+    ):not(
+      :where(
+        .not-typeset,
+        [data-not-typeset],
+        .not-typeset *,
+        [data-not-typeset] *
+      )
+    ) {
+    margin-block-start: 0;
+  }
+}

package/ui/src/lib/utils.ts

@@ -0,0 +1,12 @@
+import { twMerge } from 'tailwind-merge'
+import { clsx, type ClassValue } from 'clsx'
+
+export function cn(...inputs: ClassValue[]) {
+  return twMerge(clsx(inputs))
+}
+
+export type WithoutChild<T> = T extends { child?: any } ? Omit<T, 'child'> : T
+
+export type WithoutChildren<T> = T extends { children?: any } ? Omit<T, 'children'> : T
+export type WithoutChildrenOrChild<T> = WithoutChildren<WithoutChild<T>>
+export type WithElementRef<T, U extends HTMLElement = HTMLElement> = T & { ref?: U | null }

package/ui/src/routes/(private)/+layout.svelte

@@ -0,0 +1,112 @@
+<script lang="ts">
+  import { LogOut, Search } from '@lucide/svelte'
+  import { Authenticated, Authorized } from '@/iam/ui'
+  import { logout } from '@/iam'
+  import { only, query } from '@/configuration/ui'
+  import { Kbd } from '$ui/kbd'
+  import { Input } from '$ui/input'
+  import { Button } from '$ui/button'
+  import { apple } from '$lib/tools'
+  import { dict } from '$lib/intl'
+  import { meta } from '$config'
+  import { page } from '$app/state'
+  import { base } from '$app/paths'
+  import { onNavigate } from '$app/navigation'
+
+  const { children } = $props()
+
+  /**
+   * The title leads back to the list. Every address ends in a slash, so the way up is the
+   * address itself on the list and one level up on a component's screen.
+   */
+  const home = $derived(page.url.pathname === base + '/' ? '.' : '..')
+
+  // a filter is about the screen it was typed on, and the next screen is not that one
+  onNavigate(() => query.set(''))
+
+  /** What an account needs to read the values. `auth:role` in the component's manifest. */
+  const ROLE = 'system:configuration:get'
+
+  let filter = $state<HTMLInputElement | null>(null)
+
+  /** With one thing left, the key does what pressing that thing does. */
+  function enter(event: KeyboardEvent): void {
+    if (event.key !== 'Enter') return
+
+    $only?.()
+  }
+
+  // the shortcut every search field has; ⌘ on Apple, Ctrl everywhere else
+  function shortcut(event: KeyboardEvent) {
+    if (event.key !== 'k' || !(event.metaKey || event.ctrlKey)) return
+
+    event.preventDefault()
+    filter?.focus()
+    filter?.select()
+  }
+</script>
+
+<svelte:window onkeydown={shortcut} />
+
+<Authenticated>
+  <div class="flex h-dvh flex-col">
+    <!-- named, so the chrome stays put while the screen under it changes: what is not
+         named is the page, and the page is what a view transition moves -->
+    <header class="flex items-center gap-4 px-4 py-3" style="view-transition-name: chrome">
+      <!-- the sides take equal space, which is what leaves the filter in the middle. Narrow,
+           the title is gone and this side is empty: it takes no space either, so the filter
+           starts at the edge rather than floating with nothing to sit between. -->
+      <div class="hidden flex-1 items-center gap-4 md:flex">
+        <h1 class="min-w-0 truncate text-lg font-medium">
+          <a id="nav-home-link" href={home} class="hover:text-muted-foreground transition-colors"
+            >{meta.title}</a
+          >
+        </h1>
+      </div>
+
+      <div class="relative w-full max-w-64 min-w-0 shrink">
+        <Search
+          class="text-muted-foreground pointer-events-none absolute start-2.5 top-1/2 size-3.5 -translate-y-1/2"
+        />
+
+        <Input
+          id="nav-filter-input"
+          type="search"
+          bind:ref={filter}
+          bind:value={$query}
+          onkeydown={enter}
+          aria-label={$dict.nav.filter}
+          class="ps-8 pe-3 md:pe-14 [&::-webkit-search-cancel-button]:hidden"
+        />
+
+        <Kbd class="absolute end-2 top-1/2 hidden -translate-y-1/2 md:inline-flex"
+          >{apple ? '⌘K' : 'Ctrl K'}</Kbd
+        >
+      </div>
+
+      <!-- no `min-w-0` either: the button holds its ground and the filter gives way -->
+      <div class="flex flex-1 justify-end">
+        <!-- the label is the first thing to go when the header runs out of room -->
+        <Button
+          id="iam-logout-button"
+          variant="ghost"
+          aria-label={$dict.nav.signout}
+          onclick={logout}
+        >
+          <LogOut />
+          <span class="hidden md:inline">{$dict.nav.signout}</span>
+        </Button>
+      </div>
+    </header>
+
+    <main class="min-h-0 flex-1">
+      <!-- the role the values API is read through, declared in `configuration.values`.
+           Gating here rather than letting the page ask and be refused is what keeps the
+           request from being made at all: the stores fetch when something subscribes,
+           and nothing does. -->
+      <Authorized role={ROLE}>
+        {@render children()}
+      </Authorized>
+    </main>
+  </div>
+</Authenticated>

package/ui/src/routes/(private)/+page.svelte

@@ -0,0 +1,7 @@
+<script lang="ts">
+  import { Configurations } from '@/configuration/ui'
+</script>
+
+<div class="mx-auto h-full max-w-7xl overflow-auto px-4 pb-12">
+  <Configurations />
+</div>