@undefineds.co/xpod 0.4.28 → 0.4.30

package/node_modules/@undefineds.co/extension-sdk/dist/solid-permissions.js

@@ -1,4 +1,4 @@
-import { universalAccess } from '@inrupt/solid-client';
+import { addUrl, createSolidDataset, createThing, getLinkedResourceUrlAll, getResourceInfo, getSolidDataset, getThingAll, getUrlAll, saveSolidDatasetAt, setThing, universalAccess, } from '@inrupt/solid-client';
 /**
  * Creates the host-owned permission broker used by trusted applets. The applet
  * declares exact Pod resources; the host is the only layer allowed to inspect
@@ -6,16 +6,38 @@ import { universalAccess } from '@inrupt/solid-client';
  */
 export function createSolidPermissionCapability(options) {
     const access = options.access ?? universalAccess;
+    // Only this capability's direct-mode changes can be undone. A newly mounted
+    // capability must never treat unrelated existing permissions as its own grant.
+    const grants = new Map();
+    const keyFor = (request, url) => JSON.stringify([request.appletId, request.service.webId, url]);
     return {
         inspectAgentAccess: (request) => inspect(request, options.fetch, access),
         ensureAgentAccess: async (request) => {
             try {
                 for (const resource of request.resources) {
                     await ensureResource(resource.url, resource.mediaType, options.fetch);
+                    await ensureDeclaredAcr(resource.url, options.fetch);
+                    const current = agentModes(await access.getAgentAccess(resource.url, request.service.webId, { fetch: options.fetch }));
+                    const key = keyFor(request, resource.url);
+                    const previous = grants.get(key);
+                    if (previous && !sameModes(current, previous.after))
+                        throw new Error('Agent access changed outside this capability.');
+                    if (hasRequestedAccess(current, resource.access)) {
+                        if (!previous)
+                            grants.set(key, { before: current, after: current, changed: false });
+                        continue;
+                    }
+                    // Add only requested modes. Existing owner control and unrequested
+                    // access are not removed as a side effect of granting an applet.
                     const granted = await access.setAgentAccess(resource.url, request.service.webId, toAccessModes(resource.access), { fetch: options.fetch });
                     if (!granted || !hasRequestedAccess(granted, resource.access)) {
                         return status('permissionDenied', request, 'Pod did not grant the requested service access.');
                     }
+                    grants.set(key, {
+                        before: previous?.before ?? current,
+                        after: agentModes({ ...current, ...granted }),
+                        changed: true,
+                    });
                 }
                 return status('granted', request);
             }
@@ -25,13 +47,34 @@ export function createSolidPermissionCapability(options) {
         },
         revokeAgentAccess: async (request) => {
             try {
+                // Validate every attribution before changing any resource. A stale or
+                // cold capability cannot silently undo another operation's permissions.
+                const pending = [];
                 for (const resource of request.resources) {
-                    const revoked = await access.setAgentAccess(resource.url, request.service.webId, { read: false, append: false, write: false, controlRead: false, controlWrite: false }, { fetch: options.fetch });
-                    if (!revoked) {
-                        return status('permissionDenied', request, 'Pod did not revoke the service access.');
+                    const grant = grants.get(keyFor(request, resource.url));
+                    if (!grant)
+                        throw new Error('No grant attribution exists in this capability; existing access was not revoked.');
+                    const current = agentModes(await access.getAgentAccess(resource.url, request.service.webId, { fetch: options.fetch }));
+                    if (!sameModes(current, grant.after))
+                        throw new Error('Agent access changed outside this capability; access was not revoked.');
+                    pending.push({ resource, grant });
+                }
+                for (const { resource, grant } of pending) {
+                    if (!grant.changed)
+                        continue;
+                    const restore = {};
+                    for (const mode of AGENT_MODES)
+                        if (grant.before[mode] !== grant.after[mode])
+                            restore[mode] = grant.before[mode];
+                    const restored = await access.setAgentAccess(resource.url, request.service.webId, restore, { fetch: options.fetch });
+                    if (!restored || !sameModes(agentModes({ ...grant.after, ...restored }), grant.before)) {
+                        return status('permissionDenied', request, 'Pod did not restore this capability grant.');
                     }
+                    grant.after = grant.before;
+                    grant.changed = false;
                 }
-                return status('missing', request);
+                const result = await inspect(request, options.fetch, access);
+                return result.status === 'granted' ? { ...result, message: 'Existing agent access was retained.' } : result;
             }
             catch (error) {
                 return status('permissionDenied', request, errorMessage(error));
@@ -39,6 +82,15 @@ export function createSolidPermissionCapability(options) {
         },
     };
 }
+const AGENT_MODES = ['read', 'append', 'write', 'controlRead', 'controlWrite'];
+function agentModes(value) {
+    if (!value || AGENT_MODES.some(mode => typeof value[mode] !== 'boolean'))
+        throw new Error('Unable to inspect direct agent access.');
+    return Object.fromEntries(AGENT_MODES.map(mode => [mode, value[mode]]));
+}
+function sameModes(left, right) {
+    return AGENT_MODES.every(mode => left[mode] === right[mode]);
+}
 async function inspect(request, fetch, access) {
     try {
         for (const resource of request.resources) {
@@ -63,13 +115,81 @@ async function ensureResource(url, mediaType, fetch) {
     await ensureParentContainers(url, fetch);
     const created = await fetch(url, {
         method: 'PUT',
-        headers: { 'content-type': mediaType },
-        body: '# Created by the Xpod applet permission broker.\n',
+        headers: { 'content-type': mediaType, 'if-none-match': '*' },
+        body: mediaType === 'application/json' ? '{}\n' : '# Created by the Xpod applet permission broker.\n',
     });
-    if (!created.ok) {
+    if (!created.ok && created.status !== 412) {
         throw new Error(`Unable to create Pod resource (${created.status}).`);
     }
 }
+const ACP = 'http://www.w3.org/ns/solid/acp#';
+const RDF_TYPE = 'http://www.w3.org/1999/02/22-rdf-syntax-ns#type';
+/** Bootstrap only a server-declared, missing target ACR. Parent ACP policies
+ * remain effective; no owner or inherited grants are copied or replaced. */
+async function ensureDeclaredAcr(resourceUrl, fetch) {
+    const info = await getResourceInfo(resourceUrl, { fetch });
+    const links = getLinkedResourceUrlAll(info).acl;
+    if (!links || links.length !== 1)
+        throw new Error('Missing unambiguous access-control Link.');
+    const linked = new URL(links[0]);
+    const target = new URL(resourceUrl);
+    if (linked.origin !== target.origin || linked.username || linked.password || linked.search || linked.hash) {
+        throw new Error('Access-control Link is outside the resource authority.');
+    }
+    const response = await fetch(linked.href, { method: 'HEAD' });
+    const declaresAcp = declaresAcpType(response.headers.get('link'));
+    await response.arrayBuffer();
+    if (response.ok) {
+        if (declaresAcp)
+            await assertTargetAcr(linked.href, resourceUrl, fetch);
+        return;
+    }
+    if (response.status !== 404)
+        throw new Error(`Unable to inspect access-control resource (${response.status}).`);
+    // WAC initialization remains the responsibility of the ecosystem API.
+    if (!declaresAcp)
+        return;
+    const thing = addUrl(addUrl(createThing({ url: linked.href }), RDF_TYPE, `${ACP}AccessControlResource`), `${ACP}resource`, resourceUrl);
+    const dataset = setThing(createSolidDataset(), thing);
+    let creationStatus;
+    const createOnlyFetch = async (input, init) => {
+        const inputUrl = input instanceof Request ? input.url : String(input);
+        if (inputUrl !== linked.href || init?.method !== 'PUT')
+            throw new Error('Unexpected access-control creation request.');
+        const headers = new Headers(init.headers);
+        headers.set('If-None-Match', '*');
+        const created = await fetch(input, { ...init, headers });
+        creationStatus = created.status;
+        return created;
+    };
+    try {
+        await saveSolidDatasetAt(linked.href, dataset, { fetch: createOnlyFetch });
+    }
+    catch (error) {
+        if (creationStatus !== 412)
+            throw error;
+        // A competing writer won. Read its real policies; never replace them.
+        await assertTargetAcr(linked.href, resourceUrl, fetch);
+    }
+}
+function declaresAcpType(header) {
+    return (header ?? '').split(/,(?=\s*<)/u).some((link) => {
+        const match = /^\s*<([^<>]+)>\s*;(.*)$/u.exec(link);
+        if (match?.[1] !== `${ACP}AccessControlResource`)
+            return false;
+        const rel = /(?:^|;)\s*rel\s*=\s*(?:"([^"]*)"|([^;\s]+))(?:\s*;|\s*$)/u.exec(match[2]);
+        return (rel?.[1] ?? rel?.[2] ?? '').split(/\s+/u).includes('type');
+    });
+}
+async function assertTargetAcr(acrUrl, resourceUrl, fetch) {
+    const dataset = await getSolidDataset(acrUrl, { fetch });
+    const controls = getThingAll(dataset).filter((thing) => getUrlAll(thing, RDF_TYPE).includes(`${ACP}AccessControlResource`));
+    if (controls.length !== 1)
+        throw new Error('Invalid target access-control resource.');
+    const resources = getUrlAll(controls[0], `${ACP}resource`);
+    if (resources.length !== 1 || resources[0] !== resourceUrl)
+        throw new Error('Access-control resource targets another resource.');
+}
 async function ensureParentContainers(resourceUrl, fetch) {
     const resource = new URL(resourceUrl);
     const missing = [];
@@ -100,11 +220,9 @@ async function ensureParentContainers(resourceUrl, fetch) {
 }
 function toAccessModes(access) {
     return {
-        read: access.read === true,
-        append: access.append === true,
-        write: access.write === true,
-        controlRead: false,
-        controlWrite: false,
+        ...(access.read ? { read: true } : {}),
+        ...(access.append ? { append: true } : {}),
+        ...(access.write ? { write: true } : {}),
     };
 }
 function hasRequestedAccess(actual, requested) {

package/node_modules/@undefineds.co/extension-sdk/dist/web.d.ts

@@ -175,7 +175,7 @@ export interface SolidAgentAccess {
 export interface SolidServiceAccessResource {
     id: string;
     url: string;
-    mediaType: 'text/turtle';
+    mediaType: 'text/turtle' | 'application/json';
     access: SolidAgentAccess;
 }
 export interface SolidServiceAccessRequest {
@@ -343,11 +343,17 @@ export interface AiClientCredentialSummary {
     resource: string;
 }
 export interface AiClientCredentialsCapability {
+    /**
+     * Issues one Account client credential. `apiKey` is the ephemeral
+     * `sk-<base64(client_id:client_secret)>` wrapper and is only ever returned
+     * here; `clientId` is the Account identity the credential is revoked by.
+     */
     create(input: {
         name: string;
         webId: string;
     }): Promise<{
         apiKey: string;
+        clientId: string;
         resource: string;
     }>;
     /** Credentials the Account still knows about; the secret is never returned. */

package/node_modules/@undefineds.co/extension-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@undefineds.co/extension-sdk",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "private": false,
   "type": "module",
   "sideEffects": false,

package/node_modules/@undefineds.co/pod-collections/dist/index.cjs

@@ -217,6 +217,36 @@ function rowBelongsToDocument(descriptor, documentUrl, podUrl, row) {
 // src/mapping.ts
 var XSD = "http://www.w3.org/2001/XMLSchema#";
 var ABSOLUTE_URI = /^[a-z][a-z0-9+.-]*:/iu;
+function createProjectionNormalizer({ descriptor, table, database }) {
+  if (typeof database.getDialect !== "function" || typeof table.getColumns !== "function")
+    return (row) => row;
+  const resolver = database.getDialect().getUriResolver();
+  const columns = table.getColumns();
+  const bindings = [...fieldBindings(descriptor, table).values()].filter((binding) => binding.descriptor.type === "uri" && !binding.descriptor.secret && binding.column !== undefined);
+  const tableNameRegistry = new Map;
+  const tableRegistry = new Map;
+  for (const resource of Object.values(database.getSchema() ?? {})) {
+    if (!resource || typeof resource.getType !== "function")
+      continue;
+    tableNameRegistry.set(resource.config.name, resource);
+    const type = resource.getType();
+    tableRegistry.set(type, [...tableRegistry.get(type) ?? [], resource]);
+  }
+  return (row) => {
+    const source = row;
+    const normalized = { ...source };
+    const record = descriptorRowToColumnValues(descriptor, table, source, { resourceId: String(source.id ?? "") });
+    for (const binding of bindings) {
+      const column = columns[binding.column];
+      if (!column)
+        continue;
+      const resolve = (value) => typeof value === "string" ? resolver.resolveLink(value, column, { currentTable: table, record, tableNameRegistry, tableRegistry }) : value;
+      const value = source[binding.field];
+      normalized[binding.field] = binding.descriptor.array && Array.isArray(value) ? value.map(resolve) : resolve(value);
+    }
+    return normalized;
+  };
+}
 function tableColumnPredicates(table) {
   const mapping = table.getMapping();
   const predicates = new Map;
@@ -622,7 +652,8 @@ function markConflict(pending, entry, server) {
   });
   pending.settle(entry, new PodCollectionError("write_conflict", `row ${entry.key} was changed by someone else; server wins`));
 }
-function reconcilePendingWrites(pending, next, hashOf, writeOnly = EMPTY_WRITE_ONLY) {
+function reconcilePendingWrites(pending, next, hashOf, writeOnly = EMPTY_WRITE_ONLY, projectionContext) {
+  const normalize = projectionContext ? createProjectionNormalizer(projectionContext) : (row) => row;
   for (const entry of pending.entries.values()) {
     if (entry.settled)
       continue;
@@ -637,7 +668,7 @@ function reconcilePendingWrites(pending, next, hashOf, writeOnly = EMPTY_WRITE_O
       }
       continue;
     }
-    if (projectionCovers(server, entry.intent, writeOnly)) {
+    if (projectionCovers(server && normalize(server), normalize(entry.intent), writeOnly)) {
       pending.settle(entry);
       continue;
     }
@@ -684,7 +715,8 @@ async function writeField(context, fieldName, options) {
 function createMutationHandlers(context) {
   const { descriptor, table, pending } = context;
   const fieldOrder = projectionFieldOrder(descriptor);
-  const hashOf = (row) => projectionHash(row, fieldOrder);
+  const normalize = createProjectionNormalizer(context);
+  const hashOf = (row) => projectionHash(normalize(row), fieldOrder);
   const uriArrayFieldNames = new Set(Object.entries(descriptor.fields).filter(([, field]) => isUriArrayField(field)).map(([name]) => name));
   const columnBindings = fieldBindings(descriptor, table);
   const columnOf = (field) => columnBindings.get(field)?.column;
@@ -844,7 +876,8 @@ function createPodSync(options) {
   const confirmRetries = options.confirmRetries ?? DEFAULT_CONFIRM_RETRIES;
   const fieldOrder = projectionFieldOrder(descriptor);
   const writeOnly = writeOnlyFields(descriptor);
-  const hashOf = (row) => projectionHash(row, fieldOrder);
+  const normalize = createProjectionNormalizer(options);
+  const hashOf = (row) => projectionHash(normalize(row), fieldOrder);
   let params;
   let subscription;
   let feedAvailable = false;
@@ -955,7 +988,7 @@ function createPodSync(options) {
       failureReported = false;
       sync.markReady();
     }
-    reconcilePendingWrites(pending, next, hashOf, writeOnly);
+    reconcilePendingWrites(pending, next, hashOf, writeOnly, options);
     syncState = feedAvailable ? "live" : "unavailable";
   }
   async function confirmPending(key) {

package/node_modules/@undefineds.co/pod-collections/dist/mapping.d.ts

@@ -1,6 +1,14 @@
 import type { AnyPodTable, SolidDatabase } from '@undefineds.co/drizzle-solid';
 import type { PodModelDescriptor, PodModelFieldDescriptor } from '@undefineds.co/models';
 import type { PodSubjectRow, RowOf } from './types.js';
+export interface PodProjectionContext {
+    descriptor: PodModelDescriptor;
+    table: AnyPodTable;
+    database: SolidDatabase;
+}
+/** Compare mapped URI fields in the same space the bound ORM writes them.
+ * This does not change the collection row or introduce an address resolver. */
+export declare function createProjectionNormalizer({ descriptor, table, database }: PodProjectionContext): <R extends object>(row: R) => R;
 /** RDF term（只覆盖本层会产生的两种）。 */
 export interface PodRdfTerm {
     termType: 'NamedNode' | 'Literal';

package/node_modules/@undefineds.co/pod-collections/dist/mapping.js

@@ -20,6 +20,40 @@ import { rowKeyOf, rowKeyVariable } from './layout.js';
  */
 const XSD = 'http://www.w3.org/2001/XMLSchema#';
 const ABSOLUTE_URI = /^[a-z][a-z0-9+.-]*:/iu;
+/** Compare mapped URI fields in the same space the bound ORM writes them.
+ * This does not change the collection row or introduce an address resolver. */
+export function createProjectionNormalizer({ descriptor, table, database }) {
+    if (typeof database.getDialect !== 'function' || typeof table.getColumns !== 'function')
+        return row => row;
+    const resolver = database.getDialect().getUriResolver();
+    const columns = table.getColumns();
+    const bindings = [...fieldBindings(descriptor, table).values()]
+        .filter(binding => binding.descriptor.type === 'uri' && !binding.descriptor.secret && binding.column !== undefined);
+    const tableNameRegistry = new Map();
+    const tableRegistry = new Map();
+    for (const resource of Object.values((database.getSchema() ?? {}))) {
+        if (!resource || typeof resource.getType !== 'function')
+            continue;
+        tableNameRegistry.set(resource.config.name, resource);
+        const type = resource.getType();
+        tableRegistry.set(type, [...(tableRegistry.get(type) ?? []), resource]);
+    }
+    return (row) => {
+        const source = row;
+        const normalized = { ...source };
+        const record = descriptorRowToColumnValues(descriptor, table, source, { resourceId: String(source.id ?? '') });
+        for (const binding of bindings) {
+            const column = columns[binding.column];
+            if (!column)
+                continue;
+            const resolve = (value) => typeof value === 'string'
+                ? resolver.resolveLink(value, column, { currentTable: table, record, tableNameRegistry, tableRegistry }) : value;
+            const value = source[binding.field];
+            normalized[binding.field] = binding.descriptor.array && Array.isArray(value) ? value.map(resolve) : resolve(value);
+        }
+        return normalized;
+    };
+}
 /** 表列 → 谓词（跳过 `@id` 虚列）。 */
 export function tableColumnPredicates(table) {
     const mapping = table.getMapping();

package/node_modules/@undefineds.co/pod-collections/dist/mutations.d.ts

@@ -2,6 +2,7 @@ import type { AnyPodTable, SolidDatabase } from '@undefineds.co/drizzle-solid';
 import type { PodModelDescriptor } from '@undefineds.co/models';
 import type { InsertMutationFn, UpdateMutationFn, DeleteMutationFn } from '@tanstack/db';
 import type { PodRowConflict, RowOf } from './types.js';
+import { type PodProjectionContext } from './mapping.js';
 /**
  * 未确认的本地写。`sync` 每轮读回文档后调用 `reconcilePendingWrites()`：
  * 读回意图 → 确认；读回第三方值 → 冲突（server wins + 标记）；仍未见意图 → 继续等。
@@ -53,7 +54,7 @@ export declare function markConflict<R extends object>(pending: PodPendingWrites
  * `diff.projectionCovers()`。可读字段的比对一字未松：意图里任何一个非 secret 字段
  * 在服务端行里对不上，仍然走冲突分支。
  */
-export declare function reconcilePendingWrites<R extends object>(pending: PodPendingWrites<R>, next: ReadonlyMap<string, R>, hashOf: (row: R) => string, writeOnly?: ReadonlySet<string>): void;
+export declare function reconcilePendingWrites<R extends object>(pending: PodPendingWrites<R>, next: ReadonlyMap<string, R>, hashOf: (row: R) => string, writeOnly?: ReadonlySet<string>, projectionContext?: PodProjectionContext): void;
 export interface PodMutationContext<D extends PodModelDescriptor> {
     descriptor: D;
     table: AnyPodTable;

package/node_modules/@undefineds.co/pod-collections/dist/mutations.js

@@ -1,5 +1,5 @@
 import { PodCollectionError } from './types.js';
-import { descriptorRowToColumnValues, fieldBindings, isUriArrayField, normalizeMutationRow, normalizeUriArray, projectionFieldOrder, } from './mapping.js';
+import { descriptorRowToColumnValues, createProjectionNormalizer, fieldBindings, isUriArrayField, normalizeMutationRow, normalizeUriArray, projectionFieldOrder, } from './mapping.js';
 import { documentOfIri, resourceIdForRow, subjectIriForRow } from './layout.js';
 import { sessionFetchOf } from './read.js';
 import { projectionCovers, projectionHash } from './diff.js';
@@ -75,7 +75,8 @@ export function markConflict(pending, entry, server) {
  * `diff.projectionCovers()`。可读字段的比对一字未松：意图里任何一个非 secret 字段
  * 在服务端行里对不上，仍然走冲突分支。
  */
-export function reconcilePendingWrites(pending, next, hashOf, writeOnly = EMPTY_WRITE_ONLY) {
+export function reconcilePendingWrites(pending, next, hashOf, writeOnly = EMPTY_WRITE_ONLY, projectionContext) {
+    const normalize = projectionContext ? createProjectionNormalizer(projectionContext) : (row) => row;
     for (const entry of pending.entries.values()) {
         if (entry.settled)
             continue;
@@ -91,7 +92,7 @@ export function reconcilePendingWrites(pending, next, hashOf, writeOnly = EMPTY_
             }
             continue;
         }
-        if (projectionCovers(server, entry.intent, writeOnly)) {
+        if (projectionCovers(server && normalize(server), normalize(entry.intent), writeOnly)) {
             // 意图的可读字段都在服务端行里（插入意图可能只带一部分字段；带 secret 的意图
             // 只按可读部分确认，secret 的证据是写调用已经成功）。
             pending.settle(entry);
@@ -146,7 +147,8 @@ export async function writeField(context, fieldName, options) {
 export function createMutationHandlers(context) {
     const { descriptor, table, pending } = context;
     const fieldOrder = projectionFieldOrder(descriptor);
-    const hashOf = (row) => projectionHash(row, fieldOrder);
+    const normalize = createProjectionNormalizer(context);
+    const hashOf = (row) => projectionHash(normalize(row), fieldOrder);
     const uriArrayFieldNames = new Set(Object.entries(descriptor.fields)
         .filter(([, field]) => isUriArrayField(field))
         .map(([name]) => name));

package/node_modules/@undefineds.co/pod-collections/dist/sync.js

@@ -1,5 +1,5 @@
 import { conditionalDocumentRead } from './read.js';
-import { mapSubjectRows, projectionFieldOrder, writeOnlyFields } from './mapping.js';
+import { createProjectionNormalizer, mapSubjectRows, projectionFieldOrder, writeOnlyFields } from './mapping.js';
 import { computeDocumentDiff, projectionHash, stripVirtualProps } from './diff.js';
 import { subscribeDocumentFeed } from './feed.js';
 import { reconcilePendingWrites } from './mutations.js';
@@ -50,7 +50,8 @@ export function createPodSync(options) {
     const fieldOrder = projectionFieldOrder(descriptor);
     // `secret: true` 的字段读不回来，确认协议要按这条规则把它们排除在比对之外（§4.2、§9-7）。
     const writeOnly = writeOnlyFields(descriptor);
-    const hashOf = (row) => projectionHash(row, fieldOrder);
+    const normalize = createProjectionNormalizer(options);
+    const hashOf = (row) => projectionHash(normalize(row), fieldOrder);
     let params;
     let subscription;
     let feedAvailable = false;
@@ -182,7 +183,7 @@ export function createPodSync(options) {
             failureReported = false;
             sync.markReady();
         }
-        reconcilePendingWrites(pending, next, hashOf, writeOnly);
+        reconcilePendingWrites(pending, next, hashOf, writeOnly, options);
         syncState = feedAvailable ? 'live' : 'unavailable';
     }
     async function confirmPending(key) {

package/node_modules/@undefineds.co/pod-collections/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@undefineds.co/pod-collections",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "private": false,
   "type": "module",
   "sideEffects": false,

package/node_modules/@undefineds.co/shared-ui/dist/pod-sign-in/IdpChrome.d.ts

@@ -11,5 +11,5 @@ export interface IdpChromeProps {
     serviceLabel?: string;
     locale?: PodSignInLocale;
 }
-/** 44px tinted bar at the top of every sign-in-service page (B group). */
+/** Service identity stays readable above the form, even on a narrow host. */
 export declare function IdpChrome({ serviceName, serviceHost, icon, serviceLabel, locale }: IdpChromeProps): import("react").JSX.Element;

package/node_modules/@undefineds.co/shared-ui/dist/pod-sign-in/IdpChrome.js

@@ -1,8 +1,8 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { resolvePodSignInCopy } from './copy.js';
 import { XpodMark } from './XpodMark.js';
-/** 44px tinted bar at the top of every sign-in-service page (B group). */
+/** Service identity stays readable above the form, even on a narrow host. */
 export function IdpChrome({ serviceName, serviceHost, icon, serviceLabel, locale }) {
     const label = serviceLabel ?? resolvePodSignInCopy(locale).serviceLabel;
-    return (_jsxs("div", { "data-pod-sign-in": "idp-chrome", className: "flex h-11 shrink-0 items-center gap-2 border-b border-border bg-[hsl(var(--sunken))] px-4 text-[13px] text-foreground", children: [_jsx("span", { className: "flex shrink-0 items-center justify-center", children: icon ?? _jsx(XpodMark, { size: 24 }) }), _jsxs("span", { className: "min-w-0 truncate font-medium", children: [serviceName, " \u00B7 ", label] }), serviceHost ? _jsx("span", { className: "ml-auto truncate font-mono text-xs text-muted-foreground", children: serviceHost }) : null] }));
+    return (_jsxs("div", { "data-pod-sign-in": "idp-chrome", className: "flex min-h-14 shrink-0 items-center gap-3 border-b border-border bg-[hsl(var(--sunken))] px-6 py-2 text-[13px] text-foreground min-[400px]:px-8", children: [_jsx("span", { className: "flex shrink-0 items-center justify-center", children: icon ?? _jsx(XpodMark, { size: 24 }) }), _jsxs("span", { className: "min-w-0 max-w-[50%] shrink-0 truncate font-medium", children: [serviceName, " \u00B7 ", label] }), serviceHost ? _jsx("span", { className: "ml-auto truncate font-mono text-xs text-muted-foreground", children: serviceHost }) : null] }));
 }

package/node_modules/@undefineds.co/shared-ui/dist/pod-sign-in/IdpViews.js

@@ -31,7 +31,7 @@ export function IdpSignInView(props) {
         if (!pending)
             onSubmit({ email: email.trim(), password });
     };
-    return (_jsxs(ScreenLayout, { "data-pod-sign-in-state": "idp-sign-in", chrome: _jsx(IdpFrameHeader, { ...props }), onSubmit: submit, actions: (_jsxs(_Fragment, { children: [error ? _jsx("p", { role: "alert", className: "text-[13px] text-destructive", children: error }) : null, _jsx(ActionButton, { type: "submit", className: primaryButtonClass, busy: pending, children: copy.signIn }), _jsxs("div", { className: "flex flex-wrap items-center justify-between gap-2", children: [onRegister || registerHref ? (_jsxs("span", { className: "flex min-w-0 flex-wrap items-center gap-x-1 gap-y-0", children: [_jsx("span", { className: "whitespace-nowrap text-xs text-muted-foreground", children: copy.noAccount }), _jsx(TextAction, { href: registerHref, disabled: pending, onClick: onRegister, children: copy.registerLink })] })) : _jsx("span", {}), onUseOtherSolid ? (_jsx("button", { type: "button", className: cn(textButtonClass, 'text-primary hover:underline'), disabled: pending, onClick: onUseOtherSolid, children: copy.useOtherSolid })) : null] })] })), children: [_jsxs("div", { className: "flex flex-col gap-1", children: [_jsx("h1", { className: "text-[17px] font-semibold text-foreground", children: formatCopy(copy.signInTitle, { service: serviceName }) }), returnToAppName ? (_jsx("p", { className: "text-sm text-muted-foreground", children: formatCopy(copy.returnToApp, { app: returnToAppName }) })) : null] }), _jsxs("div", { "data-pod-sign-in": "fields", className: "flex flex-col gap-4", children: [_jsx(Field, { label: copy.email, error: fieldErrors?.email, children: (fieldProps) => (_jsx(EmailInput, { ...fieldProps, name: "email", autoComplete: "username", autoCapitalize: "none", spellCheck: false, className: inputClass, value: email, disabled: pending, onChange: (event) => {
+    return (_jsxs(ScreenLayout, { "data-pod-sign-in-state": "idp-sign-in", chrome: _jsx(IdpFrameHeader, { ...props }), onSubmit: submit, actions: (_jsxs(_Fragment, { children: [error ? _jsx("p", { role: "alert", className: "text-[13px] text-destructive", children: error }) : null, _jsx(ActionButton, { type: "submit", className: primaryButtonClass, busy: pending, children: copy.signIn }), _jsxs("div", { className: "flex flex-wrap items-center justify-between gap-2", children: [onRegister || registerHref ? (_jsxs("span", { className: "flex min-w-0 flex-wrap items-center gap-x-1 gap-y-0", children: [_jsx("span", { className: "whitespace-nowrap text-xs text-muted-foreground", children: copy.noAccount }), _jsx(TextAction, { href: registerHref, disabled: pending, onClick: onRegister, children: copy.registerLink })] })) : _jsx("span", {}), onUseOtherSolid ? (_jsx("button", { type: "button", className: cn(textButtonClass, 'text-primary hover:underline'), disabled: pending, onClick: onUseOtherSolid, children: copy.useOtherSolid })) : null] })] })), children: [_jsxs("div", { className: "flex flex-col gap-1", children: [_jsx("h1", { className: "text-[17px] font-semibold text-foreground", children: formatCopy(copy.signInTitle, { service: serviceName }) }), returnToAppName ? (_jsx("p", { className: "text-sm text-muted-foreground", children: formatCopy(copy.returnToApp, { app: returnToAppName }) })) : null] }), _jsxs("div", { "data-pod-sign-in": "fields", className: "flex flex-col gap-5", children: [_jsx(Field, { label: copy.email, error: fieldErrors?.email, children: (fieldProps) => (_jsx(EmailInput, { ...fieldProps, name: "email", autoComplete: "username", autoCapitalize: "none", spellCheck: false, className: inputClass, value: email, disabled: pending, onChange: (event) => {
                                 setEmail(event.target.value);
                                 onFieldChange?.('email', event.target.value);
                             } })) }), _jsx(Field, { label: copy.password, error: fieldErrors?.password, labelAside: onForgot || forgotHref ? (_jsx(TextAction, { className: "min-h-7 text-[13px]", href: forgotHref, onClick: onForgot, children: copy.forgotPassword })) : undefined, children: (fieldProps) => (_jsx(Input, { ...fieldProps, name: "password", type: "password", autoComplete: "current-password", className: inputClass, value: password, disabled: pending, onChange: (event) => {
@@ -56,7 +56,7 @@ export function IdpRegisterView(props) {
             password,
         });
     };
-    return (_jsxs(ScreenLayout, { "data-pod-sign-in-state": "idp-register", chrome: _jsx(IdpFrameHeader, { ...props }), onSubmit: submit, actions: (_jsxs(_Fragment, { children: [error ? _jsx("p", { role: "alert", className: "text-[13px] text-destructive", children: error }) : null, _jsx(ActionButton, { type: "submit", className: primaryButtonClass, busy: pending, children: copy.registerSubmit }), onSignIn ? (_jsx("button", { type: "button", className: cn(textButtonClass, 'self-center text-primary hover:underline'), disabled: pending, onClick: onSignIn, children: copy.haveAccount })) : null] })), children: [_jsxs("div", { className: "flex flex-col gap-1", children: [_jsx("h1", { className: "text-[17px] font-semibold text-foreground", children: formatCopy(copy.registerTitle, { service: serviceName }) }), returnToAppName ? (_jsx("p", { className: "text-sm text-muted-foreground", children: formatCopy(copy.returnToApp, { app: returnToAppName }) })) : null] }), _jsxs("div", { className: "flex flex-col gap-4", children: [requireUsername ? (_jsx(Field, { label: copy.username, error: fieldErrors?.username, hint: usernamePreview ? _jsx("span", { role: "status", className: "font-mono text-xs", children: usernamePreview }) : undefined, children: (fieldProps) => (_jsx(Input, { ...fieldProps, name: "username", type: "text", autoComplete: "username", autoCapitalize: "none", spellCheck: false, className: inputClass, value: username, disabled: pending, onChange: (event) => {
+    return (_jsxs(ScreenLayout, { "data-pod-sign-in-state": "idp-register", chrome: _jsx(IdpFrameHeader, { ...props }), onSubmit: submit, actions: (_jsxs(_Fragment, { children: [error ? _jsx("p", { role: "alert", className: "text-[13px] text-destructive", children: error }) : null, _jsx(ActionButton, { type: "submit", className: primaryButtonClass, busy: pending, children: copy.registerSubmit }), onSignIn ? (_jsx("button", { type: "button", className: cn(textButtonClass, 'self-center text-primary hover:underline'), disabled: pending, onClick: onSignIn, children: copy.haveAccount })) : null] })), children: [_jsxs("div", { className: "flex flex-col gap-1", children: [_jsx("h1", { className: "text-[17px] font-semibold text-foreground", children: formatCopy(copy.registerTitle, { service: serviceName }) }), returnToAppName ? (_jsx("p", { className: "text-sm text-muted-foreground", children: formatCopy(copy.returnToApp, { app: returnToAppName }) })) : null] }), _jsxs("div", { className: "flex flex-col gap-5", children: [requireUsername ? (_jsx(Field, { label: copy.username, error: fieldErrors?.username, hint: usernamePreview ? _jsx("span", { role: "status", className: "font-mono text-xs", children: usernamePreview }) : undefined, children: (fieldProps) => (_jsx(Input, { ...fieldProps, name: "username", type: "text", autoComplete: "username", autoCapitalize: "none", spellCheck: false, className: inputClass, value: username, disabled: pending, onChange: (event) => {
                                 setUsername(event.target.value);
                                 onFieldChange?.('username', event.target.value);
                             } })) })) : null, _jsx(Field, { label: copy.email, error: fieldErrors?.email, children: (fieldProps) => (_jsx(EmailInput, { ...fieldProps, name: "email", autoComplete: "email", autoCapitalize: "none", spellCheck: false, className: inputClass, value: email, disabled: pending, onChange: (event) => {

package/node_modules/@undefineds.co/shared-ui/dist/pod-sign-in/PodSignInFrame.d.ts

@@ -9,7 +9,7 @@ export interface PodSignInFrameProps {
      * service name.
      */
     appIntro?: ReactNode;
-    /** The 360px wide body. */
+    /** A responsive body, up to 480px wide. */
     children: ReactNode;
     /**
      * `dialog` only. `true` (default) draws a modal layer over the document;
@@ -25,7 +25,7 @@ export interface PodSignInFrameProps {
 }
 /**
  * Outer frame of every sign-in surface. `window` fills the host window,
- * `dialog` is a 400px layer, `page` is two columns. All three share the same
- * 360px body, so a state looks the same wherever the host places it.
+ * `dialog` is a 480px layer, `page` is two columns. All three share the same
+ * responsive body, so narrower hosts keep the same controls and hierarchy.
  */
 export declare function PodSignInFrame({ presentation, ariaLabel, appIntro, children, modal, onClose, closeLabel, dataAttributes, }: PodSignInFrameProps): import("react").JSX.Element;

package/node_modules/@undefineds.co/shared-ui/dist/pod-sign-in/PodSignInFrame.js

@@ -90,11 +90,11 @@ function useModalFocus(active, onClose) {
     }, [active]);
     return ref;
 }
-const bodyClass = 'flex min-h-0 w-full max-w-[360px] flex-1 flex-col';
+const bodyClass = 'flex min-h-0 w-full max-w-[480px] flex-1 flex-col';
 /**
  * Outer frame of every sign-in surface. `window` fills the host window,
- * `dialog` is a 400px layer, `page` is two columns. All three share the same
- * 360px body, so a state looks the same wherever the host places it.
+ * `dialog` is a 480px layer, `page` is two columns. All three share the same
+ * responsive body, so narrower hosts keep the same controls and hierarchy.
  */
 export function PodSignInFrame({ presentation, ariaLabel, appIntro, children, modal = true, onClose, closeLabel, dataAttributes, }) {
     const isModal = presentation === 'dialog' && modal;
@@ -104,8 +104,8 @@ export function PodSignInFrame({ presentation, ariaLabel, appIntro, children, mo
         return (_jsx("div", { role: "region", "aria-label": ariaLabel, "data-pod-sign-in-frame": "window", ...dataAttributes, className: "pod-sign-in flex h-full min-h-0 w-full min-w-0 justify-center overflow-hidden bg-background text-foreground", children: _jsx("div", { className: bodyClass, children: children }) }));
     }
     if (presentation === 'page') {
-        return (_jsxs("div", { role: "region", "aria-label": ariaLabel, "data-pod-sign-in-frame": "page", ...dataAttributes, className: "pod-sign-in grid min-h-[100dvh] w-full bg-background text-foreground md:grid-cols-2", children: [intro ? (_jsx("aside", { "data-pod-sign-in": "intro", className: "hidden flex-col justify-center gap-6 bg-[hsl(var(--sunken))] px-12 py-10 md:flex", children: intro })) : null, _jsx("div", { className: cn('flex min-w-0 items-center justify-center px-4 py-8', intro ? '' : 'md:col-span-2'), children: _jsx("div", { className: bodyClass, children: children }) })] }));
+        return (_jsxs("div", { role: "region", "aria-label": ariaLabel, "data-pod-sign-in-frame": "page", ...dataAttributes, className: "pod-sign-in grid min-h-[100dvh] w-full bg-background text-foreground md:grid-cols-2", children: [intro ? (_jsx("aside", { "data-pod-sign-in": "intro", className: "hidden flex-col justify-center gap-6 bg-[hsl(var(--sunken))] px-12 py-10 md:flex", children: intro })) : null, _jsx("div", { className: cn('flex min-w-0 items-center justify-center px-4 py-8', intro ? '' : 'md:col-span-2'), children: _jsx("div", { className: cn(bodyClass, 'min-h-[520px]'), children: children }) })] }));
     }
-    const card = (_jsxs("div", { ref: dialogRef, role: isModal ? 'dialog' : 'region', "aria-modal": isModal ? true : undefined, "aria-label": ariaLabel, tabIndex: -1, "data-pod-sign-in-frame": "dialog", ...dataAttributes, className: cn('pod-sign-in relative flex max-h-[90dvh] w-[min(400px,calc(100vw-2rem))] flex-col overflow-hidden rounded-xl border border-border bg-card text-card-foreground shadow-lg focus:outline-none motion-safe:animate-in motion-safe:fade-in-0'), children: [isModal && onClose && closeLabel ? (_jsx("button", { type: "button", "aria-label": closeLabel, className: "absolute right-2 top-2 flex h-9 w-9 items-center justify-center rounded-lg text-muted-foreground hover:bg-accent", onClick: onClose, children: _jsx("span", { "aria-hidden": "true", children: "\u00D7" }) })) : null, _jsx("div", { className: cn(bodyClass, 'mx-auto'), children: children })] }));
+    const card = (_jsxs("div", { ref: dialogRef, role: isModal ? 'dialog' : 'region', "aria-modal": isModal ? true : undefined, "aria-label": ariaLabel, tabIndex: -1, "data-pod-sign-in-frame": "dialog", ...dataAttributes, className: cn('pod-sign-in relative flex min-h-[min(440px,90dvh)] max-h-[90dvh] w-[min(480px,calc(100vw-2rem))] flex-col overflow-hidden rounded-xl border border-border bg-card text-card-foreground shadow-lg focus:outline-none motion-safe:animate-in motion-safe:fade-in-0'), children: [isModal && onClose && closeLabel ? (_jsx("button", { type: "button", "aria-label": closeLabel, className: "absolute right-2 top-2 flex h-9 w-9 items-center justify-center rounded-lg text-muted-foreground hover:bg-accent", onClick: onClose, children: _jsx("span", { "aria-hidden": "true", children: "\u00D7" }) })) : null, _jsx("div", { className: cn(bodyClass, 'mx-auto'), children: children })] }));
     return isModal ? (_jsx("div", { className: "fixed inset-0 z-[var(--layer-modal)] flex items-center justify-center bg-background/80 p-4", children: card })) : (_jsx("div", { className: "flex w-full items-center justify-center p-4", children: card }));
 }

package/node_modules/@undefineds.co/shared-ui/dist/pod-sign-in/parts.d.ts

@@ -2,11 +2,11 @@ import { type ReactNode } from 'react';
 import { type ButtonProps } from '../button.js';
 import { type FormFieldProps } from '../form-field.js';
 import type { StorageLocation } from './types.js';
-/** Minimum hit targets (spec §5); content may grow when text is enlarged or wraps. */
-export declare const primaryButtonClass = "h-auto min-h-11 w-full whitespace-normal break-normal rounded-lg py-2 text-sm font-medium leading-snug";
-export declare const outlineButtonClass = "h-auto min-h-11 w-full whitespace-normal break-normal rounded-lg py-2 text-sm font-medium leading-snug";
-export declare const textButtonClass = "h-auto min-h-9 max-w-full whitespace-normal break-normal rounded-lg px-2 py-1 text-sm font-medium leading-snug";
-export declare const fieldClass = "h-11 w-full rounded-lg border border-input bg-card px-3 text-sm text-foreground placeholder:text-muted-foreground disabled:opacity-60";
+/** Screen-level controls leave room for readable text and touch targets. */
+export declare const primaryButtonClass = "h-auto min-h-12 w-full whitespace-normal break-normal rounded-lg py-2 text-base font-medium leading-snug";
+export declare const outlineButtonClass = "h-auto min-h-12 w-full whitespace-normal break-normal rounded-lg py-2 text-base font-medium leading-snug";
+export declare const textButtonClass = "h-9 rounded-lg px-2 text-sm font-medium";
+export declare const fieldClass = "h-12 w-full rounded-lg border border-input bg-card px-4 text-base text-foreground placeholder:text-muted-foreground disabled:opacity-60";
 export declare function Spinner({ className }: {
     className?: string;
 }): import("react").JSX.Element;

package/node_modules/@undefineds.co/shared-ui/dist/pod-sign-in/parts.js

@@ -7,11 +7,11 @@ import { cn } from '../utils.js';
 import { FormField } from '../form-field.js';
 import { Checkbox } from '../checkbox.js';
 import { StorageBadge } from './StorageBadge.js';
-/** Minimum hit targets (spec §5); content may grow when text is enlarged or wraps. */
-export const primaryButtonClass = 'h-auto min-h-11 w-full whitespace-normal break-normal rounded-lg py-2 text-sm font-medium leading-snug';
+/** Screen-level controls leave room for readable text and touch targets. */
+export const primaryButtonClass = 'h-auto min-h-12 w-full whitespace-normal break-normal rounded-lg py-2 text-base font-medium leading-snug';
 export const outlineButtonClass = primaryButtonClass;
-export const textButtonClass = 'h-auto min-h-9 max-w-full whitespace-normal break-normal rounded-lg px-2 py-1 text-sm font-medium leading-snug';
-export const fieldClass = 'h-11 w-full rounded-lg border border-input bg-card px-3 text-sm text-foreground placeholder:text-muted-foreground disabled:opacity-60';
+export const textButtonClass = 'h-9 rounded-lg px-2 text-sm font-medium';
+export const fieldClass = 'h-12 w-full rounded-lg border border-input bg-card px-4 text-base text-foreground placeholder:text-muted-foreground disabled:opacity-60';
 export function Spinner({ className }) {
     return _jsx(Loader2, { "aria-hidden": "true", className: cn('h-4 w-4 shrink-0 animate-spin motion-reduce:animate-none', className) });
 }
@@ -55,7 +55,7 @@ export function usePastDelay(delayMs) {
  * Pass `onSubmit` to make the whole screen one form (actions submit it).
  */
 export function ScreenLayout({ chrome, children, actions, onSubmit, mainClassName, ...state }) {
-    const inner = (_jsxs(_Fragment, { children: [chrome, _jsx("div", { "data-pod-sign-in": "main", className: cn('flex min-h-0 flex-1 flex-col gap-5 overflow-y-auto px-6 pb-2 pt-5', mainClassName), children: children }), actions ? _jsx("div", { "data-pod-sign-in": "actions", className: "flex shrink-0 flex-col gap-3 px-6 pb-6 pt-3", children: actions }) : null] }));
+    const inner = (_jsxs(_Fragment, { children: [chrome, _jsx("div", { "data-pod-sign-in": "main", className: cn('flex min-h-0 flex-1 flex-col gap-7 overflow-y-auto px-6 pb-3 pt-7 min-[400px]:px-8 min-[400px]:pt-8', mainClassName), children: children }), actions ? _jsx("div", { "data-pod-sign-in": "actions", className: "flex shrink-0 flex-col gap-4 px-6 pb-7 pt-5 min-[400px]:px-8 min-[400px]:pb-8", children: actions }) : null] }));
     const className = 'flex min-h-0 flex-1 flex-col';
     return onSubmit
         ? _jsx("form", { ...state, onSubmit: onSubmit, className: className, noValidate: true, children: inner })