@wenathlan/saddle 2.0.151 → 2.0.153

package/dist/Sol/wingets/LoginForm.js

@@ -0,0 +1,141 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// Login form: faithful absorption of login.js — posts the credentials to
+// /api/v1/auth/login, falls back to the browser-local accounts when no api
+// answers, and honors the sanitized ?next= target on success.
+import { useEffect, useRef, useState } from 'react';
+import { Link, useLocation } from 'wouter';
+import { apibase, apifetch, apistatustext } from '../../api.ts';
+import { label } from '../../labels.ts';
+/** fallback target when no ?next= parameter is present. */
+const defaulttarget = 'dashboard';
+/**
+ * only same-origin page-relative targets are honored; absolute urls,
+ * protocol relative (//host), backslash (\host), scheme (javascript:,
+ * data:), control characters and path traversal are all rejected.
+ * targets stay page-relative (no leading slash) so the redirect works
+ * both on the self-hosted node (/, /login) and inside sub-path static
+ * hosting such as github pages (/saddle/login). the redirect target
+ * never depends on an unvalidated user value. legacy ".html" suffixes
+ * from the absorbed static pages map to the spa route of the same name.
+ *
+ * @returns the sanitized page-relative target.
+ */
+export function safenext() {
+    try {
+        const raw = new URLSearchParams(window.location.search).get('next');
+        if (raw === null)
+            return defaulttarget;
+        const decoded = decodeURIComponent(raw);
+        if (!/^[A-Za-z0-9._\-/]*$/.test(decoded))
+            return defaulttarget;
+        if (decoded.trim() === '')
+            return defaulttarget;
+        if (decoded.startsWith('//') || decoded.startsWith('/\\'))
+            return defaulttarget;
+        if (decoded.includes('../') || decoded.includes('/./') || decoded.startsWith('./')) {
+            return defaulttarget;
+        }
+        return decoded.replace(/^\/+/, '').replace(/\.html$/, '');
+    }
+    catch {
+        return defaulttarget;
+    }
+}
+/**
+ * the sign-in form: username + password only, generic error messages on
+ * purpose (no user enumeration, no cause leak), aria-invalid feedback and
+ * loading states while the submission is in flight.
+ */
+export default function LoginForm() {
+    const [, navigate] = useLocation();
+    const usernameref = useRef(null);
+    const [username, setUsername] = useState('');
+    const [password, setPassword] = useState('');
+    const [usernameinvalid, setUsernameinvalid] = useState(false);
+    const [passwordinvalid, setPasswordinvalid] = useState(false);
+    const [error, setError] = useState('');
+    const [pending, setPending] = useState(false);
+    const [apimode, setApimode] = useState('probing');
+    const [statusline, setStatusline] = useState(apistatustext());
+    /** static edge detection: probe the api once; no answer -> local mode. */
+    useEffect(() => {
+        let cancelled = false;
+        const detect = async () => {
+            const base = apibase();
+            const localauth = await import('../../localauth.ts');
+            const apianswers = await localauth.probe(base);
+            if (cancelled)
+                return;
+            if (!apianswers) {
+                setApimode('local');
+                setStatusline(label('login.status.local'));
+            }
+            else {
+                setApimode('remote');
+            }
+        };
+        detect().catch(() => {
+            if (!cancelled)
+                setApimode('local');
+        });
+        return () => {
+            cancelled = true;
+        };
+    }, []);
+    /** username field focus, like the static page controller. */
+    useEffect(() => {
+        usernameref.current?.focus();
+    }, []);
+    const clearerror = () => setError('');
+    const showerror = (message) => setError(message);
+    const onsubmit = async (event) => {
+        event.preventDefault();
+        clearerror();
+        const trimmedusername = username.trim();
+        if (trimmedusername.length === 0 || password.length === 0) {
+            setUsernameinvalid(trimmedusername.length === 0);
+            setPasswordinvalid(password.length === 0);
+            showerror(label('login.error.bothFields'));
+            return;
+        }
+        setUsernameinvalid(false);
+        setPasswordinvalid(false);
+        setPending(true);
+        /* static edge: no api at this base -> verify the local account */
+        if (apimode === 'local') {
+            try {
+                const localauth = await import('../../localauth.ts');
+                await localauth.login(trimmedusername, password);
+                navigate(`/${safenext()}`);
+            }
+            catch (loginerror) {
+                const message = loginerror instanceof Error ? loginerror.message : label('login.error.invalid');
+                showerror(message);
+                setPending(false);
+            }
+            return;
+        }
+        try {
+            const response = await apifetch('/api/v1/auth/login', {
+                method: 'POST',
+                body: JSON.stringify({ username: trimmedusername, password }),
+            });
+            if (response.ok) {
+                navigate(`/${safenext()}`);
+                return;
+            }
+            if (response.status === 404) {
+                showerror(label('login.error.noAuth'));
+            }
+            else {
+                /* generic message on purpose: no user enumeration, no cause leak */
+                showerror(label('login.error.invalid'));
+            }
+        }
+        catch {
+            showerror(label('login.error.unreachable'));
+        }
+        setPending(false);
+    };
+    return (_jsxs("form", { className: "auth-form", noValidate: true, onSubmit: onsubmit, children: [_jsxs("div", { className: "auth-field", children: [_jsx("label", { htmlFor: "username", children: label('login.field.username') }), _jsx("input", { ref: usernameref, className: "auth-input", id: "username", name: "username", type: "text", autoComplete: "username", spellCheck: false, autoCapitalize: "none", required: true, "aria-invalid": usernameinvalid ? 'true' : undefined, "aria-describedby": "usernamehint", value: username, onChange: (event) => setUsername(event.target.value) }), _jsx("p", { className: "auth-hint", id: "usernamehint", children: label('login.hint.username') })] }), _jsxs("div", { className: "auth-field", children: [_jsx("label", { htmlFor: "password", children: label('login.field.password') }), _jsx("input", { className: "auth-input", id: "password", name: "password", type: "password", autoComplete: "current-password", required: true, "aria-invalid": passwordinvalid ? 'true' : undefined, value: password, onChange: (event) => setPassword(event.target.value) })] }), error !== '' && (_jsx("p", { className: "auth-formerror", role: "alert", "aria-live": "polite", children: error })), _jsx("button", { className: "button button-primary auth-submit", type: "submit", disabled: pending, "aria-busy": pending ? 'true' : undefined, children: pending ? label('login.submitPending') : label('login.submit') }), _jsx("p", { className: "auth-statusline", children: statusline }), _jsxs("p", { className: "auth-statusline", children: [label('login.noAccount'), " ", _jsx(Link, { href: "/register", children: label('login.link.create') }), _jsx("span", { "aria-hidden": "true", children: " \u00B7 " }), _jsx(Link, { href: "/console", children: label('login.link.backConsole') })] })] }));
+}

package/dist/Sol/wingets/RegisterPasswordconfirm.d.ts

@@ -0,0 +1,13 @@
+type PasswordConfirmProps = {
+    password: string;
+    value: string;
+    invalid: boolean;
+    onChange: (value: string) => void;
+};
+/**
+ * the confirmation field: blank stays neutral (the hint keeps its
+ * reserved height with a non-breaking space), a typed value flips the
+ * hint to match / no-match.
+ */
+export default function PasswordConfirm({ password, value, invalid, onChange, }: PasswordConfirmProps): import("react").JSX.Element;
+export {};

package/dist/Sol/wingets/RegisterPasswordconfirm.js

@@ -0,0 +1,16 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// Password confirmation field: live match feedback — faithful absorption of
+// the register.html confirm field and register.js paintconfirm().
+import { label } from '../../labels.ts';
+/**
+ * the confirmation field: blank stays neutral (the hint keeps its
+ * reserved height with a non-breaking space), a typed value flips the
+ * hint to match / no-match.
+ */
+export default function PasswordConfirm({ password, value, invalid, onChange, }) {
+    const empty = value.length === 0;
+    const match = password === value;
+    const hintclass = empty ? 'auth-hint' : match ? 'auth-hint ok' : 'auth-hint bad';
+    const hinttext = empty ? '\u00a0' : match ? label('register.confirm.match') : label('register.confirm.mismatch');
+    return (_jsxs("div", { className: "auth-field", children: [_jsx("label", { htmlFor: "password2", children: label('register.confirm.label') }), _jsx("input", { className: "auth-input", id: "password2", name: "password2", type: "password", autoComplete: "new-password", required: true, "aria-invalid": invalid ? 'true' : undefined, "aria-describedby": "password2hint", value: value, onChange: (event) => onChange(event.target.value) }), _jsx("p", { className: hintclass, id: "password2hint", children: hinttext })] }));
+}

package/dist/Sol/wingets/RegisterPasswordmeter.d.ts

@@ -0,0 +1,19 @@
+/**
+ * strength score 0-4: length gates, character classes add.
+ *
+ * @param password the typed password.
+ * @returns the score between 0 (empty) and 4 (strong).
+ */
+export declare function passwordstrength(password: string): number;
+/** number of distinct character classes present in the password. */
+export declare function classcount(password: string): number;
+type PasswordMeterProps = {
+    password: string;
+};
+/**
+ * the live password surface: the four-segment meter (aria-hidden
+ * decoration), the polite strength label, the minimum-length hint and
+ * the two password rule rows.
+ */
+export default function PasswordMeter({ password }: PasswordMeterProps): import("react").JSX.Element;
+export {};

package/dist/Sol/wingets/RegisterPasswordmeter.js

@@ -0,0 +1,65 @@
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// Password strength meter: four segments, score 0-4 from length gates and
+// character classes — faithful absorption of the register.html meter and
+// register.js strength()/paintmeter().
+import { label, labelfill } from '../../labels.ts';
+/** the store keys of the strength names, score 0-4. */
+const strengthkeys = [
+    'register.meter.strength0',
+    'register.meter.strength1',
+    'register.meter.strength2',
+    'register.meter.strength3',
+    'register.meter.strength4',
+];
+/**
+ * strength score 0-4: length gates, character classes add.
+ *
+ * @param password the typed password.
+ * @returns the score between 0 (empty) and 4 (strong).
+ */
+export function passwordstrength(password) {
+    if (password.length === 0)
+        return 0;
+    if (password.length < 8)
+        return 1;
+    let classes = 0;
+    if (/[a-z]/.test(password))
+        classes += 1;
+    if (/[A-Z]/.test(password))
+        classes += 1;
+    if (/[0-9]/.test(password))
+        classes += 1;
+    if (/[^a-zA-Z0-9]/.test(password))
+        classes += 1;
+    if (password.length >= 12 && classes >= 3)
+        return 4;
+    if (classes >= 3 || (password.length >= 11 && classes >= 2))
+        return 3;
+    if (classes === 2 || password.length >= 10)
+        return 2;
+    return 1;
+}
+/** number of distinct character classes present in the password. */
+export function classcount(password) {
+    let classes = 0;
+    if (/[a-z]/.test(password))
+        classes += 1;
+    if (/[A-Z]/.test(password))
+        classes += 1;
+    if (/[0-9]/.test(password))
+        classes += 1;
+    if (/[^a-zA-Z0-9]/.test(password))
+        classes += 1;
+    return classes;
+}
+/**
+ * the live password surface: the four-segment meter (aria-hidden
+ * decoration), the polite strength label, the minimum-length hint and
+ * the two password rule rows.
+ */
+export default function PasswordMeter({ password }) {
+    const score = passwordstrength(password);
+    const lengthok = password.length >= 8;
+    const classesok = classcount(password) >= 2;
+    return (_jsxs(_Fragment, { children: [_jsx("div", { "aria-hidden": "true", className: "auth-meter", children: [0, 1, 2, 3].map((index) => (_jsx("span", { className: index < score ? `on-${score}` : undefined }, index))) }), _jsx("p", { className: "auth-meterlabel", role: "status", "aria-live": "polite", children: labelfill('register.meter.strengthLabel', { name: label(strengthkeys[score]) }) }), _jsx("p", { className: "auth-hint", id: "passwordhint", children: label('register.meter.minHint') }), _jsxs("ul", { className: "auth-rules", id: "passwordrules", children: [_jsx("li", { className: lengthok ? 'ok' : undefined, children: label('register.meter.ruleLength') }), _jsx("li", { className: classesok ? 'ok' : undefined, children: label('register.meter.ruleClasses') })] })] }));
+}

package/dist/Sol/wingets/RegisterUsernamerules.d.ts

@@ -0,0 +1,11 @@
+/** the username charset contract: 3-32 of lowercase a-z, 0-9, dot, dash. */
+export declare const usernamere: RegExp;
+type UsernameRulesProps = {
+    value: string;
+};
+/**
+ * the live username checklist: each row flips to ok as the typed value
+ * satisfies the length and the charset rules.
+ */
+export default function UsernameRules({ value }: UsernameRulesProps): import("react").JSX.Element;
+export {};

package/dist/Sol/wingets/RegisterUsernamerules.js

@@ -0,0 +1,16 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// Username rules checklist: 3-32 characters of [a-z0-9.-], auto-lowercased
+// while typing — faithful absorption of the register.html checklist and
+// register.js paintusername().
+import { label } from '../../labels.ts';
+/** the username charset contract: 3-32 of lowercase a-z, 0-9, dot, dash. */
+export const usernamere = /^[a-z0-9.-]{3,32}$/;
+/**
+ * the live username checklist: each row flips to ok as the typed value
+ * satisfies the length and the charset rules.
+ */
+export default function UsernameRules({ value }) {
+    const lengthok = value.length >= 3 && value.length <= 32;
+    const charsetok = usernamere.test(value);
+    return (_jsxs("ul", { className: "auth-rules", id: "usernamerules", children: [_jsx("li", { className: lengthok ? 'ok' : undefined, children: label('register.rules.length') }), _jsx("li", { className: charsetok ? 'ok' : undefined, children: label('register.rules.charset') })] }));
+}

package/dist/Sol/wingets/index.d.ts

@@ -0,0 +1,39 @@
+/**
+ * index.ts — the universal winget surface of saddle: every winget of the
+ * Sol/wingets folder answers from this one module, so the pages import
+ * their components from a single place and the dotted winget file name
+ * lives exactly once (here) instead of repeating across every page —
+ * the components stay complete independent files beside this surface.
+ */
+export { default as ComputeBootladder } from "./ComputeBootladder.tsx";
+export { default as ComputeModalitycatalog } from "./ComputeModalitycatalog.tsx";
+export { default as ApiBadge } from "./ConsoleApibadge.tsx";
+export { default as ConsoleEdgelaw } from "./ConsoleEdgelaw.tsx";
+export * from "./ConsoleEventstimeline.tsx";
+export { default as EventsTimeline } from "./ConsoleEventstimeline.tsx";
+export { default as SnapshotControls } from "./ConsoleSnapshotcontrols.tsx";
+export * from "./ConsoleSpecpanel.tsx";
+export { default as SpecPanel } from "./ConsoleSpecpanel.tsx";
+export * from "./ConsoleTerminal.tsx";
+export { default as Terminal } from "./ConsoleTerminal.tsx";
+export * from "./DashboardAccountpanel.tsx";
+export { default as AccountPanel } from "./DashboardAccountpanel.tsx";
+export { default as AdminPanel } from "./DashboardAdminpanel.tsx";
+export { default as AuditLog } from "./DashboardAuditlog.tsx";
+export { default as CreateSandboxForm } from "./DashboardCreatesandboxform.tsx";
+export { default as DashboardEventstimeline } from "./DashboardEventstimeline.tsx";
+export { default as GlobalSandboxesTable } from "./DashboardGlobalsandboxestable.tsx";
+export { default as MeshNodesTable } from "./DashboardMeshnodestable.tsx";
+export { default as SandboxList } from "./DashboardSandboxlist.tsx";
+export { default as UsersTable } from "./DashboardUserstable.tsx";
+export * from "./HomeEntrygate.tsx";
+export { default as HomeEntrygate } from "./HomeEntrygate.tsx";
+export { default as MetricStrip } from "./HomeMetricstrip.tsx";
+export { default as RuntimeDiagram } from "./HomeRuntimediagram.tsx";
+export * from "./LoginForm.tsx";
+export { default as LoginForm } from "./LoginForm.tsx";
+export { default as PasswordConfirm } from "./RegisterPasswordconfirm.tsx";
+export * from "./RegisterPasswordmeter.tsx";
+export { default as PasswordMeter } from "./RegisterPasswordmeter.tsx";
+export * from "./RegisterUsernamerules.tsx";
+export { default as UsernameRules } from "./RegisterUsernamerules.tsx";

package/dist/Sol/wingets/index.js

@@ -0,0 +1,39 @@
+/**
+ * index.ts — the universal winget surface of saddle: every winget of the
+ * Sol/wingets folder answers from this one module, so the pages import
+ * their components from a single place and the dotted winget file name
+ * lives exactly once (here) instead of repeating across every page —
+ * the components stay complete independent files beside this surface.
+ */
+export { default as ComputeBootladder } from "./ComputeBootladder.tsx";
+export { default as ComputeModalitycatalog } from "./ComputeModalitycatalog.tsx";
+export { default as ApiBadge } from "./ConsoleApibadge.tsx";
+export { default as ConsoleEdgelaw } from "./ConsoleEdgelaw.tsx";
+export * from "./ConsoleEventstimeline.tsx";
+export { default as EventsTimeline } from "./ConsoleEventstimeline.tsx";
+export { default as SnapshotControls } from "./ConsoleSnapshotcontrols.tsx";
+export * from "./ConsoleSpecpanel.tsx";
+export { default as SpecPanel } from "./ConsoleSpecpanel.tsx";
+export * from "./ConsoleTerminal.tsx";
+export { default as Terminal } from "./ConsoleTerminal.tsx";
+export * from "./DashboardAccountpanel.tsx";
+export { default as AccountPanel } from "./DashboardAccountpanel.tsx";
+export { default as AdminPanel } from "./DashboardAdminpanel.tsx";
+export { default as AuditLog } from "./DashboardAuditlog.tsx";
+export { default as CreateSandboxForm } from "./DashboardCreatesandboxform.tsx";
+export { default as DashboardEventstimeline } from "./DashboardEventstimeline.tsx";
+export { default as GlobalSandboxesTable } from "./DashboardGlobalsandboxestable.tsx";
+export { default as MeshNodesTable } from "./DashboardMeshnodestable.tsx";
+export { default as SandboxList } from "./DashboardSandboxlist.tsx";
+export { default as UsersTable } from "./DashboardUserstable.tsx";
+export * from "./HomeEntrygate.tsx";
+export { default as HomeEntrygate } from "./HomeEntrygate.tsx";
+export { default as MetricStrip } from "./HomeMetricstrip.tsx";
+export { default as RuntimeDiagram } from "./HomeRuntimediagram.tsx";
+export * from "./LoginForm.tsx";
+export { default as LoginForm } from "./LoginForm.tsx";
+export { default as PasswordConfirm } from "./RegisterPasswordconfirm.tsx";
+export * from "./RegisterPasswordmeter.tsx";
+export { default as PasswordMeter } from "./RegisterPasswordmeter.tsx";
+export * from "./RegisterUsernamerules.tsx";
+export { default as UsernameRules } from "./RegisterUsernamerules.tsx";