@wenathlan/saddle 2.0.153 → 2.0.155

package/dist/Sol/wingets/LoginForm.js

@@ -1,141 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-// Login form: faithful absorption of login.js — posts the credentials to
-// /api/v1/auth/login, falls back to the browser-local accounts when no api
-// answers, and honors the sanitized ?next= target on success.
-import { useEffect, useRef, useState } from 'react';
-import { Link, useLocation } from 'wouter';
-import { apibase, apifetch, apistatustext } from '../../api.ts';
-import { label } from '../../labels.ts';
-/** fallback target when no ?next= parameter is present. */
-const defaulttarget = 'dashboard';
-/**
- * only same-origin page-relative targets are honored; absolute urls,
- * protocol relative (//host), backslash (\host), scheme (javascript:,
- * data:), control characters and path traversal are all rejected.
- * targets stay page-relative (no leading slash) so the redirect works
- * both on the self-hosted node (/, /login) and inside sub-path static
- * hosting such as github pages (/saddle/login). the redirect target
- * never depends on an unvalidated user value. legacy ".html" suffixes
- * from the absorbed static pages map to the spa route of the same name.
- *
- * @returns the sanitized page-relative target.
- */
-export function safenext() {
-    try {
-        const raw = new URLSearchParams(window.location.search).get('next');
-        if (raw === null)
-            return defaulttarget;
-        const decoded = decodeURIComponent(raw);
-        if (!/^[A-Za-z0-9._\-/]*$/.test(decoded))
-            return defaulttarget;
-        if (decoded.trim() === '')
-            return defaulttarget;
-        if (decoded.startsWith('//') || decoded.startsWith('/\\'))
-            return defaulttarget;
-        if (decoded.includes('../') || decoded.includes('/./') || decoded.startsWith('./')) {
-            return defaulttarget;
-        }
-        return decoded.replace(/^\/+/, '').replace(/\.html$/, '');
-    }
-    catch {
-        return defaulttarget;
-    }
-}
-/**
- * the sign-in form: username + password only, generic error messages on
- * purpose (no user enumeration, no cause leak), aria-invalid feedback and
- * loading states while the submission is in flight.
- */
-export default function LoginForm() {
-    const [, navigate] = useLocation();
-    const usernameref = useRef(null);
-    const [username, setUsername] = useState('');
-    const [password, setPassword] = useState('');
-    const [usernameinvalid, setUsernameinvalid] = useState(false);
-    const [passwordinvalid, setPasswordinvalid] = useState(false);
-    const [error, setError] = useState('');
-    const [pending, setPending] = useState(false);
-    const [apimode, setApimode] = useState('probing');
-    const [statusline, setStatusline] = useState(apistatustext());
-    /** static edge detection: probe the api once; no answer -> local mode. */
-    useEffect(() => {
-        let cancelled = false;
-        const detect = async () => {
-            const base = apibase();
-            const localauth = await import('../../localauth.ts');
-            const apianswers = await localauth.probe(base);
-            if (cancelled)
-                return;
-            if (!apianswers) {
-                setApimode('local');
-                setStatusline(label('login.status.local'));
-            }
-            else {
-                setApimode('remote');
-            }
-        };
-        detect().catch(() => {
-            if (!cancelled)
-                setApimode('local');
-        });
-        return () => {
-            cancelled = true;
-        };
-    }, []);
-    /** username field focus, like the static page controller. */
-    useEffect(() => {
-        usernameref.current?.focus();
-    }, []);
-    const clearerror = () => setError('');
-    const showerror = (message) => setError(message);
-    const onsubmit = async (event) => {
-        event.preventDefault();
-        clearerror();
-        const trimmedusername = username.trim();
-        if (trimmedusername.length === 0 || password.length === 0) {
-            setUsernameinvalid(trimmedusername.length === 0);
-            setPasswordinvalid(password.length === 0);
-            showerror(label('login.error.bothFields'));
-            return;
-        }
-        setUsernameinvalid(false);
-        setPasswordinvalid(false);
-        setPending(true);
-        /* static edge: no api at this base -> verify the local account */
-        if (apimode === 'local') {
-            try {
-                const localauth = await import('../../localauth.ts');
-                await localauth.login(trimmedusername, password);
-                navigate(`/${safenext()}`);
-            }
-            catch (loginerror) {
-                const message = loginerror instanceof Error ? loginerror.message : label('login.error.invalid');
-                showerror(message);
-                setPending(false);
-            }
-            return;
-        }
-        try {
-            const response = await apifetch('/api/v1/auth/login', {
-                method: 'POST',
-                body: JSON.stringify({ username: trimmedusername, password }),
-            });
-            if (response.ok) {
-                navigate(`/${safenext()}`);
-                return;
-            }
-            if (response.status === 404) {
-                showerror(label('login.error.noAuth'));
-            }
-            else {
-                /* generic message on purpose: no user enumeration, no cause leak */
-                showerror(label('login.error.invalid'));
-            }
-        }
-        catch {
-            showerror(label('login.error.unreachable'));
-        }
-        setPending(false);
-    };
-    return (_jsxs("form", { className: "auth-form", noValidate: true, onSubmit: onsubmit, children: [_jsxs("div", { className: "auth-field", children: [_jsx("label", { htmlFor: "username", children: label('login.field.username') }), _jsx("input", { ref: usernameref, className: "auth-input", id: "username", name: "username", type: "text", autoComplete: "username", spellCheck: false, autoCapitalize: "none", required: true, "aria-invalid": usernameinvalid ? 'true' : undefined, "aria-describedby": "usernamehint", value: username, onChange: (event) => setUsername(event.target.value) }), _jsx("p", { className: "auth-hint", id: "usernamehint", children: label('login.hint.username') })] }), _jsxs("div", { className: "auth-field", children: [_jsx("label", { htmlFor: "password", children: label('login.field.password') }), _jsx("input", { className: "auth-input", id: "password", name: "password", type: "password", autoComplete: "current-password", required: true, "aria-invalid": passwordinvalid ? 'true' : undefined, value: password, onChange: (event) => setPassword(event.target.value) })] }), error !== '' && (_jsx("p", { className: "auth-formerror", role: "alert", "aria-live": "polite", children: error })), _jsx("button", { className: "button button-primary auth-submit", type: "submit", disabled: pending, "aria-busy": pending ? 'true' : undefined, children: pending ? label('login.submitPending') : label('login.submit') }), _jsx("p", { className: "auth-statusline", children: statusline }), _jsxs("p", { className: "auth-statusline", children: [label('login.noAccount'), " ", _jsx(Link, { href: "/register", children: label('login.link.create') }), _jsx("span", { "aria-hidden": "true", children: " \u00B7 " }), _jsx(Link, { href: "/console", children: label('login.link.backConsole') })] })] }));
-}

package/dist/Sol/wingets/RegisterPasswordconfirm.d.ts

@@ -1,13 +0,0 @@
-type PasswordConfirmProps = {
-    password: string;
-    value: string;
-    invalid: boolean;
-    onChange: (value: string) => void;
-};
-/**
- * the confirmation field: blank stays neutral (the hint keeps its
- * reserved height with a non-breaking space), a typed value flips the
- * hint to match / no-match.
- */
-export default function PasswordConfirm({ password, value, invalid, onChange, }: PasswordConfirmProps): import("react").JSX.Element;
-export {};

package/dist/Sol/wingets/RegisterPasswordconfirm.js

@@ -1,16 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-// Password confirmation field: live match feedback — faithful absorption of
-// the register.html confirm field and register.js paintconfirm().
-import { label } from '../../labels.ts';
-/**
- * the confirmation field: blank stays neutral (the hint keeps its
- * reserved height with a non-breaking space), a typed value flips the
- * hint to match / no-match.
- */
-export default function PasswordConfirm({ password, value, invalid, onChange, }) {
-    const empty = value.length === 0;
-    const match = password === value;
-    const hintclass = empty ? 'auth-hint' : match ? 'auth-hint ok' : 'auth-hint bad';
-    const hinttext = empty ? '\u00a0' : match ? label('register.confirm.match') : label('register.confirm.mismatch');
-    return (_jsxs("div", { className: "auth-field", children: [_jsx("label", { htmlFor: "password2", children: label('register.confirm.label') }), _jsx("input", { className: "auth-input", id: "password2", name: "password2", type: "password", autoComplete: "new-password", required: true, "aria-invalid": invalid ? 'true' : undefined, "aria-describedby": "password2hint", value: value, onChange: (event) => onChange(event.target.value) }), _jsx("p", { className: hintclass, id: "password2hint", children: hinttext })] }));
-}

package/dist/Sol/wingets/RegisterPasswordmeter.d.ts

@@ -1,19 +0,0 @@
-/**
- * strength score 0-4: length gates, character classes add.
- *
- * @param password the typed password.
- * @returns the score between 0 (empty) and 4 (strong).
- */
-export declare function passwordstrength(password: string): number;
-/** number of distinct character classes present in the password. */
-export declare function classcount(password: string): number;
-type PasswordMeterProps = {
-    password: string;
-};
-/**
- * the live password surface: the four-segment meter (aria-hidden
- * decoration), the polite strength label, the minimum-length hint and
- * the two password rule rows.
- */
-export default function PasswordMeter({ password }: PasswordMeterProps): import("react").JSX.Element;
-export {};

package/dist/Sol/wingets/RegisterPasswordmeter.js

@@ -1,65 +0,0 @@
-import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-// Password strength meter: four segments, score 0-4 from length gates and
-// character classes — faithful absorption of the register.html meter and
-// register.js strength()/paintmeter().
-import { label, labelfill } from '../../labels.ts';
-/** the store keys of the strength names, score 0-4. */
-const strengthkeys = [
-    'register.meter.strength0',
-    'register.meter.strength1',
-    'register.meter.strength2',
-    'register.meter.strength3',
-    'register.meter.strength4',
-];
-/**
- * strength score 0-4: length gates, character classes add.
- *
- * @param password the typed password.
- * @returns the score between 0 (empty) and 4 (strong).
- */
-export function passwordstrength(password) {
-    if (password.length === 0)
-        return 0;
-    if (password.length < 8)
-        return 1;
-    let classes = 0;
-    if (/[a-z]/.test(password))
-        classes += 1;
-    if (/[A-Z]/.test(password))
-        classes += 1;
-    if (/[0-9]/.test(password))
-        classes += 1;
-    if (/[^a-zA-Z0-9]/.test(password))
-        classes += 1;
-    if (password.length >= 12 && classes >= 3)
-        return 4;
-    if (classes >= 3 || (password.length >= 11 && classes >= 2))
-        return 3;
-    if (classes === 2 || password.length >= 10)
-        return 2;
-    return 1;
-}
-/** number of distinct character classes present in the password. */
-export function classcount(password) {
-    let classes = 0;
-    if (/[a-z]/.test(password))
-        classes += 1;
-    if (/[A-Z]/.test(password))
-        classes += 1;
-    if (/[0-9]/.test(password))
-        classes += 1;
-    if (/[^a-zA-Z0-9]/.test(password))
-        classes += 1;
-    return classes;
-}
-/**
- * the live password surface: the four-segment meter (aria-hidden
- * decoration), the polite strength label, the minimum-length hint and
- * the two password rule rows.
- */
-export default function PasswordMeter({ password }) {
-    const score = passwordstrength(password);
-    const lengthok = password.length >= 8;
-    const classesok = classcount(password) >= 2;
-    return (_jsxs(_Fragment, { children: [_jsx("div", { "aria-hidden": "true", className: "auth-meter", children: [0, 1, 2, 3].map((index) => (_jsx("span", { className: index < score ? `on-${score}` : undefined }, index))) }), _jsx("p", { className: "auth-meterlabel", role: "status", "aria-live": "polite", children: labelfill('register.meter.strengthLabel', { name: label(strengthkeys[score]) }) }), _jsx("p", { className: "auth-hint", id: "passwordhint", children: label('register.meter.minHint') }), _jsxs("ul", { className: "auth-rules", id: "passwordrules", children: [_jsx("li", { className: lengthok ? 'ok' : undefined, children: label('register.meter.ruleLength') }), _jsx("li", { className: classesok ? 'ok' : undefined, children: label('register.meter.ruleClasses') })] })] }));
-}

package/dist/Sol/wingets/RegisterUsernamerules.d.ts

@@ -1,11 +0,0 @@
-/** the username charset contract: 3-32 of lowercase a-z, 0-9, dot, dash. */
-export declare const usernamere: RegExp;
-type UsernameRulesProps = {
-    value: string;
-};
-/**
- * the live username checklist: each row flips to ok as the typed value
- * satisfies the length and the charset rules.
- */
-export default function UsernameRules({ value }: UsernameRulesProps): import("react").JSX.Element;
-export {};

package/dist/Sol/wingets/RegisterUsernamerules.js

@@ -1,16 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-// Username rules checklist: 3-32 characters of [a-z0-9.-], auto-lowercased
-// while typing — faithful absorption of the register.html checklist and
-// register.js paintusername().
-import { label } from '../../labels.ts';
-/** the username charset contract: 3-32 of lowercase a-z, 0-9, dot, dash. */
-export const usernamere = /^[a-z0-9.-]{3,32}$/;
-/**
- * the live username checklist: each row flips to ok as the typed value
- * satisfies the length and the charset rules.
- */
-export default function UsernameRules({ value }) {
-    const lengthok = value.length >= 3 && value.length <= 32;
-    const charsetok = usernamere.test(value);
-    return (_jsxs("ul", { className: "auth-rules", id: "usernamerules", children: [_jsx("li", { className: lengthok ? 'ok' : undefined, children: label('register.rules.length') }), _jsx("li", { className: charsetok ? 'ok' : undefined, children: label('register.rules.charset') })] }));
-}

package/dist/Sol/wingets/index.d.ts

@@ -1,39 +0,0 @@
-/**
- * index.ts — the universal winget surface of saddle: every winget of the
- * Sol/wingets folder answers from this one module, so the pages import
- * their components from a single place and the dotted winget file name
- * lives exactly once (here) instead of repeating across every page —
- * the components stay complete independent files beside this surface.
- */
-export { default as ComputeBootladder } from "./ComputeBootladder.tsx";
-export { default as ComputeModalitycatalog } from "./ComputeModalitycatalog.tsx";
-export { default as ApiBadge } from "./ConsoleApibadge.tsx";
-export { default as ConsoleEdgelaw } from "./ConsoleEdgelaw.tsx";
-export * from "./ConsoleEventstimeline.tsx";
-export { default as EventsTimeline } from "./ConsoleEventstimeline.tsx";
-export { default as SnapshotControls } from "./ConsoleSnapshotcontrols.tsx";
-export * from "./ConsoleSpecpanel.tsx";
-export { default as SpecPanel } from "./ConsoleSpecpanel.tsx";
-export * from "./ConsoleTerminal.tsx";
-export { default as Terminal } from "./ConsoleTerminal.tsx";
-export * from "./DashboardAccountpanel.tsx";
-export { default as AccountPanel } from "./DashboardAccountpanel.tsx";
-export { default as AdminPanel } from "./DashboardAdminpanel.tsx";
-export { default as AuditLog } from "./DashboardAuditlog.tsx";
-export { default as CreateSandboxForm } from "./DashboardCreatesandboxform.tsx";
-export { default as DashboardEventstimeline } from "./DashboardEventstimeline.tsx";
-export { default as GlobalSandboxesTable } from "./DashboardGlobalsandboxestable.tsx";
-export { default as MeshNodesTable } from "./DashboardMeshnodestable.tsx";
-export { default as SandboxList } from "./DashboardSandboxlist.tsx";
-export { default as UsersTable } from "./DashboardUserstable.tsx";
-export * from "./HomeEntrygate.tsx";
-export { default as HomeEntrygate } from "./HomeEntrygate.tsx";
-export { default as MetricStrip } from "./HomeMetricstrip.tsx";
-export { default as RuntimeDiagram } from "./HomeRuntimediagram.tsx";
-export * from "./LoginForm.tsx";
-export { default as LoginForm } from "./LoginForm.tsx";
-export { default as PasswordConfirm } from "./RegisterPasswordconfirm.tsx";
-export * from "./RegisterPasswordmeter.tsx";
-export { default as PasswordMeter } from "./RegisterPasswordmeter.tsx";
-export * from "./RegisterUsernamerules.tsx";
-export { default as UsernameRules } from "./RegisterUsernamerules.tsx";

package/dist/Sol/wingets/index.js

@@ -1,39 +0,0 @@
-/**
- * index.ts — the universal winget surface of saddle: every winget of the
- * Sol/wingets folder answers from this one module, so the pages import
- * their components from a single place and the dotted winget file name
- * lives exactly once (here) instead of repeating across every page —
- * the components stay complete independent files beside this surface.
- */
-export { default as ComputeBootladder } from "./ComputeBootladder.tsx";
-export { default as ComputeModalitycatalog } from "./ComputeModalitycatalog.tsx";
-export { default as ApiBadge } from "./ConsoleApibadge.tsx";
-export { default as ConsoleEdgelaw } from "./ConsoleEdgelaw.tsx";
-export * from "./ConsoleEventstimeline.tsx";
-export { default as EventsTimeline } from "./ConsoleEventstimeline.tsx";
-export { default as SnapshotControls } from "./ConsoleSnapshotcontrols.tsx";
-export * from "./ConsoleSpecpanel.tsx";
-export { default as SpecPanel } from "./ConsoleSpecpanel.tsx";
-export * from "./ConsoleTerminal.tsx";
-export { default as Terminal } from "./ConsoleTerminal.tsx";
-export * from "./DashboardAccountpanel.tsx";
-export { default as AccountPanel } from "./DashboardAccountpanel.tsx";
-export { default as AdminPanel } from "./DashboardAdminpanel.tsx";
-export { default as AuditLog } from "./DashboardAuditlog.tsx";
-export { default as CreateSandboxForm } from "./DashboardCreatesandboxform.tsx";
-export { default as DashboardEventstimeline } from "./DashboardEventstimeline.tsx";
-export { default as GlobalSandboxesTable } from "./DashboardGlobalsandboxestable.tsx";
-export { default as MeshNodesTable } from "./DashboardMeshnodestable.tsx";
-export { default as SandboxList } from "./DashboardSandboxlist.tsx";
-export { default as UsersTable } from "./DashboardUserstable.tsx";
-export * from "./HomeEntrygate.tsx";
-export { default as HomeEntrygate } from "./HomeEntrygate.tsx";
-export { default as MetricStrip } from "./HomeMetricstrip.tsx";
-export { default as RuntimeDiagram } from "./HomeRuntimediagram.tsx";
-export * from "./LoginForm.tsx";
-export { default as LoginForm } from "./LoginForm.tsx";
-export { default as PasswordConfirm } from "./RegisterPasswordconfirm.tsx";
-export * from "./RegisterPasswordmeter.tsx";
-export { default as PasswordMeter } from "./RegisterPasswordmeter.tsx";
-export * from "./RegisterUsernamerules.tsx";
-export { default as UsernameRules } from "./RegisterUsernamerules.tsx";