@wpmoo/ui 1.5.0 → 2.1.0

package/LICENSE

@@ -19,31 +19,3 @@ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
-
----
-
-Chart.js v4.5.1
-
-The MIT License (MIT)
-
-Copyright (c) 2014-2024 Chart.js Contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-
----
-
-@kurkle/color v0.3.4
-
-The MIT License (MIT)
-
-Copyright (c) 2018-2024 Jukka Kurkela
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -140,6 +140,17 @@ if (combobox) {
 
 The runtime bundle is optional and side-effect-free. Import the aggregate
 `@wpmoo/ui/moo-ui.js` entrypoint, or import only the component module you use.
+Chart consumers install the optional peer explicitly (other components need no Chart dependency):
+
+```sh
+npm install chart.js@4.6.1
+```
+
+Chart.js supplies its own `@kurkle/color` dependency and vendor licenses. Neither
+implementation is embedded in Moo UI's npm archive. Bundlers resolve `chart.js/auto`
+from that installation. Native browser/CDN hosts must configure the version-pinned
+import map in the [Installation guide](https://ui.wpmoo.org/installation/) before
+loading MooChart. Self-hosted vendors must retain their upstream license files.
 The aggregate loads Chart.js only when `loadChart()` is called:
 
 ```js
@@ -197,6 +208,31 @@ const scrollbar = OverlayScrollbar.getOrCreateInstance(document.querySelector(".
 // scrollbar.dispose(); // restore the native scrollbar
 ```
 
+For dependency-free password requirements feedback, initialize an identified
+`fieldset[data-password-requirements]` explicitly:
+
+```js
+import PasswordRequirements from "@wpmoo/ui/password-requirements.js";
+const feedback = PasswordRequirements.getOrCreateInstance(
+  document.getElementById("password-rules"),
+);
+await feedback.ready;
+// feedback.dispose(); // restore original markup, attributes and control state
+```
+
+The [Field example](https://ui.wpmoo.org/components/field/#password-feedback-preview)
+shows the rendered contract. Policy version3 supports length, maximum, case,
+number and symbol requirements, plus optional confirmation and submit binding.
+All controls share a form and nearest `.moo-ui` owner. Submit feedback requires
+Bootstrap Tooltip on that document's window. There is no bundled estimator,
+strength score, breached-password lookup, network request or storage access.
+Meeting these checks does **not** establish password strength or replace server
+validation. A trusted host may supply synchronous `analyze(value)`, returning
+`{met: boolean, score: 0..4}`; this callback receives the normalized password and
+owns its security/privacy behavior. Without it no score is produced. `onChange`
+receives only Boolean check states, an active flag and the optional host score.
+See the [public policy contract](https://github.com/wpmoo-org/ui/blob/main/docs/contracts/PACKAGE_SURFACE_DECISIONS.md#200-external-chart-vendors-and-password-requirements).
+
 The module preserves native document/touch/wheel scrolling. Its thin thumb
 appears while scrolling, near the trailing mouse edge or on keyboard focus;
 show/hide never reserves a layout gutter. Initial activation removes any native
@@ -239,11 +275,11 @@ calm.
 
 ## Status And Support
 
-The `1.5.0` minor release target adds an optional FloatingPanel ESM module and
-a composed onboarding checklist. Progress gains a circular variant; Collapsible
-supports composed headers, Navigation supports icon utilities, and Switch keeps
-native form names and values. Existing exports and Bootstrap compatibility are
-preserved; `@wpmoo/ui/floating-panel.js` is an additive public entrypoint.
+The `2.1.0` minor release adds host-translated password feedback, the
+`--moo-heading-font-weight` owner token, and a document scrolling mode for
+website shells. The Layout catalog demonstrates the document mode with a live
+preview and copyable example. Chart consumers use the optional Chart.js peer
+or a native browser import map.
 Component certification remains
 `preview`, with its documented manual and browser/device limits. Public exports, package boundaries, browser support, and release evidence live in [Support & Evidence](https://ui.wpmoo.org/support/).
 Complete release notes are on
@@ -266,8 +302,8 @@ paths live in the [Installation guide](https://ui.wpmoo.org/installation/).
 
 Moo UI source code is MIT licensed. License details live in
 [LICENSE](LICENSE) and the [License page](https://ui.wpmoo.org/license/).
-The published `LICENSE` also retains the full MIT notices for bundled
-Chart.js and `@kurkle/color`.
-Asset terms live in [ASSET_LICENSE.md](ASSET_LICENSE.md); dependency notices
-live in the
-[version-pinned third-party notices](https://github.com/wpmoo-org/ui/blob/v1.5.0/THIRD_PARTY_NOTICES.md).
+Third-party distribution details and notices are kept separately in
+[THIRD_PARTY_NOTICES.md](https://github.com/wpmoo-org/ui/blob/v2.1.0/THIRD_PARTY_NOTICES.md).
+Catalog visual assets and their license are repository-only and are not
+included in the npm package. Asset terms live in the
+[visual asset license](https://github.com/wpmoo-org/ui/blob/v2.1.0/ASSET_LICENSE.md).

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,87 @@
+# Third-Party Notices
+
+Moo UI's own MIT license is kept separately in `LICENSE`. The full Moo CSS
+includes Bootstrap-derived styles. Catalog-only assets and optional external
+Chart vendors have separate distributions and licenses as described below.
+
+## Bootstrap
+
+Moo UI vendors the official `twbs/bootstrap` v5.3.3 SCSS source and bundled
+JavaScript. Bootstrap is licensed under the MIT License; the bundled license is
+stored at `vendor/bootstrap/LICENSE`.
+
+The MIT License (MIT)
+
+Copyright (c) 2011-2024 The Bootstrap Authors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+Bootstrap's component and Button documentation are behavior, semantics, and
+accessibility references for this product.
+
+## shadcn/ui
+
+Moo UI is designed for server-rendered interfaces that keep Bootstrap markup as
+the durable contract. shadcn/ui is used as a visual-intent and catalog-coverage
+reference. If you are building React and Tailwind applications, use shadcn/ui
+directly: https://ui.shadcn.com/
+
+## Lucide
+
+Moo UI vendors a build-time icon metadata subset from Iconify's Lucide icon
+set at `src/icons/lucide-icons.json` and renders selected Lucide icons into the
+generated catalog. Lucide is licensed under the ISC License. The source
+metadata identifies the Lucide project, its contributors, and the upstream
+license URL. The root favicon set (`favicon.svg`, `favicon.ico`,
+`apple-touch-icon.png`, `icon-192.png`, and `icon-512.png`) uses the Lucide
+Blocks geometry and remains covered by the same ISC license notice.
+
+## Geist
+
+Moo UI vendors `Geist-Variable.woff2` for catalog chrome typography only.
+Geist is licensed under the SIL Open Font License 1.1 (`OFL-1.1`); the bundled
+license is stored at `vendor/geist/LICENSE`.
+
+## Chart.js
+
+Chart.js4.6.1 is an external optional peer of Moo UI, not embedded in either
+`dist/js/chart.js` or `dist/js/chart.min.js`. These files contain the MooChart
+adapter. Consumers install Chart.js separately or serve its native ESM files
+with an import map. The catalog serves exact locked files separately under
+`vendor/chart.js/`, including its unchanged `LICENSE.md`.
+
+- **License:** MIT
+- **Source and license:** <https://github.com/chartjs/Chart.js/blob/v4.6.1/LICENSE.md>
+
+## @kurkle/color
+
+Color0.3.4 is Chart.js's own dependency, not embedded in the Moo npm archive.
+The catalog serves its native ESM file and unchanged license separately under
+`vendor/@kurkle/color/`. npm consumers receive it through their Chart.js install.
+
+- **License:** MIT
+- **Source and license:** <https://github.com/kurkle/color/blob/v0.3.4/LICENSE.md>
+
+## WPMoo visual assets
+
+WPMoo-generated visual assets, including image assets under `site/static/images/`,
+are original WPMoo work and are not licensed under MIT unless explicitly
+stated. See the
+[repository visual asset license](https://github.com/wpmoo-org/ui/blob/v2.1.0/ASSET_LICENSE.md).
+These assets and their license file are not included in the npm package.

package/certification.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "0.1",
   "status": "preview",
-  "coreVersion": "1.5.0",
+  "coreVersion": "2.1.0",
   "bootstrap": {
     "canonicalVersion": "5.3.3",
     "targetRange": ">=5.3.0 <5.4",
@@ -21,6 +21,7 @@
       "./moo.min.css"
     ],
     "esm": [
+      "./password-requirements.js",
       "./moo-ui.js",
       "./moo-ui.min.js",
       "./combobox.js",

package/dist/assets/css/moo-ui.css

@@ -1,5 +1,5 @@
 /*!
- * Moo UI v1.5.0 (https://wpmoo.org/)
+ * Moo UI v2.1.0 (https://wpmoo.org/)
  * Copyright 2026 WPMoo Authors
  * Licensed under MIT (https://github.com/wpmoo-org/ui/blob/main/LICENSE)
  *
@@ -270,6 +270,7 @@
   --moo-chart-4: #3f3f46;
   --moo-chart-5: #27272a;
   --moo-heading-font-family: var(--bs-body-font-family);
+  --moo-heading-font-weight: 600;
   --moo-small-font-size: 0.75rem;
   --moo-paragraph-margin-top: 0;
   --moo-paragraph-margin-bottom: 1rem;
@@ -494,7 +495,7 @@ hr {
 h6, .h6, h5, .h5, h4, .h4, h3, .h3, h2, .h2, h1, .h1 {
   margin-top: 0;
   margin-bottom: 0.5rem;
-  font-weight: 600;
+  font-weight: var(--moo-heading-font-weight, 600);
   line-height: 1.2;
   color: var(--bs-heading-color);
 }
@@ -885,7 +886,7 @@ progress {
 
 .display-1 {
   font-size: calc(1.475rem + 2.7vw);
-  font-weight: 600;
+  font-weight: var(--moo-heading-font-weight, 600);
   line-height: 1.2;
 }
 
@@ -897,7 +898,7 @@ progress {
 
 .display-2 {
   font-size: calc(1.425rem + 2.1vw);
-  font-weight: 600;
+  font-weight: var(--moo-heading-font-weight, 600);
   line-height: 1.2;
 }
 
@@ -909,7 +910,7 @@ progress {
 
 .display-3 {
   font-size: calc(1.375rem + 1.5vw);
-  font-weight: 600;
+  font-weight: var(--moo-heading-font-weight, 600);
   line-height: 1.2;
 }
 
@@ -921,7 +922,7 @@ progress {
 
 .display-4 {
   font-size: calc(1.35rem + 1.2vw);
-  font-weight: 600;
+  font-weight: var(--moo-heading-font-weight, 600);
   line-height: 1.2;
 }
 
@@ -933,7 +934,7 @@ progress {
 
 .display-5 {
   font-size: calc(1.3125rem + 0.75vw);
-  font-weight: 600;
+  font-weight: var(--moo-heading-font-weight, 600);
   line-height: 1.2;
 }
 
@@ -945,7 +946,7 @@ progress {
 
 .display-6 {
   font-size: calc(1.275rem + 0.3vw);
-  font-weight: 600;
+  font-weight: var(--moo-heading-font-weight, 600);
   line-height: 1.2;
 }
 
@@ -13328,7 +13329,7 @@ label.btn {
   .card-title {
     margin-bottom: 0;
     font-size: 1rem;
-    font-weight: 600;
+    font-weight: var(--moo-heading-font-weight, 600);
     line-height: 1.25;
     letter-spacing: -0.01em;
   }
@@ -13378,7 +13379,7 @@ label.btn {
   .empty-state-title {
     margin: 0;
     font-size: 1.09375rem;
-    font-weight: 600;
+    font-weight: var(--moo-heading-font-weight, 600);
     line-height: 1.2;
   }
   .empty-state-description {
@@ -14337,7 +14338,7 @@ label.btn {
   .alert-heading {
     margin-bottom: 0.25rem;
     font-size: 0.875rem;
-    font-weight: 600;
+    font-weight: var(--moo-heading-font-weight, 600);
   }
   .alert-action {
     flex: 0 0 auto;
@@ -17355,6 +17356,11 @@ label.btn {
     border: var(--bs-border-width) solid var(--moo-border);
     border-radius: var(--bs-border-radius-xl);
   }
+  .wrapper[data-layout="app"][data-shell-mode="document"] {
+    height: auto;
+    min-height: 100svh;
+    overflow: visible;
+  }
   .wrapper[data-layout="app"] > [data-slot="page"] {
     display: flex;
     min-width: 0;
@@ -17452,6 +17458,9 @@ label.btn {
     flex-direction: column;
     overflow-y: auto;
   }
+  .wrapper[data-layout="app"][data-shell-mode="document"] > [data-slot="page"] > main {
+    overflow: visible;
+  }
   .wrapper[data-layout="app"] > [data-slot="page"] > main > :is( .container, .container-sm, .container-md, .container-lg, .container-xl, .container-xxl, .container-fluid ) {
     display: flex;
     min-height: 0;