actual-css 0.9.1 → 0.10.0

package/src/js/tooltip.js

@@ -23,6 +23,12 @@
  *             for tooltips that are never triggered. AJAX-loaded triggers
  *             work automatically via bubbling delegated listeners.
  *
+ * Snapshot, not reactive: generated tooltip text is synchronized when
+ *             the tooltip is shown. Changes to data-tooltip do not rewrite
+ *             a tooltip that is already shown. Always-visible generated
+ *             tooltips therefore keep their initial text; use an explicit
+ *             tooltip when its content must update dynamically.
+ *
  * Show:       hover + focus (150ms delay), click toggle, or always visible
  * Hide:       focus leaving the trigger (focusout), pointer leave, Escape
  *
@@ -367,7 +373,10 @@ function ensureTip(trigger) {
   const text = trigger.getAttribute("data-tooltip");
   const doc = trigger.ownerDocument;
 
-  // shorthand: data-tooltip="text" → create element lazily
+  // shorthand: data-tooltip="text" → create element lazily.
+  // Shorthand content is always text. Never use innerHTML here:
+  // data-tooltip may hold application/user-provided strings. Rich content
+  // belongs in an explicit author-owned tooltip.
   if (text) {
     tip = doc.createElement("div");
     tip.className = CLASSES.tooltip;
@@ -467,6 +476,14 @@ function show(tip, ref, immediate = false) {
   const state = tipStates.get(tip);
   if (!state) return;
 
+  // Shorthand tips copy data-tooltip text at creation; re-read it on every
+  // show so a "Copy" → "Copied!" update is reflected without rewiring.
+  // Text only, never innerHTML — see the note at creation above.
+  if (state.generated) {
+    const text = ref.getAttribute("data-tooltip");
+    if (text && tip.textContent !== text) tip.textContent = text;
+  }
+
   state.activeRef = ref;
   const mode = positionModeFor(ref);
   state.space = mode.space;

package/src/js/validation.js

@@ -17,7 +17,7 @@
  * DOM tears down everything, including the managed novalidate attribute.
  */
 
-import enhance, { enhancementSelector } from "./enhance.js";
+import { enhancementSelector, registerEnhancement } from "./enhance.js";
 import { EVENTS } from "./events.js";
 import { CLASSES } from "./selectors.js";
 
@@ -86,9 +86,40 @@ const rules = {
   alnum(v) {
     return /^[a-z0-9]+$/i.test(v);
   },
+  // Options are literal tokens: no quoting, no escaping, no whitespace. A
+  // missing option is a configuration error and fails rather than passing
+  // silently. Comparison is case-sensitive; the value is trimmed to compare.
+  "starts-with"(v, _el, ...prefixes) {
+    const value = v.trim();
+    return prefixes.length > 0 && prefixes.some((prefix) => value.startsWith(prefix));
+  },
+  "ends-with"(v, _el, ...suffixes) {
+    const value = v.trim();
+    return suffixes.length > 0 && suffixes.some((suffix) => value.endsWith(suffix));
+  },
   date(v) {
     return isValidDate(v);
   },
+  // Telephone origin policy, not telephone validation. A local number carries
+  // nothing but its digits after the usual separators are ignored, so a value
+  // with letters or stray symbols is not a number and fails instead of reading
+  // as local. Local numbering still belongs to the application and the server;
+  // an explicit international number must match an allowed prefix. No prefixes
+  // means local-only: local input passes, any explicit international notation
+  // fails. The entered value is analyzed, never rewritten.
+  "tel-prefix"(value, _el, ...prefixes) {
+    let v = value.trim().replace(/[\s()./-]+/g, "");
+    if (v.startsWith("00")) {
+      v = `+${v.slice(2)}`;
+    }
+    if (!/^\+?\d+$/.test(v)) {
+      return false;
+    }
+    if (!v.startsWith("+")) {
+      return true;
+    }
+    return prefixes.some((prefix) => v.startsWith(prefix));
+  },
 };
 
 function isFormElement(el) {
@@ -404,10 +435,9 @@ export class FormValidator {
   }
 }
 
-if (typeof document !== "undefined") {
-  enhance({
-    [`form${VALIDATION_SELECTOR}`]: (form) => connectForm(form),
-  });
-}
+// Registered by name, not through a bare enhance(), so applyEnhancement()
+// refreshes it like the other token behaviors. The token only means
+// something on a form.
+registerEnhancement("validation", (el) => (isFormElement(el) ? connectForm(el) : undefined));
 
 export default FormValidator;