cursedbelt 4.6.0 → 5.0.0

package/src/scriptsResolve.spec.ts

@@ -0,0 +1,66 @@
+/**
+ * Every `bun run <x>` a script calls, and every command the app manifest names, is a script
+ * that EXISTS in this `package.json`.
+ *
+ * 🔴 Task 102, 2026-09-18: `done:serial` was `typecheck && lint && test && build`, and there was
+ * no `lint` script — so it had never once reached `test` or `build`, and the 31 lint errors a
+ * `lint` would have shown sat unseen. `format` was named in `cursed.app.extraCommands` too.
+ * Neither was in the gate, which is exactly why nobody noticed; this spec is in the gate.
+ */
+import { describe, expect, it } from 'bun:test';
+import pkg from '../package.json';
+
+const scripts = (pkg as { scripts: Record<string, string> }).scripts;
+
+/** The script names a command line invokes through `bun run` / `npm run`. */
+export function calledScripts(command: string): string[] {
+	const out: string[] = [];
+	for (const m of command.matchAll(/\b(?:bun|npm|pnpm|yarn) run\s+([A-Za-z0-9:_./-]+)/g)) {
+		// A path (`bun run scripts/x.ts`) is a file, not a script name.
+		if (m[1] && !m[1].includes('/') && !/\.[cm]?[jt]sx?$/.test(m[1])) out.push(m[1]);
+	}
+	return out;
+}
+
+describe('package.json scripts resolve', () => {
+	it('reads `bun run <name>` and skips `bun run <file>`', () => {
+		expect(calledScripts('bun run typecheck && bun run lint && bun run scripts/gate.ts')).toEqual([
+			'typecheck',
+			'lint',
+		]);
+	});
+
+	it('🔴 fails on a script that calls one that is not there — the task-102 shape', () => {
+		const fake = { 'done:serial': 'bun run typecheck && bun run lint', typecheck: 'tsc' };
+		const dangling = Object.values(fake)
+			.flatMap(calledScripts)
+			.filter((name) => !(name in fake));
+		expect(dangling).toEqual(['lint']);
+	});
+
+	it('every `bun run <script>` inside a script names a script that exists', () => {
+		const dangling: string[] = [];
+		for (const [name, command] of Object.entries(scripts)) {
+			for (const called of calledScripts(command)) {
+				if (!(called in scripts)) dangling.push(`${name} → ${called}`);
+			}
+		}
+		expect(dangling).toEqual([]);
+	});
+
+	it('every command the `cursed.app` manifest names is a script', () => {
+		const app = (pkg as { cursed?: { app?: Record<string, unknown> } }).cursed?.app ?? {};
+		const named: string[] = [];
+		for (const key of ['commands', 'extraCommands']) {
+			const block = app[key] as Record<string, string> | undefined;
+			if (block) named.push(...Object.values(block));
+		}
+		expect(named.length).toBeGreaterThan(0);
+		expect(named.filter((n) => !(n in scripts))).toEqual([]);
+	});
+
+	it('every gate stage is a script', () => {
+		const stages = (pkg as { gate?: { stages?: { script: string }[] } }).gate?.stages ?? [];
+		expect(stages.map((s) => s.script).filter((n) => !(n in scripts))).toEqual([]);
+	});
+});

package/src/styles-areas/activity-bar.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 72 candidate(s) scanned.
+ * when this file is stale. 71 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/auth.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 300 candidate(s) scanned.
+ * when this file is stale. 303 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/charts.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 463 candidate(s) scanned.
+ * when this file is stale. 462 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/chat.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 348 candidate(s) scanned.
+ * when this file is stale. 388 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/core.css

@@ -13,7 +13,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 5187 candidate(s) scanned.
+ * when this file is stale. 5197 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/data-table.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 1349 candidate(s) scanned.
+ * when this file is stale. 1350 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/disk-usage.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 290 candidate(s) scanned.
+ * when this file is stale. 289 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/fields.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 613 candidate(s) scanned.
+ * when this file is stale. 616 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/file-tree.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 535 candidate(s) scanned.
+ * when this file is stale. 574 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/master-detail.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 195 candidate(s) scanned.
+ * when this file is stale. 198 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/master-lock.css

@@ -15,12 +15,118 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 147 candidate(s) scanned.
+ * when this file is stale. 189 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are
  * import closures rather than a hand-written list, is scripts/styleAreas.ts.
  */
 /*! tailwindcss v4.3.3 | MIT License | https://tailwindcss.com */
+@layer properties;
 @layer theme, base, components, utilities;
-@layer utilities;
+@layer utilities {
+  .self-stretch {
+    align-self: stretch;
+  }
+  .focus-within\:border-field-ring:focus-within {
+    border-color: var(--field-ring);
+  }
+  .focus-within\:ring-2:focus-within {
+    --tw-ring-shadow: var(--tw-ring-inset,) 0 0 0 calc(2px + var(--tw-ring-offset-width)) var(--tw-ring-color, currentcolor);
+    box-shadow: var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow);
+  }
+  .focus-within\:ring-field-ring\/30:focus-within {
+    --tw-ring-color: var(--field-ring);
+    @supports (color: color-mix(in lab, red, red)) {
+      --tw-ring-color: color-mix(in oklab, var(--field-ring) 30%, transparent);
+    }
+  }
+  .has-\[\[aria-invalid\=true\]\]\:border-field-error:has(:is([aria-invalid=true])) {
+    border-color: var(--field-error);
+  }
+}
+@property --tw-shadow {
+  syntax: "*";
+  inherits: false;
+  initial-value: 0 0 #0000;
+}
+@property --tw-shadow-color {
+  syntax: "*";
+  inherits: false;
+}
+@property --tw-shadow-alpha {
+  syntax: "<percentage>";
+  inherits: false;
+  initial-value: 100%;
+}
+@property --tw-inset-shadow {
+  syntax: "*";
+  inherits: false;
+  initial-value: 0 0 #0000;
+}
+@property --tw-inset-shadow-color {
+  syntax: "*";
+  inherits: false;
+}
+@property --tw-inset-shadow-alpha {
+  syntax: "<percentage>";
+  inherits: false;
+  initial-value: 100%;
+}
+@property --tw-ring-color {
+  syntax: "*";
+  inherits: false;
+}
+@property --tw-ring-shadow {
+  syntax: "*";
+  inherits: false;
+  initial-value: 0 0 #0000;
+}
+@property --tw-inset-ring-color {
+  syntax: "*";
+  inherits: false;
+}
+@property --tw-inset-ring-shadow {
+  syntax: "*";
+  inherits: false;
+  initial-value: 0 0 #0000;
+}
+@property --tw-ring-inset {
+  syntax: "*";
+  inherits: false;
+}
+@property --tw-ring-offset-width {
+  syntax: "<length>";
+  inherits: false;
+  initial-value: 0px;
+}
+@property --tw-ring-offset-color {
+  syntax: "*";
+  inherits: false;
+  initial-value: #fff;
+}
+@property --tw-ring-offset-shadow {
+  syntax: "*";
+  inherits: false;
+  initial-value: 0 0 #0000;
+}
+@layer properties {
+  @supports ((-webkit-hyphens: none) and (not (margin-trim: inline))) or ((-moz-orient: inline) and (not (color:rgb(from red r g b)))) {
+    *, ::before, ::after, ::backdrop {
+      --tw-shadow: 0 0 #0000;
+      --tw-shadow-color: initial;
+      --tw-shadow-alpha: 100%;
+      --tw-inset-shadow: 0 0 #0000;
+      --tw-inset-shadow-color: initial;
+      --tw-inset-shadow-alpha: 100%;
+      --tw-ring-color: initial;
+      --tw-ring-shadow: 0 0 #0000;
+      --tw-inset-ring-color: initial;
+      --tw-inset-ring-shadow: 0 0 #0000;
+      --tw-ring-inset: initial;
+      --tw-ring-offset-width: 0px;
+      --tw-ring-offset-color: #fff;
+      --tw-ring-offset-shadow: 0 0 #0000;
+    }
+  }
+}

package/src/styles-areas/media-gallery.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 2162 candidate(s) scanned.
+ * when this file is stale. 2159 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/media.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 2849 candidate(s) scanned.
+ * when this file is stale. 2777 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are
@@ -156,9 +156,6 @@
     border-block-style: var(--tw-border-style);
     border-block-width: 2px;
   }
-  .border-\[color\:var\(--border-strong\)\] {
-    border-color: var(--border-strong);
-  }
   .border-accent {
     border-color: var(--accent);
   }
@@ -171,12 +168,6 @@
       border-color: color-mix(in oklab, var(--color-white) 90%, transparent);
     }
   }
-  .bg-\[color\:color-mix\(in_srgb\,var\(--accent-solid\)_8\%\,transparent\)\] {
-    background-color: var(--accent-solid);
-    @supports (color: color-mix(in lab, red, red)) {
-      background-color: color-mix(in srgb,var(--accent-solid) 8%,transparent);
-    }
-  }
   .bg-accent\/15 {
     background-color: var(--accent);
     @supports (color: color-mix(in lab, red, red)) {
@@ -283,9 +274,6 @@
   .text-\[color\:var\(--accent\)\] {
     color: var(--accent);
   }
-  .text-\[color\:var\(--muted-foreground\)\] {
-    color: var(--muted-foreground);
-  }
   .accent-white {
     accent-color: var(--color-white);
   }
@@ -322,10 +310,6 @@
   .group-focus-within\:opacity-100:is(:where(.group):focus-within *) {
     opacity: 100%;
   }
-  .last\:border-b-0:last-child {
-    border-bottom-style: var(--tw-border-style);
-    border-bottom-width: 0px;
-  }
   .focus-within\:opacity-100:focus-within {
     opacity: 100%;
   }

package/src/styles-areas/nav.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 800 candidate(s) scanned.
+ * when this file is stale. 799 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/notifications.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 232 candidate(s) scanned.
+ * when this file is stale. 231 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/spreadsheet.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 166 candidate(s) scanned.
+ * when this file is stale. 165 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/stats.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 361 candidate(s) scanned.
+ * when this file is stale. 360 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/wizard.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 389 candidate(s) scanned.
+ * when this file is stale. 392 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/workbook-viewer.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 247 candidate(s) scanned.
+ * when this file is stale. 246 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-utilities.css

@@ -1591,9 +1591,6 @@
     --tw-border-style: solid;
     border-style: solid;
   }
-  .border-\[color\:var\(--border-strong\)\] {
-    border-color: var(--border-strong);
-  }
   .border-\[var\(--border\)\] {
     border-color: var(--border);
   }
@@ -1741,12 +1738,6 @@
   .border-l-warning {
     border-left-color: var(--warning);
   }
-  .bg-\[color\:color-mix\(in_srgb\,var\(--accent-solid\)_8\%\,transparent\)\] {
-    background-color: var(--accent-solid);
-    @supports (color: color-mix(in lab, red, red)) {
-      background-color: color-mix(in srgb,var(--accent-solid) 8%,transparent);
-    }
-  }
   .bg-\[var\(--accent\)\]\/12 {
     background-color: var(--accent);
     @supports (color: color-mix(in lab, red, red)) {
@@ -2626,9 +2617,6 @@
   .text-\[color\:var\(--accent\)\] {
     color: var(--accent);
   }
-  .text-\[color\:var\(--muted-foreground\)\] {
-    color: var(--muted-foreground);
-  }
   .text-\[var\(--danger\)\] {
     color: var(--danger);
   }
@@ -3299,10 +3287,6 @@
     border-right-style: var(--tw-border-style);
     border-right-width: 0px;
   }
-  .last\:border-b-0:last-child {
-    border-bottom-style: var(--tw-border-style);
-    border-bottom-width: 0px;
-  }
   .last\:pr-1:last-child {
     padding-right: var(--spacing);
   }

package/src/testing/_noBun.ts

@@ -0,0 +1,12 @@
+// Loaded only on non-Bun runtimes (task 2087). The `cursedbelt/testing` export map routes the
+// real module to Bun (the `bun` condition) and everything else here, so importing these helpers
+// from Node fails with a sentence instead of `Named export 'waitFor' not found` — which is what
+// Node said about `@testing-library/react`, a CommonJS module its ESM loader cannot name-import.
+// Same shape as `cwip/testing`'s `_noBun`, and `tools/proveInstall.ts` excuses exactly this: a
+// `bun` condition plus a plain `Error` of the package's own making.
+throw new Error(
+  'cursedbelt/testing requires the Bun runtime — it drives @testing-library/react under bun:test + happy-dom. ' +
+    'Import it only from specs run with `bun test`.',
+);
+
+export {};

package/src/verifyGraph.spec.ts

@@ -67,6 +67,17 @@ const MUST_RUN = [
 	// added, removing it argues with this list.
 	'typecheck:scripts',
 	'demo:check',
+	// 🔴 Added 2026-09-23 (task 102). `biome lint` was in no command at all — `done:serial`
+	// called a `lint` script that did not exist, so the 31 errors it would have shown sat
+	// unseen. They were cleared in the same landing (29 were in Tailwind's generated output,
+	// now excluded in `biome.jsonc`), so the stage landed green.
+	'lint',
+	// 🔴 Added 2026-09-23 with `no-raw-password` (task 077). This repo's own guardrails scan was
+	// in no command a gate ran, and it had been RED since task 269 gave every relative specifier
+	// its `.js`: `no-native-dialog` stopped recognising DeleteButton's `'../confirm.js'` import
+	// as the belt's own `confirm`. The rules this package ships to five apps were not being
+	// applied to the package itself.
+	'guardrails:report',
 	'styles',
 	'build',
 	'test',

package/dist/react/media/PrivateIndexView.d.ts

@@ -1,6 +0,0 @@
-import React from 'react';
-import type { PrivateUnlock } from './usePrivateUnlock.js';
-export declare function PrivateIndexView({ unlock }: {
-    unlock: PrivateUnlock;
-}): React.JSX.Element;
-//# sourceMappingURL=PrivateIndexView.d.ts.map

package/dist/react/media/PrivateIndexView.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PrivateIndexView.d.ts","sourceRoot":"","sources":["../../../src/react/media/PrivateIndexView.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,OAAO,KAAK,EAAmB,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAS5E,wBAAgB,gBAAgB,CAAC,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,aAAa,CAAA;CAAE,qBAmGrE"}

package/dist/react/media/PrivateIndexView.js

@@ -1,44 +0,0 @@
-import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
-import { formatBytes as fmtBytes } from 'cwip/format';
-import React from 'react';
-import { Button } from '../components/Button.js';
-import { Input } from '../components/Input.js';
-// The locked-index cleanup view: every private item's SIZE + created-date (never its title,
-// thumbnail, or notes), so a user can prune media whose password they've lost. A password field
-// runs "try-a-password" — items it decrypts light up with their revealed title; the rest stay
-// opaque. Themed off cursedbelt tokens (with fallbacks so it renders anywhere).
-const fmtDate = (ts) => new Date(ts).toISOString().slice(0, 10);
-export function PrivateIndexView({ unlock }) {
-    const [rows, setRows] = React.useState([]);
-    const [revealed, setRevealed] = React.useState(new Map());
-    const [password, setPassword] = React.useState('');
-    const [trying, setTrying] = React.useState(false);
-    React.useEffect(() => {
-        unlock.loadIndex().then(setRows);
-    }, [unlock]);
-    async function tryPassword() {
-        if (!password)
-            return;
-        setTrying(true);
-        try {
-            const items = await unlock.reveal(password);
-            setRevealed(new Map(items.map((i) => [i.id, i.meta])));
-        }
-        finally {
-            setTrying(false);
-        }
-    }
-    const totalBytes = rows.reduce((s, r) => s + r.sizeBytes, 0);
-    const matchCount = revealed.size;
-    return (_jsxs("div", { className: 'flex flex-col gap-3 text-sm', children: [_jsxs("div", { className: 'flex items-center justify-between gap-3', children: [_jsxs("div", { className: 'text-[color:var(--muted-foreground)]', children: [rows.length, " locked ", rows.length === 1 ? 'file' : 'files', " \u00B7 ", fmtBytes(totalBytes)] }), _jsxs("div", { className: 'flex items-center gap-2', children: [_jsx(Input, { type: 'password', value: password, onChange: (e) => setPassword(e.target.value), onEnter: () => tryPassword(), placeholder: 'Try a password\u2026', "aria-label": 'Try a password', className: 'h-auto w-auto bg-transparent px-2 py-1' }), _jsx(Button, { size: 'sm', onClick: tryPassword, disabled: trying || !password, loading: trying, tooltip: 'Try this password against every locked file', children: trying ? 'Trying…' : 'Reveal' })] })] }), matchCount > 0 ? (_jsxs("div", { className: 'text-[color:var(--accent)]', children: ["This password unlocks ", matchCount, " ", matchCount === 1 ? 'file' : 'files', "."] })) : null, _jsxs("div", { className: 'overflow-hidden rounded-lg border border-[color:var(--border-strong)]', children: [rows.map((r) => {
-                        const meta = revealed.get(r.id);
-                        const title = typeof meta?.title === 'string' ? meta.title : null;
-                        return (_jsxs("div", { className: `flex items-center justify-between gap-3 border-b border-[color:var(--border-strong)] px-3 py-2 last:border-b-0 ${
-                            // `--card-overlay` (white/navy per theme.css) isn't the tint this row wants —
-                            // the original rgba(16,185,129,0.08) fallback was an emerald-accent highlight,
-                            // not the neutral card-overlay token, so build the same tint from the real
-                            // accent token via color-mix instead of a literal fallback color.
-                            title ? 'bg-[color:color-mix(in_srgb,var(--accent-solid)_8%,transparent)]' : ''}`, children: [_jsx("div", { className: 'min-w-0 flex-1 truncate', children: title ? (_jsx("span", { className: 'font-medium text-[color:var(--accent)]', children: title })) : (_jsxs("span", { className: 'font-mono text-[color:var(--muted-foreground)]', children: ["\uD83D\uDD12 ", r.id.slice(0, 8), "\u2026"] })) }), _jsx("div", { className: 'shrink-0 tabular-nums text-[color:var(--muted-foreground)]', children: fmtBytes(r.sizeBytes) }), _jsx("div", { className: 'shrink-0 tabular-nums text-[color:var(--muted-foreground)]', children: fmtDate(r.createdAt) })] }, r.id));
-                    }), rows.length === 0 ? (_jsx("div", { className: 'px-3 py-6 text-center text-[color:var(--muted-foreground)]', children: "No private files." })) : null] })] }));
-}
-//# sourceMappingURL=PrivateIndexView.js.map

package/dist/react/media/PrivateIndexView.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"PrivateIndexView.js","sourceRoot":"","sources":["../../../src/react/media/PrivateIndexView.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,IAAI,QAAQ,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAG/C,4FAA4F;AAC5F,gGAAgG;AAChG,8FAA8F;AAC9F,gFAAgF;AAEhF,MAAM,OAAO,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAEhF,MAAM,UAAU,gBAAgB,CAAC,EAAE,MAAM,EAA6B;IACpE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAoB,EAAE,CAAC,CAAC;IAC9D,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAuC,IAAI,GAAG,EAAE,CAAC,CAAC;IAChG,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAElD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,MAAM,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,KAAK,UAAU,WAAW;QACxB,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5C,WAAW,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC;IAEjC,OAAO,CACL,eAAK,SAAS,EAAC,6BAA6B,aAC1C,eAAK,SAAS,EAAC,yCAAyC,aACtD,eAAK,SAAS,EAAC,sCAAsC,aAClD,IAAI,CAAC,MAAM,cAAU,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,cAAK,QAAQ,CAAC,UAAU,CAAC,IAC/E,EACN,eAAK,SAAS,EAAC,yBAAyB,aACtC,KAAC,KAAK,IACJ,IAAI,EAAC,UAAU,EACf,KAAK,EAAE,QAAQ,EACf,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAC5C,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,EAC5B,WAAW,EAAC,sBAAiB,gBAClB,gBAAgB,EAC3B,SAAS,EAAC,wCAAwC,GAClD,EACF,KAAC,MAAM,IACL,IAAI,EAAC,IAAI,EACT,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,MAAM,IAAI,CAAC,QAAQ,EAC7B,OAAO,EAAE,MAAM,EACf,OAAO,EAAC,6CAA6C,YAEpD,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,GACvB,IACL,IACF,EAEL,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAChB,eAAK,SAAS,EAAC,4BAA4B,uCAClB,UAAU,OAAG,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,SACnE,CACP,CAAC,CAAC,CAAC,IAAI,EAER,eAAK,SAAS,EAAC,uEAAuE,aACnF,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;wBACd,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBAChC,MAAM,KAAK,GAAG,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;wBAClE,OAAO,CACL,eAEE,SAAS,EAAE,kHAAkH;4BAC3H,8EAA8E;4BAC9E,+EAA+E;4BAC/E,2EAA2E;4BAC3E,kEAAkE;4BAClE,KAAK,CAAC,CAAC,CAAC,kEAAkE,CAAC,CAAC,CAAC,EAC/E,EAAE,aAEF,cAAK,SAAS,EAAC,yBAAyB,YACrC,KAAK,CAAC,CAAC,CAAC,CACP,eAAM,SAAS,EAAC,wCAAwC,YAAE,KAAK,GAAQ,CACxE,CAAC,CAAC,CAAC,CACF,gBAAM,SAAS,EAAC,gDAAgD,8BAC1D,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,cACf,CACR,GACG,EACN,cAAK,SAAS,EAAC,4DAA4D,YACxE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,GAClB,EACN,cAAK,SAAS,EAAC,4DAA4D,YACxE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,GACjB,KAvBD,CAAC,CAAC,EAAE,CAwBL,CACP,CAAC;oBACJ,CAAC,CAAC,EACD,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CACnB,cAAK,SAAS,EAAC,4DAA4D,kCAErE,CACP,CAAC,CAAC,CAAC,IAAI,IACJ,IACF,CACP,CAAC;AACJ,CAAC"}

package/dist/react/media/PrivateModeBadge.d.ts

@@ -1,17 +0,0 @@
-export interface PrivateModeBadgeProps {
-    /** How many items are private (shown in the label). */
-    hiddenCount: number;
-    /** Whether the feed is currently filtered to private-only. */
-    active: boolean;
-    /** Toggle the private-only filter. */
-    onToggle: () => void;
-    className?: string;
-}
-/**
- * The "🔓 N private" toggle pill shown in a media gallery's header once private
- * mode is unlocked — click filters the feed to private-only items. One shared
- * implementation for every gallery (video/photo/media); it was previously
- * copy-pasted per plugin with per-plugin CSS classes.
- */
-export declare function PrivateModeBadge({ hiddenCount, active, onToggle, className }: PrivateModeBadgeProps): import("react").JSX.Element;
-//# sourceMappingURL=PrivateModeBadge.d.ts.map

package/dist/react/media/PrivateModeBadge.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PrivateModeBadge.d.ts","sourceRoot":"","sources":["../../../src/react/media/PrivateModeBadge.tsx"],"names":[],"mappings":"AAGA,MAAM,WAAW,qBAAqB;IACpC,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;IACpB,8DAA8D;IAC9D,MAAM,EAAE,OAAO,CAAC;IAChB,sCAAsC;IACtC,QAAQ,EAAE,MAAM,IAAI,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,qBAAqB,+BA8BnG"}

package/dist/react/media/PrivateModeBadge.js

@@ -1,24 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { cn } from '../lib/cn.js';
-import { Tooltip } from '../components/Tooltip.js';
-/**
- * The "🔓 N private" toggle pill shown in a media gallery's header once private
- * mode is unlocked — click filters the feed to private-only items. One shared
- * implementation for every gallery (video/photo/media); it was previously
- * copy-pasted per plugin with per-plugin CSS classes.
- */
-export function PrivateModeBadge({ hiddenCount, active, onToggle, className }) {
-    return (_jsx(Tooltip, { content: 'Private mode unlocked \u2014 click to show only private items', children: _jsxs("button", { 
-            // guardrails-ignore no-raw-action-button: compact header pill with pressed
-            // state — Button's control-height/variant chrome doesn't fit a badge-sized
-            // toggle; this keeps the exact badge geometry the galleries share.
-            type: 'button', "data-cb-private-badge": '', "aria-pressed": active, onClick: onToggle, className: cn('inline-flex shrink-0 cursor-pointer items-center gap-1 rounded-full border border-border bg-surface px-2.5 py-0.5 text-xs font-medium text-muted-foreground transition-colors', 'hover:border-accent hover:text-foreground', 'focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring', 
-            // `text-accent-strong`, not plain `text-accent` — the /15 tint only clears
-            // 4.43:1 with the base accent hue, under AA (cbux-101). (Previously
-            // `text-accent-foreground`, a token this library never defines — an
-            // undefined Tailwind color utility compiles to no rule at all, so the
-            // pill silently fell back to inherited text color instead of an
-            // intentional one.)
-            active && 'border-accent bg-accent/15 text-accent-strong', className), children: [_jsx("span", { "aria-hidden": true, children: "\uD83D\uDD13" }), hiddenCount, " private"] }) }));
-}
-//# sourceMappingURL=PrivateModeBadge.js.map

package/dist/react/media/PrivateModeBadge.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"PrivateModeBadge.js","sourceRoot":"","sources":["../../../src/react/media/PrivateModeBadge.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAYnD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAyB;IAClG,OAAO,CACL,KAAC,OAAO,IAAC,OAAO,EAAC,+DAA0D,YACzE;YACE,2EAA2E;YAC3E,2EAA2E;YAC3E,mEAAmE;YACnE,IAAI,EAAC,QAAQ,2BACS,EAAE,kBACV,MAAM,EACpB,OAAO,EAAE,QAAQ,EACjB,SAAS,EAAE,EAAE,CACX,+KAA+K,EAC/K,2CAA2C,EAC3C,yEAAyE;YACzE,2EAA2E;YAC3E,oEAAoE;YACpE,oEAAoE;YACpE,sEAAsE;YACtE,gEAAgE;YAChE,oBAAoB;YACpB,MAAM,IAAI,+CAA+C,EACzD,SAAS,CACV,aAED,+DAA2B,EAC1B,WAAW,gBACL,GACD,CACX,CAAC;AACJ,CAAC"}

package/dist/react/media/privateClient.d.ts

@@ -1,34 +0,0 @@
-/** A clear index row — non-sensitive facts only (matches the server's PrivateIndexRow). */
-export type PrivateIndexRow = {
-    id: string;
-    sizeBytes: number;
-    createdAt: number;
-    status: 'pending' | 'processing' | 'ready' | 'failed';
-};
-export type RevealedItem = {
-    id: string;
-    meta: Record<string, unknown>;
-};
-export interface PrivateClientConfig {
-    /** Origin+prefix for the private routes. '' = same-origin; an absolute API origin for a
-     * split-origin deploy. */
-    apiBase?: string;
-    /** Route mount prefix (must match mountPrivateRoutes basePath). Default '/_private'. */
-    basePath?: string;
-    /** Extra headers for the GUARDED calls (unlock/index/reveal) — e.g. the app's Bearer. The
-     * token-embedded byte/key URLs need no header. */
-    authHeaders?: () => Record<string, string>;
-}
-export declare const privateBaseUrl: (cfg: PrivateClientConfig) => string;
-/** Try `password` against every item; returns the ones it decrypts (with their metadata). */
-export declare const revealPrivateWithPassword: (cfg: PrivateClientConfig, password: string) => Promise<RevealedItem[]>;
-/** Reveal the items an UNLOCK TOKEN opens — no password re-entry. The token must belong to the
- * session caller (the server enforces it). */
-export declare const revealPrivateWithToken: (cfg: PrivateClientConfig, token: string) => Promise<RevealedItem[]>;
-/** The token-embedded HLS master URL for a private video — same shape usePrivateUnlock.hlsUrl
- * builds. Needs no auth header (the token IS the authorization). */
-export declare const privateHlsUrlWithToken: (cfg: PrivateClientConfig, token: string, sourceId: string, videoId: string) => string;
-/** The token-embedded URL for a private NON-video file (photo/doc) stored as an encrypted
- * blob — served decrypted by the gated blob route. Needs no auth header. */
-export declare const privateFileUrlWithToken: (cfg: PrivateClientConfig, token: string, fileId: string) => string;
-//# sourceMappingURL=privateClient.d.ts.map