fauna-api 0.0.0-stage → 1.0.679

package/dist/src/ui/authentification.js

@@ -0,0 +1,177 @@
+import { Fauna } from "fauna-api";
+const CREDENTIALS_COOKIE = 'fauna-credentials';
+const CREDENTIALS_MAX_AGE = 60 * 60 * 24 * 30;
+function isFaunaHost() {
+    if (typeof location === 'undefined')
+        return false;
+    const host = location.hostname;
+    return host === 'faunakit.com' || host.endsWith('.faunakit.com');
+}
+function cookieSuffix(maxAge) {
+    const parts = [`Path=/`, `SameSite=Lax`, `Max-Age=${maxAge}`];
+    if (isFaunaHost()) {
+        parts.push('Domain=.faunakit.com', 'Secure');
+    }
+    return parts.join('; ');
+}
+export function getToken() {
+    if (typeof document === 'undefined')
+        return undefined;
+    const prefix = `${CREDENTIALS_COOKIE}=`;
+    for (const part of document.cookie.split(';')) {
+        const trimmed = part.trim();
+        if (!trimmed.startsWith(prefix))
+            continue;
+        const raw = trimmed.slice(prefix.length);
+        if (!raw)
+            return undefined;
+        try {
+            return decodeURIComponent(raw);
+        }
+        catch {
+            return raw;
+        }
+    }
+    return undefined;
+}
+export function setToken(token) {
+    if (typeof document === 'undefined')
+        return;
+    document.cookie = `${CREDENTIALS_COOKIE}=${encodeURIComponent(token)}; ${cookieSuffix(CREDENTIALS_MAX_AGE)}`;
+}
+export function clearToken() {
+    if (typeof document === 'undefined')
+        return;
+    document.cookie = `${CREDENTIALS_COOKIE}=; ${cookieSuffix(0)}`;
+}
+// Support sessions: Fauna's ticket board opens a reporter's page with `?token=...&support=1`.
+// That token belongs to the reporter, so it lives in this tab only and never replaces the login cookie.
+const SUPPORT_TOKEN_KEY = 'fauna-support-token';
+function readSupportToken() {
+    try {
+        return sessionStorage.getItem(SUPPORT_TOKEN_KEY) || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Whether this tab is a support session opened from Fauna's ticket board. */
+export function isSupportView() {
+    return Boolean(readSupportToken());
+}
+/**
+ * Takes `token` and `support` off a page's query. A support token stays in this tab; any other token
+ * becomes the login cookie and ends the tab's support session. Returns whether the query changed.
+ */
+export function takeTokenFromURL(params) {
+    const token = params.get('token');
+    const changed = Boolean(token) || params.has('support');
+    if (token && params.get('support') === '1') {
+        try {
+            sessionStorage.setItem(SUPPORT_TOKEN_KEY, token);
+        }
+        catch {
+            /* no tab storage: drop it rather than sign in as the reporter */
+        }
+    }
+    else if (token) {
+        try {
+            sessionStorage.removeItem(SUPPORT_TOKEN_KEY);
+        }
+        catch {
+            /* no tab storage, no support session to end */
+        }
+        setToken(token);
+    }
+    params.delete('token');
+    params.delete('support');
+    return changed;
+}
+/** The token this tab signs in with: the support session's in a support view, else the login cookie. */
+export function sessionToken() {
+    return readSupportToken() ?? getToken();
+}
+const PROVIDER_LABELS = {
+    google: 'Google',
+    microsoft: 'Microsoft'
+};
+// Social sign-in round-trips through the real providers, whose redirect URIs
+// point at production — so the flow can't complete from a localhost origin.
+// Treat a localhost API host (or page) as development and hide the buttons.
+function isDevelopmentOrigin() {
+    const hosts = [];
+    try {
+        hosts.push(new URL(Fauna.getURL()).hostname);
+    }
+    catch { /* ignore */ }
+    if (typeof window !== 'undefined')
+        hosts.push(window.location.hostname);
+    return hosts.some((host) => host === 'localhost' || host === '127.0.0.1' || host === '::1' || host.endsWith('.local'));
+}
+// Brand glyphs as inline SVG (Material Symbols has no brand logos).
+const PROVIDER_ICONS = {
+    google: `<svg viewBox="0 0 18 18" width="18" height="18" aria-hidden="true"><path fill="#4285F4" d="M17.64 9.2c0-.64-.06-1.25-.16-1.84H9v3.48h4.84a4.14 4.14 0 0 1-1.8 2.72v2.26h2.92c1.7-1.57 2.68-3.88 2.68-6.62z"/><path fill="#34A853" d="M9 18c2.43 0 4.47-.8 5.96-2.18l-2.92-2.26c-.8.54-1.84.86-3.04.86-2.34 0-4.32-1.58-5.03-3.7H.96v2.33A9 9 0 0 0 9 18z"/><path fill="#FBBC05" d="M3.97 10.72a5.4 5.4 0 0 1 0-3.44V4.95H.96a9 9 0 0 0 0 8.1l3.01-2.33z"/><path fill="#EA4335" d="M9 3.58c1.32 0 2.5.46 3.44 1.35l2.58-2.58C13.46.9 11.43 0 9 0A9 9 0 0 0 .96 4.95l3.01 2.33C4.68 5.16 6.66 3.58 9 3.58z"/></svg>`,
+    microsoft: `<svg viewBox="0 0 21 21" width="18" height="18" aria-hidden="true"><rect x="1" y="1" width="9" height="9" fill="#F25022"/><rect x="11" y="1" width="9" height="9" fill="#7FBA00"/><rect x="1" y="11" width="9" height="9" fill="#00A4EF"/><rect x="11" y="11" width="9" height="9" fill="#FFB900"/></svg>`
+};
+export function createOAuthButtons(container, options = {}) {
+    const root = document.createElement('div');
+    root.className = 'oauth-buttons';
+    // Hidden in development — the provider redirect URIs are production-only.
+    if (isDevelopmentOrigin()) {
+        container.appendChild(root);
+        return {
+            getElement: () => root,
+            destroy: () => root.remove()
+        };
+    }
+    if (options.divider) {
+        const divider = document.createElement('div');
+        divider.className = 'oauth-divider';
+        const span = document.createElement('span');
+        span.textContent = typeof options.divider === 'string' ? options.divider : 'or';
+        divider.appendChild(span);
+        root.appendChild(divider);
+    }
+    const labelPrefix = options.label ?? 'Continue with';
+    function renderButton(provider) {
+        const button = document.createElement('button');
+        button.type = 'button';
+        button.className = 'oauth-button';
+        button.dataset.provider = provider;
+        const icon = document.createElement('span');
+        icon.className = 'oauth-button-icon';
+        icon.innerHTML = PROVIDER_ICONS[provider];
+        button.appendChild(icon);
+        const text = document.createElement('span');
+        text.className = 'oauth-button-label';
+        text.textContent = `${labelPrefix} ${PROVIDER_LABELS[provider]}`;
+        button.appendChild(text);
+        button.addEventListener('click', () => {
+            const url = new URL(`${Fauna.getURL()}/authentification/oauth/${provider}`);
+            if (options.redirect)
+                url.searchParams.set('redirect', options.redirect);
+            window.location.href = url.toString();
+        });
+        root.appendChild(button);
+    }
+    // Render only the providers the server reports as enabled (intersected with
+    // any caller-supplied allow-list, preserving the caller's order).
+    fetch(`${Fauna.getURL()}/authentification/oauth/providers`)
+        .then((response) => response.ok ? response.json() : [])
+        .then((enabled) => {
+        const order = options.providers ?? enabled;
+        for (const provider of order) {
+            if (enabled.includes(provider))
+                renderButton(provider);
+        }
+    })
+        .catch((err) => {
+        console.error('[oauth] failed to load providers:', err);
+        options.onError?.('Could not load sign-in options.');
+    });
+    container.appendChild(root);
+    return {
+        getElement: () => root,
+        destroy: () => root.remove()
+    };
+}

package/dist/src/ui/brands.css

@@ -0,0 +1,11 @@
+/* Powered by Fauna: the crown's charcoal tile. Sites size and tint it through --powered-crown-*. */
+.fauna-powered-crown {
+    flex: none;
+
+    width: var(--powered-crown-size, 1.6em);
+    height: var(--powered-crown-size, 1.6em);
+
+    border-radius: 26%;
+
+    background: var(--powered-crown-background, #151515);
+}

package/dist/src/ui/brands.d.ts

@@ -0,0 +1,7 @@
+import { type MountCrownOptions } from "./crown.js";
+export * from "./crown.js";
+export type CrownProps = MountCrownOptions & {
+    className?: string;
+    size?: number;
+};
+export declare function Crown({ className, size, ...options }: CrownProps): import("react").JSX.Element;

package/dist/src/ui/brands.js

@@ -0,0 +1,14 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { useEffect, useRef } from "react";
+import { mountCrown } from "./crown.js";
+export * from "./crown.js";
+export function Crown({ className, size, ...options }) {
+    const ref = useRef(null);
+    useEffect(() => {
+        const canvas = ref.current;
+        if (!canvas)
+            return;
+        return mountCrown(canvas, options);
+    }, []);
+    return (_jsx("canvas", { ref: ref, className: className, width: size, height: size, style: size ? { width: size, height: size } : undefined, "aria-hidden": "true" }));
+}

package/dist/src/ui/browser.d.ts

@@ -0,0 +1,74 @@
+import { type HtmlPointer } from "../marmot/web.js";
+import type { BrowserTool, PageRoom } from "../marmot/browser.js";
+export type BrowserInstance = {
+    /** Page coordinates for a client point, or null outside the page. */
+    toPage(clientX: number, clientY: number): Point | null;
+    destroy(): void;
+};
+export type Point = {
+    x: number;
+    y: number;
+};
+/** A press released at `up`: a click where it went down, or a drag once it moved past the slop. */
+export declare function pressTool(down: Point, up: Point): BrowserTool;
+type KeyLike = Pick<KeyboardEvent, "key" | "ctrlKey" | "altKey" | "metaKey" | "shiftKey" | "isComposing">;
+/** Plain printable keys become text to batch, everything else a chord in the key tool's names. */
+export declare function keyInput(event: KeyLike): {
+    text: string;
+} | {
+    keys: string[];
+} | null;
+/**
+ * Forward a person's pointer, wheel, keyboard, and paste on `layer` to the room.
+ * Tools go out as soon as they're made, without waiting for replies; the host runs
+ * them in the order they arrive, so a click lands before the text typed after it.
+ * Bind it only while you control the room; the server refuses anyone else.
+ */
+export declare function bindInput<R extends PageRoom<any>>(room: R, layer: HTMLElement, opts: {
+    /** Page coordinates for a client point, or null outside the page. */
+    toPage: (clientX: number, clientY: number) => Point | null;
+    /** Send key chords as the key tool. Machine rooms have it; a browser page drops chords. */
+    keys?: boolean;
+    /** Handle a click here instead, like a machine's power button. True when it shouldn't reach the room. */
+    claimClick?: (point: Point) => boolean;
+    onHover?: (point: Point | null) => void;
+}): () => void;
+/** `R` is the room's own class, so a web page's BrowserRoom and a machine's MachineRoom both fit. */
+export type BrowserMountOptions<R extends PageRoom<any> = PageRoom> = {
+    room: R;
+    url?: string;
+    seed?: string;
+    label?: string;
+    /** After each bootstrap renders, with the replay's document. Nodes added here aren't
+     *  in the replay's id map, so keep them out of subtrees the page mutates. */
+    onFrame?: (doc: Document) => void;
+    /** One frame pixel is one page pixel, for a view drawn at its own size rather than
+     *  the host's (a machine's desktop). The cursor, tools and `toPage` skip scaling. */
+    pagePixels?: boolean;
+    /** The page's real pointer moved or changed shape. The browser takes the room's
+     *  `onCursor` hook, so follow the pointer here. */
+    onCursor?: (pointer: HtmlPointer) => void;
+};
+export declare function cursorSeed(options: {
+    seed?: string;
+    room?: {
+        id?: string;
+    };
+}): string;
+export declare function toolBadge(tool: BrowserTool): {
+    label: string;
+    tone: "neutral" | "good" | "bad";
+};
+export declare function playBrowserTool(opts: {
+    cursor: object;
+    ripple?: HTMLElement;
+    badge?: HTMLElement;
+    tool: BrowserTool;
+    toScreen: (x: number, y: number) => {
+        x: number;
+        y: number;
+    };
+    current: HtmlPointer;
+}): gsap.core.Timeline;
+export declare function createBrowser<R extends PageRoom<any>>(container: HTMLElement, options: BrowserMountOptions<R>): BrowserInstance;
+export {};