stimeo-ui 0.1.0-alpha.1

package/dist/controllers/password_strength_controller.js

@@ -0,0 +1,175 @@
+import { Controller } from '@hotwired/stimulus';
+
+// src/controllers/password_strength_controller.ts
+
+// src/utils/safe_timeout.ts
+var TimerRegistry = class {
+  /** Live timer ids that have not yet been cleared (or, for timeouts, fired). */
+  ids = /* @__PURE__ */ new Set();
+  /**
+   * Cancels a single tracked timer.
+   *
+   * No-ops if the id is unknown (already cleared, fired, or never owned by this
+   * registry), so callers can clear defensively without guarding.
+   */
+  clear(id) {
+    if (this.ids.delete(id)) {
+      this.cancel(id);
+    }
+  }
+  /**
+   * Cancels every tracked timer. Call this from a controller's `disconnect()`
+   * to guarantee no timer outlives the element.
+   */
+  clearAll() {
+    for (const id of this.ids) {
+      this.cancel(id);
+    }
+    this.ids.clear();
+  }
+  /** Number of timers currently tracked (pending). */
+  get size() {
+    return this.ids.size;
+  }
+};
+var SafeTimeout = class extends TimerRegistry {
+  /**
+   * Schedules `callback` after `delay` ms and returns the timer id.
+   *
+   * The id is removed from the registry automatically when the timeout fires,
+   * so {@link TimerRegistry.size | size} reflects only still-pending timers.
+   */
+  set(callback, delay) {
+    const id = this.schedule(() => {
+      this.ids.delete(id);
+      callback();
+    }, delay);
+    this.ids.add(id);
+    return id;
+  }
+  schedule(callback, delay) {
+    return window.setTimeout(callback, delay);
+  }
+  cancel(id) {
+    window.clearTimeout(id);
+  }
+};
+
+// src/controllers/password_strength_controller.ts
+var CLASS_PATTERNS = [/[a-z]/, /[A-Z]/, /[0-9]/, /[^A-Za-z0-9]/];
+var LENGTH_MILESTONES = [8, 12, 16];
+var MAX_POINTS = LENGTH_MILESTONES.length + (CLASS_PATTERNS.length - 1);
+var STRENGTH_BANDS = ["weak", "fair", "good", "strong"];
+var PasswordStrengthController = class _PasswordStrengthController extends Controller {
+  static targets = ["input", "meter", "label"];
+  static values = {
+    minScore: { type: Number, default: 0 },
+    levels: { type: Array, default: ["weak", "fair", "good", "strong"] }
+  };
+  static actions = ["evaluate"];
+  static events = ["change"];
+  /** Delay (ms) before the polite live-region label is written, to throttle SR flooding. */
+  static #announceDelay = 200;
+  #timers = new SafeTimeout();
+  #announceId = null;
+  connect() {
+    this.#update({ announce: false });
+  }
+  disconnect() {
+    this.#timers.clearAll();
+    this.#announceId = null;
+  }
+  /** Re-evaluates strength from the input. Bound via `data-action` (`input`). */
+  evaluate() {
+    this.#update();
+  }
+  /**
+   * Recomputes the strength. The meter ARIA, data hooks, the custom property and
+   * the `change` event apply immediately; the live-region label text is debounced
+   * unless `announce` is `false` (the initial render).
+   */
+  #update(options = {}) {
+    const password = this.hasInputTarget ? this.inputTarget.value : "";
+    const labels = this.levelsValue;
+    const max = labels.length;
+    const score = this.#score(password, max);
+    const label = score > 0 ? labels[score - 1] ?? "" : "";
+    this.#reflectMeter(score, max);
+    this.#reflectRoot(score, max);
+    if (options.announce === false) {
+      this.#writeLabel(label);
+      return;
+    }
+    this.dispatch("change", {
+      detail: { score, level: label, max, meetsMin: score > 0 && score >= this.minScoreValue }
+    });
+    if (this.#announceId !== null) this.#timers.clear(this.#announceId);
+    this.#announceId = this.#timers.set(() => {
+      this.#writeLabel(label);
+      this.#announceId = null;
+    }, _PasswordStrengthController.#announceDelay);
+  }
+  /** Syncs the meter target's ARIA value attributes (`0..levels.length`). */
+  #reflectMeter(score, max) {
+    if (!this.hasMeterTarget) return;
+    this.meterTarget.setAttribute("aria-valuemin", "0");
+    this.meterTarget.setAttribute("aria-valuemax", String(max));
+    this.meterTarget.setAttribute("aria-valuenow", String(score));
+  }
+  /**
+   * Reflects the level onto the root: the stable `data-strength` band (absent when
+   * empty), the `data-below-min` hook when the score is under `minScore`, and the
+   * `0–1` fill the consumer's CSS turns into the bar width.
+   */
+  #reflectRoot(score, max) {
+    const band = this.#band(score, max);
+    this.#toggle("data-strength", band, band.length > 0);
+    this.#toggle("data-below-min", "true", score > 0 && score < this.minScoreValue);
+    const ratio = max > 0 ? score / max : 0;
+    this.element.style.setProperty("--stimeo-password-strength", String(ratio));
+  }
+  #writeLabel(label) {
+    if (this.hasLabelTarget) this.labelTarget.textContent = label;
+  }
+  /**
+   * Locale-independent styling band (one of {@link STRENGTH_BANDS}) for `score`
+   * out of `max`. Empty input → `""`. Quantizes the `score/max` ratio into the
+   * four fixed bands, so a non-default level count still maps onto a stable hook.
+   */
+  #band(score, max) {
+    if (score <= 0 || max <= 0) return "";
+    const index = Math.ceil(score / max * STRENGTH_BANDS.length) - 1;
+    return STRENGTH_BANDS[Math.min(STRENGTH_BANDS.length - 1, Math.max(0, index))] ?? "";
+  }
+  /** Sets `name` to `value` when `on`, else removes it (value/presence data hook). */
+  #toggle(name, value, on) {
+    if (on) {
+      this.element.setAttribute(name, value);
+    } else {
+      this.element.removeAttribute(name);
+    }
+  }
+  /**
+   * Lightweight zero-dependency strength heuristic returning an integer in
+   * `[0, max]` (`max` = number of levels). Empty input is `0` (no level); any
+   * non-empty password is at least `1`. Points accrue from length milestones and
+   * character-class variety, then bucket into the level scale. A tiny alphabet
+   * (≤ 2 distinct characters, e.g. "aaaa") is capped as the weakest, so length
+   * alone cannot mask trivial repetition.
+   */
+  #score(password, max) {
+    if (password.length === 0 || max === 0) return 0;
+    let points = 0;
+    for (const milestone of LENGTH_MILESTONES) {
+      if (password.length >= milestone) points += 1;
+    }
+    points += CLASS_PATTERNS.filter((re) => re.test(password)).length - 1;
+    if (new Set(password).size <= 2) points = 0;
+    const bucketed = Math.round(points / MAX_POINTS * max);
+    return Math.min(max, Math.max(1, bucketed));
+  }
+};
+
+export { PasswordStrengthController };
+//# sourceMappingURL=password_strength_controller.js.map
+//# sourceMappingURL=password_strength_controller.js.map

package/dist/controllers/password_strength_controller.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utils/safe_timeout.ts","../../src/controllers/password_strength_controller.ts"],"names":[],"mappings":";;;;;AAwBA,IAAe,gBAAf,MAA6B;AAAA;AAAA,EAER,GAAA,uBAAU,GAAA,EAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAczC,MAAM,EAAA,EAAkB;AACtB,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,EAAE,CAAA,EAAG;AACvB,MAAA,IAAA,CAAK,OAAO,EAAE,CAAA;AAAA,IAChB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAA,GAAiB;AACf,IAAA,KAAA,MAAW,EAAA,IAAM,KAAK,GAAA,EAAK;AACzB,MAAA,IAAA,CAAK,OAAO,EAAE,CAAA;AAAA,IAChB;AACA,IAAA,IAAA,CAAK,IAAI,KAAA,EAAM;AAAA,EACjB;AAAA;AAAA,EAGA,IAAI,IAAA,GAAe;AACjB,IAAA,OAAO,KAAK,GAAA,CAAI,IAAA;AAAA,EAClB;AACF,CAAA;AAmBO,IAAM,WAAA,GAAN,cAA0B,aAAA,CAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO7C,GAAA,CAAI,UAAsB,KAAA,EAAuB;AAC/C,IAAA,MAAM,EAAA,GAAK,IAAA,CAAK,QAAA,CAAS,MAAM;AAC7B,MAAA,IAAA,CAAK,GAAA,CAAI,OAAO,EAAE,CAAA;AAClB,MAAA,QAAA,EAAS;AAAA,IACX,GAAG,KAAK,CAAA;AACR,IAAA,IAAA,CAAK,GAAA,CAAI,IAAI,EAAE,CAAA;AACf,IAAA,OAAO,EAAA;AAAA,EACT;AAAA,EAEU,QAAA,CAAS,UAAsB,KAAA,EAAuB;AAC9D,IAAA,OAAO,MAAA,CAAO,UAAA,CAAW,QAAA,EAAU,KAAK,CAAA;AAAA,EAC1C;AAAA,EAEU,OAAO,EAAA,EAAkB;AACjC,IAAA,MAAA,CAAO,aAAa,EAAE,CAAA;AAAA,EACxB;AACF,CAAA;;;ACnGA,IAAM,cAAA,GAAoC,CAAC,OAAA,EAAS,OAAA,EAAS,SAAS,cAAc,CAAA;AAGpF,IAAM,iBAAA,GAAuC,CAAC,CAAA,EAAG,EAAA,EAAI,EAAE,CAAA;AAGvD,IAAM,UAAA,GAAa,iBAAA,CAAkB,MAAA,IAAU,cAAA,CAAe,MAAA,GAAS,CAAA,CAAA;AAQvE,IAAM,cAAA,GAAiB,CAAC,MAAA,EAAQ,MAAA,EAAQ,QAAQ,QAAQ,CAAA;AAqCjD,IAAM,0BAAA,GAAN,MAAM,2BAAA,SAAmC,UAAA,CAAwB;AAAA,EACtE,OAAgB,OAAA,GAAU,CAAC,OAAA,EAAS,SAAS,OAAO,CAAA;AAAA,EACpD,OAAgB,MAAA,GAAS;AAAA,IACvB,QAAA,EAAU,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,CAAA,EAAE;AAAA,IACrC,MAAA,EAAQ,EAAE,IAAA,EAAM,KAAA,EAAO,OAAA,EAAS,CAAC,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAQ,QAAQ,CAAA;AAAE,GACrE;AAAA,EACA,OAAO,OAAA,GAAU,CAAC,UAAU,CAAA;AAAA,EAC5B,OAAO,MAAA,GAAS,CAAC,QAAQ,CAAA;AAAA;AAAA,EAazB,OAAgB,cAAA,GAAiB,GAAA;AAAA,EAExB,OAAA,GAAU,IAAI,WAAA,EAAY;AAAA,EACnC,WAAA,GAA6B,IAAA;AAAA,EAEpB,OAAA,GAAgB;AAGvB,IAAA,IAAA,CAAK,OAAA,CAAQ,EAAE,QAAA,EAAU,KAAA,EAAO,CAAA;AAAA,EAClC;AAAA,EAES,UAAA,GAAmB;AAC1B,IAAA,IAAA,CAAK,QAAQ,QAAA,EAAS;AACtB,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,EACrB;AAAA;AAAA,EAGA,QAAA,GAAiB;AACf,IAAA,IAAA,CAAK,OAAA,EAAQ;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAA,CAAQ,OAAA,GAAkC,EAAC,EAAS;AAClD,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,cAAA,GAAiB,IAAA,CAAK,YAAY,KAAA,GAAQ,EAAA;AAChE,IAAA,MAAM,SAAS,IAAA,CAAK,WAAA;AACpB,IAAA,MAAM,MAAM,MAAA,CAAO,MAAA;AACnB,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,MAAA,CAAO,QAAA,EAAU,GAAG,CAAA;AACvC,IAAA,MAAM,QAAQ,KAAA,GAAQ,CAAA,GAAK,OAAO,KAAA,GAAQ,CAAC,KAAK,EAAA,GAAM,EAAA;AAEtD,IAAA,IAAA,CAAK,aAAA,CAAc,OAAO,GAAG,CAAA;AAC7B,IAAA,IAAA,CAAK,YAAA,CAAa,OAAO,GAAG,CAAA;AAE5B,IAAA,IAAI,OAAA,CAAQ,aAAa,KAAA,EAAO;AAG9B,MAAA,IAAA,CAAK,YAAY,KAAK,CAAA;AACtB,MAAA;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,SAAS,QAAA,EAAU;AAAA,MACtB,MAAA,EAAQ,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,GAAA,EAAK,QAAA,EAAU,KAAA,GAAQ,CAAA,IAAK,KAAA,IAAS,IAAA,CAAK,aAAA;AAAc,KACxF,CAAA;AAED,IAAA,IAAI,KAAK,WAAA,KAAgB,IAAA,OAAW,OAAA,CAAQ,KAAA,CAAM,KAAK,WAAW,CAAA;AAClE,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,MAAM;AACxC,MAAA,IAAA,CAAK,YAAY,KAAK,CAAA;AACtB,MAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,IACrB,CAAA,EAAG,4BAA2B,cAAc,CAAA;AAAA,EAC9C;AAAA;AAAA,EAGA,aAAA,CAAc,OAAe,GAAA,EAAmB;AAC9C,IAAA,IAAI,CAAC,KAAK,cAAA,EAAgB;AAC1B,IAAA,IAAA,CAAK,WAAA,CAAY,YAAA,CAAa,eAAA,EAAiB,GAAG,CAAA;AAClD,IAAA,IAAA,CAAK,WAAA,CAAY,YAAA,CAAa,eAAA,EAAiB,MAAA,CAAO,GAAG,CAAC,CAAA;AAC1D,IAAA,IAAA,CAAK,WAAA,CAAY,YAAA,CAAa,eAAA,EAAiB,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YAAA,CAAa,OAAe,GAAA,EAAmB;AAC7C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,KAAA,EAAO,GAAG,CAAA;AAClC,IAAA,IAAA,CAAK,OAAA,CAAQ,eAAA,EAAiB,IAAA,EAAM,IAAA,CAAK,SAAS,CAAC,CAAA;AAKnD,IAAA,IAAA,CAAK,QAAQ,gBAAA,EAAkB,MAAA,EAAQ,QAAQ,CAAA,IAAK,KAAA,GAAQ,KAAK,aAAa,CAAA;AAC9E,IAAA,MAAM,KAAA,GAAQ,GAAA,GAAM,CAAA,GAAI,KAAA,GAAQ,GAAA,GAAM,CAAA;AACtC,IAAA,IAAA,CAAK,QAAQ,KAAA,CAAM,WAAA,CAAY,4BAAA,EAA8B,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,EAC5E;AAAA,EAEA,YAAY,KAAA,EAAqB;AAC/B,IAAA,IAAI,IAAA,CAAK,cAAA,EAAgB,IAAA,CAAK,WAAA,CAAY,WAAA,GAAc,KAAA;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,KAAA,CAAM,OAAe,GAAA,EAAqB;AACxC,IAAA,IAAI,KAAA,IAAS,CAAA,IAAK,GAAA,IAAO,CAAA,EAAG,OAAO,EAAA;AACnC,IAAA,MAAM,QAAQ,IAAA,CAAK,IAAA,CAAM,QAAQ,GAAA,GAAO,cAAA,CAAe,MAAM,CAAA,GAAI,CAAA;AACjE,IAAA,OAAO,cAAA,CAAe,IAAA,CAAK,GAAA,CAAI,cAAA,CAAe,MAAA,GAAS,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,KAAK,CAAC,CAAC,CAAA,IAAK,EAAA;AAAA,EACpF;AAAA;AAAA,EAGA,OAAA,CAAQ,IAAA,EAAc,KAAA,EAAe,EAAA,EAAmB;AACtD,IAAA,IAAI,EAAA,EAAI;AACN,MAAA,IAAA,CAAK,OAAA,CAAQ,YAAA,CAAa,IAAA,EAAM,KAAK,CAAA;AAAA,IACvC,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,OAAA,CAAQ,gBAAgB,IAAI,CAAA;AAAA,IACnC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAA,CAAO,UAAkB,GAAA,EAAqB;AAC5C,IAAA,IAAI,QAAA,CAAS,MAAA,KAAW,CAAA,IAAK,GAAA,KAAQ,GAAG,OAAO,CAAA;AAE/C,IAAA,IAAI,MAAA,GAAS,CAAA;AACb,IAAA,KAAA,MAAW,aAAa,iBAAA,EAAmB;AACzC,MAAA,IAAI,QAAA,CAAS,MAAA,IAAU,SAAA,EAAW,MAAA,IAAU,CAAA;AAAA,IAC9C;AAEA,IAAA,MAAA,IAAU,cAAA,CAAe,OAAO,CAAC,EAAA,KAAO,GAAG,IAAA,CAAK,QAAQ,CAAC,CAAA,CAAE,MAAA,GAAS,CAAA;AAEpE,IAAA,IAAI,IAAI,GAAA,CAAI,QAAQ,CAAA,CAAE,IAAA,IAAQ,GAAG,MAAA,GAAS,CAAA;AAE1C,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,CAAO,MAAA,GAAS,aAAc,GAAG,CAAA;AACvD,IAAA,OAAO,KAAK,GAAA,CAAI,GAAA,EAAK,KAAK,GAAA,CAAI,CAAA,EAAG,QAAQ,CAAC,CAAA;AAAA,EAC5C;AACF","file":"password_strength_controller.js","sourcesContent":["/**\n * Self-cleaning timer registries shared by Stimeo controllers.\n *\n * Stimulus controllers frequently schedule `setTimeout` / `setInterval` work\n * (auto-dismiss, debouncing, polling). When the element leaves the DOM — a\n * Turbo Drive navigation, a Turbo Stream replacement, or any `disconnect()` —\n * orphaned timers keep firing against a detached controller, leaking memory and\n * mutating stale state. {@link SafeTimeout} and {@link SafeInterval} track every\n * timer they create so a single {@link TimerRegistry.clearAll | clearAll()} call\n * in `disconnect()` tears them all down.\n *\n * These are intentionally low-level primitives: they own *registration and\n * cleanup only*. Higher-level policy (pause/resume, remaining-time accounting)\n * stays in the individual controllers so per-widget semantics are not flattened\n * into a lowest-common-denominator helper.\n */\n\n/**\n * Shared registry bookkeeping for the timeout/interval variants.\n *\n * Subclasses provide the scheduling primitive ({@link schedule}) and its matching\n * canceller ({@link cancel}); this base owns the set of live ids plus the\n * per-id and bulk teardown shared by both.\n */\nabstract class TimerRegistry {\n  /** Live timer ids that have not yet been cleared (or, for timeouts, fired). */\n  protected readonly ids = new Set<number>();\n\n  /** Schedules the underlying platform timer and returns its id. */\n  protected abstract schedule(callback: () => void, delay: number): number;\n\n  /** Cancels the underlying platform timer for `id`. */\n  protected abstract cancel(id: number): void;\n\n  /**\n   * Cancels a single tracked timer.\n   *\n   * No-ops if the id is unknown (already cleared, fired, or never owned by this\n   * registry), so callers can clear defensively without guarding.\n   */\n  clear(id: number): void {\n    if (this.ids.delete(id)) {\n      this.cancel(id);\n    }\n  }\n\n  /**\n   * Cancels every tracked timer. Call this from a controller's `disconnect()`\n   * to guarantee no timer outlives the element.\n   */\n  clearAll(): void {\n    for (const id of this.ids) {\n      this.cancel(id);\n    }\n    this.ids.clear();\n  }\n\n  /** Number of timers currently tracked (pending). */\n  get size(): number {\n    return this.ids.size;\n  }\n}\n\n/**\n * `setTimeout` wrapper that auto-forgets each timer once it fires and supports\n * bulk teardown on disconnect.\n *\n * @example\n * ```ts\n * #timers = new SafeTimeout();\n *\n * connect() {\n *   this.#timers.set(() => this.dismiss(), 5000);\n * }\n *\n * disconnect() {\n *   this.#timers.clearAll();\n * }\n * ```\n */\nexport class SafeTimeout extends TimerRegistry {\n  /**\n   * Schedules `callback` after `delay` ms and returns the timer id.\n   *\n   * The id is removed from the registry automatically when the timeout fires,\n   * so {@link TimerRegistry.size | size} reflects only still-pending timers.\n   */\n  set(callback: () => void, delay: number): number {\n    const id = this.schedule(() => {\n      this.ids.delete(id);\n      callback();\n    }, delay);\n    this.ids.add(id);\n    return id;\n  }\n\n  protected schedule(callback: () => void, delay: number): number {\n    return window.setTimeout(callback, delay);\n  }\n\n  protected cancel(id: number): void {\n    window.clearTimeout(id);\n  }\n}\n\n/**\n * `setInterval` wrapper that tracks every interval for bulk teardown on\n * disconnect. Unlike {@link SafeTimeout}, intervals are retained until they are\n * explicitly cleared because they fire repeatedly.\n *\n * @example\n * ```ts\n * #intervals = new SafeInterval();\n *\n * connect() {\n *   this.#intervals.set(() => this.tick(), 1000);\n * }\n *\n * disconnect() {\n *   this.#intervals.clearAll();\n * }\n * ```\n */\nexport class SafeInterval extends TimerRegistry {\n  /** Schedules a repeating `callback` every `delay` ms and returns the timer id. */\n  set(callback: () => void, delay: number): number {\n    const id = this.schedule(callback, delay);\n    this.ids.add(id);\n    return id;\n  }\n\n  protected schedule(callback: () => void, delay: number): number {\n    return window.setInterval(callback, delay);\n  }\n\n  protected cancel(id: number): void {\n    window.clearInterval(id);\n  }\n}\n","import { Controller } from \"@hotwired/stimulus\";\nimport { SafeTimeout } from \"../utils/safe_timeout\";\n\n/** Character classes that contribute to password variety (one point each beyond the first). */\nconst CLASS_PATTERNS: readonly RegExp[] = [/[a-z]/, /[A-Z]/, /[0-9]/, /[^A-Za-z0-9]/];\n\n/** Length milestones that each add a strength point. */\nconst LENGTH_MILESTONES: readonly number[] = [8, 12, 16];\n\n/** Upper bound of the raw heuristic points, used to bucket into the level scale. */\nconst MAX_POINTS = LENGTH_MILESTONES.length + (CLASS_PATTERNS.length - 1);\n\n/**\n * Fixed, locale-independent styling bands `data-strength` is drawn from. Kept\n * separate from the (localizable) `levels` labels so `data-strength` stays a\n * stable CSS hook (e.g. `[data-strength=\"weak\"]`) even when `levels` is\n * translated. Ascending: weakest → strongest.\n */\nconst STRENGTH_BANDS = [\"weak\", \"fair\", \"good\", \"strong\"] as const;\n\n/**\n * Headless password-strength behavior: scores the field with a lightweight\n * zero-dependency heuristic and drives a meter plus an `aria-live` label. No\n * dedicated APG pattern; the meter display follows {@link MeterController}.\n *\n * Markup contract (identifier: `stimeo--password-strength`):\n *   <div data-controller=\"stimeo--password-strength\">\n *     <input type=\"password\" data-stimeo--password-strength-target=\"input\"\n *            data-action=\"input->stimeo--password-strength#evaluate\" aria-describedby=\"pw\">\n *     <div data-stimeo--password-strength-target=\"meter\" role=\"meter\"\n *          aria-valuemin=\"0\" aria-valuemax=\"4\"></div>\n *     <span id=\"pw\" data-stimeo--password-strength-target=\"label\" aria-live=\"polite\"></span>\n *   </div>\n *\n * On each input the controller scores the password (length milestones + character\n * variety, capped for trivial repetition), syncs the meter's `aria-valuenow`,\n * reflects a stable band on `data-strength`, the `0–1` fill on\n * `--stimeo-password-strength`, and (when `minScore` is set) `data-below-min`,\n * and writes the level label into the label target.\n *\n * @remarks\n * Behavior only — the meter/bar look is the consumer's, keyed off the data hooks.\n * `data-strength` is one of the fixed {@link STRENGTH_BANDS} (not the localizable\n * `levels` text), so consumers can style by it regardless of locale; the visible\n * label receives the matching `levels` entry. Non-text state (meter ARIA,\n * `data-strength`/`data-below-min`, the custom property, and the `change` event)\n * updates **immediately** on every keystroke so styling and consumers stay\n * responsive, while the label — in an `aria-live=\"polite\"` region — is written on\n * a short debounce so a screen reader is not flooded mid-typing. The score is a\n * pure function of the input value (no module-scope state), so `connect()`\n * re-evaluates idempotently after a Turbo cache restore; the debounce timer is\n * owned by {@link SafeTimeout} and torn down on `disconnect()` (Turbo included).\n * The estimator is intentionally not a dictionary/zxcvbn-grade one (kept\n * zero-dep); swap a stronger one in on the consumer side if needed.\n */\nexport class PasswordStrengthController extends Controller<HTMLElement> {\n  static override targets = [\"input\", \"meter\", \"label\"];\n  static override values = {\n    minScore: { type: Number, default: 0 },\n    levels: { type: Array, default: [\"weak\", \"fair\", \"good\", \"strong\"] },\n  };\n  static actions = [\"evaluate\"] as const;\n  static events = [\"change\"] as const;\n\n  declare readonly inputTarget: HTMLInputElement;\n  declare readonly meterTarget: HTMLElement;\n  declare readonly labelTarget: HTMLElement;\n  declare readonly hasInputTarget: boolean;\n  declare readonly hasMeterTarget: boolean;\n  declare readonly hasLabelTarget: boolean;\n\n  declare minScoreValue: number;\n  declare levelsValue: string[];\n\n  /** Delay (ms) before the polite live-region label is written, to throttle SR flooding. */\n  static readonly #announceDelay = 200;\n\n  readonly #timers = new SafeTimeout();\n  #announceId: number | null = null;\n\n  override connect(): void {\n    // Reflect the current value synchronously (no announce): an autofilled or\n    // cache-restored field shows the right strength without queuing an SR message.\n    this.#update({ announce: false });\n  }\n\n  override disconnect(): void {\n    this.#timers.clearAll();\n    this.#announceId = null;\n  }\n\n  /** Re-evaluates strength from the input. Bound via `data-action` (`input`). */\n  evaluate(): void {\n    this.#update();\n  }\n\n  /**\n   * Recomputes the strength. The meter ARIA, data hooks, the custom property and\n   * the `change` event apply immediately; the live-region label text is debounced\n   * unless `announce` is `false` (the initial render).\n   */\n  #update(options: { announce?: boolean } = {}): void {\n    const password = this.hasInputTarget ? this.inputTarget.value : \"\";\n    const labels = this.levelsValue;\n    const max = labels.length;\n    const score = this.#score(password, max);\n    const label = score > 0 ? (labels[score - 1] ?? \"\") : \"\";\n\n    this.#reflectMeter(score, max);\n    this.#reflectRoot(score, max);\n\n    if (options.announce === false) {\n      // Initial render (connect / cache-restore): reflect without a change event\n      // or a queued screen-reader announcement.\n      this.#writeLabel(label);\n      return;\n    }\n\n    this.dispatch(\"change\", {\n      detail: { score, level: label, max, meetsMin: score > 0 && score >= this.minScoreValue },\n    });\n\n    if (this.#announceId !== null) this.#timers.clear(this.#announceId);\n    this.#announceId = this.#timers.set(() => {\n      this.#writeLabel(label);\n      this.#announceId = null;\n    }, PasswordStrengthController.#announceDelay);\n  }\n\n  /** Syncs the meter target's ARIA value attributes (`0..levels.length`). */\n  #reflectMeter(score: number, max: number): void {\n    if (!this.hasMeterTarget) return;\n    this.meterTarget.setAttribute(\"aria-valuemin\", \"0\");\n    this.meterTarget.setAttribute(\"aria-valuemax\", String(max));\n    this.meterTarget.setAttribute(\"aria-valuenow\", String(score));\n  }\n\n  /**\n   * Reflects the level onto the root: the stable `data-strength` band (absent when\n   * empty), the `data-below-min` hook when the score is under `minScore`, and the\n   * `0–1` fill the consumer's CSS turns into the bar width.\n   */\n  #reflectRoot(score: number, max: number): void {\n    const band = this.#band(score, max);\n    this.#toggle(\"data-strength\", band, band.length > 0);\n    // Empty/pristine input (`score === 0`) is never \"below min\": that would let CSS\n    // flag an untouched field as failing. Mirror the `change` event's `meetsMin`\n    // (`score > 0 && …`) so the hook only marks a *non-empty* password under the\n    // threshold. `minScore` defaults to 0, leaving the hook inert until set positive.\n    this.#toggle(\"data-below-min\", \"true\", score > 0 && score < this.minScoreValue);\n    const ratio = max > 0 ? score / max : 0;\n    this.element.style.setProperty(\"--stimeo-password-strength\", String(ratio));\n  }\n\n  #writeLabel(label: string): void {\n    if (this.hasLabelTarget) this.labelTarget.textContent = label;\n  }\n\n  /**\n   * Locale-independent styling band (one of {@link STRENGTH_BANDS}) for `score`\n   * out of `max`. Empty input → `\"\"`. Quantizes the `score/max` ratio into the\n   * four fixed bands, so a non-default level count still maps onto a stable hook.\n   */\n  #band(score: number, max: number): string {\n    if (score <= 0 || max <= 0) return \"\";\n    const index = Math.ceil((score / max) * STRENGTH_BANDS.length) - 1;\n    return STRENGTH_BANDS[Math.min(STRENGTH_BANDS.length - 1, Math.max(0, index))] ?? \"\";\n  }\n\n  /** Sets `name` to `value` when `on`, else removes it (value/presence data hook). */\n  #toggle(name: string, value: string, on: boolean): void {\n    if (on) {\n      this.element.setAttribute(name, value);\n    } else {\n      this.element.removeAttribute(name);\n    }\n  }\n\n  /**\n   * Lightweight zero-dependency strength heuristic returning an integer in\n   * `[0, max]` (`max` = number of levels). Empty input is `0` (no level); any\n   * non-empty password is at least `1`. Points accrue from length milestones and\n   * character-class variety, then bucket into the level scale. A tiny alphabet\n   * (≤ 2 distinct characters, e.g. \"aaaa\") is capped as the weakest, so length\n   * alone cannot mask trivial repetition.\n   */\n  #score(password: string, max: number): number {\n    if (password.length === 0 || max === 0) return 0;\n\n    let points = 0;\n    for (const milestone of LENGTH_MILESTONES) {\n      if (password.length >= milestone) points += 1;\n    }\n    // The first present character class is free; each additional one adds a point.\n    points += CLASS_PATTERNS.filter((re) => re.test(password)).length - 1;\n\n    if (new Set(password).size <= 2) points = 0; // trivial repetition → weakest\n\n    const bucketed = Math.round((points / MAX_POINTS) * max);\n    return Math.min(max, Math.max(1, bucketed));\n  }\n}\n"]}

package/dist/controllers/persist_controller.d.ts

@@ -0,0 +1,63 @@
+import { Controller } from '@hotwired/stimulus';
+
+/** Field controls this controller can persist. */
+type PersistField = HTMLInputElement | HTMLTextAreaElement | HTMLSelectElement;
+/**
+ * Headless draft-autosave behavior: persists a form's field values to
+ * `localStorage` and restores them across Turbo navigations and reloads (no APG
+ * pattern; a state-holding utility). The Alpine `persist` equivalent.
+ *
+ * Markup contract (identifier: `stimeo--persist`):
+ *   <form data-controller="stimeo--persist"
+ *         data-stimeo--persist-key-value="contact-draft">
+ *     <input name="name">
+ *     <textarea name="message"></textarea>
+ *   </form>
+ *
+ * On connect it restores any saved values under `key` (falling back to the
+ * element's `id`), then debounce-saves on every input/change. Password fields (and
+ * anything in `exclude`) are never written. A `clear()` action — or the `clearOn`
+ * event (e.g. `submit`) — drops the draft. Restoring never moves focus.
+ *
+ * @remarks
+ * Behavior only. State lives entirely in `localStorage` (no module-scope state), so
+ * instances never interfere. The input listener and debounce timer are removed on
+ * `disconnect()` (Turbo navigation included), where a pending save is flushed first
+ * so an in-flight edit is not lost.
+ */
+declare class PersistController extends Controller<HTMLElement> {
+    #private;
+    static targets: string[];
+    static values: {
+        key: {
+            type: StringConstructor;
+            default: string;
+        };
+        debounce: {
+            type: NumberConstructor;
+            default: number;
+        };
+        exclude: {
+            type: ArrayConstructor;
+            default: string[];
+        };
+        clearOn: {
+            type: StringConstructor;
+            default: string;
+        };
+    };
+    static actions: readonly ["clear"];
+    static events: readonly ["restore", "save", "clear"];
+    readonly fieldTargets: PersistField[];
+    readonly hasFieldTarget: boolean;
+    keyValue: string;
+    debounceValue: number;
+    excludeValue: string[];
+    clearOnValue: string;
+    connect(): void;
+    disconnect(): void;
+    /** Drops the saved draft and clears the restored marker. */
+    clear(): void;
+}
+
+export { PersistController };

package/dist/controllers/persist_controller.js

@@ -0,0 +1,259 @@
+import { Controller } from '@hotwired/stimulus';
+
+// src/controllers/persist_controller.ts
+
+// src/utils/safe_timeout.ts
+var TimerRegistry = class {
+  /** Live timer ids that have not yet been cleared (or, for timeouts, fired). */
+  ids = /* @__PURE__ */ new Set();
+  /**
+   * Cancels a single tracked timer.
+   *
+   * No-ops if the id is unknown (already cleared, fired, or never owned by this
+   * registry), so callers can clear defensively without guarding.
+   */
+  clear(id) {
+    if (this.ids.delete(id)) {
+      this.cancel(id);
+    }
+  }
+  /**
+   * Cancels every tracked timer. Call this from a controller's `disconnect()`
+   * to guarantee no timer outlives the element.
+   */
+  clearAll() {
+    for (const id of this.ids) {
+      this.cancel(id);
+    }
+    this.ids.clear();
+  }
+  /** Number of timers currently tracked (pending). */
+  get size() {
+    return this.ids.size;
+  }
+};
+var SafeTimeout = class extends TimerRegistry {
+  /**
+   * Schedules `callback` after `delay` ms and returns the timer id.
+   *
+   * The id is removed from the registry automatically when the timeout fires,
+   * so {@link TimerRegistry.size | size} reflects only still-pending timers.
+   */
+  set(callback, delay) {
+    const id = this.schedule(() => {
+      this.ids.delete(id);
+      callback();
+    }, delay);
+    this.ids.add(id);
+    return id;
+  }
+  schedule(callback, delay) {
+    return window.setTimeout(callback, delay);
+  }
+  cancel(id) {
+    window.clearTimeout(id);
+  }
+};
+
+// src/controllers/persist_controller.ts
+var NON_VALUE_TYPES = /* @__PURE__ */ new Set(["file", "submit", "reset", "button", "image"]);
+var STORAGE_PREFIX = "stimeo--persist:";
+var OCCURRENCE_SEP = "\0";
+var PersistController = class extends Controller {
+  static targets = ["field"];
+  static values = {
+    key: { type: String, default: "" },
+    debounce: { type: Number, default: 400 },
+    exclude: { type: Array, default: ["password"] },
+    clearOn: { type: String, default: "" }
+  };
+  static actions = ["clear"];
+  static events = ["restore", "save", "clear"];
+  #timeouts = new SafeTimeout();
+  #saveId = null;
+  #onInput = () => {
+    this.#scheduleSave();
+  };
+  #onClearEvent = () => {
+    this.clear();
+  };
+  connect() {
+    if (this.#storageKey === null) return;
+    this.#restore();
+    this.element.addEventListener("input", this.#onInput);
+    this.element.addEventListener("change", this.#onInput);
+    if (this.clearOnValue.length > 0) {
+      this.element.addEventListener(this.clearOnValue, this.#onClearEvent);
+    }
+  }
+  disconnect() {
+    this.element.removeEventListener("input", this.#onInput);
+    this.element.removeEventListener("change", this.#onInput);
+    if (this.clearOnValue.length > 0) {
+      this.element.removeEventListener(this.clearOnValue, this.#onClearEvent);
+    }
+    if (this.#saveId !== null) {
+      this.#timeouts.clear(this.#saveId);
+      this.#saveId = null;
+      this.#write();
+    }
+    this.#timeouts.clearAll();
+  }
+  /** Drops the saved draft and clears the restored marker. */
+  clear() {
+    const key = this.#storageKey;
+    if (key === null) return;
+    if (this.#saveId !== null) {
+      this.#timeouts.clear(this.#saveId);
+      this.#saveId = null;
+    }
+    this.#removeItem(key);
+    this.element.removeAttribute("data-persist-restored");
+    this.dispatch("clear", { detail: { key: this.#logicalKey } });
+  }
+  /** Schedules a debounced save. */
+  #scheduleSave() {
+    if (this.#saveId !== null) this.#timeouts.clear(this.#saveId);
+    this.#saveId = this.#timeouts.set(() => {
+      this.#saveId = null;
+      this.#save();
+    }, this.debounceValue);
+  }
+  /** Writes the current values and emits `save`. */
+  #save() {
+    this.#write();
+    this.dispatch("save", { detail: { key: this.#logicalKey } });
+  }
+  /** Serializes persistable fields and stores them under the storage key. */
+  #write() {
+    const key = this.#storageKey;
+    if (key === null) return;
+    const data = {};
+    for (const { field, key: fieldKey } of this.#fieldEntries()) {
+      if (field instanceof HTMLInputElement && field.type === "checkbox") {
+        data[fieldKey] = field.checked;
+      } else if (field instanceof HTMLInputElement && field.type === "radio") {
+        if (field.checked) data[fieldKey] = field.value;
+      } else if (field instanceof HTMLSelectElement && field.multiple) {
+        data[fieldKey] = Array.from(field.selectedOptions).map((o) => o.value);
+      } else {
+        data[fieldKey] = field.value;
+      }
+    }
+    this.#setItem(key, JSON.stringify(data));
+  }
+  /** Applies any saved values to the fields, without moving focus. */
+  #restore() {
+    const key = this.#storageKey;
+    if (key === null) return;
+    const raw = this.#getItem(key);
+    if (raw === null) return;
+    let data;
+    try {
+      data = JSON.parse(raw);
+    } catch {
+      return;
+    }
+    let restoredAny = false;
+    for (const { field, key: fieldKey } of this.#fieldEntries()) {
+      if (!Object.hasOwn(data, fieldKey)) continue;
+      this.#applyValue(field, data[fieldKey]);
+      restoredAny = true;
+    }
+    if (restoredAny) {
+      this.element.setAttribute("data-persist-restored", "true");
+      this.dispatch("restore", { detail: { key: this.#logicalKey } });
+    }
+  }
+  /** Sets a single field's value from a stored entry. */
+  #applyValue(field, value) {
+    if (field instanceof HTMLInputElement && field.type === "checkbox") {
+      field.checked = Boolean(value);
+    } else if (field instanceof HTMLInputElement && field.type === "radio") {
+      field.checked = field.value === value;
+    } else if (field instanceof HTMLSelectElement && field.multiple) {
+      const selected = new Set(Array.isArray(value) ? value.map(String) : []);
+      for (const option of Array.from(field.options)) {
+        option.selected = selected.has(option.value);
+      }
+    } else {
+      field.value = String(value);
+    }
+  }
+  /**
+   * Persistable fields paired with a stable storage key. Uniquely-named fields key
+   * by their name (unchanged, backward-compatible). Repeated same-name fields
+   * (e.g. a `tags[]` checkbox group or array text inputs) are disambiguated by
+   * DOM-order occurrence — the first keeps its plain `name` (backward-
+   * compatible), later ones get a NUL-separated index suffix — so each is stored and
+   * restored individually instead of the last one clobbering the rest. Radios are
+   * the exception: a group intentionally shares one key (one value per name).
+   */
+  #fieldEntries() {
+    const entries = [];
+    const occurrence = /* @__PURE__ */ new Map();
+    for (const field of this.#fields()) {
+      const name = this.#keyOf(field);
+      if (name === null) continue;
+      if (field instanceof HTMLInputElement && field.type === "radio") {
+        entries.push({ field, key: name });
+        continue;
+      }
+      const seen = occurrence.get(name) ?? 0;
+      occurrence.set(name, seen + 1);
+      entries.push({ field, key: seen === 0 ? name : `${name}${OCCURRENCE_SEP}${seen}` });
+    }
+    return entries;
+  }
+  /** The fields to persist: `field` targets, or the element's named controls. */
+  #fields() {
+    const candidates = this.hasFieldTarget ? this.fieldTargets : Array.from(this.element.querySelectorAll("input, textarea, select"));
+    return candidates.filter((field) => this.#persistable(field));
+  }
+  /** Whether a field carries a restorable, non-excluded value. */
+  #persistable(field) {
+    if (this.#keyOf(field) === null) return false;
+    const type = field instanceof HTMLInputElement ? field.type : "";
+    if (NON_VALUE_TYPES.has(type)) return false;
+    if (this.excludeValue.includes(type)) return false;
+    if (field.name.length > 0 && this.excludeValue.includes(field.name)) return false;
+    return true;
+  }
+  /** A stable storage sub-key for a field (its name, else id). */
+  #keyOf(field) {
+    return field.name || field.id || null;
+  }
+  /** The logical key (key Value or element id), or null when neither is set. */
+  get #logicalKey() {
+    const key = this.keyValue || this.element.id;
+    return key.length > 0 ? key : null;
+  }
+  /** The prefixed localStorage key, or null when persistence is disabled. */
+  get #storageKey() {
+    const logical = this.#logicalKey;
+    return logical === null ? null : `${STORAGE_PREFIX}${logical}`;
+  }
+  #getItem(key) {
+    try {
+      return window.localStorage.getItem(key);
+    } catch {
+      return null;
+    }
+  }
+  #setItem(key, value) {
+    try {
+      window.localStorage.setItem(key, value);
+    } catch {
+    }
+  }
+  #removeItem(key) {
+    try {
+      window.localStorage.removeItem(key);
+    } catch {
+    }
+  }
+};
+
+export { PersistController };
+//# sourceMappingURL=persist_controller.js.map
+//# sourceMappingURL=persist_controller.js.map

package/dist/controllers/persist_controller.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utils/safe_timeout.ts","../../src/controllers/persist_controller.ts"],"names":[],"mappings":";;;;;AAwBA,IAAe,gBAAf,MAA6B;AAAA;AAAA,EAER,GAAA,uBAAU,GAAA,EAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAczC,MAAM,EAAA,EAAkB;AACtB,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,EAAE,CAAA,EAAG;AACvB,MAAA,IAAA,CAAK,OAAO,EAAE,CAAA;AAAA,IAChB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAA,GAAiB;AACf,IAAA,KAAA,MAAW,EAAA,IAAM,KAAK,GAAA,EAAK;AACzB,MAAA,IAAA,CAAK,OAAO,EAAE,CAAA;AAAA,IAChB;AACA,IAAA,IAAA,CAAK,IAAI,KAAA,EAAM;AAAA,EACjB;AAAA;AAAA,EAGA,IAAI,IAAA,GAAe;AACjB,IAAA,OAAO,KAAK,GAAA,CAAI,IAAA;AAAA,EAClB;AACF,CAAA;AAmBO,IAAM,WAAA,GAAN,cAA0B,aAAA,CAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO7C,GAAA,CAAI,UAAsB,KAAA,EAAuB;AAC/C,IAAA,MAAM,EAAA,GAAK,IAAA,CAAK,QAAA,CAAS,MAAM;AAC7B,MAAA,IAAA,CAAK,GAAA,CAAI,OAAO,EAAE,CAAA;AAClB,MAAA,QAAA,EAAS;AAAA,IACX,GAAG,KAAK,CAAA;AACR,IAAA,IAAA,CAAK,GAAA,CAAI,IAAI,EAAE,CAAA;AACf,IAAA,OAAO,EAAA;AAAA,EACT;AAAA,EAEU,QAAA,CAAS,UAAsB,KAAA,EAAuB;AAC9D,IAAA,OAAO,MAAA,CAAO,UAAA,CAAW,QAAA,EAAU,KAAK,CAAA;AAAA,EAC1C;AAAA,EAEU,OAAO,EAAA,EAAkB;AACjC,IAAA,MAAA,CAAO,aAAa,EAAE,CAAA;AAAA,EACxB;AACF,CAAA;;;AChGA,IAAM,eAAA,uBAAsB,GAAA,CAAI,CAAC,QAAQ,QAAA,EAAU,OAAA,EAAS,QAAA,EAAU,OAAO,CAAC,CAAA;AAE9E,IAAM,cAAA,GAAiB,kBAAA;AAEvB,IAAM,cAAA,GAAiB,IAAA;AAyBhB,IAAM,iBAAA,GAAN,cAAgC,UAAA,CAAwB;AAAA,EAC7D,OAAgB,OAAA,GAAU,CAAC,OAAO,CAAA;AAAA,EAClC,OAAgB,MAAA,GAAS;AAAA,IACvB,GAAA,EAAK,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,EAAA,EAAG;AAAA,IACjC,QAAA,EAAU,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,GAAA,EAAI;AAAA,IACvC,SAAS,EAAE,IAAA,EAAM,OAAO,OAAA,EAAS,CAAC,UAAU,CAAA,EAAE;AAAA,IAC9C,OAAA,EAAS,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,EAAA;AAAG,GACvC;AAAA,EACA,OAAO,OAAA,GAAU,CAAC,OAAO,CAAA;AAAA,EACzB,OAAO,MAAA,GAAS,CAAC,SAAA,EAAW,QAAQ,OAAO,CAAA;AAAA,EAUlC,SAAA,GAAY,IAAI,WAAA,EAAY;AAAA,EACrC,OAAA,GAAyB,IAAA;AAAA,EAEhB,WAAW,MAAY;AAC9B,IAAA,IAAA,CAAK,aAAA,EAAc;AAAA,EACrB,CAAA;AAAA,EAES,gBAAgB,MAAY;AACnC,IAAA,IAAA,CAAK,KAAA,EAAM;AAAA,EACb,CAAA;AAAA,EAES,OAAA,GAAgB;AACvB,IAAA,IAAI,IAAA,CAAK,gBAAgB,IAAA,EAAM;AAC/B,IAAA,IAAA,CAAK,QAAA,EAAS;AACd,IAAA,IAAA,CAAK,OAAA,CAAQ,gBAAA,CAAiB,OAAA,EAAS,IAAA,CAAK,QAAQ,CAAA;AACpD,IAAA,IAAA,CAAK,OAAA,CAAQ,gBAAA,CAAiB,QAAA,EAAU,IAAA,CAAK,QAAQ,CAAA;AACrD,IAAA,IAAI,IAAA,CAAK,YAAA,CAAa,MAAA,GAAS,CAAA,EAAG;AAChC,MAAA,IAAA,CAAK,OAAA,CAAQ,gBAAA,CAAiB,IAAA,CAAK,YAAA,EAAc,KAAK,aAAa,CAAA;AAAA,IACrE;AAAA,EACF;AAAA,EAES,UAAA,GAAmB;AAC1B,IAAA,IAAA,CAAK,OAAA,CAAQ,mBAAA,CAAoB,OAAA,EAAS,IAAA,CAAK,QAAQ,CAAA;AACvD,IAAA,IAAA,CAAK,OAAA,CAAQ,mBAAA,CAAoB,QAAA,EAAU,IAAA,CAAK,QAAQ,CAAA;AACxD,IAAA,IAAI,IAAA,CAAK,YAAA,CAAa,MAAA,GAAS,CAAA,EAAG;AAChC,MAAA,IAAA,CAAK,OAAA,CAAQ,mBAAA,CAAoB,IAAA,CAAK,YAAA,EAAc,KAAK,aAAa,CAAA;AAAA,IACxE;AAEA,IAAA,IAAI,IAAA,CAAK,YAAY,IAAA,EAAM;AACzB,MAAA,IAAA,CAAK,SAAA,CAAU,KAAA,CAAM,IAAA,CAAK,OAAO,CAAA;AACjC,MAAA,IAAA,CAAK,OAAA,GAAU,IAAA;AACf,MAAA,IAAA,CAAK,MAAA,EAAO;AAAA,IACd;AACA,IAAA,IAAA,CAAK,UAAU,QAAA,EAAS;AAAA,EAC1B;AAAA;AAAA,EAGA,KAAA,GAAc;AACZ,IAAA,MAAM,MAAM,IAAA,CAAK,WAAA;AACjB,IAAA,IAAI,QAAQ,IAAA,EAAM;AAClB,IAAA,IAAI,IAAA,CAAK,YAAY,IAAA,EAAM;AACzB,MAAA,IAAA,CAAK,SAAA,CAAU,KAAA,CAAM,IAAA,CAAK,OAAO,CAAA;AACjC,MAAA,IAAA,CAAK,OAAA,GAAU,IAAA;AAAA,IACjB;AACA,IAAA,IAAA,CAAK,YAAY,GAAG,CAAA;AACpB,IAAA,IAAA,CAAK,OAAA,CAAQ,gBAAgB,uBAAuB,CAAA;AACpD,IAAA,IAAA,CAAK,QAAA,CAAS,SAAS,EAAE,MAAA,EAAQ,EAAE,GAAA,EAAK,IAAA,CAAK,WAAA,EAAY,EAAG,CAAA;AAAA,EAC9D;AAAA;AAAA,EAGA,aAAA,GAAsB;AACpB,IAAA,IAAI,KAAK,OAAA,KAAY,IAAA,OAAW,SAAA,CAAU,KAAA,CAAM,KAAK,OAAO,CAAA;AAC5D,IAAA,IAAA,CAAK,OAAA,GAAU,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,MAAM;AACtC,MAAA,IAAA,CAAK,OAAA,GAAU,IAAA;AACf,MAAA,IAAA,CAAK,KAAA,EAAM;AAAA,IACb,CAAA,EAAG,KAAK,aAAa,CAAA;AAAA,EACvB;AAAA;AAAA,EAGA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,MAAA,EAAO;AACZ,IAAA,IAAA,CAAK,QAAA,CAAS,QAAQ,EAAE,MAAA,EAAQ,EAAE,GAAA,EAAK,IAAA,CAAK,WAAA,EAAY,EAAG,CAAA;AAAA,EAC7D;AAAA;AAAA,EAGA,MAAA,GAAe;AACb,IAAA,MAAM,MAAM,IAAA,CAAK,WAAA;AACjB,IAAA,IAAI,QAAQ,IAAA,EAAM;AAClB,IAAA,MAAM,OAAgC,EAAC;AACvC,IAAA,KAAA,MAAW,EAAE,KAAA,EAAO,GAAA,EAAK,UAAS,IAAK,IAAA,CAAK,eAAc,EAAG;AAC3D,MAAA,IAAI,KAAA,YAAiB,gBAAA,IAAoB,KAAA,CAAM,IAAA,KAAS,UAAA,EAAY;AAClE,QAAA,IAAA,CAAK,QAAQ,IAAI,KAAA,CAAM,OAAA;AAAA,MACzB,CAAA,MAAA,IAAW,KAAA,YAAiB,gBAAA,IAAoB,KAAA,CAAM,SAAS,OAAA,EAAS;AACtE,QAAA,IAAI,KAAA,CAAM,OAAA,EAAS,IAAA,CAAK,QAAQ,IAAI,KAAA,CAAM,KAAA;AAAA,MAC5C,CAAA,MAAA,IAAW,KAAA,YAAiB,iBAAA,IAAqB,KAAA,CAAM,QAAA,EAAU;AAC/D,QAAA,IAAA,CAAK,QAAQ,CAAA,GAAI,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,eAAe,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,KAAK,CAAA;AAAA,MACvE,CAAA,MAAO;AACL,QAAA,IAAA,CAAK,QAAQ,IAAI,KAAA,CAAM,KAAA;AAAA,MACzB;AAAA,IACF;AACA,IAAA,IAAA,CAAK,QAAA,CAAS,GAAA,EAAK,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,EACzC;AAAA;AAAA,EAGA,QAAA,GAAiB;AACf,IAAA,MAAM,MAAM,IAAA,CAAK,WAAA;AACjB,IAAA,IAAI,QAAQ,IAAA,EAAM;AAClB,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA;AAC7B,IAAA,IAAI,QAAQ,IAAA,EAAM;AAClB,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI;AACF,MAAA,IAAA,GAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,IACvB,CAAA,CAAA,MAAQ;AACN,MAAA;AAAA,IACF;AACA,IAAA,IAAI,WAAA,GAAc,KAAA;AAClB,IAAA,KAAA,MAAW,EAAE,KAAA,EAAO,GAAA,EAAK,UAAS,IAAK,IAAA,CAAK,eAAc,EAAG;AAC3D,MAAA,IAAI,CAAC,MAAA,CAAO,MAAA,CAAO,IAAA,EAAM,QAAQ,CAAA,EAAG;AACpC,MAAA,IAAA,CAAK,WAAA,CAAY,KAAA,EAAO,IAAA,CAAK,QAAQ,CAAC,CAAA;AACtC,MAAA,WAAA,GAAc,IAAA;AAAA,IAChB;AACA,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,IAAA,CAAK,OAAA,CAAQ,YAAA,CAAa,uBAAA,EAAyB,MAAM,CAAA;AACzD,MAAA,IAAA,CAAK,QAAA,CAAS,WAAW,EAAE,MAAA,EAAQ,EAAE,GAAA,EAAK,IAAA,CAAK,WAAA,EAAY,EAAG,CAAA;AAAA,IAChE;AAAA,EACF;AAAA;AAAA,EAGA,WAAA,CAAY,OAAqB,KAAA,EAAsB;AACrD,IAAA,IAAI,KAAA,YAAiB,gBAAA,IAAoB,KAAA,CAAM,IAAA,KAAS,UAAA,EAAY;AAClE,MAAA,KAAA,CAAM,OAAA,GAAU,QAAQ,KAAK,CAAA;AAAA,IAC/B,CAAA,MAAA,IAAW,KAAA,YAAiB,gBAAA,IAAoB,KAAA,CAAM,SAAS,OAAA,EAAS;AACtE,MAAA,KAAA,CAAM,OAAA,GAAU,MAAM,KAAA,KAAU,KAAA;AAAA,IAClC,CAAA,MAAA,IAAW,KAAA,YAAiB,iBAAA,IAAqB,KAAA,CAAM,QAAA,EAAU;AAC/D,MAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,CAAM,GAAA,CAAI,MAAM,CAAA,GAAI,EAAE,CAAA;AACtE,MAAA,KAAA,MAAW,MAAA,IAAU,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA,EAAG;AAC9C,QAAA,MAAA,CAAO,QAAA,GAAW,QAAA,CAAS,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA;AAAA,MAC7C;AAAA,IACF,CAAA,MAAO;AACL,MAAA,KAAA,CAAM,KAAA,GAAQ,OAAO,KAAK,CAAA;AAAA,IAC5B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,aAAA,GAA6D;AAC3D,IAAA,MAAM,UAAuD,EAAC;AAC9D,IAAA,MAAM,UAAA,uBAAiB,GAAA,EAAoB;AAC3C,IAAA,KAAA,MAAW,KAAA,IAAS,IAAA,CAAK,OAAA,EAAQ,EAAG;AAClC,MAAA,MAAM,IAAA,GAAO,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA;AAC9B,MAAA,IAAI,SAAS,IAAA,EAAM;AACnB,MAAA,IAAI,KAAA,YAAiB,gBAAA,IAAoB,KAAA,CAAM,IAAA,KAAS,OAAA,EAAS;AAC/D,QAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,KAAA,EAAO,GAAA,EAAK,MAAM,CAAA;AACjC,QAAA;AAAA,MACF;AACA,MAAA,MAAM,IAAA,GAAO,UAAA,CAAW,GAAA,CAAI,IAAI,CAAA,IAAK,CAAA;AACrC,MAAA,UAAA,CAAW,GAAA,CAAI,IAAA,EAAM,IAAA,GAAO,CAAC,CAAA;AAC7B,MAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,KAAA,EAAO,GAAA,EAAK,SAAS,CAAA,GAAI,IAAA,GAAO,CAAA,EAAG,IAAI,CAAA,EAAG,cAAc,CAAA,EAAG,IAAI,IAAI,CAAA;AAAA,IACpF;AACA,IAAA,OAAO,OAAA;AAAA,EACT;AAAA;AAAA,EAGA,OAAA,GAA0B;AACxB,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,cAAA,GACpB,IAAA,CAAK,YAAA,GACL,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,gBAAA,CAA+B,yBAAyB,CAAC,CAAA;AACrF,IAAA,OAAO,WAAW,MAAA,CAAO,CAAC,UAAU,IAAA,CAAK,YAAA,CAAa,KAAK,CAAC,CAAA;AAAA,EAC9D;AAAA;AAAA,EAGA,aAAa,KAAA,EAA8B;AACzC,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA,KAAM,MAAM,OAAO,KAAA;AACxC,IAAA,MAAM,IAAA,GAAO,KAAA,YAAiB,gBAAA,GAAmB,KAAA,CAAM,IAAA,GAAO,EAAA;AAC9D,IAAA,IAAI,eAAA,CAAgB,GAAA,CAAI,IAAI,CAAA,EAAG,OAAO,KAAA;AACtC,IAAA,IAAI,IAAA,CAAK,YAAA,CAAa,QAAA,CAAS,IAAI,GAAG,OAAO,KAAA;AAC7C,IAAA,IAAI,KAAA,CAAM,IAAA,CAAK,MAAA,GAAS,CAAA,IAAK,IAAA,CAAK,aAAa,QAAA,CAAS,KAAA,CAAM,IAAI,CAAA,EAAG,OAAO,KAAA;AAC5E,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA,EAGA,OAAO,KAAA,EAAoC;AACzC,IAAA,OAAO,KAAA,CAAM,IAAA,IAAQ,KAAA,CAAM,EAAA,IAAM,IAAA;AAAA,EACnC;AAAA;AAAA,EAGA,IAAI,WAAA,GAA6B;AAC/B,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,QAAA,IAAY,IAAA,CAAK,OAAA,CAAQ,EAAA;AAC1C,IAAA,OAAO,GAAA,CAAI,MAAA,GAAS,CAAA,GAAI,GAAA,GAAM,IAAA;AAAA,EAChC;AAAA;AAAA,EAGA,IAAI,WAAA,GAA6B;AAC/B,IAAA,MAAM,UAAU,IAAA,CAAK,WAAA;AACrB,IAAA,OAAO,YAAY,IAAA,GAAO,IAAA,GAAO,CAAA,EAAG,cAAc,GAAG,OAAO,CAAA,CAAA;AAAA,EAC9D;AAAA,EAEA,SAAS,GAAA,EAA4B;AACnC,IAAA,IAAI;AACF,MAAA,OAAO,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,GAAG,CAAA;AAAA,IACxC,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEA,QAAA,CAAS,KAAa,KAAA,EAAqB;AACzC,IAAA,IAAI;AACF,MAAA,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,GAAA,EAAK,KAAK,CAAA;AAAA,IACxC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEA,YAAY,GAAA,EAAmB;AAC7B,IAAA,IAAI;AACF,MAAA,MAAA,CAAO,YAAA,CAAa,WAAW,GAAG,CAAA;AAAA,IACpC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACF","file":"persist_controller.js","sourcesContent":["/**\n * Self-cleaning timer registries shared by Stimeo controllers.\n *\n * Stimulus controllers frequently schedule `setTimeout` / `setInterval` work\n * (auto-dismiss, debouncing, polling). When the element leaves the DOM — a\n * Turbo Drive navigation, a Turbo Stream replacement, or any `disconnect()` —\n * orphaned timers keep firing against a detached controller, leaking memory and\n * mutating stale state. {@link SafeTimeout} and {@link SafeInterval} track every\n * timer they create so a single {@link TimerRegistry.clearAll | clearAll()} call\n * in `disconnect()` tears them all down.\n *\n * These are intentionally low-level primitives: they own *registration and\n * cleanup only*. Higher-level policy (pause/resume, remaining-time accounting)\n * stays in the individual controllers so per-widget semantics are not flattened\n * into a lowest-common-denominator helper.\n */\n\n/**\n * Shared registry bookkeeping for the timeout/interval variants.\n *\n * Subclasses provide the scheduling primitive ({@link schedule}) and its matching\n * canceller ({@link cancel}); this base owns the set of live ids plus the\n * per-id and bulk teardown shared by both.\n */\nabstract class TimerRegistry {\n  /** Live timer ids that have not yet been cleared (or, for timeouts, fired). */\n  protected readonly ids = new Set<number>();\n\n  /** Schedules the underlying platform timer and returns its id. */\n  protected abstract schedule(callback: () => void, delay: number): number;\n\n  /** Cancels the underlying platform timer for `id`. */\n  protected abstract cancel(id: number): void;\n\n  /**\n   * Cancels a single tracked timer.\n   *\n   * No-ops if the id is unknown (already cleared, fired, or never owned by this\n   * registry), so callers can clear defensively without guarding.\n   */\n  clear(id: number): void {\n    if (this.ids.delete(id)) {\n      this.cancel(id);\n    }\n  }\n\n  /**\n   * Cancels every tracked timer. Call this from a controller's `disconnect()`\n   * to guarantee no timer outlives the element.\n   */\n  clearAll(): void {\n    for (const id of this.ids) {\n      this.cancel(id);\n    }\n    this.ids.clear();\n  }\n\n  /** Number of timers currently tracked (pending). */\n  get size(): number {\n    return this.ids.size;\n  }\n}\n\n/**\n * `setTimeout` wrapper that auto-forgets each timer once it fires and supports\n * bulk teardown on disconnect.\n *\n * @example\n * ```ts\n * #timers = new SafeTimeout();\n *\n * connect() {\n *   this.#timers.set(() => this.dismiss(), 5000);\n * }\n *\n * disconnect() {\n *   this.#timers.clearAll();\n * }\n * ```\n */\nexport class SafeTimeout extends TimerRegistry {\n  /**\n   * Schedules `callback` after `delay` ms and returns the timer id.\n   *\n   * The id is removed from the registry automatically when the timeout fires,\n   * so {@link TimerRegistry.size | size} reflects only still-pending timers.\n   */\n  set(callback: () => void, delay: number): number {\n    const id = this.schedule(() => {\n      this.ids.delete(id);\n      callback();\n    }, delay);\n    this.ids.add(id);\n    return id;\n  }\n\n  protected schedule(callback: () => void, delay: number): number {\n    return window.setTimeout(callback, delay);\n  }\n\n  protected cancel(id: number): void {\n    window.clearTimeout(id);\n  }\n}\n\n/**\n * `setInterval` wrapper that tracks every interval for bulk teardown on\n * disconnect. Unlike {@link SafeTimeout}, intervals are retained until they are\n * explicitly cleared because they fire repeatedly.\n *\n * @example\n * ```ts\n * #intervals = new SafeInterval();\n *\n * connect() {\n *   this.#intervals.set(() => this.tick(), 1000);\n * }\n *\n * disconnect() {\n *   this.#intervals.clearAll();\n * }\n * ```\n */\nexport class SafeInterval extends TimerRegistry {\n  /** Schedules a repeating `callback` every `delay` ms and returns the timer id. */\n  set(callback: () => void, delay: number): number {\n    const id = this.schedule(callback, delay);\n    this.ids.add(id);\n    return id;\n  }\n\n  protected schedule(callback: () => void, delay: number): number {\n    return window.setInterval(callback, delay);\n  }\n\n  protected cancel(id: number): void {\n    window.clearInterval(id);\n  }\n}\n","import { Controller } from \"@hotwired/stimulus\";\nimport { SafeTimeout } from \"../utils/safe_timeout\";\n\n/** Field controls this controller can persist. */\ntype PersistField = HTMLInputElement | HTMLTextAreaElement | HTMLSelectElement;\n\n/** Input types that carry no meaningful, restorable value. */\nconst NON_VALUE_TYPES = new Set([\"file\", \"submit\", \"reset\", \"button\", \"image\"]);\n/** localStorage key prefix so drafts never clobber unrelated app storage. */\nconst STORAGE_PREFIX = \"stimeo--persist:\";\n/** Separator for disambiguating repeated same-name fields (cannot occur in a real field name). */\nconst OCCURRENCE_SEP = \"\\u0000\";\n\n/**\n * Headless draft-autosave behavior: persists a form's field values to\n * `localStorage` and restores them across Turbo navigations and reloads (no APG\n * pattern; a state-holding utility). The Alpine `persist` equivalent.\n *\n * Markup contract (identifier: `stimeo--persist`):\n *   <form data-controller=\"stimeo--persist\"\n *         data-stimeo--persist-key-value=\"contact-draft\">\n *     <input name=\"name\">\n *     <textarea name=\"message\"></textarea>\n *   </form>\n *\n * On connect it restores any saved values under `key` (falling back to the\n * element's `id`), then debounce-saves on every input/change. Password fields (and\n * anything in `exclude`) are never written. A `clear()` action — or the `clearOn`\n * event (e.g. `submit`) — drops the draft. Restoring never moves focus.\n *\n * @remarks\n * Behavior only. State lives entirely in `localStorage` (no module-scope state), so\n * instances never interfere. The input listener and debounce timer are removed on\n * `disconnect()` (Turbo navigation included), where a pending save is flushed first\n * so an in-flight edit is not lost.\n */\nexport class PersistController extends Controller<HTMLElement> {\n  static override targets = [\"field\"];\n  static override values = {\n    key: { type: String, default: \"\" },\n    debounce: { type: Number, default: 400 },\n    exclude: { type: Array, default: [\"password\"] },\n    clearOn: { type: String, default: \"\" },\n  };\n  static actions = [\"clear\"] as const;\n  static events = [\"restore\", \"save\", \"clear\"] as const;\n\n  declare readonly fieldTargets: PersistField[];\n  declare readonly hasFieldTarget: boolean;\n\n  declare keyValue: string;\n  declare debounceValue: number;\n  declare excludeValue: string[];\n  declare clearOnValue: string;\n\n  readonly #timeouts = new SafeTimeout();\n  #saveId: number | null = null;\n\n  readonly #onInput = (): void => {\n    this.#scheduleSave();\n  };\n\n  readonly #onClearEvent = (): void => {\n    this.clear();\n  };\n\n  override connect(): void {\n    if (this.#storageKey === null) return;\n    this.#restore();\n    this.element.addEventListener(\"input\", this.#onInput);\n    this.element.addEventListener(\"change\", this.#onInput);\n    if (this.clearOnValue.length > 0) {\n      this.element.addEventListener(this.clearOnValue, this.#onClearEvent);\n    }\n  }\n\n  override disconnect(): void {\n    this.element.removeEventListener(\"input\", this.#onInput);\n    this.element.removeEventListener(\"change\", this.#onInput);\n    if (this.clearOnValue.length > 0) {\n      this.element.removeEventListener(this.clearOnValue, this.#onClearEvent);\n    }\n    // Flush a pending save so an in-flight edit survives a Turbo navigation.\n    if (this.#saveId !== null) {\n      this.#timeouts.clear(this.#saveId);\n      this.#saveId = null;\n      this.#write();\n    }\n    this.#timeouts.clearAll();\n  }\n\n  /** Drops the saved draft and clears the restored marker. */\n  clear(): void {\n    const key = this.#storageKey;\n    if (key === null) return;\n    if (this.#saveId !== null) {\n      this.#timeouts.clear(this.#saveId);\n      this.#saveId = null;\n    }\n    this.#removeItem(key);\n    this.element.removeAttribute(\"data-persist-restored\");\n    this.dispatch(\"clear\", { detail: { key: this.#logicalKey } });\n  }\n\n  /** Schedules a debounced save. */\n  #scheduleSave(): void {\n    if (this.#saveId !== null) this.#timeouts.clear(this.#saveId);\n    this.#saveId = this.#timeouts.set(() => {\n      this.#saveId = null;\n      this.#save();\n    }, this.debounceValue);\n  }\n\n  /** Writes the current values and emits `save`. */\n  #save(): void {\n    this.#write();\n    this.dispatch(\"save\", { detail: { key: this.#logicalKey } });\n  }\n\n  /** Serializes persistable fields and stores them under the storage key. */\n  #write(): void {\n    const key = this.#storageKey;\n    if (key === null) return;\n    const data: Record<string, unknown> = {};\n    for (const { field, key: fieldKey } of this.#fieldEntries()) {\n      if (field instanceof HTMLInputElement && field.type === \"checkbox\") {\n        data[fieldKey] = field.checked;\n      } else if (field instanceof HTMLInputElement && field.type === \"radio\") {\n        if (field.checked) data[fieldKey] = field.value;\n      } else if (field instanceof HTMLSelectElement && field.multiple) {\n        data[fieldKey] = Array.from(field.selectedOptions).map((o) => o.value);\n      } else {\n        data[fieldKey] = field.value;\n      }\n    }\n    this.#setItem(key, JSON.stringify(data));\n  }\n\n  /** Applies any saved values to the fields, without moving focus. */\n  #restore(): void {\n    const key = this.#storageKey;\n    if (key === null) return;\n    const raw = this.#getItem(key);\n    if (raw === null) return;\n    let data: Record<string, unknown>;\n    try {\n      data = JSON.parse(raw) as Record<string, unknown>;\n    } catch {\n      return;\n    }\n    let restoredAny = false;\n    for (const { field, key: fieldKey } of this.#fieldEntries()) {\n      if (!Object.hasOwn(data, fieldKey)) continue;\n      this.#applyValue(field, data[fieldKey]);\n      restoredAny = true;\n    }\n    if (restoredAny) {\n      this.element.setAttribute(\"data-persist-restored\", \"true\");\n      this.dispatch(\"restore\", { detail: { key: this.#logicalKey } });\n    }\n  }\n\n  /** Sets a single field's value from a stored entry. */\n  #applyValue(field: PersistField, value: unknown): void {\n    if (field instanceof HTMLInputElement && field.type === \"checkbox\") {\n      field.checked = Boolean(value);\n    } else if (field instanceof HTMLInputElement && field.type === \"radio\") {\n      field.checked = field.value === value;\n    } else if (field instanceof HTMLSelectElement && field.multiple) {\n      const selected = new Set(Array.isArray(value) ? value.map(String) : []);\n      for (const option of Array.from(field.options)) {\n        option.selected = selected.has(option.value);\n      }\n    } else {\n      field.value = String(value);\n    }\n  }\n\n  /**\n   * Persistable fields paired with a stable storage key. Uniquely-named fields key\n   * by their name (unchanged, backward-compatible). Repeated same-name fields\n   * (e.g. a `tags[]` checkbox group or array text inputs) are disambiguated by\n   * DOM-order occurrence — the first keeps its plain `name` (backward-\n   * compatible), later ones get a NUL-separated index suffix — so each is stored and\n   * restored individually instead of the last one clobbering the rest. Radios are\n   * the exception: a group intentionally shares one key (one value per name).\n   */\n  #fieldEntries(): Array<{ field: PersistField; key: string }> {\n    const entries: Array<{ field: PersistField; key: string }> = [];\n    const occurrence = new Map<string, number>();\n    for (const field of this.#fields()) {\n      const name = this.#keyOf(field);\n      if (name === null) continue;\n      if (field instanceof HTMLInputElement && field.type === \"radio\") {\n        entries.push({ field, key: name });\n        continue;\n      }\n      const seen = occurrence.get(name) ?? 0;\n      occurrence.set(name, seen + 1);\n      entries.push({ field, key: seen === 0 ? name : `${name}${OCCURRENCE_SEP}${seen}` });\n    }\n    return entries;\n  }\n\n  /** The fields to persist: `field` targets, or the element's named controls. */\n  #fields(): PersistField[] {\n    const candidates = this.hasFieldTarget\n      ? this.fieldTargets\n      : Array.from(this.element.querySelectorAll<PersistField>(\"input, textarea, select\"));\n    return candidates.filter((field) => this.#persistable(field));\n  }\n\n  /** Whether a field carries a restorable, non-excluded value. */\n  #persistable(field: PersistField): boolean {\n    if (this.#keyOf(field) === null) return false;\n    const type = field instanceof HTMLInputElement ? field.type : \"\";\n    if (NON_VALUE_TYPES.has(type)) return false;\n    if (this.excludeValue.includes(type)) return false;\n    if (field.name.length > 0 && this.excludeValue.includes(field.name)) return false;\n    return true;\n  }\n\n  /** A stable storage sub-key for a field (its name, else id). */\n  #keyOf(field: PersistField): string | null {\n    return field.name || field.id || null;\n  }\n\n  /** The logical key (key Value or element id), or null when neither is set. */\n  get #logicalKey(): string | null {\n    const key = this.keyValue || this.element.id;\n    return key.length > 0 ? key : null;\n  }\n\n  /** The prefixed localStorage key, or null when persistence is disabled. */\n  get #storageKey(): string | null {\n    const logical = this.#logicalKey;\n    return logical === null ? null : `${STORAGE_PREFIX}${logical}`;\n  }\n\n  #getItem(key: string): string | null {\n    try {\n      return window.localStorage.getItem(key);\n    } catch {\n      return null;\n    }\n  }\n\n  #setItem(key: string, value: string): void {\n    try {\n      window.localStorage.setItem(key, value);\n    } catch {\n      // Storage full or unavailable (private mode): persistence is best-effort.\n    }\n  }\n\n  #removeItem(key: string): void {\n    try {\n      window.localStorage.removeItem(key);\n    } catch {\n      // Ignore: nothing to clear if storage is unavailable.\n    }\n  }\n}\n"]}

package/dist/controllers/popover_controller.d.ts

@@ -0,0 +1,63 @@
+import { Controller } from '@hotwired/stimulus';
+
+/**
+ * Headless, accessible **non-modal popover** behavior.
+ *
+ * Markup contract (identifier: `stimeo--popover`):
+ *   <div data-controller="stimeo--popover">
+ *     <button data-stimeo--popover-target="trigger"
+ *             aria-haspopup="dialog" aria-expanded="false" aria-controls="pop"
+ *             data-action="click->stimeo--popover#toggle">Edit profile</button>
+ *     <div id="pop" data-stimeo--popover-target="panel"
+ *          role="dialog" aria-label="Edit profile" hidden>…</div>
+ *   </div>
+ *
+ * Implements the WAI-ARIA APG **Dialog** pattern run *non-modally* (no
+ * `aria-modal`, no focus trap, no `inert`/scroll lock). The background stays
+ * fully interactive; this is the modeless counterpart to `stimeo--dialog`. For
+ * a roving `role="menu"` of commands use `stimeo--menu`; for decorative-only
+ * text use `stimeo--tooltip`.
+ *
+ * @remarks
+ * Behavior only — static placement is the consumer's CSS, and dynamic
+ * edge-collision avoidance is delegated to the opt-in `stimeo-ui/positioning`
+ * module (this controller never imports it, preserving the zero-dep core). State
+ * is exposed via the trigger's `aria-expanded` and the panel's `hidden`.
+ *
+ * Behavior provided:
+ * - Click the trigger to toggle (`aria-expanded` + `hidden` reflect state).
+ * - On open, focus moves to the first focusable element inside the panel (or the
+ *   panel itself if it has none).
+ * - `Escape` closes and restores focus to the trigger.
+ * - An outside click (anywhere off the controller element) closes and restores
+ *   focus to the trigger.
+ * - Because it is modeless, focus is *not* trapped: when `Tab` moves focus out of
+ *   the panel it closes (detected via `focusout`) without yanking focus back, so
+ *   the natural tab destination is preserved.
+ */
+declare class PopoverController extends Controller<HTMLElement> {
+    #private;
+    static targets: string[];
+    static actions: readonly ["close", "open", "toggle"];
+    readonly triggerTarget: HTMLButtonElement;
+    readonly panelTarget: HTMLElement;
+    readonly hasTriggerTarget: boolean;
+    readonly hasPanelTarget: boolean;
+    /** Starts closed and registers the document-level dismissal listeners. */
+    connect(): void;
+    /**
+     * Removes the document-level listeners registered in {@link connect}, plus the
+     * panel's `focusout` listener if the popover is torn down while open (e.g. a
+     * Turbo navigation). `removeEventListener` is a no-op when it was never added,
+     * so this is safe in the closed state too — no listener outlives the element.
+     */
+    disconnect(): void;
+    /** Toggles the popover. Bound via `data-action` (click on the trigger). */
+    toggle(): void;
+    /** Opens the panel, reflects state, and moves focus inside it. */
+    open(): void;
+    /** Closes the panel and reflects the collapsed state. Bound via `data-action`. */
+    close(): void;
+}
+
+export { PopoverController };