stimeo-ui 0.4.0 → 0.6.0

package/dist/controllers/password_strength_controller.js

@@ -55,8 +55,23 @@ var SafeTimeout = class extends TimerRegistry {
   }
 };
 
+// src/utils/string_list.ts
+function parseStringList(raw, fallback = []) {
+  const text = raw.trim();
+  if (text.length === 0) return [...fallback];
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    return [...fallback];
+  }
+  if (!Array.isArray(parsed)) return [...fallback];
+  return parsed.filter((entry) => typeof entry === "string");
+}
+
 // src/controllers/password_strength_controller.ts
 var CLASS_PATTERNS = [/[a-z]/, /[A-Z]/, /[0-9]/, /[^A-Za-z0-9]/];
+var DEFAULT_LEVELS = ["weak", "fair", "good", "strong"];
 var LENGTH_MILESTONES = [8, 12, 16];
 var MAX_POINTS = LENGTH_MILESTONES.length + (CLASS_PATTERNS.length - 1);
 var STRENGTH_BANDS = ["weak", "fair", "good", "strong"];
@@ -64,7 +79,10 @@ var PasswordStrengthController = class _PasswordStrengthController extends Contr
   static targets = ["input", "meter", "label"];
   static values = {
     minScore: { type: Number, default: 0 },
-    levels: { type: Array, default: ["weak", "fair", "good", "strong"] }
+    // A JSON list read through `parseStringList` rather than Stimulus's `Array`
+    // type: that reader throws out of the value observer before any callback
+    // runs, so one malformed attribute would stop the meter connecting.
+    levels: { type: String, default: "" }
   };
   static actions = ["evaluate"];
   static events = ["change"];
@@ -90,7 +108,7 @@ var PasswordStrengthController = class _PasswordStrengthController extends Contr
    */
   #update(options = {}) {
     const password = this.hasInputTarget ? this.inputTarget.value : "";
-    const labels = this.levelsValue;
+    const labels = parseStringList(this.levelsValue, DEFAULT_LEVELS);
     const max = labels.length;
     const score = this.#score(password, max);
     const label = score > 0 ? labels[score - 1] ?? "" : "";
@@ -126,7 +144,7 @@ var PasswordStrengthController = class _PasswordStrengthController extends Contr
     this.#toggle("data-strength", band, band.length > 0);
     this.#toggle("data-below-min", "true", score > 0 && score < this.minScoreValue);
     const ratio = max > 0 ? score / max : 0;
-    this.element.style.setProperty("--stimeo-password-strength", String(ratio));
+    this.element.style.setProperty("--stimeo--password-strength", String(ratio));
   }
   #writeLabel(label) {
     if (this.hasLabelTarget) this.labelTarget.textContent = label;

package/dist/controllers/password_strength_controller.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utils/safe_timeout.ts","../../src/controllers/password_strength_controller.ts"],"names":[],"mappings":";;;;;AAwBA,IAAe,gBAAf,MAA6B;AAAA;AAAA,EAER,GAAA,uBAAU,GAAA,EAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAczC,MAAM,EAAA,EAAkB;AACtB,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,EAAE,CAAA,EAAG;AACvB,MAAA,IAAA,CAAK,OAAO,EAAE,CAAA;AAAA,IAChB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAA,GAAiB;AACf,IAAA,KAAA,MAAW,EAAA,IAAM,KAAK,GAAA,EAAK;AACzB,MAAA,IAAA,CAAK,OAAO,EAAE,CAAA;AAAA,IAChB;AACA,IAAA,IAAA,CAAK,IAAI,KAAA,EAAM;AAAA,EACjB;AAAA;AAAA,EAGA,IAAI,IAAA,GAAe;AACjB,IAAA,OAAO,KAAK,GAAA,CAAI,IAAA;AAAA,EAClB;AACF,CAAA;AAmBO,IAAM,WAAA,GAAN,cAA0B,aAAA,CAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO7C,GAAA,CAAI,UAAsB,KAAA,EAAuB;AAC/C,IAAA,MAAM,EAAA,GAAK,IAAA,CAAK,QAAA,CAAS,MAAM;AAC7B,MAAA,IAAA,CAAK,GAAA,CAAI,OAAO,EAAE,CAAA;AAClB,MAAA,QAAA,EAAS;AAAA,IACX,GAAG,KAAK,CAAA;AACR,IAAA,IAAA,CAAK,GAAA,CAAI,IAAI,EAAE,CAAA;AACf,IAAA,OAAO,EAAA;AAAA,EACT;AAAA,EAEU,QAAA,CAAS,UAAsB,KAAA,EAAuB;AAC9D,IAAA,OAAO,MAAA,CAAO,UAAA,CAAW,QAAA,EAAU,KAAK,CAAA;AAAA,EAC1C;AAAA,EAEU,OAAO,EAAA,EAAkB;AACjC,IAAA,MAAA,CAAO,aAAa,EAAE,CAAA;AAAA,EACxB;AACF,CAAA;;;ACnGA,IAAM,cAAA,GAAoC,CAAC,OAAA,EAAS,OAAA,EAAS,SAAS,cAAc,CAAA;AAGpF,IAAM,iBAAA,GAAuC,CAAC,CAAA,EAAG,EAAA,EAAI,EAAE,CAAA;AAGvD,IAAM,UAAA,GAAa,iBAAA,CAAkB,MAAA,IAAU,cAAA,CAAe,MAAA,GAAS,CAAA,CAAA;AAQvE,IAAM,cAAA,GAAiB,CAAC,MAAA,EAAQ,MAAA,EAAQ,QAAQ,QAAQ,CAAA;AAqCjD,IAAM,0BAAA,GAAN,MAAM,2BAAA,SAAmC,UAAA,CAAwB;AAAA,EACtE,OAAgB,OAAA,GAAU,CAAC,OAAA,EAAS,SAAS,OAAO,CAAA;AAAA,EACpD,OAAgB,MAAA,GAAS;AAAA,IACvB,QAAA,EAAU,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,CAAA,EAAE;AAAA,IACrC,MAAA,EAAQ,EAAE,IAAA,EAAM,KAAA,EAAO,OAAA,EAAS,CAAC,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAQ,QAAQ,CAAA;AAAE,GACrE;AAAA,EACA,OAAO,OAAA,GAAU,CAAC,UAAU,CAAA;AAAA,EAC5B,OAAO,MAAA,GAAS,CAAC,QAAQ,CAAA;AAAA;AAAA,EAazB,OAAgB,cAAA,GAAiB,GAAA;AAAA,EAExB,OAAA,GAAU,IAAI,WAAA,EAAY;AAAA,EACnC,WAAA,GAA6B,IAAA;AAAA,EAEpB,OAAA,GAAgB;AAGvB,IAAA,IAAA,CAAK,OAAA,CAAQ,EAAE,QAAA,EAAU,KAAA,EAAO,CAAA;AAAA,EAClC;AAAA,EAES,UAAA,GAAmB;AAC1B,IAAA,IAAA,CAAK,QAAQ,QAAA,EAAS;AACtB,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,EACrB;AAAA;AAAA,EAGA,QAAA,GAAiB;AACf,IAAA,IAAA,CAAK,OAAA,EAAQ;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAA,CAAQ,OAAA,GAAkC,EAAC,EAAS;AAClD,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,cAAA,GAAiB,IAAA,CAAK,YAAY,KAAA,GAAQ,EAAA;AAChE,IAAA,MAAM,SAAS,IAAA,CAAK,WAAA;AACpB,IAAA,MAAM,MAAM,MAAA,CAAO,MAAA;AACnB,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,MAAA,CAAO,QAAA,EAAU,GAAG,CAAA;AACvC,IAAA,MAAM,QAAQ,KAAA,GAAQ,CAAA,GAAK,OAAO,KAAA,GAAQ,CAAC,KAAK,EAAA,GAAM,EAAA;AAEtD,IAAA,IAAA,CAAK,aAAA,CAAc,OAAO,GAAG,CAAA;AAC7B,IAAA,IAAA,CAAK,YAAA,CAAa,OAAO,GAAG,CAAA;AAE5B,IAAA,IAAI,OAAA,CAAQ,aAAa,KAAA,EAAO;AAG9B,MAAA,IAAA,CAAK,YAAY,KAAK,CAAA;AACtB,MAAA;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,SAAS,QAAA,EAAU;AAAA,MACtB,MAAA,EAAQ,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,GAAA,EAAK,QAAA,EAAU,KAAA,GAAQ,CAAA,IAAK,KAAA,IAAS,IAAA,CAAK,aAAA;AAAc,KACxF,CAAA;AAED,IAAA,IAAI,KAAK,WAAA,KAAgB,IAAA,OAAW,OAAA,CAAQ,KAAA,CAAM,KAAK,WAAW,CAAA;AAClE,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,MAAM;AACxC,MAAA,IAAA,CAAK,YAAY,KAAK,CAAA;AACtB,MAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,IACrB,CAAA,EAAG,4BAA2B,cAAc,CAAA;AAAA,EAC9C;AAAA;AAAA,EAGA,aAAA,CAAc,OAAe,GAAA,EAAmB;AAC9C,IAAA,IAAI,CAAC,KAAK,cAAA,EAAgB;AAC1B,IAAA,IAAA,CAAK,WAAA,CAAY,YAAA,CAAa,eAAA,EAAiB,GAAG,CAAA;AAClD,IAAA,IAAA,CAAK,WAAA,CAAY,YAAA,CAAa,eAAA,EAAiB,MAAA,CAAO,GAAG,CAAC,CAAA;AAC1D,IAAA,IAAA,CAAK,WAAA,CAAY,YAAA,CAAa,eAAA,EAAiB,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YAAA,CAAa,OAAe,GAAA,EAAmB;AAC7C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,KAAA,EAAO,GAAG,CAAA;AAClC,IAAA,IAAA,CAAK,OAAA,CAAQ,eAAA,EAAiB,IAAA,EAAM,IAAA,CAAK,SAAS,CAAC,CAAA;AAKnD,IAAA,IAAA,CAAK,QAAQ,gBAAA,EAAkB,MAAA,EAAQ,QAAQ,CAAA,IAAK,KAAA,GAAQ,KAAK,aAAa,CAAA;AAC9E,IAAA,MAAM,KAAA,GAAQ,GAAA,GAAM,CAAA,GAAI,KAAA,GAAQ,GAAA,GAAM,CAAA;AACtC,IAAA,IAAA,CAAK,QAAQ,KAAA,CAAM,WAAA,CAAY,4BAAA,EAA8B,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,EAC5E;AAAA,EAEA,YAAY,KAAA,EAAqB;AAC/B,IAAA,IAAI,IAAA,CAAK,cAAA,EAAgB,IAAA,CAAK,WAAA,CAAY,WAAA,GAAc,KAAA;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,KAAA,CAAM,OAAe,GAAA,EAAqB;AACxC,IAAA,IAAI,KAAA,IAAS,CAAA,IAAK,GAAA,IAAO,CAAA,EAAG,OAAO,EAAA;AACnC,IAAA,MAAM,QAAQ,IAAA,CAAK,IAAA,CAAM,QAAQ,GAAA,GAAO,cAAA,CAAe,MAAM,CAAA,GAAI,CAAA;AACjE,IAAA,OAAO,cAAA,CAAe,IAAA,CAAK,GAAA,CAAI,cAAA,CAAe,MAAA,GAAS,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,KAAK,CAAC,CAAC,CAAA,IAAK,EAAA;AAAA,EACpF;AAAA;AAAA,EAGA,OAAA,CAAQ,IAAA,EAAc,KAAA,EAAe,EAAA,EAAmB;AACtD,IAAA,IAAI,EAAA,EAAI;AACN,MAAA,IAAA,CAAK,OAAA,CAAQ,YAAA,CAAa,IAAA,EAAM,KAAK,CAAA;AAAA,IACvC,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,OAAA,CAAQ,gBAAgB,IAAI,CAAA;AAAA,IACnC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAA,CAAO,UAAkB,GAAA,EAAqB;AAC5C,IAAA,IAAI,QAAA,CAAS,MAAA,KAAW,CAAA,IAAK,GAAA,KAAQ,GAAG,OAAO,CAAA;AAE/C,IAAA,IAAI,MAAA,GAAS,CAAA;AACb,IAAA,KAAA,MAAW,aAAa,iBAAA,EAAmB;AACzC,MAAA,IAAI,QAAA,CAAS,MAAA,IAAU,SAAA,EAAW,MAAA,IAAU,CAAA;AAAA,IAC9C;AAEA,IAAA,MAAA,IAAU,cAAA,CAAe,OAAO,CAAC,EAAA,KAAO,GAAG,IAAA,CAAK,QAAQ,CAAC,CAAA,CAAE,MAAA,GAAS,CAAA;AAEpE,IAAA,IAAI,IAAI,GAAA,CAAI,QAAQ,CAAA,CAAE,IAAA,IAAQ,GAAG,MAAA,GAAS,CAAA;AAE1C,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,CAAO,MAAA,GAAS,aAAc,GAAG,CAAA;AACvD,IAAA,OAAO,KAAK,GAAA,CAAI,GAAA,EAAK,KAAK,GAAA,CAAI,CAAA,EAAG,QAAQ,CAAC,CAAA;AAAA,EAC5C;AACF","file":"password_strength_controller.js","sourcesContent":["/**\n * Self-cleaning timer registries shared by Stimeo controllers.\n *\n * Stimulus controllers frequently schedule `setTimeout` / `setInterval` work\n * (auto-dismiss, debouncing, polling). When the element leaves the DOM — a\n * Turbo Drive navigation, a Turbo Stream replacement, or any `disconnect()` —\n * orphaned timers keep firing against a detached controller, leaking memory and\n * mutating stale state. {@link SafeTimeout} and {@link SafeInterval} track every\n * timer they create so a single {@link TimerRegistry.clearAll | clearAll()} call\n * in `disconnect()` tears them all down.\n *\n * These are intentionally low-level primitives: they own *registration and\n * cleanup only*. Higher-level policy (pause/resume, remaining-time accounting)\n * stays in the individual controllers so per-widget semantics are not flattened\n * into a lowest-common-denominator helper.\n */\n\n/**\n * Shared registry bookkeeping for the timeout/interval variants.\n *\n * Subclasses provide the scheduling primitive ({@link schedule}) and its matching\n * canceller ({@link cancel}); this base owns the set of live ids plus the\n * per-id and bulk teardown shared by both.\n */\nabstract class TimerRegistry {\n  /** Live timer ids that have not yet been cleared (or, for timeouts, fired). */\n  protected readonly ids = new Set<number>();\n\n  /** Schedules the underlying platform timer and returns its id. */\n  protected abstract schedule(callback: () => void, delay: number): number;\n\n  /** Cancels the underlying platform timer for `id`. */\n  protected abstract cancel(id: number): void;\n\n  /**\n   * Cancels a single tracked timer.\n   *\n   * No-ops if the id is unknown (already cleared, fired, or never owned by this\n   * registry), so callers can clear defensively without guarding.\n   */\n  clear(id: number): void {\n    if (this.ids.delete(id)) {\n      this.cancel(id);\n    }\n  }\n\n  /**\n   * Cancels every tracked timer. Call this from a controller's `disconnect()`\n   * to guarantee no timer outlives the element.\n   */\n  clearAll(): void {\n    for (const id of this.ids) {\n      this.cancel(id);\n    }\n    this.ids.clear();\n  }\n\n  /** Number of timers currently tracked (pending). */\n  get size(): number {\n    return this.ids.size;\n  }\n}\n\n/**\n * `setTimeout` wrapper that auto-forgets each timer once it fires and supports\n * bulk teardown on disconnect.\n *\n * @example\n * ```ts\n * #timers = new SafeTimeout();\n *\n * connect() {\n *   this.#timers.set(() => this.dismiss(), 5000);\n * }\n *\n * disconnect() {\n *   this.#timers.clearAll();\n * }\n * ```\n */\nexport class SafeTimeout extends TimerRegistry {\n  /**\n   * Schedules `callback` after `delay` ms and returns the timer id.\n   *\n   * The id is removed from the registry automatically when the timeout fires,\n   * so {@link TimerRegistry.size | size} reflects only still-pending timers.\n   */\n  set(callback: () => void, delay: number): number {\n    const id = this.schedule(() => {\n      this.ids.delete(id);\n      callback();\n    }, delay);\n    this.ids.add(id);\n    return id;\n  }\n\n  protected schedule(callback: () => void, delay: number): number {\n    return window.setTimeout(callback, delay);\n  }\n\n  protected cancel(id: number): void {\n    window.clearTimeout(id);\n  }\n}\n\n/**\n * `setInterval` wrapper that tracks every interval for bulk teardown on\n * disconnect. Unlike {@link SafeTimeout}, intervals are retained until they are\n * explicitly cleared because they fire repeatedly.\n *\n * @example\n * ```ts\n * #intervals = new SafeInterval();\n *\n * connect() {\n *   this.#intervals.set(() => this.tick(), 1000);\n * }\n *\n * disconnect() {\n *   this.#intervals.clearAll();\n * }\n * ```\n */\nexport class SafeInterval extends TimerRegistry {\n  /** Schedules a repeating `callback` every `delay` ms and returns the timer id. */\n  set(callback: () => void, delay: number): number {\n    const id = this.schedule(callback, delay);\n    this.ids.add(id);\n    return id;\n  }\n\n  protected schedule(callback: () => void, delay: number): number {\n    return window.setInterval(callback, delay);\n  }\n\n  protected cancel(id: number): void {\n    window.clearInterval(id);\n  }\n}\n","import { Controller } from \"@hotwired/stimulus\";\nimport { SafeTimeout } from \"../utils/safe_timeout\";\n\n/** Character classes that contribute to password variety (one point each beyond the first). */\nconst CLASS_PATTERNS: readonly RegExp[] = [/[a-z]/, /[A-Z]/, /[0-9]/, /[^A-Za-z0-9]/];\n\n/** Length milestones that each add a strength point. */\nconst LENGTH_MILESTONES: readonly number[] = [8, 12, 16];\n\n/** Upper bound of the raw heuristic points, used to bucket into the level scale. */\nconst MAX_POINTS = LENGTH_MILESTONES.length + (CLASS_PATTERNS.length - 1);\n\n/**\n * Fixed, locale-independent styling bands `data-strength` is drawn from. Kept\n * separate from the (localizable) `levels` labels so `data-strength` stays a\n * stable CSS hook (e.g. `[data-strength=\"weak\"]`) even when `levels` is\n * translated. Ascending: weakest → strongest.\n */\nconst STRENGTH_BANDS = [\"weak\", \"fair\", \"good\", \"strong\"] as const;\n\n/**\n * Headless password-strength behavior: scores the field with a lightweight\n * zero-dependency heuristic and drives a meter plus an `aria-live` label. No\n * dedicated APG pattern; the meter display follows {@link MeterController}.\n *\n * Markup contract (identifier: `stimeo--password-strength`):\n *   <div data-controller=\"stimeo--password-strength\">\n *     <input type=\"password\" data-stimeo--password-strength-target=\"input\"\n *            data-action=\"input->stimeo--password-strength#evaluate\" aria-describedby=\"pw\">\n *     <div data-stimeo--password-strength-target=\"meter\" role=\"meter\"\n *          aria-valuemin=\"0\" aria-valuemax=\"4\"></div>\n *     <span id=\"pw\" data-stimeo--password-strength-target=\"label\" aria-live=\"polite\"></span>\n *   </div>\n *\n * On each input the controller scores the password (length milestones + character\n * variety, capped for trivial repetition), syncs the meter's `aria-valuenow`,\n * reflects a stable band on `data-strength`, the `0–1` fill on\n * `--stimeo-password-strength`, and (when `minScore` is set) `data-below-min`,\n * and writes the level label into the label target.\n *\n * @remarks\n * Behavior only — the meter/bar look is the consumer's, keyed off the data hooks.\n * `data-strength` is one of the fixed {@link STRENGTH_BANDS} (not the localizable\n * `levels` text), so consumers can style by it regardless of locale; the visible\n * label receives the matching `levels` entry. Non-text state (meter ARIA,\n * `data-strength`/`data-below-min`, the custom property, and the `change` event)\n * updates **immediately** on every keystroke so styling and consumers stay\n * responsive, while the label — in an `aria-live=\"polite\"` region — is written on\n * a short debounce so a screen reader is not flooded mid-typing. The score is a\n * pure function of the input value (no module-scope state), so `connect()`\n * re-evaluates idempotently after a Turbo cache restore; the debounce timer is\n * owned by {@link SafeTimeout} and torn down on `disconnect()` (Turbo included).\n * The estimator is intentionally not a dictionary/zxcvbn-grade one (kept\n * zero-dep); swap a stronger one in on the consumer side if needed.\n */\nexport class PasswordStrengthController extends Controller<HTMLElement> {\n  static override targets = [\"input\", \"meter\", \"label\"];\n  static override values = {\n    minScore: { type: Number, default: 0 },\n    levels: { type: Array, default: [\"weak\", \"fair\", \"good\", \"strong\"] },\n  };\n  static actions = [\"evaluate\"] as const;\n  static events = [\"change\"] as const;\n\n  declare readonly inputTarget: HTMLInputElement;\n  declare readonly meterTarget: HTMLElement;\n  declare readonly labelTarget: HTMLElement;\n  declare readonly hasInputTarget: boolean;\n  declare readonly hasMeterTarget: boolean;\n  declare readonly hasLabelTarget: boolean;\n\n  declare minScoreValue: number;\n  declare levelsValue: string[];\n\n  /** Delay (ms) before the polite live-region label is written, to throttle SR flooding. */\n  static readonly #announceDelay = 200;\n\n  readonly #timers = new SafeTimeout();\n  #announceId: number | null = null;\n\n  override connect(): void {\n    // Reflect the current value synchronously (no announce): an autofilled or\n    // cache-restored field shows the right strength without queuing an SR message.\n    this.#update({ announce: false });\n  }\n\n  override disconnect(): void {\n    this.#timers.clearAll();\n    this.#announceId = null;\n  }\n\n  /** Re-evaluates strength from the input. Bound via `data-action` (`input`). */\n  evaluate(): void {\n    this.#update();\n  }\n\n  /**\n   * Recomputes the strength. The meter ARIA, data hooks, the custom property and\n   * the `change` event apply immediately; the live-region label text is debounced\n   * unless `announce` is `false` (the initial render).\n   */\n  #update(options: { announce?: boolean } = {}): void {\n    const password = this.hasInputTarget ? this.inputTarget.value : \"\";\n    const labels = this.levelsValue;\n    const max = labels.length;\n    const score = this.#score(password, max);\n    const label = score > 0 ? (labels[score - 1] ?? \"\") : \"\";\n\n    this.#reflectMeter(score, max);\n    this.#reflectRoot(score, max);\n\n    if (options.announce === false) {\n      // Initial render (connect / cache-restore): reflect without a change event\n      // or a queued screen-reader announcement.\n      this.#writeLabel(label);\n      return;\n    }\n\n    this.dispatch(\"change\", {\n      detail: { score, level: label, max, meetsMin: score > 0 && score >= this.minScoreValue },\n    });\n\n    if (this.#announceId !== null) this.#timers.clear(this.#announceId);\n    this.#announceId = this.#timers.set(() => {\n      this.#writeLabel(label);\n      this.#announceId = null;\n    }, PasswordStrengthController.#announceDelay);\n  }\n\n  /** Syncs the meter target's ARIA value attributes (`0..levels.length`). */\n  #reflectMeter(score: number, max: number): void {\n    if (!this.hasMeterTarget) return;\n    this.meterTarget.setAttribute(\"aria-valuemin\", \"0\");\n    this.meterTarget.setAttribute(\"aria-valuemax\", String(max));\n    this.meterTarget.setAttribute(\"aria-valuenow\", String(score));\n  }\n\n  /**\n   * Reflects the level onto the root: the stable `data-strength` band (absent when\n   * empty), the `data-below-min` hook when the score is under `minScore`, and the\n   * `0–1` fill the consumer's CSS turns into the bar width.\n   */\n  #reflectRoot(score: number, max: number): void {\n    const band = this.#band(score, max);\n    this.#toggle(\"data-strength\", band, band.length > 0);\n    // Empty/pristine input (`score === 0`) is never \"below min\": that would let CSS\n    // flag an untouched field as failing. Mirror the `change` event's `meetsMin`\n    // (`score > 0 && …`) so the hook only marks a *non-empty* password under the\n    // threshold. `minScore` defaults to 0, leaving the hook inert until set positive.\n    this.#toggle(\"data-below-min\", \"true\", score > 0 && score < this.minScoreValue);\n    const ratio = max > 0 ? score / max : 0;\n    this.element.style.setProperty(\"--stimeo-password-strength\", String(ratio));\n  }\n\n  #writeLabel(label: string): void {\n    if (this.hasLabelTarget) this.labelTarget.textContent = label;\n  }\n\n  /**\n   * Locale-independent styling band (one of {@link STRENGTH_BANDS}) for `score`\n   * out of `max`. Empty input → `\"\"`. Quantizes the `score/max` ratio into the\n   * four fixed bands, so a non-default level count still maps onto a stable hook.\n   */\n  #band(score: number, max: number): string {\n    if (score <= 0 || max <= 0) return \"\";\n    const index = Math.ceil((score / max) * STRENGTH_BANDS.length) - 1;\n    return STRENGTH_BANDS[Math.min(STRENGTH_BANDS.length - 1, Math.max(0, index))] ?? \"\";\n  }\n\n  /** Sets `name` to `value` when `on`, else removes it (value/presence data hook). */\n  #toggle(name: string, value: string, on: boolean): void {\n    if (on) {\n      this.element.setAttribute(name, value);\n    } else {\n      this.element.removeAttribute(name);\n    }\n  }\n\n  /**\n   * Lightweight zero-dependency strength heuristic returning an integer in\n   * `[0, max]` (`max` = number of levels). Empty input is `0` (no level); any\n   * non-empty password is at least `1`. Points accrue from length milestones and\n   * character-class variety, then bucket into the level scale. A tiny alphabet\n   * (≤ 2 distinct characters, e.g. \"aaaa\") is capped as the weakest, so length\n   * alone cannot mask trivial repetition.\n   */\n  #score(password: string, max: number): number {\n    if (password.length === 0 || max === 0) return 0;\n\n    let points = 0;\n    for (const milestone of LENGTH_MILESTONES) {\n      if (password.length >= milestone) points += 1;\n    }\n    // The first present character class is free; each additional one adds a point.\n    points += CLASS_PATTERNS.filter((re) => re.test(password)).length - 1;\n\n    if (new Set(password).size <= 2) points = 0; // trivial repetition → weakest\n\n    const bucketed = Math.round((points / MAX_POINTS) * max);\n    return Math.min(max, Math.max(1, bucketed));\n  }\n}\n"]}
+{"version":3,"sources":["../../src/utils/safe_timeout.ts","../../src/utils/string_list.ts","../../src/controllers/password_strength_controller.ts"],"names":[],"mappings":";;;;;AAwBA,IAAe,gBAAf,MAA6B;AAAA;AAAA,EAER,GAAA,uBAAU,GAAA,EAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAczC,MAAM,EAAA,EAAkB;AACtB,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,EAAE,CAAA,EAAG;AACvB,MAAA,IAAA,CAAK,OAAO,EAAE,CAAA;AAAA,IAChB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAA,GAAiB;AACf,IAAA,KAAA,MAAW,EAAA,IAAM,KAAK,GAAA,EAAK;AACzB,MAAA,IAAA,CAAK,OAAO,EAAE,CAAA;AAAA,IAChB;AACA,IAAA,IAAA,CAAK,IAAI,KAAA,EAAM;AAAA,EACjB;AAAA;AAAA,EAGA,IAAI,IAAA,GAAe;AACjB,IAAA,OAAO,KAAK,GAAA,CAAI,IAAA;AAAA,EAClB;AACF,CAAA;AAmBO,IAAM,WAAA,GAAN,cAA0B,aAAA,CAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO7C,GAAA,CAAI,UAAsB,KAAA,EAAuB;AAC/C,IAAA,MAAM,EAAA,GAAK,IAAA,CAAK,QAAA,CAAS,MAAM;AAC7B,MAAA,IAAA,CAAK,GAAA,CAAI,OAAO,EAAE,CAAA;AAClB,MAAA,QAAA,EAAS;AAAA,IACX,GAAG,KAAK,CAAA;AACR,IAAA,IAAA,CAAK,GAAA,CAAI,IAAI,EAAE,CAAA;AACf,IAAA,OAAO,EAAA;AAAA,EACT;AAAA,EAEU,QAAA,CAAS,UAAsB,KAAA,EAAuB;AAC9D,IAAA,OAAO,MAAA,CAAO,UAAA,CAAW,QAAA,EAAU,KAAK,CAAA;AAAA,EAC1C;AAAA,EAEU,OAAO,EAAA,EAAkB;AACjC,IAAA,MAAA,CAAO,aAAa,EAAE,CAAA;AAAA,EACxB;AACF,CAAA;;;ACxEO,SAAS,eAAA,CAAgB,GAAA,EAAa,QAAA,GAA8B,EAAC,EAAa;AAIvF,EAAA,MAAM,IAAA,GAAO,IAAI,IAAA,EAAK;AACtB,EAAA,IAAI,KAAK,MAAA,KAAW,CAAA,EAAG,OAAO,CAAC,GAAG,QAAQ,CAAA;AAE1C,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EAC1B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,CAAC,GAAG,QAAQ,CAAA;AAAA,EACrB;AAEA,EAAA,IAAI,CAAC,MAAM,OAAA,CAAQ,MAAM,GAAG,OAAO,CAAC,GAAG,QAAQ,CAAA;AAC/C,EAAA,OAAO,OAAO,MAAA,CAAO,CAAC,KAAA,KAA2B,OAAO,UAAU,QAAQ,CAAA;AAC5E;;;AC1CA,IAAM,cAAA,GAAoC,CAAC,OAAA,EAAS,OAAA,EAAS,SAAS,cAAc,CAAA;AAGpF,IAAM,cAAA,GAAiB,CAAC,MAAA,EAAQ,MAAA,EAAQ,QAAQ,QAAQ,CAAA;AAGxD,IAAM,iBAAA,GAAuC,CAAC,CAAA,EAAG,EAAA,EAAI,EAAE,CAAA;AAGvD,IAAM,UAAA,GAAa,iBAAA,CAAkB,MAAA,IAAU,cAAA,CAAe,MAAA,GAAS,CAAA,CAAA;AAQvE,IAAM,cAAA,GAAiB,CAAC,MAAA,EAAQ,MAAA,EAAQ,QAAQ,QAAQ,CAAA;AAqCjD,IAAM,0BAAA,GAAN,MAAM,2BAAA,SAAmC,UAAA,CAAwB;AAAA,EACtE,OAAgB,OAAA,GAAU,CAAC,OAAA,EAAS,SAAS,OAAO,CAAA;AAAA,EACpD,OAAgB,MAAA,GAAS;AAAA,IACvB,QAAA,EAAU,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,CAAA,EAAE;AAAA;AAAA;AAAA;AAAA,IAIrC,MAAA,EAAQ,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,EAAA;AAAG,GACtC;AAAA,EACA,OAAO,OAAA,GAAU,CAAC,UAAU,CAAA;AAAA,EAC5B,OAAO,MAAA,GAAS,CAAC,QAAQ,CAAA;AAAA;AAAA,EAazB,OAAgB,cAAA,GAAiB,GAAA;AAAA,EAExB,OAAA,GAAU,IAAI,WAAA,EAAY;AAAA,EACnC,WAAA,GAA6B,IAAA;AAAA,EAEpB,OAAA,GAAgB;AAGvB,IAAA,IAAA,CAAK,OAAA,CAAQ,EAAE,QAAA,EAAU,KAAA,EAAO,CAAA;AAAA,EAClC;AAAA,EAES,UAAA,GAAmB;AAC1B,IAAA,IAAA,CAAK,QAAQ,QAAA,EAAS;AACtB,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,EACrB;AAAA;AAAA,EAGA,QAAA,GAAiB;AACf,IAAA,IAAA,CAAK,OAAA,EAAQ;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAA,CAAQ,OAAA,GAAkC,EAAC,EAAS;AAClD,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,cAAA,GAAiB,IAAA,CAAK,YAAY,KAAA,GAAQ,EAAA;AAChE,IAAA,MAAM,MAAA,GAAS,eAAA,CAAgB,IAAA,CAAK,WAAA,EAAa,cAAc,CAAA;AAC/D,IAAA,MAAM,MAAM,MAAA,CAAO,MAAA;AACnB,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,MAAA,CAAO,QAAA,EAAU,GAAG,CAAA;AACvC,IAAA,MAAM,QAAQ,KAAA,GAAQ,CAAA,GAAK,OAAO,KAAA,GAAQ,CAAC,KAAK,EAAA,GAAM,EAAA;AAEtD,IAAA,IAAA,CAAK,aAAA,CAAc,OAAO,GAAG,CAAA;AAC7B,IAAA,IAAA,CAAK,YAAA,CAAa,OAAO,GAAG,CAAA;AAE5B,IAAA,IAAI,OAAA,CAAQ,aAAa,KAAA,EAAO;AAG9B,MAAA,IAAA,CAAK,YAAY,KAAK,CAAA;AACtB,MAAA;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,SAAS,QAAA,EAAU;AAAA,MACtB,MAAA,EAAQ,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,GAAA,EAAK,QAAA,EAAU,KAAA,GAAQ,CAAA,IAAK,KAAA,IAAS,IAAA,CAAK,aAAA;AAAc,KACxF,CAAA;AAED,IAAA,IAAI,KAAK,WAAA,KAAgB,IAAA,OAAW,OAAA,CAAQ,KAAA,CAAM,KAAK,WAAW,CAAA;AAClE,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,MAAM;AACxC,MAAA,IAAA,CAAK,YAAY,KAAK,CAAA;AACtB,MAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,IACrB,CAAA,EAAG,4BAA2B,cAAc,CAAA;AAAA,EAC9C;AAAA;AAAA,EAGA,aAAA,CAAc,OAAe,GAAA,EAAmB;AAC9C,IAAA,IAAI,CAAC,KAAK,cAAA,EAAgB;AAC1B,IAAA,IAAA,CAAK,WAAA,CAAY,YAAA,CAAa,eAAA,EAAiB,GAAG,CAAA;AAClD,IAAA,IAAA,CAAK,WAAA,CAAY,YAAA,CAAa,eAAA,EAAiB,MAAA,CAAO,GAAG,CAAC,CAAA;AAC1D,IAAA,IAAA,CAAK,WAAA,CAAY,YAAA,CAAa,eAAA,EAAiB,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YAAA,CAAa,OAAe,GAAA,EAAmB;AAC7C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,KAAA,EAAO,GAAG,CAAA;AAClC,IAAA,IAAA,CAAK,OAAA,CAAQ,eAAA,EAAiB,IAAA,EAAM,IAAA,CAAK,SAAS,CAAC,CAAA;AAKnD,IAAA,IAAA,CAAK,QAAQ,gBAAA,EAAkB,MAAA,EAAQ,QAAQ,CAAA,IAAK,KAAA,GAAQ,KAAK,aAAa,CAAA;AAC9E,IAAA,MAAM,KAAA,GAAQ,GAAA,GAAM,CAAA,GAAI,KAAA,GAAQ,GAAA,GAAM,CAAA;AACtC,IAAA,IAAA,CAAK,QAAQ,KAAA,CAAM,WAAA,CAAY,6BAAA,EAA+B,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,EAC7E;AAAA,EAEA,YAAY,KAAA,EAAqB;AAC/B,IAAA,IAAI,IAAA,CAAK,cAAA,EAAgB,IAAA,CAAK,WAAA,CAAY,WAAA,GAAc,KAAA;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,KAAA,CAAM,OAAe,GAAA,EAAqB;AACxC,IAAA,IAAI,KAAA,IAAS,CAAA,IAAK,GAAA,IAAO,CAAA,EAAG,OAAO,EAAA;AACnC,IAAA,MAAM,QAAQ,IAAA,CAAK,IAAA,CAAM,QAAQ,GAAA,GAAO,cAAA,CAAe,MAAM,CAAA,GAAI,CAAA;AACjE,IAAA,OAAO,cAAA,CAAe,IAAA,CAAK,GAAA,CAAI,cAAA,CAAe,MAAA,GAAS,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,KAAK,CAAC,CAAC,CAAA,IAAK,EAAA;AAAA,EACpF;AAAA;AAAA,EAGA,OAAA,CAAQ,IAAA,EAAc,KAAA,EAAe,EAAA,EAAmB;AACtD,IAAA,IAAI,EAAA,EAAI;AACN,MAAA,IAAA,CAAK,OAAA,CAAQ,YAAA,CAAa,IAAA,EAAM,KAAK,CAAA;AAAA,IACvC,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,OAAA,CAAQ,gBAAgB,IAAI,CAAA;AAAA,IACnC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAA,CAAO,UAAkB,GAAA,EAAqB;AAC5C,IAAA,IAAI,QAAA,CAAS,MAAA,KAAW,CAAA,IAAK,GAAA,KAAQ,GAAG,OAAO,CAAA;AAE/C,IAAA,IAAI,MAAA,GAAS,CAAA;AACb,IAAA,KAAA,MAAW,aAAa,iBAAA,EAAmB;AACzC,MAAA,IAAI,QAAA,CAAS,MAAA,IAAU,SAAA,EAAW,MAAA,IAAU,CAAA;AAAA,IAC9C;AAEA,IAAA,MAAA,IAAU,cAAA,CAAe,OAAO,CAAC,EAAA,KAAO,GAAG,IAAA,CAAK,QAAQ,CAAC,CAAA,CAAE,MAAA,GAAS,CAAA;AAEpE,IAAA,IAAI,IAAI,GAAA,CAAI,QAAQ,CAAA,CAAE,IAAA,IAAQ,GAAG,MAAA,GAAS,CAAA;AAE1C,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,CAAO,MAAA,GAAS,aAAc,GAAG,CAAA;AACvD,IAAA,OAAO,KAAK,GAAA,CAAI,GAAA,EAAK,KAAK,GAAA,CAAI,CAAA,EAAG,QAAQ,CAAC,CAAA;AAAA,EAC5C;AACF","file":"password_strength_controller.js","sourcesContent":["/**\n * Self-cleaning timer registries shared by Stimeo controllers.\n *\n * Stimulus controllers frequently schedule `setTimeout` / `setInterval` work\n * (auto-dismiss, debouncing, polling). When the element leaves the DOM — a\n * Turbo Drive navigation, a Turbo Stream replacement, or any `disconnect()` —\n * orphaned timers keep firing against a detached controller, leaking memory and\n * mutating stale state. {@link SafeTimeout} and {@link SafeInterval} track every\n * timer they create so a single {@link TimerRegistry.clearAll | clearAll()} call\n * in `disconnect()` tears them all down.\n *\n * These are intentionally low-level primitives: they own *registration and\n * cleanup only*. Higher-level policy (pause/resume, remaining-time accounting)\n * stays in the individual controllers so per-widget semantics are not flattened\n * into a lowest-common-denominator helper.\n */\n\n/**\n * Shared registry bookkeeping for the timeout/interval variants.\n *\n * Subclasses provide the scheduling primitive ({@link schedule}) and its matching\n * canceller ({@link cancel}); this base owns the set of live ids plus the\n * per-id and bulk teardown shared by both.\n */\nabstract class TimerRegistry {\n  /** Live timer ids that have not yet been cleared (or, for timeouts, fired). */\n  protected readonly ids = new Set<number>();\n\n  /** Schedules the underlying platform timer and returns its id. */\n  protected abstract schedule(callback: () => void, delay: number): number;\n\n  /** Cancels the underlying platform timer for `id`. */\n  protected abstract cancel(id: number): void;\n\n  /**\n   * Cancels a single tracked timer.\n   *\n   * No-ops if the id is unknown (already cleared, fired, or never owned by this\n   * registry), so callers can clear defensively without guarding.\n   */\n  clear(id: number): void {\n    if (this.ids.delete(id)) {\n      this.cancel(id);\n    }\n  }\n\n  /**\n   * Cancels every tracked timer. Call this from a controller's `disconnect()`\n   * to guarantee no timer outlives the element.\n   */\n  clearAll(): void {\n    for (const id of this.ids) {\n      this.cancel(id);\n    }\n    this.ids.clear();\n  }\n\n  /** Number of timers currently tracked (pending). */\n  get size(): number {\n    return this.ids.size;\n  }\n}\n\n/**\n * `setTimeout` wrapper that auto-forgets each timer once it fires and supports\n * bulk teardown on disconnect.\n *\n * @example\n * ```ts\n * #timers = new SafeTimeout();\n *\n * connect() {\n *   this.#timers.set(() => this.dismiss(), 5000);\n * }\n *\n * disconnect() {\n *   this.#timers.clearAll();\n * }\n * ```\n */\nexport class SafeTimeout extends TimerRegistry {\n  /**\n   * Schedules `callback` after `delay` ms and returns the timer id.\n   *\n   * The id is removed from the registry automatically when the timeout fires,\n   * so {@link TimerRegistry.size | size} reflects only still-pending timers.\n   */\n  set(callback: () => void, delay: number): number {\n    const id = this.schedule(() => {\n      this.ids.delete(id);\n      callback();\n    }, delay);\n    this.ids.add(id);\n    return id;\n  }\n\n  protected schedule(callback: () => void, delay: number): number {\n    return window.setTimeout(callback, delay);\n  }\n\n  protected cancel(id: number): void {\n    window.clearTimeout(id);\n  }\n}\n\n/**\n * `setInterval` wrapper that tracks every interval for bulk teardown on\n * disconnect. Unlike {@link SafeTimeout}, intervals are retained until they are\n * explicitly cleared because they fire repeatedly.\n *\n * @example\n * ```ts\n * #intervals = new SafeInterval();\n *\n * connect() {\n *   this.#intervals.set(() => this.tick(), 1000);\n * }\n *\n * disconnect() {\n *   this.#intervals.clearAll();\n * }\n * ```\n */\nexport class SafeInterval extends TimerRegistry {\n  /** Schedules a repeating `callback` every `delay` ms and returns the timer id. */\n  set(callback: () => void, delay: number): number {\n    const id = this.schedule(callback, delay);\n    this.ids.add(id);\n    return id;\n  }\n\n  protected schedule(callback: () => void, delay: number): number {\n    return window.setInterval(callback, delay);\n  }\n\n  protected cancel(id: number): void {\n    window.clearInterval(id);\n  }\n}\n","/**\n * JSON string-list parsing for the controllers that take a list as a Value.\n *\n * Stimulus offers an `Array` Value type, but its reader runs `JSON.parse` inside\n * the value observer — **before** the `<name>ValueChanged` callback — and\n * rethrows on malformed text. The throw propagates out of the observer that runs\n * during connection, so a single unparseable attribute stops the controller from\n * connecting at all: no lifecycle callback runs and the element is left inert\n * rather than degraded. A consumer cannot guard against it either, because the\n * callback that would hold the `try` never runs.\n *\n * Declaring the attribute as a `String` Value and parsing it here keeps a\n * malformed declaration local to the value it declares. The attribute text is\n * identical either way (`'[\"a\", \"b\"]'`), so markup does not change with the\n * declaration.\n */\n\n/**\n * Parses `raw` as a JSON array of strings.\n *\n * Returns `fallback` when the text is absent, unparseable, or not an array, so a\n * malformed declaration behaves like an omitted one. A parsed array keeps only\n * its string entries: every caller indexes or compares strings, and a stray\n * number would otherwise sit in the list without ever matching.\n *\n * An explicit `\"[]\"` is honoured as an empty list rather than falling back — it\n * is the only way to declare \"none\" against a non-empty default.\n *\n * @param raw - the attribute text, e.g. `'[\"password\"]'`.\n * @param fallback - the list to use when `raw` declares nothing usable.\n */\nexport function parseStringList(raw: string, fallback: readonly string[] = []): string[] {\n  // The common case is an undeclared attribute, and `JSON.parse(\"\")` answers it\n  // by throwing. Reaching the same fallback without building an exception keeps\n  // the callers that ask per element off that path.\n  const text = raw.trim();\n  if (text.length === 0) return [...fallback];\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(text);\n  } catch {\n    return [...fallback];\n  }\n\n  if (!Array.isArray(parsed)) return [...fallback];\n  return parsed.filter((entry): entry is string => typeof entry === \"string\");\n}\n","import { Controller } from \"@hotwired/stimulus\";\nimport { SafeTimeout } from \"../utils/safe_timeout\";\nimport { parseStringList } from \"../utils/string_list\";\n\n/** Character classes that contribute to password variety (one point each beyond the first). */\nconst CLASS_PATTERNS: readonly RegExp[] = [/[a-z]/, /[A-Z]/, /[0-9]/, /[^A-Za-z0-9]/];\n\n/** Strength labels used unless the consumer declares its own scale. */\nconst DEFAULT_LEVELS = [\"weak\", \"fair\", \"good\", \"strong\"];\n\n/** Length milestones that each add a strength point. */\nconst LENGTH_MILESTONES: readonly number[] = [8, 12, 16];\n\n/** Upper bound of the raw heuristic points, used to bucket into the level scale. */\nconst MAX_POINTS = LENGTH_MILESTONES.length + (CLASS_PATTERNS.length - 1);\n\n/**\n * Fixed, locale-independent styling bands `data-strength` is drawn from. Kept\n * separate from the (localizable) `levels` labels so `data-strength` stays a\n * stable CSS hook (e.g. `[data-strength=\"weak\"]`) even when `levels` is\n * translated. Ascending: weakest → strongest.\n */\nconst STRENGTH_BANDS = [\"weak\", \"fair\", \"good\", \"strong\"] as const;\n\n/**\n * Headless password-strength behavior: scores the field with a lightweight\n * zero-dependency heuristic and drives a meter plus an `aria-live` label. No\n * dedicated APG pattern; the meter display follows {@link MeterController}.\n *\n * Markup contract (identifier: `stimeo--password-strength`):\n *   <div data-controller=\"stimeo--password-strength\">\n *     <input type=\"password\" data-stimeo--password-strength-target=\"input\"\n *            data-action=\"input->stimeo--password-strength#evaluate\" aria-describedby=\"pw\">\n *     <div data-stimeo--password-strength-target=\"meter\" role=\"meter\"\n *          aria-valuemin=\"0\" aria-valuemax=\"4\"></div>\n *     <span id=\"pw\" data-stimeo--password-strength-target=\"label\" aria-live=\"polite\"></span>\n *   </div>\n *\n * On each input the controller scores the password (length milestones + character\n * variety, capped for trivial repetition), syncs the meter's `aria-valuenow`,\n * reflects a stable band on `data-strength`, the `0–1` fill on\n * `--stimeo--password-strength`, and (when `minScore` is set) `data-below-min`,\n * and writes the level label into the label target.\n *\n * @remarks\n * Behavior only — the meter/bar look is the consumer's, keyed off the data hooks.\n * `data-strength` is one of the fixed {@link STRENGTH_BANDS} (not the localizable\n * `levels` text), so consumers can style by it regardless of locale; the visible\n * label receives the matching `levels` entry. Non-text state (meter ARIA,\n * `data-strength`/`data-below-min`, the custom property, and the `change` event)\n * updates **immediately** on every keystroke so styling and consumers stay\n * responsive, while the label — in an `aria-live=\"polite\"` region — is written on\n * a short debounce so a screen reader is not flooded mid-typing. The score is a\n * pure function of the input value (no module-scope state), so `connect()`\n * re-evaluates idempotently after a Turbo cache restore; the debounce timer is\n * owned by {@link SafeTimeout} and torn down on `disconnect()` (Turbo included).\n * The estimator is intentionally not a dictionary/zxcvbn-grade one (kept\n * zero-dep); swap a stronger one in on the consumer side if needed.\n */\nexport class PasswordStrengthController extends Controller<HTMLElement> {\n  static override targets = [\"input\", \"meter\", \"label\"];\n  static override values = {\n    minScore: { type: Number, default: 0 },\n    // A JSON list read through `parseStringList` rather than Stimulus's `Array`\n    // type: that reader throws out of the value observer before any callback\n    // runs, so one malformed attribute would stop the meter connecting.\n    levels: { type: String, default: \"\" },\n  };\n  static actions = [\"evaluate\"] as const;\n  static events = [\"change\"] as const;\n\n  declare readonly inputTarget: HTMLInputElement;\n  declare readonly meterTarget: HTMLElement;\n  declare readonly labelTarget: HTMLElement;\n  declare readonly hasInputTarget: boolean;\n  declare readonly hasMeterTarget: boolean;\n  declare readonly hasLabelTarget: boolean;\n\n  declare minScoreValue: number;\n  declare levelsValue: string;\n\n  /** Delay (ms) before the polite live-region label is written, to throttle SR flooding. */\n  static readonly #announceDelay = 200;\n\n  readonly #timers = new SafeTimeout();\n  #announceId: number | null = null;\n\n  override connect(): void {\n    // Reflect the current value synchronously (no announce): an autofilled or\n    // cache-restored field shows the right strength without queuing an SR message.\n    this.#update({ announce: false });\n  }\n\n  override disconnect(): void {\n    this.#timers.clearAll();\n    this.#announceId = null;\n  }\n\n  /** Re-evaluates strength from the input. Bound via `data-action` (`input`). */\n  evaluate(): void {\n    this.#update();\n  }\n\n  /**\n   * Recomputes the strength. The meter ARIA, data hooks, the custom property and\n   * the `change` event apply immediately; the live-region label text is debounced\n   * unless `announce` is `false` (the initial render).\n   */\n  #update(options: { announce?: boolean } = {}): void {\n    const password = this.hasInputTarget ? this.inputTarget.value : \"\";\n    const labels = parseStringList(this.levelsValue, DEFAULT_LEVELS);\n    const max = labels.length;\n    const score = this.#score(password, max);\n    const label = score > 0 ? (labels[score - 1] ?? \"\") : \"\";\n\n    this.#reflectMeter(score, max);\n    this.#reflectRoot(score, max);\n\n    if (options.announce === false) {\n      // Initial render (connect / cache-restore): reflect without a change event\n      // or a queued screen-reader announcement.\n      this.#writeLabel(label);\n      return;\n    }\n\n    this.dispatch(\"change\", {\n      detail: { score, level: label, max, meetsMin: score > 0 && score >= this.minScoreValue },\n    });\n\n    if (this.#announceId !== null) this.#timers.clear(this.#announceId);\n    this.#announceId = this.#timers.set(() => {\n      this.#writeLabel(label);\n      this.#announceId = null;\n    }, PasswordStrengthController.#announceDelay);\n  }\n\n  /** Syncs the meter target's ARIA value attributes (`0..levels.length`). */\n  #reflectMeter(score: number, max: number): void {\n    if (!this.hasMeterTarget) return;\n    this.meterTarget.setAttribute(\"aria-valuemin\", \"0\");\n    this.meterTarget.setAttribute(\"aria-valuemax\", String(max));\n    this.meterTarget.setAttribute(\"aria-valuenow\", String(score));\n  }\n\n  /**\n   * Reflects the level onto the root: the stable `data-strength` band (absent when\n   * empty), the `data-below-min` hook when the score is under `minScore`, and the\n   * `0–1` fill the consumer's CSS turns into the bar width.\n   */\n  #reflectRoot(score: number, max: number): void {\n    const band = this.#band(score, max);\n    this.#toggle(\"data-strength\", band, band.length > 0);\n    // Empty/pristine input (`score === 0`) is never \"below min\": that would let CSS\n    // flag an untouched field as failing. Mirror the `change` event's `meetsMin`\n    // (`score > 0 && …`) so the hook only marks a *non-empty* password under the\n    // threshold. `minScore` defaults to 0, leaving the hook inert until set positive.\n    this.#toggle(\"data-below-min\", \"true\", score > 0 && score < this.minScoreValue);\n    const ratio = max > 0 ? score / max : 0;\n    this.element.style.setProperty(\"--stimeo--password-strength\", String(ratio));\n  }\n\n  #writeLabel(label: string): void {\n    if (this.hasLabelTarget) this.labelTarget.textContent = label;\n  }\n\n  /**\n   * Locale-independent styling band (one of {@link STRENGTH_BANDS}) for `score`\n   * out of `max`. Empty input → `\"\"`. Quantizes the `score/max` ratio into the\n   * four fixed bands, so a non-default level count still maps onto a stable hook.\n   */\n  #band(score: number, max: number): string {\n    if (score <= 0 || max <= 0) return \"\";\n    const index = Math.ceil((score / max) * STRENGTH_BANDS.length) - 1;\n    return STRENGTH_BANDS[Math.min(STRENGTH_BANDS.length - 1, Math.max(0, index))] ?? \"\";\n  }\n\n  /** Sets `name` to `value` when `on`, else removes it (value/presence data hook). */\n  #toggle(name: string, value: string, on: boolean): void {\n    if (on) {\n      this.element.setAttribute(name, value);\n    } else {\n      this.element.removeAttribute(name);\n    }\n  }\n\n  /**\n   * Lightweight zero-dependency strength heuristic returning an integer in\n   * `[0, max]` (`max` = number of levels). Empty input is `0` (no level); any\n   * non-empty password is at least `1`. Points accrue from length milestones and\n   * character-class variety, then bucket into the level scale. A tiny alphabet\n   * (≤ 2 distinct characters, e.g. \"aaaa\") is capped as the weakest, so length\n   * alone cannot mask trivial repetition.\n   */\n  #score(password: string, max: number): number {\n    if (password.length === 0 || max === 0) return 0;\n\n    let points = 0;\n    for (const milestone of LENGTH_MILESTONES) {\n      if (password.length >= milestone) points += 1;\n    }\n    // The first present character class is free; each additional one adds a point.\n    points += CLASS_PATTERNS.filter((re) => re.test(password)).length - 1;\n\n    if (new Set(password).size <= 2) points = 0; // trivial repetition → weakest\n\n    const bucketed = Math.round((points / MAX_POINTS) * max);\n    return Math.min(max, Math.max(1, bucketed));\n  }\n}\n"]}

package/dist/controllers/persist_controller.d.ts

@@ -5,7 +5,7 @@ type PersistField = HTMLInputElement | HTMLTextAreaElement | HTMLSelectElement;
 /**
  * Headless draft-autosave behavior: persists a form's field values to
  * `localStorage` and restores them across Turbo navigations and reloads (no APG
- * pattern; a state-holding utility). The Alpine `persist` equivalent.
+ * pattern; a state-holding utility).
  *
  * Markup contract (identifier: `stimeo--persist`):
  *   <form data-controller="stimeo--persist"
@@ -38,8 +38,8 @@ declare class PersistController extends Controller<HTMLElement> {
             default: number;
         };
         exclude: {
-            type: ArrayConstructor;
-            default: string[];
+            type: StringConstructor;
+            default: string;
         };
         clearOn: {
             type: StringConstructor;
@@ -52,7 +52,7 @@ declare class PersistController extends Controller<HTMLElement> {
     readonly hasFieldTarget: boolean;
     keyValue: string;
     debounceValue: number;
-    excludeValue: string[];
+    excludeValue: string;
     clearOnValue: string;
     connect(): void;
     disconnect(): void;

package/dist/controllers/persist_controller.js

@@ -55,8 +55,23 @@ var SafeTimeout = class extends TimerRegistry {
   }
 };
 
+// src/utils/string_list.ts
+function parseStringList(raw, fallback = []) {
+  const text = raw.trim();
+  if (text.length === 0) return [...fallback];
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    return [...fallback];
+  }
+  if (!Array.isArray(parsed)) return [...fallback];
+  return parsed.filter((entry) => typeof entry === "string");
+}
+
 // src/controllers/persist_controller.ts
 var NON_VALUE_TYPES = /* @__PURE__ */ new Set(["file", "submit", "reset", "button", "image"]);
+var DEFAULT_EXCLUDE = ["password"];
 var STORAGE_PREFIX = "stimeo--persist:";
 var OCCURRENCE_SEP = "\0";
 var PersistController = class extends Controller {
@@ -64,7 +79,10 @@ var PersistController = class extends Controller {
   static values = {
     key: { type: String, default: "" },
     debounce: { type: Number, default: 400 },
-    exclude: { type: Array, default: ["password"] },
+    // A JSON list read through `parseStringList` rather than Stimulus's `Array`
+    // type: that reader throws out of the value observer before any callback
+    // runs, so one malformed attribute would stop the controller connecting.
+    exclude: { type: String, default: "" },
     clearOn: { type: String, default: "" }
   };
   static actions = ["clear"];
@@ -208,15 +226,16 @@ var PersistController = class extends Controller {
   /** The fields to persist: `field` targets, or the element's named controls. */
   #fields() {
     const candidates = this.hasFieldTarget ? this.fieldTargets : Array.from(this.element.querySelectorAll("input, textarea, select"));
-    return candidates.filter((field) => this.#persistable(field));
+    const excluded = parseStringList(this.excludeValue, DEFAULT_EXCLUDE);
+    return candidates.filter((field) => this.#persistable(field, excluded));
   }
   /** Whether a field carries a restorable, non-excluded value. */
-  #persistable(field) {
+  #persistable(field, excluded) {
     if (this.#keyOf(field) === null) return false;
     const type = field instanceof HTMLInputElement ? field.type : "";
     if (NON_VALUE_TYPES.has(type)) return false;
-    if (this.excludeValue.includes(type)) return false;
-    if (field.name.length > 0 && this.excludeValue.includes(field.name)) return false;
+    if (excluded.includes(type)) return false;
+    if (field.name.length > 0 && excluded.includes(field.name)) return false;
     return true;
   }
   /** A stable storage sub-key for a field (its name, else id). */

package/dist/controllers/persist_controller.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utils/safe_timeout.ts","../../src/controllers/persist_controller.ts"],"names":[],"mappings":";;;;;AAwBA,IAAe,gBAAf,MAA6B;AAAA;AAAA,EAER,GAAA,uBAAU,GAAA,EAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAczC,MAAM,EAAA,EAAkB;AACtB,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,EAAE,CAAA,EAAG;AACvB,MAAA,IAAA,CAAK,OAAO,EAAE,CAAA;AAAA,IAChB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAA,GAAiB;AACf,IAAA,KAAA,MAAW,EAAA,IAAM,KAAK,GAAA,EAAK;AACzB,MAAA,IAAA,CAAK,OAAO,EAAE,CAAA;AAAA,IAChB;AACA,IAAA,IAAA,CAAK,IAAI,KAAA,EAAM;AAAA,EACjB;AAAA;AAAA,EAGA,IAAI,IAAA,GAAe;AACjB,IAAA,OAAO,KAAK,GAAA,CAAI,IAAA;AAAA,EAClB;AACF,CAAA;AAmBO,IAAM,WAAA,GAAN,cAA0B,aAAA,CAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO7C,GAAA,CAAI,UAAsB,KAAA,EAAuB;AAC/C,IAAA,MAAM,EAAA,GAAK,IAAA,CAAK,QAAA,CAAS,MAAM;AAC7B,MAAA,IAAA,CAAK,GAAA,CAAI,OAAO,EAAE,CAAA;AAClB,MAAA,QAAA,EAAS;AAAA,IACX,GAAG,KAAK,CAAA;AACR,IAAA,IAAA,CAAK,GAAA,CAAI,IAAI,EAAE,CAAA;AACf,IAAA,OAAO,EAAA;AAAA,EACT;AAAA,EAEU,QAAA,CAAS,UAAsB,KAAA,EAAuB;AAC9D,IAAA,OAAO,MAAA,CAAO,UAAA,CAAW,QAAA,EAAU,KAAK,CAAA;AAAA,EAC1C;AAAA,EAEU,OAAO,EAAA,EAAkB;AACjC,IAAA,MAAA,CAAO,aAAa,EAAE,CAAA;AAAA,EACxB;AACF,CAAA;;;AChGA,IAAM,eAAA,uBAAsB,GAAA,CAAI,CAAC,QAAQ,QAAA,EAAU,OAAA,EAAS,QAAA,EAAU,OAAO,CAAC,CAAA;AAE9E,IAAM,cAAA,GAAiB,kBAAA;AAEvB,IAAM,cAAA,GAAiB,IAAA;AAyBhB,IAAM,iBAAA,GAAN,cAAgC,UAAA,CAAwB;AAAA,EAC7D,OAAgB,OAAA,GAAU,CAAC,OAAO,CAAA;AAAA,EAClC,OAAgB,MAAA,GAAS;AAAA,IACvB,GAAA,EAAK,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,EAAA,EAAG;AAAA,IACjC,QAAA,EAAU,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,GAAA,EAAI;AAAA,IACvC,SAAS,EAAE,IAAA,EAAM,OAAO,OAAA,EAAS,CAAC,UAAU,CAAA,EAAE;AAAA,IAC9C,OAAA,EAAS,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,EAAA;AAAG,GACvC;AAAA,EACA,OAAO,OAAA,GAAU,CAAC,OAAO,CAAA;AAAA,EACzB,OAAO,MAAA,GAAS,CAAC,SAAA,EAAW,QAAQ,OAAO,CAAA;AAAA,EAUlC,SAAA,GAAY,IAAI,WAAA,EAAY;AAAA,EACrC,OAAA,GAAyB,IAAA;AAAA,EAEhB,WAAW,MAAY;AAC9B,IAAA,IAAA,CAAK,aAAA,EAAc;AAAA,EACrB,CAAA;AAAA,EAES,gBAAgB,MAAY;AACnC,IAAA,IAAA,CAAK,KAAA,EAAM;AAAA,EACb,CAAA;AAAA,EAES,OAAA,GAAgB;AACvB,IAAA,IAAI,IAAA,CAAK,gBAAgB,IAAA,EAAM;AAC/B,IAAA,IAAA,CAAK,QAAA,EAAS;AACd,IAAA,IAAA,CAAK,OAAA,CAAQ,gBAAA,CAAiB,OAAA,EAAS,IAAA,CAAK,QAAQ,CAAA;AACpD,IAAA,IAAA,CAAK,OAAA,CAAQ,gBAAA,CAAiB,QAAA,EAAU,IAAA,CAAK,QAAQ,CAAA;AACrD,IAAA,IAAI,IAAA,CAAK,YAAA,CAAa,MAAA,GAAS,CAAA,EAAG;AAChC,MAAA,IAAA,CAAK,OAAA,CAAQ,gBAAA,CAAiB,IAAA,CAAK,YAAA,EAAc,KAAK,aAAa,CAAA;AAAA,IACrE;AAAA,EACF;AAAA,EAES,UAAA,GAAmB;AAC1B,IAAA,IAAA,CAAK,OAAA,CAAQ,mBAAA,CAAoB,OAAA,EAAS,IAAA,CAAK,QAAQ,CAAA;AACvD,IAAA,IAAA,CAAK,OAAA,CAAQ,mBAAA,CAAoB,QAAA,EAAU,IAAA,CAAK,QAAQ,CAAA;AACxD,IAAA,IAAI,IAAA,CAAK,YAAA,CAAa,MAAA,GAAS,CAAA,EAAG;AAChC,MAAA,IAAA,CAAK,OAAA,CAAQ,mBAAA,CAAoB,IAAA,CAAK,YAAA,EAAc,KAAK,aAAa,CAAA;AAAA,IACxE;AAEA,IAAA,IAAI,IAAA,CAAK,YAAY,IAAA,EAAM;AACzB,MAAA,IAAA,CAAK,SAAA,CAAU,KAAA,CAAM,IAAA,CAAK,OAAO,CAAA;AACjC,MAAA,IAAA,CAAK,OAAA,GAAU,IAAA;AACf,MAAA,IAAA,CAAK,MAAA,EAAO;AAAA,IACd;AACA,IAAA,IAAA,CAAK,UAAU,QAAA,EAAS;AAAA,EAC1B;AAAA;AAAA,EAGA,KAAA,GAAc;AACZ,IAAA,MAAM,MAAM,IAAA,CAAK,WAAA;AACjB,IAAA,IAAI,QAAQ,IAAA,EAAM;AAClB,IAAA,IAAI,IAAA,CAAK,YAAY,IAAA,EAAM;AACzB,MAAA,IAAA,CAAK,SAAA,CAAU,KAAA,CAAM,IAAA,CAAK,OAAO,CAAA;AACjC,MAAA,IAAA,CAAK,OAAA,GAAU,IAAA;AAAA,IACjB;AACA,IAAA,IAAA,CAAK,YAAY,GAAG,CAAA;AACpB,IAAA,IAAA,CAAK,OAAA,CAAQ,gBAAgB,uBAAuB,CAAA;AACpD,IAAA,IAAA,CAAK,QAAA,CAAS,SAAS,EAAE,MAAA,EAAQ,EAAE,GAAA,EAAK,IAAA,CAAK,WAAA,EAAY,EAAG,CAAA;AAAA,EAC9D;AAAA;AAAA,EAGA,aAAA,GAAsB;AACpB,IAAA,IAAI,KAAK,OAAA,KAAY,IAAA,OAAW,SAAA,CAAU,KAAA,CAAM,KAAK,OAAO,CAAA;AAC5D,IAAA,IAAA,CAAK,OAAA,GAAU,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,MAAM;AACtC,MAAA,IAAA,CAAK,OAAA,GAAU,IAAA;AACf,MAAA,IAAA,CAAK,KAAA,EAAM;AAAA,IACb,CAAA,EAAG,KAAK,aAAa,CAAA;AAAA,EACvB;AAAA;AAAA,EAGA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,MAAA,EAAO;AACZ,IAAA,IAAA,CAAK,QAAA,CAAS,QAAQ,EAAE,MAAA,EAAQ,EAAE,GAAA,EAAK,IAAA,CAAK,WAAA,EAAY,EAAG,CAAA;AAAA,EAC7D;AAAA;AAAA,EAGA,MAAA,GAAe;AACb,IAAA,MAAM,MAAM,IAAA,CAAK,WAAA;AACjB,IAAA,IAAI,QAAQ,IAAA,EAAM;AAClB,IAAA,MAAM,OAAgC,EAAC;AACvC,IAAA,KAAA,MAAW,EAAE,KAAA,EAAO,GAAA,EAAK,UAAS,IAAK,IAAA,CAAK,eAAc,EAAG;AAC3D,MAAA,IAAI,KAAA,YAAiB,gBAAA,IAAoB,KAAA,CAAM,IAAA,KAAS,UAAA,EAAY;AAClE,QAAA,IAAA,CAAK,QAAQ,IAAI,KAAA,CAAM,OAAA;AAAA,MACzB,CAAA,MAAA,IAAW,KAAA,YAAiB,gBAAA,IAAoB,KAAA,CAAM,SAAS,OAAA,EAAS;AACtE,QAAA,IAAI,KAAA,CAAM,OAAA,EAAS,IAAA,CAAK,QAAQ,IAAI,KAAA,CAAM,KAAA;AAAA,MAC5C,CAAA,MAAA,IAAW,KAAA,YAAiB,iBAAA,IAAqB,KAAA,CAAM,QAAA,EAAU;AAC/D,QAAA,IAAA,CAAK,QAAQ,CAAA,GAAI,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,eAAe,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,KAAK,CAAA;AAAA,MACvE,CAAA,MAAO;AACL,QAAA,IAAA,CAAK,QAAQ,IAAI,KAAA,CAAM,KAAA;AAAA,MACzB;AAAA,IACF;AACA,IAAA,IAAA,CAAK,QAAA,CAAS,GAAA,EAAK,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,EACzC;AAAA;AAAA,EAGA,QAAA,GAAiB;AACf,IAAA,MAAM,MAAM,IAAA,CAAK,WAAA;AACjB,IAAA,IAAI,QAAQ,IAAA,EAAM;AAClB,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA;AAC7B,IAAA,IAAI,QAAQ,IAAA,EAAM;AAClB,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI;AACF,MAAA,IAAA,GAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,IACvB,CAAA,CAAA,MAAQ;AACN,MAAA;AAAA,IACF;AACA,IAAA,IAAI,WAAA,GAAc,KAAA;AAClB,IAAA,KAAA,MAAW,EAAE,KAAA,EAAO,GAAA,EAAK,UAAS,IAAK,IAAA,CAAK,eAAc,EAAG;AAC3D,MAAA,IAAI,CAAC,MAAA,CAAO,MAAA,CAAO,IAAA,EAAM,QAAQ,CAAA,EAAG;AACpC,MAAA,IAAA,CAAK,WAAA,CAAY,KAAA,EAAO,IAAA,CAAK,QAAQ,CAAC,CAAA;AACtC,MAAA,WAAA,GAAc,IAAA;AAAA,IAChB;AACA,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,IAAA,CAAK,OAAA,CAAQ,YAAA,CAAa,uBAAA,EAAyB,MAAM,CAAA;AACzD,MAAA,IAAA,CAAK,QAAA,CAAS,WAAW,EAAE,MAAA,EAAQ,EAAE,GAAA,EAAK,IAAA,CAAK,WAAA,EAAY,EAAG,CAAA;AAAA,IAChE;AAAA,EACF;AAAA;AAAA,EAGA,WAAA,CAAY,OAAqB,KAAA,EAAsB;AACrD,IAAA,IAAI,KAAA,YAAiB,gBAAA,IAAoB,KAAA,CAAM,IAAA,KAAS,UAAA,EAAY;AAClE,MAAA,KAAA,CAAM,OAAA,GAAU,QAAQ,KAAK,CAAA;AAAA,IAC/B,CAAA,MAAA,IAAW,KAAA,YAAiB,gBAAA,IAAoB,KAAA,CAAM,SAAS,OAAA,EAAS;AACtE,MAAA,KAAA,CAAM,OAAA,GAAU,MAAM,KAAA,KAAU,KAAA;AAAA,IAClC,CAAA,MAAA,IAAW,KAAA,YAAiB,iBAAA,IAAqB,KAAA,CAAM,QAAA,EAAU;AAC/D,MAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,CAAM,GAAA,CAAI,MAAM,CAAA,GAAI,EAAE,CAAA;AACtE,MAAA,KAAA,MAAW,MAAA,IAAU,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA,EAAG;AAC9C,QAAA,MAAA,CAAO,QAAA,GAAW,QAAA,CAAS,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA;AAAA,MAC7C;AAAA,IACF,CAAA,MAAO;AACL,MAAA,KAAA,CAAM,KAAA,GAAQ,OAAO,KAAK,CAAA;AAAA,IAC5B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,aAAA,GAA6D;AAC3D,IAAA,MAAM,UAAuD,EAAC;AAC9D,IAAA,MAAM,UAAA,uBAAiB,GAAA,EAAoB;AAC3C,IAAA,KAAA,MAAW,KAAA,IAAS,IAAA,CAAK,OAAA,EAAQ,EAAG;AAClC,MAAA,MAAM,IAAA,GAAO,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA;AAC9B,MAAA,IAAI,SAAS,IAAA,EAAM;AACnB,MAAA,IAAI,KAAA,YAAiB,gBAAA,IAAoB,KAAA,CAAM,IAAA,KAAS,OAAA,EAAS;AAC/D,QAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,KAAA,EAAO,GAAA,EAAK,MAAM,CAAA;AACjC,QAAA;AAAA,MACF;AACA,MAAA,MAAM,IAAA,GAAO,UAAA,CAAW,GAAA,CAAI,IAAI,CAAA,IAAK,CAAA;AACrC,MAAA,UAAA,CAAW,GAAA,CAAI,IAAA,EAAM,IAAA,GAAO,CAAC,CAAA;AAC7B,MAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,KAAA,EAAO,GAAA,EAAK,SAAS,CAAA,GAAI,IAAA,GAAO,CAAA,EAAG,IAAI,CAAA,EAAG,cAAc,CAAA,EAAG,IAAI,IAAI,CAAA;AAAA,IACpF;AACA,IAAA,OAAO,OAAA;AAAA,EACT;AAAA;AAAA,EAGA,OAAA,GAA0B;AACxB,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,cAAA,GACpB,IAAA,CAAK,YAAA,GACL,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,gBAAA,CAA+B,yBAAyB,CAAC,CAAA;AACrF,IAAA,OAAO,WAAW,MAAA,CAAO,CAAC,UAAU,IAAA,CAAK,YAAA,CAAa,KAAK,CAAC,CAAA;AAAA,EAC9D;AAAA;AAAA,EAGA,aAAa,KAAA,EAA8B;AACzC,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA,KAAM,MAAM,OAAO,KAAA;AACxC,IAAA,MAAM,IAAA,GAAO,KAAA,YAAiB,gBAAA,GAAmB,KAAA,CAAM,IAAA,GAAO,EAAA;AAC9D,IAAA,IAAI,eAAA,CAAgB,GAAA,CAAI,IAAI,CAAA,EAAG,OAAO,KAAA;AACtC,IAAA,IAAI,IAAA,CAAK,YAAA,CAAa,QAAA,CAAS,IAAI,GAAG,OAAO,KAAA;AAC7C,IAAA,IAAI,KAAA,CAAM,IAAA,CAAK,MAAA,GAAS,CAAA,IAAK,IAAA,CAAK,aAAa,QAAA,CAAS,KAAA,CAAM,IAAI,CAAA,EAAG,OAAO,KAAA;AAC5E,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA,EAGA,OAAO,KAAA,EAAoC;AACzC,IAAA,OAAO,KAAA,CAAM,IAAA,IAAQ,KAAA,CAAM,EAAA,IAAM,IAAA;AAAA,EACnC;AAAA;AAAA,EAGA,IAAI,WAAA,GAA6B;AAC/B,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,QAAA,IAAY,IAAA,CAAK,OAAA,CAAQ,EAAA;AAC1C,IAAA,OAAO,GAAA,CAAI,MAAA,GAAS,CAAA,GAAI,GAAA,GAAM,IAAA;AAAA,EAChC;AAAA;AAAA,EAGA,IAAI,WAAA,GAA6B;AAC/B,IAAA,MAAM,UAAU,IAAA,CAAK,WAAA;AACrB,IAAA,OAAO,YAAY,IAAA,GAAO,IAAA,GAAO,CAAA,EAAG,cAAc,GAAG,OAAO,CAAA,CAAA;AAAA,EAC9D;AAAA,EAEA,SAAS,GAAA,EAA4B;AACnC,IAAA,IAAI;AACF,MAAA,OAAO,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,GAAG,CAAA;AAAA,IACxC,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEA,QAAA,CAAS,KAAa,KAAA,EAAqB;AACzC,IAAA,IAAI;AACF,MAAA,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,GAAA,EAAK,KAAK,CAAA;AAAA,IACxC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEA,YAAY,GAAA,EAAmB;AAC7B,IAAA,IAAI;AACF,MAAA,MAAA,CAAO,YAAA,CAAa,WAAW,GAAG,CAAA;AAAA,IACpC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACF","file":"persist_controller.js","sourcesContent":["/**\n * Self-cleaning timer registries shared by Stimeo controllers.\n *\n * Stimulus controllers frequently schedule `setTimeout` / `setInterval` work\n * (auto-dismiss, debouncing, polling). When the element leaves the DOM — a\n * Turbo Drive navigation, a Turbo Stream replacement, or any `disconnect()` —\n * orphaned timers keep firing against a detached controller, leaking memory and\n * mutating stale state. {@link SafeTimeout} and {@link SafeInterval} track every\n * timer they create so a single {@link TimerRegistry.clearAll | clearAll()} call\n * in `disconnect()` tears them all down.\n *\n * These are intentionally low-level primitives: they own *registration and\n * cleanup only*. Higher-level policy (pause/resume, remaining-time accounting)\n * stays in the individual controllers so per-widget semantics are not flattened\n * into a lowest-common-denominator helper.\n */\n\n/**\n * Shared registry bookkeeping for the timeout/interval variants.\n *\n * Subclasses provide the scheduling primitive ({@link schedule}) and its matching\n * canceller ({@link cancel}); this base owns the set of live ids plus the\n * per-id and bulk teardown shared by both.\n */\nabstract class TimerRegistry {\n  /** Live timer ids that have not yet been cleared (or, for timeouts, fired). */\n  protected readonly ids = new Set<number>();\n\n  /** Schedules the underlying platform timer and returns its id. */\n  protected abstract schedule(callback: () => void, delay: number): number;\n\n  /** Cancels the underlying platform timer for `id`. */\n  protected abstract cancel(id: number): void;\n\n  /**\n   * Cancels a single tracked timer.\n   *\n   * No-ops if the id is unknown (already cleared, fired, or never owned by this\n   * registry), so callers can clear defensively without guarding.\n   */\n  clear(id: number): void {\n    if (this.ids.delete(id)) {\n      this.cancel(id);\n    }\n  }\n\n  /**\n   * Cancels every tracked timer. Call this from a controller's `disconnect()`\n   * to guarantee no timer outlives the element.\n   */\n  clearAll(): void {\n    for (const id of this.ids) {\n      this.cancel(id);\n    }\n    this.ids.clear();\n  }\n\n  /** Number of timers currently tracked (pending). */\n  get size(): number {\n    return this.ids.size;\n  }\n}\n\n/**\n * `setTimeout` wrapper that auto-forgets each timer once it fires and supports\n * bulk teardown on disconnect.\n *\n * @example\n * ```ts\n * #timers = new SafeTimeout();\n *\n * connect() {\n *   this.#timers.set(() => this.dismiss(), 5000);\n * }\n *\n * disconnect() {\n *   this.#timers.clearAll();\n * }\n * ```\n */\nexport class SafeTimeout extends TimerRegistry {\n  /**\n   * Schedules `callback` after `delay` ms and returns the timer id.\n   *\n   * The id is removed from the registry automatically when the timeout fires,\n   * so {@link TimerRegistry.size | size} reflects only still-pending timers.\n   */\n  set(callback: () => void, delay: number): number {\n    const id = this.schedule(() => {\n      this.ids.delete(id);\n      callback();\n    }, delay);\n    this.ids.add(id);\n    return id;\n  }\n\n  protected schedule(callback: () => void, delay: number): number {\n    return window.setTimeout(callback, delay);\n  }\n\n  protected cancel(id: number): void {\n    window.clearTimeout(id);\n  }\n}\n\n/**\n * `setInterval` wrapper that tracks every interval for bulk teardown on\n * disconnect. Unlike {@link SafeTimeout}, intervals are retained until they are\n * explicitly cleared because they fire repeatedly.\n *\n * @example\n * ```ts\n * #intervals = new SafeInterval();\n *\n * connect() {\n *   this.#intervals.set(() => this.tick(), 1000);\n * }\n *\n * disconnect() {\n *   this.#intervals.clearAll();\n * }\n * ```\n */\nexport class SafeInterval extends TimerRegistry {\n  /** Schedules a repeating `callback` every `delay` ms and returns the timer id. */\n  set(callback: () => void, delay: number): number {\n    const id = this.schedule(callback, delay);\n    this.ids.add(id);\n    return id;\n  }\n\n  protected schedule(callback: () => void, delay: number): number {\n    return window.setInterval(callback, delay);\n  }\n\n  protected cancel(id: number): void {\n    window.clearInterval(id);\n  }\n}\n","import { Controller } from \"@hotwired/stimulus\";\nimport { SafeTimeout } from \"../utils/safe_timeout\";\n\n/** Field controls this controller can persist. */\ntype PersistField = HTMLInputElement | HTMLTextAreaElement | HTMLSelectElement;\n\n/** Input types that carry no meaningful, restorable value. */\nconst NON_VALUE_TYPES = new Set([\"file\", \"submit\", \"reset\", \"button\", \"image\"]);\n/** localStorage key prefix so drafts never clobber unrelated app storage. */\nconst STORAGE_PREFIX = \"stimeo--persist:\";\n/** Separator for disambiguating repeated same-name fields (cannot occur in a real field name). */\nconst OCCURRENCE_SEP = \"\\u0000\";\n\n/**\n * Headless draft-autosave behavior: persists a form's field values to\n * `localStorage` and restores them across Turbo navigations and reloads (no APG\n * pattern; a state-holding utility). The Alpine `persist` equivalent.\n *\n * Markup contract (identifier: `stimeo--persist`):\n *   <form data-controller=\"stimeo--persist\"\n *         data-stimeo--persist-key-value=\"contact-draft\">\n *     <input name=\"name\">\n *     <textarea name=\"message\"></textarea>\n *   </form>\n *\n * On connect it restores any saved values under `key` (falling back to the\n * element's `id`), then debounce-saves on every input/change. Password fields (and\n * anything in `exclude`) are never written. A `clear()` action — or the `clearOn`\n * event (e.g. `submit`) — drops the draft. Restoring never moves focus.\n *\n * @remarks\n * Behavior only. State lives entirely in `localStorage` (no module-scope state), so\n * instances never interfere. The input listener and debounce timer are removed on\n * `disconnect()` (Turbo navigation included), where a pending save is flushed first\n * so an in-flight edit is not lost.\n */\nexport class PersistController extends Controller<HTMLElement> {\n  static override targets = [\"field\"];\n  static override values = {\n    key: { type: String, default: \"\" },\n    debounce: { type: Number, default: 400 },\n    exclude: { type: Array, default: [\"password\"] },\n    clearOn: { type: String, default: \"\" },\n  };\n  static actions = [\"clear\"] as const;\n  static events = [\"restore\", \"save\", \"clear\"] as const;\n\n  declare readonly fieldTargets: PersistField[];\n  declare readonly hasFieldTarget: boolean;\n\n  declare keyValue: string;\n  declare debounceValue: number;\n  declare excludeValue: string[];\n  declare clearOnValue: string;\n\n  readonly #timeouts = new SafeTimeout();\n  #saveId: number | null = null;\n\n  readonly #onInput = (): void => {\n    this.#scheduleSave();\n  };\n\n  readonly #onClearEvent = (): void => {\n    this.clear();\n  };\n\n  override connect(): void {\n    if (this.#storageKey === null) return;\n    this.#restore();\n    this.element.addEventListener(\"input\", this.#onInput);\n    this.element.addEventListener(\"change\", this.#onInput);\n    if (this.clearOnValue.length > 0) {\n      this.element.addEventListener(this.clearOnValue, this.#onClearEvent);\n    }\n  }\n\n  override disconnect(): void {\n    this.element.removeEventListener(\"input\", this.#onInput);\n    this.element.removeEventListener(\"change\", this.#onInput);\n    if (this.clearOnValue.length > 0) {\n      this.element.removeEventListener(this.clearOnValue, this.#onClearEvent);\n    }\n    // Flush a pending save so an in-flight edit survives a Turbo navigation.\n    if (this.#saveId !== null) {\n      this.#timeouts.clear(this.#saveId);\n      this.#saveId = null;\n      this.#write();\n    }\n    this.#timeouts.clearAll();\n  }\n\n  /** Drops the saved draft and clears the restored marker. */\n  clear(): void {\n    const key = this.#storageKey;\n    if (key === null) return;\n    if (this.#saveId !== null) {\n      this.#timeouts.clear(this.#saveId);\n      this.#saveId = null;\n    }\n    this.#removeItem(key);\n    this.element.removeAttribute(\"data-persist-restored\");\n    this.dispatch(\"clear\", { detail: { key: this.#logicalKey } });\n  }\n\n  /** Schedules a debounced save. */\n  #scheduleSave(): void {\n    if (this.#saveId !== null) this.#timeouts.clear(this.#saveId);\n    this.#saveId = this.#timeouts.set(() => {\n      this.#saveId = null;\n      this.#save();\n    }, this.debounceValue);\n  }\n\n  /** Writes the current values and emits `save`. */\n  #save(): void {\n    this.#write();\n    this.dispatch(\"save\", { detail: { key: this.#logicalKey } });\n  }\n\n  /** Serializes persistable fields and stores them under the storage key. */\n  #write(): void {\n    const key = this.#storageKey;\n    if (key === null) return;\n    const data: Record<string, unknown> = {};\n    for (const { field, key: fieldKey } of this.#fieldEntries()) {\n      if (field instanceof HTMLInputElement && field.type === \"checkbox\") {\n        data[fieldKey] = field.checked;\n      } else if (field instanceof HTMLInputElement && field.type === \"radio\") {\n        if (field.checked) data[fieldKey] = field.value;\n      } else if (field instanceof HTMLSelectElement && field.multiple) {\n        data[fieldKey] = Array.from(field.selectedOptions).map((o) => o.value);\n      } else {\n        data[fieldKey] = field.value;\n      }\n    }\n    this.#setItem(key, JSON.stringify(data));\n  }\n\n  /** Applies any saved values to the fields, without moving focus. */\n  #restore(): void {\n    const key = this.#storageKey;\n    if (key === null) return;\n    const raw = this.#getItem(key);\n    if (raw === null) return;\n    let data: Record<string, unknown>;\n    try {\n      data = JSON.parse(raw) as Record<string, unknown>;\n    } catch {\n      return;\n    }\n    let restoredAny = false;\n    for (const { field, key: fieldKey } of this.#fieldEntries()) {\n      if (!Object.hasOwn(data, fieldKey)) continue;\n      this.#applyValue(field, data[fieldKey]);\n      restoredAny = true;\n    }\n    if (restoredAny) {\n      this.element.setAttribute(\"data-persist-restored\", \"true\");\n      this.dispatch(\"restore\", { detail: { key: this.#logicalKey } });\n    }\n  }\n\n  /** Sets a single field's value from a stored entry. */\n  #applyValue(field: PersistField, value: unknown): void {\n    if (field instanceof HTMLInputElement && field.type === \"checkbox\") {\n      field.checked = Boolean(value);\n    } else if (field instanceof HTMLInputElement && field.type === \"radio\") {\n      field.checked = field.value === value;\n    } else if (field instanceof HTMLSelectElement && field.multiple) {\n      const selected = new Set(Array.isArray(value) ? value.map(String) : []);\n      for (const option of Array.from(field.options)) {\n        option.selected = selected.has(option.value);\n      }\n    } else {\n      field.value = String(value);\n    }\n  }\n\n  /**\n   * Persistable fields paired with a stable storage key. Uniquely-named fields key\n   * by their name. Repeated same-name fields (e.g. a `tags[]` checkbox group or\n   * array text inputs) are disambiguated by DOM-order occurrence — the first keeps\n   * its plain `name`, later ones get a NUL-separated index suffix — so each is\n   * stored and restored individually instead of the last one clobbering the rest.\n   * Radios are the exception: a group intentionally shares one key (one value per\n   * name).\n   */\n  #fieldEntries(): Array<{ field: PersistField; key: string }> {\n    const entries: Array<{ field: PersistField; key: string }> = [];\n    const occurrence = new Map<string, number>();\n    for (const field of this.#fields()) {\n      const name = this.#keyOf(field);\n      if (name === null) continue;\n      if (field instanceof HTMLInputElement && field.type === \"radio\") {\n        entries.push({ field, key: name });\n        continue;\n      }\n      const seen = occurrence.get(name) ?? 0;\n      occurrence.set(name, seen + 1);\n      entries.push({ field, key: seen === 0 ? name : `${name}${OCCURRENCE_SEP}${seen}` });\n    }\n    return entries;\n  }\n\n  /** The fields to persist: `field` targets, or the element's named controls. */\n  #fields(): PersistField[] {\n    const candidates = this.hasFieldTarget\n      ? this.fieldTargets\n      : Array.from(this.element.querySelectorAll<PersistField>(\"input, textarea, select\"));\n    return candidates.filter((field) => this.#persistable(field));\n  }\n\n  /** Whether a field carries a restorable, non-excluded value. */\n  #persistable(field: PersistField): boolean {\n    if (this.#keyOf(field) === null) return false;\n    const type = field instanceof HTMLInputElement ? field.type : \"\";\n    if (NON_VALUE_TYPES.has(type)) return false;\n    if (this.excludeValue.includes(type)) return false;\n    if (field.name.length > 0 && this.excludeValue.includes(field.name)) return false;\n    return true;\n  }\n\n  /** A stable storage sub-key for a field (its name, else id). */\n  #keyOf(field: PersistField): string | null {\n    return field.name || field.id || null;\n  }\n\n  /** The logical key (key Value or element id), or null when neither is set. */\n  get #logicalKey(): string | null {\n    const key = this.keyValue || this.element.id;\n    return key.length > 0 ? key : null;\n  }\n\n  /** The prefixed localStorage key, or null when persistence is disabled. */\n  get #storageKey(): string | null {\n    const logical = this.#logicalKey;\n    return logical === null ? null : `${STORAGE_PREFIX}${logical}`;\n  }\n\n  #getItem(key: string): string | null {\n    try {\n      return window.localStorage.getItem(key);\n    } catch {\n      return null;\n    }\n  }\n\n  #setItem(key: string, value: string): void {\n    try {\n      window.localStorage.setItem(key, value);\n    } catch {\n      // Storage full or unavailable (private mode): persistence is best-effort.\n    }\n  }\n\n  #removeItem(key: string): void {\n    try {\n      window.localStorage.removeItem(key);\n    } catch {\n      // Ignore: nothing to clear if storage is unavailable.\n    }\n  }\n}\n"]}
+{"version":3,"sources":["../../src/utils/safe_timeout.ts","../../src/utils/string_list.ts","../../src/controllers/persist_controller.ts"],"names":[],"mappings":";;;;;AAwBA,IAAe,gBAAf,MAA6B;AAAA;AAAA,EAER,GAAA,uBAAU,GAAA,EAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAczC,MAAM,EAAA,EAAkB;AACtB,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,EAAE,CAAA,EAAG;AACvB,MAAA,IAAA,CAAK,OAAO,EAAE,CAAA;AAAA,IAChB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAA,GAAiB;AACf,IAAA,KAAA,MAAW,EAAA,IAAM,KAAK,GAAA,EAAK;AACzB,MAAA,IAAA,CAAK,OAAO,EAAE,CAAA;AAAA,IAChB;AACA,IAAA,IAAA,CAAK,IAAI,KAAA,EAAM;AAAA,EACjB;AAAA;AAAA,EAGA,IAAI,IAAA,GAAe;AACjB,IAAA,OAAO,KAAK,GAAA,CAAI,IAAA;AAAA,EAClB;AACF,CAAA;AAmBO,IAAM,WAAA,GAAN,cAA0B,aAAA,CAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO7C,GAAA,CAAI,UAAsB,KAAA,EAAuB;AAC/C,IAAA,MAAM,EAAA,GAAK,IAAA,CAAK,QAAA,CAAS,MAAM;AAC7B,MAAA,IAAA,CAAK,GAAA,CAAI,OAAO,EAAE,CAAA;AAClB,MAAA,QAAA,EAAS;AAAA,IACX,GAAG,KAAK,CAAA;AACR,IAAA,IAAA,CAAK,GAAA,CAAI,IAAI,EAAE,CAAA;AACf,IAAA,OAAO,EAAA;AAAA,EACT;AAAA,EAEU,QAAA,CAAS,UAAsB,KAAA,EAAuB;AAC9D,IAAA,OAAO,MAAA,CAAO,UAAA,CAAW,QAAA,EAAU,KAAK,CAAA;AAAA,EAC1C;AAAA,EAEU,OAAO,EAAA,EAAkB;AACjC,IAAA,MAAA,CAAO,aAAa,EAAE,CAAA;AAAA,EACxB;AACF,CAAA;;;ACxEO,SAAS,eAAA,CAAgB,GAAA,EAAa,QAAA,GAA8B,EAAC,EAAa;AAIvF,EAAA,MAAM,IAAA,GAAO,IAAI,IAAA,EAAK;AACtB,EAAA,IAAI,KAAK,MAAA,KAAW,CAAA,EAAG,OAAO,CAAC,GAAG,QAAQ,CAAA;AAE1C,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EAC1B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,CAAC,GAAG,QAAQ,CAAA;AAAA,EACrB;AAEA,EAAA,IAAI,CAAC,MAAM,OAAA,CAAQ,MAAM,GAAG,OAAO,CAAC,GAAG,QAAQ,CAAA;AAC/C,EAAA,OAAO,OAAO,MAAA,CAAO,CAAC,KAAA,KAA2B,OAAO,UAAU,QAAQ,CAAA;AAC5E;;;ACvCA,IAAM,eAAA,uBAAsB,GAAA,CAAI,CAAC,QAAQ,QAAA,EAAU,OAAA,EAAS,QAAA,EAAU,OAAO,CAAC,CAAA;AAE9E,IAAM,eAAA,GAAkB,CAAC,UAAU,CAAA;AAEnC,IAAM,cAAA,GAAiB,kBAAA;AAEvB,IAAM,cAAA,GAAiB,IAAA;AAyBhB,IAAM,iBAAA,GAAN,cAAgC,UAAA,CAAwB;AAAA,EAC7D,OAAgB,OAAA,GAAU,CAAC,OAAO,CAAA;AAAA,EAClC,OAAgB,MAAA,GAAS;AAAA,IACvB,GAAA,EAAK,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,EAAA,EAAG;AAAA,IACjC,QAAA,EAAU,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,GAAA,EAAI;AAAA;AAAA;AAAA;AAAA,IAIvC,OAAA,EAAS,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,EAAA,EAAG;AAAA,IACrC,OAAA,EAAS,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,EAAA;AAAG,GACvC;AAAA,EACA,OAAO,OAAA,GAAU,CAAC,OAAO,CAAA;AAAA,EACzB,OAAO,MAAA,GAAS,CAAC,SAAA,EAAW,QAAQ,OAAO,CAAA;AAAA,EAUlC,SAAA,GAAY,IAAI,WAAA,EAAY;AAAA,EACrC,OAAA,GAAyB,IAAA;AAAA,EAEhB,WAAW,MAAY;AAC9B,IAAA,IAAA,CAAK,aAAA,EAAc;AAAA,EACrB,CAAA;AAAA,EAES,gBAAgB,MAAY;AACnC,IAAA,IAAA,CAAK,KAAA,EAAM;AAAA,EACb,CAAA;AAAA,EAES,OAAA,GAAgB;AACvB,IAAA,IAAI,IAAA,CAAK,gBAAgB,IAAA,EAAM;AAC/B,IAAA,IAAA,CAAK,QAAA,EAAS;AACd,IAAA,IAAA,CAAK,OAAA,CAAQ,gBAAA,CAAiB,OAAA,EAAS,IAAA,CAAK,QAAQ,CAAA;AACpD,IAAA,IAAA,CAAK,OAAA,CAAQ,gBAAA,CAAiB,QAAA,EAAU,IAAA,CAAK,QAAQ,CAAA;AACrD,IAAA,IAAI,IAAA,CAAK,YAAA,CAAa,MAAA,GAAS,CAAA,EAAG;AAChC,MAAA,IAAA,CAAK,OAAA,CAAQ,gBAAA,CAAiB,IAAA,CAAK,YAAA,EAAc,KAAK,aAAa,CAAA;AAAA,IACrE;AAAA,EACF;AAAA,EAES,UAAA,GAAmB;AAC1B,IAAA,IAAA,CAAK,OAAA,CAAQ,mBAAA,CAAoB,OAAA,EAAS,IAAA,CAAK,QAAQ,CAAA;AACvD,IAAA,IAAA,CAAK,OAAA,CAAQ,mBAAA,CAAoB,QAAA,EAAU,IAAA,CAAK,QAAQ,CAAA;AACxD,IAAA,IAAI,IAAA,CAAK,YAAA,CAAa,MAAA,GAAS,CAAA,EAAG;AAChC,MAAA,IAAA,CAAK,OAAA,CAAQ,mBAAA,CAAoB,IAAA,CAAK,YAAA,EAAc,KAAK,aAAa,CAAA;AAAA,IACxE;AAEA,IAAA,IAAI,IAAA,CAAK,YAAY,IAAA,EAAM;AACzB,MAAA,IAAA,CAAK,SAAA,CAAU,KAAA,CAAM,IAAA,CAAK,OAAO,CAAA;AACjC,MAAA,IAAA,CAAK,OAAA,GAAU,IAAA;AACf,MAAA,IAAA,CAAK,MAAA,EAAO;AAAA,IACd;AACA,IAAA,IAAA,CAAK,UAAU,QAAA,EAAS;AAAA,EAC1B;AAAA;AAAA,EAGA,KAAA,GAAc;AACZ,IAAA,MAAM,MAAM,IAAA,CAAK,WAAA;AACjB,IAAA,IAAI,QAAQ,IAAA,EAAM;AAClB,IAAA,IAAI,IAAA,CAAK,YAAY,IAAA,EAAM;AACzB,MAAA,IAAA,CAAK,SAAA,CAAU,KAAA,CAAM,IAAA,CAAK,OAAO,CAAA;AACjC,MAAA,IAAA,CAAK,OAAA,GAAU,IAAA;AAAA,IACjB;AACA,IAAA,IAAA,CAAK,YAAY,GAAG,CAAA;AACpB,IAAA,IAAA,CAAK,OAAA,CAAQ,gBAAgB,uBAAuB,CAAA;AACpD,IAAA,IAAA,CAAK,QAAA,CAAS,SAAS,EAAE,MAAA,EAAQ,EAAE,GAAA,EAAK,IAAA,CAAK,WAAA,EAAY,EAAG,CAAA;AAAA,EAC9D;AAAA;AAAA,EAGA,aAAA,GAAsB;AACpB,IAAA,IAAI,KAAK,OAAA,KAAY,IAAA,OAAW,SAAA,CAAU,KAAA,CAAM,KAAK,OAAO,CAAA;AAC5D,IAAA,IAAA,CAAK,OAAA,GAAU,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,MAAM;AACtC,MAAA,IAAA,CAAK,OAAA,GAAU,IAAA;AACf,MAAA,IAAA,CAAK,KAAA,EAAM;AAAA,IACb,CAAA,EAAG,KAAK,aAAa,CAAA;AAAA,EACvB;AAAA;AAAA,EAGA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,MAAA,EAAO;AACZ,IAAA,IAAA,CAAK,QAAA,CAAS,QAAQ,EAAE,MAAA,EAAQ,EAAE,GAAA,EAAK,IAAA,CAAK,WAAA,EAAY,EAAG,CAAA;AAAA,EAC7D;AAAA;AAAA,EAGA,MAAA,GAAe;AACb,IAAA,MAAM,MAAM,IAAA,CAAK,WAAA;AACjB,IAAA,IAAI,QAAQ,IAAA,EAAM;AAClB,IAAA,MAAM,OAAgC,EAAC;AACvC,IAAA,KAAA,MAAW,EAAE,KAAA,EAAO,GAAA,EAAK,UAAS,IAAK,IAAA,CAAK,eAAc,EAAG;AAC3D,MAAA,IAAI,KAAA,YAAiB,gBAAA,IAAoB,KAAA,CAAM,IAAA,KAAS,UAAA,EAAY;AAClE,QAAA,IAAA,CAAK,QAAQ,IAAI,KAAA,CAAM,OAAA;AAAA,MACzB,CAAA,MAAA,IAAW,KAAA,YAAiB,gBAAA,IAAoB,KAAA,CAAM,SAAS,OAAA,EAAS;AACtE,QAAA,IAAI,KAAA,CAAM,OAAA,EAAS,IAAA,CAAK,QAAQ,IAAI,KAAA,CAAM,KAAA;AAAA,MAC5C,CAAA,MAAA,IAAW,KAAA,YAAiB,iBAAA,IAAqB,KAAA,CAAM,QAAA,EAAU;AAC/D,QAAA,IAAA,CAAK,QAAQ,CAAA,GAAI,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,eAAe,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,KAAK,CAAA;AAAA,MACvE,CAAA,MAAO;AACL,QAAA,IAAA,CAAK,QAAQ,IAAI,KAAA,CAAM,KAAA;AAAA,MACzB;AAAA,IACF;AACA,IAAA,IAAA,CAAK,QAAA,CAAS,GAAA,EAAK,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,EACzC;AAAA;AAAA,EAGA,QAAA,GAAiB;AACf,IAAA,MAAM,MAAM,IAAA,CAAK,WAAA;AACjB,IAAA,IAAI,QAAQ,IAAA,EAAM;AAClB,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA;AAC7B,IAAA,IAAI,QAAQ,IAAA,EAAM;AAClB,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI;AACF,MAAA,IAAA,GAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,IACvB,CAAA,CAAA,MAAQ;AACN,MAAA;AAAA,IACF;AACA,IAAA,IAAI,WAAA,GAAc,KAAA;AAClB,IAAA,KAAA,MAAW,EAAE,KAAA,EAAO,GAAA,EAAK,UAAS,IAAK,IAAA,CAAK,eAAc,EAAG;AAC3D,MAAA,IAAI,CAAC,MAAA,CAAO,MAAA,CAAO,IAAA,EAAM,QAAQ,CAAA,EAAG;AACpC,MAAA,IAAA,CAAK,WAAA,CAAY,KAAA,EAAO,IAAA,CAAK,QAAQ,CAAC,CAAA;AACtC,MAAA,WAAA,GAAc,IAAA;AAAA,IAChB;AACA,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,IAAA,CAAK,OAAA,CAAQ,YAAA,CAAa,uBAAA,EAAyB,MAAM,CAAA;AACzD,MAAA,IAAA,CAAK,QAAA,CAAS,WAAW,EAAE,MAAA,EAAQ,EAAE,GAAA,EAAK,IAAA,CAAK,WAAA,EAAY,EAAG,CAAA;AAAA,IAChE;AAAA,EACF;AAAA;AAAA,EAGA,WAAA,CAAY,OAAqB,KAAA,EAAsB;AACrD,IAAA,IAAI,KAAA,YAAiB,gBAAA,IAAoB,KAAA,CAAM,IAAA,KAAS,UAAA,EAAY;AAClE,MAAA,KAAA,CAAM,OAAA,GAAU,QAAQ,KAAK,CAAA;AAAA,IAC/B,CAAA,MAAA,IAAW,KAAA,YAAiB,gBAAA,IAAoB,KAAA,CAAM,SAAS,OAAA,EAAS;AACtE,MAAA,KAAA,CAAM,OAAA,GAAU,MAAM,KAAA,KAAU,KAAA;AAAA,IAClC,CAAA,MAAA,IAAW,KAAA,YAAiB,iBAAA,IAAqB,KAAA,CAAM,QAAA,EAAU;AAC/D,MAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,CAAM,GAAA,CAAI,MAAM,CAAA,GAAI,EAAE,CAAA;AACtE,MAAA,KAAA,MAAW,MAAA,IAAU,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA,EAAG;AAC9C,QAAA,MAAA,CAAO,QAAA,GAAW,QAAA,CAAS,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA;AAAA,MAC7C;AAAA,IACF,CAAA,MAAO;AACL,MAAA,KAAA,CAAM,KAAA,GAAQ,OAAO,KAAK,CAAA;AAAA,IAC5B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,aAAA,GAA6D;AAC3D,IAAA,MAAM,UAAuD,EAAC;AAC9D,IAAA,MAAM,UAAA,uBAAiB,GAAA,EAAoB;AAC3C,IAAA,KAAA,MAAW,KAAA,IAAS,IAAA,CAAK,OAAA,EAAQ,EAAG;AAClC,MAAA,MAAM,IAAA,GAAO,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA;AAC9B,MAAA,IAAI,SAAS,IAAA,EAAM;AACnB,MAAA,IAAI,KAAA,YAAiB,gBAAA,IAAoB,KAAA,CAAM,IAAA,KAAS,OAAA,EAAS;AAC/D,QAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,KAAA,EAAO,GAAA,EAAK,MAAM,CAAA;AACjC,QAAA;AAAA,MACF;AACA,MAAA,MAAM,IAAA,GAAO,UAAA,CAAW,GAAA,CAAI,IAAI,CAAA,IAAK,CAAA;AACrC,MAAA,UAAA,CAAW,GAAA,CAAI,IAAA,EAAM,IAAA,GAAO,CAAC,CAAA;AAC7B,MAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,KAAA,EAAO,GAAA,EAAK,SAAS,CAAA,GAAI,IAAA,GAAO,CAAA,EAAG,IAAI,CAAA,EAAG,cAAc,CAAA,EAAG,IAAI,IAAI,CAAA;AAAA,IACpF;AACA,IAAA,OAAO,OAAA;AAAA,EACT;AAAA;AAAA,EAGA,OAAA,GAA0B;AACxB,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,cAAA,GACpB,IAAA,CAAK,YAAA,GACL,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,gBAAA,CAA+B,yBAAyB,CAAC,CAAA;AAGrF,IAAA,MAAM,QAAA,GAAW,eAAA,CAAgB,IAAA,CAAK,YAAA,EAAc,eAAe,CAAA;AACnE,IAAA,OAAO,UAAA,CAAW,OAAO,CAAC,KAAA,KAAU,KAAK,YAAA,CAAa,KAAA,EAAO,QAAQ,CAAC,CAAA;AAAA,EACxE;AAAA;AAAA,EAGA,YAAA,CAAa,OAAqB,QAAA,EAAsC;AACtE,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA,KAAM,MAAM,OAAO,KAAA;AACxC,IAAA,MAAM,IAAA,GAAO,KAAA,YAAiB,gBAAA,GAAmB,KAAA,CAAM,IAAA,GAAO,EAAA;AAC9D,IAAA,IAAI,eAAA,CAAgB,GAAA,CAAI,IAAI,CAAA,EAAG,OAAO,KAAA;AACtC,IAAA,IAAI,QAAA,CAAS,QAAA,CAAS,IAAI,CAAA,EAAG,OAAO,KAAA;AACpC,IAAA,IAAI,KAAA,CAAM,KAAK,MAAA,GAAS,CAAA,IAAK,SAAS,QAAA,CAAS,KAAA,CAAM,IAAI,CAAA,EAAG,OAAO,KAAA;AACnE,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA,EAGA,OAAO,KAAA,EAAoC;AACzC,IAAA,OAAO,KAAA,CAAM,IAAA,IAAQ,KAAA,CAAM,EAAA,IAAM,IAAA;AAAA,EACnC;AAAA;AAAA,EAGA,IAAI,WAAA,GAA6B;AAC/B,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,QAAA,IAAY,IAAA,CAAK,OAAA,CAAQ,EAAA;AAC1C,IAAA,OAAO,GAAA,CAAI,MAAA,GAAS,CAAA,GAAI,GAAA,GAAM,IAAA;AAAA,EAChC;AAAA;AAAA,EAGA,IAAI,WAAA,GAA6B;AAC/B,IAAA,MAAM,UAAU,IAAA,CAAK,WAAA;AACrB,IAAA,OAAO,YAAY,IAAA,GAAO,IAAA,GAAO,CAAA,EAAG,cAAc,GAAG,OAAO,CAAA,CAAA;AAAA,EAC9D;AAAA,EAEA,SAAS,GAAA,EAA4B;AACnC,IAAA,IAAI;AACF,MAAA,OAAO,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,GAAG,CAAA;AAAA,IACxC,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEA,QAAA,CAAS,KAAa,KAAA,EAAqB;AACzC,IAAA,IAAI;AACF,MAAA,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,GAAA,EAAK,KAAK,CAAA;AAAA,IACxC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEA,YAAY,GAAA,EAAmB;AAC7B,IAAA,IAAI;AACF,MAAA,MAAA,CAAO,YAAA,CAAa,WAAW,GAAG,CAAA;AAAA,IACpC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACF","file":"persist_controller.js","sourcesContent":["/**\n * Self-cleaning timer registries shared by Stimeo controllers.\n *\n * Stimulus controllers frequently schedule `setTimeout` / `setInterval` work\n * (auto-dismiss, debouncing, polling). When the element leaves the DOM — a\n * Turbo Drive navigation, a Turbo Stream replacement, or any `disconnect()` —\n * orphaned timers keep firing against a detached controller, leaking memory and\n * mutating stale state. {@link SafeTimeout} and {@link SafeInterval} track every\n * timer they create so a single {@link TimerRegistry.clearAll | clearAll()} call\n * in `disconnect()` tears them all down.\n *\n * These are intentionally low-level primitives: they own *registration and\n * cleanup only*. Higher-level policy (pause/resume, remaining-time accounting)\n * stays in the individual controllers so per-widget semantics are not flattened\n * into a lowest-common-denominator helper.\n */\n\n/**\n * Shared registry bookkeeping for the timeout/interval variants.\n *\n * Subclasses provide the scheduling primitive ({@link schedule}) and its matching\n * canceller ({@link cancel}); this base owns the set of live ids plus the\n * per-id and bulk teardown shared by both.\n */\nabstract class TimerRegistry {\n  /** Live timer ids that have not yet been cleared (or, for timeouts, fired). */\n  protected readonly ids = new Set<number>();\n\n  /** Schedules the underlying platform timer and returns its id. */\n  protected abstract schedule(callback: () => void, delay: number): number;\n\n  /** Cancels the underlying platform timer for `id`. */\n  protected abstract cancel(id: number): void;\n\n  /**\n   * Cancels a single tracked timer.\n   *\n   * No-ops if the id is unknown (already cleared, fired, or never owned by this\n   * registry), so callers can clear defensively without guarding.\n   */\n  clear(id: number): void {\n    if (this.ids.delete(id)) {\n      this.cancel(id);\n    }\n  }\n\n  /**\n   * Cancels every tracked timer. Call this from a controller's `disconnect()`\n   * to guarantee no timer outlives the element.\n   */\n  clearAll(): void {\n    for (const id of this.ids) {\n      this.cancel(id);\n    }\n    this.ids.clear();\n  }\n\n  /** Number of timers currently tracked (pending). */\n  get size(): number {\n    return this.ids.size;\n  }\n}\n\n/**\n * `setTimeout` wrapper that auto-forgets each timer once it fires and supports\n * bulk teardown on disconnect.\n *\n * @example\n * ```ts\n * #timers = new SafeTimeout();\n *\n * connect() {\n *   this.#timers.set(() => this.dismiss(), 5000);\n * }\n *\n * disconnect() {\n *   this.#timers.clearAll();\n * }\n * ```\n */\nexport class SafeTimeout extends TimerRegistry {\n  /**\n   * Schedules `callback` after `delay` ms and returns the timer id.\n   *\n   * The id is removed from the registry automatically when the timeout fires,\n   * so {@link TimerRegistry.size | size} reflects only still-pending timers.\n   */\n  set(callback: () => void, delay: number): number {\n    const id = this.schedule(() => {\n      this.ids.delete(id);\n      callback();\n    }, delay);\n    this.ids.add(id);\n    return id;\n  }\n\n  protected schedule(callback: () => void, delay: number): number {\n    return window.setTimeout(callback, delay);\n  }\n\n  protected cancel(id: number): void {\n    window.clearTimeout(id);\n  }\n}\n\n/**\n * `setInterval` wrapper that tracks every interval for bulk teardown on\n * disconnect. Unlike {@link SafeTimeout}, intervals are retained until they are\n * explicitly cleared because they fire repeatedly.\n *\n * @example\n * ```ts\n * #intervals = new SafeInterval();\n *\n * connect() {\n *   this.#intervals.set(() => this.tick(), 1000);\n * }\n *\n * disconnect() {\n *   this.#intervals.clearAll();\n * }\n * ```\n */\nexport class SafeInterval extends TimerRegistry {\n  /** Schedules a repeating `callback` every `delay` ms and returns the timer id. */\n  set(callback: () => void, delay: number): number {\n    const id = this.schedule(callback, delay);\n    this.ids.add(id);\n    return id;\n  }\n\n  protected schedule(callback: () => void, delay: number): number {\n    return window.setInterval(callback, delay);\n  }\n\n  protected cancel(id: number): void {\n    window.clearInterval(id);\n  }\n}\n","/**\n * JSON string-list parsing for the controllers that take a list as a Value.\n *\n * Stimulus offers an `Array` Value type, but its reader runs `JSON.parse` inside\n * the value observer — **before** the `<name>ValueChanged` callback — and\n * rethrows on malformed text. The throw propagates out of the observer that runs\n * during connection, so a single unparseable attribute stops the controller from\n * connecting at all: no lifecycle callback runs and the element is left inert\n * rather than degraded. A consumer cannot guard against it either, because the\n * callback that would hold the `try` never runs.\n *\n * Declaring the attribute as a `String` Value and parsing it here keeps a\n * malformed declaration local to the value it declares. The attribute text is\n * identical either way (`'[\"a\", \"b\"]'`), so markup does not change with the\n * declaration.\n */\n\n/**\n * Parses `raw` as a JSON array of strings.\n *\n * Returns `fallback` when the text is absent, unparseable, or not an array, so a\n * malformed declaration behaves like an omitted one. A parsed array keeps only\n * its string entries: every caller indexes or compares strings, and a stray\n * number would otherwise sit in the list without ever matching.\n *\n * An explicit `\"[]\"` is honoured as an empty list rather than falling back — it\n * is the only way to declare \"none\" against a non-empty default.\n *\n * @param raw - the attribute text, e.g. `'[\"password\"]'`.\n * @param fallback - the list to use when `raw` declares nothing usable.\n */\nexport function parseStringList(raw: string, fallback: readonly string[] = []): string[] {\n  // The common case is an undeclared attribute, and `JSON.parse(\"\")` answers it\n  // by throwing. Reaching the same fallback without building an exception keeps\n  // the callers that ask per element off that path.\n  const text = raw.trim();\n  if (text.length === 0) return [...fallback];\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(text);\n  } catch {\n    return [...fallback];\n  }\n\n  if (!Array.isArray(parsed)) return [...fallback];\n  return parsed.filter((entry): entry is string => typeof entry === \"string\");\n}\n","import { Controller } from \"@hotwired/stimulus\";\nimport { SafeTimeout } from \"../utils/safe_timeout\";\nimport { parseStringList } from \"../utils/string_list\";\n\n/** Field controls this controller can persist. */\ntype PersistField = HTMLInputElement | HTMLTextAreaElement | HTMLSelectElement;\n\n/** Input types that carry no meaningful, restorable value. */\nconst NON_VALUE_TYPES = new Set([\"file\", \"submit\", \"reset\", \"button\", \"image\"]);\n/** Field types and names skipped unless the consumer declares its own list. */\nconst DEFAULT_EXCLUDE = [\"password\"];\n/** localStorage key prefix so drafts never clobber unrelated app storage. */\nconst STORAGE_PREFIX = \"stimeo--persist:\";\n/** Separator for disambiguating repeated same-name fields (cannot occur in a real field name). */\nconst OCCURRENCE_SEP = \"\\u0000\";\n\n/**\n * Headless draft-autosave behavior: persists a form's field values to\n * `localStorage` and restores them across Turbo navigations and reloads (no APG\n * pattern; a state-holding utility).\n *\n * Markup contract (identifier: `stimeo--persist`):\n *   <form data-controller=\"stimeo--persist\"\n *         data-stimeo--persist-key-value=\"contact-draft\">\n *     <input name=\"name\">\n *     <textarea name=\"message\"></textarea>\n *   </form>\n *\n * On connect it restores any saved values under `key` (falling back to the\n * element's `id`), then debounce-saves on every input/change. Password fields (and\n * anything in `exclude`) are never written. A `clear()` action — or the `clearOn`\n * event (e.g. `submit`) — drops the draft. Restoring never moves focus.\n *\n * @remarks\n * Behavior only. State lives entirely in `localStorage` (no module-scope state), so\n * instances never interfere. The input listener and debounce timer are removed on\n * `disconnect()` (Turbo navigation included), where a pending save is flushed first\n * so an in-flight edit is not lost.\n */\nexport class PersistController extends Controller<HTMLElement> {\n  static override targets = [\"field\"];\n  static override values = {\n    key: { type: String, default: \"\" },\n    debounce: { type: Number, default: 400 },\n    // A JSON list read through `parseStringList` rather than Stimulus's `Array`\n    // type: that reader throws out of the value observer before any callback\n    // runs, so one malformed attribute would stop the controller connecting.\n    exclude: { type: String, default: \"\" },\n    clearOn: { type: String, default: \"\" },\n  };\n  static actions = [\"clear\"] as const;\n  static events = [\"restore\", \"save\", \"clear\"] as const;\n\n  declare readonly fieldTargets: PersistField[];\n  declare readonly hasFieldTarget: boolean;\n\n  declare keyValue: string;\n  declare debounceValue: number;\n  declare excludeValue: string;\n  declare clearOnValue: string;\n\n  readonly #timeouts = new SafeTimeout();\n  #saveId: number | null = null;\n\n  readonly #onInput = (): void => {\n    this.#scheduleSave();\n  };\n\n  readonly #onClearEvent = (): void => {\n    this.clear();\n  };\n\n  override connect(): void {\n    if (this.#storageKey === null) return;\n    this.#restore();\n    this.element.addEventListener(\"input\", this.#onInput);\n    this.element.addEventListener(\"change\", this.#onInput);\n    if (this.clearOnValue.length > 0) {\n      this.element.addEventListener(this.clearOnValue, this.#onClearEvent);\n    }\n  }\n\n  override disconnect(): void {\n    this.element.removeEventListener(\"input\", this.#onInput);\n    this.element.removeEventListener(\"change\", this.#onInput);\n    if (this.clearOnValue.length > 0) {\n      this.element.removeEventListener(this.clearOnValue, this.#onClearEvent);\n    }\n    // Flush a pending save so an in-flight edit survives a Turbo navigation.\n    if (this.#saveId !== null) {\n      this.#timeouts.clear(this.#saveId);\n      this.#saveId = null;\n      this.#write();\n    }\n    this.#timeouts.clearAll();\n  }\n\n  /** Drops the saved draft and clears the restored marker. */\n  clear(): void {\n    const key = this.#storageKey;\n    if (key === null) return;\n    if (this.#saveId !== null) {\n      this.#timeouts.clear(this.#saveId);\n      this.#saveId = null;\n    }\n    this.#removeItem(key);\n    this.element.removeAttribute(\"data-persist-restored\");\n    this.dispatch(\"clear\", { detail: { key: this.#logicalKey } });\n  }\n\n  /** Schedules a debounced save. */\n  #scheduleSave(): void {\n    if (this.#saveId !== null) this.#timeouts.clear(this.#saveId);\n    this.#saveId = this.#timeouts.set(() => {\n      this.#saveId = null;\n      this.#save();\n    }, this.debounceValue);\n  }\n\n  /** Writes the current values and emits `save`. */\n  #save(): void {\n    this.#write();\n    this.dispatch(\"save\", { detail: { key: this.#logicalKey } });\n  }\n\n  /** Serializes persistable fields and stores them under the storage key. */\n  #write(): void {\n    const key = this.#storageKey;\n    if (key === null) return;\n    const data: Record<string, unknown> = {};\n    for (const { field, key: fieldKey } of this.#fieldEntries()) {\n      if (field instanceof HTMLInputElement && field.type === \"checkbox\") {\n        data[fieldKey] = field.checked;\n      } else if (field instanceof HTMLInputElement && field.type === \"radio\") {\n        if (field.checked) data[fieldKey] = field.value;\n      } else if (field instanceof HTMLSelectElement && field.multiple) {\n        data[fieldKey] = Array.from(field.selectedOptions).map((o) => o.value);\n      } else {\n        data[fieldKey] = field.value;\n      }\n    }\n    this.#setItem(key, JSON.stringify(data));\n  }\n\n  /** Applies any saved values to the fields, without moving focus. */\n  #restore(): void {\n    const key = this.#storageKey;\n    if (key === null) return;\n    const raw = this.#getItem(key);\n    if (raw === null) return;\n    let data: Record<string, unknown>;\n    try {\n      data = JSON.parse(raw) as Record<string, unknown>;\n    } catch {\n      return;\n    }\n    let restoredAny = false;\n    for (const { field, key: fieldKey } of this.#fieldEntries()) {\n      if (!Object.hasOwn(data, fieldKey)) continue;\n      this.#applyValue(field, data[fieldKey]);\n      restoredAny = true;\n    }\n    if (restoredAny) {\n      this.element.setAttribute(\"data-persist-restored\", \"true\");\n      this.dispatch(\"restore\", { detail: { key: this.#logicalKey } });\n    }\n  }\n\n  /** Sets a single field's value from a stored entry. */\n  #applyValue(field: PersistField, value: unknown): void {\n    if (field instanceof HTMLInputElement && field.type === \"checkbox\") {\n      field.checked = Boolean(value);\n    } else if (field instanceof HTMLInputElement && field.type === \"radio\") {\n      field.checked = field.value === value;\n    } else if (field instanceof HTMLSelectElement && field.multiple) {\n      const selected = new Set(Array.isArray(value) ? value.map(String) : []);\n      for (const option of Array.from(field.options)) {\n        option.selected = selected.has(option.value);\n      }\n    } else {\n      field.value = String(value);\n    }\n  }\n\n  /**\n   * Persistable fields paired with a stable storage key. Uniquely-named fields key\n   * by their name. Repeated same-name fields (e.g. a `tags[]` checkbox group or\n   * array text inputs) are disambiguated by DOM-order occurrence — the first keeps\n   * its plain `name`, later ones get a NUL-separated index suffix — so each is\n   * stored and restored individually instead of the last one clobbering the rest.\n   * Radios are the exception: a group intentionally shares one key (one value per\n   * name).\n   */\n  #fieldEntries(): Array<{ field: PersistField; key: string }> {\n    const entries: Array<{ field: PersistField; key: string }> = [];\n    const occurrence = new Map<string, number>();\n    for (const field of this.#fields()) {\n      const name = this.#keyOf(field);\n      if (name === null) continue;\n      if (field instanceof HTMLInputElement && field.type === \"radio\") {\n        entries.push({ field, key: name });\n        continue;\n      }\n      const seen = occurrence.get(name) ?? 0;\n      occurrence.set(name, seen + 1);\n      entries.push({ field, key: seen === 0 ? name : `${name}${OCCURRENCE_SEP}${seen}` });\n    }\n    return entries;\n  }\n\n  /** The fields to persist: `field` targets, or the element's named controls. */\n  #fields(): PersistField[] {\n    const candidates = this.hasFieldTarget\n      ? this.fieldTargets\n      : Array.from(this.element.querySelectorAll<PersistField>(\"input, textarea, select\"));\n    // The exclusion list is fixed for the pass, so it is read once here rather\n    // than per candidate.\n    const excluded = parseStringList(this.excludeValue, DEFAULT_EXCLUDE);\n    return candidates.filter((field) => this.#persistable(field, excluded));\n  }\n\n  /** Whether a field carries a restorable, non-excluded value. */\n  #persistable(field: PersistField, excluded: readonly string[]): boolean {\n    if (this.#keyOf(field) === null) return false;\n    const type = field instanceof HTMLInputElement ? field.type : \"\";\n    if (NON_VALUE_TYPES.has(type)) return false;\n    if (excluded.includes(type)) return false;\n    if (field.name.length > 0 && excluded.includes(field.name)) return false;\n    return true;\n  }\n\n  /** A stable storage sub-key for a field (its name, else id). */\n  #keyOf(field: PersistField): string | null {\n    return field.name || field.id || null;\n  }\n\n  /** The logical key (key Value or element id), or null when neither is set. */\n  get #logicalKey(): string | null {\n    const key = this.keyValue || this.element.id;\n    return key.length > 0 ? key : null;\n  }\n\n  /** The prefixed localStorage key, or null when persistence is disabled. */\n  get #storageKey(): string | null {\n    const logical = this.#logicalKey;\n    return logical === null ? null : `${STORAGE_PREFIX}${logical}`;\n  }\n\n  #getItem(key: string): string | null {\n    try {\n      return window.localStorage.getItem(key);\n    } catch {\n      return null;\n    }\n  }\n\n  #setItem(key: string, value: string): void {\n    try {\n      window.localStorage.setItem(key, value);\n    } catch {\n      // Storage full or unavailable (private mode): persistence is best-effort.\n    }\n  }\n\n  #removeItem(key: string): void {\n    try {\n      window.localStorage.removeItem(key);\n    } catch {\n      // Ignore: nothing to clear if storage is unavailable.\n    }\n  }\n}\n"]}

package/dist/controllers/pointer_drag_controller.js

@@ -12,6 +12,16 @@ function isReservedArrowChord(event, allow = []) {
 var DetachGate = class _DetachGate {
   /** Set while a probe is queued, waiting for a reconnect to cancel it. */
   #pending = false;
+  /**
+   * True while a probe is queued — the last disconnect was ambiguous and no
+   * reconnect has cancelled it yet. Read it from `connect()` to tell the
+   * reconnect half of an in-page move from a first connect: a controller whose
+   * initialisation restarts a measurement (a min-duration floor, an elapsed
+   * counter) must skip it for the move, where nothing actually restarted.
+   */
+  get pending() {
+    return this.#pending;
+  }
   /**
    * True when the disconnect is definitely a real detach — the element left
    * the document, or `data-controller` no longer lists the identifier. False