fix(deps): update nanoid to 3.3.17 and undici to 8.9.0

fix(vault): let the list toolbar wrap instead of overflowing (#348 )
.list-head is a single-line flex row whose buttons are nowrap and cannot shrink below their labels. The duplicates view adds a detection mode select and a Select-duplicates button to the standard search/sort/sync set, exceeding the list column (capped at 540px on desktop), so the shrinkable controls crush to slivers and the fixed buttons overlap and spill out of the column. Allow wrapping: views that fit stay on one line; crowded toolbars flow to a second row. Mobile is unaffected (it switches .list-head to its own grid).
2026-09-19 11:10:12 +00:00 · 2026-08-10 20:01:43 +08:00 · 2026-08-10 19:39:36 +08:00 · 2026-08-10 19:39:15 +08:00 · 2026-08-10 19:38:52 +08:00 · 2026-08-10 19:38:27 +08:00
6 changed files with 32 additions and 27 deletions
@@ -3904,9 +3904,9 @@
      }
    },
    "node_modules/nanoid": {
-      "version": "3.3.16",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.16.tgz",
-      "integrity": "sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==",
+      "version": "3.3.17",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.17.tgz",
+      "integrity": "sha512-xQLf0A3HOMlgHq0n247/LRuAOYmB7dXJ/DvAxGvsSBij45XtBSmQycu+F8ODbHwns/XyFZagyL1+J0Offw1E0g==",
      "dev": true,
      "funding": [
        {
@@ -4734,9 +4734,9 @@
      }
    },
    "node_modules/undici": {
-      "version": "8.5.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-8.5.0.tgz",
-      "integrity": "sha512-xamtWoB1EshgjpmlXd7GGm2VfdDtw1+rD8uhry8pSNW3If6S8E0m2T2+orSKeZXEn/aPJMviCpDBA65WJt8zhg==",
+      "version": "8.9.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-8.9.0.tgz",
+      "integrity": "sha512-aWZpUj7XoGonMClx4gdDRfgBjqeA+F473aDmROQQbM9n6PRfK/u1q/a0X4wMTgcHfT8H6fpbt98PFuDUwFg2YA==",
      "dev": true,
      "license": "MIT",
      "engines": {
@@ -48,7 +48,8 @@
    }
  },
  "overrides": {
-    "undici": ">=7.28.0",
+    "nanoid": "3.3.17",
+    "undici": "8.9.0",
    "@babel/core": ">=7.29.6",
    "esbuild": ">=0.28.1",
    "ws": "8.21.0",
@@ -369,7 +369,7 @@
 .not-found-code {
  @apply rounded-full px-3 py-1 text-sm font-extrabold;
  background: #eef4ff;
-  color: #1d4ed8;
+  color: var(--primary-hover);
 }

 .not-found-copy {
@@ -574,7 +574,7 @@

 .jwt-inline-link {
  @apply font-bold no-underline;
-  color: #1d4ed8;
+  color: var(--primary-hover);
 }

 .jwt-inline-link:hover {
@@ -613,7 +613,7 @@

 .standalone-footer a {
  @apply font-bold no-underline;
-  color: #1d4ed8;
+  color: var(--primary-hover);
 }

 .standalone-footer a:hover {
@@ -622,5 +622,5 @@

 .standalone-version {
  @apply font-bold;
-  color: #1d4ed8;
+  color: var(--primary-hover);
 }
@@ -220,7 +220,7 @@
 }

 :root[data-theme='dark'] .card-brand-icon {
-  color: #bfdbfe;
+  color: var(--primary-strong);
  background: linear-gradient(180deg, #1f2937 0%, #111827 100%);
  border-color: color-mix(in srgb, var(--primary) 30%, var(--line));
 }
@@ -99,7 +99,7 @@
  @apply inline-flex h-[22px] w-[22px] shrink-0 cursor-pointer items-center justify-center rounded-full p-0 text-[13px] font-extrabold leading-none;
  border: 1px solid #bfd1f3;
  background: #eef4ff;
-  color: #1d4ed8;
+  color: var(--primary-hover);
 }

 .backup-help-trigger:hover,
@@ -194,7 +194,7 @@
 }

 .backup-recommendation-step a {
-  color: #1d4ed8;
+  color: var(--primary-hover);
  font-weight: 700;
  text-decoration: underline;
  text-underline-offset: 2px;
@@ -316,14 +316,14 @@
 }

 .backup-interval-preset:hover:not(:disabled) {
-  border-color: #2563eb;
-  color: #2563eb;
+  border-color: var(--primary);
+  color: var(--primary);
  background: #eff6ff;
 }

 .backup-interval-preset.active {
-  border-color: #2563eb;
-  background: #2563eb;
+  border-color: var(--primary);
+  background: var(--primary);
  color: #fff;
 }

@@ -1786,7 +1786,7 @@
 }

 .restore-progress-item.active {
-  color: #1d4ed8;
+  color: var(--primary-hover);
 }

 .restore-progress-item.done {
@@ -1799,7 +1799,7 @@
 }

 .restore-progress-item.active .restore-progress-dot {
-  background: #1d4ed8;
+  background: var(--primary-hover);
 }

 .restore-progress-item.done .restore-progress-dot {
@@ -1871,7 +1871,7 @@
 .authorized-device-checkbox {
  width: 16px;
  height: 16px;
-  accent-color: #2563eb;
+  accent-color: var(--primary);
 }

 .authorized-devices-table td:first-child {
@@ -1879,7 +1879,9 @@
 }

 .authorized-devices-actions {
-  flex-wrap: nowrap;
+  /* Wrap instead of clipping: four non-shrinking buttons overflow the
+     fixed 26% actions column at common widths, hiding Delete entirely. */
+  flex-wrap: wrap;
  gap: 6px;
 }

@@ -47,7 +47,7 @@
 }

 .folder-add-btn:hover {
-  color: #1d4ed8;
+  color: var(--primary-hover);
 }

 .search-input {
@@ -161,7 +161,7 @@
 }

 .folder-sort-btn:hover {
-  color: #1d4ed8;
+  color: var(--primary-hover);
  background: #dbeafe;
  transform: scale(1.06);
 }
@@ -230,7 +230,7 @@ select.input.duplicate-mode-toolbar-select {
 }

 .list-head {
-  @apply mb-1.5 flex items-center gap-2;
+  @apply mb-1.5 flex flex-wrap items-center gap-2;
  min-height: 34px;
 }

@@ -860,7 +860,9 @@ select.input.duplicate-mode-toolbar-select {

 .kv-row {
  @apply grid items-center gap-2.5 py-2.5;
-  grid-template-columns: minmax(0px, 80px) minmax(0, 1fr) auto;
+  /* Floor the value column so the auto-sized actions column wraps its
+     buttons instead of collapsing the value to 0 width. */
+  grid-template-columns: minmax(0px, 80px) minmax(min(35%, 140px), 1fr) auto;
  border-bottom: 1px solid rgba(154, 172, 205, 0.22);
 }

@@ -962,7 +964,7 @@ select.input.duplicate-mode-toolbar-select {
 }

 .totp-ring-progress {
-  stroke: #2563eb;
+  stroke: var(--primary);
  stroke-linecap: round;
  transition: stroke-dashoffset 260ms linear, stroke 200ms ease;
 }
Author	SHA1	Message	Date
shuaiplus	b3630bdaf5	fix(deps): update nanoid to 3.3.17 and undici to 8.9.0	2026-08-10 20:01:43 +08:00
Cordero Core	38b0ff6263	fix(vault): let the list toolbar wrap instead of overflowing (#348 ) .list-head is a single-line flex row whose buttons are nowrap and cannot shrink below their labels. The duplicates view adds a detection mode select and a Select-duplicates button to the standard search/sort/sync set, exceeding the list column (capped at 540px on desktop), so the shrinkable controls crush to slivers and the fixed buttons overlap and spill out of the column. Allow wrapping: views that fit stay on one line; crowded toolbars flow to a second row. Mobile is unaffected (it switches .list-head to its own grid).	2026-08-10 19:39:36 +08:00
Cordero Core	ecc0d134ac	fix(devices): wrap authorized-device action buttons instead of clipping (#347 ) .authorized-devices-actions forced its four buttons (Untrust, Trust permanently, Device note, Delete) onto one non-wrapping, non-shrinking line inside the fixed 26% actions column. At common desktop widths the row overflows the column and table-layout: fixed clips it at the panel edge, cutting off Device note and hiding Delete entirely. Let the buttons wrap to a second line instead.	2026-08-10 19:39:15 +08:00
Cordero Core	f644baaf8d	fix(vault): stop detail-row value column collapsing to zero width (#346 ) The .kv-row grid sized its actions column with auto, letting it claim content width before the minmax(0, 1fr) value column. Once the Check breach button joined Reveal and Copy, label + actions could exceed the row width, resolving the value column to 0px; combined with overflow-wrap: anywhere this rendered masked passwords as a vertical column of one asterisk per line at common desktop widths. Give the value column a floor of min(35%, 140px) so the actions column shrinks and wraps its buttons (kv-actions already has flex-wrap) before the value collapses.	2026-08-10 19:38:52 +08:00
Cordero Core	fb627f59f0	fix(styles): use theme tokens for hardcoded brand blues (#345 ) Replace hardcoded #1d4ed8 / #2563eb / #bfdbfe values with their exact design-token equivalents (--primary, --primary-hover, --primary-strong) in 17 declarations across auth, dark, management, and vault styles. Light theme is pixel-identical: every replaced hex equals the token's light value. In dark theme this fixes spots that dark.css never overrode and that kept light-theme blues on dark backgrounds: standalone footer links and version badge, JWT warning inline link, restore-progress active dot, TOTP countdown ring, and the authorized-device checkbox accent. Intentionally left alone: .btn-primary gradients (would lighten dark buttons under white text), card brand colors (Amex/Maestro/RuPay blues are brand constants, not theme colors), and light-pill pairings whose backgrounds have no token (.log-mode-option.active, .log-category-auth, .log-level-info, .folder-edit-btn:hover, #93c5fd borders).	2026-08-10 19:38:27 +08:00