user accounts pages: show every table column in full

Wide tables break out of the 900px text column to the window width (up to
1600px) instead of clipping, long code in cells wraps, short code tokens
stay on one line, and long inline code and code blocks wrap on phones.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: pkgdemon

nextbsd-ua-directoryservice-port.html

@@ -41,6 +41,17 @@
   td.warn { color:var(--warn); font-weight:600; }
   .table-scroll { overflow-x:auto; }
   @media (max-width:640px) { .wrap { padding:28px 16px 64px; } h1 { font-size:1.6rem; } th,td { padding:7px 8px; } }
+  /* wide tables: break out of the text column, wrap long code instead of clipping */
+  .table-scroll { --bleed:min(calc(100vw - 48px), 1600px); width:var(--bleed); margin-left:calc((100% - var(--bleed)) / 2); overflow-x:auto; }
+  p code, li code { overflow-wrap:anywhere; }
+  .table-scroll table { width:100%; }
+  td code, th code { white-space:normal; overflow-wrap:anywhere; hyphens:none; }
+  td code.nw, th code.nw { white-space:nowrap; }
+  @media (max-width:1100px) { td code.nw, th code.nw { white-space:normal; } }
+  td, th { overflow-wrap:anywhere; hyphens:none; }
+  .table-scroll td:first-child { min-width:11em; }
+  pre { white-space:pre-wrap; overflow-wrap:anywhere; }
+  pre code { white-space:pre-wrap; overflow-wrap:anywhere; }
 </style>
 </head>
 <body>
@@ -330,5 +341,6 @@ <h2 id="sources">9. Sources</h2>
 
 <p class="footnote">Option A of the NextBSD user-accounts epic. Companion options cover other shapes for the same seven requirements. Planning only; no code compiled. Items marked inferred should be checked in source before a ticket is cut.</p>
 </div>
+<script data-nowrap-short>document.querySelectorAll("td code, th code").forEach(function(c){ if (c.textContent.length <= 18) c.classList.add("nw"); });</script>
 </body>
 </html>

nextbsd-ua-gershwin-ds-redesign.html

@@ -41,6 +41,17 @@
   td.warn { color:var(--warn); font-weight:600; }
   .table-scroll { overflow-x:auto; }
   @media (max-width:640px) { .wrap { padding:28px 16px 64px; } h1 { font-size:1.6rem; } th,td { padding:7px 8px; } }
+  /* wide tables: break out of the text column, wrap long code instead of clipping */
+  .table-scroll { --bleed:min(calc(100vw - 48px), 1600px); width:var(--bleed); margin-left:calc((100% - var(--bleed)) / 2); overflow-x:auto; }
+  p code, li code { overflow-wrap:anywhere; }
+  .table-scroll table { width:100%; }
+  td code, th code { white-space:normal; overflow-wrap:anywhere; hyphens:none; }
+  td code.nw, th code.nw { white-space:nowrap; }
+  @media (max-width:1100px) { td code.nw, th code.nw { white-space:normal; } }
+  td, th { overflow-wrap:anywhere; hyphens:none; }
+  .table-scroll td:first-child { min-width:11em; }
+  pre { white-space:pre-wrap; overflow-wrap:anywhere; }
+  pre code { white-space:pre-wrap; overflow-wrap:anywhere; }
 </style>
 </head>
 <body>
@@ -358,5 +369,6 @@ <h2 id="sources">12. Sources</h2>
 
 <p class="footnote">Everything attributed to Gershwin or FreeBSD above was read in source at the stated revisions. The launchd <code>Sockets</code> check-in behaviour, the plist file mode, and the NFS-under-launchd claims are inferred and are phase 0/1 tests. No NextBSD machine ran any of this. Written 2026-09-21.</p>
 </div>
+<script data-nowrap-short>document.querySelectorAll("td code, th code").forEach(function(c){ if (c.textContent.length <= 18) c.classList.add("nw"); });</script>
 </body>
 </html>

nextbsd-ua-netinfo-port.html

@@ -41,6 +41,17 @@
   td.warn { color:var(--warn); font-weight:600; }
   .table-scroll { overflow-x:auto; }
   @media (max-width:640px) { .wrap { padding:28px 16px 64px; } h1 { font-size:1.6rem; } th,td { padding:7px 8px; } }
+  /* wide tables: break out of the text column, wrap long code instead of clipping */
+  .table-scroll { --bleed:min(calc(100vw - 48px), 1600px); width:var(--bleed); margin-left:calc((100% - var(--bleed)) / 2); overflow-x:auto; }
+  p code, li code { overflow-wrap:anywhere; }
+  .table-scroll table { width:100%; }
+  td code, th code { white-space:normal; overflow-wrap:anywhere; hyphens:none; }
+  td code.nw, th code.nw { white-space:nowrap; }
+  @media (max-width:1100px) { td code.nw, th code.nw { white-space:normal; } }
+  td, th { overflow-wrap:anywhere; hyphens:none; }
+  .table-scroll td:first-child { min-width:11em; }
+  pre { white-space:pre-wrap; overflow-wrap:anywhere; }
+  pre code { white-space:pre-wrap; overflow-wrap:anywhere; }
 </style>
 </head>
 <body>
@@ -345,5 +356,6 @@ <h2 id="sources">12. Sources</h2>
 
 <p class="footnote">Verified: everything cited with a file and line above was read in the cloned trees; tag contents, commit dates and the missing lookupd repo were checked against GitHub; FreeBSD statements come from the linked man pages and commit. Inferred, and marked as such in the text: DHCP-driven binding, Apple&rsquo;s slapd back-netinfo bridge, whether Apple ever built these servers LP64, the exact wrapper command names, and all effort figures.</p>
 </div>
+<script data-nowrap-short>document.querySelectorAll("td code, th code").forEach(function(c){ if (c.textContent.length <= 18) c.classList.add("nw"); });</script>
 </body>
 </html>

nextbsd-user-accounts-spike.html

@@ -41,6 +41,17 @@
   td.warn { color:var(--warn); font-weight:600; }
   .table-scroll { overflow-x:auto; }
   @media (max-width:640px) { .wrap { padding:28px 16px 64px; } h1 { font-size:1.6rem; } th,td { padding:7px 8px; } }
+  /* wide tables: break out of the text column, wrap long code instead of clipping */
+  .table-scroll { --bleed:min(calc(100vw - 48px), 1600px); width:var(--bleed); margin-left:calc((100% - var(--bleed)) / 2); overflow-x:auto; }
+  p code, li code { overflow-wrap:anywhere; }
+  .table-scroll table { width:100%; }
+  td code, th code { white-space:normal; overflow-wrap:anywhere; hyphens:none; }
+  td code.nw, th code.nw { white-space:nowrap; }
+  @media (max-width:1100px) { td code.nw, th code.nw { white-space:normal; } }
+  td, th { overflow-wrap:anywhere; hyphens:none; }
+  .table-scroll td:first-child { min-width:11em; }
+  pre { white-space:pre-wrap; overflow-wrap:anywhere; }
+  pre code { white-space:pre-wrap; overflow-wrap:anywhere; }
 </style>
 </head>
 <body>
@@ -81,12 +92,12 @@ <h2 id="reqs">1. The requirements</h2>
 <p>The epic also vendors sudo and zsh into nextbsd-userland. All three docs checked the licences. sudo is ISC-style. zsh is MIT-style, but some files under <code>Functions/</code> are GPL and must be left out. Both are fine for base whichever option is chosen.</p>
 
 <h2 id="options">2. The three design docs</h2>
-<table>
+<div class="table-scroll"><table>
 <tr><th>Option</th><th>Design doc</th><th>One-line verdict</th></tr>
 <tr><td><strong>A</strong></td><td><a href="nextbsd-ua-directoryservice-port.html">Port Apple DirectoryService</a></td><td>This is the real Mac OS X 10.5/10.6 client architecture. It means 151,601 lines of 2011 C++ against Apple frameworks we only partly have. The daemon and its plugins are open, as are Apple&rsquo;s OpenLDAP and Kerberos builds. The setup tool <code>slapconfig</code>, the PasswordService daemon and Server Admin were not, so <code>promote</code> is new code either way (&sect;4).</td></tr>
 <tr><td><strong>B</strong></td><td><a href="nextbsd-ua-gershwin-ds-redesign.html">Gershwin DirectoryServices in C/CF</a></td><td>This is the shape and commands you already like, in about 7&ndash;8k lines. It is the fastest route to all seven requirements. Today&rsquo;s Gershwin code has serious security holes that the redesign has to fix.</td></tr>
 <tr><td><strong>C</strong></td><td><a href="nextbsd-ua-netinfo-port.html">Port NetInfo</a></td><td>This is the authentic NeXT and 10.0&ndash;10.4 stack, and it meets every requirement mechanically. It is insecure by design: every password hash is readable without authenticating, and trust is based on IP address. Hardening it removes the only reason to choose it.</td></tr>
-</table>
+</table></div>
 
 <h2 id="table">3. Side by side</h2>
 <div class="table-scroll">
@@ -752,14 +763,14 @@ <h2 id="rec">9. Recommendation</h2>
 </div>
 
 <h2 id="epic">10. What the epic would contain</h2>
-<table>
+<div class="table-scroll"><table>
 <tr><th>Phase</th><th>Work</th><th>Estimate</th><th>Done when</th></tr>
 <tr><td>0. Vendoring</td><td>sudo and zsh into nextbsd-userland; <code>/etc/shells</code>, <code>/etc/zshrc</code>, <code>sudoers.d/nextbsd</code> with <code>%admin ALL=(ALL) ALL</code></td><td>1&ndash;2 weeks</td><td><code>/bin/zsh</code> and <code>/usr/bin/sudo</code> are in the image</td></tr>
 <tr><td>1. Local directory</td><td><code>dsd</code> (launchd <code>org.nextbsd.dsd</code>, Mach name <code>org.nextbsd.ds</code>), <code>libds</code>, per-record store with Apple attribute names, root-only shadow hashes, <code>nss_ds</code>, <code>pam_ds</code> with <code>allow_nopass</code> for sudo only, and <code>dscli user|group|passwd</code></td><td>3&ndash;4 weeks</td><td>An admin is created in <code>/Local/Users</code> with zsh; sudo prompts only if a password is set; <code>/etc/passwd</code> holds only system users</td></tr>
 <tr><td>2. Base tool integration</td><td><code>adduser</code>, <code>pw</code>, <code>vipw</code> and <code>chpass</code> either call <code>dscli</code> or refuse for UIDs &ge; 500; the installer and LoginWindow use <code>libds</code>; migration from existing <code>master.passwd</code> users</td><td>1&ndash;2 weeks</td><td>No base tool can create a human user outside the directory</td></tr>
 <tr><td>3. NextBSD network</td><td><code>dscli promote</code> and <code>dscli join</code> over TLS with certificate pinning, Bonjour <code>_nextbsd-ds._tcp</code>, NFS <code>/Network/Users</code> mounted at join and at boot, network applications at <code>/Network/Applications</code></td><td>3&ndash;4 weeks</td><td>A second VM joins and a network user logs in with a <code>/Network/Users</code> home</td></tr>
 <tr><td>4. Open Directory shape</td><td>Promote also sets up OpenLDAP with Apple&rsquo;s schema and an MIT Kerberos realm; join can bind to any LDAP/Kerberos server; a Mac bind test</td><td>4&ndash;6 weeks</td><td>A real Mac binds to a NextBSD server, and NextBSD binds to an LDAP server</td></tr>
-</table>
+</table></div>
 <p>That totals about 3&ndash;4 months for one engineer, against 9&ndash;12 months for option&nbsp;A. Phase&nbsp;4 can move to its own epic if you want the shipping line drawn at phase&nbsp;3.</p>
 
 <h2 id="open">11. Open decisions</h2>
@@ -773,5 +784,6 @@ <h2 id="open">11. Open decisions</h2>
 
 <p class="footnote">Design docs: <a href="nextbsd-ua-directoryservice-port.html">A: Apple DirectoryService</a> &middot; <a href="nextbsd-ua-gershwin-ds-redesign.html">B: Gershwin DirectoryServices in C/CF</a> &middot; <a href="nextbsd-ua-netinfo-port.html">C: NetInfo</a>. Background: <a href="nextbsd-opendirectory-research.html">Directory services before opendirectoryd</a> and the earlier <a href="nextbsd-directoryservices-plan.html">directoryservicesd porting plan</a>, which this spike supersedes for the account-management epic.</p>
 </div>
+<script data-nowrap-short>document.querySelectorAll("td code, th code").forEach(function(c){ if (c.textContent.length <= 18) c.classList.add("nw"); });</script>
 </body>
 </html>