carlos / platform Public

console: app-name pattern accepts what the server accepts

The claim doors lowercase before validating; the browser input must
not refuse what the CLI door takes.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Paul Campbell 6c6abf4506ac265126ec231021e7c646d80d8811 parent 27e2b66
1 file changed, +1 −1
  • internal/console/templates/app_new.html +1 −1
diff --git a/internal/console/templates/app_new.html b/internal/console/templates/app_new.html
index f3814a228..02d232e8d 100644
--- a/internal/console/templates/app_new.html
+++ b/internal/console/templates/app_new.html
@@ -10,7 +10,7 @@
<input type="hidden" name="csrf" value="{{.CSRF}}">
<label class="visually-hidden" for="app-name">App name</label>
<input id="app-name" type="text" name="name" placeholder="my-app" autofocus
- required pattern="[a-z][a-z0-9-]{0,31}" maxlength="32">
+ required pattern="[A-Za-z][A-Za-z0-9-]{0,31}" maxlength="32">
<button type="submit">Create app</button>
</form>
<p class="small">Names are lowercase letters, digits, and dashes, starting with a letter — unique within this account, not across the platform.</p>