@adelie/server 0.0.0-stage → 0.4.2

package/dist/chunk-K4ZSUT72.js

@@ -0,0 +1,34 @@
+// src/initial-password.ts
+import fs from "fs";
+import path from "path";
+function initialAdminPasswordPath(root) {
+  return path.join(root, "initial-admin-password");
+}
+function clearInitialAdminPassword(root) {
+  try {
+    fs.rmSync(initialAdminPasswordPath(root), { force: true });
+  } catch {
+  }
+}
+var NOTICE_PADDING = 3;
+function renderFirstLoginNotice(url) {
+  const lines = [
+    "This server has no admin password yet. Open this link to claim it:",
+    "",
+    `  ${url}`,
+    "",
+    "The link lasts 30 days or until a password is set; restarting prints a fresh one."
+  ];
+  const width = Math.max(...lines.map((line) => line.length));
+  const bar = `+${"-".repeat(width + NOTICE_PADDING * 2)}+`;
+  const pad = " ".repeat(NOTICE_PADDING);
+  const body = lines.map((line) => `|${pad}${line.padEnd(width)}${pad}|`);
+  return [bar, ...body, bar].join("\n");
+}
+
+export {
+  initialAdminPasswordPath,
+  clearInitialAdminPassword,
+  renderFirstLoginNotice
+};
+//# sourceMappingURL=chunk-K4ZSUT72.js.map

package/dist/chunk-K4ZSUT72.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/initial-password.ts"],"sourcesContent":["/** The framed first-run notice carrying the first-login link (minted in auth/service.ts). */\nimport fs from \"node:fs\";\nimport path from \"node:path\";\n\nexport function initialAdminPasswordPath(root: string): string {\n  return path.join(root, \"initial-admin-password\");\n}\n\n/**\n * Removes the plaintext an older build stored here; nothing writes it any more.\n *\n * TODO(compat): goes once no supported upgrade path can carry an `initial-admin-password`.\n */\nexport function clearInitialAdminPassword(root: string): void {\n  try {\n    fs.rmSync(initialAdminPasswordPath(root), { force: true });\n  } catch {\n    // Best-effort: a leftover file only re-prints a password that no longer works.\n  }\n}\n\nconst NOTICE_PADDING = 3;\n\n/**\n * Plain ASCII rather than box-drawing characters: a non-UTF-8 console (legacy Windows above\n * all) would mangle the frame around exactly the line it exists to highlight.\n */\nexport function renderFirstLoginNotice(url: string): string {\n  const lines = [\n    \"This server has no admin password yet. Open this link to claim it:\",\n    \"\",\n    `  ${url}`,\n    \"\",\n    \"The link lasts 30 days or until a password is set; restarting prints a fresh one.\",\n  ];\n  const width = Math.max(...lines.map((line) => line.length));\n  const bar = `+${\"-\".repeat(width + NOTICE_PADDING * 2)}+`;\n  const pad = \" \".repeat(NOTICE_PADDING);\n  const body = lines.map((line) => `|${pad}${line.padEnd(width)}${pad}|`);\n  return [bar, ...body, bar].join(\"\\n\");\n}\n"],"mappings":";AACA,OAAO,QAAQ;AACf,OAAO,UAAU;AAEV,SAAS,yBAAyB,MAAsB;AAC7D,SAAO,KAAK,KAAK,MAAM,wBAAwB;AACjD;AAOO,SAAS,0BAA0B,MAAoB;AAC5D,MAAI;AACF,OAAG,OAAO,yBAAyB,IAAI,GAAG,EAAE,OAAO,KAAK,CAAC;AAAA,EAC3D,QAAQ;AAAA,EAER;AACF;AAEA,IAAM,iBAAiB;AAMhB,SAAS,uBAAuB,KAAqB;AAC1D,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA;AAAA,IACA,KAAK,GAAG;AAAA,IACR;AAAA,IACA;AAAA,EACF;AACA,QAAM,QAAQ,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC;AAC1D,QAAM,MAAM,IAAI,IAAI,OAAO,QAAQ,iBAAiB,CAAC,CAAC;AACtD,QAAM,MAAM,IAAI,OAAO,cAAc;AACrC,QAAM,OAAO,MAAM,IAAI,CAAC,SAAS,IAAI,GAAG,GAAG,KAAK,OAAO,KAAK,CAAC,GAAG,GAAG,GAAG;AACtE,SAAO,CAAC,KAAK,GAAG,MAAM,GAAG,EAAE,KAAK,IAAI;AACtC;","names":[]}

package/dist/chunk-WPYTS7TI.js

@@ -0,0 +1,178 @@
+import {
+  __decorateElement,
+  __decoratorStart,
+  __publicField,
+  __runInitializers
+} from "./chunk-B5IP37ZQ.js";
+
+// src/db/repos/users.ts
+import { Component, Use } from "@adelie/core/kernel";
+function mapRow(r) {
+  return {
+    userId: r.user_id,
+    passwordHash: r.password_hash,
+    isAdmin: r.is_admin === 1,
+    passwordIsInitial: r.password_is_initial === 1,
+    displayName: r.display_name ?? null,
+    avatar: r.avatar ?? null,
+    lastLoginAt: r.last_login_at ?? null,
+    createdAt: r.created_at
+  };
+}
+var _db_dec, _UsersRepo_decorators, _init;
+_UsersRepo_decorators = [Component()], _db_dec = [Use()];
+var UsersRepo = class {
+  constructor() {
+    __publicField(this, "db", __runInitializers(_init, 8, this)), __runInitializers(_init, 11, this);
+  }
+  insert(row) {
+    this.db.prepare(
+      "INSERT INTO users (user_id, password_hash, is_admin, password_is_initial, display_name, avatar, last_login_at, created_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)"
+    ).run(
+      row.userId,
+      row.passwordHash,
+      row.isAdmin ? 1 : 0,
+      row.passwordIsInitial ? 1 : 0,
+      row.displayName,
+      row.avatar,
+      row.lastLoginAt,
+      row.createdAt
+    );
+  }
+  findById(userId) {
+    const r = this.db.prepare("SELECT * FROM users WHERE user_id = ?").get(userId);
+    return r ? mapRow(r) : null;
+  }
+  /** All users (for the admin user backend), ordered by creation time ascending. */
+  list() {
+    const rows = this.db.prepare("SELECT * FROM users ORDER BY created_at ASC, user_id ASC").all();
+    return rows.map(mapRow);
+  }
+  count() {
+    const r = this.db.prepare("SELECT COUNT(*) AS n FROM users").get();
+    return r?.n ?? 0;
+  }
+  /** Update the password hash; isInitial marks whether the password was set by someone else (seed / admin). */
+  updatePassword(userId, passwordHash, isInitial) {
+    this.db.prepare("UPDATE users SET password_hash = ?, password_is_initial = ? WHERE user_id = ?").run(passwordHash, isInitial ? 1 : 0, userId);
+  }
+  /**
+   * Stamp the account's most recent sign-in, overwriting whatever was there: the column is a
+   * "when did they last get in" fact, not a history (the admin user backend shows the one value).
+   */
+  touchLastLogin(userId, at) {
+    this.db.prepare("UPDATE users SET last_login_at = ? WHERE user_id = ?").run(at, userId);
+  }
+  /**
+   * Writes the profile fields the patch names, leaving the rest as they are: an absent key
+   * keeps the stored value, `null` clears it, a string replaces it. A patch naming neither
+   * field writes nothing rather than issuing an UPDATE with an empty SET list.
+   */
+  updateProfile(userId, patch) {
+    const sets = [];
+    const values = [];
+    if (patch.displayName !== void 0) {
+      sets.push("display_name = ?");
+      values.push(patch.displayName);
+    }
+    if (patch.avatar !== void 0) {
+      sets.push("avatar = ?");
+      values.push(patch.avatar);
+    }
+    if (sets.length === 0) return;
+    this.db.prepare(`UPDATE users SET ${sets.join(", ")} WHERE user_id = ?`).run(...values, userId);
+  }
+  /** Used by admin user deletion and account-creation compensation paths (owned Projects must be cleaned up first). */
+  delete(userId) {
+    this.db.prepare("DELETE FROM users WHERE user_id = ?").run(userId);
+  }
+};
+_init = __decoratorStart(null);
+__decorateElement(_init, 5, "db", _db_dec, UsersRepo);
+UsersRepo = __decorateElement(_init, 0, "UsersRepo", _UsersRepo_decorators, UsersRepo);
+__runInitializers(_init, 1, UsersRepo);
+
+// src/db/repos/auth-sessions.ts
+import { createHash, randomBytes } from "crypto";
+import { Component as Component2, Use as Use2 } from "@adelie/core/kernel";
+function sessionTokenHash(token) {
+  return createHash("sha256").update(token).digest("hex");
+}
+var _db_dec2, _AuthSessionsRepo_decorators, _init2;
+_AuthSessionsRepo_decorators = [Component2()], _db_dec2 = [Use2()];
+var AuthSessionsRepo = class {
+  constructor() {
+    __publicField(this, "db", __runInitializers(_init2, 8, this)), __runInitializers(_init2, 11, this);
+  }
+  /**
+   * Mints a session and returns the raw token for a cookie or the terminal. `maxTtlMs` caps a
+   * caller-supplied lifetime (`--ttl-seconds`): one longer than an ordinary session would make
+   * a leaked token file outlive every other credential, sliding forever. Expired rows are
+   * swept here too, so a cron that only mints does not accumulate them.
+   */
+  issue(opts) {
+    const ttlMs = Math.max(1e3, Math.min(opts.ttlMs, opts.maxTtlMs ?? opts.ttlMs));
+    const token = randomBytes(32).toString("base64url");
+    const createdAt = opts.now.toISOString();
+    const expiresAt = new Date(opts.now.getTime() + ttlMs).toISOString();
+    this.deleteExpired(createdAt);
+    this.insert({
+      tokenHash: sessionTokenHash(token),
+      userId: opts.userId,
+      createdAt,
+      expiresAt,
+      via: opts.via
+    });
+    return { token, expiresAt };
+  }
+  insert(row) {
+    this.db.prepare(
+      "INSERT INTO auth_sessions (token_hash, user_id, created_at, expires_at, via) VALUES (?, ?, ?, ?, ?)"
+    ).run(row.tokenHash, row.userId, row.createdAt, row.expiresAt, row.via);
+  }
+  findByTokenHash(tokenHash) {
+    const r = this.db.prepare("SELECT * FROM auth_sessions WHERE token_hash = ?").get(tokenHash);
+    if (!r) return null;
+    return {
+      tokenHash: r.token_hash,
+      userId: r.user_id,
+      createdAt: r.created_at,
+      expiresAt: r.expires_at,
+      via: r.via ?? null
+    };
+  }
+  /** Sliding renewal: update the expiration time. */
+  touch(tokenHash, expiresAt) {
+    this.db.prepare("UPDATE auth_sessions SET expires_at = ? WHERE token_hash = ?").run(expiresAt, tokenHash);
+  }
+  delete(tokenHash) {
+    this.db.prepare("DELETE FROM auth_sessions WHERE token_hash = ?").run(tokenHash);
+  }
+  /** Opportunistically clean up expired sessions (called during login/validation). */
+  deleteExpired(nowIso) {
+    this.db.prepare("DELETE FROM auth_sessions WHERE expires_at < ?").run(nowIso);
+  }
+  /** Clear all sessions for a user (forces re-login after an admin resets the password). */
+  deleteByUser(userId) {
+    this.db.prepare("DELETE FROM auth_sessions WHERE user_id = ?").run(userId);
+  }
+  /**
+   * Clear a user's sessions of one kind. Used to end EVERY first-login session when a password
+   * is set: an earlier boot's link may still be live in someone's scrollback, and a `setup`
+   * session may change the password without knowing the old one.
+   */
+  deleteByUserAndVia(userId, via) {
+    this.db.prepare("DELETE FROM auth_sessions WHERE user_id = ? AND via = ?").run(userId, via);
+  }
+};
+_init2 = __decoratorStart(null);
+__decorateElement(_init2, 5, "db", _db_dec2, AuthSessionsRepo);
+AuthSessionsRepo = __decorateElement(_init2, 0, "AuthSessionsRepo", _AuthSessionsRepo_decorators, AuthSessionsRepo);
+__runInitializers(_init2, 1, AuthSessionsRepo);
+
+export {
+  UsersRepo,
+  sessionTokenHash,
+  AuthSessionsRepo
+};
+//# sourceMappingURL=chunk-WPYTS7TI.js.map

package/dist/chunk-WPYTS7TI.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/repos/users.ts","../src/db/repos/auth-sessions.ts"],"sourcesContent":["/**\n * users table repo: pure SQL wrapper, no business rules.\n * user_id is the login name (a semantic id, specified at creation, immutable).\n */\nimport { Component, Use } from \"@adelie/core/kernel\";\nimport type { Db } from \"../../hmr/capabilities.js\";\nimport type { Users } from \"../../mechanisms/identity.js\";\n\nexport interface UserRow {\n  userId: string;\n  passwordHash: string;\n  isAdmin: boolean;\n  /** Still using the initial password (seeded / set by an admin); cleared to 0 once the user changes it. */\n  passwordIsInitial: boolean;\n  /** Nickname shown in place of the id; null = never set. */\n  displayName: string | null;\n  /** Avatar as a data URL; null = never set. */\n  avatar: string | null;\n  /** Most recent successful sign-in (ISO); null = never signed in — an account that exists but has not been used yet. */\n  lastLoginAt: string | null;\n  createdAt: string;\n}\n\nfunction mapRow(r: Record<string, unknown>): UserRow {\n  return {\n    userId: r.user_id as string,\n    passwordHash: r.password_hash as string,\n    isAdmin: (r.is_admin as number) === 1,\n    passwordIsInitial: (r.password_is_initial as number) === 1,\n    displayName: (r.display_name as string | null) ?? null,\n    avatar: (r.avatar as string | null) ?? null,\n    lastLoginAt: (r.last_login_at as string | null) ?? null,\n    createdAt: r.created_at as string,\n  };\n}\n\n@Component()\nexport class UsersRepo implements Users {\n  @Use() private readonly db!: Db;\n\n  insert(row: UserRow): void {\n    this.db\n      .prepare(\n        \"INSERT INTO users (user_id, password_hash, is_admin, password_is_initial, display_name, avatar, last_login_at, created_at)\" +\n          \" VALUES (?, ?, ?, ?, ?, ?, ?, ?)\",\n      )\n      .run(\n        row.userId,\n        row.passwordHash,\n        row.isAdmin ? 1 : 0,\n        row.passwordIsInitial ? 1 : 0,\n        row.displayName,\n        row.avatar,\n        row.lastLoginAt,\n        row.createdAt,\n      );\n  }\n\n  findById(userId: string): UserRow | null {\n    const r = this.db.prepare(\"SELECT * FROM users WHERE user_id = ?\").get(userId);\n    return r ? mapRow(r) : null;\n  }\n\n  /** All users (for the admin user backend), ordered by creation time ascending. */\n  list(): UserRow[] {\n    const rows = this.db.prepare(\"SELECT * FROM users ORDER BY created_at ASC, user_id ASC\").all();\n    return rows.map(mapRow);\n  }\n\n  count(): number {\n    const r = this.db.prepare(\"SELECT COUNT(*) AS n FROM users\").get();\n    return (r?.n as number) ?? 0;\n  }\n\n  /** Update the password hash; isInitial marks whether the password was set by someone else (seed / admin). */\n  updatePassword(userId: string, passwordHash: string, isInitial: boolean): void {\n    this.db\n      .prepare(\"UPDATE users SET password_hash = ?, password_is_initial = ? WHERE user_id = ?\")\n      .run(passwordHash, isInitial ? 1 : 0, userId);\n  }\n\n  /**\n   * Stamp the account's most recent sign-in, overwriting whatever was there: the column is a\n   * \"when did they last get in\" fact, not a history (the admin user backend shows the one value).\n   */\n  touchLastLogin(userId: string, at: string): void {\n    this.db.prepare(\"UPDATE users SET last_login_at = ? WHERE user_id = ?\").run(at, userId);\n  }\n\n  /**\n   * Writes the profile fields the patch names, leaving the rest as they are: an absent key\n   * keeps the stored value, `null` clears it, a string replaces it. A patch naming neither\n   * field writes nothing rather than issuing an UPDATE with an empty SET list.\n   */\n  updateProfile(\n    userId: string,\n    patch: { displayName?: string | null; avatar?: string | null },\n  ): void {\n    const sets: string[] = [];\n    const values: (string | null)[] = [];\n    if (patch.displayName !== undefined) {\n      sets.push(\"display_name = ?\");\n      values.push(patch.displayName);\n    }\n    if (patch.avatar !== undefined) {\n      sets.push(\"avatar = ?\");\n      values.push(patch.avatar);\n    }\n    if (sets.length === 0) return;\n    this.db.prepare(`UPDATE users SET ${sets.join(\", \")} WHERE user_id = ?`).run(...values, userId);\n  }\n\n  /** Used by admin user deletion and account-creation compensation paths (owned Projects must be cleaned up first). */\n  delete(userId: string): void {\n    this.db.prepare(\"DELETE FROM users WHERE user_id = ?\").run(userId);\n  }\n}\n","/**\n * auth_sessions table repo (server-side sessions backing the HttpOnly cookie). Stores only\n * sha256(token); the raw token appears only in the cookie. `issue()` is the ONE minting point,\n * so a CLI-minted row cannot drift from one the server issues itself.\n */\nimport { createHash, randomBytes } from \"node:crypto\";\nimport { Component, Use } from \"@adelie/core/kernel\";\nimport type { Db } from \"../../hmr/capabilities.js\";\nimport type { AuthSessions } from \"../../mechanisms/identity.js\";\n\n/** How a session was established, as stored. NULL on rows formed before the column existed. */\nexport type SessionViaValue = \"password\" | \"desktop\" | \"setup\" | \"cli\";\n\nexport interface AuthSessionRow {\n  tokenHash: string;\n  userId: string;\n  createdAt: string;\n  expiresAt: string;\n  via: SessionViaValue | null;\n}\n\n/** sha256 hex of a raw session token — the only form the database ever holds. */\nexport function sessionTokenHash(token: string): string {\n  return createHash(\"sha256\").update(token).digest(\"hex\");\n}\n\n@Component()\nexport class AuthSessionsRepo implements AuthSessions {\n  @Use() private readonly db!: Db;\n\n  /**\n   * Mints a session and returns the raw token for a cookie or the terminal. `maxTtlMs` caps a\n   * caller-supplied lifetime (`--ttl-seconds`): one longer than an ordinary session would make\n   * a leaked token file outlive every other credential, sliding forever. Expired rows are\n   * swept here too, so a cron that only mints does not accumulate them.\n   */\n  issue(opts: {\n    userId: string;\n    via: SessionViaValue;\n    now: Date;\n    ttlMs: number;\n    maxTtlMs?: number;\n  }): { token: string; expiresAt: string } {\n    const ttlMs = Math.max(1_000, Math.min(opts.ttlMs, opts.maxTtlMs ?? opts.ttlMs));\n    const token = randomBytes(32).toString(\"base64url\");\n    const createdAt = opts.now.toISOString();\n    const expiresAt = new Date(opts.now.getTime() + ttlMs).toISOString();\n    this.deleteExpired(createdAt);\n    this.insert({\n      tokenHash: sessionTokenHash(token),\n      userId: opts.userId,\n      createdAt,\n      expiresAt,\n      via: opts.via,\n    });\n    return { token, expiresAt };\n  }\n\n  insert(row: AuthSessionRow): void {\n    this.db\n      .prepare(\n        \"INSERT INTO auth_sessions (token_hash, user_id, created_at, expires_at, via) VALUES (?, ?, ?, ?, ?)\",\n      )\n      .run(row.tokenHash, row.userId, row.createdAt, row.expiresAt, row.via);\n  }\n\n  findByTokenHash(tokenHash: string): AuthSessionRow | null {\n    const r = this.db.prepare(\"SELECT * FROM auth_sessions WHERE token_hash = ?\").get(tokenHash);\n    if (!r) return null;\n    return {\n      tokenHash: r.token_hash as string,\n      userId: r.user_id as string,\n      createdAt: r.created_at as string,\n      expiresAt: r.expires_at as string,\n      via: (r.via as SessionViaValue | null) ?? null,\n    };\n  }\n\n  /** Sliding renewal: update the expiration time. */\n  touch(tokenHash: string, expiresAt: string): void {\n    this.db\n      .prepare(\"UPDATE auth_sessions SET expires_at = ? WHERE token_hash = ?\")\n      .run(expiresAt, tokenHash);\n  }\n\n  delete(tokenHash: string): void {\n    this.db.prepare(\"DELETE FROM auth_sessions WHERE token_hash = ?\").run(tokenHash);\n  }\n\n  /** Opportunistically clean up expired sessions (called during login/validation). */\n  deleteExpired(nowIso: string): void {\n    this.db.prepare(\"DELETE FROM auth_sessions WHERE expires_at < ?\").run(nowIso);\n  }\n\n  /** Clear all sessions for a user (forces re-login after an admin resets the password). */\n  deleteByUser(userId: string): void {\n    this.db.prepare(\"DELETE FROM auth_sessions WHERE user_id = ?\").run(userId);\n  }\n\n  /**\n   * Clear a user's sessions of one kind. Used to end EVERY first-login session when a password\n   * is set: an earlier boot's link may still be live in someone's scrollback, and a `setup`\n   * session may change the password without knowing the old one.\n   */\n  deleteByUserAndVia(userId: string, via: SessionViaValue): void {\n    this.db.prepare(\"DELETE FROM auth_sessions WHERE user_id = ? AND via = ?\").run(userId, via);\n  }\n}\n"],"mappings":";;;;;;;;AAIA,SAAS,WAAW,WAAW;AAmB/B,SAAS,OAAO,GAAqC;AACnD,SAAO;AAAA,IACL,QAAQ,EAAE;AAAA,IACV,cAAc,EAAE;AAAA,IAChB,SAAU,EAAE,aAAwB;AAAA,IACpC,mBAAoB,EAAE,wBAAmC;AAAA,IACzD,aAAc,EAAE,gBAAkC;AAAA,IAClD,QAAS,EAAE,UAA4B;AAAA,IACvC,aAAc,EAAE,iBAAmC;AAAA,IACnD,WAAW,EAAE;AAAA,EACf;AACF;AAlCA;AAoCA,yBAAC,UAAU,IAET,WAAC,IAAI;AADA,IAAM,YAAN,MAAiC;AAAA,EAAjC;AACE,wBAAiB,MAAjB;AAAA;AAAA,EAEP,OAAO,KAAoB;AACzB,SAAK,GACF;AAAA,MACC;AAAA,IAEF,EACC;AAAA,MACC,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI,UAAU,IAAI;AAAA,MAClB,IAAI,oBAAoB,IAAI;AAAA,MAC5B,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,IACN;AAAA,EACJ;AAAA,EAEA,SAAS,QAAgC;AACvC,UAAM,IAAI,KAAK,GAAG,QAAQ,uCAAuC,EAAE,IAAI,MAAM;AAC7E,WAAO,IAAI,OAAO,CAAC,IAAI;AAAA,EACzB;AAAA;AAAA,EAGA,OAAkB;AAChB,UAAM,OAAO,KAAK,GAAG,QAAQ,0DAA0D,EAAE,IAAI;AAC7F,WAAO,KAAK,IAAI,MAAM;AAAA,EACxB;AAAA,EAEA,QAAgB;AACd,UAAM,IAAI,KAAK,GAAG,QAAQ,iCAAiC,EAAE,IAAI;AACjE,WAAQ,GAAG,KAAgB;AAAA,EAC7B;AAAA;AAAA,EAGA,eAAe,QAAgB,cAAsB,WAA0B;AAC7E,SAAK,GACF,QAAQ,+EAA+E,EACvF,IAAI,cAAc,YAAY,IAAI,GAAG,MAAM;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,eAAe,QAAgB,IAAkB;AAC/C,SAAK,GAAG,QAAQ,sDAAsD,EAAE,IAAI,IAAI,MAAM;AAAA,EACxF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,cACE,QACA,OACM;AACN,UAAM,OAAiB,CAAC;AACxB,UAAM,SAA4B,CAAC;AACnC,QAAI,MAAM,gBAAgB,QAAW;AACnC,WAAK,KAAK,kBAAkB;AAC5B,aAAO,KAAK,MAAM,WAAW;AAAA,IAC/B;AACA,QAAI,MAAM,WAAW,QAAW;AAC9B,WAAK,KAAK,YAAY;AACtB,aAAO,KAAK,MAAM,MAAM;AAAA,IAC1B;AACA,QAAI,KAAK,WAAW,EAAG;AACvB,SAAK,GAAG,QAAQ,oBAAoB,KAAK,KAAK,IAAI,CAAC,oBAAoB,EAAE,IAAI,GAAG,QAAQ,MAAM;AAAA,EAChG;AAAA;AAAA,EAGA,OAAO,QAAsB;AAC3B,SAAK,GAAG,QAAQ,qCAAqC,EAAE,IAAI,MAAM;AAAA,EACnE;AACF;AA/EO;AACE,4BAAiB,MAAxB,SADW;AAAA,YAAN,yCADP,uBACa;AAAN,4BAAM;;;AChCb,SAAS,YAAY,mBAAmB;AACxC,SAAS,aAAAA,YAAW,OAAAC,YAAW;AAgBxB,SAAS,iBAAiB,OAAuB;AACtD,SAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;AACxD;AAxBA,IAAAC,UAAA,8BAAAC;AA0BA,gCAACC,WAAU,IAETF,WAAA,CAACG,KAAI;AADA,IAAM,mBAAN,MAA+C;AAAA,EAA/C;AACE,wBAAiB,MAAjB,kBAAAF,QAAA,6BAAAA,QAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQP,MAAM,MAMmC;AACvC,UAAM,QAAQ,KAAK,IAAI,KAAO,KAAK,IAAI,KAAK,OAAO,KAAK,YAAY,KAAK,KAAK,CAAC;AAC/E,UAAM,QAAQ,YAAY,EAAE,EAAE,SAAS,WAAW;AAClD,UAAM,YAAY,KAAK,IAAI,YAAY;AACvC,UAAM,YAAY,IAAI,KAAK,KAAK,IAAI,QAAQ,IAAI,KAAK,EAAE,YAAY;AACnE,SAAK,cAAc,SAAS;AAC5B,SAAK,OAAO;AAAA,MACV,WAAW,iBAAiB,KAAK;AAAA,MACjC,QAAQ,KAAK;AAAA,MACb;AAAA,MACA;AAAA,MACA,KAAK,KAAK;AAAA,IACZ,CAAC;AACD,WAAO,EAAE,OAAO,UAAU;AAAA,EAC5B;AAAA,EAEA,OAAO,KAA2B;AAChC,SAAK,GACF;AAAA,MACC;AAAA,IACF,EACC,IAAI,IAAI,WAAW,IAAI,QAAQ,IAAI,WAAW,IAAI,WAAW,IAAI,GAAG;AAAA,EACzE;AAAA,EAEA,gBAAgB,WAA0C;AACxD,UAAM,IAAI,KAAK,GAAG,QAAQ,kDAAkD,EAAE,IAAI,SAAS;AAC3F,QAAI,CAAC,EAAG,QAAO;AACf,WAAO;AAAA,MACL,WAAW,EAAE;AAAA,MACb,QAAQ,EAAE;AAAA,MACV,WAAW,EAAE;AAAA,MACb,WAAW,EAAE;AAAA,MACb,KAAM,EAAE,OAAkC;AAAA,IAC5C;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,WAAmB,WAAyB;AAChD,SAAK,GACF,QAAQ,8DAA8D,EACtE,IAAI,WAAW,SAAS;AAAA,EAC7B;AAAA,EAEA,OAAO,WAAyB;AAC9B,SAAK,GAAG,QAAQ,gDAAgD,EAAE,IAAI,SAAS;AAAA,EACjF;AAAA;AAAA,EAGA,cAAc,QAAsB;AAClC,SAAK,GAAG,QAAQ,gDAAgD,EAAE,IAAI,MAAM;AAAA,EAC9E;AAAA;AAAA,EAGA,aAAa,QAAsB;AACjC,SAAK,GAAG,QAAQ,6CAA6C,EAAE,IAAI,MAAM;AAAA,EAC3E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,mBAAmB,QAAgB,KAA4B;AAC7D,SAAK,GAAG,QAAQ,yDAAyD,EAAE,IAAI,QAAQ,GAAG;AAAA,EAC5F;AACF;AAhFOA,SAAA;AACE,kBAAAA,QAAA,GAAiB,MAAxBD,UADW;AAAA,mBAAN,kBAAAC,QAAA,uBADP,8BACa;AAAN,kBAAAA,QAAA,GAAM;","names":["Component","Use","_db_dec","_init","Component","Use"]}