@geekity/cms 0.3.0 → 0.4.0

package/dist/admin/federation.js

@@ -1,17 +1,28 @@
+import { isTrashedPath } from '../content/store.js';
+import { listUsers } from './accounts.js';
 import { avatarUrl } from '../federation/actor.js';
-import { SITE_ACTOR_IDENTIFIER } from '../federation/keys.js';
-import { ACTOR_PATH, federationOrigin, FEDERATION_PREFIX } from '../federation/paths.js';
+import { ACTOR_PATH, federationOrigin } from '../federation/paths.js';
+import { authorHref, profileContext, userForAuthor } from '../web/authors.js';
+import { postObjectId, publicDocumentAt } from '../web/documents.js';
+import { absoluteUrl } from '../web/negotiate.js';
 import { editorPath, POST_KIND } from './documents.js';
 import { flash } from './flash.js';
-import { readSiteSettings } from './settings.js';
 import { ADMIN_PREFIX } from './session.js';
 import { ADMIN_TEMPLATES } from './templates.js';
 /** Where the federation screen lives. */
 export const FEDERATION_PATH = `${ADMIN_PREFIX}/federation`;
-/** Where a post's Redeliver button posts. */
-export const REDELIVER_PATH = `${FEDERATION_PATH}/redeliver`;
-/** The field the Redeliver form submits. */
-export const FEDERATION_FIELDS = { activityId: 'activity_id' };
+/** Where a post's Resend button posts. */
+export const RESEND_PATH = `${FEDERATION_PATH}/resend`;
+/** Where a relay's Retry button posts. */
+export const RELAY_RETRY_PATH = `${FEDERATION_PATH}/relays/retry`;
+/** The fields the screen's forms submit. */
+export const FEDERATION_FIELDS = { slug: 'slug', relay: 'relay' };
+/** What each relay state reads as on the screen. */
+export const RELAY_STATE_LABELS = {
+    pending: 'Waiting',
+    accepted: 'Accepted',
+    rejected: 'Rejected',
+};
 /**
  * How many rows each of the screen's lists holds.
  *
@@ -24,9 +35,17 @@ export const FEDERATION_RECENT = 50;
  * Register `/admin/federation`: who the site is to the fediverse, who follows
  * it, what arrived in the inbox, and how the posts that went out landed.
  *
- * Everything on it is read out of SQLite rather than fetched: doc-4 keeps the
- * followers, the inbox log and the delivery log there precisely so the admin
- * can show them without dereferencing a remote actor per row.
+ * Nothing on it is fetched: the followers and the inbox log are indexed in
+ * SQLite from the files that hold them precisely so the admin can show them
+ * without dereferencing a remote actor per row.
+ *
+ * The delivery panel is the one that reads two sources at once. Which posts
+ * belong on it is a question for the content index — the posts carrying an
+ * `activitypub.published`, which is the same thing as the posts a follower
+ * holds a copy of — and how each of them last landed is a question for the outcome
+ * cache. That order matters: the cache is disposable (decision-9), so a site
+ * that has just deleted its database sees every federated post listed with
+ * nothing yet recorded against it, rather than an empty panel.
  */
 export function mountFederationScreen(app, options) {
     const { render } = options;
@@ -34,46 +53,83 @@ export function mountFederationScreen(app, options) {
         const admin = c.var.admin;
         const baseUrl = c.var.config.baseUrl;
         const post = localPosts(c.var.store, baseUrl);
+        const users = listUsers(c.var.config.dataDir);
         return render(c, ADMIN_TEMPLATES.federation, {
             section: 'federation',
-            redeliverUrl: REDELIVER_PATH,
+            child: 'followers',
+            resendUrl: RESEND_PATH,
             fields: FEDERATION_FIELDS,
-            actor: actorSummary(readSiteSettings(admin), {
+            actors: users.map((user) => actorSummary(user, {
                 baseUrl,
-                followers: admin.countFollowers(),
-            }),
-            followers: admin
-                .listFollowers({ limit: FEDERATION_RECENT })
-                .map((follower) => followerRow(follower)),
+                followerCount: admin.countFollowers(user.username),
+                followers: admin
+                    .listFollowers(user.username, { limit: FEDERATION_RECENT })
+                    .map((follower) => followerRow(follower)),
+            })),
             // The inbox log holds the follow traffic as well, and only a fraction of
             // it survives {@link inboxRows}, so more is read than is shown.
             inbox: inboxRows(admin.listInboxActivities({ limit: FEDERATION_RECENT * 4 }), {
                 followers: admin.listFollowers(),
                 post,
             }),
-            posts: deliveryRows(admin.listOutboundActivities({ limit: FEDERATION_RECENT * 4 }), {
+            relayRetryUrl: RELAY_RETRY_PATH,
+            relays: admin
+                .listRelays()
+                .map((relay) => relayRow(relay, admin.lastDeliveryToInbox(relay.inboxId))),
+            posts: deliveryRows(c.var.store.listFederated({ limit: FEDERATION_RECENT }), {
+                baseUrl,
+                author: (document) => userForAuthor(users, document.author)?.username ?? null,
+                lastDelivery: (objectId) => admin.lastDeliveryToObject(objectId),
                 counts: (activityId) => admin.countDeliveriesByStatus(activityId),
-                post,
-            }).slice(0, FEDERATION_RECENT),
+                webmentions: (slug) => admin.countSentWebmentionsByStatus(slug),
+            }),
         });
     });
     /**
-     * Send one post's latest activity to every follower the site has now.
+     * Send one relay's `Follow` again.
+     *
+     * The relay is named by its inbox, which is what the settings hold and what
+     * the row shows: a subscription is identified by where it was made, not by
+     * the follow it is currently waiting on, which is the thing a retry replaces.
+     */
+    app.post(RELAY_RETRY_PATH, async (c) => {
+        const body = await c.req.parseBody();
+        const inboxId = body[FEDERATION_FIELDS.relay];
+        const relay = typeof inboxId === 'string' ? await c.var.relays.retry(inboxId) : undefined;
+        if (relay === undefined) {
+            flash(c, 'error', 'The site does not subscribe to that relay, so there is nothing to retry.');
+        }
+        else {
+            flash(c, 'notice', `The follow has been sent to ${relay.inboxId} again. A relay may take a while to answer.`);
+        }
+        return c.redirect(FEDERATION_PATH, 303);
+    });
+    /**
+     * Send one post as it now reads to every follower and every accepted relay.
      *
-     * The activity is named rather than the post, so the button sends exactly
-     * what the row it sits in says it will: a post edited between the page load
-     * and the click has a newer activity, and re-sending that one instead would
-     * be a different thing from what was asked for.
+     * The post is named rather than an activity, which is the whole of what
+     * decision-9 changed here: the activity is built from the file when the
+     * button is pressed, so a post edited between the page load and the click
+     * goes out as it is now — which is what somebody pressing Resend is asking
+     * for — rather than as the row said it was.
      */
-    app.post(REDELIVER_PATH, async (c) => {
+    app.post(RESEND_PATH, async (c) => {
         const body = await c.req.parseBody();
-        const activityId = body[FEDERATION_FIELDS.activityId];
-        const report = typeof activityId === 'string' ? await c.var.delivery.redeliver(activityId) : undefined;
-        if (report === undefined) {
-            flash(c, 'error', 'There is no record of that activity, so it cannot be sent again.');
+        const slug = body[FEDERATION_FIELDS.slug];
+        const report = typeof slug === 'string' ? await c.var.delivery.resend(slug) : undefined;
+        // The webmentions go with it, because "send this post out again" is one
+        // thing to the person pressing the button and the links are as much a part
+        // of a post going out as the followers are (TASK-51). It is asked for
+        // separately because it answers for a post that has never federated at
+        // all, which `resend` says nothing about.
+        const links = typeof slug === 'string' ? await c.var.webmentions.send(slug) : undefined;
+        if (report === undefined && links === undefined) {
+            flash(c, 'error', 'There is no post to send under that name, so nothing was sent.');
         }
         else {
-            flash(c, report.deliveries.some(failed) ? 'error' : 'notice', redeliveryMessage(report));
+            const failedSomewhere = (report?.deliveries.some(failed) ?? false) ||
+                (links?.sent.some((one) => one.status === 'failed') ?? false);
+            flash(c, failedSomewhere ? 'error' : 'notice', resendMessage(report, links));
         }
         return c.redirect(FEDERATION_PATH, 303);
     });
@@ -83,15 +139,27 @@ function failed(delivery) {
     return delivery.status === 'failed';
 }
 /**
- * What a redelivery came to, in one line.
+ * What a resend came to, in one line.
  *
  * The failures are counted even when there are none, because that zero is the
- * answer to the question the button was pressed to ask.
+ * answer to the question the button was pressed to ask. The activity type is
+ * named because it is not something the person choosing to resend chose: it
+ * follows from the state the post is in, and a `Delete` where somebody
+ * expected an `Update` is worth reading about.
  */
-export function redeliveryMessage(report) {
+export function resendMessage(report, links) {
+    return [deliveryMessage(report), webmentionMessage(links)]
+        .filter((part) => part !== undefined)
+        .join(' ');
+}
+/** What the ActivityPub half of a resend came to. */
+function deliveryMessage(report) {
+    if (report === undefined)
+        return undefined;
     const total = report.deliveries.length;
     if (total === 0) {
-        return `Nobody follows the site, so the ${report.activityType} had nowhere to go.`;
+        return (`Nobody follows the site and no relay has accepted it, ` +
+            `so the ${report.activityType} had nowhere to go.`);
     }
     const counts = { sent: 0, queued: 0, failed: 0 };
     for (const delivery of report.deliveries)
@@ -100,66 +168,97 @@ export function redeliveryMessage(report) {
     if (counts.queued > 0)
         parts.push(`${String(counts.queued)} queued`);
     parts.push(`${String(counts.failed)} failed`);
-    const followers = total === 1 ? '1 follower' : `${String(total)} followers`;
-    return `Redelivered ${report.activityType} to ${followers}: ${parts.join(', ')}.`;
+    // "Recipients" rather than "followers": a relay is one of them too, and it
+    // is not a follower.
+    const recipients = total === 1 ? '1 recipient' : `${String(total)} recipients`;
+    return `Sent ${report.activityType} to ${recipients}: ${parts.join(', ')}.`;
 }
 /**
- * One row per post, holding the newest activity that post has: what the screen
- * shows and what its Redeliver button sends.
+ * What the webmention half came to, or nothing at all when the post links
+ * nowhere outside the site.
  *
- * A post is usually several activities — a `Create` and every `Update` since —
- * and listing all of them would make the panel a log rather than a status. The
- * newest is the one that matters, because it is the version a follower who
- * missed everything is owed. The activities arrive newest first, so the first
- * one seen for an object is that one.
+ * Silence rather than "0 webmentions", because most posts link to nothing and
+ * a line about it on every resend would be noise about a thing that did not
+ * happen.
  */
-export function deliveryRows(activities, context) {
-    const rows = [];
-    const seen = new Set();
-    for (const activity of activities) {
-        if (seen.has(activity.objectId))
-            continue;
-        seen.add(activity.objectId);
-        // A `Delete` is about a post that is no longer in the index, so the slug
-        // the activity was built with is the only name left for it.
-        const post = context.post(activity.objectId) ?? slugOnlyPost(activity.slug);
-        if (post === null)
-            continue;
-        rows.push({
-            post,
-            activityId: activity.activityId,
-            activityType: activity.activityType,
-            createdAt: activity.createdAt,
-            counts: context.counts(activity.activityId),
-        });
-    }
-    return rows;
+function webmentionMessage(links) {
+    if (links === undefined || links.sent.length === 0)
+        return undefined;
+    const counts = { sent: 0, none: 0, failed: 0 };
+    for (const one of links.sent)
+        counts[one.status] += 1;
+    const linked = links.sent.length === 1 ? '1 linked page' : `${String(links.sent.length)} linked pages`;
+    const parts = [`${String(counts.sent)} told`];
+    if (counts.none > 0)
+        parts.push(`${String(counts.none)} take none`);
+    parts.push(`${String(counts.failed)} failed`);
+    return `Webmentions to ${linked}: ${parts.join(', ')}.`;
 }
-/** A post the index no longer holds, named by the slug the activity kept. */
-function slugOnlyPost(slug) {
-    if (slug === null || slug === '')
-        return null;
-    return { slug, title: slug, editUrl: editorPath(POST_KIND, slug) };
+/**
+ * One row per post the site has announced, newest post first.
+ *
+ * The posts come from the content index and the outcomes from the cache, in
+ * that order and not the other way round, because they are answers to two
+ * different questions. Which posts belong here is a fact about the files: a
+ * post carrying an `activitypub.published` is one some follower holds a copy
+ * of, and that stays true however often the database is thrown away. How each of them
+ * landed is a fact about the last delivery, which is exactly the sort of thing
+ * a cache is allowed to forget.
+ *
+ * A post is usually several activities — a `Create` and every `Update` since —
+ * and the newest is the only one worth showing: it is the version a follower
+ * who missed everything is owed, and the one a resend supersedes anyway.
+ */
+export function deliveryRows(documents, context) {
+    return documents.map((document) => {
+        const last = context.lastDelivery(postObjectId(document, context.baseUrl));
+        return {
+            post: {
+                slug: document.slug,
+                title: document.title,
+                editUrl: editorPath(POST_KIND, document.slug),
+            },
+            author: context.author(document),
+            slug: document.slug,
+            trashed: isTrashedPath(document.path),
+            lastActivity: last === undefined
+                ? null
+                : {
+                    activityType: last.activityType,
+                    attemptedAt: last.attemptedAt,
+                    counts: context.counts(last.activityId),
+                },
+            webmentions: context.webmentions(document.slug),
+        };
+    });
 }
 /**
- * The site's actor as the screen shows it.
+ * One user's actor as the screen shows it (decision-14).
  *
  * The handle's host and the actor's id both come from the base URL's origin
  * rather than from the whole of it, because that is where the federation
- * endpoints are served: a site under `/blog` is still `@blog@example.com`.
+ * endpoints are served: a site under `/blog` still answers `@ada@example.com`.
+ * The id is built from {@link ACTOR_PATH} rather than from `authorHref` for
+ * the same reason — it is the path Fedify dispatches the actor at, and the
+ * screen should say what a peer would get. Which is also why a user with a
+ * stored actor id (TASK-69) is shown under that: it is the id their followers
+ * hold, and a screen naming the other one would be describing a document
+ * nobody fetches.
  */
-export function actorSummary(settings, context) {
+export function actorSummary(user, context) {
     const baseUrl = context.baseUrl === '' ? 'http://localhost' : context.baseUrl;
     const origin = federationOrigin(baseUrl);
+    const profile = profileContext(user);
     return {
-        handle: `@${settings.actorHandle}@${origin.handleHost}`,
-        avatarUrl: avatarUrl(settings.avatar, baseUrl) ?? null,
-        type: settings.actorType,
-        name: settings.title,
-        summary: settings.tagline,
-        actorId: new URL(ACTOR_PATH.replace('{identifier}', SITE_ACTOR_IDENTIFIER), origin.webOrigin)
-            .href,
-        url: baseUrl,
+        username: user.username,
+        handle: `@${user.username}@${origin.handleHost}`,
+        avatarUrl: profile.avatar === undefined ? null : (avatarUrl(profile.avatar, baseUrl) ?? null),
+        name: profile.name,
+        summary: profile.bio ?? '',
+        actorId: user.actorId ??
+            new URL(ACTOR_PATH.replace('{identifier}', encodeURIComponent(user.username)), origin.webOrigin).href,
+        url: absoluteUrl(authorHref(user.username), baseUrl),
+        followerCount: context.followerCount,
         followers: context.followers,
     };
 }
@@ -238,13 +337,14 @@ function replyObject(activity) {
 /**
  * Resolve one of the site's own ActivityStreams ids to the post behind it.
  *
- * An id from anywhere else — a like of somebody else's post that reached the
- * shared inbox, a reply to a reply — is `null` rather than a guess, and so is
- * one whose slug the index has never heard of.
+ * A post's id is its permalink (decision-13), so this is a lookup by URL
+ * against the content index: an id from anywhere else — a like of somebody
+ * else's post that reached the shared inbox, a reply to a reply — is `null`
+ * rather than a guess, and so is one whose path the index has never heard of.
  */
 export function localPosts(store, baseUrl) {
-    const origin = federationOrigin(baseUrl === '' ? 'http://localhost' : baseUrl).webOrigin;
-    const prefix = `${FEDERATION_PREFIX}/posts/`;
+    const site = baseUrl === '' ? 'http://localhost' : baseUrl;
+    const origin = new URL(site).origin;
     return (objectId) => {
         if (objectId === null)
             return null;
@@ -255,16 +355,16 @@ export function localPosts(store, baseUrl) {
         catch {
             return null;
         }
-        if (url.origin !== origin || !url.pathname.startsWith(prefix))
+        if (url.origin !== origin)
             return null;
-        const slug = decodeURIComponent(url.pathname.slice(prefix.length));
-        if (slug === '')
+        const document = store.getByStoredObjectId(objectId) ??
+            publicDocumentAt(store, decodeURIComponent(url.pathname));
+        if (document === undefined || document.type !== 'post')
             return null;
-        const document = store.getBySlug(slug);
         return {
-            slug,
-            title: document?.title ?? slug,
-            editUrl: editorPath(POST_KIND, slug),
+            slug: document.slug,
+            title: document.title,
+            editUrl: editorPath(POST_KIND, document.slug),
         };
     };
 }
@@ -278,6 +378,38 @@ function property(value, key) {
 function text(value) {
     return typeof value === 'string' && value !== '' ? value : null;
 }
+/**
+ * One stored relay as the screen shows it.
+ *
+ * The last outcome is looked up by inbox rather than by actor, because that is
+ * the column a relay is guaranteed to have: a subscription that has not been
+ * accepted has no actor id at all, and the point of the row is to say so. The
+ * outcome carries what the activity was, so there is nothing else to look up.
+ */
+export function relayRow(relay, lastDelivery) {
+    return {
+        inboxId: relay.inboxId,
+        state: relay.state,
+        stateLabel: RELAY_STATE_LABELS[relay.state],
+        actorId: relay.actorId,
+        createdAt: relay.createdAt,
+        updatedAt: relay.updatedAt,
+        reason: relay.reason,
+        lastDelivery: lastDelivery === undefined
+            ? null
+            : {
+                activityId: lastDelivery.activityId,
+                activityType: lastDelivery.activityType,
+                status: lastDelivery.status,
+                error: lastDelivery.error,
+                attemptedAt: lastDelivery.attemptedAt,
+            },
+        // A rejected relay is not retried from here: it said no, and asking again
+        // is a decision to take by removing it and adding it back, not a button
+        // that quietly re-asks a server that refused.
+        retriable: relay.state === 'pending',
+    };
+}
 /**
  * One stored follower as the screen shows it.
  *

package/dist/admin/federation.js.map

@@ -1 +1 @@
-{"version":3,"file":"federation.js","sourceRoot":"","sources":["../../src/admin/federation.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAQ5C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,yCAAyC;AACzC,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,YAAY,aAAa,CAAC;AAE5D,6CAA6C;AAC7C,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,eAAe,YAAY,CAAC;AAE7D,4CAA4C;AAC5C,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,UAAU,EAAE,aAAa,EAAW,CAAC;AAExE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAQpC;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAqB,EACrB,OAAqC;IAErC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAE3B,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QAC1B,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QACrC,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAE9C,OAAO,MAAM,CAAC,CAAC,EAAE,eAAe,CAAC,UAAU,EAAE;YAC3C,OAAO,EAAE,YAAY;YACrB,YAAY,EAAE,cAAc;YAC5B,MAAM,EAAE,iBAAiB;YACzB,KAAK,EAAE,YAAY,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE;gBAC3C,OAAO;gBACP,SAAS,EAAE,KAAK,CAAC,cAAc,EAAE;aAClC,CAAC;YACF,SAAS,EAAE,KAAK;iBACb,aAAa,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;iBAC3C,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC3C,yEAAyE;YACzE,gEAAgE;YAChE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,iBAAiB,GAAG,CAAC,EAAE,CAAC,EAAE;gBAC5E,SAAS,EAAE,KAAK,CAAC,aAAa,EAAE;gBAChC,IAAI;aACL,CAAC;YACF,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,iBAAiB,GAAG,CAAC,EAAE,CAAC,EAAE;gBAClF,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,UAAU,CAAC;gBACjE,IAAI;aACL,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;;;;;OAOG;IACH,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAEtD,MAAM,MAAM,GACV,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE1F,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,kEAAkE,CAAC,CAAC;QACxF,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3F,CAAC;QAED,OAAO,CAAC,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yEAAyE;AACzE,SAAS,MAAM,CAAC,QAAkB;IAChC,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAsB;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;IACvC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,OAAO,mCAAmC,MAAM,CAAC,YAAY,qBAAqB,CAAC;IACrF,CAAC;IAED,MAAM,MAAM,GAAmC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACjF,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,UAAU;QAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEvE,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACrE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAE9C,MAAM,SAAS,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;IAC5E,OAAO,eAAe,MAAM,CAAC,YAAY,OAAO,SAAS,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AACpF,CAAC;AAwBD;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAC1B,UAAuC,EACvC,OAA4B;IAE5B,MAAM,IAAI,GAAkB,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,SAAS;QAC1C,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE5B,yEAAyE;QACzE,4DAA4D;QAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5E,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAE5B,IAAI,CAAC,IAAI,CAAC;YACR,IAAI;YACJ,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6EAA6E;AAC7E,SAAS,YAAY,CAAC,IAAmB;IACvC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC;AACrE,CAAC;AAyBD;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAC1B,QAAsB,EACtB,OAIC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC9E,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEzC,OAAO;QACL,MAAM,EAAE,IAAI,QAAQ,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,EAAE;QACvD,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI;QACtD,IAAI,EAAE,QAAQ,CAAC,SAAS;QACxB,IAAI,EAAE,QAAQ,CAAC,KAAK;QACpB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,OAAO,EAAE,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,cAAc,EAAE,qBAAqB,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC;aAC1F,IAAI;QACP,GAAG,EAAE,OAAO;QACZ,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAqC;IAClE,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,SAAS;IACnB,MAAM,EAAE,YAAY;CACrB,CAAC;AA0CF;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CACvB,UAAoC,EACpC,OAAyB;IAEzB,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QAClC,QAAQ,CAAC,OAAO;QAChB,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO;KACrD,CAAC,CACH,CAAC;IAEF,MAAM,IAAI,GAAe,EAAE,CAAC;IAE5B,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QAEnC,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QAErC,IAAI,CAAC,IAAI,CAAC;YACR,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,QAAQ,CAAC,YAAY;YAC3B,MAAM;YACN,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO;YAC3D,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,oEAAoE;YACpE,qDAAqD;YACrD,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC;YAC5E,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;SAC3E,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAClB,QAAuB;IAEvB,IAAI,QAAQ,CAAC,YAAY,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEpD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE/D,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CACxB,KAAmB,EACnB,OAAe;IAEf,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC;IACzF,MAAM,MAAM,GAAG,GAAG,iBAAiB,SAAS,CAAC;IAE7C,OAAO,CAAC,QAAQ,EAAE,EAAE;QAClB,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAEnC,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAE3E,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAE7B,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO;YACL,IAAI;YACJ,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,IAAI;YAC9B,OAAO,EAAE,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC;SACrC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,SAAS,QAAQ,CAAC,KAAc,EAAE,GAAW;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAClE,OAAQ,KAAiC,CAAC,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,gEAAgE;AAChE,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAgBD;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,QAAkB;IAC5C,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO;QAC1D,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO;QAC3C,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,GAAG,EAAE,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,OAAO;QACrC,UAAU,EAAE,QAAQ,CAAC,UAAU;KAChC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"federation.js","sourceRoot":"","sources":["../../src/admin/federation.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1C,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAGnD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAU5C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,yCAAyC;AACzC,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,YAAY,aAAa,CAAC;AAE5D,0CAA0C;AAC1C,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,eAAe,SAAS,CAAC;AAEvD,0CAA0C;AAC1C,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,eAAe,eAAe,CAAC;AAElE,4CAA4C;AAC5C,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAW,CAAC;AAE3E,oDAAoD;AACpD,MAAM,CAAC,MAAM,kBAAkB,GAAyC;IACtE,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;CACrB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAQpC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAqB,EACrB,OAAqC;IAErC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAE3B,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QAC1B,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QACrC,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE9C,OAAO,MAAM,CAAC,CAAC,EAAE,eAAe,CAAC,UAAU,EAAE;YAC3C,OAAO,EAAE,YAAY;YACrB,KAAK,EAAE,WAAW;YAClB,SAAS,EAAE,WAAW;YACtB,MAAM,EAAE,iBAAiB;YACzB,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACzB,YAAY,CAAC,IAAI,EAAE;gBACjB,OAAO;gBACP,aAAa,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAClD,SAAS,EAAE,KAAK;qBACb,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;qBAC1D,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;aAC5C,CAAC,CACH;YACD,yEAAyE;YACzE,gEAAgE;YAChE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,iBAAiB,GAAG,CAAC,EAAE,CAAC,EAAE;gBAC5E,SAAS,EAAE,KAAK,CAAC,aAAa,EAAE;gBAChC,IAAI;aACL,CAAC;YACF,aAAa,EAAE,gBAAgB;YAC/B,MAAM,EAAE,KAAK;iBACV,UAAU,EAAE;iBACZ,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5E,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,EAAE;gBAC3E,OAAO;gBACP,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,IAAI,IAAI;gBAC7E,YAAY,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAQ,CAAC;gBAChE,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,UAAU,CAAC;gBACjE,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,IAAI,CAAC;aAChE,CAAC;SACH,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;;;;OAMG;IACH,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAE9C,MAAM,KAAK,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE1F,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,0EAA0E,CAAC,CAAC;QAChG,CAAC;aAAM,CAAC;YACN,KAAK,CACH,CAAC,EACD,QAAQ,EACR,+BAA+B,KAAK,CAAC,OAAO,6CAA6C,CAC1F,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH;;;;;;;;OAQG;IACH,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,wEAAwE;QACxE,2EAA2E;QAC3E,sEAAsE;QACtE,uEAAuE;QACvE,0CAA0C;QAC1C,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAExF,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAChD,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,gEAAgE,CAAC,CAAC;QACtF,CAAC;aAAM,CAAC;YACN,MAAM,eAAe,GACnB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC;gBAC1C,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC;YAChE,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/E,CAAC;QAED,OAAO,CAAC,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yEAAyE;AACzE,SAAS,MAAM,CAAC,QAAkB;IAChC,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC;AACtC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAkC,EAClC,KAAwB;IAExB,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC;SACvD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;SACpC,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,qDAAqD;AACrD,SAAS,eAAe,CAAC,MAAkC;IACzD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAE3C,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;IACvC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,OAAO,CACL,wDAAwD;YACxD,UAAU,MAAM,CAAC,YAAY,qBAAqB,CACnD,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAmC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACjF,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,UAAU;QAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEvE,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACrE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAE9C,2EAA2E;IAC3E,qBAAqB;IACrB,MAAM,UAAU,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC;IAC/E,OAAO,QAAQ,MAAM,CAAC,YAAY,OAAO,UAAU,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AAC9E,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,KAAmC;IAC5D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAErE,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEtD,MAAM,MAAM,GACV,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;IAC1F,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9C,OAAO,kBAAkB,MAAM,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AAC1D,CAAC;AAuDD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,YAAY,CAC1B,SAA8B,EAC9B,OAA4B;IAE5B,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QAChC,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAE3E,OAAO;YACL,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,OAAO,EAAE,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC;aAC9C;YACD,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;YAChC,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;YACrC,YAAY,EACV,IAAI,KAAK,SAAS;gBAChB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC;oBACE,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;iBACxC;YACP,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;SAChD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AA2BD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAU,EACV,OAKC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC9E,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAErC,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE;QAChD,SAAS,EAAE,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC;QAC7F,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,GAAG,IAAI,EAAE;QAC1B,OAAO,EACL,IAAI,CAAC,OAAO;YACZ,IAAI,GAAG,CACL,UAAU,CAAC,OAAO,CAAC,cAAc,EAAE,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EACrE,MAAM,CAAC,SAAS,CACjB,CAAC,IAAI;QACR,GAAG,EAAE,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QACpD,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAqC;IAClE,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,SAAS;IACnB,MAAM,EAAE,YAAY;CACrB,CAAC;AA0CF;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CACvB,UAAoC,EACpC,OAAyB;IAEzB,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QAClC,QAAQ,CAAC,OAAO;QAChB,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO;KACrD,CAAC,CACH,CAAC;IAEF,MAAM,IAAI,GAAe,EAAE,CAAC;IAE5B,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QAEnC,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QAErC,IAAI,CAAC,IAAI,CAAC;YACR,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,QAAQ,CAAC,YAAY;YAC3B,MAAM;YACN,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO;YAC3D,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,oEAAoE;YACpE,qDAAqD;YACrD,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC;YAC5E,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;SAC3E,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAClB,QAAuB;IAEvB,IAAI,QAAQ,CAAC,YAAY,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEpD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE/D,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CACxB,KAAmB,EACnB,OAAe;IAEf,MAAM,IAAI,GAAG,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAEpC,OAAO,CAAC,QAAQ,EAAE,EAAE;QAClB,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAEnC,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAEvC,MAAM,QAAQ,GACZ,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC;YACnC,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAEpE,OAAO;YACL,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,OAAO,EAAE,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC;SAC9C,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,SAAS,QAAQ,CAAC,KAAc,EAAE,GAAW;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAClE,OAAQ,KAAiC,CAAC,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,gEAAgE;AAChE,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AA+BD;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAY,EAAE,YAAkC;IACvE,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU,EAAE,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC;QAC3C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EACV,YAAY,KAAK,SAAS;YACxB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC;gBACE,UAAU,EAAE,YAAY,CAAC,UAAU;gBACnC,YAAY,EAAE,YAAY,CAAC,YAAY;gBACvC,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,KAAK,EAAE,YAAY,CAAC,KAAK;gBACzB,WAAW,EAAE,YAAY,CAAC,WAAW;aACtC;QACP,0EAA0E;QAC1E,wEAAwE;QACxE,8CAA8C;QAC9C,SAAS,EAAE,KAAK,CAAC,KAAK,KAAK,SAAS;KACrC,CAAC;AACJ,CAAC;AAgBD;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,QAAkB;IAC5C,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO;QAC1D,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO;QAC3C,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,GAAG,EAAE,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,OAAO;QACrC,UAAU,EAAE,QAAQ,CAAC,UAAU;KAChC,CAAC;AACJ,CAAC"}

package/dist/admin/formatting.d.ts

@@ -0,0 +1,20 @@
+/**
+ * An instant as a person in this site's time zone would read it: `4 September
+ * 2026 at 09:00 UTC`.
+ *
+ * The public site prints dates in UTC, because a theme ported from an Eleventy
+ * build using Luxon with `zone: 'utc'` does. The admin is the one place that
+ * should not: an author scheduling a post for nine in the morning means nine
+ * in *their* morning, and the site's `timezone` setting is what says which one
+ * that is. The zone is printed with it so the two readings can never be
+ * confused: an abbreviation where the zone has a well known one (`CDT`, `UTC`)
+ * and an offset where it does not (`GMT+1`), which is what `Intl` answers and
+ * is unambiguous either way.
+ *
+ * A zone name the runtime does not know falls back to UTC rather than
+ * throwing: the settings screen refuses an unknown zone, so anything that
+ * reaches here came from a hand-edited database and should not take the
+ * editor down.
+ */
+export declare function formatInTimezone(instant: string, timezone: string): string;
+//# sourceMappingURL=formatting.d.ts.map

package/dist/admin/formatting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatting.d.ts","sourceRoot":"","sources":["../../src/admin/formatting.ts"],"names":[],"mappings":"AAgBA;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAY1E"}

package/dist/admin/formatting.js

@@ -0,0 +1,72 @@
+/** The months, spelled the way the theme's `date` filter spells them. */
+const MONTHS = [
+    'January',
+    'February',
+    'March',
+    'April',
+    'May',
+    'June',
+    'July',
+    'August',
+    'September',
+    'October',
+    'November',
+    'December',
+];
+/**
+ * An instant as a person in this site's time zone would read it: `4 September
+ * 2026 at 09:00 UTC`.
+ *
+ * The public site prints dates in UTC, because a theme ported from an Eleventy
+ * build using Luxon with `zone: 'utc'` does. The admin is the one place that
+ * should not: an author scheduling a post for nine in the morning means nine
+ * in *their* morning, and the site's `timezone` setting is what says which one
+ * that is. The zone is printed with it so the two readings can never be
+ * confused: an abbreviation where the zone has a well known one (`CDT`, `UTC`)
+ * and an offset where it does not (`GMT+1`), which is what `Intl` answers and
+ * is unambiguous either way.
+ *
+ * A zone name the runtime does not know falls back to UTC rather than
+ * throwing: the settings screen refuses an unknown zone, so anything that
+ * reaches here came from a hand-edited database and should not take the
+ * editor down.
+ */
+export function formatInTimezone(instant, timezone) {
+    const date = new Date(instant);
+    if (Number.isNaN(date.getTime()))
+        return '';
+    const parts = partsIn(date, timezone) ?? partsIn(date, 'UTC');
+    if (parts === undefined)
+        return date.toISOString();
+    const month = MONTHS[Number(parts['month']) - 1] ?? '';
+    return (`${String(Number(parts['day']))} ${month} ${parts['year'] ?? ''} ` +
+        `at ${parts['hour'] ?? ''}:${parts['minute'] ?? ''} ${parts['timeZoneName'] ?? ''}`);
+}
+/** The instant's fields in one zone, or `undefined` when the zone is not one. */
+function partsIn(date, timezone) {
+    let formatter;
+    try {
+        // `en-US` only for the zone abbreviation: it is the locale whose short
+        // names are the ones people recognise — `CDT` where `en-GB` says `GMT-5`.
+        // Everything else on the line is assembled from the parts below, so the
+        // locale decides nothing about the order or the spelling of the date.
+        formatter = new Intl.DateTimeFormat('en-US', {
+            timeZone: timezone,
+            year: 'numeric',
+            month: '2-digit',
+            day: '2-digit',
+            hour: '2-digit',
+            minute: '2-digit',
+            hourCycle: 'h23',
+            timeZoneName: 'short',
+        });
+    }
+    catch {
+        return undefined;
+    }
+    const parts = {};
+    for (const part of formatter.formatToParts(date))
+        parts[part.type] = part.value;
+    return parts;
+}
+//# sourceMappingURL=formatting.js.map

package/dist/admin/formatting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatting.js","sourceRoot":"","sources":["../../src/admin/formatting.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,MAAM,MAAM,GAAG;IACb,SAAS;IACT,UAAU;IACV,OAAO;IACP,OAAO;IACP,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,WAAW;IACX,SAAS;IACT,UAAU;IACV,UAAU;CACX,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,QAAgB;IAChE,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAE5C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAEnD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,OAAO,CACL,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG;QAClE,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CACpF,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,SAAS,OAAO,CAAC,IAAU,EAAE,QAAgB;IAC3C,IAAI,SAA8B,CAAC;IACnC,IAAI,CAAC;QACH,uEAAuE;QACvE,0EAA0E;QAC1E,wEAAwE;QACxE,sEAAsE;QACtE,SAAS,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE;YAC3C,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE,SAAS;YACd,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;IAChF,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/admin/headers.d.ts

@@ -0,0 +1,65 @@
+import type { MiddlewareHandler } from 'hono';
+import type { GeekityEnv } from '../env.ts';
+/**
+ * How long a browser is told to insist on https, in seconds. One year, which
+ * is what every preload list asks for.
+ */
+export declare const HSTS_MAX_AGE = 31536000;
+/** The value of `Strict-Transport-Security`, sent only under an https base URL. */
+export declare const HSTS_VALUE = "max-age=31536000; includeSubDomains";
+/** Bytes behind one CSP nonce. Sixteen is what the CSP specification asks for. */
+export declare const NONCE_BYTES = 16;
+/**
+ * The headers every response gets, admin or not.
+ *
+ * Deliberately two of them. `nosniff` says the `Content-Type` the CMS sends is
+ * the one to believe, which constrains nothing a theme might want to do, and
+ * HSTS is about the host rather than the page — the admin and the public site
+ * are the same origin, so sending it on one and not the other would be a
+ * distinction the browser does not make. Everything else that would tell a
+ * browser what a page may load stays off the public site: a theme is somebody
+ * else's HTML and the CMS has no business deciding what it may reference.
+ */
+export declare const baselineSecurityHeaders: MiddlewareHandler<GeekityEnv>;
+/**
+ * The headers an admin response gets, on top of the baseline.
+ *
+ * A nonce is minted before the handler runs, because the templates put it on
+ * the editor's script tag, and the policy naming it is written afterwards, so
+ * a handler that replaced the response cannot lose the headers.
+ */
+export declare const adminSecurityHeaders: MiddlewareHandler<GeekityEnv>;
+/**
+ * One nonce: 128 random bits, fresh for every response.
+ *
+ * base64url rather than plain base64. CSP's `base64-value` accepts both, and
+ * the url alphabet has no `+` or `/`, which are the two characters that would
+ * otherwise need escaping every time the value is put in a pattern or a URL.
+ */
+export declare function createNonce(): string;
+/**
+ * The admin's Content-Security-Policy.
+ *
+ * Everything the admin loads is its own: the stylesheet and the editor bundle
+ * come from `/admin/_static/`, the editor's preview and upload calls are
+ * same-origin `fetch`, and the preview frame renders the site's own theme and
+ * uploads. So `'self'` is the whole allowlist, with three exceptions worth
+ * naming:
+ *
+ * - `style-src` also carries a per-response nonce. CodeMirror 6 injects its
+ *   themes as `<style>` elements at runtime through `style-mod`, which is an
+ *   inline style however it is written; the nonce is threaded to it through
+ *   `EditorView.cspNonce` so the admin never has to say `'unsafe-inline'`.
+ * - `img-src` also allows `data:`, because a preview of a post somebody is
+ *   writing may hold a data URI image and refusing it would make the preview
+ *   lie about what publishing would show.
+ * - `frame-ancestors` is `'self'` rather than `'none'`: the editor's preview
+ *   is a `srcdoc` iframe, which inherits this policy, and its ancestor is the
+ *   admin page itself.
+ *
+ * There is no inline script at all — the slug and permalink enhancement moved
+ * into `admin/static/slug.js` — so `script-src` needs neither a nonce nor
+ * `'unsafe-inline'`.
+ */
+export declare function adminContentSecurityPolicy(nonce: string): string;
+//# sourceMappingURL=headers.d.ts.map