@geekity/cms 0.3.0 → 0.5.0

package/dist/admin/headers.d.ts

@@ -0,0 +1,65 @@
+import type { MiddlewareHandler } from 'hono';
+import type { GeekityEnv } from '../env.ts';
+/**
+ * How long a browser is told to insist on https, in seconds. One year, which
+ * is what every preload list asks for.
+ */
+export declare const HSTS_MAX_AGE = 31536000;
+/** The value of `Strict-Transport-Security`, sent only under an https base URL. */
+export declare const HSTS_VALUE = "max-age=31536000; includeSubDomains";
+/** Bytes behind one CSP nonce. Sixteen is what the CSP specification asks for. */
+export declare const NONCE_BYTES = 16;
+/**
+ * The headers every response gets, admin or not.
+ *
+ * Deliberately two of them. `nosniff` says the `Content-Type` the CMS sends is
+ * the one to believe, which constrains nothing a theme might want to do, and
+ * HSTS is about the host rather than the page — the admin and the public site
+ * are the same origin, so sending it on one and not the other would be a
+ * distinction the browser does not make. Everything else that would tell a
+ * browser what a page may load stays off the public site: a theme is somebody
+ * else's HTML and the CMS has no business deciding what it may reference.
+ */
+export declare const baselineSecurityHeaders: MiddlewareHandler<GeekityEnv>;
+/**
+ * The headers an admin response gets, on top of the baseline.
+ *
+ * A nonce is minted before the handler runs, because the templates put it on
+ * the editor's script tag, and the policy naming it is written afterwards, so
+ * a handler that replaced the response cannot lose the headers.
+ */
+export declare const adminSecurityHeaders: MiddlewareHandler<GeekityEnv>;
+/**
+ * One nonce: 128 random bits, fresh for every response.
+ *
+ * base64url rather than plain base64. CSP's `base64-value` accepts both, and
+ * the url alphabet has no `+` or `/`, which are the two characters that would
+ * otherwise need escaping every time the value is put in a pattern or a URL.
+ */
+export declare function createNonce(): string;
+/**
+ * The admin's Content-Security-Policy.
+ *
+ * Everything the admin loads is its own: the stylesheet and the editor bundle
+ * come from `/admin/_static/`, the editor's preview and upload calls are
+ * same-origin `fetch`, and the preview frame renders the site's own theme and
+ * uploads. So `'self'` is the whole allowlist, with three exceptions worth
+ * naming:
+ *
+ * - `style-src` also carries a per-response nonce. CodeMirror 6 injects its
+ *   themes as `<style>` elements at runtime through `style-mod`, which is an
+ *   inline style however it is written; the nonce is threaded to it through
+ *   `EditorView.cspNonce` so the admin never has to say `'unsafe-inline'`.
+ * - `img-src` also allows `data:`, because a preview of a post somebody is
+ *   writing may hold a data URI image and refusing it would make the preview
+ *   lie about what publishing would show.
+ * - `frame-ancestors` is `'self'` rather than `'none'`: the editor's preview
+ *   is a `srcdoc` iframe, which inherits this policy, and its ancestor is the
+ *   admin page itself.
+ *
+ * There is no inline script at all — the slug and permalink enhancement moved
+ * into `admin/static/slug.js` — so `script-src` needs neither a nonce nor
+ * `'unsafe-inline'`.
+ */
+export declare function adminContentSecurityPolicy(nonce: string): string;
+//# sourceMappingURL=headers.d.ts.map

package/dist/admin/headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../../src/admin/headers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAG9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAG5C;;;GAGG;AACH,eAAO,MAAM,YAAY,WAAa,CAAC;AAEvC,mFAAmF;AACnF,eAAO,MAAM,UAAU,wCAA+C,CAAC;AAEvE,kFAAkF;AAClF,eAAO,MAAM,WAAW,KAAK,CAAC;AAE9B;;;;;;;;;;GAUG;AACH,eAAO,MAAM,uBAAuB,EAAE,iBAAiB,CAAC,UAAU,CAGjE,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,EAAE,iBAAiB,CAAC,UAAU,CAa9D,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAehE"}

package/dist/admin/headers.js

@@ -0,0 +1,104 @@
+import { randomBytes } from 'node:crypto';
+import { usesSecureCookies } from './session.js';
+/**
+ * How long a browser is told to insist on https, in seconds. One year, which
+ * is what every preload list asks for.
+ */
+export const HSTS_MAX_AGE = 31_536_000;
+/** The value of `Strict-Transport-Security`, sent only under an https base URL. */
+export const HSTS_VALUE = `max-age=${HSTS_MAX_AGE}; includeSubDomains`;
+/** Bytes behind one CSP nonce. Sixteen is what the CSP specification asks for. */
+export const NONCE_BYTES = 16;
+/**
+ * The headers every response gets, admin or not.
+ *
+ * Deliberately two of them. `nosniff` says the `Content-Type` the CMS sends is
+ * the one to believe, which constrains nothing a theme might want to do, and
+ * HSTS is about the host rather than the page — the admin and the public site
+ * are the same origin, so sending it on one and not the other would be a
+ * distinction the browser does not make. Everything else that would tell a
+ * browser what a page may load stays off the public site: a theme is somebody
+ * else's HTML and the CMS has no business deciding what it may reference.
+ */
+export const baselineSecurityHeaders = async (c, next) => {
+    await next();
+    applyBaseline(c.res.headers, c.var.config);
+};
+/**
+ * The headers an admin response gets, on top of the baseline.
+ *
+ * A nonce is minted before the handler runs, because the templates put it on
+ * the editor's script tag, and the policy naming it is written afterwards, so
+ * a handler that replaced the response cannot lose the headers.
+ */
+export const adminSecurityHeaders = async (c, next) => {
+    const nonce = createNonce();
+    c.set('cspNonce', nonce);
+    await next();
+    const headers = c.res.headers;
+    applyBaseline(headers, c.var.config);
+    headers.set('Content-Security-Policy', adminContentSecurityPolicy(nonce));
+    headers.set('Referrer-Policy', 'same-origin');
+    // Not DENY: the editor puts its preview in a sandboxed iframe of its own, and
+    // `frame-ancestors 'self'` below is the modern half of the same statement.
+    headers.set('X-Frame-Options', 'SAMEORIGIN');
+};
+/**
+ * One nonce: 128 random bits, fresh for every response.
+ *
+ * base64url rather than plain base64. CSP's `base64-value` accepts both, and
+ * the url alphabet has no `+` or `/`, which are the two characters that would
+ * otherwise need escaping every time the value is put in a pattern or a URL.
+ */
+export function createNonce() {
+    return randomBytes(NONCE_BYTES).toString('base64url');
+}
+/**
+ * The admin's Content-Security-Policy.
+ *
+ * Everything the admin loads is its own: the stylesheet and the editor bundle
+ * come from `/admin/_static/`, the editor's preview and upload calls are
+ * same-origin `fetch`, and the preview frame renders the site's own theme and
+ * uploads. So `'self'` is the whole allowlist, with three exceptions worth
+ * naming:
+ *
+ * - `style-src` also carries a per-response nonce. CodeMirror 6 injects its
+ *   themes as `<style>` elements at runtime through `style-mod`, which is an
+ *   inline style however it is written; the nonce is threaded to it through
+ *   `EditorView.cspNonce` so the admin never has to say `'unsafe-inline'`.
+ * - `img-src` also allows `data:`, because a preview of a post somebody is
+ *   writing may hold a data URI image and refusing it would make the preview
+ *   lie about what publishing would show.
+ * - `frame-ancestors` is `'self'` rather than `'none'`: the editor's preview
+ *   is a `srcdoc` iframe, which inherits this policy, and its ancestor is the
+ *   admin page itself.
+ *
+ * There is no inline script at all — the slug and permalink enhancement moved
+ * into `admin/static/slug.js` — so `script-src` needs neither a nonce nor
+ * `'unsafe-inline'`.
+ */
+export function adminContentSecurityPolicy(nonce) {
+    return [
+        "default-src 'self'",
+        "base-uri 'self'",
+        "form-action 'self'",
+        "frame-ancestors 'self'",
+        "object-src 'none'",
+        "script-src 'self'",
+        `style-src 'self' 'nonce-${nonce}'`,
+        "img-src 'self' data:",
+        "font-src 'self' data:",
+        "media-src 'self'",
+        "connect-src 'self'",
+        "frame-src 'self'",
+    ].join('; ');
+}
+/** The two headers every response carries. */
+function applyBaseline(headers, config) {
+    headers.set('X-Content-Type-Options', 'nosniff');
+    // The same test the session cookie's `Secure` uses, so the two can never
+    // disagree about whether the site is served over https.
+    if (usesSecureCookies(config))
+        headers.set('Strict-Transport-Security', HSTS_VALUE);
+}
+//# sourceMappingURL=headers.js.map

package/dist/admin/headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.js","sourceRoot":"","sources":["../../src/admin/headers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAM1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,UAAU,CAAC;AAEvC,mFAAmF;AACnF,MAAM,CAAC,MAAM,UAAU,GAAG,WAAW,YAAY,qBAAqB,CAAC;AAEvE,kFAAkF;AAClF,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAE9B;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;IACtF,MAAM,IAAI,EAAE,CAAC;IACb,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAkC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;IACnF,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAEzB,MAAM,IAAI,EAAE,CAAC;IAEb,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IAC9B,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IAC9C,8EAA8E;IAC9E,2EAA2E;IAC3E,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;AAC/C,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,WAAW,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAa;IACtD,OAAO;QACL,oBAAoB;QACpB,iBAAiB;QACjB,oBAAoB;QACpB,wBAAwB;QACxB,mBAAmB;QACnB,mBAAmB;QACnB,2BAA2B,KAAK,GAAG;QACnC,sBAAsB;QACtB,uBAAuB;QACvB,kBAAkB;QAClB,oBAAoB;QACpB,kBAAkB;KACnB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,8CAA8C;AAC9C,SAAS,aAAa,CAAC,OAAgB,EAAE,MAAsB;IAC7D,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IACjD,yEAAyE;IACzE,wDAAwD;IACxD,IAAI,iBAAiB,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,UAAU,CAAC,CAAC;AACtF,CAAC"}

package/dist/admin/index.d.ts

@@ -1,23 +1,49 @@
 export { ADMIN_ASSET_MAX_AGE, ADMIN_ASSET_PREFIX, ADMIN_STATIC_DIR, adminAssetResponse, findAdminAsset, } from './assets.ts';
-export { credentialProblem, MAXIMUM_USERNAME_LENGTH, MINIMUM_PASSWORD_LENGTH, passwordProblem, USERNAME_PATTERN, usernameProblem, } from './credentials.ts';
+export { countUsers, createUser, deleteUser, DuplicateUsernameError, findUser, findUserById, findUserByIdentifier, listUsers, primaryUser, migrateUsersToFile, cleanProfile, setUserEmail, setUserPassword, setUserProfile, setUserWordPressActor, ConflictingActorIdError, UnknownUserError, USERS_FILE, USERS_FILE_MODE, usersFile, verifyUserPassword, } from './accounts.ts';
+export type { CreateUserInput, ProfileLink, StoredUser, User, UserProfile } from './accounts.ts';
+export { credentialProblem, emailProblem, MAXIMUM_USERNAME_LENGTH, MINIMUM_PASSWORD_LENGTH, passwordProblem, USERNAME_PATTERN, usernameProblem, } from './credentials.ts';
 export { blankForm, DOCUMENT_FILTERS, DOCUMENTS_PER_PAGE, documentFilter, editorPath, EXCLUDE_KEY, findBySlug, formFor, listingUrl, listOptionsFor, mountDocumentScreens, newEditorPath, PAGE_KIND, POST_KIND, returnPath, splitTags, } from './documents.ts';
 export type { AdminRender, DocumentFilter, DocumentKind, DocumentRow, EditorForm, MountDocumentScreensOptions, } from './documents.ts';
-export { actorSummary, deliveryRows, FEDERATION_FIELDS, FEDERATION_PATH, FEDERATION_RECENT, followerRow, INBOX_INTERACTIONS, inboxRows, localPosts, mountFederationScreen, REDELIVER_PATH, redeliveryMessage, } from './federation.ts';
-export type { ActorSummary, DeliveryRow, DeliveryRowsContext, FollowerRow, InboxRow, InboxRowsContext, LocalPost, MountFederationScreenOptions, } from './federation.ts';
+export { applyTermChange, CATEGORY_KIND, deletePath, mountTaxonomyScreens, renamePath, renameProblem, rewriteTerm, TAG_KIND, TAXONOMY_FIELDS, TAXONOMY_KINDS, } from './taxonomy.ts';
+export type { MountTaxonomyScreensOptions, TaxonomyKind, TermRewriteReport, TermRow, } from './taxonomy.ts';
+export { actorSummary, deliveryRows, FEDERATION_FIELDS, FEDERATION_PATH, FEDERATION_RECENT, FEDERATION_SETTINGS_PATH, followerRow, INBOX_INTERACTIONS, inboxRows, localPosts, mountFederationScreen, RELAY_RETRY_PATH, RELAY_STATE_LABELS, relayRow, RESEND_PATH, resendMessage, } from './federation.ts';
+export type { ActorSummary, DeliveryRow, DeliveryRowsContext, FollowerRow, InboxRow, InboxRowsContext, LocalPost, MountFederationScreenOptions, RelayRow, } from './federation.ts';
+export { COMMENT_ACTIONS, COMMENT_ADMIN_FIELDS, COMMENT_TABS, COMMENTS_MODERATE_PATH, COMMENTS_PATH, COMMENTS_PER_PAGE, COMMENTS_REPLY_PATH, COMMENTS_SECTION, listUrl as commentListUrl, mountCommentsScreen, pendingComments, } from './comments.ts';
+export type { CommentAction, CommentRow, MountCommentsScreenOptions } from './comments.ts';
+export { MESSAGE_FIELDS, MESSAGE_TABS, MESSAGES_DELETE_PATH, MESSAGES_PATH, MESSAGES_PER_PAGE, MESSAGES_READ_PATH, MESSAGES_SECTION, listUrl as messageListUrl, mountMessagesScreen, unreadMessages, } from './messages.ts';
+export type { MessageRow, MountMessagesScreenOptions } from './messages.ts';
 export { flash, takeFlash } from './flash.ts';
+export { deleteUpload, describeUpload, listUploads, MEDIA_DELETE_PATH, MEDIA_FIELDS, MEDIA_PATH, MEDIA_PER_PAGE, MEDIA_SECTION, MEDIA_UPLOAD_PATH, mediaPageUrl, mentionsUpload, mountMediaScreen, referencesTo, resolveUpload, } from './media.ts';
+export type { DeleteUploadOptions, MediaFile, MediaReference, MountMediaScreenOptions, RemoveDerived, } from './media.ts';
+export { formatInTimezone } from './formatting.ts';
+export { adminContentSecurityPolicy, adminSecurityHeaders, baselineSecurityHeaders, createNonce, HSTS_MAX_AGE, HSTS_VALUE, NONCE_BYTES, } from './headers.ts';
+export { clientAddress, createLoginThrottle, describeWait, LOCKOUT_GROWTH_LIMIT, loginKeys, } from './throttle.ts';
+export type { LoginThrottle, LoginThrottleOptions } from './throttle.ts';
 export { mountPreview, PREVIEW_PATH } from './preview.ts';
 export { ARGON2_PARAMETERS, hashPassword, verifyPasswordHash } from './passwords.ts';
-export { ADMIN_SECTIONS, DASHBOARD_RECENT_POSTS, guard, LOGIN_PATH, LOGOUT_PATH, mountAdmin, postEditorPath, QUICK_DRAFT_PATH, SETUP_PATH, } from './routes.ts';
-export type { AdminSection } from './routes.ts';
-export { ACTOR_HANDLE_PATTERN, ACTOR_TYPES, AVATAR_FIELDS, AVATAR_PATH, AVATAR_REMOVE, DEFAULT_SITE_SETTINGS, effectiveBaseUrl, formFromSettings, mountSettings, profileChanged, readSiteSettings, seedSiteSettings, SETTINGS_FIELDS, SETTINGS_PATH, settingsFromForm, settingsProblems, settingsSiteData, siteDataPath, siteJsonFor, writeSiteJson, writeSiteSettings, } from './settings.ts';
-export type { MountSettingsOptions, SettingsField, SettingsForm, SettingsProblems, SiteSettings, } from './settings.ts';
-export { addUserProblems, changePasswordProblems, CHANGE_PASSWORD_PATH, deleteUserRefusal, DELETE_USER_PATH, generatePassword, GENERATED_PASSWORD_ALPHABET, GENERATED_PASSWORD_LENGTH, mountUsers, USER_FIELDS, USERS_PATH, } from './users.ts';
+export { DASHBOARD_RECENT_POSTS, guard, LOGIN_PATH, LOGOUT_PATH, mountAdmin, postEditorPath, SETUP_PATH, } from './routes.ts';
+export { ADMIN_SECTIONS, adminMenu, UnknownAdminScreenError } from './menu.ts';
+export type { AdminMenuChild, AdminMenuCurrentChild, AdminMenuSection, AdminScreenLocation, AdminSection, } from './menu.ts';
+export { LANGUAGE_TAG_PATTERN, DEFAULT_SITE_SETTINGS, effectiveBaseUrl, EMAIL_PATTERN, formFromSettings, migrateSettingsToFile, readSiteSettings, SETTINGS_FIELD_NAMES, SETTINGS_FIELDS, SETTINGS_PATH, settingsFromForm, settingsFromSiteJson, settingsProblems, siteDataPath, normalizeRelayInbox, relayList, siteJsonFor, updateSiteSettings, writeSiteJson, } from './settings.ts';
+export type { CarriedSettings, SettingsField, SettingsForm, SettingsProblems, SiteSettings, } from './settings.ts';
+export { bodyField, mountSettingsPage, settingsPagePath, settingsScreen } from './settings-page.ts';
+export type { MountSettingsOptions, SettingsPage, SubmittedBody } from './settings-page.ts';
+export { ALL_SETTINGS_PAGES, mountSettings, SETTINGS_PAGES } from './settings-pages.ts';
+export { GENERAL_SETTINGS } from './settings-general.ts';
+export { READING_SETTINGS } from './settings-reading.ts';
+export { PERMALINKS_SETTINGS } from './settings-permalinks.ts';
+export { AKISMET_FIELDS, AKISMET_PATH, AKISMET_REMOVE, akismetPanel, DISCUSSION_SETTINGS, } from './settings-discussion.ts';
+export { EMAIL_SETTINGS, MAIL_FIELDS, MAIL_PATH, MAIL_REMOVE, MAIL_TEST_FIELDS, MAIL_TEST_PATH, MAIL_TEST_TEMPLATE, mailPanel, } from './settings-email.ts';
+export { FEDERATION_SETTINGS } from './settings-federation.ts';
+export { addUserProblems, changePasswordProblems, CHANGE_PASSWORD_PATH, deleteUserRefusal, DELETE_USER_PATH, generatePassword, GENERATED_PASSWORD_ALPHABET, GENERATED_PASSWORD_LENGTH, mountUsers, USER_EMAIL_PATH, USER_FIELDS, USERS_PATH, } from './users.ts';
 export type { AddUserProblems, ChangePasswordProblems, MountUsersOptions } from './users.ts';
+export { FORGOT_PATH, mountRecovery, newPasswordProblem, PASSWORD_CHANGED_TEMPLATE, RECOVERY_ANSWER, RECOVERY_FIELDS, RESET_PATH, RESET_TEMPLATE, RESET_TOKEN_LIFETIME_SECONDS, resetLink, } from './recovery.ts';
+export type { MountRecoveryOptions } from './recovery.ts';
 export { ADMIN_PREFIX, clearSessionCookie, CSRF_FIELD, csrfTokenMatches, SESSION_COOKIE, sessionIdFrom, setSessionCookie, usesSecureCookies, } from './session.ts';
-export { ACTOR_KEY_ALGORITHMS, DELIVERY_STATUSES, DuplicateUsernameError, openAdminStore, SESSION_ID_BYTES, } from './store.ts';
-export type { ActorKey, ActorKeyAlgorithm, AdminStore, CreateSessionInput, CreateUserInput, Delivery, DeliveryStatus, FlashKind, FlashMessage, Follower, InboxActivity, ListPageOptions, NewActorKey, NewDelivery, NewFollower, NewInboxActivity, NewOutboundActivity, OpenAdminStoreOptions, OutboundActivity, Session, StoredUser, User, } from './store.ts';
+export { COMMENT_KINDS, COMMENT_SOURCES, COMMENT_STATUSES, DELIVERY_STATUSES, openAdminStore, RELAY_STATES, SESSION_ID_BYTES, } from './store.ts';
+export type { AdminStore, CommentAuthor, CommentContent, CommentKind, CommentRecord, CommentSource, CommentStatus, ListCommentsOptions, PostComment, CreatePasswordResetInput, CreateSessionInput, Delivery, DeliveryStatus, FlashKind, FlashMessage, Follower, InboxActivity, LegacyActorKey, LegacySetting, LegacyUser, ListPageOptions, NewDelivery, NewFollower, NewInboxActivity, NewRelay, IssuedPasswordReset, OpenAdminStoreOptions, PasswordReset, Relay, RelayState, Session, } from './store.ts';
 export { ADMIN_TEMPLATES, createAdminTemplateEnvironment, PACKAGED_ADMIN_DIR, } from './templates.ts';
 export type { CreateAdminTemplateEnvironmentOptions } from './templates.ts';
-export { mountUploads, refuseOversizedUpload, refusedUpload, storeUpload, tooLargeMessage, UPLOAD_ENVELOPE_BYTES, UPLOAD_FIELD, UPLOADS_PATH, } from './uploads.ts';
-export type { StoredUpload, StoreUploadOptions, UploadConfig, UploadRefusal, UploadResult, } from './uploads.ts';
+export { mountUploads, refuseOversizedUpload, refusedUpload, storeUpload, tooLargeMessage, uploadMarkdown, UPLOAD_ENVELOPE_BYTES, UPLOAD_FIELD, UPLOADS_PATH, } from './uploads.ts';
+export type { StoredUpload, StoreUploadOptions, UploadConfig, UploadMarkdownOptions, UploadRefusal, UploadResult, } from './uploads.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/admin/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/admin/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,uBAAuB,EACvB,eAAe,EACf,gBAAgB,EAChB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,UAAU,EACV,WAAW,EACX,UAAU,EACV,OAAO,EACP,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,aAAa,EACb,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,GACV,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,WAAW,EACX,cAAc,EACd,YAAY,EACZ,WAAW,EACX,UAAU,EACV,2BAA2B,GAC5B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,kBAAkB,EAClB,SAAS,EACT,UAAU,EACV,qBAAqB,EACrB,cAAc,EACd,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,YAAY,EACZ,WAAW,EACX,mBAAmB,EACnB,WAAW,EACX,QAAQ,EACR,gBAAgB,EAChB,SAAS,EACT,4BAA4B,GAC7B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACrF,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,KAAK,EACL,UAAU,EACV,WAAW,EACX,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,UAAU,GACX,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,aAAa,EACb,WAAW,EACX,aAAa,EACb,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,aAAa,EACb,iBAAiB,GAClB,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,oBAAoB,EACpB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,YAAY,GACb,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,2BAA2B,EAC3B,yBAAyB,EACzB,UAAU,EACV,WAAW,EACX,UAAU,GACX,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,eAAe,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC7F,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,sBAAsB,EACtB,cAAc,EACd,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,QAAQ,EACR,iBAAiB,EACjB,UAAU,EACV,kBAAkB,EAClB,eAAe,EACf,QAAQ,EACR,cAAc,EACd,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,aAAa,EACb,eAAe,EACf,WAAW,EACX,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,gBAAgB,EAChB,OAAO,EACP,UAAU,EACV,IAAI,GACL,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,eAAe,EACf,8BAA8B,EAC9B,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,qCAAqC,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,aAAa,EACb,WAAW,EACX,eAAe,EACf,qBAAqB,EACrB,YAAY,EACZ,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,aAAa,EACb,YAAY,GACb,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/admin/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,UAAU,EACV,UAAU,EACV,UAAU,EACV,sBAAsB,EACtB,QAAQ,EACR,YAAY,EACZ,oBAAoB,EACpB,SAAS,EACT,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,SAAS,EACT,kBAAkB,GACnB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjG,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,uBAAuB,EACvB,uBAAuB,EACvB,eAAe,EACf,gBAAgB,EAChB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,UAAU,EACV,WAAW,EACX,UAAU,EACV,OAAO,EACP,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,aAAa,EACb,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,GACV,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,WAAW,EACX,cAAc,EACd,YAAY,EACZ,WAAW,EACX,UAAU,EACV,2BAA2B,GAC5B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,aAAa,EACb,UAAU,EACV,oBAAoB,EACpB,UAAU,EACV,aAAa,EACb,WAAW,EACX,QAAQ,EACR,eAAe,EACf,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,2BAA2B,EAC3B,YAAY,EACZ,iBAAiB,EACjB,OAAO,GACR,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,wBAAwB,EACxB,WAAW,EACX,kBAAkB,EAClB,SAAS,EACT,UAAU,EACV,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,QAAQ,EACR,WAAW,EACX,aAAa,GACd,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,YAAY,EACZ,WAAW,EACX,mBAAmB,EACnB,WAAW,EACX,QAAQ,EACR,gBAAgB,EAChB,SAAS,EACT,4BAA4B,EAC5B,QAAQ,GACT,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,YAAY,EACZ,sBAAsB,EACtB,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,OAAO,IAAI,cAAc,EACzB,mBAAmB,EACnB,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EACL,cAAc,EACd,YAAY,EACZ,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,OAAO,IAAI,cAAc,EACzB,mBAAmB,EACnB,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,UAAU,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EACL,YAAY,EACZ,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,mBAAmB,EACnB,SAAS,EACT,cAAc,EACd,uBAAuB,EACvB,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,uBAAuB,EACvB,WAAW,EACX,YAAY,EACZ,UAAU,EACV,WAAW,GACZ,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,YAAY,EACZ,oBAAoB,EACpB,SAAS,GACV,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACrF,OAAO,EACL,sBAAsB,EACtB,KAAK,EACL,UAAU,EACV,WAAW,EACX,UAAU,EACV,cAAc,EACd,UAAU,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAC/E,YAAY,EACV,cAAc,EACd,qBAAqB,EACrB,gBAAgB,EAChB,mBAAmB,EACnB,YAAY,GACb,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,kBAAkB,EAClB,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,eAAe,EACf,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,YAAY,GACb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpG,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC5F,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EACL,cAAc,EACd,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,cAAc,EACd,WAAW,EACX,SAAS,EACT,WAAW,EACX,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,2BAA2B,EAC3B,yBAAyB,EACzB,UAAU,EACV,eAAe,EACf,WAAW,EACX,UAAU,GACX,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,eAAe,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC7F,OAAO,EACL,WAAW,EACX,aAAa,EACb,kBAAkB,EAClB,yBAAyB,EACzB,eAAe,EACf,eAAe,EACf,UAAU,EACV,cAAc,EACd,4BAA4B,EAC5B,SAAS,GACV,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,UAAU,EACV,aAAa,EACb,cAAc,EACd,WAAW,EACX,aAAa,EACb,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,WAAW,EACX,wBAAwB,EACxB,kBAAkB,EAClB,QAAQ,EACR,cAAc,EACd,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,aAAa,EACb,cAAc,EACd,aAAa,EACb,UAAU,EACV,eAAe,EACf,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,QAAQ,EACR,mBAAmB,EACnB,qBAAqB,EACrB,aAAa,EACb,KAAK,EACL,UAAU,EACV,OAAO,GACR,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,eAAe,EACf,8BAA8B,EAC9B,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,qCAAqC,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,aAAa,EACb,WAAW,EACX,eAAe,EACf,cAAc,EACd,qBAAqB,EACrB,YAAY,EACZ,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,qBAAqB,EACrB,aAAa,EACb,YAAY,GACb,MAAM,cAAc,CAAC"}

package/dist/admin/index.js

@@ -1,15 +1,33 @@
 export { ADMIN_ASSET_MAX_AGE, ADMIN_ASSET_PREFIX, ADMIN_STATIC_DIR, adminAssetResponse, findAdminAsset, } from './assets.js';
-export { credentialProblem, MAXIMUM_USERNAME_LENGTH, MINIMUM_PASSWORD_LENGTH, passwordProblem, USERNAME_PATTERN, usernameProblem, } from './credentials.js';
+export { countUsers, createUser, deleteUser, DuplicateUsernameError, findUser, findUserById, findUserByIdentifier, listUsers, primaryUser, migrateUsersToFile, cleanProfile, setUserEmail, setUserPassword, setUserProfile, setUserWordPressActor, ConflictingActorIdError, UnknownUserError, USERS_FILE, USERS_FILE_MODE, usersFile, verifyUserPassword, } from './accounts.js';
+export { credentialProblem, emailProblem, MAXIMUM_USERNAME_LENGTH, MINIMUM_PASSWORD_LENGTH, passwordProblem, USERNAME_PATTERN, usernameProblem, } from './credentials.js';
 export { blankForm, DOCUMENT_FILTERS, DOCUMENTS_PER_PAGE, documentFilter, editorPath, EXCLUDE_KEY, findBySlug, formFor, listingUrl, listOptionsFor, mountDocumentScreens, newEditorPath, PAGE_KIND, POST_KIND, returnPath, splitTags, } from './documents.js';
-export { actorSummary, deliveryRows, FEDERATION_FIELDS, FEDERATION_PATH, FEDERATION_RECENT, followerRow, INBOX_INTERACTIONS, inboxRows, localPosts, mountFederationScreen, REDELIVER_PATH, redeliveryMessage, } from './federation.js';
+export { applyTermChange, CATEGORY_KIND, deletePath, mountTaxonomyScreens, renamePath, renameProblem, rewriteTerm, TAG_KIND, TAXONOMY_FIELDS, TAXONOMY_KINDS, } from './taxonomy.js';
+export { actorSummary, deliveryRows, FEDERATION_FIELDS, FEDERATION_PATH, FEDERATION_RECENT, FEDERATION_SETTINGS_PATH, followerRow, INBOX_INTERACTIONS, inboxRows, localPosts, mountFederationScreen, RELAY_RETRY_PATH, RELAY_STATE_LABELS, relayRow, RESEND_PATH, resendMessage, } from './federation.js';
+export { COMMENT_ACTIONS, COMMENT_ADMIN_FIELDS, COMMENT_TABS, COMMENTS_MODERATE_PATH, COMMENTS_PATH, COMMENTS_PER_PAGE, COMMENTS_REPLY_PATH, COMMENTS_SECTION, listUrl as commentListUrl, mountCommentsScreen, pendingComments, } from './comments.js';
+export { MESSAGE_FIELDS, MESSAGE_TABS, MESSAGES_DELETE_PATH, MESSAGES_PATH, MESSAGES_PER_PAGE, MESSAGES_READ_PATH, MESSAGES_SECTION, listUrl as messageListUrl, mountMessagesScreen, unreadMessages, } from './messages.js';
 export { flash, takeFlash } from './flash.js';
+export { deleteUpload, describeUpload, listUploads, MEDIA_DELETE_PATH, MEDIA_FIELDS, MEDIA_PATH, MEDIA_PER_PAGE, MEDIA_SECTION, MEDIA_UPLOAD_PATH, mediaPageUrl, mentionsUpload, mountMediaScreen, referencesTo, resolveUpload, } from './media.js';
+export { formatInTimezone } from './formatting.js';
+export { adminContentSecurityPolicy, adminSecurityHeaders, baselineSecurityHeaders, createNonce, HSTS_MAX_AGE, HSTS_VALUE, NONCE_BYTES, } from './headers.js';
+export { clientAddress, createLoginThrottle, describeWait, LOCKOUT_GROWTH_LIMIT, loginKeys, } from './throttle.js';
 export { mountPreview, PREVIEW_PATH } from './preview.js';
 export { ARGON2_PARAMETERS, hashPassword, verifyPasswordHash } from './passwords.js';
-export { ADMIN_SECTIONS, DASHBOARD_RECENT_POSTS, guard, LOGIN_PATH, LOGOUT_PATH, mountAdmin, postEditorPath, QUICK_DRAFT_PATH, SETUP_PATH, } from './routes.js';
-export { ACTOR_HANDLE_PATTERN, ACTOR_TYPES, AVATAR_FIELDS, AVATAR_PATH, AVATAR_REMOVE, DEFAULT_SITE_SETTINGS, effectiveBaseUrl, formFromSettings, mountSettings, profileChanged, readSiteSettings, seedSiteSettings, SETTINGS_FIELDS, SETTINGS_PATH, settingsFromForm, settingsProblems, settingsSiteData, siteDataPath, siteJsonFor, writeSiteJson, writeSiteSettings, } from './settings.js';
-export { addUserProblems, changePasswordProblems, CHANGE_PASSWORD_PATH, deleteUserRefusal, DELETE_USER_PATH, generatePassword, GENERATED_PASSWORD_ALPHABET, GENERATED_PASSWORD_LENGTH, mountUsers, USER_FIELDS, USERS_PATH, } from './users.js';
+export { DASHBOARD_RECENT_POSTS, guard, LOGIN_PATH, LOGOUT_PATH, mountAdmin, postEditorPath, SETUP_PATH, } from './routes.js';
+export { ADMIN_SECTIONS, adminMenu, UnknownAdminScreenError } from './menu.js';
+export { LANGUAGE_TAG_PATTERN, DEFAULT_SITE_SETTINGS, effectiveBaseUrl, EMAIL_PATTERN, formFromSettings, migrateSettingsToFile, readSiteSettings, SETTINGS_FIELD_NAMES, SETTINGS_FIELDS, SETTINGS_PATH, settingsFromForm, settingsFromSiteJson, settingsProblems, siteDataPath, normalizeRelayInbox, relayList, siteJsonFor, updateSiteSettings, writeSiteJson, } from './settings.js';
+export { bodyField, mountSettingsPage, settingsPagePath, settingsScreen } from './settings-page.js';
+export { ALL_SETTINGS_PAGES, mountSettings, SETTINGS_PAGES } from './settings-pages.js';
+export { GENERAL_SETTINGS } from './settings-general.js';
+export { READING_SETTINGS } from './settings-reading.js';
+export { PERMALINKS_SETTINGS } from './settings-permalinks.js';
+export { AKISMET_FIELDS, AKISMET_PATH, AKISMET_REMOVE, akismetPanel, DISCUSSION_SETTINGS, } from './settings-discussion.js';
+export { EMAIL_SETTINGS, MAIL_FIELDS, MAIL_PATH, MAIL_REMOVE, MAIL_TEST_FIELDS, MAIL_TEST_PATH, MAIL_TEST_TEMPLATE, mailPanel, } from './settings-email.js';
+export { FEDERATION_SETTINGS } from './settings-federation.js';
+export { addUserProblems, changePasswordProblems, CHANGE_PASSWORD_PATH, deleteUserRefusal, DELETE_USER_PATH, generatePassword, GENERATED_PASSWORD_ALPHABET, GENERATED_PASSWORD_LENGTH, mountUsers, USER_EMAIL_PATH, USER_FIELDS, USERS_PATH, } from './users.js';
+export { FORGOT_PATH, mountRecovery, newPasswordProblem, PASSWORD_CHANGED_TEMPLATE, RECOVERY_ANSWER, RECOVERY_FIELDS, RESET_PATH, RESET_TEMPLATE, RESET_TOKEN_LIFETIME_SECONDS, resetLink, } from './recovery.js';
 export { ADMIN_PREFIX, clearSessionCookie, CSRF_FIELD, csrfTokenMatches, SESSION_COOKIE, sessionIdFrom, setSessionCookie, usesSecureCookies, } from './session.js';
-export { ACTOR_KEY_ALGORITHMS, DELIVERY_STATUSES, DuplicateUsernameError, openAdminStore, SESSION_ID_BYTES, } from './store.js';
+export { COMMENT_KINDS, COMMENT_SOURCES, COMMENT_STATUSES, DELIVERY_STATUSES, openAdminStore, RELAY_STATES, SESSION_ID_BYTES, } from './store.js';
 export { ADMIN_TEMPLATES, createAdminTemplateEnvironment, PACKAGED_ADMIN_DIR, } from './templates.js';
-export { mountUploads, refuseOversizedUpload, refusedUpload, storeUpload, tooLargeMessage, UPLOAD_ENVELOPE_BYTES, UPLOAD_FIELD, UPLOADS_PATH, } from './uploads.js';
+export { mountUploads, refuseOversizedUpload, refusedUpload, storeUpload, tooLargeMessage, uploadMarkdown, UPLOAD_ENVELOPE_BYTES, UPLOAD_FIELD, UPLOADS_PATH, } from './uploads.js';
 //# sourceMappingURL=index.js.map

package/dist/admin/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/admin/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,uBAAuB,EACvB,eAAe,EACf,gBAAgB,EAChB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,UAAU,EACV,WAAW,EACX,UAAU,EACV,OAAO,EACP,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,aAAa,EACb,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,GACV,MAAM,gBAAgB,CAAC;AASxB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,kBAAkB,EAClB,SAAS,EACT,UAAU,EACV,qBAAqB,EACrB,cAAc,EACd,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAWzB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACrF,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,KAAK,EACL,UAAU,EACV,WAAW,EACX,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,UAAU,GACX,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,aAAa,EACb,WAAW,EACX,aAAa,EACb,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,aAAa,EACb,iBAAiB,GAClB,MAAM,eAAe,CAAC;AAQvB,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,2BAA2B,EAC3B,yBAAyB,EACzB,UAAU,EACV,WAAW,EACX,UAAU,GACX,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,sBAAsB,EACtB,cAAc,EACd,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAyBpB,OAAO,EACL,eAAe,EACf,8BAA8B,EAC9B,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,aAAa,EACb,WAAW,EACX,eAAe,EACf,qBAAqB,EACrB,YAAY,EACZ,YAAY,GACb,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/admin/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,UAAU,EACV,UAAU,EACV,UAAU,EACV,sBAAsB,EACtB,QAAQ,EACR,YAAY,EACZ,oBAAoB,EACpB,SAAS,EACT,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,SAAS,EACT,kBAAkB,GACnB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,uBAAuB,EACvB,uBAAuB,EACvB,eAAe,EACf,gBAAgB,EAChB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,UAAU,EACV,WAAW,EACX,UAAU,EACV,OAAO,EACP,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,aAAa,EACb,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,GACV,MAAM,gBAAgB,CAAC;AASxB,OAAO,EACL,eAAe,EACf,aAAa,EACb,UAAU,EACV,oBAAoB,EACpB,UAAU,EACV,aAAa,EACb,WAAW,EACX,QAAQ,EACR,eAAe,EACf,cAAc,GACf,MAAM,eAAe,CAAC;AAOvB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,wBAAwB,EACxB,WAAW,EACX,kBAAkB,EAClB,SAAS,EACT,UAAU,EACV,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,QAAQ,EACR,WAAW,EACX,aAAa,GACd,MAAM,iBAAiB,CAAC;AAYzB,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,YAAY,EACZ,sBAAsB,EACtB,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,OAAO,IAAI,cAAc,EACzB,mBAAmB,EACnB,eAAe,GAChB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,cAAc,EACd,YAAY,EACZ,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,OAAO,IAAI,cAAc,EACzB,mBAAmB,EACnB,cAAc,GACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EACL,YAAY,EACZ,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,aAAa,GACd,MAAM,YAAY,CAAC;AAQpB,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,uBAAuB,EACvB,WAAW,EACX,YAAY,EACZ,UAAU,EACV,WAAW,GACZ,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,YAAY,EACZ,oBAAoB,EACpB,SAAS,GACV,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACrF,OAAO,EACL,sBAAsB,EACtB,KAAK,EACL,UAAU,EACV,WAAW,EACX,UAAU,EACV,cAAc,EACd,UAAU,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAQ/E,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,kBAAkB,EAClB,aAAa,GACd,MAAM,eAAe,CAAC;AAQvB,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpG,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EACL,cAAc,EACd,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,cAAc,EACd,WAAW,EACX,SAAS,EACT,WAAW,EACX,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,2BAA2B,EAC3B,yBAAyB,EACzB,UAAU,EACV,eAAe,EACf,WAAW,EACX,UAAU,GACX,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,WAAW,EACX,aAAa,EACb,kBAAkB,EAClB,yBAAyB,EACzB,eAAe,EACf,eAAe,EACf,UAAU,EACV,cAAc,EACd,4BAA4B,EAC5B,SAAS,GACV,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAkCpB,OAAO,EACL,eAAe,EACf,8BAA8B,EAC9B,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,aAAa,EACb,WAAW,EACX,eAAe,EACf,cAAc,EACd,qBAAqB,EACrB,YAAY,EACZ,YAAY,GACb,MAAM,cAAc,CAAC"}

package/dist/admin/media.d.ts

@@ -0,0 +1,168 @@
+/**
+ * The media screen: what is under `content/uploads/`, what links to it, and
+ * the two things that can be done to it — add one, and take one away.
+ *
+ * The listing is a walk of the directory rather than a query, because the
+ * directory is the truth (decision-1, decision-9). Nothing records that a file
+ * exists; a file dropped in by hand over ssh, by a git pull, or by an Eleventy
+ * build is on the screen the next time it is asked for, and a file taken away
+ * the same way is off it. The only thing the index is asked is which documents
+ * mention a URL, which is a question a directory cannot answer.
+ */
+import type { Hono } from 'hono';
+import type { ContentStore } from '../content/store.ts';
+import type { GeekityEnv } from '../env.ts';
+import type { AdminRender } from './documents.ts';
+/** Where the media screen lives. */
+export declare const MEDIA_PATH = "/admin/media";
+/** The navigation section the screen marks as current. */
+export declare const MEDIA_SECTION = "media";
+/** Where the screen's upload form posts. */
+export declare const MEDIA_UPLOAD_PATH = "/admin/media/upload";
+/** Where a row's Delete button posts. */
+export declare const MEDIA_DELETE_PATH = "/admin/media/delete";
+/** How many files one page of the library shows. */
+export declare const MEDIA_PER_PAGE = 24;
+/** The fields the forms on the media screen submit. */
+export declare const MEDIA_FIELDS: {
+    /** The file being added, on the upload form. */
+    readonly file: 'file';
+    /** The upload being deleted, as a path under `content/uploads/`. */
+    readonly path: 'path';
+    /** Set once the admin has been shown what still references the file. */
+    readonly confirm: 'confirm';
+};
+/** One file under `content/uploads/`, as the screen shows it. */
+export interface MediaFile {
+    /**
+     * Where it is under `content/uploads/`, with `/` separators — `2026/09/a.png`.
+     * This is the file's identity: it is what the delete form carries, and what
+     * a variant directory would mirror.
+     */
+    path: string;
+    /** The public URL the site serves it at. */
+    url: string;
+    /** The last segment of {@link MediaFile.path}. */
+    name: string;
+    /** Its extension, lower case, with the dot. Empty when it has none. */
+    extension: string;
+    /** How big it is, in bytes. */
+    bytes: number;
+    /** When it last changed, as an ISO 8601 instant, which is what sorts the list. */
+    modified: string;
+    /** Whether a browser will render it as a picture, so the row shows a thumbnail. */
+    image: boolean;
+    /** The Markdown for it: an embed for an image, a link for anything else. */
+    markdown: string;
+}
+/**
+ * Every file under `content/uploads/`, newest first.
+ *
+ * Recursive, because uploads land under `{yyyy}/{mm}/`, and a site that has
+ * been copying files in by hand may have any shape at all under there. The
+ * order is by modification time rather than by the dated path: the path is
+ * only a hint about when a file arrived, and a file dropped in by hand may
+ * have no dated path to read.
+ *
+ * A directory that does not exist yet is an empty library rather than an
+ * error — a site that has never uploaded anything has no `uploads/`.
+ */
+export declare function listUploads(contentDir: string): Promise<MediaFile[]>;
+/** One upload as the screen shows it, from what a directory walk knows. */
+export declare function describeUpload(relative: string, bytes: number, modified: Date): MediaFile;
+/** One document that mentions an upload, as the confirmation names it. */
+export interface MediaReference {
+    /** Path relative to the content directory: what identifies the document. */
+    path: string;
+    /** Its title, or its path when it has none worth showing. */
+    title: string;
+    /** Where to edit it. */
+    editUrl: string;
+    /** Whether it is in the trash rather than the live tree. */
+    trashed: boolean;
+}
+/**
+ * Every document whose body mentions an upload's URL, trash included.
+ *
+ * The trash counts. A trashed post can be restored tomorrow, and restoring one
+ * whose picture was deleted in the meantime is a broken post nobody was warned
+ * about — so a file the trash still points at asks for confirmation exactly as
+ * a published one does.
+ *
+ * This is the one thing on the screen that comes out of the index rather than
+ * off the disk. The index is a cache of the files (decision-1), so it may be a
+ * moment behind a hand edit; that is acceptable here because the answer is a
+ * warning rather than a decision, and the confirmation step is what makes an
+ * out-of-date answer harmless in both directions.
+ */
+export declare function referencesTo(store: ContentStore, url: string): MediaReference[];
+/**
+ * Whether a body points at an upload URL.
+ *
+ * A substring search with one guard on the end of it: `/uploads/a.png` must not
+ * count as a mention of `/uploads/a.pn`, and `/uploads/logo.png` must not count
+ * as a mention of `/uploads/logo`. Anything that could still be part of the
+ * same filename disqualifies the match; a quote, a bracket, a space or the end
+ * of the body ends it.
+ *
+ * Deliberately blind to whether the mention is Markdown, HTML or prose. All
+ * three break when the file goes, and a warning that only understood
+ * `![](…)` would be a warning that missed most of them.
+ */
+export declare function mentionsUpload(body: string, url: string): boolean;
+/** What {@link deleteUpload} needs to take a file away. */
+export interface DeleteUploadOptions {
+    /** The site's content directory. */
+    contentDir: string;
+    /** The file, as a path under `content/uploads/` with `/` separators. */
+    path: string;
+    /**
+     * Take the file's derived files with it.
+     *
+     * The original under `content/uploads/` is the only source of truth
+     * (decision-10); the image variants beside it are derived, and derived state
+     * that outlives what it was derived from is rubbish nobody will ever clean
+     * up. The hook is passed the same content-relative path, is awaited before
+     * the delete reports success, and is expected to be forgiving: a file with
+     * no variants at all is the normal case.
+     */
+    removeDerived?: RemoveDerived | undefined;
+}
+/** Takes an upload's derived files away with it. See {@link DeleteUploadOptions.removeDerived}. */
+export type RemoveDerived = (uploadPath: string) => Promise<void>;
+/**
+ * Delete one upload, and whatever was derived from it.
+ *
+ * Returns `false` when there was no such file, which is what a second click on
+ * a Delete button on a stale page is, rather than throwing: the end state the
+ * admin asked for is the end state they have.
+ */
+export declare function deleteUpload(options: DeleteUploadOptions): Promise<boolean>;
+/**
+ * A submitted path as an absolute file under `content/uploads/`, or
+ * `undefined` when it is not one.
+ *
+ * The path arrives in a form, so it is an attacker's string as much as an
+ * admin's. Containment is checked after resolution rather than by inspecting
+ * the string, so `..`, an encoded one, or an absolute path cannot slip past —
+ * the same rule {@link findAsset} applies to a request for a file.
+ */
+export declare function resolveUpload(contentDir: string, relative: string): string | undefined;
+/** What {@link mountMediaScreen} needs from the admin around it. */
+export interface MountMediaScreenOptions {
+    /** The admin's renderer, which injects the chrome, the CSRF token and the flash. */
+    render: AdminRender;
+    /** Passed to every {@link deleteUpload}. See {@link DeleteUploadOptions.removeDerived}. */
+    removeDerived?: RemoveDerived | undefined;
+}
+/**
+ * Register the media screen: the library, the upload form and the delete.
+ *
+ * Uploading here is {@link storeUpload}, exactly as the editor's control and
+ * the avatar are, so what a site accepts is one answer given in one place
+ * rather than three screens that might disagree.
+ */
+export declare function mountMediaScreen(app: Hono<GeekityEnv>, options: MountMediaScreenOptions): void;
+/** The URL of one page of the library. Page one is the screen's own URL. */
+export declare function mediaPageUrl(page: number): string;
+//# sourceMappingURL=media.d.ts.map

package/dist/admin/media.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../../src/admin/media.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,OAAO,KAAK,EAAW,IAAI,EAAE,MAAM,MAAM,CAAC;AAI1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAI5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAMlD,oCAAoC;AACpC,eAAO,MAAM,UAAU,iBAA0B,CAAC;AAElD,0DAA0D;AAC1D,eAAO,MAAM,aAAa,UAAU,CAAC;AAErC,4CAA4C;AAC5C,eAAO,MAAM,iBAAiB,wBAAyB,CAAC;AAExD,yCAAyC;AACzC,eAAO,MAAM,iBAAiB,wBAAyB,CAAC;AAExD,oDAAoD;AACpD,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC,uDAAuD;AACvD,eAAO,MAAM,YAAY;IACvB,gDAAgD;aAChD,IAAI,EAAE,MAAM;IACZ,oEAAoE;aACpE,IAAI,EAAE,MAAM;IACZ,wEAAwE;aACxE,OAAO,EAAE,SAAS;CACV,CAAC;AAEX,iEAAiE;AACjE,MAAM,WAAW,SAAS;IACxB;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,kFAAkF;IAClF,QAAQ,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,KAAK,EAAE,OAAO,CAAC;IACf,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAwC1E;AAED,2EAA2E;AAC3E,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,GAAG,SAAS,CAmBzF;AAED,0EAA0E;AAC1E,MAAM,WAAW,cAAc;IAC7B,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,wBAAwB;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,cAAc,EAAE,CAY/E;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAMjE;AAKD,2DAA2D;AAC3D,MAAM,WAAW,mBAAmB;IAClC,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;CAC3C;AAED,mGAAmG;AACnG,MAAM,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAElE;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,CAgBjF;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAOtF;AAED,oEAAoE;AACpE,MAAM,WAAW,uBAAuB;IACtC,oFAAoF;IACpF,MAAM,EAAE,WAAW,CAAC;IACpB,2FAA2F;IAC3F,aAAa,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;CAC3C;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,uBAAuB,GAAG,IAAI,CA6F9F;AAED,4EAA4E;AAC5E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjD"}