@geekity/cms 0.3.0 → 0.5.0

package/dist/admin/templates.js

@@ -6,23 +6,55 @@ import { formatDate } from '../web/templates.js';
  * directory so they are found whether the CMS runs from `src/` under tsx or
  * from `dist/` as an installed dependency.
  *
- * They are a set of their own, not part of the theme search path: a site's
- * `theme/` may override any public template, and must not be able to shadow
- * the login form or the CSRF field inside it.
+ * They are a set of their own, not part of the theme search path: the theme a
+ * site wears may override any public template, and must not be able to shadow
+ * the login form or the CSRF field inside it (decision-4, decision-15).
+ *
+ * Under it are three siblings, and a template is in exactly one of them:
+ *
+ * - `pages/` — the screens, one folder per section of the admin menu, plus
+ *   `account/` for the four screens shown when nobody is signed in yet.
+ * - `layouts/` — the chrome a page extends: the document, the signed-in shell,
+ *   and the shared settings page.
+ * - `components/` — what a page imports or includes: the field macros and the
+ *   flash.
  */
 export const PACKAGED_ADMIN_DIR = fileURLToPath(new URL('../../admin/', import.meta.url));
-/** Templates {@link mountAdmin} asks for by name. */
+/**
+ * Templates {@link mountAdmin} asks for by name.
+ *
+ * The path of each is where the menu says it is, with one exception:
+ * `pages/documents/` holds the four entries Posts, Pages, Categories and Tags
+ * are made of, because a post and a page differ by a `kind` rather than by a
+ * screen. `pages/documents/list.njk` says why at more length.
+ */
 export const ADMIN_TEMPLATES = {
-    login: 'layouts/login.njk',
-    setup: 'layouts/setup.njk',
-    dashboard: 'layouts/dashboard.njk',
-    placeholder: 'layouts/placeholder.njk',
-    documentList: 'layouts/document-list.njk',
-    documentEditor: 'layouts/document-editor.njk',
-    documentConflict: 'layouts/document-conflict.njk',
-    settings: 'layouts/settings.njk',
-    users: 'layouts/users.njk',
-    federation: 'layouts/federation.njk',
+    login: 'pages/account/login.njk',
+    setup: 'pages/account/setup.njk',
+    forgot: 'pages/account/forgot.njk',
+    reset: 'pages/account/reset.njk',
+    dashboard: 'pages/dashboard/home.njk',
+    placeholder: 'pages/placeholder.njk',
+    documentList: 'pages/documents/list.njk',
+    documentEditor: 'pages/documents/editor.njk',
+    documentConflict: 'pages/documents/conflict.njk',
+    taxonomy: 'pages/documents/taxonomy.njk',
+    navigation: 'pages/navigation/menus.njk',
+    media: 'pages/media/library.njk',
+    themes: 'pages/appearance/themes.njk',
+    comments: 'pages/comments/all.njk',
+    messages: 'pages/messages/all.njk',
+    settingsGeneral: 'pages/settings/general.njk',
+    settingsReading: 'pages/settings/reading.njk',
+    settingsPermalinks: 'pages/settings/permalinks.njk',
+    settingsDiscussion: 'pages/settings/discussion.njk',
+    settingsEmail: 'pages/settings/email.njk',
+    toolsContentIndex: 'pages/tools/content-index.njk',
+    usersList: 'pages/users/list.njk',
+    usersNew: 'pages/users/new.njk',
+    usersEdit: 'pages/users/edit.njk',
+    federation: 'pages/federation/followers.njk',
+    federationSettings: 'pages/federation/settings.njk',
 };
 /** A Nunjucks environment over {@link PACKAGED_ADMIN_DIR} and nothing else. */
 export function createAdminTemplateEnvironment(options = {}) {

package/dist/admin/templates.js.map

@@ -1 +1 @@
-{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/admin/templates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAEzD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAW,aAAa,CAAC,IAAI,GAAG,CAAC,cAAc,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAElG,qDAAqD;AACrD,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,KAAK,EAAE,mBAAmB;IAC1B,KAAK,EAAE,mBAAmB;IAC1B,SAAS,EAAE,uBAAuB;IAClC,WAAW,EAAE,yBAAyB;IACtC,YAAY,EAAE,2BAA2B;IACzC,cAAc,EAAE,6BAA6B;IAC7C,gBAAgB,EAAE,+BAA+B;IACjD,QAAQ,EAAE,sBAAsB;IAChC,KAAK,EAAE,mBAAmB;IAC1B,UAAU,EAAE,wBAAwB;CAC5B,CAAC;AAYX,+EAA+E;AAC/E,MAAM,UAAU,8BAA8B,CAC5C,OAAO,GAA0C,EAAE;IAEnD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,CAAC,kBAAkB,CAAC,EAAE;QACxD,OAAO,EAAE,OAAO,CAAC,OAAO,KAAK,IAAI;KAClC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,MAAM,EAAE;QAC1C,UAAU,EAAE,IAAI;QAChB,gBAAgB,EAAE,KAAK;QACvB,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IAEH,yEAAyE;IACzE,sEAAsE;IACtE,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,KAAc,EAAE,MAAM,GAAY,UAAU,EAAE,EAAE,CAC7E,UAAU,CAAC,KAAK,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CACpE,CAAC;IAEF,OAAO,WAAW,CAAC;AACrB,CAAC"}
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/admin/templates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAEzD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAW,aAAa,CAAC,IAAI,GAAG,CAAC,cAAc,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAElG;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,KAAK,EAAE,yBAAyB;IAChC,KAAK,EAAE,yBAAyB;IAChC,MAAM,EAAE,0BAA0B;IAClC,KAAK,EAAE,yBAAyB;IAChC,SAAS,EAAE,0BAA0B;IACrC,WAAW,EAAE,uBAAuB;IACpC,YAAY,EAAE,0BAA0B;IACxC,cAAc,EAAE,4BAA4B;IAC5C,gBAAgB,EAAE,8BAA8B;IAChD,QAAQ,EAAE,8BAA8B;IACxC,UAAU,EAAE,4BAA4B;IACxC,KAAK,EAAE,yBAAyB;IAChC,MAAM,EAAE,6BAA6B;IACrC,QAAQ,EAAE,wBAAwB;IAClC,QAAQ,EAAE,wBAAwB;IAClC,eAAe,EAAE,4BAA4B;IAC7C,eAAe,EAAE,4BAA4B;IAC7C,kBAAkB,EAAE,+BAA+B;IACnD,kBAAkB,EAAE,+BAA+B;IACnD,aAAa,EAAE,0BAA0B;IACzC,iBAAiB,EAAE,+BAA+B;IAClD,SAAS,EAAE,sBAAsB;IACjC,QAAQ,EAAE,qBAAqB;IAC/B,SAAS,EAAE,sBAAsB;IACjC,UAAU,EAAE,gCAAgC;IAC5C,kBAAkB,EAAE,+BAA+B;CAC3C,CAAC;AAYX,+EAA+E;AAC/E,MAAM,UAAU,8BAA8B,CAC5C,OAAO,GAA0C,EAAE;IAEnD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,CAAC,kBAAkB,CAAC,EAAE;QACxD,OAAO,EAAE,OAAO,CAAC,OAAO,KAAK,IAAI;KAClC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,MAAM,EAAE;QAC1C,UAAU,EAAE,IAAI;QAChB,gBAAgB,EAAE,KAAK;QACvB,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IAEH,yEAAyE;IACzE,sEAAsE;IACtE,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,KAAc,EAAE,MAAM,GAAY,UAAU,EAAE,EAAE,CAC7E,UAAU,CAAC,KAAK,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CACpE,CAAC;IAEF,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/admin/throttle.d.ts

@@ -0,0 +1,84 @@
+import type { Context } from 'hono';
+import type { ResolvedConfig } from '../config.ts';
+import type { Clock } from '../content/store.ts';
+import type { GeekityEnv } from '../env.ts';
+/**
+ * How far the wait is allowed to double.
+ *
+ * The lockout doubles for every failure past the threshold, so the wait after
+ * `n` extra failures is `lockoutSeconds * 2^n`. Left alone that reaches years,
+ * which is a denial of service against the site's own owner rather than
+ * against an attacker: anybody who can guess a username could lock it shut for
+ * good. The multiplier stops here — with the default fifteen minutes, four
+ * hours.
+ */
+export declare const LOCKOUT_GROWTH_LIMIT = 16;
+/** What {@link createLoginThrottle} needs to know. */
+export interface LoginThrottleOptions {
+    /** Failed attempts a key may make before it is locked. */
+    attempts: number;
+    /** How long the first lockout lasts, in seconds. */
+    lockoutSeconds: number;
+    /** Where the time comes from. Defaults to the system clock; a test hands one it can move. */
+    now?: Clock;
+}
+/**
+ * A count of recent failures per key, and the lockout it earns.
+ *
+ * Deliberately in memory: a restart clears it. The thing it defends against is
+ * a run of guesses over minutes, which no restart interrupts, and keeping it
+ * out of SQLite means a failed login writes nothing an attacker can grow.
+ */
+export interface LoginThrottle {
+    /**
+     * Seconds left before any of these keys may try again, or `undefined` when
+     * none of them is locked. The largest wait wins, so a key that is locked on
+     * both its username and its address is told the longer of the two.
+     */
+    retryAfter(keys: readonly string[]): number | undefined;
+    /** Record one failed attempt against every key. */
+    fail(keys: readonly string[]): void;
+    /** Forget every failure against these keys, which is what a success does. */
+    succeed(keys: readonly string[]): void;
+    /** How many keys are remembered. For the test that pins the sweeping. */
+    size(): number;
+}
+/**
+ * Build a login throttle.
+ *
+ * There is no artificial pause on a failed attempt. A `sleep` in the handler
+ * holds a connection open for as long as it lasts, so a hundred guesses in
+ * parallel would cost the server a hundred idle sockets and the attacker
+ * nothing — the delay would be the lever rather than the defence. The growing
+ * lockout is the delay: it is the server that decides when the next attempt is
+ * allowed, and refusing takes no time at all.
+ */
+export declare function createLoginThrottle(options: LoginThrottleOptions): LoginThrottle;
+/**
+ * Where a request came from, as far as the site can tell, or `undefined`.
+ *
+ * `X-Forwarded-For` is only believed when the site says it is behind a proxy,
+ * because anybody may send it: on a site reached directly, trusting it would
+ * let one attacker put every guess on a different make-believe address and
+ * never be locked out by address at all. The leftmost entry is the client the
+ * first proxy saw. Otherwise it is the socket's own address, which is
+ * unavailable when the app is being driven in process rather than served — a
+ * test, or an embedding — and `undefined` is the honest answer there.
+ */
+export declare function clientAddress(c: Context<GeekityEnv>, config: Pick<ResolvedConfig, 'trustProxy'>): string | undefined;
+/**
+ * The keys one sign-in attempt is counted against: the username it named and
+ * the address it came from.
+ *
+ * The username is folded to lower case so `Ada` and `ada` are one key, and it
+ * is used whether or not any such user exists — a username nobody has locks
+ * out exactly as a real one does, so the lockout cannot be used to find out
+ * which usernames the site has.
+ */
+export declare function loginKeys(username: string, address: string | undefined): string[];
+/**
+ * A wait in words, for the message the locked-out visitor reads. Rounded up,
+ * so it never says a shorter time than the one actually left.
+ */
+export declare function describeWait(seconds: number): string;
+//# sourceMappingURL=throttle.d.ts.map

package/dist/admin/throttle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"throttle.d.ts","sourceRoot":"","sources":["../../src/admin/throttle.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAEjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC,sDAAsD;AACtD,MAAM,WAAW,oBAAoB;IACnC,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,cAAc,EAAE,MAAM,CAAC;IACvB,6FAA6F;IAC7F,GAAG,CAAC,EAAE,KAAK,CAAC;CACb;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,UAAU,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAAC;IACxD,mDAAmD;IACnD,IAAI,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IACpC,6EAA6E;IAC7E,OAAO,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IACvC,yEAAyE;IACzE,IAAI,IAAI,MAAM,CAAC;CAChB;AAYD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,aAAa,CAqEhF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAC3B,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,EACtB,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC,GACzC,MAAM,GAAG,SAAS,CAapB;AAED;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAIjF;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGpD"}

package/dist/admin/throttle.js

@@ -0,0 +1,143 @@
+import { getConnInfo } from '@hono/node-server/conninfo';
+import { systemClock } from '../content/store.js';
+/**
+ * How far the wait is allowed to double.
+ *
+ * The lockout doubles for every failure past the threshold, so the wait after
+ * `n` extra failures is `lockoutSeconds * 2^n`. Left alone that reaches years,
+ * which is a denial of service against the site's own owner rather than
+ * against an attacker: anybody who can guess a username could lock it shut for
+ * good. The multiplier stops here — with the default fifteen minutes, four
+ * hours.
+ */
+export const LOCKOUT_GROWTH_LIMIT = 16;
+/**
+ * Build a login throttle.
+ *
+ * There is no artificial pause on a failed attempt. A `sleep` in the handler
+ * holds a connection open for as long as it lasts, so a hundred guesses in
+ * parallel would cost the server a hundred idle sockets and the attacker
+ * nothing — the delay would be the lever rather than the defence. The growing
+ * lockout is the delay: it is the server that decides when the next attempt is
+ * allowed, and refusing takes no time at all.
+ */
+export function createLoginThrottle(options) {
+    const clock = options.now ?? systemClock;
+    const attempts = Math.max(1, Math.trunc(options.attempts));
+    const window = Math.max(1, options.lockoutSeconds) * 1000;
+    const entries = new Map();
+    /** The row for a key, or `undefined` when it has none or its row is stale. */
+    function live(key, at) {
+        const entry = entries.get(key);
+        if (entry === undefined)
+            return undefined;
+        if (at >= entry.expiresAt) {
+            entries.delete(key);
+            return undefined;
+        }
+        return entry;
+    }
+    /** Drop every stale row. Cheap: the map only holds keys that failed recently. */
+    function sweep(at) {
+        for (const [key, entry] of entries) {
+            if (at >= entry.expiresAt)
+                entries.delete(key);
+        }
+    }
+    return {
+        retryAfter(keys) {
+            const at = clock().getTime();
+            let longest = 0;
+            for (const key of keys) {
+                const entry = live(key, at);
+                if (entry === undefined)
+                    continue;
+                longest = Math.max(longest, entry.lockedUntil - at);
+            }
+            return longest > 0 ? Math.ceil(longest / 1000) : undefined;
+        },
+        fail(keys) {
+            const at = clock().getTime();
+            sweep(at);
+            for (const key of keys) {
+                const entry = live(key, at) ?? { failures: 0, lockedUntil: 0, expiresAt: 0 };
+                entry.failures += 1;
+                if (entry.failures < attempts) {
+                    // Still under the threshold: the row only has to outlive the window,
+                    // so a slow trickle of typos never adds up to a lockout.
+                    entry.expiresAt = at + window;
+                }
+                else {
+                    // The wait doubles for each failure past the threshold, and the row
+                    // outlives the lockout by one window so the next failure is counted
+                    // as the escalation it is rather than as a fresh start.
+                    const wait = window * Math.min(2 ** (entry.failures - attempts), LOCKOUT_GROWTH_LIMIT);
+                    entry.lockedUntil = at + wait;
+                    entry.expiresAt = entry.lockedUntil + window;
+                }
+                entries.set(key, entry);
+            }
+        },
+        succeed(keys) {
+            for (const key of keys)
+                entries.delete(key);
+        },
+        size() {
+            return entries.size;
+        },
+    };
+}
+/**
+ * Where a request came from, as far as the site can tell, or `undefined`.
+ *
+ * `X-Forwarded-For` is only believed when the site says it is behind a proxy,
+ * because anybody may send it: on a site reached directly, trusting it would
+ * let one attacker put every guess on a different make-believe address and
+ * never be locked out by address at all. The leftmost entry is the client the
+ * first proxy saw. Otherwise it is the socket's own address, which is
+ * unavailable when the app is being driven in process rather than served — a
+ * test, or an embedding — and `undefined` is the honest answer there.
+ */
+export function clientAddress(c, config) {
+    if (config.trustProxy) {
+        const forwarded = c.req.header('x-forwarded-for');
+        const first = forwarded?.split(',')[0]?.trim();
+        if (first !== undefined && first !== '')
+            return first;
+    }
+    try {
+        const address = getConnInfo(c).remote.address;
+        return address === undefined || address === '' ? undefined : address;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * The keys one sign-in attempt is counted against: the username it named and
+ * the address it came from.
+ *
+ * The username is folded to lower case so `Ada` and `ada` are one key, and it
+ * is used whether or not any such user exists — a username nobody has locks
+ * out exactly as a real one does, so the lockout cannot be used to find out
+ * which usernames the site has.
+ */
+export function loginKeys(username, address) {
+    const keys = [`user:${username.toLowerCase()}`];
+    if (address !== undefined)
+        keys.push(`addr:${address}`);
+    return keys;
+}
+/**
+ * A wait in words, for the message the locked-out visitor reads. Rounded up,
+ * so it never says a shorter time than the one actually left.
+ */
+export function describeWait(seconds) {
+    if (seconds < 60)
+        return plural(Math.max(1, Math.ceil(seconds)), 'second');
+    return plural(Math.ceil(seconds / 60), 'minute');
+}
+function plural(count, noun) {
+    return `${count} ${noun}${count === 1 ? '' : 's'}`;
+}
+//# sourceMappingURL=throttle.js.map

package/dist/admin/throttle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"throttle.js","sourceRoot":"","sources":["../../src/admin/throttle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAKzD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AA4CvC;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAA6B;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC;IAC1D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE5C,8EAA8E;IAC9E,SAAS,IAAI,CAAC,GAAW,EAAE,EAAU;QACnC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,EAAE,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YAC1B,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iFAAiF;IACjF,SAAS,KAAK,CAAC,EAAU;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YACnC,IAAI,EAAE,IAAI,KAAK,CAAC,SAAS;gBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO;QACL,UAAU,CAAC,IAAI;YACb,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC5B,IAAI,KAAK,KAAK,SAAS;oBAAE,SAAS;gBAClC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC,IAAI;YACP,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC;YAC7B,KAAK,CAAC,EAAE,CAAC,CAAC;YAEV,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;gBAC7E,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAEpB,IAAI,KAAK,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC;oBAC9B,qEAAqE;oBACrE,yDAAyD;oBACzD,KAAK,CAAC,SAAS,GAAG,EAAE,GAAG,MAAM,CAAC;gBAChC,CAAC;qBAAM,CAAC;oBACN,oEAAoE;oBACpE,oEAAoE;oBACpE,wDAAwD;oBACxD,MAAM,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC,EAAE,oBAAoB,CAAC,CAAC;oBACvF,KAAK,CAAC,WAAW,GAAG,EAAE,GAAG,IAAI,CAAC;oBAC9B,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC;gBAC/C,CAAC;gBAED,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI;YACV,KAAK,MAAM,GAAG,IAAI,IAAI;gBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI;YACF,OAAO,OAAO,CAAC,IAAI,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAC3B,CAAsB,EACtB,MAA0C;IAE1C,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;IACxD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QAC9C,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CAAC,QAAgB,EAAE,OAA2B;IACrE,MAAM,IAAI,GAAG,CAAC,QAAQ,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,MAAM,CAAC,KAAa,EAAE,IAAY;IACzC,OAAO,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AACrD,CAAC"}

package/dist/admin/tools.d.ts

@@ -0,0 +1,111 @@
+/**
+ * Tools > Content index: reading every file again, on a site that is serving.
+ *
+ * `geekity rebuild` deletes `data/geekity.db` and boots a fresh CMS, so it
+ * refuses to run while a server holds the file — and in a container the server
+ * is PID 1, which makes the only route stopping the container, running a
+ * one-off one, and starting it again. This is the same repair without the
+ * downtime: nothing is deleted and no connection is swapped, so the services
+ * that captured the store objects at boot — the renderer, delivery, the
+ * scheduler, comments, webmentions, the relays — go on working against the
+ * same objects while the rows underneath them are replaced.
+ *
+ * It is also kinder than the command. Because nothing is deleted it keeps the
+ * sessions, so the admin who pressed the button is still signed in when the
+ * redirect lands; it keeps the delivery log and the relay handshakes; and it
+ * keeps the scheduler's watermark, so a post that came due during the rebuild
+ * is still announced. The command stays as it is for the one case an admin
+ * screen cannot be the door for: a database this version refuses to open,
+ * where there is no running server to press a button in.
+ */
+import type { Hono } from 'hono';
+import type { ContentStore } from '../content/store.ts';
+import type { SyncResult } from '../content/sync.ts';
+import type { GeekityEnv } from '../env.ts';
+import type { AdminRender } from './documents.ts';
+import type { AdminStore } from './store.ts';
+/**
+ * Where the Content index screen lives.
+ *
+ * `/admin/tools` itself rather than `/admin/tools/content-index`, the way
+ * General is `/admin/settings` itself: a section's heading lands on its first
+ * child, and this is the first one.
+ */
+export declare const TOOLS_PATH = "/admin/tools";
+/** Where the Rebuild button posts. */
+export declare const REBUILD_INDEX_PATH = "/admin/tools/rebuild-index";
+/** The navigation section the screen marks as current. */
+export declare const TOOLS_SECTION = "tools";
+/** The child of that section it is. */
+export declare const CONTENT_INDEX_CHILD = "index";
+/** The fields the form on the screen submits. */
+export declare const TOOLS_FIELDS: {
+    /** Set once the admin has been shown what a rebuild costs while it runs. */
+    readonly confirm: 'confirm';
+};
+/** What one in-place rebuild put back. */
+export interface ContentIndexRebuild {
+    /** What the scan of `content/` did, exactly as `cms.sync()` reports it. */
+    scan: SyncResult;
+    /** How many followers the federation files held. */
+    followers: number;
+    /** How many inbox activities the log held. */
+    activities: number;
+    /** How many comments the comment files held. */
+    comments: number;
+}
+/** What {@link rebuildContentIndex} needs. */
+export interface RebuildContentIndexOptions {
+    /** The index to empty and fill again. */
+    store: ContentStore;
+    /** The database the federation and comment indexes live in. */
+    admin: AdminStore;
+    /** The content directory every one of them is read from. */
+    contentDir: string;
+    /** The full scan, which is `cms.sync()`: see {@link GeekityEnv} `rescan`. */
+    rescan: () => Promise<SyncResult>;
+}
+/**
+ * Read `content/` back into the index, in place, on the live connections.
+ *
+ * The three rebuilds are the three that already run on every boot, in the
+ * order boot runs them, so a rebuilt index and a booted one are the same
+ * index. The only thing here that boot does not do is the clear — boot is
+ * cold — and the clear is what makes the scan read every file: a row whose
+ * hash matches its file is a row the scan leaves alone, which is exactly the
+ * case an out-of-band edit or a damaged index leaves behind.
+ *
+ * The clear and the scan are deliberately **not** one transaction. One
+ * connection serves every request, so a write transaction held open across the
+ * scan would not isolate the rebuild from anybody else — it would pull their
+ * writes into it and roll them back with it if the scan threw. The cost is a
+ * window, between the clear and the end of the scan, in which the site answers
+ * 404 for documents whose files are perfectly fine; the screen says so before
+ * the button is pressed.
+ *
+ * It federates nothing. Every change the scan emits carries `origin: 'scan'`,
+ * which delivery, the webmentions and the feed notifier all ignore — the same
+ * reason a boot scan is silent.
+ */
+export declare function rebuildContentIndex(options: RebuildContentIndexOptions): Promise<ContentIndexRebuild>;
+/** What {@link mountToolsScreen} needs from the admin around it. */
+export interface MountToolsOptions {
+    /** The admin's renderer, which injects the chrome, the CSRF token and the flash. */
+    render: AdminRender;
+}
+/**
+ * Register Tools > Content index: what the index holds, and the button that
+ * reads the files back into it.
+ *
+ * The rebuild runs inside the POST, as the taxonomy rewrite does, and says
+ * what it did on the flash. There is no progress bar and nothing to poll:
+ * `node:sqlite` is synchronous, so a rebuild moved off the request would block
+ * the same event loop from somewhere nobody can see, and progress would need
+ * state the database is not allowed to keep (decision-9). A site whose scan
+ * takes long enough for that to matter is one that should be told, which is
+ * what the screen does.
+ */
+export declare function mountToolsScreen(app: Hono<GeekityEnv>, options: MountToolsOptions): void;
+/** What a finished rebuild says on the flash. */
+export declare function rebuildMessage(report: ContentIndexRebuild): string;
+//# sourceMappingURL=tools.d.ts.map

package/dist/admin/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/admin/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAW,IAAI,EAAE,MAAM,MAAM,CAAC;AAG1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAGlD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAG7C;;;;;;GAMG;AACH,eAAO,MAAM,UAAU,iBAA0B,CAAC;AAElD,sCAAsC;AACtC,eAAO,MAAM,kBAAkB,+BAAwC,CAAC;AAExE,0DAA0D;AAC1D,eAAO,MAAM,aAAa,UAAU,CAAC;AAErC,uCAAuC;AACvC,eAAO,MAAM,mBAAmB,UAAU,CAAC;AAE3C,iDAAiD;AACjD,eAAO,MAAM,YAAY;IACvB,4EAA4E;aAC5E,OAAO,EAAE,SAAS;CACV,CAAC;AAEX,0CAA0C;AAC1C,MAAM,WAAW,mBAAmB;IAClC,2EAA2E;IAC3E,IAAI,EAAE,UAAU,CAAC;IACjB,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,8CAA8C;AAC9C,MAAM,WAAW,0BAA0B;IACzC,yCAAyC;IACzC,KAAK,EAAE,YAAY,CAAC;IACpB,+DAA+D;IAC/D,KAAK,EAAE,UAAU,CAAC;IAClB,4DAA4D;IAC5D,UAAU,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,MAAM,EAAE,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;CACnC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,mBAAmB,CAAC,CAe9B;AAED,oEAAoE;AACpE,MAAM,WAAW,iBAAiB;IAChC,oFAAoF;IACpF,MAAM,EAAE,WAAW,CAAC;CACrB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,iBAAiB,GAAG,IAAI,CA6ExF;AAED,iDAAiD;AACjD,wBAAgB,cAAc,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAYlE"}

package/dist/admin/tools.js

@@ -0,0 +1,182 @@
+/**
+ * Tools > Content index: reading every file again, on a site that is serving.
+ *
+ * `geekity rebuild` deletes `data/geekity.db` and boots a fresh CMS, so it
+ * refuses to run while a server holds the file — and in a container the server
+ * is PID 1, which makes the only route stopping the container, running a
+ * one-off one, and starting it again. This is the same repair without the
+ * downtime: nothing is deleted and no connection is swapped, so the services
+ * that captured the store objects at boot — the renderer, delivery, the
+ * scheduler, comments, webmentions, the relays — go on working against the
+ * same objects while the rows underneath them are replaced.
+ *
+ * It is also kinder than the command. Because nothing is deleted it keeps the
+ * sessions, so the admin who pressed the button is still signed in when the
+ * redirect lands; it keeps the delivery log and the relay handshakes; and it
+ * keeps the scheduler's watermark, so a post that came due during the rebuild
+ * is still announced. The command stays as it is for the one case an admin
+ * screen cannot be the door for: a database this version refuses to open,
+ * where there is no running server to press a button in.
+ */
+import { rebuildCommentIndexes } from '../comments/records.js';
+import { rebuildFederationIndexes } from '../federation/records.js';
+import { flash } from './flash.js';
+import { ADMIN_PREFIX } from './session.js';
+import { ADMIN_TEMPLATES } from './templates.js';
+/**
+ * Where the Content index screen lives.
+ *
+ * `/admin/tools` itself rather than `/admin/tools/content-index`, the way
+ * General is `/admin/settings` itself: a section's heading lands on its first
+ * child, and this is the first one.
+ */
+export const TOOLS_PATH = `${ADMIN_PREFIX}/tools`;
+/** Where the Rebuild button posts. */
+export const REBUILD_INDEX_PATH = `${ADMIN_PREFIX}/tools/rebuild-index`;
+/** The navigation section the screen marks as current. */
+export const TOOLS_SECTION = 'tools';
+/** The child of that section it is. */
+export const CONTENT_INDEX_CHILD = 'index';
+/** The fields the form on the screen submits. */
+export const TOOLS_FIELDS = {
+    /** Set once the admin has been shown what a rebuild costs while it runs. */
+    confirm: 'confirm',
+};
+/**
+ * Read `content/` back into the index, in place, on the live connections.
+ *
+ * The three rebuilds are the three that already run on every boot, in the
+ * order boot runs them, so a rebuilt index and a booted one are the same
+ * index. The only thing here that boot does not do is the clear — boot is
+ * cold — and the clear is what makes the scan read every file: a row whose
+ * hash matches its file is a row the scan leaves alone, which is exactly the
+ * case an out-of-band edit or a damaged index leaves behind.
+ *
+ * The clear and the scan are deliberately **not** one transaction. One
+ * connection serves every request, so a write transaction held open across the
+ * scan would not isolate the rebuild from anybody else — it would pull their
+ * writes into it and roll them back with it if the scan threw. The cost is a
+ * window, between the clear and the end of the scan, in which the site answers
+ * 404 for documents whose files are perfectly fine; the screen says so before
+ * the button is pressed.
+ *
+ * It federates nothing. Every change the scan emits carries `origin: 'scan'`,
+ * which delivery, the webmentions and the feed notifier all ignore — the same
+ * reason a boot scan is silent.
+ */
+export async function rebuildContentIndex(options) {
+    const { store, admin, contentDir, rescan } = options;
+    store.clear();
+    const federation = rebuildFederationIndexes({ admin, contentDir });
+    const comments = rebuildCommentIndexes({ admin, contentDir });
+    const scan = await rescan();
+    return {
+        scan,
+        followers: federation.followers,
+        activities: federation.activities,
+        comments: comments.comments,
+    };
+}
+/**
+ * Register Tools > Content index: what the index holds, and the button that
+ * reads the files back into it.
+ *
+ * The rebuild runs inside the POST, as the taxonomy rewrite does, and says
+ * what it did on the flash. There is no progress bar and nothing to poll:
+ * `node:sqlite` is synchronous, so a rebuild moved off the request would block
+ * the same event loop from somewhere nobody can see, and progress would need
+ * state the database is not allowed to keep (decision-9). A site whose scan
+ * takes long enough for that to matter is one that should be told, which is
+ * what the screen does.
+ */
+export function mountToolsScreen(app, options) {
+    const { render } = options;
+    /**
+     * The rebuild in flight, when there is one.
+     *
+     * A second press while the first is still scanning would clear an index the
+     * first one is halfway through filling, and leave two scans racing to write
+     * the same rows. One at a time, then, and the second press is told so rather
+     * than queued: by the time a queued one ran, the first would have done the
+     * very work it was asked for.
+     */
+    let running;
+    app.get(TOOLS_PATH, (c) => render(c, ADMIN_TEMPLATES.toolsContentIndex, screen(c)));
+    app.post(REBUILD_INDEX_PATH, async (c) => {
+        const body = await c.req.parseBody();
+        // Offered rather than done, the way a merge is on the taxonomy screens:
+        // for as long as the scan runs the site answers 404 for every document,
+        // and that is not something to find out about afterwards.
+        if (field(body[TOOLS_FIELDS.confirm]) === '') {
+            return render(c, ADMIN_TEMPLATES.toolsContentIndex, { ...screen(c), confirm: true });
+        }
+        if (running !== undefined) {
+            flash(c, 'error', 'A rebuild is already running. Nothing was started; wait for it to finish and look here again.');
+            return c.redirect(TOOLS_PATH, 303);
+        }
+        running = rebuildContentIndex({
+            store: c.var.store,
+            admin: c.var.admin,
+            contentDir: c.var.config.contentDir,
+            rescan: c.var.rescan,
+        });
+        let report;
+        try {
+            report = await running;
+        }
+        finally {
+            running = undefined;
+        }
+        flash(c, report.scan.failed > 0 ? 'error' : 'notice', rebuildMessage(report));
+        return c.redirect(TOOLS_PATH, 303);
+    });
+    /** Everything the screen renders. */
+    function screen(c) {
+        const counts = c.var.store.counts();
+        return {
+            section: TOOLS_SECTION,
+            child: CONTENT_INDEX_CHILD,
+            heading: 'Content index',
+            rebuildUrl: REBUILD_INDEX_PATH,
+            toolsUrl: TOOLS_PATH,
+            fields: TOOLS_FIELDS,
+            confirm: false,
+            // What the index holds right now, which is how somebody who suspects it
+            // is wrong finds out that it is: a documents count that does not match
+            // the files, or a comment count of nought on a site with comments.
+            indexed: {
+                documents: counts.total,
+                followers: c.var.admin.countFollowers(),
+                activities: c.var.admin.countInboxActivities(),
+                comments: totalComments(c.var.admin),
+            },
+            contentDir: c.var.config.contentDir,
+        };
+    }
+}
+/** What a finished rebuild says on the flash. */
+export function rebuildMessage(report) {
+    const { scan } = report;
+    const counted = `Rebuilt the index from the files. Scanned ${count(scan.scanned, 'file')}: ` +
+        `${String(scan.created)} indexed, ${String(scan.removed)} dropped, ` +
+        `${String(scan.failed)} failed. Read back ${count(report.followers, 'follower')}, ` +
+        `${count(report.activities, 'inbox activity', 'inbox activities')} and ` +
+        `${count(report.comments, 'comment')}.`;
+    return scan.failed === 0
+        ? counted
+        : `${counted} A file that will not parse is left out of the index and named in the site's log.`;
+}
+/** "1 file", "2 files". The plural is the singular plus s unless told. */
+function count(howMany, singular, plural = `${singular}s`) {
+    return `${String(howMany)} ${howMany === 1 ? singular : plural}`;
+}
+/** How many comments the index holds, whatever a moderator has done with them. */
+function totalComments(admin) {
+    const counts = admin.countCommentsByStatus();
+    return counts.pending + counts.approved + counts.spam;
+}
+/** One submitted field as a string. */
+function field(value) {
+    return typeof value === 'string' ? value : '';
+}
+//# sourceMappingURL=tools.js.map

package/dist/admin/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/admin/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAI/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,YAAY,QAAQ,CAAC;AAElD,sCAAsC;AACtC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,YAAY,sBAAsB,CAAC;AAExE,0DAA0D;AAC1D,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AAErC,uCAAuC;AACvC,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAE3C,iDAAiD;AACjD,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,4EAA4E;IAC5E,OAAO,EAAE,SAAS;CACV,CAAC;AA0BX;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAmC;IAEnC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAErD,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,MAAM,UAAU,GAAG,wBAAwB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC;IAE5B,OAAO;QACL,IAAI;QACJ,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KAC5B,CAAC;AACJ,CAAC;AAQD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAqB,EAAE,OAA0B;IAChF,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAE3B;;;;;;;;OAQG;IACH,IAAI,OAAiD,CAAC;IAEtD,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,eAAe,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpF,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QAErC,wEAAwE;QACxE,wEAAwE;QACxE,0DAA0D;QAC1D,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC7C,OAAO,MAAM,CAAC,CAAC,EAAE,eAAe,CAAC,iBAAiB,EAAE,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,KAAK,CACH,CAAC,EACD,OAAO,EACP,+FAA+F,CAChG,CAAC;YACF,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,GAAG,mBAAmB,CAAC;YAC5B,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK;YAClB,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK;YAClB,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU;YACnC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM;SACrB,CAAC,CAAC;QAEH,IAAI,MAA2B,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC;QACzB,CAAC;gBAAS,CAAC;YACT,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;QAED,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9E,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,qCAAqC;IACrC,SAAS,MAAM,CAAC,CAAsB;QACpC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAEpC,OAAO;YACL,OAAO,EAAE,aAAa;YACtB,KAAK,EAAE,mBAAmB;YAC1B,OAAO,EAAE,eAAe;YACxB,UAAU,EAAE,kBAAkB;YAC9B,QAAQ,EAAE,UAAU;YACpB,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,KAAK;YACd,wEAAwE;YACxE,uEAAuE;YACvE,mEAAmE;YACnE,OAAO,EAAE;gBACP,SAAS,EAAE,MAAM,CAAC,KAAK;gBACvB,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE;gBACvC,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE;gBAC9C,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;aACrC;YACD,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU;SACpC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,cAAc,CAAC,MAA2B;IACxD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;IACxB,MAAM,OAAO,GACX,6CAA6C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI;QAC5E,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY;QACpE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI;QACnF,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,OAAO;QACxE,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC;IAE1C,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC;QACtB,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,GAAG,OAAO,mFAAmF,CAAC;AACpG,CAAC;AAED,0EAA0E;AAC1E,SAAS,KAAK,CAAC,OAAe,EAAE,QAAgB,EAAE,MAAM,GAAG,GAAG,QAAQ,GAAG;IACvE,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;AACnE,CAAC;AAED,kFAAkF;AAClF,SAAS,aAAa,CAAC,KAAiB;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,qBAAqB,EAAE,CAAC;IAC7C,OAAO,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;AACxD,CAAC;AAED,uCAAuC;AACvC,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC"}