@storyshelf/app 0.5.3

package/dist/notify.mjs

@@ -0,0 +1,141 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { credentialKeys } from "./credential-keys.mjs";
+import { getStore } from "./store.mjs";
+import { NotificationChannelModel, NotificationSubscriptionModel, UserModel } from "@storyshelf/core/models";
+import { emitNotifications, emitSystemNotification } from "@storyshelf/core/adapter/notifier";
+//#region src/notify.ts
+/** Review URL from an explicit base URL (background use). */
+function reviewUrlForWith(publicBaseUrl, slug, suffix) {
+	const base = publicBaseUrl?.replace(/\/+$/u, "");
+	if (!base) return;
+	return `${base}/projects/${slug}${suffix}`;
+}
+/** Brand inputs from UI config plus server notification defaults. */
+function brandFor(ui, config, reviewUrl) {
+	return {
+		name: ui.name,
+		logo: ui.logo,
+		reviewUrl,
+		fromEmail: config.notifications?.fromEmail,
+		fromName: config.notifications?.fromName ?? ui.name,
+		footerText: config.notifications?.footerText
+	};
+}
+/** Convert a stored row to a send-ready view (null when undecryptable). */
+function toView(row, model) {
+	let secret;
+	try {
+		secret = row.secretEncrypted ? model.decryptSecret(row) : void 0;
+	} catch {
+		return null;
+	}
+	return {
+		id: row.id,
+		projectId: row.projectId,
+		provider: row.provider,
+		config: NotificationChannelModel.configOf(row),
+		secret,
+		events: NotificationChannelModel.eventsOf(row),
+		enabled: row.enabled
+	};
+}
+/** Load stored channels as send-ready views (skips undecryptable secrets). */
+async function loadChannels(deps, projectId) {
+	const model = new NotificationChannelModel(deps.db, void 0, credentialKeys(deps.config));
+	return (projectId === null ? await model.listSystem() : await model.list(projectId)).filter((row) => row.enabled).flatMap((row) => toView(row, model) ?? []);
+}
+/** Subscriptions matching an event (enabled + allowlist). */
+function matchingSubs(rows, event) {
+	return rows.filter((row) => {
+		if (!row.enabled) return false;
+		const events = NotificationSubscriptionModel.eventsOf(row);
+		return events.length === 0 || events.includes(event);
+	});
+}
+/** Per-subscriber targets for one subscription (wired kinds only). */
+async function targetsForSub(db, sub, wired) {
+	const user = await new UserModel(db).get(sub.userId);
+	if (!user || user.disabled) return [];
+	const kinds = NotificationSubscriptionModel.viaOf(sub);
+	return (kinds.length > 0 ? kinds : ["email"]).filter((kind) => wired.has(kind)).map((kind) => ({
+		id: `sub:${sub.id}:${kind}`,
+		projectId: sub.projectId,
+		provider: kind,
+		config: { to: user.email },
+		events: [],
+		enabled: true
+	}));
+}
+/** Per-subscriber targets for an event (only kinds that are wired). */
+async function subscriberTargets(db, projectId, event, wired) {
+	const rows = await new NotificationSubscriptionModel(db).list(projectId);
+	return (await Promise.all(matchingSubs(rows, event).map(async (sub) => await targetsForSub(db, sub, wired)))).flat();
+}
+/**
+* Fan out a project event to stored channels plus opted-in subscribers.
+* Runs alongside (never instead of) webhook delivery.
+*/
+async function notifyProjectWith(deps, project, event, data, reviewSuffix) {
+	if (deps.notifiers.length === 0) return;
+	const reviewUrl = reviewSuffix ? reviewUrlForWith(deps.config.publicBaseUrl, project.slug, reviewSuffix) : void 0;
+	const wired = new Set(deps.notifiers.map((candidate) => candidate.metadata.kind));
+	const channels = await loadChannels(deps, project.id);
+	const targets = await subscriberTargets(deps.db, project.id, event, wired);
+	await emitNotifications({
+		event,
+		projectId: project.id,
+		projectSlug: project.slug,
+		data,
+		timestamp: now()
+	}, {
+		notifiers: deps.notifiers,
+		channels: [...channels, ...targets],
+		brand: brandFor(deps.ui, deps.config, reviewUrl),
+		logger: deps.logger
+	});
+}
+/**
+* Fan out a project event to stored channels plus opted-in subscribers.
+* Runs alongside (never instead of) webhook delivery.
+*/
+async function notifyProject(project, event, data, reviewSuffix) {
+	await notifyProjectWith(getStore(), project, event, data, reviewSuffix);
+}
+/** Fan out a site-wide admin alert to project-less channels. */
+async function notifySystemWith(deps, event, data) {
+	if (deps.notifiers.length === 0) return;
+	await emitSystemNotification({
+		event,
+		data,
+		timestamp: now()
+	}, {
+		notifiers: deps.notifiers,
+		channels: await loadChannels(deps, null),
+		brand: brandFor(deps.ui, deps.config),
+		logger: deps.logger
+	});
+}
+/** Fan out a site-wide admin alert to project-less channels. */
+async function notifySystem(event, data) {
+	await notifySystemWith(getStore(), event, data);
+}
+/**
+* Host hook for the auth engine (`onAuthSystemEvent`): fans `sys:*` auth
+* events out to admin channels. Safe to call anywhere — outside a request
+* scope (e.g. boot) it resolves to a no-op instead of throwing.
+*/
+function createAuthSystemHook() {
+	return async (event, data) => {
+		await notifySystem(event, data).catch(() => {});
+	};
+}
+/** Current timestamp for notification envelopes. */
+function now() {
+	return (/* @__PURE__ */ new Date()).toISOString();
+}
+//#endregion
+export { createAuthSystemHook, notifyProject, notifyProjectWith, notifySystem, notifySystemWith };
+
+//# sourceMappingURL=notify.mjs.map

package/dist/notify.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify.mjs","names":[],"sources":["../src/notify.ts"],"sourcesContent":["/**\n * Notification fan-out for routers: loads stored channels and subscriber\n * emails, then delegates to the wired notifier providers. Best-effort and\n * non-fatal — failures are logged inside the emitters, never thrown here.\n */\nimport type { DatabaseAdapter } from \"@storyshelf/core/adapter/database\";\nimport type { NotifierProvider } from \"@storyshelf/core/adapter/notifier\";\nimport {\n  emitNotifications,\n  emitSystemNotification,\n  type NotificationBrand,\n  type NotificationChannel,\n  type SystemEventName,\n} from \"@storyshelf/core/adapter/notifier\";\nimport type { ShelfConfig, UIConfig } from \"@storyshelf/core/config\";\nimport type { Logger } from \"@storyshelf/core/logger\";\nimport {\n  NotificationChannelModel,\n  NotificationSubscriptionModel,\n  UserModel,\n} from \"@storyshelf/core/models\";\nimport type { NotificationSubscriptionRow } from \"@storyshelf/core/schema\";\nimport type { NotificationChannelRow } from \"@storyshelf/core/schema\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport { credentialKeys } from \"./credential-keys.ts\";\nimport { getStore } from \"./store.ts\";\n\n/** Explicit dependencies for background fan-out (no request scope). */\nexport interface NotifyDeps {\n  db: DatabaseAdapter;\n  config: ShelfConfig;\n  ui: UIConfig;\n  logger: Logger;\n  notifiers: NotifierProvider[];\n}\n\n/** Review URL for a project page (absolute when `publicBaseUrl` is set). */\nexport function reviewUrlFor(slug: string, suffix: string): string | undefined {\n  return reviewUrlForWith(getStore().config.publicBaseUrl, slug, suffix);\n}\n\n/** Review URL from an explicit base URL (background use). */\nfunction reviewUrlForWith(\n  publicBaseUrl: string | undefined,\n  slug: string,\n  suffix: string,\n): string | undefined {\n  const base = publicBaseUrl?.replace(/\\/+$/u, \"\");\n  if (!base) {\n    return undefined;\n  }\n  return `${base}/projects/${slug}${suffix}`;\n}\n\n/** Brand inputs from UI config plus server notification defaults. */\nfunction brandFor(ui: UIConfig, config: ShelfConfig, reviewUrl?: string): NotificationBrand {\n  return {\n    name: ui.name,\n    logo: ui.logo,\n    reviewUrl,\n    fromEmail: config.notifications?.fromEmail,\n    fromName: config.notifications?.fromName ?? ui.name,\n    footerText: config.notifications?.footerText,\n  };\n}\n\n/** Convert a stored row to a send-ready view (null when undecryptable). */\nfunction toView(\n  row: NotificationChannelRow,\n  model: NotificationChannelModel,\n): NotificationChannel | null {\n  let secret: string | undefined;\n  try {\n    secret = row.secretEncrypted ? model.decryptSecret(row) : undefined;\n  } catch {\n    return null;\n  }\n  return {\n    id: row.id,\n    projectId: row.projectId,\n    provider: row.provider,\n    config: NotificationChannelModel.configOf(row),\n    secret,\n    events: NotificationChannelModel.eventsOf(row),\n    enabled: row.enabled,\n  };\n}\n\n/** Load stored channels as send-ready views (skips undecryptable secrets). */\nasync function loadChannels(\n  deps: Pick<NotifyDeps, \"db\" | \"config\">,\n  projectId: string | null,\n): Promise<NotificationChannel[]> {\n  const model = new NotificationChannelModel(deps.db, undefined, credentialKeys(deps.config));\n  const rows = projectId === null ? await model.listSystem() : await model.list(projectId);\n  return rows.filter((row) => row.enabled).flatMap((row) => toView(row, model) ?? []);\n}\n\n/** Subscriptions matching an event (enabled + allowlist). */\nfunction matchingSubs(\n  rows: NotificationSubscriptionRow[],\n  event: string,\n): NotificationSubscriptionRow[] {\n  return rows.filter((row) => {\n    if (!row.enabled) {\n      return false;\n    }\n    const events = NotificationSubscriptionModel.eventsOf(row);\n    return events.length === 0 || events.includes(event);\n  });\n}\n\n/** Per-subscriber targets for one subscription (wired kinds only). */\nasync function targetsForSub(\n  db: DatabaseAdapter,\n  sub: NotificationSubscriptionRow,\n  wired: ReadonlySet<string>,\n): Promise<NotificationChannel[]> {\n  const user = await new UserModel(db).get(sub.userId);\n  if (!user || user.disabled) {\n    return [];\n  }\n  const kinds = NotificationSubscriptionModel.viaOf(sub);\n  const wants = kinds.length > 0 ? kinds : [\"email\"];\n  return wants\n    .filter((kind) => wired.has(kind))\n    .map((kind) => ({\n      id: `sub:${sub.id}:${kind}`,\n      projectId: sub.projectId,\n      provider: kind,\n      config: { to: user.email },\n      events: [],\n      enabled: true,\n    }));\n}\n\n/** Per-subscriber targets for an event (only kinds that are wired). */\nasync function subscriberTargets(\n  db: DatabaseAdapter,\n  projectId: string,\n  event: string,\n  wired: ReadonlySet<string>,\n): Promise<NotificationChannel[]> {\n  const rows = await new NotificationSubscriptionModel(db).list(projectId);\n  const nested = await Promise.all(\n    matchingSubs(rows, event).map(async (sub) => await targetsForSub(db, sub, wired)),\n  );\n  return nested.flat();\n}\n\n/**\n * Fan out a project event to stored channels plus opted-in subscribers.\n * Runs alongside (never instead of) webhook delivery.\n */\nexport async function notifyProjectWith(\n  deps: NotifyDeps,\n  project: Pick<Project, \"id\" | \"slug\">,\n  event: string,\n  data: Record<string, unknown>,\n  reviewSuffix?: string,\n): Promise<void> {\n  if (deps.notifiers.length === 0) {\n    return;\n  }\n  const reviewUrl = reviewSuffix\n    ? reviewUrlForWith(deps.config.publicBaseUrl, project.slug, reviewSuffix)\n    : undefined;\n  const wired = new Set(deps.notifiers.map((candidate) => candidate.metadata.kind));\n  const channels = await loadChannels(deps, project.id);\n  const targets = await subscriberTargets(deps.db, project.id, event, wired);\n  await emitNotifications(\n    { event, projectId: project.id, projectSlug: project.slug, data, timestamp: now() },\n    {\n      notifiers: deps.notifiers,\n      channels: [...channels, ...targets],\n      brand: brandFor(deps.ui, deps.config, reviewUrl),\n      logger: deps.logger,\n    },\n  );\n}\n\n/**\n * Fan out a project event to stored channels plus opted-in subscribers.\n * Runs alongside (never instead of) webhook delivery.\n */\nexport async function notifyProject(\n  project: Pick<Project, \"id\" | \"slug\">,\n  event: string,\n  data: Record<string, unknown>,\n  reviewSuffix?: string,\n): Promise<void> {\n  await notifyProjectWith(getStore(), project, event, data, reviewSuffix);\n}\n\n/** Fan out a site-wide admin alert to project-less channels. */\nexport async function notifySystemWith(\n  deps: NotifyDeps,\n  event: SystemEventName,\n  data: Record<string, unknown>,\n): Promise<void> {\n  if (deps.notifiers.length === 0) {\n    return;\n  }\n  await emitSystemNotification(\n    { event, data, timestamp: now() },\n    {\n      notifiers: deps.notifiers,\n      channels: await loadChannels(deps, null),\n      brand: brandFor(deps.ui, deps.config),\n      logger: deps.logger,\n    },\n  );\n}\n\n/** Fan out a site-wide admin alert to project-less channels. */\nexport async function notifySystem(\n  event: SystemEventName,\n  data: Record<string, unknown>,\n): Promise<void> {\n  await notifySystemWith(getStore(), event, data);\n}\n\n/**\n * Host hook for the auth engine (`onAuthSystemEvent`): fans `sys:*` auth\n * events out to admin channels. Safe to call anywhere — outside a request\n * scope (e.g. boot) it resolves to a no-op instead of throwing.\n */\nexport function createAuthSystemHook(): (\n  event: \"sys:user-created\" | \"sys:invite-issued\",\n  data: Record<string, unknown>,\n) => Promise<void> {\n  return async (event, data): Promise<void> => {\n    await notifySystem(event, data).catch(() => {\n      // Intentionally empty — best-effort fan-out must never break auth\n    });\n  };\n}\n\n/** Current timestamp for notification envelopes. */\nfunction now(): string {\n  return new Date().toISOString();\n}\n"],"mappings":";;;;;;;;;AA0CA,SAAS,iBACP,eACA,MACA,QACoB;CACpB,MAAM,OAAO,eAAe,QAAQ,SAAS,EAAE;CAC/C,IAAI,CAAC,MACH;CAEF,OAAO,GAAG,KAAK,YAAY,OAAO;AACpC;;AAGA,SAAS,SAAS,IAAc,QAAqB,WAAuC;CAC1F,OAAO;EACL,MAAM,GAAG;EACT,MAAM,GAAG;EACT;EACA,WAAW,OAAO,eAAe;EACjC,UAAU,OAAO,eAAe,YAAY,GAAG;EAC/C,YAAY,OAAO,eAAe;CACpC;AACF;;AAGA,SAAS,OACP,KACA,OAC4B;CAC5B,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,kBAAkB,MAAM,cAAc,GAAG,IAAI,KAAA;CAC5D,QAAQ;EACN,OAAO;CACT;CACA,OAAO;EACL,IAAI,IAAI;EACR,WAAW,IAAI;EACf,UAAU,IAAI;EACd,QAAQ,yBAAyB,SAAS,GAAG;EAC7C;EACA,QAAQ,yBAAyB,SAAS,GAAG;EAC7C,SAAS,IAAI;CACf;AACF;;AAGA,eAAe,aACb,MACA,WACgC;CAChC,MAAM,QAAQ,IAAI,yBAAyB,KAAK,IAAI,KAAA,GAAW,eAAe,KAAK,MAAM,CAAC;CAE1F,QADa,cAAc,OAAO,MAAM,MAAM,WAAW,IAAI,MAAM,MAAM,KAAK,SAAS,EAAA,CAC3E,QAAQ,QAAQ,IAAI,OAAO,CAAC,CAAC,SAAS,QAAQ,OAAO,KAAK,KAAK,KAAK,CAAC,CAAC;AACpF;;AAGA,SAAS,aACP,MACA,OAC+B;CAC/B,OAAO,KAAK,QAAQ,QAAQ;EAC1B,IAAI,CAAC,IAAI,SACP,OAAO;EAET,MAAM,SAAS,8BAA8B,SAAS,GAAG;EACzD,OAAO,OAAO,WAAW,KAAK,OAAO,SAAS,KAAK;CACrD,CAAC;AACH;;AAGA,eAAe,cACb,IACA,KACA,OACgC;CAChC,MAAM,OAAO,MAAM,IAAI,UAAU,EAAE,CAAC,CAAC,IAAI,IAAI,MAAM;CACnD,IAAI,CAAC,QAAQ,KAAK,UAChB,OAAO,CAAC;CAEV,MAAM,QAAQ,8BAA8B,MAAM,GAAG;CAErD,QADc,MAAM,SAAS,IAAI,QAAQ,CAAC,OAAO,EAAA,CAE9C,QAAQ,SAAS,MAAM,IAAI,IAAI,CAAC,CAAC,CACjC,KAAK,UAAU;EACd,IAAI,OAAO,IAAI,GAAG,GAAG;EACrB,WAAW,IAAI;EACf,UAAU;EACV,QAAQ,EAAE,IAAI,KAAK,MAAM;EACzB,QAAQ,CAAC;EACT,SAAS;CACX,EAAE;AACN;;AAGA,eAAe,kBACb,IACA,WACA,OACA,OACgC;CAChC,MAAM,OAAO,MAAM,IAAI,8BAA8B,EAAE,CAAC,CAAC,KAAK,SAAS;CAIvE,QAAO,MAHc,QAAQ,IAC3B,aAAa,MAAM,KAAK,CAAC,CAAC,IAAI,OAAO,QAAQ,MAAM,cAAc,IAAI,KAAK,KAAK,CAAC,CAClF,EAAA,CACc,KAAK;AACrB;;;;;AAMA,eAAsB,kBACpB,MACA,SACA,OACA,MACA,cACe;CACf,IAAI,KAAK,UAAU,WAAW,GAC5B;CAEF,MAAM,YAAY,eACd,iBAAiB,KAAK,OAAO,eAAe,QAAQ,MAAM,YAAY,IACtE,KAAA;CACJ,MAAM,QAAQ,IAAI,IAAI,KAAK,UAAU,KAAK,cAAc,UAAU,SAAS,IAAI,CAAC;CAChF,MAAM,WAAW,MAAM,aAAa,MAAM,QAAQ,EAAE;CACpD,MAAM,UAAU,MAAM,kBAAkB,KAAK,IAAI,QAAQ,IAAI,OAAO,KAAK;CACzE,MAAM,kBACJ;EAAE;EAAO,WAAW,QAAQ;EAAI,aAAa,QAAQ;EAAM;EAAM,WAAW,IAAI;CAAE,GAClF;EACE,WAAW,KAAK;EAChB,UAAU,CAAC,GAAG,UAAU,GAAG,OAAO;EAClC,OAAO,SAAS,KAAK,IAAI,KAAK,QAAQ,SAAS;EAC/C,QAAQ,KAAK;CACf,CACF;AACF;;;;;AAMA,eAAsB,cACpB,SACA,OACA,MACA,cACe;CACf,MAAM,kBAAkB,SAAS,GAAG,SAAS,OAAO,MAAM,YAAY;AACxE;;AAGA,eAAsB,iBACpB,MACA,OACA,MACe;CACf,IAAI,KAAK,UAAU,WAAW,GAC5B;CAEF,MAAM,uBACJ;EAAE;EAAO;EAAM,WAAW,IAAI;CAAE,GAChC;EACE,WAAW,KAAK;EAChB,UAAU,MAAM,aAAa,MAAM,IAAI;EACvC,OAAO,SAAS,KAAK,IAAI,KAAK,MAAM;EACpC,QAAQ,KAAK;CACf,CACF;AACF;;AAGA,eAAsB,aACpB,OACA,MACe;CACf,MAAM,iBAAiB,SAAS,GAAG,OAAO,IAAI;AAChD;;;;;;AAOA,SAAgB,uBAGG;CACjB,OAAO,OAAO,OAAO,SAAwB;EAC3C,MAAM,aAAa,OAAO,IAAI,CAAC,CAAC,YAAY,CAE5C,CAAC;CACH;AACF;;AAGA,SAAS,MAAc;CACrB,wBAAO,IAAI,KAAK,EAAA,CAAE,YAAY;AAChC"}

package/dist/pages/admin-system.mjs

@@ -0,0 +1,243 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { Button } from "../ui/buttons.mjs";
+import { Alert, Badge, EmptyState, Meta, Stat } from "../ui/feedback.mjs";
+import { Card, PageHeader, SectionTitle } from "../ui/layout.mjs";
+import { HStack } from "../ui/stacks.mjs";
+import { Table } from "../ui/table.mjs";
+import { csrfField } from "../ui/csrf-field.mjs";
+import { DocumentLayout } from "../ui/document.mjs";
+import { Fragment, jsx, jsxs } from "hono/jsx/jsx-runtime";
+//#region src/pages/admin-system.tsx
+function healthTone(state) {
+	if (state === "ok") return "success";
+	if (state === "starting") return "info";
+	if (state === "failed" || state === "degraded") return "danger";
+	return "neutral";
+}
+function formatUptime(uptimeSecs) {
+	if (uptimeSecs < 60) return `${uptimeSecs}s`;
+	const minutes = Math.floor(uptimeSecs / 60);
+	if (minutes < 60) return `${minutes}m ${uptimeSecs % 60}s`;
+	return `${Math.floor(minutes / 60)}h ${minutes % 60}m`;
+}
+function formatLatency(latencyMs) {
+	return latencyMs === void 0 ? "—" : `${latencyMs} ms`;
+}
+function formatOptional(value) {
+	if (value === void 0 || value === null || value === "") return "—";
+	return String(value);
+}
+/** One adapter row: identity, version, live probe state, latency, detail. */
+function AdapterRow(props) {
+	const { adapter } = props;
+	return /* @__PURE__ */ jsxs("tr", { children: [
+		/* @__PURE__ */ jsxs("td", { children: [
+			/* @__PURE__ */ jsx("strong", { children: adapter.name }),
+			adapter.description ? /* @__PURE__ */ jsx(Meta, {
+				as: "div",
+				children: adapter.description
+			}) : null,
+			adapter.hasLifecycle ? null : /* @__PURE__ */ jsx(Meta, {
+				as: "div",
+				children: "No lifecycle hooks"
+			})
+		] }),
+		/* @__PURE__ */ jsx("td", { children: /* @__PURE__ */ jsx(Meta, {
+			as: "span",
+			children: adapter.category
+		}) }),
+		/* @__PURE__ */ jsx("td", { children: /* @__PURE__ */ jsx(Meta, {
+			as: "span",
+			mono: true,
+			children: adapter.kind
+		}) }),
+		/* @__PURE__ */ jsx("td", { children: /* @__PURE__ */ jsx(Meta, {
+			as: "span",
+			mono: true,
+			children: adapter.version
+		}) }),
+		/* @__PURE__ */ jsx("td", { children: /* @__PURE__ */ jsx(Badge, {
+			tone: healthTone(adapter.state),
+			icon: true,
+			children: adapter.state
+		}) }),
+		/* @__PURE__ */ jsx("td", {
+			class: "nowrap",
+			children: /* @__PURE__ */ jsx(Meta, {
+				as: "span",
+				children: formatLatency(adapter.latencyMs)
+			})
+		}),
+		/* @__PURE__ */ jsx("td", { children: /* @__PURE__ */ jsx(Meta, {
+			as: "span",
+			children: adapter.detail ?? "—"
+		}) })
+	] }, `${adapter.category}/${adapter.kind}`);
+}
+/** Adapter inventory with live health states. */
+function AdapterTable(props) {
+	const { report } = props;
+	if (report.adapters.length === 0) return /* @__PURE__ */ jsx(EmptyState, { description: "No adapters wired." });
+	return /* @__PURE__ */ jsx(Table, { children: /* @__PURE__ */ jsxs("table", { children: [/* @__PURE__ */ jsx("thead", { children: /* @__PURE__ */ jsxs("tr", { children: [
+		/* @__PURE__ */ jsx("th", { children: "Adapter" }),
+		/* @__PURE__ */ jsx("th", { children: "Category" }),
+		/* @__PURE__ */ jsx("th", { children: "Kind" }),
+		/* @__PURE__ */ jsx("th", { children: "Version" }),
+		/* @__PURE__ */ jsx("th", { children: "Health" }),
+		/* @__PURE__ */ jsx("th", { children: "Latency" }),
+		/* @__PURE__ */ jsx("th", { children: "Detail" })
+	] }) }), /* @__PURE__ */ jsx("tbody", { children: report.adapters.map((adapter) => /* @__PURE__ */ jsx(AdapterRow, { adapter }, `${adapter.category}/${adapter.kind}`)) })] }) });
+}
+/** Non-secret server facts (never secret, admin token, or credentials). */
+function ServerFacts(props) {
+	const { report, authEnabled, config, authMethods } = props;
+	return /* @__PURE__ */ jsxs(Card, { children: [
+		/* @__PURE__ */ jsx(SectionTitle, { children: "Server" }),
+		/* @__PURE__ */ jsxs("div", {
+			class: "grid grid--3",
+			children: [
+				/* @__PURE__ */ jsx(Stat, {
+					label: "Status",
+					value: report.status
+				}),
+				/* @__PURE__ */ jsx(Stat, {
+					label: "Uptime",
+					value: formatUptime(report.uptimeSecs)
+				}),
+				/* @__PURE__ */ jsx(Stat, {
+					label: "Version",
+					value: report.version
+				})
+			]
+		}),
+		/* @__PURE__ */ jsxs(Meta, { children: [
+			"Auth ",
+			authEnabled ? "enabled" : "disabled — all operations permitted",
+			" · Capture concurrency",
+			" ",
+			formatOptional(config.captureConcurrency),
+			" · Purge TTL",
+			" ",
+			formatOptional(config.purgeTtlDays),
+			" days · Branch TTL",
+			" ",
+			config.branchTtlDays === null ? "disabled" : `${formatOptional(config.branchTtlDays)} days`
+		] }),
+		authMethods && authMethods.length > 0 ? /* @__PURE__ */ jsx(HStack, { children: authMethods.map((method) => /* @__PURE__ */ jsx(Badge, { children: method }, method)) }) : null,
+		/* @__PURE__ */ jsxs(Meta, { children: [
+			"Scratch dir ",
+			formatOptional(config.scratchDir),
+			" · Published domain",
+			" ",
+			formatOptional(config.publishedBaseDomain),
+			" · Max upload",
+			" ",
+			formatOptional(config.maxUploadBytes),
+			" bytes"
+		] })
+	] });
+}
+/** Credential encryption state with the admin-only re-encrypt action. */
+function CredentialsCard(props) {
+	const { probe, config } = props;
+	const rotating = Boolean(config.previousSecret);
+	return /* @__PURE__ */ jsxs(Card, { children: [
+		/* @__PURE__ */ jsx(SectionTitle, { children: "Stored credentials" }),
+		/* @__PURE__ */ jsx(Meta, { children: "Webhook secrets, git tokens and notification secrets are encrypted with the server secret." }),
+		/* @__PURE__ */ jsxs("div", {
+			class: "grid grid--3",
+			children: [
+				/* @__PURE__ */ jsx(Stat, {
+					label: "Current secret",
+					value: String(probe.current)
+				}),
+				/* @__PURE__ */ jsx(Stat, {
+					label: "Previous secret",
+					value: String(probe.previous)
+				}),
+				/* @__PURE__ */ jsx(Stat, {
+					label: "Unreadable",
+					value: String(probe.unreadable.length)
+				})
+			]
+		}),
+		probe.unreadable.length > 0 ? /* @__PURE__ */ jsxs(Alert, {
+			tone: "danger",
+			title: "Some credentials cannot be decrypted",
+			children: [
+				"No configured secret matches ",
+				probe.unreadable.length,
+				" stored credential(s) (",
+				[...new Set(probe.unreadable.map((row) => row.source))].join(", "),
+				"). Check that SECRET and SECRET_PREVIOUS are correct, or recreate them."
+			]
+		}) : null,
+		rotating && probe.previous > 0 ? /* @__PURE__ */ jsxs("form", {
+			method: "post",
+			action: "/admin/credentials/reencrypt",
+			"hx-post": "/admin/credentials/reencrypt",
+			"hx-target": "body",
+			children: [csrfField(), /* @__PURE__ */ jsx(Button, {
+				type: "submit",
+				variant: "secondary",
+				size: "sm",
+				children: "Re-encrypt with current secret"
+			})]
+		}) : /* @__PURE__ */ jsx(Meta, { children: rotating ? "All credentials use the current secret. Remove SECRET_PREVIOUS." : "To rotate, set SECRET to the new value and SECRET_PREVIOUS to the old one." })
+	] });
+}
+/** Site-admin System page: adapter inventory with in-depth health. */
+function renderAdminSystemPage(data) {
+	const { report, authEnabled, config, authMethods, credentials } = data;
+	return /* @__PURE__ */ jsxs(DocumentLayout, {
+		title: "System",
+		nav: { active: "admin" },
+		children: [
+			/* @__PURE__ */ jsx(PageHeader, {
+				title: "System",
+				description: "Adapter inventory with in-depth health. Visible to site admins only.",
+				meta: /* @__PURE__ */ jsxs(Fragment, { children: [
+					report.adapters.length,
+					" adapters · ",
+					report.status,
+					" · up",
+					" ",
+					formatUptime(report.uptimeSecs)
+				] }),
+				actions: /* @__PURE__ */ jsx(Button, {
+					variant: "secondary",
+					size: "sm",
+					href: "/admin",
+					children: "Recheck"
+				})
+			}),
+			/* @__PURE__ */ jsx(ServerFacts, {
+				report,
+				authEnabled,
+				config,
+				authMethods
+			}),
+			credentials ? /* @__PURE__ */ jsx("div", {
+				class: "mt-1",
+				children: /* @__PURE__ */ jsx(CredentialsCard, {
+					probe: credentials,
+					config
+				})
+			}) : null,
+			/* @__PURE__ */ jsx("div", {
+				class: "mt-1",
+				children: /* @__PURE__ */ jsxs(Card, { children: [
+					/* @__PURE__ */ jsx(SectionTitle, { children: "Adapters" }),
+					/* @__PURE__ */ jsx(Meta, { children: "Live probe per adapter (2s timeout, parallel). Setup failures surface as failed rows; adapters without lifecycle hooks report their wired state." }),
+					/* @__PURE__ */ jsx(AdapterTable, { report })
+				] })
+			})
+		]
+	});
+}
+//#endregion
+export { renderAdminSystemPage };
+
+//# sourceMappingURL=admin-system.mjs.map

package/dist/pages/admin-system.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-system.mjs","names":[],"sources":["../../src/pages/admin-system.tsx"],"sourcesContent":["import type { ShelfConfig } from \"@storyshelf/core/config\";\nimport type { CredentialProbe } from \"@storyshelf/core/models\";\nimport type { HtmlEscapedString } from \"hono/utils/html\";\nimport type { HealthReport } from \"../routers/health-report.ts\";\nimport {\n  Alert,\n  Badge,\n  Button,\n  Card,\n  EmptyState,\n  HStack,\n  Meta,\n  PageHeader,\n  SectionTitle,\n  Stat,\n  Table,\n} from \"../ui/components.tsx\";\nimport { csrfField } from \"../ui/csrf-field.tsx\";\nimport { DocumentLayout, type RenderedContent } from \"../ui/document.tsx\";\n\n/* eslint-disable promise-function-async -- Hono JSX components return HtmlEscapedString | Promise<HtmlEscapedString> */\n\n/** Data for the site-admin System page (adapters, health, safe config). */\nexport interface AdminSystemData {\n  report: HealthReport;\n  authEnabled: boolean;\n  config: ShelfConfig;\n  /** Active login method labels (read-only badges; empty when auth is off). */\n  authMethods?: string[];\n  /** Stored-credential state; null/undefined when no secret is configured. */\n  credentials?: CredentialProbe | null;\n}\n\nfunction healthTone(state: string): \"success\" | \"info\" | \"danger\" | \"neutral\" {\n  if (state === \"ok\") {\n    return \"success\";\n  }\n  if (state === \"starting\") {\n    return \"info\";\n  }\n  if (state === \"failed\" || state === \"degraded\") {\n    return \"danger\";\n  }\n  return \"neutral\";\n}\n\nfunction formatUptime(uptimeSecs: number): string {\n  if (uptimeSecs < 60) {\n    return `${uptimeSecs}s`;\n  }\n  const minutes = Math.floor(uptimeSecs / 60);\n  if (minutes < 60) {\n    return `${minutes}m ${uptimeSecs % 60}s`;\n  }\n  return `${Math.floor(minutes / 60)}h ${minutes % 60}m`;\n}\n\nfunction formatLatency(latencyMs: number | undefined): string {\n  return latencyMs === undefined ? \"—\" : `${latencyMs} ms`;\n}\n\nfunction formatOptional(value: string | number | null | undefined): string {\n  if (value === undefined || value === null || value === \"\") {\n    return \"—\";\n  }\n  return String(value);\n}\n\n/** One adapter row: identity, version, live probe state, latency, detail. */\nfunction AdapterRow(props: {\n  adapter: HealthReport[\"adapters\"][number];\n}): HtmlEscapedString | Promise<HtmlEscapedString> {\n  const { adapter } = props;\n  return (\n    <tr key={`${adapter.category}/${adapter.kind}`}>\n      <td>\n        <strong>{adapter.name}</strong>\n        {adapter.description ? <Meta as=\"div\">{adapter.description}</Meta> : null}\n        {adapter.hasLifecycle ? null : <Meta as=\"div\">No lifecycle hooks</Meta>}\n      </td>\n      <td>\n        <Meta as=\"span\">{adapter.category}</Meta>\n      </td>\n      <td>\n        <Meta as=\"span\" mono>\n          {adapter.kind}\n        </Meta>\n      </td>\n      <td>\n        <Meta as=\"span\" mono>\n          {adapter.version}\n        </Meta>\n      </td>\n      <td>\n        <Badge tone={healthTone(adapter.state)} icon>\n          {adapter.state}\n        </Badge>\n      </td>\n      <td class=\"nowrap\">\n        <Meta as=\"span\">{formatLatency(adapter.latencyMs)}</Meta>\n      </td>\n      <td>\n        <Meta as=\"span\">{adapter.detail ?? \"—\"}</Meta>\n      </td>\n    </tr>\n  );\n}\n\ninterface AdapterTableProps {\n  report: HealthReport;\n}\n\n/** Adapter inventory with live health states. */\nfunction AdapterTable(props: AdapterTableProps): HtmlEscapedString | Promise<HtmlEscapedString> {\n  const { report } = props;\n  if (report.adapters.length === 0) {\n    return <EmptyState description=\"No adapters wired.\" />;\n  }\n  return (\n    <Table>\n      <table>\n        <thead>\n          <tr>\n            <th>Adapter</th>\n            <th>Category</th>\n            <th>Kind</th>\n            <th>Version</th>\n            <th>Health</th>\n            <th>Latency</th>\n            <th>Detail</th>\n          </tr>\n        </thead>\n        <tbody>\n          {report.adapters.map((adapter) => (\n            <AdapterRow key={`${adapter.category}/${adapter.kind}`} adapter={adapter} />\n          ))}\n        </tbody>\n      </table>\n    </Table>\n  );\n}\n\ninterface ServerFactsProps {\n  report: HealthReport;\n  authEnabled: boolean;\n  config: ShelfConfig;\n  authMethods?: string[];\n}\n\n/** Non-secret server facts (never secret, admin token, or credentials). */\nfunction ServerFacts(props: ServerFactsProps): HtmlEscapedString | Promise<HtmlEscapedString> {\n  const { report, authEnabled, config, authMethods } = props;\n  return (\n    <Card>\n      <SectionTitle>Server</SectionTitle>\n      <div class=\"grid grid--3\">\n        <Stat label=\"Status\" value={report.status} />\n        <Stat label=\"Uptime\" value={formatUptime(report.uptimeSecs)} />\n        <Stat label=\"Version\" value={report.version} />\n      </div>\n      <Meta>\n        Auth {authEnabled ? \"enabled\" : \"disabled — all operations permitted\"} · Capture concurrency{\" \"}\n        {formatOptional(config.captureConcurrency)} · Purge TTL{\" \"}\n        {formatOptional(config.purgeTtlDays)} days · Branch TTL{\" \"}\n        {config.branchTtlDays === null\n          ? \"disabled\"\n          : `${formatOptional(config.branchTtlDays)} days`}\n      </Meta>\n      {authMethods && authMethods.length > 0 ? (\n        <HStack>\n          {authMethods.map((method) => (\n            <Badge key={method}>{method}</Badge>\n          ))}\n        </HStack>\n      ) : null}\n      <Meta>\n        Scratch dir {formatOptional(config.scratchDir)} · Published domain{\" \"}\n        {formatOptional(config.publishedBaseDomain)} · Max upload{\" \"}\n        {formatOptional(config.maxUploadBytes)} bytes\n      </Meta>\n    </Card>\n  );\n}\n\n/** Credential encryption state with the admin-only re-encrypt action. */\nfunction CredentialsCard(props: {\n  probe: CredentialProbe;\n  config: ShelfConfig;\n}): HtmlEscapedString | Promise<HtmlEscapedString> {\n  const { probe, config } = props;\n  const rotating = Boolean(config.previousSecret);\n  return (\n    <Card>\n      <SectionTitle>Stored credentials</SectionTitle>\n      <Meta>\n        Webhook secrets, git tokens and notification secrets are encrypted with the server secret.\n      </Meta>\n      <div class=\"grid grid--3\">\n        <Stat label=\"Current secret\" value={String(probe.current)} />\n        <Stat label=\"Previous secret\" value={String(probe.previous)} />\n        <Stat label=\"Unreadable\" value={String(probe.unreadable.length)} />\n      </div>\n      {probe.unreadable.length > 0 ? (\n        <Alert tone=\"danger\" title=\"Some credentials cannot be decrypted\">\n          No configured secret matches {probe.unreadable.length} stored credential(s) (\n          {[...new Set(probe.unreadable.map((row) => row.source))].join(\", \")}). Check that SECRET\n          and SECRET_PREVIOUS are correct, or recreate them.\n        </Alert>\n      ) : null}\n      {rotating && probe.previous > 0 ? (\n        <form\n          method=\"post\"\n          action=\"/admin/credentials/reencrypt\"\n          hx-post=\"/admin/credentials/reencrypt\"\n          hx-target=\"body\"\n        >\n          {csrfField()}\n          <Button type=\"submit\" variant=\"secondary\" size=\"sm\">\n            Re-encrypt with current secret\n          </Button>\n        </form>\n      ) : (\n        <Meta>\n          {rotating\n            ? \"All credentials use the current secret. Remove SECRET_PREVIOUS.\"\n            : \"To rotate, set SECRET to the new value and SECRET_PREVIOUS to the old one.\"}\n        </Meta>\n      )}\n    </Card>\n  );\n}\n\n/** Site-admin System page: adapter inventory with in-depth health. */\nexport function renderAdminSystemPage(data: AdminSystemData): RenderedContent {\n  const { report, authEnabled, config, authMethods, credentials } = data;\n  return (\n    <DocumentLayout title=\"System\" nav={{ active: \"admin\" }}>\n      <PageHeader\n        title=\"System\"\n        description=\"Adapter inventory with in-depth health. Visible to site admins only.\"\n        meta={\n          <>\n            {report.adapters.length} adapters · {report.status} · up{\" \"}\n            {formatUptime(report.uptimeSecs)}\n          </>\n        }\n        actions={\n          <Button variant=\"secondary\" size=\"sm\" href=\"/admin\">\n            Recheck\n          </Button>\n        }\n      />\n      <ServerFacts\n        report={report}\n        authEnabled={authEnabled}\n        config={config}\n        authMethods={authMethods}\n      />\n      {credentials ? (\n        <div class=\"mt-1\">\n          <CredentialsCard probe={credentials} config={config} />\n        </div>\n      ) : null}\n      <div class=\"mt-1\">\n        <Card>\n          <SectionTitle>Adapters</SectionTitle>\n          <Meta>\n            Live probe per adapter (2s timeout, parallel). Setup failures surface as failed rows;\n            adapters without lifecycle hooks report their wired state.\n          </Meta>\n          <AdapterTable report={report} />\n        </Card>\n      </div>\n    </DocumentLayout>\n  );\n}\n"],"mappings":";;;;;;;;;;;;AAiCA,SAAS,WAAW,OAA0D;CAC5E,IAAI,UAAU,MACZ,OAAO;CAET,IAAI,UAAU,YACZ,OAAO;CAET,IAAI,UAAU,YAAY,UAAU,YAClC,OAAO;CAET,OAAO;AACT;AAEA,SAAS,aAAa,YAA4B;CAChD,IAAI,aAAa,IACf,OAAO,GAAG,WAAW;CAEvB,MAAM,UAAU,KAAK,MAAM,aAAa,EAAE;CAC1C,IAAI,UAAU,IACZ,OAAO,GAAG,QAAQ,IAAI,aAAa,GAAG;CAExC,OAAO,GAAG,KAAK,MAAM,UAAU,EAAE,EAAE,IAAI,UAAU,GAAG;AACtD;AAEA,SAAS,cAAc,WAAuC;CAC5D,OAAO,cAAc,KAAA,IAAY,MAAM,GAAG,UAAU;AACtD;AAEA,SAAS,eAAe,OAAmD;CACzE,IAAI,UAAU,KAAA,KAAa,UAAU,QAAQ,UAAU,IACrD,OAAO;CAET,OAAO,OAAO,KAAK;AACrB;;AAGA,SAAS,WAAW,OAE+B;CACjD,MAAM,EAAE,YAAY;CACpB,OACE,qBAAC,MAAD,EAAA,UAAA;EACE,qBAAC,MAAD,EAAA,UAAA;GACE,oBAAC,UAAD,EAAA,UAAS,QAAQ,KAAa,CAAA;GAC7B,QAAQ,cAAc,oBAAC,MAAD;IAAM,IAAG;IAAO,UAAA,QAAQ;GAAkB,CAAA,IAAI;GACpE,QAAQ,eAAe,OAAO,oBAAC,MAAD;IAAM,IAAG;IAAM,UAAA;GAAwB,CAAA;EACpE,EAAA,CAAA;EACJ,oBAAC,MAAD,EAAA,UACE,oBAAC,MAAD;GAAM,IAAG;GAAQ,UAAA,QAAQ;EAAe,CAAA,EACtC,CAAA;EACJ,oBAAC,MAAD,EAAA,UACE,oBAAC,MAAD;GAAM,IAAG;GAAO,MAAA;GACb,UAAA,QAAQ;EACL,CAAA,EACJ,CAAA;EACJ,oBAAC,MAAD,EAAA,UACE,oBAAC,MAAD;GAAM,IAAG;GAAO,MAAA;GACb,UAAA,QAAQ;EACL,CAAA,EACJ,CAAA;EACJ,oBAAC,MAAD,EAAA,UACE,oBAAC,OAAD;GAAO,MAAM,WAAW,QAAQ,KAAK;GAAG,MAAA;GACrC,UAAA,QAAQ;EACJ,CAAA,EACL,CAAA;EACJ,oBAAC,MAAD;GAAI,OAAM;GACR,UAAA,oBAAC,MAAD;IAAM,IAAG;IAAQ,UAAA,cAAc,QAAQ,SAAS;GAAQ,CAAA;EACtD,CAAA;EACJ,oBAAC,MAAD,EAAA,UACE,oBAAC,MAAD;GAAM,IAAG;GAAQ,UAAA,QAAQ,UAAU;EAAU,CAAA,EAC3C,CAAA;CACF,EAAA,GA9BK,GAAG,QAAQ,SAAS,GAAG,QAAQ,MA8BpC;AAER;;AAOA,SAAS,aAAa,OAA0E;CAC9F,MAAM,EAAE,WAAW;CACnB,IAAI,OAAO,SAAS,WAAW,GAC7B,OAAO,oBAAC,YAAD,EAAY,aAAY,qBAAsB,CAAA;CAEvD,OACE,oBAAC,OAAD,EAAA,UACE,qBAAC,SAAD,EAAA,UAAA,CACE,oBAAC,SAAD,EAAA,UACE,qBAAC,MAAD,EAAA,UAAA;EACE,oBAAC,MAAD,EAAA,UAAI,UAAW,CAAA;EACf,oBAAC,MAAD,EAAA,UAAI,WAAY,CAAA;EAChB,oBAAC,MAAD,EAAA,UAAI,OAAQ,CAAA;EACZ,oBAAC,MAAD,EAAA,UAAI,UAAW,CAAA;EACf,oBAAC,MAAD,EAAA,UAAI,SAAU,CAAA;EACd,oBAAC,MAAD,EAAA,UAAI,UAAW,CAAA;EACf,oBAAC,MAAD,EAAA,UAAI,SAAU,CAAA;CACZ,EAAA,CAAA,EACC,CAAA,GACP,oBAAC,SAAD,EAAA,UACG,OAAO,SAAS,KAAK,YACpB,oBAAC,YAAD,EAAiE,QAAU,GAA1D,GAAG,QAAQ,SAAS,GAAG,QAAQ,MAA2B,CAC5E,EACI,CAAA,CACF,EAAA,CAAA,EACF,CAAA;AAEX;;AAUA,SAAS,YAAY,OAAyE;CAC5F,MAAM,EAAE,QAAQ,aAAa,QAAQ,gBAAgB;CACrD,OACE,qBAAC,MAAD,EAAA,UAAA;EACE,oBAAC,cAAD,EAAA,UAAc,SAAoB,CAAA;EAClC,qBAAC,OAAD;GAAK,OAAM;GAAX,UAAA;IACE,oBAAC,MAAD;KAAM,OAAM;KAAS,OAAO,OAAO;IAAS,CAAA;IAC5C,oBAAC,MAAD;KAAM,OAAM;KAAS,OAAO,aAAa,OAAO,UAAU;IAAI,CAAA;IAC9D,oBAAC,MAAD;KAAM,OAAM;KAAU,OAAO,OAAO;IAAU,CAAA;GAC3C;;EACL,qBAAC,MAAD,EAAA,UAAA;GAAM;GACE,cAAc,YAAY;GAAsC;GAAuB;GAC5F,eAAe,OAAO,kBAAkB;GAAE;GAAa;GACvD,eAAe,OAAO,YAAY;GAAE;GAAmB;GACvD,OAAO,kBAAkB,OACtB,aACA,GAAG,eAAe,OAAO,aAAa,EAAE;EACxC,EAAA,CAAA;EACL,eAAe,YAAY,SAAS,IACnC,oBAAC,QAAD,EAAA,UACG,YAAY,KAAK,WAChB,oBAAC,OAAD,EAAA,UAAqB,OAAc,GAAvB,MAAuB,CACpC,EACK,CAAA,IACN;EACJ,qBAAC,MAAD,EAAA,UAAA;GAAM;GACS,eAAe,OAAO,UAAU;GAAE;GAAoB;GAClE,eAAe,OAAO,mBAAmB;GAAE;GAAc;GACzD,eAAe,OAAO,cAAc;GAAE;EACnC,EAAA,CAAA;CACF,EAAA,CAAA;AAEV;;AAGA,SAAS,gBAAgB,OAG0B;CACjD,MAAM,EAAE,OAAO,WAAW;CAC1B,MAAM,WAAW,QAAQ,OAAO,cAAc;CAC9C,OACE,qBAAC,MAAD,EAAA,UAAA;EACE,oBAAC,cAAD,EAAA,UAAc,qBAAgC,CAAA;EAC9C,oBAAC,MAAD,EAAA,UAAM,6FAEA,CAAA;EACN,qBAAC,OAAD;GAAK,OAAM;GAAX,UAAA;IACE,oBAAC,MAAD;KAAM,OAAM;KAAiB,OAAO,OAAO,MAAM,OAAO;IAAI,CAAA;IAC5D,oBAAC,MAAD;KAAM,OAAM;KAAkB,OAAO,OAAO,MAAM,QAAQ;IAAI,CAAA;IAC9D,oBAAC,MAAD;KAAM,OAAM;KAAa,OAAO,OAAO,MAAM,WAAW,MAAM;IAAI,CAAA;GAC/D;;EACJ,MAAM,WAAW,SAAS,IACzB,qBAAC,OAAD;GAAO,MAAK;GAAS,OAAM;GAA3B,UAAA;IAAkE;IAClC,MAAM,WAAW;IAAO;IACrD,CAAC,GAAG,IAAI,IAAI,MAAM,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;IAAE;GAE/D;EACL,CAAA,IAAA;EACH,YAAY,MAAM,WAAW,IAC5B,qBAAC,QAAD;GACE,QAAO;GACP,QAAO;GACP,WAAQ;GACR,aAAU;GAJZ,UAAA,CAMG,UAAU,GACX,oBAAC,QAAD;IAAQ,MAAK;IAAS,SAAQ;IAAY,MAAK;IAAK,UAAA;GAE5C,CAAA,CACJ;EAEN,CAAA,IAAA,oBAAC,MAAD,EAAA,UACG,WACG,oEACA,6EACA,CAAA;CAEJ,EAAA,CAAA;AAEV;;AAGA,SAAgB,sBAAsB,MAAwC;CAC5E,MAAM,EAAE,QAAQ,aAAa,QAAQ,aAAa,gBAAgB;CAClE,OACE,qBAAC,gBAAD;EAAgB,OAAM;EAAS,KAAK,EAAE,QAAQ,QAAQ;EAAtD,UAAA;GACE,oBAAC,YAAD;IACE,OAAM;IACN,aAAY;IACZ,MACE,qBAAA,UAAA,EAAA,UAAA;KACG,OAAO,SAAS;KAAO;KAAa,OAAO;KAAO;KAAM;KACxD,aAAa,OAAO,UAAU;IAC/B,EAAA,CAAA;IAEJ,SACE,oBAAC,QAAD;KAAQ,SAAQ;KAAY,MAAK;KAAK,MAAK;KAAS,UAAA;IAE5C,CAAA;GAEX,CAAA;GACD,oBAAC,aAAD;IACU;IACK;IACL;IACK;GACd,CAAA;GACA,cACC,oBAAC,OAAD;IAAK,OAAM;IACT,UAAA,oBAAC,iBAAD;KAAiB,OAAO;KAAqB;IAAS,CAAA;GACnD,CAAA,IACH;GACJ,oBAAC,OAAD;IAAK,OAAM;IACT,UAAA,qBAAC,MAAD,EAAA,UAAA;KACE,oBAAC,cAAD,EAAA,UAAc,WAAsB,CAAA;KACpC,oBAAC,MAAD,EAAA,UAAM,mJAGA,CAAA;KACN,oBAAC,cAAD,EAAsB,OAAS,CAAA;IAC3B,EAAA,CAAA;GACH,CAAA;EACS;;AAEpB"}