npm - clitrigger - Versions diffs - 0.1.18 → 0.2.0 - Mend

clitrigger 0.1.18 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (22) hide show

package/.env.example +2 -1
package/README.md +15 -5
package/README_KR.md +15 -5
package/bin/clitrigger.js +23 -40
package/dist/client/assets/{index-CRSNebDI.css → index-DxSgLI9D.css} +1 -1
package/dist/client/assets/{index-BldpDcSD.js → index-fn9z65zw.js} +178 -168
package/dist/client/index.html +2 -2
package/dist/server/index.d.ts.map +1 -1
package/dist/server/index.js +35 -7
package/dist/server/index.js.map +1 -1
package/dist/server/middleware/auth.d.ts.map +1 -1
package/dist/server/middleware/auth.js +9 -0
package/dist/server/middleware/auth.js.map +1 -1
package/dist/server/routes/auth.d.ts.map +1 -1
package/dist/server/routes/auth.js +106 -28
package/dist/server/routes/auth.js.map +1 -1
package/dist/server/utils/password.d.ts +3 -0
package/dist/server/utils/password.d.ts.map +1 -0
package/dist/server/utils/password.js +46 -0
package/dist/server/utils/password.js.map +1 -0
package/electron/main.cjs +16 -24
package/package.json +35 -8

package/dist/client/index.html CHANGED Viewed

@@ -16,8 +16,8 @@
     </script>
     <link rel="preconnect" href="https://fonts.googleapis.com" />
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
-    <script type="module" crossorigin src="/assets/index-BldpDcSD.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-CRSNebDI.css">
+    <script type="module" crossorigin src="/assets/index-fn9z65zw.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-DxSgLI9D.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/server/index.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC;~~AA8CvB~~,QAAA,MAAM,GAAG,6CAAY,CAAC;AACtB,QAAA,MAAM,MAAM,oGAAoB,CAAC;~~AA2PjC~~,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC"}
1	+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC;AA+CvB,QAAA,MAAM,GAAG,6CAAY,CAAC;AACtB,QAAA,MAAM,MAAM,oGAAoB,CAAC;AAqRjC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC"}

package/dist/server/index.js CHANGED Viewed

@@ -18,7 +18,8 @@ import imagesRouter from './routes/images.js';
 import { claudeManager } from './services/claude-manager.js';
 import { orchestrator } from './services/orchestrator.js';
 import { tunnelManager } from './services/tunnel-manager.js';
-import { getSetting as getAppSetting } from './db/app-settings.js';
+import { getSetting as getAppSetting, setSetting as setAppSetting } from './db/app-settings.js';
+import { hashPassword } from './utils/password.js';
 import { initWebSocket } from './websocket/index.js';
 import tunnelRouter from './routes/tunnel.js';
 import schedulesRouter from './routes/schedules.js';
@@ -132,11 +133,35 @@ for (const p of getAllProjects()) {
         }
     }
 }
-// Require AUTH_PASSWORD unless auth is explicitly disabled (plugin/headless mode)
-if (!process.env.AUTH_PASSWORD && process.env.DISABLE_AUTH !== 'true') {
-    console.error('ERROR: AUTH_PASSWORD is not set.');
-    console.error('  Set AUTH_PASSWORD in .env file, or run clitrigger again if installed globally.');
-    process.exit(1);
+// Password setup gate (unless auth is explicitly disabled)
+// - DB hash exists  → normal operation.
+// - No hash, but AUTH_PASSWORD env present → one-time migration to scrypt hash.
+// - Neither → setup mode: server starts, but tunnel auto-start is held until
+//   the user finishes initial setup in the browser (POST /api/auth/setup).
+let setupMode = false;
+if (process.env.DISABLE_AUTH !== 'true') {
+    const existingHash = getAppSetting('auth.password_hash');
+    const envPwd = process.env.AUTH_PASSWORD;
+    if (!existingHash && envPwd) {
+        const migrated = await hashPassword(envPwd);
+        setAppSetting('auth.password_hash', migrated);
+        setAppSetting('auth.password_changed_at', String(Date.now()));
+        console.log('Migrated legacy AUTH_PASSWORD to hashed credential store.');
+        // Drop a marker so the launcher (bin/clitrigger.js) can scrub the
+        // plaintext field from ~/.clitrigger/config.json on next boot.
+        if (process.env.DB_PATH) {
+            try {
+                fs.writeFileSync(path.join(path.dirname(process.env.DB_PATH), '.password-migrated'), '');
+            }
+            catch { /* best-effort */ }
+        }
+    }
+    delete process.env.AUTH_PASSWORD;
+    if (!getAppSetting('auth.password_hash')) {
+        setupMode = true;
+        console.log('No password set. Open the web UI to finish setup.');
+        console.log('Tunnel auto-start is paused until setup completes.');
+    }
 }
 // Auth middleware
 initAuth(app);
@@ -172,7 +197,10 @@ scheduler.initialize();
 // --- WebSocket ---
 initWebSocket(server);
 // --- Tunnel (Phase 7) ---
-if (process.env.TUNNEL_ENABLED === 'true') {
+if (setupMode && process.env.TUNNEL_ENABLED === 'true') {
+    console.log('Tunnel start blocked: password not initialized — finish setup in browser first.');
+}
+if (process.env.TUNNEL_ENABLED === 'true' && !setupMode) {
     const port = Number(PORT);
     const tunnelName = getAppSetting('tunnel.name') ?? process.env.TUNNEL_NAME ?? '';
     const customHostname = getAppSetting('tunnel.hostname') ?? process.env.TUNNEL_HOSTNAME ?? '';

package/dist/server/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC;AACvB,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC1O,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,UAAU,MAAM,kBAAkB,CAAC;AAC1C,OAAO,cAAc,MAAM,sBAAsB,CAAC;AAClD,OAAO,WAAW,MAAM,mBAAmB,CAAC;AAC5C,OAAO,eAAe,MAAM,uBAAuB,CAAC;AACpD,OAAO,UAAU,MAAM,kBAAkB,CAAC;AAC1C,OAAO,YAAY,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,UAAU,IAAI,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,YAAY,MAAM,oBAAoB,CAAC;AAC9C,OAAO,eAAe,MAAM,uBAAuB,CAAC;AACpD,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAChD,OAAO,YAAY,MAAM,oBAAoB,CAAC;AAC9C,OAAO,eAAe,MAAM,wBAAwB,CAAC;AACrD,OAAO,eAAe,MAAM,wBAAwB,CAAC;AACrD,OAAO,iBAAiB,MAAM,yBAAyB,CAAC;AACxD,OAAO,eAAe,MAAM,uBAAuB,CAAC;AACpD,OAAO,cAAc,MAAM,sBAAsB,CAAC;AAClD,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAChD,OAAO,YAAY,MAAM,oBAAoB,CAAC;AAC9C,OAAO,YAAY,MAAM,oBAAoB,CAAC;AAC9C,OAAO,eAAe,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAE3D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;AACtB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;AACjC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC;AAEtC,+DAA+D;AAC/D,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;AAE1B,aAAa;AACb,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AACpD,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW;IAC5C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC,uBAAuB,EAAE,uBAAuB,EAAE,uBAAuB,CAAC,CAAC;AAChF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;IACX,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;QAC3B,0DAA0D;QAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACvB,sCAAsC;QACtC,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACvB,wDAAwD;QACxD,CAAC;aAAM,IAAI,4CAA4C,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACrE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,WAAW,EAAE,IAAI;CAClB,CAAC,CAAC,CAAC;AACJ,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;IACb,qBAAqB,EAAE,KAAK,EAAG,oCAAoC;CACpE,CAAC,CAAC,CAAC;AACJ,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAEzC,sBAAsB;AACtB,WAAW,EAAE,CAAC;AAEd,2EAA2E;AAC3E,6EAA6E;AAC7E,oEAAoE;AACpE,aAAa,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAgB,CAAC,CAAC,CAAC;AAE9C,4DAA4D;AAC5D,4CAA4C;AAC5C,MAAM,UAAU,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;AAC/C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IAC1B,OAAO,CAAC,GAAG,CAAC,cAAc,UAAU,CAAC,MAAM,2BAA2B,CAAC,CAAC;IACxE,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACpC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;AAC3D,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,cAAc,gBAAgB,CAAC,MAAM,iCAAiC,CAAC,CAAC;IACpF,KAAK,MAAM,UAAU,IAAI,gBAAgB,EAAE,CAAC;QAC1C,sBAAsB,CAAC,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAChD,gBAAgB,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,uBAAuB,UAAU,CAAC,KAAK,MAAM,UAAU,CAAC,EAAE,0BAA0B,CAAC,CAAC;IACpG,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,MAAM,aAAa,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;AACrD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,cAAc,aAAa,CAAC,MAAM,8BAA8B,CAAC,CAAC;IAC9E,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC1C,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,KAAK,MAAM,OAAO,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,0CAA0C;AAC1C,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;AAChF,MAAM,OAAO,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;AACjD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,gCAAgC,kBAAkB,QAAQ,CAAC,CAAC;AAC/F,CAAC;AAED,mCAAmC;AACnC,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,EAAE,CAAC;IACjC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QACpB,MAAM,YAAY,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;QAC5E,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,cAAc,YAAY,iCAAiC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;IACtE,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAClD,OAAO,CAAC,KAAK,CAAC,kFAAkF,CAAC,CAAC;IAClG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,kBAAkB;AAClB,QAAQ,CAAC,GAAG,CAAC,CAAC;AACd,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;AAEjC,kBAAkB;AAClB,cAAc,CAAC,UAAU,CAAC,CAAC;AAC3B,cAAc,CAAC,YAAY,CAAC,CAAC;AAC7B,cAAc,CAAC,YAAY,CAAC,CAAC;AAC7B,cAAc,CAAC,YAAY,CAAC,CAAC;AAC7B,cAAc,CAAC,aAAa,CAAC,CAAC;AAE9B,iBAAiB;AACjB,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;AACzC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAC7B,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AACjC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAC5B,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAC9B,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AACjC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;AACvC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;AACrC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAC9B,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;AACrC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AACjC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AACnC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AACjC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAChC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AAC/B,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAC9B,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;AACrC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AACjC,iBAAiB,CAAC,GAAG,CAAC,CAAC;AAEvB,oBAAoB;AACpB,SAAS,CAAC,UAAU,EAAE,CAAC;AAEvB,oBAAoB;AACpB,aAAa,CAAC,MAAM,CAAC,CAAC;AAEtB,2BAA2B;AAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,MAAM,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IACjF,MAAM,cAAc,GAAG,aAAa,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;IAC7F,MAAM,aAAa,GAAG,UAAU;QAC9B,CAAC,CAAC,aAAa,CAAC,gBAAgB,CAAC,UAAU,EAAE,IAAI,EAAE,cAAc,IAAI,SAAS,CAAC;QAC/E,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACpC,aAAa,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;QACjC,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IACH,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE;QACtC,OAAO,CAAC,GAAG,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,+GAA+G,CAAC,CAAC;QAC7H,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;QACvC,OAAO,CAAC,KAAK,CAAC,sBAAsB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2EAA2E;AAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;IACpC,sEAAsE;IACtE,qEAAqE;IACrE,oFAAoF;IACpF,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,EAAS,4BAA4B;QACzE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,uBAAuB,CAAC,EAAE,8BAA8B;KACjF,CAAC;IACF,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC/E,IAAI,UAAU,EAAE,CAAC;QACf,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACpC,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACvC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,eAAe;AACf,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACnC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AAClE,CAAC,CAAC,CAAC;AAEH,yDAAyD;AACzD,SAAS,OAAO;IACd,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;IACzF,YAAY,CAAC,uBAAuB,EAAE,CAAC;IACvC,SAAS,CAAC,OAAO,EAAE,CAAC;IACpB,OAAO,CAAC,GAAG,CAAC;QACV,aAAa,CAAC,OAAO,EAAE;QACvB,aAAa,CAAC,UAAU,EAAE;KAC3B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;QACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC/B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAE9B,0DAA0D;AAC1D,0FAA0F;AAC1F,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;IACpC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;AAEnC,SAAS,SAAS,CAAC,IAAY,EAAE,OAAe;IAC9C,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QACvB,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,MAAM,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,kDAAkD,IAAI,EAAE,CAAC,CAAC;QACtE,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,uCAAuC,aAAa,sBAAsB,IAAI,WAAW,CAAC,CAAC;QACzG,CAAC;QACD,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,YAAY,CAAC,wBAAwB,EAAE,CAAC;QAExC,0EAA0E;QAC1E,WAAW,CAAC,uBAAuB,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;QAChD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,GAAG,gBAAgB,EAAE,CAAC;YAC5D,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,iBAAiB,QAAQ,GAAG,CAAC,CAAC;YAC1D,SAAS,CAAC,QAAQ,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;AAE5B,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC"}
1	+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC;AACvB,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC1O,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,UAAU,MAAM,kBAAkB,CAAC;AAC1C,OAAO,cAAc,MAAM,sBAAsB,CAAC;AAClD,OAAO,WAAW,MAAM,mBAAmB,CAAC;AAC5C,OAAO,eAAe,MAAM,uBAAuB,CAAC;AACpD,OAAO,UAAU,MAAM,kBAAkB,CAAC;AAC1C,OAAO,YAAY,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,UAAU,IAAI,aAAa,EAAE,UAAU,IAAI,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAChG,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,YAAY,MAAM,oBAAoB,CAAC;AAC9C,OAAO,eAAe,MAAM,uBAAuB,CAAC;AACpD,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAChD,OAAO,YAAY,MAAM,oBAAoB,CAAC;AAC9C,OAAO,eAAe,MAAM,wBAAwB,CAAC;AACrD,OAAO,eAAe,MAAM,wBAAwB,CAAC;AACrD,OAAO,iBAAiB,MAAM,yBAAyB,CAAC;AACxD,OAAO,eAAe,MAAM,uBAAuB,CAAC;AACpD,OAAO,cAAc,MAAM,sBAAsB,CAAC;AAClD,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAChD,OAAO,YAAY,MAAM,oBAAoB,CAAC;AAC9C,OAAO,YAAY,MAAM,oBAAoB,CAAC;AAC9C,OAAO,eAAe,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAE3D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;AACtB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;AACjC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC;AAEtC,+DAA+D;AAC/D,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;AAE1B,aAAa;AACb,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AACpD,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW;IAC5C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC,uBAAuB,EAAE,uBAAuB,EAAE,uBAAuB,CAAC,CAAC;AAChF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;IACX,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;QAC3B,0DAA0D;QAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACvB,sCAAsC;QACtC,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACvB,wDAAwD;QACxD,CAAC;aAAM,IAAI,4CAA4C,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACrE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,WAAW,EAAE,IAAI;CAClB,CAAC,CAAC,CAAC;AACJ,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;IACb,qBAAqB,EAAE,KAAK,EAAG,oCAAoC;CACpE,CAAC,CAAC,CAAC;AACJ,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAEzC,sBAAsB;AACtB,WAAW,EAAE,CAAC;AAEd,2EAA2E;AAC3E,6EAA6E;AAC7E,oEAAoE;AACpE,aAAa,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAgB,CAAC,CAAC,CAAC;AAE9C,4DAA4D;AAC5D,4CAA4C;AAC5C,MAAM,UAAU,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;AAC/C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IAC1B,OAAO,CAAC,GAAG,CAAC,cAAc,UAAU,CAAC,MAAM,2BAA2B,CAAC,CAAC;IACxE,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACpC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;AAC3D,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,cAAc,gBAAgB,CAAC,MAAM,iCAAiC,CAAC,CAAC;IACpF,KAAK,MAAM,UAAU,IAAI,gBAAgB,EAAE,CAAC;QAC1C,sBAAsB,CAAC,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAChD,gBAAgB,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,uBAAuB,UAAU,CAAC,KAAK,MAAM,UAAU,CAAC,EAAE,0BAA0B,CAAC,CAAC;IACpG,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,MAAM,aAAa,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;AACrD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,cAAc,aAAa,CAAC,MAAM,8BAA8B,CAAC,CAAC;IAC9E,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC1C,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,KAAK,MAAM,OAAO,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,0CAA0C;AAC1C,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;AAChF,MAAM,OAAO,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;AACjD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,gCAAgC,kBAAkB,QAAQ,CAAC,CAAC;AAC/F,CAAC;AAED,mCAAmC;AACnC,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,EAAE,CAAC;IACjC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QACpB,MAAM,YAAY,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;QAC5E,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,cAAc,YAAY,iCAAiC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;AACH,CAAC;AAED,2DAA2D;AAC3D,wCAAwC;AACxC,gFAAgF;AAChF,6EAA6E;AAC7E,2EAA2E;AAC3E,IAAI,SAAS,GAAG,KAAK,CAAC;AACtB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;IACxC,MAAM,YAAY,GAAG,aAAa,CAAC,oBAAoB,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACzC,IAAI,CAAC,YAAY,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;QAC5C,aAAa,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QAC9C,aAAa,CAAC,0BAA0B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;QACzE,kEAAkE;QAClE,+DAA+D;QAC/D,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACjC,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACzC,SAAS,GAAG,IAAI,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,kBAAkB;AAClB,QAAQ,CAAC,GAAG,CAAC,CAAC;AACd,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;AAEjC,kBAAkB;AAClB,cAAc,CAAC,UAAU,CAAC,CAAC;AAC3B,cAAc,CAAC,YAAY,CAAC,CAAC;AAC7B,cAAc,CAAC,YAAY,CAAC,CAAC;AAC7B,cAAc,CAAC,YAAY,CAAC,CAAC;AAC7B,cAAc,CAAC,aAAa,CAAC,CAAC;AAE9B,iBAAiB;AACjB,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;AACzC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAC7B,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AACjC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAC5B,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAC9B,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AACjC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;AACvC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;AACrC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAC9B,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;AACrC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AACjC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AACnC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AACjC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAChC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AAC/B,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAC9B,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;AACrC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AACjC,iBAAiB,CAAC,GAAG,CAAC,CAAC;AAEvB,oBAAoB;AACpB,SAAS,CAAC,UAAU,EAAE,CAAC;AAEvB,oBAAoB;AACpB,aAAa,CAAC,MAAM,CAAC,CAAC;AAEtB,2BAA2B;AAC3B,IAAI,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,MAAM,EAAE,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;AACjG,CAAC;AACD,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IACjF,MAAM,cAAc,GAAG,aAAa,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;IAC7F,MAAM,aAAa,GAAG,UAAU;QAC9B,CAAC,CAAC,aAAa,CAAC,gBAAgB,CAAC,UAAU,EAAE,IAAI,EAAE,cAAc,IAAI,SAAS,CAAC;QAC/E,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACpC,aAAa,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;QACjC,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IACH,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE;QACtC,OAAO,CAAC,GAAG,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,+GAA+G,CAAC,CAAC;QAC7H,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;QACvC,OAAO,CAAC,KAAK,CAAC,sBAAsB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2EAA2E;AAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;IACpC,sEAAsE;IACtE,qEAAqE;IACrE,oFAAoF;IACpF,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,EAAS,4BAA4B;QACzE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,uBAAuB,CAAC,EAAE,8BAA8B;KACjF,CAAC;IACF,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC/E,IAAI,UAAU,EAAE,CAAC;QACf,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACpC,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACvC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,eAAe;AACf,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACnC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AAClE,CAAC,CAAC,CAAC;AAEH,yDAAyD;AACzD,SAAS,OAAO;IACd,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;IACzF,YAAY,CAAC,uBAAuB,EAAE,CAAC;IACvC,SAAS,CAAC,OAAO,EAAE,CAAC;IACpB,OAAO,CAAC,GAAG,CAAC;QACV,aAAa,CAAC,OAAO,EAAE;QACvB,aAAa,CAAC,UAAU,EAAE;KAC3B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;QACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC/B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAE9B,0DAA0D;AAC1D,0FAA0F;AAC1F,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;IACpC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;AAEnC,SAAS,SAAS,CAAC,IAAY,EAAE,OAAe;IAC9C,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QACvB,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,MAAM,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,kDAAkD,IAAI,EAAE,CAAC,CAAC;QACtE,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,uCAAuC,aAAa,sBAAsB,IAAI,WAAW,CAAC,CAAC;QACzG,CAAC;QACD,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,YAAY,CAAC,wBAAwB,EAAE,CAAC;QAExC,0EAA0E;QAC1E,WAAW,CAAC,uBAAuB,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;QAChD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,GAAG,gBAAgB,EAAE,CAAC;YAC5D,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,iBAAiB,QAAQ,GAAG,CAAC,CAAC;YAC1D,SAAS,CAAC,QAAQ,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;AAE5B,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC"}

package/dist/server/middleware/auth.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/server/middleware/auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;~~AAWvD~~,eAAO,MAAM,iBAAiB,EAAE,cAU9B,CAAC;AAGH,eAAO,MAAM,cAAc,EAAE,~~cAe5B~~,CAAC;AAEF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAK3C"}
1	+ {"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/server/middleware/auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAYvD,eAAO,MAAM,iBAAiB,EAAE,cAU9B,CAAC;AAGH,eAAO,MAAM,cAAc,EAAE,cAuB5B,CAAC;AAEF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAK3C"}

package/dist/server/middleware/auth.js CHANGED Viewed

@@ -1,5 +1,6 @@
 import crypto from 'crypto';
 import session from 'express-session';
+import { getSetting } from '../db/app-settings.js';
 // Session-based password authentication middleware
 // Uses SESSION_SECRET (or falls back to a random secret per process)
 const sessionSecret = process.env.SESSION_SECRET
@@ -28,6 +29,14 @@ export const authMiddleware = (req, res, next) => {
         return next();
     }
     if (req.session && req.session.authenticated) {
+        // Invalidate sessions issued before the most recent password change.
+        const changedAt = Number(getSetting('auth.password_changed_at') || 0);
+        if (changedAt && (req.session.createdAt ?? 0) < changedAt) {
+            req.session.destroy(() => {
+                res.status(401).json({ error: 'Unauthorized' });
+            });
+            return;
+        }
         return next();
     }
     res.status(401).json({ error: 'Unauthorized' });

package/dist/server/middleware/auth.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/server/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,OAAO,MAAM,iBAAiB,CAAC;~~AAGtC~~,mDAAmD;AACnD,qEAAqE;AAErE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc;OAC3C,OAAO,CAAC,GAAG,CAAC,aAAa;OACzB,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAE5C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AAE3D,MAAM,CAAC,MAAM,iBAAiB,GAAmB,OAAO,CAAC;IACvD,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,KAAK;IACb,iBAAiB,EAAE,KAAK;IACxB,MAAM,EAAE;QACN,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,YAAY;QACpB,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAG,WAAW;KAC1C;CACF,CAAC,CAAC;AAEH,sDAAsD;AACtD,MAAM,CAAC,MAAM,cAAc,GAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAC/D,uCAAuC;IACvC,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACrE,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IACD,6BAA6B;IAC7B,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC7C,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;AAClD,CAAC,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,GAAY;IACnC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;QACxC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClC,CAAC;AACH,CAAC"}
1	+ {"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/server/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,OAAO,MAAM,iBAAiB,CAAC;AAEtC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,mDAAmD;AACnD,qEAAqE;AAErE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc;OAC3C,OAAO,CAAC,GAAG,CAAC,aAAa;OACzB,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAE5C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AAE3D,MAAM,CAAC,MAAM,iBAAiB,GAAmB,OAAO,CAAC;IACvD,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,KAAK;IACb,iBAAiB,EAAE,KAAK;IACxB,MAAM,EAAE;QACN,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,YAAY;QACpB,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAG,WAAW;KAC1C;CACF,CAAC,CAAC;AAEH,sDAAsD;AACtD,MAAM,CAAC,MAAM,cAAc,GAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAC/D,uCAAuC;IACvC,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACrE,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IACD,6BAA6B;IAC7B,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC7C,qEAAqE;QACrE,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC;QACtE,IAAI,SAAS,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,SAAS,EAAE,CAAC;YAC1D,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;gBACvB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;AAClD,CAAC,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,GAAY;IACnC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;QACxC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClC,CAAC;AACH,CAAC"}

package/dist/server/routes/auth.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/server/routes/auth.ts"],"names":[],"mappings":"~~AAIA~~,QAAA,MAAM,MAAM,4CAAW,CAAC;~~AAuExB~~,eAAe,MAAM,CAAC"}
1	+ {"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/server/routes/auth.ts"],"names":[],"mappings":"AAKA,QAAA,MAAM,MAAM,4CAAW,CAAC;AA+JxB,eAAe,MAAM,CAAC"}

package/dist/server/routes/auth.js CHANGED Viewed

@@ -1,42 +1,56 @@
-import crypto from 'crypto';
 import { Router } from 'express';
 import rateLimit from 'express-rate-limit';
+import { getSetting, setSetting } from '../db/app-settings.js';
+import { hashPassword, verifyPassword } from '../utils/password.js';
 const router = Router();
-// Rate limit login attempts: max 10 per 15 minutes per IP
-const loginLimiter = rateLimit({
+const HASH_KEY = 'auth.password_hash';
+const CHANGED_AT_KEY = 'auth.password_changed_at';
+const MIN_LENGTH = 8;
+// Rate limit auth attempts: max 10 per 15 minutes per IP
+const authLimiter = rateLimit({
     windowMs: 15 * 60 * 1000,
     max: 10,
-    message: { error: 'Too many login attempts. Please try again later.' },
+    message: { error: 'Too many auth attempts. Please try again later.' },
     standardHeaders: true,
     legacyHeaders: false,
 });
-// Timing-safe password comparison
-function safeCompare(a, b) {
-    if (a.length !== b.length) {
-        // Still do a comparison to avoid short-circuit timing leak
-        crypto.timingSafeEqual(Buffer.from(a), Buffer.from(a));
-        return false;
-    }
-    return crypto.timingSafeEqual(Buffer.from(a), Buffer.from(b));
+function validatePasswordPair(password, confirmPassword) {
+    if (typeof password !== 'string' || !password) {
+        return { ok: false, status: 400, error: 'Password is required' };
+    }
+    if (password.length < MIN_LENGTH) {
+        return { ok: false, status: 400, error: `Password must be at least ${MIN_LENGTH} characters` };
+    }
+    if (typeof confirmPassword !== 'string' || password !== confirmPassword) {
+        return { ok: false, status: 400, error: 'Passwords do not match' };
+    }
+    return { ok: true, password };
+}
+function markPasswordChanged() {
+    setSetting(CHANGED_AT_KEY, String(Date.now()));
 }
 // POST /api/auth/login
-// Body: { password: string }
-// Compares with process.env.AUTH_PASSWORD
-// Sets session.authenticated = true on success
-router.post('/login', loginLimiter, (req, res) => {
-    const { password } = req.body;
-    const authPassword = process.env.AUTH_PASSWORD;
-    if (!authPassword) {
-        console.error('AUTH_PASSWORD environment variable is not configured');
-        res.status(500).json({ error: 'Server authentication not configured' });
+router.post('/login', authLimiter, async (req, res) => {
+    const { password } = req.body ?? {};
+    const hash = getSetting(HASH_KEY);
+    if (!hash) {
+        res.status(503).json({ error: 'setup_required' });
         return;
     }
     if (typeof password !== 'string' || !password) {
         res.status(400).json({ error: 'Password is required' });
         return;
     }
-    if (safeCompare(password, authPassword)) {
+    let ok = false;
+    try {
+        ok = await verifyPassword(password, hash);
+    }
+    catch {
+        ok = false;
+    }
+    if (ok) {
         req.session.authenticated = true;
+        req.session.createdAt = Date.now();
         res.json({ success: true });
     }
     else {
@@ -44,8 +58,69 @@ router.post('/login', loginLimiter, (req, res) => {
         res.status(401).json({ error: 'Invalid password' });
     }
 });
+// POST /api/auth/setup
+// Only available when no password has been set yet (initial bootstrap).
+router.post('/setup', authLimiter, async (req, res) => {
+    if (getSetting(HASH_KEY)) {
+        res.status(409).json({ error: 'already_initialized' });
+        return;
+    }
+    const { password, confirmPassword } = req.body ?? {};
+    const validation = validatePasswordPair(password, confirmPassword);
+    if (!validation.ok) {
+        res.status(validation.status).json({ error: validation.error });
+        return;
+    }
+    const hash = await hashPassword(validation.password);
+    setSetting(HASH_KEY, hash);
+    markPasswordChanged();
+    req.session.authenticated = true;
+    req.session.createdAt = Date.now();
+    res.json({ success: true });
+});
+// PUT /api/auth/password
+// Authenticated endpoint — middleware has already verified the session.
+router.put('/password', authLimiter, async (req, res) => {
+    if (!req.session?.authenticated) {
+        res.status(401).json({ error: 'Unauthorized' });
+        return;
+    }
+    const { oldPassword, newPassword, confirmPassword } = req.body ?? {};
+    const hash = getSetting(HASH_KEY);
+    if (!hash) {
+        res.status(503).json({ error: 'setup_required' });
+        return;
+    }
+    if (typeof oldPassword !== 'string' || !oldPassword) {
+        res.status(400).json({ error: 'Current password is required' });
+        return;
+    }
+    let oldOk = false;
+    try {
+        oldOk = await verifyPassword(oldPassword, hash);
+    }
+    catch {
+        oldOk = false;
+    }
+    if (!oldOk) {
+        res.status(401).json({ error: 'Current password is incorrect' });
+        return;
+    }
+    const validation = validatePasswordPair(newPassword, confirmPassword);
+    if (!validation.ok) {
+        res.status(validation.status).json({ error: validation.error });
+        return;
+    }
+    const newHash = await hashPassword(validation.password);
+    setSetting(HASH_KEY, newHash);
+    markPasswordChanged();
+    // Keep this session alive — refresh createdAt so the new password_changed_at
+    // timestamp does not invalidate the requester. Other sessions (older
+    // createdAt) will be rejected on their next request by authMiddleware.
+    req.session.createdAt = Date.now();
+    res.json({ success: true });
+});
 // POST /api/auth/logout
-// Destroys session
 router.post('/logout', (req, res) => {
     req.session.destroy((err) => {
         if (err) {
@@ -56,14 +131,17 @@ router.post('/logout', (req, res) => {
     });
 });
 // GET /api/auth/status
-// Returns { authenticated: boolean, authRequired: boolean }
 router.get('/status', (req, res) => {
     if (process.env.DISABLE_AUTH === 'true') {
-        res.json({ authenticated: true, authRequired: false });
-    }
-    else {
-        res.json({ authenticated: req.session?.authenticated === true, authRequired: true });
+        res.json({ authenticated: true, authRequired: false, setupRequired: false });
+        return;
     }
+    const setupRequired = !getSetting(HASH_KEY);
+    res.json({
+        authenticated: req.session?.authenticated === true,
+        authRequired: true,
+        setupRequired,
+    });
 });
 export default router;
 //# sourceMappingURL=auth.js.map

package/dist/server/routes/auth.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/server/routes/auth.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,~~QAAQ~~,CAAC;~~AAC5B~~,OAAO,~~EAAE~~,MAAM,EAAE,MAAM,~~SAAS~~,CAAC;~~AACjC~~,OAAO,~~SAAS~~,MAAM,~~oBAAoB~~,CAAC;~~AAE3C~~,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;AAExB,~~0DAA0D~~;~~AAC1D~~,MAAM,~~YAAY~~,GAAG,SAAS,CAAC;~~IAC7B~~,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IACxB,GAAG,EAAE,EAAE;IACP,OAAO,EAAE,EAAE,KAAK,EAAE,~~kDAAkD~~,EAAE;~~IACtE~~,eAAe,EAAE,IAAI;IACrB,aAAa,EAAE,KAAK;CACrB,CAAC,CAAC;AAEH,~~kCAAkC;AAClC,~~SAAS,~~WAAW~~,CAAC,~~CAAS~~,EAAE,~~CAAS~~;~~IACvC~~,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;~~QAC1B~~,~~2DAA2D;QAC3D~~,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;~~QACvD~~,~~OAAO~~,KAAK,CAAC;~~IACf~~,CAAC;IACD,OAAO,~~MAAM~~,CAAC,~~eAAe~~,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;~~AAChE~~,CAAC;~~AAED~~,~~uBAAuB~~;~~AACvB~~,6BAA6B;~~AAC7B~~,~~0CAA0C~~;~~AAC1C,+CAA+C~~;~~AAC/C~~,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,~~YAAY~~,EAAE,~~CAAC~~,GAAG,EAAE,GAAG,EAAE,EAAE;~~IAC/C~~,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;~~IAC9B~~,MAAM,~~YAAY~~,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;~~IAE/C~~,IAAI,CAAC,~~YAAY~~,EAAE,CAAC;~~QAClB~~,OAAO,CAAC,KAAK,CAAC,~~sDAAsD~~,CAAC,CAAC;~~QACtE~~,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,~~sCAAsC~~,EAAE,CAAC,CAAC;~~QACxE~~,OAAO;IACT,CAAC;~~IAED~~,IAAI,~~OAAO~~,QAAQ,KAAK,QAAQ,IAAI,CAAC,~~QAAQ~~,EAAE,CAAC;~~QAC9C~~,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,~~sBAAsB~~,EAAE,CAAC,CAAC;~~QACxD~~,OAAO;IACT,CAAC;IAED,IAAI,~~WAAW~~,CAAC,~~QAAQ~~,EAAE,~~YAAY~~,CAAC,EAAE,CAAC;~~QACxC~~,GAAG,CAAC,OAAO,CAAC,~~aAAa~~,GAAG,IAAI,CAAC;~~QACjC~~,GAAG,CAAC,IAAI,CAAC,EAAE,~~OAAO~~,EAAE,~~IAAI~~,EAAE,CAAC,CAAC;~~IAC9B~~,~~CAAC~~;~~SAAM~~,CAAC;~~QACN~~,OAAO,CAAC,~~IAAI~~,CAAC,~~6BAA6B~~,~~GAAG~~,CAAC,~~EAAE~~,EAAE,CAAC,CAAC;~~QACpD~~,GAAG,CAAC,~~MAAM~~,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,~~KAAK~~,EAAE,~~kBAAkB~~,EAAE,CAAC,CAAC;~~IACtD~~,CAAC~~;AACH~~,CAAC,CAAC~~,CAAC~~;AAEH,wBAAwB;AACxB,~~mBAAmB;AACnB,~~MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAClC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,uBAAuB;AACvB,~~4DAA4D;AAC5D,~~MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACjC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;~~IACzD~~,CAAC;~~SAAM~~,CAAC;~~QACN~~,GAAG,CAAC,IAAI,CAAC,~~EAAE,~~aAAa,EAAE,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,IAAI,~~EAAE,~~YAAY,EAAE,IAAI,~~EAAE~~,CAAC,CAAC;~~IACvF~~,CAAC~~;AACH~~,CAAC,CAAC~~,CAAC~~;AAEH,eAAe,MAAM,CAAC"}
1	+ {"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/server/routes/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,SAAS,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEpE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;AAExB,MAAM,QAAQ,GAAG,oBAAoB,CAAC;AACtC,MAAM,cAAc,GAAG,0BAA0B,CAAC;AAClD,MAAM,UAAU,GAAG,CAAC,CAAC;AAErB,yDAAyD;AACzD,MAAM,WAAW,GAAG,SAAS,CAAC;IAC5B,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IACxB,GAAG,EAAE,EAAE;IACP,OAAO,EAAE,EAAE,KAAK,EAAE,iDAAiD,EAAE;IACrE,eAAe,EAAE,IAAI;IACrB,aAAa,EAAE,KAAK;CACrB,CAAC,CAAC;AAEH,SAAS,oBAAoB,CAAC,QAAiB,EAAE,eAAwB;IAGvE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,6BAA6B,UAAU,aAAa,EAAE,CAAC;IACjG,CAAC;IACD,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;QACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,mBAAmB;IAC1B,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,uBAAuB;AACvB,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACpD,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAElC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IACD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IAED,IAAI,EAAE,GAAG,KAAK,CAAC;IACf,IAAI,CAAC;QACH,EAAE,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,EAAE,GAAG,KAAK,CAAC;IACb,CAAC;IAED,IAAI,EAAE,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;QACjC,GAAG,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC,6BAA6B,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,uBAAuB;AACvB,wEAAwE;AACxE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACpD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACrD,MAAM,UAAU,GAAG,oBAAoB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACnE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAChE,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrD,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3B,mBAAmB,EAAE,CAAC;IAEtB,GAAG,CAAC,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IACjC,GAAG,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,yBAAyB;AACzB,wEAAwE;AACxE,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACtD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC;QAChC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACrE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IACD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;QAChE,OAAO;IACT,CAAC;IAED,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,KAAK,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,oBAAoB,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IACtE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAChE,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACxD,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9B,mBAAmB,EAAE,CAAC;IAEtB,6EAA6E;IAC7E,qEAAqE;IACrE,uEAAuE;IACvE,GAAG,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,wBAAwB;AACxB,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAClC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,uBAAuB;AACvB,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACjC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7E,OAAO;IACT,CAAC;IACD,MAAM,aAAa,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC5C,GAAG,CAAC,IAAI,CAAC;QACP,aAAa,EAAE,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,IAAI;QAClD,YAAY,EAAE,IAAI;QAClB,aAAa;KACd,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/dist/server/utils/password.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+export declare function hashPassword(plaintext: string): Promise<string>;
+export declare function verifyPassword(plaintext: string, stored: string): Promise<boolean>;
+//# sourceMappingURL=password.d.ts.map

package/dist/server/utils/password.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../src/server/utils/password.ts"],"names":[],"mappings":"AAcA,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIrE;AAED,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CA6BxF"}

package/dist/server/utils/password.js ADDED Viewed

@@ -0,0 +1,46 @@
+import { randomBytes, scrypt as scryptCb, timingSafeEqual } from 'crypto';
+import { promisify } from 'util';
+const scrypt = promisify(scryptCb);
+const PARAMS = { N: 16384, r: 8, p: 1 };
+const KEYLEN = 64;
+const SALT_BYTES = 16;
+export async function hashPassword(plaintext) {
+    const salt = randomBytes(SALT_BYTES);
+    const derived = await scrypt(plaintext, salt, KEYLEN, PARAMS);
+    return `scrypt$N=${PARAMS.N},r=${PARAMS.r},p=${PARAMS.p}$${salt.toString('base64')}$${derived.toString('base64')}`;
+}
+export async function verifyPassword(plaintext, stored) {
+    const parts = stored.split('$');
+    if (parts.length !== 4 || parts[0] !== 'scrypt')
+        return false;
+    const params = {};
+    for (const kv of parts[1].split(',')) {
+        const [k, v] = kv.split('=');
+        const n = Number(v);
+        if (!Number.isFinite(n))
+            return false;
+        params[k] = n;
+    }
+    if (!params.N || !params.r || !params.p)
+        return false;
+    let salt;
+    let expected;
+    try {
+        salt = Buffer.from(parts[2], 'base64');
+        expected = Buffer.from(parts[3], 'base64');
+    }
+    catch {
+        return false;
+    }
+    if (expected.length === 0)
+        return false;
+    const derived = await scrypt(plaintext, salt, expected.length, {
+        N: params.N,
+        r: params.r,
+        p: params.p,
+    });
+    if (derived.length !== expected.length)
+        return false;
+    return timingSafeEqual(derived, expected);
+}
+//# sourceMappingURL=password.js.map

package/dist/server/utils/password.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"password.js","sourceRoot":"","sources":["../../../src/server/utils/password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,IAAI,QAAQ,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAKb,CAAC;AAErB,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;AACxC,MAAM,MAAM,GAAG,EAAE,CAAC;AAClB,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAiB;IAClD,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9D,OAAO,YAAY,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AACrH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,MAAc;IACpE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAEtD,IAAI,IAAY,CAAC;IACjB,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACvC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAExC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE;QAC7D,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,CAAC,EAAE,MAAM,CAAC,CAAC;KACZ,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACrD,OAAO,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC5C,CAAC"}

package/electron/main.cjs CHANGED Viewed

@@ -1,18 +1,17 @@
-const { app, BrowserWindow, dialog, shell, Menu, nativeTheme, clipboard } = require('electron');
+const { app, BrowserWindow, dialog, shell, Menu, nativeTheme } = require('electron');
 const path = require('node:path');
 const fs = require('node:fs');
 const net = require('node:net');
-const crypto = require('node:crypto');
 const { pathToFileURL } = require('node:url');
 let mainWindow = null;
 let serverPort = null;
-let serverPassword = null;
 let cleanupStarted = false;
 const userDataDir = app.getPath('userData');
 const configFile = path.join(userDataDir, 'config.json');
 const dbPath = path.join(userDataDir, 'clitrigger.db');
+const migratedFlag = path.join(userDataDir, '.password-migrated');
 function readOrInitConfig() {
   fs.mkdirSync(userDataDir, { recursive: true });
@@ -21,9 +20,13 @@ function readOrInitConfig() {
     try { config = JSON.parse(fs.readFileSync(configFile, 'utf-8')); } catch {}
   }
   let mutated = false;
-  if (!config.password) {
-    config.password = crypto.randomBytes(16).toString('hex');
+  // Password is set by the user on first launch via the web UI Setup screen.
+  // Legacy plaintext field is migrated to a hash on first server boot, then
+  // cleaned up here on the next launch via the migrated flag.
+  if (fs.existsSync(migratedFlag) && config.password) {
+    delete config.password;
     mutated = true;
+    try { fs.unlinkSync(migratedFlag); } catch { /* ignore */ }
   }
   if (typeof config.port !== 'number') {
     config.port = 3737;
@@ -75,12 +78,15 @@ function resolveServerEntry() {
 async function bootServer() {
   const config = readOrInitConfig();
-  serverPassword = config.password;
   serverPort = await findFreePort(config.port);
   process.env.PORT = String(serverPort);
-  process.env.AUTH_PASSWORD = config.password;
   process.env.DB_PATH = dbPath;
+  // Only forward a legacy plaintext password so the server can migrate it.
+  // Without it, the server enters setup mode and the web UI prompts the user.
+  if (config.password) {
+    process.env.AUTH_PASSWORD = config.password;
+  }
   if (config.tunnel) process.env.TUNNEL_ENABLED = 'true';
   if (config.tunnelName) process.env.TUNNEL_NAME = config.tunnelName;
   if (config.tunnelHostname) process.env.TUNNEL_HOSTNAME = config.tunnelHostname;
@@ -93,7 +99,7 @@ async function bootServer() {
   }
   await import(pathToFileURL(serverEntry).href);
   await waitForServer(serverPort);
-  return { port: serverPort, password: config.password };
+  return { port: serverPort };
 }
 function createWindow(port) {
@@ -103,6 +109,8 @@ function createWindow(port) {
     minWidth: 800,
     minHeight: 600,
     backgroundColor: nativeTheme.shouldUseDarkColors ? '#0f0f0f' : '#ffffff',
+    // Dev only — packaged build inherits the icon from the embedded .exe.
+    ...(app.isPackaged ? {} : { icon: path.join(__dirname, '..', 'build', 'icon.png') }),
     webPreferences: {
       preload: path.join(__dirname, 'preload.cjs'),
       contextIsolation: true,
@@ -133,21 +141,6 @@ function createWindow(port) {
   mainWindow.on('closed', () => { mainWindow = null; });
 }
-function showPasswordDialog() {
-  const result = dialog.showMessageBoxSync(mainWindow, {
-    type: 'info',
-    title: 'CLITrigger',
-    message: 'Login password',
-    detail: serverPassword,
-    buttons: ['Copy to clipboard', 'Close'],
-    defaultId: 0,
-    cancelId: 1,
-  });
-  if (result === 0 && serverPassword) {
-    clipboard.writeText(serverPassword);
-  }
-}
 function buildMenu() {
   const isMac = process.platform === 'darwin';
   const template = [
@@ -164,7 +157,6 @@ function buildMenu() {
     {
       label: 'Help',
       submenu: [
-        { label: 'Show login password', click: showPasswordDialog },
         { label: 'Open config folder', click: () => shell.openPath(userDataDir) },
         { type: 'separator' },
         {

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "clitrigger",
-  "version": "0.1.18",
+  "version": "0.2.0",
   "description": "Spawn isolated git worktrees and orchestrate Claude/Gemini/Codex CLI tasks in parallel from a web UI.",
   "keywords": [
     "claude",
@@ -61,7 +61,7 @@
     "docs:erd": "tsx scripts/generate-erd.ts",
     "docs:erd:check": "tsx scripts/generate-erd.ts --check",
     "postuninstall": "node bin/postuninstall.js",
-    "electron:rebuild": "electron-rebuild -o better-sqlite3",
+    "electron:rebuild": "electron-rebuild -o better-sqlite3 --force --build-from-source",
     "electron:dev": "npm run build && electron .",
     "electron:build": "npm run build && electron-builder",
     "electron:build:win": "npm run build && electron-builder --win",
@@ -102,6 +102,8 @@
     "electron": "^33.2.0",
     "electron-builder": "^25.1.8",
     "esbuild": "^0.27.0",
+    "png-to-ico": "^3.0.1",
+    "sharp": "^0.34.5",
     "tsx": "^4.19.0",
     "typescript": "^5.7.0",
     "vitest": "^4.1.1"
@@ -116,7 +118,8 @@
       {
         "provider": "github",
         "owner": "HyperAITeam",
-        "repo": "CLITrigger"
+        "repo": "CLITrigger",
+        "releaseType": "release"
       }
     ],
     "files": [
@@ -138,19 +141,43 @@
     "mac": {
       "category": "public.app-category.developer-tools",
       "target": [
-        { "target": "dmg", "arch": ["x64", "arm64"] },
-        { "target": "zip", "arch": ["x64", "arm64"] }
+        {
+          "target": "dmg",
+          "arch": [
+            "x64",
+            "arm64"
+          ]
+        },
+        {
+          "target": "zip",
+          "arch": [
+            "x64",
+            "arm64"
+          ]
+        }
       ]
     },
     "win": {
       "target": [
-        { "target": "nsis", "arch": ["x64"] },
-        { "target": "portable", "arch": ["x64"] }
+        {
+          "target": "nsis",
+          "arch": [
+            "x64"
+          ]
+        },
+        {
+          "target": "portable",
+          "arch": [
+            "x64"
+          ]
+        }
       ]
     },
     "linux": {
       "category": "Development",
-      "target": ["AppImage"]
+      "target": [
+        "AppImage"
+      ]
     },
     "nsis": {
       "oneClick": false,