fedipod-server 0.29.0 → 0.30.0

package/lib/shared/safefetch.mjs

@@ -1,235 +0,0 @@
-// safefetch.mjs — SSRF guard for every outbound request. The pod inbox is
-// public-Append, so ANY fediverse user can hand this agent URLs that it will
-// dereference (verify-by-deref) or deliver to. Without a filter those URLs
-// can name the machine's own services, the LAN, or cloud metadata.
-//
-// Policy: http/https only; the host must resolve exclusively to public
-// addresses; redirects are followed by hand so every hop is re-checked;
-// responses are size-capped. AP_ALLOW_PRIVATE_TARGETS=1 disables the address
-// check for local federation testing.
-
-import { USER_AGENT } from './ua.mjs';
-import dns from 'node:dns/promises';
-import net from 'node:net';
-
-const MAX_REDIRECTS = 3;
-const MAX_BYTES = 5 * 1024 * 1024;
-
-// ONE default, read from ONE place. It was 15s in publisher, 20s in intake and
-// other values again in the vendor grant, so "the timeout" meant four things
-// and AP_HTTP_TIMEOUT_MS moved some of them and not others.
-export const HTTP_TIMEOUT_MS = Number(process.env.AP_HTTP_TIMEOUT_MS) || 20_000;
-
-// Said once, loudly: with the flag on there is NO address check and NO pinning.
-if (process.env.AP_ALLOW_PRIVATE_TARGETS === '1') {
-  console.warn('safefetch: AP_ALLOW_PRIVATE_TARGETS=1 — SSRF protection is OFF. '
-    + 'Local federation testing only; never set this on a networked deployment.');
-}
-
-// A server answering 429 or 503 is asking to be left alone, and Retry-After
-// says for how long. Here rather than in remote.mjs because BOTH directions
-// need it: the pod has honoured it since the incident, and the outbound path
-// — the one that talks to other people's servers — did not.
-const COOLDOWN_DEFAULT_MS = 60_000;
-const COOLDOWN_MAX_MS = 30 * 60_000;
-
-// null when the server sent NO Retry-After. The caller decides what absence
-// means: the pod path falls back to its own 60s cooldown, and the delivery
-// queue keeps its exponential ladder — which is why this cannot just return a
-// default. Doing so collapsed the ladder to a flat 60s for every 503 without
-// the header, which is most of them.
-export function retryAfterMs(res, max = COOLDOWN_MAX_MS) {
-  const raw = res?.headers?.get?.('retry-after');
-  if (!raw) return null;
-  const secs = Number(raw);
-  if (Number.isFinite(secs)) return Math.min(Math.max(secs, 1) * 1000, max);
-  const when = Date.parse(raw);                       // HTTP-date form
-  if (Number.isFinite(when)) return Math.min(Math.max(when - Date.now(), 1000), max);
-  return null;
-}
-
-function isPrivateV4(ip) {
-  const [a, b] = ip.split('.').map(Number);
-  return a === 0 || a === 10 || a === 127
-    || (a === 169 && b === 254)                 // link-local + cloud metadata
-    || (a === 172 && b >= 16 && b <= 31)
-    || (a === 192 && b === 168)
-    || (a === 100 && b >= 64 && b <= 127)       // CGNAT
-    || (a === 192 && b === 0)                   // 192.0.0.0/24 special-use
-    || a >= 224;                                // multicast + reserved
-}
-
-function isPrivateV6(ip) {
-  const a = ip.toLowerCase();
-  if (a === '::' || a === '::1') return true;
-  if (/^fe[89ab]/.test(a)) return true;              // fe80::/10 link-local, all four nibbles
-  if (a.startsWith('fc') || a.startsWith('fd')) return true;                           // ULA
-  if (a.startsWith('fec0')) return true;             // deprecated site-local, still routed by some
-  if (a.startsWith('ff')) return true;               // multicast
-  // A v4-mapped address, in EITHER spelling. The dotted form was the only one
-  // matched, and it is the one that never arrives: the WHATWG URL parser
-  // normalises an IPv6 literal to compressed hex, so `[::ffff:127.0.0.1]` is
-  // handed to us as `::ffff:7f00:1` and walked straight past this filter — and
-  // with it every one of 127/8, 10/8, 172.16/12, 192.168/16 and 169.254/16.
-  // Canonicalise to the quad first, then classify once.
-  const dotted = a.match(/^::ffff:(\d+\.\d+\.\d+\.\d+)$/);
-  if (dotted) return isPrivateV4(dotted[1]);
-  const hex = a.match(/^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/);
-  if (hex) {
-    const [hi, lo] = [parseInt(hex[1], 16), parseInt(hex[2], 16)];
-    return isPrivateV4(`${hi >> 8}.${hi & 255}.${lo >> 8}.${lo & 255}`);
-  }
-  return false;
-}
-
-export function isPrivateAddress(ip) {
-  return net.isIPv4(ip) ? isPrivateV4(ip) : net.isIPv6(ip) ? isPrivateV6(ip) : true;
-}
-
-// Is this host the machine we are running on? Not a security check — the
-// operator typed this URL — but the one distinction that decides whether
-// plaintext is harmless. Loopback traffic never reaches a network interface,
-// so `http://localhost:8000/` crosses nothing and TLS would add nothing to it.
-// A LAN address is a different matter entirely: 192.168.1.50 is a real wire,
-// shared with every other device on it.
-const LOOPBACK_HOSTS = new Set(['localhost', '127.0.0.1', '[::1]', '::1']);
-export function isLoopbackHost(host) {
-  const h = String(host || '').toLowerCase().replace(/^\[|\]$/g, '');
-  if (LOOPBACK_HOSTS.has(h) || h === '[::1]') return true;
-  if (h.endsWith('.localhost')) return true;           // RFC 6761 reserves the whole label
-  return /^127\./.test(h);
-}
-
-/**
- * Refuse a pod, issuer or private-root address that would carry secrets in
- * clear over a real network. Returns a reason string, or null when acceptable.
- *
- * The pod URL is where the account password is exchanged for a credential and
- * where that credential is used from then on; the issuer is where the password
- * itself is posted. Nothing checked the scheme, so a typed `http://` sent both
- * in plaintext with no warning. Loopback is exempt because it cannot leak, and
- * because a pod on this machine is a documented, ordinary way to run this.
- */
-export function insecureUrlReason(url, what = 'address') {
-  if (!url) return null;
-  let u;
-  try { u = new URL(url); } catch { return `"${url}" is not a ${what}`; }
-  if (u.protocol === 'https:') return null;
-  if (u.protocol !== 'http:') return `the ${what} must be http(s), not ${u.protocol}`;
-  if (isLoopbackHost(u.hostname)) return null;         // never crosses a wire
-  return `refusing an unencrypted ${what}: ${u.origin} would send your password, `
-    + 'your credential and everything after it in clear over the network. '
-    + 'Use https:// — or a loopback address if the pod is on this machine.';
-}
-
-// Throws when the URL must not be requested; otherwise returns the
-// validated address to pin the connection to ({address, family}), or null
-// when the URL already names a literal IP.
-export async function assertPublicUrl(url) {
-  if (process.env.AP_ALLOW_PRIVATE_TARGETS === '1') return null;
-  let u;
-  try { u = new URL(url); } catch { throw new Error(`unparsable URL: ${url}`); }
-  if (u.protocol !== 'https:' && u.protocol !== 'http:') throw new Error(`blocked scheme: ${u.protocol}`);
-  const host = u.hostname.replace(/^\[|\]$/g, '');
-  if (net.isIP(host)) {
-    if (isPrivateAddress(host)) throw new Error(`blocked private address: ${host}`);
-    return null;
-  }
-  let addrs;
-  try { addrs = await dns.lookup(host, { all: true }); }
-  catch (e) { throw new Error(`DNS lookup failed for ${host}: ${e.message}`); }
-  if (!addrs.length) throw new Error(`no addresses for ${host}`);
-  // ALL addresses must be public — a name resolving to both public and
-  // private answers is a rebinding attempt.
-  for (const a of addrs) {
-    if (isPrivateAddress(a.address)) throw new Error(`blocked private address: ${host} → ${a.address}`);
-  }
-  return { address: addrs[0].address, family: addrs[0].family };
-}
-
-// Validating a hostname and then handing that NAME to fetch leaves a
-// rebinding window: the resolver can answer publicly for our check and
-// privately for the connection. Pinning the dispatcher's lookup to the
-// address we validated closes it, while TLS/SNI still see the real
-// hostname (so certificates verify normally).
-// Declared in package.json since 2026-08-03. It had been arriving as a
-// four-level transitive dependency of rdflib's, which meant the rebinding
-// protection below rested on a package nothing had asked for — and the catch
-// swallowed its absence, so losing it would have been silent. Say so instead:
-// the address check still runs, but the connection is no longer pinned to the
-// address that passed it.
-let Agent = null;
-try { ({ Agent } = await import('undici')); }
-catch {
-  console.warn('safefetch: undici is not available — addresses are still checked, '
-    + 'but connections are NOT pinned to the checked address, so a name that '
-    + 'resolves differently on the second lookup is not caught');
-}
-
-function pinnedDispatcher(address, family) {
-  if (!Agent) return undefined;
-  // The connect layer calls lookup either callback-style (err, address,
-  // family) or, with options.all, expecting an array of records.
-  const lookup = (_host, opts, cb) => (opts && opts.all
-    ? cb(null, [{ address, family }])
-    : cb(null, address, family));
-  return new Agent({ connect: { lookup } });
-}
-
-/** Resolve + validate, returning a dispatcher pinned to the checked address. */
-export async function pinnedFor(url) {
-  if (process.env.AP_ALLOW_PRIVATE_TARGETS === '1') return undefined;
-  const addr = await assertPublicUrl(url);
-  return addr ? pinnedDispatcher(addr.address, addr.family) : undefined;
-}
-
-/** Read a response body with a hard byte budget (streams are unbounded). */
-export async function readCapped(res, max = MAX_BYTES) {
-  const len = Number(res.headers?.get?.('content-length') || 0);
-  if (len > max) throw new Error(`response too large (${len} bytes)`);
-  if (!res.body) return await res.text();
-  const reader = res.body.getReader();
-  const chunks = [];
-  let total = 0;
-  for (;;) {
-    const { done, value } = await reader.read();
-    if (done) break;
-    total += value.length;
-    if (total > max) { await reader.cancel(); throw new Error(`response exceeded ${max} bytes`); }
-    chunks.push(value);
-  }
-  return Buffer.concat(chunks.map(Buffer.from)).toString('utf8');
-}
-
-/**
- * fetch() with the address policy applied to the initial URL and to every
- * redirect hop, the connection pinned to the validated address, and a
- * response size cap.
- * @param {string} url
- * @param {object} [init]         passed through to fetch
- * @param {function} [fetchImpl]  the actual fetch (e.g. a signing fetch);
- *                                receives (url, init) with the dispatcher set
- */
-export async function safeFetch(url, init = {}, fetchImpl = fetch) {
-  let current = url;
-  const withUa = { ...init, headers: { 'user-agent': USER_AGENT, ...(init.headers || {}) } };
-  for (let hop = 0; hop <= MAX_REDIRECTS; hop++) {
-    const dispatcher = await pinnedFor(current);
-    const res = await fetchImpl(current, {
-      ...withUa,
-      signal: init.signal || AbortSignal.timeout(HTTP_TIMEOUT_MS),
-      ...(dispatcher ? { dispatcher } : {}),
-      redirect: 'manual',
-    });
-    if (res.status >= 300 && res.status < 400) {
-      const loc = res.headers.get('location');
-      if (!loc) return res;
-      current = new URL(loc, current).href;
-      continue;
-    }
-    const len = Number(res.headers?.get?.('content-length') || 0);
-    if (len > MAX_BYTES) throw new Error(`response too large (${len} bytes) from ${current}`);
-    return res;
-  }
-  throw new Error(`too many redirects from ${url}`);
-}

package/lib/shared/ua.mjs

@@ -1,29 +0,0 @@
-// One User-Agent for everything this agent sends. An operator reading an access
-// log should be able to tell what we are and where to raise a complaint;
-// solidcommunity.net's 2026-07-29 report had to infer us from client-credential
-// names because every request identified itself only as "node".
-//
-// vendor/idp-grant.cjs builds the same string from package.json — it is
-// CommonJS and cannot import this.
-
-import fs from 'node:fs';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-// Best-effort: a bundled deploy (the Netlify functions) rewrites this file's
-// location and the relative path with it. A User-Agent must never be the
-// reason anything fails to start.
-let version = '0';
-try {
-  ({ version } = JSON.parse(fs.readFileSync(
-    path.join(path.dirname(fileURLToPath(import.meta.url)), '../../package.json'), 'utf8')));
-} catch {
-  try {
-    ({ version } = JSON.parse(fs.readFileSync(
-      path.join(process.cwd(), 'package.json'), 'utf8')));
-  } catch { /* keep '0' */ }
-}
-
-// Renamed 2026-07-31, once solidcommunity.net was back up and both actors there
-// were retired: the name in their logs no longer has to match the name in here.
-export const USER_AGENT = `fedipod/${version} (+https://github.com/jeff-zucker/FediPod)`;

package/phanpy/dist/404.html

@@ -1,40 +0,0 @@
-<!doctype html>
-<html lang="en">
-  <head>
-    <meta charset="UTF-8" />
-    <meta
-      name="viewport"
-      content="width=device-width, initial-scale=1, viewport-fit=cover"
-    />
-    <title>Page not found</title>
-    <meta name="color-scheme" content="light dark" />
-    <style>
-      body {
-        text-align: center;
-        font-family:
-          ui-rounded,
-          -apple-system,
-          BlinkMacSystemFont,
-          Segoe UI,
-          Roboto,
-          Ubuntu,
-          Cantarell,
-          Noto Sans,
-          sans-serif;
-        display: flex;
-        flex-direction: column;
-        justify-content: center;
-        align-items: center;
-        min-height: 100vh;
-      }
-      h1 {
-        margin: 0;
-        padding: 0;
-      }
-    </style>
-  </head>
-  <body>
-    <h1>Page not found</h1>
-    <p><a href="/">Go home</a></p>
-  </body>
-</html>

package/phanpy/dist/_headers

@@ -1,2 +0,0 @@
-/
-  Link: <assets/style-B1iLPTPR.css>; rel=preload; as=style

package/phanpy/dist/assets/ICONS-DIPJeU0C.js

@@ -1,2 +0,0 @@
-import{n as e}from"./chunk-aKtaBQYM.js";import{m as t}from"./pwa-viewport-ogKbF51K.js";var n=e({ICONS:()=>r}),r={x:()=>t(()=>import(`./icons/close-line-DYrFWcjv.js`),[],import.meta.url),heart:()=>t(()=>import(`./icons/heart-line-CJ7K47J4.js`),[],import.meta.url),bookmark:()=>t(()=>import(`./icons/bookmark-line-1CtX5JLF.js`),[],import.meta.url),"check-circle":()=>t(()=>import(`./icons/check-circle-line-DsAxFr5-.js`),[],import.meta.url),"x-circle":()=>t(()=>import(`./icons/close-circle-line-CICdiuGz.js`),[],import.meta.url),transfer:()=>t(()=>import(`./icons/transfer-4-line-oisfvTBw.js`),[],import.meta.url),rocket:()=>t(()=>import(`./icons/rocket-line-4KZl537D.js`),[],import.meta.url),"arrow-left":{module:()=>t(()=>import(`./icons/arrow-left-line-CGrGT9C-.js`),[],import.meta.url),rtl:!0},"arrow-right":{module:()=>t(()=>import(`./icons/arrow-right-line-CE-HERfX.js`),[],import.meta.url),rtl:!0},"arrow-up":()=>t(()=>import(`./icons/arrow-up-line-C7yBeugc.js`),[],import.meta.url),"arrow-down":()=>t(()=>import(`./icons/arrow-down-line-B8uzXzq6.js`),[],import.meta.url),earth:()=>t(()=>import(`./icons/world-2-line-CenkGIwj.js`),[],import.meta.url),lock:()=>t(()=>import(`./icons/lock-line-CPoaXeUW.js`),[],import.meta.url),unlock:()=>t(()=>import(`./icons/unlock-line-X_x5vwv3.js`),[],import.meta.url),"eye-close":()=>t(()=>import(`./icons/eye-close-line-BgTaSJ4P.js`),[],import.meta.url),"eye-open":()=>t(()=>import(`./icons/eye-2-line-CiWXx-f_.js`),[],import.meta.url),message:()=>t(()=>import(`./icons/mail-line-B0P8aa1L.js`),[],import.meta.url),comment:{module:()=>t(()=>import(`./icons/chat-3-line-YFK2-hwz.js`),[],import.meta.url),rtl:!0},comment2:{module:()=>t(()=>import(`./icons/comment-2-line-CR3g7WeB.js`),[],import.meta.url),rtl:!0},home:()=>t(()=>import(`./icons/home-3-line-fRU1zeLG.js`),[],import.meta.url),notification:()=>t(()=>import(`./icons/notification-line-BZZq2Gtu.js`),[],import.meta.url),follow:()=>t(()=>import(`./icons/user-follow-line-BXux0wSd.js`),[],import.meta.url),"follow-add":()=>t(()=>import(`./icons/user-add-line-BbXdHG4z.js`),[],import.meta.url),poll:[()=>t(()=>import(`./icons/chart-bar-line-FK-QOmtF.js`),[],import.meta.url),`90deg`],pencil:()=>t(()=>import(`./icons/pencil-line-CKh8-A1v.js`),[],import.meta.url),quill:()=>t(()=>import(`./icons/quill-pen-line-B6LUrnCP.js`),[],import.meta.url),at:()=>t(()=>import(`./icons/at-line-CF66Bznk.js`),[],import.meta.url),attachment:()=>t(()=>import(`./icons/attachment-line-BY8It-l9.js`),[],import.meta.url),upload:()=>t(()=>import(`./icons/upload-3-line-DgzwUJeW.js`),[],import.meta.url),gear:()=>t(()=>import(`./icons/settings-3-line-azJwK47w.js`),[],import.meta.url),more:()=>t(()=>import(`./icons/more-3-line-BIiVjYTz.js`),[],import.meta.url),more2:()=>t(()=>import(`./icons/more-1-fill-Dw2e5xab.js`),[],import.meta.url),external:{module:()=>t(()=>import(`./icons/external-link-line-BvpSkmjO.js`),[],import.meta.url),rtl:!0},popout:{module:()=>t(()=>import(`./icons/external-link-line-BvpSkmjO.js`),[],import.meta.url),rtl:!0},popin:{module:()=>t(()=>import(`./icons/external-link-line-BvpSkmjO.js`),[],import.meta.url),rotate:`180deg`,rtl:!0},plus:()=>t(()=>import(`./icons/add-circle-line-WD0mwORD.js`),[],import.meta.url),"chevron-left":{module:()=>t(()=>import(`./icons/left-line-eUw0tya4.js`),[],import.meta.url),rtl:!0},"chevron-right":{module:()=>t(()=>import(`./icons/right-line-B3KWJaqc.js`),[],import.meta.url),rtl:!0},"chevron-down":()=>t(()=>import(`./icons/down-line-BGqSSThd.js`),[],import.meta.url),reply:{module:()=>t(()=>import(`./icons/share-forward-line-Cp61fZzZ.js`),[],import.meta.url),rotate:`180deg`,flip:`horizontal`,rtl:!0},thread:()=>t(()=>import(`./icons/route-line-B28ReHcE.js`),[],import.meta.url),group:{module:()=>t(()=>import(`./icons/group-line-C5fnX0wU.js`),[],import.meta.url),rtl:!0},bot:()=>t(()=>import(`./icons/android-2-line-Bzxnrd3S.js`),[],import.meta.url),menu:()=>t(()=>import(`./icons/rows-4-line-CrBniagM.js`),[],import.meta.url),list:{module:()=>t(()=>import(`./icons/list-check-line-BAxosBh9.js`),[],import.meta.url),rtl:!0},search:()=>t(()=>import(`./icons/search-2-line-B6geIU1z.js`),[],import.meta.url),hashtag:()=>t(()=>import(`./icons/hashtag-line-CyTEEXBb.js`),[],import.meta.url),info:()=>t(()=>import(`./icons/information-line-iNk6-sOY.js`),[],import.meta.url),shortcut:()=>t(()=>import(`./icons/lightning-line-DaKoDdix.js`),[],import.meta.url),user:()=>t(()=>import(`./icons/user-4-line-BVSynZCp.js`),[],import.meta.url),following:()=>t(()=>import(`./icons/walk-line-yNXfB-md.js`),[],import.meta.url),pin:()=>t(()=>import(`./icons/pin-line-DpTolyhs.js`),[],import.meta.url),unpin:[()=>t(()=>import(`./icons/pin-line-DpTolyhs.js`),[],import.meta.url),`180deg`],bus:()=>t(()=>import(`./icons/bus-2-line-6_dvA0GG.js`),[],import.meta.url),link:()=>t(()=>import(`./icons/link-2-line-DCqLmMA7.js`),[],import.meta.url),history:()=>t(()=>import(`./icons/history-line-bGQiwbTH.js`),[],import.meta.url),share:()=>t(()=>import(`./icons/share-2-line-D5MxWjrm.js`),[],import.meta.url),sparkles:()=>t(()=>import(`./icons/sparkles-line-C2hY1s6I.js`),[],import.meta.url),sparkles2:()=>t(()=>import(`./icons/sparkles-2-line-DYYyXTaW.js`),[],import.meta.url),exit:{module:()=>t(()=>import(`./icons/exit-line-Dc07BS-x.js`),[],import.meta.url),rtl:!0},translate:()=>t(()=>import(`./icons/translate-line-BFWol2Ce.js`),[],import.meta.url),play:()=>t(()=>import(`./icons/play-fill-B0-G_8lX.js`),[],import.meta.url),trash:()=>t(()=>import(`./icons/delete-2-line-B8xmbr4n.js`),[],import.meta.url),mute:{module:()=>t(()=>import(`./icons/volume-mute-line-DzlzIqFZ.js`),[],import.meta.url),rtl:!0},unmute:{module:()=>t(()=>import(`./icons/volume-line-Bs390KQt.js`),[],import.meta.url),rtl:!0},block:()=>t(()=>import(`./icons/forbid-circle-line-D3LTT9yd.js`),[],import.meta.url),unblock:[()=>t(()=>import(`./icons/forbid-circle-line-D3LTT9yd.js`),[],import.meta.url),`180deg`],flag:()=>t(()=>import(`./icons/flag-1-line-C2HB05I0.js`),[],import.meta.url),time:()=>t(()=>import(`./icons/time-line-BF3eet1v.js`),[],import.meta.url),refresh:()=>t(()=>import(`./icons/refresh-2-line-D0mTF97S.js`),[],import.meta.url),emoji2:()=>t(()=>import(`./icons/emoji-2-line-D8YgnM-y.js`),[],import.meta.url),filter:()=>t(()=>import(`./icons/filter-2-line-B_mR2usy.js`),[],import.meta.url),filters:()=>t(()=>import(`./icons/filter-line-C_nm-3cU.js`),[],import.meta.url),chart:()=>t(()=>import(`./icons/chart-line-line-BGcJAFWw.js`),[],import.meta.url),react:()=>t(()=>import(`./icons/react-line-CoIKhhtK.js`),[],import.meta.url),layout4:{module:()=>t(()=>import(`./icons/layout-4-line-CZkOX52Z.js`),[],import.meta.url),rtl:!0},layout5:()=>t(()=>import(`./icons/layout-5-line-B_znt5wO.js`),[],import.meta.url),announce:{module:()=>t(()=>import(`./icons/announcement-line-5nwaJFJm.js`),[],import.meta.url),rtl:!0},alert:()=>t(()=>import(`./icons/alert-line-CpFUMf9s.js`),[],import.meta.url),round:()=>t(()=>import(`./icons/round-fill-C69NTrZ0.js`),[],import.meta.url),"round-line":()=>t(()=>import(`./icons/round-line-B9k_1uo-.js`),[],import.meta.url),"arrow-up-circle":()=>t(()=>import(`./icons/arrow-up-circle-line-DEparSNF.js`),[],import.meta.url),"arrow-down-circle":()=>t(()=>import(`./icons/arrow-down-circle-line-a7Id9-Iv.js`),[],import.meta.url),clipboard:{module:()=>t(()=>import(`./icons/clipboard-line-BBp364gJ.js`),[],import.meta.url),rtl:!0},"account-edit":()=>t(()=>import(`./icons/user-edit-line-BFAHOV0X.js`),[],import.meta.url),"account-warning":()=>t(()=>import(`./icons/user-warning-line-Cj43j0_E.js`),[],import.meta.url),"account-add":()=>t(()=>import(`./icons/user-add-2-line-BlGS5Q8q.js`),[],import.meta.url),keyboard:()=>t(()=>import(`./icons/keyboard-line-DsCyuQNz.js`),[],import.meta.url),cloud:()=>t(()=>import(`./icons/cloud-line-tiQAbah8.js`),[],import.meta.url),month:{module:()=>t(()=>import(`./icons/calendar-month-line-vommts2C.js`),[],import.meta.url),rtl:!0},media:()=>t(()=>import(`./icons/photo-album-line-Bnfg2u40.js`),[],import.meta.url),speak:()=>t(()=>import(`./icons/radar-line-CKyroTth.js`),[],import.meta.url),building:()=>t(()=>import(`./icons/building-5-line-Dd59MzbO.js`),[],import.meta.url),history2:{module:()=>t(()=>import(`./icons/history-2-line-kWWvFzqv.js`),[],import.meta.url),rtl:!0},document:()=>t(()=>import(`./icons/document-line-C7mb9sb7.js`),[],import.meta.url),"arrows-right":{module:()=>t(()=>import(`./icons/arrows-right-line-BtbXmJGP.js`),[],import.meta.url),rtl:!0},code:()=>t(()=>import(`./icons/code-line-fAl8iiV3.js`),[],import.meta.url),copy:()=>t(()=>import(`./icons/copy-2-line-CLW69yF5.js`),[],import.meta.url),quote:{module:()=>t(()=>import(`./icons/quote-left-fill-hQZ1cj_6.js`),[],import.meta.url),rtl:!0},quote2:{module:()=>t(()=>import(`./icons/blockquote-line-BS6pU_hm.js`),[],import.meta.url),rtl:!0},settings:()=>t(()=>import(`./icons/settings-6-line-C_5zc5YR.js`),[],import.meta.url),"heart-break":()=>t(()=>import(`./icons/heart-crack-line-BZddbO2C.js`),[],import.meta.url),"user-x":()=>t(()=>import(`./icons/user-x-line-DIDgNlPH.js`),[],import.meta.url),minimize:()=>t(()=>import(`./icons/down-line-BGqSSThd.js`),[],import.meta.url),celebrate:()=>t(()=>import(`./icons/celebrate-line-B8DvIoi0.js`),[],import.meta.url),schedule:()=>t(()=>import(`./icons/calendar-time-add-line-BU_DTlQk.js`),[],import.meta.url),day:()=>t(()=>import(`./icons/calendar-day-line-Crpl_fmu.js`),[],import.meta.url),camera:()=>t(()=>import(`./icons/camera-line-Cv69MEei.js`),[],import.meta.url),endorsement:{module:()=>t(()=>import(`./icons/user-star-line-DdYlpHLU.js`),[],import.meta.url),rtl:!0},formula:()=>t(()=>import(`./icons/formula-line-DLrt2d6j.js`),[],import.meta.url),edit:()=>t(()=>import(`./icons/edit-4-line-DcgGaEhx.js`),[],import.meta.url),"zoom-in":()=>t(()=>import(`./icons/zoom-in-line-CaENUphf.js`),[],import.meta.url),"zoom-out":()=>t(()=>import(`./icons/zoom-out-line-BDNk0EWo.js`),[],import.meta.url),"cursor-hand":()=>t(()=>import(`./icons/hand-finger-2-line-BGgxbuL9.js`),[],import.meta.url),qrcode:()=>t(()=>import(`./icons/qrcode-2-line-B6SPCaHn.js`),[],import.meta.url),scan:()=>t(()=>import(`./icons/scan-line-DSf74YdP.js`),[],import.meta.url),note:()=>t(()=>import(`./icons/document-3-line-DBGNhAg2.js`),[],import.meta.url),grid:()=>t(()=>import(`./icons/grid-line-CgUmEikf.js`),[],import.meta.url),moon:{module:()=>t(()=>import(`./icons/moon-line-CEqNAToP.js`),[],import.meta.url),flip:`horizontal`},"arrow-up-top":()=>t(()=>import(`./icons/arrow-to-up-line-CvdQjmcy.js`),[],import.meta.url),collections:()=>t(()=>import(`./icons/board-line-C0UWXyA6.js`),[],import.meta.url)};export{n,r as t};
-//# sourceMappingURL=ICONS-DIPJeU0C.js.map

package/phanpy/dist/assets/ICONS-DIPJeU0C.js.map

@@ -1 +0,0 @@
-{"version":3,"mappings":"8GAAaA,EAAQ,CACnBC,YAAS,OAAO,sDAChBC,gBAAa,OAAO,sDACpBC,mBAAgB,OAAO,yDACvB,yBACE,OAAO,6DACT,qBAAkB,OAAO,6DACzBC,mBAAgB,OAAO,2DACvBC,iBAAc,OAAO,uDACrB,aAAc,CACZC,iBAAc,OAAO,2DACrBC,IAAK,EACP,EACA,cAAe,CACbD,iBAAc,OAAO,4DACrBC,IAAK,EACP,EACA,qBAAkB,OAAO,yDACzB,uBAAoB,OAAO,2DAC3BC,gBAAa,OAAO,wDACpBC,eAAY,OAAO,qDACnBC,iBAAc,OAAO,uDACrB,sBAAmB,OAAO,0DAC1B,qBAAkB,OAAO,sDACzBC,kBAAe,OAAO,qDACtBC,QAAS,CACPN,iBAAc,OAAO,uDACrBC,IAAK,EACP,EACAM,SAAU,CACRP,iBAAc,OAAO,0DACrBC,IAAK,EACP,EACAO,eAAY,OAAO,uDACnBC,uBAAoB,OAAO,6DAC3BC,iBAAc,OAAO,4DACrB,uBAAoB,OAAO,yDAC3BC,KAAM,WAAO,OAAO,0DAAgD,OAAO,EAC3EC,iBAAc,OAAO,uDACrBC,gBAAa,OAAO,0DACpBC,aAAU,OAAO,mDACjBC,qBAAkB,OAAO,2DACzBC,iBAAc,OAAO,yDACrBC,eAAY,OAAO,2DACnBC,eAAY,OAAO,uDACnBC,gBAAa,OAAO,uDACpBC,SAAU,CACRpB,iBAAc,OAAO,8DACrBC,IAAK,EACP,EACAoB,OAAQ,CACNrB,iBAAc,OAAO,8DACrBC,IAAK,EACP,EACAqB,MAAO,CACLtB,iBAAc,OAAO,8DACrBuB,OAAQ,SACRtB,IAAK,EACP,EACAuB,eAAY,OAAO,2DACnB,eAAgB,CACdxB,iBAAc,OAAO,qDACrBC,IAAK,EACP,EACA,gBAAiB,CACfD,iBAAc,OAAO,sDACrBC,IAAK,EACP,EACA,yBAAsB,OAAO,qDAC7BwB,MAAO,CACLzB,iBAAc,OAAO,8DACrBuB,OAAQ,SACRG,KAAM,aACNzB,IAAK,EACP,EACA0B,iBAAc,OAAO,sDACrBC,MAAO,CACL5B,iBAAc,OAAO,sDACrBC,IAAK,EACP,EACA4B,cAAW,OAAO,0DAClBC,eAAY,OAAO,uDACnBC,KAAM,CACJ/B,iBAAc,OAAO,2DACrBC,IAAK,EACP,EACA+B,iBAAc,OAAO,yDACrBC,kBAAe,OAAO,wDACtBC,eAAY,OAAO,4DACnBC,mBAAgB,OAAO,0DACvBC,eAAY,OAAO,uDACnBC,oBAAiB,OAAO,qDACxBC,cAAW,OAAO,oDAClBC,MAAO,WAAO,OAAO,oDAA0C,QAAQ,EACvEC,cAAW,OAAO,sDAClBC,eAAY,OAAO,uDACnBC,kBAAe,OAAO,wDACtBC,gBAAa,OAAO,wDACpBC,mBAAgB,OAAO,yDACvBC,oBAAiB,OAAO,2DACxBC,KAAM,CACJ9C,iBAAc,OAAO,qDACrBC,IAAK,EACP,EACA8C,oBAAiB,OAAO,0DACxBC,eAAY,OAAO,qDACnBC,gBAAa,OAAO,yDACpBC,KAAM,CACJlD,iBAAc,OAAO,4DACrBC,IAAK,EACP,EACAkD,OAAQ,CACNnD,iBAAc,OAAO,uDACrBC,IAAK,EACP,EACAmD,gBAAa,OAAO,8DACpBC,QAAS,WACD,OAAO,8DACb,QAAQ,EAEVC,eAAY,OAAO,uDACnBC,eAAY,OAAO,qDACnBC,kBAAe,OAAO,0DACtBC,iBAAc,OAAO,wDACrBC,iBAAc,OAAO,yDACrBC,kBAAe,OAAO,uDACtBC,gBAAa,OAAO,2DACpBC,gBAAa,OAAO,sDACpBC,QAAS,CACP9D,iBAAc,OAAO,yDACrBC,IAAK,EACP,EACA8D,kBAAe,OAAO,yDACtBC,SAAU,CACRhE,iBAAc,OAAO,6DACrBC,IAAK,EACP,EACAgE,gBAAa,OAAO,sDACpBC,gBAAa,OAAO,sDACpB,uBAAoB,OAAO,sDAC3B,4BACE,OAAO,gEACT,8BACE,OAAO,kEACTC,UAAW,CACTnE,iBAAc,OAAO,0DACrBC,IAAK,EACP,EACA,yBAAsB,OAAO,0DAC7B,4BACE,OAAO,6DACT,wBAAqB,OAAO,2DAC5BmE,mBAAgB,OAAO,yDACvBC,gBAAa,OAAO,sDACpBC,MAAO,CACLtE,iBAAc,OAAO,+DACrBC,IAAK,EACP,EACAsE,gBAAa,OAAO,4DACpBC,gBAAa,OAAO,sDACpBC,mBAAgB,OAAO,2DACvBC,SAAU,CACR1E,iBAAc,OAAO,0DACrBC,IAAK,EACP,EACA0E,mBAAgB,OAAO,yDACvB,eAAgB,CACd3E,iBAAc,OAAO,6DACrBC,IAAK,EACP,EACA2E,eAAY,OAAO,qDACnBC,eAAY,OAAO,uDACnBC,MAAO,CACL9E,iBAAc,OAAO,2DACrBC,IAAK,EACP,EACA8E,OAAQ,CACN/E,iBAAc,OAAO,2DACrBC,IAAK,EACP,EACA+E,mBAAgB,OAAO,2DACvB,wBAAqB,OAAO,4DAC5B,mBAAgB,OAAO,uDACvBC,mBAAgB,OAAO,qDACvBC,oBAAiB,OAAO,0DACxBC,mBAAgB,OAAO,kEACvBC,cAAW,OAAO,6DAClBC,iBAAc,OAAO,uDACrBC,YAAa,CACXtF,iBAAc,OAAO,0DACrBC,IAAK,EACP,EACAsF,kBAAe,OAAO,wDACtBC,eAAY,OAAO,uDACnB,oBAAiB,OAAO,wDACxB,qBAAkB,OAAO,yDACzB,wBACE,OAAO,8DACTC,iBAAc,OAAO,yDACrBC,eAAY,OAAO,qDACnBC,eAAY,OAAO,2DACnBC,eAAY,OAAO,qDACnBC,KAAM,CACJ7F,iBAAc,OAAO,qDACrB0B,KAAM,YACR,EACA,yBAAsB,OAAO,4DAC7BoE,sBAAmB,OAAO,qDAC5B","names":["ICONS","x","heart","bookmark","transfer","rocket","module","rtl","earth","lock","unlock","message","comment","comment2","home","notification","follow","poll","pencil","quill","at","attachment","upload","gear","more","more2","external","popout","popin","rotate","plus","reply","flip","thread","group","bot","menu","list","search","hashtag","info","shortcut","user","following","pin","unpin","bus","link","history","share","sparkles","sparkles2","exit","translate","play","trash","mute","unmute","block","unblock","flag","time","refresh","emoji2","filter","filters","chart","react","layout4","layout5","announce","alert","round","clipboard","keyboard","cloud","month","media","speak","building","history2","document","code","copy","quote","quote2","settings","minimize","celebrate","schedule","day","camera","endorsement","formula","edit","qrcode","scan","note","grid","moon","collections"],"ignoreList":[],"sources":["../../src/components/ICONS.jsx"],"sourcesContent":["export const ICONS = {\n  x: () => import('../iconify-icons/mingcute/close-line.js'),\n  heart: () => import('../iconify-icons/mingcute/heart-line.js'),\n  bookmark: () => import('../iconify-icons/mingcute/bookmark-line.js'),\n  'check-circle': () =>\n    import('../iconify-icons/mingcute/check-circle-line.js'),\n  'x-circle': () => import('../iconify-icons/mingcute/close-circle-line.js'),\n  transfer: () => import('../iconify-icons/mingcute/transfer-4-line.js'),\n  rocket: () => import('../iconify-icons/mingcute/rocket-line.js'),\n  'arrow-left': {\n    module: () => import('../iconify-icons/mingcute/arrow-left-line.js'),\n    rtl: true,\n  },\n  'arrow-right': {\n    module: () => import('../iconify-icons/mingcute/arrow-right-line.js'),\n    rtl: true,\n  },\n  'arrow-up': () => import('../iconify-icons/mingcute/arrow-up-line.js'),\n  'arrow-down': () => import('../iconify-icons/mingcute/arrow-down-line.js'),\n  earth: () => import('../iconify-icons/mingcute/world-2-line.js'),\n  lock: () => import('../iconify-icons/mingcute/lock-line.js'),\n  unlock: () => import('../iconify-icons/mingcute/unlock-line.js'),\n  'eye-close': () => import('../iconify-icons/mingcute/eye-close-line.js'),\n  'eye-open': () => import('../iconify-icons/mingcute/eye-2-line.js'),\n  message: () => import('../iconify-icons/mingcute/mail-line.js'),\n  comment: {\n    module: () => import('../iconify-icons/mingcute/chat-3-line.js'),\n    rtl: true,\n  },\n  comment2: {\n    module: () => import('../iconify-icons/mingcute/comment-2-line.js'),\n    rtl: true,\n  },\n  home: () => import('../iconify-icons/mingcute/home-3-line.js'),\n  notification: () => import('../iconify-icons/mingcute/notification-line.js'),\n  follow: () => import('../iconify-icons/mingcute/user-follow-line.js'),\n  'follow-add': () => import('../iconify-icons/mingcute/user-add-line.js'),\n  poll: [() => import('../iconify-icons/mingcute/chart-bar-line.js'), '90deg'],\n  pencil: () => import('../iconify-icons/mingcute/pencil-line.js'),\n  quill: () => import('../iconify-icons/mingcute/quill-pen-line.js'),\n  at: () => import('../iconify-icons/mingcute/at-line.js'),\n  attachment: () => import('../iconify-icons/mingcute/attachment-line.js'),\n  upload: () => import('../iconify-icons/mingcute/upload-3-line.js'),\n  gear: () => import('../iconify-icons/mingcute/settings-3-line.js'),\n  more: () => import('../iconify-icons/mingcute/more-3-line.js'),\n  more2: () => import('../iconify-icons/mingcute/more-1-fill.js'),\n  external: {\n    module: () => import('../iconify-icons/mingcute/external-link-line.js'),\n    rtl: true,\n  },\n  popout: {\n    module: () => import('../iconify-icons/mingcute/external-link-line.js'),\n    rtl: true,\n  },\n  popin: {\n    module: () => import('../iconify-icons/mingcute/external-link-line.js'),\n    rotate: '180deg',\n    rtl: true,\n  },\n  plus: () => import('../iconify-icons/mingcute/add-circle-line.js'),\n  'chevron-left': {\n    module: () => import('../iconify-icons/mingcute/left-line.js'),\n    rtl: true,\n  },\n  'chevron-right': {\n    module: () => import('../iconify-icons/mingcute/right-line.js'),\n    rtl: true,\n  },\n  'chevron-down': () => import('../iconify-icons/mingcute/down-line.js'),\n  reply: {\n    module: () => import('../iconify-icons/mingcute/share-forward-line.js'),\n    rotate: '180deg',\n    flip: 'horizontal',\n    rtl: true,\n  },\n  thread: () => import('../iconify-icons/mingcute/route-line.js'),\n  group: {\n    module: () => import('../iconify-icons/mingcute/group-line.js'),\n    rtl: true,\n  },\n  bot: () => import('../iconify-icons/mingcute/android-2-line.js'),\n  menu: () => import('../iconify-icons/mingcute/rows-4-line.js'),\n  list: {\n    module: () => import('../iconify-icons/mingcute/list-check-line.js'),\n    rtl: true,\n  },\n  search: () => import('../iconify-icons/mingcute/search-2-line.js'),\n  hashtag: () => import('../iconify-icons/mingcute/hashtag-line.js'),\n  info: () => import('../iconify-icons/mingcute/information-line.js'),\n  shortcut: () => import('../iconify-icons/mingcute/lightning-line.js'),\n  user: () => import('../iconify-icons/mingcute/user-4-line.js'),\n  following: () => import('../iconify-icons/mingcute/walk-line.js'),\n  pin: () => import('../iconify-icons/mingcute/pin-line.js'),\n  unpin: [() => import('../iconify-icons/mingcute/pin-line.js'), '180deg'],\n  bus: () => import('../iconify-icons/mingcute/bus-2-line.js'),\n  link: () => import('../iconify-icons/mingcute/link-2-line.js'),\n  history: () => import('../iconify-icons/mingcute/history-line.js'),\n  share: () => import('../iconify-icons/mingcute/share-2-line.js'),\n  sparkles: () => import('../iconify-icons/mingcute/sparkles-line.js'),\n  sparkles2: () => import('../iconify-icons/mingcute/sparkles-2-line.js'),\n  exit: {\n    module: () => import('../iconify-icons/mingcute/exit-line.js'),\n    rtl: true,\n  },\n  translate: () => import('../iconify-icons/mingcute/translate-line.js'),\n  play: () => import('../iconify-icons/mingcute/play-fill.js'),\n  trash: () => import('../iconify-icons/mingcute/delete-2-line.js'),\n  mute: {\n    module: () => import('../iconify-icons/mingcute/volume-mute-line.js'),\n    rtl: true,\n  },\n  unmute: {\n    module: () => import('../iconify-icons/mingcute/volume-line.js'),\n    rtl: true,\n  },\n  block: () => import('../iconify-icons/mingcute/forbid-circle-line.js'),\n  unblock: [\n    () => import('../iconify-icons/mingcute/forbid-circle-line.js'),\n    '180deg',\n  ],\n  flag: () => import('../iconify-icons/mingcute/flag-1-line.js'),\n  time: () => import('../iconify-icons/mingcute/time-line.js'),\n  refresh: () => import('../iconify-icons/mingcute/refresh-2-line.js'),\n  emoji2: () => import('../iconify-icons/mingcute/emoji-2-line.js'),\n  filter: () => import('../iconify-icons/mingcute/filter-2-line.js'),\n  filters: () => import('../iconify-icons/mingcute/filter-line.js'),\n  chart: () => import('../iconify-icons/mingcute/chart-line-line.js'),\n  react: () => import('../iconify-icons/mingcute/react-line.js'),\n  layout4: {\n    module: () => import('../iconify-icons/mingcute/layout-4-line.js'),\n    rtl: true,\n  },\n  layout5: () => import('../iconify-icons/mingcute/layout-5-line.js'),\n  announce: {\n    module: () => import('../iconify-icons/mingcute/announcement-line.js'),\n    rtl: true,\n  },\n  alert: () => import('../iconify-icons/mingcute/alert-line.js'),\n  round: () => import('../iconify-icons/mingcute/round-fill.js'),\n  'round-line': () => import('../iconify-icons/mingcute/round-line.js'),\n  'arrow-up-circle': () =>\n    import('../iconify-icons/mingcute/arrow-up-circle-line.js'),\n  'arrow-down-circle': () =>\n    import('../iconify-icons/mingcute/arrow-down-circle-line.js'),\n  clipboard: {\n    module: () => import('../iconify-icons/mingcute/clipboard-line.js'),\n    rtl: true,\n  },\n  'account-edit': () => import('../iconify-icons/mingcute/user-edit-line.js'),\n  'account-warning': () =>\n    import('../iconify-icons/mingcute/user-warning-line.js'),\n  'account-add': () => import('../iconify-icons/mingcute/user-add-2-line.js'),\n  keyboard: () => import('../iconify-icons/mingcute/keyboard-line.js'),\n  cloud: () => import('../iconify-icons/mingcute/cloud-line.js'),\n  month: {\n    module: () => import('../iconify-icons/mingcute/calendar-month-line.js'),\n    rtl: true,\n  },\n  media: () => import('../iconify-icons/mingcute/photo-album-line.js'),\n  speak: () => import('../iconify-icons/mingcute/radar-line.js'),\n  building: () => import('../iconify-icons/mingcute/building-5-line.js'),\n  history2: {\n    module: () => import('../iconify-icons/mingcute/history-2-line.js'),\n    rtl: true,\n  },\n  document: () => import('../iconify-icons/mingcute/document-line.js'),\n  'arrows-right': {\n    module: () => import('../iconify-icons/mingcute/arrows-right-line.js'),\n    rtl: true,\n  },\n  code: () => import('../iconify-icons/mingcute/code-line.js'),\n  copy: () => import('../iconify-icons/mingcute/copy-2-line.js'),\n  quote: {\n    module: () => import('../iconify-icons/mingcute/quote-left-fill.js'),\n    rtl: true,\n  },\n  quote2: {\n    module: () => import('../iconify-icons/mingcute/blockquote-line.js'),\n    rtl: true,\n  },\n  settings: () => import('../iconify-icons/mingcute/settings-6-line.js'),\n  'heart-break': () => import('../iconify-icons/mingcute/heart-crack-line.js'),\n  'user-x': () => import('../iconify-icons/mingcute/user-x-line.js'),\n  minimize: () => import('../iconify-icons/mingcute/down-line.js'),\n  celebrate: () => import('../iconify-icons/mingcute/celebrate-line.js'),\n  schedule: () => import('../iconify-icons/mingcute/calendar-time-add-line.js'),\n  day: () => import('../iconify-icons/mingcute/calendar-day-line.js'),\n  camera: () => import('../iconify-icons/mingcute/camera-line.js'),\n  endorsement: {\n    module: () => import('../iconify-icons/mingcute/user-star-line.js'),\n    rtl: true,\n  },\n  formula: () => import('../iconify-icons/mingcute/formula-line.js'),\n  edit: () => import('../iconify-icons/mingcute/edit-4-line.js'),\n  'zoom-in': () => import('../iconify-icons/mingcute/zoom-in-line.js'),\n  'zoom-out': () => import('../iconify-icons/mingcute/zoom-out-line.js'),\n  'cursor-hand': () =>\n    import('../iconify-icons/mingcute/hand-finger-2-line.js'),\n  qrcode: () => import('../iconify-icons/mingcute/qrcode-2-line.js'),\n  scan: () => import('../iconify-icons/mingcute/scan-line.js'),\n  note: () => import('../iconify-icons/mingcute/document-3-line.js'),\n  grid: () => import('../iconify-icons/mingcute/grid-line.js'),\n  moon: {\n    module: () => import('../iconify-icons/mingcute/moon-line.js'),\n    flip: 'horizontal',\n  },\n  'arrow-up-top': () => import('../iconify-icons/mingcute/arrow-to-up-line.js'),\n  collections: () => import('../iconify-icons/mingcute/board-line.js'),\n};\n"],"file":"ICONS-DIPJeU0C.js"}