hfs 0.52.5 → 0.53.0-alpha2

package/frontend/assets/polyfills-legacy-DMrMt_pQ.js

@@ -0,0 +1,4 @@
+!function(){"use strict";var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};
+/*!
+	 * SJS 6.15.1
+	 */!function(){function t(e,t){return(t||"")+" (SystemJS https://github.com/systemjs/systemjs/blob/main/docs/errors.md#"+e+")"}function n(e,t){if(-1!==e.indexOf("\\")&&(e=e.replace(b,"/")),"/"===e[0]&&"/"===e[1])return t.slice(0,t.indexOf(":")+1)+e;if("."===e[0]&&("/"===e[1]||"."===e[1]&&("/"===e[2]||2===e.length&&(e+="/"))||1===e.length&&(e+="/"))||"/"===e[0]){var n,r=t.slice(0,t.indexOf(":")+1);if(n="/"===t[r.length+1]?"file:"!==r?(n=t.slice(r.length+2)).slice(n.indexOf("/")+1):t.slice(8):t.slice(r.length+("/"===t[r.length])),"/"===e[0])return t.slice(0,t.length-n.length-1)+e;for(var i=n.slice(0,n.lastIndexOf("/")+1)+e,o=[],s=-1,c=0;c<i.length;c++)-1!==s?"/"===i[c]&&(o.push(i.slice(s,c+1)),s=-1):"."===i[c]?"."!==i[c+1]||"/"!==i[c+2]&&c+2!==i.length?"/"===i[c+1]||c+1===i.length?c+=1:s=c:(o.pop(),c+=2):s=c;return-1!==s&&o.push(i.slice(s)),t.slice(0,t.length-n.length)+o.join("")}}function r(e,t){return n(e,t)||(-1!==e.indexOf(":")?e:n("./"+e,t))}function i(e,t,r,i,o){for(var s in e){var c=n(s,r)||s,a=e[s];if("string"==typeof a){var l=f(i,n(a,r)||a,o);l?t[c]=l:u("W1",s,a)}}}function o(e,t,n){var o;for(o in e.imports&&i(e.imports,n.imports,t,n,null),e.scopes||{}){var s=r(o,t);i(e.scopes[o],n.scopes[s]||(n.scopes[s]={}),t,n,s)}for(o in e.depcache||{})n.depcache[r(o,t)]=e.depcache[o];for(o in e.integrity||{})n.integrity[r(o,t)]=e.integrity[o]}function s(e,t){if(t[e])return e;var n=e.length;do{var r=e.slice(0,n+1);if(r in t)return r}while(-1!==(n=e.lastIndexOf("/",n-1)))}function c(e,t){var n=s(e,t);if(n){var r=t[n];if(null===r)return;if(!(e.length>n.length&&"/"!==r[r.length-1]))return r+e.slice(n.length);u("W2",n,r)}}function u(e,n,r){console.warn(t(e,[r,n].join(", ")))}function f(e,t,n){for(var r=e.scopes,i=n&&s(n,r);i;){var o=c(t,r[i]);if(o)return o;i=s(i.slice(0,i.lastIndexOf("/")),r)}return c(t,e.imports)||-1!==t.indexOf(":")&&t}function a(){this[P]={}}function l(e,n,r,i){var o=e[P][n];if(o)return o;var s=[],c=Object.create(null);j&&Object.defineProperty(c,j,{value:"Module"});var u=Promise.resolve().then((function(){return e.instantiate(n,r,i)})).then((function(r){if(!r)throw Error(t(2,n));var i=r[1]((function(e,t){o.h=!0;var n=!1;if("string"==typeof e)e in c&&c[e]===t||(c[e]=t,n=!0);else{for(var r in e)t=e[r],r in c&&c[r]===t||(c[r]=t,n=!0);e&&e.__esModule&&(c.__esModule=e.__esModule)}if(n)for(var i=0;i<s.length;i++){var u=s[i];u&&u(c)}return t}),2===r[1].length?{import:function(t,r){return e.import(t,n,r)},meta:e.createContext(n)}:void 0);return o.e=i.execute||function(){},[r[0],i.setters||[],r[2]||[]]}),(function(e){throw o.e=null,o.er=e,e})),f=u.then((function(t){return Promise.all(t[0].map((function(r,i){var o=t[1][i],s=t[2][i];return Promise.resolve(e.resolve(r,n)).then((function(t){var r=l(e,t,n,s);return Promise.resolve(r.I).then((function(){return o&&(r.i.push(o),!r.h&&r.I||o(r.n)),r}))}))}))).then((function(e){o.d=e}))}));return o=e[P][n]={id:n,i:s,n:c,m:i,I:u,L:f,h:!1,d:void 0,e:void 0,er:void 0,E:void 0,C:void 0,p:void 0}}function h(e,t,n,r){if(!r[t.id])return r[t.id]=!0,Promise.resolve(t.L).then((function(){return t.p&&null!==t.p.e||(t.p=n),Promise.all(t.d.map((function(t){return h(e,t,n,r)})))})).catch((function(e){if(t.er)throw e;throw t.e=null,e}))}function d(e,t){return t.C=h(e,t,t,{}).then((function(){return p(e,t,{})})).then((function(){return t.n}))}function p(e,t,n){function r(){try{var e=o.call(L);if(e)return e=e.then((function(){t.C=t.n,t.E=null}),(function(e){throw t.er=e,t.E=null,e})),t.E=e;t.C=t.n,t.L=t.I=void 0}catch(n){throw t.er=n,n}}if(!n[t.id]){if(n[t.id]=!0,!t.e){if(t.er)throw t.er;return t.E?t.E:void 0}var i,o=t.e;return t.e=null,t.d.forEach((function(r){try{var o=p(e,r,n);o&&(i=i||[]).push(o)}catch(c){throw t.er=c,c}})),i?Promise.all(i).then(r):r()}}function v(){[].forEach.call(document.querySelectorAll("script"),(function(e){if(!e.sp)if("systemjs-module"===e.type){if(e.sp=!0,!e.src)return;System.import("import:"===e.src.slice(0,7)?e.src.slice(7):r(e.src,m)).catch((function(t){if(t.message.indexOf("https://github.com/systemjs/systemjs/blob/main/docs/errors.md#3")>-1){var n=document.createEvent("Event");n.initEvent("error",!1,!1),e.dispatchEvent(n)}return Promise.reject(t)}))}else if("systemjs-importmap"===e.type){e.sp=!0;var n=e.src?(System.fetch||fetch)(e.src,{integrity:e.integrity,priority:e.fetchPriority,passThrough:!0}).then((function(e){if(!e.ok)throw Error(e.status);return e.text()})).catch((function(n){return n.message=t("W4",e.src)+"\n"+n.message,console.warn(n),"function"==typeof e.onerror&&e.onerror(),"{}"})):e.innerHTML;T=T.then((function(){return n})).then((function(n){!function(e,n,r){var i={};try{i=JSON.parse(n)}catch(c){console.warn(Error(t("W5")))}o(i,r,e)}(R,n,e.src||m)}))}}))}var m,g="undefined"!=typeof Symbol,y="undefined"!=typeof self,w="undefined"!=typeof document,E=y?self:e;if(w){var O=document.querySelector("base[href]");O&&(m=O.href)}if(!m&&"undefined"!=typeof location){var x=(m=location.href.split("#")[0].split("?")[0]).lastIndexOf("/");-1!==x&&(m=m.slice(0,x+1))}var S,b=/\\/g,j=g&&Symbol.toStringTag,P=g?Symbol():"@",I=a.prototype;I.import=function(e,t,n){var r=this;return t&&"object"==typeof t&&(n=t,t=void 0),Promise.resolve(r.prepareImport()).then((function(){return r.resolve(e,t,n)})).then((function(e){var t=l(r,e,void 0,n);return t.C||d(r,t)}))},I.createContext=function(e){var t=this;return{url:e,resolve:function(n,r){return Promise.resolve(t.resolve(n,r||e))}}},I.register=function(e,t,n){S=[e,t,n]},I.getRegister=function(){var e=S;return S=void 0,e};var L=Object.freeze(Object.create(null));E.System=new a;var C,M,T=Promise.resolve(),R={imports:{},scopes:{},depcache:{},integrity:{}},_=w;if(I.prepareImport=function(e){return(_||e)&&(v(),_=!1),T},I.getImportMap=function(){return JSON.parse(JSON.stringify(R))},w&&(v(),window.addEventListener("DOMContentLoaded",v)),I.addImportMap=function(e,t){o(e,t||m,R)},w){window.addEventListener("error",(function(e){W=e.filename,q=e.error}));var J=location.origin}I.createScript=function(e){var t=document.createElement("script");t.async=!0,e.indexOf(J+"/")&&(t.crossOrigin="anonymous");var n=R.integrity[e];return n&&(t.integrity=n),t.src=e,t};var W,q,N={},k=I.register;I.register=function(e,t){if(w&&"loading"===document.readyState&&"string"!=typeof e){var n=document.querySelectorAll("script[src]"),r=n[n.length-1];if(r){C=e;var i=this;M=setTimeout((function(){N[r.src]=[e,t],i.import(r.src)}))}}else C=void 0;return k.call(this,e,t)},I.instantiate=function(e,n){var r=N[e];if(r)return delete N[e],r;var i=this;return Promise.resolve(I.createScript(e)).then((function(r){return new Promise((function(o,s){r.addEventListener("error",(function(){s(Error(t(3,[e,n].join(", "))))})),r.addEventListener("load",(function(){if(document.head.removeChild(r),W===e)s(q);else{var t=i.getRegister(e);t&&t[0]===C&&clearTimeout(M),o(t)}})),document.head.appendChild(r)}))}))},I.shouldFetch=function(){return!1},"undefined"!=typeof fetch&&(I.fetch=fetch);var A=I.instantiate,F=/^(text|application)\/(x-)?javascript(;|$)/;I.instantiate=function(e,n,r){var i=this;return this.shouldFetch(e,n,r)?this.fetch(e,{credentials:"same-origin",integrity:R.integrity[e],meta:r}).then((function(r){if(!r.ok)throw Error(t(7,[r.status,r.statusText,e,n].join(", ")));var o=r.headers.get("content-type");if(!o||!F.test(o))throw Error(t(4,o));return r.text().then((function(t){return t.indexOf("//# sourceURL=")<0&&(t+="\n//# sourceURL="+e),(0,eval)(t),i.getRegister(e)}))})):A.apply(this,arguments)},I.resolve=function(e,r){return f(R,n(e,r=r||m)||e,r)||function(e,n){throw Error(t(8,[e,n].join(", ")))}(e,r)};var U=I.instantiate;I.instantiate=function(e,t,n){var r=R.depcache[e];if(r)for(var i=0;i<r.length;i++)l(this,this.resolve(r[i],e),e);return U.call(this,e,t,n)},y&&"function"==typeof importScripts&&(I.instantiate=function(e){var t=this;return Promise.resolve().then((function(){return importScripts(e),t.getRegister(e)}))})}()}();

package/frontend/assets/sha512-legacy-DYmEZJfO.js

@@ -0,0 +1,9 @@
+System.register(["./index-legacy-C21Ot_ue.js"],(function(h,t){"use strict";var i,s;return{setters:[function(h){i=h.g,s=h.c}],execute:function(){function t(h,t){for(var i=function(){var i=t[s];if("string"!=typeof i&&!Array.isArray(i)){var r=function(t){if("default"!==t&&!(t in h)){var s=Object.getOwnPropertyDescriptor(i,t);s&&Object.defineProperty(h,t,s.get?s:{enumerable:!0,get:function(){return i[t]}})}};for(var e in i)r(e)}},s=0;s<t.length;s++)i();return Object.freeze(Object.defineProperty(h,Symbol.toStringTag,{value:"Module"}))}var r={exports:{}};
+/*
+       * [js-sha512]{@link https://github.com/emn178/js-sha512}
+       *
+       * @version 0.8.0
+       * @author Chen, Yi-Cyuan [emn178@gmail.com]
+       * @copyright Chen, Yi-Cyuan 2014-2018
+       * @license MIT
+       */!function(h){!function(){var t="input is invalid type",i="object"==typeof window,r=i?window:{};r.JS_SHA512_NO_WINDOW&&(i=!1);var e=!i&&"object"==typeof self;!r.JS_SHA512_NO_NODE_JS&&"object"==typeof process&&process.versions&&process.versions.node?r=s:e&&(r=self);var n=!r.JS_SHA512_NO_COMMON_JS&&h.exports,o=!r.JS_SHA512_NO_ARRAY_BUFFER&&"undefined"!=typeof ArrayBuffer,a="0123456789abcdef".split(""),l=[-2147483648,8388608,32768,128],f=[24,16,8,0],c=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591],u=["hex","array","digest","arrayBuffer"],y=[];!r.JS_SHA512_NO_NODE_JS&&Array.isArray||(Array.isArray=function(h){return"[object Array]"===Object.prototype.toString.call(h)}),!o||!r.JS_SHA512_NO_ARRAY_BUFFER_IS_VIEW&&ArrayBuffer.isView||(ArrayBuffer.isView=function(h){return"object"==typeof h&&h.buffer&&h.buffer.constructor===ArrayBuffer});var p=function(h,t){return function(i){return new _(t,!0).update(i)[h]()}},d=function(h){var t=p("hex",h);t.create=function(){return new _(h)},t.update=function(h){return t.create().update(h)};for(var i=0;i<u.length;++i){var s=u[i];t[s]=p(s,h)}return t},b=function(h,t){return function(i,s){return new w(i,t,!0).update(s)[h]()}},v=function(h){var t=b("hex",h);t.create=function(t){return new w(t,h)},t.update=function(h,i){return t.create(h).update(i)};for(var i=0;i<u.length;++i){var s=u[i];t[s]=b(s,h)}return t};function _(h,t){t?(y[0]=y[1]=y[2]=y[3]=y[4]=y[5]=y[6]=y[7]=y[8]=y[9]=y[10]=y[11]=y[12]=y[13]=y[14]=y[15]=y[16]=y[17]=y[18]=y[19]=y[20]=y[21]=y[22]=y[23]=y[24]=y[25]=y[26]=y[27]=y[28]=y[29]=y[30]=y[31]=y[32]=0,this.blocks=y):this.blocks=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],384==h?(this.h0h=3418070365,this.h0l=3238371032,this.h1h=1654270250,this.h1l=914150663,this.h2h=2438529370,this.h2l=812702999,this.h3h=355462360,this.h3l=4144912697,this.h4h=1731405415,this.h4l=4290775857,this.h5h=2394180231,this.h5l=1750603025,this.h6h=3675008525,this.h6l=1694076839,this.h7h=1203062813,this.h7l=3204075428):256==h?(this.h0h=573645204,this.h0l=4230739756,this.h1h=2673172387,this.h1l=3360449730,this.h2h=596883563,this.h2l=1867755857,this.h3h=2520282905,this.h3l=1497426621,this.h4h=2519219938,this.h4l=2827943907,this.h5h=3193839141,this.h5l=1401305490,this.h6h=721525244,this.h6l=746961066,this.h7h=246885852,this.h7l=2177182882):224==h?(this.h0h=2352822216,this.h0l=424955298,this.h1h=1944164710,this.h1l=2312950998,this.h2h=502970286,this.h2l=855612546,this.h3h=1738396948,this.h3l=1479516111,this.h4h=258812777,this.h4l=2077511080,this.h5h=2011393907,this.h5l=79989058,this.h6h=1067287976,this.h6l=1780299464,this.h7h=286451373,this.h7l=2446758561):(this.h0h=1779033703,this.h0l=4089235720,this.h1h=3144134277,this.h1l=2227873595,this.h2h=1013904242,this.h2l=4271175723,this.h3h=2773480762,this.h3l=1595750129,this.h4h=1359893119,this.h4l=2917565137,this.h5h=2600822924,this.h5l=725511199,this.h6h=528734635,this.h6l=4215389547,this.h7h=1541459225,this.h7l=327033209),this.bits=h,this.block=this.start=this.bytes=this.hBytes=0,this.finalized=this.hashed=!1}function w(h,i,s){var r,e=typeof h;if("string"!==e){if("object"!==e)throw new Error(t);if(null===h)throw new Error(t);if(o&&h.constructor===ArrayBuffer)h=new Uint8Array(h);else if(!(Array.isArray(h)||o&&ArrayBuffer.isView(h)))throw new Error(t);r=!0}var n=h.length;if(!r){for(var a,l=[],f=(n=h.length,0),c=0;c<n;++c)(a=h.charCodeAt(c))<128?l[f++]=a:a<2048?(l[f++]=192|a>>6,l[f++]=128|63&a):a<55296||a>=57344?(l[f++]=224|a>>12,l[f++]=128|a>>6&63,l[f++]=128|63&a):(a=65536+((1023&a)<<10|1023&h.charCodeAt(++c)),l[f++]=240|a>>18,l[f++]=128|a>>12&63,l[f++]=128|a>>6&63,l[f++]=128|63&a);h=l}h.length>128&&(h=new _(i,!0).update(h).array());var u=[],y=[];for(c=0;c<128;++c){var p=h[c]||0;u[c]=92^p,y[c]=54^p}_.call(this,i,s),this.update(y),this.oKeyPad=u,this.inner=!0,this.sharedMemory=s}_.prototype.update=function(h){if(this.finalized)throw new Error("finalize already called");var i,s=typeof h;if("string"!==s){if("object"!==s)throw new Error(t);if(null===h)throw new Error(t);if(o&&h.constructor===ArrayBuffer)h=new Uint8Array(h);else if(!(Array.isArray(h)||o&&ArrayBuffer.isView(h)))throw new Error(t);i=!0}for(var r,e,n=0,a=h.length,l=this.blocks;n<a;){if(this.hashed&&(this.hashed=!1,l[0]=this.block,l[1]=l[2]=l[3]=l[4]=l[5]=l[6]=l[7]=l[8]=l[9]=l[10]=l[11]=l[12]=l[13]=l[14]=l[15]=l[16]=l[17]=l[18]=l[19]=l[20]=l[21]=l[22]=l[23]=l[24]=l[25]=l[26]=l[27]=l[28]=l[29]=l[30]=l[31]=l[32]=0),i)for(e=this.start;n<a&&e<128;++n)l[e>>2]|=h[n]<<f[3&e++];else for(e=this.start;n<a&&e<128;++n)(r=h.charCodeAt(n))<128?l[e>>2]|=r<<f[3&e++]:r<2048?(l[e>>2]|=(192|r>>6)<<f[3&e++],l[e>>2]|=(128|63&r)<<f[3&e++]):r<55296||r>=57344?(l[e>>2]|=(224|r>>12)<<f[3&e++],l[e>>2]|=(128|r>>6&63)<<f[3&e++],l[e>>2]|=(128|63&r)<<f[3&e++]):(r=65536+((1023&r)<<10|1023&h.charCodeAt(++n)),l[e>>2]|=(240|r>>18)<<f[3&e++],l[e>>2]|=(128|r>>12&63)<<f[3&e++],l[e>>2]|=(128|r>>6&63)<<f[3&e++],l[e>>2]|=(128|63&r)<<f[3&e++]);this.lastByteIndex=e,this.bytes+=e-this.start,e>=128?(this.block=l[32],this.start=e-128,this.hash(),this.hashed=!0):this.start=e}return this.bytes>4294967295&&(this.hBytes+=this.bytes/4294967296|0,this.bytes=this.bytes%4294967296),this},_.prototype.finalize=function(){if(!this.finalized){this.finalized=!0;var h=this.blocks,t=this.lastByteIndex;h[32]=this.block,h[t>>2]|=l[3&t],this.block=h[32],t>=112&&(this.hashed||this.hash(),h[0]=this.block,h[1]=h[2]=h[3]=h[4]=h[5]=h[6]=h[7]=h[8]=h[9]=h[10]=h[11]=h[12]=h[13]=h[14]=h[15]=h[16]=h[17]=h[18]=h[19]=h[20]=h[21]=h[22]=h[23]=h[24]=h[25]=h[26]=h[27]=h[28]=h[29]=h[30]=h[31]=h[32]=0),h[30]=this.hBytes<<3|this.bytes>>>29,h[31]=this.bytes<<3,this.hash()}},_.prototype.hash=function(){var h,t,i,s,r,e,n,o,a,l,f,u,y,p,d,b,v,_,w,A,g,S,B,U,O,k=this.h0h,x=this.h0l,z=this.h1h,j=this.h1l,E=this.h2h,N=this.h2l,m=this.h3h,J=this.h3l,P=this.h4h,H=this.h4l,I=this.h5h,R=this.h5l,V=this.h6h,C=this.h6l,D=this.h7h,K=this.h7l,M=this.blocks;for(h=32;h<160;h+=2)t=((A=M[h-30])>>>1|(g=M[h-29])<<31)^(A>>>8|g<<24)^A>>>7,i=(g>>>1|A<<31)^(g>>>8|A<<24)^(g>>>7|A<<25),s=((A=M[h-4])>>>19|(g=M[h-3])<<13)^(g>>>29|A<<3)^A>>>6,r=(g>>>19|A<<13)^(A>>>29|g<<3)^(g>>>6|A<<26),A=M[h-32],g=M[h-31],a=((S=M[h-14])>>>16)+(A>>>16)+(t>>>16)+(s>>>16)+((o=(65535&S)+(65535&A)+(65535&t)+(65535&s)+((n=((B=M[h-13])>>>16)+(g>>>16)+(i>>>16)+(r>>>16)+((e=(65535&B)+(65535&g)+(65535&i)+(65535&r))>>>16))>>>16))>>>16),M[h]=a<<16|65535&o,M[h+1]=n<<16|65535&e;var F=k,T=x,W=z,Y=j,q=E,G=N,L=m,Q=J,X=P,Z=H,$=I,hh=R,th=V,ih=C,sh=D,rh=K;for(b=W&q,v=Y&G,h=0;h<160;h+=8)t=(F>>>28|T<<4)^(T>>>2|F<<30)^(T>>>7|F<<25),i=(T>>>28|F<<4)^(F>>>2|T<<30)^(F>>>7|T<<25),s=(X>>>14|Z<<18)^(X>>>18|Z<<14)^(Z>>>9|X<<23),r=(Z>>>14|X<<18)^(Z>>>18|X<<14)^(X>>>9|Z<<23),_=(l=F&W)^F&q^b,w=(f=T&Y)^T&G^v,U=X&$^~X&th,O=Z&hh^~Z&ih,A=M[h],g=M[h+1],A=(a=((S=c[h])>>>16)+(A>>>16)+(U>>>16)+(s>>>16)+(sh>>>16)+((o=(65535&S)+(65535&A)+(65535&U)+(65535&s)+(65535&sh)+((n=((B=c[h+1])>>>16)+(g>>>16)+(O>>>16)+(r>>>16)+(rh>>>16)+((e=(65535&B)+(65535&g)+(65535&O)+(65535&r)+(65535&rh))>>>16))>>>16))>>>16))<<16|65535&o,g=n<<16|65535&e,S=(a=(_>>>16)+(t>>>16)+((o=(65535&_)+(65535&t)+((n=(w>>>16)+(i>>>16)+((e=(65535&w)+(65535&i))>>>16))>>>16))>>>16))<<16|65535&o,B=n<<16|65535&e,sh=(a=(L>>>16)+(A>>>16)+((o=(65535&L)+(65535&A)+((n=(Q>>>16)+(g>>>16)+((e=(65535&Q)+(65535&g))>>>16))>>>16))>>>16))<<16|65535&o,rh=n<<16|65535&e,t=((L=(a=(S>>>16)+(A>>>16)+((o=(65535&S)+(65535&A)+((n=(B>>>16)+(g>>>16)+((e=(65535&B)+(65535&g))>>>16))>>>16))>>>16))<<16|65535&o)>>>28|(Q=n<<16|65535&e)<<4)^(Q>>>2|L<<30)^(Q>>>7|L<<25),i=(Q>>>28|L<<4)^(L>>>2|Q<<30)^(L>>>7|Q<<25),s=(sh>>>14|rh<<18)^(sh>>>18|rh<<14)^(rh>>>9|sh<<23),r=(rh>>>14|sh<<18)^(rh>>>18|sh<<14)^(sh>>>9|rh<<23),_=(u=L&F)^L&W^l,w=(y=Q&T)^Q&Y^f,U=sh&X^~sh&$,O=rh&Z^~rh&hh,A=M[h+2],g=M[h+3],A=(a=((S=c[h+2])>>>16)+(A>>>16)+(U>>>16)+(s>>>16)+(th>>>16)+((o=(65535&S)+(65535&A)+(65535&U)+(65535&s)+(65535&th)+((n=((B=c[h+3])>>>16)+(g>>>16)+(O>>>16)+(r>>>16)+(ih>>>16)+((e=(65535&B)+(65535&g)+(65535&O)+(65535&r)+(65535&ih))>>>16))>>>16))>>>16))<<16|65535&o,g=n<<16|65535&e,S=(a=(_>>>16)+(t>>>16)+((o=(65535&_)+(65535&t)+((n=(w>>>16)+(i>>>16)+((e=(65535&w)+(65535&i))>>>16))>>>16))>>>16))<<16|65535&o,B=n<<16|65535&e,th=(a=(q>>>16)+(A>>>16)+((o=(65535&q)+(65535&A)+((n=(G>>>16)+(g>>>16)+((e=(65535&G)+(65535&g))>>>16))>>>16))>>>16))<<16|65535&o,ih=n<<16|65535&e,t=((q=(a=(S>>>16)+(A>>>16)+((o=(65535&S)+(65535&A)+((n=(B>>>16)+(g>>>16)+((e=(65535&B)+(65535&g))>>>16))>>>16))>>>16))<<16|65535&o)>>>28|(G=n<<16|65535&e)<<4)^(G>>>2|q<<30)^(G>>>7|q<<25),i=(G>>>28|q<<4)^(q>>>2|G<<30)^(q>>>7|G<<25),s=(th>>>14|ih<<18)^(th>>>18|ih<<14)^(ih>>>9|th<<23),r=(ih>>>14|th<<18)^(ih>>>18|th<<14)^(th>>>9|ih<<23),_=(p=q&L)^q&F^u,w=(d=G&Q)^G&T^y,U=th&sh^~th&X,O=ih&rh^~ih&Z,A=M[h+4],g=M[h+5],A=(a=((S=c[h+4])>>>16)+(A>>>16)+(U>>>16)+(s>>>16)+($>>>16)+((o=(65535&S)+(65535&A)+(65535&U)+(65535&s)+(65535&$)+((n=((B=c[h+5])>>>16)+(g>>>16)+(O>>>16)+(r>>>16)+(hh>>>16)+((e=(65535&B)+(65535&g)+(65535&O)+(65535&r)+(65535&hh))>>>16))>>>16))>>>16))<<16|65535&o,g=n<<16|65535&e,S=(a=(_>>>16)+(t>>>16)+((o=(65535&_)+(65535&t)+((n=(w>>>16)+(i>>>16)+((e=(65535&w)+(65535&i))>>>16))>>>16))>>>16))<<16|65535&o,B=n<<16|65535&e,$=(a=(W>>>16)+(A>>>16)+((o=(65535&W)+(65535&A)+((n=(Y>>>16)+(g>>>16)+((e=(65535&Y)+(65535&g))>>>16))>>>16))>>>16))<<16|65535&o,hh=n<<16|65535&e,t=((W=(a=(S>>>16)+(A>>>16)+((o=(65535&S)+(65535&A)+((n=(B>>>16)+(g>>>16)+((e=(65535&B)+(65535&g))>>>16))>>>16))>>>16))<<16|65535&o)>>>28|(Y=n<<16|65535&e)<<4)^(Y>>>2|W<<30)^(Y>>>7|W<<25),i=(Y>>>28|W<<4)^(W>>>2|Y<<30)^(W>>>7|Y<<25),s=($>>>14|hh<<18)^($>>>18|hh<<14)^(hh>>>9|$<<23),r=(hh>>>14|$<<18)^(hh>>>18|$<<14)^($>>>9|hh<<23),_=(b=W&q)^W&L^p,w=(v=Y&G)^Y&Q^d,U=$&th^~$&sh,O=hh&ih^~hh&rh,A=M[h+6],g=M[h+7],A=(a=((S=c[h+6])>>>16)+(A>>>16)+(U>>>16)+(s>>>16)+(X>>>16)+((o=(65535&S)+(65535&A)+(65535&U)+(65535&s)+(65535&X)+((n=((B=c[h+7])>>>16)+(g>>>16)+(O>>>16)+(r>>>16)+(Z>>>16)+((e=(65535&B)+(65535&g)+(65535&O)+(65535&r)+(65535&Z))>>>16))>>>16))>>>16))<<16|65535&o,g=n<<16|65535&e,S=(a=(_>>>16)+(t>>>16)+((o=(65535&_)+(65535&t)+((n=(w>>>16)+(i>>>16)+((e=(65535&w)+(65535&i))>>>16))>>>16))>>>16))<<16|65535&o,B=n<<16|65535&e,X=(a=(F>>>16)+(A>>>16)+((o=(65535&F)+(65535&A)+((n=(T>>>16)+(g>>>16)+((e=(65535&T)+(65535&g))>>>16))>>>16))>>>16))<<16|65535&o,Z=n<<16|65535&e,F=(a=(S>>>16)+(A>>>16)+((o=(65535&S)+(65535&A)+((n=(B>>>16)+(g>>>16)+((e=(65535&B)+(65535&g))>>>16))>>>16))>>>16))<<16|65535&o,T=n<<16|65535&e;a=(k>>>16)+(F>>>16)+((o=(65535&k)+(65535&F)+((n=(x>>>16)+(T>>>16)+((e=(65535&x)+(65535&T))>>>16))>>>16))>>>16),this.h0h=a<<16|65535&o,this.h0l=n<<16|65535&e,a=(z>>>16)+(W>>>16)+((o=(65535&z)+(65535&W)+((n=(j>>>16)+(Y>>>16)+((e=(65535&j)+(65535&Y))>>>16))>>>16))>>>16),this.h1h=a<<16|65535&o,this.h1l=n<<16|65535&e,a=(E>>>16)+(q>>>16)+((o=(65535&E)+(65535&q)+((n=(N>>>16)+(G>>>16)+((e=(65535&N)+(65535&G))>>>16))>>>16))>>>16),this.h2h=a<<16|65535&o,this.h2l=n<<16|65535&e,a=(m>>>16)+(L>>>16)+((o=(65535&m)+(65535&L)+((n=(J>>>16)+(Q>>>16)+((e=(65535&J)+(65535&Q))>>>16))>>>16))>>>16),this.h3h=a<<16|65535&o,this.h3l=n<<16|65535&e,a=(P>>>16)+(X>>>16)+((o=(65535&P)+(65535&X)+((n=(H>>>16)+(Z>>>16)+((e=(65535&H)+(65535&Z))>>>16))>>>16))>>>16),this.h4h=a<<16|65535&o,this.h4l=n<<16|65535&e,a=(I>>>16)+($>>>16)+((o=(65535&I)+(65535&$)+((n=(R>>>16)+(hh>>>16)+((e=(65535&R)+(65535&hh))>>>16))>>>16))>>>16),this.h5h=a<<16|65535&o,this.h5l=n<<16|65535&e,a=(V>>>16)+(th>>>16)+((o=(65535&V)+(65535&th)+((n=(C>>>16)+(ih>>>16)+((e=(65535&C)+(65535&ih))>>>16))>>>16))>>>16),this.h6h=a<<16|65535&o,this.h6l=n<<16|65535&e,a=(D>>>16)+(sh>>>16)+((o=(65535&D)+(65535&sh)+((n=(K>>>16)+(rh>>>16)+((e=(65535&K)+(65535&rh))>>>16))>>>16))>>>16),this.h7h=a<<16|65535&o,this.h7l=n<<16|65535&e},_.prototype.hex=function(){this.finalize();var h=this.h0h,t=this.h0l,i=this.h1h,s=this.h1l,r=this.h2h,e=this.h2l,n=this.h3h,o=this.h3l,l=this.h4h,f=this.h4l,c=this.h5h,u=this.h5l,y=this.h6h,p=this.h6l,d=this.h7h,b=this.h7l,v=this.bits,_=a[h>>28&15]+a[h>>24&15]+a[h>>20&15]+a[h>>16&15]+a[h>>12&15]+a[h>>8&15]+a[h>>4&15]+a[15&h]+a[t>>28&15]+a[t>>24&15]+a[t>>20&15]+a[t>>16&15]+a[t>>12&15]+a[t>>8&15]+a[t>>4&15]+a[15&t]+a[i>>28&15]+a[i>>24&15]+a[i>>20&15]+a[i>>16&15]+a[i>>12&15]+a[i>>8&15]+a[i>>4&15]+a[15&i]+a[s>>28&15]+a[s>>24&15]+a[s>>20&15]+a[s>>16&15]+a[s>>12&15]+a[s>>8&15]+a[s>>4&15]+a[15&s]+a[r>>28&15]+a[r>>24&15]+a[r>>20&15]+a[r>>16&15]+a[r>>12&15]+a[r>>8&15]+a[r>>4&15]+a[15&r]+a[e>>28&15]+a[e>>24&15]+a[e>>20&15]+a[e>>16&15]+a[e>>12&15]+a[e>>8&15]+a[e>>4&15]+a[15&e]+a[n>>28&15]+a[n>>24&15]+a[n>>20&15]+a[n>>16&15]+a[n>>12&15]+a[n>>8&15]+a[n>>4&15]+a[15&n];return v>=256&&(_+=a[o>>28&15]+a[o>>24&15]+a[o>>20&15]+a[o>>16&15]+a[o>>12&15]+a[o>>8&15]+a[o>>4&15]+a[15&o]),v>=384&&(_+=a[l>>28&15]+a[l>>24&15]+a[l>>20&15]+a[l>>16&15]+a[l>>12&15]+a[l>>8&15]+a[l>>4&15]+a[15&l]+a[f>>28&15]+a[f>>24&15]+a[f>>20&15]+a[f>>16&15]+a[f>>12&15]+a[f>>8&15]+a[f>>4&15]+a[15&f]+a[c>>28&15]+a[c>>24&15]+a[c>>20&15]+a[c>>16&15]+a[c>>12&15]+a[c>>8&15]+a[c>>4&15]+a[15&c]+a[u>>28&15]+a[u>>24&15]+a[u>>20&15]+a[u>>16&15]+a[u>>12&15]+a[u>>8&15]+a[u>>4&15]+a[15&u]),512==v&&(_+=a[y>>28&15]+a[y>>24&15]+a[y>>20&15]+a[y>>16&15]+a[y>>12&15]+a[y>>8&15]+a[y>>4&15]+a[15&y]+a[p>>28&15]+a[p>>24&15]+a[p>>20&15]+a[p>>16&15]+a[p>>12&15]+a[p>>8&15]+a[p>>4&15]+a[15&p]+a[d>>28&15]+a[d>>24&15]+a[d>>20&15]+a[d>>16&15]+a[d>>12&15]+a[d>>8&15]+a[d>>4&15]+a[15&d]+a[b>>28&15]+a[b>>24&15]+a[b>>20&15]+a[b>>16&15]+a[b>>12&15]+a[b>>8&15]+a[b>>4&15]+a[15&b]),_},_.prototype.toString=_.prototype.hex,_.prototype.digest=function(){this.finalize();var h=this.h0h,t=this.h0l,i=this.h1h,s=this.h1l,r=this.h2h,e=this.h2l,n=this.h3h,o=this.h3l,a=this.h4h,l=this.h4l,f=this.h5h,c=this.h5l,u=this.h6h,y=this.h6l,p=this.h7h,d=this.h7l,b=this.bits,v=[h>>24&255,h>>16&255,h>>8&255,255&h,t>>24&255,t>>16&255,t>>8&255,255&t,i>>24&255,i>>16&255,i>>8&255,255&i,s>>24&255,s>>16&255,s>>8&255,255&s,r>>24&255,r>>16&255,r>>8&255,255&r,e>>24&255,e>>16&255,e>>8&255,255&e,n>>24&255,n>>16&255,n>>8&255,255&n];return b>=256&&v.push(o>>24&255,o>>16&255,o>>8&255,255&o),b>=384&&v.push(a>>24&255,a>>16&255,a>>8&255,255&a,l>>24&255,l>>16&255,l>>8&255,255&l,f>>24&255,f>>16&255,f>>8&255,255&f,c>>24&255,c>>16&255,c>>8&255,255&c),512==b&&v.push(u>>24&255,u>>16&255,u>>8&255,255&u,y>>24&255,y>>16&255,y>>8&255,255&y,p>>24&255,p>>16&255,p>>8&255,255&p,d>>24&255,d>>16&255,d>>8&255,255&d),v},_.prototype.array=_.prototype.digest,_.prototype.arrayBuffer=function(){this.finalize();var h=this.bits,t=new ArrayBuffer(h/8),i=new DataView(t);return i.setUint32(0,this.h0h),i.setUint32(4,this.h0l),i.setUint32(8,this.h1h),i.setUint32(12,this.h1l),i.setUint32(16,this.h2h),i.setUint32(20,this.h2l),i.setUint32(24,this.h3h),h>=256&&i.setUint32(28,this.h3l),h>=384&&(i.setUint32(32,this.h4h),i.setUint32(36,this.h4l),i.setUint32(40,this.h5h),i.setUint32(44,this.h5l)),512==h&&(i.setUint32(48,this.h6h),i.setUint32(52,this.h6l),i.setUint32(56,this.h7h),i.setUint32(60,this.h7l)),t},_.prototype.clone=function(){var h=new _(this.bits,!1);return this.copyTo(h),h},_.prototype.copyTo=function(h){var t=0,i=["h0h","h0l","h1h","h1l","h2h","h2l","h3h","h3l","h4h","h4l","h5h","h5l","h6h","h6l","h7h","h7l","start","bytes","hBytes","finalized","hashed","lastByteIndex"];for(t=0;t<i.length;++t)h[i[t]]=this[i[t]];for(t=0;t<this.blocks.length;++t)h.blocks[t]=this.blocks[t]},w.prototype=new _,w.prototype.finalize=function(){if(_.prototype.finalize.call(this),this.inner){this.inner=!1;var h=this.array();_.call(this,this.bits,this.sharedMemory),this.update(this.oKeyPad),this.update(h),_.prototype.finalize.call(this)}},w.prototype.clone=function(){var h=new w([],this.bits,!1);this.copyTo(h),h.inner=this.inner;for(var t=0;t<this.oKeyPad.length;++t)h.oKeyPad[t]=this.oKeyPad[t];return h};var A=d(512);A.sha512=A,A.sha384=d(384),A.sha512_256=d(256),A.sha512_224=d(224),A.sha512.hmac=v(512),A.sha384.hmac=v(384),A.sha512_256.hmac=v(256),A.sha512_224.hmac=v(224),n?h.exports=A:(r.sha512=A.sha512,r.sha384=A.sha384,r.sha512_256=A.sha512_256,r.sha512_224=A.sha512_224)}()}(r);var e=r.exports;h("s",t({__proto__:null,default:i(e)},[e]))}}}));

package/frontend/index.html

@@ -4,12 +4,13 @@
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1.0, user-scalable=0" />
     <link href="/fontello.css" rel="stylesheet" />
-    <script type="module" crossorigin src="/assets/index-c8LVGHJd.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-oekM6dN8.css">
+    
   </head>
   <body>
     <noscript>You need to enable JavaScript to run this app.</noscript>
     <div id="root"></div>
     <script nomodule>document.getElementById('root').innerText = "Please use a newer browser"</script>
+    <script crossorigin id="vite-legacy-polyfill" src="/assets/polyfills-legacy-DMrMt_pQ.js"></script>
+    <script crossorigin id="vite-legacy-entry" data-src="/assets/index-legacy-C21Ot_ue.js">System.import(document.getElementById('vite-legacy-entry').getAttribute('data-src'))</script>
   </body>
 </html>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hfs",
-  "version": "0.52.5",
+  "version": "0.53.0-alpha2",
   "description": "HTTP File Server",
   "keywords": [
     "file server",

package/plugins/antibrute/plugin.js

@@ -1,10 +1,12 @@
-exports.version = 2
+exports.version = 3
 exports.description = "Introduce increasing delays between login attempts."
-exports.apiRequired = 3 // log
+exports.apiRequired = 8.8 // attemptingLogin
 
 exports.config = {
-    increment: { type: 'number', min: 1, defaultValue: 5, helperText: "Seconds to add to the delay for each login attempt" },
-    max: { type: 'number', min: 1, defaultValue: 60, helperText: "Max seconds to delay before next login is allowed" },
+    increment: { type: 'number', min: 1, defaultValue: 5, unit: "seconds", helperText: "How longer user must wait for each login attempt" },
+    max: { type: 'number', min: 1, defaultValue: 60, label: "Max delay", unit: "seconds", helperText: "Max seconds to delay before next login is allowed" },
+    blockAfter: { type: 'number', xs: 6, min: 1, max: 9999, defaultValue: 100, label: "Block IP after", unit: "attempts", helperText: "localhost excluded" },
+    blockForHours: { type: 'number', xs: 6, min: 0, defaultValue: 24, label: "Block for", unit: "hours" },
 }
 exports.configDialog = {
     maxWidth: 'xs',
@@ -13,26 +15,35 @@ exports.configDialog = {
 const byIp = {}
 
 exports.init = api => {
-    const LOGIN_URI = api.Const.API_URI + 'loginSrp1'
-    const { getOrSet } = api.require('./misc')
+    const { getOrSet, isLocalHost, HOUR } = api.require('./misc')
+    const { block } = api.require('./block')
     return {
-        async middleware(ctx) {
-            if (ctx.path !== LOGIN_URI) return
-            const { ip } = ctx
-            const now = Date.now()
-            const rec = getOrSet(byIp, ip, () => ({ delay: 0, next: now }))
-            const wait = rec.next - now
-            const max = api.getConfig('max') * 1000
-            const inc = api.getConfig('increment') * 1000
-            rec.delay = Math.min(max, rec.delay + inc)
-            rec.next += rec.delay
-            clearTimeout(rec.timer)
-            if (wait > 0) {
-                api.log('delaying', ip, 'for', Math.round(wait / 1000))
-                ctx.set('x-anti-brute-force', wait)
-                await new Promise(resolve => setTimeout(resolve, wait))
+        unload: api.events.multi({
+            attemptingLogin: async  ctx => {
+                const { ip } = ctx
+                const now = new Date
+                const rec = getOrSet(byIp, ip, () => ({ attempts: 0, next: now }))
+                const max = api.getConfig('max') * 1000
+                const delay = Math.min(max, 1000 * api.getConfig('increment') * ++rec.attempts)
+                const wait = rec.next - now
+                rec.next = new Date(+rec.next + delay)
+                if (rec.attempts > api.getConfig('blockAfter') && !isLocalHost(ctx)) {
+                    const hours = api.getConfig('blockForHours')
+                    const newRule = { ip, comment: "From antibrute plugin", expire: hours ? new Date(now.getTime() + hours * HOUR) : undefined }
+                    block.set(x => [...x, newRule])
+                }
+                clearTimeout(rec.timer)
+                if (wait > 0) {
+                    api.log('delaying', ip, 'for', Math.round(wait / 1000))
+                    ctx.set('x-anti-brute-force', wait)
+                    await new Promise(resolve => setTimeout(resolve, wait))
+                }
+                rec.timer = setTimeout(() => delete byIp[ip], 24 * HOUR) // no memory leak
+            },
+            login: ctx => {
+                if (ctx.state.account)
+                    delete byIp[ctx.ip] // reset if login was successful
             }
-            rec.timer = setTimeout(() => delete byIp[ip], rec.delay * 10) // no memory leak
-        }
+    })
     }
 }

package/src/QuickZipStream.js

@@ -200,7 +200,7 @@ class QuickZipStream extends stream_1.Readable {
                 offset = ZIP64_SIZE_LIMIT;
             }
             const extraData = buffer(!extra.length ? []
-                : [2, 1, 2, 8 * extra.length, ...extra.map(x => [8, x]).flat()]);
+                : [2, 1, 2, 8 * extra.length, ...extra.flatMap(x => [8, x])]);
             if (extraData.length && version < 45)
                 version = 45;
             this.controlledPush([

package/src/SendList.js

@@ -7,7 +7,6 @@ exports.SendListReadable = void 0;
 const stream_1 = require("stream");
 const lodash_1 = __importDefault(require("lodash"));
 const cross_1 = require("./cross");
-const misc_1 = require("./misc");
 const events_1 = __importDefault(require("./events"));
 // offer an api for a generic dynamic list. Suitable to be the result of an api.
 class SendListReadable extends stream_1.Readable {
@@ -116,8 +115,7 @@ class SendListReadable extends stream_1.Readable {
         this.push(null);
     }
     events(ctx, eventMap) {
-        const off = (0, misc_1.onOff)(events_1.default, eventMap);
-        ctx.res.once('close', off);
+        ctx.res.once('close', events_1.default.multi(eventMap));
         return this;
     }
     isClosed() {

package/src/api.accounts.js

@@ -16,7 +16,7 @@ function prepareAccount(ac) {
         username: ac.username,
         hasPassword: (0, perm_1.accountHasPassword)(ac),
         adminActualAccess: (0, perm_1.accountCanLoginAdmin)(ac),
-        invalidated: auth_1.invalidSessions.has(ac.username),
+        invalidated: auth_1.invalidateSessionBefore.get(ac.username),
     };
 }
 exports.default = {
@@ -62,7 +62,7 @@ exports.default = {
     },
     invalidate_sessions({ username }) {
         (0, misc_1.apiAssertTypes)({ string: { username } });
-        auth_1.invalidSessions.add(username);
+        auth_1.invalidateSessionBefore.set(username, Date.now());
         return {};
     },
     async change_srp({ username, salt, verifier }) {

package/src/api.auth.js

@@ -1,5 +1,8 @@
 "use strict";
 // This file is part of HFS - Copyright 2021-2023, Massimo Melina <a@rejetto.com> - License https://www.gnu.org/licenses/gpl-3.0.txt
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.change_my_srp = exports.refresh_session = exports.logout = exports.loginSrp2 = exports.loginSrp1 = void 0;
 const perm_1 = require("./perm");
@@ -9,6 +12,7 @@ const adminApis_1 = require("./adminApis");
 const middlewares_1 = require("./middlewares");
 const auth_1 = require("./auth");
 const config_1 = require("./config");
+const events_1 = __importDefault(require("./events"));
 const ongoingLogins = {}; // store data that doesn't fit session object
 const keepSessionAlive = (0, config_1.defineConfig)('keep_session_alive', true);
 const loginSrp1 = async ({ username }, ctx) => {
@@ -17,6 +21,7 @@ const loginSrp1 = async ({ username }, ctx) => {
     const account = (0, perm_1.getAccount)(username);
     if (!ctx.session)
         return new apiMiddleware_1.ApiError(const_1.HTTP_SERVER_ERROR);
+    await events_1.default.emitAsync('attemptingLogin', ctx);
     if (!account || !(0, perm_1.accountCanLogin)(account)) { // TODO simulate fake account to prevent knowing valid usernames
         ctx.logExtra({ u: username });
         ctx.state.dontLog = false; // log even if log_api is false
@@ -27,7 +32,7 @@ const loginSrp1 = async ({ username }, ctx) => {
         const sid = Math.random();
         ongoingLogins[sid] = step1;
         setTimeout(() => delete ongoingLogins[sid], 60000);
-        ctx.session.loggingIn = { username, sid };
+        ctx.session.loggingIn = { username, sid }; // temporarily store until process is complete
         return rest;
     }
     catch (code) {
@@ -42,13 +47,13 @@ const loginSrp2 = async ({ pubKey, proof }, ctx) => {
     if (!ctx.session.loggingIn)
         return new apiMiddleware_1.ApiError(const_1.HTTP_CONFLICT);
     const { username, sid } = ctx.session.loggingIn;
+    delete ctx.session.loggingIn;
     const step1 = ongoingLogins[sid];
     if (!step1)
         return new apiMiddleware_1.ApiError(const_1.HTTP_NOT_FOUND);
     try {
         const M2 = await step1.step2(BigInt(pubKey), BigInt(proof));
         await (0, auth_1.setLoggedIn)(ctx, username);
-        delete ctx.session.loggingIn;
         return {
             proof: String(M2),
             redirect: (_a = ctx.state.account) === null || _a === void 0 ? void 0 : _a.redirect,

package/src/api.get_file_list.js

@@ -100,7 +100,7 @@ const get_file_list = async ({ uri = '/', offset, limit, search, c, onlyFolders,
         const { source, url } = node;
         const name = (0, vfs_1.getNodeName)(node);
         if (url)
-            return name ? { n: name, url } : null;
+            return name ? { n: name, url, target: node.target } : null;
         const isFolder = await (0, vfs_1.nodeIsDirectory)(node);
         try {
             const st = source ? await (0, promises_1.stat)(source) : undefined;

package/src/api.log.js

@@ -8,7 +8,6 @@ const consoleLog_1 = require("./consoleLog");
 const cross_1 = require("./cross");
 const events_1 = __importDefault(require("./events"));
 const log_1 = require("./log");
-const misc_1 = require("./misc");
 const SendList_1 = require("./SendList");
 const serveFile_1 = require("./serveFile");
 exports.default = {
@@ -43,11 +42,8 @@ exports.default = {
                 if (!lodash_1.default.find(log_1.loggers, { name: file }))
                     return list.error(cross_1.HTTP_NOT_FOUND, true);
                 list.ready();
-                ctx.res.once('close', (0, misc_1.onOff)(events_1.default, {
-                    [file](entry) {
-                        list.add(entry);
-                    }
-                }));
+                // unsubscribe when connection is interrupted
+                ctx.res.once('close', events_1.default.on(file, x => list.add(x)));
             }
         });
     },

package/src/api.plugins.js

@@ -10,7 +10,6 @@ const lodash_1 = __importDefault(require("lodash"));
 const assert_1 = __importDefault(require("assert"));
 const misc_1 = require("./misc");
 const apiMiddleware_1 = require("./apiMiddleware");
-const events_1 = __importDefault(require("./events"));
 const promises_1 = require("fs/promises");
 const github_1 = require("./github");
 const const_1 = require("./const");
@@ -83,7 +82,7 @@ const apis = {
         return {
             enabled: plugins_1.enablePlugins.get().includes(id),
             config: {
-                ...(0, misc_1.newObj)((0, plugins_1.getPluginConfigFields)(id) || {}, v => v === null || v === void 0 ? void 0 : v.defaultValue),
+                ...(0, misc_1.newObj)((0, plugins_1.getPluginConfigFields)(id), v => v === null || v === void 0 ? void 0 : v.defaultValue),
                 ...plugins_1.pluginsConfig.get()[id]
             }
         };
@@ -91,33 +90,33 @@ const apis = {
     get_online_plugins({ text }, ctx) {
         return new SendList_1.SendListReadable({
             async doAtStart(list) {
+                const repos = [];
+                list.events(ctx, {
+                    pluginInstalled: p => {
+                        if (repos.includes(p.repo))
+                            list.update({ id: p.repo }, { installed: true });
+                    },
+                    pluginUninstalled: folder => {
+                        const repo = (0, github_1.getFolder2repo)()[folder];
+                        if (typeof repo !== 'string')
+                            return; // custom repo
+                        if (repos.includes(repo))
+                            list.update({ id: repo }, { installed: false });
+                    },
+                    pluginDownload({ id, status }) {
+                        if (repos.includes(id))
+                            list.update({ id }, { downloading: status !== null && status !== void 0 ? status : null });
+                    }
+                });
                 try {
-                    // avoid creating N listeners on ctx.req, and getting a warning
-                    const undo = [];
-                    ctx.req.once('close', () => undo.forEach(x => x()));
-                    const folder2repo = (0, github_1.getFolder2repo)();
-                    for await (const pl of await (0, github_1.searchPlugins)(text)) {
+                    const already = Object.values((0, github_1.getFolder2repo)()).map(String);
+                    for await (const pl of await (0, github_1.searchPlugins)(text, { skipRepos: already })) {
                         const repo = pl.repo || pl.id; // .repo property can be more trustworthy in case github user renamed and left the previous link in 'repo'
-                        if (lodash_1.default.includes(folder2repo, repo))
-                            continue; // don't include installed plugins
                         const missing = await (0, plugins_1.getMissingDependencies)(pl);
                         if (missing.length)
                             pl.missing = missing;
                         list.add(pl);
-                        // watch for events about this plugin, until this request is closed
-                        undo.push((0, misc_1.onOff)(events_1.default, {
-                            pluginInstalled: p => {
-                                if (p.repo === repo)
-                                    list.update({ id: repo }, { installed: true });
-                            },
-                            pluginUninstalled: folder => {
-                                if (repo === (0, github_1.getFolder2repo)()[folder])
-                                    list.update({ id: repo }, { installed: false });
-                            },
-                            ['pluginDownload_' + repo](status) {
-                                list.update({ id: repo }, { downloading: status !== null && status !== void 0 ? status : null });
-                            }
-                        }));
+                        repos.push(repo);
                     }
                 }
                 catch (err) {

package/src/api.vfs.js

@@ -21,7 +21,7 @@ async function urlToNodeOriginal(uri) {
     const n = await (0, vfs_1.urlToNode)(uri);
     return (n === null || n === void 0 ? void 0 : n.isTemp) ? n.original : n;
 }
-const ALLOWED_KEYS = ['name', 'source', 'masks', 'default', 'accept', 'rename', 'mime', 'url', ...misc_1.PERM_KEYS];
+const ALLOWED_KEYS = ['name', 'source', 'masks', 'default', 'accept', 'rename', 'mime', 'url', 'target', ...misc_1.PERM_KEYS];
 const apis = {
     async get_vfs() {
         return { root: await recur() };

package/src/auth.js

@@ -1,12 +1,16 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.invalidSessions = exports.setLoggedIn = exports.getCurrentUsername = exports.srpCheck = exports.srpStep1 = void 0;
+exports.invalidateSessionBefore = exports.setLoggedIn = exports.getCurrentUsername = exports.srpCheck = exports.srpStep1 = void 0;
 const perm_1 = require("./perm");
 const cross_const_1 = require("./cross-const");
 const tssrp6a_1 = require("tssrp6a");
 const srp_1 = require("./srp");
 const cross_1 = require("./cross");
 const node_crypto_1 = require("node:crypto");
+const events_1 = __importDefault(require("./events"));
 const srp6aNimbusRoutines = new tssrp6a_1.SRPRoutines(new tssrp6a_1.SRPParameters());
 async function srpStep1(account) {
     if (!account.srp)
@@ -45,14 +49,19 @@ async function setLoggedIn(ctx, username) {
     if (!s)
         return ctx.throw(cross_const_1.HTTP_SERVER_ERROR, 'session');
     if (username === false) {
+        events_1.default.emit('logout', ctx);
         delete s.username;
         return;
     }
-    exports.invalidSessions.delete(username);
-    s.username = (0, perm_1.normalizeUsername)(username);
     const a = ctx.state.account = (0, perm_1.getAccount)(username);
-    if (a && !a.expire && a.days_to_live)
+    if (!a)
+        return;
+    s.username = (0, perm_1.normalizeUsername)(username);
+    s.ts = Date.now();
+    if (!a.expire && a.days_to_live)
         (0, perm_1.updateAccount)(a, { expire: new Date(Date.now() + a.days_to_live * cross_1.DAY) });
+    await events_1.default.emitAsync('login', ctx);
 }
 exports.setLoggedIn = setLoggedIn;
-exports.invalidSessions = new Set(); // since session are currently stored in cookies, we need to memorize this until we meet again
+// since session are currently stored in cookies, we need to store this information
+exports.invalidateSessionBefore = new Map();

package/src/comments.js

@@ -12,6 +12,7 @@ const fs_1 = require("fs");
 const misc_1 = require("./misc");
 const lodash_1 = __importDefault(require("lodash"));
 const iconv_lite_1 = __importDefault(require("iconv-lite"));
+const promises_1 = require("node:fs/promises");
 exports.DESCRIPT_ION = 'descript.ion';
 exports.descriptIon = (0, config_1.defineConfig)('descript_ion', true);
 const descriptIonEncoding = (0, config_1.defineConfig)('descript_ion_encoding', 'utf8');
@@ -31,8 +32,11 @@ exports.setCommentFor = (0, misc_1.singleWorkerFromBatchWorker)(async (jobs) =>
             else
                 comments.set(file, comment);
         }
+        const path = (0, path_1.join)(folder, exports.DESCRIPT_ION);
+        if (!comments.size)
+            return (0, promises_1.unlink)(path);
         // encode comments in descript.ion format
-        const ws = (0, fs_1.createWriteStream)((0, path_1.join)(folder, exports.DESCRIPT_ION));
+        const ws = (0, fs_1.createWriteStream)(path);
         comments.forEach((comment, filename) => {
             const multiline = comment.includes('\n');
             const line = (filename.includes(' ') ? `"${filename}"` : filename)

package/src/config.js

@@ -5,7 +5,6 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.configFile = exports.saveConfigAsap = exports.setConfig = exports.getWholeConfig = exports.getConfig = exports.configKeyExists = exports.defineConfig = exports.currentVersion = exports.versionToScalar = void 0;
-const events_1 = __importDefault(require("events"));
 const const_1 = require("./const");
 const watchLoad_1 = require("./watchLoad");
 const yaml_1 = __importDefault(require("yaml"));
@@ -13,15 +12,13 @@ const lodash_1 = __importDefault(require("lodash"));
 const misc_1 = require("./misc");
 const fs_1 = require("fs");
 const path_1 = require("path");
-const events_2 = __importDefault(require("./events"));
+const events_1 = __importDefault(require("./events"));
 const promises_1 = require("fs/promises");
 const FILE = 'config.yaml';
 // keep definition of config properties
 const configProps = {};
 let started = false; // this will tell the difference for subscribeConfig()s that are called before or after config is loaded
 let state = {}; // current state of config properties
-const cfgEvents = new events_1.default();
-cfgEvents.setMaxListeners(10000);
 const filePath = (0, misc_1.with_)(const_1.argv.config || process.env.HFS_CONFIG, p => {
     if (!p)
         return FILE;
@@ -52,7 +49,7 @@ class Version extends String {
         return (0, exports.versionToScalar)(this.valueOf());
     }
 }
-const CONFIG_CHANGE_EVENT_PREFIX = 'new.';
+const CONFIG_CHANGE_EVENT_PREFIX = 'config.';
 exports.currentVersion = new Version(const_1.VERSION);
 const configVersion = defineConfig('version', const_1.VERSION, v => new Version(v));
 function defineConfig(k, defaultValue, compiler) {
@@ -68,20 +65,17 @@ function defineConfig(k, defaultValue, compiler) {
         sub(cb) {
             if (started) // initial event already passed, we'll make the first call
                 cb(getConfig(k), { k, was: defaultValue, defaultValue, version: configVersion.compiled() });
-            const eventName = CONFIG_CHANGE_EVENT_PREFIX + k;
-            return (0, misc_1.onOff)(cfgEvents, {
-                [eventName](v, was, version) {
-                    if (stack.includes(cb))
-                        return; // avoid infinite loop in case a subscriber changes the value
-                    stack.push(cb);
-                    try {
-                        return cb(v, { k, was, version, defaultValue });
-                    }
-                    finally {
-                        stack.pop();
-                    }
+            return events_1.default.on(CONFIG_CHANGE_EVENT_PREFIX + k, (v, was, version) => {
+                if (stack.includes(cb))
+                    return; // avoid infinite loop in case a subscriber changes the value
+                stack.push(cb);
+                try {
+                    return cb(v, { k, was, version, defaultValue });
                 }
-            });
+                finally {
+                    stack.pop();
+                }
+            }, { warnAfter: 1000 }); // e.g. each plugin watch enable_plugins
         },
         set(v) {
             if (typeof v === 'function')
@@ -135,7 +129,7 @@ function setConfig(newCfg, save) {
         if (save === false) // false is used when loading whole config, and in such case we should not leave previous values untreated. Also, we need this only after we already `started`.
             for (const k of Object.keys(state))
                 if (!newCfg.hasOwnProperty(k))
-                    apply(k, newCfg[k]);
+                    apply(k, undefined);
         return;
     }
     // first time we emit also for the default values
@@ -143,7 +137,7 @@ function setConfig(newCfg, save) {
         if (!newCfg.hasOwnProperty(k))
             apply(k, newCfg[k], true);
     started = true;
-    events_2.default.emit('config ready');
+    events_1.default.emit('config ready');
     if (version !== const_1.VERSION) // be sure to save version
         (0, exports.saveConfigAsap)();
     function apply(k, newV, isDefault = false) {
@@ -162,7 +156,7 @@ function setConfig1(k, newV, saveChanges = true, valueVersion) {
         return; // no change
     const was = getConfig(k); // include cloned default, if necessary
     state[k] = newV;
-    cfgEvents.emit(CONFIG_CHANGE_EVENT_PREFIX + k, getConfig(k), was, valueVersion);
+    events_1.default.emit(CONFIG_CHANGE_EVENT_PREFIX + k, getConfig(k), was, valueVersion);
     if (saveChanges)
         (0, exports.saveConfigAsap)();
     function same(a, b) {

package/src/const.js

@@ -37,7 +37,7 @@ const os_1 = require("os");
 const fs_1 = require("fs");
 const path_1 = require("path");
 __exportStar(require("./cross-const"), exports);
-exports.API_VERSION = 8.72;
+exports.API_VERSION = 8.8;
 exports.COMPATIBLE_API_VERSION = 1; // while changes in the api are not breaking, this number stays the same, otherwise it is made equal to API_VERSION
 exports.HFS_REPO = 'rejetto/hfs';
 exports.argv = (0, minimist_1.default)(process.argv.slice(2));
@@ -45,7 +45,7 @@ exports.DEV = process.env.DEV || exports.argv.dev ? 'DEV' : '';
 exports.ORIGINAL_CWD = process.cwd();
 exports.HFS_STARTED = new Date();
 const PKG_PATH = (0, path_1.join)(__dirname, '..', 'package.json');
-exports.BUILD_TIMESTAMP = "2024-05-05T21:55:37.328Z";
+exports.BUILD_TIMESTAMP = "2024-05-08T10:54:50.461Z";
 const pkg = JSON.parse(fs.readFileSync(PKG_PATH, 'utf8'));
 exports.VERSION = pkg.version;
 exports.RUNNING_BETA = exports.VERSION.includes('-');

package/src/cross.js

@@ -43,8 +43,8 @@ exports.FRONTEND_OPTIONS = {
 exports.SORT_BY_OPTIONS = ['name', 'extension', 'size', 'time'];
 exports.THEME_OPTIONS = { auto: '', light: 'light', dark: 'dark' };
 exports.CFG = constMap(['geo_enable', 'geo_allow', 'geo_list', 'geo_allow_unknown', 'dynamic_dns_url',
-    'log', 'error_log', 'log_rotation', 'dont_log_net', 'log_gui', 'log_api', 'log_ua',
-    'max_downloads', 'max_downloads_per_ip', 'max_downloads_per_account', 'roots', 'roots_mandatory']);
+    'log', 'error_log', 'log_rotation', 'dont_log_net', 'log_gui', 'log_api', 'log_ua', 'log_spam',
+    'max_downloads', 'max_downloads_per_ip', 'max_downloads_per_account', 'roots', 'force_address']);
 exports.LIST = { add: '+', remove: '-', update: '=', props: 'props', ready: 'ready', error: 'e' };
 exports.WHO_ANYONE = true;
 exports.WHO_NO_ONE = false;
@@ -216,9 +216,7 @@ function findDefined(a, cb) {
 }
 exports.findDefined = findDefined;
 function newObj(src, returnNewValue, recur = false) {
-    if (!src)
-        return {};
-    const pairs = Object.entries(src).map(([k, v]) => {
+    const pairs = Object.entries(src || {}).map(([k, v]) => {
         if (typeof k === 'symbol')
             return;
         let _k = k;
@@ -315,7 +313,7 @@ function repeat(everyMs, cb) {
 }
 exports.repeat = repeat;
 function formatTimestamp(x) {
-    return !x ? '-' : (x instanceof Date ? x : new Date(x)).toLocaleString();
+    return !x ? '' : (x instanceof Date ? x : new Date(x)).toLocaleString();
 }
 exports.formatTimestamp = formatTimestamp;
 function isPrimitive(x) {
@@ -407,8 +405,8 @@ function matches(s, mask, emptyMaskReturns = false) {
 exports.matches = matches;
 function replace(s, symbols, delimiter = '') {
     const [open, close] = splitAt(' ', delimiter);
-    for (const [k, v] of typedEntries(symbols))
-        s = s.replace(open + k + close, lodash_1.default.isFunction(v) ? v() : v);
+    for (const [k, v] of Object.entries(symbols))
+        s = s.replaceAll(open + k + close, v); // typescript doesn't handle overloaded functions (like replaceAll) with union types https://stackoverflow.com/a/66510061/646132
     return s;
 }
 exports.replace = replace;