iobroker.time-tracker 0.2.0

package/build/lib/db/repositories/terminals.js

@@ -0,0 +1,243 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var terminals_exports = {};
+__export(terminals_exports, {
+  createTerminalsRepository: () => createTerminalsRepository,
+  hashToken: () => hashToken,
+  newToken: () => newToken
+});
+module.exports = __toCommonJS(terminals_exports);
+var import_node_crypto = require("node:crypto");
+var import_errors = require("../../errors");
+var import_audit = require("./audit");
+function hashToken(token) {
+  return (0, import_node_crypto.createHash)("sha256").update(token).digest("hex");
+}
+function newToken() {
+  return (0, import_node_crypto.randomBytes)(32).toString("base64url");
+}
+const TERMINAL_COLUMNS = `id, name, location, pin_required, is_active, expires_at, last_seen_at,
+	session_expires_at, created_at`;
+function mapTerminalRow(row) {
+  return {
+    id: row.id,
+    name: row.name,
+    location: row.location,
+    pinRequired: row.pin_required !== 0,
+    isActive: row.is_active !== 0,
+    expiresAt: row.expires_at,
+    lastSeenAt: row.last_seen_at,
+    sessionExpiresAt: row.session_expires_at,
+    createdAt: row.created_at
+  };
+}
+function createTerminalsRepository(db) {
+  const insertTerminal = db.prepare(
+    `INSERT INTO kiosk_terminals (name, location, token_hash, pin_required, is_active, expires_at, created_at)
+		 VALUES (?, ?, ?, ?, 1, ?, ?)`
+  );
+  const selectById = db.prepare(`SELECT ${TERMINAL_COLUMNS} FROM kiosk_terminals WHERE id = ?`);
+  const selectByToken = db.prepare(`SELECT ${TERMINAL_COLUMNS} FROM kiosk_terminals WHERE token_hash = ?`);
+  const selectBySession = db.prepare(`SELECT ${TERMINAL_COLUMNS} FROM kiosk_terminals WHERE session_hash = ?`);
+  const selectAll = db.prepare(`SELECT ${TERMINAL_COLUMNS} FROM kiosk_terminals ORDER BY name COLLATE NOCASE, id`);
+  const selectActive = db.prepare(
+    `SELECT ${TERMINAL_COLUMNS} FROM kiosk_terminals WHERE is_active = 1 ORDER BY name COLLATE NOCASE, id`
+  );
+  const updateSession = db.prepare(
+    "UPDATE kiosk_terminals SET session_hash = ?, session_expires_at = ? WHERE id = ?"
+  );
+  const updateHeartbeat = db.prepare(
+    "UPDATE kiosk_terminals SET session_expires_at = ?, last_seen_at = ? WHERE id = ?"
+  );
+  const deactivate = db.prepare(
+    "UPDATE kiosk_terminals SET is_active = 0, session_hash = NULL, session_expires_at = NULL WHERE id = ?"
+  );
+  const selectUsers = db.prepare(
+    "SELECT user_id AS userId FROM terminal_users WHERE terminal_id = ? ORDER BY user_id"
+  );
+  const deleteUsers = db.prepare("DELETE FROM terminal_users WHERE terminal_id = ?");
+  const insertUser = db.prepare(
+    "INSERT OR IGNORE INTO terminal_users (terminal_id, user_id, created_at) VALUES (?, ?, ?)"
+  );
+  const withUsers = (record) => ({
+    ...record,
+    userIds: selectUsers.all(record.id).map((row) => row.userId)
+  });
+  const read = (id) => {
+    const row = selectById.get(id);
+    return row ? withUsers(mapTerminalRow(row)) : null;
+  };
+  const usable = (record, now) => record.isActive && (record.expiresAt === null || record.expiresAt > now);
+  return {
+    create(input) {
+      var _a, _b, _c;
+      const name = input.name.trim();
+      if (!name) {
+        throw new import_errors.ValidationError("name is required");
+      }
+      const ttlDays = (_a = input.ttlDays) != null ? _a : null;
+      if (ttlDays !== null && (!Number.isInteger(ttlDays) || ttlDays <= 0)) {
+        throw new import_errors.ValidationError(`ttlDays must be a positive whole number (got ${input.ttlDays})`);
+      }
+      const now = (_b = input.now) != null ? _b : Math.floor(Date.now() / 1e3);
+      const deviceToken = newToken();
+      const expiresAt = ttlDays === null ? null : now + ttlDays * 86400;
+      const userIds = [...new Set((_c = input.userIds) != null ? _c : [])];
+      let terminalId = 0;
+      const run = db.transaction(() => {
+        var _a2, _b2, _c2, _d, _e;
+        const result = insertTerminal.run(
+          name,
+          (_a2 = input.location) != null ? _a2 : null,
+          hashToken(deviceToken),
+          ((_b2 = input.pinRequired) != null ? _b2 : true) ? 1 : 0,
+          expiresAt,
+          now
+        );
+        terminalId = Number(result.lastInsertRowid);
+        (0, import_audit.writeAuditLog)(db, {
+          atUtc: now,
+          actorId: input.actorId,
+          action: "terminal.create",
+          entity: "kiosk_terminal",
+          entityId: terminalId,
+          // the token itself is never part of the audit trail
+          detail: {
+            name,
+            location: (_c2 = input.location) != null ? _c2 : null,
+            pinRequired: (_d = input.pinRequired) != null ? _d : true,
+            expiresAt,
+            userIds
+          },
+          ip: (_e = input.actorIp) != null ? _e : null
+        });
+        for (const userId of userIds) {
+          insertUser.run(terminalId, userId, now);
+        }
+      });
+      run();
+      const terminal = read(terminalId);
+      if (!terminal) {
+        throw new Error(`terminal ${terminalId} disappeared right after creation`);
+      }
+      return { terminal, deviceToken };
+    },
+    list(options) {
+      const rows = ((options == null ? void 0 : options.includeInactive) === true ? selectAll : selectActive).all();
+      return rows.map((row) => withUsers(mapTerminalRow(row)));
+    },
+    findById: read,
+    findByToken(deviceToken, now) {
+      const row = selectByToken.get(hashToken(deviceToken));
+      if (!row) {
+        return null;
+      }
+      const record = mapTerminalRow(row);
+      return usable(record, now != null ? now : Math.floor(Date.now() / 1e3)) ? withUsers(record) : null;
+    },
+    startSession(input) {
+      var _a;
+      const terminal = read(input.id);
+      if (!terminal) {
+        throw new import_errors.NotFoundError(`terminal ${input.id} not found`);
+      }
+      const now = (_a = input.now) != null ? _a : Math.floor(Date.now() / 1e3);
+      const expiresAt = now + input.ttlMinutes * 60;
+      const terminalSession = newToken();
+      updateSession.run(hashToken(terminalSession), expiresAt, input.id);
+      return { terminalSession, expiresAt };
+    },
+    findBySession(terminalSession, now) {
+      const row = selectBySession.get(hashToken(terminalSession));
+      if (!row) {
+        return null;
+      }
+      const record = mapTerminalRow(row);
+      const at = now != null ? now : Math.floor(Date.now() / 1e3);
+      if (!usable(record, at) || record.sessionExpiresAt === null || record.sessionExpiresAt <= at) {
+        return null;
+      }
+      return withUsers(record);
+    },
+    touch(input) {
+      var _a;
+      const now = (_a = input.now) != null ? _a : Math.floor(Date.now() / 1e3);
+      const expiresAt = now + input.ttlMinutes * 60;
+      updateHeartbeat.run(expiresAt, now, input.id);
+      return { expiresAt };
+    },
+    setUsers(input) {
+      var _a, _b;
+      const terminal = read(input.id);
+      if (!terminal) {
+        throw new import_errors.NotFoundError(`terminal ${input.id} not found`);
+      }
+      const userIds = [...new Set(input.userIds)];
+      const now = (_a = input.now) != null ? _a : Math.floor(Date.now() / 1e3);
+      const run = db.transaction(() => {
+        var _a2;
+        deleteUsers.run(input.id);
+        for (const userId of userIds) {
+          insertUser.run(input.id, userId, now);
+        }
+        (0, import_audit.writeAuditLog)(db, {
+          atUtc: now,
+          actorId: input.actorId,
+          action: "terminal.users",
+          entity: "kiosk_terminal",
+          entityId: input.id,
+          detail: { name: terminal.name, userIds },
+          ip: (_a2 = input.actorIp) != null ? _a2 : null
+        });
+      });
+      run();
+      return (_b = read(input.id)) != null ? _b : terminal;
+    },
+    revoke(input) {
+      var _a;
+      const terminal = read(input.id);
+      if (!terminal || !terminal.isActive) {
+        return false;
+      }
+      const now = (_a = input.now) != null ? _a : Math.floor(Date.now() / 1e3);
+      const run = db.transaction(() => {
+        var _a2;
+        deactivate.run(input.id);
+        (0, import_audit.writeAuditLog)(db, {
+          atUtc: now,
+          actorId: input.actorId,
+          action: "terminal.revoke",
+          entity: "kiosk_terminal",
+          entityId: input.id,
+          detail: { name: terminal.name },
+          ip: (_a2 = input.actorIp) != null ? _a2 : null
+        });
+      });
+      run();
+      return true;
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createTerminalsRepository,
+  hashToken,
+  newToken
+});
+//# sourceMappingURL=terminals.js.map

package/build/lib/db/repositories/terminals.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/lib/db/repositories/terminals.ts"],
+  "sourcesContent": ["/**\n * Kiosk terminals (`kiosk_terminals`).\n *\n * A terminal authenticates with a **device token** that is handed out exactly once (only its SHA-256 hash is\n * stored) and that can be revoked and given an expiry. A device exchanges the token for a **short lived\n * session**, which is stored as a hash as well and is extended by the heartbeat of the device. The repository\n * never returns a token or a session \u2014 it only ever sees their hashes.\n */\n\nimport { createHash, randomBytes } from \"node:crypto\";\nimport type { Db } from \"../database\";\nimport { NotFoundError, ValidationError } from \"../../errors\";\nimport { writeAuditLog } from \"./audit\";\n\n/** A kiosk terminal as it is stored (without any secret). */\nexport interface TerminalRecord {\n\t/** Primary key */\n\tid: number;\n\t/** Display name, e.g. `Werkstatt` */\n\tname: string;\n\t/** Optional location of the device */\n\tlocation: string | null;\n\t/** True when a badge has to be combined with the personal PIN */\n\tpinRequired: boolean;\n\t/** False for revoked devices */\n\tisActive: boolean;\n\t/** Instant the device token expires, `null` = never */\n\texpiresAt: number | null;\n\t/** Instant of the last heartbeat, `null` if the device never called */\n\tlastSeenAt: number | null;\n\t/** Instant the current session expires, `null` when there is none */\n\tsessionExpiresAt: number | null;\n\t/** Instant of creation, UTC epoch seconds */\n\tcreatedAt: number;\n\t/** Employees shown on this terminal; an empty list means \u201Call employees\u201D */\n\tuserIds: number[];\n}\n\n/** Terminal storage operations. */\nexport interface TerminalsRepository {\n\t/** Creates a terminal and returns its device token (the only time it is visible) */\n\tcreate(input: {\n\t\tname: string;\n\t\tlocation?: string | null;\n\t\tpinRequired?: boolean;\n\t\t/** Employees shown on the terminal; leave it out for \u201Call employees\u201D */\n\t\tuserIds?: number[];\n\t\t/** Days until the device token expires, `null` = never */\n\t\tttlDays?: number | null;\n\t\tactorId: number;\n\t\tactorIp?: string | null;\n\t\tnow?: number;\n\t}): { terminal: TerminalRecord; deviceToken: string };\n\t/** All terminals, optionally including the revoked ones */\n\tlist(options?: { includeInactive?: boolean }): TerminalRecord[];\n\t/** Reads a terminal by id */\n\tfindById(id: number): TerminalRecord | null;\n\t/** Resolves a device token (checks revocation and expiry) */\n\tfindByToken(deviceToken: string, now?: number): TerminalRecord | null;\n\t/** Starts a session for a device and returns the session token (replaces a running session) */\n\tstartSession(input: { id: number; ttlMinutes: number; now?: number }): {\n\t\tterminalSession: string;\n\t\texpiresAt: number;\n\t};\n\t/** Resolves a session token (checks revocation and expiry) */\n\tfindBySession(terminalSession: string, now?: number): TerminalRecord | null;\n\t/** Extends a session and records the heartbeat */\n\ttouch(input: { id: number; ttlMinutes: number; now?: number }): { expiresAt: number };\n\t/** Replaces the employees of a terminal (an empty list means \u201Call employees\u201D) */\n\tsetUsers(input: {\n\t\tid: number;\n\t\tuserIds: number[];\n\t\tactorId: number;\n\t\tactorIp?: string | null;\n\t\tnow?: number;\n\t}): TerminalRecord;\n\t/** Deactivates a terminal and ends its session */\n\trevoke(input: { id: number; actorId: number; actorIp?: string | null; now?: number }): boolean;\n}\n\n/**\n * Builds the hash of a token (device token or session).\n *\n * @param token - token in clear text\n * @returns hex encoded SHA-256 hash\n */\nexport function hashToken(token: string): string {\n\treturn createHash(\"sha256\").update(token).digest(\"hex\");\n}\n\n/**\n * Creates a random token.\n *\n * @returns base64url encoded token\n */\nexport function newToken(): string {\n\treturn randomBytes(32).toString(\"base64url\");\n}\n\ninterface TerminalRow {\n\tid: number;\n\tname: string;\n\tlocation: string | null;\n\tpin_required: number;\n\tis_active: number;\n\texpires_at: number | null;\n\tlast_seen_at: number | null;\n\tsession_expires_at: number | null;\n\tcreated_at: number;\n}\n\nconst TERMINAL_COLUMNS = `id, name, location, pin_required, is_active, expires_at, last_seen_at,\n\tsession_expires_at, created_at`;\n\n/**\n * Maps a database row to a terminal record (without its employees \u2014 they live in `terminal_users`).\n *\n * @param row - raw database row\n * @returns terminal record\n */\nfunction mapTerminalRow(row: TerminalRow): Omit<TerminalRecord, \"userIds\"> {\n\treturn {\n\t\tid: row.id,\n\t\tname: row.name,\n\t\tlocation: row.location,\n\t\tpinRequired: row.pin_required !== 0,\n\t\tisActive: row.is_active !== 0,\n\t\texpiresAt: row.expires_at,\n\t\tlastSeenAt: row.last_seen_at,\n\t\tsessionExpiresAt: row.session_expires_at,\n\t\tcreatedAt: row.created_at,\n\t};\n}\n\n/**\n * Creates the terminals repository.\n *\n * @param db - open database handle\n * @returns repository instance\n */\nexport function createTerminalsRepository(db: Db): TerminalsRepository {\n\tconst insertTerminal = db.prepare(\n\t\t`INSERT INTO kiosk_terminals (name, location, token_hash, pin_required, is_active, expires_at, created_at)\n\t\t VALUES (?, ?, ?, ?, 1, ?, ?)`,\n\t);\n\tconst selectById = db.prepare(`SELECT ${TERMINAL_COLUMNS} FROM kiosk_terminals WHERE id = ?`);\n\tconst selectByToken = db.prepare(`SELECT ${TERMINAL_COLUMNS} FROM kiosk_terminals WHERE token_hash = ?`);\n\tconst selectBySession = db.prepare(`SELECT ${TERMINAL_COLUMNS} FROM kiosk_terminals WHERE session_hash = ?`);\n\tconst selectAll = db.prepare(`SELECT ${TERMINAL_COLUMNS} FROM kiosk_terminals ORDER BY name COLLATE NOCASE, id`);\n\tconst selectActive = db.prepare(\n\t\t`SELECT ${TERMINAL_COLUMNS} FROM kiosk_terminals WHERE is_active = 1 ORDER BY name COLLATE NOCASE, id`,\n\t);\n\tconst updateSession = db.prepare(\n\t\t\"UPDATE kiosk_terminals SET session_hash = ?, session_expires_at = ? WHERE id = ?\",\n\t);\n\tconst updateHeartbeat = db.prepare(\n\t\t\"UPDATE kiosk_terminals SET session_expires_at = ?, last_seen_at = ? WHERE id = ?\",\n\t);\n\tconst deactivate = db.prepare(\n\t\t\"UPDATE kiosk_terminals SET is_active = 0, session_hash = NULL, session_expires_at = NULL WHERE id = ?\",\n\t);\n\tconst selectUsers = db.prepare(\n\t\t\"SELECT user_id AS userId FROM terminal_users WHERE terminal_id = ? ORDER BY user_id\",\n\t);\n\tconst deleteUsers = db.prepare(\"DELETE FROM terminal_users WHERE terminal_id = ?\");\n\tconst insertUser = db.prepare(\n\t\t\"INSERT OR IGNORE INTO terminal_users (terminal_id, user_id, created_at) VALUES (?, ?, ?)\",\n\t);\n\n\t/**\n\t * Attaches the employees of a terminal.\n\t *\n\t * @param record - terminal without its employees\n\t * @returns the terminal with its employees (an empty list means \u201Call employees\u201D)\n\t */\n\tconst withUsers = (record: Omit<TerminalRecord, \"userIds\">): TerminalRecord => ({\n\t\t...record,\n\t\tuserIds: (selectUsers.all(record.id) as { userId: number }[]).map(row => row.userId),\n\t});\n\n\t/**\n\t * Reads a terminal.\n\t *\n\t * @param id - terminal id\n\t * @returns terminal or `null`\n\t */\n\tconst read = (id: number): TerminalRecord | null => {\n\t\tconst row = selectById.get(id) as TerminalRow | undefined;\n\t\treturn row ? withUsers(mapTerminalRow(row)) : null;\n\t};\n\n\t/**\n\t * Checks whether a device may still be used.\n\t *\n\t * @param record - terminal\n\t * @param now - instant\n\t * @returns true when the device is active and its token has not expired\n\t */\n\tconst usable = (record: Omit<TerminalRecord, \"userIds\">, now: number): boolean =>\n\t\trecord.isActive && (record.expiresAt === null || record.expiresAt > now);\n\n\treturn {\n\t\tcreate(input: {\n\t\t\tname: string;\n\t\t\tlocation?: string | null;\n\t\t\tpinRequired?: boolean;\n\t\t\tuserIds?: number[];\n\t\t\tttlDays?: number | null;\n\t\t\tactorId: number;\n\t\t\tactorIp?: string | null;\n\t\t\tnow?: number;\n\t\t}): { terminal: TerminalRecord; deviceToken: string } {\n\t\t\tconst name = input.name.trim();\n\t\t\tif (!name) {\n\t\t\t\tthrow new ValidationError(\"name is required\");\n\t\t\t}\n\t\t\tconst ttlDays = input.ttlDays ?? null;\n\t\t\tif (ttlDays !== null && (!Number.isInteger(ttlDays) || ttlDays <= 0)) {\n\t\t\t\tthrow new ValidationError(`ttlDays must be a positive whole number (got ${input.ttlDays})`);\n\t\t\t}\n\t\t\tconst now = input.now ?? Math.floor(Date.now() / 1000);\n\t\t\tconst deviceToken = newToken();\n\t\t\tconst expiresAt = ttlDays === null ? null : now + ttlDays * 86400;\n\t\t\tconst userIds = [...new Set(input.userIds ?? [])];\n\n\t\t\tlet terminalId = 0;\n\t\t\tconst run = db.transaction((): void => {\n\t\t\t\tconst result = insertTerminal.run(\n\t\t\t\t\tname,\n\t\t\t\t\tinput.location ?? null,\n\t\t\t\t\thashToken(deviceToken),\n\t\t\t\t\t(input.pinRequired ?? true) ? 1 : 0,\n\t\t\t\t\texpiresAt,\n\t\t\t\t\tnow,\n\t\t\t\t);\n\t\t\t\tterminalId = Number(result.lastInsertRowid);\n\t\t\t\twriteAuditLog(db, {\n\t\t\t\t\tatUtc: now,\n\t\t\t\t\tactorId: input.actorId,\n\t\t\t\t\taction: \"terminal.create\",\n\t\t\t\t\tentity: \"kiosk_terminal\",\n\t\t\t\t\tentityId: terminalId,\n\t\t\t\t\t// the token itself is never part of the audit trail\n\t\t\t\t\tdetail: {\n\t\t\t\t\t\tname,\n\t\t\t\t\t\tlocation: input.location ?? null,\n\t\t\t\t\t\tpinRequired: input.pinRequired ?? true,\n\t\t\t\t\t\texpiresAt,\n\t\t\t\t\t\tuserIds,\n\t\t\t\t\t},\n\t\t\t\t\tip: input.actorIp ?? null,\n\t\t\t\t});\n\t\t\t\t// the employees of this terminal (none = all employees)\n\t\t\t\tfor (const userId of userIds) {\n\t\t\t\t\tinsertUser.run(terminalId, userId, now);\n\t\t\t\t}\n\t\t\t});\n\t\t\trun();\n\n\t\t\tconst terminal = read(terminalId);\n\t\t\tif (!terminal) {\n\t\t\t\tthrow new Error(`terminal ${terminalId} disappeared right after creation`);\n\t\t\t}\n\t\t\treturn { terminal, deviceToken };\n\t\t},\n\n\t\tlist(options?: { includeInactive?: boolean }): TerminalRecord[] {\n\t\t\tconst rows = (options?.includeInactive === true ? selectAll : selectActive).all() as TerminalRow[];\n\t\t\treturn rows.map(row => withUsers(mapTerminalRow(row)));\n\t\t},\n\n\t\tfindById: read,\n\n\t\tfindByToken(deviceToken: string, now?: number): TerminalRecord | null {\n\t\t\tconst row = selectByToken.get(hashToken(deviceToken)) as TerminalRow | undefined;\n\t\t\tif (!row) {\n\t\t\t\treturn null;\n\t\t\t}\n\t\t\tconst record = mapTerminalRow(row);\n\t\t\treturn usable(record, now ?? Math.floor(Date.now() / 1000)) ? withUsers(record) : null;\n\t\t},\n\n\t\tstartSession(input: { id: number; ttlMinutes: number; now?: number }): {\n\t\t\tterminalSession: string;\n\t\t\texpiresAt: number;\n\t\t} {\n\t\t\tconst terminal = read(input.id);\n\t\t\tif (!terminal) {\n\t\t\t\tthrow new NotFoundError(`terminal ${input.id} not found`);\n\t\t\t}\n\t\t\tconst now = input.now ?? Math.floor(Date.now() / 1000);\n\t\t\tconst expiresAt = now + input.ttlMinutes * 60;\n\t\t\tconst terminalSession = newToken();\n\t\t\t// a new session replaces a running one, so a stolen session cannot be used in parallel\n\t\t\tupdateSession.run(hashToken(terminalSession), expiresAt, input.id);\n\t\t\treturn { terminalSession, expiresAt };\n\t\t},\n\n\t\tfindBySession(terminalSession: string, now?: number): TerminalRecord | null {\n\t\t\tconst row = selectBySession.get(hashToken(terminalSession)) as TerminalRow | undefined;\n\t\t\tif (!row) {\n\t\t\t\treturn null;\n\t\t\t}\n\t\t\tconst record = mapTerminalRow(row);\n\t\t\tconst at = now ?? Math.floor(Date.now() / 1000);\n\t\t\tif (!usable(record, at) || record.sessionExpiresAt === null || record.sessionExpiresAt <= at) {\n\t\t\t\treturn null;\n\t\t\t}\n\t\t\treturn withUsers(record);\n\t\t},\n\n\t\ttouch(input: { id: number; ttlMinutes: number; now?: number }): { expiresAt: number } {\n\t\t\tconst now = input.now ?? Math.floor(Date.now() / 1000);\n\t\t\tconst expiresAt = now + input.ttlMinutes * 60;\n\t\t\tupdateHeartbeat.run(expiresAt, now, input.id);\n\t\t\treturn { expiresAt };\n\t\t},\n\n\t\tsetUsers(input: {\n\t\t\tid: number;\n\t\t\tuserIds: number[];\n\t\t\tactorId: number;\n\t\t\tactorIp?: string | null;\n\t\t\tnow?: number;\n\t\t}): TerminalRecord {\n\t\t\tconst terminal = read(input.id);\n\t\t\tif (!terminal) {\n\t\t\t\tthrow new NotFoundError(`terminal ${input.id} not found`);\n\t\t\t}\n\t\t\tconst userIds = [...new Set(input.userIds)];\n\t\t\tconst now = input.now ?? Math.floor(Date.now() / 1000);\n\t\t\tconst run = db.transaction((): void => {\n\t\t\t\tdeleteUsers.run(input.id);\n\t\t\t\tfor (const userId of userIds) {\n\t\t\t\t\tinsertUser.run(input.id, userId, now);\n\t\t\t\t}\n\t\t\t\twriteAuditLog(db, {\n\t\t\t\t\tatUtc: now,\n\t\t\t\t\tactorId: input.actorId,\n\t\t\t\t\taction: \"terminal.users\",\n\t\t\t\t\tentity: \"kiosk_terminal\",\n\t\t\t\t\tentityId: input.id,\n\t\t\t\t\tdetail: { name: terminal.name, userIds },\n\t\t\t\t\tip: input.actorIp ?? null,\n\t\t\t\t});\n\t\t\t});\n\t\t\trun();\n\n\t\t\treturn read(input.id) ?? terminal;\n\t\t},\n\n\t\trevoke(input: { id: number; actorId: number; actorIp?: string | null; now?: number }): boolean {\n\t\t\tconst terminal = read(input.id);\n\t\t\tif (!terminal || !terminal.isActive) {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tconst now = input.now ?? Math.floor(Date.now() / 1000);\n\t\t\tconst run = db.transaction((): void => {\n\t\t\t\tdeactivate.run(input.id);\n\t\t\t\twriteAuditLog(db, {\n\t\t\t\t\tatUtc: now,\n\t\t\t\t\tactorId: input.actorId,\n\t\t\t\t\taction: \"terminal.revoke\",\n\t\t\t\t\tentity: \"kiosk_terminal\",\n\t\t\t\t\tentityId: input.id,\n\t\t\t\t\tdetail: { name: terminal.name },\n\t\t\t\t\tip: input.actorIp ?? null,\n\t\t\t\t});\n\t\t\t});\n\t\t\trun();\n\t\t\treturn true;\n\t\t},\n\t};\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AASA,yBAAwC;AAExC,oBAA+C;AAC/C,mBAA8B;AA0EvB,SAAS,UAAU,OAAuB;AAChD,aAAO,+BAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;AACvD;AAOO,SAAS,WAAmB;AAClC,aAAO,gCAAY,EAAE,EAAE,SAAS,WAAW;AAC5C;AAcA,MAAM,mBAAmB;AAAA;AASzB,SAAS,eAAe,KAAmD;AAC1E,SAAO;AAAA,IACN,IAAI,IAAI;AAAA,IACR,MAAM,IAAI;AAAA,IACV,UAAU,IAAI;AAAA,IACd,aAAa,IAAI,iBAAiB;AAAA,IAClC,UAAU,IAAI,cAAc;AAAA,IAC5B,WAAW,IAAI;AAAA,IACf,YAAY,IAAI;AAAA,IAChB,kBAAkB,IAAI;AAAA,IACtB,WAAW,IAAI;AAAA,EAChB;AACD;AAQO,SAAS,0BAA0B,IAA6B;AACtE,QAAM,iBAAiB,GAAG;AAAA,IACzB;AAAA;AAAA,EAED;AACA,QAAM,aAAa,GAAG,QAAQ,UAAU,gBAAgB,oCAAoC;AAC5F,QAAM,gBAAgB,GAAG,QAAQ,UAAU,gBAAgB,4CAA4C;AACvG,QAAM,kBAAkB,GAAG,QAAQ,UAAU,gBAAgB,8CAA8C;AAC3G,QAAM,YAAY,GAAG,QAAQ,UAAU,gBAAgB,wDAAwD;AAC/G,QAAM,eAAe,GAAG;AAAA,IACvB,UAAU,gBAAgB;AAAA,EAC3B;AACA,QAAM,gBAAgB,GAAG;AAAA,IACxB;AAAA,EACD;AACA,QAAM,kBAAkB,GAAG;AAAA,IAC1B;AAAA,EACD;AACA,QAAM,aAAa,GAAG;AAAA,IACrB;AAAA,EACD;AACA,QAAM,cAAc,GAAG;AAAA,IACtB;AAAA,EACD;AACA,QAAM,cAAc,GAAG,QAAQ,kDAAkD;AACjF,QAAM,aAAa,GAAG;AAAA,IACrB;AAAA,EACD;AAQA,QAAM,YAAY,CAAC,YAA6D;AAAA,IAC/E,GAAG;AAAA,IACH,SAAU,YAAY,IAAI,OAAO,EAAE,EAA2B,IAAI,SAAO,IAAI,MAAM;AAAA,EACpF;AAQA,QAAM,OAAO,CAAC,OAAsC;AACnD,UAAM,MAAM,WAAW,IAAI,EAAE;AAC7B,WAAO,MAAM,UAAU,eAAe,GAAG,CAAC,IAAI;AAAA,EAC/C;AASA,QAAM,SAAS,CAAC,QAAyC,QACxD,OAAO,aAAa,OAAO,cAAc,QAAQ,OAAO,YAAY;AAErE,SAAO;AAAA,IACN,OAAO,OAS+C;AAnNxD;AAoNG,YAAM,OAAO,MAAM,KAAK,KAAK;AAC7B,UAAI,CAAC,MAAM;AACV,cAAM,IAAI,8BAAgB,kBAAkB;AAAA,MAC7C;AACA,YAAM,WAAU,WAAM,YAAN,YAAiB;AACjC,UAAI,YAAY,SAAS,CAAC,OAAO,UAAU,OAAO,KAAK,WAAW,IAAI;AACrE,cAAM,IAAI,8BAAgB,gDAAgD,MAAM,OAAO,GAAG;AAAA,MAC3F;AACA,YAAM,OAAM,WAAM,QAAN,YAAa,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACrD,YAAM,cAAc,SAAS;AAC7B,YAAM,YAAY,YAAY,OAAO,OAAO,MAAM,UAAU;AAC5D,YAAM,UAAU,CAAC,GAAG,IAAI,KAAI,WAAM,YAAN,YAAiB,CAAC,CAAC,CAAC;AAEhD,UAAI,aAAa;AACjB,YAAM,MAAM,GAAG,YAAY,MAAY;AAlO1C,YAAAA,KAAAC,KAAAC,KAAA;AAmOI,cAAM,SAAS,eAAe;AAAA,UAC7B;AAAA,WACAF,MAAA,MAAM,aAAN,OAAAA,MAAkB;AAAA,UAClB,UAAU,WAAW;AAAA,YACpBC,MAAA,MAAM,gBAAN,OAAAA,MAAqB,QAAQ,IAAI;AAAA,UAClC;AAAA,UACA;AAAA,QACD;AACA,qBAAa,OAAO,OAAO,eAAe;AAC1C,wCAAc,IAAI;AAAA,UACjB,OAAO;AAAA,UACP,SAAS,MAAM;AAAA,UACf,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,UAAU;AAAA;AAAA,UAEV,QAAQ;AAAA,YACP;AAAA,YACA,WAAUC,MAAA,MAAM,aAAN,OAAAA,MAAkB;AAAA,YAC5B,cAAa,WAAM,gBAAN,YAAqB;AAAA,YAClC;AAAA,YACA;AAAA,UACD;AAAA,UACA,KAAI,WAAM,YAAN,YAAiB;AAAA,QACtB,CAAC;AAED,mBAAW,UAAU,SAAS;AAC7B,qBAAW,IAAI,YAAY,QAAQ,GAAG;AAAA,QACvC;AAAA,MACD,CAAC;AACD,UAAI;AAEJ,YAAM,WAAW,KAAK,UAAU;AAChC,UAAI,CAAC,UAAU;AACd,cAAM,IAAI,MAAM,YAAY,UAAU,mCAAmC;AAAA,MAC1E;AACA,aAAO,EAAE,UAAU,YAAY;AAAA,IAChC;AAAA,IAEA,KAAK,SAA2D;AAC/D,YAAM,SAAQ,mCAAS,qBAAoB,OAAO,YAAY,cAAc,IAAI;AAChF,aAAO,KAAK,IAAI,SAAO,UAAU,eAAe,GAAG,CAAC,CAAC;AAAA,IACtD;AAAA,IAEA,UAAU;AAAA,IAEV,YAAY,aAAqB,KAAqC;AACrE,YAAM,MAAM,cAAc,IAAI,UAAU,WAAW,CAAC;AACpD,UAAI,CAAC,KAAK;AACT,eAAO;AAAA,MACR;AACA,YAAM,SAAS,eAAe,GAAG;AACjC,aAAO,OAAO,QAAQ,oBAAO,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,CAAC,IAAI,UAAU,MAAM,IAAI;AAAA,IACnF;AAAA,IAEA,aAAa,OAGX;AA7RJ;AA8RG,YAAM,WAAW,KAAK,MAAM,EAAE;AAC9B,UAAI,CAAC,UAAU;AACd,cAAM,IAAI,4BAAc,YAAY,MAAM,EAAE,YAAY;AAAA,MACzD;AACA,YAAM,OAAM,WAAM,QAAN,YAAa,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACrD,YAAM,YAAY,MAAM,MAAM,aAAa;AAC3C,YAAM,kBAAkB,SAAS;AAEjC,oBAAc,IAAI,UAAU,eAAe,GAAG,WAAW,MAAM,EAAE;AACjE,aAAO,EAAE,iBAAiB,UAAU;AAAA,IACrC;AAAA,IAEA,cAAc,iBAAyB,KAAqC;AAC3E,YAAM,MAAM,gBAAgB,IAAI,UAAU,eAAe,CAAC;AAC1D,UAAI,CAAC,KAAK;AACT,eAAO;AAAA,MACR;AACA,YAAM,SAAS,eAAe,GAAG;AACjC,YAAM,KAAK,oBAAO,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAC9C,UAAI,CAAC,OAAO,QAAQ,EAAE,KAAK,OAAO,qBAAqB,QAAQ,OAAO,oBAAoB,IAAI;AAC7F,eAAO;AAAA,MACR;AACA,aAAO,UAAU,MAAM;AAAA,IACxB;AAAA,IAEA,MAAM,OAAgF;AAvTxF;AAwTG,YAAM,OAAM,WAAM,QAAN,YAAa,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACrD,YAAM,YAAY,MAAM,MAAM,aAAa;AAC3C,sBAAgB,IAAI,WAAW,KAAK,MAAM,EAAE;AAC5C,aAAO,EAAE,UAAU;AAAA,IACpB;AAAA,IAEA,SAAS,OAMU;AApUrB;AAqUG,YAAM,WAAW,KAAK,MAAM,EAAE;AAC9B,UAAI,CAAC,UAAU;AACd,cAAM,IAAI,4BAAc,YAAY,MAAM,EAAE,YAAY;AAAA,MACzD;AACA,YAAM,UAAU,CAAC,GAAG,IAAI,IAAI,MAAM,OAAO,CAAC;AAC1C,YAAM,OAAM,WAAM,QAAN,YAAa,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACrD,YAAM,MAAM,GAAG,YAAY,MAAY;AA3U1C,YAAAF;AA4UI,oBAAY,IAAI,MAAM,EAAE;AACxB,mBAAW,UAAU,SAAS;AAC7B,qBAAW,IAAI,MAAM,IAAI,QAAQ,GAAG;AAAA,QACrC;AACA,wCAAc,IAAI;AAAA,UACjB,OAAO;AAAA,UACP,SAAS,MAAM;AAAA,UACf,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,UAAU,MAAM;AAAA,UAChB,QAAQ,EAAE,MAAM,SAAS,MAAM,QAAQ;AAAA,UACvC,KAAIA,MAAA,MAAM,YAAN,OAAAA,MAAiB;AAAA,QACtB,CAAC;AAAA,MACF,CAAC;AACD,UAAI;AAEJ,cAAO,UAAK,MAAM,EAAE,MAAb,YAAkB;AAAA,IAC1B;AAAA,IAEA,OAAO,OAAwF;AA/VjG;AAgWG,YAAM,WAAW,KAAK,MAAM,EAAE;AAC9B,UAAI,CAAC,YAAY,CAAC,SAAS,UAAU;AACpC,eAAO;AAAA,MACR;AACA,YAAM,OAAM,WAAM,QAAN,YAAa,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACrD,YAAM,MAAM,GAAG,YAAY,MAAY;AArW1C,YAAAA;AAsWI,mBAAW,IAAI,MAAM,EAAE;AACvB,wCAAc,IAAI;AAAA,UACjB,OAAO;AAAA,UACP,SAAS,MAAM;AAAA,UACf,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,UAAU,MAAM;AAAA,UAChB,QAAQ,EAAE,MAAM,SAAS,KAAK;AAAA,UAC9B,KAAIA,MAAA,MAAM,YAAN,OAAAA,MAAiB;AAAA,QACtB,CAAC;AAAA,MACF,CAAC;AACD,UAAI;AACJ,aAAO;AAAA,IACR;AAAA,EACD;AACD;",
+  "names": ["_a", "_b", "_c"]
+}

package/build/lib/db/repositories/triggers.js

@@ -0,0 +1,240 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var triggers_exports = {};
+__export(triggers_exports, {
+  createTriggersRepository: () => createTriggersRepository,
+  mapTriggerRuleRow: () => mapTriggerRuleRow
+});
+module.exports = __toCommonJS(triggers_exports);
+var import_errors = require("../../errors");
+var import_audit = require("./audit");
+const TRIGGER_COLUMNS = "id, label, source_state, mode, condition, user_id, action, is_active, cooldown_sec, last_fired_at";
+const AUDITED_TRIGGER_FIELDS = [
+  "label",
+  "sourceState",
+  "mode",
+  "condition",
+  "userId",
+  "action",
+  "isActive",
+  "cooldownSec"
+];
+const MODES = ["condition", "user"];
+const ACTIONS = ["punch", "quickPunch", "present", "absent"];
+function mapTriggerRuleRow(row) {
+  return {
+    id: row.id,
+    label: row.label,
+    sourceState: row.source_state,
+    mode: row.mode === "user" ? "user" : "condition",
+    condition: row.condition,
+    userId: row.user_id,
+    action: ACTIONS.includes(row.action) ? row.action : "punch",
+    isActive: row.is_active !== 0,
+    cooldownSec: row.cooldown_sec,
+    lastFiredAt: row.last_fired_at
+  };
+}
+function requireSourceState(value) {
+  const state = (value != null ? value : "").trim();
+  if (!state) {
+    throw new import_errors.ValidationError("sourceState is required");
+  }
+  if (/\s/.test(state)) {
+    throw new import_errors.ValidationError(`sourceState must not contain whitespace (got "${value}")`);
+  }
+  return state;
+}
+function requireMode(value) {
+  if (value === void 0) {
+    return "condition";
+  }
+  if (!MODES.includes(value)) {
+    throw new import_errors.ValidationError(`mode must be one of ${MODES.join(", ")} (got ${value})`);
+  }
+  return value;
+}
+function requireAction(value) {
+  if (value === void 0) {
+    return "punch";
+  }
+  if (!ACTIONS.includes(value)) {
+    throw new import_errors.ValidationError(`action must be one of ${ACTIONS.join(", ")} (got ${value})`);
+  }
+  return value;
+}
+function requireCooldown(value) {
+  const cooldown = value != null ? value : 0;
+  if (!Number.isInteger(cooldown) || cooldown < 0 || cooldown > 86400) {
+    throw new import_errors.ValidationError(`cooldownSec must be a whole number of seconds between 0 and 86400 (got ${value})`);
+  }
+  return cooldown;
+}
+function createTriggersRepository(db) {
+  const selectById = db.prepare(`SELECT ${TRIGGER_COLUMNS} FROM trigger_rules WHERE id = ?`);
+  const selectAll = db.prepare(`SELECT ${TRIGGER_COLUMNS} FROM trigger_rules ORDER BY id`);
+  const selectActive = db.prepare(`SELECT ${TRIGGER_COLUMNS} FROM trigger_rules WHERE is_active = 1 ORDER BY id`);
+  const insertRule = db.prepare(
+    `INSERT INTO trigger_rules
+		 (label, source_state, mode, condition, user_id, action, is_active, cooldown_sec, created_at, updated_at)
+		 VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
+  );
+  const updateRule = db.prepare(
+    `UPDATE trigger_rules
+		 SET label = ?, source_state = ?, mode = ?, condition = ?, user_id = ?, action = ?, is_active = ?,
+		     cooldown_sec = ?, updated_at = ?
+		 WHERE id = ?`
+  );
+  const deleteRule = db.prepare("DELETE FROM trigger_rules WHERE id = ?");
+  const touchFired = db.prepare("UPDATE trigger_rules SET last_fired_at = ? WHERE id = ?");
+  const read = (id) => {
+    const row = selectById.get(id);
+    return row ? mapTriggerRuleRow(row) : null;
+  };
+  return {
+    list(options) {
+      const rows = ((options == null ? void 0 : options.includeInactive) === true ? selectAll : selectActive).all();
+      return rows.map(mapTriggerRuleRow);
+    },
+    findById: read,
+    save(input) {
+      var _a, _b, _c, _d, _e, _f, _g;
+      const sourceState = requireSourceState(input.sourceState);
+      const mode = requireMode(input.mode);
+      const action = requireAction(input.action);
+      const cooldownSec = requireCooldown(input.cooldownSec);
+      const label = ((_a = input.label) != null ? _a : "").trim() || null;
+      const isActive = input.isActive !== false;
+      const now = (_b = input.now) != null ? _b : Math.floor(Date.now() / 1e3);
+      const condition = mode === "condition" ? ((_c = input.condition) != null ? _c : "").trim() : null;
+      if (mode === "condition" && !condition) {
+        throw new import_errors.ValidationError("condition is required for mode condition");
+      }
+      const userId = mode === "condition" ? (_d = input.userId) != null ? _d : null : null;
+      if (mode === "condition" && (!Number.isInteger(userId) || (userId != null ? userId : 0) <= 0)) {
+        throw new import_errors.ValidationError(`userId must reference an existing employee (got ${input.userId})`);
+      }
+      const current = input.id === void 0 ? null : read(input.id);
+      if (input.id !== void 0 && !current) {
+        throw new import_errors.NotFoundError(`trigger rule ${input.id} not found`);
+      }
+      const next = {
+        id: (_e = current == null ? void 0 : current.id) != null ? _e : 0,
+        label,
+        sourceState,
+        mode,
+        condition,
+        userId,
+        action,
+        isActive,
+        cooldownSec,
+        lastFiredAt: (_f = current == null ? void 0 : current.lastFiredAt) != null ? _f : null
+      };
+      const changes = current ? (0, import_audit.diffFields)(
+        current,
+        next,
+        AUDITED_TRIGGER_FIELDS
+      ) : null;
+      if (current && Object.keys(changes != null ? changes : {}).length === 0) {
+        return current;
+      }
+      let ruleId = (_g = current == null ? void 0 : current.id) != null ? _g : 0;
+      const run = db.transaction(() => {
+        var _a2;
+        if (current) {
+          updateRule.run(
+            label,
+            sourceState,
+            mode,
+            condition,
+            userId,
+            action,
+            isActive ? 1 : 0,
+            cooldownSec,
+            now,
+            current.id
+          );
+        } else {
+          ruleId = Number(
+            insertRule.run(
+              label,
+              sourceState,
+              mode,
+              condition,
+              userId,
+              action,
+              isActive ? 1 : 0,
+              cooldownSec,
+              now,
+              now
+            ).lastInsertRowid
+          );
+        }
+        (0, import_audit.writeAuditLog)(db, {
+          atUtc: now,
+          actorId: input.actorId,
+          action: current ? "trigger_rule.update" : "trigger_rule.create",
+          entity: "trigger_rule",
+          entityId: ruleId,
+          detail: current ? { changes } : { sourceState, mode, condition, userId, action, isActive, cooldownSec },
+          ip: (_a2 = input.actorIp) != null ? _a2 : null
+        });
+      });
+      run();
+      const saved = read(ruleId);
+      if (!saved) {
+        throw new Error(`trigger rule ${ruleId} disappeared right after the write`);
+      }
+      return saved;
+    },
+    remove(input) {
+      var _a;
+      const current = read(input.id);
+      if (!current) {
+        return false;
+      }
+      const now = (_a = input.now) != null ? _a : Math.floor(Date.now() / 1e3);
+      const run = db.transaction(() => {
+        var _a2;
+        deleteRule.run(input.id);
+        (0, import_audit.writeAuditLog)(db, {
+          atUtc: now,
+          actorId: input.actorId,
+          action: "trigger_rule.delete",
+          entity: "trigger_rule",
+          entityId: input.id,
+          detail: { sourceState: current.sourceState, mode: current.mode, action: current.action },
+          ip: (_a2 = input.actorIp) != null ? _a2 : null
+        });
+      });
+      run();
+      return true;
+    },
+    markFired(input) {
+      var _a;
+      touchFired.run((_a = input.now) != null ? _a : Math.floor(Date.now() / 1e3), input.id);
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createTriggersRepository,
+  mapTriggerRuleRow
+});
+//# sourceMappingURL=triggers.js.map

package/build/lib/db/repositories/triggers.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/lib/db/repositories/triggers.ts"],
+  "sourcesContent": ["/**\n * Trigger rules (`trigger_rules`).\n *\n * A rule turns a write on a state of another adapter into a punch or a presence change. That is the ioBroker way\n * of connecting a fingerprint reader, a button or a door contact: configure the rule once in the administration\n * and the adapter keeps watching the state \u2014 no script, no second app, no HTTP call.\n *\n * Mode `condition`: the rule fires when the value of `sourceState` equals `condition`, and the punch goes to\n * `userId`. Mode `user`: the value itself names the employee (user id, login or display name), which fits a\n * reader that reports *who* touched it instead of a plain button.\n *\n * `cooldownSec` and `lastFiredAt` keep a chatty reader in check: a rule that fired less than the configured\n * seconds ago ignores the next write.\n */\n\nimport type { Db } from \"../database\";\nimport { NotFoundError, ValidationError } from \"../../errors\";\nimport { diffFields, writeAuditLog } from \"./audit\";\n\n/** How a rule decides which employee it fires for. */\nexport type TriggerMode = \"condition\" | \"user\";\n\n/** What a rule does when it fires. */\nexport type TriggerAction = \"punch\" | \"quickPunch\" | \"present\" | \"absent\";\n\n/** A trigger rule as it is stored. */\nexport interface TriggerRuleRecord {\n\t/** Primary key */\n\tid: number;\n\t/** Free-form label, shown in the administration */\n\tlabel: string | null;\n\t/** State of another adapter that is watched */\n\tsourceState: string;\n\t/** How the employee is resolved */\n\tmode: TriggerMode;\n\t/** Value the state has to carry to fire the rule (mode `condition`) */\n\tcondition: string | null;\n\t/** Employee the rule fires for (mode `condition`) */\n\tuserId: number | null;\n\t/** What happens when the rule fires */\n\taction: TriggerAction;\n\t/** Inactive rules are ignored but keep their history */\n\tisActive: boolean;\n\t/** Seconds that have to pass between two fires, `0` = no limit */\n\tcooldownSec: number;\n\t/** Instant the rule fired last, `null` when it never fired */\n\tlastFiredAt: number | null;\n}\n\n/** Input for creating or changing a rule. */\nexport interface SaveTriggerRuleInput {\n\t/** Id of an existing rule, omitted when a new rule is created */\n\tid?: number;\n\t/** Free-form label */\n\tlabel?: string | null;\n\t/** State of another adapter that is watched */\n\tsourceState: string;\n\t/** How the employee is resolved, defaults to `condition` */\n\tmode?: TriggerMode;\n\t/** Value the state has to carry (mode `condition`) */\n\tcondition?: string | null;\n\t/** Employee the rule fires for (mode `condition`) */\n\tuserId?: number | null;\n\t/** What happens when the rule fires, defaults to `punch` */\n\taction?: TriggerAction;\n\t/** `false` disables the rule without deleting it */\n\tisActive?: boolean;\n\t/** Seconds that have to pass between two fires */\n\tcooldownSec?: number;\n\t/** Who changes the rule */\n\tactorId: number;\n\t/** Client IP address of the actor */\n\tactorIp?: string | null;\n\t/** Instant of the change, defaults to now */\n\tnow?: number;\n}\n\n/** Rule storage operations. */\nexport interface TriggersRepository {\n\t/** All rules, optionally including the disabled ones */\n\tlist(options?: { includeInactive?: boolean }): TriggerRuleRecord[];\n\t/** Reads one rule */\n\tfindById(id: number): TriggerRuleRecord | null;\n\t/** Creates or updates a rule */\n\tsave(input: SaveTriggerRuleInput): TriggerRuleRecord;\n\t/** Deletes a rule */\n\tremove(input: { id: number; actorId: number; actorIp?: string | null; now?: number }): boolean;\n\t/** Records a fire (leaves `updatedAt` alone: the configuration did not change) */\n\tmarkFired(input: { id: number; now?: number }): void;\n}\n\n/** Raw database row of a rule. */\ninterface TriggerRuleRow {\n\tid: number;\n\tlabel: string | null;\n\tsource_state: string;\n\tmode: string;\n\tcondition: string | null;\n\tuser_id: number | null;\n\taction: string;\n\tis_active: number;\n\tcooldown_sec: number;\n\tlast_fired_at: number | null;\n}\n\nconst TRIGGER_COLUMNS =\n\t\"id, label, source_state, mode, condition, user_id, action, is_active, cooldown_sec, last_fired_at\";\n\n/** Field names of a rule that are compared for the audit trail. */\nconst AUDITED_TRIGGER_FIELDS: (keyof TriggerRuleRecord)[] = [\n\t\"label\",\n\t\"sourceState\",\n\t\"mode\",\n\t\"condition\",\n\t\"userId\",\n\t\"action\",\n\t\"isActive\",\n\t\"cooldownSec\",\n];\n\n/** Modes a rule may use. */\nconst MODES: TriggerMode[] = [\"condition\", \"user\"];\n\n/** Actions a rule may perform. */\nconst ACTIONS: TriggerAction[] = [\"punch\", \"quickPunch\", \"present\", \"absent\"];\n\n/**\n * Maps a database row to a rule record.\n *\n * @param row - raw database row\n * @returns rule record\n */\nexport function mapTriggerRuleRow(row: TriggerRuleRow): TriggerRuleRecord {\n\treturn {\n\t\tid: row.id,\n\t\tlabel: row.label,\n\t\tsourceState: row.source_state,\n\t\tmode: row.mode === \"user\" ? \"user\" : \"condition\",\n\t\tcondition: row.condition,\n\t\tuserId: row.user_id,\n\t\taction: ACTIONS.includes(row.action as TriggerAction) ? (row.action as TriggerAction) : \"punch\",\n\t\tisActive: row.is_active !== 0,\n\t\tcooldownSec: row.cooldown_sec,\n\t\tlastFiredAt: row.last_fired_at,\n\t};\n}\n\n/**\n * Validates the state id a rule watches.\n *\n * @param value - state id from the request\n * @returns the trimmed state id\n */\nfunction requireSourceState(value: string): string {\n\tconst state = (value ?? \"\").trim();\n\tif (!state) {\n\t\tthrow new ValidationError(\"sourceState is required\");\n\t}\n\tif (/\\s/.test(state)) {\n\t\tthrow new ValidationError(`sourceState must not contain whitespace (got \"${value}\")`);\n\t}\n\treturn state;\n}\n\n/**\n * Validates a mode, falling back to `condition`.\n *\n * @param value - mode from the request\n * @returns the validated mode\n */\nfunction requireMode(value: string | undefined): TriggerMode {\n\tif (value === undefined) {\n\t\treturn \"condition\";\n\t}\n\tif (!MODES.includes(value as TriggerMode)) {\n\t\tthrow new ValidationError(`mode must be one of ${MODES.join(\", \")} (got ${value})`);\n\t}\n\treturn value as TriggerMode;\n}\n\n/**\n * Validates an action, falling back to `punch`.\n *\n * @param value - action from the request\n * @returns the validated action\n */\nfunction requireAction(value: string | undefined): TriggerAction {\n\tif (value === undefined) {\n\t\treturn \"punch\";\n\t}\n\tif (!ACTIONS.includes(value as TriggerAction)) {\n\t\tthrow new ValidationError(`action must be one of ${ACTIONS.join(\", \")} (got ${value})`);\n\t}\n\treturn value as TriggerAction;\n}\n\n/**\n * Validates the seconds that have to pass between two fires.\n *\n * @param value - cooldown from the request\n * @returns the validated cooldown\n */\nfunction requireCooldown(value: number | undefined): number {\n\tconst cooldown = value ?? 0;\n\tif (!Number.isInteger(cooldown) || cooldown < 0 || cooldown > 86400) {\n\t\tthrow new ValidationError(`cooldownSec must be a whole number of seconds between 0 and 86400 (got ${value})`);\n\t}\n\treturn cooldown;\n}\n\n/**\n * Creates the trigger rule repository.\n *\n * @param db - open database handle\n * @returns repository instance\n */\nexport function createTriggersRepository(db: Db): TriggersRepository {\n\tconst selectById = db.prepare(`SELECT ${TRIGGER_COLUMNS} FROM trigger_rules WHERE id = ?`);\n\tconst selectAll = db.prepare(`SELECT ${TRIGGER_COLUMNS} FROM trigger_rules ORDER BY id`);\n\tconst selectActive = db.prepare(`SELECT ${TRIGGER_COLUMNS} FROM trigger_rules WHERE is_active = 1 ORDER BY id`);\n\tconst insertRule = db.prepare(\n\t\t`INSERT INTO trigger_rules\n\t\t (label, source_state, mode, condition, user_id, action, is_active, cooldown_sec, created_at, updated_at)\n\t\t VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n\t);\n\tconst updateRule = db.prepare(\n\t\t`UPDATE trigger_rules\n\t\t SET label = ?, source_state = ?, mode = ?, condition = ?, user_id = ?, action = ?, is_active = ?,\n\t\t     cooldown_sec = ?, updated_at = ?\n\t\t WHERE id = ?`,\n\t);\n\tconst deleteRule = db.prepare(\"DELETE FROM trigger_rules WHERE id = ?\");\n\tconst touchFired = db.prepare(\"UPDATE trigger_rules SET last_fired_at = ? WHERE id = ?\");\n\n\t/**\n\t * Reads one rule.\n\t *\n\t * @param id - rule id\n\t * @returns the rule or `null`\n\t */\n\tconst read = (id: number): TriggerRuleRecord | null => {\n\t\tconst row = selectById.get(id) as TriggerRuleRow | undefined;\n\t\treturn row ? mapTriggerRuleRow(row) : null;\n\t};\n\n\treturn {\n\t\tlist(options?: { includeInactive?: boolean }): TriggerRuleRecord[] {\n\t\t\tconst rows = (options?.includeInactive === true ? selectAll : selectActive).all() as TriggerRuleRow[];\n\t\t\treturn rows.map(mapTriggerRuleRow);\n\t\t},\n\n\t\tfindById: read,\n\n\t\tsave(input: SaveTriggerRuleInput): TriggerRuleRecord {\n\t\t\tconst sourceState = requireSourceState(input.sourceState);\n\t\t\tconst mode = requireMode(input.mode);\n\t\t\tconst action = requireAction(input.action);\n\t\t\tconst cooldownSec = requireCooldown(input.cooldownSec);\n\t\t\tconst label = (input.label ?? \"\").trim() || null;\n\t\t\tconst isActive = input.isActive !== false;\n\t\t\tconst now = input.now ?? Math.floor(Date.now() / 1000);\n\n\t\t\t// a rule of mode `condition` needs both: the value that fires it and the employee it fires for\n\t\t\tconst condition = mode === \"condition\" ? (input.condition ?? \"\").trim() : null;\n\t\t\tif (mode === \"condition\" && !condition) {\n\t\t\t\tthrow new ValidationError(\"condition is required for mode condition\");\n\t\t\t}\n\t\t\tconst userId = mode === \"condition\" ? (input.userId ?? null) : null;\n\t\t\tif (mode === \"condition\" && (!Number.isInteger(userId) || (userId ?? 0) <= 0)) {\n\t\t\t\tthrow new ValidationError(`userId must reference an existing employee (got ${input.userId})`);\n\t\t\t}\n\n\t\t\tconst current = input.id === undefined ? null : read(input.id);\n\t\t\tif (input.id !== undefined && !current) {\n\t\t\t\tthrow new NotFoundError(`trigger rule ${input.id} not found`);\n\t\t\t}\n\n\t\t\tconst next: TriggerRuleRecord = {\n\t\t\t\tid: current?.id ?? 0,\n\t\t\t\tlabel,\n\t\t\t\tsourceState,\n\t\t\t\tmode,\n\t\t\t\tcondition,\n\t\t\t\tuserId,\n\t\t\t\taction,\n\t\t\t\tisActive,\n\t\t\t\tcooldownSec,\n\t\t\t\tlastFiredAt: current?.lastFiredAt ?? null,\n\t\t\t};\n\t\t\tconst changes = current\n\t\t\t\t? diffFields(\n\t\t\t\t\t\tcurrent as unknown as Record<string, unknown>,\n\t\t\t\t\t\tnext as unknown as Record<string, unknown>,\n\t\t\t\t\t\tAUDITED_TRIGGER_FIELDS as unknown as (keyof Record<string, unknown>)[],\n\t\t\t\t\t)\n\t\t\t\t: null;\n\t\t\tif (current && Object.keys(changes ?? {}).length === 0) {\n\t\t\t\treturn current;\n\t\t\t}\n\n\t\t\tlet ruleId = current?.id ?? 0;\n\t\t\tconst run = db.transaction((): void => {\n\t\t\t\tif (current) {\n\t\t\t\t\tupdateRule.run(\n\t\t\t\t\t\tlabel,\n\t\t\t\t\t\tsourceState,\n\t\t\t\t\t\tmode,\n\t\t\t\t\t\tcondition,\n\t\t\t\t\t\tuserId,\n\t\t\t\t\t\taction,\n\t\t\t\t\t\tisActive ? 1 : 0,\n\t\t\t\t\t\tcooldownSec,\n\t\t\t\t\t\tnow,\n\t\t\t\t\t\tcurrent.id,\n\t\t\t\t\t);\n\t\t\t\t} else {\n\t\t\t\t\truleId = Number(\n\t\t\t\t\t\tinsertRule.run(\n\t\t\t\t\t\t\tlabel,\n\t\t\t\t\t\t\tsourceState,\n\t\t\t\t\t\t\tmode,\n\t\t\t\t\t\t\tcondition,\n\t\t\t\t\t\t\tuserId,\n\t\t\t\t\t\t\taction,\n\t\t\t\t\t\t\tisActive ? 1 : 0,\n\t\t\t\t\t\t\tcooldownSec,\n\t\t\t\t\t\t\tnow,\n\t\t\t\t\t\t\tnow,\n\t\t\t\t\t\t).lastInsertRowid,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\twriteAuditLog(db, {\n\t\t\t\t\tatUtc: now,\n\t\t\t\t\tactorId: input.actorId,\n\t\t\t\t\taction: current ? \"trigger_rule.update\" : \"trigger_rule.create\",\n\t\t\t\t\tentity: \"trigger_rule\",\n\t\t\t\t\tentityId: ruleId,\n\t\t\t\t\tdetail: current\n\t\t\t\t\t\t? { changes }\n\t\t\t\t\t\t: { sourceState, mode, condition, userId, action, isActive, cooldownSec },\n\t\t\t\t\tip: input.actorIp ?? null,\n\t\t\t\t});\n\t\t\t});\n\t\t\trun();\n\n\t\t\tconst saved = read(ruleId);\n\t\t\tif (!saved) {\n\t\t\t\tthrow new Error(`trigger rule ${ruleId} disappeared right after the write`);\n\t\t\t}\n\t\t\treturn saved;\n\t\t},\n\n\t\tremove(input: { id: number; actorId: number; actorIp?: string | null; now?: number }): boolean {\n\t\t\tconst current = read(input.id);\n\t\t\tif (!current) {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tconst now = input.now ?? Math.floor(Date.now() / 1000);\n\t\t\tconst run = db.transaction((): void => {\n\t\t\t\tdeleteRule.run(input.id);\n\t\t\t\twriteAuditLog(db, {\n\t\t\t\t\tatUtc: now,\n\t\t\t\t\tactorId: input.actorId,\n\t\t\t\t\taction: \"trigger_rule.delete\",\n\t\t\t\t\tentity: \"trigger_rule\",\n\t\t\t\t\tentityId: input.id,\n\t\t\t\t\tdetail: { sourceState: current.sourceState, mode: current.mode, action: current.action },\n\t\t\t\t\tip: input.actorIp ?? null,\n\t\t\t\t});\n\t\t\t});\n\t\t\trun();\n\t\t\treturn true;\n\t\t},\n\n\t\tmarkFired(input: { id: number; now?: number }): void {\n\t\t\ttouchFired.run(input.now ?? Math.floor(Date.now() / 1000), input.id);\n\t\t},\n\t};\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgBA,oBAA+C;AAC/C,mBAA0C;AAwF1C,MAAM,kBACL;AAGD,MAAM,yBAAsD;AAAA,EAC3D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD;AAGA,MAAM,QAAuB,CAAC,aAAa,MAAM;AAGjD,MAAM,UAA2B,CAAC,SAAS,cAAc,WAAW,QAAQ;AAQrE,SAAS,kBAAkB,KAAwC;AACzE,SAAO;AAAA,IACN,IAAI,IAAI;AAAA,IACR,OAAO,IAAI;AAAA,IACX,aAAa,IAAI;AAAA,IACjB,MAAM,IAAI,SAAS,SAAS,SAAS;AAAA,IACrC,WAAW,IAAI;AAAA,IACf,QAAQ,IAAI;AAAA,IACZ,QAAQ,QAAQ,SAAS,IAAI,MAAuB,IAAK,IAAI,SAA2B;AAAA,IACxF,UAAU,IAAI,cAAc;AAAA,IAC5B,aAAa,IAAI;AAAA,IACjB,aAAa,IAAI;AAAA,EAClB;AACD;AAQA,SAAS,mBAAmB,OAAuB;AAClD,QAAM,SAAS,wBAAS,IAAI,KAAK;AACjC,MAAI,CAAC,OAAO;AACX,UAAM,IAAI,8BAAgB,yBAAyB;AAAA,EACpD;AACA,MAAI,KAAK,KAAK,KAAK,GAAG;AACrB,UAAM,IAAI,8BAAgB,iDAAiD,KAAK,IAAI;AAAA,EACrF;AACA,SAAO;AACR;AAQA,SAAS,YAAY,OAAwC;AAC5D,MAAI,UAAU,QAAW;AACxB,WAAO;AAAA,EACR;AACA,MAAI,CAAC,MAAM,SAAS,KAAoB,GAAG;AAC1C,UAAM,IAAI,8BAAgB,uBAAuB,MAAM,KAAK,IAAI,CAAC,SAAS,KAAK,GAAG;AAAA,EACnF;AACA,SAAO;AACR;AAQA,SAAS,cAAc,OAA0C;AAChE,MAAI,UAAU,QAAW;AACxB,WAAO;AAAA,EACR;AACA,MAAI,CAAC,QAAQ,SAAS,KAAsB,GAAG;AAC9C,UAAM,IAAI,8BAAgB,yBAAyB,QAAQ,KAAK,IAAI,CAAC,SAAS,KAAK,GAAG;AAAA,EACvF;AACA,SAAO;AACR;AAQA,SAAS,gBAAgB,OAAmC;AAC3D,QAAM,WAAW,wBAAS;AAC1B,MAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,WAAW,KAAK,WAAW,OAAO;AACpE,UAAM,IAAI,8BAAgB,0EAA0E,KAAK,GAAG;AAAA,EAC7G;AACA,SAAO;AACR;AAQO,SAAS,yBAAyB,IAA4B;AACpE,QAAM,aAAa,GAAG,QAAQ,UAAU,eAAe,kCAAkC;AACzF,QAAM,YAAY,GAAG,QAAQ,UAAU,eAAe,iCAAiC;AACvF,QAAM,eAAe,GAAG,QAAQ,UAAU,eAAe,qDAAqD;AAC9G,QAAM,aAAa,GAAG;AAAA,IACrB;AAAA;AAAA;AAAA,EAGD;AACA,QAAM,aAAa,GAAG;AAAA,IACrB;AAAA;AAAA;AAAA;AAAA,EAID;AACA,QAAM,aAAa,GAAG,QAAQ,wCAAwC;AACtE,QAAM,aAAa,GAAG,QAAQ,yDAAyD;AAQvF,QAAM,OAAO,CAAC,OAAyC;AACtD,UAAM,MAAM,WAAW,IAAI,EAAE;AAC7B,WAAO,MAAM,kBAAkB,GAAG,IAAI;AAAA,EACvC;AAEA,SAAO;AAAA,IACN,KAAK,SAA8D;AAClE,YAAM,SAAQ,mCAAS,qBAAoB,OAAO,YAAY,cAAc,IAAI;AAChF,aAAO,KAAK,IAAI,iBAAiB;AAAA,IAClC;AAAA,IAEA,UAAU;AAAA,IAEV,KAAK,OAAgD;AA7PvD;AA8PG,YAAM,cAAc,mBAAmB,MAAM,WAAW;AACxD,YAAM,OAAO,YAAY,MAAM,IAAI;AACnC,YAAM,SAAS,cAAc,MAAM,MAAM;AACzC,YAAM,cAAc,gBAAgB,MAAM,WAAW;AACrD,YAAM,UAAS,WAAM,UAAN,YAAe,IAAI,KAAK,KAAK;AAC5C,YAAM,WAAW,MAAM,aAAa;AACpC,YAAM,OAAM,WAAM,QAAN,YAAa,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAGrD,YAAM,YAAY,SAAS,gBAAe,WAAM,cAAN,YAAmB,IAAI,KAAK,IAAI;AAC1E,UAAI,SAAS,eAAe,CAAC,WAAW;AACvC,cAAM,IAAI,8BAAgB,0CAA0C;AAAA,MACrE;AACA,YAAM,SAAS,SAAS,eAAe,WAAM,WAAN,YAAgB,OAAQ;AAC/D,UAAI,SAAS,gBAAgB,CAAC,OAAO,UAAU,MAAM,MAAM,0BAAU,MAAM,IAAI;AAC9E,cAAM,IAAI,8BAAgB,mDAAmD,MAAM,MAAM,GAAG;AAAA,MAC7F;AAEA,YAAM,UAAU,MAAM,OAAO,SAAY,OAAO,KAAK,MAAM,EAAE;AAC7D,UAAI,MAAM,OAAO,UAAa,CAAC,SAAS;AACvC,cAAM,IAAI,4BAAc,gBAAgB,MAAM,EAAE,YAAY;AAAA,MAC7D;AAEA,YAAM,OAA0B;AAAA,QAC/B,KAAI,wCAAS,OAAT,YAAe;AAAA,QACnB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,cAAa,wCAAS,gBAAT,YAAwB;AAAA,MACtC;AACA,YAAM,UAAU,cACb;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACD,IACC;AACH,UAAI,WAAW,OAAO,KAAK,4BAAW,CAAC,CAAC,EAAE,WAAW,GAAG;AACvD,eAAO;AAAA,MACR;AAEA,UAAI,UAAS,wCAAS,OAAT,YAAe;AAC5B,YAAM,MAAM,GAAG,YAAY,MAAY;AA7S1C,YAAAA;AA8SI,YAAI,SAAS;AACZ,qBAAW;AAAA,YACV;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA,WAAW,IAAI;AAAA,YACf;AAAA,YACA;AAAA,YACA,QAAQ;AAAA,UACT;AAAA,QACD,OAAO;AACN,mBAAS;AAAA,YACR,WAAW;AAAA,cACV;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA,WAAW,IAAI;AAAA,cACf;AAAA,cACA;AAAA,cACA;AAAA,YACD,EAAE;AAAA,UACH;AAAA,QACD;AACA,wCAAc,IAAI;AAAA,UACjB,OAAO;AAAA,UACP,SAAS,MAAM;AAAA,UACf,QAAQ,UAAU,wBAAwB;AAAA,UAC1C,QAAQ;AAAA,UACR,UAAU;AAAA,UACV,QAAQ,UACL,EAAE,QAAQ,IACV,EAAE,aAAa,MAAM,WAAW,QAAQ,QAAQ,UAAU,YAAY;AAAA,UACzE,KAAIA,MAAA,MAAM,YAAN,OAAAA,MAAiB;AAAA,QACtB,CAAC;AAAA,MACF,CAAC;AACD,UAAI;AAEJ,YAAM,QAAQ,KAAK,MAAM;AACzB,UAAI,CAAC,OAAO;AACX,cAAM,IAAI,MAAM,gBAAgB,MAAM,oCAAoC;AAAA,MAC3E;AACA,aAAO;AAAA,IACR;AAAA,IAEA,OAAO,OAAwF;AAhWjG;AAiWG,YAAM,UAAU,KAAK,MAAM,EAAE;AAC7B,UAAI,CAAC,SAAS;AACb,eAAO;AAAA,MACR;AACA,YAAM,OAAM,WAAM,QAAN,YAAa,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACrD,YAAM,MAAM,GAAG,YAAY,MAAY;AAtW1C,YAAAA;AAuWI,mBAAW,IAAI,MAAM,EAAE;AACvB,wCAAc,IAAI;AAAA,UACjB,OAAO;AAAA,UACP,SAAS,MAAM;AAAA,UACf,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,UAAU,MAAM;AAAA,UAChB,QAAQ,EAAE,aAAa,QAAQ,aAAa,MAAM,QAAQ,MAAM,QAAQ,QAAQ,OAAO;AAAA,UACvF,KAAIA,MAAA,MAAM,YAAN,OAAAA,MAAiB;AAAA,QACtB,CAAC;AAAA,MACF,CAAC;AACD,UAAI;AACJ,aAAO;AAAA,IACR;AAAA,IAEA,UAAU,OAA2C;AAtXvD;AAuXG,iBAAW,KAAI,WAAM,QAAN,YAAa,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,GAAG,MAAM,EAAE;AAAA,IACpE;AAAA,EACD;AACD;",
+  "names": ["_a"]
+}