From 464b410e8b3e017689ce7de6b6fc06b3f04c7fdd Mon Sep 17 00:00:00 2001 From: kaitranntt Date: Tue, 13 Jan 2026 13:27:38 -0500 Subject: [PATCH 01/15] feat(dashboard): add optional login authentication (#319) Add session-based username/password auth for CCS dashboard: - Backend: Express session middleware with bcrypt password verification - Frontend: React AuthContext, login page, protected routes - Config: dashboard_auth section in config.yaml + env var overrides - Security: Rate limiting (5 attempts/15min), persistent session secret - 16 unit tests for auth middleware Auth disabled by default for backward compatibility. --- bun.lock | 34 +++- package.json | 5 + src/config/unified-config-loader.ts | 55 ++++++ src/config/unified-config-types.ts | 30 +++ src/web-server/index.ts | 7 + src/web-server/middleware/auth-middleware.ts | 129 +++++++++++++ src/web-server/routes/auth-routes.ts | 93 +++++++++ src/web-server/routes/index.ts | 4 + tests/unit/web-server/auth-middleware.test.ts | 176 ++++++++++++++++++ ui/bun.lock | 133 ++++++++++++- ui/package.json | 2 + ui/src/App.tsx | 122 ++++++++++-- ui/src/components/auth/require-auth.tsx | 35 ++++ ui/src/components/auth/user-menu.tsx | 44 +++++ ui/src/components/layout/layout.tsx | 2 + ui/src/contexts/auth-context.tsx | 90 +++++++++ ui/src/lib/auth-api.ts | 61 ++++++ ui/src/pages/login.tsx | 109 +++++++++++ 18 files changed, 1110 insertions(+), 21 deletions(-) create mode 100644 src/web-server/middleware/auth-middleware.ts create mode 100644 src/web-server/routes/auth-routes.ts create mode 100644 tests/unit/web-server/auth-middleware.test.ts create mode 100644 ui/src/components/auth/require-auth.tsx create mode 100644 ui/src/components/auth/user-menu.tsx create mode 100644 ui/src/contexts/auth-context.tsx create mode 100644 ui/src/lib/auth-api.ts create mode 100644 ui/src/pages/login.tsx diff --git a/bun.lock b/bun.lock index 1840e6c3..501cfb5e 100644 --- a/bun.lock +++ b/bun.lock @@ -1,15 +1,16 @@ { "lockfileVersion": 1, - "configVersion": 0, "workspaces": { "": { "name": "@kaitranntt/ccs", "dependencies": { + "bcrypt": "^6.0.0", "boxen": "^5.1.2", "chalk": "^4.1.2", "chokidar": "^3.6.0", "cli-table3": "^0.6.5", "express": "^4.18.2", + "express-session": "^1.18.2", "get-port": "^5.1.1", "gradient-string": "^2.0.2", "js-yaml": "^4.1.1", @@ -28,8 +29,11 @@ "@semantic-release/npm": "^13.1.3", "@semantic-release/release-notes-generator": "^14.1.0", "@tailwindcss/vite": "^4.1.17", + "@types/bcrypt": "^6.0.0", "@types/chokidar": "^2.1.7", "@types/express": "^4.17.21", + "@types/express-rate-limit": "6.0.0", + "@types/express-session": "^1.18.2", "@types/js-yaml": "^4.0.9", "@types/node": "^20.19.25", "@types/ws": "^8.5.10", @@ -357,6 +361,8 @@ "@types/babel__traverse": ["@types/babel__traverse@7.28.0", "", { "dependencies": { "@babel/types": "^7.28.2" } }, "sha512-8PvcXf70gTDZBgt9ptxJ8elBeBjcLOAcOtoO/mPJjtji1+CdGbHgm77om1GrsPxsiE+uXIpNSK64UYaIwQXd4Q=="], + "@types/bcrypt": ["@types/bcrypt@6.0.0", "", { "dependencies": { "@types/node": "*" } }, "sha512-/oJGukuH3D2+D+3H4JWLaAsJ/ji86dhRidzZ/Od7H/i8g+aCmvkeCc6Ni/f9uxGLSQVCRZkX2/lqEFG2BvWtlQ=="], + "@types/body-parser": ["@types/body-parser@1.19.6", "", { "dependencies": { "@types/connect": "*", "@types/node": "*" } }, "sha512-HLFeCYgz89uk22N5Qg3dvGvsv46B8GLvKKo1zKG4NybA8U2DiEO3w9lqGg29t/tfLRJpJ6iQxnVw4OnB7MoM9g=="], "@types/chokidar": ["@types/chokidar@2.1.7", "", { "dependencies": { "chokidar": "*" } }, "sha512-A7/MFHf6KF7peCzjEC1BBTF8jpmZTokb3vr/A0NxRGfwRLK3Ws+Hq6ugVn6cJIMfM6wkCak/aplWrxbTcu8oig=="], @@ -369,8 +375,12 @@ "@types/express": ["@types/express@4.17.25", "", { "dependencies": { "@types/body-parser": "*", "@types/express-serve-static-core": "^4.17.33", "@types/qs": "*", "@types/serve-static": "^1" } }, "sha512-dVd04UKsfpINUnK0yBoYHDF3xu7xVH4BuDotC/xGuycx4CgbP48X/KF/586bcObxT0HENHXEU8Nqtu6NR+eKhw=="], + "@types/express-rate-limit": ["@types/express-rate-limit@6.0.0", "", { "dependencies": { "express-rate-limit": "*" } }, "sha512-nZxo3nwU20EkTl/f2eGdndQkDIJYwkXIX4S3Vrp2jMdSdFJ6AWtIda8gOz0wiMuOFoeH/UUlCAiacz3x3eWNFA=="], + "@types/express-serve-static-core": ["@types/express-serve-static-core@4.19.7", "", { "dependencies": { "@types/node": "*", "@types/qs": "*", "@types/range-parser": "*", "@types/send": "*" } }, "sha512-FvPtiIf1LfhzsaIXhv/PHan/2FeQBbtBDtfX2QfvPxdUelMDEckK08SM6nqo1MIZY3RUlfA+HV8+hFUSio78qg=="], + "@types/express-session": ["@types/express-session@1.18.2", "", { "dependencies": { "@types/express": "*" } }, "sha512-k+I0BxwVXsnEU2hV77cCobC08kIsn4y44C3gC0b46uxZVMaXA04lSPgRLR/bSL2w0t0ShJiG8o4jPzRG/nscFg=="], + "@types/http-errors": ["@types/http-errors@2.0.5", "", {}, "sha512-r8Tayk8HJnX0FztbZN7oVqGccWgw98T/0neJphO91KkmOzug1KkofZURD4UaD5uH8AqcFLfdPErnBod0u71/qg=="], "@types/js-yaml": ["@types/js-yaml@4.0.9", "", {}, "sha512-k4MGaQl5TGo/iipqb2UDG2UwjXziSWkh0uysQelTlJpX1qGlpUZYm8PnO4DxG1qBomtJUdYJ6qR6xdIah10JLg=="], @@ -459,6 +469,8 @@ "baseline-browser-mapping": ["baseline-browser-mapping@2.9.4", "", { "bin": { "baseline-browser-mapping": "dist/cli.js" } }, "sha512-ZCQ9GEWl73BVm8bu5Fts8nt7MHdbt5vY9bP6WGnUh+r3l8M7CgfyTlwsgCbMC66BNxPr6Xoce3j66Ms5YUQTNA=="], + "bcrypt": ["bcrypt@6.0.0", "", { "dependencies": { "node-addon-api": "^8.3.0", "node-gyp-build": "^4.8.4" } }, "sha512-cU8v/EGSrnH+HnxV2z0J7/blxH8gq7Xh2JFT6Aroax7UohdmiJJlxApMxtKfuI7z68NvvVcmR78k2LbT6efhRg=="], + "before-after-hook": ["before-after-hook@4.0.0", "", {}, "sha512-q6tR3RPqIB1pMiTRMFcZwuG5T8vwp+vUvEG0vuI6B+Rikh5BfPp2fQ82c925FOs+b0lcFQ8CFrL+KbilfZFhOQ=="], "binary-extensions": ["binary-extensions@2.3.0", "", {}, "sha512-Ceh+7ox5qe7LJuLHoY0feh3pHuUDHAcRUeyL2VYghZwfpkNIy/+8Ocg0a3UuSoYzavmylwuLWQOf3hl0jjMMIw=="], @@ -651,6 +663,10 @@ "express": ["express@4.22.1", "", { "dependencies": { "accepts": "~1.3.8", "array-flatten": "1.1.1", "body-parser": "~1.20.3", "content-disposition": "~0.5.4", "content-type": "~1.0.4", "cookie": "~0.7.1", "cookie-signature": "~1.0.6", "debug": "2.6.9", "depd": "2.0.0", "encodeurl": "~2.0.0", "escape-html": "~1.0.3", "etag": "~1.8.1", "finalhandler": "~1.3.1", "fresh": "~0.5.2", "http-errors": "~2.0.0", "merge-descriptors": "1.0.3", "methods": "~1.1.2", "on-finished": "~2.4.1", "parseurl": "~1.3.3", "path-to-regexp": "~0.1.12", "proxy-addr": "~2.0.7", "qs": "~6.14.0", "range-parser": "~1.2.1", "safe-buffer": "5.2.1", "send": "~0.19.0", "serve-static": "~1.16.2", "setprototypeof": "1.2.0", "statuses": "~2.0.1", "type-is": "~1.6.18", "utils-merge": "1.0.1", "vary": "~1.1.2" } }, "sha512-F2X8g9P1X7uCPZMA3MVf9wcTqlyNp7IhH5qPCI0izhaOIYXaW9L535tGA3qmjRzpH+bZczqq7hVKxTR4NWnu+g=="], + "express-rate-limit": ["express-rate-limit@8.2.1", "", { "dependencies": { "ip-address": "10.0.1" }, "peerDependencies": { "express": ">= 4.11" } }, "sha512-PCZEIEIxqwhzw4KF0n7QF4QqruVTcF73O5kFKUnGOyjbCCgizBBiFaYpd/fnBLUMPw/BWw9OsiN7GgrNYr7j6g=="], + + "express-session": ["express-session@1.18.2", "", { "dependencies": { "cookie": "0.7.2", "cookie-signature": "1.0.7", "debug": "2.6.9", "depd": "~2.0.0", "on-headers": "~1.1.0", "parseurl": "~1.3.3", "safe-buffer": "5.2.1", "uid-safe": "~2.1.5" } }, "sha512-SZjssGQC7TzTs9rpPDuUrR23GNZ9+2+IkA/+IJWmvQilTr5OSliEHGF+D9scbIpdC6yGtTI0/VhaHoVes2AN/A=="], + "fast-content-type-parse": ["fast-content-type-parse@3.0.0", "", {}, "sha512-ZvLdcY8P+N8mGQJahJV5G4U88CSvT1rP8ApL6uETe88MBXrBHAkZlSEySdUlyztF7ccb+Znos3TFqaepHxdhBg=="], "fast-deep-equal": ["fast-deep-equal@3.1.3", "", {}, "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q=="], @@ -783,6 +799,8 @@ "into-stream": ["into-stream@7.0.0", "", { "dependencies": { "from2": "^2.3.0", "p-is-promise": "^3.0.0" } }, "sha512-2dYz766i9HprMBasCMvHMuazJ7u4WzhJwo5kb3iPSiW/iRYV6uPari3zHoqZlnuaR7V1bEiNMxikhp37rdBXbw=="], + "ip-address": ["ip-address@10.0.1", "", {}, "sha512-NWv9YLW4PoW2B7xtzaS3NCot75m6nK7Icdv0o3lfMceJVRfSoQwqD4wEH5rLwoKJwUiZ/rfpiVBhnaF0FK4HoA=="], + "ipaddr.js": ["ipaddr.js@1.9.1", "", {}, "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g=="], "is-arrayish": ["is-arrayish@0.2.1", "", {}, "sha512-zz06S8t0ozoDXMG+ube26zeCTNXcKIPJZJi8hBrF4idCLms4CG9QtK7qBl1boi5ODzFpjswb5JPmHCbMpjaYzg=="], @@ -973,8 +991,12 @@ "nerf-dart": ["nerf-dart@1.0.0", "", {}, "sha512-EZSPZB70jiVsivaBLYDCyntd5eH8NTSMOn3rB+HxwdmKThGELLdYv8qVIMWvZEFy9w8ZZpW9h9OB32l1rGtj7g=="], + "node-addon-api": ["node-addon-api@8.5.0", "", {}, "sha512-/bRZty2mXUIFY/xU5HLvveNHlswNJej+RnxBjOMkidWfwZzgTbPG1E3K5TOxRLOR+5hX7bSofy8yf1hZevMS8A=="], + "node-emoji": ["node-emoji@2.2.0", "", { "dependencies": { "@sindresorhus/is": "^4.6.0", "char-regex": "^1.0.2", "emojilib": "^2.4.0", "skin-tone": "^2.0.0" } }, "sha512-Z3lTE9pLaJF47NyMhd4ww1yFTAP8YhYI8SleJiHzM46Fgpm5cnNzSl9XfzFNqbaz+VlJrIj3fXQ4DeN1Rjm6cw=="], + "node-gyp-build": ["node-gyp-build@4.8.4", "", { "bin": { "node-gyp-build": "bin.js", "node-gyp-build-optional": "optional.js", "node-gyp-build-test": "build-test.js" } }, "sha512-LA4ZjwlnUblHVgq0oBF3Jl/6h/Nvs5fzBLwdEF4nuxnFdsfajde4WfxtJr3CaiH+F6ewcIB/q4jQ4UzPyid+CQ=="], + "node-releases": ["node-releases@2.0.27", "", {}, "sha512-nmh3lCkYZ3grZvqcCH+fjmQ7X+H0OeZgP40OierEaAptX4XofMh5kwNbWh7lBduUzCcV/8kZ+NDLCwm2iorIlA=="], "normalize-package-data": ["normalize-package-data@8.0.0", "", { "dependencies": { "hosted-git-info": "^9.0.0", "semver": "^7.3.5", "validate-npm-package-license": "^3.0.4" } }, "sha512-RWk+PI433eESQ7ounYxIp67CYuVsS1uYSonX3kA6ps/3LWfjVQa/ptEg6Y3T6uAMq1mWpX9PQ+qx+QaHpsc7gQ=="], @@ -993,6 +1015,8 @@ "on-finished": ["on-finished@2.4.1", "", { "dependencies": { "ee-first": "1.1.1" } }, "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg=="], + "on-headers": ["on-headers@1.1.0", "", {}, "sha512-737ZY3yNnXy37FHkQxPzt4UZ2UWPWiCZWLvFZ4fu5cueciegX0zGPnrlY6bwRg4FdQOe9YU8MkmJwGhoMybl8A=="], + "onetime": ["onetime@5.1.2", "", { "dependencies": { "mimic-fn": "^2.1.0" } }, "sha512-kbpaSSGJTWdAY5KPVeMOKXSrPtr8C8C7wodJbcsd51jRnmD+GZu8Y0VoU6Dm5Z4vWr0Ig/1NKuWRKf7j5aaYSg=="], "open": ["open@8.4.2", "", { "dependencies": { "define-lazy-prop": "^2.0.0", "is-docker": "^2.1.1", "is-wsl": "^2.2.0" } }, "sha512-7x81NCL719oNbsq/3mh+hVrAWmFuEYUqrq/Iw3kUzH8ReypT9QQ0BLoJS7/G9k6N81XjW4qHWtjWwe/9eLy1EQ=="], @@ -1071,6 +1095,8 @@ "qs": ["qs@6.14.0", "", { "dependencies": { "side-channel": "^1.1.0" } }, "sha512-YWWTjgABSKcvs/nWBi9PycY/JiPJqOD4JA6o9Sej2AtvSGarXxKC3OQSk4pAarbdQlKAh5D4FCQkJNkW+GAn3w=="], + "random-bytes": ["random-bytes@1.0.0", "", {}, "sha512-iv7LhNVO047HzYR3InF6pUcUsPQiHTM1Qal51DcGSuZFBil1aBBWG5eHPNek7bvILMaYJ/8RU1e8w1AMdHmLQQ=="], + "randombytes": ["randombytes@2.1.0", "", { "dependencies": { "safe-buffer": "^5.1.0" } }, "sha512-vYl3iOX+4CKUWuxGi9Ukhie6fsqXqS9FE2Zaic4tNFD2N2QQaXOMFbuKK4QmDHC0JO6B1Zp41J0LpT0oR68amQ=="], "range-parser": ["range-parser@1.2.1", "", {}, "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg=="], @@ -1239,6 +1265,8 @@ "uglify-js": ["uglify-js@3.19.3", "", { "bin": { "uglifyjs": "bin/uglifyjs" } }, "sha512-v3Xu+yuwBXisp6QYTcH4UbH+xYJXqnq2m/LtQVWKWzYc1iehYnLixoQDN9FH6/j9/oybfd6W9Ghwkl8+UMKTKQ=="], + "uid-safe": ["uid-safe@2.1.5", "", { "dependencies": { "random-bytes": "~1.0.0" } }, "sha512-KPHm4VL5dDXKz01UuEd88Df+KzynaohSL9fBh096KWAxSKZQDI2uBrVqtvRM4rwrIrRRKsdLNML/lnaaVSRioA=="], + "undici": ["undici@7.16.0", "", {}, "sha512-QEg3HPMll0o3t2ourKwOeUAZ159Kn9mx5pnzHRQO8+Wixmh88YdZRiIwat0iNzNNXn0yoEtXJqFpyW7eM8BV7g=="], "undici-types": ["undici-types@6.21.0", "", {}, "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ=="], @@ -1395,6 +1423,8 @@ "express/debug": ["debug@2.6.9", "", { "dependencies": { "ms": "2.0.0" } }, "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA=="], + "express-session/debug": ["debug@2.6.9", "", { "dependencies": { "ms": "2.0.0" } }, "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA=="], + "figures/is-unicode-supported": ["is-unicode-supported@2.1.0", "", {}, "sha512-mE00Gnza5EEB3Ds0HfMyllZzbBrmLOX3vfWoj9A9PEnTfratQ/BcaJOuMhnkhjXvb2+FkY3VuHqtAGpTPmglFQ=="], "finalhandler/debug": ["debug@2.6.9", "", { "dependencies": { "ms": "2.0.0" } }, "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA=="], @@ -1875,6 +1905,8 @@ "env-ci/execa/strip-final-newline": ["strip-final-newline@3.0.0", "", {}, "sha512-dOESqjYr96iWYylGObzd39EuNTa5VJxyvVAEm5Jnh7KGo75V43Hk1odPQkNDyXNmUR6k+gEiDVXnjB8HJ3crXw=="], + "express-session/debug/ms": ["ms@2.0.0", "", {}, "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A=="], + "express/debug/ms": ["ms@2.0.0", "", {}, "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A=="], "finalhandler/debug/ms": ["ms@2.0.0", "", {}, "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A=="], diff --git a/package.json b/package.json index 2a5f67a2..7b639c2c 100644 --- a/package.json +++ b/package.json @@ -81,11 +81,13 @@ "postinstall": "node scripts/postinstall.js" }, "dependencies": { + "bcrypt": "^6.0.0", "boxen": "^5.1.2", "chalk": "^4.1.2", "chokidar": "^3.6.0", "cli-table3": "^0.6.5", "express": "^4.18.2", + "express-session": "^1.18.2", "get-port": "^5.1.1", "gradient-string": "^2.0.2", "js-yaml": "^4.1.1", @@ -104,8 +106,11 @@ "@semantic-release/npm": "^13.1.3", "@semantic-release/release-notes-generator": "^14.1.0", "@tailwindcss/vite": "^4.1.17", + "@types/bcrypt": "^6.0.0", "@types/chokidar": "^2.1.7", "@types/express": "^4.17.21", + "@types/express-rate-limit": "6.0.0", + "@types/express-session": "^1.18.2", "@types/js-yaml": "^4.0.9", "@types/node": "^20.19.25", "@types/ws": "^8.5.10", diff --git a/src/config/unified-config-loader.ts b/src/config/unified-config-loader.ts index 9f3935b2..27ae026f 100644 --- a/src/config/unified-config-loader.ts +++ b/src/config/unified-config-loader.ts @@ -18,7 +18,9 @@ import { DEFAULT_GLOBAL_ENV, DEFAULT_CLIPROXY_SERVER_CONFIG, DEFAULT_QUOTA_MANAGEMENT_CONFIG, + DEFAULT_DASHBOARD_AUTH_CONFIG, GlobalEnvConfig, + DashboardAuthConfig, } from './unified-config-types'; import { isUnifiedConfigEnabled } from './feature-flags'; @@ -242,6 +244,16 @@ function mergeWithDefaults(partial: Partial): UnifiedConfig { DEFAULT_QUOTA_MANAGEMENT_CONFIG.manual.tier_lock, }, }, + // Dashboard auth config - disabled by default + dashboard_auth: { + enabled: partial.dashboard_auth?.enabled ?? DEFAULT_DASHBOARD_AUTH_CONFIG.enabled, + username: partial.dashboard_auth?.username ?? DEFAULT_DASHBOARD_AUTH_CONFIG.username, + password_hash: + partial.dashboard_auth?.password_hash ?? DEFAULT_DASHBOARD_AUTH_CONFIG.password_hash, + session_timeout_hours: + partial.dashboard_auth?.session_timeout_hours ?? + DEFAULT_DASHBOARD_AUTH_CONFIG.session_timeout_hours, + }, }; } @@ -427,6 +439,26 @@ function generateYamlWithComments(config: UnifiedConfig): string { lines.push(''); } + // Dashboard auth section (only if configured) + if (config.dashboard_auth?.enabled) { + lines.push('# ----------------------------------------------------------------------------'); + lines.push('# Dashboard Auth: Optional login protection for CCS dashboard'); + lines.push('# Generate password hash: npx bcrypt-cli hash "your-password"'); + lines.push( + '# ENV override: CCS_DASHBOARD_AUTH_ENABLED, CCS_DASHBOARD_USERNAME, CCS_DASHBOARD_PASSWORD_HASH' + ); + lines.push('# ----------------------------------------------------------------------------'); + lines.push( + yaml + .dump( + { dashboard_auth: config.dashboard_auth }, + { indent: 2, lineWidth: -1, quotingType: '"' } + ) + .trim() + ); + lines.push(''); + } + return lines.join('\n'); } @@ -575,3 +607,26 @@ export function getGlobalEnvConfig(): GlobalEnvConfig { env: config.global_env?.env ?? { ...DEFAULT_GLOBAL_ENV }, }; } + +/** + * Get dashboard_auth configuration with ENV var override. + * Priority: ENV vars > config.yaml > defaults + */ +export function getDashboardAuthConfig(): DashboardAuthConfig { + const config = loadOrCreateUnifiedConfig(); + + // ENV vars take precedence + const envEnabled = process.env.CCS_DASHBOARD_AUTH_ENABLED; + const envUsername = process.env.CCS_DASHBOARD_USERNAME; + const envPasswordHash = process.env.CCS_DASHBOARD_PASSWORD_HASH; + + return { + enabled: + envEnabled !== undefined + ? envEnabled === 'true' || envEnabled === '1' + : (config.dashboard_auth?.enabled ?? false), + username: envUsername ?? config.dashboard_auth?.username ?? '', + password_hash: envPasswordHash ?? config.dashboard_auth?.password_hash ?? '', + session_timeout_hours: config.dashboard_auth?.session_timeout_hours ?? 24, + }; +} diff --git a/src/config/unified-config-types.ts b/src/config/unified-config-types.ts index e5eec79b..385f52a9 100644 --- a/src/config/unified-config-types.ts +++ b/src/config/unified-config-types.ts @@ -424,6 +424,33 @@ export const DEFAULT_QUOTA_MANAGEMENT_CONFIG: QuotaManagementConfig = { manual: { ...DEFAULT_MANUAL_QUOTA_CONFIG }, }; +/** + * Dashboard authentication configuration. + * Optional login protection for CCS dashboard. + * Disabled by default for backward compatibility. + */ +export interface DashboardAuthConfig { + /** Enable dashboard authentication (default: false) */ + enabled: boolean; + /** Username for dashboard login */ + username: string; + /** Bcrypt-hashed password (use: npx bcrypt-cli hash 'password') */ + password_hash: string; + /** Session timeout in hours (default: 24) */ + session_timeout_hours?: number; +} + +/** + * Default dashboard auth configuration. + * Disabled by default - must be explicitly enabled. + */ +export const DEFAULT_DASHBOARD_AUTH_CONFIG: DashboardAuthConfig = { + enabled: false, + username: '', + password_hash: '', + session_timeout_hours: 24, +}; + /** * Main unified configuration structure. * Stored in ~/.ccs/config.yaml @@ -451,6 +478,8 @@ export interface UnifiedConfig { cliproxy_server?: CliproxyServerConfig; /** Quota management configuration (v7+) */ quota_management?: QuotaManagementConfig; + /** Dashboard authentication configuration (optional) */ + dashboard_auth?: DashboardAuthConfig; } /** @@ -540,6 +569,7 @@ export function createEmptyUnifiedConfig(): UnifiedConfig { copilot: { ...DEFAULT_COPILOT_CONFIG }, cliproxy_server: { ...DEFAULT_CLIPROXY_SERVER_CONFIG }, quota_management: { ...DEFAULT_QUOTA_MANAGEMENT_CONFIG }, + dashboard_auth: { ...DEFAULT_DASHBOARD_AUTH_CONFIG }, }; } diff --git a/src/web-server/index.ts b/src/web-server/index.ts index 5d43299c..2f864a01 100644 --- a/src/web-server/index.ts +++ b/src/web-server/index.ts @@ -11,6 +11,7 @@ import http from 'http'; import path from 'path'; import { WebSocketServer } from 'ws'; import { setupWebSocket } from './websocket'; +import { createSessionMiddleware, authMiddleware } from './middleware/auth-middleware'; export interface ServerOptions { port: number; @@ -49,6 +50,12 @@ export async function startServer(options: ServerOptions): Promise persisted file > generate new + */ +function getSessionSecret(): string { + // 1. Check ENV var first + if (process.env.CCS_SESSION_SECRET) { + return process.env.CCS_SESSION_SECRET; + } + + // 2. Try to read persisted secret + try { + if (fs.existsSync(SESSION_SECRET_PATH)) { + const secret = fs.readFileSync(SESSION_SECRET_PATH, 'utf-8').trim(); + if (secret.length >= 32) { + return secret; + } + } + } catch { + // Ignore read errors, generate new secret + } + + // 3. Generate and persist new random secret + const newSecret = crypto.randomBytes(32).toString('hex'); + try { + const dir = path.dirname(SESSION_SECRET_PATH); + if (!fs.existsSync(dir)) { + fs.mkdirSync(dir, { recursive: true }); + } + fs.writeFileSync(SESSION_SECRET_PATH, newSecret, { mode: 0o600 }); + } catch { + // If we can't persist, still return the secret for this session + } + + return newSecret; +} + +/** + * Rate limiter for login attempts. + * 5 attempts per 15 minutes per IP. + */ +export const loginRateLimiter = rateLimit({ + windowMs: 15 * 60 * 1000, // 15 minutes + max: 5, // 5 attempts + message: { error: 'Too many login attempts. Please try again later.' }, + standardHeaders: true, + legacyHeaders: false, + skip: () => !getDashboardAuthConfig().enabled, +}); + +/** + * Create session middleware configured for CCS dashboard. + */ +export function createSessionMiddleware() { + const authConfig = getDashboardAuthConfig(); + const maxAge = (authConfig.session_timeout_hours ?? 24) * 60 * 60 * 1000; + + return session({ + secret: getSessionSecret(), + resave: false, + saveUninitialized: false, + cookie: { + secure: false, // Local CLI uses HTTP + httpOnly: true, + maxAge, + sameSite: 'strict', + }, + }); +} + +/** + * Auth middleware that protects all routes except public paths. + * Only active when dashboard_auth.enabled = true. + */ +export function authMiddleware(req: Request, res: Response, next: NextFunction): void { + const authConfig = getDashboardAuthConfig(); + + // Skip auth if disabled + if (!authConfig.enabled) { + return next(); + } + + // Allow public paths (case-insensitive) + const pathLower = req.path.toLowerCase(); + if (PUBLIC_PATHS.some((p) => pathLower.startsWith(p))) { + return next(); + } + + // Allow static assets and SPA routes (non-API) + if (!req.path.startsWith('/api/')) { + return next(); + } + + // Check session + if (req.session?.authenticated) { + return next(); + } + + // Unauthorized + res.status(401).json({ error: 'Authentication required' }); +} diff --git a/src/web-server/routes/auth-routes.ts b/src/web-server/routes/auth-routes.ts new file mode 100644 index 00000000..15169b75 --- /dev/null +++ b/src/web-server/routes/auth-routes.ts @@ -0,0 +1,93 @@ +/** + * Dashboard Authentication Routes + * Handles login, logout, session check, and setup status. + */ + +import { Router, type Request, type Response } from 'express'; +import bcrypt from 'bcrypt'; +import { getDashboardAuthConfig } from '../../config/unified-config-loader'; +import { loginRateLimiter } from '../middleware/auth-middleware'; + +const router = Router(); + +/** + * POST /api/auth/login + * Authenticate user with username/password. + * Rate limited: 5 attempts per 15 minutes. + */ +router.post('/login', loginRateLimiter, async (req: Request, res: Response) => { + const { username, password } = req.body; + + if (!username || !password) { + res.status(400).json({ error: 'Username and password required' }); + return; + } + + const authConfig = getDashboardAuthConfig(); + + // Check if auth is configured + if (!authConfig.enabled || !authConfig.username || !authConfig.password_hash) { + res.status(400).json({ error: 'Authentication not configured' }); + return; + } + + // Verify credentials + const usernameMatch = username === authConfig.username; + const passwordMatch = await bcrypt.compare(password, authConfig.password_hash); + + if (!usernameMatch || !passwordMatch) { + res.status(401).json({ error: 'Invalid credentials' }); + return; + } + + // Set session + req.session.authenticated = true; + req.session.username = username; + + res.json({ success: true, username }); +}); + +/** + * POST /api/auth/logout + * Clear session and log out user. + */ +router.post('/logout', (req: Request, res: Response) => { + req.session.destroy((err) => { + if (err) { + res.status(500).json({ error: 'Failed to logout' }); + return; + } + res.clearCookie('connect.sid'); + res.json({ success: true }); + }); +}); + +/** + * GET /api/auth/check + * Check if user is authenticated and if auth is required. + */ +router.get('/check', (req: Request, res: Response) => { + const authConfig = getDashboardAuthConfig(); + + res.json({ + authRequired: authConfig.enabled, + authenticated: req.session?.authenticated ?? false, + username: req.session?.username ?? null, + }); +}); + +/** + * GET /api/auth/setup + * Check if authentication is properly configured. + */ +router.get('/setup', (_req: Request, res: Response) => { + const authConfig = getDashboardAuthConfig(); + + res.json({ + enabled: authConfig.enabled, + configured: !!(authConfig.username && authConfig.password_hash), + sessionTimeoutHours: authConfig.session_timeout_hours ?? 24, + }); +}); + +export default router; diff --git a/src/web-server/routes/index.ts b/src/web-server/routes/index.ts index 6b967ac3..4dc44164 100644 --- a/src/web-server/routes/index.ts +++ b/src/web-server/routes/index.ts @@ -21,6 +21,7 @@ import cliproxyStatsRoutes from './cliproxy-stats-routes'; import copilotRoutes from './copilot-routes'; import miscRoutes from './misc-routes'; import cliproxyServerRoutes from './proxy-routes'; +import authRoutes from './auth-routes'; // Create the main API router export const apiRoutes = Router(); @@ -38,6 +39,9 @@ apiRoutes.use('/config', configRoutes); // ==================== Health Checks ==================== apiRoutes.use('/health', healthRoutes); +// ==================== Dashboard Auth ==================== +apiRoutes.use('/auth', authRoutes); + // ==================== CLIProxy ==================== // Variants, auth, accounts, stats, status, models, error logs apiRoutes.use('/cliproxy', variantRoutes); diff --git a/tests/unit/web-server/auth-middleware.test.ts b/tests/unit/web-server/auth-middleware.test.ts new file mode 100644 index 00000000..9c0f9191 --- /dev/null +++ b/tests/unit/web-server/auth-middleware.test.ts @@ -0,0 +1,176 @@ +/** + * Auth Middleware Tests + * Tests for dashboard authentication middleware and routes. + */ + +import { describe, it, expect, beforeEach, afterEach, mock } from 'bun:test'; +import bcrypt from 'bcrypt'; + +// Mock the config loader +const mockAuthConfig = { + enabled: false, + username: '', + password_hash: '', + session_timeout_hours: 24, +}; + +mock.module('../../src/config/unified-config-loader', () => ({ + getDashboardAuthConfig: () => ({ ...mockAuthConfig }), +})); + +describe('Dashboard Auth', () => { + beforeEach(() => { + // Reset to default disabled state + mockAuthConfig.enabled = false; + mockAuthConfig.username = ''; + mockAuthConfig.password_hash = ''; + }); + + describe('getDashboardAuthConfig', () => { + it('returns disabled by default', async () => { + const { getDashboardAuthConfig } = await import( + '../../src/config/unified-config-loader' + ); + const config = getDashboardAuthConfig(); + expect(config.enabled).toBe(false); + }); + + it('returns 24 hour default session timeout', async () => { + const { getDashboardAuthConfig } = await import( + '../../src/config/unified-config-loader' + ); + const config = getDashboardAuthConfig(); + expect(config.session_timeout_hours).toBe(24); + }); + }); + + describe('bcrypt password hashing', () => { + it('generates valid bcrypt hash', async () => { + const password = 'testpassword123'; + const hash = await bcrypt.hash(password, 10); + + expect(hash).toMatch(/^\$2[aby]\$\d{2}\$.{53}$/); + }); + + it('verifies correct password', async () => { + const password = 'testpassword123'; + const hash = await bcrypt.hash(password, 10); + + const isValid = await bcrypt.compare(password, hash); + expect(isValid).toBe(true); + }); + + it('rejects incorrect password', async () => { + const password = 'testpassword123'; + const hash = await bcrypt.hash(password, 10); + + const isValid = await bcrypt.compare('wrongpassword', hash); + expect(isValid).toBe(false); + }); + + it('timing-safe comparison for wrong password', async () => { + const password = 'testpassword123'; + const hash = await bcrypt.hash(password, 10); + + // bcrypt.compare should take similar time for wrong vs right password + // This is a basic check that the function works + const start1 = performance.now(); + await bcrypt.compare('wrongpassword', hash); + const time1 = performance.now() - start1; + + const start2 = performance.now(); + await bcrypt.compare(password, hash); + const time2 = performance.now() - start2; + + // Both should complete (timing comparison is handled by bcrypt internally) + expect(time1).toBeGreaterThan(0); + expect(time2).toBeGreaterThan(0); + }); + }); + + describe('public paths', () => { + const PUBLIC_PATHS = [ + '/api/auth/login', + '/api/auth/check', + '/api/auth/setup', + '/api/health', + ]; + + it('identifies public paths correctly', () => { + const isPublicPath = (path: string) => + PUBLIC_PATHS.some((p) => path.toLowerCase().startsWith(p)); + + expect(isPublicPath('/api/auth/login')).toBe(true); + expect(isPublicPath('/api/auth/check')).toBe(true); + expect(isPublicPath('/api/auth/setup')).toBe(true); + expect(isPublicPath('/api/health')).toBe(true); + expect(isPublicPath('/api/profiles')).toBe(false); + expect(isPublicPath('/api/config')).toBe(false); + }); + + it('handles case-insensitive paths', () => { + const isPublicPath = (path: string) => + PUBLIC_PATHS.some((p) => path.toLowerCase().startsWith(p)); + + expect(isPublicPath('/API/AUTH/LOGIN')).toBe(true); + expect(isPublicPath('/Api/Health')).toBe(true); + }); + }); + + describe('session configuration', () => { + it('session timeout converts to milliseconds correctly', () => { + const hours = 24; + const maxAge = hours * 60 * 60 * 1000; + + expect(maxAge).toBe(86400000); // 24 hours in ms + }); + + it('custom session timeout works', () => { + const hours = 8; + const maxAge = hours * 60 * 60 * 1000; + + expect(maxAge).toBe(28800000); // 8 hours in ms + }); + }); + + describe('auth flow logic', () => { + it('bypasses auth when disabled', () => { + mockAuthConfig.enabled = false; + const shouldSkip = !mockAuthConfig.enabled; + expect(shouldSkip).toBe(true); + }); + + it('requires auth when enabled', () => { + mockAuthConfig.enabled = true; + mockAuthConfig.username = 'admin'; + mockAuthConfig.password_hash = '$2b$10$test'; + + const shouldSkip = !mockAuthConfig.enabled; + expect(shouldSkip).toBe(false); + }); + + it('validates username match', () => { + mockAuthConfig.username = 'admin'; + const usernameMatch = 'admin' === mockAuthConfig.username; + expect(usernameMatch).toBe(true); + }); + + it('rejects wrong username', () => { + mockAuthConfig.username = 'admin'; + const usernameMatch = 'wrong' === mockAuthConfig.username; + expect(usernameMatch).toBe(false); + }); + }); + + describe('rate limiting config', () => { + it('rate limit window is 15 minutes', () => { + const windowMs = 15 * 60 * 1000; + expect(windowMs).toBe(900000); + }); + + it('max attempts is 5', () => { + const maxAttempts = 5; + expect(maxAttempts).toBe(5); + }); + }); +}); diff --git a/ui/bun.lock b/ui/bun.lock index c2e29de1..d1486b65 100644 --- a/ui/bun.lock +++ b/ui/bun.lock @@ -1,6 +1,5 @@ { "lockfileVersion": 1, - "configVersion": 0, "workspaces": { "": { "name": "ui", @@ -28,6 +27,7 @@ "class-variance-authority": "^0.7.1", "clsx": "^2.1.1", "date-fns": "^4.1.0", + "express-rate-limit": "^8.2.1", "lucide-react": "^0.556.0", "prism-react-renderer": "^2.4.1", "react": "^19.2.0", @@ -50,6 +50,7 @@ "@testing-library/jest-dom": "^6.9.1", "@testing-library/react": "^16.3.1", "@testing-library/user-event": "^14.6.1", + "@types/express-rate-limit": "^6.0.2", "@types/node": "^24.10.1", "@types/react": "^19.2.5", "@types/react-dom": "^19.2.3", @@ -497,6 +498,8 @@ "@types/estree": ["@types/estree@1.0.8", "", {}, "sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w=="], + "@types/express-rate-limit": ["@types/express-rate-limit@6.0.2", "", { "dependencies": { "express-rate-limit": "*" } }, "sha512-e1xZLOOlxCDvplAGq7rDcXtbdBu2CWRsMjaIu1LVqGxWtKvwr884YE5mPs3IvHeG/OMDhf24oTaqG5T1bV3rBQ=="], + "@types/json-schema": ["@types/json-schema@7.0.15", "", {}, "sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA=="], "@types/node": ["@types/node@24.10.1", "", { "dependencies": { "undici-types": "~7.16.0" } }, "sha512-GNWcUTRBgIRJD5zj+Tq0fKOJ5XZajIiBroOF0yvj2bSU1WvNdYS/dn9UxwsujGW4JX06dnHyjV2y9rRaybH0iQ=="], @@ -549,6 +552,8 @@ "@vitest/utils": ["@vitest/utils@4.0.16", "", { "dependencies": { "@vitest/pretty-format": "4.0.16", "tinyrainbow": "^3.0.3" } }, "sha512-h8z9yYhV3e1LEfaQ3zdypIrnAg/9hguReGZoS7Gl0aBG5xgA410zBqECqmaF/+RkTggRsfnzc1XaAHA6bmUufA=="], + "accepts": ["accepts@2.0.0", "", { "dependencies": { "mime-types": "^3.0.0", "negotiator": "^1.0.0" } }, "sha512-5cvg6CtKwfgdmVqY1WIiXKc3Q1bkRqGLi+2W/6ao+6Y7gu/RCwRuAhGEzh5B4KlszSuTLgZYuqFqo5bImjNKng=="], + "acorn": ["acorn@8.15.0", "", { "bin": { "acorn": "bin/acorn" } }, "sha512-NZyJarBfL7nWwIq+FDL6Zp/yHEhePMNnnJ0y3qfieCrmNvYct8uvtiV41UvlSe6apAfk0fY1FbWx+NwfmpvtTg=="], "acorn-jsx": ["acorn-jsx@5.3.2", "", { "peerDependencies": { "acorn": "^6.0.0 || ^7.0.0 || ^8.0.0" } }, "sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ=="], @@ -577,10 +582,18 @@ "bidi-js": ["bidi-js@1.0.3", "", { "dependencies": { "require-from-string": "^2.0.2" } }, "sha512-RKshQI1R3YQ+n9YJz2QQ147P66ELpa1FQEg20Dk8oW9t2KgLbpDLLp9aGZ7y8WHSshDknG0bknqGw5/tyCs5tw=="], + "body-parser": ["body-parser@2.2.2", "", { "dependencies": { "bytes": "^3.1.2", "content-type": "^1.0.5", "debug": "^4.4.3", "http-errors": "^2.0.0", "iconv-lite": "^0.7.0", "on-finished": "^2.4.1", "qs": "^6.14.1", "raw-body": "^3.0.1", "type-is": "^2.0.1" } }, "sha512-oP5VkATKlNwcgvxi0vM0p/D3n2C3EReYVX+DNYs5TjZFn/oQt2j+4sVJtSMr18pdRr8wjTcBl6LoV+FUwzPmNA=="], + "brace-expansion": ["brace-expansion@1.1.12", "", { "dependencies": { "balanced-match": "^1.0.0", "concat-map": "0.0.1" } }, "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg=="], "browserslist": ["browserslist@4.28.1", "", { "dependencies": { "baseline-browser-mapping": "^2.9.0", "caniuse-lite": "^1.0.30001759", "electron-to-chromium": "^1.5.263", "node-releases": "^2.0.27", "update-browserslist-db": "^1.2.0" }, "bin": { "browserslist": "cli.js" } }, "sha512-ZC5Bd0LgJXgwGqUknZY/vkUQ04r8NXnJZ3yYi4vDmSiZmC/pdSN0NbNRPxZpbtO4uAfDUAFffO8IZoM3Gj8IkA=="], + "bytes": ["bytes@3.1.2", "", {}, "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg=="], + + "call-bind-apply-helpers": ["call-bind-apply-helpers@1.0.2", "", { "dependencies": { "es-errors": "^1.3.0", "function-bind": "^1.1.2" } }, "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ=="], + + "call-bound": ["call-bound@1.0.4", "", { "dependencies": { "call-bind-apply-helpers": "^1.0.2", "get-intrinsic": "^1.3.0" } }, "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg=="], + "callsites": ["callsites@3.1.0", "", {}, "sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ=="], "caniuse-lite": ["caniuse-lite@1.0.30001759", "", {}, "sha512-Pzfx9fOKoKvevQf8oCXoyNRQ5QyxJj+3O0Rqx2V5oxT61KGx8+n6hV/IUyJeifUci2clnmmKVpvtiqRzgiWjSw=="], @@ -605,10 +618,16 @@ "concat-map": ["concat-map@0.0.1", "", {}, "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg=="], + "content-disposition": ["content-disposition@1.0.1", "", {}, "sha512-oIXISMynqSqm241k6kcQ5UwttDILMK4BiurCfGEREw6+X9jkkpEe5T9FZaApyLGGOnFuyMWZpdolTXMtvEJ08Q=="], + + "content-type": ["content-type@1.0.5", "", {}, "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA=="], + "convert-source-map": ["convert-source-map@2.0.0", "", {}, "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg=="], "cookie": ["cookie@1.1.1", "", {}, "sha512-ei8Aos7ja0weRpFzJnEA9UHJ/7XQmqglbRwnf2ATjcB9Wq874VKH9kfjjirM6UhU2/E5fFYadylyhFldcqSidQ=="], + "cookie-signature": ["cookie-signature@1.2.2", "", {}, "sha512-D76uU73ulSXrD1UXF4KE2TMxVVwhsnCgfAyTg9k8P6KGZjlXKrOLe4dJQKI3Bxi5wjesZoFXJWElNWBjPZMbhg=="], + "cross-spawn": ["cross-spawn@7.0.6", "", { "dependencies": { "path-key": "^3.1.0", "shebang-command": "^2.0.0", "which": "^2.0.1" } }, "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA=="], "css-tree": ["css-tree@3.1.0", "", { "dependencies": { "mdn-data": "2.12.2", "source-map-js": "^1.0.1" } }, "sha512-0eW44TGN5SQXU1mWSkKwFstI/22X2bG1nYzZTYMAWjylYURhse752YgbE4Cx46AC+bAvI+/dYTPRk1LqSUnu6w=="], @@ -659,6 +678,8 @@ "deep-is": ["deep-is@0.1.4", "", {}, "sha512-oIPzksmTg4/MriiaYGO+okXDT7ztn/w3Eptv/+gSIdMdKsJo0u4CfYNFJPy+4SKMuCqGw2wxnA+URMg3t8a/bQ=="], + "depd": ["depd@2.0.0", "", {}, "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw=="], + "dequal": ["dequal@2.0.3", "", {}, "sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA=="], "detect-libc": ["detect-libc@2.1.2", "", {}, "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ=="], @@ -669,20 +690,34 @@ "dom-helpers": ["dom-helpers@5.2.1", "", { "dependencies": { "@babel/runtime": "^7.8.7", "csstype": "^3.0.2" } }, "sha512-nRCa7CK3VTrM2NmGkIy4cbK7IZlgBE/PYMn55rrXefr5xXDP0LdtfPnblFDoVdcAfslJ7or6iqAUnx0CCGIWQA=="], + "dunder-proto": ["dunder-proto@1.0.1", "", { "dependencies": { "call-bind-apply-helpers": "^1.0.1", "es-errors": "^1.3.0", "gopd": "^1.2.0" } }, "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A=="], + + "ee-first": ["ee-first@1.1.1", "", {}, "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow=="], + "electron-to-chromium": ["electron-to-chromium@1.5.266", "", {}, "sha512-kgWEglXvkEfMH7rxP5OSZZwnaDWT7J9EoZCujhnpLbfi0bbNtRkgdX2E3gt0Uer11c61qCYktB3hwkAS325sJg=="], "emoji-regex": ["emoji-regex@8.0.0", "", {}, "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A=="], + "encodeurl": ["encodeurl@2.0.0", "", {}, "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg=="], + "enhanced-resolve": ["enhanced-resolve@5.18.3", "", { "dependencies": { "graceful-fs": "^4.2.4", "tapable": "^2.2.0" } }, "sha512-d4lC8xfavMeBjzGr2vECC3fsGXziXZQyJxD868h2M/mBI3PwAuODxAkLkq5HYuvrPYcUtiLzsTo8U3PgX3Ocww=="], "entities": ["entities@6.0.1", "", {}, "sha512-aN97NXWF6AWBTahfVOIrB/NShkzi5H7F9r1s9mD3cDj4Ko5f2qhhVoYMibXF7GlLveb/D2ioWay8lxI97Ven3g=="], + "es-define-property": ["es-define-property@1.0.1", "", {}, "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g=="], + + "es-errors": ["es-errors@1.3.0", "", {}, "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw=="], + "es-module-lexer": ["es-module-lexer@1.7.0", "", {}, "sha512-jEQoCwk8hyb2AZziIOLhDqpm5+2ww5uIE6lkO/6jcOCusfk6LhMHpXXfBLXTZ7Ydyt0j4VoUQv6uGNYbdW+kBA=="], + "es-object-atoms": ["es-object-atoms@1.1.1", "", { "dependencies": { "es-errors": "^1.3.0" } }, "sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA=="], + "esbuild": ["esbuild@0.25.12", "", { "optionalDependencies": { "@esbuild/aix-ppc64": "0.25.12", "@esbuild/android-arm": "0.25.12", "@esbuild/android-arm64": "0.25.12", "@esbuild/android-x64": "0.25.12", "@esbuild/darwin-arm64": "0.25.12", "@esbuild/darwin-x64": "0.25.12", "@esbuild/freebsd-arm64": "0.25.12", "@esbuild/freebsd-x64": "0.25.12", "@esbuild/linux-arm": "0.25.12", "@esbuild/linux-arm64": "0.25.12", "@esbuild/linux-ia32": "0.25.12", "@esbuild/linux-loong64": "0.25.12", "@esbuild/linux-mips64el": "0.25.12", "@esbuild/linux-ppc64": "0.25.12", "@esbuild/linux-riscv64": "0.25.12", "@esbuild/linux-s390x": "0.25.12", "@esbuild/linux-x64": "0.25.12", "@esbuild/netbsd-arm64": "0.25.12", "@esbuild/netbsd-x64": "0.25.12", "@esbuild/openbsd-arm64": "0.25.12", "@esbuild/openbsd-x64": "0.25.12", "@esbuild/openharmony-arm64": "0.25.12", "@esbuild/sunos-x64": "0.25.12", "@esbuild/win32-arm64": "0.25.12", "@esbuild/win32-ia32": "0.25.12", "@esbuild/win32-x64": "0.25.12" }, "bin": { "esbuild": "bin/esbuild" } }, "sha512-bbPBYYrtZbkt6Os6FiTLCTFxvq4tt3JKall1vRwshA3fdVztsLAatFaZobhkBC8/BrPetoa0oksYoKXoG4ryJg=="], "escalade": ["escalade@3.2.0", "", {}, "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA=="], + "escape-html": ["escape-html@1.0.3", "", {}, "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow=="], + "escape-string-regexp": ["escape-string-regexp@4.0.0", "", {}, "sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA=="], "eslint": ["eslint@9.39.1", "", { "dependencies": { "@eslint-community/eslint-utils": "^4.8.0", "@eslint-community/regexpp": "^4.12.1", "@eslint/config-array": "^0.21.1", "@eslint/config-helpers": "^0.4.2", "@eslint/core": "^0.17.0", "@eslint/eslintrc": "^3.3.1", "@eslint/js": "9.39.1", "@eslint/plugin-kit": "^0.4.1", "@humanfs/node": "^0.16.6", "@humanwhocodes/module-importer": "^1.0.1", "@humanwhocodes/retry": "^0.4.2", "@types/estree": "^1.0.6", "ajv": "^6.12.4", "chalk": "^4.0.0", "cross-spawn": "^7.0.6", "debug": "^4.3.2", "escape-string-regexp": "^4.0.0", "eslint-scope": "^8.4.0", "eslint-visitor-keys": "^4.2.1", "espree": "^10.4.0", "esquery": "^1.5.0", "esutils": "^2.0.2", "fast-deep-equal": "^3.1.3", "file-entry-cache": "^8.0.0", "find-up": "^5.0.0", "glob-parent": "^6.0.2", "ignore": "^5.2.0", "imurmurhash": "^0.1.4", "is-glob": "^4.0.0", "json-stable-stringify-without-jsonify": "^1.0.1", "lodash.merge": "^4.6.2", "minimatch": "^3.1.2", "natural-compare": "^1.4.0", "optionator": "^0.9.3" }, "peerDependencies": { "jiti": "*" }, "optionalPeers": ["jiti"], "bin": { "eslint": "bin/eslint.js" } }, "sha512-BhHmn2yNOFA9H9JmmIVKJmd288g9hrVRDkdoIgRCRuSySRUHH7r/DI6aAXW9T1WwUuY3DFgrcaqB+deURBLR5g=="], @@ -709,10 +744,16 @@ "esutils": ["esutils@2.0.3", "", {}, "sha512-kVscqXk4OCp68SZ0dkgEKVi6/8ij300KBWTJq32P/dYeWTSwK41WyTxalN1eRmA5Z9UU/LX9D7FWSmV9SAYx6g=="], + "etag": ["etag@1.8.1", "", {}, "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg=="], + "eventemitter3": ["eventemitter3@4.0.7", "", {}, "sha512-8guHBZCwKnFhYdHr2ysuRWErTwhoN2X8XELRlrRwpmfeY2jjuUN4taQMsULKUVo1K4DvZl+0pgfyoysHxvmvEw=="], "expect-type": ["expect-type@1.3.0", "", {}, "sha512-knvyeauYhqjOYvQ66MznSMs83wmHrCycNEN6Ao+2AeYEfxUIkuiVxdEa1qlGEPK+We3n0THiDciYSsCcgW/DoA=="], + "express": ["express@5.2.1", "", { "dependencies": { "accepts": "^2.0.0", "body-parser": "^2.2.1", "content-disposition": "^1.0.0", "content-type": "^1.0.5", "cookie": "^0.7.1", "cookie-signature": "^1.2.1", "debug": "^4.4.0", "depd": "^2.0.0", "encodeurl": "^2.0.0", "escape-html": "^1.0.3", "etag": "^1.8.1", "finalhandler": "^2.1.0", "fresh": "^2.0.0", "http-errors": "^2.0.0", "merge-descriptors": "^2.0.0", "mime-types": "^3.0.0", "on-finished": "^2.4.1", "once": "^1.4.0", "parseurl": "^1.3.3", "proxy-addr": "^2.0.7", "qs": "^6.14.0", "range-parser": "^1.2.1", "router": "^2.2.0", "send": "^1.1.0", "serve-static": "^2.2.0", "statuses": "^2.0.1", "type-is": "^2.0.1", "vary": "^1.1.2" } }, "sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw=="], + + "express-rate-limit": ["express-rate-limit@8.2.1", "", { "dependencies": { "ip-address": "10.0.1" }, "peerDependencies": { "express": ">= 4.11" } }, "sha512-PCZEIEIxqwhzw4KF0n7QF4QqruVTcF73O5kFKUnGOyjbCCgizBBiFaYpd/fnBLUMPw/BWw9OsiN7GgrNYr7j6g=="], + "fast-deep-equal": ["fast-deep-equal@3.1.3", "", {}, "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q=="], "fast-equals": ["fast-equals@5.3.3", "", {}, "sha512-/boTcHZeIAQ2r/tL11voclBHDeP9WPxLt+tyAbVSyyXuUFyh0Tne7gJZTqGbxnvj79TjLdCXLOY7UIPhyG5MTw=="], @@ -725,24 +766,38 @@ "file-entry-cache": ["file-entry-cache@8.0.0", "", { "dependencies": { "flat-cache": "^4.0.0" } }, "sha512-XXTUwCvisa5oacNGRP9SfNtYBNAMi+RPwBFmblZEF7N7swHYQS6/Zfk7SRwx4D5j3CH211YNRco1DEMNVfZCnQ=="], + "finalhandler": ["finalhandler@2.1.1", "", { "dependencies": { "debug": "^4.4.0", "encodeurl": "^2.0.0", "escape-html": "^1.0.3", "on-finished": "^2.4.1", "parseurl": "^1.3.3", "statuses": "^2.0.1" } }, "sha512-S8KoZgRZN+a5rNwqTxlZZePjT/4cnm0ROV70LedRHZ0p8u9fRID0hJUZQpkKLzro8LfmC8sx23bY6tVNxv8pQA=="], + "find-up": ["find-up@5.0.0", "", { "dependencies": { "locate-path": "^6.0.0", "path-exists": "^4.0.0" } }, "sha512-78/PXT1wlLLDgTzDs7sjq9hzz0vXD+zn+7wypEe4fXQxCmdmqfGsEPQxmiCSQI3ajFV91bVSsvNtrJRiW6nGng=="], "flat-cache": ["flat-cache@4.0.1", "", { "dependencies": { "flatted": "^3.2.9", "keyv": "^4.5.4" } }, "sha512-f7ccFPK3SXFHpx15UIGyRJ/FJQctuKZ0zVuN3frBo4HnK3cay9VEW0R6yPYFHC0AgqhukPzKjq22t5DmAyqGyw=="], "flatted": ["flatted@3.3.3", "", {}, "sha512-GX+ysw4PBCz0PzosHDepZGANEuFCMLrnRTiEy9McGjmkCQYwRq4A/X786G/fjM/+OjsWSU1ZrY5qyARZmO/uwg=="], + "forwarded": ["forwarded@0.2.0", "", {}, "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow=="], + + "fresh": ["fresh@2.0.0", "", {}, "sha512-Rx/WycZ60HOaqLKAi6cHRKKI7zxWbJ31MhntmtwMoaTeF7XFH9hhBp8vITaMidfljRQ6eYWCKkaTK+ykVJHP2A=="], + "fsevents": ["fsevents@2.3.3", "", { "os": "darwin" }, "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw=="], + "function-bind": ["function-bind@1.1.2", "", {}, "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA=="], + "gensync": ["gensync@1.0.0-beta.2", "", {}, "sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg=="], "get-caller-file": ["get-caller-file@2.0.5", "", {}, "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg=="], + "get-intrinsic": ["get-intrinsic@1.3.0", "", { "dependencies": { "call-bind-apply-helpers": "^1.0.2", "es-define-property": "^1.0.1", "es-errors": "^1.3.0", "es-object-atoms": "^1.1.1", "function-bind": "^1.1.2", "get-proto": "^1.0.1", "gopd": "^1.2.0", "has-symbols": "^1.1.0", "hasown": "^2.0.2", "math-intrinsics": "^1.1.0" } }, "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ=="], + "get-nonce": ["get-nonce@1.0.1", "", {}, "sha512-FJhYRoDaiatfEkUK8HKlicmu/3SGFD51q3itKDGoSTysQJBnfOcxU5GxnhE1E6soB76MbT0MBtnKJuXyAx+96Q=="], + "get-proto": ["get-proto@1.0.1", "", { "dependencies": { "dunder-proto": "^1.0.1", "es-object-atoms": "^1.0.0" } }, "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g=="], + "glob-parent": ["glob-parent@6.0.2", "", { "dependencies": { "is-glob": "^4.0.3" } }, "sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A=="], "globals": ["globals@16.5.0", "", {}, "sha512-c/c15i26VrJ4IRt5Z89DnIzCGDn9EcebibhAOjw5ibqEHsE1wLUgkPn9RDmNcUKyU87GeaL633nyJ+pplFR2ZQ=="], + "gopd": ["gopd@1.2.0", "", {}, "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg=="], + "graceful-fs": ["graceful-fs@4.2.11", "", {}, "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ=="], "graphemer": ["graphemer@1.4.0", "", {}, "sha512-EtKwoO6kxCL9WO5xipiHTZlSzBm7WLT627TqC/uVRd0HKmq8NXyebnNYxDoBi7wt8eTWrUrKXCOVaFq9x1kgag=="], @@ -751,6 +806,10 @@ "has-flag": ["has-flag@4.0.0", "", {}, "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="], + "has-symbols": ["has-symbols@1.1.0", "", {}, "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ=="], + + "hasown": ["hasown@2.0.2", "", { "dependencies": { "function-bind": "^1.1.2" } }, "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ=="], + "headers-polyfill": ["headers-polyfill@4.0.3", "", {}, "sha512-IScLbePpkvO846sIwOtOTDjutRMWdXdJmXdMvk6gCBHxFO8d+QKOQedyZSxFTTFYRSmlgSTDtXqqq4pcenBXLQ=="], "hermes-estree": ["hermes-estree@0.25.1", "", {}, "sha512-0wUoCcLp+5Ev5pDW2OriHC2MJCbwLwuRx+gAqMTOkGKJJiBCLjtrvy4PWUGn6MIVefecRpzoOZ/UV6iGdOr+Cw=="], @@ -761,6 +820,8 @@ "html-escaper": ["html-escaper@2.0.2", "", {}, "sha512-H2iMtd0I4Mt5eYiapRdIDjp+XzelXQ0tFE4JS7YFwFevXXMmOp9myNrUvCg0D6ws8iqkRPBfKHgbwig1SmlLfg=="], + "http-errors": ["http-errors@2.0.1", "", { "dependencies": { "depd": "~2.0.0", "inherits": "~2.0.4", "setprototypeof": "~1.2.0", "statuses": "~2.0.2", "toidentifier": "~1.0.1" } }, "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ=="], + "http-proxy-agent": ["http-proxy-agent@7.0.2", "", { "dependencies": { "agent-base": "^7.1.0", "debug": "^4.3.4" } }, "sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig=="], "https-proxy-agent": ["https-proxy-agent@7.0.6", "", { "dependencies": { "agent-base": "^7.1.2", "debug": "4" } }, "sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw=="], @@ -775,8 +836,14 @@ "indent-string": ["indent-string@4.0.0", "", {}, "sha512-EdDDZu4A2OyIK7Lr/2zG+w5jmbuk1DVBnEwREQvBzspBJkCEbRa8GxU1lghYcaGJCnRWibjDXlq779X1/y5xwg=="], + "inherits": ["inherits@2.0.4", "", {}, "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ=="], + "internmap": ["internmap@2.0.3", "", {}, "sha512-5Hh7Y1wQbvY5ooGgPbDaL5iYLAPzMTUrjMulskHLH6wnv/A+1q5rgEaiuqEjB+oxGXIVZs1FF+R/KPN3ZSQYYg=="], + "ip-address": ["ip-address@10.0.1", "", {}, "sha512-NWv9YLW4PoW2B7xtzaS3NCot75m6nK7Icdv0o3lfMceJVRfSoQwqD4wEH5rLwoKJwUiZ/rfpiVBhnaF0FK4HoA=="], + + "ipaddr.js": ["ipaddr.js@1.9.1", "", {}, "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g=="], + "is-extglob": ["is-extglob@2.1.1", "", {}, "sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ=="], "is-fullwidth-code-point": ["is-fullwidth-code-point@3.0.0", "", {}, "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg=="], @@ -787,6 +854,8 @@ "is-potential-custom-element-name": ["is-potential-custom-element-name@1.0.1", "", {}, "sha512-bCYeRA2rVibKZd+s2625gGnGF/t7DSqDs4dP7CrLA1m7jKWz6pps0LpYLJN8Q64HtmPKJ1hrN3nzPNKFEKOUiQ=="], + "is-promise": ["is-promise@4.0.0", "", {}, "sha512-hvpoI6korhJMnej285dSg6nu1+e6uxs7zG3BYAm5byqDsgJNWwxzM6z6iZiAgQR4TJ30JmBTOwqZUw3WlyH3AQ=="], + "isexe": ["isexe@2.0.0", "", {}, "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw=="], "istanbul-lib-coverage": ["istanbul-lib-coverage@3.2.2", "", {}, "sha512-O8dpsF+r0WV/8MNRKfnmrtCWhuKjxrq2w+jpzBL5UZKTi2LeVWnWOmWRxFlesJONmc+wLAGvKQZEOanko0LFTg=="], @@ -863,8 +932,18 @@ "make-dir": ["make-dir@4.0.0", "", { "dependencies": { "semver": "^7.5.3" } }, "sha512-hXdUTZYIVOt1Ex//jAQi+wTZZpUpwBj/0QsOzqegb3rGMMeJiSEu5xLHnYfBrRV4RH2+OCSOO95Is/7x1WJ4bw=="], + "math-intrinsics": ["math-intrinsics@1.1.0", "", {}, "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g=="], + "mdn-data": ["mdn-data@2.12.2", "", {}, "sha512-IEn+pegP1aManZuckezWCO+XZQDplx1366JoVhTpMpBB1sPey/SbveZQUosKiKiGYjg1wH4pMlNgXbCiYgihQA=="], + "media-typer": ["media-typer@1.1.0", "", {}, "sha512-aisnrDP4GNe06UcKFnV5bfMNPBUw4jsLGaWwWfnH3v02GnBuXX2MCVn5RbrWo0j3pczUilYblq7fQ7Nw2t5XKw=="], + + "merge-descriptors": ["merge-descriptors@2.0.0", "", {}, "sha512-Snk314V5ayFLhp3fkUREub6WtjBfPdCPY1Ln8/8munuLuiYhsABgBVWsozAG+MWMbVEvcdcpbi9R7ww22l9Q3g=="], + + "mime-db": ["mime-db@1.54.0", "", {}, "sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ=="], + + "mime-types": ["mime-types@3.0.2", "", { "dependencies": { "mime-db": "^1.54.0" } }, "sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A=="], + "min-indent": ["min-indent@1.0.1", "", {}, "sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg=="], "minimatch": ["minimatch@3.1.2", "", { "dependencies": { "brace-expansion": "^1.1.7" } }, "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw=="], @@ -879,12 +958,20 @@ "natural-compare": ["natural-compare@1.4.0", "", {}, "sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw=="], + "negotiator": ["negotiator@1.0.0", "", {}, "sha512-8Ofs/AUQh8MaEcrlq5xOX0CQ9ypTF5dl78mjlMNfOK08fzpgTHQRQPBxcPlEtIw0yRpws+Zo/3r+5WRby7u3Gg=="], + "node-releases": ["node-releases@2.0.27", "", {}, "sha512-nmh3lCkYZ3grZvqcCH+fjmQ7X+H0OeZgP40OierEaAptX4XofMh5kwNbWh7lBduUzCcV/8kZ+NDLCwm2iorIlA=="], "object-assign": ["object-assign@4.1.1", "", {}, "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg=="], + "object-inspect": ["object-inspect@1.13.4", "", {}, "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew=="], + "obug": ["obug@2.1.1", "", {}, "sha512-uTqF9MuPraAQ+IsnPf366RG4cP9RtUi7MLO1N3KEc+wb0a6yKpeL0lmk2IB1jY5KHPAlTc6T/JRdC/YqxHNwkQ=="], + "on-finished": ["on-finished@2.4.1", "", { "dependencies": { "ee-first": "1.1.1" } }, "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg=="], + + "once": ["once@1.4.0", "", { "dependencies": { "wrappy": "1" } }, "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w=="], + "optionator": ["optionator@0.9.4", "", { "dependencies": { "deep-is": "^0.1.3", "fast-levenshtein": "^2.0.6", "levn": "^0.4.1", "prelude-ls": "^1.2.1", "type-check": "^0.4.0", "word-wrap": "^1.2.5" } }, "sha512-6IpQ7mKUxRcZNLIObR0hz7lxsapSSIYNZJwXPGeF0mTVqGKFIXj1DQcMoT22S3ROcLyY/rz0PWaWZ9ayWmad9g=="], "outvariant": ["outvariant@1.4.3", "", {}, "sha512-+Sl2UErvtsoajRDKCE5/dBz4DIvHXQQnAxtQTF04OJxY0+DyZXSo5P5Bb7XYWOh81syohlYL24hbDwxedPUJCA=="], @@ -897,6 +984,8 @@ "parse5": ["parse5@8.0.0", "", { "dependencies": { "entities": "^6.0.0" } }, "sha512-9m4m5GSgXjL4AjumKzq1Fgfp3Z8rsvjRNbnkVwfu2ImRqE5D0LnY2QfDen18FSY9C573YU5XxSapdHZTZ2WolA=="], + "parseurl": ["parseurl@1.3.3", "", {}, "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ=="], + "path-exists": ["path-exists@4.0.0", "", {}, "sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w=="], "path-key": ["path-key@3.1.1", "", {}, "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q=="], @@ -921,8 +1010,16 @@ "prop-types": ["prop-types@15.8.1", "", { "dependencies": { "loose-envify": "^1.4.0", "object-assign": "^4.1.1", "react-is": "^16.13.1" } }, "sha512-oj87CgZICdulUohogVAR7AjlC0327U4el4L6eAvOqCeudMDVU0NThNaV+b9Df4dXgSP1gXMTnPdhfe/2qDH5cg=="], + "proxy-addr": ["proxy-addr@2.0.7", "", { "dependencies": { "forwarded": "0.2.0", "ipaddr.js": "1.9.1" } }, "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg=="], + "punycode": ["punycode@2.3.1", "", {}, "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg=="], + "qs": ["qs@6.14.1", "", { "dependencies": { "side-channel": "^1.1.0" } }, "sha512-4EK3+xJl8Ts67nLYNwqw/dsFVnCf+qR7RgXSK9jEEm9unao3njwMDdmsdvoKBKHzxd7tCYz5e5M+SnMjdtXGQQ=="], + + "range-parser": ["range-parser@1.2.1", "", {}, "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg=="], + + "raw-body": ["raw-body@3.0.2", "", { "dependencies": { "bytes": "~3.1.2", "http-errors": "~2.0.1", "iconv-lite": "~0.7.0", "unpipe": "~1.0.0" } }, "sha512-K5zQjDllxWkf7Z5xJdV0/B0WTNqx6vxG70zJE4N0kBs4LovmEYWJzQGxC9bS9RAKu3bgM40lrd5zoLJ12MQ5BA=="], + "react": ["react@19.2.1", "", {}, "sha512-DGrYcCWK7tvYMnWh79yrPHt+vdx9tY+1gPZa7nJQtO/p8bLTDaHp4dzwEhQB7pZ4Xe3ok4XKuEPrVuc+wlpkmw=="], "react-day-picker": ["react-day-picker@9.12.0", "", { "dependencies": { "@date-fns/tz": "^1.4.1", "date-fns": "^4.1.0", "date-fns-jalali": "^4.1.0-0" }, "peerDependencies": { "react": ">=16.8.0" } }, "sha512-t8OvG/Zrciso5CQJu5b1A7yzEmebvST+S3pOVQJWxwjjVngyG/CA2htN/D15dLI4uTEuLLkbZyS4YYt480FAtA=="], @@ -975,6 +1072,8 @@ "rollup": ["rollup@4.53.3", "", { "dependencies": { "@types/estree": "1.0.8" }, "optionalDependencies": { "@rollup/rollup-android-arm-eabi": "4.53.3", "@rollup/rollup-android-arm64": "4.53.3", "@rollup/rollup-darwin-arm64": "4.53.3", "@rollup/rollup-darwin-x64": "4.53.3", "@rollup/rollup-freebsd-arm64": "4.53.3", "@rollup/rollup-freebsd-x64": "4.53.3", "@rollup/rollup-linux-arm-gnueabihf": "4.53.3", "@rollup/rollup-linux-arm-musleabihf": "4.53.3", "@rollup/rollup-linux-arm64-gnu": "4.53.3", "@rollup/rollup-linux-arm64-musl": "4.53.3", "@rollup/rollup-linux-loong64-gnu": "4.53.3", "@rollup/rollup-linux-ppc64-gnu": "4.53.3", "@rollup/rollup-linux-riscv64-gnu": "4.53.3", "@rollup/rollup-linux-riscv64-musl": "4.53.3", "@rollup/rollup-linux-s390x-gnu": "4.53.3", "@rollup/rollup-linux-x64-gnu": "4.53.3", "@rollup/rollup-linux-x64-musl": "4.53.3", "@rollup/rollup-openharmony-arm64": "4.53.3", "@rollup/rollup-win32-arm64-msvc": "4.53.3", "@rollup/rollup-win32-ia32-msvc": "4.53.3", "@rollup/rollup-win32-x64-gnu": "4.53.3", "@rollup/rollup-win32-x64-msvc": "4.53.3", "fsevents": "~2.3.2" }, "bin": { "rollup": "dist/bin/rollup" } }, "sha512-w8GmOxZfBmKknvdXU1sdM9NHcoQejwF/4mNgj2JuEEdRaHwwF12K7e9eXn1nLZ07ad+du76mkVsyeb2rKGllsA=="], + "router": ["router@2.2.0", "", { "dependencies": { "debug": "^4.4.0", "depd": "^2.0.0", "is-promise": "^4.0.0", "parseurl": "^1.3.3", "path-to-regexp": "^8.0.0" } }, "sha512-nLTrUKm2UyiL7rlhapu/Zl45FwNgkZGaCpZbIHajDYgwlJCOzLSk+cIPAnsEqV955GjILJnKbdQC1nVPz+gAYQ=="], + "safer-buffer": ["safer-buffer@2.1.2", "", {}, "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg=="], "saxes": ["saxes@6.0.0", "", { "dependencies": { "xmlchars": "^2.2.0" } }, "sha512-xAg7SOnEhrm5zI3puOOKyy1OMcMlIJZYNJY7xLBwSze0UjhPLnWfj2GF2EpT0jmzaJKIWKHLsaSSajf35bcYnA=="], @@ -983,12 +1082,26 @@ "semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="], + "send": ["send@1.2.1", "", { "dependencies": { "debug": "^4.4.3", "encodeurl": "^2.0.0", "escape-html": "^1.0.3", "etag": "^1.8.1", "fresh": "^2.0.0", "http-errors": "^2.0.1", "mime-types": "^3.0.2", "ms": "^2.1.3", "on-finished": "^2.4.1", "range-parser": "^1.2.1", "statuses": "^2.0.2" } }, "sha512-1gnZf7DFcoIcajTjTwjwuDjzuz4PPcY2StKPlsGAQ1+YH20IRVrBaXSWmdjowTJ6u8Rc01PoYOGHXfP1mYcZNQ=="], + + "serve-static": ["serve-static@2.2.1", "", { "dependencies": { "encodeurl": "^2.0.0", "escape-html": "^1.0.3", "parseurl": "^1.3.3", "send": "^1.2.0" } }, "sha512-xRXBn0pPqQTVQiC8wyQrKs2MOlX24zQ0POGaj0kultvoOCstBQM5yvOhAVSUwOMjQtTvsPWoNCHfPGwaaQJhTw=="], + "set-cookie-parser": ["set-cookie-parser@2.7.2", "", {}, "sha512-oeM1lpU/UvhTxw+g3cIfxXHyJRc/uidd3yK1P242gzHds0udQBYzs3y8j4gCCW+ZJ7ad0yctld8RYO+bdurlvw=="], + "setprototypeof": ["setprototypeof@1.2.0", "", {}, "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw=="], + "shebang-command": ["shebang-command@2.0.0", "", { "dependencies": { "shebang-regex": "^3.0.0" } }, "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA=="], "shebang-regex": ["shebang-regex@3.0.0", "", {}, "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A=="], + "side-channel": ["side-channel@1.1.0", "", { "dependencies": { "es-errors": "^1.3.0", "object-inspect": "^1.13.3", "side-channel-list": "^1.0.0", "side-channel-map": "^1.0.1", "side-channel-weakmap": "^1.0.2" } }, "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw=="], + + "side-channel-list": ["side-channel-list@1.0.0", "", { "dependencies": { "es-errors": "^1.3.0", "object-inspect": "^1.13.3" } }, "sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA=="], + + "side-channel-map": ["side-channel-map@1.0.1", "", { "dependencies": { "call-bound": "^1.0.2", "es-errors": "^1.3.0", "get-intrinsic": "^1.2.5", "object-inspect": "^1.13.3" } }, "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA=="], + + "side-channel-weakmap": ["side-channel-weakmap@1.0.2", "", { "dependencies": { "call-bound": "^1.0.2", "es-errors": "^1.3.0", "get-intrinsic": "^1.2.5", "object-inspect": "^1.13.3", "side-channel-map": "^1.0.1" } }, "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A=="], + "siginfo": ["siginfo@2.0.0", "", {}, "sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g=="], "signal-exit": ["signal-exit@4.1.0", "", {}, "sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw=="], @@ -1039,6 +1152,8 @@ "tldts-core": ["tldts-core@7.0.19", "", {}, "sha512-lJX2dEWx0SGH4O6p+7FPwYmJ/bu1JbcGJ8RLaG9b7liIgZ85itUVEPbMtWRVrde/0fnDPEPHW10ZsKW3kVsE9A=="], + "toidentifier": ["toidentifier@1.0.1", "", {}, "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA=="], + "tough-cookie": ["tough-cookie@6.0.0", "", { "dependencies": { "tldts": "^7.0.5" } }, "sha512-kXuRi1mtaKMrsLUxz3sQYvVl37B0Ns6MzfrtV5DvJceE9bPyspOqk9xxv7XbZWcfLWbFmm997vl83qUWVJA64w=="], "tr46": ["tr46@6.0.0", "", { "dependencies": { "punycode": "^2.3.1" } }, "sha512-bLVMLPtstlZ4iMQHpFHTR7GAGj2jxi8Dg0s2h2MafAE4uSWF98FC/3MomU51iQAMf8/qDUbKWf5GxuvvVcXEhw=="], @@ -1051,12 +1166,16 @@ "type-fest": ["type-fest@5.3.1", "", { "dependencies": { "tagged-tag": "^1.0.0" } }, "sha512-VCn+LMHbd4t6sF3wfU/+HKT63C9OoyrSIf4b+vtWHpt2U7/4InZG467YDNMFMR70DdHjAdpPWmw2lzRdg0Xqqg=="], + "type-is": ["type-is@2.0.1", "", { "dependencies": { "content-type": "^1.0.5", "media-typer": "^1.1.0", "mime-types": "^3.0.0" } }, "sha512-OZs6gsjF4vMp32qrCbiVSkrFmXtG/AZhY3t0iAMrMBiAZyV9oALtXO8hsrHbMXF9x6L3grlFuwW2oAz7cav+Gw=="], + "typescript": ["typescript@5.9.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw=="], "typescript-eslint": ["typescript-eslint@8.48.1", "", { "dependencies": { "@typescript-eslint/eslint-plugin": "8.48.1", "@typescript-eslint/parser": "8.48.1", "@typescript-eslint/typescript-estree": "8.48.1", "@typescript-eslint/utils": "8.48.1" }, "peerDependencies": { "eslint": "^8.57.0 || ^9.0.0", "typescript": ">=4.8.4 <6.0.0" } }, "sha512-FbOKN1fqNoXp1hIl5KYpObVrp0mCn+CLgn479nmu2IsRMrx2vyv74MmsBLVlhg8qVwNFGbXSp8fh1zp8pEoC2A=="], "undici-types": ["undici-types@7.16.0", "", {}, "sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw=="], + "unpipe": ["unpipe@1.0.0", "", {}, "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ=="], + "until-async": ["until-async@3.0.2", "", {}, "sha512-IiSk4HlzAMqTUseHHe3VhIGyuFmN90zMTpD3Z3y8jeQbzLIq500MVM7Jq2vUAnTKAFPJrqwkzr6PoTcPhGcOiw=="], "update-browserslist-db": ["update-browserslist-db@1.2.2", "", { "dependencies": { "escalade": "^3.2.0", "picocolors": "^1.1.1" }, "peerDependencies": { "browserslist": ">= 4.21.0" }, "bin": { "update-browserslist-db": "cli.js" } }, "sha512-E85pfNzMQ9jpKkA7+TJAi4TJN+tBCuWh5rUcS/sv6cFi+1q9LYDwDI5dpUL0u/73EElyQ8d3TEaeW4sPedBqYA=="], @@ -1069,6 +1188,8 @@ "use-sidecar": ["use-sidecar@1.1.3", "", { "dependencies": { "detect-node-es": "^1.1.0", "tslib": "^2.0.0" }, "peerDependencies": { "@types/react": "*", "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc" }, "optionalPeers": ["@types/react"] }, "sha512-Fedw0aZvkhynoPYlA5WXrMCAMm+nSWdZt6lzJQ7Ok8S6Q+VsHmHpRWndVRJ8Be0ZbkfPc5LRYH+5XrzXcEeLRQ=="], + "vary": ["vary@1.1.2", "", {}, "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg=="], + "victory-vendor": ["victory-vendor@36.9.2", "", { "dependencies": { "@types/d3-array": "^3.0.3", "@types/d3-ease": "^3.0.0", "@types/d3-interpolate": "^3.0.1", "@types/d3-scale": "^4.0.2", "@types/d3-shape": "^3.1.0", "@types/d3-time": "^3.0.0", "@types/d3-timer": "^3.0.0", "d3-array": "^3.1.6", "d3-ease": "^3.0.1", "d3-interpolate": "^3.0.1", "d3-scale": "^4.0.2", "d3-shape": "^3.1.0", "d3-time": "^3.0.0", "d3-timer": "^3.0.1" } }, "sha512-PnpQQMuxlwYdocC8fIJqVXvkeViHYzotI+NJrCuav0ZYFoq912ZHBk3mCeuj+5/VpodOjPe1z0Fk2ihgzlXqjQ=="], "vite": ["vite@7.2.6", "", { "dependencies": { "esbuild": "^0.25.0", "fdir": "^6.5.0", "picomatch": "^4.0.3", "postcss": "^8.5.6", "rollup": "^4.43.0", "tinyglobby": "^0.2.15" }, "optionalDependencies": { "fsevents": "~2.3.3" }, "peerDependencies": { "@types/node": "^20.19.0 || >=22.12.0", "jiti": ">=1.21.0", "less": "^4.0.0", "lightningcss": "^1.21.0", "sass": "^1.70.0", "sass-embedded": "^1.70.0", "stylus": ">=0.54.8", "sugarss": "^5.0.0", "terser": "^5.16.0", "tsx": "^4.8.1", "yaml": "^2.4.2" }, "optionalPeers": ["@types/node", "jiti", "less", "lightningcss", "sass", "sass-embedded", "stylus", "sugarss", "terser", "tsx", "yaml"], "bin": { "vite": "bin/vite.js" } }, "sha512-tI2l/nFHC5rLh7+5+o7QjKjSR04ivXDF4jcgV0f/bTQ+OJiITy5S6gaynVsEM+7RqzufMnVbIon6Sr5x1SDYaQ=="], @@ -1093,6 +1214,8 @@ "wrap-ansi": ["wrap-ansi@6.2.0", "", { "dependencies": { "ansi-styles": "^4.0.0", "string-width": "^4.1.0", "strip-ansi": "^6.0.0" } }, "sha512-r6lPcBGxZXlIcymEu7InxDMhdW0KDxpLgoFLcguasxCaJ/SOIZwINatK9KY/tf+ZrlywOKU0UDj3ATXUBfxJXA=="], + "wrappy": ["wrappy@1.0.2", "", {}, "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ=="], + "ws": ["ws@8.18.3", "", { "peerDependencies": { "bufferutil": "^4.0.1", "utf-8-validate": ">=5.0.2" }, "optionalPeers": ["bufferutil", "utf-8-validate"] }, "sha512-PEIGCY5tSlUt50cqyMXfCzX+oOPqN0vuGqWzbcJ2xvnkzkq46oOpz7dQaTDBdfICb4N14+GARUDw2XV2N4tvzg=="], "xml-name-validator": ["xml-name-validator@5.0.0", "", {}, "sha512-EvGK8EJ3DhaHfbRlETOWAS5pO9MZITeauHKJyb8wyajUfQUenkIg2MvLDTZ4T/TgIcm3HU0TFBgWWboAZ30UHg=="], @@ -1171,6 +1294,8 @@ "@typescript-eslint/typescript-estree/semver": ["semver@7.7.3", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q=="], + "body-parser/iconv-lite": ["iconv-lite@0.7.2", "", { "dependencies": { "safer-buffer": ">= 2.1.2 < 3.0.0" } }, "sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw=="], + "cliui/wrap-ansi": ["wrap-ansi@7.0.0", "", { "dependencies": { "ansi-styles": "^4.0.0", "string-width": "^4.1.0", "strip-ansi": "^6.0.0" } }, "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q=="], "d3-sankey/d3-array": ["d3-array@2.12.1", "", { "dependencies": { "internmap": "^1.0.0" } }, "sha512-B0ErZK/66mHtEsR1TkPEEkwdy+WDesimkM5gpZr5Dsg54BiTA5RXtYW5qTLIAcekaS9xfZrzBLF/OAkB3Qn1YQ=="], @@ -1183,6 +1308,8 @@ "d3-time-format/d3-time": ["d3-time@2.1.1", "", { "dependencies": { "d3-array": "2" } }, "sha512-/eIQe/eR4kCQwq7yxi7z4c6qEXf2IYGcjoWB5OOQy4Tq9Uv39/947qlDcN2TLkiTzQWzvnsuYPB9TrWaNfipKQ=="], + "express/cookie": ["cookie@0.7.2", "", {}, "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w=="], + "loose-envify/js-tokens": ["js-tokens@4.0.0", "", {}, "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="], "make-dir/semver": ["semver@7.7.3", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q=="], @@ -1193,6 +1320,10 @@ "prop-types/react-is": ["react-is@16.13.1", "", {}, "sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ=="], + "raw-body/iconv-lite": ["iconv-lite@0.7.2", "", { "dependencies": { "safer-buffer": ">= 2.1.2 < 3.0.0" } }, "sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw=="], + + "router/path-to-regexp": ["path-to-regexp@8.3.0", "", {}, "sha512-7jdwVIRtsP8MYpdXSwOS0YdD0Du+qOoF/AEPIt88PcCFrZCzx41oxku1jD88hZBwbNUIEfpqvuhjFaMAqMTWnA=="], + "victory-vendor/@types/d3-shape": ["@types/d3-shape@3.1.7", "", { "dependencies": { "@types/d3-path": "*" } }, "sha512-VLvUQ33C+3J+8p+Daf+nYSOsjB4GXp19/S/aGo60m9h1v6XaxjiT82lKVWJCfzhtuZ3yD7i/TPeC/fuKLLOSmg=="], "@nivo/core/@types/d3-shape/@types/d3-path": ["@types/d3-path@3.1.1", "", {}, "sha512-VMZBYyQvbGmWyWVea0EHs/BwLgxc+MKi1zLDCONksozI4YJMcTt8ZEuIR4Sb1MMTE8MMW49v0IwI5+b7RmfWlg=="], diff --git a/ui/package.json b/ui/package.json index 23c50f38..cabf79f6 100644 --- a/ui/package.json +++ b/ui/package.json @@ -42,6 +42,7 @@ "class-variance-authority": "^0.7.1", "clsx": "^2.1.1", "date-fns": "^4.1.0", + "express-rate-limit": "^8.2.1", "lucide-react": "^0.556.0", "prism-react-renderer": "^2.4.1", "react": "^19.2.0", @@ -64,6 +65,7 @@ "@testing-library/jest-dom": "^6.9.1", "@testing-library/react": "^16.3.1", "@testing-library/user-event": "^14.6.1", + "@types/express-rate-limit": "^6.0.2", "@types/node": "^24.10.1", "@types/react": "^19.2.5", "@types/react-dom": "^19.2.3", diff --git a/ui/src/App.tsx b/ui/src/App.tsx index 26c03469..846e3ead 100644 --- a/ui/src/App.tsx +++ b/ui/src/App.tsx @@ -1,14 +1,18 @@ -import { lazy } from 'react'; +import { lazy, Suspense } from 'react'; import { BrowserRouter, Routes, Route } from 'react-router-dom'; import { QueryClientProvider } from '@tanstack/react-query'; import { Toaster } from 'sonner'; import { queryClient } from '@/lib/query-client'; import { ThemeProvider } from '@/components/layout/theme-provider'; import { PrivacyProvider } from '@/contexts/privacy-context'; +import { AuthProvider } from '@/contexts/auth-context'; +import { RequireAuth } from '@/components/auth/require-auth'; import { Layout } from '@/components/layout/layout'; +import { Loader2 } from 'lucide-react'; -// Eager load: HomePage (initial route) +// Eager load: HomePage (initial route) + LoginPage (auth flow) import { HomePage } from '@/pages'; +import { LoginPage } from '@/pages/login'; // Lazy load: heavy pages with charts or complex dependencies const AnalyticsPage = lazy(() => @@ -31,28 +35,108 @@ const SettingsPage = lazy(() => const HealthPage = lazy(() => import('@/pages/health').then((m) => ({ default: m.HealthPage }))); const SharedPage = lazy(() => import('@/pages/shared').then((m) => ({ default: m.SharedPage }))); +// Loading fallback for lazy components +function PageLoader() { + return ( +
+ +
+ ); +} + export default function App() { return ( - - - }> - } /> - } /> - } /> - } /> - } /> - } /> - } /> - } /> - } /> - } /> - - - - + + + + {/* Public route: Login page */} + } /> + + {/* Protected routes: wrapped with RequireAuth */} + }> + }> + } /> + }> + + + } + /> + }> + + + } + /> + }> + + + } + /> + }> + + + } + /> + }> + + + } + /> + }> + + + } + /> + }> + + + } + /> + }> + + + } + /> + }> + + + } + /> + + + + + + diff --git a/ui/src/components/auth/require-auth.tsx b/ui/src/components/auth/require-auth.tsx new file mode 100644 index 00000000..66dd4639 --- /dev/null +++ b/ui/src/components/auth/require-auth.tsx @@ -0,0 +1,35 @@ +/** + * RequireAuth - Protected route wrapper component + * Redirects to login page if auth is required but user is not authenticated. + */ + +import { Navigate, useLocation, Outlet } from 'react-router-dom'; +import { useAuth } from '@/contexts/auth-context'; +import { Loader2 } from 'lucide-react'; + +export function RequireAuth() { + const { authRequired, isAuthenticated, loading } = useAuth(); + const location = useLocation(); + + // Show loading spinner while checking auth + if (loading) { + return ( +
+ +
+ ); + } + + // If auth not required, allow access + if (!authRequired) { + return ; + } + + // If not authenticated, redirect to login + if (!isAuthenticated) { + return ; + } + + // Authenticated, render children + return ; +} diff --git a/ui/src/components/auth/user-menu.tsx b/ui/src/components/auth/user-menu.tsx new file mode 100644 index 00000000..4bc8cdac --- /dev/null +++ b/ui/src/components/auth/user-menu.tsx @@ -0,0 +1,44 @@ +/** + * User Menu - Header component showing username and logout button + * Only renders when auth is enabled and user is authenticated. + */ + +import { useAuth } from '@/contexts/auth-context'; +import { Button } from '@/components/ui/button'; +import { + DropdownMenu, + DropdownMenuContent, + DropdownMenuItem, + DropdownMenuTrigger, +} from '@/components/ui/dropdown-menu'; +import { User, LogOut } from 'lucide-react'; + +export function UserMenu() { + const { authRequired, isAuthenticated, username, logout } = useAuth(); + + // Only show when auth is enabled and user is logged in + if (!authRequired || !isAuthenticated) { + return null; + } + + const handleLogout = async () => { + await logout(); + }; + + return ( + + + + + + + + Sign Out + + + + ); +} diff --git a/ui/src/components/layout/layout.tsx b/ui/src/components/layout/layout.tsx index 313beac3..58ce66f0 100644 --- a/ui/src/components/layout/layout.tsx +++ b/ui/src/components/layout/layout.tsx @@ -13,6 +13,7 @@ import { ClaudeKitBadge } from '@/components/shared/claudekit-badge'; import { SponsorButton } from '@/components/shared/sponsor-button'; import { ProjectSelectionDialog } from '@/components/shared/project-selection-dialog'; import { DeviceCodeDialog } from '@/components/shared/device-code-dialog'; +import { UserMenu } from '@/components/auth/user-menu'; import { useProjectSelection } from '@/hooks/use-project-selection'; import { useDeviceCode } from '@/hooks/use-device-code'; @@ -44,6 +45,7 @@ export function Layout() { +
diff --git a/ui/src/contexts/auth-context.tsx b/ui/src/contexts/auth-context.tsx new file mode 100644 index 00000000..6be8c976 --- /dev/null +++ b/ui/src/contexts/auth-context.tsx @@ -0,0 +1,90 @@ +/** + * Auth Context - Dashboard authentication state management + * Provides auth status and login/logout functions globally. + */ + +/* eslint-disable react-refresh/only-export-components */ +import { + createContext, + useContext, + useState, + useEffect, + useMemo, + useCallback, + type ReactNode, +} from 'react'; +import { checkAuth, login as apiLogin, logout as apiLogout } from '@/lib/auth-api'; + +interface AuthContextValue { + /** Whether authentication is required for this dashboard */ + authRequired: boolean; + /** Whether user is currently authenticated */ + isAuthenticated: boolean; + /** Username of authenticated user */ + username: string | null; + /** Whether auth check is in progress */ + loading: boolean; + /** Login with credentials */ + login: (username: string, password: string) => Promise; + /** Logout current session */ + logout: () => Promise; +} + +const AuthContext = createContext(null); + +export function AuthProvider({ children }: { children: ReactNode }) { + const [authRequired, setAuthRequired] = useState(false); + const [isAuthenticated, setIsAuthenticated] = useState(false); + const [username, setUsername] = useState(null); + const [loading, setLoading] = useState(true); + + // Check auth status on mount + useEffect(() => { + checkAuth() + .then((res) => { + setAuthRequired(res.authRequired); + setIsAuthenticated(res.authenticated); + setUsername(res.username); + }) + .catch(() => { + // If check fails, assume no auth required (backward compat) + setAuthRequired(false); + setIsAuthenticated(true); + }) + .finally(() => setLoading(false)); + }, []); + + const login = useCallback(async (user: string, password: string) => { + const res = await apiLogin(user, password); + setIsAuthenticated(true); + setUsername(res.username); + }, []); + + const logout = useCallback(async () => { + await apiLogout(); + setIsAuthenticated(false); + setUsername(null); + }, []); + + const value = useMemo( + () => ({ + authRequired, + isAuthenticated, + username, + loading, + login, + logout, + }), + [authRequired, isAuthenticated, username, loading, login, logout] + ); + + return {children}; +} + +export function useAuth() { + const context = useContext(AuthContext); + if (!context) { + throw new Error('useAuth must be used within an AuthProvider'); + } + return context; +} diff --git a/ui/src/lib/auth-api.ts b/ui/src/lib/auth-api.ts new file mode 100644 index 00000000..7370932d --- /dev/null +++ b/ui/src/lib/auth-api.ts @@ -0,0 +1,61 @@ +/** + * Auth API Client + * Handles authentication-related API calls. + */ + +const BASE_URL = '/api/auth'; + +export interface AuthCheckResponse { + authRequired: boolean; + authenticated: boolean; + username: string | null; +} + +export interface AuthSetupResponse { + enabled: boolean; + configured: boolean; + sessionTimeoutHours: number; +} + +export interface LoginResponse { + success: boolean; + username: string; +} + +async function request(url: string, options?: RequestInit): Promise { + const res = await fetch(`${BASE_URL}${url}`, { + headers: { 'Content-Type': 'application/json' }, + credentials: 'include', // Include cookies for session + ...options, + }); + + if (!res.ok) { + const error = await res.json().catch(() => ({ error: 'Unknown error' })); + throw new Error(error.error || res.statusText); + } + + return res.json(); +} + +/** Check authentication status */ +export function checkAuth(): Promise { + return request('/check'); +} + +/** Check auth setup status */ +export function getAuthSetup(): Promise { + return request('/setup'); +} + +/** Login with username/password */ +export function login(username: string, password: string): Promise { + return request('/login', { + method: 'POST', + body: JSON.stringify({ username, password }), + }); +} + +/** Logout current session */ +export function logout(): Promise<{ success: boolean }> { + return request('/logout', { method: 'POST' }); +} diff --git a/ui/src/pages/login.tsx b/ui/src/pages/login.tsx new file mode 100644 index 00000000..dca471ab --- /dev/null +++ b/ui/src/pages/login.tsx @@ -0,0 +1,109 @@ +/** + * Login Page - Dashboard authentication form + * Uses shadcn/ui Card and Input components. + */ + +import { useState } from 'react'; +import { useNavigate, useLocation } from 'react-router-dom'; +import { useAuth } from '@/contexts/auth-context'; +import { Button } from '@/components/ui/button'; +import { Input } from '@/components/ui/input'; +import { Label } from '@/components/ui/label'; +import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card'; +import { AlertCircle, Loader2, Lock } from 'lucide-react'; +import { Alert, AlertDescription } from '@/components/ui/alert'; + +export function LoginPage() { + const [username, setUsername] = useState(''); + const [password, setPassword] = useState(''); + const [error, setError] = useState(null); + const [loading, setLoading] = useState(false); + + const { login, authRequired, isAuthenticated } = useAuth(); + const navigate = useNavigate(); + const location = useLocation(); + + // Get redirect destination (default to home) + const from = (location.state as { from?: { pathname: string } })?.from?.pathname || '/'; + + // If already authenticated or auth not required, redirect + if (isAuthenticated || !authRequired) { + navigate(from, { replace: true }); + return null; + } + + const handleSubmit = async (e: React.FormEvent) => { + e.preventDefault(); + setError(null); + setLoading(true); + + try { + await login(username, password); + navigate(from, { replace: true }); + } catch (err) { + setError(err instanceof Error ? err.message : 'Login failed'); + } finally { + setLoading(false); + } + }; + + return ( +
+ + +
+ +
+ CCS Dashboard + Enter your credentials to access the dashboard + + +
+ {error && ( + + + {error} + + )} +
+ + setUsername(e.target.value)} + placeholder="Enter username" + autoComplete="username" + disabled={loading} + required + /> +
+
+ + setPassword(e.target.value)} + placeholder="Enter password" + autoComplete="current-password" + disabled={loading} + required + /> +
+ +
+ + +
+ ); +} From 37e3468d4dece26d35ef6b5ad9683312473e1ca9 Mon Sep 17 00:00:00 2001 From: kaitranntt Date: Tue, 13 Jan 2026 14:43:55 -0500 Subject: [PATCH 02/15] fix(auth): move redirect to useEffect and validate bcrypt hash format - Fix React side effect: move navigate() to useEffect in LoginPage - Remove misplaced express-rate-limit from ui/package.json - Add bcrypt hash format validation before bcrypt.compare --- src/web-server/routes/auth-routes.ts | 7 ++ ui/bun.lock | 132 --------------------------- ui/package.json | 2 - ui/src/pages/login.tsx | 12 ++- 4 files changed, 16 insertions(+), 137 deletions(-) diff --git a/src/web-server/routes/auth-routes.ts b/src/web-server/routes/auth-routes.ts index 15169b75..a29ff6ce 100644 --- a/src/web-server/routes/auth-routes.ts +++ b/src/web-server/routes/auth-routes.ts @@ -31,6 +31,13 @@ router.post('/login', loginRateLimiter, async (req: Request, res: Response) => { return; } + // Validate bcrypt hash format to prevent bcrypt.compare errors + const isBcryptHash = /^\$2[aby]?\$\d{2}\$.{53}$/.test(authConfig.password_hash); + if (!isBcryptHash) { + res.status(500).json({ error: 'Invalid password hash format in config' }); + return; + } + // Verify credentials const usernameMatch = username === authConfig.username; const passwordMatch = await bcrypt.compare(password, authConfig.password_hash); diff --git a/ui/bun.lock b/ui/bun.lock index d1486b65..2756da98 100644 --- a/ui/bun.lock +++ b/ui/bun.lock @@ -27,7 +27,6 @@ "class-variance-authority": "^0.7.1", "clsx": "^2.1.1", "date-fns": "^4.1.0", - "express-rate-limit": "^8.2.1", "lucide-react": "^0.556.0", "prism-react-renderer": "^2.4.1", "react": "^19.2.0", @@ -50,7 +49,6 @@ "@testing-library/jest-dom": "^6.9.1", "@testing-library/react": "^16.3.1", "@testing-library/user-event": "^14.6.1", - "@types/express-rate-limit": "^6.0.2", "@types/node": "^24.10.1", "@types/react": "^19.2.5", "@types/react-dom": "^19.2.3", @@ -498,8 +496,6 @@ "@types/estree": ["@types/estree@1.0.8", "", {}, "sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w=="], - "@types/express-rate-limit": ["@types/express-rate-limit@6.0.2", "", { "dependencies": { "express-rate-limit": "*" } }, "sha512-e1xZLOOlxCDvplAGq7rDcXtbdBu2CWRsMjaIu1LVqGxWtKvwr884YE5mPs3IvHeG/OMDhf24oTaqG5T1bV3rBQ=="], - "@types/json-schema": ["@types/json-schema@7.0.15", "", {}, "sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA=="], "@types/node": ["@types/node@24.10.1", "", { "dependencies": { "undici-types": "~7.16.0" } }, "sha512-GNWcUTRBgIRJD5zj+Tq0fKOJ5XZajIiBroOF0yvj2bSU1WvNdYS/dn9UxwsujGW4JX06dnHyjV2y9rRaybH0iQ=="], @@ -552,8 +548,6 @@ "@vitest/utils": ["@vitest/utils@4.0.16", "", { "dependencies": { "@vitest/pretty-format": "4.0.16", "tinyrainbow": "^3.0.3" } }, "sha512-h8z9yYhV3e1LEfaQ3zdypIrnAg/9hguReGZoS7Gl0aBG5xgA410zBqECqmaF/+RkTggRsfnzc1XaAHA6bmUufA=="], - "accepts": ["accepts@2.0.0", "", { "dependencies": { "mime-types": "^3.0.0", "negotiator": "^1.0.0" } }, "sha512-5cvg6CtKwfgdmVqY1WIiXKc3Q1bkRqGLi+2W/6ao+6Y7gu/RCwRuAhGEzh5B4KlszSuTLgZYuqFqo5bImjNKng=="], - "acorn": ["acorn@8.15.0", "", { "bin": { "acorn": "bin/acorn" } }, "sha512-NZyJarBfL7nWwIq+FDL6Zp/yHEhePMNnnJ0y3qfieCrmNvYct8uvtiV41UvlSe6apAfk0fY1FbWx+NwfmpvtTg=="], "acorn-jsx": ["acorn-jsx@5.3.2", "", { "peerDependencies": { "acorn": "^6.0.0 || ^7.0.0 || ^8.0.0" } }, "sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ=="], @@ -582,18 +576,10 @@ "bidi-js": ["bidi-js@1.0.3", "", { "dependencies": { "require-from-string": "^2.0.2" } }, "sha512-RKshQI1R3YQ+n9YJz2QQ147P66ELpa1FQEg20Dk8oW9t2KgLbpDLLp9aGZ7y8WHSshDknG0bknqGw5/tyCs5tw=="], - "body-parser": ["body-parser@2.2.2", "", { "dependencies": { "bytes": "^3.1.2", "content-type": "^1.0.5", "debug": "^4.4.3", "http-errors": "^2.0.0", "iconv-lite": "^0.7.0", "on-finished": "^2.4.1", "qs": "^6.14.1", "raw-body": "^3.0.1", "type-is": "^2.0.1" } }, "sha512-oP5VkATKlNwcgvxi0vM0p/D3n2C3EReYVX+DNYs5TjZFn/oQt2j+4sVJtSMr18pdRr8wjTcBl6LoV+FUwzPmNA=="], - "brace-expansion": ["brace-expansion@1.1.12", "", { "dependencies": { "balanced-match": "^1.0.0", "concat-map": "0.0.1" } }, "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg=="], "browserslist": ["browserslist@4.28.1", "", { "dependencies": { "baseline-browser-mapping": "^2.9.0", "caniuse-lite": "^1.0.30001759", "electron-to-chromium": "^1.5.263", "node-releases": "^2.0.27", "update-browserslist-db": "^1.2.0" }, "bin": { "browserslist": "cli.js" } }, "sha512-ZC5Bd0LgJXgwGqUknZY/vkUQ04r8NXnJZ3yYi4vDmSiZmC/pdSN0NbNRPxZpbtO4uAfDUAFffO8IZoM3Gj8IkA=="], - "bytes": ["bytes@3.1.2", "", {}, "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg=="], - - "call-bind-apply-helpers": ["call-bind-apply-helpers@1.0.2", "", { "dependencies": { "es-errors": "^1.3.0", "function-bind": "^1.1.2" } }, "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ=="], - - "call-bound": ["call-bound@1.0.4", "", { "dependencies": { "call-bind-apply-helpers": "^1.0.2", "get-intrinsic": "^1.3.0" } }, "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg=="], - "callsites": ["callsites@3.1.0", "", {}, "sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ=="], "caniuse-lite": ["caniuse-lite@1.0.30001759", "", {}, "sha512-Pzfx9fOKoKvevQf8oCXoyNRQ5QyxJj+3O0Rqx2V5oxT61KGx8+n6hV/IUyJeifUci2clnmmKVpvtiqRzgiWjSw=="], @@ -618,16 +604,10 @@ "concat-map": ["concat-map@0.0.1", "", {}, "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg=="], - "content-disposition": ["content-disposition@1.0.1", "", {}, "sha512-oIXISMynqSqm241k6kcQ5UwttDILMK4BiurCfGEREw6+X9jkkpEe5T9FZaApyLGGOnFuyMWZpdolTXMtvEJ08Q=="], - - "content-type": ["content-type@1.0.5", "", {}, "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA=="], - "convert-source-map": ["convert-source-map@2.0.0", "", {}, "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg=="], "cookie": ["cookie@1.1.1", "", {}, "sha512-ei8Aos7ja0weRpFzJnEA9UHJ/7XQmqglbRwnf2ATjcB9Wq874VKH9kfjjirM6UhU2/E5fFYadylyhFldcqSidQ=="], - "cookie-signature": ["cookie-signature@1.2.2", "", {}, "sha512-D76uU73ulSXrD1UXF4KE2TMxVVwhsnCgfAyTg9k8P6KGZjlXKrOLe4dJQKI3Bxi5wjesZoFXJWElNWBjPZMbhg=="], - "cross-spawn": ["cross-spawn@7.0.6", "", { "dependencies": { "path-key": "^3.1.0", "shebang-command": "^2.0.0", "which": "^2.0.1" } }, "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA=="], "css-tree": ["css-tree@3.1.0", "", { "dependencies": { "mdn-data": "2.12.2", "source-map-js": "^1.0.1" } }, "sha512-0eW44TGN5SQXU1mWSkKwFstI/22X2bG1nYzZTYMAWjylYURhse752YgbE4Cx46AC+bAvI+/dYTPRk1LqSUnu6w=="], @@ -678,8 +658,6 @@ "deep-is": ["deep-is@0.1.4", "", {}, "sha512-oIPzksmTg4/MriiaYGO+okXDT7ztn/w3Eptv/+gSIdMdKsJo0u4CfYNFJPy+4SKMuCqGw2wxnA+URMg3t8a/bQ=="], - "depd": ["depd@2.0.0", "", {}, "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw=="], - "dequal": ["dequal@2.0.3", "", {}, "sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA=="], "detect-libc": ["detect-libc@2.1.2", "", {}, "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ=="], @@ -690,34 +668,20 @@ "dom-helpers": ["dom-helpers@5.2.1", "", { "dependencies": { "@babel/runtime": "^7.8.7", "csstype": "^3.0.2" } }, "sha512-nRCa7CK3VTrM2NmGkIy4cbK7IZlgBE/PYMn55rrXefr5xXDP0LdtfPnblFDoVdcAfslJ7or6iqAUnx0CCGIWQA=="], - "dunder-proto": ["dunder-proto@1.0.1", "", { "dependencies": { "call-bind-apply-helpers": "^1.0.1", "es-errors": "^1.3.0", "gopd": "^1.2.0" } }, "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A=="], - - "ee-first": ["ee-first@1.1.1", "", {}, "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow=="], - "electron-to-chromium": ["electron-to-chromium@1.5.266", "", {}, "sha512-kgWEglXvkEfMH7rxP5OSZZwnaDWT7J9EoZCujhnpLbfi0bbNtRkgdX2E3gt0Uer11c61qCYktB3hwkAS325sJg=="], "emoji-regex": ["emoji-regex@8.0.0", "", {}, "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A=="], - "encodeurl": ["encodeurl@2.0.0", "", {}, "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg=="], - "enhanced-resolve": ["enhanced-resolve@5.18.3", "", { "dependencies": { "graceful-fs": "^4.2.4", "tapable": "^2.2.0" } }, "sha512-d4lC8xfavMeBjzGr2vECC3fsGXziXZQyJxD868h2M/mBI3PwAuODxAkLkq5HYuvrPYcUtiLzsTo8U3PgX3Ocww=="], "entities": ["entities@6.0.1", "", {}, "sha512-aN97NXWF6AWBTahfVOIrB/NShkzi5H7F9r1s9mD3cDj4Ko5f2qhhVoYMibXF7GlLveb/D2ioWay8lxI97Ven3g=="], - "es-define-property": ["es-define-property@1.0.1", "", {}, "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g=="], - - "es-errors": ["es-errors@1.3.0", "", {}, "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw=="], - "es-module-lexer": ["es-module-lexer@1.7.0", "", {}, "sha512-jEQoCwk8hyb2AZziIOLhDqpm5+2ww5uIE6lkO/6jcOCusfk6LhMHpXXfBLXTZ7Ydyt0j4VoUQv6uGNYbdW+kBA=="], - "es-object-atoms": ["es-object-atoms@1.1.1", "", { "dependencies": { "es-errors": "^1.3.0" } }, "sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA=="], - "esbuild": ["esbuild@0.25.12", "", { "optionalDependencies": { "@esbuild/aix-ppc64": "0.25.12", "@esbuild/android-arm": "0.25.12", "@esbuild/android-arm64": "0.25.12", "@esbuild/android-x64": "0.25.12", "@esbuild/darwin-arm64": "0.25.12", "@esbuild/darwin-x64": "0.25.12", "@esbuild/freebsd-arm64": "0.25.12", "@esbuild/freebsd-x64": "0.25.12", "@esbuild/linux-arm": "0.25.12", "@esbuild/linux-arm64": "0.25.12", "@esbuild/linux-ia32": "0.25.12", "@esbuild/linux-loong64": "0.25.12", "@esbuild/linux-mips64el": "0.25.12", "@esbuild/linux-ppc64": "0.25.12", "@esbuild/linux-riscv64": "0.25.12", "@esbuild/linux-s390x": "0.25.12", "@esbuild/linux-x64": "0.25.12", "@esbuild/netbsd-arm64": "0.25.12", "@esbuild/netbsd-x64": "0.25.12", "@esbuild/openbsd-arm64": "0.25.12", "@esbuild/openbsd-x64": "0.25.12", "@esbuild/openharmony-arm64": "0.25.12", "@esbuild/sunos-x64": "0.25.12", "@esbuild/win32-arm64": "0.25.12", "@esbuild/win32-ia32": "0.25.12", "@esbuild/win32-x64": "0.25.12" }, "bin": { "esbuild": "bin/esbuild" } }, "sha512-bbPBYYrtZbkt6Os6FiTLCTFxvq4tt3JKall1vRwshA3fdVztsLAatFaZobhkBC8/BrPetoa0oksYoKXoG4ryJg=="], "escalade": ["escalade@3.2.0", "", {}, "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA=="], - "escape-html": ["escape-html@1.0.3", "", {}, "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow=="], - "escape-string-regexp": ["escape-string-regexp@4.0.0", "", {}, "sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA=="], "eslint": ["eslint@9.39.1", "", { "dependencies": { "@eslint-community/eslint-utils": "^4.8.0", "@eslint-community/regexpp": "^4.12.1", "@eslint/config-array": "^0.21.1", "@eslint/config-helpers": "^0.4.2", "@eslint/core": "^0.17.0", "@eslint/eslintrc": "^3.3.1", "@eslint/js": "9.39.1", "@eslint/plugin-kit": "^0.4.1", "@humanfs/node": "^0.16.6", "@humanwhocodes/module-importer": "^1.0.1", "@humanwhocodes/retry": "^0.4.2", "@types/estree": "^1.0.6", "ajv": "^6.12.4", "chalk": "^4.0.0", "cross-spawn": "^7.0.6", "debug": "^4.3.2", "escape-string-regexp": "^4.0.0", "eslint-scope": "^8.4.0", "eslint-visitor-keys": "^4.2.1", "espree": "^10.4.0", "esquery": "^1.5.0", "esutils": "^2.0.2", "fast-deep-equal": "^3.1.3", "file-entry-cache": "^8.0.0", "find-up": "^5.0.0", "glob-parent": "^6.0.2", "ignore": "^5.2.0", "imurmurhash": "^0.1.4", "is-glob": "^4.0.0", "json-stable-stringify-without-jsonify": "^1.0.1", "lodash.merge": "^4.6.2", "minimatch": "^3.1.2", "natural-compare": "^1.4.0", "optionator": "^0.9.3" }, "peerDependencies": { "jiti": "*" }, "optionalPeers": ["jiti"], "bin": { "eslint": "bin/eslint.js" } }, "sha512-BhHmn2yNOFA9H9JmmIVKJmd288g9hrVRDkdoIgRCRuSySRUHH7r/DI6aAXW9T1WwUuY3DFgrcaqB+deURBLR5g=="], @@ -744,16 +708,10 @@ "esutils": ["esutils@2.0.3", "", {}, "sha512-kVscqXk4OCp68SZ0dkgEKVi6/8ij300KBWTJq32P/dYeWTSwK41WyTxalN1eRmA5Z9UU/LX9D7FWSmV9SAYx6g=="], - "etag": ["etag@1.8.1", "", {}, "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg=="], - "eventemitter3": ["eventemitter3@4.0.7", "", {}, "sha512-8guHBZCwKnFhYdHr2ysuRWErTwhoN2X8XELRlrRwpmfeY2jjuUN4taQMsULKUVo1K4DvZl+0pgfyoysHxvmvEw=="], "expect-type": ["expect-type@1.3.0", "", {}, "sha512-knvyeauYhqjOYvQ66MznSMs83wmHrCycNEN6Ao+2AeYEfxUIkuiVxdEa1qlGEPK+We3n0THiDciYSsCcgW/DoA=="], - "express": ["express@5.2.1", "", { "dependencies": { "accepts": "^2.0.0", "body-parser": "^2.2.1", "content-disposition": "^1.0.0", "content-type": "^1.0.5", "cookie": "^0.7.1", "cookie-signature": "^1.2.1", "debug": "^4.4.0", "depd": "^2.0.0", "encodeurl": "^2.0.0", "escape-html": "^1.0.3", "etag": "^1.8.1", "finalhandler": "^2.1.0", "fresh": "^2.0.0", "http-errors": "^2.0.0", "merge-descriptors": "^2.0.0", "mime-types": "^3.0.0", "on-finished": "^2.4.1", "once": "^1.4.0", "parseurl": "^1.3.3", "proxy-addr": "^2.0.7", "qs": "^6.14.0", "range-parser": "^1.2.1", "router": "^2.2.0", "send": "^1.1.0", "serve-static": "^2.2.0", "statuses": "^2.0.1", "type-is": "^2.0.1", "vary": "^1.1.2" } }, "sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw=="], - - "express-rate-limit": ["express-rate-limit@8.2.1", "", { "dependencies": { "ip-address": "10.0.1" }, "peerDependencies": { "express": ">= 4.11" } }, "sha512-PCZEIEIxqwhzw4KF0n7QF4QqruVTcF73O5kFKUnGOyjbCCgizBBiFaYpd/fnBLUMPw/BWw9OsiN7GgrNYr7j6g=="], - "fast-deep-equal": ["fast-deep-equal@3.1.3", "", {}, "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q=="], "fast-equals": ["fast-equals@5.3.3", "", {}, "sha512-/boTcHZeIAQ2r/tL11voclBHDeP9WPxLt+tyAbVSyyXuUFyh0Tne7gJZTqGbxnvj79TjLdCXLOY7UIPhyG5MTw=="], @@ -766,38 +724,24 @@ "file-entry-cache": ["file-entry-cache@8.0.0", "", { "dependencies": { "flat-cache": "^4.0.0" } }, "sha512-XXTUwCvisa5oacNGRP9SfNtYBNAMi+RPwBFmblZEF7N7swHYQS6/Zfk7SRwx4D5j3CH211YNRco1DEMNVfZCnQ=="], - "finalhandler": ["finalhandler@2.1.1", "", { "dependencies": { "debug": "^4.4.0", "encodeurl": "^2.0.0", "escape-html": "^1.0.3", "on-finished": "^2.4.1", "parseurl": "^1.3.3", "statuses": "^2.0.1" } }, "sha512-S8KoZgRZN+a5rNwqTxlZZePjT/4cnm0ROV70LedRHZ0p8u9fRID0hJUZQpkKLzro8LfmC8sx23bY6tVNxv8pQA=="], - "find-up": ["find-up@5.0.0", "", { "dependencies": { "locate-path": "^6.0.0", "path-exists": "^4.0.0" } }, "sha512-78/PXT1wlLLDgTzDs7sjq9hzz0vXD+zn+7wypEe4fXQxCmdmqfGsEPQxmiCSQI3ajFV91bVSsvNtrJRiW6nGng=="], "flat-cache": ["flat-cache@4.0.1", "", { "dependencies": { "flatted": "^3.2.9", "keyv": "^4.5.4" } }, "sha512-f7ccFPK3SXFHpx15UIGyRJ/FJQctuKZ0zVuN3frBo4HnK3cay9VEW0R6yPYFHC0AgqhukPzKjq22t5DmAyqGyw=="], "flatted": ["flatted@3.3.3", "", {}, "sha512-GX+ysw4PBCz0PzosHDepZGANEuFCMLrnRTiEy9McGjmkCQYwRq4A/X786G/fjM/+OjsWSU1ZrY5qyARZmO/uwg=="], - "forwarded": ["forwarded@0.2.0", "", {}, "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow=="], - - "fresh": ["fresh@2.0.0", "", {}, "sha512-Rx/WycZ60HOaqLKAi6cHRKKI7zxWbJ31MhntmtwMoaTeF7XFH9hhBp8vITaMidfljRQ6eYWCKkaTK+ykVJHP2A=="], - "fsevents": ["fsevents@2.3.3", "", { "os": "darwin" }, "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw=="], - "function-bind": ["function-bind@1.1.2", "", {}, "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA=="], - "gensync": ["gensync@1.0.0-beta.2", "", {}, "sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg=="], "get-caller-file": ["get-caller-file@2.0.5", "", {}, "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg=="], - "get-intrinsic": ["get-intrinsic@1.3.0", "", { "dependencies": { "call-bind-apply-helpers": "^1.0.2", "es-define-property": "^1.0.1", "es-errors": "^1.3.0", "es-object-atoms": "^1.1.1", "function-bind": "^1.1.2", "get-proto": "^1.0.1", "gopd": "^1.2.0", "has-symbols": "^1.1.0", "hasown": "^2.0.2", "math-intrinsics": "^1.1.0" } }, "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ=="], - "get-nonce": ["get-nonce@1.0.1", "", {}, "sha512-FJhYRoDaiatfEkUK8HKlicmu/3SGFD51q3itKDGoSTysQJBnfOcxU5GxnhE1E6soB76MbT0MBtnKJuXyAx+96Q=="], - "get-proto": ["get-proto@1.0.1", "", { "dependencies": { "dunder-proto": "^1.0.1", "es-object-atoms": "^1.0.0" } }, "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g=="], - "glob-parent": ["glob-parent@6.0.2", "", { "dependencies": { "is-glob": "^4.0.3" } }, "sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A=="], "globals": ["globals@16.5.0", "", {}, "sha512-c/c15i26VrJ4IRt5Z89DnIzCGDn9EcebibhAOjw5ibqEHsE1wLUgkPn9RDmNcUKyU87GeaL633nyJ+pplFR2ZQ=="], - "gopd": ["gopd@1.2.0", "", {}, "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg=="], - "graceful-fs": ["graceful-fs@4.2.11", "", {}, "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ=="], "graphemer": ["graphemer@1.4.0", "", {}, "sha512-EtKwoO6kxCL9WO5xipiHTZlSzBm7WLT627TqC/uVRd0HKmq8NXyebnNYxDoBi7wt8eTWrUrKXCOVaFq9x1kgag=="], @@ -806,10 +750,6 @@ "has-flag": ["has-flag@4.0.0", "", {}, "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="], - "has-symbols": ["has-symbols@1.1.0", "", {}, "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ=="], - - "hasown": ["hasown@2.0.2", "", { "dependencies": { "function-bind": "^1.1.2" } }, "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ=="], - "headers-polyfill": ["headers-polyfill@4.0.3", "", {}, "sha512-IScLbePpkvO846sIwOtOTDjutRMWdXdJmXdMvk6gCBHxFO8d+QKOQedyZSxFTTFYRSmlgSTDtXqqq4pcenBXLQ=="], "hermes-estree": ["hermes-estree@0.25.1", "", {}, "sha512-0wUoCcLp+5Ev5pDW2OriHC2MJCbwLwuRx+gAqMTOkGKJJiBCLjtrvy4PWUGn6MIVefecRpzoOZ/UV6iGdOr+Cw=="], @@ -820,8 +760,6 @@ "html-escaper": ["html-escaper@2.0.2", "", {}, "sha512-H2iMtd0I4Mt5eYiapRdIDjp+XzelXQ0tFE4JS7YFwFevXXMmOp9myNrUvCg0D6ws8iqkRPBfKHgbwig1SmlLfg=="], - "http-errors": ["http-errors@2.0.1", "", { "dependencies": { "depd": "~2.0.0", "inherits": "~2.0.4", "setprototypeof": "~1.2.0", "statuses": "~2.0.2", "toidentifier": "~1.0.1" } }, "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ=="], - "http-proxy-agent": ["http-proxy-agent@7.0.2", "", { "dependencies": { "agent-base": "^7.1.0", "debug": "^4.3.4" } }, "sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig=="], "https-proxy-agent": ["https-proxy-agent@7.0.6", "", { "dependencies": { "agent-base": "^7.1.2", "debug": "4" } }, "sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw=="], @@ -836,14 +774,8 @@ "indent-string": ["indent-string@4.0.0", "", {}, "sha512-EdDDZu4A2OyIK7Lr/2zG+w5jmbuk1DVBnEwREQvBzspBJkCEbRa8GxU1lghYcaGJCnRWibjDXlq779X1/y5xwg=="], - "inherits": ["inherits@2.0.4", "", {}, "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ=="], - "internmap": ["internmap@2.0.3", "", {}, "sha512-5Hh7Y1wQbvY5ooGgPbDaL5iYLAPzMTUrjMulskHLH6wnv/A+1q5rgEaiuqEjB+oxGXIVZs1FF+R/KPN3ZSQYYg=="], - "ip-address": ["ip-address@10.0.1", "", {}, "sha512-NWv9YLW4PoW2B7xtzaS3NCot75m6nK7Icdv0o3lfMceJVRfSoQwqD4wEH5rLwoKJwUiZ/rfpiVBhnaF0FK4HoA=="], - - "ipaddr.js": ["ipaddr.js@1.9.1", "", {}, "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g=="], - "is-extglob": ["is-extglob@2.1.1", "", {}, "sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ=="], "is-fullwidth-code-point": ["is-fullwidth-code-point@3.0.0", "", {}, "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg=="], @@ -854,8 +786,6 @@ "is-potential-custom-element-name": ["is-potential-custom-element-name@1.0.1", "", {}, "sha512-bCYeRA2rVibKZd+s2625gGnGF/t7DSqDs4dP7CrLA1m7jKWz6pps0LpYLJN8Q64HtmPKJ1hrN3nzPNKFEKOUiQ=="], - "is-promise": ["is-promise@4.0.0", "", {}, "sha512-hvpoI6korhJMnej285dSg6nu1+e6uxs7zG3BYAm5byqDsgJNWwxzM6z6iZiAgQR4TJ30JmBTOwqZUw3WlyH3AQ=="], - "isexe": ["isexe@2.0.0", "", {}, "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw=="], "istanbul-lib-coverage": ["istanbul-lib-coverage@3.2.2", "", {}, "sha512-O8dpsF+r0WV/8MNRKfnmrtCWhuKjxrq2w+jpzBL5UZKTi2LeVWnWOmWRxFlesJONmc+wLAGvKQZEOanko0LFTg=="], @@ -932,18 +862,8 @@ "make-dir": ["make-dir@4.0.0", "", { "dependencies": { "semver": "^7.5.3" } }, "sha512-hXdUTZYIVOt1Ex//jAQi+wTZZpUpwBj/0QsOzqegb3rGMMeJiSEu5xLHnYfBrRV4RH2+OCSOO95Is/7x1WJ4bw=="], - "math-intrinsics": ["math-intrinsics@1.1.0", "", {}, "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g=="], - "mdn-data": ["mdn-data@2.12.2", "", {}, "sha512-IEn+pegP1aManZuckezWCO+XZQDplx1366JoVhTpMpBB1sPey/SbveZQUosKiKiGYjg1wH4pMlNgXbCiYgihQA=="], - "media-typer": ["media-typer@1.1.0", "", {}, "sha512-aisnrDP4GNe06UcKFnV5bfMNPBUw4jsLGaWwWfnH3v02GnBuXX2MCVn5RbrWo0j3pczUilYblq7fQ7Nw2t5XKw=="], - - "merge-descriptors": ["merge-descriptors@2.0.0", "", {}, "sha512-Snk314V5ayFLhp3fkUREub6WtjBfPdCPY1Ln8/8munuLuiYhsABgBVWsozAG+MWMbVEvcdcpbi9R7ww22l9Q3g=="], - - "mime-db": ["mime-db@1.54.0", "", {}, "sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ=="], - - "mime-types": ["mime-types@3.0.2", "", { "dependencies": { "mime-db": "^1.54.0" } }, "sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A=="], - "min-indent": ["min-indent@1.0.1", "", {}, "sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg=="], "minimatch": ["minimatch@3.1.2", "", { "dependencies": { "brace-expansion": "^1.1.7" } }, "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw=="], @@ -958,20 +878,12 @@ "natural-compare": ["natural-compare@1.4.0", "", {}, "sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw=="], - "negotiator": ["negotiator@1.0.0", "", {}, "sha512-8Ofs/AUQh8MaEcrlq5xOX0CQ9ypTF5dl78mjlMNfOK08fzpgTHQRQPBxcPlEtIw0yRpws+Zo/3r+5WRby7u3Gg=="], - "node-releases": ["node-releases@2.0.27", "", {}, "sha512-nmh3lCkYZ3grZvqcCH+fjmQ7X+H0OeZgP40OierEaAptX4XofMh5kwNbWh7lBduUzCcV/8kZ+NDLCwm2iorIlA=="], "object-assign": ["object-assign@4.1.1", "", {}, "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg=="], - "object-inspect": ["object-inspect@1.13.4", "", {}, "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew=="], - "obug": ["obug@2.1.1", "", {}, "sha512-uTqF9MuPraAQ+IsnPf366RG4cP9RtUi7MLO1N3KEc+wb0a6yKpeL0lmk2IB1jY5KHPAlTc6T/JRdC/YqxHNwkQ=="], - "on-finished": ["on-finished@2.4.1", "", { "dependencies": { "ee-first": "1.1.1" } }, "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg=="], - - "once": ["once@1.4.0", "", { "dependencies": { "wrappy": "1" } }, "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w=="], - "optionator": ["optionator@0.9.4", "", { "dependencies": { "deep-is": "^0.1.3", "fast-levenshtein": "^2.0.6", "levn": "^0.4.1", "prelude-ls": "^1.2.1", "type-check": "^0.4.0", "word-wrap": "^1.2.5" } }, "sha512-6IpQ7mKUxRcZNLIObR0hz7lxsapSSIYNZJwXPGeF0mTVqGKFIXj1DQcMoT22S3ROcLyY/rz0PWaWZ9ayWmad9g=="], "outvariant": ["outvariant@1.4.3", "", {}, "sha512-+Sl2UErvtsoajRDKCE5/dBz4DIvHXQQnAxtQTF04OJxY0+DyZXSo5P5Bb7XYWOh81syohlYL24hbDwxedPUJCA=="], @@ -984,8 +896,6 @@ "parse5": ["parse5@8.0.0", "", { "dependencies": { "entities": "^6.0.0" } }, "sha512-9m4m5GSgXjL4AjumKzq1Fgfp3Z8rsvjRNbnkVwfu2ImRqE5D0LnY2QfDen18FSY9C573YU5XxSapdHZTZ2WolA=="], - "parseurl": ["parseurl@1.3.3", "", {}, "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ=="], - "path-exists": ["path-exists@4.0.0", "", {}, "sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w=="], "path-key": ["path-key@3.1.1", "", {}, "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q=="], @@ -1010,16 +920,8 @@ "prop-types": ["prop-types@15.8.1", "", { "dependencies": { "loose-envify": "^1.4.0", "object-assign": "^4.1.1", "react-is": "^16.13.1" } }, "sha512-oj87CgZICdulUohogVAR7AjlC0327U4el4L6eAvOqCeudMDVU0NThNaV+b9Df4dXgSP1gXMTnPdhfe/2qDH5cg=="], - "proxy-addr": ["proxy-addr@2.0.7", "", { "dependencies": { "forwarded": "0.2.0", "ipaddr.js": "1.9.1" } }, "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg=="], - "punycode": ["punycode@2.3.1", "", {}, "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg=="], - "qs": ["qs@6.14.1", "", { "dependencies": { "side-channel": "^1.1.0" } }, "sha512-4EK3+xJl8Ts67nLYNwqw/dsFVnCf+qR7RgXSK9jEEm9unao3njwMDdmsdvoKBKHzxd7tCYz5e5M+SnMjdtXGQQ=="], - - "range-parser": ["range-parser@1.2.1", "", {}, "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg=="], - - "raw-body": ["raw-body@3.0.2", "", { "dependencies": { "bytes": "~3.1.2", "http-errors": "~2.0.1", "iconv-lite": "~0.7.0", "unpipe": "~1.0.0" } }, "sha512-K5zQjDllxWkf7Z5xJdV0/B0WTNqx6vxG70zJE4N0kBs4LovmEYWJzQGxC9bS9RAKu3bgM40lrd5zoLJ12MQ5BA=="], - "react": ["react@19.2.1", "", {}, "sha512-DGrYcCWK7tvYMnWh79yrPHt+vdx9tY+1gPZa7nJQtO/p8bLTDaHp4dzwEhQB7pZ4Xe3ok4XKuEPrVuc+wlpkmw=="], "react-day-picker": ["react-day-picker@9.12.0", "", { "dependencies": { "@date-fns/tz": "^1.4.1", "date-fns": "^4.1.0", "date-fns-jalali": "^4.1.0-0" }, "peerDependencies": { "react": ">=16.8.0" } }, "sha512-t8OvG/Zrciso5CQJu5b1A7yzEmebvST+S3pOVQJWxwjjVngyG/CA2htN/D15dLI4uTEuLLkbZyS4YYt480FAtA=="], @@ -1072,8 +974,6 @@ "rollup": ["rollup@4.53.3", "", { "dependencies": { "@types/estree": "1.0.8" }, "optionalDependencies": { "@rollup/rollup-android-arm-eabi": "4.53.3", "@rollup/rollup-android-arm64": "4.53.3", "@rollup/rollup-darwin-arm64": "4.53.3", "@rollup/rollup-darwin-x64": "4.53.3", "@rollup/rollup-freebsd-arm64": "4.53.3", "@rollup/rollup-freebsd-x64": "4.53.3", "@rollup/rollup-linux-arm-gnueabihf": "4.53.3", "@rollup/rollup-linux-arm-musleabihf": "4.53.3", "@rollup/rollup-linux-arm64-gnu": "4.53.3", "@rollup/rollup-linux-arm64-musl": "4.53.3", "@rollup/rollup-linux-loong64-gnu": "4.53.3", "@rollup/rollup-linux-ppc64-gnu": "4.53.3", "@rollup/rollup-linux-riscv64-gnu": "4.53.3", "@rollup/rollup-linux-riscv64-musl": "4.53.3", "@rollup/rollup-linux-s390x-gnu": "4.53.3", "@rollup/rollup-linux-x64-gnu": "4.53.3", "@rollup/rollup-linux-x64-musl": "4.53.3", "@rollup/rollup-openharmony-arm64": "4.53.3", "@rollup/rollup-win32-arm64-msvc": "4.53.3", "@rollup/rollup-win32-ia32-msvc": "4.53.3", "@rollup/rollup-win32-x64-gnu": "4.53.3", "@rollup/rollup-win32-x64-msvc": "4.53.3", "fsevents": "~2.3.2" }, "bin": { "rollup": "dist/bin/rollup" } }, "sha512-w8GmOxZfBmKknvdXU1sdM9NHcoQejwF/4mNgj2JuEEdRaHwwF12K7e9eXn1nLZ07ad+du76mkVsyeb2rKGllsA=="], - "router": ["router@2.2.0", "", { "dependencies": { "debug": "^4.4.0", "depd": "^2.0.0", "is-promise": "^4.0.0", "parseurl": "^1.3.3", "path-to-regexp": "^8.0.0" } }, "sha512-nLTrUKm2UyiL7rlhapu/Zl45FwNgkZGaCpZbIHajDYgwlJCOzLSk+cIPAnsEqV955GjILJnKbdQC1nVPz+gAYQ=="], - "safer-buffer": ["safer-buffer@2.1.2", "", {}, "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg=="], "saxes": ["saxes@6.0.0", "", { "dependencies": { "xmlchars": "^2.2.0" } }, "sha512-xAg7SOnEhrm5zI3puOOKyy1OMcMlIJZYNJY7xLBwSze0UjhPLnWfj2GF2EpT0jmzaJKIWKHLsaSSajf35bcYnA=="], @@ -1082,26 +982,12 @@ "semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="], - "send": ["send@1.2.1", "", { "dependencies": { "debug": "^4.4.3", "encodeurl": "^2.0.0", "escape-html": "^1.0.3", "etag": "^1.8.1", "fresh": "^2.0.0", "http-errors": "^2.0.1", "mime-types": "^3.0.2", "ms": "^2.1.3", "on-finished": "^2.4.1", "range-parser": "^1.2.1", "statuses": "^2.0.2" } }, "sha512-1gnZf7DFcoIcajTjTwjwuDjzuz4PPcY2StKPlsGAQ1+YH20IRVrBaXSWmdjowTJ6u8Rc01PoYOGHXfP1mYcZNQ=="], - - "serve-static": ["serve-static@2.2.1", "", { "dependencies": { "encodeurl": "^2.0.0", "escape-html": "^1.0.3", "parseurl": "^1.3.3", "send": "^1.2.0" } }, "sha512-xRXBn0pPqQTVQiC8wyQrKs2MOlX24zQ0POGaj0kultvoOCstBQM5yvOhAVSUwOMjQtTvsPWoNCHfPGwaaQJhTw=="], - "set-cookie-parser": ["set-cookie-parser@2.7.2", "", {}, "sha512-oeM1lpU/UvhTxw+g3cIfxXHyJRc/uidd3yK1P242gzHds0udQBYzs3y8j4gCCW+ZJ7ad0yctld8RYO+bdurlvw=="], - "setprototypeof": ["setprototypeof@1.2.0", "", {}, "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw=="], - "shebang-command": ["shebang-command@2.0.0", "", { "dependencies": { "shebang-regex": "^3.0.0" } }, "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA=="], "shebang-regex": ["shebang-regex@3.0.0", "", {}, "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A=="], - "side-channel": ["side-channel@1.1.0", "", { "dependencies": { "es-errors": "^1.3.0", "object-inspect": "^1.13.3", "side-channel-list": "^1.0.0", "side-channel-map": "^1.0.1", "side-channel-weakmap": "^1.0.2" } }, "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw=="], - - "side-channel-list": ["side-channel-list@1.0.0", "", { "dependencies": { "es-errors": "^1.3.0", "object-inspect": "^1.13.3" } }, "sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA=="], - - "side-channel-map": ["side-channel-map@1.0.1", "", { "dependencies": { "call-bound": "^1.0.2", "es-errors": "^1.3.0", "get-intrinsic": "^1.2.5", "object-inspect": "^1.13.3" } }, "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA=="], - - "side-channel-weakmap": ["side-channel-weakmap@1.0.2", "", { "dependencies": { "call-bound": "^1.0.2", "es-errors": "^1.3.0", "get-intrinsic": "^1.2.5", "object-inspect": "^1.13.3", "side-channel-map": "^1.0.1" } }, "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A=="], - "siginfo": ["siginfo@2.0.0", "", {}, "sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g=="], "signal-exit": ["signal-exit@4.1.0", "", {}, "sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw=="], @@ -1152,8 +1038,6 @@ "tldts-core": ["tldts-core@7.0.19", "", {}, "sha512-lJX2dEWx0SGH4O6p+7FPwYmJ/bu1JbcGJ8RLaG9b7liIgZ85itUVEPbMtWRVrde/0fnDPEPHW10ZsKW3kVsE9A=="], - "toidentifier": ["toidentifier@1.0.1", "", {}, "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA=="], - "tough-cookie": ["tough-cookie@6.0.0", "", { "dependencies": { "tldts": "^7.0.5" } }, "sha512-kXuRi1mtaKMrsLUxz3sQYvVl37B0Ns6MzfrtV5DvJceE9bPyspOqk9xxv7XbZWcfLWbFmm997vl83qUWVJA64w=="], "tr46": ["tr46@6.0.0", "", { "dependencies": { "punycode": "^2.3.1" } }, "sha512-bLVMLPtstlZ4iMQHpFHTR7GAGj2jxi8Dg0s2h2MafAE4uSWF98FC/3MomU51iQAMf8/qDUbKWf5GxuvvVcXEhw=="], @@ -1166,16 +1050,12 @@ "type-fest": ["type-fest@5.3.1", "", { "dependencies": { "tagged-tag": "^1.0.0" } }, "sha512-VCn+LMHbd4t6sF3wfU/+HKT63C9OoyrSIf4b+vtWHpt2U7/4InZG467YDNMFMR70DdHjAdpPWmw2lzRdg0Xqqg=="], - "type-is": ["type-is@2.0.1", "", { "dependencies": { "content-type": "^1.0.5", "media-typer": "^1.1.0", "mime-types": "^3.0.0" } }, "sha512-OZs6gsjF4vMp32qrCbiVSkrFmXtG/AZhY3t0iAMrMBiAZyV9oALtXO8hsrHbMXF9x6L3grlFuwW2oAz7cav+Gw=="], - "typescript": ["typescript@5.9.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw=="], "typescript-eslint": ["typescript-eslint@8.48.1", "", { "dependencies": { "@typescript-eslint/eslint-plugin": "8.48.1", "@typescript-eslint/parser": "8.48.1", "@typescript-eslint/typescript-estree": "8.48.1", "@typescript-eslint/utils": "8.48.1" }, "peerDependencies": { "eslint": "^8.57.0 || ^9.0.0", "typescript": ">=4.8.4 <6.0.0" } }, "sha512-FbOKN1fqNoXp1hIl5KYpObVrp0mCn+CLgn479nmu2IsRMrx2vyv74MmsBLVlhg8qVwNFGbXSp8fh1zp8pEoC2A=="], "undici-types": ["undici-types@7.16.0", "", {}, "sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw=="], - "unpipe": ["unpipe@1.0.0", "", {}, "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ=="], - "until-async": ["until-async@3.0.2", "", {}, "sha512-IiSk4HlzAMqTUseHHe3VhIGyuFmN90zMTpD3Z3y8jeQbzLIq500MVM7Jq2vUAnTKAFPJrqwkzr6PoTcPhGcOiw=="], "update-browserslist-db": ["update-browserslist-db@1.2.2", "", { "dependencies": { "escalade": "^3.2.0", "picocolors": "^1.1.1" }, "peerDependencies": { "browserslist": ">= 4.21.0" }, "bin": { "update-browserslist-db": "cli.js" } }, "sha512-E85pfNzMQ9jpKkA7+TJAi4TJN+tBCuWh5rUcS/sv6cFi+1q9LYDwDI5dpUL0u/73EElyQ8d3TEaeW4sPedBqYA=="], @@ -1188,8 +1068,6 @@ "use-sidecar": ["use-sidecar@1.1.3", "", { "dependencies": { "detect-node-es": "^1.1.0", "tslib": "^2.0.0" }, "peerDependencies": { "@types/react": "*", "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc" }, "optionalPeers": ["@types/react"] }, "sha512-Fedw0aZvkhynoPYlA5WXrMCAMm+nSWdZt6lzJQ7Ok8S6Q+VsHmHpRWndVRJ8Be0ZbkfPc5LRYH+5XrzXcEeLRQ=="], - "vary": ["vary@1.1.2", "", {}, "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg=="], - "victory-vendor": ["victory-vendor@36.9.2", "", { "dependencies": { "@types/d3-array": "^3.0.3", "@types/d3-ease": "^3.0.0", "@types/d3-interpolate": "^3.0.1", "@types/d3-scale": "^4.0.2", "@types/d3-shape": "^3.1.0", "@types/d3-time": "^3.0.0", "@types/d3-timer": "^3.0.0", "d3-array": "^3.1.6", "d3-ease": "^3.0.1", "d3-interpolate": "^3.0.1", "d3-scale": "^4.0.2", "d3-shape": "^3.1.0", "d3-time": "^3.0.0", "d3-timer": "^3.0.1" } }, "sha512-PnpQQMuxlwYdocC8fIJqVXvkeViHYzotI+NJrCuav0ZYFoq912ZHBk3mCeuj+5/VpodOjPe1z0Fk2ihgzlXqjQ=="], "vite": ["vite@7.2.6", "", { "dependencies": { "esbuild": "^0.25.0", "fdir": "^6.5.0", "picomatch": "^4.0.3", "postcss": "^8.5.6", "rollup": "^4.43.0", "tinyglobby": "^0.2.15" }, "optionalDependencies": { "fsevents": "~2.3.3" }, "peerDependencies": { "@types/node": "^20.19.0 || >=22.12.0", "jiti": ">=1.21.0", "less": "^4.0.0", "lightningcss": "^1.21.0", "sass": "^1.70.0", "sass-embedded": "^1.70.0", "stylus": ">=0.54.8", "sugarss": "^5.0.0", "terser": "^5.16.0", "tsx": "^4.8.1", "yaml": "^2.4.2" }, "optionalPeers": ["@types/node", "jiti", "less", "lightningcss", "sass", "sass-embedded", "stylus", "sugarss", "terser", "tsx", "yaml"], "bin": { "vite": "bin/vite.js" } }, "sha512-tI2l/nFHC5rLh7+5+o7QjKjSR04ivXDF4jcgV0f/bTQ+OJiITy5S6gaynVsEM+7RqzufMnVbIon6Sr5x1SDYaQ=="], @@ -1214,8 +1092,6 @@ "wrap-ansi": ["wrap-ansi@6.2.0", "", { "dependencies": { "ansi-styles": "^4.0.0", "string-width": "^4.1.0", "strip-ansi": "^6.0.0" } }, "sha512-r6lPcBGxZXlIcymEu7InxDMhdW0KDxpLgoFLcguasxCaJ/SOIZwINatK9KY/tf+ZrlywOKU0UDj3ATXUBfxJXA=="], - "wrappy": ["wrappy@1.0.2", "", {}, "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ=="], - "ws": ["ws@8.18.3", "", { "peerDependencies": { "bufferutil": "^4.0.1", "utf-8-validate": ">=5.0.2" }, "optionalPeers": ["bufferutil", "utf-8-validate"] }, "sha512-PEIGCY5tSlUt50cqyMXfCzX+oOPqN0vuGqWzbcJ2xvnkzkq46oOpz7dQaTDBdfICb4N14+GARUDw2XV2N4tvzg=="], "xml-name-validator": ["xml-name-validator@5.0.0", "", {}, "sha512-EvGK8EJ3DhaHfbRlETOWAS5pO9MZITeauHKJyb8wyajUfQUenkIg2MvLDTZ4T/TgIcm3HU0TFBgWWboAZ30UHg=="], @@ -1294,8 +1170,6 @@ "@typescript-eslint/typescript-estree/semver": ["semver@7.7.3", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q=="], - "body-parser/iconv-lite": ["iconv-lite@0.7.2", "", { "dependencies": { "safer-buffer": ">= 2.1.2 < 3.0.0" } }, "sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw=="], - "cliui/wrap-ansi": ["wrap-ansi@7.0.0", "", { "dependencies": { "ansi-styles": "^4.0.0", "string-width": "^4.1.0", "strip-ansi": "^6.0.0" } }, "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q=="], "d3-sankey/d3-array": ["d3-array@2.12.1", "", { "dependencies": { "internmap": "^1.0.0" } }, "sha512-B0ErZK/66mHtEsR1TkPEEkwdy+WDesimkM5gpZr5Dsg54BiTA5RXtYW5qTLIAcekaS9xfZrzBLF/OAkB3Qn1YQ=="], @@ -1308,8 +1182,6 @@ "d3-time-format/d3-time": ["d3-time@2.1.1", "", { "dependencies": { "d3-array": "2" } }, "sha512-/eIQe/eR4kCQwq7yxi7z4c6qEXf2IYGcjoWB5OOQy4Tq9Uv39/947qlDcN2TLkiTzQWzvnsuYPB9TrWaNfipKQ=="], - "express/cookie": ["cookie@0.7.2", "", {}, "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w=="], - "loose-envify/js-tokens": ["js-tokens@4.0.0", "", {}, "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="], "make-dir/semver": ["semver@7.7.3", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q=="], @@ -1320,10 +1192,6 @@ "prop-types/react-is": ["react-is@16.13.1", "", {}, "sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ=="], - "raw-body/iconv-lite": ["iconv-lite@0.7.2", "", { "dependencies": { "safer-buffer": ">= 2.1.2 < 3.0.0" } }, "sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw=="], - - "router/path-to-regexp": ["path-to-regexp@8.3.0", "", {}, "sha512-7jdwVIRtsP8MYpdXSwOS0YdD0Du+qOoF/AEPIt88PcCFrZCzx41oxku1jD88hZBwbNUIEfpqvuhjFaMAqMTWnA=="], - "victory-vendor/@types/d3-shape": ["@types/d3-shape@3.1.7", "", { "dependencies": { "@types/d3-path": "*" } }, "sha512-VLvUQ33C+3J+8p+Daf+nYSOsjB4GXp19/S/aGo60m9h1v6XaxjiT82lKVWJCfzhtuZ3yD7i/TPeC/fuKLLOSmg=="], "@nivo/core/@types/d3-shape/@types/d3-path": ["@types/d3-path@3.1.1", "", {}, "sha512-VMZBYyQvbGmWyWVea0EHs/BwLgxc+MKi1zLDCONksozI4YJMcTt8ZEuIR4Sb1MMTE8MMW49v0IwI5+b7RmfWlg=="], diff --git a/ui/package.json b/ui/package.json index cabf79f6..23c50f38 100644 --- a/ui/package.json +++ b/ui/package.json @@ -42,7 +42,6 @@ "class-variance-authority": "^0.7.1", "clsx": "^2.1.1", "date-fns": "^4.1.0", - "express-rate-limit": "^8.2.1", "lucide-react": "^0.556.0", "prism-react-renderer": "^2.4.1", "react": "^19.2.0", @@ -65,7 +64,6 @@ "@testing-library/jest-dom": "^6.9.1", "@testing-library/react": "^16.3.1", "@testing-library/user-event": "^14.6.1", - "@types/express-rate-limit": "^6.0.2", "@types/node": "^24.10.1", "@types/react": "^19.2.5", "@types/react-dom": "^19.2.3", diff --git a/ui/src/pages/login.tsx b/ui/src/pages/login.tsx index dca471ab..0550e9a3 100644 --- a/ui/src/pages/login.tsx +++ b/ui/src/pages/login.tsx @@ -3,7 +3,7 @@ * Uses shadcn/ui Card and Input components. */ -import { useState } from 'react'; +import { useState, useEffect } from 'react'; import { useNavigate, useLocation } from 'react-router-dom'; import { useAuth } from '@/contexts/auth-context'; import { Button } from '@/components/ui/button'; @@ -26,9 +26,15 @@ export function LoginPage() { // Get redirect destination (default to home) const from = (location.state as { from?: { pathname: string } })?.from?.pathname || '/'; - // If already authenticated or auth not required, redirect + // Redirect if already authenticated or auth not required (via useEffect to avoid render side effects) + useEffect(() => { + if (isAuthenticated || !authRequired) { + navigate(from, { replace: true }); + } + }, [isAuthenticated, authRequired, navigate, from]); + + // Show nothing while redirecting if (isAuthenticated || !authRequired) { - navigate(from, { replace: true }); return null; } From 39c1ee2ca0f01a1254812a4a8fe8f6c2ed052fe0 Mon Sep 17 00:00:00 2001 From: kaitranntt Date: Tue, 13 Jan 2026 15:13:10 -0500 Subject: [PATCH 03/15] feat(config): add ccs config auth CLI subcommand Interactive CLI for managing dashboard authentication: - ccs config auth setup: Interactive wizard with bcrypt password hashing - ccs config auth show: Display current auth status and ENV overrides - ccs config auth disable: Disable auth with confirmation Follows modular facade pattern from auth-commands.ts. Uses InteractivePrompt for masked password input. Includes local documentation at docs/dashboard-auth-cli.md. Related: #319 --- docs/dashboard-auth-cli.md | 166 ++++++++++++++++++++ src/commands/config-auth/disable-command.ts | 75 +++++++++ src/commands/config-auth/index.ts | 94 +++++++++++ src/commands/config-auth/setup-command.ts | 133 ++++++++++++++++ src/commands/config-auth/show-command.ts | 89 +++++++++++ src/commands/config-auth/types.ts | 27 ++++ src/commands/config-command.ts | 16 +- src/commands/help-command.ts | 2 + 8 files changed, 601 insertions(+), 1 deletion(-) create mode 100644 docs/dashboard-auth-cli.md create mode 100644 src/commands/config-auth/disable-command.ts create mode 100644 src/commands/config-auth/index.ts create mode 100644 src/commands/config-auth/setup-command.ts create mode 100644 src/commands/config-auth/show-command.ts create mode 100644 src/commands/config-auth/types.ts diff --git a/docs/dashboard-auth-cli.md b/docs/dashboard-auth-cli.md new file mode 100644 index 00000000..0ea982d9 --- /dev/null +++ b/docs/dashboard-auth-cli.md @@ -0,0 +1,166 @@ +# Dashboard Authentication CLI + +CLI commands for managing CCS dashboard authentication. + +## Overview + +The CCS dashboard (`ccs config`) can be protected with username/password authentication. This is useful when running the dashboard on a network-accessible machine. + +Authentication is **disabled by default** for backward compatibility. Use the CLI to configure and enable it. + +## Commands + +### `ccs config auth setup` + +Interactive wizard to configure dashboard login. + +```bash +$ ccs config auth setup + +╭─────────────────────────────────╮ +│ Dashboard Auth Setup │ +╰─────────────────────────────────╯ + +[i] Configure username and password for dashboard access. + Password will be hashed with bcrypt before storage. + +Username +Enter username: admin + +Password + Minimum 8 characters +Enter password: ******** +Confirm password: ******** + +[i] Hashing password... + +[OK] Dashboard authentication configured + +[i] Settings saved to ~/.ccs/config.yaml +[i] Username: admin +[i] Session timeout: 24 hours + + Start dashboard: ccs config + Show status: ccs config auth show + Disable auth: ccs config auth disable +``` + +### `ccs config auth show` + +Display current authentication status. + +```bash +$ ccs config auth show + +╭─────────────────────────────────╮ +│ Dashboard Auth Status │ +╰─────────────────────────────────╯ + +Configuration +[OK] Authentication: Enabled +[OK] Username: admin +[i] Session timeout: 24 hours + +Commands + ccs config auth setup Configure authentication + ccs config auth disable Disable authentication + ccs config Open dashboard +``` + +### `ccs config auth disable` + +Disable dashboard authentication with confirmation. + +```bash +$ ccs config auth disable + +╭─────────────────────────────────╮ +│ Disable Dashboard Auth │ +╰─────────────────────────────────╯ + +[!] This will disable login protection for the dashboard. +[i] Anyone with network access will be able to view the dashboard. + +Disable authentication? [y/N]: y + +[OK] Dashboard authentication disabled + +[i] Credentials preserved - re-enable with: ccs config auth setup +``` + +### `ccs config auth --help` + +Display usage information. + +## Environment Variables + +Environment variables override `config.yaml` values: + +| Variable | Description | +|----------|-------------| +| `CCS_DASHBOARD_AUTH_ENABLED` | Enable/disable auth (`true`/`false`) | +| `CCS_DASHBOARD_USERNAME` | Username | +| `CCS_DASHBOARD_PASSWORD_HASH` | Bcrypt password hash | + +### Generating a Password Hash + +Use bcrypt to generate a hash: + +```bash +# Using Node.js +node -e "console.log(require('bcrypt').hashSync('your-password', 10))" + +# Using npx +npx bcrypt-cli hash "your-password" +``` + +## Configuration + +Settings are stored in `~/.ccs/config.yaml`: + +```yaml +# Dashboard Auth: Optional login protection for CCS dashboard +# Generate password hash: npx bcrypt-cli hash "your-password" +# ENV override: CCS_DASHBOARD_AUTH_ENABLED, CCS_DASHBOARD_USERNAME, CCS_DASHBOARD_PASSWORD_HASH +dashboard_auth: + enabled: true + username: "admin" + password_hash: "$2b$10$..." + session_timeout_hours: 24 +``` + +## Security Notes + +1. **Bcrypt hashing**: Passwords are hashed with bcrypt (10 rounds) before storage +2. **Session cookies**: Sessions use HTTP-only cookies (not accessible via JavaScript) +3. **Rate limiting**: Login attempts are rate-limited (5 per 15 minutes) +4. **File permissions**: Config file is created with 0o600 permissions + +## Troubleshooting + +### "Authentication not configured" + +Run `ccs config auth setup` to configure credentials. + +### Forgot password + +Run `ccs config auth setup` again to set a new password. + +### ENV override not working + +Ensure the variable is exported: + +```bash +export CCS_DASHBOARD_AUTH_ENABLED=true +export CCS_DASHBOARD_USERNAME=admin +export CCS_DASHBOARD_PASSWORD_HASH='$2b$10$...' +``` + +### Session expired immediately + +Check `session_timeout_hours` in config. Default is 24 hours. + +## See Also + +- [Dashboard Auth Feature](https://ccs.kaitran.ca/features/dashboard-auth) - Full documentation +- [Config Schema](https://ccs.kaitran.ca/reference/config-schema) - All config options diff --git a/src/commands/config-auth/disable-command.ts b/src/commands/config-auth/disable-command.ts new file mode 100644 index 00000000..fd66cb46 --- /dev/null +++ b/src/commands/config-auth/disable-command.ts @@ -0,0 +1,75 @@ +/** + * Config Auth Disable Command + * + * Disable dashboard authentication with confirmation. + */ + +import { InteractivePrompt } from '../../utils/prompt'; +import { + getDashboardAuthConfig, + loadOrCreateUnifiedConfig, + saveUnifiedConfig, +} from '../../config/unified-config-loader'; +import { initUI, header, ok, info, warn, dim } from '../../utils/ui'; + +/** + * Handle disable command - disable auth with confirmation + */ +export async function handleDisable(): Promise { + await initUI(); + + console.log(''); + console.log(header('Disable Dashboard Auth')); + console.log(''); + + const config = getDashboardAuthConfig(); + + // Check if already disabled + if (!config.enabled) { + console.log(info('Dashboard authentication is already disabled.')); + console.log(''); + console.log(dim(' To enable: ccs config auth setup')); + console.log(''); + return; + } + + // Check for ENV override + if (process.env.CCS_DASHBOARD_AUTH_ENABLED) { + console.log(warn('CCS_DASHBOARD_AUTH_ENABLED environment variable is set.')); + console.log(info('Disabling in config.yaml, but ENV var will still override.')); + console.log(''); + } + + // Confirm before disabling + console.log(warn('This will disable login protection for the dashboard.')); + console.log(info('Anyone with network access will be able to view the dashboard.')); + console.log(''); + + const confirmed = await InteractivePrompt.confirm('Disable authentication?', { + default: false, // Safe default + }); + + if (!confirmed) { + console.log(''); + console.log(info('Cancelled. Authentication remains enabled.')); + console.log(''); + return; + } + + // Disable auth + const fullConfig = loadOrCreateUnifiedConfig(); + fullConfig.dashboard_auth = { + enabled: false, + username: fullConfig.dashboard_auth?.username ?? '', + password_hash: fullConfig.dashboard_auth?.password_hash ?? '', + session_timeout_hours: fullConfig.dashboard_auth?.session_timeout_hours ?? 24, + }; + + saveUnifiedConfig(fullConfig); + + console.log(''); + console.log(ok('Dashboard authentication disabled')); + console.log(''); + console.log(info('Credentials preserved - re-enable with: ccs config auth setup')); + console.log(''); +} diff --git a/src/commands/config-auth/index.ts b/src/commands/config-auth/index.ts new file mode 100644 index 00000000..567ffed6 --- /dev/null +++ b/src/commands/config-auth/index.ts @@ -0,0 +1,94 @@ +/** + * Config Auth Commands (Facade) + * + * CLI interface for managing dashboard authentication. + * Commands: setup, show, disable + * + * Implementation follows auth-commands.ts pattern. + */ + +import { initUI, header, subheader, color, dim, fail } from '../../utils/ui'; + +// Import command handlers +import { handleSetup } from './setup-command'; +import { handleShow } from './show-command'; +import { handleDisable } from './disable-command'; + +/** + * Show help for config auth commands + */ +async function showHelp(): Promise { + await initUI(); + + console.log(''); + console.log(header('Dashboard Auth Management')); + console.log(''); + console.log(subheader('Usage')); + console.log(` ${color('ccs config auth', 'command')} `); + console.log(''); + console.log(subheader('Commands')); + console.log(` ${color('setup', 'command')} Configure username and password`); + console.log(` ${color('show', 'command')} Display current auth status`); + console.log(` ${color('disable', 'command')} Disable authentication`); + console.log(''); + console.log(subheader('Examples')); + console.log(` ${dim('# Interactive setup wizard')}`); + console.log(` ${color('ccs config auth setup', 'command')}`); + console.log(''); + console.log(` ${dim('# Check current status')}`); + console.log(` ${color('ccs config auth show', 'command')}`); + console.log(''); + console.log(` ${dim('# Disable authentication')}`); + console.log(` ${color('ccs config auth disable', 'command')}`); + console.log(''); + console.log(subheader('Environment Variables')); + console.log(' These override config.yaml values:'); + console.log( + ` ${color('CCS_DASHBOARD_AUTH_ENABLED', 'command')} Enable/disable (true/false)` + ); + console.log(` ${color('CCS_DASHBOARD_USERNAME', 'command')} Username`); + console.log(` ${color('CCS_DASHBOARD_PASSWORD_HASH', 'command')} Bcrypt hash`); + console.log(''); + console.log(subheader('Documentation')); + console.log(' https://ccs.kaitran.ca/features/dashboard-auth'); + console.log(''); +} + +/** + * Route config auth command to appropriate handler + */ +export async function handleConfigAuthCommand(args: string[]): Promise { + // Default to help if no subcommand + if (args.length === 0 || args[0] === '--help' || args[0] === '-h' || args[0] === 'help') { + await showHelp(); + return; + } + + const command = args[0]; + + switch (command) { + case 'setup': + await handleSetup(); + break; + + case 'show': + case 'status': + await handleShow(); + break; + + case 'disable': + await handleDisable(); + break; + + default: + await initUI(); + console.log(fail(`Unknown command: ${command}`)); + console.log(''); + console.log('Run for help:'); + console.log(` ${color('ccs config auth --help', 'command')}`); + process.exit(1); + } +} + +// Re-export types +export type { ConfigAuthContext, AuthSetupResult, AuthStatusInfo } from './types'; diff --git a/src/commands/config-auth/setup-command.ts b/src/commands/config-auth/setup-command.ts new file mode 100644 index 00000000..de40c32d --- /dev/null +++ b/src/commands/config-auth/setup-command.ts @@ -0,0 +1,133 @@ +/** + * Config Auth Setup Command + * + * Interactive wizard for configuring dashboard authentication. + * Prompts for username and password, hashes password with bcrypt, + * and saves to config.yaml. + */ + +import bcrypt from 'bcrypt'; +import { InteractivePrompt } from '../../utils/prompt'; +import { loadOrCreateUnifiedConfig, saveUnifiedConfig } from '../../config/unified-config-loader'; +import { initUI, header, subheader, ok, fail, info, warn, dim } from '../../utils/ui'; +import type { AuthSetupResult } from './types'; + +const BCRYPT_ROUNDS = 10; +const MIN_PASSWORD_LENGTH = 8; + +/** + * Validate username (non-empty, alphanumeric with underscores) + */ +function validateUsername(value: string): string | null { + if (!value || value.trim().length === 0) { + return 'Username cannot be empty'; + } + if (!/^[a-zA-Z][a-zA-Z0-9_-]*$/.test(value)) { + return 'Username must start with letter, contain only letters/numbers/underscores/hyphens'; + } + if (value.length < 3) { + return 'Username must be at least 3 characters'; + } + return null; +} + +/** + * Handle setup command - interactive wizard + */ +export async function handleSetup(): Promise { + await initUI(); + + console.log(''); + console.log(header('Dashboard Auth Setup')); + console.log(''); + console.log(info('Configure username and password for dashboard access.')); + console.log(dim(' Password will be hashed with bcrypt before storage.')); + console.log(''); + + // Check for ENV overrides + if ( + process.env.CCS_DASHBOARD_AUTH_ENABLED || + process.env.CCS_DASHBOARD_USERNAME || + process.env.CCS_DASHBOARD_PASSWORD_HASH + ) { + console.log(warn('Environment variables detected - they will override config values:')); + if (process.env.CCS_DASHBOARD_AUTH_ENABLED) { + console.log(` CCS_DASHBOARD_AUTH_ENABLED=${process.env.CCS_DASHBOARD_AUTH_ENABLED}`); + } + if (process.env.CCS_DASHBOARD_USERNAME) { + console.log(` CCS_DASHBOARD_USERNAME=${process.env.CCS_DASHBOARD_USERNAME}`); + } + if (process.env.CCS_DASHBOARD_PASSWORD_HASH) { + console.log(' CCS_DASHBOARD_PASSWORD_HASH=***'); + } + console.log(''); + } + + try { + // Prompt for username + console.log(subheader('Username')); + const username = await InteractivePrompt.input('Enter username', { + validate: validateUsername, + }); + + console.log(''); + + // Prompt for password + console.log(subheader('Password')); + console.log(dim(` Minimum ${MIN_PASSWORD_LENGTH} characters`)); + const password = await InteractivePrompt.password('Enter password'); + + // Validate password length + if (password.length < MIN_PASSWORD_LENGTH) { + console.log(''); + console.log(fail(`Password must be at least ${MIN_PASSWORD_LENGTH} characters`)); + return { success: false, error: 'Password too short' }; + } + + // Confirm password + const confirmPassword = await InteractivePrompt.password('Confirm password'); + + if (password !== confirmPassword) { + console.log(''); + console.log(fail('Passwords do not match')); + return { success: false, error: 'Password mismatch' }; + } + + console.log(''); + console.log(info('Hashing password...')); + + // Hash password + const passwordHash = await bcrypt.hash(password, BCRYPT_ROUNDS); + + // Load existing config and update + const config = loadOrCreateUnifiedConfig(); + config.dashboard_auth = { + enabled: true, + username, + password_hash: passwordHash, + session_timeout_hours: config.dashboard_auth?.session_timeout_hours ?? 24, + }; + + // Save config + saveUnifiedConfig(config); + + console.log(''); + console.log(ok('Dashboard authentication configured')); + console.log(''); + console.log(info('Settings saved to ~/.ccs/config.yaml')); + console.log(info(`Username: ${username}`)); + console.log(info(`Session timeout: ${config.dashboard_auth.session_timeout_hours} hours`)); + console.log(''); + console.log(dim(' Start dashboard: ccs config')); + console.log(dim(' Show status: ccs config auth show')); + console.log(dim(' Disable auth: ccs config auth disable')); + console.log(''); + + return { success: true, username }; + } catch (error) { + const err = error as Error; + console.log(''); + console.log(fail(`Setup failed: ${err.message}`)); + return { success: false, error: err.message }; + } +} diff --git a/src/commands/config-auth/show-command.ts b/src/commands/config-auth/show-command.ts new file mode 100644 index 00000000..8bbdc1bd --- /dev/null +++ b/src/commands/config-auth/show-command.ts @@ -0,0 +1,89 @@ +/** + * Config Auth Show Command + * + * Display current dashboard authentication status. + */ + +import { getDashboardAuthConfig } from '../../config/unified-config-loader'; +import { initUI, header, subheader, ok, info, warn, dim, color } from '../../utils/ui'; +import type { AuthStatusInfo } from './types'; + +/** + * Get auth status info with ENV override detection + */ +function getAuthStatus(): AuthStatusInfo { + const config = getDashboardAuthConfig(); + + return { + enabled: config.enabled, + configured: !!(config.username && config.password_hash), + username: config.username, + sessionTimeoutHours: config.session_timeout_hours ?? 24, + envOverride: { + enabled: process.env.CCS_DASHBOARD_AUTH_ENABLED !== undefined, + username: process.env.CCS_DASHBOARD_USERNAME !== undefined, + passwordHash: process.env.CCS_DASHBOARD_PASSWORD_HASH !== undefined, + }, + }; +} + +/** + * Handle show command - display current auth status + */ +export async function handleShow(): Promise { + await initUI(); + + console.log(''); + console.log(header('Dashboard Auth Status')); + console.log(''); + + const status = getAuthStatus(); + + // Status section + console.log(subheader('Configuration')); + + if (status.enabled) { + console.log(ok('Authentication: Enabled')); + } else { + console.log(info('Authentication: Disabled')); + } + + if (status.configured) { + console.log(ok(`Username: ${status.username}`)); + console.log(info(`Session timeout: ${status.sessionTimeoutHours} hours`)); + } else { + console.log(warn('Not configured - run `ccs config auth setup`')); + } + + console.log(''); + + // ENV override section + const hasEnvOverride = + status.envOverride.enabled || status.envOverride.username || status.envOverride.passwordHash; + + if (hasEnvOverride) { + console.log(subheader('Environment Overrides')); + console.log(warn('The following ENV vars override config.yaml:')); + + if (status.envOverride.enabled) { + const value = process.env.CCS_DASHBOARD_AUTH_ENABLED; + console.log(` ${color('CCS_DASHBOARD_AUTH_ENABLED', 'command')}=${value}`); + } + if (status.envOverride.username) { + const value = process.env.CCS_DASHBOARD_USERNAME; + console.log(` ${color('CCS_DASHBOARD_USERNAME', 'command')}=${value}`); + } + if (status.envOverride.passwordHash) { + console.log(` ${color('CCS_DASHBOARD_PASSWORD_HASH', 'command')}=***`); + } + + console.log(''); + } + + // Help section + console.log(subheader('Commands')); + console.log(dim(' ccs config auth setup Configure authentication')); + console.log(dim(' ccs config auth disable Disable authentication')); + console.log(dim(' ccs config Open dashboard')); + console.log(''); +} diff --git a/src/commands/config-auth/types.ts b/src/commands/config-auth/types.ts new file mode 100644 index 00000000..861dc3a6 --- /dev/null +++ b/src/commands/config-auth/types.ts @@ -0,0 +1,27 @@ +/** + * Config Auth Command Types + * + * Shared interfaces for dashboard authentication CLI commands. + */ + +export interface ConfigAuthContext { + verbose?: boolean; +} + +export interface AuthSetupResult { + success: boolean; + username?: string; + error?: string; +} + +export interface AuthStatusInfo { + enabled: boolean; + configured: boolean; + username: string; + sessionTimeoutHours: number; + envOverride: { + enabled: boolean; + username: boolean; + passwordHash: boolean; + }; +} diff --git a/src/commands/config-command.ts b/src/commands/config-command.ts index 1814fa06..e9132802 100644 --- a/src/commands/config-command.ts +++ b/src/commands/config-command.ts @@ -52,10 +52,16 @@ function parseArgs(args: string[]): ConfigOptions { */ function showHelp(): void { console.log(''); - console.log('Usage: ccs config [options]'); + console.log('Usage: ccs config [command] [options]'); console.log(''); console.log('Open web-based configuration dashboard'); console.log(''); + console.log('Commands:'); + console.log(' auth Manage dashboard authentication'); + console.log(' auth setup Configure username and password'); + console.log(' auth show Display current auth status'); + console.log(' auth disable Disable authentication'); + console.log(''); console.log('Options:'); console.log(' --port, -p PORT Specify server port (default: auto-detect)'); console.log(' --dev Development mode with Vite HMR'); @@ -65,6 +71,7 @@ function showHelp(): void { console.log(' ccs config Auto-detect available port'); console.log(' ccs config --port 3000 Use specific port'); console.log(' ccs config --dev Development mode with hot reload'); + console.log(' ccs config auth setup Configure dashboard login'); console.log(''); } @@ -72,6 +79,13 @@ function showHelp(): void { * Handle config command */ export async function handleConfigCommand(args: string[]): Promise { + // Route subcommands before dashboard launch + if (args[0] === 'auth') { + const { handleConfigAuthCommand } = await import('./config-auth'); + await handleConfigAuthCommand(args.slice(1)); + return; + } + await initUI(); const options = parseArgs(args); diff --git a/src/commands/help-command.ts b/src/commands/help-command.ts index b443b5f2..29fc1c38 100644 --- a/src/commands/help-command.ts +++ b/src/commands/help-command.ts @@ -230,6 +230,8 @@ Run ${color('ccs config', 'command')} for web dashboard`.trim(); ['ccs doctor', 'Run health check and diagnostics'], ['ccs cleanup', 'Remove old CLIProxy logs'], ['ccs config', 'Open web configuration dashboard'], + ['ccs config auth setup', 'Configure dashboard login'], + ['ccs config auth show', 'Show dashboard auth status'], ['ccs config --port 3000', 'Use specific port'], ['ccs sync', 'Sync delegation commands and skills'], ['ccs update', 'Update CCS to latest version'], From 1d2dcbf1f699ac5d0a86b2e645f0ac409684db90 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Tue, 13 Jan 2026 21:04:12 +0000 Subject: [PATCH 04/15] chore(release): 7.18.3-dev.3 [skip ci] --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index bdfeca44..9973949c 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@kaitranntt/ccs", - "version": "7.18.3-dev.2", + "version": "7.18.3-dev.3", "description": "Claude Code Switch - Instant profile switching between Claude Sonnet 4.5 and GLM 4.6", "keywords": [ "cli", From a3a167e62aaa555c71379e91a9dfd0b7f5ddf145 Mon Sep 17 00:00:00 2001 From: kaitranntt Date: Tue, 13 Jan 2026 16:23:10 -0500 Subject: [PATCH 05/15] fix(auth): add security hardening per code review - Add timing-safe username comparison to prevent timing attacks - Regenerate session on login to prevent session fixation - Add warning log when session secret persistence fails --- src/web-server/middleware/auth-middleware.ts | 5 +-- src/web-server/routes/auth-routes.ts | 33 +++++++++++++++----- 2 files changed, 29 insertions(+), 9 deletions(-) diff --git a/src/web-server/middleware/auth-middleware.ts b/src/web-server/middleware/auth-middleware.ts index 28c12d2b..248e303c 100644 --- a/src/web-server/middleware/auth-middleware.ts +++ b/src/web-server/middleware/auth-middleware.ts @@ -56,8 +56,9 @@ function getSessionSecret(): string { fs.mkdirSync(dir, { recursive: true }); } fs.writeFileSync(SESSION_SECRET_PATH, newSecret, { mode: 0o600 }); - } catch { - // If we can't persist, still return the secret for this session + } catch (err) { + // Log warning - sessions won't persist across restarts + console.warn('[!] Failed to persist session secret:', (err as Error).message); } return newSecret; diff --git a/src/web-server/routes/auth-routes.ts b/src/web-server/routes/auth-routes.ts index a29ff6ce..3a7efb3b 100644 --- a/src/web-server/routes/auth-routes.ts +++ b/src/web-server/routes/auth-routes.ts @@ -5,9 +5,23 @@ import { Router, type Request, type Response } from 'express'; import bcrypt from 'bcrypt'; +import crypto from 'crypto'; import { getDashboardAuthConfig } from '../../config/unified-config-loader'; import { loginRateLimiter } from '../middleware/auth-middleware'; +/** + * Timing-safe string comparison to prevent timing attacks. + * Returns true if strings match, false otherwise. + */ +function timingSafeEqual(a: string, b: string): boolean { + if (a.length !== b.length) { + // Still compare to avoid length-based timing leak + crypto.timingSafeEqual(Buffer.from(a), Buffer.from(a)); + return false; + } + return crypto.timingSafeEqual(Buffer.from(a), Buffer.from(b)); +} + const router = Router(); /** @@ -38,8 +52,8 @@ router.post('/login', loginRateLimiter, async (req: Request, res: Response) => { return; } - // Verify credentials - const usernameMatch = username === authConfig.username; + // Verify credentials (timing-safe comparison for username) + const usernameMatch = timingSafeEqual(username, authConfig.username); const passwordMatch = await bcrypt.compare(password, authConfig.password_hash); if (!usernameMatch || !passwordMatch) { @@ -47,11 +61,16 @@ router.post('/login', loginRateLimiter, async (req: Request, res: Response) => { return; } - // Set session - req.session.authenticated = true; - req.session.username = username; - - res.json({ success: true, username }); + // Regenerate session to prevent session fixation, then set auth + req.session.regenerate((err) => { + if (err) { + res.status(500).json({ error: 'Session error' }); + return; + } + req.session.authenticated = true; + req.session.username = username; + res.json({ success: true, username }); + }); }); /** From 8daabdde5ccfe66989b706f33c505b0596d9f365 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Tue, 13 Jan 2026 21:46:25 +0000 Subject: [PATCH 06/15] chore(release): 7.19.2-dev.1 [skip ci] --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index a9b5ac16..95545dfa 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@kaitranntt/ccs", - "version": "7.19.2", + "version": "7.19.2-dev.1", "description": "Claude Code Switch - Instant profile switching between Claude Sonnet 4.5 and GLM 4.6", "keywords": [ "cli", From db58c6bbcabdb1edc1748212ad0b85af682ac597 Mon Sep 17 00:00:00 2001 From: Sergey Date: Wed, 14 Jan 2026 14:34:53 +0100 Subject: [PATCH 07/15] fix(ui): use wss:// for WebSocket on HTTPS pages (#315) --- ui/src/hooks/use-websocket.ts | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/ui/src/hooks/use-websocket.ts b/ui/src/hooks/use-websocket.ts index 16abc65f..198b10ca 100644 --- a/ui/src/hooks/use-websocket.ts +++ b/ui/src/hooks/use-websocket.ts @@ -69,7 +69,8 @@ export function useWebSocket() { } setStatus('connecting'); - const ws = new WebSocket(`ws://${window.location.host}`); + const protocol = window.location.protocol === 'https:' ? 'wss:' : 'ws:'; + const ws = new WebSocket(`${protocol}//${window.location.host}`); wsRef.current = ws; ws.onopen = () => { From 3b4c29ddcb5672be3a99e5cf7f1d079bfd3865eb Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Wed, 14 Jan 2026 13:35:51 +0000 Subject: [PATCH 08/15] chore(release): 7.19.2-dev.2 [skip ci] --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 95545dfa..471ac5b1 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@kaitranntt/ccs", - "version": "7.19.2-dev.1", + "version": "7.19.2-dev.2", "description": "Claude Code Switch - Instant profile switching between Claude Sonnet 4.5 and GLM 4.6", "keywords": [ "cli", From ef7e595b6fa4c96ac88e2e98f992fd05f7525e2e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Leynier=20Guti=C3=A9rrez=20Gonz=C3=A1lez?= Date: Sat, 10 Jan 2026 21:47:26 -0600 Subject: [PATCH 09/15] feat(persist): add --list-backups and --restore options for backup management Add backup management functionality to the persist command: - List available backups with timestamps and dates - Restore from most recent or specific backup - Improved error handling for corrupted settings.json - Updated CLAUDE.md to document the persist command and the exception to the non-invasive constraint --- CLAUDE.md | 3 +- src/ccs.ts | 7 + src/commands/help-command.ts | 3 + src/commands/persist-command.ts | 485 +++++++++++++++++++ tests/unit/commands/persist-command.test.js | 509 ++++++++++++++++++++ 5 files changed, 1006 insertions(+), 1 deletion(-) create mode 100644 src/commands/persist-command.ts create mode 100644 tests/unit/commands/persist-command.test.js diff --git a/CLAUDE.md b/CLAUDE.md index 5404a1a4..37bc8ede 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -98,7 +98,7 @@ bun run validate # Step 3: Final check (must pass) 1. **NO EMOJIS** - ASCII only: [OK], [!], [X], [i] 2. **TTY-aware colors** - Respect NO_COLOR env var -3. **Non-invasive** - NEVER modify `~/.claude/settings.json` +3. **Non-invasive** - NEVER modify `~/.claude/settings.json` without explicit user request and confirmation (exception: `ccs persist` command) 4. **Cross-platform parity** - bash/PowerShell/Node.js must behave identically 5. **CLI documentation** - ALL CLI changes MUST update respective `--help` handler (see table below) 6. **Idempotent** - All install operations safe to run multiple times @@ -116,6 +116,7 @@ bun run validate # Step 3: Final check (must pass) | `ccs copilot --help` | `src/commands/copilot-command.ts` → `handleHelp()` | | `ccs doctor --help` | `src/commands/doctor-command.ts` → `showHelp()` | | `ccs migrate --help` | `src/commands/migrate-command.ts` → `printMigrateHelp()` | +| `ccs persist --help` | `src/commands/persist-command.ts` → `showHelp()` | | `ccs setup --help` | `src/commands/setup-command.ts` → `showHelp()` | **Note:** `lib/ccs` and `lib/ccs.ps1` are bootstrap wrappers only—they delegate to Node.js and contain no help text. diff --git a/src/ccs.ts b/src/ccs.ts index ca9c10d4..6aecf3b5 100644 --- a/src/ccs.ts +++ b/src/ccs.ts @@ -437,6 +437,13 @@ async function main(): Promise { process.exit(exitCode); } + // Special case: persist command (write profile env to ~/.claude/settings.json) + if (firstArg === 'persist') { + const { handlePersistCommand } = await import('./commands/persist-command'); + await handlePersistCommand(args.slice(1)); + return; + } + // Special case: setup command (first-time wizard) if (firstArg === 'setup' || firstArg === '--setup') { const { handleSetupCommand } = await import('./commands/setup-command'); diff --git a/src/commands/help-command.ts b/src/commands/help-command.ts index 29fc1c38..effb55a4 100644 --- a/src/commands/help-command.ts +++ b/src/commands/help-command.ts @@ -233,6 +233,9 @@ Run ${color('ccs config', 'command')} for web dashboard`.trim(); ['ccs config auth setup', 'Configure dashboard login'], ['ccs config auth show', 'Show dashboard auth status'], ['ccs config --port 3000', 'Use specific port'], + ['ccs persist ', 'Write profile env to ~/.claude/settings.json'], + ['ccs persist --list-backups', 'List available settings.json backups'], + ['ccs persist --restore', 'Restore settings.json from latest backup'], ['ccs sync', 'Sync delegation commands and skills'], ['ccs update', 'Update CCS to latest version'], ['ccs update --force', 'Force reinstall current version'], diff --git a/src/commands/persist-command.ts b/src/commands/persist-command.ts new file mode 100644 index 00000000..2977102d --- /dev/null +++ b/src/commands/persist-command.ts @@ -0,0 +1,485 @@ +/** + * Persist Command Handler + * + * Writes a profile's environment variables to ~/.claude/settings.json + * for native Claude Code usage (IDEs, extensions, etc.). + * + * Supports all profile types: API, CLIProxy, Copilot. + * Account-based profiles are not supported (use CLAUDE_CONFIG_DIR). + */ + +import * as fs from 'fs'; +import * as path from 'path'; +import * as os from 'os'; +import { initUI, header, subheader, color, dim, ok, fail, warn, info } from '../utils/ui'; +import { InteractivePrompt } from '../utils/prompt'; +import ProfileDetector, { + ProfileDetectionResult, + loadSettingsFromFile, + CLIPROXY_PROFILES, +} from '../auth/profile-detector'; +import { getEffectiveEnvVars, CLIPROXY_DEFAULT_PORT } from '../cliproxy/config-generator'; +import { generateCopilotEnv } from '../copilot/copilot-executor'; +import { expandPath } from '../utils/helpers'; + +interface PersistCommandArgs { + profile?: string; + yes?: boolean; + listBackups?: boolean; + restore?: string | boolean; +} + +interface ResolvedEnv { + env: Record; + profileType: string; + warning?: string; +} + +/** Parse command line arguments */ +function parseArgs(args: string[]): PersistCommandArgs { + const result: PersistCommandArgs = {}; + for (let i = 0; i < args.length; i++) { + const arg = args[i]; + if (arg === '--yes' || arg === '-y') { + result.yes = true; + } else if (arg === '--help' || arg === '-h') { + // Will be handled in main function + } else if (arg === '--list-backups') { + result.listBackups = true; + } else if (arg === '--restore') { + // Check if next arg is a timestamp (not a flag) + const nextArg = args[i + 1]; + if (nextArg && !nextArg.startsWith('-')) { + result.restore = nextArg; + i++; // Skip next arg + } else { + result.restore = true; // Use latest + } + } else if (!arg.startsWith('-') && !result.profile) { + result.profile = arg; + } + } + return result; +} + +/** Get Claude settings.json path */ +function getClaudeSettingsPath(): string { + return path.join(os.homedir(), '.claude', 'settings.json'); +} + +/** Read existing Claude settings.json */ +function readClaudeSettings(): Record { + const settingsPath = getClaudeSettingsPath(); + try { + const content = fs.readFileSync(settingsPath, 'utf8'); + return JSON.parse(content) as Record; + } catch (error) { + const nodeError = error as NodeJS.ErrnoException; + if (nodeError.code === 'ENOENT') { + return {}; + } + throw new Error(`Failed to parse settings.json: ${(error as Error).message}`); + } +} + +/** + * Write settings back to settings.json + * Note: mode 0o600 only applies when creating a new file. + * Existing file permissions are preserved (acceptable behavior). + */ +function writeClaudeSettings(settings: Record): void { + const settingsPath = getClaudeSettingsPath(); + const dir = path.dirname(settingsPath); + if (!fs.existsSync(dir)) { + fs.mkdirSync(dir, { recursive: true }); + } + fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n', { mode: 0o600 }); +} + +/** Create backup of settings.json */ +function createBackup(): string { + const settingsPath = getClaudeSettingsPath(); + if (!fs.existsSync(settingsPath)) { + throw new Error('No settings.json to backup'); + } + const now = new Date(); + const timestamp = + now.getFullYear().toString() + + (now.getMonth() + 1).toString().padStart(2, '0') + + now.getDate().toString().padStart(2, '0') + + '_' + + now.getHours().toString().padStart(2, '0') + + now.getMinutes().toString().padStart(2, '0') + + now.getSeconds().toString().padStart(2, '0'); + const backupPath = `${settingsPath}.backup.${timestamp}`; + fs.copyFileSync(settingsPath, backupPath); + return backupPath; +} + +interface BackupFile { + path: string; + timestamp: string; + date: Date; +} + +/** Get all backup files sorted by date (newest first) */ +function getBackupFiles(): BackupFile[] { + const settingsPath = getClaudeSettingsPath(); + const dir = path.dirname(settingsPath); + if (!fs.existsSync(dir)) { + return []; + } + const backupPattern = /^settings\.json\.backup\.(\d{8}_\d{6})$/; + const files = fs + .readdirSync(dir) + .filter((f) => backupPattern.test(f)) + .map((f) => { + const match = f.match(backupPattern); + if (!match) return null; + const timestamp = match[1]; + // Parse YYYYMMDD_HHMMSS + const year = parseInt(timestamp.slice(0, 4)); + const month = parseInt(timestamp.slice(4, 6)) - 1; + const day = parseInt(timestamp.slice(6, 8)); + const hour = parseInt(timestamp.slice(9, 11)); + const min = parseInt(timestamp.slice(11, 13)); + const sec = parseInt(timestamp.slice(13, 15)); + return { + path: path.join(dir, f), + timestamp, + date: new Date(year, month, day, hour, min, sec), + }; + }) + .filter((f): f is BackupFile => f !== null) + .sort((a, b) => b.date.getTime() - a.date.getTime()); // newest first + return files; +} + +/** Mask API key for display (show first 4 and last 4 chars) */ +function maskApiKey(key: string): string { + if (key.length <= 12) { + return '****'; + } + return `${key.slice(0, 4)}...${key.slice(-4)}`; +} + +/** Resolve env vars for a profile */ +async function resolveProfileEnvVars( + profileName: string, + profileResult: ProfileDetectionResult +): Promise { + switch (profileResult.type) { + case 'settings': { + // API profile - load from settings file + let env: Record = {}; + if (profileResult.env) { + env = profileResult.env; + } else if (profileResult.settingsPath) { + env = loadSettingsFromFile(expandPath(profileResult.settingsPath)); + } + if (Object.keys(env).length === 0) { + throw new Error(`Profile '${profileName}' has no env vars configured`); + } + return { env, profileType: 'API' }; + } + case 'cliproxy': { + // CLIProxy profile - generate env vars + const provider = + profileResult.provider || (profileName as (typeof CLIPROXY_PROFILES)[number]); + const port = profileResult.port || CLIPROXY_DEFAULT_PORT; + const env = getEffectiveEnvVars(provider, port, profileResult.settingsPath) as Record< + string, + string + >; + return { + env, + profileType: 'CLIProxy', + warning: 'CLIProxy must be running for this profile to work', + }; + } + case 'copilot': { + // Copilot profile - generate env vars + if (!profileResult.copilotConfig) { + throw new Error('Copilot configuration not found'); + } + const env = generateCopilotEnv(profileResult.copilotConfig); + return { + env, + profileType: 'Copilot', + warning: 'copilot-api daemon must be running for this profile to work', + }; + } + case 'account': { + throw new Error( + `Account profiles use CLAUDE_CONFIG_DIR isolation, not env vars.\n` + + `Use 'ccs ${profileName}' to run with this profile instead.` + ); + } + case 'default': { + throw new Error( + 'Default profile has no env vars to persist.\n' + + 'Specify a profile name: ccs persist ' + ); + } + default: { + throw new Error(`Unknown profile type: ${profileResult.type}`); + } + } +} + +/** Handle --list-backups flag */ +async function handleListBackups(): Promise { + await initUI(); + const backups = getBackupFiles(); + if (backups.length === 0) { + console.log(info('No backups found')); + return; + } + console.log(header('Available Backups')); + console.log(''); + backups.forEach((b, i) => { + const dateStr = b.date.toLocaleString(); + const marker = i === 0 ? color(' (latest)', 'success') : ''; + console.log(` ${color(b.timestamp, 'command')} ${dim(dateStr)}${marker}`); + }); + console.log(''); + console.log(dim('To restore: ccs persist --restore [timestamp]')); +} + +/** Handle --restore [timestamp] flag */ +async function handleRestore(timestamp: string | boolean, yes: boolean): Promise { + await initUI(); + const backups = getBackupFiles(); + if (backups.length === 0) { + console.log(fail('No backups found')); + process.exit(1); + } + // Find backup to restore + let backup: BackupFile; + if (timestamp === true) { + // Use latest + backup = backups[0]; + } else { + const found = backups.find((b) => b.timestamp === timestamp); + if (!found) { + console.log(fail(`Backup not found: ${timestamp}`)); + console.log(''); + console.log('Available backups:'); + backups.slice(0, 5).forEach((b) => console.log(` ${b.timestamp}`)); + process.exit(1); + } + backup = found; + } + console.log(header('Restore Backup')); + console.log(''); + console.log(`Backup: ${color(backup.timestamp, 'command')}`); + console.log(`Date: ${backup.date.toLocaleString()}`); + console.log(''); + console.log(warn('This will replace ~/.claude/settings.json')); + console.log(''); + if (!yes) { + const proceed = await InteractivePrompt.confirm('Proceed with restore?', { default: false }); + if (!proceed) { + console.log(info('Cancelled')); + process.exit(0); + } + } + // Copy backup over settings.json + fs.copyFileSync(backup.path, getClaudeSettingsPath()); + console.log(ok(`Restored from backup: ${backup.timestamp}`)); +} + +/** Show help for persist command */ +async function showHelp(): Promise { + await initUI(); + console.log(header('CCS Persist Command')); + console.log(''); + console.log(subheader('Usage')); + console.log(` ${color('ccs persist', 'command')} [options]`); + console.log(` ${color('ccs persist', 'command')} --list-backups`); + console.log(` ${color('ccs persist', 'command')} --restore [timestamp]`); + console.log(''); + console.log(subheader('Description')); + console.log(" Writes a profile's environment variables directly to"); + console.log(' ~/.claude/settings.json for native Claude Code usage.'); + console.log(''); + console.log(' This allows Claude Code to use the profile without CCS,'); + console.log(' enabling compatibility with IDEs and extensions.'); + console.log(''); + console.log(subheader('Options')); + console.log(` ${color('--yes, -y', 'command')} Skip confirmation prompts (auto-backup)`); + console.log(` ${color('--help, -h', 'command')} Show this help message`); + console.log(''); + console.log(subheader('Backup Management')); + console.log(` ${color('--list-backups', 'command')} List available backup files`); + console.log(` ${color('--restore', 'command')} Restore from the most recent backup`); + console.log( + ` ${color('--restore ', 'command')} Restore from specific backup (e.g., 20260110_205324)` + ); + console.log(''); + console.log(subheader('Supported Profile Types')); + console.log(` ${color('API profiles', 'command')} glm, glmt, kimi, custom API profiles`); + console.log(` ${color('CLIProxy', 'command')} gemini, codex, agy, qwen, kiro, ghcp`); + console.log(` ${color('Copilot', 'command')} copilot (requires copilot-api daemon)`); + console.log(` ${dim('Account-based')} Not supported (uses CLAUDE_CONFIG_DIR)`); + console.log(''); + console.log(subheader('Examples')); + console.log(` ${dim('# Persist GLM profile')}`); + console.log(` ${color('ccs persist glm', 'command')}`); + console.log(''); + console.log(` ${dim('# Persist with auto-confirmation')}`); + console.log(` ${color('ccs persist gemini --yes', 'command')}`); + console.log(''); + console.log(` ${dim('# List all backups')}`); + console.log(` ${color('ccs persist --list-backups', 'command')}`); + console.log(''); + console.log(` ${dim('# Restore latest backup')}`); + console.log(` ${color('ccs persist --restore', 'command')}`); + console.log(''); + console.log(` ${dim('# Restore specific backup')}`); + console.log(` ${color('ccs persist --restore 20260110_205324', 'command')}`); + console.log(''); + console.log(subheader('Notes')); + console.log(' [i] CLIProxy profiles require the proxy to be running.'); + console.log(' [i] Copilot profiles require copilot-api daemon.'); + console.log(' [i] Backups are saved as ~/.claude/settings.json.backup.YYYYMMDD_HHMMSS'); + console.log(''); +} + +/** Main persist command handler */ +export async function handlePersistCommand(args: string[]): Promise { + // Check for help first + if (args.includes('--help') || args.includes('-h') || args.length === 0) { + await showHelp(); + return; + } + const parsedArgs = parseArgs(args); + // Handle --list-backups + if (parsedArgs.listBackups) { + await handleListBackups(); + return; + } + // Handle --restore + if (parsedArgs.restore) { + await handleRestore(parsedArgs.restore, parsedArgs.yes ?? false); + return; + } + await initUI(); + if (!parsedArgs.profile) { + console.log(fail('Profile name is required')); + console.log(''); + console.log('Usage:'); + console.log(` ${color('ccs persist ', 'command')}`); + console.log(''); + console.log('Run for help:'); + console.log(` ${color('ccs persist --help', 'command')}`); + process.exit(1); + } + // Detect profile + const detector = new ProfileDetector(); + let profileResult: ProfileDetectionResult; + try { + profileResult = detector.detectProfileType(parsedArgs.profile); + } catch (error) { + const err = error as Error & { availableProfiles?: string }; + console.log(fail(`Profile not found: ${parsedArgs.profile}`)); + console.log(''); + if (err.availableProfiles) { + console.log(err.availableProfiles); + } + process.exit(1); + } + // Resolve env vars + let resolved: ResolvedEnv; + try { + resolved = await resolveProfileEnvVars(parsedArgs.profile, profileResult); + } catch (error) { + console.log(fail((error as Error).message)); + process.exit(1); + } + // Display what will be written + console.log(header(`Persist Profile: ${parsedArgs.profile}`)); + console.log(''); + console.log(`Profile type: ${color(resolved.profileType, 'command')}`); + console.log(''); + console.log('The following env vars will be written to ~/.claude/settings.json:'); + console.log(''); + // Display env vars (mask sensitive values) + const envKeys = Object.keys(resolved.env); + if (envKeys.length === 0) { + console.log(fail('Profile has no environment variables to persist')); + process.exit(1); + } + const maxKeyLen = Math.max(...envKeys.map((k) => k.length)); + for (const [key, value] of Object.entries(resolved.env)) { + const paddedKey = key.padEnd(maxKeyLen + 2); + const displayValue = + key.includes('TOKEN') || key.includes('KEY') || key.includes('SECRET') + ? maskApiKey(value) + : value; + console.log(` ${color(paddedKey, 'command')} = ${displayValue}`); + } + console.log(''); + // Show warning if applicable + if (resolved.warning) { + console.log(warn(resolved.warning)); + console.log(''); + } + // Warning about modification + console.log(warn('This will modify ~/.claude/settings.json')); + console.log(dim(' Existing hooks and other settings will be preserved.')); + console.log(''); + // Check if settings.json exists for backup + const settingsPath = getClaudeSettingsPath(); + const settingsExist = fs.existsSync(settingsPath); + // Backup prompt (unless --yes) + if (settingsExist) { + let createBackupFlag: boolean = parsedArgs.yes === true; // Auto-backup with --yes + if (!parsedArgs.yes) { + createBackupFlag = await InteractivePrompt.confirm('Create backup before modifying?', { + default: true, + }); + } + if (createBackupFlag) { + try { + const backupPath = createBackup(); + console.log(ok(`Backup created: ${backupPath.replace(os.homedir(), '~')}`)); + console.log(''); + } catch (error) { + console.log(fail(`Failed to create backup: ${(error as Error).message}`)); + process.exit(1); + } + } + } + // Proceed confirmation (unless --yes) + if (!parsedArgs.yes) { + const proceed = await InteractivePrompt.confirm('Proceed with persist?', { default: true }); + if (!proceed) { + console.log(info('Cancelled')); + process.exit(0); + } + } + // Read existing settings and merge + const existingSettings = readClaudeSettings(); + const existingEnv = (existingSettings.env as Record) || {}; + const mergedSettings = { + ...existingSettings, + env: { + ...existingEnv, + ...resolved.env, + }, + }; + // Write merged settings + try { + writeClaudeSettings(mergedSettings); + } catch (error) { + console.log(fail(`Failed to write settings: ${(error as Error).message}`)); + process.exit(1); + } + console.log(''); + console.log(ok(`Profile '${parsedArgs.profile}' written to ~/.claude/settings.json`)); + console.log(''); + console.log(info('Claude Code will now use this profile by default.')); + console.log(dim(' To revert, restore the backup or edit settings.json manually.')); + console.log(''); +} diff --git a/tests/unit/commands/persist-command.test.js b/tests/unit/commands/persist-command.test.js new file mode 100644 index 00000000..7282ac37 --- /dev/null +++ b/tests/unit/commands/persist-command.test.js @@ -0,0 +1,509 @@ +/** + * Persist Command Tests + * + * Tests for the `ccs persist` CLI command including: + * - Argument parsing + * - API key masking + * - Settings merge logic + * - Backup management + * - Error handling + */ + +const assert = require('assert'); + +describe('Persist Command', () => { + // ========================================================================= + // Argument Parsing Tests + // ========================================================================= + describe('parseArgs', () => { + /** + * Simulates the argument parsing logic from persist-command.ts + */ + function parseArgs(args) { + const result = { + profile: undefined, + yes: false, + listBackups: false, + restore: undefined, + }; + for (let i = 0; i < args.length; i++) { + const arg = args[i]; + if (arg === '--yes' || arg === '-y') { + result.yes = true; + } else if (arg === '--help' || arg === '-h') { + // Will be handled in main function + } else if (arg === '--list-backups') { + result.listBackups = true; + } else if (arg === '--restore') { + // Check if next arg is a timestamp (not a flag) + const nextArg = args[i + 1]; + if (nextArg && !nextArg.startsWith('-')) { + result.restore = nextArg; + i++; // Skip next arg + } else { + result.restore = true; // Use latest + } + } else if (!arg.startsWith('-') && !result.profile) { + result.profile = arg; + } + } + return result; + } + + it('parses profile name as first positional argument', () => { + const result = parseArgs(['glm']); + assert.strictEqual(result.profile, 'glm'); + }); + + it('parses --yes flag', () => { + const result = parseArgs(['glm', '--yes']); + assert.strictEqual(result.yes, true); + assert.strictEqual(result.profile, 'glm'); + }); + + it('parses -y short flag', () => { + const result = parseArgs(['gemini', '-y']); + assert.strictEqual(result.yes, true); + assert.strictEqual(result.profile, 'gemini'); + }); + + it('parses flags before profile name', () => { + const result = parseArgs(['--yes', 'kimi']); + assert.strictEqual(result.yes, true); + assert.strictEqual(result.profile, 'kimi'); + }); + + it('handles no arguments', () => { + const result = parseArgs([]); + assert.strictEqual(result.profile, undefined); + assert.strictEqual(result.yes, false); + }); + + it('ignores unknown flags', () => { + const result = parseArgs(['glm', '--unknown', '--yes']); + assert.strictEqual(result.profile, 'glm'); + assert.strictEqual(result.yes, true); + }); + + it('takes only first positional as profile', () => { + const result = parseArgs(['first', 'second', 'third']); + assert.strictEqual(result.profile, 'first'); + }); + + it('parses --list-backups flag', () => { + const result = parseArgs(['--list-backups']); + assert.strictEqual(result.listBackups, true); + assert.strictEqual(result.profile, undefined); + }); + + it('parses --restore flag without timestamp (use latest)', () => { + const result = parseArgs(['--restore']); + assert.strictEqual(result.restore, true); + }); + + it('parses --restore flag with timestamp', () => { + const result = parseArgs(['--restore', '20260110_205324']); + assert.strictEqual(result.restore, '20260110_205324'); + }); + + it('parses --restore with --yes flag', () => { + const result = parseArgs(['--restore', '--yes']); + assert.strictEqual(result.restore, true); + assert.strictEqual(result.yes, true); + }); + + it('parses --restore with timestamp and --yes flag', () => { + const result = parseArgs(['--restore', '20260110_205324', '--yes']); + assert.strictEqual(result.restore, '20260110_205324'); + assert.strictEqual(result.yes, true); + }); + }); + + // ========================================================================= + // API Key Masking Tests + // ========================================================================= + describe('maskApiKey', () => { + /** + * Simulates the maskApiKey function from persist-command.ts + */ + function maskApiKey(key) { + if (key.length <= 12) { + return '****'; + } + return `${key.slice(0, 4)}...${key.slice(-4)}`; + } + + it('masks keys showing first 4 and last 4 characters', () => { + const result = maskApiKey('sk-1234567890abcdef'); + assert.strictEqual(result, 'sk-1...cdef'); + }); + + it('returns **** for keys <= 12 characters', () => { + assert.strictEqual(maskApiKey('123456789012'), '****'); + assert.strictEqual(maskApiKey('12345678901'), '****'); + assert.strictEqual(maskApiKey('short'), '****'); + assert.strictEqual(maskApiKey(''), '****'); + }); + + it('handles exactly 13 character keys', () => { + const result = maskApiKey('1234567890abc'); + assert.strictEqual(result, '1234...0abc'); + }); + + it('handles long API keys', () => { + const longKey = 'api_key_1234567890abcdefghijklmnopqrstuvwxyz'; + const result = maskApiKey(longKey); + assert.strictEqual(result, 'api_...wxyz'); + }); + + it('preserves special characters', () => { + const key = '!@#$%^&*()_+-=[]{}'; + const result = maskApiKey(key); + assert.strictEqual(result, '!@#$...[]{}'); + }); + }); + + // ========================================================================= + // Settings Merge Tests + // ========================================================================= + describe('Settings Merge Logic', () => { + /** + * Simulates the merge logic from persist-command.ts + */ + function mergeSettings(existing, newEnv) { + const existingEnv = existing.env || {}; + return { + ...existing, + env: { + ...existingEnv, + ...newEnv, + }, + }; + } + + it('merges env vars into empty settings', () => { + const existing = {}; + const newEnv = { ANTHROPIC_BASE_URL: 'http://example.com' }; + const result = mergeSettings(existing, newEnv); + assert.deepStrictEqual(result.env, newEnv); + }); + + it('preserves existing hooks', () => { + const existing = { + hooks: { PreToolUse: [{ matcher: 'WebSearch' }] }, + }; + const newEnv = { ANTHROPIC_MODEL: 'test' }; + const result = mergeSettings(existing, newEnv); + assert.deepStrictEqual(result.hooks, existing.hooks); + }); + + it('preserves existing presets', () => { + const existing = { + presets: [{ name: 'test', default: 'model' }], + }; + const newEnv = { ANTHROPIC_MODEL: 'test' }; + const result = mergeSettings(existing, newEnv); + assert.deepStrictEqual(result.presets, existing.presets); + }); + + it('preserves other settings like model and alwaysThinkingEnabled', () => { + const existing = { + model: 'opus', + alwaysThinkingEnabled: true, + }; + const newEnv = { ANTHROPIC_MODEL: 'test' }; + const result = mergeSettings(existing, newEnv); + assert.strictEqual(result.model, 'opus'); + assert.strictEqual(result.alwaysThinkingEnabled, true); + }); + + it('merges new env vars with existing env vars', () => { + const existing = { + env: { EXISTING_VAR: 'value' }, + }; + const newEnv = { NEW_VAR: 'new_value' }; + const result = mergeSettings(existing, newEnv); + assert.strictEqual(result.env.EXISTING_VAR, 'value'); + assert.strictEqual(result.env.NEW_VAR, 'new_value'); + }); + + it('overwrites existing env vars with new values', () => { + const existing = { + env: { ANTHROPIC_MODEL: 'old_model' }, + }; + const newEnv = { ANTHROPIC_MODEL: 'new_model' }; + const result = mergeSettings(existing, newEnv); + assert.strictEqual(result.env.ANTHROPIC_MODEL, 'new_model'); + }); + + it('handles complex settings with multiple fields', () => { + const existing = { + hooks: { PreToolUse: [] }, + presets: [], + model: 'sonnet', + env: { OLD_VAR: 'old' }, + customField: 'custom', + }; + const newEnv = { + ANTHROPIC_BASE_URL: 'http://test.com', + ANTHROPIC_MODEL: 'test', + }; + const result = mergeSettings(existing, newEnv); + + assert.deepStrictEqual(result.hooks, existing.hooks); + assert.deepStrictEqual(result.presets, existing.presets); + assert.strictEqual(result.model, 'sonnet'); + assert.strictEqual(result.customField, 'custom'); + assert.strictEqual(result.env.OLD_VAR, 'old'); + assert.strictEqual(result.env.ANTHROPIC_BASE_URL, 'http://test.com'); + assert.strictEqual(result.env.ANTHROPIC_MODEL, 'test'); + }); + }); + + // ========================================================================= + // Backup Timestamp Tests + // ========================================================================= + describe('Backup Timestamp Format', () => { + /** + * Simulates the timestamp generation from persist-command.ts + */ + function generateTimestamp(date) { + return ( + date.getFullYear().toString() + + (date.getMonth() + 1).toString().padStart(2, '0') + + date.getDate().toString().padStart(2, '0') + + '_' + + date.getHours().toString().padStart(2, '0') + + date.getMinutes().toString().padStart(2, '0') + + date.getSeconds().toString().padStart(2, '0') + ); + } + + it('generates correct format YYYYMMDD_HHMMSS', () => { + const date = new Date(2025, 0, 15, 10, 30, 45); // Jan 15, 2025 10:30:45 + const result = generateTimestamp(date); + assert.strictEqual(result, '20250115_103045'); + }); + + it('pads single digit months', () => { + const date = new Date(2025, 0, 1, 0, 0, 0); // Jan 1 + const result = generateTimestamp(date); + assert.match(result, /^202501/); + }); + + it('pads single digit days', () => { + const date = new Date(2025, 11, 5, 0, 0, 0); // Dec 5 + const result = generateTimestamp(date); + assert.match(result, /^20251205/); + }); + + it('pads single digit hours, minutes, seconds', () => { + const date = new Date(2025, 5, 15, 1, 2, 3); + const result = generateTimestamp(date); + assert.strictEqual(result, '20250615_010203'); + }); + }); + + // ========================================================================= + // Profile Type Detection Tests + // ========================================================================= + describe('Profile Type Messages', () => { + const profileTypes = { + settings: 'API', + cliproxy: 'CLIProxy', + copilot: 'Copilot', + account: 'Account (not supported)', + default: 'Default (not supported)', + }; + + it('maps settings type to API', () => { + assert.strictEqual(profileTypes.settings, 'API'); + }); + + it('maps cliproxy type to CLIProxy', () => { + assert.strictEqual(profileTypes.cliproxy, 'CLIProxy'); + }); + + it('maps copilot type to Copilot', () => { + assert.strictEqual(profileTypes.copilot, 'Copilot'); + }); + }); + + // ========================================================================= + // Sensitive Key Detection Tests + // ========================================================================= + describe('Sensitive Key Detection', () => { + /** + * Simulates the logic to detect sensitive keys for masking + */ + function isSensitiveKey(key) { + return key.includes('TOKEN') || key.includes('KEY') || key.includes('SECRET'); + } + + it('detects TOKEN in key name', () => { + assert.strictEqual(isSensitiveKey('ANTHROPIC_AUTH_TOKEN'), true); + assert.strictEqual(isSensitiveKey('ACCESS_TOKEN'), true); + }); + + it('detects KEY in key name', () => { + assert.strictEqual(isSensitiveKey('API_KEY'), true); + assert.strictEqual(isSensitiveKey('ANTHROPIC_API_KEY'), true); + }); + + it('detects SECRET in key name', () => { + assert.strictEqual(isSensitiveKey('CLIENT_SECRET'), true); + assert.strictEqual(isSensitiveKey('SECRET_KEY'), true); + }); + + it('does not flag non-sensitive keys', () => { + assert.strictEqual(isSensitiveKey('ANTHROPIC_BASE_URL'), false); + assert.strictEqual(isSensitiveKey('ANTHROPIC_MODEL'), false); + assert.strictEqual(isSensitiveKey('DISABLE_TELEMETRY'), false); + }); + }); + + // ========================================================================= + // Help Text Coverage Tests + // ========================================================================= + describe('Help Text Coverage', () => { + const expectedOptions = ['--yes', '-y', '--help', '-h']; + const expectedProfileTypes = ['API profiles', 'CLIProxy', 'Copilot', 'Account-based']; + + it('documents all CLI options', () => { + expectedOptions.forEach((option) => { + assert(typeof option === 'string', `Option ${option} should be a string`); + assert(option.startsWith('-'), `Option ${option} should start with -`); + }); + }); + + it('documents all profile types', () => { + expectedProfileTypes.forEach((type) => { + assert(typeof type === 'string', `Profile type ${type} should be documented`); + }); + }); + }); + + // ========================================================================= + // Error Message Tests + // ========================================================================= + describe('Error Messages', () => { + it('account profile error message mentions CLAUDE_CONFIG_DIR', () => { + const errorMessage = + "Account profiles use CLAUDE_CONFIG_DIR isolation, not env vars.\n" + + "Use 'ccs profileName' to run with this profile instead."; + assert(errorMessage.includes('CLAUDE_CONFIG_DIR')); + assert(errorMessage.includes('ccs profileName')); + }); + + it('no env vars error message includes profile name placeholder', () => { + const profileName = 'test'; + const errorMessage = `Profile '${profileName}' has no env vars configured`; + assert(errorMessage.includes(profileName)); + }); + }); + + // ========================================================================= + // Backup File Parsing Tests + // ========================================================================= + describe('Backup File Parsing', () => { + const backupPattern = /^settings\.json\.backup\.(\d{8}_\d{6})$/; + + /** + * Simulates parsing a backup filename into a BackupFile object + */ + function parseBackupFile(filename, dir) { + const match = filename.match(backupPattern); + if (!match) return null; + const timestamp = match[1]; + // Parse YYYYMMDD_HHMMSS + const year = parseInt(timestamp.slice(0, 4)); + const month = parseInt(timestamp.slice(4, 6)) - 1; + const day = parseInt(timestamp.slice(6, 8)); + const hour = parseInt(timestamp.slice(9, 11)); + const min = parseInt(timestamp.slice(11, 13)); + const sec = parseInt(timestamp.slice(13, 15)); + return { + path: dir + '/' + filename, + timestamp, + date: new Date(year, month, day, hour, min, sec), + }; + } + + it('matches valid backup filename pattern', () => { + assert(backupPattern.test('settings.json.backup.20260110_205324')); + assert(backupPattern.test('settings.json.backup.20250101_000000')); + }); + + it('rejects invalid backup filenames', () => { + assert(!backupPattern.test('settings.json')); + assert(!backupPattern.test('settings.json.backup')); + assert(!backupPattern.test('settings.json.backup.invalid')); + assert(!backupPattern.test('settings.json.backup.20260110')); + assert(!backupPattern.test('other.json.backup.20260110_205324')); + }); + + it('parses backup file correctly', () => { + const result = parseBackupFile('settings.json.backup.20260110_205324', '/home/user/.claude'); + assert.strictEqual(result.timestamp, '20260110_205324'); + assert.strictEqual(result.path, '/home/user/.claude/settings.json.backup.20260110_205324'); + assert.strictEqual(result.date.getFullYear(), 2026); + assert.strictEqual(result.date.getMonth(), 0); // January + assert.strictEqual(result.date.getDate(), 10); + assert.strictEqual(result.date.getHours(), 20); + assert.strictEqual(result.date.getMinutes(), 53); + assert.strictEqual(result.date.getSeconds(), 24); + }); + + it('returns null for non-matching files', () => { + const result = parseBackupFile('settings.json', '/home/user/.claude'); + assert.strictEqual(result, null); + }); + + it('sorts backup files by date descending (newest first)', () => { + const files = [ + { timestamp: '20260109_100000', date: new Date(2026, 0, 9, 10, 0, 0) }, + { timestamp: '20260110_205324', date: new Date(2026, 0, 10, 20, 53, 24) }, + { timestamp: '20260110_100000', date: new Date(2026, 0, 10, 10, 0, 0) }, + ]; + const sorted = files.sort((a, b) => b.date.getTime() - a.date.getTime()); + assert.strictEqual(sorted[0].timestamp, '20260110_205324'); + assert.strictEqual(sorted[1].timestamp, '20260110_100000'); + assert.strictEqual(sorted[2].timestamp, '20260109_100000'); + }); + }); + + // ========================================================================= + // Backup Restore Logic Tests + // ========================================================================= + describe('Backup Restore Logic', () => { + it('selects first backup when restore=true (latest)', () => { + const backups = [ + { timestamp: '20260110_205324' }, + { timestamp: '20260110_100000' }, + ]; + const restore = true; + const selected = restore === true ? backups[0] : backups.find((b) => b.timestamp === restore); + assert.strictEqual(selected.timestamp, '20260110_205324'); + }); + + it('selects specific backup when restore is a timestamp', () => { + const backups = [ + { timestamp: '20260110_205324' }, + { timestamp: '20260110_100000' }, + ]; + const restore = '20260110_100000'; + const selected = restore === true ? backups[0] : backups.find((b) => b.timestamp === restore); + assert.strictEqual(selected.timestamp, '20260110_100000'); + }); + + it('returns undefined when timestamp not found', () => { + const backups = [ + { timestamp: '20260110_205324' }, + { timestamp: '20260110_100000' }, + ]; + const restore = '20260101_000000'; + const selected = restore === true ? backups[0] : backups.find((b) => b.timestamp === restore); + assert.strictEqual(selected, undefined); + }); + }); +}); From c2a16a253e33415e8e026fd70a55feb988b4f7dd Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Wed, 14 Jan 2026 14:30:53 +0000 Subject: [PATCH 10/15] chore(release): 7.19.2-dev.3 [skip ci] --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 471ac5b1..0df00648 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@kaitranntt/ccs", - "version": "7.19.2-dev.2", + "version": "7.19.2-dev.3", "description": "Claude Code Switch - Instant profile switching between Claude Sonnet 4.5 and GLM 4.6", "keywords": [ "cli", From e7dca480d313b2227638a3e8a53554b3d28d2c8e Mon Sep 17 00:00:00 2001 From: kaitranntt Date: Wed, 14 Jan 2026 10:06:05 -0500 Subject: [PATCH 11/15] fix(ci): add Write tool to allowedTools for PR comment posting Root cause: Claude's allowedTools pattern matching is literal string matching. Multiline content in --body breaks the `Bash(gh pr comment *)` pattern. The Bash(cat *) pattern only matches reading, not writing with redirection. Changes: - Add Write tool to allowedTools (enables temp file creation) - Remove Bash(cat *) (not needed, Write replaces it) - Update prompt to require Write + --body-file pattern - Explicitly warn against inline --body with multiline content Tested locally: Successfully posted comment using Write + --body-file --- .github/workflows/ai-review.yml | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/.github/workflows/ai-review.yml b/.github/workflows/ai-review.yml index 284080e4..44e37e3d 100644 --- a/.github/workflows/ai-review.yml +++ b/.github/workflows/ai-review.yml @@ -148,15 +148,17 @@ jobs: > 🤖 Reviewed by `${{ env.REVIEW_MODEL }}` ## IMPORTANT: Posting the Review - After completing your analysis, post the review as a PR comment using: - ```bash - gh pr comment ${{ github.event.pull_request.number || github.event.issue.number || github.event.inputs.pr_number }} --body "YOUR_REVIEW" - ``` - You may use heredocs, pipes, or --body-file as needed for multi-line content. + After completing your analysis, post the review as a PR comment. + + REQUIRED METHOD (use Write tool + --body-file): + 1. Write your review to /tmp/pr_review.md using the Write tool + 2. Post with: gh pr comment ${{ github.event.pull_request.number || github.event.issue.number || github.event.inputs.pr_number }} --body-file /tmp/pr_review.md + + DO NOT use inline --body with multiline content - it will fail pattern matching. claude_args: | --model ${{ env.REVIEW_MODEL }} - --allowedTools "Bash(gh pr comment *),Bash(gh pr diff *),Bash(gh pr view *),Bash(echo *),Bash(cat *),Read,Glob,Grep" + --allowedTools "Bash(gh pr comment *),Bash(gh pr diff *),Bash(gh pr view *),Bash(echo *),Write,Read,Glob,Grep" continue-on-error: true - name: Add success reaction From 397331ec8995b261e0b6916874d59947ede0a88f Mon Sep 17 00:00:00 2001 From: "Kai (Tam Nhu) Tran" <61256810+kaitranntt@users.noreply.github.com> Date: Wed, 14 Jan 2026 10:06:44 -0500 Subject: [PATCH 12/15] fix(persist): harden security and edge case handling (#328) Security fixes: - Add fs.chmodSync(backupPath, 0o600) after backup creation - Add symlink detection (isSymlink helper) before all file operations - Reject symlinks in write, backup, and restore operations Edge case fixes: - Handle empty settings.json (0 bytes) gracefully - Validate parsed JSON is object type (not array/primitive) - Validate backup JSON integrity before restore - Show backup path guidance on write failure - Validate existing env is object before spread Maintenance: - Add backup rotation (keep last 10, MAX_BACKUPS constant) - Add cleanupOldBackups() function Addresses security findings from PR #312 code review. --- src/commands/persist-command.ts | 103 +++++++++++++++++++++++++++++--- 1 file changed, 96 insertions(+), 7 deletions(-) diff --git a/src/commands/persist-command.ts b/src/commands/persist-command.ts index 2977102d..0a627334 100644 --- a/src/commands/persist-command.ts +++ b/src/commands/persist-command.ts @@ -67,12 +67,21 @@ function getClaudeSettingsPath(): string { return path.join(os.homedir(), '.claude', 'settings.json'); } -/** Read existing Claude settings.json */ +/** Read existing Claude settings.json with validation */ function readClaudeSettings(): Record { const settingsPath = getClaudeSettingsPath(); try { const content = fs.readFileSync(settingsPath, 'utf8'); - return JSON.parse(content) as Record; + // Handle empty file (0 bytes) + if (!content.trim()) { + return {}; + } + const parsed: unknown = JSON.parse(content); + // Validate parsed value is a plain object (not array, null, or primitive) + if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) { + throw new Error('settings.json must contain a JSON object, not an array or primitive'); + } + return parsed as Record; } catch (error) { const nodeError = error as NodeJS.ErrnoException; if (nodeError.code === 'ENOENT') { @@ -89,6 +98,10 @@ function readClaudeSettings(): Record { */ function writeClaudeSettings(settings: Record): void { const settingsPath = getClaudeSettingsPath(); + // Security: Reject symlinks to prevent writing to unexpected locations + if (isSymlink(settingsPath)) { + throw new Error('settings.json is a symlink - refusing to write for security'); + } const dir = path.dirname(settingsPath); if (!fs.existsSync(dir)) { fs.mkdirSync(dir, { recursive: true }); @@ -96,12 +109,29 @@ function writeClaudeSettings(settings: Record): void { fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n', { mode: 0o600 }); } -/** Create backup of settings.json */ +/** Maximum number of backups to keep (oldest are deleted) */ +const MAX_BACKUPS = 10; + +/** Check if path is a symlink (security check) */ +function isSymlink(filePath: string): boolean { + try { + const stats = fs.lstatSync(filePath); + return stats.isSymbolicLink(); + } catch { + return false; + } +} + +/** Create backup of settings.json with proper permissions and rotation */ function createBackup(): string { const settingsPath = getClaudeSettingsPath(); if (!fs.existsSync(settingsPath)) { throw new Error('No settings.json to backup'); } + // Security: Reject symlinks to prevent writing to unexpected locations + if (isSymlink(settingsPath)) { + throw new Error('settings.json is a symlink - refusing to backup for security'); + } const now = new Date(); const timestamp = now.getFullYear().toString() + @@ -113,9 +143,28 @@ function createBackup(): string { now.getSeconds().toString().padStart(2, '0'); const backupPath = `${settingsPath}.backup.${timestamp}`; fs.copyFileSync(settingsPath, backupPath); + // Security: Set restrictive permissions on backup (contains API keys) + fs.chmodSync(backupPath, 0o600); + // Cleanup: Rotate old backups (keep only MAX_BACKUPS) + cleanupOldBackups(); return backupPath; } +/** Remove old backups keeping only MAX_BACKUPS most recent */ +function cleanupOldBackups(): void { + const backups = getBackupFiles(); + if (backups.length > MAX_BACKUPS) { + const toDelete = backups.slice(MAX_BACKUPS); + for (const backup of toDelete) { + try { + fs.unlinkSync(backup.path); + } catch { + // Ignore deletion errors (file may be locked or already deleted) + } + } + } +} + interface BackupFile { path: string; timestamp: string; @@ -284,8 +333,31 @@ async function handleRestore(timestamp: string | boolean, yes: boolean): Promise process.exit(0); } } + // Validate backup JSON integrity before restore + try { + const backupContent = fs.readFileSync(backup.path, 'utf8'); + const parsed: unknown = JSON.parse(backupContent); + if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) { + console.log(fail('Backup file is corrupted: not a valid JSON object')); + process.exit(1); + } + } catch (error) { + console.log(fail(`Backup file is corrupted: ${(error as Error).message}`)); + process.exit(1); + } + // Security: Reject symlink backup files + if (isSymlink(backup.path)) { + console.log(fail('Backup file is a symlink - refusing to restore for security')); + process.exit(1); + } // Copy backup over settings.json - fs.copyFileSync(backup.path, getClaudeSettingsPath()); + const settingsPath = getClaudeSettingsPath(); + // Security: Reject symlink target + if (isSymlink(settingsPath)) { + console.log(fail('settings.json is a symlink - refusing to restore for security')); + process.exit(1); + } + fs.copyFileSync(backup.path, settingsPath); console.log(ok(`Restored from backup: ${backup.timestamp}`)); } @@ -432,6 +504,8 @@ export async function handlePersistCommand(args: string[]): Promise { // Check if settings.json exists for backup const settingsPath = getClaudeSettingsPath(); const settingsExist = fs.existsSync(settingsPath); + // Track backup path for error recovery guidance + let createdBackupPath: string | null = null; // Backup prompt (unless --yes) if (settingsExist) { let createBackupFlag: boolean = parsedArgs.yes === true; // Auto-backup with --yes @@ -442,8 +516,8 @@ export async function handlePersistCommand(args: string[]): Promise { } if (createBackupFlag) { try { - const backupPath = createBackup(); - console.log(ok(`Backup created: ${backupPath.replace(os.homedir(), '~')}`)); + createdBackupPath = createBackup(); + console.log(ok(`Backup created: ${createdBackupPath.replace(os.homedir(), '~')}`)); console.log(''); } catch (error) { console.log(fail(`Failed to create backup: ${(error as Error).message}`)); @@ -461,7 +535,16 @@ export async function handlePersistCommand(args: string[]): Promise { } // Read existing settings and merge const existingSettings = readClaudeSettings(); - const existingEnv = (existingSettings.env as Record) || {}; + // Validate existing env is an object (not array/primitive) + const rawEnv = existingSettings.env; + let existingEnv: Record = {}; + if (rawEnv !== undefined && rawEnv !== null) { + if (typeof rawEnv !== 'object' || Array.isArray(rawEnv)) { + console.log(warn('Existing env in settings.json is not an object - it will be replaced')); + } else { + existingEnv = rawEnv as Record; + } + } const mergedSettings = { ...existingSettings, env: { @@ -474,6 +557,12 @@ export async function handlePersistCommand(args: string[]): Promise { writeClaudeSettings(mergedSettings); } catch (error) { console.log(fail(`Failed to write settings: ${(error as Error).message}`)); + if (createdBackupPath) { + console.log(''); + console.log(info(`A backup was created before this error:`)); + console.log(` ${createdBackupPath.replace(os.homedir(), '~')}`); + console.log(dim(' To restore: ccs persist --restore')); + } process.exit(1); } console.log(''); From 2af9c31643668d5955d9ea0190e5c44219013491 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Wed, 14 Jan 2026 15:07:42 +0000 Subject: [PATCH 13/15] chore(release): 7.19.2-dev.4 [skip ci] --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 0df00648..5d1e803a 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@kaitranntt/ccs", - "version": "7.19.2-dev.3", + "version": "7.19.2-dev.4", "description": "Claude Code Switch - Instant profile switching between Claude Sonnet 4.5 and GLM 4.6", "keywords": [ "cli", From 7cfd3c1f9dbd387d4fc6388382727222bd8475bd Mon Sep 17 00:00:00 2001 From: kaitranntt Date: Wed, 14 Jan 2026 10:30:50 -0500 Subject: [PATCH 14/15] fix(ci): add full CLIProxy env vars for AI review - Use /api/provider/agy endpoint for proper model routing - Set ANTHROPIC_DEFAULT_*_MODEL to route Haiku/Sonnet/Opus correctly - Disable telemetry, error reporting, bug command - Set max output/thinking tokens --- .github/workflows/ai-review.yml | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ai-review.yml b/.github/workflows/ai-review.yml index 44e37e3d..18fee2e4 100644 --- a/.github/workflows/ai-review.yml +++ b/.github/workflows/ai-review.yml @@ -69,8 +69,18 @@ jobs: # CLIProxy environment for model routing env: - ANTHROPIC_BASE_URL: http://localhost:8317 REVIEW_MODEL: gemini-claude-opus-4-5-thinking + ANTHROPIC_BASE_URL: http://localhost:8317 + ANTHROPIC_AUTH_TOKEN: ccs-internal-managed + ANTHROPIC_MODEL: gemini-claude-opus-4-5-thinking + ANTHROPIC_DEFAULT_OPUS_MODEL: gemini-claude-opus-4-5-thinking + ANTHROPIC_DEFAULT_SONNET_MODEL: gemini-claude-sonnet-4-5-thinking + ANTHROPIC_DEFAULT_HAIKU_MODEL: gemini-claude-sonnet-4-5 + DISABLE_BUG_COMMAND: "1" + DISABLE_ERROR_REPORTING: "1" + DISABLE_TELEMETRY: "1" + CLAUDE_CODE_MAX_OUTPUT_TOKENS: "64000" + MAX_THINKING_TOKENS: "32000" steps: - name: Clear Claude install locks From cafb849b0b2b34b911dadeb09ae8a5d44ba11a67 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Wed, 14 Jan 2026 15:32:37 +0000 Subject: [PATCH 15/15] chore(release): 7.19.2-dev.5 [skip ci] --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 5d1e803a..51f0a847 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@kaitranntt/ccs", - "version": "7.19.2-dev.4", + "version": "7.19.2-dev.5", "description": "Claude Code Switch - Instant profile switching between Claude Sonnet 4.5 and GLM 4.6", "keywords": [ "cli",