commit a7e77793a860fabde7a899b8fc98ad0f425cc802 Author: Kerim Atilgan Date: Fri Sep 4 17:47:07 2026 +0200 Timer-App unter Versionsverwaltung stellen Stand der laufenden Anwendung von 192.168.1.5:/opt/timer-app (systemd-Dienst timer-app, Port 3003). Zeiterfassung mit Kostenberechnung: Node/Express, SQLite, Anmeldung ausschliesslich ueber Authentik (OIDC, PKCE, RP-Logout) - der frueher vorhandene Passwort-Login ist entfernt. Nicht im Repo, bewusst: - backend/.env und die .env-Sicherung: enthalten Session-Secret und die Authentik-Zugangsdaten. Vorlage ist backend/.env.example. - data/: die Datenbank mit den echten Zeiterfassungen. - node_modules/. Co-Authored-By: Claude Opus 5 (1M context) diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..aed9d63 --- /dev/null +++ b/.gitignore @@ -0,0 +1,17 @@ +# Abhaengigkeiten +node_modules/ + +# Konfiguration mit Zugangsdaten - NIEMALS einchecken. +# Vorlage ist backend/.env.example +.env +.env.* +!.env.example + +# Laufzeitdaten: Datenbank +data/ +*.log + +# Interne Unterlagen +.claude/ + +.DS_Store diff --git a/DEPLOY.md b/DEPLOY.md new file mode 100644 index 0000000..c40e884 --- /dev/null +++ b/DEPLOY.md @@ -0,0 +1,477 @@ +# Timer App — Übergabe- und Installationsdokument + +**Für die Claude-Code-Instanz, die diese App in die Firmeninfrastruktur einbaut.** + +Stand: 03.08.2026 · Version 2.0 · Getestet auf Debian 13, Node 20.19.2 + +--- + +## 0. Das Wichtigste in 60 Sekunden + +Kleine, in sich geschlossene Node-App zur Zeiterfassung mit Kostenberechnung, +gedacht für den Einsatz im Ladengeschäft (Tresen-Tablet, mehrere Plätze parallel). + +* **Keine externen Dienste.** Kein Cloud-Backend, keine API-Keys, keine Telemetrie, + keine CDN-Einbindung. Die App macht **keine ausgehenden Netzwerkverbindungen**. +* **Keine Datenbank-Installation nötig.** SQLite, eine einzelne Datei. +* **Keine Build-Kette.** Kein Webpack, kein TypeScript, kein npm run build. + Vanilla JS im Frontend, Express im Backend. +* **Abhängigkeiten:** 6 npm-Pakete, alle etabliert (express, express-session, + express-rate-limit, sqlite3, bcrypt, dotenv). + +Realistisch: In 15 Minuten deployt, wenn die drei Stolpersteine aus Abschnitt 3 +beachtet werden. Ohne sie kann es beliebig lange dauern, weil zwei davon **stumm** +scheitern. + +--- + +## 1. Was die App fachlich tut + +Ein Mitarbeiter startet am Tresen einen Timer, optional mit einem Namen +(„Tisch 2", „Herr Müller", „Reparatur Werkbank"). Die App zählt die Zeit und +rechnet daraus laufend einen Betrag aus. Beim Beenden wandert der Vorgang in die +Historie und kann später als CSV exportiert werden. + +**Abrechnungsregel:** Jede *angefangene* Einheit wird voll berechnet. +Standard ist 10 € pro 10 Minuten, im Menü „Einstellungen" änderbar. + +| Dauer | Betrag (bei 10 €/10 Min) | +|---|---| +| 1 Sekunde | 10 € | +| 10 Minuten | 10 € | +| 10 Min 1 Sek | 20 € | +| 25 Minuten | 30 € | +| 60 Minuten | 60 € | + +Diese Regel ist bewusst so — sie war die fachliche Vorgabe. Falls im Betrieb +minutengenau abgerechnet werden soll, ist das eine Änderung an genau einer +Funktion (`calcAmount`, siehe Abschnitt 7). + +--- + +## 2. Architektur — und warum sie so ist + +### Timer leben auf dem Server, nicht im Browser + +Das ist die zentrale Designentscheidung und der Grund für die meisten +Endpunkte. Ein laufender Timer ist eine Zeile in der Tabelle `active_timers`, +kein JavaScript-Objekt im Browser. + +Was das im Ladenalltag bedeutet: + +| Situation | Verhalten | +|---|---| +| Tab wird versehentlich geschlossen | Timer läuft weiter, ist nach erneutem Öffnen da | +| F5 / Seite neu geladen | Timer läuft weiter | +| Tablet-Akku leer, Neustart | Timer läuft weiter | +| Kollege schaut am zweiten Gerät nach | sieht dieselben Timer live | +| Dienst wird neu gestartet (Update) | Timer läuft weiter, **Anmeldung bleibt auch bestehen** | +| Browser über Nacht zu | Zeit läuft weiter wie eine Wanduhr | + +**Der letzte Punkt ist eine bewusste fachliche Entscheidung:** Ein laufender +Timer zählt die reale verstrichene Zeit, weil der Kunde ja tatsächlich weiter +im Laden sitzt. Wer die Zeit anhalten will, drückt „Pause". Falls das für den +Firmeneinsatz anders gewünscht ist, siehe Abschnitt 9. + +Der Browser zählt zwischen zwei Server-Abgleichen nur lokal hoch, damit die +Anzeige flüssig läuft (alle 250 ms). Abgeglichen wird alle 15 Sekunden und +zusätzlich sofort, wenn der Tab wieder sichtbar wird. Beim Rechnen wird bewusst +nur mit *Zeitdifferenzen* gearbeitet, nie mit absoluten Zeitstempeln — so ist +eine falsch gestellte Uhr auf dem Tablet unerheblich. + +### Der Betrag entsteht auf dem Server + +Der Browser berechnet den Betrag nur für die Anzeige. Was in die Historie +geschrieben wird, rechnet ausschließlich der Server (`POST /api/timers/:id/stop`). +Ein manipulierter Client kann den gespeicherten Betrag nicht beeinflussen. + +### Eigener Sitzungsspeicher + +`express-session` legt Sitzungen standardmäßig im Arbeitsspeicher ab — nach jedem +Neustart müssten sich alle Geräte neu anmelden. Da die Timer den Neustart +überleben, wäre das ein Bruch im Ablauf. Deshalb steckt in `server.js` eine +kleine `SqliteSessionStore`-Klasse (~50 Zeilen), die Sitzungen in derselben +SQLite-Datei ablegt. **Bewusst ohne Zusatzpaket**, um die Abhängigkeitsliste +kurz zu halten. + +--- + +## 3. Die drei Stolpersteine — bitte zuerst lesen + +### 3.1 `COOKIE_SECURE` (scheitert stumm!) + +In der `.env` steht standardmäßig `COOKIE_SECURE=true`. Das heißt: Der Browser +nimmt das Sitzungs-Cookie **nur über HTTPS** an. + +**Symptom bei falscher Einstellung:** Das Passwort wird akzeptiert (die API +antwortet mit `200`), aber der Nutzer landet sofort wieder auf der Login-Maske. +Endlosschleife, keine Fehlermeldung, nichts im Log. + +| Deployment | Einstellung | +|---|---| +| Über Reverse Proxy mit HTTPS (`https://timer.firma.de`) | `COOKIE_SECURE=true` | +| Intern ohne TLS (`http://192.168.1.50:3003`) | `COOKIE_SECURE=false` | +| Über `http://localhost` zum Testen | `COOKIE_SECURE=false` | + +### 3.2 `HOST` — Bindeadresse + +Standard ist `HOST=127.0.0.1`. Die App ist dann **nur lokal** erreichbar, was +richtig ist, wenn ein Reverse Proxy davorsteht. + +Ohne Reverse Proxy (App direkt im LAN): `HOST=0.0.0.0` setzen, sonst kommt kein +anderes Gerät heran. Dann aber unbedingt auch `COOKIE_SECURE=false` (siehe oben) +und `TRUST_PROXY=false`. + +### 3.3 `node_modules` nicht kopieren + +Das Paket `sqlite3` enthält kompilierte native Binärdateien. Ein aus dieser ZIP +oder von einem anderen Rechner kopiertes `node_modules` führt zu +`Error: invalid ELF header` oder `Module did not self-register`. + +**Immer** auf dem Zielsystem installieren: + +```bash +cd backend +npm ci # bevorzugt, nutzt package-lock.json +# oder: npm install +``` + +Falls `npm ci` mangels Compiler scheitert (`node-gyp`-Fehler), fehlen die +Build-Werkzeuge: + +```bash +# Debian/Ubuntu +apt-get install -y python3 make g++ +# RHEL/Alma +dnf install -y python3 make gcc-c++ +``` + +--- + +## 4. Installation Schritt für Schritt + +```bash +# 1. Entpacken +unzip timer-app.zip -d /opt/ +cd /opt/timer-app + +# 2. Abhängigkeiten (auf dem Zielsystem bauen!) +cd backend +npm ci + +# 3. Konfiguration anlegen +cp .env.example .env + +# 4. Zufallswert für SESSION_SECRET erzeugen +npm run gen-secret +# -> Ausgabe in die .env bei SESSION_SECRET eintragen + +# 5. Passwort-Hash erzeugen +npm run hash-password -- "EuerPasswort" +# -> Ausgabe in die .env bei PASSWORD_HASH eintragen + +# 6. Datenverzeichnis sicherstellen +mkdir -p ../data + +# 7. Testlauf im Vordergrund +node server.js +# Erwartete Ausgabe: +# Timer App laeuft auf http://127.0.0.1:3003 +# Datenbank verbunden: .../data/timer.db +# Standardtarif gesetzt: 10 EUR pro 10 Minuten +# Datenbank bereit + +# 8. Prüfen +curl http://127.0.0.1:3003/health +``` + +Die App **bricht beim Start bewusst ab**, wenn `SESSION_SECRET` oder das +Passwort fehlen — lieber laut scheitern als unsicher laufen. + +--- + +## 5. Konfiguration (`.env`) + +| Variable | Standard | Bedeutung | +|---|---|---| +| `PORT` | `3003` | Lauschender Port | +| `HOST` | `127.0.0.1` | Bindeadresse — siehe 3.2 | +| `TRUST_PROXY` | `1` | Anzahl Proxy-Ebenen davor; ohne Proxy `false` | +| `COOKIE_SECURE` | `true` | Cookie nur über HTTPS — siehe 3.1 | +| `SESSION_SECRET` | — | **Pflicht.** Zufallswert, `npm run gen-secret` | +| `PASSWORD_HASH` | — | bcrypt-Hash, `npm run hash-password -- "…"` | +| `PASSWORD` | — | Notfall-Alternative im Klartext; App warnt beim Start | +| `LOGIN_MAX_ATTEMPTS` | `20` | Anmeldeversuche pro Zeitfenster | +| `LOGIN_WINDOW_MIN` | `15` | Länge des Zeitfensters in Minuten | +| `DB_PATH` | `../data/timer.db` | Pfad zur SQLite-Datei | +| `RATE_PER_10MIN` | `10` | **Nur beim allerersten Start.** Danach steht der Tarif in der Datenbank und wird über die Oberfläche gepflegt. | + +`SESSION_SECRET` muss ein *echter* Zufallswert sein. In der Vorgängerversion +stand dort versehentlich der literale Text `$(openssl rand -base64 32)` — die +Befehlssubstitution war beim Anlegen der Datei nie ausgeführt worden. Mit einem +erratbaren Secret lassen sich Sitzungs-Cookies fälschen und die Anmeldung +umgehen. Deshalb: Wert immer mit `npm run gen-secret` erzeugen, nie von Hand +ausdenken, nie aus einer Doku kopieren. + +--- + +## 6. Betrieb + +### systemd-Unit + +Vorlage liegt bei unter `deploy/timer-app.service`. Anpassen: `WorkingDirectory`, +`User`, ggf. `ExecStart`-Pfad zu node. + +```bash +cp deploy/timer-app.service /etc/systemd/system/ +systemctl daemon-reload +systemctl enable --now timer-app +systemctl status timer-app +journalctl -u timer-app -f +``` + +Die Unit läuft in der Vorlage als eigener Benutzer (nicht root) und enthält +die üblichen Härtungsoptionen. Wenn ein eigener Benutzer angelegt wird, muss +ihm das `data/`-Verzeichnis gehören: + +```bash +useradd --system --no-create-home --shell /usr/sbin/nologin timerapp +chown -R timerapp:timerapp /opt/timer-app/data +chown timerapp:timerapp /opt/timer-app/backend/.env +chmod 600 /opt/timer-app/backend/.env +``` + +### Reverse Proxy + +Beispiele liegen bei: `deploy/Caddyfile.example` und `deploy/nginx.conf.example`. + +Wichtig in beiden Fällen: +* `X-Forwarded-Proto` durchreichen (sonst greift `trust proxy` nicht richtig) +* `/health` ist der Endpunkt für Health-Checks (antwortet **ohne** Anmeldung) +* Websockets werden **nicht** gebraucht + +### Backup + +Alles Wichtige steckt in **einer Datei**: `data/timer.db`. + +```bash +# konsistente Sicherung im laufenden Betrieb (WAL-Modus ist aktiv!) +sqlite3 /opt/timer-app/data/timer.db ".backup '/backup/timer-$(date +%F).db'" +``` + +⚠️ **Nicht** einfach `cp` auf eine laufende Datenbank — im WAL-Modus kann eine +so erzeugte Kopie unvollständig sein. Entweder `.backup` benutzen (wie oben) +oder den Dienst vorher stoppen. + +Die `.env` gehört ebenfalls ins Backup (enthält Secret und Passwort-Hash), +aber getrennt und mit engeren Rechten. + +--- + +## 7. Aufbau des Codes + +``` +timer-app/ +├── DEPLOY.md ← dieses Dokument +├── README.md ← Kurzanleitung für Anwender +├── backend/ +│ ├── server.js ← die gesamte Server-Logik (~470 Zeilen) +│ ├── package.json +│ ├── package-lock.json +│ ├── .env.example +│ └── tools/hash-password.js ← Hilfsskript für den Passwort-Hash +├── frontend/ +│ ├── index.html ← Markup + komplettes CSS +│ ├── app.js ← Oberflächenlogik +│ ├── logo.png ← ⚠️ Firmenlogo, ggf. austauschen +│ └── favicon.jpg +└── deploy/ + ├── timer-app.service + ├── Caddyfile.example + └── nginx.conf.example +``` + +`server.js` ist in beschriftete Abschnitte gegliedert (Konfiguration, Datenbank, +Tarif & Berechnung, Sitzungsspeicher, Auth, Timer, Einstellungen, Historie). + +### Datenmodell + +```sql +-- Laufende Timer: eine Zeile pro Platz/Kunde +active_timers( + id, customer_name, started_at, accumulated_ms, is_running, created_at +) +-- started_at: ms-Zeitstempel des letzten Starts/Fortsetzens (NULL bei Pause) +-- accumulated_ms: vor der aktuellen Laufphase gesammelte Zeit +-- Vergangene Zeit = accumulated_ms + (jetzt - started_at), falls is_running + +-- Abgeschlossene Vorgänge +sessions( + id, session_id, start_time, end_time, duration, amount, + customer_name, rate_amount, rate_interval, created_at +) +-- rate_amount/rate_interval halten fest, welcher Tarif beim Beenden galt, +-- damit eine spätere Tarifänderung alte Belege nicht rückwirkend verändert. +-- created_at ist in SEKUNDEN, alle anderen Zeiten in MILLISEKUNDEN (historisch). + +settings(key, value) -- rate_amount, rate_interval +user_sessions(sid, expires, data) -- Anmelde-Sitzungen +``` + +Das Schema wird beim Start **automatisch migriert** (`ALTER TABLE ADD COLUMN`, +nur falls Spalte fehlt). Eine Datenbank der Vorgängerversion kann direkt +weiterverwendet werden; getestet mit 21 Altdatensätzen, die unverändert erhalten +blieben und in der Oberfläche als „ohne Namen" erscheinen. + +### Die Abrechnungsregel ändern + +Genau eine Funktion in `server.js`, plus die gleichnamige in `app.js` für +die Anzeige: + +```js +function calcAmount(ms, rateAmount, rateInterval) { + if (!ms || ms <= 0) return 0; + const minutes = Math.ceil(ms / 60000); // angefangene Minute + const units = Math.ceil(minutes / rateInterval); // angefangene Einheit + return Math.round(units * rateAmount * 100) / 100; +} +``` + +Für minutengenaue Abrechnung z. B.: +`return Math.round((ms / 60000) * (rateAmount / rateInterval) * 100) / 100;` + +--- + +## 8. API-Referenz + +Alle Endpunkte außer `/health`, `/api/login`, `/api/auth/status` und +`/api/logout` erfordern eine gültige Sitzung (sonst `401`). + +| Methode | Pfad | Zweck | +|---|---|---| +| `POST` | `/api/login` | `{password}` → Sitzung | +| `GET` | `/api/auth/status` | `{authenticated: bool}` | +| `POST` | `/api/logout` | Sitzung beenden | +| `GET` | `/api/timers` | alle laufenden Timer + aktueller Tarif | +| `POST` | `/api/timers` | `{customerName}` → neuer Timer | +| `PATCH` | `/api/timers/:id` | `{customerName}` umbenennen | +| `POST` | `/api/timers/:id/pause` | anhalten | +| `POST` | `/api/timers/:id/resume` | fortsetzen | +| `POST` | `/api/timers/:id/stop` | beenden **und** in Historie speichern | +| `DELETE` | `/api/timers/:id` | verwerfen, **nichts** speichern | +| `GET` | `/api/settings` | Tarif lesen | +| `PUT` | `/api/settings` | `{rateAmount, rateInterval}` | +| `GET` | `/api/sessions` | Historie; Parameter `from`, `to`, `q`, `limit`, `offset` | +| `DELETE` | `/api/sessions/:id` | Eintrag löschen | +| `GET` | `/api/sessions/export.csv` | CSV; gleiche Filterparameter | +| `GET` | `/health` | Status, ohne Anmeldung | + +`from`/`to` sind Datumsangaben `YYYY-MM-DD` und werden in der **Zeitzone des +Servers** ausgewertet. Wenn Server und Laden in verschiedenen Zeitzonen stehen, +`TZ=Europe/Berlin` in der systemd-Unit setzen. + +Die CSV ist für deutsches Excel vorbereitet: Semikolon als Trenner, UTF-8-BOM +(damit Umlaute stimmen), Komma als Dezimaltrennzeichen. + +--- + +## 9. Bekannte Grenzen — bewusst so gelassen + +Diese Punkte sind **keine Fehler**, sondern Entscheidungen. Sie stehen hier, +damit sie bei Bedarf eingeordnet werden können. + +| Thema | Aktueller Stand | Wenn die Firma mehr braucht | +|---|---|---| +| **Ein gemeinsames Passwort** | Alle teilen sich ein Passwort, keine Benutzerkonten, keine 2FA | Für „wer hat welchen Vorgang erfasst" wären echte Konten nötig. Der Sitzungsspeicher liegt bereits in der DB, eine `users`-Tabelle wäre der nächste Schritt. | +| **Jeder sieht alles** | Wer angemeldet ist, sieht alle Timer und die gesamte Historie | Im Ladenbetrieb gewollt (Kollege übernimmt die Schicht). Mandantentrennung wäre ein größerer Umbau. | +| **Kein Audit-Log** | Löschen eines Historien-Eintrags ist endgültig und wird nicht protokolliert | Falls die Erfassung abrechnungsrelevant wird, ist ein `deleted_at` statt echtem Löschen sinnvoll (GoBD-Thema — bitte fachlich klären). | +| **Wanduhr-Verhalten** | Ein laufender Timer zählt auch nachts weiter | Wenn stattdessen automatisch pausiert werden soll: eine Obergrenze in `elapsedMs()` einbauen oder einen nächtlichen Auto-Pause-Job. | +| **Keine Mehrprozess-Fähigkeit** | Ein Node-Prozess, SQLite | Für die erwartete Last (ein Laden, wenige Geräte) um Größenordnungen ausreichend. Bei mehreren Filialen: PostgreSQL und echte Benutzerverwaltung. | +| **Logo** | `frontend/logo.png` ist das Logo des bisherigen Einsatzorts, 654 KB | Austauschen und dabei gern verkleinern (~50 KB reichen). Ebenso `favicon.jpg`. Der Seitentitel steht in `index.html` (``). | +| **Zeitzone** | Server-Zeitzone bestimmt Tagesgrenzen im Filter | `TZ` in der Unit setzen | + +--- + +## 10. Fehlersuche + +| Symptom | Ursache | Lösung | +|---|---|---| +| Login akzeptiert, springt zurück zur Maske | `COOKIE_SECURE=true` ohne HTTPS | `COOKIE_SECURE=false` oder TLS davor | +| Von anderen Geräten nicht erreichbar | `HOST=127.0.0.1` ohne Proxy | `HOST=0.0.0.0` | +| `Error: invalid ELF header` | fremdes `node_modules` | löschen, `npm ci` | +| `node-gyp`-Fehler bei `npm ci` | Build-Werkzeuge fehlen | `apt install python3 make g++` | +| `FATAL: SESSION_SECRET ist nicht gesetzt` | `.env` fehlt/unvollständig | Abschnitt 4, Schritt 3–5 | +| `SQLITE_CANTOPEN` | `data/` fehlt oder Rechte | `mkdir -p data && chown` | +| Zeiten wirken um Stunden verschoben | Server-Zeitzone | `TZ=Europe/Berlin` in der Unit | +| Alle ausgeloggt nach Neustart | sollte **nicht** passieren | prüfen, ob `user_sessions` in der DB existiert | + +Diagnose-Einstieg: + +```bash +systemctl status timer-app +journalctl -u timer-app -n 50 --no-pager +curl -s http://127.0.0.1:3003/health +sqlite3 data/timer.db "select count(*) from sessions; select * from active_timers;" +``` + +--- + +## 11. Sicherheit — Stand und Empfehlungen + +Vorhanden: +* Passwort als bcrypt-Hash (Kostenfaktor 12), nicht im Klartext im Code +* Sitzungs-ID wird beim Login neu vergeben (kein Session-Fixation) +* Cookie `httpOnly`, `sameSite=lax`, optional `secure` +* Ratenbegrenzung auf dem Login (20 Versuche / 15 Min, konfigurierbar) +* Alle SQL-Zugriffe mit gebundenen Parametern (keine String-Verkettung) +* Ausgabe im Frontend wird escaped (kein `innerHTML` mit Rohdaten aus der DB) +* Beträge werden serverseitig berechnet + +Vor dem Produktivgang zu klären: +1. **Erreichbarkeit.** Muss die App aus dem Internet erreichbar sein oder reicht + das Firmen-LAN/VPN? Ein gemeinsames Passwort ohne 2FA gehört nach Möglichkeit + nicht offen ins Internet. +2. **Passwort wechseln.** Der Hash in dieser ZIP ist **nicht** gesetzt — + `.env.example` enthält keinen. Neu erzeugen (Abschnitt 4). +3. **TLS.** Wenn öffentlich erreichbar: Reverse Proxy mit Zertifikat und + `COOKIE_SECURE=true`. +4. **Personenbezug.** Sobald echte Kundennamen eingetippt werden, sind das + personenbezogene Daten — Aufbewahrungsdauer und Löschkonzept mit der + zuständigen Stelle klären. Ein Löschbefehl für alte Einträge: + ```sql + DELETE FROM sessions WHERE created_at < strftime('%s','now','-90 days'); + ``` + +--- + +## 12. Was beim letzten Umbau geändert wurde (03.08.2026) + +Für den Fall, dass jemand die Vorgängerversion kennt: + +* Timer laufen jetzt serverseitig statt im Browser — überleben Reload, Neustart + und Gerätewechsel *(vorher ging bei F5 die gesamte Zeit verloren)* +* Mehrere Timer gleichzeitig, jeder mit eigenem Namen *(vorher genau einer)* +* Tarif serverseitig und geräteübergreifend *(vorher `localStorage`, pro Browser + unterschiedlich, und der Betrag kam vom Client)* +* Historie mit Datums- und Namensfilter, Seitenweise-Nachladen, Löschen-Knopf, + CSV-Export *(vorher: fest 100 Einträge, kein Filter, Löschen nur über die DB)* +* Anmeldung mit bcrypt statt Klartextvergleich; kein fest eingebautes + Ersatzpasswort mehr im Quelltext +* Sitzungen überleben Neustarts +* `HOST`, `COOKIE_SECURE`, `TRUST_PROXY`, `DB_PATH` konfigurierbar +* Kein Google-Fonts-Abruf mehr — die Schrift kam vorher bei jedem Seitenaufruf + von einem externen Server, was in Firmennetzen blockiert sein kann und + datenschutzrechtlich unnötig Angriffsfläche bietet. Jetzt System-Schriften. +* Sauberes Herunterfahren bei SIGTERM, WAL-Modus, Index auf `created_at` + +Getestet: 36 automatisierte Prüfungen (Anmeldung, Parallelbetrieb, Pause/Weiter, +Neustart-Persistenz mit echtem Prozesswechsel, Speichern/Verwerfen, Tarifwechsel, +CSV, Filter, Löschen, Abmelden) sowie ein Durchlauf im echten Browser. + +--- + +## 13. Wenn etwas unklar ist + +Die App ist klein genug, um sie vollständig zu lesen: `server.js` ~470 Zeilen, +`app.js` ~460 Zeilen, beide durchgehend kommentiert und auf Deutsch beschriftet. +Im Zweifel ist das Lesen der Quelle schneller als das Raten. diff --git a/README.md b/README.md new file mode 100644 index 0000000..b5d200a --- /dev/null +++ b/README.md @@ -0,0 +1,73 @@ +# Timer — Zeiterfassung + +Zeiterfassung mit automatischer Kostenberechnung für den Einsatz im Laden. + +> **Installation und Technik:** siehe [DEPLOY.md](DEPLOY.md). +> Diese Datei ist die Kurzanleitung für die tägliche Bedienung. + +--- + +## Anmelden + +Seite im Browser öffnen, Passwort eingeben. Die Anmeldung gilt 24 Stunden und +verlängert sich bei Benutzung — ein Tablet am Tresen muss also nicht täglich neu +angemeldet werden. + +## Timer starten + +Oben optional einen Namen eintippen — zum Beispiel „Tisch 2", „Herr Müller" oder +„Reparatur Werkbank" — und auf **▶ Neuer Timer** klicken. + +Es können **beliebig viele Timer gleichzeitig** laufen, einer je Platz oder Kunde. +Jeder bekommt eine eigene Karte mit Zeit und laufendem Betrag. Der Name lässt +sich jederzeit nachträglich ändern, einfach im Feld überschreiben. + +## Während der Timer läuft + +| Knopf | Wirkung | +|---|---| +| **❚❚ Pause** | Zeit anhalten, Betrag friert ein | +| **▶ Weiter** | pausierten Timer fortsetzen | +| **✓ Beenden** | Vorgang abschließen und in der Historie speichern | +| **✕ Verwerfen** | Timer wegwerfen, **nichts** wird gespeichert | + +Vor dem Beenden und dem Verwerfen kommt eine Rückfrage mit Zeit und Betrag. + +### Was passiert, wenn … + +* **… der Browser geschlossen wird?** Nichts. Der Timer läuft auf dem Server + weiter und ist beim nächsten Öffnen wieder da. +* **… das Tablet neu startet?** Ebenfalls nichts — einfach wieder aufrufen. +* **… ein Kollege am zweiten Gerät nachschaut?** Er sieht dieselben Timer live. +* **… über Nacht vergessen wurde zu stoppen?** Der Timer zählt weiter, wie eine + Wanduhr. Die Karte zeigt, seit wann er läuft. Wer die Zeit korrigieren will, + verwirft den Timer und erfasst ihn neu. + +## Historie + +Unter **📊 Historie** stehen alle abgeschlossenen Vorgänge mit Datum, Name, +Dauer und Betrag. Oben summieren drei Kacheln den gewählten Zeitraum. + +* Filter nach **Von/Bis-Datum** und nach **Name** +* Schnellauswahl **Heute** und **Dieser Monat** +* **⬇ CSV-Export** lädt genau die gefilterte Auswahl herunter — die Datei lässt + sich direkt in Excel öffnen, Umlaute und Beträge stimmen +* Das **🗑**-Symbol löscht einen Eintrag endgültig (mit Rückfrage) + +## Einstellungen + +Unter **⚙️ Einstellungen** wird der Tarif festgelegt: Betrag und Intervall, +zum Beispiel „10 € pro 10 Minuten". Die Vorschau rechnet Beispiele durch. + +Wichtig zu wissen: + +* **Jede angefangene Einheit wird voll berechnet.** 10 Minuten und 1 Sekunde + kosten bei einem 10-Minuten-Takt bereits zwei Einheiten. +* Der Tarif gilt für **alle Geräte gemeinsam**. +* Eine Änderung wirkt sofort auf laufende und neue Timer. Bereits gespeicherte + Einträge in der Historie behalten den Tarif, der beim Beenden galt. + +## Abmelden + +**🚪 Abmelden** meldet nur dieses Gerät ab. Laufende Timer bleiben davon +unberührt und laufen weiter. diff --git a/backend/.env.example b/backend/.env.example new file mode 100644 index 0000000..abf29f8 --- /dev/null +++ b/backend/.env.example @@ -0,0 +1,57 @@ +# =========================================================================== +# Timer App - Konfiguration +# Diese Datei nach ".env" kopieren und ausfuellen. Die .env gehoert NICHT +# in die Versionsverwaltung. +# =========================================================================== + +# --- Netzwerk -------------------------------------------------------------- + +PORT=3003 + +# Auf welcher Adresse gelauscht wird. +# 127.0.0.1 = nur lokal erreichbar -> RICHTIG, wenn ein Reverse Proxy +# (nginx, Caddy, Traefik) davorsteht +# 0.0.0.0 = im ganzen Netz erreichbar -> nur ohne Reverse Proxy, und dann +# bitte COOKIE_SECURE=false beachten (siehe unten) +HOST=127.0.0.1 + +# Anzahl der Proxy-Ebenen davor. Bei genau einem Reverse Proxy: 1. +# Ohne Reverse Proxy: false +TRUST_PROXY=1 + +# --- Sicherheit ------------------------------------------------------------ + +# ACHTUNG, haeufigste Fehlerquelle beim Deployment: +# true -> Cookie wird NUR ueber HTTPS gesetzt. Laeuft die App ueber http://, +# scheitert der Login STUMM (Passwort wird akzeptiert, aber die +# Sitzung kommt nie zustande). +# false -> auch ueber http:// nutzbar. Nur im internen Netz vertretbar. +COOKIE_SECURE=true + +# Zufaelliger Wert, unterschreibt die Sitzungs-Cookies. +# Erzeugen mit: npm run gen-secret +SESSION_SECRET=HIER_EINEN_ZUFALLSWERT_EINSETZEN + +# Passwort fuer die Anmeldung. ZWEI Wege - bitte den ersten waehlen: +# +# 1) EMPFOHLEN: bcrypt-Hash. Erzeugen mit: +# npm run hash-password -- "MeinPasswort" +PASSWORD_HASH= + +# 2) Notfalls Klartext. Wird beim Start gehasht, steht aber lesbar in dieser +# Datei. Der Server warnt beim Start. Nur eins von beiden setzen. +#PASSWORD= + +# Anmeldeversuche pro Zeitfenster (Schutz gegen Durchprobieren) +LOGIN_MAX_ATTEMPTS=20 +LOGIN_WINDOW_MIN=15 + +# --- Daten ----------------------------------------------------------------- + +# Pfad zur SQLite-Datei. Standard: ../data/timer.db relativ zum backend/. +# Das Verzeichnis muss existieren und fuer den Dienst-Benutzer schreibbar sein. +#DB_PATH=/var/lib/timer-app/timer.db + +# Nur beim allerersten Start relevant: setzt den Anfangstarif. +# Danach wird der Tarif in der Datenbank gepflegt (Menue "Einstellungen"). +RATE_PER_10MIN=10 diff --git a/backend/oidc.js b/backend/oidc.js new file mode 100644 index 0000000..e699b2c --- /dev/null +++ b/backend/oidc.js @@ -0,0 +1,107 @@ +// --------------------------------------------------------------------------- +// Authentik-Anbindung (OpenID Connect) — gleiches Muster wie das VVL-Tool. +// +// openid-client v6 ist ESM-only, diese App ist CommonJS. Deshalb wird das +// Modul einmalig per dynamischem import() geladen und zwischengespeichert. +// Ist OIDC nicht konfiguriert (Variablen fehlen), bleibt der Passwort-Login +// aktiv und diese Funktionen melden "nicht bereit". +// --------------------------------------------------------------------------- + +const ISSUER = process.env.OIDC_ISSUER || ''; +const CLIENT_ID = process.env.OIDC_CLIENT_ID || ''; +const CLIENT_SECRET = process.env.OIDC_CLIENT_SECRET || ''; +const REDIRECT_URI = process.env.OIDC_REDIRECT_URI || ''; +const ALLOW_INSECURE = String(process.env.OIDC_ALLOW_INSECURE || '') === 'true'; +const SCOPE = 'openid profile email'; + +let oidc = null; // das openid-client-Modul (via dynamic import) +let oidcConfig = null; // Ergebnis der Discovery + +function isConfigured() { + return Boolean(ISSUER && CLIENT_ID && CLIENT_SECRET && REDIRECT_URI); +} + +function isReady() { + return oidcConfig !== null; +} + +/** Discovery beim Serverstart. Wirft nicht — der Server startet auch, wenn + * Authentik gerade nicht erreichbar ist (Login schlaegt dann fehl). */ +async function init() { + if (!isConfigured()) { + console.warn('[oidc] Authentik nicht konfiguriert (OIDC_ISSUER/CLIENT_ID/CLIENT_SECRET/REDIRECT_URI) — nur Passwort-Login aktiv.'); + return; + } + try { + oidc = await import('openid-client'); + oidcConfig = await oidc.discovery( + new URL(ISSUER), + CLIENT_ID, + CLIENT_SECRET, + undefined, + ALLOW_INSECURE ? { execute: [oidc.allowInsecureRequests] } : undefined + ); + console.log('[oidc] Discovery erfolgreich:', ISSUER); + } catch (err) { + console.error('[oidc] Discovery fehlgeschlagen:', err.message || err); + } +} + +/** Baut die Weiterleitungs-URL zu Authentik (PKCE). */ +async function buildLoginUrl() { + if (!oidcConfig) throw new Error('OIDC nicht initialisiert'); + const codeVerifier = oidc.randomPKCECodeVerifier(); + const codeChallenge = await oidc.calculatePKCECodeChallenge(codeVerifier); + const state = oidc.randomState(); + const url = oidc.buildAuthorizationUrl(oidcConfig, { + redirect_uri: REDIRECT_URI, + scope: SCOPE, + code_challenge: codeChallenge, + code_challenge_method: 'S256', + state, + }); + return { url: url.href, codeVerifier, state }; +} + +/** Tauscht den Code gegen Tokens und liefert die Nutzer-Claims. */ +async function handleCallback(currentUrl, codeVerifier, state) { + if (!oidcConfig) throw new Error('OIDC nicht initialisiert'); + const tokens = await oidc.authorizationCodeGrant(oidcConfig, currentUrl, { + pkceCodeVerifier: codeVerifier, + expectedState: state, + }); + const claims = tokens.claims(); + if (!claims || !claims.sub) throw new Error('ID-Token ohne sub-Claim'); + return { + user: { + sub: claims.sub, + username: claims.preferred_username || claims.sub, + displayName: claims.name || claims.preferred_username || null, + email: claims.email || null, + }, + idToken: tokens.id_token || '', + }; +} + +/** RP-Initiated Logout: beendet auch die Authentik-Sitzung. Liefert null, + * wenn kein end_session_endpoint vorhanden oder OIDC nicht bereit ist. */ +function buildLogoutUrl(idToken) { + if (!oidcConfig) return null; + try { + const params = { post_logout_redirect_uri: new URL(REDIRECT_URI).origin + '/' }; + if (idToken) params.id_token_hint = idToken; + return oidc.buildEndSessionUrl(oidcConfig, params).href; + } catch { + return null; + } +} + +module.exports = { + init, + isReady, + isConfigured, + buildLoginUrl, + handleCallback, + buildLogoutUrl, + REDIRECT_URI, +}; diff --git a/backend/package-lock.json b/backend/package-lock.json new file mode 100644 index 0000000..0ceb8db --- /dev/null +++ b/backend/package-lock.json @@ -0,0 +1,2352 @@ +{ + "name": "timer-app-backend", + "version": "2.0.0", + "lockfileVersion": 3, + "requires": true, + "packages": { + "": { + "name": "timer-app-backend", + "version": "2.0.0", + "dependencies": { + "bcrypt": "^5.1.1", + "dotenv": "^16.3.1", + "express": "^4.18.2", + "express-rate-limit": "^8.5.2", + "express-session": "^1.17.3", + "openid-client": "^6.8.4", + "sqlite3": "^5.1.6" + }, + "engines": { + "node": ">=18" + } + }, + "node_modules/@gar/promisify": { + "version": "1.1.3", + "resolved": "https://registry.npmjs.org/@gar/promisify/-/promisify-1.1.3.tgz", + "integrity": "sha512-k2Ty1JcVojjJFwrg/ThKi2ujJ7XNLYaFGNB/bWT9wGR+oSMJHMa5w+CUq6p/pVrKeNNgA7pCqEcjSnHVoqJQFw==", + "optional": true + }, + "node_modules/@mapbox/node-pre-gyp": { + "version": "1.0.11", + "resolved": "https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz", + "integrity": "sha512-Yhlar6v9WQgUp/He7BdgzOz8lqMQ8sU+jkCq7Wx8Myc5YFJLbEe7lgui/V7G1qB1DJykHSGwreceSaD60Y0PUQ==", + "dependencies": { + "detect-libc": "^2.0.0", + "https-proxy-agent": "^5.0.0", + "make-dir": "^3.1.0", + "node-fetch": "^2.6.7", + "nopt": "^5.0.0", + "npmlog": "^5.0.1", + "rimraf": "^3.0.2", + "semver": "^7.3.5", + "tar": "^6.1.11" + }, + "bin": { + "node-pre-gyp": "bin/node-pre-gyp" + } + }, + "node_modules/@npmcli/fs": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/@npmcli/fs/-/fs-1.1.1.tgz", + "integrity": "sha512-8KG5RD0GVP4ydEzRn/I4BNDuxDtqVbOdm8675T49OIG/NGhaK0pjPX7ZcDlvKYbA+ulvVK3ztfcF4uBdOxuJbQ==", + "optional": true, + "dependencies": { + "@gar/promisify": "^1.0.1", + "semver": "^7.3.5" + } + }, + "node_modules/@npmcli/move-file": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/@npmcli/move-file/-/move-file-1.1.2.tgz", + "integrity": "sha512-1SUf/Cg2GzGDyaf15aR9St9TWlb+XvbZXWpDx8YKs7MLzMH/BCeopv+y9vzrzgkfykCGuWOlSu3mZhj2+FQcrg==", + "deprecated": "This functionality has been moved to @npmcli/fs", + "optional": true, + "dependencies": { + "mkdirp": "^1.0.4", + "rimraf": "^3.0.2" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/@tootallnate/once": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/@tootallnate/once/-/once-1.1.2.tgz", + "integrity": "sha512-RbzJvlNzmRq5c3O09UipeuXno4tA1FE6ikOjxZK0tuxVv3412l64l5t1W5pj4+rJq9vpkm/kwiR07aZXnsKPxw==", + "optional": true, + "engines": { + "node": ">= 6" + } + }, + "node_modules/abbrev": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz", + "integrity": "sha512-nne9/IiQ/hzIhY6pdDnbBtz7DjPTKrY00P/zvPSm5pOFkl6xuGrGnXn/VtTNNfNtAfZ9/1RtehkszU9qcTii0Q==" + }, + "node_modules/accepts": { + "version": "1.3.8", + "resolved": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz", + "integrity": "sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==", + "dependencies": { + "mime-types": "~2.1.34", + "negotiator": "0.6.3" + }, + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/agent-base": { + "version": "6.0.2", + "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz", + "integrity": "sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==", + "dependencies": { + "debug": "4" + }, + "engines": { + "node": ">= 6.0.0" + } + }, + "node_modules/agent-base/node_modules/debug": { + "version": "4.4.3", + "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz", + "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==", + "dependencies": { + "ms": "^2.1.3" + }, + "engines": { + "node": ">=6.0" + }, + "peerDependenciesMeta": { + "supports-color": { + "optional": true + } + } + }, + "node_modules/agent-base/node_modules/ms": { + "version": "2.1.3", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz", + "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==" + }, + "node_modules/agentkeepalive": { + "version": "4.6.0", + "resolved": "https://registry.npmjs.org/agentkeepalive/-/agentkeepalive-4.6.0.tgz", + "integrity": "sha512-kja8j7PjmncONqaTsB8fQ+wE2mSU2DJ9D4XKoJ5PFWIdRMa6SLSN1ff4mOr4jCbfRSsxR4keIiySJU0N9T5hIQ==", + "optional": true, + "dependencies": { + "humanize-ms": "^1.2.1" + }, + "engines": { + "node": ">= 8.0.0" + } + }, + "node_modules/aggregate-error": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/aggregate-error/-/aggregate-error-3.1.0.tgz", + "integrity": "sha512-4I7Td01quW/RpocfNayFdFVk1qSuoh0E7JrbRJ16nH01HhKFQ88INq9Sd+nd72zqRySlr9BmDA8xlEJ6vJMrYA==", + "optional": true, + "dependencies": { + "clean-stack": "^2.0.0", + "indent-string": "^4.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/ansi-regex": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", + "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==", + "engines": { + "node": ">=8" + } + }, + "node_modules/aproba": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/aproba/-/aproba-2.1.0.tgz", + "integrity": "sha512-tLIEcj5GuR2RSTnxNKdkK0dJ/GrC7P38sUkiDmDuHfsHmbagTFAxDVIBltoklXEVIQ/f14IL8IMJ5pn9Hez1Ew==" + }, + "node_modules/are-we-there-yet": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz", + "integrity": "sha512-Ci/qENmwHnsYo9xKIcUJN5LeDKdJ6R1Z1j9V/J5wyq8nh/mYPEpIKJbBZXtZjG04HiK7zV/p6Vs9952MrMeUIw==", + "deprecated": "This package is no longer supported.", + "dependencies": { + "delegates": "^1.0.0", + "readable-stream": "^3.6.0" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/array-flatten": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz", + "integrity": "sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==" + }, + "node_modules/balanced-match": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==" + }, + "node_modules/base64-js": { + "version": "1.5.1", + "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz", + "integrity": "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ] + }, + "node_modules/bcrypt": { + "version": "5.1.1", + "resolved": "https://registry.npmjs.org/bcrypt/-/bcrypt-5.1.1.tgz", + "integrity": "sha512-AGBHOG5hPYZ5Xl9KXzU5iKq9516yEmvCKDg3ecP5kX2aB6UqTeXZxk2ELnDgDm6BQSMlLt9rDB4LoSMx0rYwww==", + "hasInstallScript": true, + "dependencies": { + "@mapbox/node-pre-gyp": "^1.0.11", + "node-addon-api": "^5.0.0" + }, + "engines": { + "node": ">= 10.0.0" + } + }, + "node_modules/bindings": { + "version": "1.5.0", + "resolved": "https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz", + "integrity": "sha512-p2q/t/mhvuOj/UeLlV6566GD/guowlr0hHxClI0W9m7MWYkL1F0hLo+0Aexs9HSPCtR1SXQ0TD3MMKrXZajbiQ==", + "dependencies": { + "file-uri-to-path": "1.0.0" + } + }, + "node_modules/bl": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz", + "integrity": "sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==", + "dependencies": { + "buffer": "^5.5.0", + "inherits": "^2.0.4", + "readable-stream": "^3.4.0" + } + }, + "node_modules/body-parser": { + "version": "1.20.3", + "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.3.tgz", + "integrity": "sha512-7rAxByjUMqQ3/bHJy7D6OGXvx/MMc4IqBn/X0fcM1QUcAItpZrBEYhWGem+tzXH90c+G01ypMcYJBO9Y30203g==", + "dependencies": { + "bytes": "3.1.2", + "content-type": "~1.0.5", + "debug": "2.6.9", + "depd": "2.0.0", + "destroy": "1.2.0", + "http-errors": "2.0.0", + "iconv-lite": "0.4.24", + "on-finished": "2.4.1", + "qs": "6.13.0", + "raw-body": "2.5.2", + "type-is": "~1.6.18", + "unpipe": "1.0.0" + }, + "engines": { + "node": ">= 0.8", + "npm": "1.2.8000 || >= 1.4.16" + } + }, + "node_modules/brace-expansion": { + "version": "1.1.12", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz", + "integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==", + "dependencies": { + "balanced-match": "^1.0.0", + "concat-map": "0.0.1" + } + }, + "node_modules/buffer": { + "version": "5.7.1", + "resolved": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz", + "integrity": "sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "dependencies": { + "base64-js": "^1.3.1", + "ieee754": "^1.1.13" + } + }, + "node_modules/bytes": { + "version": "3.1.2", + "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz", + "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/cacache": { + "version": "15.3.0", + "resolved": "https://registry.npmjs.org/cacache/-/cacache-15.3.0.tgz", + "integrity": "sha512-VVdYzXEn+cnbXpFgWs5hTT7OScegHVmLhJIR8Ufqk3iFD6A6j5iSX1KuBTfNEv4tdJWE2PzA6IVFtcLC7fN9wQ==", + "optional": true, + "dependencies": { + "@npmcli/fs": "^1.0.0", + "@npmcli/move-file": "^1.0.1", + "chownr": "^2.0.0", + "fs-minipass": "^2.0.0", + "glob": "^7.1.4", + "infer-owner": "^1.0.4", + "lru-cache": "^6.0.0", + "minipass": "^3.1.1", + "minipass-collect": "^1.0.2", + "minipass-flush": "^1.0.5", + "minipass-pipeline": "^1.2.2", + "mkdirp": "^1.0.3", + "p-map": "^4.0.0", + "promise-inflight": "^1.0.1", + "rimraf": "^3.0.2", + "ssri": "^8.0.1", + "tar": "^6.0.2", + "unique-filename": "^1.1.1" + }, + "engines": { + "node": ">= 10" + } + }, + "node_modules/call-bind-apply-helpers": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz", + "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==", + "dependencies": { + "es-errors": "^1.3.0", + "function-bind": "^1.1.2" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/call-bound": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz", + "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==", + "dependencies": { + "call-bind-apply-helpers": "^1.0.2", + "get-intrinsic": "^1.3.0" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/chownr": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz", + "integrity": "sha512-bIomtDF5KGpdogkLd9VspvFzk9KfpyyGlS8YFVZl7TGPBHL5snIOnxeshwVgPteQ9b4Eydl+pVbIyE1DcvCWgQ==", + "engines": { + "node": ">=10" + } + }, + "node_modules/clean-stack": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/clean-stack/-/clean-stack-2.2.0.tgz", + "integrity": "sha512-4diC9HaTE+KRAMWhDhrGOECgWZxoevMc5TlkObMqNSsVU62PYzXZ/SMTjzyGAFF1YusgxGcSWTEXBhp0CPwQ1A==", + "optional": true, + "engines": { + "node": ">=6" + } + }, + "node_modules/color-support": { + "version": "1.1.3", + "resolved": "https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz", + "integrity": "sha512-qiBjkpbMLO/HL68y+lh4q0/O1MZFj2RX6X/KmMa3+gJD3z+WwI1ZzDHysvqHGS3mP6mznPckpXmw1nI9cJjyRg==", + "bin": { + "color-support": "bin.js" + } + }, + "node_modules/concat-map": { + "version": "0.0.1", + "resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz", + "integrity": "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==" + }, + "node_modules/console-control-strings": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz", + "integrity": "sha512-ty/fTekppD2fIwRvnZAVdeOiGd1c7YXEixbgJTNzqcxJWKQnjJ/V1bNEEE6hygpM3WjwHFUVK6HTjWSzV4a8sQ==" + }, + "node_modules/content-disposition": { + "version": "0.5.4", + "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz", + "integrity": "sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==", + "dependencies": { + "safe-buffer": "5.2.1" + }, + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/content-type": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz", + "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/cookie": { + "version": "0.7.1", + "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.1.tgz", + "integrity": "sha512-6DnInpx7SJ2AK3+CTUE/ZM0vWTUboZCegxhC2xiIydHR9jNuTAASBrfEpHhiGOZw/nX51bHt6YQl8jsGo4y/0w==", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/cookie-signature": { + "version": "1.0.6", + "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz", + "integrity": "sha512-QADzlaHc8icV8I7vbaJXJwod9HWYp8uCqf1xa4OfNu1T7JVxQIrUgOWtHdNDtPiywmFbiS12VjotIXLrKM3orQ==" + }, + "node_modules/debug": { + "version": "2.6.9", + "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz", + "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==", + "dependencies": { + "ms": "2.0.0" + } + }, + "node_modules/decompress-response": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/decompress-response/-/decompress-response-6.0.0.tgz", + "integrity": "sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==", + "dependencies": { + "mimic-response": "^3.1.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/deep-extend": { + "version": "0.6.0", + "resolved": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.6.0.tgz", + "integrity": "sha512-LOHxIOaPYdHlJRtCQfDIVZtfw/ufM8+rVj649RIHzcm/vGwQRXFt6OPqIFWsm2XEMrNIEtWR64sY1LEKD2vAOA==", + "engines": { + "node": ">=4.0.0" + } + }, + "node_modules/delegates": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz", + "integrity": "sha512-bd2L678uiWATM6m5Z1VzNCErI3jiGzt6HGY8OVICs40JQq/HALfbyNJmp0UDakEY4pMMaN0Ly5om/B1VI/+xfQ==" + }, + "node_modules/depd": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz", + "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/destroy": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz", + "integrity": "sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==", + "engines": { + "node": ">= 0.8", + "npm": "1.2.8000 || >= 1.4.16" + } + }, + "node_modules/detect-libc": { + "version": "2.1.2", + "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz", + "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==", + "engines": { + "node": ">=8" + } + }, + "node_modules/dotenv": { + "version": "16.6.1", + "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.6.1.tgz", + "integrity": "sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://dotenvx.com" + } + }, + "node_modules/dunder-proto": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz", + "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==", + "dependencies": { + "call-bind-apply-helpers": "^1.0.1", + "es-errors": "^1.3.0", + "gopd": "^1.2.0" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/ee-first": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz", + "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==" + }, + "node_modules/emoji-regex": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==" + }, + "node_modules/encodeurl": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz", + "integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/encoding": { + "version": "0.1.13", + "resolved": "https://registry.npmjs.org/encoding/-/encoding-0.1.13.tgz", + "integrity": "sha512-ETBauow1T35Y/WZMkio9jiM0Z5xjHHmJ4XmjZOq1l/dXz3lr2sRn87nJy20RupqSh1F2m3HHPSp8ShIPQJrJ3A==", + "optional": true, + "dependencies": { + "iconv-lite": "^0.6.2" + } + }, + "node_modules/encoding/node_modules/iconv-lite": { + "version": "0.6.3", + "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz", + "integrity": "sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==", + "optional": true, + "dependencies": { + "safer-buffer": ">= 2.1.2 < 3.0.0" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/end-of-stream": { + "version": "1.4.5", + "resolved": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.5.tgz", + "integrity": "sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==", + "dependencies": { + "once": "^1.4.0" + } + }, + "node_modules/env-paths": { + "version": "2.2.1", + "resolved": "https://registry.npmjs.org/env-paths/-/env-paths-2.2.1.tgz", + "integrity": "sha512-+h1lkLKhZMTYjog1VEpJNG7NZJWcuc2DDk/qsqSTRRCOXiLjeQ1d1/udrUGhqMxUgAlwKNZ0cf2uqan5GLuS2A==", + "optional": true, + "engines": { + "node": ">=6" + } + }, + "node_modules/err-code": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/err-code/-/err-code-2.0.3.tgz", + "integrity": "sha512-2bmlRpNKBxT/CRmPOlyISQpNj+qSeYvcym/uT0Jx2bMOlKLtSy1ZmLuVxSEKKyor/N5yhvp/ZiG1oE3DEYMSFA==", + "optional": true + }, + "node_modules/es-define-property": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz", + "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/es-errors": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz", + "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/es-object-atoms": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz", + "integrity": "sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==", + "dependencies": { + "es-errors": "^1.3.0" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/escape-html": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz", + "integrity": "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==" + }, + "node_modules/etag": { + "version": "1.8.1", + "resolved": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz", + "integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/expand-template": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/expand-template/-/expand-template-2.0.3.tgz", + "integrity": "sha512-XYfuKMvj4O35f/pOXLObndIRvyQ+/+6AhODh+OKWj9S9498pHHn/IMszH+gt0fBCRWMNfk1ZSp5x3AifmnI2vg==", + "engines": { + "node": ">=6" + } + }, + "node_modules/express": { + "version": "4.21.2", + "resolved": "https://registry.npmjs.org/express/-/express-4.21.2.tgz", + "integrity": "sha512-28HqgMZAmih1Czt9ny7qr6ek2qddF4FclbMzwhCREB6OFfH+rXAnuNCwo1/wFvrtbgsQDb4kSbX9de9lFbrXnA==", + "dependencies": { + "accepts": "~1.3.8", + "array-flatten": "1.1.1", + "body-parser": "1.20.3", + "content-disposition": "0.5.4", + "content-type": "~1.0.4", + "cookie": "0.7.1", + "cookie-signature": "1.0.6", + "debug": "2.6.9", + "depd": "2.0.0", + "encodeurl": "~2.0.0", + "escape-html": "~1.0.3", + "etag": "~1.8.1", + "finalhandler": "1.3.1", + "fresh": "0.5.2", + "http-errors": "2.0.0", + "merge-descriptors": "1.0.3", + "methods": "~1.1.2", + "on-finished": "2.4.1", + "parseurl": "~1.3.3", + "path-to-regexp": "0.1.12", + "proxy-addr": "~2.0.7", + "qs": "6.13.0", + "range-parser": "~1.2.1", + "safe-buffer": "5.2.1", + "send": "0.19.0", + "serve-static": "1.16.2", + "setprototypeof": "1.2.0", + "statuses": "2.0.1", + "type-is": "~1.6.18", + "utils-merge": "1.0.1", + "vary": "~1.1.2" + }, + "engines": { + "node": ">= 0.10.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/express" + } + }, + "node_modules/express-rate-limit": { + "version": "8.5.2", + "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.5.2.tgz", + "integrity": "sha512-5Kb34ipNX694DH48vN9irak1Qx30nb0PLYHXfJgw4YEjiC3ZEmZJhwOp+VfiCYwFzvFTdB9QkArYS5kXa2cx2A==", + "dependencies": { + "ip-address": "^10.2.0" + }, + "engines": { + "node": ">= 16" + }, + "funding": { + "url": "https://github.com/sponsors/express-rate-limit" + }, + "peerDependencies": { + "express": ">= 4.11" + } + }, + "node_modules/express-session": { + "version": "1.18.2", + "resolved": "https://registry.npmjs.org/express-session/-/express-session-1.18.2.tgz", + "integrity": "sha512-SZjssGQC7TzTs9rpPDuUrR23GNZ9+2+IkA/+IJWmvQilTr5OSliEHGF+D9scbIpdC6yGtTI0/VhaHoVes2AN/A==", + "dependencies": { + "cookie": "0.7.2", + "cookie-signature": "1.0.7", + "debug": "2.6.9", + "depd": "~2.0.0", + "on-headers": "~1.1.0", + "parseurl": "~1.3.3", + "safe-buffer": "5.2.1", + "uid-safe": "~2.1.5" + }, + "engines": { + "node": ">= 0.8.0" + } + }, + "node_modules/express-session/node_modules/cookie": { + "version": "0.7.2", + "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz", + "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/express-session/node_modules/cookie-signature": { + "version": "1.0.7", + "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.7.tgz", + "integrity": "sha512-NXdYc3dLr47pBkpUCHtKSwIOQXLVn8dZEuywboCOJY/osA0wFSLlSawr3KN8qXJEyX66FcONTH8EIlVuK0yyFA==" + }, + "node_modules/file-uri-to-path": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz", + "integrity": "sha512-0Zt+s3L7Vf1biwWZ29aARiVYLx7iMGnEUl9x33fbB/j3jR81u/O2LbqK+Bm1CDSNDKVtJ/YjwY7TUd5SkeLQLw==" + }, + "node_modules/finalhandler": { + "version": "1.3.1", + "resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.3.1.tgz", + "integrity": "sha512-6BN9trH7bp3qvnrRyzsBz+g3lZxTNZTbVO2EV1CS0WIcDbawYVdYvGflME/9QP0h0pYlCDBCTjYa9nZzMDpyxQ==", + "dependencies": { + "debug": "2.6.9", + "encodeurl": "~2.0.0", + "escape-html": "~1.0.3", + "on-finished": "2.4.1", + "parseurl": "~1.3.3", + "statuses": "2.0.1", + "unpipe": "~1.0.0" + }, + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/forwarded": { + "version": "0.2.0", + "resolved": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz", + "integrity": "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/fresh": { + "version": "0.5.2", + "resolved": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz", + "integrity": "sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/fs-constants": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/fs-constants/-/fs-constants-1.0.0.tgz", + "integrity": "sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==" + }, + "node_modules/fs-minipass": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz", + "integrity": "sha512-V/JgOLFCS+R6Vcq0slCuaeWEdNC3ouDlJMNIsacH2VtALiu9mV4LPrHc5cDl8k5aw6J8jwgWWpiTo5RYhmIzvg==", + "dependencies": { + "minipass": "^3.0.0" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/fs.realpath": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz", + "integrity": "sha512-OO0pH2lK6a0hZnAdau5ItzHPI6pUlvI7jMVnxUQRtw4owF2wk8lOSabtGDCTP4Ggrg2MbGnWO9X8K1t4+fGMDw==" + }, + "node_modules/function-bind": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz", + "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==", + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/gauge": { + "version": "3.0.2", + "resolved": "https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz", + "integrity": "sha512-+5J6MS/5XksCuXq++uFRsnUd7Ovu1XenbeuIuNRJxYWjgQbPuFhT14lAvsWfqfAmnwluf1OwMjz39HjfLPci0Q==", + "deprecated": "This package is no longer supported.", + "dependencies": { + "aproba": "^1.0.3 || ^2.0.0", + "color-support": "^1.1.2", + "console-control-strings": "^1.0.0", + "has-unicode": "^2.0.1", + "object-assign": "^4.1.1", + "signal-exit": "^3.0.0", + "string-width": "^4.2.3", + "strip-ansi": "^6.0.1", + "wide-align": "^1.1.2" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/get-intrinsic": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz", + "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==", + "dependencies": { + "call-bind-apply-helpers": "^1.0.2", + "es-define-property": "^1.0.1", + "es-errors": "^1.3.0", + "es-object-atoms": "^1.1.1", + "function-bind": "^1.1.2", + "get-proto": "^1.0.1", + "gopd": "^1.2.0", + "has-symbols": "^1.1.0", + "hasown": "^2.0.2", + "math-intrinsics": "^1.1.0" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/get-proto": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz", + "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==", + "dependencies": { + "dunder-proto": "^1.0.1", + "es-object-atoms": "^1.0.0" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/github-from-package": { + "version": "0.0.0", + "resolved": "https://registry.npmjs.org/github-from-package/-/github-from-package-0.0.0.tgz", + "integrity": "sha512-SyHy3T1v2NUXn29OsWdxmK6RwHD+vkj3v8en8AOBZ1wBQ/hCAQ5bAQTD02kW4W9tUp/3Qh6J8r9EvntiyCmOOw==" + }, + "node_modules/glob": { + "version": "7.2.3", + "resolved": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "integrity": "sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==", + "deprecated": "Glob versions prior to v9 are no longer supported", + "dependencies": { + "fs.realpath": "^1.0.0", + "inflight": "^1.0.4", + "inherits": "2", + "minimatch": "^3.1.1", + "once": "^1.3.0", + "path-is-absolute": "^1.0.0" + }, + "engines": { + "node": "*" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/gopd": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz", + "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==", + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/graceful-fs": { + "version": "4.2.11", + "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz", + "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==", + "optional": true + }, + "node_modules/has-symbols": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz", + "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==", + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/has-unicode": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz", + "integrity": "sha512-8Rf9Y83NBReMnx0gFzA8JImQACstCYWUplepDa9xprwwtmgEZUF0h/i5xSA625zB/I37EtrswSST6OXxwaaIJQ==" + }, + "node_modules/hasown": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz", + "integrity": "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==", + "dependencies": { + "function-bind": "^1.1.2" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/http-cache-semantics": { + "version": "4.2.0", + "resolved": "https://registry.npmjs.org/http-cache-semantics/-/http-cache-semantics-4.2.0.tgz", + "integrity": "sha512-dTxcvPXqPvXBQpq5dUr6mEMJX4oIEFv6bwom3FDwKRDsuIjjJGANqhBuoAn9c1RQJIdAKav33ED65E2ys+87QQ==", + "optional": true + }, + "node_modules/http-errors": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz", + "integrity": "sha512-FtwrG/euBzaEjYeRqOgly7G0qviiXoJWnvEH2Z1plBdXgbyjv34pHTSb9zoeHMyDy33+DWy5Wt9Wo+TURtOYSQ==", + "dependencies": { + "depd": "2.0.0", + "inherits": "2.0.4", + "setprototypeof": "1.2.0", + "statuses": "2.0.1", + "toidentifier": "1.0.1" + }, + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/http-proxy-agent": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-4.0.1.tgz", + "integrity": "sha512-k0zdNgqWTGA6aeIRVpvfVob4fL52dTfaehylg0Y4UvSySvOq/Y+BOyPrgpUrA7HylqvU8vIZGsRuXmspskV0Tg==", + "optional": true, + "dependencies": { + "@tootallnate/once": "1", + "agent-base": "6", + "debug": "4" + }, + "engines": { + "node": ">= 6" + } + }, + "node_modules/http-proxy-agent/node_modules/debug": { + "version": "4.4.3", + "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz", + "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==", + "optional": true, + "dependencies": { + "ms": "^2.1.3" + }, + "engines": { + "node": ">=6.0" + }, + "peerDependenciesMeta": { + "supports-color": { + "optional": true + } + } + }, + "node_modules/http-proxy-agent/node_modules/ms": { + "version": "2.1.3", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz", + "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==", + "optional": true + }, + "node_modules/https-proxy-agent": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz", + "integrity": "sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==", + "dependencies": { + "agent-base": "6", + "debug": "4" + }, + "engines": { + "node": ">= 6" + } + }, + "node_modules/https-proxy-agent/node_modules/debug": { + "version": "4.4.3", + "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz", + "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==", + "dependencies": { + "ms": "^2.1.3" + }, + "engines": { + "node": ">=6.0" + }, + "peerDependenciesMeta": { + "supports-color": { + "optional": true + } + } + }, + "node_modules/https-proxy-agent/node_modules/ms": { + "version": "2.1.3", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz", + "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==" + }, + "node_modules/humanize-ms": { + "version": "1.2.1", + "resolved": "https://registry.npmjs.org/humanize-ms/-/humanize-ms-1.2.1.tgz", + "integrity": "sha512-Fl70vYtsAFb/C06PTS9dZBo7ihau+Tu/DNCk/OyHhea07S+aeMWpFFkUaXRa8fI+ScZbEI8dfSxwY7gxZ9SAVQ==", + "optional": true, + "dependencies": { + "ms": "^2.0.0" + } + }, + "node_modules/iconv-lite": { + "version": "0.4.24", + "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz", + "integrity": "sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==", + "dependencies": { + "safer-buffer": ">= 2.1.2 < 3" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/ieee754": { + "version": "1.2.1", + "resolved": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz", + "integrity": "sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ] + }, + "node_modules/imurmurhash": { + "version": "0.1.4", + "resolved": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz", + "integrity": "sha512-JmXMZ6wuvDmLiHEml9ykzqO6lwFbof0GG4IkcGaENdCRDDmMVnny7s5HsIgHCbaq0w2MyPhDqkhTUgS2LU2PHA==", + "optional": true, + "engines": { + "node": ">=0.8.19" + } + }, + "node_modules/indent-string": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/indent-string/-/indent-string-4.0.0.tgz", + "integrity": "sha512-EdDDZu4A2OyIK7Lr/2zG+w5jmbuk1DVBnEwREQvBzspBJkCEbRa8GxU1lghYcaGJCnRWibjDXlq779X1/y5xwg==", + "optional": true, + "engines": { + "node": ">=8" + } + }, + "node_modules/infer-owner": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/infer-owner/-/infer-owner-1.0.4.tgz", + "integrity": "sha512-IClj+Xz94+d7irH5qRyfJonOdfTzuDaifE6ZPWfx0N0+/ATZCbuTPq2prFl526urkQd90WyUKIh1DfBQ2hMz9A==", + "optional": true + }, + "node_modules/inflight": { + "version": "1.0.6", + "resolved": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz", + "integrity": "sha512-k92I/b08q4wvFscXCLvqfsHCrjrF7yiXsQuIVvVE7N82W3+aqpzuUdBbfhWcy/FZR3/4IgflMgKLOsvPDrGCJA==", + "deprecated": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.", + "dependencies": { + "once": "^1.3.0", + "wrappy": "1" + } + }, + "node_modules/inherits": { + "version": "2.0.4", + "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", + "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==" + }, + "node_modules/ini": { + "version": "1.3.8", + "resolved": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz", + "integrity": "sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==" + }, + "node_modules/ip-address": { + "version": "10.2.0", + "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.2.0.tgz", + "integrity": "sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==", + "engines": { + "node": ">= 12" + } + }, + "node_modules/ipaddr.js": { + "version": "1.9.1", + "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz", + "integrity": "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==", + "engines": { + "node": ">= 0.10" + } + }, + "node_modules/is-fullwidth-code-point": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", + "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==", + "engines": { + "node": ">=8" + } + }, + "node_modules/is-lambda": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/is-lambda/-/is-lambda-1.0.1.tgz", + "integrity": "sha512-z7CMFGNrENq5iFB9Bqo64Xk6Y9sg+epq1myIcdHaGnbMTYOxvzsEtdYqQUylB7LxfkvgrrjP32T6Ywciio9UIQ==", + "optional": true + }, + "node_modules/isexe": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz", + "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==", + "optional": true + }, + "node_modules/jose": { + "version": "6.2.8", + "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.8.tgz", + "integrity": "sha512-Bsdjwm3Qsd/P0jR+BHDe3LytDfY7WBq2HmCCLIwuVRHMuEC9ae7/R474GIUdF1NgCyZjzVo/A9DOiOBtXq8ZoQ==", + "funding": { + "url": "https://github.com/sponsors/panva" + } + }, + "node_modules/lru-cache": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz", + "integrity": "sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==", + "optional": true, + "dependencies": { + "yallist": "^4.0.0" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/make-dir": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz", + "integrity": "sha512-g3FeP20LNwhALb/6Cz6Dd4F2ngze0jz7tbzrD2wAV+o9FeNHe4rL+yK2md0J/fiSf1sa1ADhXqi5+oVwOM/eGw==", + "dependencies": { + "semver": "^6.0.0" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/make-dir/node_modules/semver": { + "version": "6.3.1", + "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==", + "bin": { + "semver": "bin/semver.js" + } + }, + "node_modules/make-fetch-happen": { + "version": "9.1.0", + "resolved": "https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-9.1.0.tgz", + "integrity": "sha512-+zopwDy7DNknmwPQplem5lAZX/eCOzSvSNNcSKm5eVwTkOBzoktEfXsa9L23J/GIRhxRsaxzkPEhrJEpE2F4Gg==", + "optional": true, + "dependencies": { + "agentkeepalive": "^4.1.3", + "cacache": "^15.2.0", + "http-cache-semantics": "^4.1.0", + "http-proxy-agent": "^4.0.1", + "https-proxy-agent": "^5.0.0", + "is-lambda": "^1.0.1", + "lru-cache": "^6.0.0", + "minipass": "^3.1.3", + "minipass-collect": "^1.0.2", + "minipass-fetch": "^1.3.2", + "minipass-flush": "^1.0.5", + "minipass-pipeline": "^1.2.4", + "negotiator": "^0.6.2", + "promise-retry": "^2.0.1", + "socks-proxy-agent": "^6.0.0", + "ssri": "^8.0.0" + }, + "engines": { + "node": ">= 10" + } + }, + "node_modules/math-intrinsics": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz", + "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/media-typer": { + "version": "0.3.0", + "resolved": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz", + "integrity": "sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/merge-descriptors": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.3.tgz", + "integrity": "sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ==", + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/methods": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz", + "integrity": "sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/mime": { + "version": "1.6.0", + "resolved": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz", + "integrity": "sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==", + "bin": { + "mime": "cli.js" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/mime-db": { + "version": "1.52.0", + "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz", + "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/mime-types": { + "version": "2.1.35", + "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz", + "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==", + "dependencies": { + "mime-db": "1.52.0" + }, + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/mimic-response": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/mimic-response/-/mimic-response-3.1.0.tgz", + "integrity": "sha512-z0yWI+4FDrrweS8Zmt4Ej5HdJmky15+L2e6Wgn3+iK5fWzb6T3fhNFq2+MeTRb064c6Wr4N/wv0DzQTjNzHNGQ==", + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/minimatch": { + "version": "3.1.2", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz", + "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==", + "dependencies": { + "brace-expansion": "^1.1.7" + }, + "engines": { + "node": "*" + } + }, + "node_modules/minimist": { + "version": "1.2.8", + "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz", + "integrity": "sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==", + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/minipass": { + "version": "3.3.6", + "resolved": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "integrity": "sha512-DxiNidxSEK+tHG6zOIklvNOwm3hvCrbUrdtzY74U6HKTJxvIDfOUL5W5P2Ghd3DTkhhKPYGqeNUIh5qcM4YBfw==", + "dependencies": { + "yallist": "^4.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/minipass-collect": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/minipass-collect/-/minipass-collect-1.0.2.tgz", + "integrity": "sha512-6T6lH0H8OG9kITm/Jm6tdooIbogG9e0tLgpY6mphXSm/A9u8Nq1ryBG+Qspiub9LjWlBPsPS3tWQ/Botq4FdxA==", + "optional": true, + "dependencies": { + "minipass": "^3.0.0" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/minipass-fetch": { + "version": "1.4.1", + "resolved": "https://registry.npmjs.org/minipass-fetch/-/minipass-fetch-1.4.1.tgz", + "integrity": "sha512-CGH1eblLq26Y15+Azk7ey4xh0J/XfJfrCox5LDJiKqI2Q2iwOLOKrlmIaODiSQS8d18jalF6y2K2ePUm0CmShw==", + "optional": true, + "dependencies": { + "minipass": "^3.1.0", + "minipass-sized": "^1.0.3", + "minizlib": "^2.0.0" + }, + "engines": { + "node": ">=8" + }, + "optionalDependencies": { + "encoding": "^0.1.12" + } + }, + "node_modules/minipass-flush": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/minipass-flush/-/minipass-flush-1.0.5.tgz", + "integrity": "sha512-JmQSYYpPUqX5Jyn1mXaRwOda1uQ8HP5KAT/oDSLCzt1BYRhQU0/hDtsB1ufZfEEzMZ9aAVmsBw8+FWsIXlClWw==", + "optional": true, + "dependencies": { + "minipass": "^3.0.0" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/minipass-pipeline": { + "version": "1.2.4", + "resolved": "https://registry.npmjs.org/minipass-pipeline/-/minipass-pipeline-1.2.4.tgz", + "integrity": "sha512-xuIq7cIOt09RPRJ19gdi4b+RiNvDFYe5JH+ggNvBqGqpQXcru3PcRmOZuHBKWK1Txf9+cQ+HMVN4d6z46LZP7A==", + "optional": true, + "dependencies": { + "minipass": "^3.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/minipass-sized": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/minipass-sized/-/minipass-sized-1.0.3.tgz", + "integrity": "sha512-MbkQQ2CTiBMlA2Dm/5cY+9SWFEN8pzzOXi6rlM5Xxq0Yqbda5ZQy9sU75a673FE9ZK0Zsbr6Y5iP6u9nktfg2g==", + "optional": true, + "dependencies": { + "minipass": "^3.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/minizlib": { + "version": "2.1.2", + "resolved": "https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz", + "integrity": "sha512-bAxsR8BVfj60DWXHE3u30oHzfl4G7khkSuPW+qvpd7jFRHm7dLxOjUk1EHACJ/hxLY8phGJ0YhYHZo7jil7Qdg==", + "dependencies": { + "minipass": "^3.0.0", + "yallist": "^4.0.0" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/mkdirp": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz", + "integrity": "sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw==", + "bin": { + "mkdirp": "bin/cmd.js" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/mkdirp-classic": { + "version": "0.5.3", + "resolved": "https://registry.npmjs.org/mkdirp-classic/-/mkdirp-classic-0.5.3.tgz", + "integrity": "sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A==" + }, + "node_modules/ms": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz", + "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==" + }, + "node_modules/napi-build-utils": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/napi-build-utils/-/napi-build-utils-2.0.0.tgz", + "integrity": "sha512-GEbrYkbfF7MoNaoh2iGG84Mnf/WZfB0GdGEsM8wz7Expx/LlWf5U8t9nvJKXSp3qr5IsEbK04cBGhol/KwOsWA==" + }, + "node_modules/negotiator": { + "version": "0.6.3", + "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz", + "integrity": "sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg==", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/node-abi": { + "version": "3.80.0", + "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-3.80.0.tgz", + "integrity": "sha512-LyPuZJcI9HVwzXK1GPxWNzrr+vr8Hp/3UqlmWxxh8p54U1ZbclOqbSog9lWHaCX+dBaiGi6n/hIX+mKu74GmPA==", + "dependencies": { + "semver": "^7.3.5" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/node-addon-api": { + "version": "5.1.0", + "resolved": "https://registry.npmjs.org/node-addon-api/-/node-addon-api-5.1.0.tgz", + "integrity": "sha512-eh0GgfEkpnoWDq+VY8OyvYhFEzBk6jIYbRKdIlyTiAXIVJ8PyBaKb0rp7oDtoddbdoHWhq8wwr+XZ81F1rpNdA==" + }, + "node_modules/node-fetch": { + "version": "2.7.0", + "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz", + "integrity": "sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A==", + "dependencies": { + "whatwg-url": "^5.0.0" + }, + "engines": { + "node": "4.x || >=6.0.0" + }, + "peerDependencies": { + "encoding": "^0.1.0" + }, + "peerDependenciesMeta": { + "encoding": { + "optional": true + } + } + }, + "node_modules/node-gyp": { + "version": "8.4.1", + "resolved": "https://registry.npmjs.org/node-gyp/-/node-gyp-8.4.1.tgz", + "integrity": "sha512-olTJRgUtAb/hOXG0E93wZDs5YiJlgbXxTwQAFHyNlRsXQnYzUaF2aGgujZbw+hR8aF4ZG/rST57bWMWD16jr9w==", + "optional": true, + "dependencies": { + "env-paths": "^2.2.0", + "glob": "^7.1.4", + "graceful-fs": "^4.2.6", + "make-fetch-happen": "^9.1.0", + "nopt": "^5.0.0", + "npmlog": "^6.0.0", + "rimraf": "^3.0.2", + "semver": "^7.3.5", + "tar": "^6.1.2", + "which": "^2.0.2" + }, + "bin": { + "node-gyp": "bin/node-gyp.js" + }, + "engines": { + "node": ">= 10.12.0" + } + }, + "node_modules/node-gyp/node_modules/are-we-there-yet": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-3.0.1.tgz", + "integrity": "sha512-QZW4EDmGwlYur0Yyf/b2uGucHQMa8aFUP7eu9ddR73vvhFyt4V0Vl3QHPcTNJ8l6qYOBdxgXdnBXQrHilfRQBg==", + "deprecated": "This package is no longer supported.", + "optional": true, + "dependencies": { + "delegates": "^1.0.0", + "readable-stream": "^3.6.0" + }, + "engines": { + "node": "^12.13.0 || ^14.15.0 || >=16.0.0" + } + }, + "node_modules/node-gyp/node_modules/gauge": { + "version": "4.0.4", + "resolved": "https://registry.npmjs.org/gauge/-/gauge-4.0.4.tgz", + "integrity": "sha512-f9m+BEN5jkg6a0fZjleidjN51VE1X+mPFQ2DJ0uv1V39oCLCbsGe6yjbBnp7eK7z/+GAon99a3nHuqbuuthyPg==", + "deprecated": "This package is no longer supported.", + "optional": true, + "dependencies": { + "aproba": "^1.0.3 || ^2.0.0", + "color-support": "^1.1.3", + "console-control-strings": "^1.1.0", + "has-unicode": "^2.0.1", + "signal-exit": "^3.0.7", + "string-width": "^4.2.3", + "strip-ansi": "^6.0.1", + "wide-align": "^1.1.5" + }, + "engines": { + "node": "^12.13.0 || ^14.15.0 || >=16.0.0" + } + }, + "node_modules/node-gyp/node_modules/npmlog": { + "version": "6.0.2", + "resolved": "https://registry.npmjs.org/npmlog/-/npmlog-6.0.2.tgz", + "integrity": "sha512-/vBvz5Jfr9dT/aFWd0FIRf+T/Q2WBsLENygUaFUqstqsycmZAP/t5BvFJTK0viFmSUxiUKTUplWy5vt+rvKIxg==", + "deprecated": "This package is no longer supported.", + "optional": true, + "dependencies": { + "are-we-there-yet": "^3.0.0", + "console-control-strings": "^1.1.0", + "gauge": "^4.0.3", + "set-blocking": "^2.0.0" + }, + "engines": { + "node": "^12.13.0 || ^14.15.0 || >=16.0.0" + } + }, + "node_modules/nopt": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz", + "integrity": "sha512-Tbj67rffqceeLpcRXrT7vKAN8CwfPeIBgM7E6iBkmKLV7bEMwpGgYLGv0jACUsECaa/vuxP0IjEont6umdMgtQ==", + "dependencies": { + "abbrev": "1" + }, + "bin": { + "nopt": "bin/nopt.js" + }, + "engines": { + "node": ">=6" + } + }, + "node_modules/npmlog": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz", + "integrity": "sha512-AqZtDUWOMKs1G/8lwylVjrdYgqA4d9nu8hc+0gzRxlDb1I10+FHBGMXs6aiQHFdCUUlqH99MUMuLfzWDNDtfxw==", + "deprecated": "This package is no longer supported.", + "dependencies": { + "are-we-there-yet": "^2.0.0", + "console-control-strings": "^1.1.0", + "gauge": "^3.0.0", + "set-blocking": "^2.0.0" + } + }, + "node_modules/oauth4webapi": { + "version": "3.8.6", + "resolved": "https://registry.npmjs.org/oauth4webapi/-/oauth4webapi-3.8.6.tgz", + "integrity": "sha512-iwemM91xz8nryHti2yTmg5fhyEMVOkOXwHNqbvcATjyajb5oQxCQzrNOA6uElRHuMhQQTKUyFKV9y/CNyg25BQ==", + "funding": { + "url": "https://github.com/sponsors/panva" + } + }, + "node_modules/object-assign": { + "version": "4.1.1", + "resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz", + "integrity": "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg==", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/object-inspect": { + "version": "1.13.4", + "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz", + "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==", + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/on-finished": { + "version": "2.4.1", + "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz", + "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==", + "dependencies": { + "ee-first": "1.1.1" + }, + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/on-headers": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/on-headers/-/on-headers-1.1.0.tgz", + "integrity": "sha512-737ZY3yNnXy37FHkQxPzt4UZ2UWPWiCZWLvFZ4fu5cueciegX0zGPnrlY6bwRg4FdQOe9YU8MkmJwGhoMybl8A==", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/once": { + "version": "1.4.0", + "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz", + "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==", + "dependencies": { + "wrappy": "1" + } + }, + "node_modules/openid-client": { + "version": "6.8.4", + "resolved": "https://registry.npmjs.org/openid-client/-/openid-client-6.8.4.tgz", + "integrity": "sha512-QSw0BA08piujetEwfZsHoTrDpMEha7GDZDicQqVwX4u0ChCjefvjDB++TZ8BTg76UpwhzIQgdvvfgfl3HpCSAw==", + "dependencies": { + "jose": "^6.2.2", + "oauth4webapi": "^3.8.5" + }, + "funding": { + "url": "https://github.com/sponsors/panva" + } + }, + "node_modules/p-map": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/p-map/-/p-map-4.0.0.tgz", + "integrity": "sha512-/bjOqmgETBYB5BoEeGVea8dmvHb2m9GLy1E9W43yeyfP6QQCZGFNa+XRceJEuDB6zqr+gKpIAmlLebMpykw/MQ==", + "optional": true, + "dependencies": { + "aggregate-error": "^3.0.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/parseurl": { + "version": "1.3.3", + "resolved": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz", + "integrity": "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/path-is-absolute": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz", + "integrity": "sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg==", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/path-to-regexp": { + "version": "0.1.12", + "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.12.tgz", + "integrity": "sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ==" + }, + "node_modules/prebuild-install": { + "version": "7.1.3", + "resolved": "https://registry.npmjs.org/prebuild-install/-/prebuild-install-7.1.3.tgz", + "integrity": "sha512-8Mf2cbV7x1cXPUILADGI3wuhfqWvtiLA1iclTDbFRZkgRQS0NqsPZphna9V+HyTEadheuPmjaJMsbzKQFOzLug==", + "dependencies": { + "detect-libc": "^2.0.0", + "expand-template": "^2.0.3", + "github-from-package": "0.0.0", + "minimist": "^1.2.3", + "mkdirp-classic": "^0.5.3", + "napi-build-utils": "^2.0.0", + "node-abi": "^3.3.0", + "pump": "^3.0.0", + "rc": "^1.2.7", + "simple-get": "^4.0.0", + "tar-fs": "^2.0.0", + "tunnel-agent": "^0.6.0" + }, + "bin": { + "prebuild-install": "bin.js" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/promise-inflight": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/promise-inflight/-/promise-inflight-1.0.1.tgz", + "integrity": "sha512-6zWPyEOFaQBJYcGMHBKTKJ3u6TBsnMFOIZSa6ce1e/ZrrsOlnHRHbabMjLiBYKp+n44X9eUI6VUPaukCXHuG4g==", + "optional": true + }, + "node_modules/promise-retry": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/promise-retry/-/promise-retry-2.0.1.tgz", + "integrity": "sha512-y+WKFlBR8BGXnsNlIHFGPZmyDf3DFMoLhaflAnyZgV6rG6xu+JwesTo2Q9R6XwYmtmwAFCkAk3e35jEdoeh/3g==", + "optional": true, + "dependencies": { + "err-code": "^2.0.2", + "retry": "^0.12.0" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/proxy-addr": { + "version": "2.0.7", + "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz", + "integrity": "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==", + "dependencies": { + "forwarded": "0.2.0", + "ipaddr.js": "1.9.1" + }, + "engines": { + "node": ">= 0.10" + } + }, + "node_modules/pump": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.3.tgz", + "integrity": "sha512-todwxLMY7/heScKmntwQG8CXVkWUOdYxIvY2s0VWAAMh/nd8SoYiRaKjlr7+iCs984f2P8zvrfWcDDYVb73NfA==", + "dependencies": { + "end-of-stream": "^1.1.0", + "once": "^1.3.1" + } + }, + "node_modules/qs": { + "version": "6.13.0", + "resolved": "https://registry.npmjs.org/qs/-/qs-6.13.0.tgz", + "integrity": "sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==", + "dependencies": { + "side-channel": "^1.0.6" + }, + "engines": { + "node": ">=0.6" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/random-bytes": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/random-bytes/-/random-bytes-1.0.0.tgz", + "integrity": "sha512-iv7LhNVO047HzYR3InF6pUcUsPQiHTM1Qal51DcGSuZFBil1aBBWG5eHPNek7bvILMaYJ/8RU1e8w1AMdHmLQQ==", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/range-parser": { + "version": "1.2.1", + "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz", + "integrity": "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/raw-body": { + "version": "2.5.2", + "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.2.tgz", + "integrity": "sha512-8zGqypfENjCIqGhgXToC8aB2r7YrBX+AQAfIPs/Mlk+BtPTztOvTS01NRW/3Eh60J+a48lt8qsCzirQ6loCVfA==", + "dependencies": { + "bytes": "3.1.2", + "http-errors": "2.0.0", + "iconv-lite": "0.4.24", + "unpipe": "1.0.0" + }, + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/rc": { + "version": "1.2.8", + "resolved": "https://registry.npmjs.org/rc/-/rc-1.2.8.tgz", + "integrity": "sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==", + "dependencies": { + "deep-extend": "^0.6.0", + "ini": "~1.3.0", + "minimist": "^1.2.0", + "strip-json-comments": "~2.0.1" + }, + "bin": { + "rc": "cli.js" + } + }, + "node_modules/readable-stream": { + "version": "3.6.2", + "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz", + "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==", + "dependencies": { + "inherits": "^2.0.3", + "string_decoder": "^1.1.1", + "util-deprecate": "^1.0.1" + }, + "engines": { + "node": ">= 6" + } + }, + "node_modules/retry": { + "version": "0.12.0", + "resolved": "https://registry.npmjs.org/retry/-/retry-0.12.0.tgz", + "integrity": "sha512-9LkiTwjUh6rT555DtE9rTX+BKByPfrMzEAtnlEtdEwr3Nkffwiihqe2bWADg+OQRjt9gl6ICdmB/ZFDCGAtSow==", + "optional": true, + "engines": { + "node": ">= 4" + } + }, + "node_modules/rimraf": { + "version": "3.0.2", + "resolved": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz", + "integrity": "sha512-JZkJMZkAGFFPP2YqXZXPbMlMBgsxzE8ILs4lMIX/2o0L9UBw9O/Y3o6wFw/i9YLapcUJWwqbi3kdxIPdC62TIA==", + "deprecated": "Rimraf versions prior to v4 are no longer supported", + "dependencies": { + "glob": "^7.1.3" + }, + "bin": { + "rimraf": "bin.js" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/safe-buffer": { + "version": "5.2.1", + "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", + "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ] + }, + "node_modules/safer-buffer": { + "version": "2.1.2", + "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz", + "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==" + }, + "node_modules/semver": { + "version": "7.7.3", + "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.3.tgz", + "integrity": "sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q==", + "bin": { + "semver": "bin/semver.js" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/send": { + "version": "0.19.0", + "resolved": "https://registry.npmjs.org/send/-/send-0.19.0.tgz", + "integrity": "sha512-dW41u5VfLXu8SJh5bwRmyYUbAoSB3c9uQh6L8h/KtsFREPWpbX1lrljJo186Jc4nmci/sGUZ9a0a0J2zgfq2hw==", + "dependencies": { + "debug": "2.6.9", + "depd": "2.0.0", + "destroy": "1.2.0", + "encodeurl": "~1.0.2", + "escape-html": "~1.0.3", + "etag": "~1.8.1", + "fresh": "0.5.2", + "http-errors": "2.0.0", + "mime": "1.6.0", + "ms": "2.1.3", + "on-finished": "2.4.1", + "range-parser": "~1.2.1", + "statuses": "2.0.1" + }, + "engines": { + "node": ">= 0.8.0" + } + }, + "node_modules/send/node_modules/encodeurl": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz", + "integrity": "sha512-TPJXq8JqFaVYm2CWmPvnP2Iyo4ZSM7/QKcSmuMLDObfpH5fi7RUGmd/rTDf+rut/saiDiQEeVTNgAmJEdAOx0w==", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/send/node_modules/ms": { + "version": "2.1.3", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz", + "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==" + }, + "node_modules/serve-static": { + "version": "1.16.2", + "resolved": "https://registry.npmjs.org/serve-static/-/serve-static-1.16.2.tgz", + "integrity": "sha512-VqpjJZKadQB/PEbEwvFdO43Ax5dFBZ2UECszz8bQ7pi7wt//PWe1P6MN7eCnjsatYtBT6EuiClbjSWP2WrIoTw==", + "dependencies": { + "encodeurl": "~2.0.0", + "escape-html": "~1.0.3", + "parseurl": "~1.3.3", + "send": "0.19.0" + }, + "engines": { + "node": ">= 0.8.0" + } + }, + "node_modules/set-blocking": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz", + "integrity": "sha512-KiKBS8AnWGEyLzofFfmvKwpdPzqiy16LvQfK3yv/fVH7Bj13/wl3JSR1J+rfgRE9q7xUJK4qvgS8raSOeLUehw==" + }, + "node_modules/setprototypeof": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz", + "integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==" + }, + "node_modules/side-channel": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz", + "integrity": "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==", + "dependencies": { + "es-errors": "^1.3.0", + "object-inspect": "^1.13.3", + "side-channel-list": "^1.0.0", + "side-channel-map": "^1.0.1", + "side-channel-weakmap": "^1.0.2" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/side-channel-list": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.0.tgz", + "integrity": "sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==", + "dependencies": { + "es-errors": "^1.3.0", + "object-inspect": "^1.13.3" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/side-channel-map": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz", + "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==", + "dependencies": { + "call-bound": "^1.0.2", + "es-errors": "^1.3.0", + "get-intrinsic": "^1.2.5", + "object-inspect": "^1.13.3" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/side-channel-weakmap": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz", + "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==", + "dependencies": { + "call-bound": "^1.0.2", + "es-errors": "^1.3.0", + "get-intrinsic": "^1.2.5", + "object-inspect": "^1.13.3", + "side-channel-map": "^1.0.1" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/signal-exit": { + "version": "3.0.7", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==" + }, + "node_modules/simple-concat": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/simple-concat/-/simple-concat-1.0.1.tgz", + "integrity": "sha512-cSFtAPtRhljv69IK0hTVZQ+OfE9nePi/rtJmw5UjHeVyVroEqJXP1sFztKUy1qU+xvz3u/sfYJLa947b7nAN2Q==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ] + }, + "node_modules/simple-get": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/simple-get/-/simple-get-4.0.1.tgz", + "integrity": "sha512-brv7p5WgH0jmQJr1ZDDfKDOSeWWg+OVypG99A/5vYGPqJ6pxiaHLy8nxtFjBA7oMa01ebA9gfh1uMCFqOuXxvA==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "dependencies": { + "decompress-response": "^6.0.0", + "once": "^1.3.1", + "simple-concat": "^1.0.0" + } + }, + "node_modules/smart-buffer": { + "version": "4.2.0", + "resolved": "https://registry.npmjs.org/smart-buffer/-/smart-buffer-4.2.0.tgz", + "integrity": "sha512-94hK0Hh8rPqQl2xXc3HsaBoOXKV20MToPkcXvwbISWLEs+64sBq5kFgn2kJDHb1Pry9yrP0dxrCI9RRci7RXKg==", + "optional": true, + "engines": { + "node": ">= 6.0.0", + "npm": ">= 3.0.0" + } + }, + "node_modules/socks": { + "version": "2.8.7", + "resolved": "https://registry.npmjs.org/socks/-/socks-2.8.7.tgz", + "integrity": "sha512-HLpt+uLy/pxB+bum/9DzAgiKS8CX1EvbWxI4zlmgGCExImLdiad2iCwXT5Z4c9c3Eq8rP2318mPW2c+QbtjK8A==", + "optional": true, + "dependencies": { + "ip-address": "^10.0.1", + "smart-buffer": "^4.2.0" + }, + "engines": { + "node": ">= 10.0.0", + "npm": ">= 3.0.0" + } + }, + "node_modules/socks-proxy-agent": { + "version": "6.2.1", + "resolved": "https://registry.npmjs.org/socks-proxy-agent/-/socks-proxy-agent-6.2.1.tgz", + "integrity": "sha512-a6KW9G+6B3nWZ1yB8G7pJwL3ggLy1uTzKAgCb7ttblwqdz9fMGJUuTy3uFzEP48FAs9FLILlmzDlE2JJhVQaXQ==", + "optional": true, + "dependencies": { + "agent-base": "^6.0.2", + "debug": "^4.3.3", + "socks": "^2.6.2" + }, + "engines": { + "node": ">= 10" + } + }, + "node_modules/socks-proxy-agent/node_modules/debug": { + "version": "4.4.3", + "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz", + "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==", + "optional": true, + "dependencies": { + "ms": "^2.1.3" + }, + "engines": { + "node": ">=6.0" + }, + "peerDependenciesMeta": { + "supports-color": { + "optional": true + } + } + }, + "node_modules/socks-proxy-agent/node_modules/ms": { + "version": "2.1.3", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz", + "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==", + "optional": true + }, + "node_modules/sqlite3": { + "version": "5.1.7", + "resolved": "https://registry.npmjs.org/sqlite3/-/sqlite3-5.1.7.tgz", + "integrity": "sha512-GGIyOiFaG+TUra3JIfkI/zGP8yZYLPQ0pl1bH+ODjiX57sPhrLU5sQJn1y9bDKZUFYkX1crlrPfSYt0BKKdkog==", + "hasInstallScript": true, + "dependencies": { + "bindings": "^1.5.0", + "node-addon-api": "^7.0.0", + "prebuild-install": "^7.1.1", + "tar": "^6.1.11" + }, + "optionalDependencies": { + "node-gyp": "8.x" + }, + "peerDependencies": { + "node-gyp": "8.x" + }, + "peerDependenciesMeta": { + "node-gyp": { + "optional": true + } + } + }, + "node_modules/sqlite3/node_modules/node-addon-api": { + "version": "7.1.1", + "resolved": "https://registry.npmjs.org/node-addon-api/-/node-addon-api-7.1.1.tgz", + "integrity": "sha512-5m3bsyrjFWE1xf7nz7YXdN4udnVtXK6/Yfgn5qnahL6bCkf2yKt4k3nuTKAtT4r3IG8JNR2ncsIMdZuAzJjHQQ==" + }, + "node_modules/ssri": { + "version": "8.0.1", + "resolved": "https://registry.npmjs.org/ssri/-/ssri-8.0.1.tgz", + "integrity": "sha512-97qShzy1AiyxvPNIkLWoGua7xoQzzPjQ0HAH4B0rWKo7SZ6USuPcrUiAFrws0UH8RrbWmgq3LMTObhPIHbbBeQ==", + "optional": true, + "dependencies": { + "minipass": "^3.1.1" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/statuses": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz", + "integrity": "sha512-RwNA9Z/7PrK06rYLIzFMlaF+l73iwpzsqRIFgbMLbTcLD6cOao82TaWefPXQvB2fOC4AjuYSEndS7N/mTCbkdQ==", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/string_decoder": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz", + "integrity": "sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==", + "dependencies": { + "safe-buffer": "~5.2.0" + } + }, + "node_modules/string-width": { + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", + "dependencies": { + "emoji-regex": "^8.0.0", + "is-fullwidth-code-point": "^3.0.0", + "strip-ansi": "^6.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/strip-ansi": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/strip-json-comments": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz", + "integrity": "sha512-4gB8na07fecVVkOI6Rs4e7T6NOTki5EmL7TUduTs6bu3EdnSycntVJ4re8kgZA+wx9IueI2Y11bfbgwtzuE0KQ==", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/tar": { + "version": "6.2.1", + "resolved": "https://registry.npmjs.org/tar/-/tar-6.2.1.tgz", + "integrity": "sha512-DZ4yORTwrbTj/7MZYq2w+/ZFdI6OZ/f9SFHR+71gIVUZhOQPHzVCLpvRnPgyaMpfWxxk/4ONva3GQSyNIKRv6A==", + "dependencies": { + "chownr": "^2.0.0", + "fs-minipass": "^2.0.0", + "minipass": "^5.0.0", + "minizlib": "^2.1.1", + "mkdirp": "^1.0.3", + "yallist": "^4.0.0" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/tar-fs": { + "version": "2.1.4", + "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.4.tgz", + "integrity": "sha512-mDAjwmZdh7LTT6pNleZ05Yt65HC3E+NiQzl672vQG38jIrehtJk/J3mNwIg+vShQPcLF/LV7CMnDW6vjj6sfYQ==", + "dependencies": { + "chownr": "^1.1.1", + "mkdirp-classic": "^0.5.2", + "pump": "^3.0.0", + "tar-stream": "^2.1.4" + } + }, + "node_modules/tar-fs/node_modules/chownr": { + "version": "1.1.4", + "resolved": "https://registry.npmjs.org/chownr/-/chownr-1.1.4.tgz", + "integrity": "sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg==" + }, + "node_modules/tar-stream": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/tar-stream/-/tar-stream-2.2.0.tgz", + "integrity": "sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==", + "dependencies": { + "bl": "^4.0.3", + "end-of-stream": "^1.4.1", + "fs-constants": "^1.0.0", + "inherits": "^2.0.3", + "readable-stream": "^3.1.1" + }, + "engines": { + "node": ">=6" + } + }, + "node_modules/tar/node_modules/minipass": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz", + "integrity": "sha512-3FnjYuehv9k6ovOEbyOswadCDPX1piCfhV8ncmYtHOjuPwylVWsghTLo7rabjC3Rx5xD4HDx8Wm1xnMF7S5qFQ==", + "engines": { + "node": ">=8" + } + }, + "node_modules/toidentifier": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz", + "integrity": "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==", + "engines": { + "node": ">=0.6" + } + }, + "node_modules/tr46": { + "version": "0.0.3", + "resolved": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz", + "integrity": "sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw==" + }, + "node_modules/tunnel-agent": { + "version": "0.6.0", + "resolved": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz", + "integrity": "sha512-McnNiV1l8RYeY8tBgEpuodCC1mLUdbSN+CYBL7kJsJNInOP8UjDDEwdk6Mw60vdLLrr5NHKZhMAOSrR2NZuQ+w==", + "dependencies": { + "safe-buffer": "^5.0.1" + }, + "engines": { + "node": "*" + } + }, + "node_modules/type-is": { + "version": "1.6.18", + "resolved": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz", + "integrity": "sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==", + "dependencies": { + "media-typer": "0.3.0", + "mime-types": "~2.1.24" + }, + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/uid-safe": { + "version": "2.1.5", + "resolved": "https://registry.npmjs.org/uid-safe/-/uid-safe-2.1.5.tgz", + "integrity": "sha512-KPHm4VL5dDXKz01UuEd88Df+KzynaohSL9fBh096KWAxSKZQDI2uBrVqtvRM4rwrIrRRKsdLNML/lnaaVSRioA==", + "dependencies": { + "random-bytes": "~1.0.0" + }, + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/unique-filename": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/unique-filename/-/unique-filename-1.1.1.tgz", + "integrity": "sha512-Vmp0jIp2ln35UTXuryvjzkjGdRyf9b2lTXuSYUiPmzRcl3FDtYqAwOnTJkAngD9SWhnoJzDbTKwaOrZ+STtxNQ==", + "optional": true, + "dependencies": { + "unique-slug": "^2.0.0" + } + }, + "node_modules/unique-slug": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/unique-slug/-/unique-slug-2.0.2.tgz", + "integrity": "sha512-zoWr9ObaxALD3DOPfjPSqxt4fnZiWblxHIgeWqW8x7UqDzEtHEQLzji2cuJYQFCU6KmoJikOYAZlrTHHebjx2w==", + "optional": true, + "dependencies": { + "imurmurhash": "^0.1.4" + } + }, + "node_modules/unpipe": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz", + "integrity": "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/util-deprecate": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz", + "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==" + }, + "node_modules/utils-merge": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz", + "integrity": "sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==", + "engines": { + "node": ">= 0.4.0" + } + }, + "node_modules/vary": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz", + "integrity": "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/webidl-conversions": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz", + "integrity": "sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ==" + }, + "node_modules/whatwg-url": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz", + "integrity": "sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw==", + "dependencies": { + "tr46": "~0.0.3", + "webidl-conversions": "^3.0.0" + } + }, + "node_modules/which": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz", + "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==", + "optional": true, + "dependencies": { + "isexe": "^2.0.0" + }, + "bin": { + "node-which": "bin/node-which" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/wide-align": { + "version": "1.1.5", + "resolved": "https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz", + "integrity": "sha512-eDMORYaPNZ4sQIuuYPDHdQvf4gyCF9rEEV/yPxGfwPkRodwEgiMUUXTx/dex+Me0wxx53S+NgUHaP7y3MGlDmg==", + "dependencies": { + "string-width": "^1.0.2 || 2 || 3 || 4" + } + }, + "node_modules/wrappy": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", + "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==" + }, + "node_modules/yallist": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz", + "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==" + } + } +} diff --git a/backend/package.json b/backend/package.json new file mode 100644 index 0000000..a812eb7 --- /dev/null +++ b/backend/package.json @@ -0,0 +1,24 @@ +{ + "name": "timer-app-backend", + "version": "2.0.0", + "description": "Zeiterfassung mit Kostenberechnung - Backend", + "main": "server.js", + "private": true, + "scripts": { + "start": "node server.js", + "hash-password": "node tools/hash-password.js", + "gen-secret": "node -e \"console.log(require('crypto').randomBytes(48).toString('hex'))\"" + }, + "engines": { + "node": ">=18" + }, + "dependencies": { + "bcrypt": "^5.1.1", + "dotenv": "^16.3.1", + "express": "^4.18.2", + "express-rate-limit": "^8.5.2", + "express-session": "^1.17.3", + "openid-client": "^6.8.4", + "sqlite3": "^5.1.6" + } +} diff --git a/backend/server.js b/backend/server.js new file mode 100644 index 0000000..000142f --- /dev/null +++ b/backend/server.js @@ -0,0 +1,616 @@ +/** + * Timer App - Backend + * + * Zeiterfassung mit Kostenberechnung fuer Ladengeschaefte. + * + * Kernprinzip: Timer leben SERVERSEITIG in der Datenbank, nicht im Browser. + * Dadurch ueberleben sie Reload, Browserwechsel, Tablet-Neustart und sind + * auf mehreren Geraeten gleichzeitig sichtbar. + */ + +const express = require('express'); +const session = require('express-session'); +const rateLimit = require('express-rate-limit'); +const sqlite3 = require('sqlite3').verbose(); +const bcrypt = require('bcrypt'); +const path = require('path'); +require('dotenv').config(); +const oidc = require('./oidc'); + +const app = express(); + +// --------------------------------------------------------------------------- +// Konfiguration +// --------------------------------------------------------------------------- + +const PORT = parseInt(process.env.PORT) || 3003; +const HOST = process.env.HOST || '127.0.0.1'; +const TRUST_PROXY = process.env.TRUST_PROXY || '1'; + +// COOKIE_SECURE=true verlangt HTTPS. Ohne HTTPS wird dann KEIN Cookie gesetzt +// und der Login scheitert stumm -> siehe DEPLOY.md, Abschnitt "Stolpersteine". +const COOKIE_SECURE = String(process.env.COOKIE_SECURE || 'true') === 'true'; + +const SESSION_SECRET = process.env.SESSION_SECRET; +const PASSWORD_HASH = process.env.PASSWORD_HASH; +const PASSWORD_PLAIN = process.env.PASSWORD; + +const LOGIN_MAX_ATTEMPTS = parseInt(process.env.LOGIN_MAX_ATTEMPTS) || 20; +const LOGIN_WINDOW_MIN = parseInt(process.env.LOGIN_WINDOW_MIN) || 15; + +const DB_PATH = process.env.DB_PATH || path.join(__dirname, '../data/timer.db'); + +// --- Startpruefungen: lieber sofort und laut scheitern als still falsch laufen + +if (!SESSION_SECRET) { + console.error('FATAL: SESSION_SECRET ist nicht gesetzt. Siehe .env.example.'); + process.exit(1); +} + +// Login ist ueber Authentik (OIDC) ODER Passwort moeglich. Nur wenn KEINES +// von beiden konfiguriert ist, gibt es keinen Anmeldeweg -> laut abbrechen. +if (!oidc.isConfigured() && !PASSWORD_HASH && !PASSWORD_PLAIN) { + console.error('FATAL: Kein Anmeldeweg konfiguriert — weder Authentik (OIDC_*) noch PASSWORD_HASH/PASSWORD.'); + process.exit(1); +} + +// Passwort-Login ist entfernt; passwordHash wird nur noch definiert, falls in der +// .env (Altbestand) ein Wert steht — schadet nicht, wird aber nicht mehr genutzt. +let passwordHash = PASSWORD_HASH; +if (!passwordHash && PASSWORD_PLAIN) { + passwordHash = bcrypt.hashSync(PASSWORD_PLAIN, 12); +} + +app.set('trust proxy', TRUST_PROXY === 'false' ? false : (isNaN(parseInt(TRUST_PROXY)) ? TRUST_PROXY : parseInt(TRUST_PROXY))); + +// --------------------------------------------------------------------------- +// Datenbank +// --------------------------------------------------------------------------- + +const db = new sqlite3.Database(DB_PATH, (err) => { + if (err) { + console.error('FATAL: Datenbank nicht oeffenbar:', DB_PATH, err.message); + process.exit(1); + } + console.log('Datenbank verbunden:', DB_PATH); + initDatabase(); +}); + +const dbRun = (sql, params = []) => new Promise((resolve, reject) => { + db.run(sql, params, function (err) { err ? reject(err) : resolve(this); }); +}); +const dbGet = (sql, params = []) => new Promise((resolve, reject) => { + db.get(sql, params, (err, row) => err ? reject(err) : resolve(row)); +}); +const dbAll = (sql, params = []) => new Promise((resolve, reject) => { + db.all(sql, params, (err, rows) => err ? reject(err) : resolve(rows)); +}); + +async function initDatabase() { + try { + await dbRun('PRAGMA journal_mode = WAL'); + + await dbRun(`CREATE TABLE IF NOT EXISTS sessions ( + id INTEGER PRIMARY KEY AUTOINCREMENT, + session_id TEXT NOT NULL, + start_time INTEGER NOT NULL, + end_time INTEGER, + duration INTEGER, + amount REAL, + created_at INTEGER DEFAULT (strftime('%s', 'now')) + )`); + + // Laufende Timer. Ein Datensatz pro Platz/Kunde. + await dbRun(`CREATE TABLE IF NOT EXISTS active_timers ( + id INTEGER PRIMARY KEY AUTOINCREMENT, + customer_name TEXT NOT NULL DEFAULT '', + started_at INTEGER, + accumulated_ms INTEGER NOT NULL DEFAULT 0, + is_running INTEGER NOT NULL DEFAULT 1, + created_at INTEGER NOT NULL + )`); + + await dbRun(`CREATE TABLE IF NOT EXISTS settings ( + key TEXT PRIMARY KEY, + value TEXT NOT NULL + )`); + + // Migration: Spalten fuer Kundenname und geltenden Tarif nachruesten. + const cols = await dbAll(`PRAGMA table_info(sessions)`); + const names = cols.map(c => c.name); + if (!names.includes('customer_name')) { + await dbRun(`ALTER TABLE sessions ADD COLUMN customer_name TEXT DEFAULT ''`); + console.log('Migration: sessions.customer_name ergaenzt'); + } + if (!names.includes('rate_amount')) { + await dbRun(`ALTER TABLE sessions ADD COLUMN rate_amount REAL`); + console.log('Migration: sessions.rate_amount ergaenzt'); + } + if (!names.includes('rate_interval')) { + await dbRun(`ALTER TABLE sessions ADD COLUMN rate_interval INTEGER`); + console.log('Migration: sessions.rate_interval ergaenzt'); + } + + await dbRun(`CREATE INDEX IF NOT EXISTS idx_sessions_created ON sessions(created_at DESC)`); + + // Standardtarif einmalig setzen (aus .env uebernommen, falls vorhanden) + const existing = await dbGet(`SELECT value FROM settings WHERE key = 'rate_amount'`); + if (!existing) { + const envAmount = parseInt(process.env.RATE_PER_10MIN) || 10; + await dbRun(`INSERT INTO settings (key, value) VALUES ('rate_amount', ?)`, [String(envAmount)]); + await dbRun(`INSERT INTO settings (key, value) VALUES ('rate_interval', '10')`); + console.log(`Standardtarif gesetzt: ${envAmount} EUR pro 10 Minuten`); + } + + console.log('Datenbank bereit'); + } catch (err) { + console.error('FATAL: Datenbank-Initialisierung fehlgeschlagen:', err.message); + process.exit(1); + } +} + +// --------------------------------------------------------------------------- +// Tarif & Berechnung (bewusst NUR serverseitig - der Client rechnet nur fuer +// die Anzeige mit, der verbindliche Betrag entsteht hier) +// --------------------------------------------------------------------------- + +async function getRate() { + const rows = await dbAll(`SELECT key, value FROM settings WHERE key IN ('rate_amount','rate_interval')`); + const map = Object.fromEntries(rows.map(r => [r.key, r.value])); + return { + rateAmount: parseFloat(map.rate_amount) || 10, + rateInterval: parseInt(map.rate_interval) || 10 + }; +} + +/** Jede angefangene Einheit wird voll berechnet. */ +function calcAmount(ms, rateAmount, rateInterval) { + if (!ms || ms <= 0) return 0; + const minutes = Math.ceil(ms / 60000); + const units = Math.ceil(minutes / rateInterval); + return Math.round(units * rateAmount * 100) / 100; +} + +/** Vergangene Zeit eines Timers - laufend oder pausiert. */ +function elapsedMs(timer) { + const base = timer.accumulated_ms || 0; + if (!timer.is_running || !timer.started_at) return base; + return base + (Date.now() - timer.started_at); +} + +async function decorate(timer, rate) { + const ms = elapsedMs(timer); + return { + id: timer.id, + customerName: timer.customer_name || '', + isRunning: !!timer.is_running, + elapsedMs: ms, + amount: calcAmount(ms, rate.rateAmount, rate.rateInterval), + startedAt: timer.started_at, + createdAt: timer.created_at, + serverNow: Date.now() + }; +} + +// --------------------------------------------------------------------------- +// Sitzungsspeicher +// +// Bewusst selbst gebaut statt per Zusatzpaket: der Standardspeicher von +// express-session liegt im Arbeitsspeicher: nach jedem Neustart des Dienstes +// muessten sich alle Geraete neu anmelden. Da die Timer den Neustart +// ueberleben, waere das ein Bruch im Bedienablauf. +// --------------------------------------------------------------------------- + +class SqliteSessionStore extends session.Store { + constructor() { + super(); + db.run(`CREATE TABLE IF NOT EXISTS user_sessions ( + sid TEXT PRIMARY KEY, + expires INTEGER NOT NULL, + data TEXT NOT NULL + )`, () => { + db.run(`CREATE INDEX IF NOT EXISTS idx_user_sessions_expires ON user_sessions(expires)`); + }); + + // Abgelaufene Sitzungen stuendlich entfernen + this.cleanupTimer = setInterval(() => { + db.run(`DELETE FROM user_sessions WHERE expires < ?`, [Date.now()]); + }, 60 * 60 * 1000); + this.cleanupTimer.unref(); + } + + _expiry(sess) { + const ms = sess && sess.cookie && sess.cookie.maxAge; + return Date.now() + (typeof ms === 'number' ? ms : 24 * 60 * 60 * 1000); + } + + get(sid, cb) { + db.get(`SELECT data, expires FROM user_sessions WHERE sid = ?`, [sid], (err, row) => { + if (err) return cb(err); + if (!row) return cb(null, null); + if (row.expires < Date.now()) { + return db.run(`DELETE FROM user_sessions WHERE sid = ?`, [sid], () => cb(null, null)); + } + try { + cb(null, JSON.parse(row.data)); + } catch (e) { + cb(null, null); + } + }); + } + + set(sid, sess, cb = () => {}) { + let data; + try { + data = JSON.stringify(sess); + } catch (e) { + return cb(e); + } + db.run(`INSERT INTO user_sessions (sid, expires, data) VALUES (?, ?, ?) + ON CONFLICT(sid) DO UPDATE SET expires = excluded.expires, data = excluded.data`, + [sid, this._expiry(sess), data], cb); + } + + touch(sid, sess, cb = () => {}) { + db.run(`UPDATE user_sessions SET expires = ? WHERE sid = ?`, [this._expiry(sess), sid], cb); + } + + destroy(sid, cb = () => {}) { + db.run(`DELETE FROM user_sessions WHERE sid = ?`, [sid], cb); + } +} + +// --------------------------------------------------------------------------- +// Middleware +// --------------------------------------------------------------------------- + +app.use(express.json()); +app.use(express.urlencoded({ extended: true })); + +app.use(session({ + store: new SqliteSessionStore(), + secret: SESSION_SECRET, + resave: false, + saveUninitialized: false, + rolling: true, // aktive Nutzung verlaengert die Anmeldung + cookie: { + maxAge: 24 * 60 * 60 * 1000, + httpOnly: true, + sameSite: 'lax', + secure: COOKIE_SECURE + } +})); + +app.use(express.static(path.join(__dirname, '../frontend'))); + +function requireAuth(req, res, next) { + if (req.session.authenticated) return next(); + res.status(401).json({ error: 'Nicht angemeldet' }); +} + +// Fehler aus async-Handlern sauber weiterreichen +const wrap = fn => (req, res, next) => Promise.resolve(fn(req, res, next)).catch(next); + +// --------------------------------------------------------------------------- +// Auth +// --------------------------------------------------------------------------- + +// Anmeldung ausschliesslich ueber Authentik (SSO). Der fruehere Passwort-Login +// (POST /api/login) wurde bewusst entfernt. + +app.get('/api/auth/status', (req, res) => { + res.json({ + authenticated: !!req.session.authenticated, + user: req.session.user || null, // bei Authentik-Login gesetzt, bei Passwort-Login null + oidcConfigured: oidc.isReady() // steuert den "Anmelden mit Authentik"-Button + }); +}); + +// --- Authentik (OpenID Connect) ------------------------------------------- + +// Fuers Frontend: ist der Authentik-Login verfuegbar? +app.get('/auth/config', (req, res) => { + res.json({ oidcConfigured: oidc.isReady() }); +}); + +// Start des Authentik-Logins -> Weiterleitung zu Authentik +app.get('/auth/login', wrap(async (req, res) => { + if (!oidc.isReady()) { + return res.status(503).send('Authentik ist nicht konfiguriert.'); + } + const { url, codeVerifier, state } = await oidc.buildLoginUrl(); + req.session.oidcVerifier = codeVerifier; + req.session.oidcState = state; + req.session.save(err => { + if (err) return res.status(500).send('Session-Fehler'); + res.redirect(url); + }); +})); + +// Rueckkehr von Authentik (Code -> Tokens -> Sitzung) +app.get('/auth/callback', wrap(async (req, res) => { + const { oidcVerifier, oidcState } = req.session; + if (!oidcVerifier || !oidcState) { + return res.redirect('/?error=session'); + } + try { + const currentUrl = new URL(req.originalUrl, oidc.REDIRECT_URI); + const { user, idToken } = await oidc.handleCallback(currentUrl, oidcVerifier, oidcState); + req.session.regenerate(err => { + if (err) return res.redirect('/?error=session'); + req.session.authenticated = true; + req.session.userId = req.sessionID; + req.session.user = { username: user.username, displayName: user.displayName, email: user.email }; + req.session.idToken = idToken; // fuer den Single-Logout + req.session.save(e => res.redirect(e ? '/?error=session' : '/')); + }); + } catch (err) { + console.error('[auth] Callback-Fehler:', err.message || err); + res.redirect('/?error=oidc'); + } +})); + +// Logout per GET (Browser navigiert hierher): lokal beenden und – falls per +// Authentik angemeldet – auch die SSO-Sitzung mitbeenden (RP-Initiated Logout). +app.get('/auth/logout', (req, res) => { + if (req.get('sec-fetch-site') === 'cross-site') { + return res.status(403).send('Abmeldung nur aus der Anwendung heraus.'); + } + const idToken = req.session.idToken; + const logoutUrl = idToken ? oidc.buildLogoutUrl(idToken) : null; + req.session.destroy(() => { + res.clearCookie('connect.sid'); + res.redirect(logoutUrl || '/'); + }); +}); + +// Passwort-Logout (Fallback, wird per fetch aufgerufen) +app.post('/api/logout', (req, res) => { + req.session.destroy(() => res.json({ success: true })); +}); + +// --------------------------------------------------------------------------- +// Laufende Timer +// --------------------------------------------------------------------------- + +app.get('/api/timers', requireAuth, wrap(async (req, res) => { + const rate = await getRate(); + const rows = await dbAll(`SELECT * FROM active_timers ORDER BY created_at ASC`); + const timers = await Promise.all(rows.map(t => decorate(t, rate))); + res.json({ timers, rate, serverNow: Date.now() }); +})); + +app.post('/api/timers', requireAuth, wrap(async (req, res) => { + const name = String((req.body && req.body.customerName) || '').trim().slice(0, 80); + const now = Date.now(); + const result = await dbRun( + `INSERT INTO active_timers (customer_name, started_at, accumulated_ms, is_running, created_at) + VALUES (?, ?, 0, 1, ?)`, + [name, now, now] + ); + const rate = await getRate(); + const row = await dbGet(`SELECT * FROM active_timers WHERE id = ?`, [result.lastID]); + res.json({ timer: await decorate(row, rate) }); +})); + +app.post('/api/timers/:id/pause', requireAuth, wrap(async (req, res) => { + const t = await dbGet(`SELECT * FROM active_timers WHERE id = ?`, [req.params.id]); + if (!t) return res.status(404).json({ error: 'Timer nicht gefunden' }); + if (!t.is_running) return res.json({ timer: await decorate(t, await getRate()) }); + + await dbRun( + `UPDATE active_timers SET accumulated_ms = ?, is_running = 0, started_at = NULL WHERE id = ?`, + [elapsedMs(t), t.id] + ); + const row = await dbGet(`SELECT * FROM active_timers WHERE id = ?`, [t.id]); + res.json({ timer: await decorate(row, await getRate()) }); +})); + +app.post('/api/timers/:id/resume', requireAuth, wrap(async (req, res) => { + const t = await dbGet(`SELECT * FROM active_timers WHERE id = ?`, [req.params.id]); + if (!t) return res.status(404).json({ error: 'Timer nicht gefunden' }); + if (t.is_running) return res.json({ timer: await decorate(t, await getRate()) }); + + await dbRun(`UPDATE active_timers SET started_at = ?, is_running = 1 WHERE id = ?`, [Date.now(), t.id]); + const row = await dbGet(`SELECT * FROM active_timers WHERE id = ?`, [t.id]); + res.json({ timer: await decorate(row, await getRate()) }); +})); + +app.patch('/api/timers/:id', requireAuth, wrap(async (req, res) => { + const name = String((req.body && req.body.customerName) || '').trim().slice(0, 80); + const t = await dbGet(`SELECT * FROM active_timers WHERE id = ?`, [req.params.id]); + if (!t) return res.status(404).json({ error: 'Timer nicht gefunden' }); + await dbRun(`UPDATE active_timers SET customer_name = ? WHERE id = ?`, [name, t.id]); + const row = await dbGet(`SELECT * FROM active_timers WHERE id = ?`, [t.id]); + res.json({ timer: await decorate(row, await getRate()) }); +})); + +/** Beenden: schreibt die Session in die Historie und entfernt den Timer. */ +app.post('/api/timers/:id/stop', requireAuth, wrap(async (req, res) => { + const t = await dbGet(`SELECT * FROM active_timers WHERE id = ?`, [req.params.id]); + if (!t) return res.status(404).json({ error: 'Timer nicht gefunden' }); + + const rate = await getRate(); + const duration = elapsedMs(t); + const amount = calcAmount(duration, rate.rateAmount, rate.rateInterval); + const endTime = Date.now(); + + if (duration <= 0) { + await dbRun(`DELETE FROM active_timers WHERE id = ?`, [t.id]); + return res.json({ saved: false, reason: 'Keine Zeit erfasst - nichts gespeichert.' }); + } + + const result = await dbRun( + `INSERT INTO sessions (session_id, start_time, end_time, duration, amount, customer_name, rate_amount, rate_interval, created_at) + VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`, + [req.session.userId || 'unknown', t.created_at, endTime, duration, amount, + t.customer_name || '', rate.rateAmount, rate.rateInterval, Math.floor(endTime / 1000)] + ); + await dbRun(`DELETE FROM active_timers WHERE id = ?`, [t.id]); + + res.json({ saved: true, id: result.lastID, duration, amount }); +})); + +/** Verwerfen: Timer weg, nichts in der Historie. */ +app.delete('/api/timers/:id', requireAuth, wrap(async (req, res) => { + await dbRun(`DELETE FROM active_timers WHERE id = ?`, [req.params.id]); + res.json({ success: true }); +})); + +// --------------------------------------------------------------------------- +// Einstellungen (serverseitig - gelten fuer ALLE Geraete) +// --------------------------------------------------------------------------- + +app.get('/api/settings', requireAuth, wrap(async (req, res) => { + res.json(await getRate()); +})); + +app.put('/api/settings', requireAuth, wrap(async (req, res) => { + const amount = parseFloat(req.body && req.body.rateAmount); + const interval = parseInt(req.body && req.body.rateInterval); + + if (!isFinite(amount) || amount <= 0 || amount > 10000) { + return res.status(400).json({ error: 'Betrag muss zwischen 0 und 10000 liegen.' }); + } + if (!Number.isInteger(interval) || interval < 1 || interval > 600) { + return res.status(400).json({ error: 'Intervall muss zwischen 1 und 600 Minuten liegen.' }); + } + + await dbRun(`INSERT INTO settings (key,value) VALUES ('rate_amount',?) + ON CONFLICT(key) DO UPDATE SET value = excluded.value`, [String(amount)]); + await dbRun(`INSERT INTO settings (key,value) VALUES ('rate_interval',?) + ON CONFLICT(key) DO UPDATE SET value = excluded.value`, [String(interval)]); + + res.json(await getRate()); +})); + +// --------------------------------------------------------------------------- +// Historie +// --------------------------------------------------------------------------- + +/** Baut die WHERE-Klausel fuer den Datumsfilter (Serverzeitzone). */ +function dateFilter(query) { + const clauses = []; + const params = []; + if (query.from) { + clauses.push(`date(created_at, 'unixepoch', 'localtime') >= date(?)`); + params.push(String(query.from)); + } + if (query.to) { + clauses.push(`date(created_at, 'unixepoch', 'localtime') <= date(?)`); + params.push(String(query.to)); + } + if (query.q) { + clauses.push(`customer_name LIKE ?`); + params.push('%' + String(query.q) + '%'); + } + return { where: clauses.length ? 'WHERE ' + clauses.join(' AND ') : '', params }; +} + +app.get('/api/sessions', requireAuth, wrap(async (req, res) => { + const limit = Math.min(parseInt(req.query.limit) || 50, 500); + const offset = Math.max(parseInt(req.query.offset) || 0, 0); + const { where, params } = dateFilter(req.query); + + const rows = await dbAll( + `SELECT * FROM sessions ${where} ORDER BY created_at DESC, id DESC LIMIT ? OFFSET ?`, + [...params, limit, offset] + ); + // Summen ueber den GESAMTEN Filter, nicht nur ueber die angezeigte Seite + const totals = await dbGet( + `SELECT COUNT(*) AS count, COALESCE(SUM(duration),0) AS duration, COALESCE(SUM(amount),0) AS amount + FROM sessions ${where}`, + params + ); + + res.json({ sessions: rows, totals, limit, offset }); +})); + +app.delete('/api/sessions/:id', requireAuth, wrap(async (req, res) => { + const result = await dbRun(`DELETE FROM sessions WHERE id = ?`, [req.params.id]); + if (result.changes === 0) return res.status(404).json({ error: 'Eintrag nicht gefunden' }); + res.json({ success: true }); +})); + +/** CSV fuer Excel: Semikolon, UTF-8-BOM, deutsches Dezimalkomma. */ +app.get('/api/sessions/export.csv', requireAuth, wrap(async (req, res) => { + const { where, params } = dateFilter(req.query); + const rows = await dbAll(`SELECT * FROM sessions ${where} ORDER BY created_at DESC, id DESC`, params); + + const esc = v => { + const s = String(v == null ? '' : v); + return /[";\n]/.test(s) ? '"' + s.replace(/"/g, '""') + '"' : s; + }; + const fmtTs = ms => { + if (!ms) return ''; + const d = new Date(Number(ms)); + const p = n => String(n).padStart(2, '0'); + return `${p(d.getDate())}.${p(d.getMonth() + 1)}.${d.getFullYear()} ${p(d.getHours())}:${p(d.getMinutes())}:${p(d.getSeconds())}`; + }; + const fmtDur = ms => { + const s = Math.floor((ms || 0) / 1000); + const p = n => String(n).padStart(2, '0'); + return `${p(Math.floor(s / 3600))}:${p(Math.floor((s % 3600) / 60))}:${p(s % 60)}`; + }; + const fmtNum = n => String(Number(n || 0).toFixed(2)).replace('.', ','); + + const header = ['ID', 'Kunde', 'Beginn', 'Ende', 'Dauer', 'Dauer (Minuten)', 'Betrag (EUR)', 'Tarif']; + const lines = [header.join(';')]; + + for (const r of rows) { + lines.push([ + r.id, + esc(r.customer_name || ''), + fmtTs(r.start_time), + fmtTs(r.end_time), + fmtDur(r.duration), + fmtNum((r.duration || 0) / 60000), + fmtNum(r.amount), + r.rate_amount ? `${fmtNum(r.rate_amount)} EUR / ${r.rate_interval} Min` : '' + ].join(';')); + } + + const stamp = new Date().toISOString().slice(0, 10); + res.setHeader('Content-Type', 'text/csv; charset=utf-8'); + res.setHeader('Content-Disposition', `attachment; filename="zeiterfassung-${stamp}.csv"`); + res.send('' + lines.join('\r\n') + '\r\n'); +})); + +// --------------------------------------------------------------------------- +// Health & Fehlerbehandlung +// --------------------------------------------------------------------------- + +app.get('/health', wrap(async (req, res) => { + const rate = await getRate(); + const active = await dbGet(`SELECT COUNT(*) AS c FROM active_timers`); + res.json({ + status: 'ok', + rateAmount: rate.rateAmount, + rateInterval: rate.rateInterval, + activeTimers: active.c, + uptimeSeconds: Math.floor(process.uptime()) + }); +})); + +app.use((err, req, res, next) => { + console.error('Unerwarteter Fehler:', err); + res.status(500).json({ error: 'Interner Serverfehler' }); +}); + +// --------------------------------------------------------------------------- + +// Authentik-Discovery anstossen (nicht-blockierend; loggt das Ergebnis selbst) +oidc.init(); + +const server = app.listen(PORT, HOST, () => { + console.log(`Timer App laeuft auf http://${HOST}:${PORT}`); + console.log(`Cookie secure: ${COOKIE_SECURE} (bei false ist HTTP erlaubt)`); +}); + +function shutdown(signal) { + console.log(`${signal} empfangen - fahre herunter.`); + server.close(() => db.close(() => process.exit(0))); + setTimeout(() => process.exit(0), 5000).unref(); +} +process.on('SIGTERM', () => shutdown('SIGTERM')); +process.on('SIGINT', () => shutdown('SIGINT')); diff --git a/backend/tools/hash-password.js b/backend/tools/hash-password.js new file mode 100644 index 0000000..9fffa96 --- /dev/null +++ b/backend/tools/hash-password.js @@ -0,0 +1,29 @@ +#!/usr/bin/env node +/** + * Erzeugt einen bcrypt-Hash fuer die .env-Variable PASSWORD_HASH. + * + * Aufruf: npm run hash-password -- "MeinPasswort" + * or: node tools/hash-password.js "MeinPasswort" + */ + +const bcrypt = require('bcrypt'); + +const password = process.argv[2]; + +if (!password) { + console.error('Aufruf: npm run hash-password -- "DasPasswort"'); + process.exit(1); +} + +if (password.length < 8) { + console.error('FEHLER: Bitte mindestens 8 Zeichen verwenden.'); + process.exit(1); +} + +const hash = bcrypt.hashSync(password, 12); + +console.log(''); +console.log('Diese Zeile in die .env eintragen (und PASSWORD entfernen):'); +console.log(''); +console.log(`PASSWORD_HASH=${hash}`); +console.log(''); diff --git a/deploy/Caddyfile.example b/deploy/Caddyfile.example new file mode 100644 index 0000000..766ca92 --- /dev/null +++ b/deploy/Caddyfile.example @@ -0,0 +1,38 @@ +# Caddy - Beispiel für die Timer App +# +# Caddy holt und erneuert das Zertifikat selbst. Bei dieser Variante +# in der .env COOKIE_SECURE=true und HOST=127.0.0.1 setzen. + +timer.firma.example { + header { + Strict-Transport-Security "max-age=31536000; includeSubDomains" + X-Frame-Options "SAMEORIGIN" + X-Content-Type-Options "nosniff" + Referrer-Policy "no-referrer" + } + + reverse_proxy 127.0.0.1:3003 { + # /health antwortet ohne Anmeldung + health_uri /health + health_interval 30s + health_timeout 10s + } + + log { + output file /var/log/caddy/timer.log { + roll_size 100mb + roll_keep 5 + } + } +} + +# --------------------------------------------------------------------------- +# Variante: nur im internen Netz, ohne öffentliches Zertifikat. +# Caddy stellt dann ein selbstsigniertes Zertifikat aus (Browser-Warnung beim +# ersten Aufruf). COOKIE_SECURE darf hier true bleiben, weil HTTPS gesprochen +# wird. +# +# https://timer.intern:443 { +# tls internal +# reverse_proxy 127.0.0.1:3003 +# } diff --git a/deploy/nginx.conf.example b/deploy/nginx.conf.example new file mode 100644 index 0000000..ab5da89 --- /dev/null +++ b/deploy/nginx.conf.example @@ -0,0 +1,55 @@ +# nginx - Beispiel für die Timer App +# +# Bei dieser Variante in der .env: +# HOST=127.0.0.1 +# TRUST_PROXY=1 +# COOKIE_SECURE=true + +server { + listen 80; + server_name timer.firma.example; + return 301 https://$host$request_uri; +} + +server { + listen 443 ssl http2; + server_name timer.firma.example; + + ssl_certificate /etc/letsencrypt/live/timer.firma.example/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/timer.firma.example/privkey.pem; + + add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; + add_header X-Frame-Options "SAMEORIGIN" always; + add_header X-Content-Type-Options "nosniff" always; + add_header Referrer-Policy "no-referrer" always; + + # CSV-Export darf auch bei vielen Einträgen dauern + client_max_body_size 1m; + proxy_read_timeout 120s; + + location / { + proxy_pass http://127.0.0.1:3003; + proxy_http_version 1.1; + + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + # Ohne diese Zeile hält die App die Verbindung für unverschlüsselt + # und das secure-Cookie kommt nicht zustande: + proxy_set_header X-Forwarded-Proto $scheme; + } +} + +# --------------------------------------------------------------------------- +# Variante ohne TLS, rein intern (z. B. http://timer.intern): +# Dann in der .env COOKIE_SECURE=false setzen, sonst scheitert der Login stumm. +# +# server { +# listen 80; +# server_name timer.intern; +# location / { +# proxy_pass http://127.0.0.1:3003; +# proxy_set_header Host $host; +# proxy_set_header X-Forwarded-Proto $scheme; +# } +# } diff --git a/deploy/timer-app.service b/deploy/timer-app.service new file mode 100644 index 0000000..6c42248 --- /dev/null +++ b/deploy/timer-app.service @@ -0,0 +1,45 @@ +[Unit] +Description=Timer App - Zeiterfassung +Documentation=file:///opt/timer-app/DEPLOY.md +After=network.target + +[Service] +Type=simple + +# --- Anpassen --------------------------------------------------------------- +WorkingDirectory=/opt/timer-app/backend +ExecStart=/usr/bin/node server.js +User=timerapp +Group=timerapp +# ---------------------------------------------------------------------------- + +Restart=always +RestartSec=10 + +Environment=NODE_ENV=production +# Zeitzone bestimmt die Tagesgrenzen im Historien-Filter +Environment=TZ=Europe/Berlin + +# Ausgabe landet im Journal: journalctl -u timer-app -f +StandardOutput=journal +StandardError=journal + +# --- Härtung ---------------------------------------------------------------- +NoNewPrivileges=true +PrivateTmp=true +ProtectSystem=strict +ProtectHome=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectControlGroups=true +RestrictSUIDSGID=true +RestrictNamespaces=true +LockPersonality=true + +# Einziger Pfad mit Schreibrecht: das Datenverzeichnis +ReadWritePaths=/opt/timer-app/data + +LimitNOFILE=4096 + +[Install] +WantedBy=multi-user.target diff --git a/frontend/app.js b/frontend/app.js new file mode 100644 index 0000000..71d673c --- /dev/null +++ b/frontend/app.js @@ -0,0 +1,564 @@ +/** + * Timer App - Frontend + * + * Die Timer selbst leben auf dem Server. Der Browser zaehlt zwischen zwei + * Server-Abgleichen nur lokal weiter, damit die Anzeige fluessig laeuft. + * Gerechnet wird lokal ausschliesslich fuer die Anzeige - der verbindliche + * Betrag entsteht beim Beenden auf dem Server. + */ + +const state = { + timers: [], // {id, customerName, isRunning, baseMs, syncedAt} + rate: { rateAmount: 10, rateInterval: 10 }, + tickHandle: null, + syncHandle: null, + history: { offset: 0, limit: 50, reachedEnd: false } +}; + +const SYNC_INTERVAL_MS = 15000; // Abgleich mit dem Server +const TICK_INTERVAL_MS = 250; // Anzeige-Aktualisierung + +let oidcConfigured = false; // ob Authentik erreichbar ist +let loggedInUser = null; // {username, displayName, email} nach SSO-Login + +// --------------------------------------------------------------------------- +// Hilfsfunktionen +// --------------------------------------------------------------------------- + +function formatTime(ms) { + const total = Math.floor(Math.max(0, ms) / 1000); + const p = n => String(n).padStart(2, '0'); + return `${p(Math.floor(total / 3600))}:${p(Math.floor((total % 3600) / 60))}:${p(total % 60)}`; +} + +function formatEuro(value) { + return '€' + Number(value || 0).toLocaleString('de-DE', { + minimumFractionDigits: Number.isInteger(Number(value)) ? 0 : 2, + maximumFractionDigits: 2 + }); +} + +function calcAmount(ms) { + if (!ms || ms <= 0) return 0; + const minutes = Math.ceil(ms / 60000); + const units = Math.ceil(minutes / state.rate.rateInterval); + return Math.round(units * state.rate.rateAmount * 100) / 100; +} + +/** Aktuelle Zeit eines Timers - lokal fortgeschrieben seit dem letzten Sync. */ +function currentMs(timer) { + if (!timer.isRunning) return timer.baseMs; + return timer.baseMs + (Date.now() - timer.syncedAt); +} + +function escapeHtml(str) { + const div = document.createElement('div'); + div.textContent = str == null ? '' : String(str); + return div.innerHTML; +} + +let toastTimeout = null; +function toast(message, kind = 'info') { + const el = document.getElementById('toast'); + el.textContent = message; + el.className = 'toast show ' + kind; + clearTimeout(toastTimeout); + toastTimeout = setTimeout(() => { el.className = 'toast'; }, 4000); +} + +async function api(url, options = {}) { + const response = await fetch(url, { + headers: { 'Content-Type': 'application/json' }, + ...options + }); + if (response.status === 401) { + stopLoops(); + showLogin(); + throw new Error('Nicht angemeldet'); + } + if (!response.ok) { + let msg = 'Serverfehler'; + try { msg = (await response.json()).error || msg; } catch (e) { /* egal */ } + throw new Error(msg); + } + return response.status === 204 ? null : response.json(); +} + +// --------------------------------------------------------------------------- +// Ansichten +// --------------------------------------------------------------------------- + +function switchView(id) { + document.querySelectorAll('.view').forEach(v => v.classList.remove('active')); + document.getElementById(id).classList.add('active'); +} + +function showLogin() { + document.getElementById('header').style.display = 'none'; + switchView('loginView'); + applyLoginMode(); +} + +// Anmeldung ausschliesslich ueber Authentik. Ist Authentik nicht erreichbar, +// wird der Hinweis unter dem Button eingeblendet. +function applyLoginMode() { + const err = document.getElementById('loginError'); + if (err) err.classList.toggle('show', !oidcConfigured); +} + +function showTimer() { + switchView('timerView'); +} + +async function showHistory() { + switchView('historyView'); + state.history.offset = 0; + state.history.reachedEnd = false; + await loadHistory(true); +} + +async function showSettings() { + switchView('settingsView'); + await loadSettings(); +} + +// --------------------------------------------------------------------------- +// Anmeldung +// --------------------------------------------------------------------------- + +async function checkAuth() { + try { + const data = await api('/api/auth/status'); + oidcConfigured = !!data.oidcConfigured; + loggedInUser = data.user || null; + if (data.authenticated) { + await enterApp(); + } else { + showLogin(); + } + } catch (e) { + showLogin(); + } +} + +async function enterApp() { + document.getElementById('header').style.display = 'flex'; + renderCurrentUser(); + showTimer(); + await syncTimers(); + startLoops(); +} + +// Zeigt den angemeldeten Authentik-Nutzer oben rechts im Header. +function renderCurrentUser() { + const el = document.getElementById('currentUser'); + if (!el) return; + const u = loggedInUser; + el.textContent = u ? (u.displayName || u.username || '') : ''; + el.title = u && u.email ? u.email : 'Angemeldet'; +} + +async function logout() { + const running = state.timers.filter(t => t.isRunning).length; + if (running > 0 && !confirm( + `${running} Timer ${running === 1 ? 'läuft' : 'laufen'} noch.\n\n` + + `Sie laufen serverseitig weiter und sind nach dem nächsten Anmelden wieder da. Trotzdem abmelden?` + )) return; + + stopLoops(); + state.timers = []; + // GET-Navigation: beendet lokale Sitzung und – bei Authentik-Login – auch die SSO-Sitzung + window.location.href = '/auth/logout'; +} + +// --------------------------------------------------------------------------- +// Timer-Synchronisation +// --------------------------------------------------------------------------- + +async function syncTimers() { + const data = await api('/api/timers'); + state.rate = data.rate; + const now = Date.now(); + + state.timers = data.timers.map(t => ({ + id: t.id, + customerName: t.customerName, + isRunning: t.isRunning, + baseMs: t.elapsedMs, + syncedAt: now, + createdAt: t.createdAt + })); + + renderTimers(); +} + +function startLoops() { + stopLoops(); + state.tickHandle = setInterval(tick, TICK_INTERVAL_MS); + state.syncHandle = setInterval(() => { syncTimers().catch(() => {}); }, SYNC_INTERVAL_MS); +} + +function stopLoops() { + clearInterval(state.tickHandle); + clearInterval(state.syncHandle); + state.tickHandle = null; + state.syncHandle = null; +} + +// Nach Ruhezustand/Tabwechsel sofort abgleichen statt bis zum naechsten Sync warten +document.addEventListener('visibilitychange', () => { + if (!document.hidden && state.syncHandle) syncTimers().catch(() => {}); +}); + +/** Aktualisiert nur die Zahlen - baut das DOM nicht neu (sonst springt der Fokus). */ +function tick() { + for (const timer of state.timers) { + const ms = currentMs(timer); + const timeEl = document.getElementById(`time-${timer.id}`); + const amountEl = document.getElementById(`amount-${timer.id}`); + if (timeEl) timeEl.textContent = formatTime(ms); + if (amountEl) amountEl.textContent = formatEuro(calcAmount(ms)); + } +} + +// --------------------------------------------------------------------------- +// Timer-Darstellung +// --------------------------------------------------------------------------- + +function renderTimers() { + const list = document.getElementById('timerList'); + const empty = document.getElementById('timerEmpty'); + + document.getElementById('rateHint').textContent = + `Tarif: ${formatEuro(state.rate.rateAmount)} pro angefangene ${state.rate.rateInterval} Minuten`; + + if (state.timers.length === 0) { + list.innerHTML = ''; + empty.style.display = 'block'; + return; + } + empty.style.display = 'none'; + + list.innerHTML = state.timers.map(timer => { + const ms = currentMs(timer); + const since = new Date(timer.createdAt).toLocaleTimeString('de-DE', + { hour: '2-digit', minute: '2-digit' }); + + return ` + <div class="timer-card ${timer.isRunning ? 'running' : 'paused'}" data-id="${timer.id}"> + <div class="timer-card-head"> + <input class="timer-name" type="text" value="${escapeHtml(timer.customerName)}" + placeholder="Name / Platz (optional)" maxlength="80" + onchange="renameTimer(${timer.id}, this.value)"> + <span class="timer-badge">${timer.isRunning ? '● läuft' : '❚❚ pausiert'}</span> + </div> + + <div class="timer-card-time" id="time-${timer.id}">${formatTime(ms)}</div> + <div class="timer-card-amount" id="amount-${timer.id}">${formatEuro(calcAmount(ms))}</div> + <div class="timer-card-since">gestartet um ${since} Uhr</div> + + <div class="timer-card-actions"> + ${timer.isRunning + ? `<button class="btn btn-stop btn-sm" onclick="pauseTimer(${timer.id})">❚❚ Pause</button>` + : `<button class="btn btn-start btn-sm" onclick="resumeTimer(${timer.id})">▶ Weiter</button>`} + <button class="btn btn-sm" onclick="stopTimer(${timer.id})">✓ Beenden</button> + <button class="btn btn-danger btn-sm" onclick="discardTimer(${timer.id})">✕ Verwerfen</button> + </div> + </div>`; + }).join(''); +} + +// --------------------------------------------------------------------------- +// Timer-Aktionen +// --------------------------------------------------------------------------- + +async function addTimer() { + const field = document.getElementById('newTimerName'); + const name = field.value.trim(); + try { + await api('/api/timers', { method: 'POST', body: JSON.stringify({ customerName: name }) }); + field.value = ''; + await syncTimers(); + toast(name ? `Timer für „${name}" gestartet` : 'Timer gestartet', 'success'); + } catch (e) { + toast('Timer konnte nicht gestartet werden: ' + e.message, 'error'); + } +} + +async function renameTimer(id, value) { + try { + await api(`/api/timers/${id}`, { + method: 'PATCH', + body: JSON.stringify({ customerName: value.trim() }) + }); + const timer = state.timers.find(t => t.id === id); + if (timer) timer.customerName = value.trim(); + } catch (e) { + toast('Name konnte nicht gespeichert werden: ' + e.message, 'error'); + } +} + +async function pauseTimer(id) { + try { + await api(`/api/timers/${id}/pause`, { method: 'POST' }); + await syncTimers(); + } catch (e) { + toast('Pause fehlgeschlagen: ' + e.message, 'error'); + } +} + +async function resumeTimer(id) { + try { + await api(`/api/timers/${id}/resume`, { method: 'POST' }); + await syncTimers(); + } catch (e) { + toast('Fortsetzen fehlgeschlagen: ' + e.message, 'error'); + } +} + +async function stopTimer(id) { + const timer = state.timers.find(t => t.id === id); + if (!timer) return; + + const ms = currentMs(timer); + const label = timer.customerName ? `„${timer.customerName}"` : 'Timer'; + if (!confirm(`${label} beenden?\n\nZeit: ${formatTime(ms)}\nBetrag: ${formatEuro(calcAmount(ms))}\n\nDer Eintrag wird in der Historie gespeichert.`)) return; + + try { + const result = await api(`/api/timers/${id}/stop`, { method: 'POST' }); + await syncTimers(); + if (result.saved) { + toast(`Gespeichert: ${formatTime(result.duration)} – ${formatEuro(result.amount)}`, 'success'); + } else { + toast(result.reason || 'Nichts gespeichert.', 'info'); + } + } catch (e) { + toast('Beenden fehlgeschlagen: ' + e.message, 'error'); + } +} + +async function discardTimer(id) { + const timer = state.timers.find(t => t.id === id); + if (!timer) return; + const label = timer.customerName ? `„${timer.customerName}"` : 'Timer'; + if (!confirm(`${label} verwerfen?\n\nDie erfasste Zeit (${formatTime(currentMs(timer))}) wird NICHT gespeichert.`)) return; + + try { + await api(`/api/timers/${id}`, { method: 'DELETE' }); + await syncTimers(); + toast('Timer verworfen - nichts gespeichert.', 'info'); + } catch (e) { + toast('Verwerfen fehlgeschlagen: ' + e.message, 'error'); + } +} + +document.getElementById('newTimerForm').addEventListener('submit', (e) => { + e.preventDefault(); + addTimer(); +}); + +// --------------------------------------------------------------------------- +// Historie +// --------------------------------------------------------------------------- + +function historyQuery() { + const params = new URLSearchParams(); + const from = document.getElementById('filterFrom').value; + const to = document.getElementById('filterTo').value; + const q = document.getElementById('filterName').value.trim(); + if (from) params.set('from', from); + if (to) params.set('to', to); + if (q) params.set('q', q); + return params; +} + +async function loadHistory(reset = false) { + if (reset) { + state.history.offset = 0; + state.history.reachedEnd = false; + } + + const params = historyQuery(); + params.set('limit', state.history.limit); + params.set('offset', state.history.offset); + + try { + const data = await api('/api/sessions?' + params.toString()); + renderHistory(data, reset); + } catch (e) { + document.getElementById('historyList').innerHTML = + `<div class="empty-state"><div class="empty-state-icon">⚠️</div><p>Fehler beim Laden: ${escapeHtml(e.message)}</p></div>`; + } +} + +function renderHistory(data, reset) { + const listEl = document.getElementById('historyList'); + const statsEl = document.getElementById('historyStats'); + const moreBtn = document.getElementById('historyMore'); + + statsEl.innerHTML = ` + <div class="stat-card"><h3>Einträge</h3><p>${data.totals.count}</p></div> + <div class="stat-card"><h3>Gesamtzeit</h3><p>${formatTime(data.totals.duration)}</p></div> + <div class="stat-card"><h3>Gesamtbetrag</h3><p>${formatEuro(data.totals.amount)}</p></div> + `; + + if (data.totals.count === 0) { + listEl.innerHTML = '<div class="empty-state"><div class="empty-state-icon">📭</div><p>Keine Einträge für diesen Zeitraum</p></div>'; + moreBtn.style.display = 'none'; + return; + } + + const rows = data.sessions.map(s => { + const date = new Date(s.created_at * 1000).toLocaleString('de-DE', { + day: '2-digit', month: '2-digit', year: 'numeric', + hour: '2-digit', minute: '2-digit' + }); + const name = s.customer_name + ? `<span class="history-item-name">${escapeHtml(s.customer_name)}</span>` + : '<span class="history-item-name muted">ohne Namen</span>'; + + return ` + <div class="history-item"> + <div class="history-item-info"> + ${name} + <div class="history-item-date">${date} Uhr</div> + <div class="history-item-duration">${formatTime(s.duration)}</div> + </div> + <div class="history-item-right"> + <div class="history-item-amount">${formatEuro(s.amount)}</div> + <button class="btn btn-danger btn-sm" onclick="deleteSession(${s.id})" title="Eintrag löschen">🗑</button> + </div> + </div>`; + }).join(''); + + if (reset) { + listEl.innerHTML = rows; + } else { + listEl.insertAdjacentHTML('beforeend', rows); + } + + const shown = state.history.offset + data.sessions.length; + state.history.reachedEnd = shown >= data.totals.count; + moreBtn.style.display = state.history.reachedEnd ? 'none' : 'inline-block'; + moreBtn.textContent = `Weitere laden (${shown} von ${data.totals.count})`; +} + +async function loadMoreHistory() { + state.history.offset += state.history.limit; + await loadHistory(false); +} + +async function deleteSession(id) { + if (!confirm('Diesen Eintrag endgültig aus der Historie löschen?')) return; + try { + await api(`/api/sessions/${id}`, { method: 'DELETE' }); + await loadHistory(true); + toast('Eintrag gelöscht', 'info'); + } catch (e) { + toast('Löschen fehlgeschlagen: ' + e.message, 'error'); + } +} + +function exportCsv() { + const params = historyQuery(); + window.location.href = '/api/sessions/export.csv?' + params.toString(); +} + +function resetFilter() { + document.getElementById('filterFrom').value = ''; + document.getElementById('filterTo').value = ''; + document.getElementById('filterName').value = ''; + loadHistory(true); +} + +function filterToday() { + const today = new Date().toISOString().slice(0, 10); + document.getElementById('filterFrom').value = today; + document.getElementById('filterTo').value = today; + loadHistory(true); +} + +function filterThisMonth() { + const now = new Date(); + const first = new Date(now.getFullYear(), now.getMonth(), 1); + const pad = n => String(n).padStart(2, '0'); + document.getElementById('filterFrom').value = + `${first.getFullYear()}-${pad(first.getMonth() + 1)}-01`; + document.getElementById('filterTo').value = + `${now.getFullYear()}-${pad(now.getMonth() + 1)}-${pad(now.getDate())}`; + loadHistory(true); +} + +['filterFrom', 'filterTo'].forEach(id => + document.getElementById(id).addEventListener('change', () => loadHistory(true))); +document.getElementById('filterName').addEventListener('input', (() => { + let handle = null; + return () => { clearTimeout(handle); handle = setTimeout(() => loadHistory(true), 350); }; +})()); + +// --------------------------------------------------------------------------- +// Einstellungen (serverseitig - gelten fuer alle Geraete) +// --------------------------------------------------------------------------- + +async function loadSettings() { + try { + const rate = await api('/api/settings'); + state.rate = rate; + document.getElementById('rateAmount').value = rate.rateAmount; + document.getElementById('rateInterval').value = rate.rateInterval; + updateSettingsPreview(); + } catch (e) { + toast('Einstellungen konnten nicht geladen werden: ' + e.message, 'error'); + } +} + +async function saveSettings() { + const rateAmount = parseFloat(document.getElementById('rateAmount').value); + const rateInterval = parseInt(document.getElementById('rateInterval').value); + + try { + const rate = await api('/api/settings', { + method: 'PUT', + body: JSON.stringify({ rateAmount, rateInterval }) + }); + state.rate = rate; + renderTimers(); + toast('Einstellungen gespeichert - gilt für alle Geräte', 'success'); + showTimer(); + } catch (e) { + toast('Speichern fehlgeschlagen: ' + e.message, 'error'); + } +} + +async function resetSettings() { + if (!confirm('Tarif auf Standard zurücksetzen (€10 pro 10 Minuten)?')) return; + document.getElementById('rateAmount').value = 10; + document.getElementById('rateInterval').value = 10; + await saveSettings(); +} + +function updateSettingsPreview() { + const amount = parseFloat(document.getElementById('rateAmount').value) || 0; + const interval = parseInt(document.getElementById('rateInterval').value) || 1; + + document.getElementById('settingsPreview').textContent = + `${formatEuro(amount)} pro angefangene ${interval} Minuten`; + + const examples = [Math.max(1, interval - 5), interval + 5, interval * 2, 60] + .filter((v, i, a) => a.indexOf(v) === i) + .map(mins => `${mins} Min = ${formatEuro(Math.ceil(mins / interval) * amount)}`); + + document.getElementById('previewExamples').innerHTML = + `<strong>Beispiele:</strong><br>${examples.join(' | ')}`; +} + +document.getElementById('settingsForm').addEventListener('submit', (e) => { + e.preventDefault(); + saveSettings(); +}); +document.getElementById('rateAmount').addEventListener('input', updateSettingsPreview); +document.getElementById('rateInterval').addEventListener('input', updateSettingsPreview); + +// --------------------------------------------------------------------------- + +checkAuth(); diff --git a/frontend/favicon.jpg b/frontend/favicon.jpg new file mode 100644 index 0000000..889687a Binary files /dev/null and b/frontend/favicon.jpg differ diff --git a/frontend/index.html b/frontend/index.html new file mode 100644 index 0000000..3cf7083 --- /dev/null +++ b/frontend/index.html @@ -0,0 +1,738 @@ +<!DOCTYPE html> +<html lang="de"> +<head> + <meta charset="UTF-8"> + <meta name="viewport" content="width=device-width, initial-scale=1.0"> + <title>Timer - Zeiterfassung + + + + +
+ + +
+ +
+ +
+ + +
+
+
+ + +
+
Tarif wird geladen …
+
+ +
+ + +
+ + +
+
+

📊 Historie

+ +
+
+ + +
+
+ + +
+
+ + +
+
+ + + + +
+
+ +
+
+
+ +
+
+
+ + +
+
+

⚙️ Einstellungen

+

Der Tarif gilt für alle Geräte gemeinsam.

+ +
+
+
+ + + Euro pro Intervall +
+
+ + + Jede angefangene Einheit wird voll berechnet +
+
+ +
+

Vorschau

+

€10 pro angefangene 10 Minuten

+

+
+ +
+ + +
+
+ +
+

Hinweis: Eine Tarifänderung gilt ab sofort für laufende und neue Timer. + Bereits gespeicherte Einträge in der Historie behalten den Tarif, der beim Beenden galt.

+
+
+
+
+
+ +
+ + + + diff --git a/frontend/logo.png b/frontend/logo.png new file mode 100644 index 0000000..a5581ad Binary files /dev/null and b/frontend/logo.png differ