commit 681fc1649a3b8a2774d08098f1092caba8047c84 Author: Lucas Orth Date: Tue Aug 25 07:26:15 2026 +0200 SendSecret: Erstimport und Umstellung auf Tag-Deployment Wrapper-Frontend vor cryptgeon: der Browser verschluesselt lokal, per Mail geht nur der Link raus. Fuer das Deployment nach den Konventionen aus DEPLOY.md hergerichtet: - docker-compose.yml mit festem Projekt- und Container-Namen, kein ports-Mapping, Healthcheck als Deploy-Gate. cryptgeon und redis liegen im internen Netz, nur app haengt im Web-Netz. - cryptgeon von latest auf 2.9.3 gepinnt. Das ist derselbe Stand, den latest bisher geliefert hat; 2.6.2 existiert nicht. - /healthz in server.js, vor dem Catch-all-Proxy registriert. - Dockerfile auf npm ci mit Lockfile und non-root umgestellt. - .gitea/workflows/deploy.yml: Build und Syntaxpruefung vor dem Deploy, .env aus dem Repo-Secret DOTENV. Co-Authored-By: Claude Opus 5 diff --git a/.env.example b/.env.example new file mode 100644 index 0000000..cc545bd --- /dev/null +++ b/.env.example @@ -0,0 +1,7 @@ +SMTP_HOST=mail.example.de +SMTP_PORT=587 +SMTP_USER=noreply@lucas-orth.de +SMTP_PASS=geheimes-passwort +SMTP_FROM="Lucas Orth " +RECIPIENT_EMAIL=privat@lucas-orth.de +APP_URL=https://secret.lucas-orth.de diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml new file mode 100644 index 0000000..75a0249 --- /dev/null +++ b/.gitea/workflows/deploy.yml @@ -0,0 +1,61 @@ +name: Build & Deploy + +on: + push: + tags: + - 'v*' + +jobs: + deploy: + runs-on: ubuntu-latest + steps: + # Intern klonen statt ueber die oeffentliche Domain: Gitea laeuft auf + # demselben Host, der Weg ueber die oeffentliche IP findet nicht + # zurueck (NAT-Hairpin). Der Job-Container erreicht Gitea ueber das + # Netz gitea-ci unter seinem Containernamen. + - uses: actions/checkout@v4 + with: + github-server-url: http://gitea:3000 + + # --- Build & Tests ----------------------------------------------- + # Laeuft vor dem Deploy: ein roter Bundle-Build darf den Server nicht + # anfassen. Der Docker-Build wiederholt die Schritte spaeter im Image. + - uses: actions/setup-node@v4 + with: + node-version: '22' + + - name: Abhaengigkeiten installieren + working-directory: app + run: npm ci + + - name: Frontend-Bundles bauen + working-directory: app + run: npm run build + + - name: Server-Syntax pruefen + working-directory: app + run: node --check server.js + # ------------------------------------------------------------------ + + - name: Tag ermitteln + run: echo "IMAGE_TAG=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV + + # Ein einziges Repo-Secret DOTENV mit dem kompletten .env-Inhalt + # (mehrzeilig). Ueber env: statt direkter Interpolation, damit + # Anfuehrungszeichen, Backticks und $ in den Werten unangetastet bleiben. + - name: .env aus Secret erzeugen + env: + DOTENV: ${{ secrets.DOTENV }} + run: | + if [ -z "$DOTENV" ]; then + echo "Secret DOTENV ist leer oder nicht gesetzt." + exit 1 + fi + umask 077 + echo "$DOTENV" > .env + + - name: Deployen + run: docker compose up -d --build --remove-orphans --wait --wait-timeout 180 + + - name: Alte Layer aufraeumen + run: docker image prune -f diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..3a38796 --- /dev/null +++ b/.gitignore @@ -0,0 +1,9 @@ +.env +node_modules/ + +# Generierte Frontend-Bundles (entstehen beim Build aus src/). +app/public/customer.js +app/public/link.js + +# Heruntergeladene Vorlage, gehoert nicht ins Projekt-Repo. +deploy-kit-main*/ diff --git a/CLAUDE.md b/CLAUDE.md new file mode 100644 index 0000000..46a5baa --- /dev/null +++ b/CLAUDE.md @@ -0,0 +1,52 @@ +# Projekthinweise + +## Was das ist + +SendSecret ist ein eigenes Frontend vor [cryptgeon](https://github.com/cupcakearmy/cryptgeon). +Kunden geben ein Passwort ein, der Browser verschluesselt es lokal +(`occulto`), legt es als Notiz in cryptgeon ab und schickt nur den Link +per Mail an `RECIPIENT_EMAIL`. Der Schluessel steht im URL-Fragment und +erreicht den Server nie. + +Drei Container: `app` (Express-Wrapper, Mail, Proxy), `cryptgeon`, `redis`. +Nur `app` haengt im Web-Netz, die anderen beiden im internen Netz. + +## Wo was liegt + +| Pfad | Inhalt | +|---|---| +| `app/server.js` | Express: statische Seiten, `/api/send` (Mail), `/healthz`, Catch-all-Proxy auf `http://cryptgeon:8000` | +| `app/src/` | Frontend-Quellen, werden von `build.js` (esbuild) nach `app/public/` gebundelt | +| `app/public/` | `index.html`, `link.html`, `style.css` (Quellen) + generierte Bundles (nicht im Git) | +| `docker-compose.yml` | Stack, Konventionen aus DEPLOY.md | +| `.gitea/workflows/deploy.yml` | Tag-Deploy | + +## Beim Aendern beachten + +- **`express.json()` nicht global setzen.** Es wuerde den Body-Stream + aufbrauchen, bevor der Proxy ihn an cryptgeon weiterreichen kann. Nur an + `/api/send` haengen. +- **Neue Routen vor dem Catch-all-Proxy registrieren**, sonst gehen sie an + cryptgeon. Betrifft insbesondere `/healthz` - das ist das Deploy-Gate. +- **cryptgeon-Version ist gepinnt** (`2.9.3`). Die Bundles verschluesseln mit + `occulto` 2.0.6 gegen dieses API-Format (`POST /api/notes/` mit + `contents` / `meta` / `views`). Vor einem Upgrade beide Seiten pruefen. +- **Redis hat bewusst keine Persistenz** (`--save "" --appendonly no`) und + deshalb kein Volume. Notizen sollen einen Neustart nicht ueberleben. + +## Deployment + +Diese App wird per Tag-Push deployt, nicht manuell hochgeladen. +Die verbindlichen Konventionen stehen in **DEPLOY.md**. Vor Aenderungen an +`Dockerfile`, `docker-compose.yml` oder `.gitea/workflows/` dort nachsehen. + +Kurzfassung der Regeln, die man leicht bricht: + +- Kein `ports:` im Compose. Der Proxy erreicht den Container ueber das Netz + `nginx-proxy-manager_default` unter seinem `container_name` (`sendsecret`). +- `name:` im Compose ist Pflicht (fester Projektname), sonst legt der + CI-Job einen zweiten Stack an. +- Keine relativen Bind-Mounts. Compose laeuft im Job-Container, der Pfad + zeigt auf dem Host ins Leere. +- Healthcheck ist Pflicht, der Deploy nutzt ihn als Gate. +- Secrets kommen aus dem Repo-Secret `DOTENV`, nie in die Compose-Datei. diff --git a/DEPLOY.md b/DEPLOY.md new file mode 100644 index 0000000..6da1ceb --- /dev/null +++ b/DEPLOY.md @@ -0,0 +1,187 @@ +# Deployment-Konventionen + +Verbindlich fuer jede App, die auf dem VPS per Tag-Push deployt wird. +Abweichungen brauchen einen Grund, der hier nicht steht. + +## Ablauf + +``` +git tag v1.2.3 && git push --tags + -> Gitea Actions (act_runner auf dem VPS) + -> npm ci / build / test <- rot bricht ab, nichts wird deployt + -> .env aus Repo-Secret DOTENV + -> docker compose up -d --build --wait +``` + +Kein SCP, kein manuelles Neubauen. Der Code landet nie im Dateisystem des +Hosts - der Job-Container klont, baut gegen den Docker-Daemon des Hosts und +startet den Container. + +## Infrastruktur (existiert bereits, nicht neu anlegen) + +| Ding | Wert | +|---|---| +| Git | Gitea, `https://gitea.lucas-orth.de`, Container `gitea`, intern `:3000` | +| Runner | `act_runner`, Container `gitea-runner`, Label `ubuntu-latest` | +| Netz CI | `gitea-ci` - Gitea + Runner + Job-Container | +| Netz Web | `nginx-proxy-manager_default` - Proxy + alle App-Container | +| Job-Image | `catthehacker/ubuntu:act-latest` (node + docker-cli + compose) | + +Die beiden Netze sind bewusst getrennt: der Runner spricht mit Gitea, nicht +mit dem Proxy. App-Container haengen im Web-Netz, nicht im CI-Netz. + +## docker-compose.yml + +```yaml +# Fester Projektname. Ohne das leitet Compose ihn aus dem Verzeichnisnamen +# ab - und der ist im CI-Job ein anderer als auf dem Host. +name: + +services: + app: + # Versionstag ermoeglicht Rollback ohne Rebuild. + image: :${IMAGE_TAG:-latest} + build: . + # Fester Name: das ist die Adresse, auf die der Proxy zeigt. + container_name: + restart: unless-stopped + # Wird im Workflow aus dem Secret DOTENV erzeugt. + env_file: .env + networks: + - nginx-proxy-manager_default + healthcheck: + test: ["CMD", "node", "-e", "fetch('http://127.0.0.1:/healthz').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"] + interval: 60s + timeout: 5s + retries: 3 + +networks: + nginx-proxy-manager_default: + external: true + +volumes: + -data: + # Fester Name, damit das Volume nicht am Projektnamen haengt. + name: -data +``` + +**Kein `ports:`.** Der Proxy erreicht den Container ueber das gemeinsame Netz +unter seinem Container-Namen. Ein Port-Mapping wuerde den Dienst zusaetzlich +offen ans Internet haengen. + +**Healthcheck ist Pflicht.** Der Deploy-Schritt nutzt `--wait` und macht ihn +zum Gate. Ohne Healthcheck wird der Lauf gruen, auch wenn der Container in +einer Crash-Schleife haengt. + +**Keine relativen Bind-Mounts** (`./data:/data`). Compose laeuft im +Job-Container, der Pfad wuerde auf dem Host ins Leere zeigen. Persistente +Daten gehoeren in ein named volume mit festem `name:`. + +## .gitea/workflows/deploy.yml + +```yaml +name: Build & Deploy + +on: + push: + tags: + - 'v*' + +jobs: + deploy: + runs-on: ubuntu-latest + steps: + # Intern klonen. Die oeffentliche Domain ist aus Containern heraus + # NICHT erreichbar: Gitea laeuft auf demselben Host, das Paket geht + # an die oeffentliche IP und findet nicht zurueck (NAT-Hairpin). + - uses: actions/checkout@v4 + with: + github-server-url: http://gitea:3000 + + # --- Build & Tests, projektspezifisch --- + + - name: Tag ermitteln + run: echo "IMAGE_TAG=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV + + - name: .env aus Secret erzeugen + env: + DOTENV: ${{ secrets.DOTENV }} + run: | + if [ -z "$DOTENV" ]; then + echo "Secret DOTENV ist leer oder nicht gesetzt." + exit 1 + fi + umask 077 + echo "$DOTENV" > .env + + - name: Deployen + run: docker compose up -d --build --remove-orphans --wait --wait-timeout 180 + + - name: Alte Layer aufraeumen + run: docker image prune -f +``` + +Tests gehoeren **vor** den Deploy-Schritt. Ein roter Lauf darf den Server +nicht anfassen. + +## Dockerfile + +- Multi-Stage: Build-Abhaengigkeiten landen nicht im finalen Image. +- `USER node` bzw. non-root im finalen Stage. +- `EXPOSE ` dokumentiert den internen Port (oeffnet nichts). +- Ein Health-Endpoint (`/healthz`), auf den der Healthcheck zeigt. + +## Secrets + +Ein einziges Repo-Secret **`DOTENV`** mit dem kompletten `.env`-Inhalt, +mehrzeilig. Anlegen unter Repo -> Einstellungen -> Actions -> Secrets. + +Gitea speichert Secrets write-only: nach dem Anlegen nicht mehr lesbar, nur +ersetzbar. Die kanonische Fassung gehoert deshalb in den Passwortmanager, +Gitea haelt nur die Arbeitskopie fuer die Pipeline. + +Der Wert wird ueber `env:` an die Shell gereicht, nie direkt interpoliert - +sonst zerlegt der Shell-Parser Werte mit `$`, Backticks oder Quotes. + +## Nginx Proxy Manager + +Neuer Proxy Host: + +| Feld | Wert | +|---|---| +| Domain Names | `.lucas-orth.de` | +| Scheme | `http` | +| Forward Hostname / IP | `` (= `container_name`) | +| Forward Port | `` | + +Danach Let's-Encrypt-Zertifikat ausstellen und "Force SSL" aktivieren. + +Weil der Container-Name die Adresse ist: aendert sich `container_name`, +zeigt der Proxy-Host ins Leere. + +## Bestehende App umstellen + +Laeuft die App heute schon manuell auf dem Server, gilt statt des folgenden +Abschnitts [MIGRATION.md](MIGRATION.md) - dort steht insbesondere, wie die +Volumes den Wechsel des Projektnamens ueberleben. + +## Erstes Deployment einer App + +1. Repo in Gitea anlegen, pushen. +2. Secret `DOTENV` setzen. +3. Pruefen, ob schon ein Container mit dem Namen laeuft + (`docker ps -a --filter name=`). Falls ja: im alten Verzeichnis + einmal `docker compose down`, sonst kollidiert der feste Container-Name. +4. Proxy Host im NPM anlegen. +5. `git tag v1.0.0 && git push origin v1.0.0` + +## Fallstricke + +| Symptom | Ursache | +|---|---| +| Job haengt beim Checkout | `github-server-url` fehlt, klont ueber die oeffentliche Domain | +| `network not found` | App-Container im CI-Netz statt im Web-Netz (oder umgekehrt) | +| Zweiter Container statt Update | `name:` im Compose fehlt, Projektname weicht ab | +| Lauf gruen, App tot | `--wait` fehlt oder kein Healthcheck definiert | +| Volume leer nach Umstellung | Projektname geaendert, altes Volume hiess anders | +| Proxy liefert 502 | `container_name` geaendert oder Container nicht im Web-Netz | diff --git a/README.md b/README.md new file mode 100644 index 0000000..d091b03 --- /dev/null +++ b/README.md @@ -0,0 +1,95 @@ +# SendSecret + +Sichere Passwort-Uebergabe fuer Kunden. Eigenes Frontend vor +[cryptgeon](https://github.com/cupcakearmy/cryptgeon): das Passwort wird im +Browser verschluesselt, landet als einmalig abrufbare Notiz in cryptgeon, +und per Mail geht nur der Link raus. Der Schluessel steht im +URL-Fragment und erreicht den Server nie. + +Zwei Einstiege: + +- `/` - Kundenformular. Verschickt den Link automatisch an `RECIPIENT_EMAIL`. +- `/link` - erzeugt nur den Link zum selbst Weitergeben. + +## Aufbau + +``` +Browser --https--> Nginx Proxy Manager --> sendsecret (app) + | / statische Seite + | /api/send Mailversand + | /healthz Deploy-Gate + +--> cryptgeon --> redis +``` + +`cryptgeon` und `redis` haengen nur im internen Netz `sendsecret-internal` +und sind von aussen nicht erreichbar. + +## Lokal entwickeln + +```bash +cd app && npm ci && npm run build && npm start +``` + +Braucht ein laufendes cryptgeon unter `http://cryptgeon:8000` sowie die +Variablen aus `.env.example`. Einfacher ist der komplette Stack: + +```bash +cp .env.example .env && docker compose up --build +``` + +## Konfiguration + +`.env` im Repo-Root, Vorlage in [.env.example](.env.example): + +| Variable | Bedeutung | +|---|---| +| `SMTP_HOST` / `SMTP_PORT` | Mailserver, Port 465 schaltet auf TLS | +| `SMTP_USER` / `SMTP_PASS` | Zugangsdaten | +| `SMTP_FROM` | Absender im Format `Name ` | +| `RECIPIENT_EMAIL` | Empfaenger der Kundenmails | +| `APP_URL` | Oeffentliche Basis-URL, prueft die eingereichten Links | + +Auf dem Server kommt der Inhalt nicht aus einer Datei, sondern aus dem +Gitea-Repo-Secret `DOTENV`. + +## Deployment + +Per Tag-Push, Konventionen in [DEPLOY.md](DEPLOY.md). + +Einmalig einzurichten: + +1. Repo-Secret `DOTENV` anlegen (Repo -> Einstellungen -> Actions -> + Secrets) mit dem kompletten `.env`-Inhalt, mehrzeilig. Kanonische + Fassung in den Passwortmanager - Gitea gibt den Wert nicht mehr heraus. +2. Pruefen, ob auf dem Server schon Container mit den festen Namen laufen: + `docker ps -a --filter name=sendsecret`. Falls ja, im alten Verzeichnis + einmal `docker compose down`, sonst kollidieren die Namen. +3. Proxy Host im Nginx Proxy Manager: + + | Feld | Wert | + |---|---| + | Domain Names | `secret.lucas-orth.de` | + | Scheme | `http` | + | Forward Hostname / IP | `sendsecret` | + | Forward Port | `3000` | + + Danach Let's-Encrypt-Zertifikat ausstellen und "Force SSL" aktivieren. +4. Deployen: + + ```bash + git tag v1.0.0 && git push origin v1.0.0 + ``` + +Danach pruefen: + +```bash +docker ps --filter name=sendsecret --format '{{.Names}}\t{{.Status}}' +``` + +`sendsecret` muss `healthy` zeigen, nicht `Restarting`. + +## Versionen + +`cupcakearmy/cryptgeon` ist auf **2.9.3** gepinnt - das ist derselbe Stand, +den `latest` bisher geliefert hat. Die Frontend-Bundles verschluesseln mit +`occulto` 2.0.6 gegen dieses API-Format; ein Upgrade betrifft beide Seiten. diff --git a/app/.dockerignore b/app/.dockerignore new file mode 100644 index 0000000..62cf5e8 --- /dev/null +++ b/app/.dockerignore @@ -0,0 +1,6 @@ +node_modules +.git +*.log +.env +public/customer.js +public/link.js diff --git a/app/Dockerfile b/app/Dockerfile new file mode 100644 index 0000000..60f8cf5 --- /dev/null +++ b/app/Dockerfile @@ -0,0 +1,22 @@ +# Build stage - alle Abhaengigkeiten, Frontend-Bundles bauen. +FROM node:22-alpine AS build +WORKDIR /app +COPY package.json package-lock.json ./ +RUN npm ci +COPY build.js ./ +COPY src ./src +COPY public ./public +RUN npm run build + +# Production stage - nur Runtime-Abhaengigkeiten und fertige Assets. +FROM node:22-alpine +WORKDIR /app +ENV NODE_ENV=production +COPY package.json package-lock.json ./ +RUN npm ci --omit=dev && npm cache clean --force +COPY server.js ./ +COPY --from=build /app/public ./public +USER node +# Dokumentiert den internen Port, oeffnet nichts. +EXPOSE 3000 +CMD ["node", "server.js"] diff --git a/app/build.js b/app/build.js new file mode 100644 index 0000000..a22e054 --- /dev/null +++ b/app/build.js @@ -0,0 +1,33 @@ +'use strict' + +const { build } = require('esbuild') +const { mkdirSync } = require('fs') + +mkdirSync('public', { recursive: true }) + +// occulto uses require('crypto') internally; shim it to the browser Web Crypto API +const cryptoBrowserShim = { + name: 'crypto-browser-shim', + setup(b) { + b.onResolve({ filter: /^crypto$/ }, () => ({ + path: 'crypto', + namespace: 'crypto-browser-shim', + })) + b.onLoad({ filter: /.*/, namespace: 'crypto-browser-shim' }, () => ({ + contents: 'module.exports = { webcrypto: globalThis.crypto }', + })) + }, +} + +build({ + entryPoints: ['src/customer.js', 'src/link.js'], + bundle: true, + outdir: 'public', + format: 'iife', + target: ['es2020'], + minify: true, + platform: 'browser', + plugins: [cryptoBrowserShim], +}) + .then(() => console.log('✓ Bundles built: public/customer.js, public/link.js')) + .catch((err) => { console.error(err); process.exit(1) }) diff --git a/app/package-lock.json b/app/package-lock.json new file mode 100644 index 0000000..858b1af --- /dev/null +++ b/app/package-lock.json @@ -0,0 +1,1533 @@ +{ + "name": "sendsecret", + "version": "1.0.0", + "lockfileVersion": 3, + "requires": true, + "packages": { + "": { + "name": "sendsecret", + "version": "1.0.0", + "dependencies": { + "express": "^4.21.0", + "http-proxy-middleware": "^2.0.7", + "nodemailer": "^6.9.0", + "occulto": "2.0.6" + }, + "devDependencies": { + "esbuild": "^0.25.0" + } + }, + "node_modules/@esbuild/aix-ppc64": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.25.12.tgz", + "integrity": "sha512-Hhmwd6CInZ3dwpuGTF8fJG6yoWmsToE+vYgD4nytZVxcu1ulHpUQRAB1UJ8+N1Am3Mz4+xOByoQoSZf4D+CpkA==", + "cpu": [ + "ppc64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "aix" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/android-arm": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.25.12.tgz", + "integrity": "sha512-VJ+sKvNA/GE7Ccacc9Cha7bpS8nyzVv0jdVgwNDaR4gDMC/2TTRc33Ip8qrNYUcpkOHUT5OZ0bUcNNVZQ9RLlg==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/android-arm64": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.25.12.tgz", + "integrity": "sha512-6AAmLG7zwD1Z159jCKPvAxZd4y/VTO0VkprYy+3N2FtJ8+BQWFXU+OxARIwA46c5tdD9SsKGZ/1ocqBS/gAKHg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/android-x64": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.25.12.tgz", + "integrity": "sha512-5jbb+2hhDHx5phYR2By8GTWEzn6I9UqR11Kwf22iKbNpYrsmRB18aX/9ivc5cabcUiAT/wM+YIZ6SG9QO6a8kg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/darwin-arm64": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.25.12.tgz", + "integrity": "sha512-N3zl+lxHCifgIlcMUP5016ESkeQjLj/959RxxNYIthIg+CQHInujFuXeWbWMgnTo4cp5XVHqFPmpyu9J65C1Yg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/darwin-x64": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.25.12.tgz", + "integrity": "sha512-HQ9ka4Kx21qHXwtlTUVbKJOAnmG1ipXhdWTmNXiPzPfWKpXqASVcWdnf2bnL73wgjNrFXAa3yYvBSd9pzfEIpA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/freebsd-arm64": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.25.12.tgz", + "integrity": "sha512-gA0Bx759+7Jve03K1S0vkOu5Lg/85dou3EseOGUes8flVOGxbhDDh/iZaoek11Y8mtyKPGF3vP8XhnkDEAmzeg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "freebsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/freebsd-x64": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.25.12.tgz", + "integrity": "sha512-TGbO26Yw2xsHzxtbVFGEXBFH0FRAP7gtcPE7P5yP7wGy7cXK2oO7RyOhL5NLiqTlBh47XhmIUXuGciXEqYFfBQ==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "freebsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-arm": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.25.12.tgz", + "integrity": "sha512-lPDGyC1JPDou8kGcywY0YILzWlhhnRjdof3UlcoqYmS9El818LLfJJc3PXXgZHrHCAKs/Z2SeZtDJr5MrkxtOw==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-arm64": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.25.12.tgz", + "integrity": "sha512-8bwX7a8FghIgrupcxb4aUmYDLp8pX06rGh5HqDT7bB+8Rdells6mHvrFHHW2JAOPZUbnjUpKTLg6ECyzvas2AQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-ia32": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.25.12.tgz", + "integrity": "sha512-0y9KrdVnbMM2/vG8KfU0byhUN+EFCny9+8g202gYqSSVMonbsCfLjUO+rCci7pM0WBEtz+oK/PIwHkzxkyharA==", + "cpu": [ + "ia32" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-loong64": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.25.12.tgz", + "integrity": "sha512-h///Lr5a9rib/v1GGqXVGzjL4TMvVTv+s1DPoxQdz7l/AYv6LDSxdIwzxkrPW438oUXiDtwM10o9PmwS/6Z0Ng==", + "cpu": [ + "loong64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-mips64el": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.25.12.tgz", + "integrity": "sha512-iyRrM1Pzy9GFMDLsXn1iHUm18nhKnNMWscjmp4+hpafcZjrr2WbT//d20xaGljXDBYHqRcl8HnxbX6uaA/eGVw==", + "cpu": [ + "mips64el" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-ppc64": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.25.12.tgz", + "integrity": "sha512-9meM/lRXxMi5PSUqEXRCtVjEZBGwB7P/D4yT8UG/mwIdze2aV4Vo6U5gD3+RsoHXKkHCfSxZKzmDssVlRj1QQA==", + "cpu": [ + "ppc64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-riscv64": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.25.12.tgz", + "integrity": "sha512-Zr7KR4hgKUpWAwb1f3o5ygT04MzqVrGEGXGLnj15YQDJErYu/BGg+wmFlIDOdJp0PmB0lLvxFIOXZgFRrdjR0w==", + "cpu": [ + "riscv64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-s390x": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.25.12.tgz", + "integrity": "sha512-MsKncOcgTNvdtiISc/jZs/Zf8d0cl/t3gYWX8J9ubBnVOwlk65UIEEvgBORTiljloIWnBzLs4qhzPkJcitIzIg==", + "cpu": [ + "s390x" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-x64": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.25.12.tgz", + "integrity": "sha512-uqZMTLr/zR/ed4jIGnwSLkaHmPjOjJvnm6TVVitAa08SLS9Z0VM8wIRx7gWbJB5/J54YuIMInDquWyYvQLZkgw==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/netbsd-arm64": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.25.12.tgz", + "integrity": "sha512-xXwcTq4GhRM7J9A8Gv5boanHhRa/Q9KLVmcyXHCTaM4wKfIpWkdXiMog/KsnxzJ0A1+nD+zoecuzqPmCRyBGjg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "netbsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/netbsd-x64": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.25.12.tgz", + "integrity": "sha512-Ld5pTlzPy3YwGec4OuHh1aCVCRvOXdH8DgRjfDy/oumVovmuSzWfnSJg+VtakB9Cm0gxNO9BzWkj6mtO1FMXkQ==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "netbsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/openbsd-arm64": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.25.12.tgz", + "integrity": "sha512-fF96T6KsBo/pkQI950FARU9apGNTSlZGsv1jZBAlcLL1MLjLNIWPBkj5NlSz8aAzYKg+eNqknrUJ24QBybeR5A==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openbsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/openbsd-x64": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.25.12.tgz", + "integrity": "sha512-MZyXUkZHjQxUvzK7rN8DJ3SRmrVrke8ZyRusHlP+kuwqTcfWLyqMOE3sScPPyeIXN/mDJIfGXvcMqCgYKekoQw==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openbsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/openharmony-arm64": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.25.12.tgz", + "integrity": "sha512-rm0YWsqUSRrjncSXGA7Zv78Nbnw4XL6/dzr20cyrQf7ZmRcsovpcRBdhD43Nuk3y7XIoW2OxMVvwuRvk9XdASg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openharmony" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/sunos-x64": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.25.12.tgz", + "integrity": "sha512-3wGSCDyuTHQUzt0nV7bocDy72r2lI33QL3gkDNGkod22EsYl04sMf0qLb8luNKTOmgF/eDEDP5BFNwoBKH441w==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "sunos" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/win32-arm64": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.25.12.tgz", + "integrity": "sha512-rMmLrur64A7+DKlnSuwqUdRKyd3UE7oPJZmnljqEptesKM8wx9J8gx5u0+9Pq0fQQW8vqeKebwNXdfOyP+8Bsg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/win32-ia32": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.25.12.tgz", + "integrity": "sha512-HkqnmmBoCbCwxUKKNPBixiWDGCpQGVsrQfJoVGYLPT41XWF8lHuE5N6WhVia2n4o5QK5M4tYr21827fNhi4byQ==", + "cpu": [ + "ia32" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/win32-x64": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.25.12.tgz", + "integrity": "sha512-alJC0uCZpTFrSL0CCDjcgleBXPnCrEAhTBILpeAp7M/OFgoqtAetfBzX0xM00MUsVVPpVjlPuMbREqnZCXaTnA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@types/http-proxy": { + "version": "1.17.17", + "resolved": "https://registry.npmjs.org/@types/http-proxy/-/http-proxy-1.17.17.tgz", + "integrity": "sha512-ED6LB+Z1AVylNTu7hdzuBqOgMnvG/ld6wGCG8wFnAzKX5uyW2K3WD52v0gnLCTK/VLpXtKckgWuyScYK6cSPaw==", + "license": "MIT", + "dependencies": { + "@types/node": "*" + } + }, + "node_modules/@types/node": { + "version": "26.3.0", + "resolved": "https://registry.npmjs.org/@types/node/-/node-26.3.0.tgz", + "integrity": "sha512-L3fgrnchriRC2ExBflb8j4uZZURHZfQsmQeyVzhjcHW4kkwVyo8/0h1B2MVzMTrYUJYu6G7EWs14hW/L9putqw==", + "license": "MIT", + "dependencies": { + "undici-types": "~8.3.0" + } + }, + "node_modules/accepts": { + "version": "1.3.8", + "resolved": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz", + "integrity": "sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==", + "license": "MIT", + "dependencies": { + "mime-types": "~2.1.34", + "negotiator": "0.6.3" + }, + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/array-flatten": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz", + "integrity": "sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==", + "license": "MIT" + }, + "node_modules/body-parser": { + "version": "1.20.6", + "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.6.tgz", + "integrity": "sha512-p5tAzS57i5MV9fZFDj9LeIiTZEufbSe2eDozP+ElheSUq1m74CRq1jI4mYNDdVs9vQztXFLuk/Gd6BWTdwRJ5g==", + "license": "MIT", + "dependencies": { + "bytes": "~3.1.2", + "content-type": "~1.0.5", + "debug": "2.6.9", + "depd": "2.0.0", + "destroy": "~1.2.0", + "http-errors": "~2.0.1", + "iconv-lite": "~0.4.24", + "on-finished": "~2.4.1", + "qs": "~6.15.1", + "raw-body": "~2.5.3", + "type-is": "~1.6.18", + "unpipe": "~1.0.0" + }, + "engines": { + "node": ">= 0.8", + "npm": "1.2.8000 || >= 1.4.16" + } + }, + "node_modules/braces": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/braces/-/braces-3.0.3.tgz", + "integrity": "sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==", + "license": "MIT", + "dependencies": { + "fill-range": "^7.1.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/bytes": { + "version": "3.1.2", + "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz", + "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/call-bind-apply-helpers": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz", + "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==", + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0", + "function-bind": "^1.1.2" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/call-bound": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz", + "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==", + "license": "MIT", + "dependencies": { + "call-bind-apply-helpers": "^1.0.2", + "get-intrinsic": "^1.3.0" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/content-disposition": { + "version": "0.5.4", + "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz", + "integrity": "sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==", + "license": "MIT", + "dependencies": { + "safe-buffer": "5.2.1" + }, + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/content-type": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz", + "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/cookie": { + "version": "0.7.2", + "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz", + "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/cookie-signature": { + "version": "1.0.7", + "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.7.tgz", + "integrity": "sha512-NXdYc3dLr47pBkpUCHtKSwIOQXLVn8dZEuywboCOJY/osA0wFSLlSawr3KN8qXJEyX66FcONTH8EIlVuK0yyFA==", + "license": "MIT" + }, + "node_modules/debug": { + "version": "2.6.9", + "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz", + "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==", + "license": "MIT", + "dependencies": { + "ms": "2.0.0" + } + }, + "node_modules/depd": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz", + "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/destroy": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz", + "integrity": "sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==", + "license": "MIT", + "engines": { + "node": ">= 0.8", + "npm": "1.2.8000 || >= 1.4.16" + } + }, + "node_modules/dunder-proto": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz", + "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==", + "license": "MIT", + "dependencies": { + "call-bind-apply-helpers": "^1.0.1", + "es-errors": "^1.3.0", + "gopd": "^1.2.0" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/ee-first": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz", + "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==", + "license": "MIT" + }, + "node_modules/encodeurl": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz", + "integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/es-define-property": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz", + "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==", + "license": "MIT", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/es-errors": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz", + "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==", + "license": "MIT", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/es-object-atoms": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.2.tgz", + "integrity": "sha512-HWcBoN6NileqtSydK2FqHbS/LoDd2pqrnQHLyJzBj4kOp/ky2MWMN694xOfkK8/SnUsW2DH7EfyVlydKCsm1Zw==", + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/esbuild": { + "version": "0.25.12", + "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.25.12.tgz", + "integrity": "sha512-bbPBYYrtZbkt6Os6FiTLCTFxvq4tt3JKall1vRwshA3fdVztsLAatFaZobhkBC8/BrPetoa0oksYoKXoG4ryJg==", + "dev": true, + "hasInstallScript": true, + "license": "MIT", + "bin": { + "esbuild": "bin/esbuild" + }, + "engines": { + "node": ">=18" + }, + "optionalDependencies": { + "@esbuild/aix-ppc64": "0.25.12", + "@esbuild/android-arm": "0.25.12", + "@esbuild/android-arm64": "0.25.12", + "@esbuild/android-x64": "0.25.12", + "@esbuild/darwin-arm64": "0.25.12", + "@esbuild/darwin-x64": "0.25.12", + "@esbuild/freebsd-arm64": "0.25.12", + "@esbuild/freebsd-x64": "0.25.12", + "@esbuild/linux-arm": "0.25.12", + "@esbuild/linux-arm64": "0.25.12", + "@esbuild/linux-ia32": "0.25.12", + "@esbuild/linux-loong64": "0.25.12", + "@esbuild/linux-mips64el": "0.25.12", + "@esbuild/linux-ppc64": "0.25.12", + "@esbuild/linux-riscv64": "0.25.12", + "@esbuild/linux-s390x": "0.25.12", + "@esbuild/linux-x64": "0.25.12", + "@esbuild/netbsd-arm64": "0.25.12", + "@esbuild/netbsd-x64": "0.25.12", + "@esbuild/openbsd-arm64": "0.25.12", + "@esbuild/openbsd-x64": "0.25.12", + "@esbuild/openharmony-arm64": "0.25.12", + "@esbuild/sunos-x64": "0.25.12", + "@esbuild/win32-arm64": "0.25.12", + "@esbuild/win32-ia32": "0.25.12", + "@esbuild/win32-x64": "0.25.12" + } + }, + "node_modules/escape-html": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz", + "integrity": "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==", + "license": "MIT" + }, + "node_modules/etag": { + "version": "1.8.1", + "resolved": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz", + "integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/eventemitter3": { + "version": "4.0.7", + "resolved": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-4.0.7.tgz", + "integrity": "sha512-8guHBZCwKnFhYdHr2ysuRWErTwhoN2X8XELRlrRwpmfeY2jjuUN4taQMsULKUVo1K4DvZl+0pgfyoysHxvmvEw==", + "license": "MIT" + }, + "node_modules/express": { + "version": "4.22.2", + "resolved": "https://registry.npmjs.org/express/-/express-4.22.2.tgz", + "integrity": "sha512-IuL+Elrou2ZvCFHs18/CIzy2Nzvo25nZ1/D2eIZlz7c+QUayAcYoiM2BthCjs+EBHVpjYjcuLDAiCWgeIX3X1Q==", + "license": "MIT", + "dependencies": { + "accepts": "~1.3.8", + "array-flatten": "1.1.1", + "body-parser": "~1.20.5", + "content-disposition": "~0.5.4", + "content-type": "~1.0.4", + "cookie": "~0.7.1", + "cookie-signature": "~1.0.6", + "debug": "2.6.9", + "depd": "2.0.0", + "encodeurl": "~2.0.0", + "escape-html": "~1.0.3", + "etag": "~1.8.1", + "finalhandler": "~1.3.1", + "fresh": "~0.5.2", + "http-errors": "~2.0.0", + "merge-descriptors": "1.0.3", + "methods": "~1.1.2", + "on-finished": "~2.4.1", + "parseurl": "~1.3.3", + "path-to-regexp": "~0.1.12", + "proxy-addr": "~2.0.7", + "qs": "~6.15.1", + "range-parser": "~1.2.1", + "safe-buffer": "5.2.1", + "send": "~0.19.0", + "serve-static": "~1.16.2", + "setprototypeof": "1.2.0", + "statuses": "~2.0.1", + "type-is": "~1.6.18", + "utils-merge": "1.0.1", + "vary": "~1.1.2" + }, + "engines": { + "node": ">= 0.10.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/express" + } + }, + "node_modules/fill-range": { + "version": "7.1.1", + "resolved": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz", + "integrity": "sha512-YsGpe3WHLK8ZYi4tWDg2Jy3ebRz2rXowDxnld4bkQB00cc/1Zw9AWnC0i9ztDJitivtQvaI9KaLyKrc+hBW0yg==", + "license": "MIT", + "dependencies": { + "to-regex-range": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/finalhandler": { + "version": "1.3.2", + "resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.3.2.tgz", + "integrity": "sha512-aA4RyPcd3badbdABGDuTXCMTtOneUCAYH/gxoYRTZlIJdF0YPWuGqiAsIrhNnnqdXGswYk6dGujem4w80UJFhg==", + "license": "MIT", + "dependencies": { + "debug": "2.6.9", + "encodeurl": "~2.0.0", + "escape-html": "~1.0.3", + "on-finished": "~2.4.1", + "parseurl": "~1.3.3", + "statuses": "~2.0.2", + "unpipe": "~1.0.0" + }, + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/follow-redirects": { + "version": "1.16.0", + "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.0.tgz", + "integrity": "sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw==", + "funding": [ + { + "type": "individual", + "url": "https://github.com/sponsors/RubenVerborgh" + } + ], + "license": "MIT", + "engines": { + "node": ">=4.0" + }, + "peerDependenciesMeta": { + "debug": { + "optional": true + } + } + }, + "node_modules/forwarded": { + "version": "0.2.0", + "resolved": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz", + "integrity": "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/fresh": { + "version": "0.5.2", + "resolved": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz", + "integrity": "sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/function-bind": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz", + "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==", + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/get-intrinsic": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz", + "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==", + "license": "MIT", + "dependencies": { + "call-bind-apply-helpers": "^1.0.2", + "es-define-property": "^1.0.1", + "es-errors": "^1.3.0", + "es-object-atoms": "^1.1.1", + "function-bind": "^1.1.2", + "get-proto": "^1.0.1", + "gopd": "^1.2.0", + "has-symbols": "^1.1.0", + "hasown": "^2.0.2", + "math-intrinsics": "^1.1.0" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/get-proto": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz", + "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==", + "license": "MIT", + "dependencies": { + "dunder-proto": "^1.0.1", + "es-object-atoms": "^1.0.0" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/gopd": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz", + "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==", + "license": "MIT", + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/has-symbols": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz", + "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==", + "license": "MIT", + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/hasown": { + "version": "2.0.4", + "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz", + "integrity": "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==", + "license": "MIT", + "dependencies": { + "function-bind": "^1.1.2" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/http-errors": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz", + "integrity": "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==", + "license": "MIT", + "dependencies": { + "depd": "~2.0.0", + "inherits": "~2.0.4", + "setprototypeof": "~1.2.0", + "statuses": "~2.0.2", + "toidentifier": "~1.0.1" + }, + "engines": { + "node": ">= 0.8" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/express" + } + }, + "node_modules/http-proxy": { + "version": "1.18.1", + "resolved": "https://registry.npmjs.org/http-proxy/-/http-proxy-1.18.1.tgz", + "integrity": "sha512-7mz/721AbnJwIVbnaSv1Cz3Am0ZLT/UBwkC92VlxhXv/k/BBQfM2fXElQNC27BVGr0uwUpplYPQM9LnaBMR5NQ==", + "license": "MIT", + "dependencies": { + "eventemitter3": "^4.0.0", + "follow-redirects": "^1.0.0", + "requires-port": "^1.0.0" + }, + "engines": { + "node": ">=8.0.0" + } + }, + "node_modules/http-proxy-middleware": { + "version": "2.0.10", + "resolved": "https://registry.npmjs.org/http-proxy-middleware/-/http-proxy-middleware-2.0.10.tgz", + "integrity": "sha512-RKzRWNPxUZqbuk3BC5mGVJbBnWgr+diEnjJexIOytFbBzDy88Fbh/YvBr3DsNrl1jYAfjWfpATEv0NO35FDuPQ==", + "license": "MIT", + "dependencies": { + "@types/http-proxy": "^1.17.8", + "http-proxy": "^1.18.1", + "is-glob": "^4.0.1", + "is-plain-obj": "^3.0.0", + "micromatch": "^4.0.2" + }, + "engines": { + "node": ">=12.0.0" + }, + "peerDependencies": { + "@types/express": "^4.17.13" + }, + "peerDependenciesMeta": { + "@types/express": { + "optional": true + } + } + }, + "node_modules/iconv-lite": { + "version": "0.4.24", + "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz", + "integrity": "sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==", + "license": "MIT", + "dependencies": { + "safer-buffer": ">= 2.1.2 < 3" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/inherits": { + "version": "2.0.4", + "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", + "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==", + "license": "ISC" + }, + "node_modules/ipaddr.js": { + "version": "1.9.1", + "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz", + "integrity": "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==", + "license": "MIT", + "engines": { + "node": ">= 0.10" + } + }, + "node_modules/is-extglob": { + "version": "2.1.1", + "resolved": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz", + "integrity": "sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ==", + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/is-glob": { + "version": "4.0.3", + "resolved": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz", + "integrity": "sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg==", + "license": "MIT", + "dependencies": { + "is-extglob": "^2.1.1" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/is-number": { + "version": "7.0.0", + "resolved": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz", + "integrity": "sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==", + "license": "MIT", + "engines": { + "node": ">=0.12.0" + } + }, + "node_modules/is-plain-obj": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-3.0.0.tgz", + "integrity": "sha512-gwsOE28k+23GP1B6vFl1oVh/WOzmawBrKwo5Ev6wMKzPkaXaCDIQKzLnvsA42DRlbVTWorkgTKIviAKCWkfUwA==", + "license": "MIT", + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/math-intrinsics": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz", + "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==", + "license": "MIT", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/media-typer": { + "version": "0.3.0", + "resolved": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz", + "integrity": "sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/merge-descriptors": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.3.tgz", + "integrity": "sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ==", + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/methods": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz", + "integrity": "sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/micromatch": { + "version": "4.0.8", + "resolved": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.8.tgz", + "integrity": "sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==", + "license": "MIT", + "dependencies": { + "braces": "^3.0.3", + "picomatch": "^2.3.1" + }, + "engines": { + "node": ">=8.6" + } + }, + "node_modules/mime": { + "version": "1.6.0", + "resolved": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz", + "integrity": "sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==", + "license": "MIT", + "bin": { + "mime": "cli.js" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/mime-db": { + "version": "1.52.0", + "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz", + "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/mime-types": { + "version": "2.1.35", + "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz", + "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==", + "license": "MIT", + "dependencies": { + "mime-db": "1.52.0" + }, + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/ms": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz", + "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==", + "license": "MIT" + }, + "node_modules/negotiator": { + "version": "0.6.3", + "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz", + "integrity": "sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/nodemailer": { + "version": "6.10.1", + "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.10.1.tgz", + "integrity": "sha512-Z+iLaBGVaSjbIzQ4pX6XV41HrooLsQ10ZWPUehGmuantvzWoDVBnmsdUcOIDM1t+yPor5pDhVlDESgOMEGxhHA==", + "license": "MIT-0", + "engines": { + "node": ">=6.0.0" + } + }, + "node_modules/object-inspect": { + "version": "1.13.4", + "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz", + "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==", + "license": "MIT", + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/occulto": { + "version": "2.0.6", + "resolved": "https://registry.npmjs.org/occulto/-/occulto-2.0.6.tgz", + "integrity": "sha512-oaCwtnQjr+fTfFVfSPEDC5rh+L13OcEJ6uQzhmG8PlLxxYn2MxTDPmoCUVHKD7rUxwxCpH7/N4hbTu5U4mqZag==", + "license": "MIT", + "engines": { + "node": ">=18" + } + }, + "node_modules/on-finished": { + "version": "2.4.1", + "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz", + "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==", + "license": "MIT", + "dependencies": { + "ee-first": "1.1.1" + }, + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/parseurl": { + "version": "1.3.3", + "resolved": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz", + "integrity": "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/path-to-regexp": { + "version": "0.1.13", + "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.13.tgz", + "integrity": "sha512-A/AGNMFN3c8bOlvV9RreMdrv7jsmF9XIfDeCd87+I8RNg6s78BhJxMu69NEMHBSJFxKidViTEdruRwEk/WIKqA==", + "license": "MIT" + }, + "node_modules/picomatch": { + "version": "2.3.2", + "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz", + "integrity": "sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==", + "license": "MIT", + "engines": { + "node": ">=8.6" + }, + "funding": { + "url": "https://github.com/sponsors/jonschlinkert" + } + }, + "node_modules/proxy-addr": { + "version": "2.0.7", + "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz", + "integrity": "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==", + "license": "MIT", + "dependencies": { + "forwarded": "0.2.0", + "ipaddr.js": "1.9.1" + }, + "engines": { + "node": ">= 0.10" + } + }, + "node_modules/qs": { + "version": "6.15.3", + "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.3.tgz", + "integrity": "sha512-O9gl3zCl5h5blw1KGUzQKhA5oUXSl8rwUIM5o0S3nCXMliSvy5Dzx7/DJcI+SwgICv+IneSZwhBh1oSyEHA71A==", + "license": "BSD-3-Clause", + "dependencies": { + "es-define-property": "^1.0.1", + "side-channel": "^1.1.1" + }, + "engines": { + "node": ">=0.6" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/range-parser": { + "version": "1.2.1", + "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz", + "integrity": "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/raw-body": { + "version": "2.5.3", + "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.3.tgz", + "integrity": "sha512-s4VSOf6yN0rvbRZGxs8Om5CWj6seneMwK3oDb4lWDH0UPhWcxwOWw5+qk24bxq87szX1ydrwylIOp2uG1ojUpA==", + "license": "MIT", + "dependencies": { + "bytes": "~3.1.2", + "http-errors": "~2.0.1", + "iconv-lite": "~0.4.24", + "unpipe": "~1.0.0" + }, + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/requires-port": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/requires-port/-/requires-port-1.0.0.tgz", + "integrity": "sha512-KigOCHcocU3XODJxsu8i/j8T9tzT4adHiecwORRQ0ZZFcp7ahwXuRU1m+yuO90C5ZUyGeGfocHDI14M3L3yDAQ==", + "license": "MIT" + }, + "node_modules/safe-buffer": { + "version": "5.2.1", + "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", + "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "MIT" + }, + "node_modules/safer-buffer": { + "version": "2.1.2", + "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz", + "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==", + "license": "MIT" + }, + "node_modules/send": { + "version": "0.19.2", + "resolved": "https://registry.npmjs.org/send/-/send-0.19.2.tgz", + "integrity": "sha512-VMbMxbDeehAxpOtWJXlcUS5E8iXh6QmN+BkRX1GARS3wRaXEEgzCcB10gTQazO42tpNIya8xIyNx8fll1OFPrg==", + "license": "MIT", + "dependencies": { + "debug": "2.6.9", + "depd": "2.0.0", + "destroy": "1.2.0", + "encodeurl": "~2.0.0", + "escape-html": "~1.0.3", + "etag": "~1.8.1", + "fresh": "~0.5.2", + "http-errors": "~2.0.1", + "mime": "1.6.0", + "ms": "2.1.3", + "on-finished": "~2.4.1", + "range-parser": "~1.2.1", + "statuses": "~2.0.2" + }, + "engines": { + "node": ">= 0.8.0" + } + }, + "node_modules/send/node_modules/ms": { + "version": "2.1.3", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz", + "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==", + "license": "MIT" + }, + "node_modules/serve-static": { + "version": "1.16.3", + "resolved": "https://registry.npmjs.org/serve-static/-/serve-static-1.16.3.tgz", + "integrity": "sha512-x0RTqQel6g5SY7Lg6ZreMmsOzncHFU7nhnRWkKgWuMTu5NN0DR5oruckMqRvacAN9d5w6ARnRBXl9xhDCgfMeA==", + "license": "MIT", + "dependencies": { + "encodeurl": "~2.0.0", + "escape-html": "~1.0.3", + "parseurl": "~1.3.3", + "send": "~0.19.1" + }, + "engines": { + "node": ">= 0.8.0" + } + }, + "node_modules/setprototypeof": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz", + "integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==", + "license": "ISC" + }, + "node_modules/side-channel": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.1.tgz", + "integrity": "sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==", + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0", + "object-inspect": "^1.13.4", + "side-channel-list": "^1.0.1", + "side-channel-map": "^1.0.1", + "side-channel-weakmap": "^1.0.2" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/side-channel-list": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz", + "integrity": "sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==", + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0", + "object-inspect": "^1.13.4" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/side-channel-map": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz", + "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==", + "license": "MIT", + "dependencies": { + "call-bound": "^1.0.2", + "es-errors": "^1.3.0", + "get-intrinsic": "^1.2.5", + "object-inspect": "^1.13.3" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/side-channel-weakmap": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz", + "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==", + "license": "MIT", + "dependencies": { + "call-bound": "^1.0.2", + "es-errors": "^1.3.0", + "get-intrinsic": "^1.2.5", + "object-inspect": "^1.13.3", + "side-channel-map": "^1.0.1" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/statuses": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz", + "integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/to-regex-range": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz", + "integrity": "sha512-65P7iz6X5yEr1cwcgvQxbbIw7Uk3gOy5dIdtZ4rDveLqhrdJP+Li/Hx6tyK0NEb+2GCyneCMJiGqrADCSNk8sQ==", + "license": "MIT", + "dependencies": { + "is-number": "^7.0.0" + }, + "engines": { + "node": ">=8.0" + } + }, + "node_modules/toidentifier": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz", + "integrity": "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==", + "license": "MIT", + "engines": { + "node": ">=0.6" + } + }, + "node_modules/type-is": { + "version": "1.6.18", + "resolved": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz", + "integrity": "sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==", + "license": "MIT", + "dependencies": { + "media-typer": "0.3.0", + "mime-types": "~2.1.24" + }, + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/undici-types": { + "version": "8.3.0", + "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-8.3.0.tgz", + "integrity": "sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ==", + "license": "MIT" + }, + "node_modules/unpipe": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz", + "integrity": "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/utils-merge": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz", + "integrity": "sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==", + "license": "MIT", + "engines": { + "node": ">= 0.4.0" + } + }, + "node_modules/vary": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz", + "integrity": "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + } + } +} diff --git a/app/package.json b/app/package.json new file mode 100644 index 0000000..1c3fac7 --- /dev/null +++ b/app/package.json @@ -0,0 +1,19 @@ +{ + "name": "sendsecret", + "version": "1.0.0", + "description": "Custom frontend wrapper for cryptgeon with auto email", + "main": "server.js", + "scripts": { + "build": "node build.js", + "start": "node server.js" + }, + "dependencies": { + "express": "^4.21.0", + "http-proxy-middleware": "^2.0.7", + "nodemailer": "^6.9.0", + "occulto": "2.0.6" + }, + "devDependencies": { + "esbuild": "^0.25.0" + } +} diff --git a/app/public/index.html b/app/public/index.html new file mode 100644 index 0000000..f7b44ea --- /dev/null +++ b/app/public/index.html @@ -0,0 +1,171 @@ + + + + + + Passwort sicher übermitteln – Lucas Orth + + + + + + + + +
+ + +
+ +
+ +
+ + +
+
+
+ + +
+

Sicher & verschlüsselt

+

+ Passwort sicher
+ übermitteln. +

+

+ Geben Sie Ihr Passwort oder Ihre Zugangsdaten ein. + Der Link wird Ende-zu-Ende-verschlüsselt direkt an + Lucas Orth gesendet – Sie müssen nichts weiter tun. +

+ +
+
+ + +
+ +
+ + +
+ + + + + +

Ende-zu-Ende verschlüsselt  ·  Einmalig abrufbar  ·  Kein Speichern

+
+
+ + + + +
+
+
+ + +
+
+
+

So funktioniert es

+

In drei Schritten übermittelt.

+

+ Kein Account nötig, keine versteckten Schritte – + einfach eingeben und absenden. +

+
+ +
+
+ 01 +

Text eingeben

+

+ Tragen Sie Ihr Passwort oder Ihre Zugangsdaten in das Textfeld ein. +

+
+
+ 02 +

Sicher senden

+

+ Mit einem Klick wird der Text verschlüsselt und der Link + automatisch an Lucas Orth gesendet. +

+
+
+ 03 +

Fertig

+

+ Der Link ist einmalig abrufbar und löscht sich nach dem + ersten Öffnen automatisch. +

+
+
+
+
+ +
+ + + + +
+ + + diff --git a/app/public/link.html b/app/public/link.html new file mode 100644 index 0000000..465f1c7 --- /dev/null +++ b/app/public/link.html @@ -0,0 +1,174 @@ + + + + + + Link generieren – Lucas Orth + + + + + + + + +
+ + +
+ +
+ +
+ + +
+
+
+ + +
+

Für interne Nutzung

+

+ Sicheren Link
+ erstellen. +

+

+ Text eingeben und einen einmalig abrufbaren, verschlüsselten + Link generieren. Der Link wird nicht automatisch versendet. +

+ +
+
+ + +
+ + + + +
+
+ + + + +
+
+
+ + +
+
+
+

So funktioniert es

+

Link erstellen & teilen.

+

+ Ende-zu-Ende verschlüsselt – der Server sieht niemals den Klartext. +

+
+ +
+
+ 01 +

Text eingeben

+

+ Passwort oder Geheimtext ins Formular eingeben. +

+
+
+ 02 +

Link kopieren

+

+ Den generierten Link mit dem Kopieren-Button in die + Zwischenablage übernehmen. +

+
+
+ 03 +

Einmalig abrufbar

+

+ Nach dem ersten Öffnen löscht sich der Inhalt automatisch + und unwiderruflich. +

+
+
+
+
+ +
+ + + + +
+ + + diff --git a/app/public/style.css b/app/public/style.css new file mode 100644 index 0000000..312e5dd --- /dev/null +++ b/app/public/style.css @@ -0,0 +1,400 @@ +/* ── Reset ───────────────────────────────────────────────── */ +*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; } + +/* ── Design Tokens (1:1 domaincheck.lucas-orth.de) ───────── */ +:root { + --color-accent: #1E40AF; + --color-accent-hover: #1E378A; + --color-ink: #111827; + --color-ink-muted: #6B7280; + --color-ink-light: #9CA3AF; + --color-surface: #FFFFFF; + --color-surface-offset: #FAFAFA; /* footer bg */ + --color-surface-section: #F3F4F6; /* hero + steps section bg */ + --color-border: #E5E7EB; + --color-border-strong: #D1D5DB; /* step numbers */ + --color-success: #16A34A; + --color-success-bg: #F0FDF4; + --color-success-border: #BBF7D0; + --color-error: #DC2626; + --color-error-bg: #FEF2F2; + --color-error-border: #FECACA; + + --font-heading: 'Space Grotesk', sans-serif; + --font-body: 'Manrope', sans-serif; + + --radius: 4px; + --shadow-card: 0 1px 4px 0 rgba(0,0,0,0.07), 0 1px 2px -1px rgba(0,0,0,0.05); + --transition: 180ms; +} + +/* ── Base ────────────────────────────────────────────────── */ +html { + font-family: var(--font-body); + font-size: 16px; + color: var(--color-ink); + background: var(--color-surface-section); + -webkit-font-smoothing: antialiased; + -moz-osx-font-smoothing: grayscale; +} + +a { text-decoration: none; color: inherit; } + +/* ── Page ────────────────────────────────────────────────── */ +.page { + min-height: 100dvh; + display: flex; + flex-direction: column; +} + +/* ── Container (max-w-5xl = 1024px, px-6 = 24px) ────────── */ +.container { + max-width: 1024px; + margin: 0 auto; + padding: 0 24px; +} + +/* ── Header ──────────────────────────────────────────────── */ +.header { + position: sticky; + top: 0; + z-index: 40; + background: var(--color-surface); + border-bottom: 1px solid var(--color-border); + height: 64px; + flex-shrink: 0; +} + +.nav { + height: 100%; + display: flex; + align-items: center; + justify-content: space-between; +} + +/* Logo: h-[45px] wie im Domainchecker */ +.logo { + height: 45px; + width: auto; + object-fit: contain; + display: block; +} + +/* ── Hero Section ────────────────────────────────────────── */ +/* bg-surface-section border-b border-border, py-20 md:py-28 */ +.hero { + background: var(--color-surface-section); + border-bottom: 1px solid var(--color-border); + padding: 80px 0; + flex: 1; +} + +@media (min-width: 768px) { + .hero { padding: 112px 0; } +} + +.hero__inner { max-width: 672px; } /* max-w-xl ≈ max-w-2xl für form */ + +/* ── Eyebrow ─────────────────────────────────────────────── */ +/* text-sm font-semibold tracking-widest uppercase text-accent mb-4 */ +.eyebrow { + font-family: var(--font-body); + font-size: 12px; + font-weight: 600; + letter-spacing: 0.1em; + text-transform: uppercase; + color: var(--color-accent); + margin-bottom: 16px; +} + +/* ── Hero Title ──────────────────────────────────────────── */ +/* text-4xl md:text-6xl leading-tight mb-4 */ +.hero-title { + font-family: var(--font-heading); + font-size: 36px; + font-weight: 700; + color: var(--color-ink); + line-height: 1.15; + margin-bottom: 16px; + letter-spacing: -0.01em; +} + +.hero-title .accent { color: var(--color-accent); } + +@media (min-width: 768px) { + .hero-title { font-size: 60px; line-height: 1.1; } +} + +/* ── Lead Text ───────────────────────────────────────────── */ +/* text-lg mb-10 max-w-xl */ +.lead { + font-size: 18px; + color: var(--color-ink-muted); + line-height: 1.7; + margin-bottom: 40px; + max-width: 512px; +} + +/* ── Hero Form ───────────────────────────────────────────── */ +/* max-w-2xl = 672px */ +.hero-form { + display: flex; + flex-direction: column; + gap: 12px; + max-width: 672px; +} + +.field { + display: flex; + flex-direction: column; + gap: 6px; +} + +.label { + font-size: 13px; + font-weight: 600; + color: var(--color-ink); +} + +/* Textarea: h-14 equivalent stacked, border-btn focus */ +.textarea, +.input { + width: 100%; + padding: 12px 20px; + border: 1px solid var(--color-border); + border-radius: var(--radius); + font-family: var(--font-body); + font-size: 16px; + color: var(--color-ink); + background: var(--color-surface); + transition: border-color var(--transition), box-shadow var(--transition); + outline: none; +} + +.textarea { + resize: vertical; + min-height: 130px; + line-height: 1.6; +} + +.textarea::placeholder, +.input::placeholder { + color: var(--color-ink-light); +} + +.textarea:focus, +.input:focus { + border-color: var(--color-accent); + box-shadow: 0 0 0 2px rgba(30, 64, 175, 0.15); +} + +.input--mono { + font-family: 'Menlo', 'Monaco', 'Courier New', monospace; + font-size: 13px; + color: var(--color-ink-muted); + background: #F9FAFB; + word-break: break-all; +} + +/* ── Hint ────────────────────────────────────────────────── */ +/* text-xs text-ink-light mt-4 */ +.hint { + font-size: 12px; + color: var(--color-ink-light); + margin-top: 4px; +} + +/* ── Buttons ─────────────────────────────────────────────── */ +/* px-4 py-3 font-semibold text-base rounded-btn transition */ +.btn { + display: inline-flex; + align-items: center; + justify-content: center; + gap: 6px; + padding: 12px 16px; + border-radius: var(--radius); + font-family: var(--font-body); + font-size: 15px; + font-weight: 600; + cursor: pointer; + border: none; + text-decoration: none; + transition: background-color var(--transition), opacity var(--transition); + white-space: nowrap; + line-height: 1; + -webkit-appearance: none; +} + +.btn:disabled { opacity: 0.5; cursor: not-allowed; } + +.btn--primary { + background: var(--color-accent); + color: #FAFAFA; +} +.btn--primary:hover:not(:disabled) { + background: var(--color-accent-hover); +} + +.btn--secondary { + background: var(--color-surface); + color: var(--color-ink); + border: 1px solid var(--color-border-strong); +} +.btn--secondary:hover:not(:disabled) { background: #F9FAFB; } + +.btn--ghost { + background: transparent; + color: var(--color-ink-muted); + font-weight: 500; +} +.btn--ghost:hover:not(:disabled) { + background: var(--color-border); + color: var(--color-ink); +} + +.btn--copied { + background: var(--color-success-bg) !important; + color: var(--color-success) !important; + border-color: var(--color-success-border) !important; +} + +/* ── Alert ───────────────────────────────────────────────── */ +.alert { + padding: 11px 14px; + border-radius: var(--radius); + font-size: 14px; + line-height: 1.5; +} +.alert--error { + background: var(--color-error-bg); + color: var(--color-error); + border: 1px solid var(--color-error-border); +} + +/* ── Link Row ────────────────────────────────────────────── */ +.link-row { display: flex; gap: 8px; align-items: stretch; } +.link-row .input { flex: 1; min-width: 0; } + +/* ── Success State ───────────────────────────────────────── */ +.success-icon { + width: 52px; + height: 52px; + background: var(--color-success-bg); + color: var(--color-success); + border: 1px solid var(--color-success-border); + border-radius: 50%; + display: flex; + align-items: center; + justify-content: center; + font-size: 20px; + font-weight: 700; + margin-bottom: 20px; +} + +/* ── Steps Section ───────────────────────────────────────── */ +/* bg-surface-section py-20 – gleicher Hintergrund wie Hero, weiße Karten */ +.section-steps { + background: var(--color-surface-section); + padding: 80px 0; +} + +.section-steps .lead { margin-bottom: 0; } + +/* Section heading: text-3xl md:text-4xl */ +.section-title { + font-family: var(--font-heading); + font-size: 30px; + font-weight: 700; + color: var(--color-ink); + line-height: 1.2; + margin-bottom: 12px; + letter-spacing: -0.01em; +} + +@media (min-width: 768px) { + .section-title { font-size: 36px; } +} + +/* mb-12 */ +.section-header { margin-bottom: 48px; } + +/* grid grid-cols-1 md:grid-cols-3 gap-6 */ +.steps-grid { + display: grid; + grid-template-columns: repeat(3, 1fr); + gap: 24px; +} + +@media (max-width: 768px) { + .steps-grid { grid-template-columns: 1fr; } +} + +/* bg-white rounded-card border border-border p-7 shadow-card */ +.step-card { + background: var(--color-surface); + border: 1px solid var(--color-border); + border-radius: var(--radius); + box-shadow: var(--shadow-card); + padding: 28px; +} + +/* text-4xl font-semibold text-border-strong leading-none block mb-4 */ +.step-num { + display: block; + font-family: var(--font-heading); + font-size: 36px; + font-weight: 600; + color: var(--color-border-strong); + line-height: 1; + margin-bottom: 16px; + letter-spacing: -0.02em; +} + +/* font-heading text-lg text-ink mb-2 */ +.step-title { + font-family: var(--font-heading); + font-size: 18px; + font-weight: 600; + color: var(--color-ink); + margin-bottom: 8px; +} + +/* text-sm text-ink-muted leading-relaxed */ +.step-text { + font-size: 14px; + color: var(--color-ink-muted); + line-height: 1.65; +} + +/* ── Footer ──────────────────────────────────────────────── */ +/* border-t border-border bg-surface-offset py-8 */ +.footer { + background: var(--color-surface-offset); + border-top: 1px solid var(--color-border); + padding: 32px 0; + flex-shrink: 0; + margin-top: auto; +} + +.footer__inner { + display: flex; + align-items: center; + justify-content: space-between; + font-size: 12px; + color: var(--color-ink-light); + gap: 12px; + flex-wrap: wrap; +} + +@media (max-width: 640px) { + .footer__inner { flex-direction: column; text-align: center; } +} + +.footer__links { display: flex; gap: 20px; } + +.footer a { + color: var(--color-ink-light); + text-decoration: none; + transition: color var(--transition); +} +.footer a:hover { color: var(--color-accent); } diff --git a/app/server.js b/app/server.js new file mode 100644 index 0000000..cf71fdf --- /dev/null +++ b/app/server.js @@ -0,0 +1,110 @@ +'use strict' + +const express = require('express') +const nodemailer = require('nodemailer') +const { createProxyMiddleware } = require('http-proxy-middleware') + +const { + SMTP_HOST, + SMTP_PORT = '587', + SMTP_USER, + SMTP_PASS, + SMTP_FROM, + RECIPIENT_EMAIL, + APP_URL = '', +} = process.env + +const app = express() +// express.json() is intentionally NOT applied globally — it would consume the +// request body stream before http-proxy-middleware can forward it to cryptgeon. +app.use(express.static('public', { index: false })) + +app.get('/', (_req, res) => res.sendFile('index.html', { root: 'public' })) +app.get('/link', (_req, res) => res.sendFile('link.html', { root: 'public' })) + +// Health-Endpoint fuer den Docker-Healthcheck. Muss vor dem Catch-all-Proxy +// stehen, sonst landet die Anfrage bei cryptgeon. +app.get('/healthz', (_req, res) => res.json({ ok: true })) + +const transporter = nodemailer.createTransport({ + host: SMTP_HOST, + port: Number(SMTP_PORT), + secure: Number(SMTP_PORT) === 465, + auth: { user: SMTP_USER, pass: SMTP_PASS }, +}) + +app.post('/api/send', express.json(), async (req, res) => { + const { url, name } = req.body + + if (!url || typeof url !== 'string' || !url.includes('/note/')) { + return res.status(400).json({ error: 'Ungültige Anfrage' }) + } + if (!name || typeof name !== 'string' || !name.trim()) { + return res.status(400).json({ error: 'Name fehlt' }) + } + + const senderName = name.trim() + + // Reject URLs that don't originate from our own domain + if (APP_URL && !url.startsWith(APP_URL)) { + return res.status(400).json({ error: 'Ungültige URL' }) + } + + try { + await transporter.sendMail({ + from: SMTP_FROM, + to: RECIPIENT_EMAIL, + subject: `Neues Passwort von ${senderName}`, + text: [ + `${senderName} hat Ihnen sicher ein Passwort übermittelt.`, + '', + 'Klicken Sie auf den folgenden Link um es einzusehen:', + url, + '', + 'Dieser Link ist einmalig abrufbar und löscht sich nach dem ersten Öffnen automatisch.', + ].join('\n'), + html: ` +
+

+ Neues Passwort erhalten +

+

+ ${senderName} +

+

+ hat Ihnen sicher ein Passwort übermittelt. +

+ + Passwort abrufen → + +

+ Dieser Link ist einmalig abrufbar und löscht sich nach dem ersten Öffnen automatisch. +

+
+ `, + }) + res.json({ ok: true }) + } catch (err) { + console.error('Mail error:', err.message) + res.status(500).json({ error: 'E-Mail konnte nicht gesendet werden' }) + } +}) + +// All other requests → proxy to cryptgeon (API + note decrypt UI) +app.use( + createProxyMiddleware({ + target: 'http://cryptgeon:8000', + changeOrigin: true, + on: { + error: (err, req, res) => { + console.error(`Proxy error [${req.method} ${req.url}]:`, err.message) + if (!res.headersSent) { + res.status(502).json({ error: 'Cryptgeon nicht erreichbar' }) + } + }, + }, + }) +) + +app.listen(3000, () => console.log('SendSecret listening on :3000')) diff --git a/app/src/crypto.js b/app/src/crypto.js new file mode 100644 index 0000000..cf4b3f5 --- /dev/null +++ b/app/src/crypto.js @@ -0,0 +1,31 @@ +import { AES, Bytes, Hex } from 'occulto' + +export async function fetchWithTimeout(url, options, ms = 15000) { + const ctrl = new AbortController() + const timer = setTimeout(() => ctrl.abort(), ms) + try { + return await fetch(url, { ...options, signal: ctrl.signal }) + } finally { + clearTimeout(timer) + } +} + +export async function createNote(text) { + const key = await AES.generateKey() + const encrypted = await AES.encrypt(Bytes.encode(text), key) + + const res = await fetchWithTimeout('/api/notes/', { + method: 'POST', + headers: { 'Content-Type': 'application/json' }, + body: JSON.stringify({ + contents: encrypted, + meta: JSON.stringify({ type: 'text' }), + views: 1, + }), + }) + + if (!res.ok) throw new Error('Geheimnis konnte nicht erstellt werden (Server-Fehler)') + + const { id } = await res.json() + return `${location.origin}/note/${id}#${Hex.encode(key)}` +} diff --git a/app/src/customer.js b/app/src/customer.js new file mode 100644 index 0000000..1809cb7 --- /dev/null +++ b/app/src/customer.js @@ -0,0 +1,62 @@ +import { createNote, fetchWithTimeout } from './crypto.js' + +const form = document.getElementById('form') +const submitBtn = document.getElementById('submit') +const submitLabel = document.getElementById('submit-label') +const stateForm = document.getElementById('state-form') +const stateSuccess = document.getElementById('state-success') +const stateError = document.getElementById('state-error') +const errorMsg = document.getElementById('error-msg') + +function setLoading(on) { + submitBtn.disabled = on + submitLabel.textContent = on ? 'Wird übermittelt …' : 'Jetzt sicher senden' +} + +form.addEventListener('submit', async (e) => { + e.preventDefault() + + const name = document.getElementById('sender-name').value.trim() + const text = document.getElementById('text').value.trim() + + if (!name) { + errorMsg.textContent = 'Bitte geben Sie Ihren Namen ein.' + stateError.hidden = false + document.getElementById('sender-name').focus() + return + } + if (!text) { + errorMsg.textContent = 'Bitte geben Sie Ihr Passwort oder Ihre Zugangsdaten ein.' + stateError.hidden = false + document.getElementById('text').focus() + return + } + + stateError.hidden = true + setLoading(true) + + try { + const url = await createNote(text) + + const res = await fetchWithTimeout('/api/send', { + method: 'POST', + headers: { 'Content-Type': 'application/json' }, + body: JSON.stringify({ url, name }), + }, 10000) + + if (!res.ok) { + const data = await res.json().catch(() => ({})) + throw new Error(data.error || 'E-Mail konnte nicht gesendet werden') + } + + stateForm.hidden = true + stateSuccess.hidden = false + } catch (err) { + const msg = err.name === 'AbortError' + ? 'Zeitüberschreitung – bitte erneut versuchen.' + : (err.message || 'Ein Fehler ist aufgetreten. Bitte erneut versuchen.') + errorMsg.textContent = msg + stateError.hidden = false + setLoading(false) + } +}) diff --git a/app/src/link.js b/app/src/link.js new file mode 100644 index 0000000..5f4107b --- /dev/null +++ b/app/src/link.js @@ -0,0 +1,54 @@ +import { createNote } from './crypto.js' + +const form = document.getElementById('form') +const submitBtn = document.getElementById('submit') +const submitLabel = document.getElementById('submit-label') +const stateForm = document.getElementById('state-form') +const stateResult = document.getElementById('state-result') +const linkOutput = document.getElementById('link-output') +const copyBtn = document.getElementById('copy-btn') +const copyLabel = document.getElementById('copy-label') +const stateError = document.getElementById('state-error') +const errorMsg = document.getElementById('error-msg') + +function setLoading(on) { + submitBtn.disabled = on + submitLabel.textContent = on ? 'Wird erstellt …' : 'Link erstellen' +} + +form.addEventListener('submit', async (e) => { + e.preventDefault() + const text = document.getElementById('text').value.trim() + if (!text) return + + stateError.hidden = true + setLoading(true) + + try { + const url = await createNote(text) + linkOutput.value = url + stateForm.hidden = true + stateResult.hidden = false + } catch (err) { + const msg = err.name === 'AbortError' + ? 'Zeitüberschreitung – bitte erneut versuchen.' + : (err.message || 'Ein Fehler ist aufgetreten.') + errorMsg.textContent = msg + stateError.hidden = false + setLoading(false) + } +}) + +copyBtn.addEventListener('click', async () => { + try { + await navigator.clipboard.writeText(linkOutput.value) + copyLabel.textContent = 'Kopiert!' + copyBtn.classList.add('btn--copied') + setTimeout(() => { + copyLabel.textContent = 'Kopieren' + copyBtn.classList.remove('btn--copied') + }, 2000) + } catch { + linkOutput.select() + } +}) diff --git a/docker-compose.yml b/docker-compose.yml new file mode 100644 index 0000000..bffb4c3 --- /dev/null +++ b/docker-compose.yml @@ -0,0 +1,70 @@ +# Fester Projektname. Ohne das leitet Compose ihn aus dem Verzeichnisnamen +# ab - und der ist im CI-Job ein anderer als auf dem Host. +name: sendsecret + +services: + # Der Wrapper: eigenes Frontend, Mailversand, Proxy auf cryptgeon. + # Das ist der einzige Dienst, den der Nginx Proxy Manager sieht. + app: + # Versionstag ermoeglicht Rollback ohne Rebuild. + image: sendsecret:${IMAGE_TAG:-latest} + build: ./app + # Fester Name: das ist die Adresse, auf die der Proxy zeigt. + container_name: sendsecret + restart: unless-stopped + # Wird im Workflow aus dem Secret DOTENV erzeugt. + env_file: .env + depends_on: + - cryptgeon + networks: + - nginx-proxy-manager_default + - internal + # Pflicht: der Deploy-Schritt nutzt --wait und macht das zum Gate. + # Abweichung von den 60s der Vorlage: bei --wait-timeout 180 reicht ein + # 60s-Intervall nur fuer drei Versuche - der Deploy wuerde beim ersten + # Fehlschlag knapp. + healthcheck: + test: ["CMD", "node", "-e", "fetch('http://127.0.0.1:3000/healthz').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"] + interval: 15s + timeout: 5s + retries: 3 + start_period: 10s + + # Cryptgeon haelt die verschluesselten Notizen. Version gepinnt: die + # Frontend-Bundles verschluesseln mit occulto 2.0.6 gegen dieses API-Format. + cryptgeon: + image: cupcakearmy/cryptgeon:2.9.3 + container_name: sendsecret-cryptgeon + restart: unless-stopped + depends_on: + redis: + condition: service_healthy + environment: + REDIS_URL: redis://redis/ + ALLOW_ADVANCED: 'false' + # Bewusst nicht im Web-Netz: erreichbar nur ueber den Proxy in app. + networks: + - internal + + # Reiner Zwischenspeicher, ohne Persistenz - Notizen sind einmalig + # abrufbar und sollen einen Neustart nicht ueberleben. Deshalb kein Volume. + redis: + image: redis:7-alpine + command: redis-server --save "" --appendonly no + container_name: sendsecret-redis + restart: unless-stopped + networks: + - internal + healthcheck: + test: ["CMD", "redis-cli", "ping"] + interval: 10s + timeout: 3s + retries: 5 + +# Kein ports-Mapping: Der Proxy erreicht app ueber das gemeinsame Netz unter +# dem Container-Namen. cryptgeon und redis haengen nur im internen Netz. +networks: + nginx-proxy-manager_default: + external: true + internal: + name: sendsecret-internal