commit 469db5bc60db9a7057e0a0ae1fa03259c7484114 Author: Waters Church Date: Thu Sep 24 13:00:57 2026 -0400 Bring the checklist app under version control The project has lived only as a folder on the Mac Studio and, briefly, as a transfer tarball. This is the first commit: the Express server and its web front end, the Capacitor iOS and Android wrappers, and the release and backup scripts. The repo is the source, not a backup of the machine. Left out on purpose, by the .gitignore files that were already in the tree: node_modules, build output, mobile/www (regenerated from server/public on every build), and server/data, which holds the live checklists and belongs on the NAS rather than in git. Every credential is excluded too — server/.env, the Play upload keystore and its properties file, the App Store Connect key and ios-signing.config. The one secret that was not in an ignored file was the NAS SSH password, hard-coded in build-deploy.sh and grepped back out of it by backup-to-drive.sh. Both now read it from the login keychain (service checklist-nas, account Christian), falling back to NAS_PASS in the environment, so rotating it is one keychain entry rather than a history rewrite. Co-Authored-By: Claude Opus 5 diff --git a/.claude/launch.json b/.claude/launch.json new file mode 100644 index 0000000..77ff59a --- /dev/null +++ b/.claude/launch.json @@ -0,0 +1,11 @@ +{ + "version": "0.0.1", + "configurations": [ + { + "name": "checklist", + "runtimeExecutable": "bash", + "runtimeArgs": ["-lc", "cd /Users/christian/Documents/checklist-transfer/recurring-checklist-app/server && ADMIN_PASSWORD=changeme REPORT_EMAIL='' PORT=4998 node server.js"], + "port": 4998 + } + ] +} diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..aa046eb --- /dev/null +++ b/.gitignore @@ -0,0 +1,20 @@ +node_modules/ +dist/ +*.log +.DS_Store +*.ico +build/icon.ico +build/icon.png +*.exe + + +# ── Deploy / release artifacts ────────────────────────────────────────────── +checklist-deploy.tgz +*.tgz +dist-release/ + +# ── Secrets (belt and braces; the real rules are in mobile/ and server/) ──── +.env +*.p8 +*.jks +*.keystore diff --git a/BUILD_INSTRUCTIONS.md b/BUILD_INSTRUCTIONS.md new file mode 100644 index 0000000..7c03b51 --- /dev/null +++ b/BUILD_INSTRUCTIONS.md @@ -0,0 +1,41 @@ +# Building Instructions + +## Quick Start + +1. **Install Dependencies** + ```bash + npm install + ``` + +2. **Test the Application** + ```bash + npm start + ``` + This will launch the app in development mode. + +3. **Build Windows Installer** + ```bash + npm run build:win + ``` + This will create a Windows installer in the `dist` folder. + +## Building for Distribution + +After running `npm run build:win`, you'll find: +- An installer executable in the `dist` folder (e.g., `Recurring Checklist Setup 1.0.0.exe`) +- This installer can be copied to any Windows machine and run to install the application + +## Notes + +- The first build may take several minutes as it downloads Electron binaries +- Each Windows machine will have its own independent checklist data +- The app stores data locally using electron-store +- No internet connection required after installation + +## Troubleshooting + +If you encounter issues building: +1. Make sure Node.js is installed (version 14 or higher recommended) +2. Try deleting `node_modules` and running `npm install` again +3. On Windows, you may need to install build tools: `npm install --global windows-build-tools` + diff --git a/DEPLOYMENT_GUIDE.html b/DEPLOYMENT_GUIDE.html new file mode 100644 index 0000000..86503fb --- /dev/null +++ b/DEPLOYMENT_GUIDE.html @@ -0,0 +1,324 @@ + + + + +Recurring Checklist — Deployment Guide + + + + +

Recurring Checklist

Self-hosted deployment guide — Synology + Docker + Gmail SMTP

Document version 1 · Generated for IT handoff · Edit any value in this document to match your environment.

+ +

What this is & what was deployed
Network architecture
Deployment steps (already completed)
How users access it
How admin manages it
Weekly email digest
Backups (Hyper Backup → Google Drive)
Updating the app code
Troubleshooting / common ops
Credentials & references

+ +

1. What this is

A small Node.js web application running in a Docker container on the Synology NAS named Chronicles-NA. It hosts a multi-location checklist that staff complete each Sunday for startup and shutdown procedures. Every Sunday at 3:00 PM the server emails a single digest to media@waterschurch.org summarising what each location checked off and what they missed, then resets the list for the next week.

+ +

Components

+ + + + + + + + +

Piece	Where	Purpose
Web app (Node.js + Express)	Container on Chronicles-NA, port 3000	Serves the UI and stores check states
JSON state file	`/volume1/docker/recurring-checklist/data/checklists.json`	Source of truth for lists, items, and per-location checks
Reverse proxy	Boba-Fett (DSM → Control Panel → Login Portal → Advanced → Reverse Proxy)	Terminates HTTPS for the friendly URL and forwards to Chronicles-NA
Let’s Encrypt certificate	Boba-Fett (DSM → Control Panel → Security → Certificate)	Issued for `check.watersmedia.org`; auto-renews every 90 days
Scheduler (node-cron)	Inside the container	Fires `0 15 * * 0` in `America/New_York` to send the digest and reset state
Hyper Backup task	Chronicles-NA → Google Drive	Daily 23:30 backup of the `docker` shared folder

+ +

2. Network architecture

+  Internet
+     │
+     ▼  (https://check.watersmedia.org  → public IP)
+  Router  ─ port 443 forwarded to ─►  Boba-Fett (10.1.1.4)
+                                          │
+                                          │  Reverse-proxy rule:
+                                          │    check.watersmedia.org
+                                          │      → http://10.1.1.1:3000
+                                          ▼
+                                    Chronicles-NA (10.1.1.1)
+                                          │
+                                          │  Docker container "recurring-checklist"
+                                          │    listens on :3000
+                                          ▼
+                                    Node.js / Express
+                                          │
+                                          ├─► /volume1/docker/recurring-checklist/data/  (state file)
+                                          └─► SMTP smtp.gmail.com:587 (digest)
+

+ +

Hosts & URLs

+ + + + + + +

Hostname	Role
`https://check.watersmedia.org`	Public URL for the app (TLS via Boba-Fett)
`http://10.1.1.1:3000`	Direct LAN access to the app (bypasses reverse proxy)
`chronicles-na` (10.1.1.1)	Synology that runs the container
`boba-fett` (10.1.1.4)	Synology that owns the public IP & reverse proxy

+ +

3. Deployment steps (already completed)

The system is already deployed. The steps below document exactly how it was built so it can be reproduced on another NAS if needed.

+ +

3.1 Prepare the source bundle

The application source lives in this repository under server/. A deploy tarball is produced from that folder (excluding node_modules):

tar --exclude='node_modules' --exclude='.DS_Store' \
+    -czf checklist-deploy.tgz -C server .

+ +

3.2 Upload to the NAS

Open File Station on Chronicles-NA.
Navigate to the docker shared folder (created automatically when Container Manager is installed).
Create folder recurring-checklist inside docker.
Upload checklist-deploy.tgz into the new folder.
Right-click → Extract → Extract here. Synology unpacks .tgz in two passes (it leaves an intermediate .tar) — right-click that .tar and extract again.
Delete checklist-deploy.tgz, checklist-deploy.tar, and the PaxHeader folder.

+ +

3.3 Configure `.env`

The bundle ships a working .env. The values that matter are listed below. Edit through File Station → right-click → Open with → Text Editor (or any text editor).

+ + + + + + + + + + + + + +

Key	Value used	Notes
`PORT`	3000	Container-internal port. Don’t change unless also editing `docker-compose.yml`.
`ADMIN_PASSWORD`	(set in `.env`)	Password used to enter “Admin” mode in the web UI.
`REPORT_EMAIL`	`media@waterschurch.org`	Recipient of the Sunday digest.
`REPORT_CRON`	`0 15 * * 0`	Sunday at 3:00 PM in `REPORT_TZ`.
`REPORT_TZ`	`America/New_York`	IANA timezone for the cron.
`RESET_AFTER_DIGEST`	`true`	Server clears all check states after the digest is sent.
`SMTP_HOST`	`smtp.gmail.com`
`SMTP_PORT`	`587`	STARTTLS port.
`SMTP_USER`	`media@waterschurch.org`	Sender — a Google Workspace account.
`SMTP_PASS`	Gmail App Password (16 chars)	Generated at `myaccount.google.com/apppasswords`. NOT the regular Gmail password — requires 2-Step Verification.
`SMTP_FROM`	`Recurring Checklist <media@waterschurch.org>`

+ +

3.4 Build and start the container

Install Container Manager from Package Center on Chronicles-NA (creates the docker shared folder automatically).
Open Container Manager → left sidebar Project → Create.
Project name: recurring-checklist. Path: /volume1/docker/recurring-checklist. Source: “Use existing docker-compose.yml”.
Skip the “Set up web portal via Web Station” option (not needed).
Click Done. Container Manager runs docker compose up; first build takes ~60 seconds. Final log line should be Exit Code: 0.
Verify: http://10.1.1.1:3000 serves the app.

+ +

3.5 Public hostname + TLS

DDNS (Chronicles-NA → Control Panel → External Access → DDNS → Add): Synology provider, hostname check.watersmedia.org, External Address Auto. Status should be Normal.
Reverse proxy on Boba-Fett (Control Panel → Login Portal → Advanced → Reverse Proxy → Create): +
- Source: HTTPS · check.watersmedia.org · port 443
- Destination: HTTP · 10.1.1.1 · port 3000
+
Let’s Encrypt on Boba-Fett (Control Panel → Security → Certificate → Add → Get a certificate from Let’s Encrypt): +
- Domain: check.watersmedia.org
- Email: media@waterschurch.org
+
Bind the cert: Settings button in the Certificate tab → set the check.watersmedia.org row to use the new cert → OK.

+ +

+ Why does the reverse proxy live on Boba-Fett, not on Chronicles-NA? + The router forwards port 443 to Boba-Fett. Putting the proxy there avoids any router changes. Boba-Fett receives check.watersmedia.org traffic, terminates TLS with the Let’s Encrypt cert, and forwards plain HTTP to Chronicles-NA:3000 over the LAN. +

+ +

4. How users access it

Any browser on any device:

https://check.watersmedia.org

First visit on each device asks for a name. That name is the location identifier (e.g. Woonsocket, North Attleboro). Case and whitespace are normalised — woonsocket, WOONSOCKET, and Woonsocket all collapse to the same canonical name. The name is stored in the browser’s localStorage and can be changed by clicking the name pill in the top-right.

Each location ticks off items independently. Unassigned lists are visible to all locations but checks are per-location. Lists with a specific location are only visible to (and writeable by) that location.

+ +

5. How admin manages it

Click the 🔒 Admin button in the top-right and enter ADMIN_PASSWORD.
A horizontal “Menu” bar appears under the list tabs. Click or swipe it to expand: +
- + Add List / Rename List / Delete List — each list has an optional “Assign to location” field. Leave blank to show the list to every location.
- Export JSON — downloads the current state file as a backup snapshot.
- Import JSON — appends imported lists into the current state, auto-tagged with the current logged-in location.
- Send Digest Now — sends a one-off (manual) copy of the Sunday report immediately. Useful to verify SMTP. Does not reset state.
+
Within a list (admin mode), each item has Edit / Move / Delete buttons. Drag tabs sideways to reorder lists; drag items up/down within the To Do or Done column to reorder tasks.
Click the yellow 🔓 Admin (on) button again to leave admin mode. All management UI disappears for non-admins.

+ +

6. Weekly email digest

A node-cron job fires at 0 15 * * 0 in America/New_York (Sunday 3:00 PM local). It:

Reads the current state from checklists.json.
Builds a per-location report: one section per location, each list within shown as a green/red table of ✓/✗ items with the who+when stamp.
Sends the email via smtp.gmail.com:587 using the configured app password, to REPORT_EMAIL only. The subject is Checklist Report — <weekday, month, day>.
If RESET_AFTER_DIGEST=true, the entire check-states map is cleared so the next week starts clean. Items themselves are preserved.

To change the schedule, edit REPORT_CRON in .env and rebuild the container (see §8).

+ +

7. Backups

Hyper Backup task “Recurring Checklist” on Chronicles-NA:

Destination: Google Drive (signed in as media@waterschurch.org).
Source: docker shared folder (includes everything under /volume1/docker).
Schedule: Daily 23:30; integrity check Saturday 01:30.
Compression on. Client-side encryption off.

Restoring an entire run is as simple as: open Hyper Backup → select task → Restore Data → pick a version → restore to /volume1/docker/recurring-checklist/data/checklists.json. The container picks up the new file on next request (no restart needed).

+ +

8. Updating the app code

The state file (data/checklists.json) and the configuration file (.env) are preserved between updates because they live in a Docker bind-mount and on disk. The update procedure is:

Developer produces a new checklist-deploy.tgz from the latest server/ source.
Upload the new tarball into /volume1/docker/recurring-checklist/ via File Station.
Important: before extracting, rename or move the existing .env aside so it’s not overwritten (the bundle ships an example .env, but if the deploy script excludes it, this step is unnecessary — confirm with the developer per release).
Extract the new tarball (in two passes, as in §3.2). Replace existing files when prompted.
Delete the leftover .tgz / .tar / PaxHeader.
Open Container Manager → Project → recurring-checklist → Action menu → Build (or Stop, then Start with Build). This rebuilds the image with the new code and restarts the container.
Verify: http://10.1.1.1:3000 still loads, and any new functionality from the release is visible.

Rollback: keep the previous checklist-deploy.tgz archived. To roll back, re-extract the older bundle, rebuild. State file is untouched.

+ +

9. Troubleshooting / common ops

+ + + + + + + + +

Symptom	Where to look	Fix
App URL times out	Container Manager → recurring-checklist → status	If stopped: Action → Start. If crashing: open container Log, look for errors.
Digest email never arrived	Container Manager → container Log, search `[digest]`	Look for `Failed: ...`. Most often Gmail app password revoked or rotated; regenerate at `myaccount.google.com/apppasswords` and update `SMTP_PASS` in `.env`, then rebuild.
Cert renewal failed	Boba-Fett → Control Panel → Security → Certificate	Right-click the cert → Renew. Requires port 80 reachable on Boba-Fett.
State got corrupted / accidental wipe	Hyper Backup → Recurring Checklist task	Restore Data → pick latest known-good version → restore the `data/` folder only.
“Wrong password” on admin login	`.env` on the NAS	Compare `ADMIN_PASSWORD`. If changed, rebuild container (env vars are read on container start).
Reverse proxy returns Boba-Fett DSM instead of the app	Boba-Fett → Control Panel → Login Portal → Advanced → Reverse Proxy	Confirm rule for `check.watersmedia.org` exists and routes to `10.1.1.1:3000`. Cert must be bound (see §3.5).

+ +

Useful one-liners (SSH into Chronicles-NA)

# See the running container
+sudo docker ps | grep recurring
+
+# Tail logs
+sudo docker logs -f recurring-checklist
+
+# Manually restart the container
+sudo docker compose -f /volume1/docker/recurring-checklist/docker-compose.yml restart
+
+# Look at the live state file
+cat /volume1/docker/recurring-checklist/data/checklists.json | head

+ +

10. Credentials & references

Admin password: set in .env on the NAS (key ADMIN_PASSWORD). Rotate by editing .env and rebuilding the container.
Gmail app password: generated at https://myaccount.google.com/apppasswords using the media@waterschurch.org Google Workspace account. Stored in .env as SMTP_PASS. To rotate: revoke the existing app password in Google, generate a new one, paste into .env, rebuild.
Synology DDNS: check.watersmedia.org tied to the Synology Account used during DDNS setup. Renewal is automatic.
Let’s Encrypt cert: 90-day validity, auto-renewal handled by DSM 7. Confirm under Control Panel → Security → Certificate.
Source repository: the application source is the server/ directory of recurring-checklist-app, maintained by the application developer.

+ +

+ Security notes + The app uses a shared password for admin actions (no per-user accounts). Anyone on the open URL can check items off using any name, so don’t treat the contents of the checklist as confidential. The admin password is the only gate for adding/editing/deleting lists. +

+ + + + + diff --git a/DEPLOYMENT_GUIDE.pdf b/DEPLOYMENT_GUIDE.pdf new file mode 100644 index 0000000..c1ddfa2 Binary files /dev/null and b/DEPLOYMENT_GUIDE.pdf differ diff --git a/LAPTOP-SETUP.md b/LAPTOP-SETUP.md new file mode 100644 index 0000000..c4b1953 --- /dev/null +++ b/LAPTOP-SETUP.md @@ -0,0 +1,107 @@ +# Moving checklist development to another Mac + +The project folder is most of it, but three things live outside it, and one thing should +deliberately **stay** on the Mac Studio. + +--- + +## What to copy + +`checklist-app-transfer.tgz` — the whole project minus `node_modules`, build output and +secrets (all of which are either regenerated or restored separately). Unpack it wherever you +like; nothing depends on the path except the two config files noted below. + +```bash +mkdir -p ~/Documents && tar -xzf checklist-app-transfer.tgz -C ~/Documents +``` + +## What the laptop needs installed + +| | How | +|---|---| +| **Xcode** | Mac App Store. Then `sudo xcodebuild -license accept` and open it once. | +| **Node 20+** | [nodejs.org](https://nodejs.org) installer | +| **JDK 21** | see below | +| **Android SDK** | see below | + +No Homebrew and no CocoaPods are needed — iOS uses Swift Package Manager deliberately, +because the system Ruby is too old for CocoaPods. + +```bash +# JDK 21 +curl -L -o /tmp/jdk.tar.gz 'https://api.adoptium.net/v3/binary/latest/21/ga/mac/aarch64/jdk/hotspot/normal/eclipse' +mkdir -p ~/.jdks && tar -xzf /tmp/jdk.tar.gz -C ~/.jdks && mv ~/.jdks/jdk-21* ~/.jdks/temurin-21 + +# Android command-line tools + SDK +curl -L -o /tmp/cmdtools.zip 'https://dl.google.com/android/repository/commandlinetools-mac-13114758_latest.zip' +mkdir -p ~/Library/Android/sdk/cmdline-tools && unzip -q /tmp/cmdtools.zip -d /tmp +mv /tmp/cmdline-tools ~/Library/Android/sdk/cmdline-tools/latest +yes | ~/Library/Android/sdk/cmdline-tools/latest/bin/sdkmanager --sdk_root="$HOME/Library/Android/sdk" --licenses +~/Library/Android/sdk/cmdline-tools/latest/bin/sdkmanager --sdk_root="$HOME/Library/Android/sdk" \ + "platform-tools" "platforms;android-36" "build-tools;36.0.0" + +# Project dependencies +cd ~/Documents/recurring-checklist-app/mobile && npm install +cd ../server && npm install +``` + +Then edit `mobile/android/local.properties` so `sdk.dir` points at the new machine's home +directory — it is machine-specific and will be wrong after a copy. + +## Restore the secrets + +They are **not** in the transfer bundle on purpose. They are already in +`checklist-signing-backup.dmg` (Google Drive → `Apps/Backups`). Open it and: + +| From the DMG | Goes to | +|---|---| +| `android/upload-keystore.jks` | `/mobile/keystore/upload-keystore.jks` | +| `android/keystore.properties` | `/mobile/keystore.properties` | +| `ios/AuthKey_NXR7767SYK.p8` | `~/.appstoreconnect/private_keys/` | +| `ios/ios-signing.config` | `/mobile/ios-signing.config` | +| — | `/server/.env` — copy from the Studio; it is not in the DMG | + +```bash +chmod 600 ~/.appstoreconnect/private_keys/AuthKey_NXR7767SYK.p8 +``` + +Then fix the absolute path inside `keystore.properties`: + +``` +storeFile=/Users//Documents/recurring-checklist-app/mobile/keystore/upload-keystore.jks +``` + +**The iOS distribution certificate is not copied.** Sign into Xcode ▸ Settings ▸ Accounts +with the same Apple ID and run `./release.sh --ios`; `-allowProvisioningUpdates` mints a new +certificate for the new machine automatically. Nothing needs exporting from the old keychain. + +## Check it works + +```bash +./mobile/scripts/verify-asc-key.sh # authenticates against App Store Connect +cd mobile && node scripts/sync-web.js # rebuilds www/ from server/public +cd android && . ../scripts/env.sh && ./gradlew :app:bundleRelease --no-daemon +``` + +A signed `.aab` means Android is fully restored. `./release.sh --ios` proves the Apple side. + +--- + +## What must STAY on the Mac Studio + +**The nightly off-site backup.** `backup-to-drive.sh` plus the LaunchAgent +`org.waterschurch.checklist-drive-backup` should keep running here, not on the laptop: + +- a LaunchAgent only fires while the machine is awake and logged in — a laptop that sleeps or + goes home silently stops backing up, and the failure is invisible +- it needs the LAN to reach the NAS at `10.1.1.5` + +Leave both in place on the Studio. If the laptop ever becomes the only machine, move the +script and reinstall the LaunchAgent there — and check the log afterwards. + +## The other thing that needs the LAN + +`build-deploy.sh` (and therefore `./release.sh`) pushes to the NAS at `10.1.1.5`. **Web +deploys only work on the church network.** Off-site you can still build and upload the iOS +and Android apps — those only need the internet — but `./release.sh --web` will fail until +you are back on the LAN or on a VPN into it. diff --git a/README.md b/README.md new file mode 100644 index 0000000..a0a5faf --- /dev/null +++ b/README.md @@ -0,0 +1,100 @@ +# Recurring Checklist Application + +A simple Windows desktop application for managing recurring checklists. Perfect for tasks that need to be completed on a regular schedule, similar to Planning Center checklists but dedicated and simplified. + +## Features + +- ✅ Add checklist items with titles and detailed descriptions +- ✅ Mark items as complete (moves to "Done" section) +- ✅ Set items to recur daily, weekly, or monthly +- ✅ Automatic reset of recurring items based on schedule +- ✅ Dark theme interface matching Planning Center style +- ✅ Card-based layout with clear visibility +- ✅ Data persistence across sessions +- ✅ Easy to package and distribute to multiple machines + +## Installation + +### Development Setup + +1. Install Node.js (if not already installed) - Download from [nodejs.org](https://nodejs.org/) +2. Navigate to the project directory: + ```bash + cd recurring-checklist-app + ``` +3. Install dependencies: + ```bash + npm install + ``` +4. Run the application: + ```bash + npm start + ``` + +### Building for Windows Distribution + +To create a Windows executable installer: + +```bash +npm run build:win +``` + +This will create an installer in the `dist` folder that you can distribute to other machines. The installer will be named something like `Recurring Checklist Setup 1.0.0.exe`. + +## Usage + +1. **Add Tasks**: + - Enter a title (required) and optional description + - Descriptions support multiple lines and can include detailed instructions + - Click "Add Task" or press Enter + +2. **Set Recurrence**: + - Check "Recurring Task" checkbox + - Select frequency: Daily, Weekly, or Monthly + - For weekly: Choose the day of the week (e.g., Sunday) + - For monthly: Choose the day of the month (1-31) + +3. **Complete Tasks**: + - Check the checkbox next to an item to mark it complete + - Completed items automatically move to the "Done" section + +4. **Recurring Reset**: + - Recurring items automatically reset based on their schedule + - Daily items reset each day + - Weekly items reset on their specified day + - Monthly items reset on their specified day of the month + +5. **Delete Tasks**: + - Click the "Delete" button on any task to remove it permanently + +## Recurrence Options + +- **Daily**: Item resets every day at midnight +- **Weekly**: Item resets on a specific day of the week (e.g., every Sunday) +- **Monthly**: Item resets on a specific day of the month (e.g., day 1) + +## Data Storage + +All checklist data is stored locally on your machine using `electron-store`. Data persists between application sessions and is stored in your user data directory. + +## Distribution + +The built application can be easily copied to other Windows machines: + +1. Build the installer using `npm run build:win` +2. Copy the installer file from the `dist` folder +3. Run the installer on each Windows machine where you want to use the app +4. Each installation will have its own independent data storage + +## Requirements + +- Windows 7 or later +- Node.js (for development and building only) + +## Notes + +- The application checks for recurring items every minute +- Recurring items reset based on the current date/time +- Each machine will have its own separate checklist data +- The app uses a dark theme similar to Planning Center for better visibility + diff --git a/UPDATE_GUIDE.html b/UPDATE_GUIDE.html new file mode 100644 index 0000000..b4a3db6 --- /dev/null +++ b/UPDATE_GUIDE.html @@ -0,0 +1,147 @@ + + + + +Updating the Recurring Checklist server + + + + +

Updating the Recurring Checklist server

5-minute guide for pushing new app versions to the Synology NAS

+ +

Before you start

The developer will give you a file called checklist-deploy.tgz.
Your data (everything people have ticked off) and your settings (.env) are kept on the NAS and never touched by an update. Only the app code changes.
You only need access to File Station and Container Manager on the Chronicles-NA Synology.

+ +

The 5 steps

+ +

1Open File Station on Chronicles-NA and navigate to:

docker  →  recurring-checklist

+ +

2Drag the new checklist-deploy.tgz into that folder. If File Station asks about overwriting, choose Overwrite.

+ +

3Extract it — Synology does this in two passes:

Right-click checklist-deploy.tgz → Extract → Extract here. A checklist-deploy.tar appears next to it.
Right-click checklist-deploy.tar → Extract → Extract here. When it asks about overwriting files, say “Overwrite all” or “Yes to all”.

+ Don’t worry about overwriting. The tarball is built so it can’t touch .env or data/. The only files that change are the app code: server.js, public/*, Dockerfile, etc. +

+ +

4Clean up the leftovers. Delete:

checklist-deploy.tgz
checklist-deploy.tar
The PaxHeader folder (it’s just tar metadata)

+ +

5Rebuild the container in Container Manager:

Open Container Manager.
Click Project in the left sidebar.
Click the row recurring-checklist to select it.
Click the Action dropdown above the list → choose Build.
A log window pops up. Wait ~30–60 seconds until you see Exit Code: 0 at the bottom. Click Close.

+ +

Verify it worked

Open https://check.watersmedia.org in a browser.
Hard-refresh with Cmd + Shift + R (or Ctrl + Shift + R on Windows). This clears any cached old JavaScript.
The page should load normally, with whatever new feature the developer described in the release.

+ +

If something looks broken

Check container logs. Container Manager → Container tab → recurring-checklist → Details → Log tab. Look for red error lines near the bottom.
Restart the container. Container Manager → Project → recurring-checklist → Action → Stop, then Action → Start.
Restore your data if a release accidentally corrupted state: Hyper Backup → Recurring Checklist task → Restore Data → pick a recent backup → restore just the data/ folder.
Roll back. Keep the previous release’s .tgz archived. To roll back, extract it over the current code (overwriting), then rebuild. Your data stays intact.

+ +

+ Always keep the previous release’s .tgz for at least a week. If a new release introduces a bug, you can roll back in under a minute by extracting the old one and rebuilding. +

+ +

Quick reference

Code location on NAS: /volume1/docker/recurring-checklist/
Data file: /volume1/docker/recurring-checklist/data/checklists.json
Settings file: /volume1/docker/recurring-checklist/.env
Public URL: https://check.watersmedia.org
Direct LAN URL: http://10.1.1.1:3000
Backup destination: Google Drive, signed in as media@waterschurch.org

+ + + diff --git a/UPDATE_GUIDE.pdf b/UPDATE_GUIDE.pdf new file mode 100644 index 0000000..db1a8ba Binary files /dev/null and b/UPDATE_GUIDE.pdf differ diff --git a/app.js b/app.js new file mode 100644 index 0000000..ca5c6df --- /dev/null +++ b/app.js @@ -0,0 +1,1093 @@ +const { ipcRenderer } = require('electron'); +const Store = require('electron-store'); +const store = new Store(); + +const DEFAULT_LISTS = [ + { id: 'general', name: 'General' } +]; + +// Initialize data structure with migration support +let checklistData = store.get('checklistData', { + lists: [], + selectedListId: DEFAULT_LISTS[0].id +}); + +// Migration from single-list structure +if (checklistData.items) { + const migratedList = { + id: 'startup', + name: 'Startup', + items: checklistData.items, + lastCheckDate: checklistData.lastCheckDate || new Date().toDateString() + }; + checklistData = { + lists: [migratedList], + selectedListId: migratedList.id + }; + store.set('checklistData', checklistData); +} + +function ensureDefaultLists() { + if (!Array.isArray(checklistData.lists)) { + checklistData.lists = []; + } + if (checklistData.lists.length === 0) { + checklistData.lists.push({ + id: DEFAULT_LISTS[0].id, + name: DEFAULT_LISTS[0].name, + items: [], + lastCheckDate: new Date().toDateString() + }); + checklistData.selectedListId = DEFAULT_LISTS[0].id; + } +} + +ensureDefaultLists(); + +// DOM elements +const itemTitleInput = document.getElementById('itemTitle'); +const itemDescriptionInput = document.getElementById('itemDescription'); +const isRecurringCheckbox = document.getElementById('isRecurring'); +const recurrenceOptions = document.getElementById('recurrenceOptions'); +const recurrenceTypeSelect = document.getElementById('recurrenceType'); +const weeklyOptions = document.getElementById('weeklyOptions'); +const monthlyOptions = document.getElementById('monthlyOptions'); +const dayOfWeekSelect = document.getElementById('dayOfWeek'); +const dayOfMonthInput = document.getElementById('dayOfMonth'); +const addItemBtn = document.getElementById('addItemBtn'); +const todoList = document.getElementById('todoList'); +const doneList = document.getElementById('doneList'); +const listTabs = document.getElementById('listTabs'); +const addListBtn = document.getElementById('addListBtn'); +const addListSelect = document.getElementById('addListSelect'); +const renameListBtn = document.getElementById('renameListBtn'); +const deleteListBtn = document.getElementById('deleteListBtn'); +const exportJsonBtn = document.getElementById('exportJsonBtn'); +const importJsonBtn = document.getElementById('importJsonBtn'); +const listMenu = document.getElementById('listMenu'); +const listMenuHandle = document.getElementById('listMenuHandle'); +const tasksTabBtn = document.getElementById('tasksTabBtn'); +const addTabBtn = document.getElementById('addTabBtn'); +const tasksView = document.getElementById('tasksView'); +const addView = document.getElementById('addView'); +const moveItemModal = document.getElementById('moveItemModal'); +const moveItemSelect = document.getElementById('moveItemSelect'); +const moveItemSave = document.getElementById('moveItemSave'); +const moveItemCancel = document.getElementById('moveItemCancel'); +const moveItemOverlay = moveItemModal; + +const listModal = document.getElementById('listModal'); +const listModalTitle = document.getElementById('listModalTitle'); +const listModalMessage = document.getElementById('listModalMessage'); +const listModalInput = document.getElementById('listModalInput'); +const listModalSave = document.getElementById('listModalSave'); +const listModalCancel = document.getElementById('listModalCancel'); +const listModalOverlay = listModal; // alias for clarity + +// Edit task modal elements +const editTaskModal = document.getElementById('editTaskModal'); +const editTitle = document.getElementById('editTitle'); +const editDescription = document.getElementById('editDescription'); +const editIsRecurring = document.getElementById('editIsRecurring'); +const editRecurrenceOptions = document.getElementById('editRecurrenceOptions'); +const editRecurrenceType = document.getElementById('editRecurrenceType'); +const editWeeklyOptions = document.getElementById('editWeeklyOptions'); +const editMonthlyOptions = document.getElementById('editMonthlyOptions'); +const editDayOfWeek = document.getElementById('editDayOfWeek'); +const editDayOfMonth = document.getElementById('editDayOfMonth'); +const editModalSave = document.getElementById('editModalSave'); +const editModalCancel = document.getElementById('editModalCancel'); +const editModalOverlay = editTaskModal; + +let addTargetListId = checklistData.selectedListId; +let modalMode = null; +let modalTargetId = null; +let dragSourceListId = null; +const FALLBACK_LIST = { id: 'new-list', name: 'New List' }; +let touchDragSourceId = null; +let editingTaskId = null; +let moveModalItemId = null; +let itemDragId = null; +let itemDragDone = false; + +// Event listeners +isRecurringCheckbox.addEventListener('change', () => { + recurrenceOptions.style.display = isRecurringCheckbox.checked ? 'block' : 'none'; + updateRecurrenceOptions(); +}); + +recurrenceTypeSelect.addEventListener('change', updateRecurrenceOptions); + +addItemBtn.addEventListener('click', addItem); + +itemTitleInput.addEventListener('keypress', (e) => { + if (e.key === 'Enter' && !e.shiftKey) { + e.preventDefault(); + addItem(); + } +}); + +addListBtn.addEventListener('click', addList); +renameListBtn.addEventListener('click', renameList); +deleteListBtn.addEventListener('click', deleteList); +exportJsonBtn.addEventListener('click', exportChecklists); +importJsonBtn.addEventListener('click', importChecklists); +tasksTabBtn.addEventListener('click', () => switchTab('tasks')); +addTabBtn.addEventListener('click', () => switchTab('add')); +addListSelect.addEventListener('change', (e) => { + addTargetListId = e.target.value; +}); +moveItemSave.addEventListener('click', handleMoveItemSave); +moveItemCancel.addEventListener('click', closeMoveItemModal); +moveItemOverlay.addEventListener('click', (e) => { + if (e.target === moveItemOverlay) { + closeMoveItemModal(); + } +}); +todoList.addEventListener('dragover', (e) => onListContainerDragOver(e, false)); +doneList.addEventListener('dragover', (e) => onListContainerDragOver(e, true)); +todoList.addEventListener('drop', (e) => onListContainerDrop(e, false)); +doneList.addEventListener('drop', (e) => onListContainerDrop(e, true)); +listModalSave.addEventListener('click', handleModalSave); +listModalCancel.addEventListener('click', closeListModal); +listModalInput.addEventListener('keydown', (e) => { + if (e.key === 'Enter') { + e.preventDefault(); + handleModalSave(); + } else if (e.key === 'Escape') { + e.preventDefault(); + closeListModal(); + } +}); +listModalOverlay.addEventListener('click', (e) => { + if (e.target === listModalOverlay) { + closeListModal(); + } +}); + +// List menu (collapsible drawer for list actions) +let listMenuPointerStartY = null; +let listMenuPointerStartX = null; +let listMenuPointerMoved = false; +let listMenuSwipeHandled = false; +const LIST_MENU_SWIPE_THRESHOLD = 18; +const LIST_MENU_MOVE_THRESHOLD = 10; + +function expandListMenu() { + listMenu.classList.add('expanded'); + listMenuHandle.setAttribute('aria-expanded', 'true'); +} + +function collapseListMenu() { + listMenu.classList.remove('expanded'); + listMenuHandle.setAttribute('aria-expanded', 'false'); +} + +function toggleListMenu() { + if (listMenu.classList.contains('expanded')) { + collapseListMenu(); + } else { + expandListMenu(); + } +} + +listMenuHandle.addEventListener('click', () => { + if (listMenuSwipeHandled) { + listMenuSwipeHandled = false; + return; + } + toggleListMenu(); +}); + +listMenuHandle.addEventListener('keydown', (e) => { + if (e.key === 'Enter' || e.key === ' ') { + e.preventDefault(); + toggleListMenu(); + } +}); + +listMenuHandle.addEventListener('pointerdown', (e) => { + listMenuPointerStartY = e.clientY; + listMenuPointerStartX = e.clientX; + listMenuPointerMoved = false; + try { listMenuHandle.setPointerCapture(e.pointerId); } catch (_) {} +}); + +listMenuHandle.addEventListener('pointermove', (e) => { + if (listMenuPointerStartY === null) return; + const dy = e.clientY - listMenuPointerStartY; + const dx = e.clientX - listMenuPointerStartX; + if (Math.abs(dy) > LIST_MENU_MOVE_THRESHOLD || Math.abs(dx) > LIST_MENU_MOVE_THRESHOLD) { + listMenuPointerMoved = true; + } +}); + +listMenuHandle.addEventListener('pointerup', (e) => { + try { listMenuHandle.releasePointerCapture(e.pointerId); } catch (_) {} + if (listMenuPointerStartY === null) { + return; + } + const dy = e.clientY - listMenuPointerStartY; + const dx = e.clientX - listMenuPointerStartX; + const isSwipe = listMenuPointerMoved && Math.abs(dy) > LIST_MENU_SWIPE_THRESHOLD && Math.abs(dy) > Math.abs(dx); + if (isSwipe) { + if (dy > 0) { + expandListMenu(); + } else { + collapseListMenu(); + } + listMenuSwipeHandled = true; + } + listMenuPointerStartY = null; + listMenuPointerStartX = null; + listMenuPointerMoved = false; +}); + +listMenuHandle.addEventListener('pointercancel', () => { + listMenuPointerStartY = null; + listMenuPointerStartX = null; + listMenuPointerMoved = false; +}); + +editIsRecurring.addEventListener('change', () => { + editRecurrenceOptions.style.display = editIsRecurring.checked ? 'block' : 'none'; + updateEditRecurrenceOptions(); +}); +editRecurrenceType.addEventListener('change', updateEditRecurrenceOptions); +editModalSave.addEventListener('click', saveEditTask); +editModalCancel.addEventListener('click', closeEditModal); +// Keep edit modal open when clicking the backdrop so text selections outside the modal don't close it. +editModalOverlay.addEventListener('click', (e) => { + if (e.target !== editModalOverlay) return; +}); + +// Functions +function switchTab(tab) { + if (tab === 'tasks') { + tasksView.classList.add('active'); + addView.classList.remove('active'); + tasksTabBtn.classList.add('active'); + addTabBtn.classList.remove('active'); + } else { + tasksView.classList.remove('active'); + addView.classList.add('active'); + tasksTabBtn.classList.remove('active'); + addTabBtn.classList.add('active'); + } +} + +function addList() { + openListModal('add'); +} + +function renameList() { + openListModal('rename'); +} + +function setSelectedList(id) { + checklistData.selectedListId = id; + addTargetListId = addTargetListId || id; + saveData(); + renderLists(); +} + +function getCurrentList() { + let list = checklistData.lists.find(l => l.id === checklistData.selectedListId); + if (!list) { + ensureDefaultLists(); + list = checklistData.lists[0]; + checklistData.selectedListId = list.id; + saveData(); + } + return list; +} + +function updateRecurrenceOptions() { + const type = recurrenceTypeSelect.value; + weeklyOptions.style.display = type === 'weekly' ? 'block' : 'none'; + monthlyOptions.style.display = type === 'monthly' ? 'block' : 'none'; +} + +function addItem() { + const title = itemTitleInput.value.trim(); + if (!title) { + alert('Please enter a task title'); + return; + } + + const description = itemDescriptionInput.value.trim(); + const isRecurring = isRecurringCheckbox.checked; + + let recurrence = null; + if (isRecurring) { + const type = recurrenceTypeSelect.value; + recurrence = { + type: type, + dayOfWeek: type === 'weekly' ? parseInt(dayOfWeekSelect.value) : null, + dayOfMonth: type === 'monthly' ? parseInt(dayOfMonthInput.value) : null + }; + } + + const newItem = { + id: Date.now().toString(), + title: title, + description: description, + completed: false, + completedDate: null, + recurrence: recurrence, + createdAt: new Date().toISOString() + }; + + const targetList = checklistData.lists.find(l => l.id === addTargetListId) || getCurrentList(); + targetList.items.push(newItem); + saveData(); + renderLists(); + + // Reset form + itemTitleInput.value = ''; + itemDescriptionInput.value = ''; + isRecurringCheckbox.checked = false; + recurrenceOptions.style.display = 'none'; + itemTitleInput.focus(); +} + +function openEditModal(itemId) { + const list = getCurrentList(); + const item = list.items.find(i => i.id === itemId); + if (!item) return; + editingTaskId = itemId; + editTitle.value = item.title; + editDescription.value = item.description || ''; + editIsRecurring.checked = !!item.recurrence; + editRecurrenceOptions.style.display = editIsRecurring.checked ? 'block' : 'none'; + if (item.recurrence) { + editRecurrenceType.value = item.recurrence.type || 'daily'; + editDayOfWeek.value = (item.recurrence.dayOfWeek ?? 0).toString(); + editDayOfMonth.value = item.recurrence.dayOfMonth ?? 1; + } else { + editRecurrenceType.value = 'daily'; + editDayOfWeek.value = '0'; + editDayOfMonth.value = 1; + } + updateEditRecurrenceOptions(); + editTaskModal.style.display = 'flex'; + requestAnimationFrame(() => { + editTitle.focus({ preventScroll: true }); + editTitle.select(); + }); +} + +function closeEditModal() { + editingTaskId = null; + editTaskModal.style.display = 'none'; +} + +function saveEditTask() { + if (!editingTaskId) { + closeEditModal(); + return; + } + const list = getCurrentList(); + const item = list.items.find(i => i.id === editingTaskId); + if (!item) { + closeEditModal(); + return; + } + const title = editTitle.value.trim(); + if (!title) { + alert('Please enter a task title'); + return; + } + const description = editDescription.value.trim(); + let recurrence = null; + if (editIsRecurring.checked) { + const type = editRecurrenceType.value; + recurrence = { + type, + dayOfWeek: type === 'weekly' ? parseInt(editDayOfWeek.value) : null, + dayOfMonth: type === 'monthly' ? parseInt(editDayOfMonth.value) : null + }; + } + item.title = title; + item.description = description; + item.recurrence = recurrence; + saveData(); + renderLists(); + closeEditModal(); +} + +function toggleItem(itemId) { + const list = getCurrentList(); + const item = list.items.find(i => i.id === itemId); + if (!item) return; + + item.completed = !item.completed; + item.completedDate = item.completed ? new Date().toISOString() : null; + + saveData(); + renderLists(); +} + +function deleteItem(itemId) { + const list = getCurrentList(); + if (confirm('Are you sure you want to delete this task?')) { + list.items = list.items.filter(i => i.id !== itemId); + saveData(); + renderLists(); + } +} + +function shouldRecur(item) { + if (!item.recurrence || !item.completed) return false; + + const now = new Date(); + const completedDate = new Date(item.completedDate); + const today = new Date(now.getFullYear(), now.getMonth(), now.getDate()); + const completedDay = new Date(completedDate.getFullYear(), completedDate.getMonth(), completedDate.getDate()); + + switch (item.recurrence.type) { + case 'daily': + return completedDay.getTime() < today.getTime(); + + case 'weekly': + const dayOfWeek = now.getDay(); + return dayOfWeek === item.recurrence.dayOfWeek && + completedDay.getTime() < today.getTime(); + + case 'monthly': + const dayOfMonth = now.getDate(); + return dayOfMonth === item.recurrence.dayOfMonth && + completedDay.getTime() < today.getTime(); + + default: + return false; + } +} + +function getNextOccurrenceDate(recurrence) { + if (!recurrence) return null; + + const now = new Date(); + const today = new Date(now.getFullYear(), now.getMonth(), now.getDate()); + + switch (recurrence.type) { + case 'daily': + return new Date(today.getTime() + 24 * 60 * 60 * 1000); + + case 'weekly': + const dayOfWeek = now.getDay(); + const targetDay = recurrence.dayOfWeek; + let daysUntil = targetDay - dayOfWeek; + if (daysUntil <= 0) daysUntil += 7; + return new Date(today.getTime() + daysUntil * 24 * 60 * 60 * 1000); + + case 'monthly': + const nextMonth = new Date(now.getFullYear(), now.getMonth() + 1, recurrence.dayOfMonth); + return nextMonth; + + default: + return null; + } +} + +function formatDate(date) { + if (!date) return ''; + const d = new Date(date); + const days = ['Sunday', 'Monday', 'Tuesday', 'Wednesday', 'Thursday', 'Friday', 'Saturday']; + const months = ['January', 'February', 'March', 'April', 'May', 'June', + 'July', 'August', 'September', 'October', 'November', 'December']; + return `${days[d.getDay()]}, ${months[d.getMonth()]} ${d.getDate()}`; +} + +function checkRecurringItems() { + const today = new Date().toDateString(); + checklistData.lists.forEach(list => { + if (list.lastCheckDate === today) return; + list.items.forEach(item => { + if (shouldRecur(item)) { + item.completed = false; + item.completedDate = null; + } + }); + list.lastCheckDate = today; + }); + saveData(); +} + +function renderLists() { + checkRecurringItems(); + renderListTabs(); + const list = getCurrentList(); + const todoItems = list.items.filter(item => !item.completed); + const doneItems = list.items.filter(item => item.completed); + + renderList(todoList, todoItems, false); + renderList(doneList, doneItems, true); + renderListSelect(); +} + +function renderList(container, items, isDone) { + if (items.length === 0) { + container.innerHTML = '

No tasks yet

'; + return; + } + + container.innerHTML = items.map(item => { + const recurrenceText = item.recurrence ? + getRecurrenceText(item.recurrence, item.completed) : ''; + + return ` +

+ +

${escapeHtml(item.title)}

+ ${item.description ? ` +

${escapeHtml(item.description)}

+ ` : ''} + ${recurrenceText ? ` +

+ 🔄 + ${recurrenceText} +

+ ` : ''} +

+ + + +

+ `; + }).join(''); +} + +function renderListTabs() { + const current = getCurrentList().id; + listTabs.innerHTML = checklistData.lists.map(list => ` + + `).join(''); +} + +function renderListSelect() { + const current = addTargetListId || checklistData.selectedListId; + addListSelect.innerHTML = checklistData.lists.map(list => ` + + `).join(''); + if (!addTargetListId) { + addTargetListId = checklistData.selectedListId; + } +} + +function openListModal(mode) { + modalMode = mode; + modalTargetId = getCurrentList().id; + listModalTitle.textContent = mode === 'add' ? 'Add List' : 'Rename List'; + listModalMessage.style.display = 'none'; + listModalMessage.classList.remove('danger'); + listModalInput.style.display = 'block'; + listModalSave.textContent = 'Save'; + listModalSave.classList.remove('btn-danger'); + + if (mode === 'rename') { + listModalInput.value = getCurrentList().name; + } else { + listModalInput.value = ''; + } + + listModal.style.display = 'flex'; + requestAnimationFrame(() => { + listModalInput.focus({ preventScroll: true }); + listModalInput.select(); + }); +} + +function closeListModal() { + modalMode = null; + modalTargetId = null; + listModal.style.display = 'none'; + listModalInput.value = ''; +} + +function handleModalSave() { + const name = listModalInput.value.trim(); + if (modalMode === 'add') { + if (!name) { + closeListModal(); + return; + } + const id = name.toLowerCase().replace(/\s+/g, '-').replace(/[^a-z0-9\-]/g, '') || Date.now().toString(); + if (checklistData.lists.find(l => l.id === id)) { + alert('A list with that name already exists.'); + return; + } + checklistData.lists.push({ + id, + name, + items: [], + lastCheckDate: new Date().toDateString() + }); + checklistData.selectedListId = id; + addTargetListId = id; + } else if (modalMode === 'rename') { + if (!name) { + closeListModal(); + return; + } + const list = checklistData.lists.find(l => l.id === modalTargetId); + if (list) { + list.name = name; + } + } else if (modalMode === 'delete') { + const current = checklistData.lists.find(l => l.id === modalTargetId); + if (current) { + checklistData.lists = checklistData.lists.filter(l => l.id !== current.id); + if (checklistData.lists.length === 0) { + const newId = `${FALLBACK_LIST.id}-${Date.now()}`; + const newName = `${FALLBACK_LIST.name}`; + checklistData.lists.push({ + id: newId, + name: newName, + items: [], + lastCheckDate: new Date().toDateString() + }); + checklistData.selectedListId = newId; + addTargetListId = newId; + } else { + if (!checklistData.lists.find(l => l.id === addTargetListId)) { + addTargetListId = checklistData.lists[0].id; + } + checklistData.selectedListId = checklistData.lists[0].id; + } + } + } + saveData(); + renderLists(); + closeListModal(); +} + +function deleteList() { + modalMode = 'delete'; + modalTargetId = getCurrentList().id; + listModalTitle.textContent = 'Delete List'; + listModalMessage.textContent = `Delete "${getCurrentList().name}"? Tasks inside will be removed. If it was the last list, a blank "New List" will be created.`; + listModalMessage.style.display = 'block'; + listModalMessage.classList.add('danger'); + listModalInput.style.display = 'none'; + listModalSave.textContent = 'Delete'; + listModalSave.classList.add('btn-danger'); + listModal.style.display = 'flex'; + listModalInput.blur(); +} + +function onListDragStart(id) { + dragSourceListId = id; +} + +function onListDragOver(event, id) { + event.preventDefault(); + const tab = findTabEl(id); + if (tab) tab.classList.add('drag-over'); +} + +function onListDragLeave(id) { + const tab = findTabEl(id); + if (tab) tab.classList.remove('drag-over'); +} + +function onListDrop(event, targetId) { + event.preventDefault(); + const tab = findTabEl(targetId); + if (tab) tab.classList.remove('drag-over'); + if (!dragSourceListId || dragSourceListId === targetId) return; + const lists = checklistData.lists; + const fromIndex = lists.findIndex(l => l.id === dragSourceListId); + const toIndex = lists.findIndex(l => l.id === targetId); + if (fromIndex === -1 || toIndex === -1) return; + const [moved] = lists.splice(fromIndex, 1); + lists.splice(toIndex, 0, moved); + saveData(); + renderLists(); +} + +function findTabEl(id) { + return listTabs.querySelector(`.list-tab[onclick="changeList('${id}')"]`); +} + +function onListPointerDown(event, id) { + if (event.pointerType === 'touch') { + touchDragSourceId = id; + } +} + +function onListPointerUp(event, targetId) { + if (event.pointerType !== 'touch') return; + if (!touchDragSourceId || touchDragSourceId === targetId) { + touchDragSourceId = null; + return; + } + const lists = checklistData.lists; + const fromIndex = lists.findIndex(l => l.id === touchDragSourceId); + const toIndex = lists.findIndex(l => l.id === targetId); + if (fromIndex === -1 || toIndex === -1) { + touchDragSourceId = null; + return; + } + const [moved] = lists.splice(fromIndex, 1); + lists.splice(toIndex, 0, moved); + touchDragSourceId = null; + saveData(); + renderLists(); +} + +function onListPointerCancel() { + touchDragSourceId = null; +} + +function updateEditRecurrenceOptions() { + const type = editRecurrenceType.value; + editWeeklyOptions.style.display = type === 'weekly' ? 'block' : 'none'; + editMonthlyOptions.style.display = type === 'monthly' ? 'block' : 'none'; +} + +function getRecurrenceText(recurrence, isCompleted) { + if (isCompleted) { + // Show next occurrence date for completed recurring items + const nextDate = getNextOccurrenceDate(recurrence); + return nextDate ? formatDate(nextDate) : ''; + } else { + // Show recurrence pattern for active items + switch (recurrence.type) { + case 'daily': + return 'Repeats daily'; + case 'weekly': + const days = ['Sunday', 'Monday', 'Tuesday', 'Wednesday', 'Thursday', 'Friday', 'Saturday']; + return `Repeats every week on ${days[recurrence.dayOfWeek]}`; + case 'monthly': + return `Repeats monthly on day ${recurrence.dayOfMonth}`; + default: + return ''; + } + } +} + +function escapeHtml(text) { + const div = document.createElement('div'); + div.textContent = text; + return div.innerHTML; +} + +function saveData() { + store.set('checklistData', checklistData); +} + +function openMoveItemModal(itemId) { + moveModalItemId = itemId; + populateMoveSelect(); + moveItemModal.style.display = 'flex'; + requestAnimationFrame(() => { + moveItemSelect.focus({ preventScroll: true }); + }); +} + +function closeMoveItemModal() { + moveModalItemId = null; + moveItemModal.style.display = 'none'; +} + +function populateMoveSelect() { + const options = checklistData.lists.map(list => ` + + `).join(''); + moveItemSelect.innerHTML = options; +} + +function handleMoveItemSave() { + if (!moveModalItemId) { + closeMoveItemModal(); + return; + } + const targetListId = moveItemSelect.value; + const sourceList = checklistData.lists.find(l => l.items.some(i => i.id === moveModalItemId)); + const targetList = checklistData.lists.find(l => l.id === targetListId); + if (!sourceList || !targetList) { + closeMoveItemModal(); + return; + } + if (sourceList.id === targetList.id) { + closeMoveItemModal(); + return; + } + + const fromIndex = sourceList.items.findIndex(i => i.id === moveModalItemId); + const [item] = sourceList.items.splice(fromIndex, 1); + targetList.items.push(item); + moveModalItemId = null; + saveData(); + renderLists(); + closeMoveItemModal(); +} + +function onItemDragStart(id, isDone) { + itemDragId = id; + itemDragDone = isDone; +} + +function onItemDragOver(event, targetId, isDone) { + event.preventDefault(); + if (!itemDragId || itemDragDone !== isDone) return; + const el = findItemElement(targetId); + if (el) { + el.classList.add('drag-over'); + } +} + +function onItemDragLeave(targetId) { + const el = findItemElement(targetId); + if (el) { + el.classList.remove('drag-over'); + } +} + +function onItemDrop(event, targetId, isDone) { + event.preventDefault(); + if (!itemDragId || itemDragDone !== isDone) { + clearDragState(targetId); + return; + } + reorderItems(itemDragId, targetId); + clearDragState(targetId); +} + +function onListContainerDragOver(event, isDone) { + event.preventDefault(); + if (!itemDragId || itemDragDone !== isDone) return; +} + +function onListContainerDrop(event, isDone) { + event.preventDefault(); + if (!itemDragId || itemDragDone !== isDone) { + itemDragId = null; + return; + } + reorderItems(itemDragId, null); + itemDragId = null; + itemDragDone = false; +} + +function reorderItems(sourceId, targetId) { + const list = getCurrentList(); + const items = list.items; + const fromIndex = items.findIndex(i => i.id === sourceId); + if (fromIndex === -1) return; + + let toIndex = targetId ? items.findIndex(i => i.id === targetId) : items.length - 1; + if (toIndex === -1) return; + + if (fromIndex === toIndex) return; + + const [moved] = items.splice(fromIndex, 1); + if (fromIndex < toIndex) { + toIndex -= 1; + } + items.splice(toIndex, 0, moved); + saveData(); + renderLists(); +} + +function clearDragState(targetId) { + const el = targetId ? findItemElement(targetId) : null; + if (el) el.classList.remove('drag-over'); + itemDragId = null; + itemDragDone = false; +} + +function findItemElement(id) { + return document.querySelector(`[data-item-id="${id}"]`); +} + +async function exportChecklists() { + try { + const payload = JSON.stringify(checklistData, null, 2); + const result = await ipcRenderer.invoke('export-checklists', payload); + if (result?.canceled) return; + if (result?.error) { + alert(`Failed to export checklists: ${result.error}`); + return; + } + alert(`Checklists saved to ${result.filePath}`); + } catch (error) { + alert(`Failed to export checklists: ${error.message}`); + } +} + +async function importChecklists() { + try { + const result = await ipcRenderer.invoke('import-checklists'); + if (result?.canceled) return; + if (result?.error) { + alert(`Failed to import checklists: ${result.error}`); + return; + } + + const parsed = parseImportedData(result?.data); + if (!parsed) { + alert('The selected file is not a valid checklist export.'); + return; + } + + checklistData = parsed; + addTargetListId = checklistData.selectedListId; + ensureDefaultLists(); + saveData(); + renderLists(); + alert('Checklists imported successfully.'); + } catch (error) { + alert(`Failed to import checklists: ${error.message}`); + } +} + +function parseImportedData(rawData) { + if (!rawData) return null; + let parsed; + try { + parsed = typeof rawData === 'string' ? JSON.parse(rawData) : rawData; + } catch { + return null; + } + + const lists = Array.isArray(parsed.lists) + ? parsed.lists.map((list, index) => normalizeListData(list, index)).filter(Boolean) + : []; + + if (lists.length === 0) return null; + + const selectedListId = lists.find(l => l.id === parsed.selectedListId)?.id || lists[0].id; + return { lists, selectedListId }; +} + +function normalizeListData(list, index) { + if (!list || typeof list !== 'object') return null; + + const id = typeof list.id === 'string' && list.id.trim() + ? list.id.trim() + : `list-${Date.now()}-${index}`; + const name = typeof list.name === 'string' && list.name.trim() + ? list.name.trim() + : 'Imported List'; + + const items = Array.isArray(list.items) + ? list.items.map(normalizeItemData).filter(Boolean) + : []; + + return { + id, + name, + items, + lastCheckDate: typeof list.lastCheckDate === 'string' + ? list.lastCheckDate + : new Date().toDateString() + }; +} + +function normalizeItemData(item) { + if (!item || typeof item !== 'object') return null; + + const title = typeof item.title === 'string' ? item.title.trim() : ''; + if (!title) return null; + + return { + id: typeof item.id === 'string' && item.id.trim() + ? item.id + : `task-${Date.now()}-${Math.random().toString(16).slice(2, 6)}`, + title, + description: typeof item.description === 'string' ? item.description : '', + completed: !!item.completed, + completedDate: item.completed ? (item.completedDate || new Date().toISOString()) : null, + recurrence: normalizeRecurrenceData(item.recurrence), + createdAt: item.createdAt || new Date().toISOString() + }; +} + +function normalizeRecurrenceData(recurrence) { + if (!recurrence || typeof recurrence !== 'object') return null; + const allowedTypes = ['daily', 'weekly', 'monthly']; + const type = allowedTypes.includes(recurrence.type) ? recurrence.type : 'daily'; + const dayOfWeek = type === 'weekly' ? clampNumber(recurrence.dayOfWeek, 0, 6, 0) : null; + const dayOfMonth = type === 'monthly' ? clampNumber(recurrence.dayOfMonth, 1, 31, 1) : null; + return { type, dayOfWeek, dayOfMonth }; +} + +function clampNumber(value, min, max, fallback) { + const num = Number(value); + if (Number.isInteger(num) && num >= min && num <= max) { + return num; + } + return fallback; +} + +// Make functions available globally for inline event handlers +window.toggleItem = toggleItem; +window.deleteItem = deleteItem; +window.changeList = setSelectedList; +window.onListDragStart = onListDragStart; +window.onListDragOver = onListDragOver; +window.onListDragLeave = onListDragLeave; +window.onListDrop = onListDrop; +window.onListPointerDown = onListPointerDown; +window.onListPointerUp = onListPointerUp; +window.onListPointerCancel = onListPointerCancel; +window.editItem = openEditModal; +window.openMoveItemModal = openMoveItemModal; +window.onItemDragStart = onItemDragStart; +window.onItemDragOver = onItemDragOver; +window.onItemDragLeave = onItemDragLeave; +window.onItemDrop = onItemDrop; + +// Initial render +renderLists(); +hideLoading(); + +function totalOpenItems() { + return checklistData.lists.reduce((sum, list) => { + return sum + list.items.filter(i => !i.completed).length; + }, 0); +} + +// Check for recurring items every minute +setInterval(() => { + const oldTodoCount = totalOpenItems(); + checkRecurringItems(); + const newTodoCount = totalOpenItems(); + if (oldTodoCount !== newTodoCount) { + renderLists(); + } +}, 60000); // Check every minute + +function hideLoading() { + const overlay = document.getElementById('loadingOverlay'); + if (overlay) { + overlay.style.display = 'none'; + } +} + diff --git a/backup-to-drive.sh b/backup-to-drive.sh new file mode 100755 index 0000000..5dabe1d --- /dev/null +++ b/backup-to-drive.sh @@ -0,0 +1,122 @@ +#!/bin/bash +# backup-to-drive.sh — copy the checklist's nightly backups off the NAS into Google Drive. +# +# WHY THIS EXISTS +# The NAS writes data/backups/checklists-.json every night at 03:30 and keeps 30. +# That is a good backup of the data and a poor backup of the building: if the NAS dies, +# every one of those 30 files dies with it. The Google Drive folder was meant to be the +# off-site copy, but it was hand-made — and on 2026-09-16 it was discovered to have +# stopped in July, ten weeks earlier, with nobody noticing. This closes that loop. +# +# Run by a LaunchAgent at 04:15 daily (after the NAS job). Also safe to run by hand. +# +# WHAT IT DOES NOT DO +# It never writes to the NAS and never deletes anything there. The only thing it removes +# is old copies in Drive beyond KEEP, and only ones matching the backup naming pattern. + +set -uo pipefail + +ROOT="$(cd "$(dirname "$0")" && pwd)" +DRIVE_DIR="$HOME/Library/CloudStorage/GoogleDrive-media@waterschurch.org/Shared drives/Waters Creative/Apps/Backups/Checklist Backups" +REMOTE_DIR="/volume2/docker/recurring-checklist/data/backups" +NAS_HOST="10.1.1.5" +NAS_USER="Christian" +LOG="$HOME/Library/Logs/checklist-drive-backup.log" +MAX_PER_RUN=10 # so a first run with a big gap can't hang for ages; it catches up next time + +mkdir -p "$(dirname "$LOG")" +log() { printf '%s %s\n' "$(date '+%Y-%m-%d %H:%M:%S')" "$*" >> "$LOG"; } +say() { log "$*"; echo "$*"; } + +say "── run start ──" + +# The SSH password comes from the login keychain — the same entry build-deploy.sh reads, so +# there is still one copy of the credential to rotate, and it is not in the project at all. +# Store it with: security add-generic-password -U -s checklist-nas -a Christian -w +NAS_PASS="${NAS_PASS:-$(security find-generic-password -s checklist-nas -a Christian -w 2>/dev/null || true)}" +if [ -z "$NAS_PASS" ]; then + say "✗ no NAS password in the keychain (service checklist-nas, account Christian)" + say " store it with: security add-generic-password -U -s checklist-nas -a Christian -w" + exit 1 +fi + +# Google Drive streams files on demand; if the app is signed out or not running the path +# simply is not there. Writing to a path Drive is not watching would look like it worked and +# sync nothing, so refuse rather than pretend. +if [ ! -d "$DRIVE_DIR" ]; then + say "✗ Drive folder not mounted: $DRIVE_DIR" + say " Is Google Drive for Desktop running and signed in as media@waterschurch.org?" + exit 1 +fi + +run_remote() { # $1 = remote command; prints stdout, strips the pty's CRs + local cmd="$1" + expect </dev/null | tr -d '\r' +set timeout 240 +log_user 1 +spawn bash -c "ssh -o StrictHostKeyChecking=no -o ConnectTimeout=20 -o PreferredAuthentications=password -o PubkeyAuthentication=no -o NumberOfPasswordPrompts=1 $NAS_USER@$NAS_HOST \"$cmd\"" +expect { + -nocase "password:" { send "$NAS_PASS\r"; exp_continue } + eof +} +EXP +} + +# 1. What does the NAS have? +REMOTE_LIST="$(run_remote "ls -1 $REMOTE_DIR/checklists-*.json 2>/dev/null | xargs -n1 basename" \ + | grep -E '^checklists-[0-9]{4}-[0-9]{2}-[0-9]{2}\.json$' | sort)" +if [ -z "$REMOTE_LIST" ]; then say "✗ no backups found on the NAS (or SSH failed)"; exit 1; fi +say "NAS has $(echo "$REMOTE_LIST" | wc -l | tr -d ' ') backup(s)" + +# 2. Which are missing from Drive? +MISSING="" +while IFS= read -r f; do + [ -s "$DRIVE_DIR/$f" ] || MISSING="$MISSING$f"$'\n' +done <<< "$REMOTE_LIST" +MISSING="$(printf '%s' "$MISSING" | sed '/^$/d')" + +if [ -z "$MISSING" ]; then + say "✓ Drive already has every NAS backup — nothing to do" +else + COUNT="$(echo "$MISSING" | wc -l | tr -d ' ')" + say "$COUNT missing from Drive; copying up to $MAX_PER_RUN" + n=0 + while IFS= read -r f; do + [ -z "$f" ] && continue + n=$((n+1)); [ $n -gt $MAX_PER_RUN ] && { say "· stopping at $MAX_PER_RUN this run"; break; } + TMP="$(mktemp -t checklist-backup)"; OUT="$(mktemp -t checklist-backup-json)" + run_remote "cat $REMOTE_DIR/$f" > "$TMP" + # expect echoes its own `spawn …` banner and the password prompt onto stdout before the + # file's contents, so the capture is never pure JSON. Slice from the first { to the last } + # and only then validate — a truncated or half-read file that *looks* like a backup is + # worse than an obviously missing one. + if node -e ' + const fs=require("fs"); + const t=fs.readFileSync(process.argv[1],"utf8"); + const a=t.indexOf("{"), b=t.lastIndexOf("}"); + if(a<0||b<=a) process.exit(1); + const j=JSON.parse(t.slice(a,b+1)); // throws => exit non-zero + if(!Array.isArray(j.lists)) process.exit(1); // shape check, not just valid JSON + fs.writeFileSync(process.argv[2], JSON.stringify(j)); + ' "$TMP" "$OUT" 2>/dev/null; then + mv "$OUT" "$DRIVE_DIR/$f"; rm -f "$TMP" + say " ✓ $f ($(du -k "$DRIVE_DIR/$f" | cut -f1) KB)" + else + rm -f "$TMP" "$OUT" + say " ✗ $f — no valid checklist JSON in the response, skipped" + fi + done <<< "$MISSING" +fi + +# 3. Report only. This script DELIBERATELY DELETES NOTHING in Drive. +# +# An earlier version trimmed Drive to the newest 30 to mirror the NAS, and promptly destroyed +# the June snapshots — which existed ONLY in Drive, because the NAS had already rotated them +# out. That is backwards: the whole value of the off-site copy is that it outlives the NAS's +# 30-day window. Each file is ~260 KB, so a decade of them is under a gigabyte. If it ever +# genuinely needs trimming, do it by hand, and never below what the NAS still holds. +cd "$DRIVE_DIR" || exit 1 +TOTAL="$(ls -1 checklists-????-??-??.json 2>/dev/null | wc -l | tr -d ' ')" +OLDEST="$(ls -1 checklists-????-??-??.json 2>/dev/null | sort | head -1)" +NEWEST="$(ls -1 checklists-????-??-??.json 2>/dev/null | sort | tail -1)" +say "✓ done — $TOTAL copies off-site, ${OLDEST:-none} → ${NEWEST:-none}" diff --git a/build-deploy.sh b/build-deploy.sh new file mode 100755 index 0000000..9b5a025 --- /dev/null +++ b/build-deploy.sh @@ -0,0 +1,124 @@ +#!/bin/bash +# Build a deploy tarball from server/ and push it to the production NAS. +# Excludes anything that should NEVER be overwritten on the server: +# - data/ (user accounts, check states, list content) +# - .env (admin password, Gmail credentials) +# - node_modules (rebuilt by Docker) +# +# Usage: ./build-deploy.sh +# +# Requires: +# - /tmp/sshstdin.exp (created on demand) +# - /tmp/deploy.sh (created on demand) +# - Christian's SSH password, from the login keychain (see below) + +set -e + +ROOT="$(cd "$(dirname "$0")" && pwd)" +TARBALL="$ROOT/checklist-deploy.tgz" +NAS_HOST="10.1.1.5" +NAS_USER="Christian" +NAS_PATH="/volume2/docker/recurring-checklist" + +# The NAS password is NOT stored in this file — it would end up in the repo history, +# where rotating it means rewriting history rather than changing one keychain entry. +# It is read from the login keychain, or from NAS_PASS in the environment for a machine +# that has no keychain (CI, a Linux box). +# +# To store it, or after a password change: +# security add-generic-password -U -s checklist-nas -a Christian -w +# (omit the value and security prompts for it, so it never reaches your shell history) +NAS_PASS="${NAS_PASS:-$(security find-generic-password -s checklist-nas -a Christian -w 2>/dev/null || true)}" +if [ -z "$NAS_PASS" ]; then + echo "No NAS password available." >&2 + echo "Store it once with: security add-generic-password -U -s checklist-nas -a Christian -w" >&2 + echo "or export NAS_PASS before running this script." >&2 + exit 1 +fi + +echo "==> Building tarball (excluding data/, .env, node_modules)" +tar \ + --exclude='./node_modules' \ + --exclude='./data' \ + --exclude='./data-smoke' \ + --exclude='./.DS_Store' \ + --exclude='./.env' \ + -czf "$TARBALL" -C "$ROOT/server" . + +echo "==> Sanity check: tarball must not contain data/ or .env" +if tar -tzf "$TARBALL" | grep -E '^\./?(data|\.env)(/|$)' >/dev/null; then + echo "REFUSING to deploy — tarball contains data/ or .env" + tar -tzf "$TARBALL" | grep -E '^\./?(data|\.env)(/|$)' + exit 1 +fi +echo " OK ($(ls -lh "$TARBALL" | awk '{print $5}'))" + +# Re-create helper scripts if missing +if [ ! -f /tmp/sshstdin.exp ]; then +cat > /tmp/sshstdin.exp <<'EXP' +#!/usr/bin/expect -f +set timeout 300 +log_user 1 +set host [lindex $argv 0] +set user [lindex $argv 1] +set pass [lindex $argv 2] +set cmd [lindex $argv 3] +set localfile [lindex $argv 4] +spawn bash -c "ssh -o StrictHostKeyChecking=no -o ConnectTimeout=20 -o PreferredAuthentications=password -o PubkeyAuthentication=no -o GSSAPIAuthentication=no -o NumberOfPasswordPrompts=1 $user@$host \"$cmd\" < $localfile" +expect { + -nocase "password:" { send "$pass\r"; exp_continue } + eof +} +catch wait result +exit [lindex $result 3] +EXP +fi + +cat > /tmp/deploy.sh <<'DEPLOY' +#!/bin/sh +set -e +cd /volume2/docker/recurring-checklist + +echo "--- DEPLOY-SIDE SANITY CHECK ---" +if tar -tzf checklist-deploy.tgz | grep -E '^\./?(data|\.env)(/|$)' >/dev/null; then + echo "ABORT: incoming tarball contains data/ or .env — refusing to extract" + exit 1 +fi + +echo "--- EXTRACT (data/ and .env are protected because tarball doesn't include them) ---" +tar -xzf checklist-deploy.tgz +rm -f checklist-deploy.tgz +rm -rf PaxHeader +find . -name "._*" -delete + +echo "--- VERIFY DATA UNTOUCHED ---" +ls -la data/checklists.json 2>/dev/null && echo "data/checklists.json preserved" || echo "(no checklists.json yet)" +ls -la .env 2>/dev/null && echo ".env preserved" || echo "(no .env)" + +echo "--- DEPLOY: recreate in place (NO prior 'down') ---" +# Deliberately NO 'docker-compose down' first. 'down' removes the container AND the network, so a +# deploy interrupted between 'down' and 'up' leaves the whole stack torn down (caused an outage once). +# 'up -d --build --remove-orphans' rebuilds the image and recreates ONLY the app container when its +# image changed, in place — the network and the data volume persist. If interrupted, the worst case is +# the old container still running, never a fully removed stack. --remove-orphans clears stale containers. +echo "$REMOTE_PASS" | sudo -S /usr/local/bin/docker-compose -f /volume2/docker/recurring-checklist/docker-compose.yml up -d --build --remove-orphans 2>&1 | tail -14 + +echo "--- STATUS ---" +echo "$REMOTE_PASS" | sudo -S /usr/local/bin/docker ps --filter name=recurring --format "{{.Names}} {{.Status}}" + +echo "--- HEALTHCHECK ---" +sleep 4 +curl -sS -o /dev/null -w "GET /api/me => HTTP %{http_code}\n" http://127.0.0.1:3000/api/me +DEPLOY + +echo "==> Uploading to $NAS_USER@$NAS_HOST:$NAS_PATH" +expect /tmp/sshstdin.exp "$NAS_HOST" "$NAS_USER" "$NAS_PASS" \ + "cat > $NAS_PATH/checklist-deploy.tgz && echo UPLOAD_OK" \ + "$TARBALL" 2>&1 | tail -3 + +echo "==> Running deploy script on NAS" +expect /tmp/sshstdin.exp "$NAS_HOST" "$NAS_USER" "$NAS_PASS" \ + "REMOTE_PASS='$NAS_PASS' bash -s" \ + /tmp/deploy.sh 2>&1 | tail -15 + +echo "==> Done" diff --git a/deployment-guide.html b/deployment-guide.html new file mode 100644 index 0000000..2be8de0 --- /dev/null +++ b/deployment-guide.html @@ -0,0 +1,448 @@ + + + + +Recurring Checklist — Deployment & Maintenance Guide + + + + +Internal documentation +

Recurring Checklist

Deployment & maintenance guide — self-hosted web app on Synology DSM.

+ +

+ Contents +

Overview
Environment summary
Initial deployment
Pushing app updates
Backups
DDNS, reverse proxy & HTTPS
Troubleshooting
Reference

+ +

1. Overview

+ The Recurring Checklist is a small Node.js web application that lives in a Docker container on the + Synology NAS. Multi-location operators (Woonsocket, North Attleboro, etc.) open it in a web browser, + identify themselves once per device, and tick items off through the week. Every Sunday at 3:00 PM the + server emails a digest of who completed what (and what was missed) to a single recipient, then resets + all checkboxes for the following week. +

+ +

Architecture

Users (LAN or internet)
+    │
+    ▼
+https://check.watersmedia.org   (Boba-Fett DSM, port 443)
+    │
+    │ reverse proxy
+    ▼
+http://10.1.1.1:3000                      (Chronicles-NA DSM, Docker container)
+    │
+    ▼
+node:20-alpine + Express + node-cron + nodemailer
+    │
+    ├── data volume → /volume1/docker/recurring-checklist/data/checklists.json
+    │                  (backed up nightly to Google Drive via Hyper Backup)
+    │
+    └── Sunday 3:00 PM cron → Gmail SMTP → media@waterschurch.org

+ +

2. Environment summary

+ + + + + + + + + + + + + +

Item	Value
App URL (external)	`https://check.watersmedia.org`
App URL (LAN, direct)	`http://10.1.1.1:3000`
Public TLS host	Boba-Fett (10.1.1.4), DSM reverse proxy + Let's Encrypt cert
Container host	Chronicles-NA (10.1.1.1), Container Manager project `recurring-checklist`
Project folder on NAS	`/volume1/docker/recurring-checklist/`
Persisted data file	`/volume1/docker/recurring-checklist/data/checklists.json`
Backups	Hyper Backup → Google Drive (`recurring-checklist_server-backup/Chronicles-NA_1`), daily 23:30
Email digest schedule	Sunday 15:00 America/New_York
Email recipient	`media@waterschurch.org`
SMTP relay	`smtp.gmail.com:587` (Google Workspace app password)
Admin password	Set in `.env` as `ADMIN_PASSWORD`

+ +

3. Initial deployment

The container was created using the following procedure. Use this section as the disaster-recovery / +rebuild reference.

+ +

3.1 Prerequisites

Synology DSM 7.2 or newer on the host NAS (Chronicles-NA)
Container Manager package installed
SSH or File Station access to /volume1/docker/
Google Workspace account with an App Password (for the digest sender)
The deployment tarball: checklist-deploy.tgz (produced from the project's server/ directory)

+ +

3.2 Upload the bundle

Open File Station on the NAS.
Inside /volume1/docker/, create a folder named recurring-checklist.
Upload checklist-deploy.tgz into it.
Right-click → Extract → Extract here. Repeat once on the resulting .tar (Synology's + File Station unwraps in two passes).

Delete the .tgz, .tar, and the PaxHeader folder that gets produced. The + folder should be left with: +

server.js          public/         Dockerfile
+package.json       data/           docker-compose.yml
+package-lock.json  README.md       .env  .env.example  .dockerignore  .gitignore

+ +

3.3 Configure environment

The deployment ships with a working .env file. Verify the following keys are populated:

+ + + + + + + + + + + + +

Variable	Purpose
`ADMIN_PASSWORD`	Required for any list-management operation in the UI.
`REPORT_EMAIL`	Where the Sunday digest is delivered.
`REPORT_CRON`	cron schedule for the digest. Default `0 15 * * 0` (Sun 3:00 PM).
`REPORT_TZ`	IANA timezone for the cron (default `America/New_York`).
`RESET_AFTER_DIGEST`	`true` = clear all checks once the digest is sent. `false` to disable.
`SMTP_HOST`	`smtp.gmail.com`
`SMTP_PORT`	`587`
`SMTP_USER`	Gmail / Google Workspace address that sends the digest.
`SMTP_PASS`	16-character app password from `myaccount.google.com/apppasswords`.
`SMTP_FROM`	Friendly `From:` header, e.g. `Recurring Checklist <media@waterschurch.org>`

+ Security note + The .env file contains credentials. Do not place it in a publicly-shared folder. Hyper + Backup is encrypted in transit; client-side encryption is not enabled because it complicates restore. +

+ +

3.4 Create the Container Manager project

Open Container Manager → Project → Create.
Project name: recurring-checklist
Path: browse to /volume1/docker/recurring-checklist → Select.
Source: "Use existing docker-compose.yml" (auto-selected). Click OK.
On the Web portal settings screen, leave the checkbox unchecked. Click Next.
Confirm the summary and click Done.

Container Manager will build the image (~60–90 seconds on first run) and start the container. The +project should report Exit Code: 0 at the end of the build log and the project status indicator +should turn green.

+ +

3.5 Verify

From a browser on the LAN, open http://10.1.1.1:3000. The "Who are you?" prompt should appear.
Click Admin (top right) and authenticate with the value of ADMIN_PASSWORD.
Use Send Digest Now in the admin drawer to verify SMTP connectivity. A test email should arrive within a few seconds.

+ +

4. Pushing app updates

Updates are delivered as a refreshed deployment tarball. Application data is mounted from the host's +data/ directory, so rebuilding the image preserves all checklists, locations, and check states.

+ +

4.1 Receive the update

The developer produces a fresh checklist-deploy.tgz from the latest project tree. It will +arrive as a single file (currently ~35 KB).

+ +

4.2 Apply on the NAS

Open File Station → navigate to /volume1/docker/recurring-checklist/.
Upload the new checklist-deploy.tgz into this folder.
Right-click → Extract → Extract here. Choose Overwrite when prompted (this replaces + server.js, the public/ folder, etc.; it does not touch data/).
Repeat the extract on the resulting .tar.
Delete the .tgz, .tar, and PaxHeader when done.

+ +

4.3 Rebuild the container

Open Container Manager → Project → click the recurring-checklist row.
Click Action → Build (rebuilds the image from the updated source).
Wait for the build log to finish with Exit Code: 0.
Click Action → Stop, then Action → Start if the build did not auto-restart.

+ +

+ What gets preserved across updates + Everything in ./data/ is volume-mounted. Lists, items, per-location check states, and + lastCheckDate values are persisted. Configuration in .env is also untouched by an update unless + the new tarball explicitly ships a replacement. +

+ +

4.4 Rollback

If an update misbehaves:

Recover the previous checklist-deploy.tgz (kept by the developer) or restore from Hyper Backup.
Replace the files in /volume1/docker/recurring-checklist/ as in §4.2.
Rebuild the project as in §4.3.

+ +

5. Backups

+ +

5.1 What's backed up

A Hyper Backup task named Recurring Checklist backs up the entire docker +shared folder nightly at 23:30 to Google Drive. Destination:

Google Drive: recurring-checklist_server-backup / Chronicles-NA_1

This captures both the application source (in recurring-checklist/) and its data folder.

+ +

5.2 Restoring

To restore the data file only:

Open Hyper Backup → Recurring Checklist task → Restore → Data.
Pick a version. Browse into + recurring-checklist/data/ and restore checklists.json.
Container Manager → Project → Stop, then Start the recurring-checklist project to pick up the restored file.

+ +

5.3 Backup verification

An integrity check runs weekly on Saturday at 01:30. Failed integrity checks generate a DSM notification.

+ +

6. DDNS, reverse proxy & HTTPS

+ +

6.1 DDNS record

Hostname: check.watersmedia.org
Provider: Synology (free)
Account: Registered to the Synology account on Chronicles-NA.

+ +

6.2 Reverse proxy rule (on Boba-Fett, 10.1.1.4)

Located at Control Panel → Login Portal → Advanced → Reverse Proxy → "Recurring Checklist".

+ + + + +

Side	Protocol	Hostname	Port
Source	HTTPS	`check.watersmedia.org`	443
Destination	HTTP	`10.1.1.1`	3000

+ +

6.3 TLS certificate

Type: Let's Encrypt
Bound to: the check.watersmedia.org service in Control Panel → Security → Certificate → Settings
Auto-renewal: handled by DSM. The cert renews ~30 days before expiry as long as + ports 80/443 inbound continue to reach Boba-Fett.

+ +

6.4 Router (UniFi)

Existing port-forward of TCP 443 to Boba-Fett (10.1.1.4) is the only inbound rule required. No +new forwarding is needed for the Recurring Checklist app.

+ +

7. Troubleshooting

+ + + + + + + + + + + + + + + + + + + + + + + + + + + +

Symptom	Likely cause & fix
App returns 502 / Bad Gateway from `check.watersmedia.org`	The Docker container on Chronicles-NA is stopped. Open Container Manager → Project → click + `recurring-checklist` → Action → Start. If it fails to start, open + the build log for errors (commonly a malformed `.env`).
Browser shows "Not Secure" on the public URL	Certificate either expired or not bound. Check Control Panel → Security → Certificate on Boba-Fett. + The `check.watersmedia.org` cert should be green and bound under + Settings.
Sunday email did not arrive	Open Container Manager → Container → `recurring-checklist` → Details → Log. + Look for lines beginning with `[digest]`. Common causes: expired Google App Password, + Google Workspace 2FA disabled on the sending account, outbound TCP 587 blocked by firewall.
"This list is reserved for X" error	Expected. The list is location-scoped; a user signed in as a different location cannot tick it + off. Either change the user's location to match the list or remove the list's location to make it + shared.
Checks reappear after a user signs out and back in	Per-location checks are stored on the server keyed by the user's typed name (case-insensitive, + whitespace-collapsed). If a user enters a different name, they are treated as a different + location and see different state.
Container won't build	Usually a stale or partial extraction. Re-upload `checklist-deploy.tgz` and extract + both `.tgz` and the intermediate `.tar` step. Confirm `server.js` and the `public/` folder + are present at the project root.

+ +

8. Reference

+ +

8.1 Files in `/volume1/docker/recurring-checklist/`

+ + + + + + + + + + +

Path	Purpose
`server.js`	Express app + scheduler + email logic.
`public/`	Static front-end (HTML, CSS, JS).
`Dockerfile`	Image definition (node:20-alpine).
`docker-compose.yml`	Container Manager project definition.
`package.json` / `package-lock.json`	npm manifest, locked dependency versions.
`.env`	Runtime config (passwords, SMTP, schedule). Not in version control.
`.env.example`	Template for a fresh deploy.
`data/checklists.json`	Persistent state. Volume-mounted; backed up nightly.

+ +

8.2 Useful container actions

+ + + + + + +

Action	Where
View live logs	Container Manager → Container → `recurring-checklist` → Details → Log
Restart container	Container Manager → Project → recurring-checklist → Action → Stop, then Start
Rebuild image after update	Container Manager → Project → recurring-checklist → Action → Build
Edit env vars	Edit `/volume1/docker/recurring-checklist/.env` via File Station, then restart the project

+ +

8.3 Server endpoints (for diagnostics)

+ + + + + + + +

Method	Path	Purpose
GET	`/api/state`	Returns current lists, items, and per-location check map (read-only).
POST	`/api/admin/verify`	Validates the admin password (used by the UI).
POST	`/api/admin/state`	Replaces full state. Requires `X-Admin-Password`.
POST	`/api/admin/send-digest`	Manually triggers the email digest. Requires admin.
POST	`/api/check`	Toggle a single item's checked state for a location.

+ +

+ Document version 1 · Generated for the Recurring Checklist deployment on Chronicles-NA / Boba-Fett. + Maintained alongside the project source. +

+ + + diff --git a/deployment-guide.pdf b/deployment-guide.pdf new file mode 100644 index 0000000..2eb2509 Binary files /dev/null and b/deployment-guide.pdf differ diff --git a/index.html b/index.html new file mode 100644 index 0000000..11dbc4b --- /dev/null +++ b/index.html @@ -0,0 +1,183 @@ + + + + + + Recurring Checklist + + + +

Loading checklist...

+ + + + +

Recurring Checklist

+ + +

+ +

To Do

+ +

Done

+ +

Add New Task

+ Add to list: + +

+ +

+ + + Recurring Task + +

+ Repeat: + + + +

+ +

+ + + + + diff --git a/main.js b/main.js new file mode 100644 index 0000000..f28d517 --- /dev/null +++ b/main.js @@ -0,0 +1,125 @@ +const { app, BrowserWindow, Menu, dialog, ipcMain } = require('electron'); +const path = require('path'); +const fs = require('fs/promises'); +const APP_VERSION = require('./package.json').version; + +let mainWindow; + +function createWindow() { + mainWindow = new BrowserWindow({ + width: 1200, + height: 800, + show: false, // avoid white flash; show when ready + backgroundColor: '#121212', + webPreferences: { + nodeIntegration: true, + contextIsolation: false + }, + icon: path.join(__dirname, 'build', 'icon.ico') + }); + + // Use absolute path so packaged app can load index.html reliably + mainWindow.loadFile(path.join(__dirname, 'index.html')); + + buildMenu(); + + mainWindow.once('ready-to-show', () => { + mainWindow.show(); + }); + + // Open DevTools in development (comment out for production) + // mainWindow.webContents.openDevTools(); +} + +ipcMain.handle('export-checklists', async (event, data) => { + try { + const parentWindow = BrowserWindow.fromWebContents(event.sender); + const { canceled, filePath } = await dialog.showSaveDialog(parentWindow, { + title: 'Save checklists', + defaultPath: path.join(app.getPath('documents'), 'recurring-checklists.json'), + filters: [{ name: 'JSON Files', extensions: ['json'] }] + }); + + if (canceled || !filePath) { + return { canceled: true }; + } + + await fs.writeFile(filePath, data, 'utf-8'); + return { filePath }; + } catch (error) { + return { error: error.message }; + } +}); + +ipcMain.handle('import-checklists', async (event) => { + try { + const parentWindow = BrowserWindow.fromWebContents(event.sender); + const { canceled, filePaths } = await dialog.showOpenDialog(parentWindow, { + title: 'Open checklist file', + defaultPath: app.getPath('documents'), + filters: [{ name: 'JSON Files', extensions: ['json'] }], + properties: ['openFile'] + }); + + if (canceled || !filePaths || filePaths.length === 0) { + return { canceled: true }; + } + + const filePath = filePaths[0]; + const data = await fs.readFile(filePath, 'utf-8'); + return { filePath, data }; + } catch (error) { + return { error: error.message }; + } +}); + +function buildMenu() { + const template = [ + { + label: 'Help', + submenu: [ + { + label: 'About', + click: () => { + dialog.showMessageBox({ + type: 'info', + title: 'About', + message: `Recurring Checklist — Build ${APP_VERSION}`, + detail: [ + `Version ${APP_VERSION}`, + '', + 'Copyright & Non-Distribution Disclaimer', + '', + '© Christian Bridges. All rights reserved.', + '', + 'This material is protected by copyright law. No part of this work may be copied, reproduced, distributed, shared, published, uploaded, or transmitted in any form or by any means—electronic, mechanical, or otherwise—without the prior written permission of Christian Bridges.', + '', + 'Unauthorized use, duplication, or distribution of this material is strictly prohibited.' + ].join('\n') + }); + } + } + ] + } + ]; + + const menu = Menu.buildFromTemplate(template); + Menu.setApplicationMenu(menu); +} + +app.whenReady().then(() => { + createWindow(); + + app.on('activate', () => { + if (BrowserWindow.getAllWindows().length === 0) { + createWindow(); + } + }); +}); + +app.on('window-all-closed', () => { + if (process.platform !== 'darwin') { + app.quit(); + } +}); + diff --git a/mobile/.gitignore b/mobile/.gitignore new file mode 100644 index 0000000..8e57eba --- /dev/null +++ b/mobile/.gitignore @@ -0,0 +1,47 @@ +# ── Secrets: never commit, never tarball ──────────────────────────────────────────── +# The upload key is the app's permanent identity on Play. Back both up off this Mac +# (password manager / encrypted external drive) — not into a repo. +keystore.properties +ios-signing.config +play-service-account.json +keystore/ +*.jks +*.keystore +*.p12 +*.mobileprovision +ExportOptions.plist + +# ── Generated: rebuilt by `npm run sync:web` on every release ─────────────────────── +# www/ is a disposable copy of ../server/public. Editing it is always a mistake — the +# next sync wipes it. Change the web app instead. +www/ +node_modules/ + +# ── Build output ──────────────────────────────────────────────────────────────────── +build/ +dist/ +*.ipa +*.aab +*.apk +*.dSYM.zip +*.xcarchive + +# ── Machine-specific ──────────────────────────────────────────────────────────────── +android/local.properties +android/.gradle/ +android/build/ +android/app/build/ +android/capacitor-cordova-android-plugins/build/ +.gradle/ + +# ── Xcode / SPM ───────────────────────────────────────────────────────────────────── +ios/App/build/ +ios/App/Pods/ +ios/App/App/public/ +ios/App/DerivedData/ +ios/.spm-cache/ +**/xcuserdata/ +**/*.xcworkspace/xcshareddata/IDEWorkspaceChecks.plist +.swiftpm/ + +.DS_Store diff --git a/mobile/README.md b/mobile/README.md new file mode 100644 index 0000000..1af9c38 --- /dev/null +++ b/mobile/README.md @@ -0,0 +1,218 @@ +# Waters Checklist — native iOS & Android apps + +The checklist app now ships to **three** targets, all built from the same front-end files in +`../server/public/`: + +| Target | Where | Updates when | +|---|---|---| +| Website | `check.watersmedia.org` | you deploy — immediately | +| iOS app | App Store (unlisted) | a new build is uploaded **and released** | +| Android app | Play Store (unlisted track) | a new AAB is uploaded **and released** | + +> **The one thing that matters:** the store apps bundle a *copy* of the front-end inside the +> app binary. They have no mechanism to notice a web deploy — not on relaunch, not on +> sign-out, not ever. Deploy the website alone and phones keep the UI they were last built +> with, silently, while the website moves on. So after any front-end change, run: +> +> ```bash +> ./release.sh +> ``` +> +> from the project root (not from `mobile/`). That's the whole workflow. + +--- + +## Everyday release + +```bash +cd /Users/Studio/Documents/recurring-checklist-app +./release.sh # all three targets, bumps both build numbers +./release.sh --version 1.1.0 # …and set the version users see +./release.sh --web # website only — for a server/cron/email change +``` + +Once both API keys are configured (below), that one command deploys the website, uploads the +iOS build to App Store Connect and releases the Android build to the internal track — no +consoles, no dragging files. Builds also land in `dist-release/` either way. + +**What "fully automated" can and cannot mean.** The website is live the second it deploys. +The stores are not, and no automation changes that: Play takes a few minutes to process an +internal-track release, and Apple takes ~15 minutes to process a build before TestFlight +testers can install it. Anything beyond TestFlight — a public App Store release — waits on +human review. The upload is automated; the stores' clocks are not. + +--- + +## Architecture, in one screen + +The apps are **not** a browser pointed at the website — Apple rejects that under Guideline +4.2. They bundle the front-end and treat the server as a JSON API. + +That creates exactly one problem: on the web, front-end and API share an origin, so +`/api/state` and `/equip-images/x.jpg` just work. Inside an app the page is served from +`capacitor://localhost` (iOS) or `https://localhost` (Android), where those paths resolve +against the app bundle and 404. Two files solve it: + +- **`../server/public/native-bridge.js`** — shared by *all three* targets, loaded before + `app.js`. In a browser it is a deliberate no-op. In an app it patches `window.fetch` to + re-point server-absolute paths, exposes `resolveUrl()` for the few ``/`` sites, + routes `navigator.vibrate` → native haptics, and opens external links in the system + browser instead of blanking the WebView. +- **`src/native-shell.js`** — native only, esbuild-bundled and injected into app bundles + only. Publishes `window.CapPlugins` synchronously, then handles splash handover, status + bar, Android's hardware Back button, foreground resume, and online/offline. + +`server.js` carries a matching **`NATIVE_CORS_ORIGINS`** allowlist (an allowlist, not `*`; +auth is a Bearer token with no cookies, so `Allow-Credentials` is deliberately omitted). + +`www/` is generated. It is wiped and rebuilt from `../server/public` on every sync — editing +it is always a mistake. + +--- + +## Toolchain (already installed, no Homebrew on this Mac) + +| | | +|---|---| +| JDK 21 | `~/.jdks/temurin-21` | +| Android SDK | `~/Library/Android/sdk` (API 36 + 35, build-tools, platform-tools) | +| iOS deps | **Swift Package Manager, not CocoaPods** — system Ruby is 2.6, too old for CocoaPods | + +None of it is on the default `PATH`, so **every Android command must source the env first**: + +```bash +. mobile/scripts/env.sh +``` + +Skip that and Gradle fails with the misleading *"Unable to locate a Java Runtime."* +`release.sh` does it for you. + +To rebuild the toolchain on a new Mac, `scripts/env.sh` carries the exact reinstall commands +in its error messages. + +--- + +## iOS one-time setup + +**Signing is DONE** (2026-09-14). Team **LIVING WATERS CHURCH**, Team ID `M87US675B3`, in +`mobile/ios-signing.config`. `release.sh --ios` produces a signed App Store `.ipa` +unattended — `-allowProvisioningUpdates` created the distribution certificate, the +provisioning profile and the App ID registration on its own. + +If you ever set this up again (new Mac, new team): sign into Xcode ▸ Settings ▸ Accounts, +then put the Team ID in `ios-signing.config` and run `./release.sh --ios`. Xcode does the +rest. Finding the Team ID is the fiddly part — Xcode 26 shows your teams but never prints +their IDs, and caches nothing readable. Decode any profile you already have instead: + +```bash +security cms -D -i ~/Library/Developer/Xcode/UserData/Provisioning\ Profiles/*.mobileprovision \ + | grep -A1 -E "TeamIdentifier|TeamName" +``` + +Still to do in the portals: + +1. **App Store Connect** → Apps → **+** → New App, bundle ID `org.waterschurch.checklist`. + Needed before a build can be uploaded. +2. For unlisted distribution, request it at + [Apple's unlisted app request form](https://developer.apple.com/contact/request/unlisted-app-distribution/). + Apple approves it manually — allow a few days. Until then use **TestFlight**, which works + immediately and is fine for volunteers. + +### Automated uploads (App Store Connect API key) + +With a key configured, `release.sh` validates the build against Apple's acceptance checks and +uploads it — no Organizer, no Transporter. Without one it just hands you the `.ipa`. + +Creating the key needs your Apple ID and 2FA, so it's yours to do: + +1. [appstoreconnect.apple.com](https://appstoreconnect.apple.com) → **Users and Access** → + **Integrations** → **App Store Connect API** → **Team Keys**. +2. **+** → name it (e.g. `Checklist release`) → Access: **App Manager** → Generate. + *(App Manager is the minimum that can upload builds. Developer is not enough.)* +3. **Download the .p8 — you get exactly one chance.** Apple never shows it again; a lost key + can only be revoked and replaced. +4. Move it where `altool` looks, keeping Apple's filename exactly: + ```bash + mv ~/Downloads/AuthKey_*.p8 ~/.appstoreconnect/private_keys/ + ``` +5. Copy two values off that page into `ios-signing.config`: + - **KEY ID** — 10 chars, in the key's own row + - **Issuer ID** — a UUID shown *above the table*, shared by every key on the team + (a classic mix-up: the Issuer ID is not the key's ID) + ``` + ASC_KEY_ID=XXXXXXXXXX + ASC_ISSUER_ID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx + ``` +6. Confirm it works — authenticates only, uploads nothing: + ```bash + ./mobile/scripts/verify-asc-key.sh + ``` + +The `.p8` is a credential that can ship builds as your team. It lives outside the repo in +`~/.appstoreconnect/private_keys/` (chmod 600), and `ios-signing.config` is gitignored. Back +the `.p8` up next to the Android keystore — losing it is recoverable (revoke and regenerate), +but it costs you the round trip. + +## Android one-time setup + +Already done — the upload key exists and `release.sh` produces a signed AAB. + +⚠️ **Back up `mobile/keystore/upload-keystore.jks` and `mobile/keystore.properties` off this +Mac** (password manager / encrypted drive). Play identifies every update by that key. Both +files are gitignored and excluded from the deploy tarball. + +Remaining: **Play Console** → Create app → bundle ID `org.waterschurch.checklist` → set up +an internal testing track → upload the AAB → add testers by email. + +### Android uploads (Play Developer API) + +With a service-account key present, `release.sh` uploads the `.aab` and releases it to the +internal track by itself. Without one it just leaves the file in `dist-release/`. + +**Play requires the very first bundle of a new app to go through the Console UI by hand.** +The API can only take over from the second release onward — so do one manual upload first, +then this works forever after. + +1. **Play Console** → *Users and permissions* → note you'll come back here in step 5. +2. [console.cloud.google.com](https://console.cloud.google.com) → create (or pick) a project → + **APIs & Services** → enable **Google Play Android Developer API**. +3. **IAM & Admin → Service Accounts → Create**. Name it `play-release`. No Cloud roles are + needed — permission comes from Play, not from Cloud IAM. +4. On that service account → **Keys → Add key → Create new key → JSON**. Save it as: + ``` + mobile/play-service-account.json + ``` +5. Back in **Play Console → Users and permissions → Invite user**, paste the service + account's `client_email` (ends `.iam.gserviceaccount.com`). Grant it, for this app: + *Release to testing tracks* and *View app information*. Nothing more. +6. Confirm it works — opens an edit and abandons it, changing nothing: + ```bash + cd mobile && node scripts/upload-play.js --dry-run + ``` + +Pick a different track with `PLAY_TRACK=alpha ./release.sh`. Default is `internal`. + +The JSON key can ship releases as you — it's gitignored, and belongs in your password manager +alongside the upload keystore. + +--- + +## Useful commands + +```bash +. mobile/scripts/env.sh # required before any Android command + +cd mobile +npm run sync:web # rebuild www/ from ../server/public +npm run sync # …and push it into both native projects +npm run open:ios # open in Xcode +npm run open:android # open in Android Studio (if installed) +npm run assets # regenerate icons/splash from assets/*.png + +cd mobile/android && ./gradlew :app:assembleDebug # debug APK, for a device or emulator +``` + +**If you regenerate assets**, re-apply the fix in +`android/app/src/main/res/mipmap-anydpi-v26/ic_launcher*.xml` — `@capacitor/assets` insets +both adaptive-icon layers by 16.7%, which stops the gradient background reaching the +launcher's mask. The files carry a comment explaining it. diff --git a/mobile/android/.gitignore b/mobile/android/.gitignore new file mode 100644 index 0000000..48354a3 --- /dev/null +++ b/mobile/android/.gitignore @@ -0,0 +1,101 @@ +# Using Android gitignore template: https://github.com/github/gitignore/blob/HEAD/Android.gitignore + +# Built application files +*.apk +*.aar +*.ap_ +*.aab + +# Files for the ART/Dalvik VM +*.dex + +# Java class files +*.class + +# Generated files +bin/ +gen/ +out/ +# Uncomment the following line in case you need and you don't have the release build type files in your app +# release/ + +# Gradle files +.gradle/ +build/ + +# Local configuration file (sdk path, etc) +local.properties + +# Proguard folder generated by Eclipse +proguard/ + +# Log Files +*.log + +# Android Studio Navigation editor temp files +.navigation/ + +# Android Studio captures folder +captures/ + +# IntelliJ +*.iml +.idea/workspace.xml +.idea/tasks.xml +.idea/gradle.xml +.idea/assetWizardSettings.xml +.idea/dictionaries +.idea/libraries +# Android Studio 3 in .gitignore file. +.idea/caches +.idea/modules.xml +# Comment next line if keeping position of elements in Navigation Editor is relevant for you +.idea/navEditor.xml + +# Keystore files +# Uncomment the following lines if you do not want to check your keystore files in. +#*.jks +#*.keystore + +# External native build folder generated in Android Studio 2.2 and later +.externalNativeBuild +.cxx/ + +# Google Services (e.g. APIs or Firebase) +# google-services.json + +# Freeline +freeline.py +freeline/ +freeline_project_description.json + +# fastlane +fastlane/report.xml +fastlane/Preview.html +fastlane/screenshots +fastlane/test_output +fastlane/readme.md + +# Version control +vcs.xml + +# lint +lint/intermediates/ +lint/generated/ +lint/outputs/ +lint/tmp/ +# lint/reports/ + +# Android Profiling +*.hprof + +# Cordova plugins for Capacitor +capacitor-cordova-android-plugins + +# Copied web assets +app/src/main/assets/public + +# Generated Config files +app/src/main/assets/capacitor.config.json +app/src/main/assets/capacitor.plugins.json +app/src/main/res/xml/config.xml diff --git a/mobile/android/app/.gitignore b/mobile/android/app/.gitignore new file mode 100644 index 0000000..043df80 --- /dev/null +++ b/mobile/android/app/.gitignore @@ -0,0 +1,2 @@ +/build/* +!/build/.npmkeep diff --git a/mobile/android/app/build.gradle b/mobile/android/app/build.gradle new file mode 100644 index 0000000..e0f82d7 --- /dev/null +++ b/mobile/android/app/build.gradle @@ -0,0 +1,91 @@ +apply plugin: 'com.android.application' + +// Version numbers live in mobile/release.config.json, shared with the iOS build, so a +// release bumps ONE file instead of drifting between the two stores. Play permanently +// reserves every versionCode it has ever seen — a duplicate is rejected and the number can +// never be reused, even after deleting the release — so this must always come from the +// file that release.sh increments. +def releaseConfig = new groovy.json.JsonSlurper().parseText(file('../../release.config.json').getText('UTF-8')) + +// Signing credentials are read from mobile/keystore.properties, which is gitignored and +// never checked in. Absent (a fresh clone, a CI box), release builds simply come out +// unsigned rather than failing the whole Gradle configuration phase. +// NOTE the '../': rootProject here is mobile/android, not mobile. Pointing at +// 'keystore.properties' silently finds nothing, and an unsigned AAB builds happily and is +// only rejected once you upload it to Play — so this path is load-bearing. +def keystorePropsFile = rootProject.file('../keystore.properties') +def keystoreProps = new Properties() +if (keystorePropsFile.exists()) { + keystorePropsFile.withInputStream { keystoreProps.load(it) } +} + +android { + namespace = "org.waterschurch.checklist" + compileSdk = rootProject.ext.compileSdkVersion + defaultConfig { + applicationId "org.waterschurch.checklist" + minSdkVersion rootProject.ext.minSdkVersion + targetSdkVersion rootProject.ext.targetSdkVersion + versionCode releaseConfig.androidVersionCode + versionName releaseConfig.version + testInstrumentationRunner "androidx.test.runner.AndroidJUnitRunner" + aaptOptions { + // Files and dirs to omit from the packaged assets dir, modified to accommodate modern web apps. + // Default: https://android.googlesource.com/platform/frameworks/base/+/282e181b58cf72b6ca770dc7ca5f91f135444502/tools/aapt/AaptAssets.cpp#61 + ignoreAssetsPattern = '!.svn:!.git:!.ds_store:!*.scc:.*:!CVS:!thumbs.db:!picasa.ini:!*~' + } + } + signingConfigs { + release { + if (keystorePropsFile.exists()) { + storeFile file(keystoreProps['storeFile']) + storePassword keystoreProps['storePassword'] + keyAlias keystoreProps['keyAlias'] + keyPassword keystoreProps['keyPassword'] + } + } + } + buildTypes { + release { + if (keystorePropsFile.exists()) { + signingConfig signingConfigs.release + } + // minifyEnabled stays false on purpose. All the app's logic is JavaScript in + // assets/public/, which R8 never touches; the only Java here is Capacitor's + // bridge and its plugins, where shrinking buys a couple hundred KB in exchange + // for reflection-based plugin registration breaking in ways that only show up + // in a signed release build. + minifyEnabled false + proguardFiles getDefaultProguardFile('proguard-android.txt'), 'proguard-rules.pro' + } + } +} + +repositories { + flatDir{ + dirs '../capacitor-cordova-android-plugins/src/main/libs', 'libs' + } +} + +dependencies { + implementation fileTree(include: ['*.jar'], dir: 'libs') + implementation "androidx.appcompat:appcompat:$androidxAppCompatVersion" + implementation "androidx.coordinatorlayout:coordinatorlayout:$androidxCoordinatorLayoutVersion" + implementation "androidx.core:core-splashscreen:$coreSplashScreenVersion" + implementation project(':capacitor-android') + testImplementation "junit:junit:$junitVersion" + androidTestImplementation "androidx.test.ext:junit:$androidxJunitVersion" + androidTestImplementation "androidx.test.espresso:espresso-core:$androidxEspressoCoreVersion" + implementation project(':capacitor-cordova-android-plugins') +} + +apply from: 'capacitor.build.gradle' + +try { + def servicesJSON = file('google-services.json') + if (servicesJSON.text) { + apply plugin: 'com.google.gms.google-services' + } +} catch(Exception e) { + logger.info("google-services.json not found, google-services plugin not applied. Push Notifications won't work") +} diff --git a/mobile/android/app/capacitor.build.gradle b/mobile/android/app/capacitor.build.gradle new file mode 100644 index 0000000..2d7bcc3 --- /dev/null +++ b/mobile/android/app/capacitor.build.gradle @@ -0,0 +1,25 @@ +// DO NOT EDIT THIS FILE! IT IS GENERATED EACH TIME "capacitor update" IS RUN + +android { + compileOptions { + sourceCompatibility JavaVersion.VERSION_21 + targetCompatibility JavaVersion.VERSION_21 + } +} + +apply from: "../capacitor-cordova-android-plugins/cordova.variables.gradle" +dependencies { + implementation project(':capacitor-app') + implementation project(':capacitor-browser') + implementation project(':capacitor-haptics') + implementation project(':capacitor-keyboard') + implementation project(':capacitor-network') + implementation project(':capacitor-splash-screen') + implementation project(':capacitor-status-bar') + +} + + +if (hasProperty('postBuildExtras')) { + postBuildExtras() +} diff --git a/mobile/android/app/proguard-rules.pro b/mobile/android/app/proguard-rules.pro new file mode 100644 index 0000000..f1b4245 --- /dev/null +++ b/mobile/android/app/proguard-rules.pro @@ -0,0 +1,21 @@ +# Add project specific ProGuard rules here. +# You can control the set of applied configuration files using the +# proguardFiles setting in build.gradle. +# +# For more details, see +# http://developer.android.com/guide/developing/tools/proguard.html + +# If your project uses WebView with JS, uncomment the following +# and specify the fully qualified class name to the JavaScript interface +# class: +#-keepclassmembers class fqcn.of.javascript.interface.for.webview { +# public *; +#} + +# Uncomment this to preserve the line number information for +# debugging stack traces. +#-keepattributes SourceFile,LineNumberTable + +# If you keep the line number information, uncomment this to +# hide the original source file name. +#-renamesourcefileattribute SourceFile diff --git a/mobile/android/app/src/androidTest/java/com/getcapacitor/myapp/ExampleInstrumentedTest.java b/mobile/android/app/src/androidTest/java/com/getcapacitor/myapp/ExampleInstrumentedTest.java new file mode 100644 index 0000000..f2c2217 --- /dev/null +++ b/mobile/android/app/src/androidTest/java/com/getcapacitor/myapp/ExampleInstrumentedTest.java @@ -0,0 +1,26 @@ +package com.getcapacitor.myapp; + +import static org.junit.Assert.*; + +import android.content.Context; +import androidx.test.ext.junit.runners.AndroidJUnit4; +import androidx.test.platform.app.InstrumentationRegistry; +import org.junit.Test; +import org.junit.runner.RunWith; + +/** + * Instrumented test, which will execute on an Android device. + * + * @see Testing documentation + */ +@RunWith(AndroidJUnit4.class) +public class ExampleInstrumentedTest { + + @Test + public void useAppContext() throws Exception { + // Context of the app under test. + Context appContext = InstrumentationRegistry.getInstrumentation().getTargetContext(); + + assertEquals("com.getcapacitor.app", appContext.getPackageName()); + } +} diff --git a/mobile/android/app/src/main/AndroidManifest.xml b/mobile/android/app/src/main/AndroidManifest.xml new file mode 100644 index 0000000..fc1c393 --- /dev/null +++ b/mobile/android/app/src/main/AndroidManifest.xml @@ -0,0 +1,47 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/mobile/android/app/src/main/java/org/waterschurch/checklist/MainActivity.java b/mobile/android/app/src/main/java/org/waterschurch/checklist/MainActivity.java new file mode 100644 index 0000000..5d5eaf0 --- /dev/null +++ b/mobile/android/app/src/main/java/org/waterschurch/checklist/MainActivity.java @@ -0,0 +1,5 @@ +package org.waterschurch.checklist; + +import com.getcapacitor.BridgeActivity; + +public class MainActivity extends BridgeActivity {} diff --git a/mobile/android/app/src/main/res/drawable-land-hdpi/splash.png b/mobile/android/app/src/main/res/drawable-land-hdpi/splash.png new file mode 100644 index 0000000..ed8e6b8 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-land-hdpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-land-ldpi/splash.png b/mobile/android/app/src/main/res/drawable-land-ldpi/splash.png new file mode 100644 index 0000000..4452d78 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-land-ldpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-land-mdpi/splash.png b/mobile/android/app/src/main/res/drawable-land-mdpi/splash.png new file mode 100644 index 0000000..f096741 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-land-mdpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-land-night-hdpi/splash.png b/mobile/android/app/src/main/res/drawable-land-night-hdpi/splash.png new file mode 100644 index 0000000..ed8e6b8 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-land-night-hdpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-land-night-ldpi/splash.png b/mobile/android/app/src/main/res/drawable-land-night-ldpi/splash.png new file mode 100644 index 0000000..4452d78 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-land-night-ldpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-land-night-mdpi/splash.png b/mobile/android/app/src/main/res/drawable-land-night-mdpi/splash.png new file mode 100644 index 0000000..f096741 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-land-night-mdpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-land-night-xhdpi/splash.png b/mobile/android/app/src/main/res/drawable-land-night-xhdpi/splash.png new file mode 100644 index 0000000..8d19169 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-land-night-xhdpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-land-night-xxhdpi/splash.png b/mobile/android/app/src/main/res/drawable-land-night-xxhdpi/splash.png new file mode 100644 index 0000000..2764901 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-land-night-xxhdpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-land-night-xxxhdpi/splash.png b/mobile/android/app/src/main/res/drawable-land-night-xxxhdpi/splash.png new file mode 100644 index 0000000..78276b8 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-land-night-xxxhdpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-land-xhdpi/splash.png b/mobile/android/app/src/main/res/drawable-land-xhdpi/splash.png new file mode 100644 index 0000000..8d19169 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-land-xhdpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-land-xxhdpi/splash.png b/mobile/android/app/src/main/res/drawable-land-xxhdpi/splash.png new file mode 100644 index 0000000..2764901 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-land-xxhdpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-land-xxxhdpi/splash.png b/mobile/android/app/src/main/res/drawable-land-xxxhdpi/splash.png new file mode 100644 index 0000000..78276b8 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-land-xxxhdpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-night/splash.png b/mobile/android/app/src/main/res/drawable-night/splash.png new file mode 100644 index 0000000..4452d78 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-night/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-port-hdpi/splash.png b/mobile/android/app/src/main/res/drawable-port-hdpi/splash.png new file mode 100644 index 0000000..88d4d97 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-port-hdpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-port-ldpi/splash.png b/mobile/android/app/src/main/res/drawable-port-ldpi/splash.png new file mode 100644 index 0000000..0a8d778 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-port-ldpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-port-mdpi/splash.png b/mobile/android/app/src/main/res/drawable-port-mdpi/splash.png new file mode 100644 index 0000000..8299405 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-port-mdpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-port-night-hdpi/splash.png b/mobile/android/app/src/main/res/drawable-port-night-hdpi/splash.png new file mode 100644 index 0000000..88d4d97 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-port-night-hdpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-port-night-ldpi/splash.png b/mobile/android/app/src/main/res/drawable-port-night-ldpi/splash.png new file mode 100644 index 0000000..0a8d778 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-port-night-ldpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-port-night-mdpi/splash.png b/mobile/android/app/src/main/res/drawable-port-night-mdpi/splash.png new file mode 100644 index 0000000..8299405 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-port-night-mdpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-port-night-xhdpi/splash.png b/mobile/android/app/src/main/res/drawable-port-night-xhdpi/splash.png new file mode 100644 index 0000000..f1d7425 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-port-night-xhdpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-port-night-xxhdpi/splash.png b/mobile/android/app/src/main/res/drawable-port-night-xxhdpi/splash.png new file mode 100644 index 0000000..9fd05d1 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-port-night-xxhdpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-port-night-xxxhdpi/splash.png b/mobile/android/app/src/main/res/drawable-port-night-xxxhdpi/splash.png new file mode 100644 index 0000000..be28d25 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-port-night-xxxhdpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-port-xhdpi/splash.png b/mobile/android/app/src/main/res/drawable-port-xhdpi/splash.png new file mode 100644 index 0000000..f1d7425 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-port-xhdpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-port-xxhdpi/splash.png b/mobile/android/app/src/main/res/drawable-port-xxhdpi/splash.png new file mode 100644 index 0000000..9fd05d1 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-port-xxhdpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-port-xxxhdpi/splash.png b/mobile/android/app/src/main/res/drawable-port-xxxhdpi/splash.png new file mode 100644 index 0000000..be28d25 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable-port-xxxhdpi/splash.png differ diff --git a/mobile/android/app/src/main/res/drawable-v24/ic_launcher_foreground.xml b/mobile/android/app/src/main/res/drawable-v24/ic_launcher_foreground.xml new file mode 100644 index 0000000..c7bd21d --- /dev/null +++ b/mobile/android/app/src/main/res/drawable-v24/ic_launcher_foreground.xml @@ -0,0 +1,34 @@ + + + + + + + + + + + diff --git a/mobile/android/app/src/main/res/drawable/ic_launcher_background.xml b/mobile/android/app/src/main/res/drawable/ic_launcher_background.xml new file mode 100644 index 0000000..d5fccc5 --- /dev/null +++ b/mobile/android/app/src/main/res/drawable/ic_launcher_background.xml @@ -0,0 +1,170 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/mobile/android/app/src/main/res/drawable/splash.png b/mobile/android/app/src/main/res/drawable/splash.png new file mode 100644 index 0000000..8299405 Binary files /dev/null and b/mobile/android/app/src/main/res/drawable/splash.png differ diff --git a/mobile/android/app/src/main/res/layout/activity_main.xml b/mobile/android/app/src/main/res/layout/activity_main.xml new file mode 100644 index 0000000..b5ad138 --- /dev/null +++ b/mobile/android/app/src/main/res/layout/activity_main.xml @@ -0,0 +1,12 @@ + + + + + diff --git a/mobile/android/app/src/main/res/mipmap-anydpi-v26/ic_launcher.xml b/mobile/android/app/src/main/res/mipmap-anydpi-v26/ic_launcher.xml new file mode 100644 index 0000000..5b7afa9 --- /dev/null +++ b/mobile/android/app/src/main/res/mipmap-anydpi-v26/ic_launcher.xml @@ -0,0 +1,13 @@ + + + + + + + diff --git a/mobile/android/app/src/main/res/mipmap-anydpi-v26/ic_launcher_round.xml b/mobile/android/app/src/main/res/mipmap-anydpi-v26/ic_launcher_round.xml new file mode 100644 index 0000000..5b7afa9 --- /dev/null +++ b/mobile/android/app/src/main/res/mipmap-anydpi-v26/ic_launcher_round.xml @@ -0,0 +1,13 @@ + + + + + + + diff --git a/mobile/android/app/src/main/res/mipmap-hdpi/ic_launcher.png b/mobile/android/app/src/main/res/mipmap-hdpi/ic_launcher.png new file mode 100644 index 0000000..a119f7a Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-hdpi/ic_launcher.png differ diff --git a/mobile/android/app/src/main/res/mipmap-hdpi/ic_launcher_background.png b/mobile/android/app/src/main/res/mipmap-hdpi/ic_launcher_background.png new file mode 100644 index 0000000..de66693 Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-hdpi/ic_launcher_background.png differ diff --git a/mobile/android/app/src/main/res/mipmap-hdpi/ic_launcher_foreground.png b/mobile/android/app/src/main/res/mipmap-hdpi/ic_launcher_foreground.png new file mode 100644 index 0000000..91a9748 Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-hdpi/ic_launcher_foreground.png differ diff --git a/mobile/android/app/src/main/res/mipmap-hdpi/ic_launcher_round.png b/mobile/android/app/src/main/res/mipmap-hdpi/ic_launcher_round.png new file mode 100644 index 0000000..0a18711 Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-hdpi/ic_launcher_round.png differ diff --git a/mobile/android/app/src/main/res/mipmap-ldpi/ic_launcher.png b/mobile/android/app/src/main/res/mipmap-ldpi/ic_launcher.png new file mode 100644 index 0000000..64abf70 Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-ldpi/ic_launcher.png differ diff --git a/mobile/android/app/src/main/res/mipmap-ldpi/ic_launcher_background.png b/mobile/android/app/src/main/res/mipmap-ldpi/ic_launcher_background.png new file mode 100644 index 0000000..133bb83 Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-ldpi/ic_launcher_background.png differ diff --git a/mobile/android/app/src/main/res/mipmap-ldpi/ic_launcher_foreground.png b/mobile/android/app/src/main/res/mipmap-ldpi/ic_launcher_foreground.png new file mode 100644 index 0000000..df35134 Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-ldpi/ic_launcher_foreground.png differ diff --git a/mobile/android/app/src/main/res/mipmap-ldpi/ic_launcher_round.png b/mobile/android/app/src/main/res/mipmap-ldpi/ic_launcher_round.png new file mode 100644 index 0000000..4fa6791 Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-ldpi/ic_launcher_round.png differ diff --git a/mobile/android/app/src/main/res/mipmap-mdpi/ic_launcher.png b/mobile/android/app/src/main/res/mipmap-mdpi/ic_launcher.png new file mode 100644 index 0000000..496c0b2 Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-mdpi/ic_launcher.png differ diff --git a/mobile/android/app/src/main/res/mipmap-mdpi/ic_launcher_background.png b/mobile/android/app/src/main/res/mipmap-mdpi/ic_launcher_background.png new file mode 100644 index 0000000..acd71a8 Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-mdpi/ic_launcher_background.png differ diff --git a/mobile/android/app/src/main/res/mipmap-mdpi/ic_launcher_foreground.png b/mobile/android/app/src/main/res/mipmap-mdpi/ic_launcher_foreground.png new file mode 100644 index 0000000..e91ef4c Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-mdpi/ic_launcher_foreground.png differ diff --git a/mobile/android/app/src/main/res/mipmap-mdpi/ic_launcher_round.png b/mobile/android/app/src/main/res/mipmap-mdpi/ic_launcher_round.png new file mode 100644 index 0000000..ae706e3 Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-mdpi/ic_launcher_round.png differ diff --git a/mobile/android/app/src/main/res/mipmap-xhdpi/ic_launcher.png b/mobile/android/app/src/main/res/mipmap-xhdpi/ic_launcher.png new file mode 100644 index 0000000..2a4f3ab Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-xhdpi/ic_launcher.png differ diff --git a/mobile/android/app/src/main/res/mipmap-xhdpi/ic_launcher_background.png b/mobile/android/app/src/main/res/mipmap-xhdpi/ic_launcher_background.png new file mode 100644 index 0000000..6158f30 Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-xhdpi/ic_launcher_background.png differ diff --git a/mobile/android/app/src/main/res/mipmap-xhdpi/ic_launcher_foreground.png b/mobile/android/app/src/main/res/mipmap-xhdpi/ic_launcher_foreground.png new file mode 100644 index 0000000..10c3ebc Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-xhdpi/ic_launcher_foreground.png differ diff --git a/mobile/android/app/src/main/res/mipmap-xhdpi/ic_launcher_round.png b/mobile/android/app/src/main/res/mipmap-xhdpi/ic_launcher_round.png new file mode 100644 index 0000000..978ac88 Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-xhdpi/ic_launcher_round.png differ diff --git a/mobile/android/app/src/main/res/mipmap-xxhdpi/ic_launcher.png b/mobile/android/app/src/main/res/mipmap-xxhdpi/ic_launcher.png new file mode 100644 index 0000000..1b082ed Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-xxhdpi/ic_launcher.png differ diff --git a/mobile/android/app/src/main/res/mipmap-xxhdpi/ic_launcher_background.png b/mobile/android/app/src/main/res/mipmap-xxhdpi/ic_launcher_background.png new file mode 100644 index 0000000..82edd43 Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-xxhdpi/ic_launcher_background.png differ diff --git a/mobile/android/app/src/main/res/mipmap-xxhdpi/ic_launcher_foreground.png b/mobile/android/app/src/main/res/mipmap-xxhdpi/ic_launcher_foreground.png new file mode 100644 index 0000000..44c226b Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-xxhdpi/ic_launcher_foreground.png differ diff --git a/mobile/android/app/src/main/res/mipmap-xxhdpi/ic_launcher_round.png b/mobile/android/app/src/main/res/mipmap-xxhdpi/ic_launcher_round.png new file mode 100644 index 0000000..23293fd Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-xxhdpi/ic_launcher_round.png differ diff --git a/mobile/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher.png b/mobile/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher.png new file mode 100644 index 0000000..b9ac4d1 Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher.png differ diff --git a/mobile/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher_background.png b/mobile/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher_background.png new file mode 100644 index 0000000..3e4f22e Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher_background.png differ diff --git a/mobile/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher_foreground.png b/mobile/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher_foreground.png new file mode 100644 index 0000000..8a72324 Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher_foreground.png differ diff --git a/mobile/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher_round.png b/mobile/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher_round.png new file mode 100644 index 0000000..3cb80ca Binary files /dev/null and b/mobile/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher_round.png differ diff --git a/mobile/android/app/src/main/res/values/colors.xml b/mobile/android/app/src/main/res/values/colors.xml new file mode 100644 index 0000000..0320334 --- /dev/null +++ b/mobile/android/app/src/main/res/values/colors.xml @@ -0,0 +1,7 @@ + + + + #1d2026 + #14161b + diff --git a/mobile/android/app/src/main/res/values/ic_launcher_background.xml b/mobile/android/app/src/main/res/values/ic_launcher_background.xml new file mode 100644 index 0000000..c5d5899 --- /dev/null +++ b/mobile/android/app/src/main/res/values/ic_launcher_background.xml @@ -0,0 +1,4 @@ + + + #FFFFFF + \ No newline at end of file diff --git a/mobile/android/app/src/main/res/values/strings.xml b/mobile/android/app/src/main/res/values/strings.xml new file mode 100644 index 0000000..f7ae052 --- /dev/null +++ b/mobile/android/app/src/main/res/values/strings.xml @@ -0,0 +1,7 @@ + + + Waters Checklist + Waters Checklist + org.waterschurch.checklist + org.waterschurch.checklist + diff --git a/mobile/android/app/src/main/res/values/styles.xml b/mobile/android/app/src/main/res/values/styles.xml new file mode 100644 index 0000000..c036ea1 --- /dev/null +++ b/mobile/android/app/src/main/res/values/styles.xml @@ -0,0 +1,37 @@ + + + + + + + + + + + + \ No newline at end of file diff --git a/mobile/android/app/src/main/res/xml/file_paths.xml b/mobile/android/app/src/main/res/xml/file_paths.xml new file mode 100644 index 0000000..bd0c4d8 --- /dev/null +++ b/mobile/android/app/src/main/res/xml/file_paths.xml @@ -0,0 +1,5 @@ + + + + + \ No newline at end of file diff --git a/mobile/android/app/src/test/java/com/getcapacitor/myapp/ExampleUnitTest.java b/mobile/android/app/src/test/java/com/getcapacitor/myapp/ExampleUnitTest.java new file mode 100644 index 0000000..0297327 --- /dev/null +++ b/mobile/android/app/src/test/java/com/getcapacitor/myapp/ExampleUnitTest.java @@ -0,0 +1,18 @@ +package com.getcapacitor.myapp; + +import static org.junit.Assert.*; + +import org.junit.Test; + +/** + * Example local unit test, which will execute on the development machine (host). + * + * @see Testing documentation + */ +public class ExampleUnitTest { + + @Test + public void addition_isCorrect() throws Exception { + assertEquals(4, 2 + 2); + } +} diff --git a/mobile/android/build.gradle b/mobile/android/build.gradle new file mode 100644 index 0000000..f8f0e43 --- /dev/null +++ b/mobile/android/build.gradle @@ -0,0 +1,29 @@ +// Top-level build file where you can add configuration options common to all sub-projects/modules. + +buildscript { + + repositories { + google() + mavenCentral() + } + dependencies { + classpath 'com.android.tools.build:gradle:8.13.0' + classpath 'com.google.gms:google-services:4.4.4' + + // NOTE: Do not place your application dependencies here; they belong + // in the individual module build.gradle files + } +} + +apply from: "variables.gradle" + +allprojects { + repositories { + google() + mavenCentral() + } +} + +task clean(type: Delete) { + delete rootProject.buildDir +} diff --git a/mobile/android/capacitor.settings.gradle b/mobile/android/capacitor.settings.gradle new file mode 100644 index 0000000..99b7eb8 --- /dev/null +++ b/mobile/android/capacitor.settings.gradle @@ -0,0 +1,24 @@ +// DO NOT EDIT THIS FILE! IT IS GENERATED EACH TIME "capacitor update" IS RUN +include ':capacitor-android' +project(':capacitor-android').projectDir = new File('../node_modules/@capacitor/android/capacitor') + +include ':capacitor-app' +project(':capacitor-app').projectDir = new File('../node_modules/@capacitor/app/android') + +include ':capacitor-browser' +project(':capacitor-browser').projectDir = new File('../node_modules/@capacitor/browser/android') + +include ':capacitor-haptics' +project(':capacitor-haptics').projectDir = new File('../node_modules/@capacitor/haptics/android') + +include ':capacitor-keyboard' +project(':capacitor-keyboard').projectDir = new File('../node_modules/@capacitor/keyboard/android') + +include ':capacitor-network' +project(':capacitor-network').projectDir = new File('../node_modules/@capacitor/network/android') + +include ':capacitor-splash-screen' +project(':capacitor-splash-screen').projectDir = new File('../node_modules/@capacitor/splash-screen/android') + +include ':capacitor-status-bar' +project(':capacitor-status-bar').projectDir = new File('../node_modules/@capacitor/status-bar/android') diff --git a/mobile/android/gradle.properties b/mobile/android/gradle.properties new file mode 100644 index 0000000..2e87c52 --- /dev/null +++ b/mobile/android/gradle.properties @@ -0,0 +1,22 @@ +# Project-wide Gradle settings. + +# IDE (e.g. Android Studio) users: +# Gradle settings configured through the IDE *will override* +# any settings specified in this file. + +# For more details on how to configure your build environment visit +# http://www.gradle.org/docs/current/userguide/build_environment.html + +# Specifies the JVM arguments used for the daemon process. +# The setting is particularly useful for tweaking memory settings. +org.gradle.jvmargs=-Xmx1536m + +# When configured, Gradle will run in incubating parallel mode. +# This option should only be used with decoupled projects. More details, visit +# http://www.gradle.org/docs/current/userguide/multi_project_builds.html#sec:decoupled_projects +# org.gradle.parallel=true + +# AndroidX package structure to make it clearer which packages are bundled with the +# Android operating system, and which are packaged with your app's APK +# https://developer.android.com/topic/libraries/support-library/androidx-rn +android.useAndroidX=true diff --git a/mobile/android/gradle/wrapper/gradle-wrapper.jar b/mobile/android/gradle/wrapper/gradle-wrapper.jar new file mode 100644 index 0000000..1b33c55 Binary files /dev/null and b/mobile/android/gradle/wrapper/gradle-wrapper.jar differ diff --git a/mobile/android/gradle/wrapper/gradle-wrapper.properties b/mobile/android/gradle/wrapper/gradle-wrapper.properties new file mode 100644 index 0000000..7705927 --- /dev/null +++ b/mobile/android/gradle/wrapper/gradle-wrapper.properties @@ -0,0 +1,7 @@ +distributionBase=GRADLE_USER_HOME +distributionPath=wrapper/dists +distributionUrl=https\://services.gradle.org/distributions/gradle-8.14.3-all.zip +networkTimeout=10000 +validateDistributionUrl=true +zipStoreBase=GRADLE_USER_HOME +zipStorePath=wrapper/dists diff --git a/mobile/android/gradlew b/mobile/android/gradlew new file mode 100755 index 0000000..23d15a9 --- /dev/null +++ b/mobile/android/gradlew @@ -0,0 +1,251 @@ +#!/bin/sh + +# +# Copyright © 2015-2021 the original authors. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# https://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +# SPDX-License-Identifier: Apache-2.0 +# + +############################################################################## +# +# Gradle start up script for POSIX generated by Gradle. +# +# Important for running: +# +# (1) You need a POSIX-compliant shell to run this script. If your /bin/sh is +# noncompliant, but you have some other compliant shell such as ksh or +# bash, then to run this script, type that shell name before the whole +# command line, like: +# +# ksh Gradle +# +# Busybox and similar reduced shells will NOT work, because this script +# requires all of these POSIX shell features: +# * functions; +# * expansions «$var», «${var}», «${var:-default}», «${var+SET}», +# «${var#prefix}», «${var%suffix}», and «$( cmd )»; +# * compound commands having a testable exit status, especially «case»; +# * various built-in commands including «command», «set», and «ulimit». +# +# Important for patching: +# +# (2) This script targets any POSIX shell, so it avoids extensions provided +# by Bash, Ksh, etc; in particular arrays are avoided. +# +# The "traditional" practice of packing multiple parameters into a +# space-separated string is a well documented source of bugs and security +# problems, so this is (mostly) avoided, by progressively accumulating +# options in "$@", and eventually passing that to Java. +# +# Where the inherited environment variables (DEFAULT_JVM_OPTS, JAVA_OPTS, +# and GRADLE_OPTS) rely on word-splitting, this is performed explicitly; +# see the in-line comments for details. +# +# There are tweaks for specific operating systems such as AIX, CygWin, +# Darwin, MinGW, and NonStop. +# +# (3) This script is generated from the Groovy template +# https://github.com/gradle/gradle/blob/HEAD/platforms/jvm/plugins-application/src/main/resources/org/gradle/api/internal/plugins/unixStartScript.txt +# within the Gradle project. +# +# You can find Gradle at https://github.com/gradle/gradle/. +# +############################################################################## + +# Attempt to set APP_HOME + +# Resolve links: $0 may be a link +app_path=$0 + +# Need this for daisy-chained symlinks. +while + APP_HOME=${app_path%"${app_path##*/}"} # leaves a trailing /; empty if no leading path + [ -h "$app_path" ] +do + ls=$( ls -ld "$app_path" ) + link=${ls#*' -> '} + case $link in #( + /*) app_path=$link ;; #( + *) app_path=$APP_HOME$link ;; + esac +done + +# This is normally unused +# shellcheck disable=SC2034 +APP_BASE_NAME=${0##*/} +# Discard cd standard output in case $CDPATH is set (https://github.com/gradle/gradle/issues/25036) +APP_HOME=$( cd -P "${APP_HOME:-./}" > /dev/null && printf '%s\n' "$PWD" ) || exit + +# Use the maximum available, or set MAX_FD != -1 to use that value. +MAX_FD=maximum + +warn () { + echo "$*" +} >&2 + +die () { + echo + echo "$*" + echo + exit 1 +} >&2 + +# OS specific support (must be 'true' or 'false'). +cygwin=false +msys=false +darwin=false +nonstop=false +case "$( uname )" in #( + CYGWIN* ) cygwin=true ;; #( + Darwin* ) darwin=true ;; #( + MSYS* | MINGW* ) msys=true ;; #( + NONSTOP* ) nonstop=true ;; +esac + +CLASSPATH="\\\"\\\"" + + +# Determine the Java command to use to start the JVM. +if [ -n "$JAVA_HOME" ] ; then + if [ -x "$JAVA_HOME/jre/sh/java" ] ; then + # IBM's JDK on AIX uses strange locations for the executables + JAVACMD=$JAVA_HOME/jre/sh/java + else + JAVACMD=$JAVA_HOME/bin/java + fi + if [ ! -x "$JAVACMD" ] ; then + die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." + fi +else + JAVACMD=java + if ! command -v java >/dev/null 2>&1 + then + die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." + fi +fi + +# Increase the maximum file descriptors if we can. +if ! "$cygwin" && ! "$darwin" && ! "$nonstop" ; then + case $MAX_FD in #( + max*) + # In POSIX sh, ulimit -H is undefined. That's why the result is checked to see if it worked. + # shellcheck disable=SC2039,SC3045 + MAX_FD=$( ulimit -H -n ) || + warn "Could not query maximum file descriptor limit" + esac + case $MAX_FD in #( + '' | soft) :;; #( + *) + # In POSIX sh, ulimit -n is undefined. That's why the result is checked to see if it worked. + # shellcheck disable=SC2039,SC3045 + ulimit -n "$MAX_FD" || + warn "Could not set maximum file descriptor limit to $MAX_FD" + esac +fi + +# Collect all arguments for the java command, stacking in reverse order: +# * args from the command line +# * the main class name +# * -classpath +# * -D...appname settings +# * --module-path (only if needed) +# * DEFAULT_JVM_OPTS, JAVA_OPTS, and GRADLE_OPTS environment variables. + +# For Cygwin or MSYS, switch paths to Windows format before running java +if "$cygwin" || "$msys" ; then + APP_HOME=$( cygpath --path --mixed "$APP_HOME" ) + CLASSPATH=$( cygpath --path --mixed "$CLASSPATH" ) + + JAVACMD=$( cygpath --unix "$JAVACMD" ) + + # Now convert the arguments - kludge to limit ourselves to /bin/sh + for arg do + if + case $arg in #( + -*) false ;; # don't mess with options #( + /?*) t=${arg#/} t=/${t%%/*} # looks like a POSIX filepath + [ -e "$t" ] ;; #( + *) false ;; + esac + then + arg=$( cygpath --path --ignore --mixed "$arg" ) + fi + # Roll the args list around exactly as many times as the number of + # args, so each arg winds up back in the position where it started, but + # possibly modified. + # + # NB: a `for` loop captures its iteration list before it begins, so + # changing the positional parameters here affects neither the number of + # iterations, nor the values presented in `arg`. + shift # remove old arg + set -- "$@" "$arg" # push replacement arg + done +fi + + +# Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +DEFAULT_JVM_OPTS='"-Xmx64m" "-Xms64m"' + +# Collect all arguments for the java command: +# * DEFAULT_JVM_OPTS, JAVA_OPTS, and optsEnvironmentVar are not allowed to contain shell fragments, +# and any embedded shellness will be escaped. +# * For example: A user cannot expect ${Hostname} to be expanded, as it is an environment variable and will be +# treated as '${Hostname}' itself on the command line. + +set -- \ + "-Dorg.gradle.appname=$APP_BASE_NAME" \ + -classpath "$CLASSPATH" \ + -jar "$APP_HOME/gradle/wrapper/gradle-wrapper.jar" \ + "$@" + +# Stop when "xargs" is not available. +if ! command -v xargs >/dev/null 2>&1 +then + die "xargs is not available" +fi + +# Use "xargs" to parse quoted args. +# +# With -n1 it outputs one arg per line, with the quotes and backslashes removed. +# +# In Bash we could simply go: +# +# readarray ARGS < <( xargs -n1 <<<"$var" ) && +# set -- "${ARGS[@]}" "$@" +# +# but POSIX shell has neither arrays nor command substitution, so instead we +# post-process each arg (as a line of input to sed) to backslash-escape any +# character that might be a shell metacharacter, then use eval to reverse +# that process (while maintaining the separation between arguments), and wrap +# the whole thing up as a single "set" statement. +# +# This will of course break if any of these variables contains a newline or +# an unmatched quote. +# + +eval "set -- $( + printf '%s\n' "$DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS" | + xargs -n1 | + sed ' s~[^-[:alnum:]+,./:=@_]~\\&~g; ' | + tr '\n' ' ' + )" '"$@"' + +exec "$JAVACMD" "$@" diff --git a/mobile/android/gradlew.bat b/mobile/android/gradlew.bat new file mode 100644 index 0000000..5eed7ee --- /dev/null +++ b/mobile/android/gradlew.bat @@ -0,0 +1,94 @@ +@rem +@rem Copyright 2015 the original author or authors. +@rem +@rem Licensed under the Apache License, Version 2.0 (the "License"); +@rem you may not use this file except in compliance with the License. +@rem You may obtain a copy of the License at +@rem +@rem https://www.apache.org/licenses/LICENSE-2.0 +@rem +@rem Unless required by applicable law or agreed to in writing, software +@rem distributed under the License is distributed on an "AS IS" BASIS, +@rem WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +@rem See the License for the specific language governing permissions and +@rem limitations under the License. +@rem +@rem SPDX-License-Identifier: Apache-2.0 +@rem + +@if "%DEBUG%"=="" @echo off +@rem ########################################################################## +@rem +@rem Gradle startup script for Windows +@rem +@rem ########################################################################## + +@rem Set local scope for the variables with windows NT shell +if "%OS%"=="Windows_NT" setlocal + +set DIRNAME=%~dp0 +if "%DIRNAME%"=="" set DIRNAME=. +@rem This is normally unused +set APP_BASE_NAME=%~n0 +set APP_HOME=%DIRNAME% + +@rem Resolve any "." and ".." in APP_HOME to make it shorter. +for %%i in ("%APP_HOME%") do set APP_HOME=%%~fi + +@rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +set DEFAULT_JVM_OPTS="-Xmx64m" "-Xms64m" + +@rem Find java.exe +if defined JAVA_HOME goto findJavaFromJavaHome + +set JAVA_EXE=java.exe +%JAVA_EXE% -version >NUL 2>&1 +if %ERRORLEVEL% equ 0 goto execute + +echo. 1>&2 +echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. 1>&2 +echo. 1>&2 +echo Please set the JAVA_HOME variable in your environment to match the 1>&2 +echo location of your Java installation. 1>&2 + +goto fail + +:findJavaFromJavaHome +set JAVA_HOME=%JAVA_HOME:"=% +set JAVA_EXE=%JAVA_HOME%/bin/java.exe + +if exist "%JAVA_EXE%" goto execute + +echo. 1>&2 +echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME% 1>&2 +echo. 1>&2 +echo Please set the JAVA_HOME variable in your environment to match the 1>&2 +echo location of your Java installation. 1>&2 + +goto fail + +:execute +@rem Setup the command line + +set CLASSPATH= + + +@rem Execute Gradle +"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" -jar "%APP_HOME%\gradle\wrapper\gradle-wrapper.jar" %* + +:end +@rem End local scope for the variables with windows NT shell +if %ERRORLEVEL% equ 0 goto mainEnd + +:fail +rem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of +rem the _cmd.exe /c_ return code! +set EXIT_CODE=%ERRORLEVEL% +if %EXIT_CODE% equ 0 set EXIT_CODE=1 +if not ""=="%GRADLE_EXIT_CONSOLE%" exit %EXIT_CODE% +exit /b %EXIT_CODE% + +:mainEnd +if "%OS%"=="Windows_NT" endlocal + +:omega diff --git a/mobile/android/settings.gradle b/mobile/android/settings.gradle new file mode 100644 index 0000000..3b4431d --- /dev/null +++ b/mobile/android/settings.gradle @@ -0,0 +1,5 @@ +include ':app' +include ':capacitor-cordova-android-plugins' +project(':capacitor-cordova-android-plugins').projectDir = new File('./capacitor-cordova-android-plugins/') + +apply from: 'capacitor.settings.gradle' \ No newline at end of file diff --git a/mobile/android/variables.gradle b/mobile/android/variables.gradle new file mode 100644 index 0000000..ee4ba41 --- /dev/null +++ b/mobile/android/variables.gradle @@ -0,0 +1,16 @@ +ext { + minSdkVersion = 24 + compileSdkVersion = 36 + targetSdkVersion = 36 + androidxActivityVersion = '1.11.0' + androidxAppCompatVersion = '1.7.1' + androidxCoordinatorLayoutVersion = '1.3.0' + androidxCoreVersion = '1.17.0' + androidxFragmentVersion = '1.8.9' + coreSplashScreenVersion = '1.2.0' + androidxWebkitVersion = '1.14.0' + junitVersion = '4.13.2' + androidxJunitVersion = '1.3.0' + androidxEspressoCoreVersion = '3.7.0' + cordovaAndroidVersion = '14.0.1' +} \ No newline at end of file diff --git a/mobile/assets/icon-background.png b/mobile/assets/icon-background.png new file mode 100644 index 0000000..f8e2cf1 Binary files /dev/null and b/mobile/assets/icon-background.png differ diff --git a/mobile/assets/icon-foreground.png b/mobile/assets/icon-foreground.png new file mode 100644 index 0000000..00751d9 Binary files /dev/null and b/mobile/assets/icon-foreground.png differ diff --git a/mobile/assets/icon.png b/mobile/assets/icon.png new file mode 100644 index 0000000..5c8bf7f Binary files /dev/null and b/mobile/assets/icon.png differ diff --git a/mobile/assets/splash-dark.png b/mobile/assets/splash-dark.png new file mode 100644 index 0000000..de7ec89 Binary files /dev/null and b/mobile/assets/splash-dark.png differ diff --git a/mobile/assets/splash.png b/mobile/assets/splash.png new file mode 100644 index 0000000..de7ec89 Binary files /dev/null and b/mobile/assets/splash.png differ diff --git a/mobile/capacitor.config.json b/mobile/capacitor.config.json new file mode 100644 index 0000000..59d2f16 --- /dev/null +++ b/mobile/capacitor.config.json @@ -0,0 +1,45 @@ +{ + "appId": "org.waterschurch.checklist", + "appName": "Waters Checklist", + "webDir": "www", + "bundledWebRuntime": false, + "loggingBehavior": "production", + "ios": { + "contentInset": "never", + "allowsLinkPreview": false, + "backgroundColor": "#14161bff", + "scheme": "capacitor" + }, + "android": { + "backgroundColor": "#14161bff", + "zoomEnabled": false, + "allowMixedContent": false, + "captureInput": true + }, + "plugins": { + "CapacitorHttp": { + "enabled": false + }, + "CapacitorCookies": { + "enabled": false + }, + "SplashScreen": { + "launchAutoHide": false, + "backgroundColor": "#14161bff", + "showSpinner": false, + "splashFullScreen": true, + "splashImmersive": false, + "androidScaleType": "CENTER_CROP" + }, + "Keyboard": { + "resize": "native", + "style": "DARK", + "resizeOnFullScreen": true + }, + "StatusBar": { + "style": "DARK", + "backgroundColor": "#1d2026", + "overlaysWebView": false + } + } +} diff --git a/mobile/ios-signing.config.example b/mobile/ios-signing.config.example new file mode 100644 index 0000000..b7f5643 --- /dev/null +++ b/mobile/ios-signing.config.example @@ -0,0 +1,24 @@ +# iOS signing — copy to `ios-signing.config` (gitignored) and fill in. +# +# cp mobile/ios-signing.config.example mobile/ios-signing.config +# +# Until this file exists, `./release.sh` builds the website and the Android app and SKIPS +# iOS with a note. Nothing else breaks. + +# ── Required ─────────────────────────────────────────────────────────────────────────── +# Your Apple Developer Team ID: 10 characters, e.g. A1B2C3D4E5. +# Find it at https://developer.apple.com/account → Membership details → Team ID. +DEVELOPMENT_TEAM= + +# ── Optional: hands-off upload to App Store Connect ──────────────────────────────────── +# Without these, release.sh still produces a signed .ipa in dist-release/ and you upload it +# by hand (Xcode ▸ Window ▸ Organizer ▸ Distribute App, or the Transporter app). With them, +# release.sh uploads it for you — worth setting up once if you ship often. +# +# Create the key at App Store Connect → Users and Access → Integrations → App Store Connect +# API → "+". Role "App Manager" is enough. You can download the .p8 ONCE, so save it +# immediately to ~/.appstoreconnect/private_keys/AuthKey_.p8 — xcrun looks there by +# name, which is why there's no path setting here. +# +# ASC_KEY_ID=XXXXXXXXXX +# ASC_ISSUER_ID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx diff --git a/mobile/ios/.gitignore b/mobile/ios/.gitignore new file mode 100644 index 0000000..f470299 --- /dev/null +++ b/mobile/ios/.gitignore @@ -0,0 +1,13 @@ +App/build +App/Pods +App/output +App/App/public +DerivedData +xcuserdata + +# Cordova plugins for Capacitor +capacitor-cordova-ios-plugins + +# Generated Config files +App/App/capacitor.config.json +App/App/config.xml diff --git a/mobile/ios/App/App.xcodeproj/project.pbxproj b/mobile/ios/App/App.xcodeproj/project.pbxproj new file mode 100644 index 0000000..a1e9b62 --- /dev/null +++ b/mobile/ios/App/App.xcodeproj/project.pbxproj @@ -0,0 +1,380 @@ +// !$*UTF8*$! +{ + archiveVersion = 1; + classes = { + }; + objectVersion = 60; + objects = { + +/* Begin PBXBuildFile section */ + 2FAD9763203C412B000D30F8 /* config.xml in Resources */ = {isa = PBXBuildFile; fileRef = 2FAD9762203C412B000D30F8 /* config.xml */; }; + 4D22ABE92AF431CB00220026 /* CapApp-SPM in Frameworks */ = {isa = PBXBuildFile; productRef = 4D22ABE82AF431CB00220026 /* CapApp-SPM */; }; + 50379B232058CBB4000EE86E /* capacitor.config.json in Resources */ = {isa = PBXBuildFile; fileRef = 50379B222058CBB4000EE86E /* capacitor.config.json */; }; + 504EC3081FED79650016851F /* AppDelegate.swift in Sources */ = {isa = PBXBuildFile; fileRef = 504EC3071FED79650016851F /* AppDelegate.swift */; }; + 504EC30D1FED79650016851F /* Main.storyboard in Resources */ = {isa = PBXBuildFile; fileRef = 504EC30B1FED79650016851F /* Main.storyboard */; }; + 504EC30F1FED79650016851F /* Assets.xcassets in Resources */ = {isa = PBXBuildFile; fileRef = 504EC30E1FED79650016851F /* Assets.xcassets */; }; + 504EC3121FED79650016851F /* LaunchScreen.storyboard in Resources */ = {isa = PBXBuildFile; fileRef = 504EC3101FED79650016851F /* LaunchScreen.storyboard */; }; + 50B271D11FEDC1A000F3C39B /* public in Resources */ = {isa = PBXBuildFile; fileRef = 50B271D01FEDC1A000F3C39B /* public */; }; + 9582B6832FE993A70072D4E8 /* SceneDelegate.swift in Sources */ = {isa = PBXBuildFile; fileRef = 9582B6822FE993A50072D4E8 /* SceneDelegate.swift */; }; +/* End PBXBuildFile section */ + +/* Begin PBXFileReference section */ + 2FAD9762203C412B000D30F8 /* config.xml */ = {isa = PBXFileReference; lastKnownFileType = text.xml; path = config.xml; sourceTree = ""; }; + 50379B222058CBB4000EE86E /* capacitor.config.json */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = text.json; path = capacitor.config.json; sourceTree = ""; }; + 504EC3041FED79650016851F /* App.app */ = {isa = PBXFileReference; explicitFileType = wrapper.application; includeInIndex = 0; path = App.app; sourceTree = BUILT_PRODUCTS_DIR; }; + 504EC3071FED79650016851F /* AppDelegate.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = AppDelegate.swift; sourceTree = ""; }; + 504EC30C1FED79650016851F /* Base */ = {isa = PBXFileReference; lastKnownFileType = file.storyboard; name = Base; path = Base.lproj/Main.storyboard; sourceTree = ""; }; + 504EC30E1FED79650016851F /* Assets.xcassets */ = {isa = PBXFileReference; lastKnownFileType = folder.assetcatalog; path = Assets.xcassets; sourceTree = ""; }; + 504EC3111FED79650016851F /* Base */ = {isa = PBXFileReference; lastKnownFileType = file.storyboard; name = Base; path = Base.lproj/LaunchScreen.storyboard; sourceTree = ""; }; + 504EC3131FED79650016851F /* Info.plist */ = {isa = PBXFileReference; lastKnownFileType = text.plist.xml; path = Info.plist; sourceTree = ""; }; + 50B271D01FEDC1A000F3C39B /* public */ = {isa = PBXFileReference; lastKnownFileType = folder; path = public; sourceTree = ""; }; + 9582B6822FE993A50072D4E8 /* SceneDelegate.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = SceneDelegate.swift; sourceTree = ""; }; + 958DCC722DB07C7200EA8C5F /* debug.xcconfig */ = {isa = PBXFileReference; lastKnownFileType = text.xcconfig; name = debug.xcconfig; path = ../debug.xcconfig; sourceTree = SOURCE_ROOT; }; +/* End PBXFileReference section */ + +/* Begin PBXFrameworksBuildPhase section */ + 504EC3011FED79650016851F /* Frameworks */ = { + isa = PBXFrameworksBuildPhase; + buildActionMask = 2147483647; + files = ( + 4D22ABE92AF431CB00220026 /* CapApp-SPM in Frameworks */, + ); + runOnlyForDeploymentPostprocessing = 0; + }; +/* End PBXFrameworksBuildPhase section */ + +/* Begin PBXGroup section */ + 504EC2FB1FED79650016851F = { + isa = PBXGroup; + children = ( + 958DCC722DB07C7200EA8C5F /* debug.xcconfig */, + 504EC3061FED79650016851F /* App */, + 504EC3051FED79650016851F /* Products */, + ); + sourceTree = ""; + }; + 504EC3051FED79650016851F /* Products */ = { + isa = PBXGroup; + children = ( + 504EC3041FED79650016851F /* App.app */, + ); + name = Products; + sourceTree = ""; + }; + 504EC3061FED79650016851F /* App */ = { + isa = PBXGroup; + children = ( + 9582B6822FE993A50072D4E8 /* SceneDelegate.swift */, + 50379B222058CBB4000EE86E /* capacitor.config.json */, + 504EC3071FED79650016851F /* AppDelegate.swift */, + 504EC30B1FED79650016851F /* Main.storyboard */, + 504EC30E1FED79650016851F /* Assets.xcassets */, + 504EC3101FED79650016851F /* LaunchScreen.storyboard */, + 504EC3131FED79650016851F /* Info.plist */, + 2FAD9762203C412B000D30F8 /* config.xml */, + 50B271D01FEDC1A000F3C39B /* public */, + ); + path = App; + sourceTree = ""; + }; +/* End PBXGroup section */ + +/* Begin PBXNativeTarget section */ + 504EC3031FED79650016851F /* App */ = { + isa = PBXNativeTarget; + buildConfigurationList = 504EC3161FED79650016851F /* Build configuration list for PBXNativeTarget "App" */; + buildPhases = ( + 504EC3001FED79650016851F /* Sources */, + 504EC3011FED79650016851F /* Frameworks */, + 504EC3021FED79650016851F /* Resources */, + ); + buildRules = ( + ); + dependencies = ( + ); + name = App; + packageProductDependencies = ( + 4D22ABE82AF431CB00220026 /* CapApp-SPM */, + ); + productName = App; + productReference = 504EC3041FED79650016851F /* App.app */; + productType = "com.apple.product-type.application"; + }; +/* End PBXNativeTarget section */ + +/* Begin PBXProject section */ + 504EC2FC1FED79650016851F /* Project object */ = { + isa = PBXProject; + attributes = { + LastSwiftUpdateCheck = 0920; + LastUpgradeCheck = 0920; + TargetAttributes = { + 504EC3031FED79650016851F = { + CreatedOnToolsVersion = 9.2; + LastSwiftMigration = 1100; + ProvisioningStyle = Automatic; + }; + }; + }; + buildConfigurationList = 504EC2FF1FED79650016851F /* Build configuration list for PBXProject "App" */; + compatibilityVersion = "Xcode 8.0"; + developmentRegion = en; + hasScannedForEncodings = 0; + knownRegions = ( + en, + Base, + ); + mainGroup = 504EC2FB1FED79650016851F; + packageReferences = ( + D4C12C0A2AAA248700AAC8A2 /* XCLocalSwiftPackageReference "CapApp-SPM" */, + ); + productRefGroup = 504EC3051FED79650016851F /* Products */; + projectDirPath = ""; + projectRoot = ""; + targets = ( + 504EC3031FED79650016851F /* App */, + ); + }; +/* End PBXProject section */ + +/* Begin PBXResourcesBuildPhase section */ + 504EC3021FED79650016851F /* Resources */ = { + isa = PBXResourcesBuildPhase; + buildActionMask = 2147483647; + files = ( + 504EC3121FED79650016851F /* LaunchScreen.storyboard in Resources */, + 50B271D11FEDC1A000F3C39B /* public in Resources */, + 504EC30F1FED79650016851F /* Assets.xcassets in Resources */, + 50379B232058CBB4000EE86E /* capacitor.config.json in Resources */, + 504EC30D1FED79650016851F /* Main.storyboard in Resources */, + 2FAD9763203C412B000D30F8 /* config.xml in Resources */, + ); + runOnlyForDeploymentPostprocessing = 0; + }; +/* End PBXResourcesBuildPhase section */ + +/* Begin PBXSourcesBuildPhase section */ + 504EC3001FED79650016851F /* Sources */ = { + isa = PBXSourcesBuildPhase; + buildActionMask = 2147483647; + files = ( + 504EC3081FED79650016851F /* AppDelegate.swift in Sources */, + 9582B6832FE993A70072D4E8 /* SceneDelegate.swift in Sources */, + ); + runOnlyForDeploymentPostprocessing = 0; + }; +/* End PBXSourcesBuildPhase section */ + +/* Begin PBXVariantGroup section */ + 504EC30B1FED79650016851F /* Main.storyboard */ = { + isa = PBXVariantGroup; + children = ( + 504EC30C1FED79650016851F /* Base */, + ); + name = Main.storyboard; + sourceTree = ""; + }; + 504EC3101FED79650016851F /* LaunchScreen.storyboard */ = { + isa = PBXVariantGroup; + children = ( + 504EC3111FED79650016851F /* Base */, + ); + name = LaunchScreen.storyboard; + sourceTree = ""; + }; +/* End PBXVariantGroup section */ + +/* Begin XCBuildConfiguration section */ + 504EC3141FED79650016851F /* Debug */ = { + isa = XCBuildConfiguration; + baseConfigurationReference = 958DCC722DB07C7200EA8C5F /* debug.xcconfig */; + buildSettings = { + ALWAYS_SEARCH_USER_PATHS = NO; + CLANG_ANALYZER_NONNULL = YES; + CLANG_ANALYZER_NUMBER_OBJECT_CONVERSION = YES_AGGRESSIVE; + CLANG_CXX_LANGUAGE_STANDARD = "gnu++14"; + CLANG_CXX_LIBRARY = "libc++"; + CLANG_ENABLE_MODULES = YES; + CLANG_ENABLE_OBJC_ARC = YES; + CLANG_WARN_BLOCK_CAPTURE_AUTORELEASING = YES; + CLANG_WARN_BOOL_CONVERSION = YES; + CLANG_WARN_COMMA = YES; + CLANG_WARN_CONSTANT_CONVERSION = YES; + CLANG_WARN_DIRECT_OBJC_ISA_USAGE = YES_ERROR; + CLANG_WARN_DOCUMENTATION_COMMENTS = YES; + CLANG_WARN_EMPTY_BODY = YES; + CLANG_WARN_ENUM_CONVERSION = YES; + CLANG_WARN_INFINITE_RECURSION = YES; + CLANG_WARN_INT_CONVERSION = YES; + CLANG_WARN_NON_LITERAL_NULL_CONVERSION = YES; + CLANG_WARN_OBJC_LITERAL_CONVERSION = YES; + CLANG_WARN_OBJC_ROOT_CLASS = YES_ERROR; + CLANG_WARN_RANGE_LOOP_ANALYSIS = YES; + CLANG_WARN_STRICT_PROTOTYPES = YES; + CLANG_WARN_SUSPICIOUS_MOVE = YES; + CLANG_WARN_UNGUARDED_AVAILABILITY = YES_AGGRESSIVE; + CLANG_WARN_UNREACHABLE_CODE = YES; + CLANG_WARN__DUPLICATE_METHOD_MATCH = YES; + CODE_SIGN_IDENTITY = "iPhone Developer"; + COPY_PHASE_STRIP = NO; + DEBUG_INFORMATION_FORMAT = dwarf; + ENABLE_STRICT_OBJC_MSGSEND = YES; + ENABLE_TESTABILITY = YES; + GCC_C_LANGUAGE_STANDARD = gnu11; + GCC_DYNAMIC_NO_PIC = NO; + GCC_NO_COMMON_BLOCKS = YES; + GCC_OPTIMIZATION_LEVEL = 0; + GCC_PREPROCESSOR_DEFINITIONS = ( + "DEBUG=1", + "$(inherited)", + ); + GCC_WARN_64_TO_32_BIT_CONVERSION = YES; + GCC_WARN_ABOUT_RETURN_TYPE = YES_ERROR; + GCC_WARN_UNDECLARED_SELECTOR = YES; + GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE; + GCC_WARN_UNUSED_FUNCTION = YES; + GCC_WARN_UNUSED_VARIABLE = YES; + IPHONEOS_DEPLOYMENT_TARGET = 15.0; + MTL_ENABLE_DEBUG_INFO = YES; + ONLY_ACTIVE_ARCH = YES; + SDKROOT = iphoneos; + SWIFT_ACTIVE_COMPILATION_CONDITIONS = DEBUG; + SWIFT_OPTIMIZATION_LEVEL = "-Onone"; + }; + name = Debug; + }; + 504EC3151FED79650016851F /* Release */ = { + isa = XCBuildConfiguration; + buildSettings = { + ALWAYS_SEARCH_USER_PATHS = NO; + CLANG_ANALYZER_NONNULL = YES; + CLANG_ANALYZER_NUMBER_OBJECT_CONVERSION = YES_AGGRESSIVE; + CLANG_CXX_LANGUAGE_STANDARD = "gnu++14"; + CLANG_CXX_LIBRARY = "libc++"; + CLANG_ENABLE_MODULES = YES; + CLANG_ENABLE_OBJC_ARC = YES; + CLANG_WARN_BLOCK_CAPTURE_AUTORELEASING = YES; + CLANG_WARN_BOOL_CONVERSION = YES; + CLANG_WARN_COMMA = YES; + CLANG_WARN_CONSTANT_CONVERSION = YES; + CLANG_WARN_DIRECT_OBJC_ISA_USAGE = YES_ERROR; + CLANG_WARN_DOCUMENTATION_COMMENTS = YES; + CLANG_WARN_EMPTY_BODY = YES; + CLANG_WARN_ENUM_CONVERSION = YES; + CLANG_WARN_INFINITE_RECURSION = YES; + CLANG_WARN_INT_CONVERSION = YES; + CLANG_WARN_NON_LITERAL_NULL_CONVERSION = YES; + CLANG_WARN_OBJC_LITERAL_CONVERSION = YES; + CLANG_WARN_OBJC_ROOT_CLASS = YES_ERROR; + CLANG_WARN_RANGE_LOOP_ANALYSIS = YES; + CLANG_WARN_STRICT_PROTOTYPES = YES; + CLANG_WARN_SUSPICIOUS_MOVE = YES; + CLANG_WARN_UNGUARDED_AVAILABILITY = YES_AGGRESSIVE; + CLANG_WARN_UNREACHABLE_CODE = YES; + CLANG_WARN__DUPLICATE_METHOD_MATCH = YES; + CODE_SIGN_IDENTITY = "iPhone Developer"; + COPY_PHASE_STRIP = NO; + DEBUG_INFORMATION_FORMAT = "dwarf-with-dsym"; + ENABLE_NS_ASSERTIONS = NO; + ENABLE_STRICT_OBJC_MSGSEND = YES; + GCC_C_LANGUAGE_STANDARD = gnu11; + GCC_NO_COMMON_BLOCKS = YES; + GCC_WARN_64_TO_32_BIT_CONVERSION = YES; + GCC_WARN_ABOUT_RETURN_TYPE = YES_ERROR; + GCC_WARN_UNDECLARED_SELECTOR = YES; + GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE; + GCC_WARN_UNUSED_FUNCTION = YES; + GCC_WARN_UNUSED_VARIABLE = YES; + IPHONEOS_DEPLOYMENT_TARGET = 15.0; + MTL_ENABLE_DEBUG_INFO = NO; + SDKROOT = iphoneos; + SWIFT_COMPILATION_MODE = wholemodule; + SWIFT_OPTIMIZATION_LEVEL = "-O"; + VALIDATE_PRODUCT = YES; + }; + name = Release; + }; + 504EC3171FED79650016851F /* Debug */ = { + isa = XCBuildConfiguration; + baseConfigurationReference = 958DCC722DB07C7200EA8C5F /* debug.xcconfig */; + buildSettings = { + ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon; + CODE_SIGN_STYLE = Automatic; + CURRENT_PROJECT_VERSION = 8; + INFOPLIST_FILE = App/Info.plist; + IPHONEOS_DEPLOYMENT_TARGET = 15.0; + LD_RUNPATH_SEARCH_PATHS = ( + "$(inherited)", + "@executable_path/Frameworks", + ); + MARKETING_VERSION = 1.0.0; + OTHER_SWIFT_FLAGS = "$(inherited) \"-D\" \"COCOAPODS\" \"-DDEBUG\""; + PRODUCT_BUNDLE_IDENTIFIER = org.waterschurch.checklist; + PRODUCT_NAME = "$(TARGET_NAME)"; + SWIFT_ACTIVE_COMPILATION_CONDITIONS = DEBUG; + SWIFT_VERSION = 5.0; + TARGETED_DEVICE_FAMILY = "1,2"; + }; + name = Debug; + }; + 504EC3181FED79650016851F /* Release */ = { + isa = XCBuildConfiguration; + buildSettings = { + ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon; + CODE_SIGN_STYLE = Automatic; + CURRENT_PROJECT_VERSION = 8; + INFOPLIST_FILE = App/Info.plist; + IPHONEOS_DEPLOYMENT_TARGET = 15.0; + LD_RUNPATH_SEARCH_PATHS = ( + "$(inherited)", + "@executable_path/Frameworks", + ); + MARKETING_VERSION = 1.0.0; + PRODUCT_BUNDLE_IDENTIFIER = org.waterschurch.checklist; + PRODUCT_NAME = "$(TARGET_NAME)"; + SWIFT_ACTIVE_COMPILATION_CONDITIONS = ""; + SWIFT_VERSION = 5.0; + TARGETED_DEVICE_FAMILY = "1,2"; + }; + name = Release; + }; +/* End XCBuildConfiguration section */ + +/* Begin XCConfigurationList section */ + 504EC2FF1FED79650016851F /* Build configuration list for PBXProject "App" */ = { + isa = XCConfigurationList; + buildConfigurations = ( + 504EC3141FED79650016851F /* Debug */, + 504EC3151FED79650016851F /* Release */, + ); + defaultConfigurationIsVisible = 0; + defaultConfigurationName = Release; + }; + 504EC3161FED79650016851F /* Build configuration list for PBXNativeTarget "App" */ = { + isa = XCConfigurationList; + buildConfigurations = ( + 504EC3171FED79650016851F /* Debug */, + 504EC3181FED79650016851F /* Release */, + ); + defaultConfigurationIsVisible = 0; + defaultConfigurationName = Release; + }; +/* End XCConfigurationList section */ + +/* Begin XCLocalSwiftPackageReference section */ + D4C12C0A2AAA248700AAC8A2 /* XCLocalSwiftPackageReference "CapApp-SPM" */ = { + isa = XCLocalSwiftPackageReference; + relativePath = "CapApp-SPM"; + }; +/* End XCLocalSwiftPackageReference section */ + +/* Begin XCSwiftPackageProductDependency section */ + 4D22ABE82AF431CB00220026 /* CapApp-SPM */ = { + isa = XCSwiftPackageProductDependency; + package = D4C12C0A2AAA248700AAC8A2 /* XCLocalSwiftPackageReference "CapApp-SPM" */; + productName = "CapApp-SPM"; + }; +/* End XCSwiftPackageProductDependency section */ + }; + rootObject = 504EC2FC1FED79650016851F /* Project object */; +} diff --git a/mobile/ios/App/App.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved b/mobile/ios/App/App.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved new file mode 100644 index 0000000..6290d8b --- /dev/null +++ b/mobile/ios/App/App.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved @@ -0,0 +1,15 @@ +{ + "originHash" : "651de3af455361779c46e35db0e93bac957b770c95f2ac44aeec548c10075543", + "pins" : [ + { + "identity" : "capacitor-swift-pm", + "kind" : "remoteSourceControl", + "location" : "https://github.com/ionic-team/capacitor-swift-pm.git", + "state" : { + "revision" : "6afa7424fd2fcd8ca1e577478e8a00af284b7e82", + "version" : "8.5.1" + } + } + ], + "version" : 3 +} diff --git a/mobile/ios/App/App/AppDelegate.swift b/mobile/ios/App/App/AppDelegate.swift new file mode 100644 index 0000000..fec95ac --- /dev/null +++ b/mobile/ios/App/App/AppDelegate.swift @@ -0,0 +1,44 @@ +import UIKit +import Capacitor + +@UIApplicationMain +class AppDelegate: UIResponder, UIApplicationDelegate { + + var window: UIWindow? + + func application(_ application: UIApplication, didFinishLaunchingWithOptions launchOptions: [UIApplication.LaunchOptionsKey: Any]?) -> Bool { + // Override point for customization after application launch. + return true + } + + func applicationWillResignActive(_ application: UIApplication) { + // Sent when the application is about to move from active to inactive state. This can occur for certain types of temporary interruptions (such as an incoming phone call or SMS message) or when the user quits the application and it begins the transition to the background state. + // Use this method to pause ongoing tasks, disable timers, and invalidate graphics rendering callbacks. Games should use this method to pause the game. + } + + func applicationDidEnterBackground(_ application: UIApplication) { + // Use this method to release shared resources, save user data, invalidate timers, and store enough application state information to restore your application to its current state in case it is terminated later. + // If your application supports background execution, this method is called instead of applicationWillTerminate: when the user quits. + } + + func applicationWillEnterForeground(_ application: UIApplication) { + // Called as part of the transition from the background to the active state; here you can undo many of the changes made on entering the background. + } + + func applicationDidBecomeActive(_ application: UIApplication) { + // Restart any tasks that were paused (or not yet started) while the application was inactive. If the application was previously in the background, optionally refresh the user interface. + } + + func applicationWillTerminate(_ application: UIApplication) { + // Called when the application is about to terminate. Save data if appropriate. See also applicationDidEnterBackground:. + } + + func application(_ application: UIApplication, + configurationForConnecting connectingSceneSession: UISceneSession, + options: UIScene.ConnectionOptions) -> UISceneConfiguration { + let config = UISceneConfiguration(name: "Default Configuration", + sessionRole: connectingSceneSession.role) + config.delegateClass = SceneDelegate.self + return config + } +} diff --git a/mobile/ios/App/App/Assets.xcassets/AppIcon.appiconset/AppIcon-512@2x.png b/mobile/ios/App/App/Assets.xcassets/AppIcon.appiconset/AppIcon-512@2x.png new file mode 100644 index 0000000..1cd477f Binary files /dev/null and b/mobile/ios/App/App/Assets.xcassets/AppIcon.appiconset/AppIcon-512@2x.png differ diff --git a/mobile/ios/App/App/Assets.xcassets/AppIcon.appiconset/Contents.json b/mobile/ios/App/App/Assets.xcassets/AppIcon.appiconset/Contents.json new file mode 100644 index 0000000..b1a8483 --- /dev/null +++ b/mobile/ios/App/App/Assets.xcassets/AppIcon.appiconset/Contents.json @@ -0,0 +1,14 @@ +{ + "images": [ + { + "idiom": "universal", + "size": "1024x1024", + "filename": "AppIcon-512@2x.png", + "platform": "ios" + } + ], + "info": { + "author": "xcode", + "version": 1 + } +} \ No newline at end of file diff --git a/mobile/ios/App/App/Assets.xcassets/Contents.json b/mobile/ios/App/App/Assets.xcassets/Contents.json new file mode 100644 index 0000000..da4a164 --- /dev/null +++ b/mobile/ios/App/App/Assets.xcassets/Contents.json @@ -0,0 +1,6 @@ +{ + "info" : { + "version" : 1, + "author" : "xcode" + } +} \ No newline at end of file diff --git a/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Contents.json b/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Contents.json new file mode 100644 index 0000000..84a416d --- /dev/null +++ b/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Contents.json @@ -0,0 +1,56 @@ +{ + "images": [ + { + "idiom": "universal", + "filename": "Default@1x~universal~anyany.png", + "scale": "1x" + }, + { + "idiom": "universal", + "filename": "Default@2x~universal~anyany.png", + "scale": "2x" + }, + { + "idiom": "universal", + "filename": "Default@3x~universal~anyany.png", + "scale": "3x" + }, + { + "appearances": [ + { + "appearance": "luminosity", + "value": "dark" + } + ], + "idiom": "universal", + "scale": "1x", + "filename": "Default@1x~universal~anyany-dark.png" + }, + { + "appearances": [ + { + "appearance": "luminosity", + "value": "dark" + } + ], + "idiom": "universal", + "scale": "2x", + "filename": "Default@2x~universal~anyany-dark.png" + }, + { + "appearances": [ + { + "appearance": "luminosity", + "value": "dark" + } + ], + "idiom": "universal", + "scale": "3x", + "filename": "Default@3x~universal~anyany-dark.png" + } + ], + "info": { + "version": 1, + "author": "xcode" + } +} \ No newline at end of file diff --git a/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Default@1x~universal~anyany-dark.png b/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Default@1x~universal~anyany-dark.png new file mode 100644 index 0000000..b6b20eb Binary files /dev/null and b/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Default@1x~universal~anyany-dark.png differ diff --git a/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Default@1x~universal~anyany.png b/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Default@1x~universal~anyany.png new file mode 100644 index 0000000..b6b20eb Binary files /dev/null and b/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Default@1x~universal~anyany.png differ diff --git a/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Default@2x~universal~anyany-dark.png b/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Default@2x~universal~anyany-dark.png new file mode 100644 index 0000000..b6b20eb Binary files /dev/null and b/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Default@2x~universal~anyany-dark.png differ diff --git a/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Default@2x~universal~anyany.png b/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Default@2x~universal~anyany.png new file mode 100644 index 0000000..b6b20eb Binary files /dev/null and b/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Default@2x~universal~anyany.png differ diff --git a/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Default@3x~universal~anyany-dark.png b/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Default@3x~universal~anyany-dark.png new file mode 100644 index 0000000..b6b20eb Binary files /dev/null and b/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Default@3x~universal~anyany-dark.png differ diff --git a/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Default@3x~universal~anyany.png b/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Default@3x~universal~anyany.png new file mode 100644 index 0000000..b6b20eb Binary files /dev/null and b/mobile/ios/App/App/Assets.xcassets/Splash.imageset/Default@3x~universal~anyany.png differ diff --git a/mobile/ios/App/App/Assets.xcassets/Splash.imageset/splash-2732x2732-1.png b/mobile/ios/App/App/Assets.xcassets/Splash.imageset/splash-2732x2732-1.png new file mode 100644 index 0000000..33ea6c9 Binary files /dev/null and b/mobile/ios/App/App/Assets.xcassets/Splash.imageset/splash-2732x2732-1.png differ diff --git a/mobile/ios/App/App/Assets.xcassets/Splash.imageset/splash-2732x2732-2.png b/mobile/ios/App/App/Assets.xcassets/Splash.imageset/splash-2732x2732-2.png new file mode 100644 index 0000000..33ea6c9 Binary files /dev/null and b/mobile/ios/App/App/Assets.xcassets/Splash.imageset/splash-2732x2732-2.png differ diff --git a/mobile/ios/App/App/Assets.xcassets/Splash.imageset/splash-2732x2732.png b/mobile/ios/App/App/Assets.xcassets/Splash.imageset/splash-2732x2732.png new file mode 100644 index 0000000..33ea6c9 Binary files /dev/null and b/mobile/ios/App/App/Assets.xcassets/Splash.imageset/splash-2732x2732.png differ diff --git a/mobile/ios/App/App/Base.lproj/LaunchScreen.storyboard b/mobile/ios/App/App/Base.lproj/LaunchScreen.storyboard new file mode 100644 index 0000000..e7ae5d7 --- /dev/null +++ b/mobile/ios/App/App/Base.lproj/LaunchScreen.storyboard @@ -0,0 +1,32 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/mobile/ios/App/App/Base.lproj/Main.storyboard b/mobile/ios/App/App/Base.lproj/Main.storyboard new file mode 100644 index 0000000..b44df7b --- /dev/null +++ b/mobile/ios/App/App/Base.lproj/Main.storyboard @@ -0,0 +1,19 @@ + + + + + + + + + + + + + + + + + + + diff --git a/mobile/ios/App/App/Info.plist b/mobile/ios/App/App/Info.plist new file mode 100644 index 0000000..893200e --- /dev/null +++ b/mobile/ios/App/App/Info.plist @@ -0,0 +1,83 @@ + + + + + CAPACITOR_DEBUG + $(CAPACITOR_DEBUG) + CFBundleDevelopmentRegion + en + CFBundleDisplayName + Waters Checklist + CFBundleExecutable + $(EXECUTABLE_NAME) + CFBundleIdentifier + $(PRODUCT_BUNDLE_IDENTIFIER) + CFBundleInfoDictionaryVersion + 6.0 + CFBundleName + $(PRODUCT_NAME) + CFBundlePackageType + APPL + CFBundleShortVersionString + $(MARKETING_VERSION) + CFBundleVersion + $(CURRENT_PROJECT_VERSION) + + NSCameraUsageDescription + Take photos of equipment and setup issues to attach to a checklist item. + + + ITSAppUsesNonExemptEncryption + + + LSRequiresIPhoneOS + + UIApplicationSceneManifest + + UIApplicationSupportsMultipleScenes + + UISceneConfigurations + + UIWindowSceneSessionRoleApplication + + + UISceneConfigurationName + Default Configuration + UISceneDelegateClassName + $(PRODUCT_MODULE_NAME).SceneDelegate + UISceneStoryboardFile + Main + + + + + UILaunchStoryboardName + LaunchScreen + UIMainStoryboardFile + Main + UIRequiredDeviceCapabilities + + armv7 + + UISupportedInterfaceOrientations + + UIInterfaceOrientationPortrait + UIInterfaceOrientationLandscapeLeft + UIInterfaceOrientationLandscapeRight + + UISupportedInterfaceOrientations~ipad + + UIInterfaceOrientationPortrait + UIInterfaceOrientationPortraitUpsideDown + UIInterfaceOrientationLandscapeLeft + UIInterfaceOrientationLandscapeRight + + UIViewControllerBasedStatusBarAppearance + + + diff --git a/mobile/ios/App/App/SceneDelegate.swift b/mobile/ios/App/App/SceneDelegate.swift new file mode 100644 index 0000000..f352e1e --- /dev/null +++ b/mobile/ios/App/App/SceneDelegate.swift @@ -0,0 +1,24 @@ +import UIKit +import Capacitor + +class SceneDelegate: UIResponder, UIWindowSceneDelegate { + var window: UIWindow? + + func scene(_ scene: UIScene, willConnectTo session: UISceneSession, options connectionOptions: UIScene.ConnectionOptions) { + guard let windowScene = scene as? UIWindowScene else { return } + + window = UIWindow(windowScene: windowScene) + window?.rootViewController = CAPBridgeViewController() + window?.makeKeyAndVisible() + + SceneDelegateProxy.shared.scene(scene, willConnectTo: session, options: connectionOptions) + } + + func scene(_ scene: UIScene, openURLContexts URLContexts: Set) { + SceneDelegateProxy.shared.scene(scene, openURLContexts: URLContexts) + } + + func scene(_ scene: UIScene, continue userActivity: NSUserActivity) { + SceneDelegateProxy.shared.scene(scene, continue: userActivity) + } +} diff --git a/mobile/ios/App/CapApp-SPM/.gitignore b/mobile/ios/App/CapApp-SPM/.gitignore new file mode 100644 index 0000000..3b29812 --- /dev/null +++ b/mobile/ios/App/CapApp-SPM/.gitignore @@ -0,0 +1,9 @@ +.DS_Store +/.build +/Packages +/*.xcodeproj +xcuserdata/ +DerivedData/ +.swiftpm/config/registries.json +.swiftpm/xcode/package.xcworkspace/contents.xcworkspacedata +.netrc diff --git a/mobile/ios/App/CapApp-SPM/Package.swift b/mobile/ios/App/CapApp-SPM/Package.swift new file mode 100644 index 0000000..547f254 --- /dev/null +++ b/mobile/ios/App/CapApp-SPM/Package.swift @@ -0,0 +1,39 @@ +// swift-tools-version: 5.9 +import PackageDescription + +// DO NOT MODIFY THIS FILE - managed by Capacitor CLI commands +let package = Package( + name: "CapApp-SPM", + platforms: [.iOS(.v15)], + products: [ + .library( + name: "CapApp-SPM", + targets: ["CapApp-SPM"]) + ], + dependencies: [ + .package(url: "https://github.com/ionic-team/capacitor-swift-pm.git", exact: "8.5.1"), + .package(name: "CapacitorApp", path: "../../../node_modules/@capacitor/app"), + .package(name: "CapacitorBrowser", path: "../../../node_modules/@capacitor/browser"), + .package(name: "CapacitorHaptics", path: "../../../node_modules/@capacitor/haptics"), + .package(name: "CapacitorKeyboard", path: "../../../node_modules/@capacitor/keyboard"), + .package(name: "CapacitorNetwork", path: "../../../node_modules/@capacitor/network"), + .package(name: "CapacitorSplashScreen", path: "../../../node_modules/@capacitor/splash-screen"), + .package(name: "CapacitorStatusBar", path: "../../../node_modules/@capacitor/status-bar") + ], + targets: [ + .target( + name: "CapApp-SPM", + dependencies: [ + .product(name: "Capacitor", package: "capacitor-swift-pm"), + .product(name: "Cordova", package: "capacitor-swift-pm"), + .product(name: "CapacitorApp", package: "CapacitorApp"), + .product(name: "CapacitorBrowser", package: "CapacitorBrowser"), + .product(name: "CapacitorHaptics", package: "CapacitorHaptics"), + .product(name: "CapacitorKeyboard", package: "CapacitorKeyboard"), + .product(name: "CapacitorNetwork", package: "CapacitorNetwork"), + .product(name: "CapacitorSplashScreen", package: "CapacitorSplashScreen"), + .product(name: "CapacitorStatusBar", package: "CapacitorStatusBar") + ] + ) + ] +) diff --git a/mobile/ios/App/CapApp-SPM/README.md b/mobile/ios/App/CapApp-SPM/README.md new file mode 100644 index 0000000..03964db --- /dev/null +++ b/mobile/ios/App/CapApp-SPM/README.md @@ -0,0 +1,5 @@ +# CapApp-SPM + +This package is used to host SPM dependencies for your Capacitor project + +Do not modify the contents of it or there may be unintended consequences. diff --git a/mobile/ios/App/CapApp-SPM/Sources/CapApp-SPM/CapApp-SPM.swift b/mobile/ios/App/CapApp-SPM/Sources/CapApp-SPM/CapApp-SPM.swift new file mode 100644 index 0000000..945afec --- /dev/null +++ b/mobile/ios/App/CapApp-SPM/Sources/CapApp-SPM/CapApp-SPM.swift @@ -0,0 +1 @@ +public let isCapacitorApp = true diff --git a/mobile/ios/debug.xcconfig b/mobile/ios/debug.xcconfig new file mode 100644 index 0000000..53ce18d --- /dev/null +++ b/mobile/ios/debug.xcconfig @@ -0,0 +1 @@ +CAPACITOR_DEBUG = true diff --git a/mobile/package-lock.json b/mobile/package-lock.json new file mode 100644 index 0000000..696d0f5 --- /dev/null +++ b/mobile/package-lock.json @@ -0,0 +1,3962 @@ +{ + "name": "recurring-checklist-mobile", + "version": "1.0.0", + "lockfileVersion": 3, + "requires": true, + "packages": { + "": { + "name": "recurring-checklist-mobile", + "version": "1.0.0", + "dependencies": { + "@capacitor/android": "8.5.1", + "@capacitor/app": "8.1.1", + "@capacitor/browser": "8.0.4", + "@capacitor/core": "8.5.1", + "@capacitor/haptics": "8.0.2", + "@capacitor/ios": "8.5.1", + "@capacitor/keyboard": "8.0.5", + "@capacitor/network": "8.0.1", + "@capacitor/splash-screen": "8.0.2", + "@capacitor/status-bar": "8.0.3" + }, + "devDependencies": { + "@capacitor/assets": "3.0.5", + "@capacitor/cli": "8.5.1", + "@googleapis/androidpublisher": "^42.0.0", + "esbuild": "0.25.10" + } + }, + "node_modules/@capacitor/android": { + "version": "8.5.1", + "resolved": "https://registry.npmjs.org/@capacitor/android/-/android-8.5.1.tgz", + "integrity": "sha512-o8fUIPDSEASeXHHrDz26WU7OlyiRb+QqtI9KFdnLS1jUL77o5iGrvegibaZX8rWpiCyDJ6jlUhhhHlfeq3ou9A==", + "license": "MIT", + "peerDependencies": { + "@capacitor/core": "^8.5.0" + } + }, + "node_modules/@capacitor/app": { + "version": "8.1.1", + "resolved": "https://registry.npmjs.org/@capacitor/app/-/app-8.1.1.tgz", + "integrity": "sha512-xM2ZTX5jK60tFtmjsmJv+Cdj1Qsb6NcavkqmdEnCPQBeya9oKhamZJxYOnQNj1ZvcJM7sWfG6BEtSLx42pisbA==", + "license": "MIT", + "peerDependencies": { + "@capacitor/core": ">=8.0.0" + } + }, + "node_modules/@capacitor/assets": { + "version": "3.0.5", + "resolved": "https://registry.npmjs.org/@capacitor/assets/-/assets-3.0.5.tgz", + "integrity": "sha512-ohz/OUq61Y1Fc6aVSt0uDrUdeOA7oTH4pkWDbv/8I3UrPjH7oPkzYhShuDRUjekNp9RBi198VSFdt0CetpEOzw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@capacitor/cli": "^5.3.0", + "@ionic/utils-array": "2.1.6", + "@ionic/utils-fs": "3.1.7", + "@trapezedev/project": "^7.0.10", + "commander": "8.3.0", + "debug": "4.3.4", + "fs-extra": "10.1.0", + "node-fetch": "2.7.0", + "node-html-parser": "5.4.2", + "sharp": "0.32.6", + "tslib": "2.6.2", + "yargs": "17.7.2" + }, + "bin": { + "capacitor-assets": "bin/capacitor-assets" + }, + "engines": { + "node": ">=10.3.0" + } + }, + "node_modules/@capacitor/assets/node_modules/@capacitor/cli": { + "version": "5.7.8", + "resolved": "https://registry.npmjs.org/@capacitor/cli/-/cli-5.7.8.tgz", + "integrity": "sha512-qN8LDlREMhrYhOvVXahoJVNkP8LP55/YPRJrzTAFrMqlNJC18L3CzgWYIblFPnuwfbH/RxbfoZT/ydkwgVpMrw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@ionic/cli-framework-output": "^2.2.5", + "@ionic/utils-fs": "^3.1.6", + "@ionic/utils-subprocess": "^2.1.11", + "@ionic/utils-terminal": "^2.3.3", + "commander": "^9.3.0", + "debug": "^4.3.4", + "env-paths": "^2.2.0", + "kleur": "^4.1.4", + "native-run": "^2.0.0", + "open": "^8.4.0", + "plist": "^3.0.5", + "prompts": "^2.4.2", + "rimraf": "^4.4.1", + "semver": "^7.3.7", + "tar": "^6.1.11", + "tslib": "^2.4.0", + "xml2js": "^0.5.0" + }, + "bin": { + "cap": "bin/capacitor", + "capacitor": "bin/capacitor" + }, + "engines": { + "node": ">=16.0.0" + } + }, + "node_modules/@capacitor/assets/node_modules/@capacitor/cli/node_modules/commander": { + "version": "9.5.0", + "resolved": "https://registry.npmjs.org/commander/-/commander-9.5.0.tgz", + "integrity": "sha512-KRs7WVDKg86PWiuAqhDrAQnTXZKraVcCc6vFdL14qrZ/DcWwuRo7VoiYXalXO7S5GKpqYiVEwCbgFDfxNHKJBQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": "^12.20.0 || >=14" + } + }, + "node_modules/@capacitor/assets/node_modules/@ionic/utils-process": { + "version": "2.1.11", + "resolved": "https://registry.npmjs.org/@ionic/utils-process/-/utils-process-2.1.11.tgz", + "integrity": "sha512-Uavxn+x8j3rDlZEk1X7YnaN6wCgbCwYQOeIjv/m94i1dzslqWhqIHEqxEyeE8HsT5Negboagg7GtQiABy+BLbA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@ionic/utils-object": "2.1.6", + "@ionic/utils-terminal": "2.3.4", + "debug": "^4.0.0", + "signal-exit": "^3.0.3", + "tree-kill": "^1.2.2", + "tslib": "^2.0.1" + }, + "engines": { + "node": ">=16.0.0" + } + }, + "node_modules/@capacitor/assets/node_modules/@ionic/utils-stream": { + "version": "3.1.6", + "resolved": "https://registry.npmjs.org/@ionic/utils-stream/-/utils-stream-3.1.6.tgz", + "integrity": "sha512-4+Kitey1lTA1yGtnigeYNhV/0tggI3lWBMjC7tBs1K9GXa/q7q4CtOISppdh8QgtOhrhAXS2Igp8rbko/Cj+lA==", + "dev": true, + "license": "MIT", + "dependencies": { + "debug": "^4.0.0", + "tslib": "^2.0.1" + }, + "engines": { + "node": ">=16.0.0" + } + }, + "node_modules/@capacitor/assets/node_modules/@ionic/utils-subprocess": { + "version": "2.1.14", + "resolved": "https://registry.npmjs.org/@ionic/utils-subprocess/-/utils-subprocess-2.1.14.tgz", + "integrity": "sha512-nGYvyGVjU0kjPUcSRFr4ROTraT3w/7r502f5QJEsMRKTqa4eEzCshtwRk+/mpASm0kgBN5rrjYA5A/OZg8ahqg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@ionic/utils-array": "2.1.6", + "@ionic/utils-fs": "3.1.7", + "@ionic/utils-process": "2.1.11", + "@ionic/utils-stream": "3.1.6", + "@ionic/utils-terminal": "2.3.4", + "cross-spawn": "^7.0.3", + "debug": "^4.0.0", + "tslib": "^2.0.1" + }, + "engines": { + "node": ">=16.0.0" + } + }, + "node_modules/@capacitor/assets/node_modules/@ionic/utils-terminal": { + "version": "2.3.4", + "resolved": "https://registry.npmjs.org/@ionic/utils-terminal/-/utils-terminal-2.3.4.tgz", + "integrity": "sha512-cEiMFl3jklE0sW60r8JHH3ijFTwh/jkdEKWbylSyExQwZ8pPuwoXz7gpkWoJRLuoRHHSvg+wzNYyPJazIHfoJA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/slice-ansi": "^4.0.0", + "debug": "^4.0.0", + "signal-exit": "^3.0.3", + "slice-ansi": "^4.0.0", + "string-width": "^4.1.0", + "strip-ansi": "^6.0.0", + "tslib": "^2.0.1", + "untildify": "^4.0.0", + "wrap-ansi": "^7.0.0" + }, + "engines": { + "node": ">=16.0.0" + } + }, + "node_modules/@capacitor/assets/node_modules/balanced-match": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==", + "dev": true, + "license": "MIT" + }, + "node_modules/@capacitor/assets/node_modules/brace-expansion": { + "version": "2.1.4", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.4.tgz", + "integrity": "sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==", + "dev": true, + "license": "MIT", + "dependencies": { + "balanced-match": "^1.0.0" + } + }, + "node_modules/@capacitor/assets/node_modules/chownr": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz", + "integrity": "sha512-bIomtDF5KGpdogkLd9VspvFzk9KfpyyGlS8YFVZl7TGPBHL5snIOnxeshwVgPteQ9b4Eydl+pVbIyE1DcvCWgQ==", + "dev": true, + "license": "ISC", + "engines": { + "node": ">=10" + } + }, + "node_modules/@capacitor/assets/node_modules/glob": { + "version": "9.3.5", + "resolved": "https://registry.npmjs.org/glob/-/glob-9.3.5.tgz", + "integrity": "sha512-e1LleDykUz2Iu+MTYdkSsuWX8lvAjAcs0Xef0lNIu0S2wOAzuTxCJtcd9S3cijlwYF18EsU3rzb8jPVobxDh9Q==", + "deprecated": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me", + "dev": true, + "license": "ISC", + "dependencies": { + "fs.realpath": "^1.0.0", + "minimatch": "^8.0.2", + "minipass": "^4.2.4", + "path-scurry": "^1.6.1" + }, + "engines": { + "node": ">=16 || 14 >=14.17" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/@capacitor/assets/node_modules/lru-cache": { + "version": "10.4.3", + "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz", + "integrity": "sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/@capacitor/assets/node_modules/minimatch": { + "version": "8.0.7", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-8.0.7.tgz", + "integrity": "sha512-V+1uQNdzybxa14e/p00HZnQNNcTjnRJjDxg2V8wtkjFctq4M7hXFws4oekyTP0Jebeq7QYtpFyOeBAjc88zvYg==", + "dev": true, + "license": "ISC", + "dependencies": { + "brace-expansion": "^2.0.1" + }, + "engines": { + "node": ">=16 || 14 >=14.17" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/@capacitor/assets/node_modules/minipass": { + "version": "4.2.8", + "resolved": "https://registry.npmjs.org/minipass/-/minipass-4.2.8.tgz", + "integrity": "sha512-fNzuVyifolSLFL4NzpF+wEF4qrgqaaKX0haXPQEdQ7NKAN+WecoKMHV09YcuL/DHxrUsYQOK3MiuDf7Ip2OXfQ==", + "dev": true, + "license": "ISC", + "engines": { + "node": ">=8" + } + }, + "node_modules/@capacitor/assets/node_modules/minizlib": { + "version": "2.1.2", + "resolved": "https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz", + "integrity": "sha512-bAxsR8BVfj60DWXHE3u30oHzfl4G7khkSuPW+qvpd7jFRHm7dLxOjUk1EHACJ/hxLY8phGJ0YhYHZo7jil7Qdg==", + "dev": true, + "license": "MIT", + "dependencies": { + "minipass": "^3.0.0", + "yallist": "^4.0.0" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/@capacitor/assets/node_modules/minizlib/node_modules/minipass": { + "version": "3.3.6", + "resolved": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "integrity": "sha512-DxiNidxSEK+tHG6zOIklvNOwm3hvCrbUrdtzY74U6HKTJxvIDfOUL5W5P2Ghd3DTkhhKPYGqeNUIh5qcM4YBfw==", + "dev": true, + "license": "ISC", + "dependencies": { + "yallist": "^4.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/@capacitor/assets/node_modules/path-scurry": { + "version": "1.11.1", + "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-1.11.1.tgz", + "integrity": "sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==", + "dev": true, + "license": "BlueOak-1.0.0", + "dependencies": { + "lru-cache": "^10.2.0", + "minipass": "^5.0.0 || ^6.0.2 || ^7.0.0" + }, + "engines": { + "node": ">=16 || 14 >=14.18" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/@capacitor/assets/node_modules/path-scurry/node_modules/minipass": { + "version": "7.1.3", + "resolved": "https://registry.npmjs.org/minipass/-/minipass-7.1.3.tgz", + "integrity": "sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==", + "dev": true, + "license": "BlueOak-1.0.0", + "engines": { + "node": ">=16 || 14 >=14.17" + } + }, + "node_modules/@capacitor/assets/node_modules/rimraf": { + "version": "4.4.1", + "resolved": "https://registry.npmjs.org/rimraf/-/rimraf-4.4.1.tgz", + "integrity": "sha512-Gk8NlF062+T9CqNGn6h4tls3k6T1+/nXdOcSZVikNVtlRdYpA7wRJJMoXmuvOnLW844rPjdQ7JgXCYM6PPC/og==", + "dev": true, + "license": "ISC", + "dependencies": { + "glob": "^9.2.0" + }, + "bin": { + "rimraf": "dist/cjs/src/bin.js" + }, + "engines": { + "node": ">=14" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/@capacitor/assets/node_modules/tar": { + "version": "6.2.1", + "resolved": "https://registry.npmjs.org/tar/-/tar-6.2.1.tgz", + "integrity": "sha512-DZ4yORTwrbTj/7MZYq2w+/ZFdI6OZ/f9SFHR+71gIVUZhOQPHzVCLpvRnPgyaMpfWxxk/4ONva3GQSyNIKRv6A==", + "deprecated": "Old versions of tar are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me", + "dev": true, + "license": "ISC", + "dependencies": { + "chownr": "^2.0.0", + "fs-minipass": "^2.0.0", + "minipass": "^5.0.0", + "minizlib": "^2.1.1", + "mkdirp": "^1.0.3", + "yallist": "^4.0.0" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/@capacitor/assets/node_modules/tar/node_modules/minipass": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz", + "integrity": "sha512-3FnjYuehv9k6ovOEbyOswadCDPX1piCfhV8ncmYtHOjuPwylVWsghTLo7rabjC3Rx5xD4HDx8Wm1xnMF7S5qFQ==", + "dev": true, + "license": "ISC", + "engines": { + "node": ">=8" + } + }, + "node_modules/@capacitor/assets/node_modules/xml2js": { + "version": "0.5.0", + "resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.5.0.tgz", + "integrity": "sha512-drPFnkQJik/O+uPKpqSgr22mpuFHqKdbS835iAQrUC73L2F5WkboIRd63ai/2Yg6I1jzifPFKH2NTK+cfglkIA==", + "dev": true, + "license": "MIT", + "dependencies": { + "sax": ">=0.6.0", + "xmlbuilder": "~11.0.0" + }, + "engines": { + "node": ">=4.0.0" + } + }, + "node_modules/@capacitor/assets/node_modules/xmlbuilder": { + "version": "11.0.1", + "resolved": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-11.0.1.tgz", + "integrity": "sha512-fDlsI/kFEx7gLvbecc0/ohLG50fugQp8ryHzMTuW9vSa1GJ0XYWKnhsUx7oie3G98+r56aTQIUB4kht42R3JvA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=4.0" + } + }, + "node_modules/@capacitor/assets/node_modules/yallist": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz", + "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==", + "dev": true, + "license": "ISC" + }, + "node_modules/@capacitor/browser": { + "version": "8.0.4", + "resolved": "https://registry.npmjs.org/@capacitor/browser/-/browser-8.0.4.tgz", + "integrity": "sha512-ORZ4u/y+7aMuu6yVuk6SP529fUZyqcbnuHB1q5McpA3o2SYfVoi28iB8rsQjI2ad1qlKJd29ZUuGtspXLBDlWg==", + "license": "MIT", + "peerDependencies": { + "@capacitor/core": ">=8.0.0" + } + }, + "node_modules/@capacitor/cli": { + "version": "8.5.1", + "resolved": "https://registry.npmjs.org/@capacitor/cli/-/cli-8.5.1.tgz", + "integrity": "sha512-LKQFSyLg1QbTN6CGDoFqeRtAlj8C3c9OymP8OuhwlmkbSQwh9i1HQjwUCaNyVem2XkY9rv0v2UOfVlgoxH5pAw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@ionic/cli-framework-output": "^2.2.8", + "@ionic/utils-subprocess": "^3.0.1", + "@ionic/utils-terminal": "^2.3.5", + "commander": "^12.1.0", + "debug": "^4.4.0", + "env-paths": "^2.2.0", + "fs-extra": "^11.2.0", + "kleur": "^4.1.5", + "native-run": "^2.0.3", + "open": "^8.4.0", + "plist": "^3.1.0", + "prompts": "^2.4.2", + "rimraf": "^6.0.1", + "semver": "^7.6.3", + "tar": "^7.5.3", + "tslib": "^2.8.1", + "xcode": "^3.0.1", + "xml2js": "^0.6.2" + }, + "bin": { + "cap": "bin/capacitor", + "capacitor": "bin/capacitor" + }, + "engines": { + "node": ">=22.0.0" + } + }, + "node_modules/@capacitor/cli/node_modules/commander": { + "version": "12.1.0", + "resolved": "https://registry.npmjs.org/commander/-/commander-12.1.0.tgz", + "integrity": "sha512-Vw8qHK3bZM9y/P10u3Vib8o/DdkvA2OtPtZvD871QKjy74Wj1WSKFILMPRPSdUSx5RFK1arlJzEtA4PkFgnbuA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=18" + } + }, + "node_modules/@capacitor/cli/node_modules/debug": { + "version": "4.4.3", + "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz", + "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==", + "dev": true, + "license": "MIT", + "dependencies": { + "ms": "^2.1.3" + }, + "engines": { + "node": ">=6.0" + }, + "peerDependenciesMeta": { + "supports-color": { + "optional": true + } + } + }, + "node_modules/@capacitor/cli/node_modules/fs-extra": { + "version": "11.4.0", + "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-11.4.0.tgz", + "integrity": "sha512-EQsFzMUJkCKGr1ePqlYADkIUmHW1s3ZXr5Yqy6wbGrfUCphpl2maM/kyOIRA2HpP3AaFQTZXD4ldjek+nccddA==", + "dev": true, + "license": "MIT", + "dependencies": { + "graceful-fs": "^4.2.0", + "jsonfile": "^6.0.1", + "universalify": "^2.0.0" + }, + "engines": { + "node": ">=14.14" + } + }, + "node_modules/@capacitor/cli/node_modules/ms": { + "version": "2.1.3", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz", + "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==", + "dev": true, + "license": "MIT" + }, + "node_modules/@capacitor/cli/node_modules/tslib": { + "version": "2.8.1", + "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz", + "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==", + "dev": true, + "license": "0BSD" + }, + "node_modules/@capacitor/core": { + "version": "8.5.1", + "resolved": "https://registry.npmjs.org/@capacitor/core/-/core-8.5.1.tgz", + "integrity": "sha512-IOQ7ynG1qgrJ/RLuCO3WgyRGmkmmG/cdStRR4ftU2dWEN1FdtLrnI/XpZmZuUsOEHEnzBRJY/PmRH8eTLiXfhA==", + "license": "MIT", + "dependencies": { + "tslib": "^2.1.0" + } + }, + "node_modules/@capacitor/haptics": { + "version": "8.0.2", + "resolved": "https://registry.npmjs.org/@capacitor/haptics/-/haptics-8.0.2.tgz", + "integrity": "sha512-c2hZzRR5Fk1tbTvhG1jhh2XBAf3EhnIerMIb2sl7Mt41Gxx1fhBJFDa0/BI1IbY4loVepyyuqNC9820/GZuoWQ==", + "license": "MIT", + "peerDependencies": { + "@capacitor/core": ">=8.0.0" + } + }, + "node_modules/@capacitor/ios": { + "version": "8.5.1", + "resolved": "https://registry.npmjs.org/@capacitor/ios/-/ios-8.5.1.tgz", + "integrity": "sha512-0EVqwCYf3RUp2JAjUGZ04xmG6dSpIsPmPacI9zKxn6mu9RSiHhmFF230ghe00HrkyB6ig6SfNdoADvVODxYhlQ==", + "license": "MIT", + "peerDependencies": { + "@capacitor/core": "^8.5.0" + } + }, + "node_modules/@capacitor/keyboard": { + "version": "8.0.5", + "resolved": "https://registry.npmjs.org/@capacitor/keyboard/-/keyboard-8.0.5.tgz", + "integrity": "sha512-oFXygC4eKYA5l2MdpTR06L2M/4x6e2SLD5yS1T9+UBDKTkzyvhWKEhbYLUaTIBPpLKqlfGudJw1X73S1H9eUzQ==", + "license": "MIT", + "peerDependencies": { + "@capacitor/core": ">=8.0.0" + } + }, + "node_modules/@capacitor/network": { + "version": "8.0.1", + "resolved": "https://registry.npmjs.org/@capacitor/network/-/network-8.0.1.tgz", + "integrity": "sha512-9xK/FHFmzKGanB6BdoSZOzXk8vF0OFVQSQ4PAsIrzAzLuXHryO317qy8dcHVpgxYeuZq2noI0My9z1DvVDi/9w==", + "license": "MIT", + "peerDependencies": { + "@capacitor/core": ">=8.0.0" + } + }, + "node_modules/@capacitor/splash-screen": { + "version": "8.0.2", + "resolved": "https://registry.npmjs.org/@capacitor/splash-screen/-/splash-screen-8.0.2.tgz", + "integrity": "sha512-0C6rYScr13WfAE9nPl4ScOQynmjFv9NT3Th+RZkD4ezYHmER6mcl1/lDYsv7jg3Rj3FOvLrlTlmNkUrr83kZzQ==", + "license": "MIT", + "peerDependencies": { + "@capacitor/core": ">=8.0.0" + } + }, + "node_modules/@capacitor/status-bar": { + "version": "8.0.3", + "resolved": "https://registry.npmjs.org/@capacitor/status-bar/-/status-bar-8.0.3.tgz", + "integrity": "sha512-csSpfNeN49Hx9JaQBSJEIiEbOLtXg3kcc2IpScq2fu5L520h3AWEvsxoH8Srk1jxfRKepaJ4S4sqSC3foI4AgA==", + "license": "MIT", + "peerDependencies": { + "@capacitor/core": ">=8.0.0" + } + }, + "node_modules/@esbuild/aix-ppc64": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.25.10.tgz", + "integrity": "sha512-0NFWnA+7l41irNuaSVlLfgNT12caWJVLzp5eAVhZ0z1qpxbockccEt3s+149rE64VUI3Ml2zt8Nv5JVc4QXTsw==", + "cpu": [ + "ppc64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "aix" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/android-arm": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.25.10.tgz", + "integrity": "sha512-dQAxF1dW1C3zpeCDc5KqIYuZ1tgAdRXNoZP7vkBIRtKZPYe2xVr/d3SkirklCHudW1B45tGiUlz2pUWDfbDD4w==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/android-arm64": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.25.10.tgz", + "integrity": "sha512-LSQa7eDahypv/VO6WKohZGPSJDq5OVOo3UoFR1E4t4Gj1W7zEQMUhI+lo81H+DtB+kP+tDgBp+M4oNCwp6kffg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/android-x64": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.25.10.tgz", + "integrity": "sha512-MiC9CWdPrfhibcXwr39p9ha1x0lZJ9KaVfvzA0Wxwz9ETX4v5CHfF09bx935nHlhi+MxhA63dKRRQLiVgSUtEg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/darwin-arm64": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.25.10.tgz", + "integrity": "sha512-JC74bdXcQEpW9KkV326WpZZjLguSZ3DfS8wrrvPMHgQOIEIG/sPXEN/V8IssoJhbefLRcRqw6RQH2NnpdprtMA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/darwin-x64": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.25.10.tgz", + "integrity": "sha512-tguWg1olF6DGqzws97pKZ8G2L7Ig1vjDmGTwcTuYHbuU6TTjJe5FXbgs5C1BBzHbJ2bo1m3WkQDbWO2PvamRcg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/freebsd-arm64": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.25.10.tgz", + "integrity": "sha512-3ZioSQSg1HT2N05YxeJWYR+Libe3bREVSdWhEEgExWaDtyFbbXWb49QgPvFH8u03vUPX10JhJPcz7s9t9+boWg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "freebsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/freebsd-x64": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.25.10.tgz", + "integrity": "sha512-LLgJfHJk014Aa4anGDbh8bmI5Lk+QidDmGzuC2D+vP7mv/GeSN+H39zOf7pN5N8p059FcOfs2bVlrRr4SK9WxA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "freebsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-arm": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.25.10.tgz", + "integrity": "sha512-oR31GtBTFYCqEBALI9r6WxoU/ZofZl962pouZRTEYECvNF/dtXKku8YXcJkhgK/beU+zedXfIzHijSRapJY3vg==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-arm64": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.25.10.tgz", + "integrity": "sha512-5luJWN6YKBsawd5f9i4+c+geYiVEw20FVW5x0v1kEMWNq8UctFjDiMATBxLvmmHA4bf7F6hTRaJgtghFr9iziQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-ia32": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.25.10.tgz", + "integrity": "sha512-NrSCx2Kim3EnnWgS4Txn0QGt0Xipoumb6z6sUtl5bOEZIVKhzfyp/Lyw4C1DIYvzeW/5mWYPBFJU3a/8Yr75DQ==", + "cpu": [ + "ia32" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-loong64": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.25.10.tgz", + "integrity": "sha512-xoSphrd4AZda8+rUDDfD9J6FUMjrkTz8itpTITM4/xgerAZZcFW7Dv+sun7333IfKxGG8gAq+3NbfEMJfiY+Eg==", + "cpu": [ + "loong64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-mips64el": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.25.10.tgz", + "integrity": "sha512-ab6eiuCwoMmYDyTnyptoKkVS3k8fy/1Uvq7Dj5czXI6DF2GqD2ToInBI0SHOp5/X1BdZ26RKc5+qjQNGRBelRA==", + "cpu": [ + "mips64el" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-ppc64": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.25.10.tgz", + "integrity": "sha512-NLinzzOgZQsGpsTkEbdJTCanwA5/wozN9dSgEl12haXJBzMTpssebuXR42bthOF3z7zXFWH1AmvWunUCkBE4EA==", + "cpu": [ + "ppc64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-riscv64": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.25.10.tgz", + "integrity": "sha512-FE557XdZDrtX8NMIeA8LBJX3dC2M8VGXwfrQWU7LB5SLOajfJIxmSdyL/gU1m64Zs9CBKvm4UAuBp5aJ8OgnrA==", + "cpu": [ + "riscv64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-s390x": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.25.10.tgz", + "integrity": "sha512-3BBSbgzuB9ajLoVZk0mGu+EHlBwkusRmeNYdqmznmMc9zGASFjSsxgkNsqmXugpPk00gJ0JNKh/97nxmjctdew==", + "cpu": [ + "s390x" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-x64": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.25.10.tgz", + "integrity": "sha512-QSX81KhFoZGwenVyPoberggdW1nrQZSvfVDAIUXr3WqLRZGZqWk/P4T8p2SP+de2Sr5HPcvjhcJzEiulKgnxtA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/netbsd-arm64": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.25.10.tgz", + "integrity": "sha512-AKQM3gfYfSW8XRk8DdMCzaLUFB15dTrZfnX8WXQoOUpUBQ+NaAFCP1kPS/ykbbGYz7rxn0WS48/81l9hFl3u4A==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "netbsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/netbsd-x64": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.25.10.tgz", + "integrity": "sha512-7RTytDPGU6fek/hWuN9qQpeGPBZFfB4zZgcz2VK2Z5VpdUxEI8JKYsg3JfO0n/Z1E/6l05n0unDCNc4HnhQGig==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "netbsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/openbsd-arm64": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.25.10.tgz", + "integrity": "sha512-5Se0VM9Wtq797YFn+dLimf2Zx6McttsH2olUBsDml+lm0GOCRVebRWUvDtkY4BWYv/3NgzS8b/UM3jQNh5hYyw==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openbsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/openbsd-x64": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.25.10.tgz", + "integrity": "sha512-XkA4frq1TLj4bEMB+2HnI0+4RnjbuGZfet2gs/LNs5Hc7D89ZQBHQ0gL2ND6Lzu1+QVkjp3x1gIcPKzRNP8bXw==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openbsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/openharmony-arm64": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.25.10.tgz", + "integrity": "sha512-AVTSBhTX8Y/Fz6OmIVBip9tJzZEUcY8WLh7I59+upa5/GPhh2/aM6bvOMQySspnCCHvFi79kMtdJS1w0DXAeag==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openharmony" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/sunos-x64": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.25.10.tgz", + "integrity": "sha512-fswk3XT0Uf2pGJmOpDB7yknqhVkJQkAQOcW/ccVOtfx05LkbWOaRAtn5SaqXypeKQra1QaEa841PgrSL9ubSPQ==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "sunos" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/win32-arm64": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.25.10.tgz", + "integrity": "sha512-ah+9b59KDTSfpaCg6VdJoOQvKjI33nTaQr4UluQwW7aEwZQsbMCfTmfEO4VyewOxx4RaDT/xCy9ra2GPWmO7Kw==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/win32-ia32": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.25.10.tgz", + "integrity": "sha512-QHPDbKkrGO8/cz9LKVnJU22HOi4pxZnZhhA2HYHez5Pz4JeffhDjf85E57Oyco163GnzNCVkZK0b/n4Y0UHcSw==", + "cpu": [ + "ia32" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/win32-x64": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.25.10.tgz", + "integrity": "sha512-9KpxSVFCu0iK1owoez6aC/s/EdUQLDN3adTxGCqxMVhrPDj6bt5dbrHDXUuq+Bs2vATFBBrQS5vdQ/Ed2P+nbw==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@googleapis/androidpublisher": { + "version": "42.0.0", + "resolved": "https://registry.npmjs.org/@googleapis/androidpublisher/-/androidpublisher-42.0.0.tgz", + "integrity": "sha512-Zxb3ZGyvnJngD389iUtbvzVn+OEWpIerBQP7u2NqpdItSU32odJpcquk8x+JFAKi+o7klry+rvTkpj7X/AZ8fg==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "googleapis-common": "^9.0.0" + }, + "engines": { + "node": ">=22.0.0" + } + }, + "node_modules/@ionic/cli-framework-output": { + "version": "2.2.8", + "resolved": "https://registry.npmjs.org/@ionic/cli-framework-output/-/cli-framework-output-2.2.8.tgz", + "integrity": "sha512-TshtaFQsovB4NWRBydbNFawql6yul7d5bMiW1WYYf17hd99V6xdDdk3vtF51bw6sLkxON3bDQpWsnUc9/hVo3g==", + "dev": true, + "license": "MIT", + "dependencies": { + "@ionic/utils-terminal": "2.3.5", + "debug": "^4.0.0", + "tslib": "^2.0.1" + }, + "engines": { + "node": ">=16.0.0" + } + }, + "node_modules/@ionic/utils-array": { + "version": "2.1.6", + "resolved": "https://registry.npmjs.org/@ionic/utils-array/-/utils-array-2.1.6.tgz", + "integrity": "sha512-0JZ1Zkp3wURnv8oq6Qt7fMPo5MpjbLoUoa9Bu2Q4PJuSDWM8H8gwF3dQO7VTeUj3/0o1IB1wGkFWZZYgUXZMUg==", + "dev": true, + "license": "MIT", + "dependencies": { + "debug": "^4.0.0", + "tslib": "^2.0.1" + }, + "engines": { + "node": ">=16.0.0" + } + }, + "node_modules/@ionic/utils-fs": { + "version": "3.1.7", + "resolved": "https://registry.npmjs.org/@ionic/utils-fs/-/utils-fs-3.1.7.tgz", + "integrity": "sha512-2EknRvMVfhnyhL1VhFkSLa5gOcycK91VnjfrTB0kbqkTFCOXyXgVLI5whzq7SLrgD9t1aqos3lMMQyVzaQ5gVA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/fs-extra": "^8.0.0", + "debug": "^4.0.0", + "fs-extra": "^9.0.0", + "tslib": "^2.0.1" + }, + "engines": { + "node": ">=16.0.0" + } + }, + "node_modules/@ionic/utils-fs/node_modules/fs-extra": { + "version": "9.1.0", + "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-9.1.0.tgz", + "integrity": "sha512-hcg3ZmepS30/7BSFqRvoo3DOMQu7IjqxO5nCDt+zM9XWjb33Wg7ziNT+Qvqbuc3+gWpzO02JubVyk2G4Zvo1OQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "at-least-node": "^1.0.0", + "graceful-fs": "^4.2.0", + "jsonfile": "^6.0.1", + "universalify": "^2.0.0" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/@ionic/utils-object": { + "version": "2.1.6", + "resolved": "https://registry.npmjs.org/@ionic/utils-object/-/utils-object-2.1.6.tgz", + "integrity": "sha512-vCl7sl6JjBHFw99CuAqHljYJpcE88YaH2ZW4ELiC/Zwxl5tiwn4kbdP/gxi2OT3MQb1vOtgAmSNRtusvgxI8ww==", + "dev": true, + "license": "MIT", + "dependencies": { + "debug": "^4.0.0", + "tslib": "^2.0.1" + }, + "engines": { + "node": ">=16.0.0" + } + }, + "node_modules/@ionic/utils-process": { + "version": "2.1.12", + "resolved": "https://registry.npmjs.org/@ionic/utils-process/-/utils-process-2.1.12.tgz", + "integrity": "sha512-Jqkgyq7zBs/v/J3YvKtQQiIcxfJyplPgECMWgdO0E1fKrrH8EF0QGHNJ9mJCn6PYe2UtHNS8JJf5G21e09DfYg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@ionic/utils-object": "2.1.6", + "@ionic/utils-terminal": "2.3.5", + "debug": "^4.0.0", + "signal-exit": "^3.0.3", + "tree-kill": "^1.2.2", + "tslib": "^2.0.1" + }, + "engines": { + "node": ">=16.0.0" + } + }, + "node_modules/@ionic/utils-stream": { + "version": "3.1.7", + "resolved": "https://registry.npmjs.org/@ionic/utils-stream/-/utils-stream-3.1.7.tgz", + "integrity": "sha512-eSELBE7NWNFIHTbTC2jiMvh1ABKGIpGdUIvARsNPMNQhxJB3wpwdiVnoBoTYp+5a6UUIww4Kpg7v6S7iTctH1w==", + "dev": true, + "license": "MIT", + "dependencies": { + "debug": "^4.0.0", + "tslib": "^2.0.1" + }, + "engines": { + "node": ">=16.0.0" + } + }, + "node_modules/@ionic/utils-subprocess": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/@ionic/utils-subprocess/-/utils-subprocess-3.0.1.tgz", + "integrity": "sha512-cT4te3AQQPeIM9WCwIg8ohroJ8TjsYaMb2G4ZEgv9YzeDqHZ4JpeIKqG2SoaA3GmVQ3sOfhPM6Ox9sxphV/d1A==", + "dev": true, + "license": "MIT", + "dependencies": { + "@ionic/utils-array": "2.1.6", + "@ionic/utils-fs": "3.1.7", + "@ionic/utils-process": "2.1.12", + "@ionic/utils-stream": "3.1.7", + "@ionic/utils-terminal": "2.3.5", + "cross-spawn": "^7.0.3", + "debug": "^4.0.0", + "tslib": "^2.0.1" + }, + "engines": { + "node": ">=16.0.0" + } + }, + "node_modules/@ionic/utils-terminal": { + "version": "2.3.5", + "resolved": "https://registry.npmjs.org/@ionic/utils-terminal/-/utils-terminal-2.3.5.tgz", + "integrity": "sha512-3cKScz9Jx2/Pr9ijj1OzGlBDfcmx7OMVBt4+P1uRR0SSW4cm1/y3Mo4OY3lfkuaYifMNBW8Wz6lQHbs1bihr7A==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/slice-ansi": "^4.0.0", + "debug": "^4.0.0", + "signal-exit": "^3.0.3", + "slice-ansi": "^4.0.0", + "string-width": "^4.1.0", + "strip-ansi": "^6.0.0", + "tslib": "^2.0.1", + "untildify": "^4.0.0", + "wrap-ansi": "^7.0.0" + }, + "engines": { + "node": ">=16.0.0" + } + }, + "node_modules/@isaacs/fs-minipass": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/@isaacs/fs-minipass/-/fs-minipass-4.0.1.tgz", + "integrity": "sha512-wgm9Ehl2jpeqP3zw/7mo3kRHFp5MEDhqAdwy1fTGkHAwnkGOVsgpvQhL8B5n1qlb01jV3n/bI0ZfZp5lWA1k4w==", + "dev": true, + "license": "ISC", + "dependencies": { + "minipass": "^7.0.4" + }, + "engines": { + "node": ">=18.0.0" + } + }, + "node_modules/@prettier/plugin-xml": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/@prettier/plugin-xml/-/plugin-xml-2.2.0.tgz", + "integrity": "sha512-UWRmygBsyj4bVXvDiqSccwT1kmsorcwQwaIy30yVh8T+Gspx4OlC0shX1y+ZuwXZvgnafmpRYKks0bAu9urJew==", + "dev": true, + "license": "MIT", + "dependencies": { + "@xml-tools/parser": "^1.0.11", + "prettier": ">=2.4.0" + } + }, + "node_modules/@trapezedev/gradle-parse": { + "version": "7.1.10", + "resolved": "https://registry.npmjs.org/@trapezedev/gradle-parse/-/gradle-parse-7.1.10.tgz", + "integrity": "sha512-muL6ptcxnqrgrYushL78pLF5GGJSWoo/kk8pb7mQ+Og8eef6zY6XI9iwhVS9bo8yCpuh6EZfq9odKWkGPVB4BQ==", + "dev": true, + "license": "SEE LICENSE" + }, + "node_modules/@trapezedev/project": { + "version": "7.1.10", + "resolved": "https://registry.npmjs.org/@trapezedev/project/-/project-7.1.10.tgz", + "integrity": "sha512-SdmYuV5qCPX+sqOiJ/gIq6dbGav6j/M6OO1F8A6m89hbDi/3FiV1JRnp0FHLqs/wBW2vPHBvts+y7MiHCWuXig==", + "dev": true, + "license": "SEE LICENSE", + "dependencies": { + "@ionic/utils-fs": "^3.1.5", + "@ionic/utils-subprocess": "^2.1.8", + "@prettier/plugin-xml": "^2.2.0", + "@trapezedev/gradle-parse": "7.1.10", + "@xmldom/xmldom": "^0.9.9", + "cross-spawn": "^7.0.3", + "diff": "^5.1.0", + "gradle-to-js": "^2.0.0", + "ini": "^2.0.0", + "kleur": "^4.1.5", + "lodash": "^4.17.21", + "plist": "^3.0.4", + "prettier": "^2.7.1", + "xcode": "^3.0.1", + "xml-js": "^1.6.11", + "xpath": "^0.0.32" + }, + "engines": { + "node": ">=18" + } + }, + "node_modules/@trapezedev/project/node_modules/@ionic/utils-process": { + "version": "2.1.11", + "resolved": "https://registry.npmjs.org/@ionic/utils-process/-/utils-process-2.1.11.tgz", + "integrity": "sha512-Uavxn+x8j3rDlZEk1X7YnaN6wCgbCwYQOeIjv/m94i1dzslqWhqIHEqxEyeE8HsT5Negboagg7GtQiABy+BLbA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@ionic/utils-object": "2.1.6", + "@ionic/utils-terminal": "2.3.4", + "debug": "^4.0.0", + "signal-exit": "^3.0.3", + "tree-kill": "^1.2.2", + "tslib": "^2.0.1" + }, + "engines": { + "node": ">=16.0.0" + } + }, + "node_modules/@trapezedev/project/node_modules/@ionic/utils-stream": { + "version": "3.1.6", + "resolved": "https://registry.npmjs.org/@ionic/utils-stream/-/utils-stream-3.1.6.tgz", + "integrity": "sha512-4+Kitey1lTA1yGtnigeYNhV/0tggI3lWBMjC7tBs1K9GXa/q7q4CtOISppdh8QgtOhrhAXS2Igp8rbko/Cj+lA==", + "dev": true, + "license": "MIT", + "dependencies": { + "debug": "^4.0.0", + "tslib": "^2.0.1" + }, + "engines": { + "node": ">=16.0.0" + } + }, + "node_modules/@trapezedev/project/node_modules/@ionic/utils-subprocess": { + "version": "2.1.14", + "resolved": "https://registry.npmjs.org/@ionic/utils-subprocess/-/utils-subprocess-2.1.14.tgz", + "integrity": "sha512-nGYvyGVjU0kjPUcSRFr4ROTraT3w/7r502f5QJEsMRKTqa4eEzCshtwRk+/mpASm0kgBN5rrjYA5A/OZg8ahqg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@ionic/utils-array": "2.1.6", + "@ionic/utils-fs": "3.1.7", + "@ionic/utils-process": "2.1.11", + "@ionic/utils-stream": "3.1.6", + "@ionic/utils-terminal": "2.3.4", + "cross-spawn": "^7.0.3", + "debug": "^4.0.0", + "tslib": "^2.0.1" + }, + "engines": { + "node": ">=16.0.0" + } + }, + "node_modules/@trapezedev/project/node_modules/@ionic/utils-terminal": { + "version": "2.3.4", + "resolved": "https://registry.npmjs.org/@ionic/utils-terminal/-/utils-terminal-2.3.4.tgz", + "integrity": "sha512-cEiMFl3jklE0sW60r8JHH3ijFTwh/jkdEKWbylSyExQwZ8pPuwoXz7gpkWoJRLuoRHHSvg+wzNYyPJazIHfoJA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/slice-ansi": "^4.0.0", + "debug": "^4.0.0", + "signal-exit": "^3.0.3", + "slice-ansi": "^4.0.0", + "string-width": "^4.1.0", + "strip-ansi": "^6.0.0", + "tslib": "^2.0.1", + "untildify": "^4.0.0", + "wrap-ansi": "^7.0.0" + }, + "engines": { + "node": ">=16.0.0" + } + }, + "node_modules/@types/fs-extra": { + "version": "8.1.5", + "resolved": "https://registry.npmjs.org/@types/fs-extra/-/fs-extra-8.1.5.tgz", + "integrity": "sha512-0dzKcwO+S8s2kuF5Z9oUWatQJj5Uq/iqphEtE3GQJVRRYm/tD1LglU2UnXi2A8jLq5umkGouOXOR9y0n613ZwQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/node": "*" + } + }, + "node_modules/@types/node": { + "version": "22.20.2", + "resolved": "https://registry.npmjs.org/@types/node/-/node-22.20.2.tgz", + "integrity": "sha512-xlvWf4Vs9n1PEVYwP1n4vvG07M6y8WgvJ2t0vbrWTmijsIHp1cS+uJ2kMIRdY3nHZK0nCYKrPeD171+SzF4/zw==", + "dev": true, + "license": "MIT", + "dependencies": { + "undici-types": "~6.21.0" + } + }, + "node_modules/@types/slice-ansi": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/@types/slice-ansi/-/slice-ansi-4.0.0.tgz", + "integrity": "sha512-+OpjSaq85gvlZAYINyzKpLeiFkSC4EsC6IIiT6v6TLSU5k5U83fHGj9Lel8oKEXM0HqgrMVCjXPDPVICtxF7EQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/@xml-tools/parser": { + "version": "1.0.11", + "resolved": "https://registry.npmjs.org/@xml-tools/parser/-/parser-1.0.11.tgz", + "integrity": "sha512-aKqQ077XnR+oQtHJlrAflaZaL7qZsulWc/i/ZEooar5JiWj1eLt0+Wg28cpa+XLney107wXqneC+oG1IZvxkTA==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "chevrotain": "7.1.1" + } + }, + "node_modules/@xmldom/xmldom": { + "version": "0.9.12", + "resolved": "https://registry.npmjs.org/@xmldom/xmldom/-/xmldom-0.9.12.tgz", + "integrity": "sha512-5AXjrcMClTryPe9LgZrygpB1lj7s0S9E0+W+AHaVKAVyHanafK86iPSvG5xHVSp/jC+VH1UXu0TAEmY279xH7A==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=14.6" + } + }, + "node_modules/agent-base": { + "version": "7.1.4", + "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz", + "integrity": "sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 14" + } + }, + "node_modules/ansi-regex": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", + "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/ansi-styles": { + "version": "4.3.0", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz", + "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==", + "dev": true, + "license": "MIT", + "dependencies": { + "color-convert": "^2.0.1" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/chalk/ansi-styles?sponsor=1" + } + }, + "node_modules/astral-regex": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/astral-regex/-/astral-regex-2.0.0.tgz", + "integrity": "sha512-Z7tMw1ytTXt5jqMcOP+OQteU1VuNK9Y02uuJtKQ1Sv69jXQKKg5cibLwGJow8yzZP+eAc18EmLGPal0bp36rvQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/at-least-node": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/at-least-node/-/at-least-node-1.0.0.tgz", + "integrity": "sha512-+q/t7Ekv1EDY2l6Gda6LLiX14rU9TV20Wa3ofeQmwPFZbOMo9DXrLbOjFaaclkXKWidIaopwAObQDqwWtGUjqg==", + "dev": true, + "license": "ISC", + "engines": { + "node": ">= 4.0.0" + } + }, + "node_modules/b4a": { + "version": "1.8.1", + "resolved": "https://registry.npmjs.org/b4a/-/b4a-1.8.1.tgz", + "integrity": "sha512-aiqre1Nr0B/6DgE2N5vwTc+2/oQZ4Wh1t4NznYY4E00y8LCt6NqdRv81so00oo27D8MVKTpUa/MwUUtBLXCoDw==", + "dev": true, + "license": "Apache-2.0", + "peerDependencies": { + "react-native-b4a": "*" + }, + "peerDependenciesMeta": { + "react-native-b4a": { + "optional": true + } + } + }, + "node_modules/balanced-match": { + "version": "4.0.4", + "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz", + "integrity": "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==", + "dev": true, + "license": "MIT", + "engines": { + "node": "18 || 20 || >=22" + } + }, + "node_modules/bare-events": { + "version": "2.9.2", + "resolved": "https://registry.npmjs.org/bare-events/-/bare-events-2.9.2.tgz", + "integrity": "sha512-AIPKioV7/Y/8KfZ3AAhjPJxLLbY49S64Ym5DakZlUg75qQiTgUq9hEJoEwa4eUezPUlXRy/i5NpsKvo9jgKmoA==", + "dev": true, + "license": "Apache-2.0", + "peerDependencies": { + "bare-abort-controller": "*" + }, + "peerDependenciesMeta": { + "bare-abort-controller": { + "optional": true + } + } + }, + "node_modules/bare-fs": { + "version": "4.8.1", + "resolved": "https://registry.npmjs.org/bare-fs/-/bare-fs-4.8.1.tgz", + "integrity": "sha512-N1nnXdHZAOSstz0XiHikGS4HGMH4CnSwhqWdGQQMqqdvp4Jybm9sE3R1WVnpWVd4SFkc8ryPDBLViNLwiEqECg==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "bare-events": "^2.5.4", + "bare-path": "^3.0.0", + "bare-stream": "^2.6.4", + "bare-url": "^2.2.2", + "fast-fifo": "^1.3.2" + }, + "engines": { + "bare": ">=1.28.0" + }, + "peerDependencies": { + "bare-buffer": "*" + }, + "peerDependenciesMeta": { + "bare-buffer": { + "optional": true + } + } + }, + "node_modules/bare-path": { + "version": "3.1.2", + "resolved": "https://registry.npmjs.org/bare-path/-/bare-path-3.1.2.tgz", + "integrity": "sha512-ZyKbsuuqK6Ag0K8pX6V5Txq6XeJRvY+wXucnFGRjiyVYP9YWDpIQugk/b+enRYrEYBJaqLzghRQpXPMR7341Nw==", + "dev": true, + "license": "Apache-2.0" + }, + "node_modules/bare-stream": { + "version": "2.13.4", + "resolved": "https://registry.npmjs.org/bare-stream/-/bare-stream-2.13.4.tgz", + "integrity": "sha512-PcrQ8lVLbiJscNm1Kez+Yp4Gy4AHGcN1lzwjvf5NybWen7VvEgUfyfnXYJ2zNqWnzOfCb1Abq6lH8ti0syQszA==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "b4a": "^1.8.1", + "streamx": "^2.25.0", + "teex": "^1.0.1" + }, + "peerDependencies": { + "bare-abort-controller": "*", + "bare-buffer": "*", + "bare-events": "*" + }, + "peerDependenciesMeta": { + "bare-abort-controller": { + "optional": true + }, + "bare-buffer": { + "optional": true + }, + "bare-events": { + "optional": true + } + } + }, + "node_modules/bare-url": { + "version": "2.5.4", + "resolved": "https://registry.npmjs.org/bare-url/-/bare-url-2.5.4.tgz", + "integrity": "sha512-Gxa7UVWBr0/edU1b+TJhn/AZvMQUj9OGspvYsaTYQrAbZA4BOTZGL3LiZxvD+CeMlDH4juwD84+eTAp/bLYW5g==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "bare-path": "^3.0.0" + } + }, + "node_modules/base64-js": { + "version": "1.5.1", + "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz", + "integrity": "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "MIT" + }, + "node_modules/big-integer": { + "version": "1.6.52", + "resolved": "https://registry.npmjs.org/big-integer/-/big-integer-1.6.52.tgz", + "integrity": "sha512-QxD8cf2eVqJOOz63z6JIN9BzvVs/dlySa5HGSBH5xtR8dPteIRQnBxxKqkNTiT6jbDTF6jAfrd4oMcND9RGbQg==", + "dev": true, + "license": "Unlicense", + "engines": { + "node": ">=0.6" + } + }, + "node_modules/bignumber.js": { + "version": "9.3.1", + "resolved": "https://registry.npmjs.org/bignumber.js/-/bignumber.js-9.3.1.tgz", + "integrity": "sha512-Ko0uX15oIUS7wJ3Rb30Fs6SkVbLmPBAKdlm7q9+ak9bbIeFf0MwuBsQV6z7+X768/cHsfg+WlysDWJcmthjsjQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": "*" + } + }, + "node_modules/bl": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz", + "integrity": "sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==", + "dev": true, + "license": "MIT", + "dependencies": { + "buffer": "^5.5.0", + "inherits": "^2.0.4", + "readable-stream": "^3.4.0" + } + }, + "node_modules/boolbase": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/boolbase/-/boolbase-1.0.0.tgz", + "integrity": "sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww==", + "dev": true, + "license": "ISC" + }, + "node_modules/bplist-creator": { + "version": "0.1.0", + "resolved": "https://registry.npmjs.org/bplist-creator/-/bplist-creator-0.1.0.tgz", + "integrity": "sha512-sXaHZicyEEmY86WyueLTQesbeoH/mquvarJaQNbjuOQO+7gbFcDEWqKmcWA4cOTLzFlfgvkiVxolk1k5bBIpmg==", + "dev": true, + "license": "MIT", + "dependencies": { + "stream-buffers": "2.2.x" + } + }, + "node_modules/bplist-parser": { + "version": "0.3.2", + "resolved": "https://registry.npmjs.org/bplist-parser/-/bplist-parser-0.3.2.tgz", + "integrity": "sha512-apC2+fspHGI3mMKj+dGevkGo/tCqVB8jMb6i+OX+E29p0Iposz07fABkRIfVUPNd5A5VbuOz1bZbnmkKLYF+wQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "big-integer": "1.6.x" + }, + "engines": { + "node": ">= 5.10.0" + } + }, + "node_modules/brace-expansion": { + "version": "5.0.9", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz", + "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==", + "dev": true, + "license": "MIT", + "dependencies": { + "balanced-match": "^4.0.2" + }, + "engines": { + "node": "20 || >=22" + } + }, + "node_modules/buffer": { + "version": "5.7.1", + "resolved": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz", + "integrity": "sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "MIT", + "dependencies": { + "base64-js": "^1.3.1", + "ieee754": "^1.1.13" + } + }, + "node_modules/buffer-crc32": { + "version": "0.2.13", + "resolved": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz", + "integrity": "sha512-VO9Ht/+p3SN7SKWqcrgEzjGbRSJYTx+Q1pTQC0wrWqHx0vpJraQ6GtHx8tvcg1rlK1byhU5gccxgOgj7B0TDkQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": "*" + } + }, + "node_modules/buffer-equal-constant-time": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/buffer-equal-constant-time/-/buffer-equal-constant-time-1.0.1.tgz", + "integrity": "sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==", + "dev": true, + "license": "BSD-3-Clause" + }, + "node_modules/call-bind-apply-helpers": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz", + "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0", + "function-bind": "^1.1.2" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/call-bound": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz", + "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==", + "dev": true, + "license": "MIT", + "dependencies": { + "call-bind-apply-helpers": "^1.0.2", + "get-intrinsic": "^1.3.0" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/chevrotain": { + "version": "7.1.1", + "resolved": "https://registry.npmjs.org/chevrotain/-/chevrotain-7.1.1.tgz", + "integrity": "sha512-wy3mC1x4ye+O+QkEinVJkPf5u2vsrDIYW9G7ZuwFl6v/Yu0LwUuT2POsb+NUWApebyxfkQq6+yDfRExbnI5rcw==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "regexp-to-ast": "0.5.0" + } + }, + "node_modules/chownr": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/chownr/-/chownr-3.0.0.tgz", + "integrity": "sha512-+IxzY9BZOQd/XuYPRmrvEVjF/nqj5kgT4kEq7VofrDoM1MxoRjEWkrCC3EtLi59TVawxTAn+orJwFQcrqEN1+g==", + "dev": true, + "license": "BlueOak-1.0.0", + "engines": { + "node": ">=18" + } + }, + "node_modules/cliui": { + "version": "8.0.1", + "resolved": "https://registry.npmjs.org/cliui/-/cliui-8.0.1.tgz", + "integrity": "sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==", + "dev": true, + "license": "ISC", + "dependencies": { + "string-width": "^4.2.0", + "strip-ansi": "^6.0.1", + "wrap-ansi": "^7.0.0" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/color": { + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/color/-/color-4.2.3.tgz", + "integrity": "sha512-1rXeuUUiGGrykh+CeBdu5Ie7OJwinCgQY0bc7GCRxy5xVHy+moaqkpL/jqQq0MtQOeYcrqEz4abc5f0KtU7W4A==", + "dev": true, + "license": "MIT", + "dependencies": { + "color-convert": "^2.0.1", + "color-string": "^1.9.0" + }, + "engines": { + "node": ">=12.5.0" + } + }, + "node_modules/color-convert": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz", + "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "color-name": "~1.1.4" + }, + "engines": { + "node": ">=7.0.0" + } + }, + "node_modules/color-name": { + "version": "1.1.4", + "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz", + "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==", + "dev": true, + "license": "MIT" + }, + "node_modules/color-string": { + "version": "1.9.1", + "resolved": "https://registry.npmjs.org/color-string/-/color-string-1.9.1.tgz", + "integrity": "sha512-shrVawQFojnZv6xM40anx4CkoDP+fZsw/ZerEMsW/pyzsRbElpsL/DBVW7q3ExxwusdNXI3lXpuhEZkzs8p5Eg==", + "dev": true, + "license": "MIT", + "dependencies": { + "color-name": "^1.0.0", + "simple-swizzle": "^0.2.2" + } + }, + "node_modules/commander": { + "version": "8.3.0", + "resolved": "https://registry.npmjs.org/commander/-/commander-8.3.0.tgz", + "integrity": "sha512-OkTL9umf+He2DZkUq8f8J9of7yL6RJKI24dVITBmNfZBmri9zYZQrKkuXiKhyfPSu8tUhnVBB1iKXevvnlR4Ww==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 12" + } + }, + "node_modules/cross-spawn": { + "version": "7.0.6", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", + "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", + "dev": true, + "license": "MIT", + "dependencies": { + "path-key": "^3.1.0", + "shebang-command": "^2.0.0", + "which": "^2.0.1" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/css-select": { + "version": "4.3.0", + "resolved": "https://registry.npmjs.org/css-select/-/css-select-4.3.0.tgz", + "integrity": "sha512-wPpOYtnsVontu2mODhA19JrqWxNsfdatRKd64kmpRbQgh1KtItko5sTnEpPdpSaJszTOhEMlF/RPz28qj4HqhQ==", + "dev": true, + "license": "BSD-2-Clause", + "dependencies": { + "boolbase": "^1.0.0", + "css-what": "^6.0.1", + "domhandler": "^4.3.1", + "domutils": "^2.8.0", + "nth-check": "^2.0.1" + }, + "funding": { + "url": "https://github.com/sponsors/fb55" + } + }, + "node_modules/css-what": { + "version": "6.2.2", + "resolved": "https://registry.npmjs.org/css-what/-/css-what-6.2.2.tgz", + "integrity": "sha512-u/O3vwbptzhMs3L1fQE82ZSLHQQfto5gyZzwteVIEyeaY5Fc7R4dapF/BvRoSYFeqfBk4m0V1Vafq5Pjv25wvA==", + "dev": true, + "license": "BSD-2-Clause", + "engines": { + "node": ">= 6" + }, + "funding": { + "url": "https://github.com/sponsors/fb55" + } + }, + "node_modules/data-uri-to-buffer": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/data-uri-to-buffer/-/data-uri-to-buffer-4.0.1.tgz", + "integrity": "sha512-0R9ikRb668HB7QDxT1vkpuUBtqc53YyAwMwGeUFKRojY/NWKvdZ+9UYtRfGmhqNbRkTSVpMbmyhXipFFv2cb/A==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 12" + } + }, + "node_modules/debug": { + "version": "4.3.4", + "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.4.tgz", + "integrity": "sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "ms": "2.1.2" + }, + "engines": { + "node": ">=6.0" + }, + "peerDependenciesMeta": { + "supports-color": { + "optional": true + } + } + }, + "node_modules/decompress-response": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/decompress-response/-/decompress-response-6.0.0.tgz", + "integrity": "sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "mimic-response": "^3.1.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/deep-extend": { + "version": "0.6.0", + "resolved": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.6.0.tgz", + "integrity": "sha512-LOHxIOaPYdHlJRtCQfDIVZtfw/ufM8+rVj649RIHzcm/vGwQRXFt6OPqIFWsm2XEMrNIEtWR64sY1LEKD2vAOA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=4.0.0" + } + }, + "node_modules/define-lazy-prop": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/define-lazy-prop/-/define-lazy-prop-2.0.0.tgz", + "integrity": "sha512-Ds09qNh8yw3khSjiJjiUInaGX9xlqZDY7JVryGxdxV7NPeuqQfplOpQ66yJFZut3jLa5zOwkXw1g9EI2uKh4Og==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/detect-libc": { + "version": "2.1.2", + "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz", + "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==", + "dev": true, + "license": "Apache-2.0", + "engines": { + "node": ">=8" + } + }, + "node_modules/diff": { + "version": "5.2.2", + "resolved": "https://registry.npmjs.org/diff/-/diff-5.2.2.tgz", + "integrity": "sha512-vtcDfH3TOjP8UekytvnHH1o1P4FcUdt4eQ1Y+Abap1tk/OB2MWQvcwS2ClCd1zuIhc3JKOx6p3kod8Vfys3E+A==", + "dev": true, + "license": "BSD-3-Clause", + "engines": { + "node": ">=0.3.1" + } + }, + "node_modules/dom-serializer": { + "version": "1.4.1", + "resolved": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-1.4.1.tgz", + "integrity": "sha512-VHwB3KfrcOOkelEG2ZOfxqLZdfkil8PtJi4P8N2MMXucZq2yLp75ClViUlOVwyoHEDjYU433Aq+5zWP61+RGag==", + "dev": true, + "license": "MIT", + "dependencies": { + "domelementtype": "^2.0.1", + "domhandler": "^4.2.0", + "entities": "^2.0.0" + }, + "funding": { + "url": "https://github.com/cheeriojs/dom-serializer?sponsor=1" + } + }, + "node_modules/domelementtype": { + "version": "2.3.0", + "resolved": "https://registry.npmjs.org/domelementtype/-/domelementtype-2.3.0.tgz", + "integrity": "sha512-OLETBj6w0OsagBwdXnPdN0cnMfF9opN69co+7ZrbfPGrdpPVNBUj02spi6B1N7wChLQiPn4CSH/zJvXw56gmHw==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/fb55" + } + ], + "license": "BSD-2-Clause" + }, + "node_modules/domhandler": { + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/domhandler/-/domhandler-4.3.1.tgz", + "integrity": "sha512-GrwoxYN+uWlzO8uhUXRl0P+kHE4GtVPfYzVLcUxPL7KNdHKj66vvlhiweIHqYYXWlw+T8iLMp42Lm67ghw4WMQ==", + "dev": true, + "license": "BSD-2-Clause", + "dependencies": { + "domelementtype": "^2.2.0" + }, + "engines": { + "node": ">= 4" + }, + "funding": { + "url": "https://github.com/fb55/domhandler?sponsor=1" + } + }, + "node_modules/domutils": { + "version": "2.8.0", + "resolved": "https://registry.npmjs.org/domutils/-/domutils-2.8.0.tgz", + "integrity": "sha512-w96Cjofp72M5IIhpjgobBimYEfoPjx1Vx0BSX9P30WBdZW2WIKU0T1Bd0kz2eNZ9ikjKgHbEyKx8BB6H1L3h3A==", + "dev": true, + "license": "BSD-2-Clause", + "dependencies": { + "dom-serializer": "^1.0.1", + "domelementtype": "^2.2.0", + "domhandler": "^4.2.0" + }, + "funding": { + "url": "https://github.com/fb55/domutils?sponsor=1" + } + }, + "node_modules/dunder-proto": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz", + "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==", + "dev": true, + "license": "MIT", + "dependencies": { + "call-bind-apply-helpers": "^1.0.1", + "es-errors": "^1.3.0", + "gopd": "^1.2.0" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/ecdsa-sig-formatter": { + "version": "1.0.11", + "resolved": "https://registry.npmjs.org/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.11.tgz", + "integrity": "sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "safe-buffer": "^5.0.1" + } + }, + "node_modules/elementtree": { + "version": "0.1.7", + "resolved": "https://registry.npmjs.org/elementtree/-/elementtree-0.1.7.tgz", + "integrity": "sha512-wkgGT6kugeQk/P6VZ/f4T+4HB41BVgNBq5CDIZVbQ02nvTVqAiVTbskxxu3eA/X96lMlfYOwnLQpN2v5E1zDEg==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "sax": "1.1.4" + }, + "engines": { + "node": ">= 0.4.0" + } + }, + "node_modules/emoji-regex": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", + "dev": true, + "license": "MIT" + }, + "node_modules/end-of-stream": { + "version": "1.4.5", + "resolved": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.5.tgz", + "integrity": "sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==", + "dev": true, + "license": "MIT", + "dependencies": { + "once": "^1.4.0" + } + }, + "node_modules/entities": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/entities/-/entities-2.2.0.tgz", + "integrity": "sha512-p92if5Nz619I0w+akJrLZH0MX0Pb5DX39XOwQTtXSdQQOaYH03S1uIQp4mhOZtAXrxq4ViO67YTiLBo2638o9A==", + "dev": true, + "license": "BSD-2-Clause", + "funding": { + "url": "https://github.com/fb55/entities?sponsor=1" + } + }, + "node_modules/env-paths": { + "version": "2.2.1", + "resolved": "https://registry.npmjs.org/env-paths/-/env-paths-2.2.1.tgz", + "integrity": "sha512-+h1lkLKhZMTYjog1VEpJNG7NZJWcuc2DDk/qsqSTRRCOXiLjeQ1d1/udrUGhqMxUgAlwKNZ0cf2uqan5GLuS2A==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/es-define-property": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz", + "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/es-errors": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz", + "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/es-object-atoms": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.2.tgz", + "integrity": "sha512-HWcBoN6NileqtSydK2FqHbS/LoDd2pqrnQHLyJzBj4kOp/ky2MWMN694xOfkK8/SnUsW2DH7EfyVlydKCsm1Zw==", + "dev": true, + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/esbuild": { + "version": "0.25.10", + "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.25.10.tgz", + "integrity": "sha512-9RiGKvCwaqxO2owP61uQ4BgNborAQskMR6QusfWzQqv7AZOg5oGehdY2pRJMTKuwxd1IDBP4rSbI5lHzU7SMsQ==", + "dev": true, + "hasInstallScript": true, + "license": "MIT", + "bin": { + "esbuild": "bin/esbuild" + }, + "engines": { + "node": ">=18" + }, + "optionalDependencies": { + "@esbuild/aix-ppc64": "0.25.10", + "@esbuild/android-arm": "0.25.10", + "@esbuild/android-arm64": "0.25.10", + "@esbuild/android-x64": "0.25.10", + "@esbuild/darwin-arm64": "0.25.10", + "@esbuild/darwin-x64": "0.25.10", + "@esbuild/freebsd-arm64": "0.25.10", + "@esbuild/freebsd-x64": "0.25.10", + "@esbuild/linux-arm": "0.25.10", + "@esbuild/linux-arm64": "0.25.10", + "@esbuild/linux-ia32": "0.25.10", + "@esbuild/linux-loong64": "0.25.10", + "@esbuild/linux-mips64el": "0.25.10", + "@esbuild/linux-ppc64": "0.25.10", + "@esbuild/linux-riscv64": "0.25.10", + "@esbuild/linux-s390x": "0.25.10", + "@esbuild/linux-x64": "0.25.10", + "@esbuild/netbsd-arm64": "0.25.10", + "@esbuild/netbsd-x64": "0.25.10", + "@esbuild/openbsd-arm64": "0.25.10", + "@esbuild/openbsd-x64": "0.25.10", + "@esbuild/openharmony-arm64": "0.25.10", + "@esbuild/sunos-x64": "0.25.10", + "@esbuild/win32-arm64": "0.25.10", + "@esbuild/win32-ia32": "0.25.10", + "@esbuild/win32-x64": "0.25.10" + } + }, + "node_modules/escalade": { + "version": "3.2.0", + "resolved": "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz", + "integrity": "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/events-universal": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/events-universal/-/events-universal-1.0.1.tgz", + "integrity": "sha512-LUd5euvbMLpwOF8m6ivPCbhQeSiYVNb8Vs0fQ8QjXo0JTkEHpz8pxdQf0gStltaPpw0Cca8b39KxvK9cfKRiAw==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "bare-events": "^2.7.0" + } + }, + "node_modules/expand-template": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/expand-template/-/expand-template-2.0.3.tgz", + "integrity": "sha512-XYfuKMvj4O35f/pOXLObndIRvyQ+/+6AhODh+OKWj9S9498pHHn/IMszH+gt0fBCRWMNfk1ZSp5x3AifmnI2vg==", + "dev": true, + "license": "(MIT OR WTFPL)", + "engines": { + "node": ">=6" + } + }, + "node_modules/extend": { + "version": "3.0.2", + "resolved": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz", + "integrity": "sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==", + "dev": true, + "license": "MIT" + }, + "node_modules/fast-fifo": { + "version": "1.3.2", + "resolved": "https://registry.npmjs.org/fast-fifo/-/fast-fifo-1.3.2.tgz", + "integrity": "sha512-/d9sfos4yxzpwkDkuN7k2SqFKtYNmCTzgfEpz82x34IM9/zc8KGxQoXg1liNC/izpRM/MBdt44Nmx41ZWqk+FQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/fd-slicer": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/fd-slicer/-/fd-slicer-1.1.0.tgz", + "integrity": "sha512-cE1qsB/VwyQozZ+q1dGxR8LBYNZeofhEdUNGSMbQD3Gw2lAzX9Zb3uIU6Ebc/Fmyjo9AWWfnn0AUCHqtevs/8g==", + "dev": true, + "license": "MIT", + "dependencies": { + "pend": "~1.2.0" + } + }, + "node_modules/fetch-blob": { + "version": "3.2.0", + "resolved": "https://registry.npmjs.org/fetch-blob/-/fetch-blob-3.2.0.tgz", + "integrity": "sha512-7yAQpD2UMJzLi1Dqv7qFYnPbaPx7ZfFK6PiIxQ4PfkGPyNyl2Ugx+a/umUonmKqjhM4DnfbMvdX6otXq83soQQ==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/jimmywarting" + }, + { + "type": "paypal", + "url": "https://paypal.me/jimmywarting" + } + ], + "license": "MIT", + "dependencies": { + "node-domexception": "^1.0.0", + "web-streams-polyfill": "^3.0.3" + }, + "engines": { + "node": "^12.20 || >= 14.13" + } + }, + "node_modules/formdata-polyfill": { + "version": "4.0.10", + "resolved": "https://registry.npmjs.org/formdata-polyfill/-/formdata-polyfill-4.0.10.tgz", + "integrity": "sha512-buewHzMvYL29jdeQTVILecSaZKnt/RJWjoZCF5OW60Z67/GmSLBkOFM7qh1PI3zFNtJbaZL5eQu1vLfazOwj4g==", + "dev": true, + "license": "MIT", + "dependencies": { + "fetch-blob": "^3.1.2" + }, + "engines": { + "node": ">=12.20.0" + } + }, + "node_modules/fs-constants": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/fs-constants/-/fs-constants-1.0.0.tgz", + "integrity": "sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==", + "dev": true, + "license": "MIT" + }, + "node_modules/fs-extra": { + "version": "10.1.0", + "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-10.1.0.tgz", + "integrity": "sha512-oRXApq54ETRj4eMiFzGnHWGy+zo5raudjuxN0b8H7s/RU2oW0Wvsx9O0ACRN/kRq9E8Vu/ReskGB5o3ji+FzHQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "graceful-fs": "^4.2.0", + "jsonfile": "^6.0.1", + "universalify": "^2.0.0" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/fs-minipass": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz", + "integrity": "sha512-V/JgOLFCS+R6Vcq0slCuaeWEdNC3ouDlJMNIsacH2VtALiu9mV4LPrHc5cDl8k5aw6J8jwgWWpiTo5RYhmIzvg==", + "dev": true, + "license": "ISC", + "dependencies": { + "minipass": "^3.0.0" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/fs-minipass/node_modules/minipass": { + "version": "3.3.6", + "resolved": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "integrity": "sha512-DxiNidxSEK+tHG6zOIklvNOwm3hvCrbUrdtzY74U6HKTJxvIDfOUL5W5P2Ghd3DTkhhKPYGqeNUIh5qcM4YBfw==", + "dev": true, + "license": "ISC", + "dependencies": { + "yallist": "^4.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/fs-minipass/node_modules/yallist": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz", + "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==", + "dev": true, + "license": "ISC" + }, + "node_modules/fs.realpath": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz", + "integrity": "sha512-OO0pH2lK6a0hZnAdau5ItzHPI6pUlvI7jMVnxUQRtw4owF2wk8lOSabtGDCTP4Ggrg2MbGnWO9X8K1t4+fGMDw==", + "dev": true, + "license": "ISC" + }, + "node_modules/function-bind": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz", + "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==", + "dev": true, + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/gaxios": { + "version": "7.3.1", + "resolved": "https://registry.npmjs.org/gaxios/-/gaxios-7.3.1.tgz", + "integrity": "sha512-kB3rzJV7d9juLZh8/56QTXCwQfxyhdOMdyYk1HdQKFtF8TJTDTZQJtixWIwXdE9Jji91mC41DUNpjleo4L4eAQ==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "extend": "^3.0.2", + "https-proxy-agent": "^7.0.1", + "node-fetch": "^3.3.2" + }, + "engines": { + "node": ">=18" + } + }, + "node_modules/gaxios/node_modules/node-fetch": { + "version": "3.3.2", + "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-3.3.2.tgz", + "integrity": "sha512-dRB78srN/l6gqWulah9SrxeYnxeddIG30+GOqK/9OlLVyLg3HPnr6SqOWTWOXKRwC2eGYCkZ59NNuSgvSrpgOA==", + "dev": true, + "license": "MIT", + "dependencies": { + "data-uri-to-buffer": "^4.0.0", + "fetch-blob": "^3.1.4", + "formdata-polyfill": "^4.0.10" + }, + "engines": { + "node": "^12.20.0 || ^14.13.1 || >=16.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/node-fetch" + } + }, + "node_modules/gcp-metadata": { + "version": "9.0.3", + "resolved": "https://registry.npmjs.org/gcp-metadata/-/gcp-metadata-9.0.3.tgz", + "integrity": "sha512-2YYnIlHaKBGT2IPg3G2M57hia9Galz15zsEOvw9T3oRf0lSn6KN6VcHQLqby7x8ksYKnjXvp3rp2KJyLCN6zfQ==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "gaxios": "^7.1.3", + "google-logging-utils": "^2.0.0", + "json-bigint": "^1.0.0" + }, + "engines": { + "node": ">=22" + } + }, + "node_modules/get-caller-file": { + "version": "2.0.5", + "resolved": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz", + "integrity": "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==", + "dev": true, + "license": "ISC", + "engines": { + "node": "6.* || 8.* || >= 10.*" + } + }, + "node_modules/get-intrinsic": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz", + "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "call-bind-apply-helpers": "^1.0.2", + "es-define-property": "^1.0.1", + "es-errors": "^1.3.0", + "es-object-atoms": "^1.1.1", + "function-bind": "^1.1.2", + "get-proto": "^1.0.1", + "gopd": "^1.2.0", + "has-symbols": "^1.1.0", + "hasown": "^2.0.2", + "math-intrinsics": "^1.1.0" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/get-proto": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz", + "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==", + "dev": true, + "license": "MIT", + "dependencies": { + "dunder-proto": "^1.0.1", + "es-object-atoms": "^1.0.0" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/github-from-package": { + "version": "0.0.0", + "resolved": "https://registry.npmjs.org/github-from-package/-/github-from-package-0.0.0.tgz", + "integrity": "sha512-SyHy3T1v2NUXn29OsWdxmK6RwHD+vkj3v8en8AOBZ1wBQ/hCAQ5bAQTD02kW4W9tUp/3Qh6J8r9EvntiyCmOOw==", + "dev": true, + "license": "MIT" + }, + "node_modules/glob": { + "version": "13.0.6", + "resolved": "https://registry.npmjs.org/glob/-/glob-13.0.6.tgz", + "integrity": "sha512-Wjlyrolmm8uDpm/ogGyXZXb1Z+Ca2B8NbJwqBVg0axK9GbBeoS7yGV6vjXnYdGm6X53iehEuxxbyiKp8QmN4Vw==", + "dev": true, + "license": "BlueOak-1.0.0", + "dependencies": { + "minimatch": "^10.2.2", + "minipass": "^7.1.3", + "path-scurry": "^2.0.2" + }, + "engines": { + "node": "18 || 20 || >=22" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/google-auth-library": { + "version": "11.0.2", + "resolved": "https://registry.npmjs.org/google-auth-library/-/google-auth-library-11.0.2.tgz", + "integrity": "sha512-vzpgPutxrghPsnjrjpzLX2bdv8IOL719Rh0oEjGnQu8YCIbnbMuTTQ5zU9LcKvLdOPgCxBwppbvnhgW90Qna5Q==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "base64-js": "^1.3.0", + "ecdsa-sig-formatter": "^1.0.11", + "gaxios": "^7.1.4", + "gcp-metadata": "^9.0.0", + "google-logging-utils": "^2.0.0", + "jws": "^4.0.0" + }, + "engines": { + "node": ">=22" + } + }, + "node_modules/google-logging-utils": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/google-logging-utils/-/google-logging-utils-2.0.1.tgz", + "integrity": "sha512-HMhaQghlOTvbcb3c4T5jmmOMtG3JUF1iOQMezaJXL86CDS+Tm2vHd0IeLFRAx3+ewd+bo9E1HFHoy17X5aJa9A==", + "dev": true, + "license": "Apache-2.0", + "engines": { + "node": ">=22" + } + }, + "node_modules/googleapis-common": { + "version": "9.0.4", + "resolved": "https://registry.npmjs.org/googleapis-common/-/googleapis-common-9.0.4.tgz", + "integrity": "sha512-fcI5bm1gN+9MNb+gvANRPFsxaJ07h/ZYvKCh6H3RoDJBUTwp5ySaCpCqnmX8gnGJUD/9bKmkacivRJT1g+xXyg==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "extend": "^3.0.2", + "gaxios": "^7.3.0", + "google-auth-library": "^11.0.0", + "google-logging-utils": "^2.0.0", + "qs": "^6.7.0", + "url-template": "^2.0.8" + }, + "engines": { + "node": ">=22" + } + }, + "node_modules/gopd": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz", + "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/graceful-fs": { + "version": "4.2.11", + "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz", + "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/gradle-to-js": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/gradle-to-js/-/gradle-to-js-2.0.1.tgz", + "integrity": "sha512-is3hDn9zb8XXnjbEeAEIqxTpLHUiGBqjegLmXPuyMBfKAggpadWFku4/AP8iYAGBX6qR9/5UIUIp47V0XI3aMw==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "lodash.merge": "^4.6.2" + }, + "bin": { + "gradle-to-js": "cli.js" + } + }, + "node_modules/has-symbols": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz", + "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/hasown": { + "version": "2.0.4", + "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz", + "integrity": "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==", + "dev": true, + "license": "MIT", + "dependencies": { + "function-bind": "^1.1.2" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/he": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/he/-/he-1.2.0.tgz", + "integrity": "sha512-F/1DnUGPopORZi0ni+CvrCgHQ5FyEAHRLSApuYWMmrbSwoN2Mn/7k+Gl38gJnR7yyDZk6WLXwiGod1JOWNDKGw==", + "dev": true, + "license": "MIT", + "bin": { + "he": "bin/he" + } + }, + "node_modules/https-proxy-agent": { + "version": "7.0.6", + "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-7.0.6.tgz", + "integrity": "sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==", + "dev": true, + "license": "MIT", + "dependencies": { + "agent-base": "^7.1.2", + "debug": "4" + }, + "engines": { + "node": ">= 14" + } + }, + "node_modules/ieee754": { + "version": "1.2.1", + "resolved": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz", + "integrity": "sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "BSD-3-Clause" + }, + "node_modules/inherits": { + "version": "2.0.4", + "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", + "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/ini": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/ini/-/ini-2.0.0.tgz", + "integrity": "sha512-7PnF4oN3CvZF23ADhA5wRaYEQpJ8qygSkbtTXWBeXWXmEVRXK+1ITciHWwHhsjv1TmW0MgacIv6hEi5pX5NQdA==", + "dev": true, + "license": "ISC", + "engines": { + "node": ">=10" + } + }, + "node_modules/is-arrayish": { + "version": "0.3.4", + "resolved": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.3.4.tgz", + "integrity": "sha512-m6UrgzFVUYawGBh1dUsWR5M2Clqic9RVXC/9f8ceNlv2IcO9j9J/z8UoCLPqtsPBFNzEpfR3xftohbfqDx8EQA==", + "dev": true, + "license": "MIT" + }, + "node_modules/is-docker": { + "version": "2.2.1", + "resolved": "https://registry.npmjs.org/is-docker/-/is-docker-2.2.1.tgz", + "integrity": "sha512-F+i2BKsFrH66iaUFc0woD8sLy8getkwTwtOBjvs56Cx4CgJDeKQeqfz8wAYiSb8JOprWhHH5p77PbmYCvvUuXQ==", + "dev": true, + "license": "MIT", + "bin": { + "is-docker": "cli.js" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/is-fullwidth-code-point": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", + "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/is-wsl": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/is-wsl/-/is-wsl-2.2.0.tgz", + "integrity": "sha512-fKzAra0rGJUUBwGBgNkHZuToZcn+TtXHpeCgmkMJMMYx1sQDYaCSyjJBSCa2nH1DGm7s3n1oBnohoVTBaN7Lww==", + "dev": true, + "license": "MIT", + "dependencies": { + "is-docker": "^2.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/isexe": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz", + "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==", + "dev": true, + "license": "ISC" + }, + "node_modules/json-bigint": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/json-bigint/-/json-bigint-1.0.0.tgz", + "integrity": "sha512-SiPv/8VpZuWbvLSMtTDU8hEfrZWg/mH/nV/b4o0CYbSxu1UIQPLdwKOCIyLQX+VIPO5vrLX3i8qtqFyhdPSUSQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "bignumber.js": "^9.0.0" + } + }, + "node_modules/jsonfile": { + "version": "6.2.1", + "resolved": "https://registry.npmjs.org/jsonfile/-/jsonfile-6.2.1.tgz", + "integrity": "sha512-zwOTdL3rFQ/lRdBnntKVOX6k5cKJwEc1HdilT71BWEu7J41gXIB2MRp+vxduPSwZJPWBxEzv4yH1wYLJGUHX4Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "universalify": "^2.0.0" + }, + "optionalDependencies": { + "graceful-fs": "^4.1.6" + } + }, + "node_modules/jwa": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/jwa/-/jwa-2.0.1.tgz", + "integrity": "sha512-hRF04fqJIP8Abbkq5NKGN0Bbr3JxlQ+qhZufXVr0DvujKy93ZCbXZMHDL4EOtodSbCWxOqR8MS1tXA5hwqCXDg==", + "dev": true, + "license": "MIT", + "dependencies": { + "buffer-equal-constant-time": "^1.0.1", + "ecdsa-sig-formatter": "1.0.11", + "safe-buffer": "^5.0.1" + } + }, + "node_modules/jws": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/jws/-/jws-4.0.1.tgz", + "integrity": "sha512-EKI/M/yqPncGUUh44xz0PxSidXFr/+r0pA70+gIYhjv+et7yxM+s29Y+VGDkovRofQem0fs7Uvf4+YmAdyRduA==", + "dev": true, + "license": "MIT", + "dependencies": { + "jwa": "^2.0.1", + "safe-buffer": "^5.0.1" + } + }, + "node_modules/kleur": { + "version": "4.1.5", + "resolved": "https://registry.npmjs.org/kleur/-/kleur-4.1.5.tgz", + "integrity": "sha512-o+NO+8WrRiQEE4/7nwRJhN1HWpVmJm511pBHUxPLtp0BUISzlBplORYSmTclCnJvQq2tKu/sgl3xVpkc7ZWuQQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/lodash": { + "version": "4.18.1", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz", + "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==", + "dev": true, + "license": "MIT" + }, + "node_modules/lodash.merge": { + "version": "4.6.2", + "resolved": "https://registry.npmjs.org/lodash.merge/-/lodash.merge-4.6.2.tgz", + "integrity": "sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/lru-cache": { + "version": "11.5.2", + "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-11.5.2.tgz", + "integrity": "sha512-4pfM1Ff0x50o0tQwb5ucw/RzNyD0/YJME6IVcStalZuMWxdt3sR3huStTtxz4PUmvZfRguvDejasvQ2kifR11g==", + "dev": true, + "license": "BlueOak-1.0.0", + "engines": { + "node": "20 || >=22" + } + }, + "node_modules/math-intrinsics": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz", + "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/mimic-response": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/mimic-response/-/mimic-response-3.1.0.tgz", + "integrity": "sha512-z0yWI+4FDrrweS8Zmt4Ej5HdJmky15+L2e6Wgn3+iK5fWzb6T3fhNFq2+MeTRb064c6Wr4N/wv0DzQTjNzHNGQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/minimatch": { + "version": "10.2.6", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.6.tgz", + "integrity": "sha512-vpLQEs+VLCr1nU0BXS07maYoFwlDAH0gngQuuttxIwutDFEMHq2blX+8vpgxDdK3J1PwjCJiep77OitTZ4Ll1A==", + "dev": true, + "license": "BlueOak-1.0.0", + "dependencies": { + "brace-expansion": "^5.0.8" + }, + "engines": { + "node": "18 || 20 || >=22" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/minimist": { + "version": "1.2.8", + "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz", + "integrity": "sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==", + "dev": true, + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/minipass": { + "version": "7.1.3", + "resolved": "https://registry.npmjs.org/minipass/-/minipass-7.1.3.tgz", + "integrity": "sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==", + "dev": true, + "license": "BlueOak-1.0.0", + "engines": { + "node": ">=16 || 14 >=14.17" + } + }, + "node_modules/minizlib": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/minizlib/-/minizlib-3.1.0.tgz", + "integrity": "sha512-KZxYo1BUkWD2TVFLr0MQoM8vUUigWD3LlD83a/75BqC+4qE0Hb1Vo5v1FgcfaNXvfXzr+5EhQ6ing/CaBijTlw==", + "dev": true, + "license": "MIT", + "dependencies": { + "minipass": "^7.1.2" + }, + "engines": { + "node": ">= 18" + } + }, + "node_modules/mkdirp": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz", + "integrity": "sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw==", + "dev": true, + "license": "MIT", + "bin": { + "mkdirp": "bin/cmd.js" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/mkdirp-classic": { + "version": "0.5.3", + "resolved": "https://registry.npmjs.org/mkdirp-classic/-/mkdirp-classic-0.5.3.tgz", + "integrity": "sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A==", + "dev": true, + "license": "MIT" + }, + "node_modules/ms": { + "version": "2.1.2", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz", + "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==", + "dev": true, + "license": "MIT" + }, + "node_modules/napi-build-utils": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/napi-build-utils/-/napi-build-utils-2.0.0.tgz", + "integrity": "sha512-GEbrYkbfF7MoNaoh2iGG84Mnf/WZfB0GdGEsM8wz7Expx/LlWf5U8t9nvJKXSp3qr5IsEbK04cBGhol/KwOsWA==", + "dev": true, + "license": "MIT" + }, + "node_modules/native-run": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/native-run/-/native-run-2.0.3.tgz", + "integrity": "sha512-U1PllBuzW5d1gfan+88L+Hky2eZx+9gv3Pf6rNBxKbORxi7boHzqiA6QFGSnqMem4j0A9tZ08NMIs5+0m/VS1Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "@ionic/utils-fs": "^3.1.7", + "@ionic/utils-terminal": "^2.3.4", + "bplist-parser": "^0.3.2", + "debug": "^4.3.4", + "elementtree": "^0.1.7", + "ini": "^4.1.1", + "plist": "^3.1.0", + "split2": "^4.2.0", + "through2": "^4.0.2", + "tslib": "^2.6.2", + "yauzl": "^2.10.0" + }, + "bin": { + "native-run": "bin/native-run" + }, + "engines": { + "node": ">=16.0.0" + } + }, + "node_modules/native-run/node_modules/ini": { + "version": "4.1.3", + "resolved": "https://registry.npmjs.org/ini/-/ini-4.1.3.tgz", + "integrity": "sha512-X7rqawQBvfdjS10YU1y1YVreA3SsLrW9dX2CewP2EbBJM4ypVNLDkO5y04gejPwKIY9lR+7r9gn3rFPt/kmWFg==", + "dev": true, + "license": "ISC", + "engines": { + "node": "^14.17.0 || ^16.13.0 || >=18.0.0" + } + }, + "node_modules/node-abi": { + "version": "3.96.0", + "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-3.96.0.tgz", + "integrity": "sha512-rebQ/lz7i0EkoLzUVSrKRzA69zMkwLp95kKMWoMDkkM00Suxz0D7zEQPwRml5fQum24mj7bPvmlgLAmu2JCiYg==", + "dev": true, + "license": "MIT", + "dependencies": { + "semver": "^7.3.5" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/node-addon-api": { + "version": "6.1.0", + "resolved": "https://registry.npmjs.org/node-addon-api/-/node-addon-api-6.1.0.tgz", + "integrity": "sha512-+eawOlIgy680F0kBzPUNFhMZGtJ1YmqM6l4+Crf4IkImjYrO/mqPwRMh352g23uIaQKFItcQ64I7KMaJxHgAVA==", + "dev": true, + "license": "MIT" + }, + "node_modules/node-domexception": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/node-domexception/-/node-domexception-1.0.0.tgz", + "integrity": "sha512-/jKZoMpw0F8GRwl4/eLROPA3cfcXtLApP0QzLmUT/HuPCZWyB7IY9ZrMeKw2O/nFIqPQB3PVM9aYm0F312AXDQ==", + "deprecated": "Use your platform's native DOMException instead", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/jimmywarting" + }, + { + "type": "github", + "url": "https://paypal.me/jimmywarting" + } + ], + "license": "MIT", + "engines": { + "node": ">=10.5.0" + } + }, + "node_modules/node-fetch": { + "version": "2.7.0", + "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz", + "integrity": "sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A==", + "dev": true, + "license": "MIT", + "dependencies": { + "whatwg-url": "^5.0.0" + }, + "engines": { + "node": "4.x || >=6.0.0" + }, + "peerDependencies": { + "encoding": "^0.1.0" + }, + "peerDependenciesMeta": { + "encoding": { + "optional": true + } + } + }, + "node_modules/node-html-parser": { + "version": "5.4.2", + "resolved": "https://registry.npmjs.org/node-html-parser/-/node-html-parser-5.4.2.tgz", + "integrity": "sha512-RaBPP3+51hPne/OolXxcz89iYvQvKOydaqoePpOgXcrOKZhjVIzmpKZz+Hd/RBO2/zN2q6CNJhQzucVz+u3Jyw==", + "dev": true, + "license": "MIT", + "dependencies": { + "css-select": "^4.2.1", + "he": "1.2.0" + } + }, + "node_modules/nth-check": { + "version": "2.1.1", + "resolved": "https://registry.npmjs.org/nth-check/-/nth-check-2.1.1.tgz", + "integrity": "sha512-lqjrjmaOoAnWfMmBPL+XNnynZh2+swxiX3WUE0s4yEHI6m+AwrK2UZOimIRl3X/4QctVqS8AiZjFqyOGrMXb/w==", + "dev": true, + "license": "BSD-2-Clause", + "dependencies": { + "boolbase": "^1.0.0" + }, + "funding": { + "url": "https://github.com/fb55/nth-check?sponsor=1" + } + }, + "node_modules/object-inspect": { + "version": "1.13.4", + "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz", + "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/once": { + "version": "1.4.0", + "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz", + "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==", + "dev": true, + "license": "ISC", + "dependencies": { + "wrappy": "1" + } + }, + "node_modules/open": { + "version": "8.4.2", + "resolved": "https://registry.npmjs.org/open/-/open-8.4.2.tgz", + "integrity": "sha512-7x81NCL719oNbsq/3mh+hVrAWmFuEYUqrq/Iw3kUzH8ReypT9QQ0BLoJS7/G9k6N81XjW4qHWtjWwe/9eLy1EQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "define-lazy-prop": "^2.0.0", + "is-docker": "^2.1.1", + "is-wsl": "^2.2.0" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/package-json-from-dist": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/package-json-from-dist/-/package-json-from-dist-1.0.1.tgz", + "integrity": "sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw==", + "dev": true, + "license": "BlueOak-1.0.0" + }, + "node_modules/path-key": { + "version": "3.1.1", + "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz", + "integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/path-scurry": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-2.0.2.tgz", + "integrity": "sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg==", + "dev": true, + "license": "BlueOak-1.0.0", + "dependencies": { + "lru-cache": "^11.0.0", + "minipass": "^7.1.2" + }, + "engines": { + "node": "18 || 20 || >=22" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/pend": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/pend/-/pend-1.2.0.tgz", + "integrity": "sha512-F3asv42UuXchdzt+xXqfW1OGlVBe+mxa2mqI0pg5yAHZPvFmY3Y6drSf/GQ1A86WgWEN9Kzh/WrgKa6iGcHXLg==", + "dev": true, + "license": "MIT" + }, + "node_modules/plist": { + "version": "3.1.1", + "resolved": "https://registry.npmjs.org/plist/-/plist-3.1.1.tgz", + "integrity": "sha512-ZIfcLJC+7E7FBFnDxm9MPmt7D+DidyQ26lewieO75AdhA2ayMtsJSES0iWzqJQbcVRSrTufQoy0DR94xHue0oA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@xmldom/xmldom": "^0.9.10", + "base64-js": "^1.5.1", + "xmlbuilder": "^15.1.1" + }, + "engines": { + "node": ">=10.4.0" + } + }, + "node_modules/prebuild-install": { + "version": "7.1.3", + "resolved": "https://registry.npmjs.org/prebuild-install/-/prebuild-install-7.1.3.tgz", + "integrity": "sha512-8Mf2cbV7x1cXPUILADGI3wuhfqWvtiLA1iclTDbFRZkgRQS0NqsPZphna9V+HyTEadheuPmjaJMsbzKQFOzLug==", + "deprecated": "No longer maintained. Please contact the author of the relevant native addon; alternatives are available.", + "dev": true, + "license": "MIT", + "dependencies": { + "detect-libc": "^2.0.0", + "expand-template": "^2.0.3", + "github-from-package": "0.0.0", + "minimist": "^1.2.3", + "mkdirp-classic": "^0.5.3", + "napi-build-utils": "^2.0.0", + "node-abi": "^3.3.0", + "pump": "^3.0.0", + "rc": "^1.2.7", + "simple-get": "^4.0.0", + "tar-fs": "^2.0.0", + "tunnel-agent": "^0.6.0" + }, + "bin": { + "prebuild-install": "bin.js" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/prebuild-install/node_modules/chownr": { + "version": "1.1.4", + "resolved": "https://registry.npmjs.org/chownr/-/chownr-1.1.4.tgz", + "integrity": "sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg==", + "dev": true, + "license": "ISC" + }, + "node_modules/prebuild-install/node_modules/tar-fs": { + "version": "2.1.5", + "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.5.tgz", + "integrity": "sha512-OboTd8mmMhZDNPV+UjQcK9yKAatXu2aJ+r1w4im1Otd4M4fl2hwvdoXUxIYHFTHWK/3y3FarBP70v3vwmGlOxw==", + "dev": true, + "license": "MIT", + "dependencies": { + "chownr": "^1.1.1", + "mkdirp-classic": "^0.5.2", + "pump": "^3.0.0", + "tar-stream": "^2.1.4" + } + }, + "node_modules/prebuild-install/node_modules/tar-stream": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/tar-stream/-/tar-stream-2.2.0.tgz", + "integrity": "sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "bl": "^4.0.3", + "end-of-stream": "^1.4.1", + "fs-constants": "^1.0.0", + "inherits": "^2.0.3", + "readable-stream": "^3.1.1" + }, + "engines": { + "node": ">=6" + } + }, + "node_modules/prettier": { + "version": "2.8.8", + "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.8.8.tgz", + "integrity": "sha512-tdN8qQGvNjw4CHbY+XXk0JgCXn9QiF21a55rBe5LJAU+kDyC4WQn4+awm2Xfk2lQMk5fKup9XgzTZtGkjBdP9Q==", + "dev": true, + "license": "MIT", + "bin": { + "prettier": "bin-prettier.js" + }, + "engines": { + "node": ">=10.13.0" + }, + "funding": { + "url": "https://github.com/prettier/prettier?sponsor=1" + } + }, + "node_modules/prompts": { + "version": "2.4.2", + "resolved": "https://registry.npmjs.org/prompts/-/prompts-2.4.2.tgz", + "integrity": "sha512-NxNv/kLguCA7p3jE8oL2aEBsrJWgAakBpgmgK6lpPWV+WuOmY6r2/zbAVnP+T8bQlA0nzHXSJSJW0Hq7ylaD2Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "kleur": "^3.0.3", + "sisteransi": "^1.0.5" + }, + "engines": { + "node": ">= 6" + } + }, + "node_modules/prompts/node_modules/kleur": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/kleur/-/kleur-3.0.3.tgz", + "integrity": "sha512-eTIzlVOSUR+JxdDFepEYcBMtZ9Qqdef+rnzWdRZuMbOywu5tO2w2N7rqjoANZ5k9vywhL6Br1VRjUIgTQx4E8w==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/pump": { + "version": "3.0.4", + "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.4.tgz", + "integrity": "sha512-VS7sjc6KR7e1ukRFhQSY5LM2uBWAUPiOPa/A3mkKmiMwSmRFUITt0xuj+/lesgnCv+dPIEYlkzrcyXgquIHMcA==", + "dev": true, + "license": "MIT", + "dependencies": { + "end-of-stream": "^1.1.0", + "once": "^1.3.1" + } + }, + "node_modules/qs": { + "version": "6.16.0", + "resolved": "https://registry.npmjs.org/qs/-/qs-6.16.0.tgz", + "integrity": "sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==", + "dev": true, + "license": "BSD-3-Clause", + "dependencies": { + "es-define-property": "^1.0.1", + "side-channel": "^1.1.1" + }, + "engines": { + "node": ">=0.6" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/rc": { + "version": "1.2.8", + "resolved": "https://registry.npmjs.org/rc/-/rc-1.2.8.tgz", + "integrity": "sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==", + "dev": true, + "license": "(BSD-2-Clause OR MIT OR Apache-2.0)", + "dependencies": { + "deep-extend": "^0.6.0", + "ini": "~1.3.0", + "minimist": "^1.2.0", + "strip-json-comments": "~2.0.1" + }, + "bin": { + "rc": "cli.js" + } + }, + "node_modules/rc/node_modules/ini": { + "version": "1.3.8", + "resolved": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz", + "integrity": "sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==", + "dev": true, + "license": "ISC" + }, + "node_modules/readable-stream": { + "version": "3.6.2", + "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz", + "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==", + "dev": true, + "license": "MIT", + "dependencies": { + "inherits": "^2.0.3", + "string_decoder": "^1.1.1", + "util-deprecate": "^1.0.1" + }, + "engines": { + "node": ">= 6" + } + }, + "node_modules/regexp-to-ast": { + "version": "0.5.0", + "resolved": "https://registry.npmjs.org/regexp-to-ast/-/regexp-to-ast-0.5.0.tgz", + "integrity": "sha512-tlbJqcMHnPKI9zSrystikWKwHkBqu2a/Sgw01h3zFjvYrMxEDYHzzoMZnUrbIfpTFEsoRnnviOXNCzFiSc54Qw==", + "dev": true, + "license": "MIT" + }, + "node_modules/require-directory": { + "version": "2.1.1", + "resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz", + "integrity": "sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/rimraf": { + "version": "6.1.3", + "resolved": "https://registry.npmjs.org/rimraf/-/rimraf-6.1.3.tgz", + "integrity": "sha512-LKg+Cr2ZF61fkcaK1UdkH2yEBBKnYjTyWzTJT6KNPcSPaiT7HSdhtMXQuN5wkTX0Xu72KQ1l8S42rlmexS2hSA==", + "dev": true, + "license": "BlueOak-1.0.0", + "dependencies": { + "glob": "^13.0.3", + "package-json-from-dist": "^1.0.1" + }, + "bin": { + "rimraf": "dist/esm/bin.mjs" + }, + "engines": { + "node": "20 || >=22" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/safe-buffer": { + "version": "5.2.1", + "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", + "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "MIT" + }, + "node_modules/sax": { + "version": "1.1.4", + "resolved": "https://registry.npmjs.org/sax/-/sax-1.1.4.tgz", + "integrity": "sha512-5f3k2PbGGp+YtKJjOItpg3P99IMD84E4HOvcfleTb5joCHNXYLsR9yWFPOYGgaeMPDubQILTCMdsFb2OMeOjtg==", + "dev": true, + "license": "ISC" + }, + "node_modules/semver": { + "version": "7.8.5", + "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz", + "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==", + "dev": true, + "license": "ISC", + "bin": { + "semver": "bin/semver.js" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/sharp": { + "version": "0.32.6", + "resolved": "https://registry.npmjs.org/sharp/-/sharp-0.32.6.tgz", + "integrity": "sha512-KyLTWwgcR9Oe4d9HwCwNM2l7+J0dUQwn/yf7S0EnTtb0eVS4RxO0eUSvxPtzT4F3SY+C4K6fqdv/DO27sJ/v/w==", + "dev": true, + "hasInstallScript": true, + "license": "Apache-2.0", + "dependencies": { + "color": "^4.2.3", + "detect-libc": "^2.0.2", + "node-addon-api": "^6.1.0", + "prebuild-install": "^7.1.1", + "semver": "^7.5.4", + "simple-get": "^4.0.1", + "tar-fs": "^3.0.4", + "tunnel-agent": "^0.6.0" + }, + "engines": { + "node": ">=14.15.0" + }, + "funding": { + "url": "https://opencollective.com/libvips" + } + }, + "node_modules/shebang-command": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz", + "integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==", + "dev": true, + "license": "MIT", + "dependencies": { + "shebang-regex": "^3.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/shebang-regex": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz", + "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/side-channel": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.1.tgz", + "integrity": "sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0", + "object-inspect": "^1.13.4", + "side-channel-list": "^1.0.1", + "side-channel-map": "^1.0.1", + "side-channel-weakmap": "^1.0.2" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/side-channel-list": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz", + "integrity": "sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==", + "dev": true, + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0", + "object-inspect": "^1.13.4" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/side-channel-map": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz", + "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==", + "dev": true, + "license": "MIT", + "dependencies": { + "call-bound": "^1.0.2", + "es-errors": "^1.3.0", + "get-intrinsic": "^1.2.5", + "object-inspect": "^1.13.3" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/side-channel-weakmap": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz", + "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==", + "dev": true, + "license": "MIT", + "dependencies": { + "call-bound": "^1.0.2", + "es-errors": "^1.3.0", + "get-intrinsic": "^1.2.5", + "object-inspect": "^1.13.3", + "side-channel-map": "^1.0.1" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/signal-exit": { + "version": "3.0.7", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/simple-concat": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/simple-concat/-/simple-concat-1.0.1.tgz", + "integrity": "sha512-cSFtAPtRhljv69IK0hTVZQ+OfE9nePi/rtJmw5UjHeVyVroEqJXP1sFztKUy1qU+xvz3u/sfYJLa947b7nAN2Q==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "MIT" + }, + "node_modules/simple-get": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/simple-get/-/simple-get-4.0.1.tgz", + "integrity": "sha512-brv7p5WgH0jmQJr1ZDDfKDOSeWWg+OVypG99A/5vYGPqJ6pxiaHLy8nxtFjBA7oMa01ebA9gfh1uMCFqOuXxvA==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "MIT", + "dependencies": { + "decompress-response": "^6.0.0", + "once": "^1.3.1", + "simple-concat": "^1.0.0" + } + }, + "node_modules/simple-plist": { + "version": "1.3.1", + "resolved": "https://registry.npmjs.org/simple-plist/-/simple-plist-1.3.1.tgz", + "integrity": "sha512-iMSw5i0XseMnrhtIzRb7XpQEXepa9xhWxGUojHBL43SIpQuDQkh3Wpy67ZbDzZVr6EKxvwVChnVpdl8hEVLDiw==", + "dev": true, + "license": "MIT", + "dependencies": { + "bplist-creator": "0.1.0", + "bplist-parser": "0.3.1", + "plist": "^3.0.5" + } + }, + "node_modules/simple-plist/node_modules/bplist-parser": { + "version": "0.3.1", + "resolved": "https://registry.npmjs.org/bplist-parser/-/bplist-parser-0.3.1.tgz", + "integrity": "sha512-PyJxiNtA5T2PlLIeBot4lbp7rj4OadzjnMZD/G5zuBNt8ei/yCU7+wW0h2bag9vr8c+/WuRWmSxbqAl9hL1rBA==", + "dev": true, + "license": "MIT", + "dependencies": { + "big-integer": "1.6.x" + }, + "engines": { + "node": ">= 5.10.0" + } + }, + "node_modules/simple-swizzle": { + "version": "0.2.4", + "resolved": "https://registry.npmjs.org/simple-swizzle/-/simple-swizzle-0.2.4.tgz", + "integrity": "sha512-nAu1WFPQSMNr2Zn9PGSZK9AGn4t/y97lEm+MXTtUDwfP0ksAIX4nO+6ruD9Jwut4C49SB1Ws+fbXsm/yScWOHw==", + "dev": true, + "license": "MIT", + "dependencies": { + "is-arrayish": "^0.3.1" + } + }, + "node_modules/sisteransi": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/sisteransi/-/sisteransi-1.0.5.tgz", + "integrity": "sha512-bLGGlR1QxBcynn2d5YmDX4MGjlZvy2MRBDRNHLJ8VI6l6+9FUiyTFNJ0IveOSP0bcXgVDPRcfGqA0pjaqUpfVg==", + "dev": true, + "license": "MIT" + }, + "node_modules/slice-ansi": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/slice-ansi/-/slice-ansi-4.0.0.tgz", + "integrity": "sha512-qMCMfhY040cVHT43K9BFygqYbUPFZKHOg7K73mtTWJRb8pyP3fzf4Ixd5SzdEJQ6MRUg/WBnOLxghZtKKurENQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-styles": "^4.0.0", + "astral-regex": "^2.0.0", + "is-fullwidth-code-point": "^3.0.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/chalk/slice-ansi?sponsor=1" + } + }, + "node_modules/split2": { + "version": "4.2.0", + "resolved": "https://registry.npmjs.org/split2/-/split2-4.2.0.tgz", + "integrity": "sha512-UcjcJOWknrNkF6PLX83qcHM6KHgVKNkV62Y8a5uYDVv9ydGQVwAHMKqHdJje1VTWpljG0WYpCDhrCdAOYH4TWg==", + "dev": true, + "license": "ISC", + "engines": { + "node": ">= 10.x" + } + }, + "node_modules/stream-buffers": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/stream-buffers/-/stream-buffers-2.2.0.tgz", + "integrity": "sha512-uyQK/mx5QjHun80FLJTfaWE7JtwfRMKBLkMne6udYOmvH0CawotVa7TfgYHzAnpphn4+TweIx1QKMnRIbipmUg==", + "dev": true, + "license": "Unlicense", + "engines": { + "node": ">= 0.10.0" + } + }, + "node_modules/streamx": { + "version": "2.28.1", + "resolved": "https://registry.npmjs.org/streamx/-/streamx-2.28.1.tgz", + "integrity": "sha512-zEzXb0s5Cds7tqMH6rhZ05lcJydCWiQPEwiNngVqzsxCc962vLY4Uw+mW7od8kDH258k2Uz/JrOkdIAAhSh9VA==", + "dev": true, + "license": "MIT", + "dependencies": { + "events-universal": "^1.0.0", + "fast-fifo": "^1.3.2", + "text-decoder": "^1.1.0" + } + }, + "node_modules/string_decoder": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz", + "integrity": "sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==", + "dev": true, + "license": "MIT", + "dependencies": { + "safe-buffer": "~5.2.0" + } + }, + "node_modules/string-width": { + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", + "dev": true, + "license": "MIT", + "dependencies": { + "emoji-regex": "^8.0.0", + "is-fullwidth-code-point": "^3.0.0", + "strip-ansi": "^6.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/strip-ansi": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/strip-json-comments": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz", + "integrity": "sha512-4gB8na07fecVVkOI6Rs4e7T6NOTki5EmL7TUduTs6bu3EdnSycntVJ4re8kgZA+wx9IueI2Y11bfbgwtzuE0KQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/tar": { + "version": "7.5.22", + "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.22.tgz", + "integrity": "sha512-MFO/QzvtAOmJbkhOaCTvbGcFN9L9b+JunIsDwaKljSOdcLMea3NJ1k9Usz/rjdfSXTq4dfzfeS7W4p4YOAAHeA==", + "dev": true, + "license": "BlueOak-1.0.0", + "dependencies": { + "@isaacs/fs-minipass": "^4.0.0", + "chownr": "^3.0.0", + "minipass": "^7.1.2", + "minizlib": "^3.1.0", + "yallist": "^5.0.0" + }, + "engines": { + "node": ">=18" + } + }, + "node_modules/tar-fs": { + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-3.1.3.tgz", + "integrity": "sha512-/hU4AXnIdZu+Gvl1pk0oI5f5HxWsCJRtY2aFaJdk9VvyL48DWU6iU5WAIPG+wIi1YvWA6eTJvIviP/tMAZZNwQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "pump": "^3.0.0", + "tar-stream": "^3.1.5" + }, + "optionalDependencies": { + "bare-fs": "^4.0.1", + "bare-path": "^3.0.0" + } + }, + "node_modules/tar-stream": { + "version": "3.2.1", + "resolved": "https://registry.npmjs.org/tar-stream/-/tar-stream-3.2.1.tgz", + "integrity": "sha512-nqsEO8zLZJvrOMdEwkA0QdCLFbetHMn95Zqu4fKwX+hkaTWJPZZOrxx/PwtxoK0MMGQmBQNRW3CPs8IFYQz4cQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "b4a": "^1.6.4", + "bare-fs": "^4.5.5", + "fast-fifo": "^1.2.0", + "streamx": "^2.15.0" + } + }, + "node_modules/teex": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/teex/-/teex-1.0.1.tgz", + "integrity": "sha512-eYE6iEI62Ni1H8oIa7KlDU6uQBtqr4Eajni3wX7rpfXD8ysFx8z0+dri+KWEPWpBsxXfxu58x/0jvTVT1ekOSg==", + "dev": true, + "license": "MIT", + "dependencies": { + "streamx": "^2.12.5" + } + }, + "node_modules/text-decoder": { + "version": "1.2.7", + "resolved": "https://registry.npmjs.org/text-decoder/-/text-decoder-1.2.7.tgz", + "integrity": "sha512-vlLytXkeP4xvEq2otHeJfSQIRyWxo/oZGEbXrtEEF9Hnmrdly59sUbzZ/QgyWuLYHctCHxFF4tRQZNQ9k60ExQ==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "b4a": "^1.6.4" + } + }, + "node_modules/through2": { + "version": "4.0.2", + "resolved": "https://registry.npmjs.org/through2/-/through2-4.0.2.tgz", + "integrity": "sha512-iOqSav00cVxEEICeD7TjLB1sueEL+81Wpzp2bY17uZjZN0pWZPuo4suZ/61VujxmqSGFfgOcNuTZ85QJwNZQpw==", + "dev": true, + "license": "MIT", + "dependencies": { + "readable-stream": "3" + } + }, + "node_modules/tr46": { + "version": "0.0.3", + "resolved": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz", + "integrity": "sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw==", + "dev": true, + "license": "MIT" + }, + "node_modules/tree-kill": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/tree-kill/-/tree-kill-1.2.2.tgz", + "integrity": "sha512-L0Orpi8qGpRG//Nd+H90vFB+3iHnue1zSSGmNOOCh1GLJ7rUKVwV2HvijphGQS2UmhUZewS9VgvxYIdgr+fG1A==", + "dev": true, + "license": "MIT", + "bin": { + "tree-kill": "cli.js" + } + }, + "node_modules/tslib": { + "version": "2.6.2", + "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.6.2.tgz", + "integrity": "sha512-AEYxH93jGFPn/a2iVAwW87VuUIkR1FVUKB77NwMF7nBTDkDrrT/Hpt/IrCJ0QXhW27jTBDcf5ZY7w6RiqTMw2Q==", + "license": "0BSD" + }, + "node_modules/tunnel-agent": { + "version": "0.6.0", + "resolved": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz", + "integrity": "sha512-McnNiV1l8RYeY8tBgEpuodCC1mLUdbSN+CYBL7kJsJNInOP8UjDDEwdk6Mw60vdLLrr5NHKZhMAOSrR2NZuQ+w==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "safe-buffer": "^5.0.1" + }, + "engines": { + "node": "*" + } + }, + "node_modules/undici-types": { + "version": "6.21.0", + "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz", + "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/universalify": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/universalify/-/universalify-2.0.1.tgz", + "integrity": "sha512-gptHNQghINnc/vTGIk0SOFGFNXw7JVrlRUtConJRlvaw6DuX0wO5Jeko9sWrMBhh+PsYAZ7oXAiOnf/UKogyiw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 10.0.0" + } + }, + "node_modules/untildify": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/untildify/-/untildify-4.0.0.tgz", + "integrity": "sha512-KK8xQ1mkzZeg9inewmFVDNkg3l5LUhoq9kN6iWYB/CC9YMG8HA+c1Q8HwDe6dEX7kErrEVNVBO3fWsVq5iDgtw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/url-template": { + "version": "2.0.8", + "resolved": "https://registry.npmjs.org/url-template/-/url-template-2.0.8.tgz", + "integrity": "sha512-XdVKMF4SJ0nP/O7XIPB0JwAEuT9lDIYnNsK8yGVe43y0AWoKeJNdv3ZNWh7ksJ6KqQFjOO6ox/VEitLnaVNufw==", + "dev": true, + "license": "BSD" + }, + "node_modules/util-deprecate": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz", + "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==", + "dev": true, + "license": "MIT" + }, + "node_modules/uuid": { + "version": "7.0.3", + "resolved": "https://registry.npmjs.org/uuid/-/uuid-7.0.3.tgz", + "integrity": "sha512-DPSke0pXhTZgoF/d+WSt2QaKMCFSfx7QegxEWT+JOuHF5aWrKEn0G+ztjuJg/gG8/ItK+rbPCD/yNv8yyih6Cg==", + "deprecated": "uuid@10 and below is no longer supported. For ESM codebases, update to uuid@latest. For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028).", + "dev": true, + "license": "MIT", + "bin": { + "uuid": "dist/bin/uuid" + } + }, + "node_modules/web-streams-polyfill": { + "version": "3.3.3", + "resolved": "https://registry.npmjs.org/web-streams-polyfill/-/web-streams-polyfill-3.3.3.tgz", + "integrity": "sha512-d2JWLCivmZYTSIoge9MsgFCZrt571BikcWGYkjC1khllbTeDlGqZ2D8vD8E/lJa8WGWbb7Plm8/XJYV7IJHZZw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 8" + } + }, + "node_modules/webidl-conversions": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz", + "integrity": "sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ==", + "dev": true, + "license": "BSD-2-Clause" + }, + "node_modules/whatwg-url": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz", + "integrity": "sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw==", + "dev": true, + "license": "MIT", + "dependencies": { + "tr46": "~0.0.3", + "webidl-conversions": "^3.0.0" + } + }, + "node_modules/which": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz", + "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==", + "dev": true, + "license": "ISC", + "dependencies": { + "isexe": "^2.0.0" + }, + "bin": { + "node-which": "bin/node-which" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/wrap-ansi": { + "version": "7.0.0", + "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz", + "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-styles": "^4.0.0", + "string-width": "^4.1.0", + "strip-ansi": "^6.0.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/chalk/wrap-ansi?sponsor=1" + } + }, + "node_modules/wrappy": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", + "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/xcode": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/xcode/-/xcode-3.0.1.tgz", + "integrity": "sha512-kCz5k7J7XbJtjABOvkc5lJmkiDh8VhjVCGNiqdKCscmVpdVUpEAyXv1xmCLkQJ5dsHqx3IPO4XW+NTDhU/fatA==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "simple-plist": "^1.1.0", + "uuid": "^7.0.3" + }, + "engines": { + "node": ">=10.0.0" + } + }, + "node_modules/xml-js": { + "version": "1.6.11", + "resolved": "https://registry.npmjs.org/xml-js/-/xml-js-1.6.11.tgz", + "integrity": "sha512-7rVi2KMfwfWFl+GpPg6m80IVMWXLRjO+PxTq7V2CDhoGak0wzYzFgUY2m4XJ47OGdXd8eLE8EmwfAmdjw7lC1g==", + "dev": true, + "license": "MIT", + "dependencies": { + "sax": "^1.2.4" + }, + "bin": { + "xml-js": "bin/cli.js" + } + }, + "node_modules/xml-js/node_modules/sax": { + "version": "1.6.1", + "resolved": "https://registry.npmjs.org/sax/-/sax-1.6.1.tgz", + "integrity": "sha512-42tBVwLWnaQvW5zc4HbZrTuWccECCZfBi92FDuwtqxasH+JbPB3/FOKb1m222K42R4WxuxzzMsTswfzgtSu64Q==", + "dev": true, + "license": "BlueOak-1.0.0", + "engines": { + "node": ">=11.0.0" + } + }, + "node_modules/xml2js": { + "version": "0.6.2", + "resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.6.2.tgz", + "integrity": "sha512-T4rieHaC1EXcES0Kxxj4JWgaUQHDk+qwHcYOCFHfiwKz7tOVPLq7Hjq9dM1WCMhylqMEfP7hMcOIChvotiZegA==", + "dev": true, + "license": "MIT", + "dependencies": { + "sax": ">=0.6.0", + "xmlbuilder": "~11.0.0" + }, + "engines": { + "node": ">=4.0.0" + } + }, + "node_modules/xml2js/node_modules/xmlbuilder": { + "version": "11.0.1", + "resolved": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-11.0.1.tgz", + "integrity": "sha512-fDlsI/kFEx7gLvbecc0/ohLG50fugQp8ryHzMTuW9vSa1GJ0XYWKnhsUx7oie3G98+r56aTQIUB4kht42R3JvA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=4.0" + } + }, + "node_modules/xmlbuilder": { + "version": "15.1.1", + "resolved": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-15.1.1.tgz", + "integrity": "sha512-yMqGBqtXyeN1e3TGYvgNgDVZ3j84W4cwkOXQswghol6APgZWaff9lnbvN7MHYJOiXsvGPXtjTYJEiC9J2wv9Eg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8.0" + } + }, + "node_modules/xpath": { + "version": "0.0.32", + "resolved": "https://registry.npmjs.org/xpath/-/xpath-0.0.32.tgz", + "integrity": "sha512-rxMJhSIoiO8vXcWvSifKqhvV96GjiD5wYb8/QHdoRyQvraTpp4IEv944nhGausZZ3u7dhQXteZuZbaqfpB7uYw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.6.0" + } + }, + "node_modules/y18n": { + "version": "5.0.8", + "resolved": "https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz", + "integrity": "sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==", + "dev": true, + "license": "ISC", + "engines": { + "node": ">=10" + } + }, + "node_modules/yallist": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/yallist/-/yallist-5.0.0.tgz", + "integrity": "sha512-YgvUTfwqyc7UXVMrB+SImsVYSmTS8X/tSrtdNZMImM+n7+QTriRXyXim0mBrTXNeqzVF0KWGgHPeiyViFFrNDw==", + "dev": true, + "license": "BlueOak-1.0.0", + "engines": { + "node": ">=18" + } + }, + "node_modules/yargs": { + "version": "17.7.2", + "resolved": "https://registry.npmjs.org/yargs/-/yargs-17.7.2.tgz", + "integrity": "sha512-7dSzzRQ++CKnNI/krKnYRV7JKKPUXMEh61soaHKg9mrWEhzFWhFnxPxGl+69cD1Ou63C13NUPCnmIcrvqCuM6w==", + "dev": true, + "license": "MIT", + "dependencies": { + "cliui": "^8.0.1", + "escalade": "^3.1.1", + "get-caller-file": "^2.0.5", + "require-directory": "^2.1.1", + "string-width": "^4.2.3", + "y18n": "^5.0.5", + "yargs-parser": "^21.1.1" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/yargs-parser": { + "version": "21.1.1", + "resolved": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-21.1.1.tgz", + "integrity": "sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==", + "dev": true, + "license": "ISC", + "engines": { + "node": ">=12" + } + }, + "node_modules/yauzl": { + "version": "2.10.0", + "resolved": "https://registry.npmjs.org/yauzl/-/yauzl-2.10.0.tgz", + "integrity": "sha512-p4a9I6X6nu6IhoGmBqAcbJy1mlC4j27vEPZX9F4L4/vZT3Lyq1VkFHw/V/PUcB9Buo+DG3iHkT0x3Qya58zc3g==", + "dev": true, + "license": "MIT", + "dependencies": { + "buffer-crc32": "~0.2.3", + "fd-slicer": "~1.1.0" + } + } + } +} diff --git a/mobile/package.json b/mobile/package.json new file mode 100644 index 0000000..4e18fe8 --- /dev/null +++ b/mobile/package.json @@ -0,0 +1,31 @@ +{ + "name": "recurring-checklist-mobile", + "version": "1.0.0", + "private": true, + "description": "Native iOS/Android shells for the Recurring Checklist web app. The web app in ../server/public is the single source of truth for all UI; these shells bundle a copy of it and talk to the production server as a JSON API.", + "scripts": { + "sync:web": "node scripts/sync-web.js", + "sync": "npm run sync:web && npx cap sync", + "open:ios": "npx cap open ios", + "open:android": "npx cap open android", + "assets": "npx @capacitor/assets generate --iconBackgroundColor '#1d2026' --iconBackgroundColorDark '#1d2026' --splashBackgroundColor '#14161b' --splashBackgroundColorDark '#14161b'" + }, + "dependencies": { + "@capacitor/android": "8.5.1", + "@capacitor/app": "8.1.1", + "@capacitor/browser": "8.0.4", + "@capacitor/core": "8.5.1", + "@capacitor/haptics": "8.0.2", + "@capacitor/ios": "8.5.1", + "@capacitor/keyboard": "8.0.5", + "@capacitor/network": "8.0.1", + "@capacitor/splash-screen": "8.0.2", + "@capacitor/status-bar": "8.0.3" + }, + "devDependencies": { + "@capacitor/assets": "3.0.5", + "@capacitor/cli": "8.5.1", + "@googleapis/androidpublisher": "^42.0.0", + "esbuild": "0.25.10" + } +} diff --git a/mobile/release.config.json b/mobile/release.config.json new file mode 100644 index 0000000..aa92335 --- /dev/null +++ b/mobile/release.config.json @@ -0,0 +1,12 @@ +{ + "_comment": "Single source of truth for what the store builds point at and how they're numbered. release.sh bumps the three numbers; everything else is hand-edited and rarely changes.", + "apiBase": "https://check.watersmedia.org", + "version": "1.0.0", + "iosBuild": 8, + "androidVersionCode": 6, + "_versionNotes": [ + "version — the marketing version users see, shared by both stores (CFBundleShortVersionString / versionName).", + "iosBuild — CFBundleVersion. Must strictly increase for every binary uploaded to App Store Connect, even a re-upload of the same version.", + "androidVersionCode— Play's versionCode. Must strictly increase for every AAB uploaded. Play NEVER lets a code be reused, even after deleting the release." + ] +} diff --git a/mobile/scripts/asc-status.js b/mobile/scripts/asc-status.js new file mode 100644 index 0000000..2d1b447 --- /dev/null +++ b/mobile/scripts/asc-status.js @@ -0,0 +1,161 @@ +#!/usr/bin/env node +'use strict'; +// asc-status.js — ask App Store Connect what it actually thinks of our builds. +// +// node scripts/asc-status.js +// +// TestFlight's web UI is vague while a build is in flight ("No Builds Available" on a tester +// row can mean processing, or export-compliance unanswered, or the build was rejected). This +// asks the API instead and prints the real processingState, so you know whether to wait or +// to go fix something. +// +// Reuses the same key release.sh uploads with. The App Store Connect API wants a short-lived +// ES256 JWT; Node can sign that with its built-in crypto, so there is no dependency here. + +const fs = require('fs'); +const path = require('path'); +const crypto = require('crypto'); + +const MOBILE = path.resolve(__dirname, '..'); +const CFG = path.join(MOBILE, 'ios-signing.config'); + +function cfgValue(key) { + const m = fs.readFileSync(CFG, 'utf8').match(new RegExp('^' + key + '=(.*)$', 'm')); + return m ? m[1].trim() : ''; +} + +const KEY_ID = cfgValue('ASC_KEY_ID'); +const ISSUER_ID = cfgValue('ASC_ISSUER_ID'); +const BUNDLE_ID = JSON.parse(fs.readFileSync(path.join(MOBILE, 'capacitor.config.json'), 'utf8')).appId; +const KEY_PATH = path.join(process.env.HOME, '.appstoreconnect', 'private_keys', `AuthKey_${KEY_ID}.p8`); + +if (!KEY_ID || !ISSUER_ID) { console.error('✗ ASC_KEY_ID / ASC_ISSUER_ID not set in ios-signing.config'); process.exit(1); } +if (!fs.existsSync(KEY_PATH)) { console.error(`✗ missing ${KEY_PATH}`); process.exit(1); } + +function b64url(buf) { + return Buffer.from(buf).toString('base64').replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, ''); +} + +function makeJwt() { + const now = Math.floor(Date.now() / 1000); + const header = { alg: 'ES256', kid: KEY_ID, typ: 'JWT' }; + // Apple caps token lifetime at 20 minutes and rejects anything longer outright. + const payload = { iss: ISSUER_ID, iat: now, exp: now + 600, aud: 'appstoreconnect-v1' }; + const signingInput = `${b64url(JSON.stringify(header))}.${b64url(JSON.stringify(payload))}`; + // dsaEncoding ieee-p1363 gives the raw r||s signature JWT requires. Node's default is DER, + // which Apple rejects with a bare 401 and no explanation — an easy hour to lose. + const sig = crypto.sign(null, Buffer.from(signingInput), { + key: fs.readFileSync(KEY_PATH), + dsaEncoding: 'ieee-p1363', + }); + return `${signingInput}.${b64url(sig)}`; +} + +async function api(pathname) { + const res = await fetch(`https://api.appstoreconnect.apple.com${pathname}`, { + headers: { Authorization: `Bearer ${makeJwt()}` }, + }); + const body = await res.json().catch(() => ({})); + if (!res.ok) { + const detail = (body.errors || []).map((e) => `${e.title}: ${e.detail}`).join('\n ') || res.statusText; + throw new Error(`HTTP ${res.status}\n ${detail}`); + } + return body; +} + +(async () => { + const apps = await api(`/v1/apps?filter[bundleId]=${encodeURIComponent(BUNDLE_ID)}`); + if (!apps.data || !apps.data.length) { + console.error(`✗ no app in App Store Connect with bundle id ${BUNDLE_ID}`); + process.exit(1); + } + const app = apps.data[0]; + console.log(` ${app.attributes.name} (${BUNDLE_ID})`); + console.log(` app id ${app.id}\n`); + + const builds = await api(`/v1/builds?filter[app]=${app.id}&limit=10&sort=-uploadedDate`); + if (!builds.data.length) { + console.log(' No builds yet. If you just uploaded, Apple can take a few minutes to even'); + console.log(' register it — re-run shortly.'); + return; + } + + console.log(' BUILD STATE UPLOADED'); + console.log(' ───── ────────── ────────────────────'); + for (const b of builds.data) { + const a = b.attributes; + console.log(` ${String(a.version).padEnd(7)} ${String(a.processingState).padEnd(12)} ${new Date(a.uploadedDate).toLocaleString()}`); + } + + // processingState only says whether Apple finished ingesting the binary. Whether a TESTER + // can actually install it is a different field entirely — buildBetaDetail.internalBuildState + // — and it is the one that explains "No Builds Available". + const latestId = builds.data[0].id; + try { + const detail = await api(`/v1/builds/${latestId}/buildBetaDetail`); + const st = detail.data && detail.data.attributes; + if (st) { + console.log(` internal state ${st.internalBuildState}`); + console.log(` external state ${st.externalBuildState}`); + console.log(` auto-notify ${st.autoNotifyEnabled}`); + } + } catch (e) { console.log(` (buildBetaDetail unavailable: ${e.message.split('\n')[0]})`); } + + // Groups, and which builds are actually attached to each. /v1/builds/{id}/betaGroups + // 403s for an App Manager key, but the app-scoped route works — use that one. + console.log('\n GROUPS'); + try { + const groups = await api(`/v1/apps/${app.id}/betaGroups`); + for (const g of groups.data) { + const a = g.attributes; + console.log(` "${a.name}" internal=${a.isInternalGroup} allBuilds=${a.hasAccessToAllBuilds}`); + try { + const gb = await api(`/v1/betaGroups/${g.id}/builds`); + console.log(` builds: ${gb.data.length ? gb.data.map((x) => x.attributes.version).join(', ') : 'NONE — testers in this group see nothing'}`); + } catch (_) { /* non-fatal */ } + } + } catch (e) { console.log(` (unavailable: ${e.message.split('\n')[0]})`); } + + // The one that cost us an afternoon. A tester sitting at NOT_INVITED was never actually + // sent an invitation — adding someone to a group does NOT invite them. TestFlight then + // shows that Apple ID its "enter an invite code" empty screen, which looks for all the + // world like the build is broken or still processing. It is neither. + console.log('\n TESTERS'); + try { + const testers = await api(`/v1/betaTesters?filter[apps]=${app.id}&limit=50`); + if (!testers.data.length) console.log(' (none)'); + for (const t of testers.data) { + const a = t.attributes; + const note = a.state === 'NOT_INVITED' ? ' ← never invited; they will see the invite-code screen' : ''; + console.log(` ${a.email} ${a.state}${note}`); + } + } catch (e) { console.log(` (unavailable: ${e.message.split('\n')[0]})`); } + + const latest = builds.data[0].attributes; + console.log(); + switch (latest.processingState) { + case 'PROCESSING': + console.log(' Still processing. Testers see "No Builds Available" until this finishes —'); + console.log(' usually 5–30 minutes. Nothing to fix; just wait and re-run this.'); + break; + case 'VALID': + console.log(' ✓ Build is ready. If a tester still sees "No Builds Available" or an'); + console.log(' invite-code screen, read the TESTERS block above — in order of likelihood:'); + console.log(' NOT_INVITED → they were never sent an invite. Adding someone to a'); + console.log(' group does not invite them. Resend it from TestFlight,'); + console.log(' or POST /v1/betaTesterInvitations.'); + console.log(' INVITED → invite sent, not yet accepted. Open the email ON THE'); + console.log(' PHONE and tap "View in TestFlight".'); + console.log(' groups: NONE → attach the build: TestFlight → group → Builds → +'); + console.log(' And check the phone\'s App Store Apple ID matches the tester email.'); + break; + case 'FAILED': + case 'INVALID': + console.log(' ✗ Apple rejected this build during processing. The reason is emailed to the'); + console.log(' account holder, and shown under TestFlight → Builds. Fix, then re-run'); + console.log(' ./release.sh --ios (it will use a fresh build number automatically).'); + break; + default: + console.log(` Unrecognised state "${latest.processingState}" — check TestFlight directly.`); + } +})().catch((e) => { console.error(`✗ ${e.message}`); process.exit(1); }); diff --git a/mobile/scripts/env.sh b/mobile/scripts/env.sh new file mode 100755 index 0000000..0faa643 --- /dev/null +++ b/mobile/scripts/env.sh @@ -0,0 +1,26 @@ +#!/bin/bash +# Toolchain paths for the Android build. Source it, don't run it: . scripts/env.sh +# +# This Mac has no Homebrew, no system Java and no Android Studio, so the Android toolchain +# was installed by hand into the user's home directory (see mobile/README.md → Toolchain). +# Nothing here is on the default PATH, which is why every Android command has to source +# this file first — including release.sh. Without it Gradle fails with the misleading +# "Unable to locate a Java Runtime". + +export JAVA_HOME="$HOME/.jdks/temurin-21/Contents/Home" +export ANDROID_HOME="$HOME/Library/Android/sdk" +export ANDROID_SDK_ROOT="$ANDROID_HOME" +export PATH="$JAVA_HOME/bin:$ANDROID_HOME/platform-tools:$ANDROID_HOME/cmdline-tools/latest/bin:$ANDROID_HOME/emulator:$PATH" + +if [ ! -x "$JAVA_HOME/bin/java" ]; then + echo "✗ No JDK at $JAVA_HOME" >&2 + echo " Reinstall: curl -L -o /tmp/jdk.tar.gz 'https://api.adoptium.net/v3/binary/latest/21/ga/mac/aarch64/jdk/hotspot/normal/eclipse'" >&2 + echo " mkdir -p ~/.jdks && tar -xzf /tmp/jdk.tar.gz -C ~/.jdks && mv ~/.jdks/jdk-21* ~/.jdks/temurin-21" >&2 + return 1 2>/dev/null || exit 1 +fi + +if [ ! -d "$ANDROID_HOME/platforms" ]; then + echo "✗ No Android SDK at $ANDROID_HOME" >&2 + echo " Reinstall: see mobile/README.md → Toolchain" >&2 + return 1 2>/dev/null || exit 1 +fi diff --git a/mobile/scripts/stamp-version.js b/mobile/scripts/stamp-version.js new file mode 100644 index 0000000..ec77cc4 --- /dev/null +++ b/mobile/scripts/stamp-version.js @@ -0,0 +1,62 @@ +#!/usr/bin/env node +'use strict'; +// stamp-version.js — push release.config.json's numbers into the Xcode project. +// +// Android reads release.config.json directly from build.gradle, but Xcode keeps +// MARKETING_VERSION / CURRENT_PROJECT_VERSION inside project.pbxproj, so they have to be +// written in. Both stores then get the same marketing version from one edited file, which +// is the whole point: a build number that silently disagrees between platforms is how you +// end up with "1.4 on Android, 1.2 on iPhone" bug reports that nobody can reproduce. +// +// Run with --check to verify without writing (used by release.sh as a pre-flight). + +const fs = require('fs'); +const path = require('path'); + +const MOBILE = path.resolve(__dirname, '..'); +const PBXPROJ = path.join(MOBILE, 'ios', 'App', 'App.xcodeproj', 'project.pbxproj'); + +const release = JSON.parse(fs.readFileSync(path.join(MOBILE, 'release.config.json'), 'utf8')); +const version = String(release.version || '').trim(); +const iosBuild = release.iosBuild; + +// Apple rejects a CFBundleShortVersionString that isn't 1-3 dot-separated integers, and it +// rejects it at upload time — after the whole archive has already been built and signed. +if (!/^\d+(\.\d+){0,2}$/.test(version)) { + console.error(`✗ version must be 1-3 dot-separated numbers (e.g. 1.2.3) — got ${JSON.stringify(release.version)}`); + process.exit(1); +} +if (!Number.isInteger(iosBuild) || iosBuild < 1) { + console.error(`✗ iosBuild must be a positive integer — got ${JSON.stringify(iosBuild)}`); + process.exit(1); +} +if (!Number.isInteger(release.androidVersionCode) || release.androidVersionCode < 1) { + console.error(`✗ androidVersionCode must be a positive integer — got ${JSON.stringify(release.androidVersionCode)}`); + process.exit(1); +} + +let pbx = fs.readFileSync(PBXPROJ, 'utf8'); +const before = pbx; + +// Both the Debug and Release configurations carry these, hence the global replace: an +// archive built from the wrong configuration must not ship a stale build number. +pbx = pbx.replace(/MARKETING_VERSION = [^;]+;/g, `MARKETING_VERSION = ${version};`); +pbx = pbx.replace(/CURRENT_PROJECT_VERSION = [^;]+;/g, `CURRENT_PROJECT_VERSION = ${iosBuild};`); + +const marketingHits = (pbx.match(/MARKETING_VERSION = /g) || []).length; +const buildHits = (pbx.match(/CURRENT_PROJECT_VERSION = /g) || []).length; +if (marketingHits < 2 || buildHits < 2) { + console.error(`✗ expected MARKETING_VERSION and CURRENT_PROJECT_VERSION in both build configs (found ${marketingHits}/${buildHits})`); + process.exit(1); +} + +if (process.argv.includes('--check')) { + console.log(pbx === before + ? `✓ Xcode already at ${version} (${iosBuild})` + : `• Xcode would change to ${version} (${iosBuild})`); + process.exit(0); +} + +if (pbx !== before) fs.writeFileSync(PBXPROJ, pbx); +console.log(`✓ Xcode stamped ${version} (build ${iosBuild})`); +console.log(`✓ Gradle reads ${version} (code ${release.androidVersionCode}) from release.config.json`); diff --git a/mobile/scripts/sync-web.js b/mobile/scripts/sync-web.js new file mode 100644 index 0000000..1909d21 --- /dev/null +++ b/mobile/scripts/sync-web.js @@ -0,0 +1,156 @@ +#!/usr/bin/env node +'use strict'; +// sync-web.js — rebuild mobile/www from the one true copy of the front-end. +// +// The website in ../server/public IS the source of truth. The store apps never get their +// own fork of the UI; they get a byte-for-byte copy of these files plus a small, explicit +// set of native-only additions. That means a UI fix is written once and reaches all three +// targets — but it also means the apps are only as current as the last time this ran, +// which is why release.sh always runs it before a build. +// +// What it does: +// 1. Wipes and re-copies server/public -> www (a wipe, so a file DELETED from the web +// app can never linger inside a shipped app bundle). +// 2. Drops sw.js — the app bundle is already local; a service worker would only add a +// second invisible cache layer, and iOS's capacitor:// scheme can't host one. +// 3. Writes native-config.js — the API base and bundle stamp. This is why no server URL +// is hard-coded in server/public: the website reads its API from its own origin. +// 4. Bundles src/native-shell.js -> www/native-shell.js with esbuild. +// 5. Injects both scripts into www/index.html ahead of native-bridge.js, which needs +// window.CapPlugins and window.CHECKLIST_NATIVE_CONFIG to already exist. + +const fs = require('fs'); +const path = require('path'); +const { execFileSync } = require('child_process'); + +const MOBILE = path.resolve(__dirname, '..'); +const WEB_SRC = path.resolve(MOBILE, '..', 'server', 'public'); +const WWW = path.join(MOBILE, 'www'); + +const release = JSON.parse(fs.readFileSync(path.join(MOBILE, 'release.config.json'), 'utf8')); +const apiBase = String(release.apiBase || '').replace(/\/+$/, ''); + +if (!/^https:\/\//i.test(apiBase)) { + // Not style policing: both platforms block cleartext HTTP by default (iOS App Transport + // Security, Android's cleartextTrafficPermitted=false), so an http:// base produces an + // app that builds, ships, installs and then fails every single request. + console.error(`✗ apiBase must be an https:// URL — got ${JSON.stringify(release.apiBase)}`); + process.exit(1); +} + +// Files that exist for the website only and must not ship inside an app bundle. +const WEB_ONLY = new Set(['sw.js', '.DS_Store']); + +function copyTree(src, dest) { + fs.mkdirSync(dest, { recursive: true }); + for (const entry of fs.readdirSync(src, { withFileTypes: true })) { + if (WEB_ONLY.has(entry.name)) continue; + const from = path.join(src, entry.name); + const to = path.join(dest, entry.name); + if (entry.isDirectory()) copyTree(from, to); + else if (entry.isFile()) fs.copyFileSync(from, to); + } +} + +// 1 + 2. Full wipe, then copy. +fs.rmSync(WWW, { recursive: true, force: true }); +copyTree(WEB_SRC, WWW); + +// A missing native-bridge.js means the copy silently produced an app that would resolve +// every /api call against its own bundle. Fail the build instead of shipping that. +if (!fs.existsSync(path.join(WWW, 'native-bridge.js'))) { + console.error('✗ native-bridge.js is missing from server/public — the app cannot reach the API without it'); + process.exit(1); +} + +// 3. Native-only config. Regenerated every sync, so bundledAt doubles as "when did this +// binary's UI last get refreshed from the web app". +const bundledAt = new Date().toISOString(); +fs.writeFileSync(path.join(WWW, 'native-config.js'), + `// GENERATED by mobile/scripts/sync-web.js — do not edit, do not commit as source.\n` + + `// Present only inside the iOS/Android app bundles; native-bridge.js is inert without it.\n` + + `window.CHECKLIST_NATIVE_CONFIG = ${JSON.stringify({ + apiBase, + bundleVersion: release.version, + bundledAt, + }, null, 2)};\n`); + +// 4. Bundle the native-only shell. +const esbuild = path.join(MOBILE, 'node_modules', '.bin', 'esbuild'); +try { +execFileSync(esbuild, [ + path.join(MOBILE, 'src', 'native-shell.js'), + '--bundle', + '--format=iife', // a classic '; +if (!html.includes(anchor)) { + console.error('✗ could not find the native-bridge.js \n' + + ' \n' + + ' \n' + + anchor); +fs.writeFileSync(indexPath, html); + +const count = (function walk(dir) { + return fs.readdirSync(dir, { withFileTypes: true }).reduce((n, e) => + n + (e.isDirectory() ? walk(path.join(dir, e.name)) : 1), 0); +})(WWW); + +console.log(`✓ www/ rebuilt from server/public — ${count} files`); +console.log(` api base ${apiBase}`); +console.log(` version ${release.version} (ios build ${release.iosBuild}, android code ${release.androidVersionCode})`); +console.log(` bundled at ${bundledAt}`); diff --git a/mobile/scripts/upload-play.js b/mobile/scripts/upload-play.js new file mode 100644 index 0000000..90bcbed --- /dev/null +++ b/mobile/scripts/upload-play.js @@ -0,0 +1,144 @@ +#!/usr/bin/env node +'use strict'; +// upload-play.js — push a signed .aab to Google Play, unattended. +// +// node scripts/upload-play.js [--track internal] [--dry-run] +// +// Why a hand-written script rather than fastlane: fastlane needs Ruby >= 2.7 and this Mac +// has 2.6 (the same wall that pushed iOS onto SPM instead of CocoaPods). The Play Developer +// API is straightforward enough to call directly, and doing so keeps the whole toolchain on +// Node, which is already here. +// +// Auth is a Google Cloud SERVICE ACCOUNT — not your Google login. The JSON key goes at +// mobile/play-service-account.json (gitignored). Setup is in README.md → Android uploads. +// +// Play's upload is a TRANSACTION: open an edit, upload into it, point a track at it, then +// commit. Nothing is visible to anyone until the commit succeeds, so a crash halfway through +// leaves an abandoned edit and changes nothing — which is exactly the behaviour you want +// from something that ships to volunteers. + +const fs = require('fs'); +const path = require('path'); +const { androidpublisher, auth: gauth } = require('@googleapis/androidpublisher'); + +const MOBILE = path.resolve(__dirname, '..'); +const KEY_FILE = path.join(MOBILE, 'play-service-account.json'); +const CAP_CONFIG = JSON.parse(fs.readFileSync(path.join(MOBILE, 'capacitor.config.json'), 'utf8')); +const PACKAGE_NAME = CAP_CONFIG.appId; + +const args = process.argv.slice(2); +const aabPath = args.find((a) => !a.startsWith('--')); +const trackIdx = args.indexOf('--track'); +const track = trackIdx !== -1 ? args[trackIdx + 1] : 'internal'; +const dryRun = args.includes('--dry-run'); + +function die(msg, hint) { + console.error(`✗ ${msg}`); + if (hint) console.error(String(hint).split('\n').map((l) => ` ${l}`).join('\n')); + process.exit(1); +} + +if (!aabPath && !dryRun) die('usage: node scripts/upload-play.js [--track internal]'); +if (aabPath && !fs.existsSync(aabPath)) die(`no such file: ${aabPath}`); + +if (!fs.existsSync(KEY_FILE)) { + die(`no ${path.relative(process.cwd(), KEY_FILE)}`, + 'This is the Google Cloud service-account JSON that lets Play accept uploads.\n' + + 'One-time setup: mobile/README.md → "Android uploads (Play Developer API)".'); +} + +(async () => { + let creds; + try { + creds = JSON.parse(fs.readFileSync(KEY_FILE, 'utf8')); + } catch (e) { + die('play-service-account.json is not valid JSON', 'Re-download the key from Google Cloud Console.'); + } + if (creds.type !== 'service_account' || !creds.client_email || !creds.private_key) { + die('that JSON is not a service-account key', + 'It should contain "type": "service_account" and a client_email ending in\n' + + '.iam.gserviceaccount.com. An OAuth client ID download is a different file.'); + } + + const client = new gauth.GoogleAuth({ + credentials: creds, + scopes: ['https://www.googleapis.com/auth/androidpublisher'], + }); + const play = androidpublisher({ version: 'v3', auth: client }); + + console.log(` package ${PACKAGE_NAME}`); + console.log(` service acct ${creds.client_email}`); + console.log(` track ${track}`); + + // Opening an edit is also the cheapest possible permission check: it fails immediately and + // specifically if the service account isn't linked to this app in the Play Console. + let editId; + try { + const edit = await play.edits.insert({ packageName: PACKAGE_NAME }); + editId = edit.data.id; + } catch (e) { + const status = e && e.code; + const reason = (e && e.message) || String(e); + if (status === 401 || status === 403) { + die(`Play rejected the service account (HTTP ${status})`, + `${reason}\n\n` + + 'Usually one of:\n' + + ' · the service account has not been invited in Play Console →\n' + + ' Users and permissions → Invite user → (the client_email above)\n' + + ' · it lacks "Release to testing tracks" permission for this app\n' + + ' · the Google Play Android Developer API is not enabled on the Cloud project'); + } + if (status === 404) { + die(`Play has no app with package name ${PACKAGE_NAME}`, + 'Create it first: Play Console → Create app, then upload one build by hand.\n' + + 'Play requires the FIRST bundle of a brand-new app to be uploaded through the\n' + + 'Console UI; the API can only take over from the second release onward.'); + } + die(`could not open a Play edit: ${reason}`); + } + console.log(` edit ${editId}`); + + if (dryRun) { + // Abandon rather than commit — proves credentials and permissions end to end while + // changing absolutely nothing. + await play.edits.delete({ packageName: PACKAGE_NAME, editId }); + console.log('✓ credentials and permissions OK (dry run — edit abandoned, nothing changed)'); + return; + } + + console.log(` uploading ${path.basename(aabPath)} (${(fs.statSync(aabPath).size / 1048576).toFixed(1)} MB)…`); + let versionCode; + try { + const res = await play.edits.bundles.upload({ + packageName: PACKAGE_NAME, + editId, + media: { mimeType: 'application/octet-stream', body: fs.createReadStream(aabPath) }, + }); + versionCode = res.data.versionCode; + } catch (e) { + const reason = (e && e.message) || String(e); + await play.edits.delete({ packageName: PACKAGE_NAME, editId }).catch(() => {}); + if (/already.*used|not allowed to be used|APK.*version code/i.test(reason)) { + die('Play has already seen that versionCode', + `${reason}\n\n` + + 'Play permanently reserves every versionCode it has ever accepted — they cannot be\n' + + 'reused even after deleting the release. Bump androidVersionCode in\n' + + 'mobile/release.config.json and rebuild.'); + } + die(`bundle upload failed: ${reason}`); + } + console.log(` versionCode ${versionCode}`); + + // Point the track at the build we just uploaded. status 'completed' means testers on that + // track get it straight away; 'draft' would park it in the Console for a human to release. + await play.edits.tracks.update({ + packageName: PACKAGE_NAME, + editId, + track, + requestBody: { releases: [{ versionCodes: [String(versionCode)], status: 'completed' }] }, + }); + + await play.edits.commit({ packageName: PACKAGE_NAME, editId }); + console.log(`✓ released to the "${track}" track (versionCode ${versionCode})`); + console.log(' Play processes the bundle for a few minutes before testers see the update.'); +})().catch((e) => die(String((e && e.message) || e))); diff --git a/mobile/scripts/verify-asc-key.sh b/mobile/scripts/verify-asc-key.sh new file mode 100755 index 0000000..2ed0859 --- /dev/null +++ b/mobile/scripts/verify-asc-key.sh @@ -0,0 +1,99 @@ +#!/bin/bash +# verify-asc-key.sh — confirm the App Store Connect API key actually works. +# +# Run this once after creating the key, before trusting release.sh to upload: +# +# ./mobile/scripts/verify-asc-key.sh +# +# It calls `altool --list-providers`, which authenticates and returns the teams the key can +# see. Nothing is uploaded, nothing is created, no build number is consumed — so it is safe +# to run as often as you like. A bad key fails here in seconds instead of fifty seconds into +# an upload with an opaque error. + +set -uo pipefail +MOBILE="$(cd "$(dirname "$0")/.." && pwd)" +CFG="$MOBILE/ios-signing.config" + +G=$'\033[32m'; Y=$'\033[33m'; R=$'\033[31m'; DIM=$'\033[2m'; N=$'\033[0m' +ok() { echo " ${G}✓${N} $*"; } +warn() { echo " ${Y}!${N} $*"; } +bad() { echo " ${R}✗${N} $*" >&2; } + +[ -f "$CFG" ] || { bad "no $CFG — see mobile/README.md → iOS one-time setup"; exit 1; } +# shellcheck source=/dev/null +. "$CFG" + +if [ -z "${ASC_KEY_ID:-}" ] || [ -z "${ASC_ISSUER_ID:-}" ]; then + warn "ASC_KEY_ID / ASC_ISSUER_ID not set in ios-signing.config" + echo " ${DIM}Uploads stay manual (Xcode ▸ Organizer). Everything else still works.${N}" + exit 0 +fi + +# altool locates the key by NAME, not path — AuthKey_.p8 in one of its search dirs. +KEYFILE="$HOME/.appstoreconnect/private_keys/AuthKey_${ASC_KEY_ID}.p8" +echo " key id $ASC_KEY_ID" +echo " issuer $ASC_ISSUER_ID" +echo " key file $KEYFILE" + +if [ ! -f "$KEYFILE" ]; then + bad "that file does not exist" + echo " ${DIM}The filename must match the key id EXACTLY, including the AuthKey_ prefix${N}" + echo " ${DIM}and the .p8 extension. Apple's download is already named correctly — move it:${N}" + echo " ${DIM} mv ~/Downloads/AuthKey_${ASC_KEY_ID}.p8 ~/.appstoreconnect/private_keys/${N}" + exit 1 +fi +ok "key file present ($(wc -c < "$KEYFILE" | tr -d ' ') bytes)" + +# A .p8 that got mangled (opened and re-saved, or downloaded as HTML) fails auth with a +# generic error. Checking the PEM header names the real problem instead. +head -1 "$KEYFILE" | grep -q "BEGIN PRIVATE KEY" \ + && ok "looks like a valid PEM private key" \ + || { bad "not a PEM private key — re-download it from App Store Connect"; exit 1; } + +# Tighten permissions: this file can upload builds as your team. +chmod 600 "$KEYFILE" 2>/dev/null + +# NOT --list-providers: it rejects API-key auth outright ("list-providers does not support +# APIKey authentication"), so it can never verify a key like this one. --validate-app is the +# real check — it authenticates AND runs Apple's acceptance checks on the binary, without +# uploading anything or consuming the build number. +IPA="$(ls -t "$MOBILE/../dist-release/"*.ipa 2>/dev/null | head -1)" +if [ -z "$IPA" ]; then + warn "no .ipa in dist-release/ to test with — run ./release.sh --ios first" + exit 0 +fi +echo +echo " authenticating with $(basename "$IPA")…" +OUT="$(xcrun altool --validate-app -f "$IPA" -t ios --api-key "$ASC_KEY_ID" --api-issuer "$ASC_ISSUER_ID" 2>&1)" +RC=$? + +if [ $RC -eq 0 ]; then + ok "authenticated, and the build passed Apple's validation" + echo + ok "release.sh will now upload iOS builds automatically" + exit 0 +fi + +# Authentication and validation fail the same way at the shell level, so separate them — +# "your key is wrong" and "your binary is wrong" need completely different fixes. +if echo "$OUT" | grep -qiE "Unable to authenticate|Authentication failed|NOT_AUTHORIZED|invalid.*(key|issuer)"; then + bad "authentication FAILED — the key or issuer is wrong" + echo "$OUT" | grep -iE "error|message" | head -6 | sed 's/^/ /' + echo " ${DIM}· Issuer ID is the UUID above the key TABLE, not the key's own id${N}" + echo " ${DIM}· Key needs App Manager or Admin access${N}" + exit 1 +fi + +# "Cannot determine the Apple ID from Bundle ID" is what Apple actually says when the key +# authenticated fine but no app record exists yet — it reads like a failure and is not one. +if echo "$OUT" | grep -qiE "Cannot determine the Apple ID|no.*app.*with.*bundle|cannot be found|No suitable application"; then + ok "authentication WORKED — the key is good" + warn "but this app does not exist in App Store Connect yet" + echo " ${DIM}Create it: App Store Connect → Apps → + → New App${N}" + echo " ${DIM}Bundle ID: $(python3 -c "import json;print(json.load(open('$MOBILE/capacitor.config.json'))['appId'])" 2>/dev/null)${N}" + exit 0 +fi + +bad "validation failed" +echo "$OUT" | grep -iE "error|message|warning" | head -10 | sed 's/^/ /' +exit 1 diff --git a/mobile/src/local/boot.js b/mobile/src/local/boot.js new file mode 100644 index 0000000..ed2f6af --- /dev/null +++ b/mobile/src/local/boot.js @@ -0,0 +1,169 @@ +'use strict'; +// boot.js — runs the real server.js inside the app, with no server. +// +// This is the whole idea behind local mode: rather than reimplement fifty API routes in the +// client and watch them drift from the server, the actual server code is bundled and run in +// the WebView behind Node shims. Recurrence resets, scope rules, reconciliation invariants +// and validation are then the same code in every mode, by construction. +// +// Order matters here and is deliberate: `process` and the virtual filesystem must exist +// before server.js is required, because server.js reads env vars and touches the filesystem +// while its module body is still evaluating. + +const vfs = require('./vfs.js'); +const express = require('./shims/express.js'); + +const DATA_DIR = '/data'; +const PW_KEY = 'checklist:localAdminPassword'; + +// A local install has exactly one user and no network surface, but server.js is still the +// real thing underneath, so it wants a master password. Generate one per install, keep it on +// the device, and sign in with it automatically — the user never sees a login, and no +// authentication check has been weakened to achieve that. +function localAdminPassword() { + let pw = ''; + try { pw = localStorage.getItem(PW_KEY) || ''; } catch (_) {} + if (!pw) { + const b = new Uint8Array(24); + crypto.getRandomValues(b); + pw = Array.from(b).map((x) => x.toString(16).padStart(2, '0')).join(''); + try { localStorage.setItem(PW_KEY, pw); } catch (_) {} + } + return pw; +} + +let readyPromise = null; +let app = null; + +async function start() { + await vfs.init(); + + const ADMIN_PASSWORD = localAdminPassword(); + + // server.js reads these while its module body evaluates, so they must be in place first. + // Email and cron are deliberately blank: no SMTP host means the digest code takes its + // already-handled "not configured" path rather than erroring. + globalThis.process = { + env: { + DATA_DIR, + ADMIN_PASSWORD, + PORT: '0', + REPORT_EMAIL: '', + REPORT_CRON: '0 15 * * 0', + REPORT_TZ: Intl.DateTimeFormat().resolvedOptions().timeZone || 'America/New_York', + BACKUP_KEEP: '5', // a phone is not a NAS; keep a few, not thirty + RESET_AFTER_DIGEST: '', + SMTP_HOST: '', SMTP_PORT: '587', SMTP_SECURE: '', SMTP_USER: '', SMTP_PASS: '', SMTP_FROM: '', + NATIVE_CORS_ORIGINS: '', + }, + argv: ['node', 'server.js'], + platform: 'browser', + version: 'v22.0.0', + exit() { /* nothing to exit */ }, + on() {}, + cwd: () => '/', + nextTick: (fn, ...a) => Promise.resolve().then(() => fn(...a)), + }; + + // server.js decodes uploaded photos and documents with Buffer.from(base64) — a Node + // global that does not exist in a WebView, so BOTH upload routes threw here and local + // mode could not accept a photo at all. Only Buffer.from + .length are ever used, and a + // Uint8Array satisfies both (the virtual filesystem already stores Uint8Array), so a tiny + // shim is enough; there is no need to pull in a full Buffer polyfill. + globalThis.Buffer = { + from(data, encoding) { + if (encoding === 'base64') { + // A data URL's payload can carry newlines; atob rejects them outright. + const clean = String(data).replace(/\s+/g, ''); + const bin = atob(clean); + const out = new Uint8Array(bin.length); + for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i); + return out; + } + if (typeof data === 'string') return new TextEncoder().encode(data); + return new Uint8Array(data); + }, + isBuffer(x) { return x instanceof Uint8Array; }, + }; + + vfs.mkdirSync(DATA_DIR, { recursive: true }); + + // server.js resolves everything from __dirname; esbuild defines it to '/' for this bundle. + require('../../../server/server.js'); + + app = express.__lastApp; + if (!app) throw new Error('local runtime: server.js did not create an app'); + + // server.js calls app.listen() only after loadState() resolves, so the shim's listen + // callback is the honest "the server is up" signal. + await express.__listened; + + await seedStarterTasks(app, ADMIN_PASSWORD); + + return { app, ADMIN_PASSWORD }; +} + +// A brand-new on-device install lands on a single empty list, which is a poor first +// impression and tells a new user nothing about what the app is for. Seed a few example +// steps the first time — and ONLY when there is not a single task anywhere, so this can +// never appear again once someone has real content, and never touches a server install. +async function seedStarterTasks(app, password) { + try { + const login = await app.handle('POST', '/api/login', { location: 'executive', password }, {}); + if (login.status !== 200 || !login.body || !login.body.token) return; + const auth = { authorization: 'Bearer ' + login.body.token }; + + const state = await app.handle('GET', '/api/state', undefined, auth); + const lists = (state.body && state.body.lists) || []; + if (!lists.length) return; + if (lists.some((l) => (l.items || []).length)) return; // never overwrite real content + + const target = lists[0]; + const examples = [ + 'Power on the sound board', + 'Turn on projectors and stage monitors', + 'Soundcheck wireless mics and in-ears', + 'Start the livestream', + 'Set house lights for worship', + ]; + for (const title of examples) { + await app.handle('POST', `/api/lists/${target.id}/items`, { title }, auth); + } + } catch (_) { + // Seeding is a nicety — never let it stop the app from starting. + } +} + +const LocalServer = { + /** Resolves once server.js has loaded its state and "started". */ + ready() { + if (!readyPromise) readyPromise = start(); + return readyPromise; + }, + + /** + * Handle one API call. Mirrors what fetch() would have done against a real server. + * @returns {Promise<{status:number, headers:Object, body:any, isBuffer:boolean}>} + */ + async handle(method, url, body, headers) { + const { app: a } = await LocalServer.ready(); + return a.handle(method, url, body, headers); + }, + + /** The generated master password, so the client can sign itself in. */ + async adminPassword() { + const { ADMIN_PASSWORD } = await LocalServer.ready(); + return ADMIN_PASSWORD; + }, + + /** Wipe every local checklist. Used by "start over" in the setup screen. */ + async reset() { + await vfs.init(); + await vfs.wipe(); + try { localStorage.removeItem(PW_KEY); } catch (_) {} + }, + + vfs, +}; + +module.exports = LocalServer; diff --git a/mobile/src/local/shims/crypto.js b/mobile/src/local/shims/crypto.js new file mode 100644 index 0000000..32c6a19 --- /dev/null +++ b/mobile/src/local/shims/crypto.js @@ -0,0 +1,14 @@ +'use strict'; +// server.js uses crypto.randomBytes only — for session tokens and upload filenames. +// Backed by the platform CSPRNG, so tokens are as unguessable as on the real server. +function randomBytes(n) { + const b = new Uint8Array(n); + crypto.getRandomValues(b); + b.toString = function (enc) { + if (enc === 'hex') return Array.from(this).map((x) => x.toString(16).padStart(2, '0')).join(''); + if (enc === 'base64') return btoa(String.fromCharCode.apply(null, Array.from(this))); + return Array.from(this).join(','); + }; + return b; +} +module.exports = { randomBytes, webcrypto: crypto }; diff --git a/mobile/src/local/shims/dotenv.js b/mobile/src/local/shims/dotenv.js new file mode 100644 index 0000000..585706b --- /dev/null +++ b/mobile/src/local/shims/dotenv.js @@ -0,0 +1,3 @@ +'use strict'; +// Configuration comes from the process shim in boot.js, not a .env file. +module.exports = { config: () => ({ parsed: {} }) }; diff --git a/mobile/src/local/shims/express.js b/mobile/src/local/shims/express.js new file mode 100644 index 0000000..2f03810 --- /dev/null +++ b/mobile/src/local/shims/express.js @@ -0,0 +1,173 @@ +'use strict'; +// A minimal Express, just large enough to run server.js in the app with no server. +// +// Only what server.js actually uses: app.use(fn) / app.use(path, fn), the four verb methods +// with variadic middleware (routes are declared as `app.get(path, requireUser, handler)`), +// express.json(), express.static(), and the req/res surface the handlers touch. Anything +// beyond that is intentionally absent — a silent no-op would hide a real behaviour gap. +// +// Requests do not arrive over a socket. native-bridge.js calls app.handle() directly with +// the method, path and parsed body it intercepted from fetch(). + +const vfs = require('../vfs.js'); + +function createApp() { + const stack = []; // { kind:'use'|'route', method, path, keys, re, handlers } + + // '/api/lists/:id/items/:itemId' → a regex plus the parameter names, so req.params works. + function compile(pattern) { + const keys = []; + const source = String(pattern) + .replace(/[.+*?^${}()|[\]\\]/g, '\\$&') // escape regex metacharacters + .replace(/\/:([A-Za-z0-9_]+)/g, (_, k) => { keys.push(k); return '/([^/]+)'; }); + return { keys, re: new RegExp('^' + source + '/?$') }; + } + + function addRoute(method, path, handlers) { + const { keys, re } = compile(path); + stack.push({ kind: 'route', method, path, keys, re, handlers }); + } + + const app = function () {}; + + app.use = function (a, b) { + if (typeof a === 'function') stack.push({ kind: 'use', mount: '', fn: a }); + else stack.push({ kind: 'use', mount: String(a).replace(/\/+$/, ''), fn: b }); + return app; + }; + ['get', 'post', 'put', 'patch', 'delete'].forEach((m) => { + app[m] = function (path, ...handlers) { addRoute(m.toUpperCase(), path, handlers); return app; }; + }); + app.listen = function (_port, cb) { if (typeof cb === 'function') cb(); return { close() {} }; }; + app.set = function () { return app; }; + + /** + * Run one request through the stack. + * @returns {Promise<{status:number, headers:Object, body:any, isBuffer:boolean}>} + */ + app.handle = function (method, rawUrl, body, headers) { + return new Promise((resolve) => { + const qIndex = rawUrl.indexOf('?'); + const pathname = qIndex === -1 ? rawUrl : rawUrl.slice(0, qIndex); + const query = {}; + if (qIndex !== -1) { + new URLSearchParams(rawUrl.slice(qIndex + 1)).forEach((v, k) => { query[k] = v; }); + } + + const req = { + method: String(method).toUpperCase(), + url: rawUrl, + originalUrl: rawUrl, + path: pathname, + query, + params: {}, + body: body === undefined ? {} : body, + headers: headers || {}, + get(name) { return (headers || {})[String(name).toLowerCase()]; }, + }; + + let finished = false; + const res = { + statusCode: 200, + _headers: {}, + status(code) { this.statusCode = code; return this; }, + setHeader(k, v) { this._headers[String(k).toLowerCase()] = v; return this; }, + getHeader(k) { return this._headers[String(k).toLowerCase()]; }, + type(t) { return this.setHeader('content-type', t); }, + json(obj) { this.setHeader('content-type', 'application/json'); this._done(obj, false); }, + send(data) { this._done(data, data instanceof Uint8Array); }, + end(data) { this._done(data === undefined ? '' : data, data instanceof Uint8Array); }, + async sendFile(p) { + try { + const content = await vfs.raw(p); + if (content == null) { this.statusCode = 404; this._done({ error: 'Not found' }, false); return; } + this._done(content, content instanceof Uint8Array); + } catch (_) { this.statusCode = 500; this._done({ error: 'Read failed' }, false); } + }, + _done(payload, isBuffer) { + if (finished) return; + finished = true; + resolve({ status: this.statusCode, headers: this._headers, body: payload, isBuffer: !!isBuffer }); + }, + }; + + // Build the chain for this request: matching app.use middleware, then the first + // matching route's own middleware + handler. + const chain = []; + for (const layer of stack) { + if (layer.kind === 'use') { + if (!layer.mount || pathname === layer.mount || pathname.startsWith(layer.mount + '/')) { + chain.push({ fn: layer.fn, mount: layer.mount }); + } + continue; + } + if (layer.method !== req.method) continue; + const m = layer.re.exec(pathname); + if (!m) continue; + layer.keys.forEach((k, i) => { req.params[k] = decodeURIComponent(m[i + 1]); }); + layer.handlers.forEach((fn) => chain.push({ fn, mount: '' })); + break; + } + + let i = 0; + const next = (err) => { + if (finished) return; + if (err) { res.statusCode = 500; res._done({ error: String((err && err.message) || err) }, false); return; } + const entry = chain[i++]; + if (!entry) { + // Nothing handled it. Mirrors Express's default 404 so the client's apiFetch sees + // the same shape it would from the real server. + res.statusCode = 404; + res._done({ error: 'Not found' }, false); + return; + } + // A mounted middleware sees the path with its mount point stripped, like Express. + const saved = req.url; + if (entry.mount) req.url = pathname.slice(entry.mount.length) || '/'; + let out; + try { out = entry.fn(req, res, next); } catch (e) { req.url = saved; next(e); return; } + req.url = saved; + if (out && typeof out.then === 'function') out.catch(next); + }; + next(); + }); + }; + + return app; +} + +// boot.js needs the app instance server.js created, and a signal for when server.js called +// listen() — which it does only after loadState() resolves, making it the real readiness +// event rather than a guess about timing. +let _resolveListened; +const _listened = new Promise((r) => { _resolveListened = r; }); + +function express() { + const app = createApp(); + const realListen = app.listen; + app.listen = function (port, cb) { const out = realListen.call(app, port, cb); _resolveListened(app); return out; }; + express.__lastApp = app; + return app; +} +express.__listened = _listened; + +// server.js selects a body parser per route, but native-bridge hands us an already-parsed +// body — there is no wire format to decode. These stay as pass-through middleware so the +// call sites keep working untouched. +express.json = function () { return function (req, res, next) { next(); }; }; +express.urlencoded = function () { return function (req, res, next) { next(); }; }; + +// Static mounts exist so /equip-images and /doc-files resolve out of the virtual filesystem. +// The app bundle's own assets are served by the WebView, never through here. +express.static = function (root) { + return async function (req, res, next) { + if (req.method !== 'GET') { next(); return; } + const rel = decodeURIComponent(String(req.url).split('?')[0]); + if (rel.indexOf('..') !== -1) { next(); return; } // never escape the mount root + const content = await vfs.raw(root.replace(/\/+$/, '') + rel); + if (content == null) { next(); return; } + res.send(content); + }; +}; + +module.exports = express; diff --git a/mobile/src/local/shims/fs-promises.js b/mobile/src/local/shims/fs-promises.js new file mode 100644 index 0000000..bc3f4b1 --- /dev/null +++ b/mobile/src/local/shims/fs-promises.js @@ -0,0 +1,2 @@ +'use strict'; +module.exports = require('./fs.js').promises; diff --git a/mobile/src/local/shims/fs.js b/mobile/src/local/shims/fs.js new file mode 100644 index 0000000..65e3564 --- /dev/null +++ b/mobile/src/local/shims/fs.js @@ -0,0 +1,21 @@ +'use strict'; +// Stands in for Node's `fs` when server.js runs inside the app. Only the eleven calls +// server.js actually makes are implemented — deliberately, so an unnoticed new fs call +// fails loudly here instead of silently doing nothing. +const vfs = require('../vfs.js'); +const promises = { + readFile: (p, e) => vfs.readFile(p, e), + writeFile: (p, d) => vfs.writeFile(p, d), + readdir: (p) => vfs.readdir(p), + stat: (p) => vfs.stat(p), + unlink: (p) => vfs.unlink(p), + rename: (a, b) => vfs.rename(a, b), + copyFile: (a, b) => vfs.copyFile(a, b), + mkdir: (p, o) => vfs.mkdir(p, o), +}; +module.exports = { + existsSync: (p) => vfs.existsSync(p), + mkdirSync: (p, o) => vfs.mkdirSync(p, o), + statSync: (p) => vfs.statSync(p), + promises, +}; diff --git a/mobile/src/local/shims/node-cron.js b/mobile/src/local/shims/node-cron.js new file mode 100644 index 0000000..c7f158f --- /dev/null +++ b/mobile/src/local/shims/node-cron.js @@ -0,0 +1,8 @@ +'use strict'; +// Scheduled jobs make no sense in a process that only lives while the app is on screen. +// The one that matters — list auto-resets — is not cron-driven anyway: server.js recomputes +// it inside getState() on every request, so it stays correct simply by being used. +module.exports = { + validate: () => true, + schedule: () => ({ start() {}, stop() {}, destroy() {} }), +}; diff --git a/mobile/src/local/shims/nodemailer.js b/mobile/src/local/shims/nodemailer.js new file mode 100644 index 0000000..63d9a10 --- /dev/null +++ b/mobile/src/local/shims/nodemailer.js @@ -0,0 +1,12 @@ +'use strict'; +// No SMTP on a phone. Returning a transporter that reports "not sent" keeps the digest and +// incident-alert code paths running normally instead of throwing — server.js already handles +// an unconfigured mailer gracefully, so this is the shape it expects. +module.exports = { + createTransport() { + return { + sendMail: async () => ({ messageId: 'local-mode-no-email', accepted: [], rejected: [] }), + verify: async () => false, + }; + }, +}; diff --git a/mobile/src/local/shims/path.js b/mobile/src/local/shims/path.js new file mode 100644 index 0000000..b8ef50d --- /dev/null +++ b/mobile/src/local/shims/path.js @@ -0,0 +1,27 @@ +'use strict'; +// server.js uses only join() and basename(). POSIX semantics are all that is needed — +// the virtual filesystem has no drive letters and no backslashes. +function join(...parts) { + const joined = parts.filter((p) => p !== '' && p != null).join('/'); + const absolute = joined.charAt(0) === '/'; + const out = []; + for (const seg of joined.split('/')) { + if (seg === '' || seg === '.') continue; + if (seg === '..') { if (out.length && out[out.length - 1] !== '..') out.pop(); else if (!absolute) out.push('..'); continue; } + out.push(seg); + } + const res = out.join('/'); + return absolute ? '/' + res : (res || '.'); +} +function basename(p, ext) { + let b = String(p).replace(/\/+$/, '').split('/').pop() || ''; + if (ext && b.endsWith(ext)) b = b.slice(0, -ext.length); + return b; +} +function dirname(p) { + const s = String(p).replace(/\/+$/, ''); + const i = s.lastIndexOf('/'); + return i <= 0 ? (i === 0 ? '/' : '.') : s.slice(0, i); +} +function extname(p) { const b = basename(p); const i = b.lastIndexOf('.'); return i <= 0 ? '' : b.slice(i); } +module.exports = { join, basename, dirname, extname, sep: '/', posix: { join, basename, dirname, extname, sep: '/' } }; diff --git a/mobile/src/local/vfs.js b/mobile/src/local/vfs.js new file mode 100644 index 0000000..b4472ac --- /dev/null +++ b/mobile/src/local/vfs.js @@ -0,0 +1,208 @@ +'use strict'; +// vfs.js — an IndexedDB-backed filesystem good enough to run server.js unmodified. +// +// server.js keeps everything on disk: the state JSON, equipment photos, attached documents +// and nightly backups. To run that same code inside the app with no server, those calls have +// to land somewhere. IndexedDB is the right store here — it is app-private, has a far larger +// quota than localStorage, and needs no Capacitor plugin. +// +// THE AWKWARD BIT: server.js uses existsSync / mkdirSync / statSync, which must return +// *synchronously*, and IndexedDB is asynchronous to the core. So this keeps a full in-memory +// index of metadata (path → size, mtime, isDir) and answers every sync call from that, while +// contents live in IndexedDB and are read/written asynchronously. The index holds no file +// bodies, so a few hundred photos cost kilobytes of RAM rather than megabytes. +// +// Writes update the index immediately and persist in the background; a write that is still +// in flight is therefore already visible to existsSync, which matches how the real fs behaves +// closely enough for server.js's purposes. + +const DB_NAME = 'checklist-local'; +const DB_VERSION = 1; +const STORE = 'files'; + +let db = null; +/** path -> { dir:boolean, size:number, mtimeMs:number } */ +const index = new Map(); + +function open() { + return new Promise((resolve, reject) => { + const req = indexedDB.open(DB_NAME, DB_VERSION); + req.onupgradeneeded = () => { + const d = req.result; + if (!d.objectStoreNames.contains(STORE)) d.createObjectStore(STORE); + }; + req.onsuccess = () => resolve(req.result); + req.onerror = () => reject(req.error); + }); +} + +function tx(mode) { + return db.transaction(STORE, mode).objectStore(STORE); +} + +function idbGet(key) { + return new Promise((resolve, reject) => { + const r = tx('readonly').get(key); + r.onsuccess = () => resolve(r.result); + r.onerror = () => reject(r.error); + }); +} + +function idbPut(key, value) { + return new Promise((resolve, reject) => { + const r = tx('readwrite').put(value, key); + r.onsuccess = () => resolve(); + r.onerror = () => reject(r.error); + }); +} + +function idbDel(key) { + return new Promise((resolve, reject) => { + const r = tx('readwrite').delete(key); + r.onsuccess = () => resolve(); + r.onerror = () => reject(r.error); + }); +} + +// Paths arrive from path.join() so they are already normalised; this only strips a trailing +// slash so '/data/' and '/data' are the same key. +function norm(p) { + const s = String(p).replace(/\/+$/, ''); + return s === '' ? '/' : s; +} + +function sizeOf(content) { + if (content == null) return 0; + if (typeof content === 'string') return content.length; + if (content.byteLength != null) return content.byteLength; + return 0; +} + +const vfs = { + async init() { + db = await open(); + // Rebuild the metadata index. Keys and sizes only — never the bodies, or opening an app + // with a few hundred photos would pull every one of them into memory at boot. + const store = tx('readonly'); + await new Promise((resolve, reject) => { + const req = store.openCursor(); + req.onsuccess = () => { + const cur = req.result; + if (!cur) { resolve(); return; } + const v = cur.value; + index.set(String(cur.key), { + dir: v && v.__dir === true, + size: v && v.__dir ? 0 : sizeOf(v && v.content), + mtimeMs: (v && v.mtimeMs) || Date.now(), + }); + cur.continue(); + }; + req.onerror = () => reject(req.error); + }); + return vfs; + }, + + // ── sync surface ────────────────────────────────────────────────────────────────── + existsSync(p) { return index.has(norm(p)); }, + + statSync(p) { + const e = index.get(norm(p)); + if (!e) { const err = new Error(`ENOENT: no such file or directory, stat '${p}'`); err.code = 'ENOENT'; throw err; } + return { size: e.size, mtimeMs: e.mtimeMs, isDirectory: () => e.dir, isFile: () => !e.dir }; + }, + + mkdirSync(p, opts) { + const path = norm(p); + if (index.has(path)) return; + index.set(path, { dir: true, size: 0, mtimeMs: Date.now() }); + idbPut(path, { __dir: true, mtimeMs: Date.now() }).catch(() => {}); + if (opts && opts.recursive) { + const parts = path.split('/').filter(Boolean); + let acc = ''; + for (const seg of parts.slice(0, -1)) { + acc += '/' + seg; + if (!index.has(acc)) { + index.set(acc, { dir: true, size: 0, mtimeMs: Date.now() }); + idbPut(acc, { __dir: true, mtimeMs: Date.now() }).catch(() => {}); + } + } + } + }, + + // ── async surface ───────────────────────────────────────────────────────────────── + async readFile(p, enc) { + const path = norm(p); + const rec = await idbGet(path); + if (!rec || rec.__dir) { const e = new Error(`ENOENT: no such file or directory, open '${p}'`); e.code = 'ENOENT'; throw e; } + const content = rec.content; + // server.js reads the state file as utf8 and media as buffers; honour both. + if (enc === 'utf8' || enc === 'utf-8' || (enc && enc.encoding)) { + return typeof content === 'string' ? content : new TextDecoder().decode(content); + } + return typeof content === 'string' ? new TextEncoder().encode(content) : content; + }, + + async writeFile(p, data) { + const path = norm(p); + const mtimeMs = Date.now(); + await idbPut(path, { content: data, mtimeMs }); + index.set(path, { dir: false, size: sizeOf(data), mtimeMs }); + }, + + async mkdir(p, opts) { vfs.mkdirSync(p, opts); }, + + async readdir(p) { + const dir = norm(p); + const prefix = dir === '/' ? '/' : dir + '/'; + const out = []; + for (const key of index.keys()) { + if (key === dir || !key.startsWith(prefix)) continue; + const rest = key.slice(prefix.length); + if (rest.indexOf('/') !== -1) continue; // immediate children only + out.push(rest); + } + return out; + }, + + async stat(p) { return vfs.statSync(p); }, + + async unlink(p) { + const path = norm(p); + await idbDel(path); + index.delete(path); + }, + + async rename(from, to) { + const src = norm(from); + const rec = await idbGet(src); + if (!rec) { const e = new Error(`ENOENT: no such file or directory, rename '${from}'`); e.code = 'ENOENT'; throw e; } + await idbPut(norm(to), rec); + index.set(norm(to), { dir: !!rec.__dir, size: sizeOf(rec.content), mtimeMs: Date.now() }); + await idbDel(src); + index.delete(src); + }, + + async copyFile(from, to) { + const rec = await idbGet(norm(from)); + if (!rec) { const e = new Error(`ENOENT: no such file or directory, copyfile '${from}'`); e.code = 'ENOENT'; throw e; } + await idbPut(norm(to), rec); + index.set(norm(to), { dir: !!rec.__dir, size: sizeOf(rec.content), mtimeMs: Date.now() }); + }, + + // ── helpers used by the local runtime, not by server.js ─────────────────────────── + /** Raw record fetch, for serving media to without going through fs semantics. */ + async raw(p) { const rec = await idbGet(norm(p)); return rec && !rec.__dir ? rec.content : null; }, + + /** Every stored path — used to build blob URLs for locally stored photos. */ + keys() { return Array.from(index.keys()); }, + + async wipe() { + await new Promise((resolve, reject) => { + const r = tx('readwrite').clear(); + r.onsuccess = () => resolve(); r.onerror = () => reject(r.error); + }); + index.clear(); + }, +}; + +module.exports = vfs; diff --git a/mobile/src/native-shell.js b/mobile/src/native-shell.js new file mode 100644 index 0000000..20d71e7 --- /dev/null +++ b/mobile/src/native-shell.js @@ -0,0 +1,164 @@ +// native-shell.js — the iOS/Android-only layer. Bundled by esbuild into www/native-shell.js +// and injected ONLY into the app bundles, never served to the website. +// +// Two jobs: +// 1. Publish the Capacitor plugins on window.CapPlugins, synchronously, before +// native-bridge.js and app.js parse. That's why this is bundled as an IIFE and loaded +// as a classic + + + + + + diff --git a/server/public/manifest.webmanifest b/server/public/manifest.webmanifest new file mode 100644 index 0000000..3f0d547 --- /dev/null +++ b/server/public/manifest.webmanifest @@ -0,0 +1,37 @@ +{ + "name": "Recurring Checklist", + "short_name": "Checklist", + "description": "Weekly startup and shutdown checklist for each location", + "start_url": "/", + "scope": "/", + "display": "standalone", + "orientation": "any", + "background_color": "#14161b", + "theme_color": "#1d2026", + "icons": [ + { + "src": "/icons/icon.svg", + "type": "image/svg+xml", + "sizes": "any", + "purpose": "any" + }, + { + "src": "/icons/icon-192.png", + "type": "image/png", + "sizes": "192x192", + "purpose": "any" + }, + { + "src": "/icons/icon-512.png", + "type": "image/png", + "sizes": "512x512", + "purpose": "any" + }, + { + "src": "/icons/icon-512.png", + "type": "image/png", + "sizes": "512x512", + "purpose": "maskable" + } + ] +} diff --git a/server/public/md.js b/server/public/md.js new file mode 100644 index 0000000..c4d79a1 --- /dev/null +++ b/server/public/md.js @@ -0,0 +1,110 @@ +/* + * Minimal, self-hosted Markdown renderer for task descriptions. + * Safe by construction: every piece of source text is HTML-escaped BEFORE any + * markup is applied, and only a fixed whitelist of tags is emitted + * (h4–h6, p, br, ul/ol/li, strong, em, a[href to http/https/mailto]). + * Equipment [[markers]] and auto-linked terms are intentionally LEFT as text + * here — the app layers those on afterward via a safe text-node pass. + * Exposes a global: window.MD.render(text) -> html string. + */ +(function () { + 'use strict'; + + function escapeHtml(s) { + return String(s == null ? '' : s) + .replace(/&/g, '&') + .replace(//g, '>') + .replace(/"/g, '"') + .replace(/'/g, '''); + } + + // Inline formatting on already-escaped text. + function inline(escaped) { + var s = escaped; + // links: [label](http(s)://…, mailto:…, or a site-relative /doc-files/… upload) + // — label already escaped. /doc-files is the ONLY relative prefix allowed, so + // the href whitelist stays as tight as before. + s = s.replace(/\[([^\]\n]+)\]$(https?:\/\/[^\s)]+|mailto:[^\s)]+|\/doc-files\/[^\s)]+)$/g, + function (m, label, url) { + var cls = url.indexOf('/doc-files/') === 0 ? ' class="doc-link"' : ''; + return '' + label + ''; + }); + // bold+italic ***text*** (must run before the ** and * rules) + s = s.replace(/\*\*\*([^*\n]+)\*\*\*/g, '$1'); + // bold **text** + s = s.replace(/\*\*([^*\n]+)\*\*/g, '$1'); + // italic *text* / _text_ (require a boundary so it doesn't eat stray asterisks) + s = s.replace(/(^|[\s(])\*([^*\n]+)\*(?=$|[\s).,!?])/g, '$1$2'); + s = s.replace(/(^|[\s(])_([^_\n]+)_(?=$|[\s).,!?])/g, '$1$2'); + return s; + } + + // CANONICAL task-list line regex. MUST stay byte-identical to server.js TASK_LINE_RE and + // app.js parseTaskList — the count/index/label must agree across all three or per-location + // checkmarks misalign. Group 1 = mark char ( / x / X), group 2 = label (may be empty). + var TASK_RE = /^\s*[-*]\s+\[([ xX])\]\s*(.*)$/; + + function render(src) { + var lines = String(src == null ? '' : src).replace(/\r\n?/g, '\n').split('\n'); + var out = []; + var para = []; + var taskIndex = 0; // 0-based position among task-list lines, in document order (per render) + function flushPara() { + if (para.length) { out.push('

' + para.map(inline).join('
') + '

'); para = []; } + } + var i = 0; + while (i < lines.length) { + var raw = lines[i]; + if (raw.trim() === '') { flushPara(); i++; continue; } + + var hm = /^(#{1,3})\s+(.*)$/.exec(raw); + if (hm) { flushPara(); var lvl = hm[1].length + 3; out.push('' + inline(escapeHtml(hm[2])) + ''); i++; continue; } + + if (/^\s*[-*]\s+/.test(raw)) { + flushPara(); + var ul = []; + while (i < lines.length && /^\s*[-*]\s+/.test(lines[i])) { + var tm = TASK_RE.exec(lines[i]); + if (tm) { + // A checkbox line "- [ ] label". The box is an EMPTY, non-editable span (glyph + // drawn in CSS — no unicode/emoji, iPad-safe) so it adds zero text: the WYSIWYG + // round-trip (htmlToMarkdown) and equipment auto-linking both stay clean. The + // label runs through inline(escapeHtml(...)) IDENTICALLY to a plain bullet, so + // **bold**, links and equipment terms all work inside it. data-checked is the + // AUTHORED mark (round-trip fidelity); the live view overrides the visual from + // per-location state, keyed by data-task-index. + var on = tm[1].toLowerCase() === 'x'; + ul.push('

' + + '' + + '' + inline(escapeHtml(tm[2])) + '

'); + } else { + ul.push('

' + inline(escapeHtml(lines[i].replace(/^\s*[-*]\s+/, ''))) + '

'); + } + i++; + } + out.push('

' + ul.join('') + ''); + continue; + } + + if (/^\s*\d+\.\s+/.test(raw)) { + flushPara(); + var ol = []; + while (i < lines.length && /^\s*\d+\.\s+/.test(lines[i])) { + ol.push('

' + inline(escapeHtml(lines[i].replace(/^\s*\d+\.\s+/, ''))) + '

'); + i++; + } + out.push('

+ +

+ + Waters Checklist +

Privacy Policy

Last updated 14 September 2026 · Living Waters Church

+ +

+ Waters Checklist is a private tool for Living Waters Church volunteers and staff. It tracks + the startup, shutdown and service checklists our ministry teams run each week. It is not a + consumer product, it is not advertising-supported, and it has no business model that + involves your data. +

+ +

The short version. We collect only what the checklists need to work: who + ticked off which task and when, plus anything you type or photograph yourself. There is no + analytics, no advertising and no tracking of any kind. Nothing is sold or shared. The data + lives on a server owned and operated by the church, not on a commercial cloud platform.

+ +

What we collect

+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

Data	Why
Sign-in details campus, team, password	Most logins are shared by a whole team rather than tied to a person. Passwords are stored + only as a one-way bcrypt hash — we cannot read yours, and neither can anyone with access + to the server.
Your name	Only if you sign in with an editor account, which asks who you are so changes can be + attributed. Shared team logins do not ask for a name.
Email addresses	Added by an administrator so a team can receive the weekly summary and urgent + equipment-failure alerts. Used for nothing else — no newsletters, no marketing.
Checklist activity	Which task was completed, the date and time, and which team or person completed it. + This is the point of the app.
What you write	Task and note text, feedback, and requests sent between departments.
Photos, video and files	Equipment pictures, short clips and documents you attach to a checklist item.
A short activity log	A rolling record of edits — time, who, and a one-line description — so a team can see + what changed. It is capped and older entries are discarded automatically.

+ +

What we do not collect

No analytics or tracking. The app contains no analytics service, no + advertising network, no tracking pixel and no third-party software development kit.
No physical location. "Location" here means a campus you pick from a + list — Woonsocket, Apollo Beach and so on. The app never requests or receives GPS or any + device location.
No contacts, health, or financial information.
No advertising identifiers, and no profile is built about you.

+ +

Device permissions

Camera — requested only at the moment you choose to photograph a piece of + equipment or an issue. The picture goes to the church's own server and nowhere else. The + camera is never accessed in the background.
Photo library — used only when you pick an existing picture to attach. + The app receives the one file you select; it cannot browse your library.
On-device storage — your sign-in token and a few display preferences (which + list you had open, how you like the columns) stay on your own device. If you are offline, + check-offs are held on the device until the connection returns.

+ +

Where the data lives

+ On a server owned and run by Living Waters Church, on church premises. It is not hosted with a + commercial cloud provider, and no outside company administers it. All traffic between the app + and the server is encrypted with HTTPS. The church keeps automatic nightly backups so a + mistaken deletion can be undone. +

+ +

Other services

Deliberately few. In normal use the app talks only to the church's own server.

Google Fonts — the app loads its typeface from Google's font service, which + means Google receives the request, including your IP address. If the font cannot be + fetched, the app falls back to your device's built-in fonts and works normally.
Google Drive — only if somebody pastes a Google Drive link for a picture. + The image preview is then fetched from Google. No account information is exchanged.
Email delivery — weekly summaries and urgent alerts are sent through a + standard email provider, which necessarily handles the recipient's address and the message.

+ We do not use any other third-party service, and we never send your data to one for + advertising, analytics or resale. +

+ +

Who can see your information

+ Members of your own team, church administrators, and ministry leaders whose oversight covers + your campus. Nobody outside the church has access. We do not sell, rent or trade any of it. We + would disclose information only if the law required it. +

+ +

Keeping and deleting it

+ Checklist records are kept while they remain useful for reviewing how services ran. Church + administrators can delete lists, photos, documents and accounts at any time, and photos that + are no longer attached to anything are removed automatically. To ask what is held about you, + to correct it, or to have it deleted, contact us at the address below and we will act on it. +

+ +

Children

+ The app is built for volunteers and staff serving on ministry teams and is not directed at + children. We do not knowingly collect information from anyone under 13. +

+ +

Changes

+ If this policy changes we will update the date at the top of this page. Significant changes + will also be mentioned to team leaders directly. +

+ +

Contact

+ Questions about this policy, or a request about your information:
+ media@waterschurch.org +

+ + + +

+ + diff --git a/server/public/styles.css b/server/public/styles.css new file mode 100644 index 0000000..91c1d71 --- /dev/null +++ b/server/public/styles.css @@ -0,0 +1,3075 @@ +* { + margin: 0; + padding: 0; + box-sizing: border-box; +} + +/* Reserve the scrollbar gutter so opening a modal (which locks scroll, hiding the + scrollbar) doesn't shift the page sideways on desktop. */ +html { scrollbar-gutter: stable; } +/* Scroll lock: while any overlay (modal / ☰ menu / Move popover) is open, the page + behind it can't scroll. Toggled on and by syncScrollLock(). */ +html.scroll-locked, body.scroll-locked { overflow: hidden; } + +body { + font-family: 'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, sans-serif; + -webkit-font-smoothing: antialiased; + -moz-osx-font-smoothing: grayscale; + background: #14161b; + color: #eceef2; + min-height: 100vh; + min-height: 100dvh; /* at least the viewport, but grow with content so the whole page scrolls */ + touch-action: manipulation; + /* Respect iOS notch / home indicator when installed as a PWA. The TOP inset is + carried by the sticky header (below) instead of the body, so the header's + opaque background covers the notch strip and scrolled content can't peek above it. */ + padding: 0 env(safe-area-inset-right) env(safe-area-inset-bottom) env(safe-area-inset-left); + box-sizing: border-box; +} + +.loading-overlay { + position: fixed; + inset: 0; + background: #14161b; + display: flex; + align-items: center; + justify-content: center; + flex-direction: column; + gap: 12px; + z-index: 9999; +} + +.loading-spinner { + width: 48px; + height: 48px; + border: 4px solid #2f3542; + border-top-color: #39a8ff; + border-radius: 50%; + animation: spin 1s linear infinite; +} + +.loading-text { + color: #cfd5e3; + font-size: 14px; + letter-spacing: 0.2px; +} + +@keyframes spin { + to { + transform: rotate(360deg); + } +} + +.app-container { + display: flex; + flex-direction: column; + min-height: 100vh; + min-height: 100dvh; +} + +header { + background: #1d2026; + color: white; + /* top padding carries the PWA notch inset so the opaque header fills it */ + padding: calc(15px + env(safe-area-inset-top)) 20px 15px; + box-shadow: 0 2px 8px rgba(0,0,0,0.3); + border-bottom: 1px solid #2e333d; + display: flex; + align-items: center; + /* flex-end so wrapped rows (toolbar / badge on narrower tablets) stay + right-aligned. The title's margin-right:auto still pins it far-left and + keeps the one-line desktop grouping (title · ...toolbar+badge). */ + justify-content: flex-end; + gap: 16px; + flex-wrap: wrap; + /* The single sticky bar: the title, all list controls (view/hide toggles, + filters), the ☰ Menu, and the user badges all live here and stay pinned + while the board scrolls. Nothing else is sticky. */ + position: sticky; + top: 0; + z-index: 30; +} + +.header-left { + display: flex; + align-items: center; + gap: 12px; + margin-right: auto; /* title hugs the left; everything after it groups on the right */ +} + +/* All admin/list controls grouped on the right of the title bar. */ +.header-controls { + display: flex; + align-items: center; + gap: 10px; + flex-wrap: wrap; +} + +/* Undo / redo: compact icon buttons (full-admin only). */ +.undo-redo { + display: inline-flex; + gap: 4px; +} +.icon-btn { + display: inline-flex; + align-items: center; + justify-content: center; + width: 34px; + height: 34px; + padding: 0; + font-size: 17px; + line-height: 1; + background: #1d2026; + border: 1px solid #4a4a4a; + border-radius: 6px; + color: #cfd5e3; + cursor: pointer; + transition: background 0.15s ease, border-color 0.15s ease, opacity 0.15s ease; +} +.icon-btn:hover:not(:disabled) { background: #252932; border-color: #39a8ff; } +.icon-btn:disabled { opacity: 0.35; cursor: default; } +.icon-btn:focus-visible { outline: 2px solid #39a8ff; outline-offset: 2px; } + +/* Search stays an icon button on desktop (label hidden); on mobile it becomes a + full search bar that fills the top row — see the ≤700 block. */ +.search-bar-btn .sb-label { display: none; } + +.header-right { + display: flex; + align-items: center; + gap: 10px; + flex-wrap: wrap; +} + +.user-badge { + display: inline-flex; + align-items: center; + gap: 6px; + background: #191c22; + border: 1px solid #2e333d; + color: #cfd5e3; + padding: 6px 12px; + border-radius: 999px; + font-size: 13px; + font-weight: 500; + cursor: pointer; + transition: background 0.2s, border-color 0.2s; +} + +.user-badge:hover { + background: #2b2b2b; + border-color: #39a8ff; +} + +.user-badge-icon { + font-size: 14px; + line-height: 1; +} + +body.admin-mode .user-badge { + border-color: #f1c40f; + color: #f1c40f; +} + +#adminToggleBtn { + padding: 6px 12px; + font-size: 12px; +} + +body.admin-mode #adminToggleBtn { + background: #f1c40f; + color: #14161b; + font-weight: 600; +} + +.app-tabs { + display: flex; + gap: 8px; +} + +.tab-button { + padding: 8px 14px; + border-radius: 6px; + border: 1px solid #2e333d; + background: #191c22; + color: #cfd5e3; + cursor: pointer; + font-weight: 600; + transition: all 0.2s; +} + +.tab-button.active { + background: #39a8ff; + color: #fff; + border-color: #39a8ff; + box-shadow: 0 2px 8px rgba(57,168,255,0.35); +} + +/* Apply hover only where a true (mouse) pointer exists. On touch tablets a + tapped element keeps its :hover state ("sticky hover"); because :hover is + declared after .active with equal specificity, that stuck state used to + override the active highlight and flicker while scrolling. */ +@media (hover: hover) { + .tab-button:hover { + background: #2b2b2b; + } +} + +/* The active tab keeps its highlight even if a hover state lingers + (e.g. a hybrid touch + trackpad device that reports hover: hover). */ +.tab-button.active:hover { + background: #39a8ff; + color: #fff; + border-color: #39a8ff; + box-shadow: 0 2px 8px rgba(57,168,255,0.35); +} + +/* App logo — a sleek gradient checkmark, used in place of the old circle + title. */ +.app-logo { + width: 38px; + height: 38px; + display: block; + flex-shrink: 0; + filter: drop-shadow(0 2px 6px rgba(0, 0, 0, 0.4)); + transition: transform 0.18s cubic-bezier(0.22, 1, 0.36, 1); +} +@media (hover: hover) { + .app-logo:hover { transform: scale(1.06) rotate(-3deg); } +} + +.main-content { + flex: 1; + display: flex; + flex-direction: column; + padding: 20px; + gap: 20px; +} + +.tab-view { + display: none; +} + +.tab-view.active { + display: flex; + flex-direction: column; + flex: 1; + gap: 16px; /* even breathing room between the tab strip, the menu, and the To Do/Done board */ +} + +.add-item-section { + background: #1d2026; + padding: 20px; + border-radius: 8px; + box-shadow: 0 2px 8px rgba(0,0,0,0.3); + border: 1px solid #2e333d; +} + +.add-header { + display: flex; + justify-content: space-between; + align-items: center; + gap: 10px; +} + +.add-list-target { + display: flex; + align-items: center; + gap: 8px; + font-size: 13px; + color: #b0b0b0; + white-space: nowrap; +} + +.add-item-section h2 { + margin-bottom: 15px; + font-size: 16px; + color: #eceef2; + font-weight: 600; +} + +.form-group { + margin-bottom: 15px; +} + +.form-group label { + display: block; + margin-bottom: 5px; + font-weight: 500; + color: #b0b0b0; + font-size: 13px; +} + +input[type="text"], +textarea, +select, +input[type="number"] { + width: 100%; + padding: 10px; + border: 1px solid #2e333d; + border-radius: 4px; + font-size: 14px; + font-family: inherit; + background: #14161b; + color: #eceef2; + touch-action: manipulation; +} + +input[type="text"]:focus, +textarea:focus, +select:focus, +input[type="number"]:focus { + outline: none; + border-color: #39a8ff; +} + +input[type="text"]::placeholder, +textarea::placeholder { + color: #666; +} + +textarea { + resize: vertical; + min-height: 80px; + line-height: 1.5; +} + +input[type="checkbox"] { + margin-right: 8px; + width: 18px; + height: 18px; + cursor: pointer; + vertical-align: middle; +} + +/* The `.form-group label{display:block}` rule above is more specific than a bare + `.checkbox-label`, so qualify this one to win and lay the box beside the text. */ +.checkbox-label, +.form-group label.checkbox-label { + display: flex; + align-items: flex-start; /* box sits beside the FIRST line, even when text wraps */ + gap: 8px; + line-height: 1.35; + margin-bottom: 0; + cursor: pointer; +} + +.checkbox-label input[type="checkbox"] { + position: static; /* drop the old top:18px hack that mis-placed the box */ + top: auto; + flex: 0 0 auto; /* fixed size; never shrink or get pushed by the text */ + width: 18px; /* beat `.modal input{width:100%}` which else stretches the box full-width */ + height: 18px; + margin: 1px 0 0; /* nudge to line up with the first text line */ +} + +#isRecurring { + position: static; + top: auto; + transform: translateY(-2px); +} + +#recurrenceOptions, +#editRecurrenceOptions { + background: #181b20; + padding: 15px; + border-radius: 4px; + margin-top: 10px; + border: 1px solid #2e333d; +} + +#recurrenceOptions > div, +#editRecurrenceOptions > div { + margin-top: 10px; +} + +.btn { + padding: 10px 20px; + border: none; + border-radius: 4px; + font-size: 14px; + cursor: pointer; + font-weight: 500; + transition: all 0.2s; + touch-action: manipulation; +} + +.btn-primary { + background: #39a8ff; + color: white; +} + +.btn-primary:hover { + background: #2980b9; +} + +.btn-secondary { + background: #3a3a3a; + color: #eceef2; +} + +.btn-secondary:hover { + background: #4a4a4a; +} + +.btn-danger { + background: #ef4444; + color: white; + padding: 6px 12px; + font-size: 12px; +} + +.btn-danger:hover { + background: #c0392b; +} + +.checklists-section { + display: flex; + gap: 20px; + align-items: flex-start; /* To Do / Done size to their own content; the whole page scrolls */ + /* Kanban rule: columns get a width FLOOR (below) and the board scrolls + sideways instead — many task sections (Monday…Friday) must never crush + the cards until buttons clip and titles wrap one word per line. */ + overflow-x: auto; + -webkit-overflow-scrolling: touch; + padding-bottom: 6px; /* keep the scrollbar off the last row of cards */ +} + +.list-tabs-row { + display: flex; + justify-content: space-between; + align-items: center; +} + +.list-tabs { + display: flex; + gap: 8px; + flex-wrap: wrap; +} + +/* List tools live behind a single right-aligned "☰ Menu" dropdown so the top + of the board stays clean. */ +.list-menu { + position: relative; + display: flex; + justify-content: flex-end; + /* spacing handled by .tab-view.active gap so it's even with the rest */ +} + +.list-menu-btn { + display: inline-flex; + align-items: center; + gap: 7px; + cursor: pointer; + padding: 7px 14px; + background: #1d2026; + border: 1px solid #4a4a4a; + border-radius: 6px; + color: #cfd5e3; + font-size: 13px; + font-weight: 600; + transition: background 0.15s ease, border-color 0.15s ease; +} +.list-menu-btn::after { + content: '▾'; + font-size: 10px; + color: #39a8ff; + transition: transform 0.2s ease; +} +.list-menu.open .list-menu-btn::after { transform: rotate(180deg); } +.list-menu-btn:hover { background: #252932; border-color: #39a8ff; } +.list-menu.open .list-menu-btn { background: #1f3a52; border-color: #39a8ff; } +.list-menu-btn:focus-visible { outline: 2px solid #39a8ff; outline-offset: 2px; } + +/* Dim backdrop so the lists don't show through the open menu (and a tap-to-close + target). Fixed → not clipped by .main-content's overflow:hidden. */ +.list-menu-backdrop { + display: none; + position: fixed; + inset: 0; + z-index: 9998; + background: rgba(0, 0, 0, 0.45); +} +.list-menu.open .list-menu-backdrop { display: block; animation: menuBackdropIn 0.16s ease both; } + +/* Fixed (not absolute) so it escapes overflow clipping; JS positions it each + open so it's always fully on-screen (flips above the button when needed). */ +.list-menu-panel { + display: none; + position: fixed; + z-index: 9999; + flex-direction: column; + gap: 4px; + min-width: 230px; + max-width: min(300px, calc(100vw - 24px)); + max-height: 80vh; + overflow-y: auto; + padding: 8px; + background: #191c22; + border: 1px solid #4a4a4a; + border-radius: 10px; + box-shadow: 0 16px 40px rgba(0, 0, 0, 0.6); +} +.list-menu.open .list-menu-panel { display: flex; } +.list-menu-panel .btn { width: 100%; justify-content: flex-start; text-align: left; } +@media (prefers-reduced-motion: no-preference) { + @keyframes menuBackdropIn { from { opacity: 0; } to { opacity: 1; } } + @keyframes menuPopIn { from { opacity: 0; transform: translateY(-8px) scale(0.97); } to { opacity: 1; transform: none; } } + @keyframes menuSheetUp { from { opacity: 0; transform: translateY(24px); } to { opacity: 1; transform: none; } } + /* No fill-mode: once the open animation ends it must stop overriding inline + transform/opacity, so the JS drag + close-out transition can take over. */ + .list-menu.open .list-menu-panel { animation: menuPopIn 0.22s cubic-bezier(0.34, 1.56, 0.64, 1); } + .move-menu.open { animation: menuPopIn 0.18s cubic-bezier(0.22, 1, 0.36, 1); } +} +.list-menu-btn:active { transform: scale(0.96); } + +/* Inline "Move to…" dropdown anchored to a task's Move button. */ +.move-menu-backdrop { position: fixed; inset: 0; z-index: 1190; background: transparent; } +.move-menu { + position: fixed; z-index: 1200; flex-direction: column; + min-width: 220px; max-width: min(320px, calc(100vw - 16px)); + padding: 6px; overflow-y: auto; + background: #20242e; border: 1px solid rgba(255, 255, 255, 0.1); border-radius: 12px; + box-shadow: 0 18px 48px rgba(0, 0, 0, 0.5), 0 0 0 1px rgba(0, 0, 0, 0.25); +} +.move-menu-head { + padding: 6px 10px 8px; font-size: 0.72rem; font-weight: 600; letter-spacing: 0.04em; + text-transform: uppercase; color: #8a93a6; +} +.move-opt { + display: flex; align-items: center; gap: 10px; width: 100%; + padding: 9px 10px; border: none; border-radius: 8px; cursor: pointer; text-align: left; + background: transparent; color: #e7eaf0; font-size: 0.92rem; + transition: background 0.12s ease; +} +.move-opt:hover, .move-opt:focus-visible { background: rgba(99, 114, 145, 0.22); outline: none; } +.move-opt:active { background: rgba(99, 114, 145, 0.34); } +.move-dot { flex: 0 0 auto; width: 10px; height: 10px; border-radius: 50%; box-shadow: 0 0 0 2px rgba(0, 0, 0, 0.2) inset; } +/* Section targets (Monday/Tuesday…) use a square outline so they read as columns, not lists. */ +.move-dot-section { border-radius: 3px; background: transparent; border: 2px solid #8a93a6; box-shadow: none; box-sizing: border-box; } +.move-opt-name { flex: 1 1 auto; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; } +.move-scope { + flex: 0 0 auto; padding: 2px 7px; border-radius: 999px; + background: rgba(255, 255, 255, 0.07); color: #9aa3b5; + font-size: 0.68rem; font-weight: 600; letter-spacing: 0.02em; +} +.menu-group-label { + font-size: 10px; + text-transform: uppercase; + letter-spacing: 0.6px; + color: #7c828c; + padding: 8px 4px 2px; +} +.menu-group-label:first-child { padding-top: 2px; } + +.list-tab { + padding: 10px 14px; + border-radius: 6px; + border: 1px solid #2e333d; + background: #181b20; + color: #cfd5e3; + cursor: grab; + transition: all 0.2s; + font-weight: 600; + user-select: none; +} + +.list-tab.active { + background: #39a8ff; + border-color: #39a8ff; + color: #fff; + box-shadow: 0 2px 8px rgba(57,168,255,0.35); +} + +/* See .tab-button:hover above. This is the bug the user hit: on a tablet the + stuck hover wiped the active tab's blue fill but left the blue border, and + flickered on scroll / list switches. Gate hover to real pointers and keep + the active tab blue regardless. */ +@media (hover: hover) { + .list-tab:hover { + background: #1d2026; + } +} + +.list-tab.active:hover { + background: #39a8ff; + border-color: #39a8ff; + color: #fff; + box-shadow: 0 2px 8px rgba(57,168,255,0.35); +} + +/* The tab being dragged is dimmed but stays in place as an anchor. */ +.list-tab.dragging { opacity: 0.4; } + +/* Vertical drop-line shown between tabs (and at the end of the strip) marking + exactly where the dragged list will land. A flex child in #listTabs, so it + sits in the gap; pointer-events:none so it never steals dragover events. */ +.tab-drop-indicator { + flex: 0 0 auto; + align-self: stretch; + width: 3px; + min-height: 24px; + background: #39a8ff; + border-radius: 3px; + box-shadow: 0 0 8px rgba(57, 168, 255, 0.7); + pointer-events: none; +} + +.list-actions .btn-small { + padding: 8px 12px; + font-size: 13px; +} + +.checklist-column { + flex: 1; + min-width: 300px; /* the width floor — stacked layouts reset this to 0 */ + background: #1d2026; + border-radius: 8px; + box-shadow: 0 2px 8px rgba(0,0,0,0.3); + display: flex; + flex-direction: column; + overflow: hidden; /* keep rounded corners; height now grows with content (no inner scroll) */ + border: 1px solid #2e333d; +} + +.checklist-column h2 { + padding: 15px 20px; + background: #181b20; + border-bottom: 1px solid #2e333d; + font-size: 16px; + color: #eceef2; + font-weight: 600; +} + +.checklist-list { + padding: 15px; +} + +.checklist-item { + background: #252932; + border: 1px solid #2e333d; + border-radius: 8px; + padding: 0; /* header strip + padded body provide spacing */ + overflow: hidden; /* let the header strip respect the rounded top corners */ + margin-bottom: 12px; + transition: all 0.2s; +} + +/* Gate on real pointers too — otherwise task cards "stick" highlighted and + flicker as a finger drags over them while scrolling on a tablet. */ +@media (hover: hover) { + .checklist-item:hover:not(.dragging) { + box-shadow: 0 4px 12px rgba(0,0,0,0.45); + border-color: #505050; + transform: translateY(-1px); /* gentle lift; animates via the card's transition:all 0.2s */ + } +} + +.checklist-item.done { + opacity: 0.6; + background: #2a3a2a; + border-color: #3a4a3a; +} +.checklist-item.done .checklist-item-header { + background: #233123; /* green-tinted header when done */ + border-bottom-color: #314431; +} + +/* The card being dragged is dimmed but stays in place as an anchor. */ +.checklist-item.dragging { + opacity: 0.4; +} + +/* Drop-line: a blue bar shown in the gap exactly where the task will land + (including below the last card, for end-of-list drops). pointer-events:none + so it never steals dragover events from the column → no flicker. Lives in + the column (not inside a card) so the card's overflow:hidden can't clip it. */ +.drop-indicator { + height: 3px; + margin: 4px 2px 5px; + background: #39a8ff; + border-radius: 3px; + box-shadow: 0 0 8px rgba(57, 168, 255, 0.7); + pointer-events: none; +} + +.checklist-item-header { + display: flex; + align-items: center; + flex-wrap: wrap; /* narrow card → the recurrence tag drops to its own line instead of crushing the title */ + gap: 12px; + margin: 0; + padding: 11px 14px; + background: #242b36; /* slate header strip — the "top" accent, like the To Do/Done headers */ + border-bottom: 1px solid #38414f; +} +.checklist-item-body { + padding: 12px 14px; +} + +/* ── Collapsible task cards (per-user) ─────────────────────────────── + Resting collapsed = the body is display:none. This is STATE (must work for + reduced-motion users too), so it lives OUTSIDE any prefers-reduced-motion block; + display:none also drops the hidden sub-step checkboxes out of the tab order for free. */ +.checklist-item.collapsed .checklist-item-body { display: none; } +/* Reserve room on the right + absolutely-position the chevron so it always pins to the + header's top-right and never wraps below on mobile (where the header flex-wraps and the + recurrence tag drops to a 2nd line). */ +.checklist-item-header.is-collapsible { + position: relative; + padding-right: 44px; + cursor: pointer; + -webkit-tap-highlight-color: transparent; + touch-action: manipulation; +} +.collapse-toggle { + position: absolute; + top: 50%; right: 7px; + transform: translateY(-50%); + width: 30px; height: 30px; + display: inline-flex; align-items: center; justify-content: center; + padding: 0; border: 0; background: transparent; color: #8b95a7; + border-radius: 8px; cursor: pointer; + -webkit-tap-highlight-color: transparent; touch-action: manipulation; +} +.collapse-toggle::before { content: ''; position: absolute; inset: -8px; } /* ~46px hit target; header stays compact */ +.collapse-toggle svg, .collapse-toggle .chevron path { pointer-events: none; } +@media (hover: hover) { .collapse-toggle:hover { color: #eceef2; background: rgba(255,255,255,0.06); } } +.collapse-toggle:focus-visible { outline: 2px solid #39a8ff; outline-offset: -2px; } +.collapse-toggle .chevron { display: block; transition: transform 0.2s cubic-bezier(0.22,1,0.36,1); } +/* Rotate off aria-expanded (flips synchronously on toggle), NOT the .collapsed class + (which is only added at collapse-finish), so the glyph tracks the body in both directions. */ +.collapse-toggle[aria-expanded="false"] .chevron { transform: rotate(-90deg); } + +.checklist-item input[type="checkbox"] { + margin-top: 2px; + width: 18px; + height: 18px; + cursor: pointer; + flex-shrink: 0; + accent-color: #2ecc71; /* green tick — matches the "done" flash */ +} + +.checklist-item-title { + flex: 1; + font-weight: 600; + font-size: 15px; + color: #eceef2; + word-wrap: break-word; + line-height: 1.4; +} + +.checklist-item.done .checklist-item-title { + text-decoration: line-through; + color: #888; +} + +.checklist-item-description { + margin: 0; + color: #b0b0b0; + font-size: 13px; + line-height: 1.6; + word-wrap: break-word; + white-space: normal; /* markdown structure handles layout now */ +} +/* Markdown elements inside a description */ +.checklist-item-description p { margin: 0 0 6px; } +.checklist-item-description p:last-child { margin-bottom: 0; } +.checklist-item-description ul, +.checklist-item-description ol { margin: 4px 0 6px; padding-left: 20px; } +.checklist-item-description li { margin: 2px 0; } +.checklist-item-description h4, +.checklist-item-description h5, +.checklist-item-description h6 { margin: 8px 0 4px; color: #cfd5e3; font-size: 13px; font-weight: 700; } +.checklist-item-description strong { color: #eceef2; } + +/* ── Inline checkbox rows (md.js .md-task) — authored anywhere in a description ── + Shared shape for the LIVE list and the editor's formatted preview; interactive + affordances (cursor/hover/tap target) are scoped to .checklist-item-description so the + editor copy stays inert. The box is CSS-drawn (no unicode/emoji glyph → iPad-safe). */ +.md-task { list-style: none; margin-left: -18px; } /* pull back the

Offline

The checklist needs an internet connection the first time. Try again when you\'re back online.

Array.isArray(t)&&j(t[0]);var V=t=>typeof t=="object"&&!!t.createAnimation;var D=t=>typeof t=="function";var q=t=>typeof t=="string";var F={ms:t=>t*1e3,s:t=>t/1e3};function St(t,e){return e?t*(1e3/e):0}var qt=(t,e,r)=>(((1-3*r+3*e)*t+(3*r-6*e))*t+3*e)*t,ue=1e-7,le=12;function pe(t,e,r,n,o){let s,i,a=0;do i=e+(r-e)/2,s=qt(i,n,o)-t,s>0?r=i:e=i;while(Math.abs(s)>ue&&++ape(s,0,1,t,r);return s=>s===0||s===1?s:qt(o(s),e,n)}var Et=(t,e="end")=>r=>{r=e==="end"?Math.min(r,.999):Math.max(r,.001);let n=r*t,o=e==="end"?Math.floor(n):Math.ceil(n);return H(0,1,o/t)};var me={ease:z(.25,.1,.25,1),"ease-in":z(.42,0,1,1),"ease-in-out":z(.42,0,.58,1),"ease-out":z(0,0,.58,1)},he=/$(.*?)$/;function X(t){if(D(t))return t;if(tt(t))return z(...t);let e=me[t];if(e)return e;if(t.startsWith("steps")){let r=he.exec(t);if(r){let n=r[1].split(",");return Et(parseFloat(n[0]),n[1].trim())}}return _}var L=class{constructor(e,r=[0,1],{easing:n,duration:o=v.duration,delay:s=v.delay,endDelay:i=v.endDelay,repeat:a=v.repeat,offset:l,direction:u="normal",autoplay:f=!0}={}){if(this.startTime=null,this.rate=1,this.t=0,this.cancelTimestamp=null,this.easing=_,this.duration=0,this.totalDuration=0,this.repeat=0,this.playState="idle",this.finished=new Promise((c,x)=>{this.resolve=c,this.reject=x}),n=n||v.easing,V(n)){let c=n.createAnimation(r);n=c.easing,r=c.keyframes||r,o=c.duration||o}this.repeat=a,this.easing=R(n)?_:X(n),this.updateDuration(o);let m=Ot(r,l,R(n)?n.map(X):_);this.tick=c=>{var x;s=s;let p=0;this.pauseTime!==void 0?p=this.pauseTime:p=(c-this.startTime)*this.rate,this.t=p,p/=1e3,p=Math.max(p-s,0),this.playState==="finished"&&this.pauseTime===void 0&&(p=this.totalDuration);let h=p/this.duration,b=Math.floor(h),g=h%1;!g&&h>=1&&(g=1),g===1&&b--;let E=b%2;(u==="reverse"||u==="alternate"&&E||u==="alternate-reverse"&&!E)&&(g=1-g);let w=p>=this.totalDuration?1:Math.min(g,1),P=m(this.easing(w));e(P),this.pauseTime===void 0&&(this.playState==="finished"||p>=this.totalDuration+i)?(this.playState="finished",(x=this.resolve)===null||x===void 0||x.call(this,P)):this.playState!=="idle"&&(this.frameRequestId=requestAnimationFrame(this.tick))},f&&this.play()}play(){let e=performance.now();this.playState="running",this.pauseTime!==void 0?this.startTime=e-this.pauseTime:this.startTime||(this.startTime=e),this.cancelTimestamp=this.startTime,this.pauseTime=void 0,this.frameRequestId=requestAnimationFrame(this.tick)}pause(){this.playState="paused",this.pauseTime=this.t}finish(){this.playState="finished",this.tick(0)}stop(){var e;this.playState="idle",this.frameRequestId!==void 0&&cancelAnimationFrame(this.frameRequestId),(e=this.reject)===null||e===void 0||e.call(this,!1)}cancel(){this.stop(),this.tick(this.cancelTimestamp)}reverse(){this.rate*=-1}commitStyles(){}updateDuration(e){this.duration=e,this.totalDuration=e*(this.repeat+1)}get currentTime(){return this.t}set currentTime(e){this.pauseTime!==void 0||this.rate===0?this.pauseTime=e:this.startTime=performance.now()-e/this.rate}get playbackRate(){return this.rate}set playbackRate(e){this.rate=e}};var et=function(){};var rt=class{setAnimation(e){this.animation=e,e==null||e.finished.then(()=>this.clearAnimation()).catch(()=>{})}clearAnimation(){this.animation=this.generator=void 0}};var Tt=new WeakMap;function ct(t){return Tt.has(t)||Tt.set(t,{transforms:[],values:new Map}),Tt.get(t)}function zt(t,e){return t.has(e)||t.set(e,new rt),t.get(e)}var de=["","X","Y","Z"],ge=["translate","scale","rotate","skew"],nt={x:"translateX",y:"translateY",z:"translateZ"},Lt={syntax:"",initialValue:"0deg",toDefaultUnit:t=>t+"deg"},ye={translate:{syntax:"",initialValue:"0px",toDefaultUnit:t=>t+"px"},rotate:Lt,scale:{syntax:"",initialValue:1,toDefaultUnit:_},skew:Lt},I=new Map,ut=t=>`--motion-${t}`,ft=["x","y","z"];ge.forEach(t=>{de.forEach(e=>{ft.push(t+e),I.set(ut(t+e),ye[t])})});var xe=(t,e)=>ft.indexOf(t)-ft.indexOf(e),be=new Set(ft),lt=t=>be.has(t),Ut=(t,e)=>{nt[e]&&(e=nt[e]);let{transforms:r}=ct(t);wt(r,e),t.style.transform=ve(r)},ve=t=>t.sort(xe).reduce(we,"").trim(),we=(t,e)=>`${t} ${e}(var(${ut(e)}))`;var ot=t=>t.startsWith("--"),Wt=new Set;function kt(t){if(!Wt.has(t)){Wt.add(t);try{let{syntax:e,initialValue:r}=I.has(t)?I.get(t):{};CSS.registerProperty({name:t,inherits:!1,syntax:e,initialValue:r})}catch{}}}var jt=(t,e)=>document.createElement("div").animate(t,e),Xt={cssRegisterProperty:()=>typeof CSS!="undefined"&&Object.hasOwnProperty.call(CSS,"registerProperty"),waapi:()=>Object.hasOwnProperty.call(Element.prototype,"animate"),partialKeyframes:()=>{try{jt({opacity:[1]})}catch{return!1}return!0},finished:()=>!!jt({opacity:[0,1]},{duration:.001}).finished,linearEasing:()=>{try{jt({opacity:0},{easing:"linear(0, 1)"})}catch{return!1}return!0}},At={},G={};for(let t in Xt)G[t]=()=>(At[t]===void 0&&(At[t]=Xt[t]()),At[t]);var _e=.015,Oe=(t,e)=>{let r="",n=Math.round(e/_e);for(let o=0;oD(t)?G.linearEasing()?`linear(${Oe(t,e)})`:v.easing:tt(t)?Se(t):t,Se=([t,e,r,n])=>`cubic-bezier(${t}, ${e}, ${r}, ${n})`;function Zt(t,e){for(let r=0;rArray.isArray(t)?t:[t];function U(t){return nt[t]&&(t=nt[t]),lt(t)?ut(t):t}var it={get:(t,e)=>{e=U(e);let r=ot(e)?t.style.getPropertyValue(e):getComputedStyle(t)[e];if(!r&&r!==0){let n=I.get(e);n&&(r=n.initialValue)}return r},set:(t,e,r)=>{e=U(e),ot(e)?t.style.setProperty(e,r):t.style[e]=r}};function mt(t,e=!0){if(!(!t||t.playState==="finished"))try{t.stop?t.stop():(e&&t.commitStyles(),t.cancel())}catch{}}function ht(t,e){var r;let n=(e==null?void 0:e.toDefaultUnit)||_,o=t[t.length-1];if(q(o)){let s=((r=o.match(/(-?[\d.]+)([a-z%]*)/))===null||r===void 0?void 0:r[2])||"";s&&(n=i=>i+s)}return n}function Ee(){return window.__MOTION_DEV_TOOLS_RECORD}function dt(t,e,r,n={},o){let s=Ee(),i=n.record!==!1&&s,a,{duration:l=v.duration,delay:u=v.delay,endDelay:f=v.endDelay,repeat:m=v.repeat,easing:c=v.easing,persist:x=!1,direction:p,offset:h,allowWebkitAcceleration:b=!1,autoplay:g=!0}=n,E=ct(t),w=lt(e),P=G.waapi();w&&Ut(t,e);let O=U(e),T=zt(E.values,O),A=I.get(O);return mt(T.animation,!(V(c)&&T.generator)&&n.record!==!1),()=>{let S=()=>{var d,N;return(N=(d=it.get(t,O))!==null&&d!==void 0?d:A==null?void 0:A.initialValue)!==null&&N!==void 0?N:0},y=Zt(pt(r),S),$=ht(y,A);if(V(c)){let d=c.createAnimation(y,e!=="opacity",S,O,T);c=d.easing,y=d.keyframes||y,l=d.duration||l}if(ot(O)&&(G.cssRegisterProperty()?kt(O):P=!1),w&&!G.linearEasing()&&(D(c)||R(c)&&c.some(D))&&(P=!1),P){A&&(y=y.map(M=>j(M)?A.toDefaultUnit(M):M)),y.length===1&&(!G.partialKeyframes()||i)&&y.unshift(S());let d={delay:F.ms(u),duration:F.ms(l),endDelay:F.ms(f),easing:R(c)?void 0:Pt(c,l),direction:p,iterations:m+1,fill:"both"};a=t.animate({[O]:y,offset:h,easing:R(c)?c.map(M=>Pt(M,l)):void 0},d),a.finished||(a.finished=new Promise((M,at)=>{a.onfinish=M,a.oncancel=at}));let N=y[y.length-1];a.finished.then(()=>{x||(it.set(t,O,N),a.cancel())}).catch(Q),b||(a.playbackRate=1.000001)}else if(o&&w)y=y.map(d=>typeof d=="string"?parseFloat(d):d),y.length===1&&y.unshift(parseFloat(S())),a=new o(d=>{it.set(t,O,$?$(d):d)},y,Object.assign(Object.assign({},n),{duration:l,easing:c}));else{let d=y[y.length-1];it.set(t,O,A&&j(d)?A.toDefaultUnit(d):d)}return i&&s(t,e,y,{duration:l,delay:u,easing:c,repeat:m,offset:h},"motion-one"),T.setAnimation(a),a&&!g&&a.pause(),a}}var gt=(t,e)=>t[e]?Object.assign(Object.assign({},t),t[e]):Object.assign({},t);function Z(t,e){var r;return typeof t=="string"?e?((r=e[t])!==null&&r!==void 0||(e[t]=document.querySelectorAll(t)),t=e[t]):t=document.querySelectorAll(t):t instanceof Element&&(t=[t]),Array.from(t||[])}var Te=t=>t(),yt=(t,e,r=v.duration)=>new Proxy({animations:t.map(Te).filter(Boolean),duration:r,options:e},Ae),je=t=>t.animations[0],Ae={get:(t,e)=>{let r=je(t);switch(e){case"duration":return t.duration;case"currentTime":return F.s((r==null?void 0:r[e])||0);case"playbackRate":case"playState":return r==null?void 0:r[e];case"finished":return t.finished||(t.finished=Promise.all(t.animations.map(Pe)).catch(Q)),t.finished;case"stop":return()=>{t.animations.forEach(n=>mt(n))};case"forEachNative":return n=>{t.animations.forEach(o=>n(o,t))};default:return typeof(r==null?void 0:r[e])=="undefined"?void 0:()=>t.animations.forEach(n=>n[e]())}},set:(t,e,r)=>{switch(e){case"currentTime":r=F.ms(r);case"playbackRate":for(let n=0;nt.finished;function Dt(t=.1,{start:e=0,from:r=0,easing:n}={}){return(o,s)=>{let i=j(r)?r:De(r,s),a=Math.abs(i-o),l=t*a;if(n){let u=s*t;l=X(n)(l/u)*u}return e+l}}function De(t,e){if(t==="first")return 0;{let r=e-1;return t==="last"?r:r/2}}function xt(t,e,r){return D(t)?t(e,r):t}function Ht(t){return function(r,n,o={}){r=Z(r);let s=r.length;et(!!s,"No valid element provided."),et(!!n,"No keyframes defined.");let i=[];for(let a=0;ae&&o.atdt(...s,L)).filter(Boolean);return yt(o,e,(r=n[0])===null||r===void 0?void 0:r[3].duration)}function Re(t,e={}){var{defaultOptions:r={}}=e,n=Jt(e,["defaultOptions"]);let o=[],s=new Map,i={},a=new Map,l=0,u=0,f=0;for(let m=0;m1,"spring must be provided 2 keyframes within timeline()");let bt=d.createAnimation(S,T!=="opacity",()=>0,T);d=bt.easing,S=bt.keyframes||S,$=bt.duration||$}let N=xt(h.delay,w,E)||0,M=u+N,at=M+$,{offset:W=Y(S.length)}=y;W.length===1&&W[0]===0&&(W[1]=1);let $t=W.length-S.length;$t>0&&k(W,$t),S.length===1&&S.unshift(null),Qt(A,S,d,W,M,at),b=Math.max(N+$,b),f=Math.max(at,f)}}l=u,u+=b}return s.forEach((m,c)=>{for(let x in m){let p=m[x];p.sort(Yt);let h=[],b=[],g=[];for(let E=0;Ee/(2*Math.sqrt(t*r));function ee(t,e,r){return t=e||t>e&&r<=e}var It=({stiffness:t=B.stiffness,damping:e=B.damping,mass:r=B.mass,from:n=0,to:o=1,velocity:s=0,restSpeed:i,restDistance:a}={})=>{s=s?F.s(s):0;let l={done:!1,hasReachedTarget:!1,current:n,target:o},u=o-n,f=Math.sqrt(t/r)/1e3,m=te(t,e,r),c=Math.abs(u)<5;i||(i=c?.01:2),a||(a=c?.005:.5);let x;if(m<1){let p=f*Math.sqrt(1-m*m);x=h=>o-Math.exp(-m*f*h)*((-s+m*f*u)/p*Math.sin(p*h)+u*Math.cos(p*h))}else x=p=>o-Math.exp(-f*p)*(u+(-s+f*u)*p);return p=>{l.current=x(p);let h=p===0?s:st(x,p,l.current),b=Math.abs(h)<=i,g=Math.abs(o-l.current)<=a;return l.done=b&&g,l.hasReachedTarget=ee(n,o,l.current),l}};var Ct=10,Ne=1e4;function Nt(t,e=_){let r,n=Ct,o=t(0),s=[e(o.current)];for(;!o.done&&n{let n=new Map,o=(i=0,a=100,l=0,u=!1)=>{let f=`${i}-${a}-${l}-${u}`;return n.has(f)||n.set(f,t(Object.assign({from:i,to:a,velocity:l},r))),n.get(f)},s=(i,a)=>(e.has(i)||e.set(i,Nt(i,a)),e.get(i));return{createAnimation:(i,a=!0,l,u,f)=>{let m,c,x,p=0,h=_,b=i.length;if(a){h=ht(i,u?I.get(U(u)):void 0);let g=i[b-1];if(x=Vt(g),b>1&&i[0]!==null)c=Vt(i[0]);else{let E=f==null?void 0:f.generator;if(E){let{animation:w,generatorStartTime:P}=f,O=(w==null?void 0:w.startTime)||P||0,T=(w==null?void 0:w.currentTime)||performance.now()-O,A=E(T).current;c=A,p=st(S=>E(S).current,T,A)}else l&&(c=Vt(l()))}}if(re(c)&&re(x)){let g=o(c,x,p,u==null?void 0:u.includes("scale"));m=Object.assign(Object.assign({},s(g,h)),{easing:"linear"}),f&&(f.generator=g,f.generatorStartTime=performance.now())}return m||(m={easing:"ease",duration:s(o(0,100)).overshootDuration}),m}}}}var Gt=ne(It);var Ve={any:0,all:1};function Bt(t,e,{root:r,margin:n,amount:o="any"}={}){if(typeof IntersectionObserver=="undefined")return()=>{};let s=Z(t),i=new WeakMap,a=u=>{u.forEach(f=>{let m=i.get(f.target);if(f.isIntersecting!==!!m)if(f.isIntersecting){let c=e(f);D(c)?i.set(f.target,c):l.unobserve(f.target)}else m&&(m(f),i.delete(f.target))})},l=new IntersectionObserver(a,{root:r,rootMargin:n,threshold:typeof o=="number"?o:Ve[o]});return s.forEach(u=>l.observe(u)),()=>l.disconnect()}return fe(Ge);})(); diff --git a/server/server.js b/server/server.js new file mode 100644 index 0000000..1ddfaa4 --- /dev/null +++ b/server/server.js @@ -0,0 +1,3832 @@ +require('dotenv').config(); + +const express = require('express'); +const path = require('path'); +const fs = require('fs/promises'); +const fsSync = require('fs'); +const crypto = require('crypto'); +const bcrypt = require('bcryptjs'); +const nodemailer = require('nodemailer'); +const cron = require('node-cron'); + +// ─── Config ────────────────────────────────────────────────────── +const PORT = parseInt(process.env.PORT || '3000', 10); +const DATA_DIR = process.env.DATA_DIR || path.join(__dirname, 'data'); +const STATE_FILE = path.join(DATA_DIR, 'checklists.json'); +// Uploaded equipment photos live under the persisted data volume, so they +// survive container rebuilds and are excluded from the deploy tarball. +const UPLOAD_DIR = path.join(DATA_DIR, 'uploads'); +// Attached documents (setup guides etc.) linked from task/note descriptions. +// SEPARATE from uploads/ on purpose: the photo orphan-sweep globs UPLOAD_DIR +// and would delete anything it doesn't recognize as an equipment image. +const DOCS_DIR = path.join(DATA_DIR, 'docs'); +// Nightly snapshots of checklists.json live here (under the persisted volume, so +// they survive rebuilds and are excluded from the deploy tarball). +const BACKUP_DIR = path.join(DATA_DIR, 'backups'); +const BACKUP_KEEP = parseInt(process.env.BACKUP_KEEP || '30', 10); // days of history +const ADMIN_PASSWORD = process.env.ADMIN_PASSWORD || 'changeme'; + +const REPORT_EMAIL = process.env.REPORT_EMAIL || ''; +const REPORT_CRON = process.env.REPORT_CRON || '0 15 * * 0'; // Sunday 3:00 PM +const REPORT_TZ = process.env.REPORT_TZ || 'America/New_York'; +const RESET_AFTER_DIGEST = (process.env.RESET_AFTER_DIGEST || 'true').toLowerCase() !== 'false'; + +const SMTP_HOST = process.env.SMTP_HOST || ''; +const SMTP_PORT = parseInt(process.env.SMTP_PORT || '587', 10); +const SMTP_SECURE = (process.env.SMTP_SECURE || 'false').toLowerCase() === 'true'; +const SMTP_USER = process.env.SMTP_USER || ''; +const SMTP_PASS = process.env.SMTP_PASS || ''; +const SMTP_FROM = process.env.SMTP_FROM || SMTP_USER; + +// Fingerprint of the front-end assets this process serves. Sent with every /api/state poll so an +// already-open tab can notice a deploy and refresh itself — signing out/in never reloads an SPA, so +// without this a wall tablet runs whatever JS it loaded days ago (this bit us: a new feature's +// controls were simply absent in a long-open tab). Computed once at boot from size+mtime. +const BUILD_ID = (() => { + try { + return ['app.js', 'index.html', 'styles.css', 'md.js'] + .map((f) => { + try { const s = fsSync.statSync(path.join(__dirname, 'public', f)); return f + ':' + s.size + ':' + Math.floor(s.mtimeMs); } + catch (_) { return f + ':0'; } + }) + .join('|'); + } catch (_) { return String(Date.now()); } +})(); + +if (!fsSync.existsSync(DATA_DIR)) { + fsSync.mkdirSync(DATA_DIR, { recursive: true }); +} +if (!fsSync.existsSync(UPLOAD_DIR)) { + fsSync.mkdirSync(UPLOAD_DIR, { recursive: true }); +} +if (!fsSync.existsSync(DOCS_DIR)) { + fsSync.mkdirSync(DOCS_DIR, { recursive: true }); +} +if (!fsSync.existsSync(BACKUP_DIR)) { + fsSync.mkdirSync(BACKUP_DIR, { recursive: true }); +} + +// ─── Persistence (serialised single-writer queue) ──────────────── +let writeQueue = Promise.resolve(); + +function defaultState() { + return { + lists: [ + { + id: 'startup', + name: 'Startup', + location: '', + team: '', + items: [], + lastCheckDate: new Date().toDateString() + } + ], + selectedListId: 'startup', + checks: {}, + users: {}, + executives: {}, + directory: { locations: [], teams: [] }, + equipment: { items: {} }, + activity: [] // admin audit log: append-only ring buffer of who-did-what (capped, see logActivity) + }; +} + +// Lower-case short code seeded for a brand-new location/team. Multi-word names +// use initials ("South Coast" -> "sc"); single words use the first two letters +// ("Woonsocket" -> "wo"). These are only defaults — the admin can edit them. +function defaultAbbrev(name) { + const words = String(name || '').trim().split(/\s+/).filter(Boolean); + if (words.length >= 2) return words.map((w) => w[0]).join('').toLowerCase(); + return String(name || '').trim().slice(0, 2).toLowerCase(); +} + +// One-time seed of the location directory from whatever locations already exist +// on users/lists. After this the directory is admin-owned and never re-derived +// (re-deriving would resurrect entries the admin deleted). +function seedDirectory(state) { + const locs = new Set(); + (state.lists || []).forEach((l) => { + const v = (l.location || '').trim(); + if (v) locs.add(normalizeName(v)); + }); + Object.values(state.users || {}).forEach((u) => { + const v = (u.location || '').trim(); + if (v) locs.add(normalizeName(v)); + }); + return { + locations: Array.from(locs).sort().map((name) => ({ name, abbrev: defaultAbbrev(name) })), + teams: [] + }; +} + +// Keep the directory in sync as accounts are created: register a location/team +// (with a default abbrev) if it isn't already listed. The master can refine the +// abbreviations afterward via PUT /api/admin/directory. +function registerDirectory(state, location, team) { + state.directory = state.directory || { locations: [], teams: [] }; + if (!Array.isArray(state.directory.locations)) state.directory.locations = []; + if (!Array.isArray(state.directory.teams)) state.directory.teams = []; + const addEntry = (arr, raw) => { + const name = (raw || '').trim() ? normalizeName(raw) : ''; + if (!name) return; + if (!arr.find((e) => normalizeName(e.name) === name)) { + arr.push({ name, abbrev: defaultAbbrev(name) }); + } + }; + addEntry(state.directory.locations, location); + addEntry(state.directory.teams, team); +} + +// The directory as the UI should see it: curated locations/teams PLUS any teams +// actually in use on accounts or lists — so the login team dropdown is never +// empty when teams exist. Read-only; does not mutate stored state. +function effectiveDirectory(state) { + const dir = state.directory || { locations: [], teams: [] }; + const teamMap = new Map(); // lowercased name -> { name, abbrev } + (dir.teams || []).forEach((t) => { + if (t && t.name) teamMap.set(String(t.name).toLowerCase(), { name: t.name, abbrev: t.abbrev || '' }); + }); + const addTeam = (name) => { + const n = String(name || '').trim(); + if (n && !teamMap.has(n.toLowerCase())) teamMap.set(n.toLowerCase(), { name: n, abbrev: '' }); + }; + Object.values(state.users || {}).forEach((u) => addTeam(u.team)); + (state.lists || []).forEach((l) => addTeam(l.team)); + return { + locations: (dir.locations || []).map((e) => ({ name: e.name, abbrev: e.abbrev || '' })), + teams: Array.from(teamMap.values()).sort((a, b) => a.name.localeCompare(b.name)) + }; +} + +// Drop executive scope entries that reference a location/team that no longer +// exists ANYWHERE — deleted from the directory with nothing (no list, no team +// login) still carrying the name. Deleting "Greenville" from the directory used +// to leave every executive scoped to it showing (and holding) a Greenville +// grant forever. Behavior-preserving by construction: a dangling name matches +// no list, so dropping it can't shrink real access — and an axis is never +// emptied while the other stays scoped (an empty axis means "any" in +// execCanEditList, so that scrub would BROADEN access; the stale name is kept +// instead and the admin UI labels it "removed"). Both axes emptying together is +// fine: no scope at all = no access, which is what a dangling-only scope +// already amounted to. Returns the changed executives (for session refresh). +function scrubExecScopes(state) { + const dir = state.directory || { locations: [], teams: [] }; + const validLocs = new Set((dir.locations || []).map((e) => normalizeName(e.name))); + const validTeams = new Set((dir.teams || []).map((e) => normalizeName(e.name))); + (state.lists || []).forEach((l) => { + if ((l.location || '').trim()) validLocs.add(normalizeName(l.location)); + if ((l.team || '').trim()) validTeams.add(normalizeName(l.team)); + }); + Object.values(state.users || {}).forEach((u) => { + if ((u.location || '').trim()) validLocs.add(normalizeName(u.location)); + if ((u.team || '').trim()) validTeams.add(normalizeName(u.team)); + }); + const changed = []; + Object.values(state.executives || {}).forEach((e) => { + const curLocs = Array.isArray(e.scopeLocations) ? e.scopeLocations : []; + const curTeams = Array.isArray(e.scopeTeams) ? e.scopeTeams : []; + const keptLocs = curLocs.filter((s) => validLocs.has(normalizeName(s))); + const keptTeams = curTeams.filter((s) => validTeams.has(normalizeName(s))); + let nextLocs = keptLocs; + let nextTeams = keptTeams; + if (keptLocs.length === 0 && curLocs.length > 0 && keptTeams.length > 0) nextLocs = curLocs; // would broaden → keep stale + if (keptTeams.length === 0 && curTeams.length > 0 && keptLocs.length > 0) nextTeams = curTeams; // would broaden → keep stale + if (nextLocs.length !== curLocs.length || nextTeams.length !== curTeams.length) { + e.scopeLocations = nextLocs; + e.scopeTeams = nextTeams; + changed.push(e); + } + }); + return changed; +} + +// Convert any legacy state shape into the current model. +function migrateState(state) { + if (!state || !Array.isArray(state.lists)) return defaultState(); + if (!state.checks || typeof state.checks !== 'object') state.checks = {}; + if (!state.users || typeof state.users !== 'object') state.users = {}; + if (!state.executives || typeof state.executives !== 'object') state.executives = {}; + if (!state.equipment || typeof state.equipment !== 'object') state.equipment = { items: {} }; + if (!state.equipment.items || typeof state.equipment.items !== 'object') state.equipment.items = {}; + if (!Array.isArray(state.activity)) state.activity = []; // admin audit log (additive, never wiped) + if (!Array.isArray(state.incidents)) state.incidents = []; // Phase 4: reported gear problems (additive) + // Equipment scope (additive): existing items have no scope, which means + // "global" — they keep linking everywhere, exactly as before. New per-site + // items carry the locations/teams they belong to. + Object.values(state.equipment.items).forEach((e) => { + if (!Array.isArray(e.scopeLocations)) e.scopeLocations = []; + if (!Array.isArray(e.scopeTeams)) e.scopeTeams = []; + // Multi-photo migration (additive/idempotent): fold a legacy single `image` + // into an images[] list of {url,caption}, and keep `image` mirrored to the first. + e.images = normEquipImages(e.images, e.image); + e.image = e.images.length ? e.images[0].url : ''; + // Attached documents (additive): older entries simply get an empty list. + e.docs = normEquipDocs(e.docs); + }); + // Teams expansion — all additive and idempotent: only fill fields when absent + // so re-running on every load never overwrites real data. + Object.values(state.users).forEach((u) => { + if (typeof u.team !== 'string') u.team = ''; + if (!Array.isArray(u.emailRecipients)) u.emailRecipients = []; + }); + if (!state.directory || typeof state.directory !== 'object') { + state.directory = seedDirectory(state); + } else { + if (!Array.isArray(state.directory.locations)) state.directory.locations = []; + if (!Array.isArray(state.directory.teams)) state.directory.teams = []; + } + state.lists.forEach((list) => { + if (typeof list.location !== 'string') list.location = ''; + if (typeof list.team !== 'string') list.team = ''; + if (typeof list.color !== 'string') list.color = ''; + if (typeof list.hidden !== 'boolean') list.hidden = false; + // Notes section (additive): off by default so existing lists look identical. columnOrder is the + // shared To Do/Done/Notes order; sanitizeColumnOrder fills it to the full valid set in some order. + if (typeof list.showNotes !== 'boolean') list.showNotes = false; + // Notes-only list: the To Do/Done columns are hidden (a reference board). Implies showNotes. + if (typeof list.notesOnly !== 'boolean') list.notesOnly = false; + if (list.notesOnly) list.showNotes = true; + // Feedback column (additive): off by default; entries live in feedback[], never in items[]. + if (typeof list.showFeedback !== 'boolean') list.showFeedback = false; + list.feedback = cleanFeedback(list.feedback); + // Task sections (additive): legacy lists get the single default "To Do". + list.taskGroups = sanitizeTaskGroups(list.taskGroups); + // Requests inbox (additive): the per-team list cross-department requests land in. + // Requests are ONE-SHOT — a reset schedule would "reopen" completed ones — so the + // flag forces the schedule off everywhere a schedule could be written. + if (typeof list.isRequests !== 'boolean') list.isRequests = false; + if (list.isRequests) list.resetSchedule = null; + list.columnOrder = sanitizeColumnOrder(list.columnOrder); + if (!list.resetSchedule || typeof list.resetSchedule !== 'object') list.resetSchedule = null; + // Always have a lastCheckDate so the once-per-day reset guard works. Default to + // TODAY (not a past date) so a list that's missing it never auto-resets on the + // very first load — which would wipe checks (esp. with a 'daily' schedule). + if (typeof list.lastCheckDate !== 'string' || !list.lastCheckDate) list.lastCheckDate = new Date().toDateString(); + list.items = Array.isArray(list.items) ? list.items : []; + list.items.forEach((item) => { + // Normalize kind first: anything that isn't the string 'note' is a task (covers legacy items + // with no kind, and imported/hand-edited garbage). A note has no completion state, so skip the + // legacy completed→checks migration for it (never mint a stray check record for a note). + item.kind = item.kind === 'note' ? 'note' : 'task'; + // Request attribution + photos (additive, tasks only): light re-sanitize. + if (item.requestedBy != null) item.requestedBy = String(item.requestedBy).slice(0, 60); + if (item.requestedAt != null) item.requestedAt = String(item.requestedAt).slice(0, 40); + if (item.images != null) item.images = normEquipImages(item.images); + if (item.kind === 'note') { delete item.completed; delete item.completedDate; delete item.completedBy; return; } + if (item.completed && item.completedBy) { + const key = normalizeName(item.completedBy); + state.checks[key] = state.checks[key] || {}; + state.checks[key][list.id] = state.checks[key][list.id] || {}; + if (!state.checks[key][list.id][item.id]) { + state.checks[key][list.id][item.id] = { + completed: true, + completedDate: item.completedDate || new Date().toISOString(), + completedBy: key + }; + } + } + delete item.completed; + delete item.completedDate; + delete item.completedBy; + }); + reconcileItemGroups(list); // every task lands in a real section (deleted/unknown → default) + }); + // Convert the legacy structured sub-step model to inline "- [ ]" task lines (idempotent). + migrateLegacySubtasks(state); + // Retro-clean executive scopes that already reference deleted locations/teams + // (directory deletes didn't cascade before this existed). Idempotent; persists + // on the next state write. Runs at boot, so no live sessions need refreshing. + scrubExecScopes(state); + return state; +} + +// ─── Admin audit log ──────────────────────────────────────────────── +// Append-only record of who-did-what, kept in state.activity (persisted with the state file, +// preserved across the master bulk-save). Capped to the most recent MAX_ACTIVITY entries so the +// file can't grow without bound. Master-only to read (GET /api/admin/activity). +const MAX_ACTIVITY = 1000; +function activityRole(user) { + if (isMasterAdmin(user)) return 'master'; + if (user.role === 'executive') return 'executive'; + if (user.role === 'admin') return 'team-admin'; + return 'checker'; +} +// A list's human label for log messages, e.g. "Startup (Woonsocket · Production)". +// ── Feedback entries ───────────────────────────────────────────────── +// A list's optional "Feedback" column: lightweight text entries ANYONE the +// list applies to may add (checkers included — that's the point: team input, +// things to work on). Stored on the list as feedback[] — deliberately NOT in +// items[], so nothing in the task/note machinery (checks, resets, digests, +// completion %) can ever count one. +function makeFeedbackId() { + return 'fb-' + Date.now().toString(36) + '-' + Math.random().toString(16).slice(2, 8); +} +function cleanFeedback(arr) { + if (!Array.isArray(arr)) return []; + return arr.map((f) => { + if (!f || typeof f !== 'object') return null; + const text = String(f.text || '').trim().slice(0, 2000); + if (!text) return null; + const out = { + id: String(f.id || makeFeedbackId()), + text, + by: String(f.by || '').trim().slice(0, 40), + byUser: String(f.byUser || '').slice(0, 80), + createdAt: f.createdAt || new Date().toISOString() + }; + if (f.editedAt) out.editedAt = f.editedAt; + return out; + }).filter(Boolean); +} + +function listLabel(list) { + if (!list) return '(unknown list)'; + const scope = [list.location, list.team].map((s) => (s || '').trim()).filter(Boolean).join(' · '); + return (list.name || '(unnamed)') + (scope ? ' (' + scope + ')' : ''); +} +function logActivity(state, user, kind, msg, whoOverride) { + if (!state) return; + if (!Array.isArray(state.activity)) state.activity = []; + const who = String((whoOverride && whoOverride.trim()) || user.displayName || user.username || '?').slice(0, 60); + state.activity.push({ + ts: new Date().toISOString(), + who, + role: activityRole(user), + kind: String(kind || 'action'), + msg: String(msg || '').slice(0, 280) + }); + if (state.activity.length > MAX_ACTIVITY) state.activity = state.activity.slice(-MAX_ACTIVITY); +} + +async function loadState() { + try { + const raw = await fs.readFile(STATE_FILE, 'utf-8'); + const parsed = JSON.parse(raw); + if (!Array.isArray(parsed.lists) || parsed.lists.length === 0) { + return defaultState(); + } + return migrateState(parsed); + } catch (err) { + if (err.code === 'ENOENT') { + const fresh = defaultState(); + await saveStateNow(fresh); + return fresh; + } + throw err; + } +} + +async function saveStateNow(state) { + const tmp = `${STATE_FILE}.tmp`; + await fs.writeFile(tmp, JSON.stringify(state, null, 2), 'utf-8'); + await fs.rename(tmp, STATE_FILE); +} + +function saveState(state) { + writeQueue = writeQueue.then(() => saveStateNow(state)).catch((err) => { + console.error('Failed to persist state:', err); + }); + return writeQueue; +} + +// ─── Recurrence reset (operates on per-location checks map) ────── +// A task recurs (its checkmark clears) when a new period has begun since it was +// completed. Uses the SAME schedule model as a list reset: every-N interval (via +// resetScheduleDue) plus optional intraday clock times. Interval-1 daily/weekly/ +// monthly/yearly reproduce the original once-per-period behavior exactly. +function shouldRecur(item, check) { + if (!item.recurrence || !check || !check.completed) return false; + const rec = item.recurrence; + const now = new Date(); + const completed = new Date(check.completedDate); + if (isNaN(completed.getTime())) return false; + const times = Array.isArray(rec.times) ? rec.times : []; + + // Intraday: the task returns to To Do at each configured clock time (church-local) + // on the days its schedule is due — recurs once per slot boundary passed since it + // was completed. Mirrors a list's intraday reset (tzNow/latestPassedSlot in REPORT_TZ). + if (times.length) { + if (!resetScheduleDue(rec, tzNow(now, REPORT_TZ))) return false; + const slotKey = latestPassedSlot(times, now); // "YYYY-MM-DD HH:MM" or '' + if (!slotKey) return false; + const cwc = tzWallClock(completed, REPORT_TZ); + const completedKey = cwc.date + ' ' + String(Math.floor(cwc.minutes / 60)).padStart(2, '0') + ':' + String(cwc.minutes % 60).padStart(2, '0'); + return completedKey < slotKey; // completed before the latest passed slot → recur + } + + // Non-intraday: today is a scheduled day (honoring every-N interval) AND the task + // was completed before the start of today. + if (!resetScheduleDue(rec, now)) return false; + const startOfToday = new Date(now.getFullYear(), now.getMonth(), now.getDate()).getTime(); + return completed.getTime() < startOfToday; +} + +// Is a list's optional auto-reset schedule due on `now`? (weekly weekday / monthly date) +function resetScheduleDue(schedule, now) { + if (!schedule || typeof schedule !== 'object') return false; + const N = Math.max(1, parseInt(schedule.interval, 10) || 1); + const a = schedule.anchor ? new Date(schedule.anchor) : null; + const hasAnchor = a && !isNaN(a.getTime()); + // Whole days between the anchor and now (UTC midnights → DST-proof). + const daysSince = hasAnchor + ? Math.round((Date.UTC(now.getFullYear(), now.getMonth(), now.getDate()) - Date.UTC(a.getFullYear(), a.getMonth(), a.getDate())) / 86400000) + : 0; + // For interval 1, always on cycle (original behavior). For N>1, need a valid + // anchor and the unit-count since it must land on a multiple of N (and not be + // before the anchor). + const onCycle = (units) => N <= 1 || (hasAnchor && units >= 0 && units % N === 0); + const lastDayOfMonth = () => new Date(now.getFullYear(), now.getMonth() + 1, 0).getDate(); + + if (schedule.type === 'daily') return onCycle(daysSince); + if (schedule.type === 'weekly') { + if (now.getDay() !== schedule.dayOfWeek) return false; + return onCycle(Math.floor(daysSince / 7)); + } + if (schedule.type === 'monthly') { + if (now.getDate() !== Math.min(schedule.dayOfMonth, lastDayOfMonth())) return false; + const months = hasAnchor ? (now.getFullYear() - a.getFullYear()) * 12 + (now.getMonth() - a.getMonth()) : 0; + return onCycle(months); + } + if (schedule.type === 'yearly') { + if (now.getMonth() !== schedule.month) return false; + if (now.getDate() !== Math.min(schedule.dayOfMonth, lastDayOfMonth())) return false; + return onCycle(hasAnchor ? (now.getFullYear() - a.getFullYear()) : 0); + } + return false; +} + +// The church's wall clock at `now`: the calendar date (YYYY-MM-DD) and minutes +// since midnight, both in REPORT_TZ. Used for the intraday multi-time reset so a +// list repeats at the operator's LOCAL service times regardless of the container's +// system timezone. Wall-clock based, so it's DST-proof (no offset arithmetic). +function tzWallClock(now, tz) { + const parts = {}; + for (const p of new Intl.DateTimeFormat('en-CA', { + timeZone: tz, year: 'numeric', month: '2-digit', day: '2-digit', + hour: '2-digit', minute: '2-digit', hour12: false + }).formatToParts(now)) parts[p.type] = p.value; + const hour = (parseInt(parts.hour, 10) || 0) % 24; // some platforms emit '24' at midnight + return { date: `${parts.year}-${parts.month}-${parts.day}`, minutes: hour * 60 + (parseInt(parts.minute, 10) || 0) }; +} + +// Of a list's reset times, the latest one (today, in REPORT_TZ) whose clock time +// has already passed — returned as a stable slot key like "2026-06-28 17:00". +// Empty string if none have passed yet today. The key changes when a later time +// passes or the day rolls over, which is exactly when a fresh reset is due. +function latestPassedSlot(times, now) { + const wc = tzWallClock(now, REPORT_TZ); + let best = ''; + let bestMin = -1; + for (const t of times) { + const m = /^(\d{2}):(\d{2})$/.exec(t); + if (!m) continue; + const mins = parseInt(m[1], 10) * 60 + parseInt(m[2], 10); + if (mins <= wc.minutes && mins > bestMin) { bestMin = mins; best = t; } + } + return best ? `${wc.date} ${best}` : ''; +} + +// A Date whose LOCAL calendar fields (getDay/getDate/getMonth/getFullYear) equal +// the wall clock in `tz`. The intraday branch evaluates resetScheduleDue() against +// THIS so its due-day judgment shares REPORT_TZ with latestPassedSlot — otherwise, +// with the container in UTC, a weekly/biweekly list near the day boundary would +// judge "due" on the wrong calendar day and reset early (or skip). Legacy +// (time-less) lists keep using the raw process-local `now`, so their long-standing +// once-per-day behavior is untouched. +function tzNow(now, tz) { + const wc = tzWallClock(now, tz); + const [y, mo, d] = wc.date.split('-').map(Number); + return new Date(y, mo - 1, d, Math.floor(wc.minutes / 60), wc.minutes % 60, 0, 0); +} + +function applyRecurrenceResets(state) { + const now = new Date(); + const today = now.toDateString(); + let changed = false; + state.checks = state.checks || {}; + state.lists.forEach((list) => { + const sched = list.resetSchedule; + const times = (sched && Array.isArray(sched.times)) ? sched.times : []; + + // Intraday multi-time reset: a list configured with specific clock times sends + // the WHOLE list back to To Do at each of those times (church-local) on the days + // its schedule is due — so it can recur several times in one day. Tracked by + // `lastResetSlot` independently of the once-per-day `lastCheckDate` guard below. + if (times.length && resetScheduleDue(sched, tzNow(now, REPORT_TZ))) { + const slot = latestPassedSlot(times, now); + if (slot) { + if (list.lastResetSlot == null) { + // First time we've seen this intraday list (e.g. just configured): record + // the current slot WITHOUT wiping — so enabling it mid-day never clears + // checks someone just made. Real resets start at the next slot boundary. + list.lastResetSlot = slot; + list.lastCheckDate = today; + changed = true; + } else if (list.lastResetSlot !== slot) { + Object.keys(state.checks).forEach((locKey) => { + if (state.checks[locKey] && state.checks[locKey][list.id]) { + delete state.checks[locKey][list.id]; + changed = true; + } + }); + list.lastResetSlot = slot; + list.lastCheckDate = today; + changed = true; + } + } + return; // intraday lists are governed solely by the times[] path + } + + const alreadyToday = list.lastCheckDate === today; + + // Whole-list scheduled reset (a list-level daily/weekly/… schedule with no + // intraday times): send the WHOLE list back to To Do — but ONCE per day, so it + // never re-wipes checks made after the morning reset. Supersedes per-item today. + const scheduledReset = resetScheduleDue(list.resetSchedule, now); + if (scheduledReset && !alreadyToday) { + Object.keys(state.checks).forEach((locKey) => { + if (state.checks[locKey] && state.checks[locKey][list.id]) { + delete state.checks[locKey][list.id]; + changed = true; + } + }); + list.lastCheckDate = today; + changed = true; + return; + } + + // Per-item recurrence. Normally once per day (the lastCheckDate guard), but if + // any item repeats at intraday clock times we must re-evaluate on every poll so + // those tasks reset at each time slot. shouldRecur is idempotent — it only clears + // a check once per elapsed period — so scanning every poll can't over-reset. + const hasIntradayItem = (list.items || []).some((it) => it.recurrence && Array.isArray(it.recurrence.times) && it.recurrence.times.length); + if (alreadyToday && !hasIntradayItem) return; + Object.keys(state.checks).forEach((locKey) => { + const checksForList = state.checks[locKey] && state.checks[locKey][list.id]; + if (!checksForList) return; + list.items.forEach((item) => { + const c = checksForList[item.id]; + if (shouldRecur(item, c)) { + delete checksForList[item.id]; + changed = true; + } + }); + }); + if (!alreadyToday) { list.lastCheckDate = today; changed = true; } + }); + return changed; +} + +// Keep `lastResetSlot` SERVER-OWNED — it must never be trusted from a client +// payload (it's runtime state, like lastCheckDate). Call this on every write path +// that sets a list's resetSchedule, passing the list's PRIOR server state as `prev`: +// • intraday times newly set or changed → re-anchor to the current slot, so +// configuring/editing never causes a surprise mid-day wipe and the next +// scheduled slot still fires (the slot key differs once a new time/day lands). +// • intraday times unchanged → keep the server's existing slot, so an undo or an +// unrelated structural save can't rewind the cadence and re-wipe live checks. +// • no longer intraday → drop the field. +function reconcileResetSlot(target, prev) { + const times = (target.resetSchedule && Array.isArray(target.resetSchedule.times)) ? target.resetSchedule.times : null; + if (!times) { delete target.lastResetSlot; return; } + const prevTimes = (prev && prev.resetSchedule && Array.isArray(prev.resetSchedule.times)) ? prev.resetSchedule.times : null; + const unchanged = !!prevTimes && prevTimes.length === times.length && prevTimes.every((t, i) => t === times[i]); + if (unchanged && prev.lastResetSlot != null) { + target.lastResetSlot = prev.lastResetSlot; + } else { + target.lastResetSlot = latestPassedSlot(times, new Date()); + } +} + +// ─── App ───────────────────────────────────────────────────────── +const app = express(); + +// ─── CORS for the native App Store / Play Store builds ─────────────────────── +// The iOS and Android apps ship the SAME front-end assets from server/public/ +// inside their app bundle, then call this server as a cross-origin JSON API. +// Capacitor serves those bundles from a fixed local shell origin, so without +// these headers every /api call from a native app dies at the preflight. +// +// Deliberately an ALLOWLIST of those fixed shell origins — never `*` and never +// a reflected arbitrary Origin. Auth here is a Bearer token with no cookies, so +// Access-Control-Allow-Credentials is intentionally omitted: even if a hostile +// page reached this header it has no ambient session to ride. Extra origins for +// local `cap run` live-reload can be added via the NATIVE_CORS_ORIGINS env var +// (comma-separated, exact origins incl. port) without touching this list. +const NATIVE_CORS_ORIGINS = new Set([ + 'capacitor://localhost', // iOS shell (WKWebView custom scheme) + 'https://localhost', // Android shell (default androidScheme) + 'ionic://localhost', // legacy Capacitor/Ionic shell + ...String(process.env.NATIVE_CORS_ORIGINS || '') + .split(',').map((o) => o.trim()).filter(Boolean), +]); +app.use((req, res, next) => { + const origin = req.headers.origin; + if (origin && NATIVE_CORS_ORIGINS.has(origin)) { + res.setHeader('Access-Control-Allow-Origin', origin); + res.setHeader('Vary', 'Origin'); + res.setHeader('Access-Control-Allow-Methods', 'GET, POST, PUT, PATCH, DELETE, OPTIONS'); + res.setHeader('Access-Control-Allow-Headers', 'Authorization, Content-Type'); + res.setHeader('Access-Control-Max-Age', '86400'); + // Answer the preflight here, before the body parsers and every route. + if (req.method === 'OPTIONS') return res.status(204).end(); + } + next(); +}); +// Body parsing. Keep a tight limit globally so unauthenticated/low-privilege routes +// (e.g. /api/login) can't be forced to buffer+parse huge payloads, and give ONLY the +// authenticated photo-upload route the headroom a full-resolution image needs. Base64 +// inflates ~33%, so 30mb comfortably carries the endpoint's 20 MB decoded cap. +const equipUploadJson = express.json({ limit: '48mb' }); // fits a 30 MB video base64-encoded (~40 MB) + overhead +const defaultJson = express.json({ limit: '5mb' }); +app.use((req, res, next) => ((req.path === '/api/equipment/upload-image' || req.path === '/api/documents/upload') ? equipUploadJson : defaultJson)(req, res, next)); +// Privacy policy. Both app stores require a publicly reachable policy URL, and reviewers +// open it while signed out — so this sits BEFORE any auth and serves the file directly. +// The clean /privacy path is what gets registered with Apple and Google; /privacy.html also +// works via the static handler below, so an old link never breaks. +app.get('/privacy', (req, res) => { + res.sendFile(path.join(__dirname, 'public', 'privacy.html')); +}); + +app.use(express.static(path.join(__dirname, 'public'), { + setHeaders: (res) => { + res.setHeader('Cache-Control', 'no-store, must-revalidate'); + } +})); +// Uploaded equipment photos. Cached aggressively because each filename is +// content-unique (random) — a replaced photo gets a new name, so it's safe. +app.use('/equip-images', express.static(UPLOAD_DIR, { + index: false, + setHeaders: (res) => { + res.setHeader('Cache-Control', 'public, max-age=31536000, immutable'); + } +})); +// Attached documents (linked from task/note descriptions). Same content-unique +// random-prefix filenames as photos, so aggressive caching is safe here too. +app.use('/doc-files', express.static(DOCS_DIR, { + index: false, + setHeaders: (res) => { + res.setHeader('Cache-Control', 'public, max-age=31536000, immutable'); + } +})); + +let cachedState = null; +async function getState() { + if (!cachedState) { + cachedState = await loadState(); + } + if (applyRecurrenceResets(cachedState)) { + saveState(cachedState); + } + return cachedState; +} + +// ─── Sessions / Auth ──────────────────────────────────────────── +// Sessions live in memory; on server restart everyone re-logs in. +// That's fine for a low-stakes app and avoids leaking tokens on disk. +const SESSION_TTL_MS = 30 * 24 * 3600 * 1000; // 30 days +const sessions = new Map(); + +function newSessionToken() { + return crypto.randomBytes(24).toString('base64url'); +} + +function publicUser(u) { + if (!u) return null; + return { + username: u.username, + displayName: u.displayName, + location: u.location || '', + team: u.team || '', + role: u.role || 'user', + emailRecipients: Array.isArray(u.emailRecipients) ? u.emailRecipients : [] + }; +} + +function userSession(u) { + return { + username: u.username, + displayName: u.displayName || u.username, + location: u.location || '', + team: u.team || '', + role: u.role || 'user' + }; +} + +// The stored team-login record behind a session (req.user is a slim snapshot). +function findUserRecord(state, sessionUser) { + const users = state.users || {}; + if (sessionUser && users[sessionUser.username]) return users[sessionUser.username]; + return Object.values(users).find((u) => u.username === (sessionUser && sessionUser.username)) || {}; +} + +function executiveSession(exec) { + return { + username: 'exec:' + exec.id, + displayName: exec.name, + location: '', + team: '', + role: 'executive', + scopeLocations: Array.isArray(exec.scopeLocations) ? exec.scopeLocations : [], + scopeTeams: Array.isArray(exec.scopeTeams) ? exec.scopeTeams : [] + }; +} + +function findExecutive(state, name) { + const n = normalizeName(name); + return Object.values(state.executives || {}).find((e) => normalizeName(e.name) === n) || null; +} + +// Resolve a login from { username?, location, team, password }. The new login +// form sends the typed location value as BOTH `location` and `username` (and the +// team as `team`), so all three resolution paths below stay reachable: +// 1) master admin (env) — typed as "admin" +// 2) location + team, with abbreviation expansion ("sc" -> "South Coast") +// 3) legacy bare-username (existing per-location logins) — unchanged +async function authenticate(creds) { + creds = creds || {}; + const password = String(creds.password || ''); + if (!password) return null; + const typedUser = String(creds.username || '').trim().toLowerCase(); + const locInput = String(creds.location || '').trim(); + const teamInput = String(creds.team || '').trim(); + + // 1) Master login — labeled "Executive" in the UI (kept distinct from the + // separate "Admin" TEAM). "admin" still works as a trigger so we never lock + // the master out, but it's never offered to users as a choice. Can't collide + // with the Admin team, which arrives in the separate `team` field. + const masterCandidate = typedUser || locInput.toLowerCase(); + if (masterCandidate === 'executive' || masterCandidate === 'admin') { + const state = await getState(); + // A "Who are you?" name means a named executive; match by name + their password. + const execName = String(creds.name || '').trim(); + if (execName) { + const exec = findExecutive(state, execName); + if (exec && await bcrypt.compare(password, exec.passwordHash || '')) { + return executiveSession(exec); + } + } + // The shared ADMIN_PASSWORD is the owner/master — works with or without a name, + // so the owner can never be locked out. + if (password === ADMIN_PASSWORD) { + return { username: 'admin', displayName: 'Executive', location: '', team: '', role: 'admin' }; + } + return null; + } + + const state = await getState(); + + // 2) Location + team (abbreviations expanded against the directory). + if (locInput) { + const loc = normalizeName(expandAbbrev(locInput, 'locations', state.directory)); + const tm = teamInput ? normalizeName(expandAbbrev(teamInput, 'teams', state.directory)) : ''; + const match = Object.values(state.users || {}).find((u) => { + const uTeam = (u.team || '').trim() ? normalizeName(u.team) : ''; + return normalizeName(u.location || '') === loc && uTeam === tm; + }); + if (match) { + const ok = await bcrypt.compare(password, match.passwordHash || ''); + return ok ? userSession(match) : null; + } + } + + // 3) Legacy bare-username fallback. + if (typedUser) { + const stored = state.users && state.users[typedUser]; + if (stored) { + const ok = await bcrypt.compare(password, stored.passwordHash || ''); + if (ok) return userSession(stored); + } + } + return null; +} + +function requireUser(req, res, next) { + const auth = req.get('Authorization') || ''; + const m = auth.match(/^Bearer\s+(.+)$/); + const token = m && m[1]; + if (!token) return res.status(401).json({ error: 'Not signed in' }); + const session = sessions.get(token); + if (!session) return res.status(401).json({ error: 'Session expired' }); + if (session.expires < Date.now()) { + sessions.delete(token); + return res.status(401).json({ error: 'Session expired' }); + } + // Refresh expiry on each use (sliding window). + session.expires = Date.now() + SESSION_TTL_MS; + req.user = session.user; + req.sessionToken = token; + next(); +} + +// Master admin = the env "admin" login (and any role:'admin' account with no +// team). Full control: user management, directory, bulk state, digests. +function isMasterAdmin(user) { + return !!(user && user.role === 'admin' && !(user.team && String(user.team).trim())); +} + +function requireMasterAdmin(req, res, next) { + requireUser(req, res, () => { + if (!isMasterAdmin(req.user)) return res.status(403).json({ error: 'Master admin only' }); + next(); + }); +} + +// Editors = role 'admin' (team admin / master) OR 'executive'. Guards the scoped +// list/item endpoints, which separately enforce ownsList() — so this only gates +// "is an editor at all," and scope is checked per-request. +function requireTeamAdmin(req, res, next) { + requireUser(req, res, () => { + if (req.user.role !== 'admin' && req.user.role !== 'executive') { + return res.status(403).json({ error: 'Editors only' }); + } + next(); + }); +} + +// Public health check (used by Docker HEALTHCHECK, no auth required) +app.get('/healthz', (req, res) => { + res.json({ ok: true, ts: new Date().toISOString() }); +}); + +// Public: location/team names + abbreviations for the login pickers. No secrets. +app.get('/api/directory', async (req, res) => { + try { + const state = await getState(); + res.json(effectiveDirectory(state)); + } catch (err) { + res.json({ locations: [], teams: [] }); + } +}); + +// Auth endpoints +app.post('/api/login', async (req, res) => { + try { + const user = await authenticate(req.body || {}); + if (!user) return res.status(401).json({ error: 'Invalid login. Check your location, team, and password.' }); + const token = newSessionToken(); + sessions.set(token, { user, expires: Date.now() + SESSION_TTL_MS }); + // Record the sign-in for the admin activity log (best-effort: never block login on a log write). + try { const st = await getState(); logActivity(st, user, 'login', 'signed in'); await saveState(st); } catch (_) {} + res.json({ token, user }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Login failed' }); + } +}); + +app.post('/api/logout', requireUser, (req, res) => { + sessions.delete(req.sessionToken); + res.json({ ok: true }); +}); + +app.get('/api/me', requireUser, (req, res) => { + res.json({ user: req.user }); +}); + +// Public state view (anyone logged in). Strips users/passwords. +app.get('/api/state', requireUser, async (req, res) => { + try { + const state = await getState(); + const safe = { + lists: state.lists, + selectedListId: state.selectedListId, + checks: state.checks || {}, + directory: effectiveDirectory(state), + // Equipment is projected per caller (see equipmentVisibleTo) — the full + // library used to ship to every login, so a checker's global search + // surfaced every campus's gear. + equipment: (() => { + const all = (state.equipment && state.equipment.items) || {}; + const items = {}; + Object.keys(all).forEach((id) => { if (equipmentVisibleTo(req.user, all[id])) items[id] = all[id]; }); + return { items }; + })(), + // Send the user list only to the master admin, never with password hashes. + users: isMasterAdmin(req.user) + ? Object.values(state.users || {}).map((u) => ({ + username: u.username, + displayName: u.displayName, + location: u.location || '', + team: u.team || '', + role: u.role || 'user', + emailRecipients: Array.isArray(u.emailRecipients) ? u.emailRecipients : [], + createdAt: u.createdAt + })) + : null, + executives: isMasterAdmin(req.user) + ? Object.values(state.executives || {}).map(publicExec) + : null, + // A shared team login's roster of volunteer names (for "tap your name"). + myRoster: req.user.role === 'user' ? (findUserRecord(state, req.user).roster || []) : [], + // Gear-problem reports the caller is allowed to see (their scope only — no + // cross-scope leak). Newest-first, capped so a busy campus can't bloat the + // payload; the client uses these for gear-detail issue history + the editor + // incidents view. See incidentVisibleTo(). + incidents: (Array.isArray(state.incidents) ? state.incidents : []) + .filter((inc) => incidentVisibleTo(req.user, inc)) + .slice(-300) + .reverse(), + // Departments an editor can send a request to: every real (location, team) + // pair, from team logins and lists. Editor-only (the send UI is editor-only). + requestTargets: (isMasterAdmin(req.user) || req.user.role === 'executive') + ? (() => { + const seen = new Map(); + const add = (locV, teamV) => { + const L = String(locV || '').trim(), T = String(teamV || '').trim(); + if (!L || !T) return; + const k = normalizeName(L) + '::' + normalizeName(T); + if (!seen.has(k)) seen.set(k, { location: L, team: T }); + }; + Object.values(state.users || {}).forEach((u) => add(u.location, u.team)); + (state.lists || []).forEach((l) => add(l.location, l.team)); + return [...seen.values()].sort((a, b) => (a.location + ' ' + a.team).localeCompare(b.location + ' ' + b.team)); + })() + : null, + // Which build of the front-end this server is serving. The client compares it against the + // build it booted with and refreshes itself when they differ — otherwise a tab left open on a + // wall tablet keeps running old JS forever (signing out/in does NOT reload an SPA). + buildId: BUILD_ID + }; + res.json(safe); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to load state' }); + } +}); + +// Resolve WHO may toggle checks on `list`, the per-location storage KEY their marks +// land under, and the attribution name. Shared by /api/check and /api/check/sub so the +// two can never drift on scope, key, or attribution. Master/executives write into the +// LIST's own team scope (so their marks merge with that team's live record); everyone +// else writes into their own scope; global lists fall back to the caller's display name. +// On a shared TEAM login a role 'user' may override `by` (tap-your-name attribution). +function resolveCheckScope(state, req, list) { + const allowed = isMasterAdmin(req.user) + || (req.user.role === 'executive' && execCanEditList(req.user, list)) + || (req.user.role !== 'executive' && listAppliesToScope(list, req.user.location, req.user.team)); + const userKey = (isMasterAdmin(req.user) || req.user.role === 'executive') + ? (scopeKey(list.location, list.team) || normalizeName(req.user.displayName || req.user.username)) + : (scopeKey(req.user.location, req.user.team) || normalizeName(req.user.displayName || req.user.username)); + let by = req.user.displayName || req.user.username; + if (req.user.role === 'user') { + const named = String(req.body.by || '').trim().slice(0, 40); + if (named) by = named; + } + return { allowed, userKey, by }; +} + +// Toggle an item's completed status. Uses the logged-in user's location. +app.post('/api/check', requireUser, async (req, res) => { + try { + const { listId, itemId, completed } = req.body || {}; + if (!listId || !itemId || typeof completed !== 'boolean') { + return res.status(400).json({ error: 'listId, itemId, completed required' }); + } + const state = await getState(); + const list = state.lists.find((l) => l.id === listId); + if (!list) return res.status(404).json({ error: 'List not found' }); + const item = list.items.find((i) => i.id === itemId); + if (!item) return res.status(404).json({ error: 'Item not found' }); + // A note is never checkable. No-op with 200 (NEVER 4xx: apiFetch throws on non-2xx and the offline + // flush queue keeps a failed op at its head, so a 400 here would wedge every later check-off). A + // stale/old client that posts a check for a note is thus harmlessly reconciled on its next poll. + if (item.kind === 'note') return res.json({ ok: true, checks: state.checks }); + + const { allowed, userKey, by } = resolveCheckScope(state, req, list); + if (!allowed) return res.status(403).json({ error: 'This list is not assigned to you' }); + if (!userKey) return res.status(400).json({ error: 'No scope set for this check' }); + + state.checks = state.checks || {}; + state.checks[userKey] = state.checks[userKey] || {}; + state.checks[userKey][listId] = state.checks[userKey][listId] || {}; + if (completed) { + state.checks[userKey][listId][itemId] = { + completed: true, + completedDate: new Date().toISOString(), + completedBy: by + }; + } else { + delete state.checks[userKey][listId][itemId]; + } + logActivity(state, req.user, completed ? 'check' : 'uncheck', + (completed ? 'checked' : 'unchecked') + ' "' + (item.title || '?') + '" in ' + listLabel(list), by); + await saveState(state); + res.json({ ok: true, checks: state.checks }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to update item' }); + } +}); + +// Toggle ONE sub-step (checkbox) of a task by its 0-based INDEX among the task-list lines +// in item.description. Progress is stored per-location INSIDE the item's check object +// (checks[userKey][listId][itemId].subChecks[index] = {by,at}). The server owns the count +// (parsed from the description, so completion can't be spoofed); the task auto-completes +// when EVERY checkbox is checked and reopens when one is unchecked — writing the exact same +// {completed,completedDate,completedBy} shape /api/check produces, so the client's To Do↔Done +// move needs no special-casing. An out-of-range index (stale offline op after the description +// shrank) is ACKed as a no-op rather than 4xx, so the offline flush queue never wedges. +app.post('/api/check/sub', requireUser, async (req, res) => { + try { + const { listId, itemId, index, checked } = req.body || {}; + if (!listId || !itemId || !Number.isInteger(index) || index < 0 || typeof checked !== 'boolean') { + return res.status(400).json({ error: 'listId, itemId, index, checked required' }); + } + const state = await getState(); + const list = state.lists.find((l) => l.id === listId); + if (!list) return res.status(404).json({ error: 'List not found' }); + const item = list.items.find((i) => i.id === itemId); + if (!item) return res.status(404).json({ error: 'Item not found' }); + // Notes are display-only — sub-steps never toggle. 200 no-op (never 4xx; see /api/check). + if (item.kind === 'note') return res.json({ ok: true, checks: state.checks, completed: false, total: 0, doneCount: 0 }); + const total = taskLineCount(item.description); + + const { allowed, userKey, by } = resolveCheckScope(state, req, list); + if (!allowed) return res.status(403).json({ error: 'This list is not assigned to you' }); + if (!userKey) return res.status(400).json({ error: 'No scope set for this check' }); + + // Stale index (description changed under an offline op) → no-op, return current state. + if (index >= total) { + const cur = state.checks[userKey] && state.checks[userKey][listId] && state.checks[userKey][listId][itemId]; + return res.json({ ok: true, checks: state.checks, completed: !!(cur && cur.completed), total, doneCount: 0 }); + } + + state.checks = state.checks || {}; + state.checks[userKey] = state.checks[userKey] || {}; + state.checks[userKey][listId] = state.checks[userKey][listId] || {}; + const rec = state.checks[userKey][listId][itemId] || {}; + rec.subChecks = rec.subChecks || {}; + const key = String(index); + if (checked) rec.subChecks[key] = { by, at: new Date().toISOString() }; + else delete rec.subChecks[key]; + + // Completion counts only in-range indices (guards against a stale key lingering). + const doneCount = Object.keys(rec.subChecks).filter((k) => { const n = Number(k); return Number.isInteger(n) && n >= 0 && n < total; }).length; + const nowComplete = total > 0 && doneCount === total; + const wasComplete = !!rec.completed; + if (nowComplete && !wasComplete) { + rec.completed = true; rec.completedDate = new Date().toISOString(); rec.completedBy = by; + logActivity(state, req.user, 'check', 'completed all steps of "' + (item.title || '?') + '" in ' + listLabel(list), by); + } else if (!nowComplete && wasComplete) { + rec.completed = false; delete rec.completedDate; delete rec.completedBy; + logActivity(state, req.user, 'uncheck', 'reopened "' + (item.title || '?') + '" in ' + listLabel(list), by); + } + // Intermediate sub-toggles log NOTHING (only the two parent transitions), so a + // 10-step task can't flood the activity ring buffer. + if (!rec.completed && Object.keys(rec.subChecks).length === 0) delete state.checks[userKey][listId][itemId]; + else state.checks[userKey][listId][itemId] = rec; + + await saveState(state); + res.json({ ok: true, checks: state.checks, completed: !!rec.completed, total, doneCount }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to update sub-step' }); + } +}); + +// ─── Cross-department requests ──────────────────────────────────────── +// An editor (master admin or any executive) asks another department for +// something ("toilet paper restock") WITHOUT needing edit rights there: the +// request lands as a normal task in that team's auto-created "Requests" inbox +// list, attributed to the requester, optionally with photos. The target team +// works it like any task — check it off, or an exec Moves it into a working +// list. Send is deliberately append-only and editor-only (requireTeamAdmin). +app.post('/api/requests', requireTeamAdmin, async (req, res) => { + try { + const title = String((req.body && req.body.title) || '').trim().slice(0, 120); + if (!title) return res.status(400).json({ error: 'Say what you need' }); + const details = String((req.body && req.body.details) || '').trim().slice(0, 2000); + const wantLoc = normalizeName(String((req.body && req.body.location) || '')); + const wantTeam = normalizeName(String((req.body && req.body.team) || '')); + if (!wantLoc || !wantTeam) return res.status(400).json({ error: 'Pick a department' }); + const state = await getState(); + // The target must be a REAL department — a (location, team) pair that has a + // team login or a list (the same pairs the send dropdown offers). Resolve the + // canonical casing from the match so the inbox scopes identically to theirs. + const pair = Object.values(state.users || {}).map((u) => ({ location: u.location || '', team: u.team || '' })) + .concat((state.lists || []).map((l) => ({ location: l.location || '', team: l.team || '' }))) + .find((p) => p.location.trim() && p.team.trim() && normalizeName(p.location) === wantLoc && normalizeName(p.team) === wantTeam); + if (!pair) return res.status(400).json({ error: 'That department does not exist' }); + let list = (state.lists || []).find((l) => l.isRequests + && normalizeName(l.location || '') === wantLoc && normalizeName(l.team || '') === wantTeam); + if (!list) { + list = { + id: makeListId('Requests', pair.location, pair.team, state), + name: 'Requests', location: pair.location, team: pair.team, + color: '', hidden: false, showNotes: false, notesOnly: false, + showFeedback: false, feedback: [], + taskGroups: sanitizeTaskGroups(null), columnOrder: sanitizeColumnOrder(null), + resetSchedule: null, isRequests: true, + items: [], lastCheckDate: new Date().toDateString() + }; + state.lists.push(list); + } + const item = { + id: `${Date.now()}-${Math.random().toString(16).slice(2, 6)}`, + title, + description: details, + kind: 'task', + group: 'todo', + recurrence: null, // requests never recur + requestedBy: String(req.user.displayName || req.user.username || 'Executive').slice(0, 60), + requestedAt: new Date().toISOString(), + createdAt: new Date().toISOString() + }; + const images = normEquipImages(req.body && req.body.images).slice(0, 6); + if (images.length) item.images = images; + list.items.push(item); + reconcileItemGroups(list); + logActivity(state, req.user, 'request.create', 'requested "' + title + '" from ' + listLabel(list)); + await saveState(state); + res.json({ ok: true, listId: list.id, item }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to send the request' }); + } +}); + +// Completed requests archive themselves: a request is one-shot (no reset), so +// its Done column would otherwise grow forever. 30 days after the target team's +// scope marked one done, drop the item and its check records. Daily cron. +async function pruneOldRequests() { + try { + const state = await getState(); + const cutoff = Date.now() - 30 * 86400000; + let removed = 0; + (state.lists || []).forEach((list) => { + if (!list.isRequests) return; + const key = scopeKey(list.location, list.team); + const rec = (key && state.checks && state.checks[key] && state.checks[key][list.id]) || {}; + list.items = (list.items || []).filter((it) => { + const c = rec[it.id]; + const doneAt = c && c.completed && Date.parse(c.completedDate || ''); + if (!(doneAt && doneAt < cutoff)) return true; + removed++; + Object.values(state.checks || {}).forEach((byList) => { if (byList && byList[list.id]) delete byList[list.id][it.id]; }); + return false; + }); + }); + if (removed) { console.log(`[requests] archived ${removed} completed request(s)`); await saveState(state); } + } catch (err) { console.error('[requests] prune failed:', err.message); } +} + +// ─── Feedback column (team input) ──────────────────────────────────── +// Add an entry to a list's Feedback column. Open to ANYONE the list applies to +// — the whole point is that normal checkers can leave input — using the same +// scope + tap-your-name attribution rules as a check-off (resolveCheckScope). +app.post('/api/lists/:id/feedback', requireUser, async (req, res) => { + try { + const text = String((req.body && req.body.text) || '').trim().slice(0, 2000); + if (!text) return res.status(400).json({ error: 'Write something first' }); + const state = await getState(); + const list = state.lists.find((l) => l.id === req.params.id); + if (!list) return res.status(404).json({ error: 'List not found' }); + const { allowed, by } = resolveCheckScope(state, req, list); + if (!allowed) return res.status(403).json({ error: 'This list is not assigned to you' }); + if (!Array.isArray(list.feedback)) list.feedback = []; + const entry = { id: makeFeedbackId(), text, by, byUser: req.user.username, createdAt: new Date().toISOString() }; + list.feedback.push(entry); + logActivity(state, req.user, 'feedback.add', 'added feedback on ' + listLabel(list), by); + await saveState(state); + res.json({ ok: true, entry }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to add feedback' }); + } +}); + +// Who may change an existing entry: any editor who owns the list, or the team +// login that wrote it (shared logins mean the TEAM owns its entries — per-person +// attribution is display-only, like check-off attribution). +function canTouchFeedback(user, list, entry) { + if (ownsList(user, list)) return true; + return user.role === 'user' && entry.byUser === user.username + && listAppliesToScope(list, user.location, user.team); +} +app.put('/api/lists/:id/feedback/:fid', requireUser, async (req, res) => { + try { + const text = String((req.body && req.body.text) || '').trim().slice(0, 2000); + if (!text) return res.status(400).json({ error: 'Write something first' }); + const state = await getState(); + const list = state.lists.find((l) => l.id === req.params.id); + if (!list) return res.status(404).json({ error: 'List not found' }); + const entry = (list.feedback || []).find((f) => f.id === req.params.fid); + if (!entry) return res.status(404).json({ error: 'Feedback entry not found' }); + if (!canTouchFeedback(req.user, list, entry)) return res.status(403).json({ error: 'Not your entry' }); + entry.text = text; + entry.editedAt = new Date().toISOString(); + logActivity(state, req.user, 'feedback.edit', 'edited feedback on ' + listLabel(list)); + await saveState(state); + res.json({ ok: true, entry }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to update feedback' }); + } +}); + +// Mass-delete: clear EVERY feedback entry on a list in one go. Editors only +// (master admin, or an executive whose scope covers the list) — checkers can +// only ever remove their own entries one at a time via the :fid route below. +app.delete('/api/lists/:id/feedback', requireTeamAdmin, async (req, res) => { + try { + const state = await getState(); + const list = state.lists.find((l) => l.id === req.params.id); + if (!list) return res.status(404).json({ error: 'List not found' }); + if (!ownsList(req.user, list)) return res.status(403).json({ error: 'Not your list' }); + const n = Array.isArray(list.feedback) ? list.feedback.length : 0; + list.feedback = []; + logActivity(state, req.user, 'feedback.clear', 'cleared ' + n + ' feedback entr' + (n === 1 ? 'y' : 'ies') + ' on ' + listLabel(list)); + await saveState(state); + res.json({ ok: true, cleared: n }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to clear feedback' }); + } +}); + +app.delete('/api/lists/:id/feedback/:fid', requireUser, async (req, res) => { + try { + const state = await getState(); + const list = state.lists.find((l) => l.id === req.params.id); + if (!list) return res.status(404).json({ error: 'List not found' }); + const idx = (list.feedback || []).findIndex((f) => f.id === req.params.fid); + if (idx < 0) return res.status(404).json({ error: 'Feedback entry not found' }); + if (!canTouchFeedback(req.user, list, list.feedback[idx])) return res.status(403).json({ error: 'Not your entry' }); + list.feedback.splice(idx, 1); + logActivity(state, req.user, 'feedback.delete', 'deleted feedback on ' + listLabel(list)); + await saveState(state); + res.json({ ok: true }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to delete feedback' }); + } +}); + +// ─── Team roster (for "tap your name" attribution) ────────────────── +// A shared team login keeps a small list of volunteer names. Anyone on that +// login can add their own name (self-service, no admin needed) or remove one. +app.post('/api/roster/add', requireUser, async (req, res) => { + try { + if (req.user.role !== 'user') return res.status(403).json({ error: 'Team logins only' }); + const name = String(req.body && req.body.name || '').trim().slice(0, 40); + if (!name) return res.status(400).json({ error: 'Name required' }); + const state = await getState(); + const rec = findUserRecord(state, req.user); + if (!rec.username) return res.status(404).json({ error: 'Login not found' }); + rec.roster = Array.isArray(rec.roster) ? rec.roster : []; + if (!rec.roster.some((n) => n.toLowerCase() === name.toLowerCase())) { + rec.roster.push(name); + rec.roster = rec.roster.slice(0, 60); // sane cap + await saveState(state); + } + res.json({ ok: true, roster: rec.roster }); + } catch (err) { console.error(err); res.status(500).json({ error: 'Failed to add name' }); } +}); + +app.post('/api/roster/remove', requireUser, async (req, res) => { + try { + if (req.user.role !== 'user') return res.status(403).json({ error: 'Team logins only' }); + const name = String(req.body && req.body.name || '').trim(); + const state = await getState(); + const rec = findUserRecord(state, req.user); + if (!rec.username) return res.status(404).json({ error: 'Login not found' }); + rec.roster = (Array.isArray(rec.roster) ? rec.roster : []).filter((n) => n.toLowerCase() !== name.toLowerCase()); + await saveState(state); + res.json({ ok: true, roster: rec.roster }); + } catch (err) { console.error(err); res.status(500).json({ error: 'Failed to remove name' }); } +}); + +// ─── Roster management for editors (master = all teams; exec = in-scope) ── +function canManageRoster(user, rec) { + if (!rec) return false; + if (isMasterAdmin(user)) return true; + if (user.role === 'executive') return execCanEditList(user, { location: rec.location, team: rec.team }); + return false; +} +app.get('/api/admin/rosters', requireTeamAdmin, async (req, res) => { + const state = await getState(); + const teams = Object.values(state.users || {}) + .filter((u) => (u.role || 'user') === 'user' && canManageRoster(req.user, u)) + .map((u) => ({ + username: u.username, location: u.location || '', team: u.team || '', + displayName: u.displayName || u.username, roster: Array.isArray(u.roster) ? u.roster : [] + })) + .sort((a, b) => (a.location + a.team).localeCompare(b.location + b.team)); + res.json({ teams }); +}); +app.post('/api/admin/rosters/add', requireTeamAdmin, async (req, res) => { + try { + const name = String(req.body && req.body.name || '').trim().slice(0, 40); + if (!name) return res.status(400).json({ error: 'Name required' }); + const state = await getState(); + const rec = (state.users || {})[String(req.body && req.body.username || '')]; + if (!rec || !canManageRoster(req.user, rec)) return res.status(403).json({ error: 'Not your team' }); + rec.roster = Array.isArray(rec.roster) ? rec.roster : []; + if (!rec.roster.some((n) => n.toLowerCase() === name.toLowerCase())) { + rec.roster.push(name); rec.roster = rec.roster.slice(0, 60); + logActivity(state, req.user, 'roster.add', 'added roster name "' + name + '" to ' + (rec.displayName || rec.username)); + await saveState(state); + } + res.json({ ok: true, roster: rec.roster }); + } catch (err) { console.error(err); res.status(500).json({ error: 'Failed to add name' }); } +}); +app.post('/api/admin/rosters/remove', requireTeamAdmin, async (req, res) => { + try { + const name = String(req.body && req.body.name || '').trim(); + const state = await getState(); + const rec = (state.users || {})[String(req.body && req.body.username || '')]; + if (!rec || !canManageRoster(req.user, rec)) return res.status(403).json({ error: 'Not your team' }); + rec.roster = (Array.isArray(rec.roster) ? rec.roster : []).filter((n) => n.toLowerCase() !== name.toLowerCase()); + logActivity(state, req.user, 'roster.remove', 'removed roster name "' + name + '" from ' + (rec.displayName || rec.username)); + await saveState(state); + res.json({ ok: true, roster: rec.roster }); + } catch (err) { console.error(err); res.status(500).json({ error: 'Failed to remove name' }); } +}); + +// Admin audit log — master only. Newest first, capped for the UI. +app.get('/api/admin/activity', requireMasterAdmin, async (req, res) => { + try { + const state = await getState(); + const limit = Math.min(500, Math.max(1, parseInt(req.query.limit, 10) || 300)); + const activity = (state.activity || []).slice(-limit).reverse(); + res.json({ activity }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to load activity' }); + } +}); + +// Admin: overwrite lists + checks (used for list management & import) +app.post('/api/admin/state', requireMasterAdmin, async (req, res) => { + try { + const incoming = req.body?.state; + if (!incoming || !Array.isArray(incoming.lists)) { + return res.status(400).json({ error: 'Invalid state payload' }); + } + const current = await getState(); + // Don't accept users via the bulk-state endpoint — they go through /api/admin/users. + // Sanitize the per-list settings on ingest (this path also backs Import JSON), so a + // malformed color/hidden/resetSchedule can't be stored and silently misbehave. + const prevById = new Map((current.lists || []).map((p) => [p.id, p])); + current.lists = incoming.lists.map((l) => { + const out = Object.assign({}, l, { + color: sanitizeColor(l && l.color), + hidden: !!(l && l.hidden), + showNotes: !!(l && (l.showNotes || l.notesOnly)), + notesOnly: !!(l && l.notesOnly), + showFeedback: !!(l && l.showFeedback), + feedback: cleanFeedback(l && l.feedback), + taskGroups: sanitizeTaskGroups(l && l.taskGroups), + isRequests: !!(l && l.isRequests), + columnOrder: sanitizeColumnOrder(l && l.columnOrder), + resetSchedule: (l && l.isRequests) ? null : sanitizeResetSchedule(l && l.resetSchedule) + }); + // Sanitize each item's recurrence too (the master's full-state push is the only + // write path that reaches items in bulk) — so an every-N recurrence gets its + // anchor set and intraday times are validated, exactly like the scoped endpoints. + if (Array.isArray(out.items)) { + out.items = out.items.map((it) => { + if (!it || typeof it !== 'object') return it; + const kind = it.kind === 'note' ? 'note' : 'task'; // normalize (migrateState is cached; won't touch imports) + return Object.assign({}, it, { + kind, + recurrence: kind === 'note' ? null : sanitizeRecurrence(it.recurrence), + ...(typeof it.description === 'string' ? { description: stripEmptyTaskLines(it.description) } : {}) + }); + }); + } + reconcileItemGroups(out); // bulk edits may add/remove sections — snap orphaned tasks to default + // lastResetSlot is server-owned: re-anchor it from prior server state, never + // from the incoming snapshot (an undo could otherwise replay a stale slot and + // wipe live checks). + reconcileResetSlot(out, prevById.get(out.id)); + return out; + }); + current.selectedListId = incoming.selectedListId || current.selectedListId; + if (incoming.checks && typeof incoming.checks === 'object') current.checks = incoming.checks; + // Absorb any legacy structured subtasks in the pushed snapshot into descriptions + + // remap id-keyed checks (covers importing a pre-pivot full backup through this path). + migrateLegacySubtasks(current); + // A bulk edit may have changed a task's checkbox lines → realign every location's + // per-index progress by matching labels (compare each item's description signature + // against its prior server state; a prose-only or unchanged item is left alone). + current.lists.forEach((l) => { + const prevList = prevById.get(l.id); + const prevItems = new Map(((prevList && prevList.items) || []).map((p) => [p.id, p])); + (l.items || []).forEach((it) => { + const prev = prevItems.get(it.id); + if (prev && taskSignature(prev.description) !== taskSignature(it.description)) { + remapItemSubChecks(current, l.id, it, prev.description); + } + }); + }); + logActivity(current, req.user, 'lists.save', 'saved list changes (bulk edit, ' + current.lists.length + ' list' + (current.lists.length === 1 ? '' : 's') + ')'); + await saveState(current); + res.json({ ok: true }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to save state' }); + } +}); + +// Scoped import: restore/add lists from an export file, but ONLY lists the +// caller may manage (master = any; executive = within their location/team scope). +// Never touches other teams' lists, equipment, users, directory, or live checks. +// Upserts by id, so re-importing the same backup refreshes rather than duplicates. +app.post('/api/import-lists', requireTeamAdmin, async (req, res) => { + try { + const incoming = Array.isArray(req.body && req.body.lists) ? req.body.lists : null; + if (!incoming) return res.status(400).json({ error: 'No lists found in that file' }); + const state = await getState(); + state.lists = state.lists || []; + let imported = 0, skipped = 0; + incoming.forEach((raw) => { + if (!raw || typeof raw !== 'object') { skipped++; return; } + const loc = String(raw.location || '').trim(); + const team = String(raw.team || '').trim(); + // The caller must be allowed to manage a list at this location/team. + if (!(isMasterAdmin(req.user) || execCanEditList(req.user, { location: loc, team }))) { skipped++; return; } + const name = String(raw.name || '').trim().slice(0, 120) || 'Imported'; + const items = (Array.isArray(raw.items) ? raw.items : []) + .map((it) => buildItem({ title: it && it.title, description: it && it.description, recurrence: it && it.recurrence, subtasks: it && it.subtasks, kind: it && it.kind, group: it && it.group })) + .filter(Boolean); + const existing = raw.id ? state.lists.find((l) => l.id === raw.id) : null; + if (existing) { + // Only refresh a list the caller already owns — never hijack another team's id. + if (!ownsList(req.user, existing)) { skipped++; return; } + const prevSnap = { resetSchedule: existing.resetSchedule, lastResetSlot: existing.lastResetSlot }; + existing.name = name; + existing.items = items; + existing.color = sanitizeColor(raw.color); + existing.hidden = !!raw.hidden; + existing.showNotes = !!(raw.showNotes || raw.notesOnly); + existing.notesOnly = !!raw.notesOnly; + existing.showFeedback = !!raw.showFeedback; + // Restore feedback only when the file HAS it — an older export (no feedback + // field) must not wipe the live entries on a refresh-import. + if (Array.isArray(raw.feedback)) existing.feedback = cleanFeedback(raw.feedback); + existing.taskGroups = sanitizeTaskGroups(raw.taskGroups); + reconcileItemGroups(existing); + existing.isRequests = !!raw.isRequests; + existing.columnOrder = sanitizeColumnOrder(raw.columnOrder); + existing.resetSchedule = raw.isRequests ? null : sanitizeResetSchedule(raw.resetSchedule); + reconcileResetSlot(existing, prevSnap); // server-owned slot; don't trust imported value + imported++; + } else { + const created = { + id: makeListId(name, loc, team, state), + name, location: loc, team, + color: sanitizeColor(raw.color), + hidden: !!raw.hidden, + showNotes: !!(raw.showNotes || raw.notesOnly), + notesOnly: !!raw.notesOnly, + showFeedback: !!raw.showFeedback, + feedback: cleanFeedback(raw.feedback), + taskGroups: sanitizeTaskGroups(raw.taskGroups), + isRequests: !!raw.isRequests, + columnOrder: sanitizeColumnOrder(raw.columnOrder), + resetSchedule: raw.isRequests ? null : sanitizeResetSchedule(raw.resetSchedule), + items, + lastCheckDate: new Date().toDateString() + }; + reconcileItemGroups(created); + reconcileResetSlot(created, null); + state.lists.push(created); + imported++; + } + }); + if (imported) logActivity(state, req.user, 'import', 'imported ' + imported + ' list' + (imported === 1 ? '' : 's') + (skipped ? ' (' + skipped + ' skipped)' : '')); + await saveState(state); + res.json({ ok: true, imported, skipped }); + } catch (err) { console.error(err); res.status(500).json({ error: 'Import failed' }); } +}); + +// Undo/redo restore for editors (executives + team admins). Applies a list of +// id-TARGETED ops — each op sets one list to a given snapshot (`set`) or deletes +// it (`set: null`). ONLY the list ids named in the ops are touched, so an undo +// reverts exactly the list(s) the editor's own action changed and CANNOT delete +// or overwrite a list a concurrent editor changed in overlapping scope. Bounded by +// ownsList() (caller must own the target id AND the snapshot's scope), so it grants +// no privilege beyond the granular endpoints. Never touches non-owned lists, +// equipment, users, the directory, or the live checks map. +app.post('/api/scoped-restore', requireTeamAdmin, async (req, res) => { + try { + const ops = Array.isArray(req.body && req.body.ops) ? req.body.ops : null; + if (!ops) return res.status(400).json({ error: 'Invalid payload' }); + const state = await getState(); + state.lists = state.lists || []; + const cleanItem = (it) => { + if (!it || typeof it !== 'object') return null; + const title = String(it.title || '').trim(); + if (!title) return null; + const kind = it.kind === 'note' ? 'note' : 'task'; + return { + id: String(it.id || `${Date.now()}-${Math.random().toString(16).slice(2, 6)}`), + title, + description: String(it.description || '').trim(), + kind, + ...(kind === 'note' ? {} : { group: String(it.group || 'todo') }), // undo must not strand tasks + ...(it.requestedBy ? { requestedBy: String(it.requestedBy).slice(0, 60), requestedAt: String(it.requestedAt || '').slice(0, 40) } : {}), + ...(Array.isArray(it.images) && it.images.length ? { images: normEquipImages(it.images) } : {}), + recurrence: kind === 'note' ? null : sanitizeRecurrence(it.recurrence), + createdAt: it.createdAt || new Date().toISOString() + }; + }; + const cleanList = (raw) => ({ + id: String(raw.id), + name: String(raw.name || '').trim().slice(0, 120) || 'List', + location: String(raw.location || '').trim(), + team: String(raw.team || '').trim(), + color: sanitizeColor(raw.color), + hidden: !!raw.hidden, + showNotes: !!(raw.showNotes || raw.notesOnly), + notesOnly: !!raw.notesOnly, + showFeedback: !!raw.showFeedback, + feedback: cleanFeedback(raw.feedback), // snapshots carry feedback — an undo must not wipe it + taskGroups: sanitizeTaskGroups(raw.taskGroups), // snapshots carry sections too + isRequests: !!raw.isRequests, + columnOrder: sanitizeColumnOrder(raw.columnOrder), + resetSchedule: raw.isRequests ? null : sanitizeResetSchedule(raw.resetSchedule), + items: (Array.isArray(raw.items) ? raw.items : []).map(cleanItem).filter(Boolean), + lastCheckDate: raw.lastCheckDate || new Date().toDateString() + }); + const undo = { del: 0, edit: 0, add: 0, labels: [] }; + for (const op of ops) { + if (!op || !op.id) return res.status(400).json({ error: 'Invalid op' }); + const id = String(op.id); + const idx = state.lists.findIndex((l) => l.id === id); + const existing = idx >= 0 ? state.lists[idx] : null; + if (op.set === null || op.set === undefined) { + // DELETE this id — only if it currently exists AND the caller owns it. + if (existing && ownsList(req.user, existing)) { undo.del++; undo.labels.push(listLabel(existing)); state.lists.splice(idx, 1); } + } else { + // UPSERT — caller must own the snapshot's scope, and (if replacing) the existing list. + const next = cleanList(op.set); + if (!ownsList(req.user, { location: next.location, team: next.team })) { + return res.status(403).json({ error: 'A list in the snapshot is outside your scope' }); + } + if (existing) { + if (!ownsList(req.user, existing)) return res.status(403).json({ error: 'Cannot overwrite a list outside your scope' }); + state.lists[idx] = next; // in-place (preserves global position) + undo.edit++; undo.labels.push(listLabel(next)); + } else { + state.lists.push(next); // re-add (e.g. undo of a delete), original id preserved + undo.add++; undo.labels.push(listLabel(next)); + } + } + } + // Audit the undo/redo too — it can delete/overwrite lists, so it must leave a trail. + if (undo.del || undo.edit || undo.add) { + const bits = []; + if (undo.del) bits.push('deleted ' + undo.del); + if (undo.edit) bits.push('changed ' + undo.edit); + if (undo.add) bits.push('restored ' + undo.add); + const names = undo.labels.slice(0, 4).join(', ') + (undo.labels.length > 4 ? ', …' : ''); + logActivity(state, req.user, 'list.restore', 'undo/redo — ' + bits.join(', ') + ' list(s)' + (names ? ': ' + names : '')); + } + await saveState(state); + res.json({ ok: true }); + } catch (err) { console.error(err); res.status(500).json({ error: 'Restore failed' }); } +}); + +// ─── Scoped list/item editing (team admins) ───────────────────── +// Granular, ownership-checked endpoints. A team admin can only touch lists in +// its own (location, team); the master admin can touch any. By construction a +// team admin has no endpoint that can write another team's data. + +app.post('/api/lists', requireTeamAdmin, async (req, res) => { + try { + const name = String(req.body?.name || '').trim(); + if (!name) return res.status(400).json({ error: 'List name required' }); + const state = await getState(); + // Master may place a list anywhere; an executive picks location/team but it + // must land inside their scope; a team admin's list is forced into its scope. + let loc, tm; + if (isMasterAdmin(req.user)) { + loc = String(req.body?.location || '').trim(); + tm = String(req.body?.team || '').trim(); + } else if (req.user.role === 'executive') { + loc = String(req.body?.location || '').trim(); + tm = String(req.body?.team || '').trim(); + if (!execCanEditList(req.user, { location: loc, team: tm })) { + return res.status(403).json({ error: 'That location/team is outside your area' }); + } + } else { + loc = req.user.location || ''; + tm = req.user.team || ''; + } + const id = makeListId(name, loc, tm, state); + // Optional starter tasks (e.g. created "from a template"): each is rebuilt with + // a fresh id, so no checks or stale ids carry over. + const items = Array.isArray(req.body?.items) + ? req.body.items.map(buildItem).filter(Boolean).slice(0, 500) + : []; + const created = { id, name, location: loc, team: tm, color: sanitizeColor(req.body?.color), hidden: false, showNotes: !!(req.body?.showNotes || req.body?.notesOnly), notesOnly: !!req.body?.notesOnly, showFeedback: !!req.body?.showFeedback, feedback: [], taskGroups: sanitizeTaskGroups(req.body?.taskGroups), columnOrder: sanitizeColumnOrder(req.body?.columnOrder), resetSchedule: sanitizeResetSchedule(req.body?.resetSchedule), items, lastCheckDate: new Date().toDateString() }; + reconcileItemGroups(created); + reconcileResetSlot(created, null); // anchor intraday slot at creation time + state.lists.push(created); + logActivity(state, req.user, 'list.create', 'created list ' + listLabel({ name, location: loc, team: tm })); + await saveState(state); + res.json({ ok: true, id }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to create list' }); + } +}); + +app.put('/api/lists/:id', requireTeamAdmin, async (req, res) => { + try { + const state = await getState(); + const list = state.lists.find((l) => l.id === req.params.id); + if (!list) return res.status(404).json({ error: 'List not found' }); + if (!ownsList(req.user, list)) return res.status(403).json({ error: 'Not your list' }); + if (typeof req.body?.name === 'string' && req.body.name.trim()) list.name = req.body.name.trim(); + // Any owner (incl. executives) may recolor, hide/show, or schedule resets on their list. + if ('color' in (req.body || {})) list.color = sanitizeColor(req.body.color); + if ('hidden' in (req.body || {})) list.hidden = !!req.body.hidden; + // Enable/disable the Notes column, and the shared column order. This one PUT serves both the + // list-modal "Enable Notes" toggle and the lightweight reorder-chevron ({columnOrder} only). + if ('showNotes' in (req.body || {})) list.showNotes = !!req.body.showNotes; + if ('notesOnly' in (req.body || {})) { list.notesOnly = !!req.body.notesOnly; if (list.notesOnly) list.showNotes = true; } + if ('showFeedback' in (req.body || {})) list.showFeedback = !!req.body.showFeedback; + // Task sections: replace the set; tasks in a removed section snap back to the default. + if ('taskGroups' in (req.body || {})) { list.taskGroups = sanitizeTaskGroups(req.body.taskGroups); reconcileItemGroups(list); } + if ('columnOrder' in (req.body || {})) list.columnOrder = sanitizeColumnOrder(req.body.columnOrder); + if ('resetSchedule' in (req.body || {}) && !list.isRequests) { // a Requests inbox is one-shot — never schedulable + const prevSnap = { resetSchedule: list.resetSchedule, lastResetSlot: list.lastResetSlot }; + list.resetSchedule = sanitizeResetSchedule(req.body.resetSchedule); + reconcileResetSlot(list, prevSnap); // changing the times re-anchors the slot so the edit doesn't wipe mid-day + } + if (list.isRequests) list.resetSchedule = null; // belt-and-braces for any earlier write path + // Only the master admin may re-scope a list to another location/team. + if (isMasterAdmin(req.user)) { + if (typeof req.body?.location === 'string') list.location = req.body.location.trim(); + if (typeof req.body?.team === 'string') list.team = req.body.team.trim(); + } + logActivity(state, req.user, 'list.edit', 'edited list ' + listLabel(list)); + await saveState(state); + res.json({ ok: true }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to update list' }); + } +}); + +// Manual reset: move every item in this list back to "To Do" by clearing its +// checks across ALL scope keys (only this list is affected). Lets the same list +// be reused for any event on any date. +app.post('/api/lists/:id/reset', requireTeamAdmin, async (req, res) => { + try { + const state = await getState(); + const list = state.lists.find((l) => l.id === req.params.id); + if (!list) return res.status(404).json({ error: 'List not found' }); + if (!ownsList(req.user, list)) return res.status(403).json({ error: 'Not your list' }); + Object.keys(state.checks || {}).forEach((scope) => { + if (state.checks[scope] && state.checks[scope][list.id]) delete state.checks[scope][list.id]; + }); + list.lastCheckDate = new Date().toDateString(); + logActivity(state, req.user, 'list.reset', 'reset list ' + listLabel(list) + ' (all items back to To Do)'); + await saveState(state); + res.json({ ok: true, checks: state.checks }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to reset list' }); + } +}); + +// Duplicate a list (master + any editor who owns it). Copies name "(copy)", scope, +// color, hidden, schedule, and all items with FRESH ids — so no checks carry over. +app.post('/api/lists/:id/duplicate', requireTeamAdmin, async (req, res) => { + try { + const state = await getState(); + const src = state.lists.find((l) => l.id === req.params.id); + if (!src) return res.status(404).json({ error: 'List not found' }); + if (!ownsList(req.user, src)) return res.status(403).json({ error: 'Not your list' }); + const name = ((src.name || 'List') + ' (copy)').slice(0, 120); + const id = makeListId(name, src.location, src.team, state); + const copy = { + id, + name, + location: src.location || '', + team: src.team || '', + color: sanitizeColor(src.color), + hidden: !!src.hidden, + showNotes: !!src.showNotes, + notesOnly: !!src.notesOnly, + showFeedback: !!src.showFeedback, + feedback: [], // a duplicate is a template — team input stays with the original + taskGroups: sanitizeTaskGroups(src.taskGroups), + columnOrder: sanitizeColumnOrder(src.columnOrder), + resetSchedule: sanitizeResetSchedule(src.resetSchedule), + items: (src.items || []).map((it, i) => { + const kind = it.kind === 'note' ? 'note' : 'task'; + return { + id: `${Date.now()}-${i}-${Math.random().toString(16).slice(2, 6)}`, + title: String(it.title || ''), + description: String(it.description || ''), + kind, + ...(kind === 'note' ? {} : { group: String(it.group || 'todo') }), + recurrence: kind === 'note' ? null : sanitizeRecurrence(it.recurrence), + createdAt: new Date().toISOString() + }; + }), + lastCheckDate: new Date().toDateString() + }; + reconcileItemGroups(copy); + reconcileResetSlot(copy, null); // fresh copy: anchor its own intraday slot + const idx = state.lists.findIndex((l) => l.id === src.id); + state.lists.splice(idx + 1, 0, copy); // insert right after the original + logActivity(state, req.user, 'list.duplicate', 'duplicated list ' + listLabel(src) + ' → "' + copy.name + '"'); + await saveState(state); + res.json({ ok: true, id }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to duplicate list' }); + } +}); + +app.delete('/api/lists/:id', requireTeamAdmin, async (req, res) => { + try { + const state = await getState(); + const idx = state.lists.findIndex((l) => l.id === req.params.id); + if (idx === -1) return res.status(404).json({ error: 'List not found' }); + if (!ownsList(req.user, state.lists[idx])) return res.status(403).json({ error: 'Not your list' }); + const deletedLabel = listLabel(state.lists[idx]); + const deletedCount = (state.lists[idx].items || []).length; + state.lists.splice(idx, 1); + logActivity(state, req.user, 'list.delete', 'deleted list ' + deletedLabel + ' (' + deletedCount + ' task' + (deletedCount === 1 ? '' : 's') + ')'); + await saveState(state); + res.json({ ok: true }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to delete list' }); + } +}); + +app.post('/api/lists/:id/items', requireTeamAdmin, async (req, res) => { + try { + const state = await getState(); + const list = state.lists.find((l) => l.id === req.params.id); + if (!list) return res.status(404).json({ error: 'List not found' }); + if (!ownsList(req.user, list)) return res.status(403).json({ error: 'Not your list' }); + const item = buildItem(req.body); + if (!item) return res.status(400).json({ error: 'Task title required' }); + list.items.push(item); + reconcileItemGroups(list); // snap the new task's section to one the list actually has + if (item.kind === 'note' && !list.showNotes) list.showNotes = true; // adding a note reveals the Notes column + logActivity(state, req.user, 'item.create', 'added ' + (item.kind === 'note' ? 'note' : 'task') + ' "' + (item.title || '?') + '" to ' + listLabel(list)); + await saveState(state); + res.json({ ok: true, item }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to add task' }); + } +}); + +app.put('/api/lists/:id/items/:itemId', requireTeamAdmin, async (req, res) => { + try { + const state = await getState(); + const list = state.lists.find((l) => l.id === req.params.id); + if (!list) return res.status(404).json({ error: 'List not found' }); + if (!ownsList(req.user, list)) return res.status(403).json({ error: 'Not your list' }); + const item = list.items.find((i) => i.id === req.params.itemId); + if (!item) return res.status(404).json({ error: 'Task not found' }); + if (typeof req.body?.title === 'string') { + const t = req.body.title.trim(); + if (!t) return res.status(400).json({ error: 'Task title required' }); + item.title = t; + } + if (typeof req.body?.description === 'string') { + const prevDesc = item.description; + item.description = stripEmptyTaskLines(req.body.description.trim()); // drop ghost empty checkboxes + // If the checkbox lines changed (added/removed/reordered/renamed), realign every + // location's per-index progress by matching labels — a prose-only edit leaves it intact. + if (taskSignature(prevDesc) !== taskSignature(item.description)) { + remapItemSubChecks(state, list.id, item, prevDesc); + } + } + // A note never recurs; ignore any recurrence sent for one (conversion is forbidden, so kind here is + // whatever the item already is — we never change it on edit). + if ('recurrence' in (req.body || {})) item.recurrence = item.kind === 'note' ? null : sanitizeRecurrence(req.body.recurrence); + // Move between task sections (notes never carry a group; unknown ids snap to default). + if (typeof req.body?.group === 'string' && item.kind !== 'note') { + item.group = req.body.group.trim().toLowerCase().slice(0, 40) || 'todo'; + reconcileItemGroups(list); + } + logActivity(state, req.user, 'item.edit', 'edited task "' + (item.title || '?') + '" in ' + listLabel(list)); + await saveState(state); + res.json({ ok: true }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to update task' }); + } +}); + +app.delete('/api/lists/:id/items/:itemId', requireTeamAdmin, async (req, res) => { + try { + const state = await getState(); + const list = state.lists.find((l) => l.id === req.params.id); + if (!list) return res.status(404).json({ error: 'List not found' }); + if (!ownsList(req.user, list)) return res.status(403).json({ error: 'Not your list' }); + const removed = list.items.find((i) => i.id === req.params.itemId); + list.items = list.items.filter((i) => i.id !== req.params.itemId); + if (removed) logActivity(state, req.user, 'item.delete', 'deleted task "' + (removed.title || '?') + '" from ' + listLabel(list)); + await saveState(state); + res.json({ ok: true }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to delete task' }); + } +}); + +app.post('/api/lists/:id/items/:itemId/move', requireTeamAdmin, async (req, res) => { + try { + const state = await getState(); + const src = state.lists.find((l) => l.id === req.params.id); + const dst = state.lists.find((l) => l.id === (req.body && req.body.targetListId)); + if (!src || !dst) return res.status(404).json({ error: 'List not found' }); + // Must own BOTH ends — a team admin can't fling tasks into another team. + if (!ownsList(req.user, src) || !ownsList(req.user, dst)) return res.status(403).json({ error: 'Not your list' }); + const idx = src.items.findIndex((i) => i.id === req.params.itemId); + if (idx === -1) return res.status(404).json({ error: 'Task not found' }); + const [moved] = src.items.splice(idx, 1); + dst.items.push(moved); + reconcileItemGroups(dst); // the target list may not have the source's section → default + logActivity(state, req.user, 'item.move', 'moved task "' + (moved.title || '?') + '" from ' + listLabel(src) + ' to ' + listLabel(dst)); + await saveState(state); + res.json({ ok: true }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to move task' }); + } +}); + +// Reorder the tasks WITHIN one owned list (drag-reorder). Body: { order: [itemId, ...] }. +// Only the ORDER of existing items changes — never their content, never checks, never list +// membership. Reconciles against the live list: any item not named in `order` (e.g. one a +// co-owner added concurrently) is appended, so a stale client order can't drop a task. +app.post('/api/lists/:id/items/reorder', requireTeamAdmin, async (req, res) => { + try { + const state = await getState(); + const list = state.lists.find((l) => l.id === req.params.id); + if (!list) return res.status(404).json({ error: 'List not found' }); + if (!ownsList(req.user, list)) return res.status(403).json({ error: 'Not your list' }); + const order = Array.isArray(req.body && req.body.order) ? req.body.order : []; + const byId = new Map(list.items.map((it) => [it.id, it])); + const seen = new Set(); + const reordered = []; + for (const id of order) { // place the items the client listed, in that order + const it = byId.get(id); + if (it && !seen.has(id)) { reordered.push(it); seen.add(id); } + } + for (const it of list.items) { // keep anything not mentioned — never drop a task + if (!seen.has(it.id)) reordered.push(it); + } + list.items = reordered; + logActivity(state, req.user, 'item.reorder', 'reordered tasks in ' + listLabel(list)); + await saveState(state); + res.json({ ok: true }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to reorder tasks' }); + } +}); + +// Reorder LISTS (drag-reorder in card + tree view). Body: { order: [listId, ...] }. +// Only lists the caller OWNS can be repositioned, and they're permuted WITHIN the +// array slots they already occupy — so a caller can never move another team's lists +// and no other list ever shifts position. Any id in `order` that doesn't exist or +// isn't owned is ignored (a client can't reorder what it can't edit). This lets +// executives and team admins reorder their own lists, while master (who owns all) +// gets a full reorder — its undoable full-state path is used client-side instead. +app.post('/api/lists/reorder', requireTeamAdmin, async (req, res) => { + try { + const order = Array.isArray(req.body && req.body.order) ? req.body.order.map(String) : []; + const state = await getState(); + const lists = state.lists || []; + const byId = new Map(lists.map((l) => [l.id, l])); + const seen = new Set(); + const ownedOrder = []; + for (const id of order) { + if (seen.has(id)) continue; + const l = byId.get(id); + if (l && ownsList(req.user, l)) { ownedOrder.push(id); seen.add(id); } + } + if (ownedOrder.length < 2) return res.json({ ok: true }); // nothing meaningful to reorder + // Slots currently occupied by the owned lists, in ascending array position. + const idSet = new Set(ownedOrder); + const slots = []; + lists.forEach((l, i) => { if (idSet.has(l.id)) slots.push(i); }); + const ordered = ownedOrder.map((id) => byId.get(id)); + slots.forEach((slotIdx, k) => { lists[slotIdx] = ordered[k]; }); // drop them back in the new order + logActivity(state, req.user, 'list.reorder', 'reordered lists'); + await saveState(state); + res.json({ ok: true }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to reorder lists' }); + } +}); + +// Any editor sends the report NOW for THEIR area (master = global + all teams; +// executive = the teams within their scope; team-admin = their own team). Never resets. +app.post('/api/send-report', requireTeamAdmin, async (req, res) => { + try { + const result = await sendScopedReport(req.user, { dryRun: !!(req.body && req.body.dryRun) }); + res.json(result); + } catch (err) { + console.error(err); + res.status(500).json({ error: err.message || 'Failed to send report' }); + } +}); + +// Admin: preview the digest body without sending (no SMTP required). +app.get('/api/admin/digest-preview', requireMasterAdmin, async (req, res) => { + try { + const state = await getState(); + const global = buildReport(state); + const teams = teamsWithRecipients(state).map((acct) => { + const r = buildTeamReport(state, acct); + return { team: teamLabel(acct), recipients: acct.emailRecipients, totalDone: r.totalDone, totalMissed: r.totalMissed, text: r.text, html: r.html }; + }); + res.json({ + global: { text: global.text, html: global.html, totalDone: global.totalDone, totalMissed: global.totalMissed }, + teams + }); + } catch (err) { + console.error(err); + res.status(500).json({ error: err.message || 'Failed to build preview' }); + } +}); + +// Admin: user management +app.get('/api/admin/users', requireMasterAdmin, async (req, res) => { + const state = await getState(); + const users = Object.values(state.users || {}).map((u) => ({ + username: u.username, + displayName: u.displayName, + location: u.location || '', + team: u.team || '', + role: u.role || 'user', + emailRecipients: Array.isArray(u.emailRecipients) ? u.emailRecipients : [], + createdAt: u.createdAt + })); + res.json({ users }); +}); + +app.post('/api/admin/users', requireMasterAdmin, async (req, res) => { + try { + const { username, password, displayName, location, team, role, emailRecipients } = req.body || {}; + const loc = (location || '').trim(); + const tm = (team || '').trim(); + // Username is the canonical id. Use the one provided, else derive a stable + // slug from location + team (e.g. "South Coast" + "Production" -> "south-coast.production"). + const u = (String(username || '').trim().toLowerCase()) || makeUsername(loc, tm); + const pw = String(password || ''); + if (!u || !pw) return res.status(400).json({ error: 'Username and password required' }); + if (u === 'admin') return res.status(400).json({ error: '"admin" is reserved' }); + if (!/^[a-z0-9._-]{2,40}$/.test(u)) return res.status(400).json({ error: 'Username can only contain letters, numbers, dots, dashes, and underscores (2-40 chars)' }); + if (pw.length < 4) return res.status(400).json({ error: 'Password must be at least 4 characters' }); + const state = await getState(); + state.users = state.users || {}; + if (state.users[u]) return res.status(409).json({ error: 'That username is already taken' }); + // One shared login per (location, team). + if (loc || tm) { + const dup = Object.values(state.users).find((x) => + normalizeName(x.location || '') === normalizeName(loc) && + ((x.team || '').trim() ? normalizeName(x.team) : '') === (tm ? normalizeName(tm) : '')); + if (dup) return res.status(409).json({ error: 'A login for that location + team already exists' }); + } + state.users[u] = { + username: u, + displayName: (displayName || '').trim() || (tm ? `${normalizeName(loc)} · ${normalizeName(tm)}` : (loc ? normalizeName(loc) : u)), + passwordHash: await bcrypt.hash(pw, 10), + location: loc, + team: tm, + role: role === 'admin' ? 'admin' : 'user', + emailRecipients: normalizeRecipients(emailRecipients), + createdAt: new Date().toISOString() + }; + registerDirectory(state, loc, tm); + logActivity(state, req.user, 'user.create', 'created login "' + state.users[u].displayName + '" (' + state.users[u].role + ')'); + await saveState(state); + res.json({ ok: true, user: publicUser(state.users[u]) }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to create user' }); + } +}); + +app.put('/api/admin/users/:username', requireMasterAdmin, async (req, res) => { + try { + const u = String(req.params.username || '').trim().toLowerCase(); + if (u === 'admin') return res.status(400).json({ error: '"admin" is managed via ADMIN_PASSWORD env var' }); + const state = await getState(); + const target = state.users && state.users[u]; + if (!target) return res.status(404).json({ error: 'User not found' }); + const { password, displayName, location, team, role, emailRecipients } = req.body || {}; + const newLoc = typeof location === 'string' ? location.trim() : (target.location || ''); + const newTeam = typeof team === 'string' ? team.trim() : (target.team || ''); + const scopeChanged = newLoc !== (target.location || '') || newTeam !== (target.team || ''); + // One shared login per (location, team) — block collisions with another account. + if (scopeChanged && (newLoc || newTeam)) { + const dup = Object.values(state.users).find((x) => x.username !== u && + normalizeName(x.location || '') === normalizeName(newLoc) && + ((x.team || '').trim() ? normalizeName(x.team) : '') === (newTeam ? normalizeName(newTeam) : '')); + if (dup) return res.status(409).json({ error: 'A login for that location + team already exists' }); + } + const hadExplicitName = typeof displayName === 'string' && !!displayName.trim(); + if (typeof displayName === 'string') target.displayName = displayName.trim() || target.username; + target.location = newLoc; + target.team = newTeam; + if (role === 'admin' || role === 'user') target.role = role; + if (emailRecipients !== undefined) target.emailRecipients = normalizeRecipients(emailRecipients); + // Keep the auto label in sync with location/team unless an explicit name was given. + if (scopeChanged && !hadExplicitName) { + target.displayName = newTeam ? `${normalizeName(newLoc)} · ${normalizeName(newTeam)}` + : (newLoc ? normalizeName(newLoc) : target.username); + } + if (scopeChanged) registerDirectory(state, newLoc, newTeam); + if (typeof password === 'string' && password.length > 0) { + if (password.length < 4) return res.status(400).json({ error: 'Password must be at least 4 characters' }); + target.passwordHash = await bcrypt.hash(password, 10); + } + // Password OR scope change invalidates this login's active sessions so the new + // credentials / scope (scopeKey) take effect on next sign-in. + if (scopeChanged || (typeof password === 'string' && password.length > 0)) { + for (const [tok, sess] of sessions.entries()) { + if (sess.user && sess.user.username === u) sessions.delete(tok); + } + } + logActivity(state, req.user, 'user.edit', 'edited login "' + target.displayName + '"' + ((typeof password === 'string' && password.length > 0) ? ' (password reset)' : '')); + await saveState(state); + res.json({ ok: true, user: publicUser(target) }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to update user' }); + } +}); + +app.delete('/api/admin/users/:username', requireMasterAdmin, async (req, res) => { + try { + const u = String(req.params.username || '').trim().toLowerCase(); + if (u === 'admin') return res.status(400).json({ error: 'Cannot delete the master admin' }); + const state = await getState(); + if (!state.users || !state.users[u]) return res.status(404).json({ error: 'User not found' }); + const deletedUserLabel = state.users[u].displayName || u; + delete state.users[u]; + for (const [tok, sess] of sessions.entries()) { + if (sess.user && sess.user.username === u) sessions.delete(tok); + } + logActivity(state, req.user, 'user.delete', 'deleted login "' + deletedUserLabel + '"'); + await saveState(state); + res.json({ ok: true }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to delete user' }); + } +}); + +// Admin: edit the location/team directory (names + login abbreviations). +app.put('/api/admin/directory', requireMasterAdmin, async (req, res) => { + try { + const incoming = req.body || {}; + const norm = (arr) => (Array.isArray(arr) ? arr : []) + .map((e) => ({ name: String((e && e.name) || '').trim(), abbrev: String((e && e.abbrev) || '').trim().toLowerCase() })) + .filter((e) => e.name); + const state = await getState(); + state.directory = { locations: norm(incoming.locations), teams: norm(incoming.teams) }; + // Deleting a directory entry cascades to executive scopes (like rename does): + // scrub grants that now point at nothing, and drop those execs' sessions so + // their live scope refreshes on next sign-in. + const scrubbed = scrubExecScopes(state); + if (scrubbed.length) { + const ids = new Set(scrubbed.map((e) => 'exec:' + e.id)); + for (const [tok, sess] of sessions.entries()) { + if (sess.user && ids.has(sess.user.username)) sessions.delete(tok); + } + logActivity(state, req.user, 'directory.edit', 'scope cleanup: ' + scrubbed.map((e) => e.name).join(', ')); + } + logActivity(state, req.user, 'directory.edit', 'updated locations & teams'); + await saveState(state); + res.json({ ok: true, directory: state.directory }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to save directory' }); + } +}); + +// Admin: rename a location or team IN PLACE, cascading the new name to every +// list, team login, executive scope, and checks key that referenced the old one +// — so nothing orphans. (Checks are weekly-reset, so this is best-effort but +// kept correct via scopeKey.) Sessions referencing the old name are dropped so +// the rename takes effect on next sign-in. +app.post('/api/admin/directory/rename', requireMasterAdmin, async (req, res) => { + try { + const kind = String((req.body && req.body.kind) || '').trim(); + const fromRaw = String((req.body && req.body.from) || '').trim(); + const toRaw = String((req.body && req.body.to) || '').trim(); + if (kind !== 'location' && kind !== 'team') return res.status(400).json({ error: 'kind must be "location" or "team"' }); + if (!fromRaw || !toRaw) return res.status(400).json({ error: 'Both the current and new name are required' }); + const from = normalizeName(fromRaw); + const to = normalizeName(toRaw); + const state = await getState(); + state.directory = state.directory || { locations: [], teams: [] }; + const arr = kind === 'team' ? (state.directory.teams || []) : (state.directory.locations || []); + const entry = arr.find((e) => normalizeName(e.name) === from); + if (!entry) return res.status(404).json({ error: 'That name is not in the directory' }); + if (from === to) return res.json({ ok: true, directory: state.directory }); // no-op (same name) + // Refuse to merge into a different existing entry. + if (arr.some((e) => e !== entry && normalizeName(e.name) === to)) { + return res.status(409).json({ error: `"${to}" already exists` }); + } + const isLoc = kind === 'location'; + // 1) Directory entry itself. + entry.name = to; + // 2) Lists. + (state.lists || []).forEach((l) => { + if (isLoc) { if ((l.location || '').trim() && normalizeName(l.location) === from) l.location = to; } + else { if ((l.team || '').trim() && normalizeName(l.team) === from) l.team = to; } + }); + // 3) Team logins. + Object.values(state.users || {}).forEach((usr) => { + if (isLoc) { if ((usr.location || '').trim() && normalizeName(usr.location) === from) usr.location = to; } + else { if ((usr.team || '').trim() && normalizeName(usr.team) === from) usr.team = to; } + }); + // 4) Executive scopes. + Object.values(state.executives || {}).forEach((e) => { + const key = isLoc ? 'scopeLocations' : 'scopeTeams'; + if (Array.isArray(e[key])) e[key] = e[key].map((s) => (normalizeName(s) === from ? to : s)); + }); + // 5) Checks keys ("Location" or "Location::Team"). Remap + merge on collision. + const oldChecks = state.checks || {}; + const newChecks = {}; + Object.keys(oldChecks).forEach((k) => { + const parts = splitScope(k); + let loc = parts.location; + let tm = parts.team; + if (isLoc) { if (loc && normalizeName(loc) === from) loc = to; } + else { if (tm && normalizeName(tm) === from) tm = to; } + const nk = scopeKey(loc, tm) || k; + newChecks[nk] = Object.assign({}, newChecks[nk] || {}, oldChecks[k]); + }); + state.checks = newChecks; + // Drop sessions that referenced the old name so their scope/scopeKey refresh + // on next sign-in (master has no location/team/scope, so it stays signed in). + for (const [tok, sess] of sessions.entries()) { + const su = sess.user || {}; + const scopeArr = isLoc ? su.scopeLocations : su.scopeTeams; + const onAxis = isLoc ? su.location : su.team; + const hit = ((onAxis || '').trim() && normalizeName(onAxis) === from) || + (Array.isArray(scopeArr) && scopeArr.some((s) => normalizeName(s) === from)); + if (hit) sessions.delete(tok); + } + logActivity(state, req.user, 'directory.rename', 'renamed ' + kind + ' "' + fromRaw + '" → "' + toRaw + '"'); + await saveState(state); + res.json({ ok: true, directory: state.directory }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to rename' }); + } +}); + +// ─── Executives (named scoped editors; managed by the owner only) ─── +function publicExec(e) { + return { + id: e.id, + name: e.name, + scopeLocations: Array.isArray(e.scopeLocations) ? e.scopeLocations : [], + scopeTeams: Array.isArray(e.scopeTeams) ? e.scopeTeams : [], + createdAt: e.createdAt + }; +} + +function normalizeScopeList(arr) { + if (!Array.isArray(arr)) return []; + const seen = new Set(); + const out = []; + arr.map((s) => String(s || '').trim()).filter(Boolean).forEach((s) => { + const k = s.toLowerCase(); + if (!seen.has(k)) { seen.add(k); out.push(s); } + }); + return out; +} + +function dropExecSessions(execId) { + for (const [tok, sess] of sessions.entries()) { + if (sess.user && sess.user.username === 'exec:' + execId) sessions.delete(tok); + } +} + +app.get('/api/admin/executives', requireMasterAdmin, async (req, res) => { + const state = await getState(); + res.json({ executives: Object.values(state.executives || {}).map(publicExec) }); +}); + +app.post('/api/admin/executives', requireMasterAdmin, async (req, res) => { + try { + const name = String(req.body?.name || '').trim(); + const password = String(req.body?.password || ''); + if (!name) return res.status(400).json({ error: 'Name required' }); + if (password.length < 4) return res.status(400).json({ error: 'Password must be at least 4 characters' }); + const state = await getState(); + state.executives = state.executives || {}; + if (findExecutive(state, name)) return res.status(409).json({ error: 'An executive with that name already exists' }); + let uid = (slugify(name) || 'exec').slice(0, 40); + let n = 2; + while (state.executives[uid]) uid = `${slugify(name)}-${n++}`; + state.executives[uid] = { + id: uid, + name, + passwordHash: await bcrypt.hash(password, 10), + scopeLocations: normalizeScopeList(req.body?.scopeLocations), + scopeTeams: normalizeScopeList(req.body?.scopeTeams), + createdAt: new Date().toISOString() + }; + logActivity(state, req.user, 'exec.create', 'created executive "' + name + '"'); + await saveState(state); + res.json({ ok: true, executive: publicExec(state.executives[uid]) }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to create executive' }); + } +}); + +app.put('/api/admin/executives/:id', requireMasterAdmin, async (req, res) => { + try { + const state = await getState(); + const exec = state.executives && state.executives[req.params.id]; + if (!exec) return res.status(404).json({ error: 'Executive not found' }); + let changed = false; + // Rename (e.g. add a last name). Keep the SAME id, so scope + password — which + // live on this object keyed by id — are preserved. Login matches execs by name, + // and exec check-offs are keyed by name, so guard duplicates and remap checks. + if (typeof req.body?.name === 'string' && req.body.name.trim() && req.body.name.trim() !== exec.name) { + const newName = req.body.name.trim().slice(0, 80); + const clash = Object.values(state.executives).find((e) => e.id !== exec.id && normalizeName(e.name) === normalizeName(newName)); + if (clash) return res.status(409).json({ error: 'Another executive already uses that name' }); + const oldKey = normalizeName(exec.name); + const newKey = normalizeName(newName); + if (oldKey !== newKey && state.checks && state.checks[oldKey]) { + state.checks[newKey] = Object.assign({}, state.checks[newKey] || {}, state.checks[oldKey]); + delete state.checks[oldKey]; + } + exec.name = newName; + changed = true; + } + if (Array.isArray(req.body?.scopeLocations)) { exec.scopeLocations = normalizeScopeList(req.body.scopeLocations); changed = true; } + if (Array.isArray(req.body?.scopeTeams)) { exec.scopeTeams = normalizeScopeList(req.body.scopeTeams); changed = true; } + if (typeof req.body?.password === 'string' && req.body.password.length > 0) { + if (req.body.password.length < 4) return res.status(400).json({ error: 'Password must be at least 4 characters' }); + exec.passwordHash = await bcrypt.hash(req.body.password, 10); + changed = true; + } + if (changed) dropExecSessions(exec.id); // force re-login so new scope/password applies + if (changed) logActivity(state, req.user, 'exec.edit', 'edited executive "' + exec.name + '"' + ((typeof req.body?.password === 'string' && req.body.password.length > 0) ? ' (password reset)' : '')); + await saveState(state); + res.json({ ok: true, executive: publicExec(exec) }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to update executive' }); + } +}); + +app.delete('/api/admin/executives/:id', requireMasterAdmin, async (req, res) => { + try { + const state = await getState(); + if (!state.executives || !state.executives[req.params.id]) return res.status(404).json({ error: 'Executive not found' }); + const deletedExecName = state.executives[req.params.id].name || req.params.id; + delete state.executives[req.params.id]; + dropExecSessions(req.params.id); + logActivity(state, req.user, 'exec.delete', 'deleted executive "' + deletedExecName + '"'); + await saveState(state); + res.json({ ok: true }); + } catch (err) { + console.error(err); + res.status(500).json({ error: 'Failed to delete executive' }); + } +}); + +// ─── Equipment library (master-managed; powers tappable photo terms) ─── +// An entry: { id, name, aliases:[], images:[{url,caption}], image:'', note:'' }. +// `images` is the multi-photo list (e.g. the device + its desktop config); `image` +// is kept mirrored to images[0].url for backward compatibility. +const EQUIP_MAX_PHOTOS = 12; +// Normalize any incoming photos into a clean, de-duped [{url,caption}] list. +// Accepts an array of {url,caption} or bare url strings; falls back to a legacy +// single `image` string when no array is given. +function normEquipImages(raw, fallbackImage) { + const out = []; + const seen = new Set(); + const push = (u, c) => { + const url = String(u || '').trim().slice(0, 2000); + if (!url || seen.has(url)) return; + seen.add(url); + out.push({ url, caption: String(c || '').trim().slice(0, 120) }); + }; + if (Array.isArray(raw)) { + for (const it of raw) { + if (it && typeof it === 'object') push(it.url, it.caption); + else push(it, ''); + } + } + if (!out.length && fallbackImage) push(fallbackImage, ''); + return out.slice(0, EQUIP_MAX_PHOTOS); +} +// Documents attached to an equipment entry: uploaded files (/doc-files/…) or +// external links (Google Docs etc.). Same shape discipline as photos — trim, +// dedupe, cap — plus a URL whitelist so nothing else can be stored as a doc. +function normEquipDocs(raw) { + const out = []; + const seen = new Set(); + if (Array.isArray(raw)) { + for (const it of raw) { + if (!it || typeof it !== 'object') continue; + const url = String(it.url || '').trim().slice(0, 2000); + if (!url || seen.has(url)) continue; + if (!/^https?:\/\//i.test(url) && !/^\/doc-files\/[A-Za-z0-9._-]+$/.test(url)) continue; + seen.add(url); + out.push({ url, name: String(it.name || '').trim().slice(0, 80) || 'Document' }); + } + } + return out.slice(0, 10); +} +// Every photo URL an equipment entry references (multi-photo aware, legacy-safe). +function equipImageUrls(it) { + if (it && Array.isArray(it.images) && it.images.length) return it.images.map((p) => p && p.url).filter(Boolean); + return it && it.image ? [it.image] : []; +} +function sanitizeEquipment(body) { + const name = String((body && body.name) || '').trim().slice(0, 80); + if (!name) return null; + let aliases = Array.isArray(body.aliases) ? body.aliases + : (typeof body.aliases === 'string' ? body.aliases.split(',') : []); + aliases = aliases.map((a) => String(a).trim()).filter(Boolean).slice(0, 20); + const images = normEquipImages(body && body.images, body && body.image); + return { + name, + aliases, + images, + image: images.length ? images[0].url : '', // mirror for legacy readers (thumbnail, term span) + docs: normEquipDocs(body && body.docs), // attached documents (setup guides, manuals, Google Docs) + note: String((body && body.note) || '').trim().slice(0, 2000), // room for multi-line troubleshooting steps + scopeLocations: normalizeScopeList(body && body.scopeLocations), + scopeTeams: normalizeScopeList(body && body.scopeTeams) + }; +} + +// Equipment scope mirrors executive scope: empty on both axes = global (links +// everywhere). Otherwise an empty axis means "any" on that axis. Returns a +// match score so the most location/team-specific entry wins when several share +// a name (lets the same word resolve to the on-site photo per campus). +function equipScopeScore(item, loc, team) { + const locs = (item.scopeLocations || []).map((s) => normalizeName(s)); + const teams = (item.scopeTeams || []).map((s) => normalizeName(s)); + if (locs.length === 0 && teams.length === 0) return 0; // global + const lLoc = (loc || '').trim() ? normalizeName(loc) : ''; + const lTeam = (team || '').trim() ? normalizeName(team) : ''; + const locOK = locs.length === 0 || locs.includes(lLoc); + const teamOK = teams.length === 0 || teams.includes(lTeam); + if (!locOK || !teamOK) return -1; // out of scope — not applicable here + return (locs.length ? 2 : 0) + (teams.length ? 1 : 0); +} + +// Is `item`'s scope fully within what `user` is allowed to manage? Master: yes. +// Exec: the set of lists the item would link on must stay inside the exec's own +// access. We enforce that the SAME way execCanEditList does — by intersection, +// not independent axes — so an exec can never widen reach through an empty axis: +// • No scope at all → no access (mirrors execCanEditList; never accidental full access). +// • An axis the exec is restricted on (scope non-empty) → the item MUST name at +// least one value there, all within the exec's allowance. Leaving that axis +// empty would mean "everywhere on that axis", escaping their confinement. +// • An axis the exec is unrestricted on (scope empty = "any") → no constraint. +function equipScopeWithinUser(user, item) { + if (isMasterAdmin(user)) return true; + if (user.role !== 'executive') return false; + const allowLocs = (user.scopeLocations || []).map((s) => normalizeName(s)); + const allowTeams = (user.scopeTeams || []).map((s) => normalizeName(s)); + if (allowLocs.length === 0 && allowTeams.length === 0) return false; // no scope = no access + const itemLocs = (item.scopeLocations || []).map((s) => normalizeName(s)); + const itemTeams = (item.scopeTeams || []).map((s) => normalizeName(s)); + const locsOK = allowLocs.length === 0 + ? true + : (itemLocs.length > 0 && itemLocs.every((l) => allowLocs.includes(l))); + const teamsOK = allowTeams.length === 0 + ? true + : (itemTeams.length > 0 && itemTeams.every((t) => allowTeams.includes(t))); + return locsOK && teamsOK; +} + +// May this user EDIT/DELETE this equipment entry? Strict: the item must stay fully +// within the user's own scope (so they can't change gear that also reaches campuses +// or teams outside their access). +function canManageEquipment(user, item) { + if (isMasterAdmin(user)) return true; + return equipScopeWithinUser(user, item); +} + +// May this user SEE this equipment entry in the library? Looser than manage: if the +// item's scope OVERLAPS any location/team the exec can access, it's relevant to one +// of their lists, so they can view it (even if they can't edit it). Global gear +// (no scope) is visible to every editor. Example: an exec over North Attleboro +// Production sees gear tagged North Attleboro, or Production, or both. +function canSeeEquipment(user, item) { + if (isMasterAdmin(user)) return true; + if (user.role !== 'executive') return false; + const allowLocs = (user.scopeLocations || []).map((s) => normalizeName(s)); + const allowTeams = (user.scopeTeams || []).map((s) => normalizeName(s)); + if (allowLocs.length === 0 && allowTeams.length === 0) return false; // no scope = nothing + const itemLocs = (item.scopeLocations || []).map((s) => normalizeName(s)); + const itemTeams = (item.scopeTeams || []).map((s) => normalizeName(s)); + // Per axis: the item is in-reach if it's unrestricted there, the exec is + // unrestricted there, or the two sets share a value. Both axes must hold. + const locOK = itemLocs.length === 0 || allowLocs.length === 0 || itemLocs.some((l) => allowLocs.includes(l)); + const teamOK = itemTeams.length === 0 || allowTeams.length === 0 || itemTeams.some((t) => allowTeams.includes(t)); + return locOK && teamOK; +} + +// May this user see this equipment AT ALL? This gates the /api/state projection, +// which powers term-linking, GLOBAL SEARCH, and the lightbox — so a team login +// can never even surface another campus's gear. Master: everything. Executives: +// the overlap rule above. Team logins: exactly the gear that applies to their own +// location+team (equipScopeScore ≥ 0 — global gear, or gear naming their scope), +// the same rule that decides which gear their lists' words link to. +function equipmentVisibleTo(user, item) { + if (isMasterAdmin(user)) return true; + if (user.role === 'executive') return canSeeEquipment(user, item); + return equipScopeScore(item, user.location, user.team) >= 0; +} + +// If `image` points at one of our uploaded files (/equip-images/), +// return the on-disk path so we can delete it; otherwise null (external URL). +function localUploadPath(image) { + const m = /^\/equip-images\/([A-Za-z0-9._-]+)$/.exec(String(image || '')); + if (!m) return null; + const name = m[1]; + if (name.includes('..') || name.includes('/')) return null; + return path.join(UPLOAD_DIR, name); +} +async function removeUploadIfLocal(image) { + const p = localUploadPath(image); + if (!p) return; + try { await fs.unlink(p); } catch (_) { /* already gone — fine */ } +} +// True if any OTHER equipment entry still points at this image — so we never +// delete a file that a second entry (e.g. created via import) still uses. +function imageStillReferenced(state, image, exceptId) { + if (!image) return false; + const items = (state.equipment && state.equipment.items) || {}; + return Object.values(items).some((it) => it.id !== exceptId && equipImageUrls(it).includes(image)); +} + +// Delete uploaded photos no equipment entry references anymore (e.g. an editor +// uploaded a photo then abandoned the form). The grace window skips very recent +// files so we never race an upload that's mid-edit and not yet saved. Keeps the +// uploads dir from growing without bound. Runs on a daily cron. +async function sweepOrphanUploads(graceMs) { + try { + const state = await getState(); + const referenced = new Set(); + // Scan the WHOLE state JSON for /equip-images/ references (mirrors the docs + // sweep) — equipment photos AND request-item photos, plus any future field. + // Building the set from equipImageUrls alone would sweep request photos. + const blob = JSON.stringify(state); + const re = /\/equip-images\/([A-Za-z0-9._-]+)/g; + let m; + while ((m = re.exec(blob))) referenced.add(m[1]); + const files = await fs.readdir(UPLOAD_DIR); + const cutoff = Date.now() - (graceMs || 3600000); + let removed = 0; + for (const name of files) { + if (referenced.has(name)) continue; + const fp = path.join(UPLOAD_DIR, name); + let st; + try { st = await fs.stat(fp); } catch (_) { continue; } + if (!st.isFile() || st.mtimeMs > cutoff) continue; + try { await fs.unlink(fp); removed++; } catch (_) { /* ignore */ } + } + if (removed) console.log(`[uploads] swept ${removed} orphaned photo(s)`); + } catch (err) { console.error('[uploads] sweep failed:', err.message); } +} + +// Snapshot checklists.json into BACKUP_DIR, one file per day, then prune to the +// newest BACKUP_KEEP days. Cheap insurance against corruption or a bad edit — +// the data file is the whole app. Runs nightly + once at startup. +async function backupState(keepDays) { + try { + if (!fsSync.existsSync(STATE_FILE)) return; // nothing to back up yet + const stamp = new Date().toISOString().slice(0, 10); // YYYY-MM-DD (server TZ-agnostic, fine for daily) + const dest = path.join(BACKUP_DIR, `checklists-${stamp}.json`); + await fs.copyFile(STATE_FILE, dest); + const keep = Math.max(1, keepDays || BACKUP_KEEP); + const files = (await fs.readdir(BACKUP_DIR)) + .filter((f) => /^checklists-\d{4}-\d{2}-\d{2}\.json$/.test(f)) + .sort(); // lexical sort == chronological for ISO dates + if (files.length > keep) { + for (const f of files.slice(0, files.length - keep)) { + try { await fs.unlink(path.join(BACKUP_DIR, f)); } catch (_) { /* ignore */ } + } + } + console.log(`[backup] saved ${path.basename(dest)} (keeping ${Math.min(files.length, keep)})`); + } catch (err) { console.error('[backup] failed:', err.message); } +} + +// Mirror uploaded media — equipment photos/videos (uploads/) and attached +// documents (docs/) — into BACKUP_DIR/media, so pictures and documents are part +// of the backup alongside the state snapshots. Filenames are content-unique and +// immutable, so the mirror is INCREMENTAL: each file is copied once (re-copied +// only on a size mismatch, i.e. a torn copy from a crash). A file DELETED from +// the live dirs (photo replaced, orphan sweep, task removed) stays in the +// mirror for BACKUP_KEEP days after it was last seen live — the same window as +// the checklists-YYYY-MM-DD.json snapshots, so any restorable state backup can +// still find every media file it references. Last-seen times are tracked in +// media/manifest.json. To restore a file: copy it from backups/media/_{/
+// back into data/_{/ (uploads or docs) — the URL keys off the filename.
+async function backupMedia(keepDays) {
+ try {
+ const mediaRoot = path.join(BACKUP_DIR, 'media');
+ const sets = [
+ { key: 'uploads', src: UPLOAD_DIR, dst: path.join(mediaRoot, 'uploads') },
+ { key: 'docs', src: DOCS_DIR, dst: path.join(mediaRoot, 'docs') }
+ ];
+ const manifestPath = path.join(mediaRoot, 'manifest.json');
+ let manifest = {};
+ try { manifest = JSON.parse(await fs.readFile(manifestPath, 'utf-8')) || {}; } catch (_) { manifest = {}; }
+ if (typeof manifest !== 'object' || Array.isArray(manifest)) manifest = {};
+ const now = Date.now();
+ const cutoff = now - Math.max(1, keepDays || BACKUP_KEEP) * 86400000;
+ let copied = 0, pruned = 0;
+ for (const s of sets) {
+ await fs.mkdir(s.dst, { recursive: true });
+ let live = [];
+ try { live = await fs.readdir(s.src); } catch (_) { live = []; }
+ const liveSet = new Set();
+ for (const name of live) {
+ let st;
+ try { st = await fs.stat(path.join(s.src, name)); } catch (_) { continue; }
+ if (!st.isFile()) continue;
+ liveSet.add(name);
+ manifest[s.key + '/' + name] = now; // seen live right now
+ const dstPath = path.join(s.dst, name);
+ let dstSt = null;
+ try { dstSt = await fs.stat(dstPath); } catch (_) { /* not mirrored yet */ }
+ if (!dstSt || dstSt.size !== st.size) {
+ try { await fs.copyFile(path.join(s.src, name), dstPath); copied++; }
+ catch (err) { console.error('[backup] media copy failed:', name, err.message); }
+ }
+ }
+ // Prune mirror copies whose live file has been gone longer than the window.
+ let mirrored = [];
+ try { mirrored = await fs.readdir(s.dst); } catch (_) { mirrored = []; }
+ for (const name of mirrored) {
+ if (liveSet.has(name)) continue;
+ const k = s.key + '/' + name;
+ if (manifest[k] == null) { manifest[k] = now; continue; } // pre-manifest copy: start its clock now
+ if (manifest[k] < cutoff) {
+ try { await fs.unlink(path.join(s.dst, name)); delete manifest[k]; pruned++; } catch (_) { /* ignore */ }
+ }
+ }
+ // Drop manifest rows whose mirror copy no longer exists (pruned above, or hand-removed).
+ Object.keys(manifest).forEach((k) => {
+ if (k.indexOf(s.key + '/') !== 0) return;
+ if (!fsSync.existsSync(path.join(s.dst, k.slice(s.key.length + 1)))) delete manifest[k];
+ });
+ }
+ const tmp = manifestPath + '.tmp';
+ await fs.writeFile(tmp, JSON.stringify(manifest), 'utf-8');
+ await fs.rename(tmp, manifestPath);
+ if (copied || pruned) console.log(`[backup] media: +${copied} copied, ${pruned} pruned`);
+ } catch (err) { console.error('[backup] media failed:', err.message); }
+}
+
+// Decode a base64 data URL into a saved file under UPLOAD_DIR. The library UI uploads the
+// ORIGINAL full-resolution bytes for web-displayable images within budget (or transcodes an
+// oversized/unknown source down to a bounded 4096px JPEG), so files can be several MB.
+const IMAGE_EXT = { 'image/jpeg': 'jpg', 'image/png': 'png', 'image/webp': 'webp', 'image/gif': 'gif' };
+// Short reference clips only. MOV (quicktime) plays in Safari; MP4/WEBM everywhere.
+// Files land in uploads/ (excluded from the deploy tarball, and mirrored — not
+// snapshotted daily — by backupMedia), so a big clip never bloats state or the
+// daily state snapshots.
+const VIDEO_EXT = { 'video/mp4': 'mp4', 'video/webm': 'webm', 'video/quicktime': 'mov', 'video/ogg': 'ogv' };
+const MAX_IMAGE_BYTES = 20 * 1024 * 1024;
+const MAX_VIDEO_BYTES = 30 * 1024 * 1024;
+app.post('/api/equipment/upload-image', requireTeamAdmin, async (req, res) => {
+ try {
+ const dataUrl = String((req.body && req.body.dataUrl) || '');
+ const m = /^data:([\w/+.-]+);base64,([\s\S]+)$/.exec(dataUrl);
+ if (!m) return res.status(400).json({ error: 'Expected a base64 media data URL' });
+ const mime = m[1].toLowerCase();
+ const isVideo = !!VIDEO_EXT[mime];
+ const ext = IMAGE_EXT[mime] || VIDEO_EXT[mime];
+ if (!ext) return res.status(400).json({ error: 'Unsupported file — images: JPG, PNG, WEBP, GIF; video: MP4, WEBM, MOV (HEIC will not display).' });
+ const buf = Buffer.from(m[2], 'base64');
+ if (!buf.length) return res.status(400).json({ error: 'Empty file' });
+ const cap = isVideo ? MAX_VIDEO_BYTES : MAX_IMAGE_BYTES;
+ if (buf.length > cap) return res.status(413).json({ error: isVideo ? 'Video too large (max 30 MB). Trim it or lower the resolution.' : 'Image too large (max 20 MB).' });
+ const name = `${Date.now().toString(36)}-${crypto.randomBytes(6).toString('hex')}.${ext}`;
+ await fs.writeFile(path.join(UPLOAD_DIR, name), buf);
+ res.json({ ok: true, path: `/equip-images/${name}`, kind: isVideo ? 'video' : 'image' });
+ } catch (err) { console.error(err); res.status(500).json({ error: 'Upload failed' }); }
+});
+
+// ── Document attachments ─────────────────────────────────────────────
+// Upload a document (setup guide, rundown, spec) to link from a task/note
+// description — the doc counterpart of the equipment photo upload. Editors
+// only (they author descriptions). Type is judged by the ORIGINAL filename's
+// extension: data-URL mimes for office files are unreliable (browsers often
+// send application/octet-stream), and the extension is what the OS/browser
+// uses to open the download anyway.
+const DOC_EXTS = ['pdf', 'doc', 'docx', 'xls', 'xlsx', 'ppt', 'pptx', 'txt', 'csv', 'rtf'];
+const MAX_DOC_BYTES = 25 * 1024 * 1024;
+app.post('/api/documents/upload', requireTeamAdmin, async (req, res) => {
+ try {
+ const dataUrl = String((req.body && req.body.dataUrl) || '');
+ const original = String((req.body && req.body.name) || '').trim();
+ const m = /^data:([\w/+.-]+);base64,([\s\S]+)$/.exec(dataUrl);
+ if (!m) return res.status(400).json({ error: 'Expected a base64 file data URL' });
+ const extM = /\.([A-Za-z0-9]{1,8})$/.exec(original);
+ const ext = extM ? extM[1].toLowerCase() : '';
+ if (!DOC_EXTS.includes(ext)) {
+ return res.status(400).json({ error: 'Unsupported file type — allowed: ' + DOC_EXTS.join(', ').toUpperCase() });
+ }
+ const buf = Buffer.from(m[2], 'base64');
+ if (!buf.length) return res.status(400).json({ error: 'Empty file' });
+ if (buf.length > MAX_DOC_BYTES) return res.status(413).json({ error: 'File too large (max 25 MB).' });
+ // Keep a sanitized version of the ORIGINAL name in the stored filename so a
+ // downloaded copy is recognizable; the random prefix keeps names unique
+ // (which is what makes the immutable caching + sweep-by-name safe).
+ const base = original.slice(0, original.length - ext.length - 1)
+ .replace(/[^A-Za-z0-9._-]+/g, '-').replace(/^[-.]+|[-.]+$/g, '').slice(0, 60) || 'document';
+ const name = `${Date.now().toString(36)}-${crypto.randomBytes(4).toString('hex')}-${base}.${ext}`;
+ await fs.writeFile(path.join(DOCS_DIR, name), buf);
+ const state = await getState();
+ logActivity(state, req.user, 'document.upload', 'uploaded document "' + (original || name) + '"');
+ await saveState(state);
+ res.json({ ok: true, path: `/doc-files/${name}`, name: original || name });
+ } catch (err) { console.error(err); res.status(500).json({ error: 'Upload failed' }); }
+});
+
+// Delete uploaded documents nothing references anymore (an upload whose link was
+// never saved, or whose task/note was deleted). References are found by scanning
+// the WHOLE state JSON for /doc-files/ — descriptions, notes, feedback,
+// wherever a link may live now or in a future field. Same grace window as the
+// photo sweep so we never race an upload that's mid-edit and not yet saved.
+async function sweepOrphanDocs(graceMs) {
+ try {
+ const state = await getState();
+ const referenced = new Set();
+ const blob = JSON.stringify(state);
+ const re = /\/doc-files\/([A-Za-z0-9._-]+)/g;
+ let m;
+ while ((m = re.exec(blob))) referenced.add(m[1]);
+ const files = await fs.readdir(DOCS_DIR);
+ const cutoff = Date.now() - (graceMs || 24 * 3600000); // docs get a longer grace than photos
+ let removed = 0;
+ for (const name of files) {
+ if (referenced.has(name)) continue;
+ const fp = path.join(DOCS_DIR, name);
+ let st;
+ try { st = await fs.stat(fp); } catch (_) { continue; }
+ if (!st.isFile() || st.mtimeMs > cutoff) continue;
+ try { await fs.unlink(fp); removed++; } catch (_) { /* ignore */ }
+ }
+ if (removed) console.log(`[docs] swept ${removed} orphaned document(s)`);
+ } catch (err) { console.error('[docs] sweep failed:', err.message); }
+}
+
+app.get('/api/admin/equipment', requireTeamAdmin, async (req, res) => {
+ const state = await getState();
+ const all = (state.equipment && state.equipment.items) || {};
+ // Execs SEE any gear whose scope overlaps their access, but can only EDIT the
+ // gear fully within their scope. _canManage tells the client which to make editable.
+ // (Copy each item so the stored object is never mutated with the transient flag.)
+ const items = {};
+ Object.keys(all).forEach((id) => {
+ if (canSeeEquipment(req.user, all[id])) {
+ items[id] = Object.assign({}, all[id], { _canManage: canManageEquipment(req.user, all[id]) });
+ }
+ });
+ res.json({ items });
+});
+
+app.post('/api/admin/equipment', requireTeamAdmin, async (req, res) => {
+ try {
+ const clean = sanitizeEquipment(req.body || {});
+ if (!clean) return res.status(400).json({ error: 'Name is required' });
+ if (!equipScopeWithinUser(req.user, clean)) {
+ return res.status(403).json({ error: 'Pick at least one of your own locations/teams for this equipment.' });
+ }
+ const state = await getState();
+ state.equipment = state.equipment || { items: {} };
+ state.equipment.items = state.equipment.items || {};
+ let id = (slugify(clean.name) || 'item').slice(0, 40);
+ let n = 2;
+ while (state.equipment.items[id]) id = `${slugify(clean.name)}-${n++}`;
+ state.equipment.items[id] = Object.assign({ id }, clean, { createdAt: new Date().toISOString() });
+ logActivity(state, req.user, 'equip.create', 'added equipment "' + clean.name + '"');
+ await saveState(state);
+ res.json({ ok: true, id, item: state.equipment.items[id] });
+ } catch (err) { console.error(err); res.status(500).json({ error: 'Failed to add equipment' }); }
+});
+
+app.put('/api/admin/equipment/:id', requireTeamAdmin, async (req, res) => {
+ try {
+ const state = await getState();
+ const existing = state.equipment && state.equipment.items && state.equipment.items[req.params.id];
+ if (!existing) return res.status(404).json({ error: 'Equipment not found' });
+ if (!canManageEquipment(req.user, existing)) return res.status(403).json({ error: 'Not your equipment' });
+ const clean = sanitizeEquipment(req.body || {});
+ if (!clean) return res.status(400).json({ error: 'Name is required' });
+ if (!equipScopeWithinUser(req.user, clean)) {
+ return res.status(403).json({ error: 'Pick at least one of your own locations/teams for this equipment.' });
+ }
+ // Photos removed from this entry? Delete each orphaned upload — unless another
+ // entry still references it. (Multi-photo aware: diff old vs new URL sets.)
+ const keptUrls = new Set(equipImageUrls(clean));
+ for (const url of equipImageUrls(existing)) {
+ if (!keptUrls.has(url) && !imageStillReferenced(state, url, existing.id)) await removeUploadIfLocal(url);
+ }
+ state.equipment.items[req.params.id] = Object.assign({ id: existing.id }, clean, { createdAt: existing.createdAt });
+ logActivity(state, req.user, 'equip.edit', 'edited equipment "' + clean.name + '"');
+ await saveState(state);
+ res.json({ ok: true, item: state.equipment.items[req.params.id] });
+ } catch (err) { console.error(err); res.status(500).json({ error: 'Failed to update equipment' }); }
+});
+
+app.delete('/api/admin/equipment/:id', requireTeamAdmin, async (req, res) => {
+ try {
+ const state = await getState();
+ const existing = state.equipment && state.equipment.items && state.equipment.items[req.params.id];
+ if (!existing) return res.json({ ok: true });
+ if (!canManageEquipment(req.user, existing)) return res.status(403).json({ error: 'Not your equipment' });
+ const removedEquipName = existing.name || req.params.id;
+ const removedUrls = equipImageUrls(existing);
+ delete state.equipment.items[req.params.id];
+ for (const url of removedUrls) {
+ if (!imageStillReferenced(state, url, existing.id)) await removeUploadIfLocal(url);
+ }
+ logActivity(state, req.user, 'equip.delete', 'deleted equipment "' + removedEquipName + '"');
+ await saveState(state);
+ res.json({ ok: true });
+ } catch (err) { console.error(err); res.status(500).json({ error: 'Failed to delete equipment' }); }
+});
+
+// ─── Incident reports (gear problems) ────────────────────────────
+// Any volunteer can report a piece of gear as broken. Severity gates urgency:
+// 'down' → the gear is unusable RIGHT NOW; email fires instantly to the
+// team recipients whose scope covers the incident (+ REPORT_EMAIL).
+// 'minor' → a non-blocking nuisance; batched — it rides along in the digest
+// report's "Open issues" section instead of an instant email.
+// Reports are scoped: a member/team-admin files under their own login scope and
+// only sees issues their scope covers; execs/master span their scope. See
+// incidentScopeForReporter / incidentVisibleTo / incidentRecipientsFor.
+const INCIDENT_SEVERITIES = ['down', 'minor'];
+const MAX_INCIDENTS = 2000;
+
+function sanitizeSeverity(s) {
+ return INCIDENT_SEVERITIES.includes(s) ? s : 'minor';
+}
+
+function newIncidentId() {
+ return 'inc_' + Date.now().toString(36) + '-' + crypto.randomBytes(4).toString('hex');
+}
+
+// The (location, team) an incident belongs to. A member/team-admin can ONLY file
+// under their own login scope (no spoofing another campus/team). Master and execs
+// may target a scope they can reach (e.g. reporting from a gear detail while
+// overseeing a campus), taking it from the request body and clamping execs.
+function incidentScopeForReporter(user, body) {
+ const bodyLoc = String((body && body.location) || '').trim();
+ const bodyTeam = String((body && body.team) || '').trim();
+ if (isMasterAdmin(user)) return { location: bodyLoc, team: bodyTeam };
+ if (user.role === 'executive') {
+ const loc = bodyLoc || (Array.isArray(user.scopeLocations) && user.scopeLocations[0]) || '';
+ const team = bodyTeam || (Array.isArray(user.scopeTeams) && user.scopeTeams[0]) || '';
+ return { location: loc, team };
+ }
+ return { location: user.location || '', team: user.team || '' };
+}
+
+// May this user SEE an incident? Master = all; exec = anything in their edit
+// scope; member/team-admin = their own login scope (their team + building-wide +
+// global issues at their campus). Never another team's issues → no cross leak.
+function incidentVisibleTo(user, inc) {
+ if (isMasterAdmin(user)) return true;
+ const iLoc = (inc.location || '').trim();
+ const iTeam = (inc.team || '').trim();
+ if (user.role === 'executive') return execCanEditList(user, { location: iLoc, team: iTeam });
+ const uLoc = normalizeName(user.location || '');
+ const uTeam = (user.team || '').trim() ? normalizeName(user.team) : '';
+ const nLoc = iLoc ? normalizeName(iLoc) : '';
+ const nTeam = iTeam ? normalizeName(iTeam) : '';
+ if (!nLoc) return true; // location-less (global) issue — everyone
+ if (nLoc !== uLoc) return false; // different campus
+ if (!nTeam) return true; // building-wide — any team in the building
+ return !uTeam || nTeam === uTeam; // team-specific — must be that team
+}
+
+// May this user RESOLVE/reopen an incident? Editors only, and only within scope.
+function canManageIncident(user, inc) {
+ if (isMasterAdmin(user)) return true;
+ if (user.role === 'executive') return execCanEditList(user, { location: inc.location || '', team: inc.team || '' });
+ // Team admin: their own team's issues.
+ if (user.role === 'admin') {
+ const uLoc = normalizeName(user.location || '');
+ const uTeam = (user.team || '').trim() ? normalizeName(user.team) : '';
+ const nLoc = (inc.location || '').trim() ? normalizeName(inc.location) : '';
+ const nTeam = (inc.team || '').trim() ? normalizeName(inc.team) : '';
+ return !!uTeam && nLoc === uLoc && nTeam === uTeam;
+ }
+ return false;
+}
+
+// Team accounts (with recipients) whose scope COVERS the incident. Reuses
+// listAppliesToScope by treating the account's (location, team) as a "list":
+// a global account gets everything, a building account gets its campus, a team
+// account gets only its own team's issues.
+function incidentRecipientsFor(state, inc) {
+ const set = new Set();
+ for (const acct of teamsWithRecipients(state)) {
+ if (listAppliesToScope({ location: acct.location, team: acct.team }, inc.location, inc.team)) {
+ (acct.emailRecipients || []).forEach((r) => set.add(r));
+ }
+ }
+ return Array.from(set);
+}
+
+function incidentScopeLabel(inc) {
+ return [inc.location, inc.team].filter((s) => s && String(s).trim()).join(' · ') || 'Unassigned';
+}
+
+// Fire the instant "gear is down" email. No transporter / no recipients → a
+// harmless no-op (the incident is still recorded and shows in the next digest).
+async function sendIncidentEmail(state, inc) {
+ const transporter = buildTransporter();
+ if (!transporter) { console.warn('[incident] SMTP not configured — instant email skipped'); return { emailed: false, to: [] }; }
+ const to = incidentRecipientsFor(state, inc);
+ if (REPORT_EMAIL && !to.includes(REPORT_EMAIL)) to.push(REPORT_EMAIL); // owner oversight on urgent issues
+ if (!to.length) { console.warn('[incident] no recipients for', incidentScopeLabel(inc)); return { emailed: false, to: [] }; }
+ const scope = incidentScopeLabel(inc);
+ const gear = inc.equipName || 'Equipment';
+ const when = formatTime(inc.ts);
+ const subject = `[GEAR DOWN] ${gear} — ${scope}`;
+ const lines = [
+ `⚠ GEAR DOWN — reported ${when}`,
+ ``,
+ `Gear: ${gear}`,
+ `Where: ${scope}`,
+ `Reported: ${inc.by}`,
+ inc.what ? `Problem: ${inc.what}` : '',
+ inc.details ? `\nDetails:\n${inc.details}` : '',
+ ``,
+ `— This is an automatic alert from the checklist app. The gear was flagged as unusable right now.`
+ ].filter((l) => l !== '');
+ const html = `
+ ⚠ Gear Down — needs attention now
+
+
+
+
+
+ ${inc.what ? `` : ''}
+ Gear ${escapeHtml(gear)}
Where ${escapeHtml(scope)}
Reported by ${escapeHtml(inc.by)} · ${escapeHtml(when)}
Problem ${escapeHtml(inc.what)}
+ ${inc.details ? `${escapeHtml(inc.details)}` : ''}
+ Automatic alert from the checklist app — this gear was flagged as unusable right now.
+ `;
+ await transporter.sendMail({ from: SMTP_FROM, to: to.join(', '), subject, text: lines.join('\n'), html });
+ console.log(`[incident] DOWN "${gear}" (${scope}) emailed to ${to.join(', ')}`);
+ return { emailed: true, to };
+}
+
+// Report a gear problem. Open to ANY signed-in user (volunteers included).
+app.post('/api/incidents', requireUser, async (req, res) => {
+ try {
+ const body = req.body || {};
+ const severity = sanitizeSeverity(body.severity);
+ const what = String(body.what || '').trim().slice(0, 120);
+ const details = String(body.details || '').trim().slice(0, 2000);
+ const equipId = body.equipId ? String(body.equipId).slice(0, 80) : '';
+ let equipName = String(body.equipName || '').trim().slice(0, 120);
+ if (!what && !equipName) return res.status(400).json({ error: 'Describe the problem or pick the gear.' });
+ const state = await getState();
+ if (equipId && state.equipment && state.equipment.items && state.equipment.items[equipId]) {
+ equipName = state.equipment.items[equipId].name || equipName; // canonical name from the library
+ }
+ const { location, team } = incidentScopeForReporter(req.user, body);
+ let by = req.user.displayName || req.user.username;
+ if (req.user.role === 'user') { const n = String(body.by || '').trim().slice(0, 40); if (n) by = n; }
+ const inc = {
+ id: newIncidentId(),
+ ts: new Date().toISOString(),
+ by,
+ reporterRole: activityRole(req.user),
+ location, team,
+ equipId, equipName,
+ listId: body.listId ? String(body.listId).slice(0, 80) : '',
+ severity, what, details,
+ status: 'open',
+ resolvedBy: '', resolvedAt: '',
+ emailedAt: ''
+ };
+ if (!Array.isArray(state.incidents)) state.incidents = [];
+ state.incidents.push(inc);
+ if (state.incidents.length > MAX_INCIDENTS) state.incidents = state.incidents.slice(-MAX_INCIDENTS);
+ logActivity(state, req.user, 'incident.report',
+ `reported ${severity === 'down' ? 'GEAR DOWN' : 'an issue'}: "${equipName || what}" (${incidentScopeLabel(inc)})`, by);
+ // Instant email for 'down' only. Never let a mail failure lose the report —
+ // it's already saved below and will still surface in the digest.
+ let emailed = false;
+ if (severity === 'down') {
+ try { const r = await sendIncidentEmail(state, inc); emailed = r.emailed; if (emailed) inc.emailedAt = new Date().toISOString(); }
+ catch (e) { console.error('[incident] instant email failed:', e && e.message); }
+ }
+ await saveState(state);
+ res.json({ ok: true, incident: inc, emailed });
+ } catch (err) { console.error(err); res.status(500).json({ error: 'Failed to report the issue' }); }
+});
+
+// Scoped list of incidents (mirrors what /api/state embeds, but on demand and
+// filterable). ?status=open|resolved · ?equipId=… newest-first.
+app.get('/api/incidents', requireUser, async (req, res) => {
+ try {
+ const state = await getState();
+ const status = String(req.query.status || '').trim();
+ const equipId = String(req.query.equipId || '').trim();
+ const out = (Array.isArray(state.incidents) ? state.incidents : [])
+ .filter((inc) => incidentVisibleTo(req.user, inc))
+ .filter((inc) => !status || inc.status === status)
+ .filter((inc) => !equipId || inc.equipId === equipId)
+ .slice(-500)
+ .reverse();
+ res.json({ incidents: out });
+ } catch (err) { console.error(err); res.status(500).json({ error: 'Failed to load incidents' }); }
+});
+
+// Resolve / reopen an incident (editors only, in scope).
+app.post('/api/incidents/:id/resolve', requireTeamAdmin, async (req, res) => {
+ try {
+ const state = await getState();
+ const inc = (state.incidents || []).find((x) => x.id === req.params.id);
+ if (!inc) return res.status(404).json({ error: 'Incident not found' });
+ if (!canManageIncident(req.user, inc)) return res.status(403).json({ error: 'Not in your area' });
+ const reopen = !!(req.body && req.body.reopen);
+ if (reopen) {
+ inc.status = 'open'; inc.resolvedBy = ''; inc.resolvedAt = '';
+ } else {
+ inc.status = 'resolved';
+ inc.resolvedBy = req.user.displayName || req.user.username;
+ inc.resolvedAt = new Date().toISOString();
+ }
+ logActivity(state, req.user, reopen ? 'incident.reopen' : 'incident.resolve',
+ `${reopen ? 'reopened' : 'resolved'} issue: "${inc.equipName || inc.what}" (${incidentScopeLabel(inc)})`);
+ await saveState(state);
+ res.json({ ok: true, incident: inc });
+ } catch (err) { console.error(err); res.status(500).json({ error: 'Failed to update the incident' }); }
+});
+
+// ─── Email digest ────────────────────────────────────────────────
+function buildTransporter() {
+ if (!SMTP_HOST || !SMTP_USER || !SMTP_PASS) return null;
+ return nodemailer.createTransport({
+ host: SMTP_HOST,
+ port: SMTP_PORT,
+ secure: SMTP_SECURE,
+ auth: { user: SMTP_USER, pass: SMTP_PASS }
+ });
+}
+
+function formatTime(iso) {
+ if (!iso) return '';
+ const d = new Date(iso);
+ return d.toLocaleString('en-US', {
+ timeZone: REPORT_TZ,
+ weekday: 'short',
+ hour: 'numeric',
+ minute: '2-digit'
+ });
+}
+
+// A "scope key" is either a plain location ("Woonsocket") or a location+team
+// composite ("Woonsocket::Production"). splitScope pulls the two parts back out.
+// Plain (teamless) keys are how every check was stored before teams existed, so
+// this is fully backward compatible.
+function splitScope(key) {
+ const raw = String(key || '');
+ const idx = raw.indexOf('::');
+ if (idx === -1) return { location: raw, team: '' };
+ return { location: raw.slice(0, idx), team: raw.slice(idx + 2) };
+}
+
+function collectLocations(state) {
+ const set = new Set();
+ state.lists.forEach((list) => {
+ const loc = (list.location || '').trim();
+ if (loc) set.add(normalizeName(loc));
+ });
+ Object.keys(state.checks || {}).forEach((k) => {
+ // Collapse any team scope key down to its location so team checks never
+ // surface as a phantom "WOONSOCKET::PRODUCTION" section in the global digest.
+ const loc = splitScope(k).location;
+ if (loc && loc !== 'Anonymous') set.add(loc);
+ });
+ return Array.from(set).sort((a, b) => a.localeCompare(b));
+}
+
+// Render one titled section (a location, or later a team) from its lists,
+// reading each item's status via getChecksForList(list) -> { [itemId]: check }.
+// Output strings are kept identical to the original report so the weekly email
+// is unchanged for existing data.
+function buildReportSection(title, lists, getChecksForList) {
+ const lines = [];
+ const html = [];
+ let done = 0;
+ let missed = 0;
+ if (!Array.isArray(lists) || lists.length === 0) {
+ return { lines, html, done, missed };
+ }
+
+ lines.push('');
+ lines.push(`######## ${String(title).toUpperCase()} ########`);
+ lines.push('');
+ html.push(`${escapeHtml(title)}`);
+
+ lists.forEach((list) => {
+ // Notes are reference-only (no completion), so they never appear in the report. Count/iterate
+ // TASK items only, and skip the whole list block when it has zero tasks (a notes-only list would
+ // otherwise print an empty header + "Completed 0/0 · Missed 0").
+ const taskItems = (list.items || []).filter((i) => i.kind !== 'note');
+ if (taskItems.length === 0) return;
+ const checksForList = getChecksForList(list) || {};
+
+ lines.push(`============================================`);
+ lines.push(list.name.toUpperCase());
+ lines.push(`============================================`);
+ html.push(`${escapeHtml(list.name)}`);
+ html.push(``);
+
+ let listDone = 0;
+ let listMissed = 0;
+
+ taskItems.forEach((item) => {
+ const c = checksForList[item.id];
+ const isDone = !!(c && c.completed);
+ const symbol = isDone ? '✓' : '✗';
+ const who = isDone
+ ? `${c.completedBy || title} (${formatTime(c.completedDate)})`
+ : 'not done';
+ lines.push(`${symbol} ${item.title.padEnd(40, ' ')} — ${who}`);
+ const bg = isDone ? '#eaf7ea' : '#fdecea';
+ const color = isDone ? '#1a7f37' : '#a8071a';
+ html.push(`
+
+
+
+
+ `);
+ if (isDone) listDone += 1;
+ else listMissed += 1;
+ });
+
+ html.push(`${symbol} ${escapeHtml(item.title)}${item.description ? `${escapeHtml(item.description)}
` : ''} ${escapeHtml(who)}`);
+ lines.push('');
+ lines.push(`Completed: ${listDone}/${listDone + listMissed} Missed: ${listMissed}`);
+ lines.push('');
+ html.push(`Completed ${listDone}/${listDone + listMissed} · Missed ${listMissed}`);
+
+ done += listDone;
+ missed += listMissed;
+ });
+
+ return { lines, html, done, missed };
+}
+
+// Stitch sections into the final { text, html, totals } email body.
+function assembleReport(sections) {
+ const lines = [];
+ const html = [];
+ let totalDone = 0;
+ let totalMissed = 0;
+ sections.forEach((section) => {
+ lines.push(...section.lines);
+ html.push(...section.html);
+ totalDone += section.done;
+ totalMissed += section.missed;
+ });
+ return {
+ text: lines.join('\n'),
+ html: `${html.join('')}`,
+ totalDone,
+ totalMissed
+ };
+}
+
+// Append an "Open gear issues" section to an assembled report. `filterFn(inc)`
+// picks which open incidents belong in this report (global = all; per-team = the
+// account's scope). Down issues are flagged 🔴, minor 🟡. Batched ('minor')
+// reports reach recipients HERE — this is their delivery path. No open issues in
+// scope → the report is returned untouched (weekly email stays identical for the
+// no-incident case).
+function appendIncidentsSection(report, state, filterFn) {
+ const open = (Array.isArray(state.incidents) ? state.incidents : [])
+ .filter((inc) => inc.status === 'open' && filterFn(inc))
+ .sort((a, b) => (a.severity === b.severity ? String(b.ts).localeCompare(a.ts) : (a.severity === 'down' ? -1 : 1)));
+ if (!open.length) return report;
+ const down = open.filter((i) => i.severity === 'down').length;
+ const lines = ['', `######## OPEN GEAR ISSUES (${open.length}${down ? `, ${down} DOWN` : ''}) ########`, ''];
+ const html = [`Open gear issues (${open.length}${down ? ` · ${down} down` : ''})`,
+ ``];
+ open.forEach((inc) => {
+ const sev = inc.severity === 'down' ? '🔴 DOWN' : '🟡 minor';
+ const scope = incidentScopeLabel(inc);
+ const gear = inc.equipName || inc.what || 'Equipment';
+ const desc = [inc.what && inc.equipName ? inc.what : '', inc.details].filter(Boolean).join(' — ');
+ lines.push(`${inc.severity === 'down' ? '🔴' : '🟡'} ${gear} [${scope}] — ${desc || '(no details)'} (${inc.by}, ${formatTime(inc.ts)})`);
+ const bg = inc.severity === 'down' ? '#fdecea' : '#fff8e6';
+ html.push(`
+
+
+
+ `);
+ });
+ html.push('${sev} ${escapeHtml(gear)} ${escapeHtml(scope)}${desc ? `${escapeHtml(desc)}
` : ''} ${escapeHtml(inc.by)}
${escapeHtml(formatTime(inc.ts))}');
+ return {
+ text: (report.text || '') + '\n' + lines.join('\n'),
+ html: (report.html || '').replace(/<\/div>\s*$/, '') + html.join('') + '',
+ totalDone: report.totalDone,
+ totalMissed: report.totalMissed
+ };
+}
+
+// Readiness "report card" wrapper (Phase 6): prepend an at-a-glance readiness
+// header (task completion % + open-issue/down tallies + new-this-week) and append
+// a NOTES recap (reference note items, which the task sections deliberately skip).
+// `incidentFilterFn` scopes the incident tallies to this report; `lists` is the
+// same set the report's task sections were built from (for the notes recap).
+function finalizeReport(report, state, { lists, incidentFilterFn }) {
+ const done = report.totalDone || 0;
+ const missed = report.totalMissed || 0;
+ const total = done + missed;
+ const pct = total ? Math.round((done / total) * 100) : 0;
+ const inScope = (Array.isArray(state.incidents) ? state.incidents : []).filter((i) => incidentFilterFn(i));
+ const open = inScope.filter((i) => i.status === 'open');
+ const down = open.filter((i) => i.severity === 'down').length;
+ const weekAgo = new Date(Date.now() - 7 * 86400000).toISOString();
+ const newThisWeek = inScope.filter((i) => String(i.ts) >= weekAgo).length;
+ const emoji = (down > 0 || (total && pct < 60)) ? '🔴' : (!total || pct < 90 || open.length) ? '🟡' : '🟢';
+ const issueText = open.length ? `${open.length} open gear issue${open.length === 1 ? '' : 's'}${down ? ` (${down} DOWN)` : ''}` : 'no open gear issues';
+ const headText = `${emoji} READINESS: ${total ? `${done}/${total} tasks done (${pct}%)` : 'no tasks tracked'} · ${issueText}${newThisWeek ? ` · ${newThisWeek} new this week` : ''}\n\n`;
+ const pctColor = !total ? '#888' : pct >= 90 ? '#1a7f37' : pct >= 60 ? '#8a6d00' : '#a8071a';
+ const headHtml = `
+ ${emoji} Readiness
+
+ ${total ? `${done}/${total} tasks (${pct}%)` : 'No tasks tracked'}
+ · ${open.length ? `${open.length} open gear issue${open.length === 1 ? '' : 's'}${down ? ` (${down} down)` : ''}` : 'No open gear issues'}
+ ${newThisWeek ? ` · ${newThisWeek} new this week` : ''}
+ `;
+ // Notes recap (reference note items).
+ const noteText = [];
+ const noteHtml = [];
+ (lists || []).forEach((list) => {
+ const notes = (list.items || []).filter((i) => i.kind === 'note' && (i.title || i.description));
+ if (!notes.length) return;
+ noteText.push(`--- ${list.name} ---`);
+ notes.forEach((n) => noteText.push(`• ${n.title}${n.description ? ': ' + String(n.description).replace(/\s+/g, ' ').slice(0, 200) : ''}`));
+ noteText.push('');
+ noteHtml.push(`${escapeHtml(list.name)}
`
+ + notes.map((n) => `${escapeHtml(n.title)}${n.description ? `: ${escapeHtml(String(n.description).replace(/\s+/g, ' ').slice(0, 200))}` : ''}
`).join('') + ``);
+ });
+ let notesText = '';
+ let notesHtml = '';
+ if (noteText.length) {
+ notesText = '\n\n######## NOTES ########\n\n' + noteText.join('\n');
+ notesHtml = `Notes` + noteHtml.join('');
+ }
+ const text = headText + (report.text || '') + notesText;
+ let html = report.html || '';
+ html = html.replace(/^(]*>)/, '$1' + headHtml); // prepend readiness header inside the wrapper
+ html = html.replace(/<\/div>\s*$/, notesHtml + ''); // append notes before the wrapper close
+ return { text, html, totalDone: done, totalMissed: missed };
+}
+
+// GLOBAL digest — one section per location, reading that location's teamless
+// checks. Behavior is unchanged from the original single-function report.
+function buildReport(state) {
+ const locations = collectLocations(state);
+ if (locations.length === 0) locations.push('(No one checked in)');
+ const sections = locations.map((locKey) => {
+ const lists = state.lists.filter((list) => {
+ const listLoc = (list.location || '').trim();
+ return !listLoc || normalizeName(listLoc) === locKey;
+ });
+ return buildReportSection(
+ locKey,
+ lists,
+ (list) => (state.checks && state.checks[locKey] && state.checks[locKey][list.id]) || {}
+ );
+ });
+ const incF = () => true;
+ return finalizeReport(appendIncidentsSection(assembleReport(sections), state, incF), state, { lists: state.lists, incidentFilterFn: incF });
+}
+
+// PER-TEAM digest — the lists visible to one team account (team + building-wide
+// + global), read from that team's scope key.
+function teamLabel(account) {
+ const scope = [account.location, account.team].filter(Boolean).join(' · ');
+ return scope || account.displayName || account.username;
+}
+function buildTeamReport(state, account) {
+ const key = scopeKey(account.location, account.team);
+ const lists = state.lists.filter((l) => listAppliesToScope(l, account.location, account.team));
+ const section = buildReportSection(
+ teamLabel(account),
+ lists,
+ (list) => (state.checks && state.checks[key] && state.checks[key][list.id]) || {}
+ );
+ const incF = (inc) => listAppliesToScope({ location: account.location, team: account.team }, inc.location, inc.team);
+ return finalizeReport(appendIncidentsSection(assembleReport([section]), state, incF), state, { lists, incidentFilterFn: incF });
+}
+
+// Team accounts that have at least one email recipient configured.
+function teamsWithRecipients(state) {
+ return Object.values(state.users || {}).filter((u) => Array.isArray(u.emailRecipients) && u.emailRecipients.length > 0);
+}
+
+// Of those, the ones a given user is allowed to send a report for:
+// master = all; executive = teams inside their scope; team-admin = their own (loc, team).
+function teamsInScopeWithRecipients(state, user) {
+ const all = teamsWithRecipients(state);
+ if (isMasterAdmin(user)) return all;
+ if (user.role === 'executive') return all.filter((acct) => execCanEditList(user, { location: acct.location, team: acct.team }));
+ const uLoc = normalizeName(user.location || '');
+ const uTeam = (user.team || '').trim() ? normalizeName(user.team) : '';
+ return all.filter((acct) =>
+ normalizeName(acct.location || '') === uLoc &&
+ ((acct.team || '').trim() ? normalizeName(acct.team) : '') === uTeam);
+}
+
+// Normalise check-in names so "woonsocket", "Woonsocket", "WOONSOCKET"
+// all collapse to a single canonical "Woonsocket" in the report.
+function normalizeName(raw) {
+ if (typeof raw !== 'string') return 'Anonymous';
+ const cleaned = raw.trim().replace(/\s+/g, ' ').slice(0, 80);
+ if (!cleaned) return 'Anonymous';
+ return cleaned
+ .toLowerCase()
+ .replace(/(^|[\s\-'])(\p{L})/gu, (_, sep, ch) => sep + ch.toUpperCase());
+}
+
+// Build the per-(location, team) key used to store/look up checks.
+// A teamless caller collapses to the bare location key — exactly how checks
+// were keyed before teams existed — so existing check data keeps resolving.
+function scopeKey(location, team) {
+ const loc = location && String(location).trim() ? normalizeName(location) : '';
+ const tm = team && String(team).trim() ? normalizeName(team) : '';
+ if (loc && tm) return loc + '::' + tm;
+ return loc;
+}
+
+// Accept recipients as an array or a comma/space/semicolon-separated string;
+// trim, drop empties, keep things that look like an email, cap the count.
+function normalizeRecipients(input) {
+ let arr = [];
+ if (Array.isArray(input)) arr = input;
+ else if (typeof input === 'string') arr = input.split(/[\s,;]+/);
+ const seen = new Set();
+ const out = [];
+ arr.map((s) => String(s).trim()).filter(Boolean).forEach((addr) => {
+ if (!/^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(addr)) return;
+ const key = addr.toLowerCase();
+ if (seen.has(key)) return;
+ seen.add(key);
+ out.push(addr);
+ });
+ return out.slice(0, 20);
+}
+
+function slugify(s) {
+ return String(s || '').toLowerCase().trim().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '');
+}
+
+// Canonical login id from a location + team, e.g. "South Coast" + "Production"
+// -> "south-coast.production". Must satisfy the username regex + 40-char cap.
+function makeUsername(location, team) {
+ const locSlug = slugify(location);
+ const teamSlug = slugify(team);
+ const u = (teamSlug ? `${locSlug}.${teamSlug}` : locSlug).replace(/[^a-z0-9._-]/g, '');
+ return u.slice(0, 40);
+}
+
+// Which lists apply to a (location, team) scope:
+// global (no location, no team) | building-wide (location, no team) | team (location + team)
+function listAppliesToScope(list, location, team) {
+ const listLoc = (list.location || '').trim() ? normalizeName(list.location) : '';
+ const listTeam = (list.team || '').trim() ? normalizeName(list.team) : '';
+ const loc = location && String(location).trim() ? normalizeName(location) : '';
+ const tm = team && String(team).trim() ? normalizeName(team) : '';
+ if (!listLoc && !listTeam) return true; // global — everyone
+ if (listLoc !== loc) return false; // different (or missing) building
+ if (!listTeam) return true; // building-wide — all teams in the building
+ return listTeam === tm; // team-specific — must match team
+}
+
+// Who may EDIT a list. Master admin: any list. Executive: any list inside their
+// assigned scope. Team admin: only its own team-specific list (building-wide /
+// global lists are master-owned).
+function ownsList(user, list) {
+ if (isMasterAdmin(user)) return true;
+ if (user.role === 'executive') return execCanEditList(user, list);
+ const uLoc = normalizeName(user.location || '');
+ const uTeam = (user.team || '').trim() ? normalizeName(user.team) : '';
+ const lLoc = (list.location || '').trim() ? normalizeName(list.location) : '';
+ const lTeam = (list.team || '').trim() ? normalizeName(list.team) : '';
+ return !!uTeam && lLoc === uLoc && lTeam === uTeam;
+}
+
+// An executive's access is the INTERSECTION of their location and team scope:
+// they edit a list whose location is allowed AND whose team is allowed. An empty
+// column means "any" on that axis (locations=[Woonsocket], teams=[] -> every
+// Woonsocket team; locations=[], teams=[Production] -> Production everywhere;
+// locations=[North Attleboro], teams=[Admin] -> ONLY North Attleboro's Admin lists).
+// No scope assigned at all = no access (never accidentally full access).
+function execCanEditList(user, list) {
+ const locs = (user.scopeLocations || []).map((s) => normalizeName(s));
+ const teams = (user.scopeTeams || []).map((s) => normalizeName(s));
+ if (locs.length === 0 && teams.length === 0) return false;
+ const lLoc = (list.location || '').trim() ? normalizeName(list.location) : '';
+ const lTeam = (list.team || '').trim() ? normalizeName(list.team) : '';
+ const locationOK = locs.length === 0 || locs.includes(lLoc);
+ const teamOK = teams.length === 0 || teams.includes(lTeam);
+ return locationOK && teamOK;
+}
+
+function makeListId(name, location, team, state) {
+ const base = slugify([name, location, team].filter(Boolean).join('-')) || 'list';
+ let id = base;
+ let n = 2;
+ while (state.lists.find((l) => l.id === id)) id = `${base}-${n++}`;
+ return id;
+}
+
+function clampInt(v, min, max, fallback) {
+ const n = Number(v);
+ return Number.isInteger(n) && n >= min && n <= max ? n : fallback;
+}
+
+// Allowed list colors. Either a named preset OR a custom #rrggbb hex (from the
+// color picker). '' = default/no color.
+const LIST_COLORS = ['blue', 'green', 'amber', 'red', 'purple', 'teal', 'pink', 'slate',
+ 'orange', 'yellow', 'lime', 'cyan', 'indigo', 'brown'];
+function sanitizeColor(c) {
+ const v = String(c || '').trim().toLowerCase();
+ if (LIST_COLORS.includes(v)) return v;
+ if (/^#[0-9a-f]{6}$/.test(v)) return v; // custom hex
+ return '';
+}
+
+// The three checklist columns, in their default left→right (desktop) / top→bottom (mobile) order.
+const COLUMN_KEYS = ['todo', 'done', 'notes', 'feedback'];
+// A list's shared column order. Keep only valid keys, dedupe, then append any missing key so the
+// result is ALWAYS the full set in some order. Any non-array / garbage → the default order.
+// Custom task sections: the buckets a list's UNCHECKED tasks are grouped into
+// ("To Do" by default; owners can add more — e.g. Monday…Sunday for a
+// maintenance list — and rename any of them, the default included). The first
+// entry is ALWAYS the default (stable id 'todo', never removable); ids are
+// stable slugs so item.group survives renames. Absent/legacy = the classic
+// single To Do. Checked tasks all land in the one shared Done regardless.
+const TASK_GROUP_MAX = 10;
+function sanitizeTaskGroups(v) {
+ const out = [];
+ const seen = new Set();
+ if (Array.isArray(v)) {
+ for (const g of v) {
+ if (!g || typeof g !== 'object') continue;
+ const name = String(g.name || '').trim().slice(0, 40);
+ const id = String(g.id || '').trim().toLowerCase().slice(0, 40);
+ if (!name || !/^[a-z0-9-]+$/.test(id) || seen.has(id)) continue;
+ seen.add(id);
+ out.push({ id, name });
+ if (out.length >= TASK_GROUP_MAX) break;
+ }
+ }
+ // The default section always exists and always leads.
+ const di = out.findIndex((g) => g.id === 'todo');
+ if (di < 0) out.unshift({ id: 'todo', name: 'To Do' });
+ else if (di > 0) out.unshift(out.splice(di, 1)[0]);
+ return out;
+}
+// Snap every task's group to an EXISTING section (deleted/unknown → default),
+// so a task can never be stranded invisible — the same rule that keeps notes
+// and notes-only lists safe. Notes never carry a group.
+function reconcileItemGroups(list) {
+ const ids = new Set((Array.isArray(list.taskGroups) ? list.taskGroups : []).map((g) => g && g.id));
+ (list.items || []).forEach((it) => {
+ if (!it || typeof it !== 'object') return;
+ if (it.kind === 'note') { delete it.group; return; }
+ if (typeof it.group !== 'string' || !ids.has(it.group)) it.group = 'todo';
+ });
+}
+
+function sanitizeColumnOrder(v) {
+ const seen = new Set();
+ const out = [];
+ if (Array.isArray(v)) {
+ v.forEach((k) => {
+ const s = String(k || '');
+ if (COLUMN_KEYS.includes(s) && !seen.has(s)) { seen.add(s); out.push(s); }
+ });
+ }
+ COLUMN_KEYS.forEach((k) => { if (!seen.has(k)) out.push(k); });
+ return out;
+}
+
+function sanitizeRecurrence(r) {
+ if (!r || typeof r !== 'object') return null;
+ // A task's recurrence now uses the SAME schedule shape + validation as a list's
+ // reset schedule — type, every-N interval, start weekday, day/month, and intraday
+ // times — so a single task has the exact same repeat options as a whole list.
+ // Unknown/empty shape → treat as NOT recurring (rather than silently coercing a
+ // stray {} into a daily repeat). The UI always sends a valid type when recurring.
+ const allowed = ['daily', 'weekly', 'monthly', 'yearly'];
+ if (!allowed.includes(r.type)) return null;
+ return sanitizeResetSchedule(r);
+}
+
+// A list's optional auto-reset schedule (when its items return to To Do):
+// null = manual only; weekly on a weekday (0=Sun); or monthly on a date.
+// Most recent date on/before today whose weekday === dow (today if it matches).
+function mostRecentWeekday(dow) {
+ const now = new Date();
+ const d = new Date(now.getFullYear(), now.getMonth(), now.getDate());
+ d.setDate(d.getDate() - ((d.getDay() - dow + 7) % 7));
+ return d.toDateString();
+}
+// Normalize a list of intraday reset times ("HH:MM", 24h) → sorted, de-duped,
+// zero-padded, capped. Returns null when nothing valid (so the field is omitted
+// and the list keeps its plain once-per-day behavior).
+function sanitizeResetTimes(arr) {
+ if (!Array.isArray(arr)) return null;
+ const seen = new Set();
+ const out = [];
+ for (const raw of arr) {
+ const m = /^(\d{1,2}):(\d{2})$/.exec(String(raw).trim());
+ if (!m) continue;
+ const h = parseInt(m[1], 10);
+ const mn = parseInt(m[2], 10);
+ if (h < 0 || h > 23 || mn < 0 || mn > 59) continue;
+ const key = String(h).padStart(2, '0') + ':' + String(mn).padStart(2, '0');
+ if (seen.has(key)) continue;
+ seen.add(key);
+ out.push(key);
+ }
+ out.sort();
+ return out.length ? out.slice(0, 24) : null;
+}
+
+function sanitizeResetSchedule(s) {
+ if (!s || typeof s !== 'object') return null;
+ const interval = clampInt(s.interval, 1, 99, 1); // "every N" → biweekly = weekly+2, etc.
+ let out;
+ if (s.type === 'daily') {
+ out = { type: 'daily', interval };
+ // "Every N days starting " — only meaningful when N>1.
+ if (interval > 1) { const dow = clampInt(s.startDow, 0, 6, -1); if (dow >= 0) out.startDow = dow; }
+ }
+ else if (s.type === 'weekly') out = { type: 'weekly', interval, dayOfWeek: clampInt(s.dayOfWeek, 0, 6, 0) };
+ else if (s.type === 'monthly') out = { type: 'monthly', interval, dayOfMonth: clampInt(s.dayOfMonth, 1, 31, 1) };
+ else if (s.type === 'yearly') out = { type: 'yearly', interval, month: clampInt(s.month, 0, 11, 0), dayOfMonth: clampInt(s.dayOfMonth, 1, 31, 1) };
+ else return null;
+ // Optional intraday repeat: reset at specific clock times on each due day. Only
+ // offered for daily/weekly (the "within one day" cases); ignored for monthly/yearly.
+ if (out.type === 'daily' || out.type === 'weekly') {
+ const times = sanitizeResetTimes(s.times);
+ if (times) out.times = times;
+ }
+ // An interval > 1 needs an anchor date to define the cadence. Preserve a valid
+ // incoming anchor (so unchanged saves keep the rhythm). Otherwise: for a daily
+ // schedule with a chosen start weekday, anchor on that weekday; else start today.
+ // Editing the repeat in the modal sends no anchor, so it re-anchors as needed.
+ if (out.interval > 1) {
+ const a = s.anchor ? new Date(s.anchor) : null;
+ if (a && !isNaN(a.getTime())) out.anchor = new Date(a.getFullYear(), a.getMonth(), a.getDate()).toDateString();
+ else if (out.type === 'daily' && out.startDow != null) out.anchor = mostRecentWeekday(out.startDow);
+ else out.anchor = new Date().toDateString();
+ }
+ return out;
+}
+
+// Build a clean item from client input; id + createdAt are assigned server-side.
+// CANONICAL task-list line regex. MUST stay byte-identical to md.js TASK_RE and app.js
+// parseTaskList — count/index/label must agree across all three or per-location checkmarks
+// misalign. Sub-steps are authored INLINE in item.description as "- [ ] label" lines.
+const TASK_LINE_RE = /^\s*[-*]\s+\[([ xX])\]\s*(.*)$/;
+// Ordered, whitespace-normalized checkbox labels in document order. Deliberately EXCLUDES
+// the [ ]/[x] mark char: runtime checked state lives only in the per-location check object,
+// so toggling a source mark must NOT count as a structural change.
+function taskLineLabels(description) {
+ const out = [];
+ String(description == null ? '' : description).replace(/\r\n?/g, '\n').split('\n').forEach((line) => {
+ const m = TASK_LINE_RE.exec(line);
+ if (m) out.push(m[2].trim().replace(/\s+/g, ' '));
+ });
+ return out;
+}
+function taskLineCount(description) { return taskLineLabels(description).length; }
+function taskSignature(description) { return JSON.stringify(taskLineLabels(description)); }
+// Drop empty-label checkbox lines ("- [ ]" with no text). An empty checkbox is meaningless
+// and, before this, a checkbox whose text was deleted in the editor lingered as a ghost box
+// in the live list. Applied on every description save so a deleted checkbox truly disappears.
+function stripEmptyTaskLines(description) {
+ return String(description == null ? '' : description).replace(/\r\n?/g, '\n').split('\n')
+ .filter((line) => { const m = TASK_LINE_RE.exec(line); return !(m && m[2].trim() === ''); })
+ .join('\n');
+}
+
+// A task's checkbox lines changed (added/removed/reordered/renamed). Sub-step progress is
+// keyed by POSITION (index), so realign every location's marks to the NEW positions by
+// matching labels (first unused match) — this preserves progress across a reorder or a
+// prose edit and only drops the mark for a step whose label genuinely vanished. Then
+// recompute completion. Called ONLY when the signature actually changed.
+function remapItemSubChecks(state, listId, item, oldDescription) {
+ const oldLabels = taskLineLabels(oldDescription);
+ const newLabels = taskLineLabels(item.description);
+ const total = newLabels.length;
+ Object.keys(state.checks || {}).forEach((scope) => {
+ const byList = state.checks[scope] && state.checks[scope][listId];
+ const rec = byList && byList[item.id];
+ if (!rec) return;
+ const old = rec.subChecks || {};
+ if (total > 0) {
+ const claimed = new Array(total).fill(false);
+ const next = {};
+ Object.keys(old).forEach((k) => {
+ const oi = Number(k);
+ if (!Number.isInteger(oi) || oi < 0 || oi >= oldLabels.length) return; // stale/invalid key
+ const label = oldLabels[oi];
+ for (let j = 0; j < total; j++) {
+ if (!claimed[j] && newLabels[j] === label) { claimed[j] = true; next[String(j)] = old[k]; break; }
+ }
+ });
+ rec.subChecks = next;
+ const doneCount = Object.keys(next).length;
+ const nowComplete = doneCount === total;
+ if (nowComplete && !rec.completed) { rec.completed = true; rec.completedDate = rec.completedDate || new Date().toISOString(); }
+ else if (!nowComplete && rec.completed) { rec.completed = false; delete rec.completedDate; delete rec.completedBy; }
+ if (!rec.completed && doneCount === 0) delete byList[item.id];
+ } else {
+ // No checkboxes anymore → drop positional progress; a manual completed flag (if any) stays.
+ delete rec.subChecks;
+ if (!rec.completed) delete byList[item.id];
+ }
+ });
+}
+
+// One-time, idempotent migration of the legacy structured sub-step model (item.subtasks =
+// [{id,text}], subChecks keyed by subtaskId) to the inline model (task lines in the
+// description, subChecks keyed by index). Appends each step as a "- [ ]" line in order,
+// remaps every location's subChecks from id → 0-based index (preserving in-progress marks),
+// then deletes item.subtasks. Finally sweeps any leftover non-integer subCheck key (e.g.
+// orphaned st-* ids from deleted items). Safe to run on every load — a no-op once migrated.
+function migrateLegacySubtasks(state) {
+ if (!state || !Array.isArray(state.lists)) return;
+ state.checks = state.checks || {};
+ state.lists.forEach((list) => {
+ (list.items || []).forEach((item) => {
+ if (!item || !Array.isArray(item.subtasks)) return;
+ const steps = [];
+ for (const s of item.subtasks) {
+ if (!s || typeof s !== 'object') continue;
+ const text = String(s.text == null ? '' : s.text).trim();
+ if (!text) continue;
+ steps.push({ id: String(s.id || '').trim(), text });
+ }
+ if (steps.length) {
+ const lines = steps.map((s) => '- [ ] ' + s.text).join('\n');
+ const desc = String(item.description || '').replace(/\s+$/, '');
+ item.description = desc ? desc + '\n\n' + lines : lines;
+ const indexOfId = new Map(steps.map((s, i) => [s.id, i]));
+ Object.keys(state.checks).forEach((scope) => {
+ const byList = state.checks[scope] && state.checks[scope][list.id];
+ const rec = byList && byList[item.id];
+ if (!rec || !rec.subChecks) return;
+ const remapped = {};
+ Object.keys(rec.subChecks).forEach((sid) => {
+ if (indexOfId.has(sid)) remapped[String(indexOfId.get(sid))] = rec.subChecks[sid];
+ });
+ rec.subChecks = remapped;
+ if (!rec.completed && Object.keys(remapped).length === 0) delete byList[item.id];
+ });
+ }
+ delete item.subtasks;
+ });
+ });
+ // Sweep leftover non-integer subCheck keys (old st-* ids on any record, incl. orphans).
+ Object.keys(state.checks).forEach((scope) => {
+ Object.keys(state.checks[scope] || {}).forEach((lid) => {
+ Object.keys(state.checks[scope][lid] || {}).forEach((iid) => {
+ const rec = state.checks[scope][lid][iid];
+ if (rec && rec.subChecks) {
+ Object.keys(rec.subChecks).forEach((k) => { if (!/^\d+$/.test(k)) delete rec.subChecks[k]; });
+ if (!rec.completed && Object.keys(rec.subChecks).length === 0) delete state.checks[scope][lid][iid];
+ }
+ });
+ });
+ });
+}
+
+function buildItem(body) {
+ const title = String((body && body.title) || '').trim();
+ if (!title) return null;
+ // Sub-steps live inline in the description now. Fold any legacy body.subtasks (e.g. a
+ // pre-pivot scoped import) into the description as "- [ ]" lines so nothing is lost.
+ let description = String((body && body.description) || '').trim();
+ const legacy = Array.isArray(body && body.subtasks) ? body.subtasks : [];
+ if (legacy.length) {
+ const lines = legacy.map((s) => s && String(s.text || '').trim()).filter(Boolean).map((t) => '- [ ] ' + t).join('\n');
+ if (lines) description = description ? description + '\n\n' + lines : lines;
+ }
+ description = stripEmptyTaskLines(description);
+ const kind = (body && body.kind === 'note') ? 'note' : 'task';
+ return {
+ id: `${Date.now()}-${Math.random().toString(16).slice(2, 6)}`,
+ title,
+ description,
+ kind,
+ // Which task section it lives in; callers run reconcileItemGroups against the
+ // target list so an unknown id can never strand the task invisible.
+ ...(kind === 'note' ? {} : { group: String((body && body.group) || '').trim().toLowerCase().slice(0, 40) || 'todo' }),
+ // A note never recurs (it has no completion to reset); force null so it can't drag its list into
+ // the per-poll intraday-recurrence rescan (hasIntradayItem) or show a misleading repeat badge.
+ recurrence: kind === 'note' ? null : sanitizeRecurrence(body && body.recurrence),
+ createdAt: new Date().toISOString()
+ };
+}
+
+// Resolve a typed login value (which may be an abbreviation like "sc" or a full
+// name) against the admin-managed directory. Falls back to the typed value.
+function expandAbbrev(value, kind, directory) {
+ const v = String(value || '').trim();
+ if (!v) return '';
+ const list = (directory && Array.isArray(directory[kind])) ? directory[kind] : [];
+ const lower = v.toLowerCase();
+ const byAbbrev = list.find((e) => (e.abbrev || '').toLowerCase() === lower);
+ if (byAbbrev) return byAbbrev.name;
+ const byName = list.find((e) => (e.name || '').toLowerCase() === lower);
+ if (byName) return byName.name;
+ return v;
+}
+
+function escapeHtml(text) {
+ return String(text == null ? '' : text)
+ .replace(/&/g, '&')
+ .replace(//g, '>')
+ .replace(/"/g, '"')
+ .replace(/'/g, ''');
+}
+
+function resetAllItems(state) {
+ const today = new Date().toDateString();
+ state.lists.forEach((list) => {
+ // Lists with their own auto-reset schedule are governed by that schedule
+ // (applyRecurrenceResets), so the global weekly digest reset leaves them alone.
+ if (list.resetSchedule) return;
+ Object.keys(state.checks || {}).forEach((scope) => {
+ if (state.checks[scope] && state.checks[scope][list.id]) delete state.checks[scope][list.id];
+ });
+ list.lastCheckDate = today;
+ });
+}
+
+// Send the report NOW, scoped to what `user` may send (see teamsInScopeWithRecipients).
+// dryRun returns the planned recipients without sending (and without needing SMTP).
+async function sendScopedReport(user, { dryRun = false } = {}) {
+ const state = await getState();
+ const now = new Date();
+ const subjectDate = now.toLocaleDateString('en-US', { timeZone: REPORT_TZ, weekday: 'long', month: 'short', day: 'numeric' });
+ const targets = [];
+ if (isMasterAdmin(user) && REPORT_EMAIL) {
+ targets.push({ kind: 'global', to: REPORT_EMAIL, subject: `[Manual] Checklist Report — ${subjectDate}`, build: () => buildReport(state) });
+ }
+ for (const acct of teamsInScopeWithRecipients(state, user)) {
+ const label = teamLabel(acct);
+ targets.push({ kind: 'team', team: label, to: acct.emailRecipients, subject: `[Manual] ${label} — Checklist ${subjectDate}`, build: () => buildTeamReport(state, acct) });
+ }
+ if (!targets.length) {
+ throw new Error('No report recipients configured for your area. Add report email(s) to the team login(s) in Manage Access.');
+ }
+ if (dryRun) {
+ return { ok: true, dryRun: true, sentCount: targets.length, sends: targets.map((t) => ({ kind: t.kind, team: t.team || null, to: t.to })) };
+ }
+ const transporter = buildTransporter();
+ if (!transporter) throw new Error('SMTP is not configured (SMTP_HOST, SMTP_USER, SMTP_PASS)');
+ const sends = [];
+ for (const t of targets) {
+ const report = t.build();
+ await transporter.sendMail({
+ from: SMTP_FROM,
+ to: Array.isArray(t.to) ? t.to.join(', ') : t.to,
+ subject: t.subject,
+ text: report.text || '(no tasks)',
+ html: report.html || '(no tasks)'
+ });
+ sends.push({ kind: t.kind, team: t.team || null, to: t.to, done: report.totalDone, missed: report.totalMissed });
+ }
+ return { ok: true, sentCount: sends.length, sends };
+}
+
+async function sendDigestEmail({ manualTrigger = false } = {}) {
+ const transporter = buildTransporter();
+ if (!transporter) {
+ throw new Error('SMTP is not configured (SMTP_HOST, SMTP_USER, SMTP_PASS)');
+ }
+ const state = await getState();
+ const now = new Date();
+ const subjectDate = now.toLocaleDateString('en-US', {
+ timeZone: REPORT_TZ,
+ weekday: 'long',
+ month: 'short',
+ day: 'numeric'
+ });
+ const prefix = manualTrigger ? '[Manual] ' : '';
+ const sends = [];
+
+ // 1) Global digest to REPORT_EMAIL — unchanged behavior. Optional now.
+ if (REPORT_EMAIL) {
+ const report = buildReport(state);
+ await transporter.sendMail({
+ from: SMTP_FROM,
+ to: REPORT_EMAIL,
+ subject: `${prefix}Checklist Report — ${subjectDate}`,
+ text: report.text || '(checklist was empty)',
+ html: report.html || '(checklist was empty)'
+ });
+ sends.push({ kind: 'global', to: REPORT_EMAIL, done: report.totalDone, missed: report.totalMissed });
+ console.log(`[digest] Global sent to ${REPORT_EMAIL} — done: ${report.totalDone}, missed: ${report.totalMissed}`);
+ }
+
+ // 2) One email per team that has recipients configured.
+ for (const acct of teamsWithRecipients(state)) {
+ const report = buildTeamReport(state, acct);
+ const label = teamLabel(acct);
+ await transporter.sendMail({
+ from: SMTP_FROM,
+ to: acct.emailRecipients.join(', '),
+ subject: `${prefix}${label} — Checklist ${subjectDate}`,
+ text: report.text || '(no tasks)',
+ html: report.html || '(no tasks)'
+ });
+ sends.push({ kind: 'team', team: label, to: acct.emailRecipients, done: report.totalDone, missed: report.totalMissed });
+ console.log(`[digest] Team "${label}" sent to ${acct.emailRecipients.join(', ')} — done: ${report.totalDone}, missed: ${report.totalMissed}`);
+ }
+
+ if (sends.length === 0) {
+ throw new Error('No recipients configured. Set REPORT_EMAIL or add team recipients in Manage Users.');
+ }
+
+ // Reset EXACTLY ONCE, after every email is sent (scheduled runs only).
+ let didReset = false;
+ if (RESET_AFTER_DIGEST && !manualTrigger) {
+ resetAllItems(state);
+ await saveState(state);
+ didReset = true;
+ console.log('[digest] Reset all items for next week');
+ }
+
+ return { ok: true, sentCount: sends.length, sends, didReset };
+}
+
+// Schedule the weekly digest
+if (cron.validate(REPORT_CRON)) {
+ cron.schedule(
+ REPORT_CRON,
+ () => {
+ sendDigestEmail({ manualTrigger: false }).catch((err) => {
+ console.error('[digest] Failed:', err.message);
+ });
+ },
+ { timezone: REPORT_TZ }
+ );
+ console.log(`[cron] Digest scheduled: "${REPORT_CRON}" (${REPORT_TZ}) → ${REPORT_EMAIL || ''}`);
+} else {
+ console.warn(`[cron] Invalid REPORT_CRON "${REPORT_CRON}", digest disabled`);
+}
+
+// Daily cleanup of orphaned equipment photos (4:00 AM local).
+cron.schedule('0 4 * * *', () => { sweepOrphanUploads(); sweepOrphanDocs(); pruneOldRequests(); }, { timezone: REPORT_TZ });
+
+// Nightly data backup (3:30 AM local), plus one shortly after startup so there's
+// always a recent snapshot even between scheduled runs / right after a deploy.
+cron.schedule('30 3 * * *', () => { backupState(BACKUP_KEEP); backupMedia(BACKUP_KEEP); }, { timezone: REPORT_TZ });
+setTimeout(() => { backupState(BACKUP_KEEP); backupMedia(BACKUP_KEEP); }, 10000);
+
+// ─── Start ───────────────────────────────────────────────────────
+loadState().then((state) => {
+ cachedState = state;
+ app.listen(PORT, () => {
+ console.log(`Recurring Checklist server listening on http://0.0.0.0:${PORT}`);
+ });
+}).catch((err) => {
+ console.error('Fatal: failed to load state', err);
+ process.exit(1);
+});
diff --git a/styles.css b/styles.css
new file mode 100644
index 0000000..bd338dd
--- /dev/null
+++ b/styles.css
@@ -0,0 +1,648 @@
+* {
+ margin: 0;
+ padding: 0;
+ box-sizing: border-box;
+}
+
+body {
+ font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, sans-serif;
+ background: #1a1a1a;
+ color: #e0e0e0;
+ height: 100vh;
+ overflow: hidden;
+ touch-action: manipulation;
+}
+
+.loading-overlay {
+ position: fixed;
+ inset: 0;
+ background: #1a1a1a;
+ display: flex;
+ align-items: center;
+ justify-content: center;
+ flex-direction: column;
+ gap: 12px;
+ z-index: 9999;
+}
+
+.loading-spinner {
+ width: 48px;
+ height: 48px;
+ border: 4px solid #2f3542;
+ border-top-color: #3498db;
+ border-radius: 50%;
+ animation: spin 1s linear infinite;
+}
+
+.loading-text {
+ color: #cfd5e3;
+ font-size: 14px;
+ letter-spacing: 0.2px;
+}
+
+@keyframes spin {
+ to {
+ transform: rotate(360deg);
+ }
+}
+
+.app-container {
+ display: flex;
+ flex-direction: column;
+ height: 100vh;
+}
+
+header {
+ background: #2d2d2d;
+ color: white;
+ padding: 15px 20px;
+ box-shadow: 0 2px 8px rgba(0,0,0,0.3);
+ border-bottom: 1px solid #404040;
+ display: flex;
+ align-items: center;
+ justify-content: space-between;
+ gap: 16px;
+}
+
+.header-left {
+ display: flex;
+ align-items: center;
+ gap: 12px;
+}
+
+.app-tabs {
+ display: flex;
+ gap: 8px;
+}
+
+.tab-button {
+ padding: 8px 14px;
+ border-radius: 6px;
+ border: 1px solid #404040;
+ background: #1f1f1f;
+ color: #cfd5e3;
+ cursor: pointer;
+ font-weight: 600;
+ transition: all 0.2s;
+}
+
+.tab-button.active {
+ background: #3498db;
+ color: #fff;
+ border-color: #3498db;
+ box-shadow: 0 2px 8px rgba(52,152,219,0.35);
+}
+
+.tab-button:hover {
+ background: #2b2b2b;
+}
+
+.list-icon {
+ width: 24px;
+ height: 24px;
+ background: #3498db;
+ border-radius: 50%;
+}
+
+header h1 {
+ font-size: 20px;
+ font-weight: 600;
+ color: #e0e0e0;
+}
+
+.main-content {
+ flex: 1;
+ display: flex;
+ flex-direction: column;
+ overflow: hidden;
+ padding: 20px;
+ gap: 20px;
+ min-height: 0;
+}
+
+.tab-view {
+ display: none;
+}
+
+.tab-view.active {
+ display: flex;
+ flex-direction: column;
+ flex: 1;
+ min-height: 0;
+}
+
+.add-item-section {
+ background: #2d2d2d;
+ padding: 20px;
+ border-radius: 8px;
+ box-shadow: 0 2px 8px rgba(0,0,0,0.3);
+ border: 1px solid #404040;
+}
+
+.add-header {
+ display: flex;
+ justify-content: space-between;
+ align-items: center;
+ gap: 10px;
+}
+
+.add-list-target {
+ display: flex;
+ align-items: center;
+ gap: 8px;
+ font-size: 13px;
+ color: #b0b0b0;
+ white-space: nowrap;
+}
+
+.add-item-section h2 {
+ margin-bottom: 15px;
+ font-size: 16px;
+ color: #e0e0e0;
+ font-weight: 600;
+}
+
+.form-group {
+ margin-bottom: 15px;
+}
+
+.form-group label {
+ display: block;
+ margin-bottom: 5px;
+ font-weight: 500;
+ color: #b0b0b0;
+ font-size: 13px;
+}
+
+input[type="text"],
+textarea,
+select,
+input[type="number"] {
+ width: 100%;
+ padding: 10px;
+ border: 1px solid #404040;
+ border-radius: 4px;
+ font-size: 14px;
+ font-family: inherit;
+ background: #1a1a1a;
+ color: #e0e0e0;
+ touch-action: manipulation;
+}
+
+input[type="text"]:focus,
+textarea:focus,
+select:focus,
+input[type="number"]:focus {
+ outline: none;
+ border-color: #3498db;
+}
+
+input[type="text"]::placeholder,
+textarea::placeholder {
+ color: #666;
+}
+
+textarea {
+ resize: vertical;
+ min-height: 80px;
+ line-height: 1.5;
+}
+
+input[type="checkbox"] {
+ margin-right: 8px;
+ width: 18px;
+ height: 18px;
+ cursor: pointer;
+ vertical-align: middle;
+}
+
+.checkbox-label {
+ display: flex;
+ align-items: center;
+ gap: 8px;
+ line-height: 1.2;
+}
+
+.checkbox-label input[type="checkbox"] {
+ position: relative;
+ top: 18px; /* align with text */
+}
+
+#isRecurring {
+ position: static;
+ top: auto;
+ transform: translateY(-2px);
+}
+
+#recurrenceOptions {
+ background: #252525;
+ padding: 15px;
+ border-radius: 4px;
+ margin-top: 10px;
+ border: 1px solid #404040;
+}
+
+#recurrenceOptions > div {
+ margin-top: 10px;
+}
+
+.btn {
+ padding: 10px 20px;
+ border: none;
+ border-radius: 4px;
+ font-size: 14px;
+ cursor: pointer;
+ font-weight: 500;
+ transition: all 0.2s;
+ touch-action: manipulation;
+}
+
+.btn-primary {
+ background: #3498db;
+ color: white;
+}
+
+.btn-primary:hover {
+ background: #2980b9;
+}
+
+.btn-secondary {
+ background: #3a3a3a;
+ color: #e0e0e0;
+}
+
+.btn-secondary:hover {
+ background: #4a4a4a;
+}
+
+.btn-danger {
+ background: #e74c3c;
+ color: white;
+ padding: 6px 12px;
+ font-size: 12px;
+}
+
+.btn-danger:hover {
+ background: #c0392b;
+}
+
+.checklists-section {
+ flex: 1;
+ display: flex;
+ gap: 20px;
+ overflow: hidden;
+ min-height: 0;
+}
+
+.list-tabs-row {
+ display: flex;
+ justify-content: space-between;
+ align-items: center;
+}
+
+.list-tabs {
+ display: flex;
+ gap: 8px;
+ flex-wrap: wrap;
+}
+
+.list-menu {
+ display: flex;
+ flex-direction: column;
+ margin-top: 4px;
+}
+
+.list-menu-handle {
+ position: relative;
+ height: 16px;
+ cursor: pointer;
+ display: flex;
+ align-items: center;
+ justify-content: center;
+ background: transparent;
+ border-top: 1px solid #353535;
+ border-bottom: 1px solid #353535;
+ transition: background 0.2s ease;
+ touch-action: none;
+ user-select: none;
+}
+
+.list-menu-handle:hover {
+ background: #252525;
+}
+
+.list-menu-handle:focus-visible {
+ outline: 2px solid #3498db;
+ outline-offset: 2px;
+}
+
+.list-menu-grip {
+ width: 64px;
+ height: 4px;
+ background: #555;
+ border-radius: 2px;
+ transition: background 0.2s ease, width 0.2s ease;
+}
+
+.list-menu-handle:hover .list-menu-grip {
+ background: #3498db;
+}
+
+.list-menu.expanded .list-menu-grip {
+ background: #3498db;
+ width: 96px;
+}
+
+.list-menu-panel {
+ display: flex;
+ align-items: center;
+ gap: 8px;
+ flex-wrap: wrap;
+ justify-content: flex-end;
+ max-height: 0;
+ overflow: hidden;
+ opacity: 0;
+ padding: 0;
+ transition: max-height 0.25s ease, opacity 0.25s ease, padding 0.25s ease;
+}
+
+.list-menu.expanded .list-menu-panel {
+ max-height: 240px;
+ opacity: 1;
+ padding: 10px 0 4px;
+}
+
+.list-tab {
+ padding: 10px 14px;
+ border-radius: 6px;
+ border: 1px solid #404040;
+ background: #252525;
+ color: #cfd5e3;
+ cursor: grab;
+ transition: all 0.2s;
+ font-weight: 600;
+ user-select: none;
+}
+
+.list-tab.active {
+ background: #3498db;
+ border-color: #3498db;
+ color: #fff;
+ box-shadow: 0 2px 8px rgba(52,152,219,0.35);
+}
+
+.list-tab:hover {
+ background: #2d2d2d;
+}
+
+.list-tab.drag-over {
+ outline: 2px dashed #3498db;
+}
+
+.list-actions .btn-small {
+ padding: 8px 12px;
+ font-size: 13px;
+}
+
+.checklist-column {
+ flex: 1;
+ background: #2d2d2d;
+ border-radius: 8px;
+ box-shadow: 0 2px 8px rgba(0,0,0,0.3);
+ display: flex;
+ flex-direction: column;
+ overflow: hidden;
+ border: 1px solid #404040;
+ min-height: 0;
+}
+
+.checklist-column h2 {
+ padding: 15px 20px;
+ background: #252525;
+ border-bottom: 1px solid #404040;
+ font-size: 16px;
+ color: #e0e0e0;
+ font-weight: 600;
+}
+
+.checklist-list {
+ flex: 1;
+ overflow-y: auto;
+ padding: 15px;
+ min-height: 0;
+ max-height: 100%;
+}
+
+.checklist-item {
+ background: #353535;
+ border: 1px solid #404040;
+ border-radius: 6px;
+ padding: 15px;
+ margin-bottom: 12px;
+ transition: all 0.2s;
+}
+
+.checklist-item:hover {
+ box-shadow: 0 2px 8px rgba(0,0,0,0.4);
+ border-color: #505050;
+}
+
+.checklist-item.done {
+ opacity: 0.6;
+ background: #2a3a2a;
+ border-color: #3a4a3a;
+}
+
+.checklist-item.drag-over {
+ border-color: #3498db;
+ box-shadow: 0 2px 8px rgba(52,152,219,0.35);
+}
+
+.checklist-item-header {
+ display: flex;
+ align-items: flex-start;
+ gap: 12px;
+ margin-bottom: 10px;
+}
+
+.checklist-item input[type="checkbox"] {
+ margin-top: 2px;
+ width: 18px;
+ height: 18px;
+ cursor: pointer;
+ flex-shrink: 0;
+}
+
+.checklist-item-title {
+ flex: 1;
+ font-weight: 600;
+ font-size: 15px;
+ color: #e0e0e0;
+ word-wrap: break-word;
+ line-height: 1.4;
+}
+
+.checklist-item.done .checklist-item-title {
+ text-decoration: line-through;
+ color: #888;
+}
+
+.checklist-item-description {
+ margin-left: 30px;
+ margin-top: 8px;
+ color: #b0b0b0;
+ font-size: 13px;
+ line-height: 1.6;
+ word-wrap: break-word;
+ white-space: pre-wrap;
+}
+
+.checklist-item.done .checklist-item-description {
+ color: #666;
+}
+
+.checklist-item-recurrence {
+ margin-left: 30px;
+ margin-top: 10px;
+ font-size: 12px;
+ color: #3498db;
+ font-style: italic;
+ display: flex;
+ align-items: center;
+ gap: 6px;
+}
+
+.recurrence-icon {
+ width: 14px;
+ height: 14px;
+ display: inline-block;
+}
+
+.checklist-item-actions {
+ margin-left: 30px;
+ margin-top: 12px;
+ display: flex;
+ gap: 10px;
+}
+
+.empty-state {
+ text-align: center;
+ padding: 40px 20px;
+ color: #666;
+ font-style: italic;
+ font-size: 14px;
+}
+
+/* Scrollbar styling */
+.checklist-list::-webkit-scrollbar {
+ width: 10px;
+}
+
+.checklist-list::-webkit-scrollbar-track {
+ background: #252525;
+ border-radius: 4px;
+}
+
+.checklist-list::-webkit-scrollbar-thumb {
+ background: #505050;
+ border-radius: 4px;
+}
+
+.checklist-list::-webkit-scrollbar-thumb:hover {
+ background: #606060;
+}
+
+.modal-overlay {
+ position: fixed;
+ inset: 0;
+ background: rgba(0,0,0,0.55);
+ display: flex;
+ align-items: center;
+ justify-content: center;
+ z-index: 10000;
+}
+
+.modal {
+ background: #1f1f1f;
+ border: 1px solid #404040;
+ border-radius: 8px;
+ padding: 18px;
+ width: 320px;
+ box-shadow: 0 6px 24px rgba(0,0,0,0.45);
+ display: flex;
+ flex-direction: column;
+ gap: 12px;
+}
+
+.modal.wide {
+ width: 500px;
+}
+
+.modal .modal-body textarea {
+ min-height: 90px;
+}
+
+.modal h3 {
+ margin: 0;
+ color: #e0e0e0;
+ font-size: 16px;
+}
+
+.modal-message {
+ font-size: 13px;
+ color: #e0e0e0;
+ line-height: 1.5;
+}
+
+.modal-message.danger {
+ color: #ff8a80;
+}
+
+.modal input {
+ width: 100%;
+ padding: 10px;
+ border: 1px solid #404040;
+ border-radius: 4px;
+ background: #1a1a1a;
+ color: #e0e0e0;
+}
+
+.modal-actions {
+ display: flex;
+ justify-content: flex-end;
+ gap: 10px;
+}
+
+.loading-overlay {
+ position: fixed;
+ inset: 0;
+ background: #1a1a1a;
+ display: flex;
+ align-items: center;
+ justify-content: center;
+ flex-direction: column;
+ gap: 12px;
+ z-index: 9999;
+}
+
+.loading-spinner {
+ width: 48px;
+ height: 48px;
+ border: 4px solid #2f3542;
+ border-top-color: #3498db;
+ border-radius: 50%;
+ animation: spin 1s linear infinite;
+}
+
+.loading-text {
+ color: #cfd5e3;
+ font-size: 14px;
+ letter-spacing: 0.2px;
+}
+
+@keyframes spin {
+ to {
+ transform: rotate(360deg);
+ }
+}
+}}

Gear	${escapeHtml(gear)}
Where	${escapeHtml(scope)}
Reported by	${escapeHtml(inc.by)} · ${escapeHtml(when)}
Problem	${escapeHtml(inc.what)}

Recurring Checklist

Contents

1. What this is

Components

2. Network architecture

Hosts & URLs

3. Deployment steps (already completed)

3.1 Prepare the source bundle

3.2 Upload to the NAS

3.3 Configure .env

3.4 Build and start the container

3.5 Public hostname + TLS

4. How users access it

5. How admin manages it

6. Weekly email digest

7. Backups

8. Updating the app code

9. Troubleshooting / common ops

Useful one-liners (SSH into Chronicles-NA)

10. Credentials & references

Updating the Recurring Checklist server

Before you start

The 5 steps

Verify it worked

If something looks broken

Quick reference

Recurring Checklist

1. Overview

Architecture

2. Environment summary

3. Initial deployment

3.1 Prerequisites

3.2 Upload the bundle

3.3 Configure environment

3.4 Create the Container Manager project

3.5 Verify

4. Pushing app updates

4.1 Receive the update

4.2 Apply on the NAS

4.3 Rebuild the container

4.4 Rollback

5. Backups

5.1 What's backed up

5.2 Restoring

5.3 Backup verification

6. DDNS, reverse proxy & HTTPS

6.1 DDNS record

6.2 Reverse proxy rule (on Boba-Fett, 10.1.1.4)

6.3 TLS certificate

6.4 Router (UniFi)

7. Troubleshooting

8. Reference

8.1 Files in /volume1/docker/recurring-checklist/

8.2 Useful container actions

8.3 Server endpoints (for diagnostics)

Edit Task

Move Task

To Do

Done

Add New Task

What we collect

What we do not collect

Device permissions

Where the data lives

Other services

Who can see your information

Keeping and deleting it

Children

Changes

Contact

Offline

${escapeHtml(title)}

${escapeHtml(list.name)}

Open gear issues (${open.length}${down ? ` · ${down} down` : ''})

${escapeHtml(list.name)}

Notes

3.3 Configure `.env`

8.1 Files in `/volume1/docker/recurring-checklist/`