diff --git a/backend/pom.xml b/backend/pom.xml index 1d2b421..c12418b 100644 --- a/backend/pom.xml +++ b/backend/pom.xml @@ -52,6 +52,13 @@ 1.1.3 + + + dev.samstevens.totp + totp + 1.7.1 + + io.jsonwebtokenjjwt-api${jjwt.version} io.jsonwebtokenjjwt-impl${jjwt.version}runtime diff --git a/backend/src/main/java/com/zioinfo/esn/auth/AuthController.java b/backend/src/main/java/com/zioinfo/esn/auth/AuthController.java index 54fded8..ced3b8f 100644 --- a/backend/src/main/java/com/zioinfo/esn/auth/AuthController.java +++ b/backend/src/main/java/com/zioinfo/esn/auth/AuthController.java @@ -1,7 +1,11 @@ package com.zioinfo.esn.auth; import com.zioinfo.esn.common.ApiResponse; +import com.zioinfo.esn.uiws.auth.OtpAuthService; import com.zioinfo.esn.uiws.auth.TwoFactorService; +import com.zioinfo.esn.uiws.common.UiwsApiException; +import com.zioinfo.esn.uiws.common.UiwsErrorCode; +import jakarta.validation.Valid; import lombok.RequiredArgsConstructor; import org.springframework.web.bind.annotation.*; @@ -9,8 +13,10 @@ import java.util.Map; /** * ESN 인증 컨트롤러. - * - /login: 2FA off 면 { twofa:"false", token, type }, 2FA on 이면 { twofa:"true", verifyToken, step, maskedEmail }. - * - /verify: (UIWS 2FA 이식) verify-token + 인증코드 → access 토큰 발급. + * - /login: 2FA off 면 { twofa:"false", token, type }, 2FA on 이면 { twofa:"true", verifyToken, ... }. + * - /verify: (UIWS 이메일 2FA 이식) verify-token + 인증코드 → access 토큰 발급. + * - /verify-otp: (TOTP 이식) verify-token + 6자리 코드 → access 토큰 발급(최초 로그인이면 등록 확정). + * - /otp/*, /change-password: 마이페이지(본인, access 토큰 필요). * 기존 클라이언트는 응답에 token 필드가 그대로 존재(2FA off 시) → 회귀 0. */ @RestController @@ -20,18 +26,26 @@ public class AuthController { private final AuthService authService; private final TwoFactorService twoFactorService; + private final OtpAuthService otpAuthService; + private final JwtUtil jwtUtil; @PostMapping("/login") public ApiResponse> login(@RequestBody LoginRequest req) { return ApiResponse.ok(authService.login(req.username(), req.password())); } - /** UIWS 2FA 이식: 2차 인증 코드 검증 → access 토큰 발급. */ + /** UIWS 이메일 2FA 이식: 2차 인증 코드 검증 → access 토큰 발급. */ @PostMapping("/verify") public ApiResponse> verify(@RequestBody VerifyRequest req) { return ApiResponse.ok(twoFactorService.verify(req.verifyToken(), req.code())); } + /** TOTP 이식: 로그인 2단계 6자리 검증 → access 토큰 발급(최초 로그인이면 등록 확정). */ + @PostMapping("/verify-otp") + public ApiResponse> verifyOtp(@Valid @RequestBody OtpVerifyRequest req) { + return ApiResponse.ok(otpAuthService.verifyOtp(req.verifyToken(), req.code())); + } + @GetMapping("/me") public ApiResponse> me(@RequestHeader("Authorization") String header) { String token = header.replace("Bearer ", ""); @@ -44,6 +58,49 @@ public class AuthController { return ApiResponse.ok("로그아웃 성공", null); } + // ── 마이페이지: OTP 등록/재설정/해제 + 비밀번호 변경 (본인, access 토큰 필요) ────────── + + /** 마이페이지 OTP 등록/재설정 시작 → { secret, otpAuthUri, qrImage }(이 응답에서만 시크릿/QR 노출). */ + @PostMapping("/otp/setup") + public ApiResponse otpSetup(@RequestHeader("Authorization") String header) { + return ApiResponse.ok(otpAuthService.setup(requireUser(header))); + } + + /** 마이페이지 OTP 확인·활성화(앱 6자리 코드). */ + @PostMapping("/otp/confirm") + public ApiResponse> otpConfirm(@RequestHeader("Authorization") String header, + @Valid @RequestBody OtpConfirmRequest req) { + otpAuthService.confirm(requireUser(header), req.code()); + return ApiResponse.ok(Map.of("result", "ok")); + } + + /** 마이페이지 OTP 해제. */ + @PostMapping("/otp/disable") + public ApiResponse> otpDisable(@RequestHeader("Authorization") String header) { + otpAuthService.disable(requireUser(header)); + return ApiResponse.ok(Map.of("result", "ok")); + } + + /** 마이페이지 비밀번호 변경(현재 비번 검증 + BCrypt). 새 비번은 응답/로그 미포함. */ + @PostMapping("/change-password") + public ApiResponse> changePassword(@RequestHeader("Authorization") String header, + @Valid @RequestBody ChangePasswordRequest req) { + authService.changePassword(requireUser(header), req); + return ApiResponse.ok(Map.of("result", "ok")); + } + + /** + * Authorization 헤더에서 인증 사용자를 해석한다. verify-token(2fa 단계용)은 거부. + * (/api/auth/** 는 permitAll 이라 필터 인증이 없으므로 여기서 access 토큰을 명시 검증.) + */ + private String requireUser(String header) { + String token = header == null ? "" : header.replace("Bearer ", "").trim(); + if (token.isEmpty() || jwtUtil.isVerifyToken(token) || !jwtUtil.isValid(token)) { + throw new UiwsApiException(UiwsErrorCode.UNAUTHORIZED); + } + return jwtUtil.getUsername(token); + } + record LoginRequest(String username, String password) {} record VerifyRequest(String verifyToken, String code) {} diff --git a/backend/src/main/java/com/zioinfo/esn/auth/AuthService.java b/backend/src/main/java/com/zioinfo/esn/auth/AuthService.java index 0f070a2..2fd5a65 100644 --- a/backend/src/main/java/com/zioinfo/esn/auth/AuthService.java +++ b/backend/src/main/java/com/zioinfo/esn/auth/AuthService.java @@ -1,19 +1,22 @@ package com.zioinfo.esn.auth; +import com.zioinfo.esn.admin.AuditService; import com.zioinfo.esn.auth.mapper.UserAuthMapper; +import com.zioinfo.esn.uiws.auth.OtpAuthService; import com.zioinfo.esn.uiws.auth.TwoFactorService; import com.zioinfo.esn.uiws.common.UiwsApiException; import com.zioinfo.esn.uiws.common.UiwsErrorCode; import lombok.RequiredArgsConstructor; import org.springframework.security.crypto.password.PasswordEncoder; import org.springframework.stereotype.Service; +import org.springframework.transaction.annotation.Transactional; import java.util.Map; /** * ESN 인증 서비스. * - 기존 단일 JWT 로그인 보존(2FA off 또는 미설정 시 회귀 0). - * - UIWS 2FA 레이어(이메일 코드) 추가: 2FA on 이면 1차 통과 후 verify-token + 이메일코드 발급. + * - UIWS 2FA 레이어 추가. 로그인 2단계 우선순위: OTP(TOTP) > 이메일코드 > 단일 로그인. * 실패 누적 max-login-fail 회 시 계정 잠금. */ @Service @@ -24,6 +27,8 @@ public class AuthService { private final PasswordEncoder passwordEncoder; private final JwtUtil jwtUtil; private final TwoFactorService twoFactorService; + private final OtpAuthService otpAuthService; + private final AuditService auditService; /** * 1차 로그인. 2FA 활성 시 verify-token + 이메일코드 흐름으로 분기, @@ -43,8 +48,8 @@ public class AuthService { throw new RuntimeException("ERR-AUTH-001: 존재하지 않거나 비활성 계정"); } if (!passwordEncoder.matches(password, user.getPasswordHash())) { - // 2FA 활성 시 실패 누적/잠금. 비활성 시 기존 동작(메시지만) 유지. - if (twoFactorService.isEnabled()) { + // 2FA(OTP 또는 이메일) 활성 시 실패 누적/잠금. 비활성 시 기존 동작(메시지만) 유지. + if (otpAuthService.isEnabled() || twoFactorService.isEnabled()) { twoFactorService.recordLoginFailure(username); EsnUser after = userMapper.findByUsername(username); if (after != null && Boolean.TRUE.equals(after.getLocked())) { @@ -54,7 +59,11 @@ public class AuthService { throw new RuntimeException("ERR-AUTH-002: 비밀번호 불일치"); } - // 비밀번호 검증 통과 + // 비밀번호 검증 통과 — 2단계 우선순위: OTP > 이메일코드 > 단일 로그인 + if (otpAuthService.isEnabled()) { + // { twofa:true, verifyToken, verifyMethod:(OTP|OTP_SETUP), secret?, otpAuthUri?, qrImage? } + return otpAuthService.beginOtp(user); + } if (twoFactorService.isEnabled()) { Map step1 = twoFactorService.beginTwoFactor(user); return Map.of( @@ -78,4 +87,25 @@ public class AuthService { "tenant", jwtUtil.getTenant(token) != null ? jwtUtil.getTenant(token) : "" ); } + + /** + * 마이페이지 비밀번호 변경(현재 비밀번호 검증 + BCrypt 저장). UIWS changePassword 미러. + * 현재 비번 불일치 → PASSWORD_MISMATCH, 기존과 동일 → PASSWORD_SAME_AS_OLD. + * 새 비밀번호 평문은 로그/응답/감사에 절대 기록하지 않는다(보안 불변규칙). + */ + @Transactional + public void changePassword(String username, ChangePasswordRequest req) { + EsnUser user = userMapper.findByUsername(username); + if (user == null) { + throw new UiwsApiException(UiwsErrorCode.USER_NOT_FOUND); + } + if (!passwordEncoder.matches(req.currentPassword(), user.getPasswordHash())) { + throw new UiwsApiException(UiwsErrorCode.PASSWORD_MISMATCH); + } + if (passwordEncoder.matches(req.newPassword(), user.getPasswordHash())) { + throw new UiwsApiException(UiwsErrorCode.PASSWORD_SAME_AS_OLD); + } + userMapper.updatePasswordHash(username, passwordEncoder.encode(req.newPassword())); + auditService.log("PASSWORD_CHANGE", "USER", username, "본인 비밀번호 변경"); + } } diff --git a/backend/src/main/java/com/zioinfo/esn/auth/ChangePasswordRequest.java b/backend/src/main/java/com/zioinfo/esn/auth/ChangePasswordRequest.java new file mode 100644 index 0000000..344b2bc --- /dev/null +++ b/backend/src/main/java/com/zioinfo/esn/auth/ChangePasswordRequest.java @@ -0,0 +1,12 @@ +package com.zioinfo.esn.auth; + +import jakarta.validation.constraints.NotBlank; +import jakarta.validation.constraints.Size; + +/** 마이페이지 비밀번호 변경 요청 — 현재 비밀번호 검증 + 새 비밀번호(BCrypt 저장). */ +public record ChangePasswordRequest( + @NotBlank(message = "현재 비밀번호는 필수입니다.") String currentPassword, + @NotBlank(message = "새 비밀번호는 필수입니다.") + @Size(min = 8, message = "새 비밀번호는 최소 8자입니다.") String newPassword +) { +} diff --git a/backend/src/main/java/com/zioinfo/esn/auth/EsnUser.java b/backend/src/main/java/com/zioinfo/esn/auth/EsnUser.java index 5b7a17a..e60ca92 100644 --- a/backend/src/main/java/com/zioinfo/esn/auth/EsnUser.java +++ b/backend/src/main/java/com/zioinfo/esn/auth/EsnUser.java @@ -35,7 +35,9 @@ public class EsnUser { private Integer loginFailCount; /** 계정 잠금 여부(기본 false). */ private Boolean locked; - /** TOTP 시크릿(UIWS OTP 경로 대비, 현재 이메일 흐름에서는 미사용). */ + /** TOTP 시크릿(OTP 2차 인증). API 응답·로그 미노출(불변규칙). */ @JsonIgnore private String otpSecret; + /** OTP 등록 확정 여부(최초 로그인 verify 성공/마이페이지 confirm 시 true). */ + private Boolean otpEnabled; } diff --git a/backend/src/main/java/com/zioinfo/esn/auth/OtpConfirmRequest.java b/backend/src/main/java/com/zioinfo/esn/auth/OtpConfirmRequest.java new file mode 100644 index 0000000..5b2c64b --- /dev/null +++ b/backend/src/main/java/com/zioinfo/esn/auth/OtpConfirmRequest.java @@ -0,0 +1,7 @@ +package com.zioinfo.esn.auth; + +import jakarta.validation.constraints.NotBlank; + +/** Authenticator(TOTP) 등록 확인 요청 — 앱에 표시된 6자리 코드. */ +public record OtpConfirmRequest(@NotBlank String code) { +} diff --git a/backend/src/main/java/com/zioinfo/esn/auth/OtpSetupResponse.java b/backend/src/main/java/com/zioinfo/esn/auth/OtpSetupResponse.java new file mode 100644 index 0000000..f3e96bd --- /dev/null +++ b/backend/src/main/java/com/zioinfo/esn/auth/OtpSetupResponse.java @@ -0,0 +1,13 @@ +package com.zioinfo.esn.auth; + +/** + * Authenticator(TOTP) 등록 셋업 응답 — UIWS OtpSetupResponse 미러. + *
    + *
  • secret : Base32 TOTP 시크릿(수동 입력용)
    • + *
  • otpAuthUri : otpauth://totp/... (Authenticator 앱 직접 등록용 URI)
    • + *
  • qrImage : data:image/png;base64,... (QR 이미지, <img src> 로 표시)
    • + *
+ * 보안 불변: 이 응답(등록 순간)에서만 시크릿/QR 노출. 조회/목록/재조회 응답에 재노출 금지. + */ +public record OtpSetupResponse(String secret, String otpAuthUri, String qrImage) { +} diff --git a/backend/src/main/java/com/zioinfo/esn/auth/OtpVerifyRequest.java b/backend/src/main/java/com/zioinfo/esn/auth/OtpVerifyRequest.java new file mode 100644 index 0000000..b411a5c --- /dev/null +++ b/backend/src/main/java/com/zioinfo/esn/auth/OtpVerifyRequest.java @@ -0,0 +1,10 @@ +package com.zioinfo.esn.auth; + +import jakarta.validation.constraints.NotBlank; + +/** 로그인 2단계 TOTP 검증 요청 — { verifyToken, code }. */ +public record OtpVerifyRequest( + @NotBlank(message = "verifyToken은 필수입니다.") String verifyToken, + @NotBlank(message = "code는 필수입니다.") String code +) { +} diff --git a/backend/src/main/java/com/zioinfo/esn/auth/mapper/UserAuthMapper.java b/backend/src/main/java/com/zioinfo/esn/auth/mapper/UserAuthMapper.java index 6ed0ff9..cd7988a 100644 --- a/backend/src/main/java/com/zioinfo/esn/auth/mapper/UserAuthMapper.java +++ b/backend/src/main/java/com/zioinfo/esn/auth/mapper/UserAuthMapper.java @@ -30,6 +30,17 @@ public interface UserAuthMapper { /** 관리자 잠금 해제(실패 카운트/잠금 초기화). */ int unlock(@Param("username") String username); + // ── TOTP(OTP 2차 인증) 이식: 시크릿/등록 확정 갱신 (멱등 UPDATE) ───────────────── + + /** 보류 시크릿 저장(등록 확정 전). otp_enabled 은 건드리지 않는다(verify/confirm 에서 확정). */ + int updateOtpSecret(@Param("username") String username, @Param("secret") String secret); + + /** 등록 확정: otp_enabled=true (시크릿은 유지). */ + int enableOtp(@Param("username") String username); + + /** 해제/초기화: 시크릿 폐기 + otp_enabled=false. (마이페이지 해제) */ + int disableOtp(@Param("username") String username); + // ── 로그인 보조 이식: 회원가입(승인대기) / 아이디찾기 / 비밀번호 초기화 ────────── /** 아이디 중복 확인. */ diff --git a/backend/src/main/java/com/zioinfo/esn/config/AdminPasswordSeeder.java b/backend/src/main/java/com/zioinfo/esn/config/AdminPasswordSeeder.java new file mode 100644 index 0000000..3c2ba3b --- /dev/null +++ b/backend/src/main/java/com/zioinfo/esn/config/AdminPasswordSeeder.java @@ -0,0 +1,130 @@ +package com.zioinfo.esn.config; + +import com.zioinfo.esn.auth.mapper.UserAuthMapper; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.springframework.beans.factory.annotation.Value; +import org.springframework.boot.ApplicationArguments; +import org.springframework.boot.ApplicationRunner; +import org.springframework.core.annotation.Order; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.stereotype.Component; + +import javax.crypto.Cipher; +import javax.crypto.spec.GCMParameterSpec; +import javax.crypto.spec.SecretKeySpec; +import java.nio.charset.StandardCharsets; +import java.nio.file.Files; +import java.nio.file.Path; +import java.util.Arrays; +import java.util.Base64; + +/** + * admin 비밀번호 암호화 재시드(UIMS 방식 + 암호화 저장). + * + *

기동 시 멱등 재시드: + * 

+ *   ADMIN_KEY_FILE(hex 32바이트 키 파일) 로드 → ADMIN_PASSWORD_ENC(base64(nonce12 + ct + tag), AES-256-GCM) 복호
+ *   → admin 계정 BCrypt 해시 갱신(하드코딩 admin123 시드를 env 값으로 덮어씀).
+ *
+ * + *

안전 규칙: + *

    + *
  • env 미설정 / 키 로드 실패 / 복호 실패 시 재시드 스킵(기동 계속). WARN 로그에 값(평문/키/시크릿) 미기록.
    • + *
  • 새 admin 비밀번호 값은 서버 env 에만 존재 — 코드/DB/로그/응답에 평문 미기재(보안 불변규칙).
    • + *
  • 키 값은 별도 파일(root 600)에만 — env/코드/git 에 키 미기재. 여기서는 파일 경로만 읽는다.
    • + *
+ * + *

schema.sql init(admin 시드) 이후 실행되어 기존 해시를 덮어쓴다(멱등: 매 기동 동일 결과). + */ +@Slf4j +@Component +@Order(Integer.MIN_VALUE + 10) +@RequiredArgsConstructor +public class AdminPasswordSeeder implements ApplicationRunner { + + private static final String ADMIN_USERNAME = "admin"; + private static final int GCM_TAG_BITS = 128; + private static final int NONCE_LEN = 12; + + @Value("${ADMIN_PASSWORD_ENC:}") + private String adminPasswordEnc; + + @Value("${ADMIN_KEY_FILE:}") + private String adminKeyFile; + + private final UserAuthMapper userMapper; + private final PasswordEncoder passwordEncoder; + + @Override + public void run(ApplicationArguments args) { + if (isBlank(adminPasswordEnc) || isBlank(adminKeyFile)) { + log.info("[admin-reseed] ADMIN_PASSWORD_ENC/ADMIN_KEY_FILE 미설정 — 재시드 스킵(기동 계속)"); + return; + } + char[] plain = null; + byte[] key = null; + try { + key = loadHexKey(adminKeyFile); // hex 32바이트 → 32B (AES-256) + plain = decrypt(adminPasswordEnc, key); // base64(nonce12+ct+tag) → 평문 + String hash = passwordEncoder.encode(new String(plain)); + int updated = userMapper.updatePasswordHash(ADMIN_USERNAME, hash); + if (updated > 0) { + log.info("[admin-reseed] admin 비밀번호 env 값으로 재시드 완료(멱등)"); + } else { + log.warn("[admin-reseed] admin 계정 미존재 — 재시드 스킵"); + } + } catch (Exception e) { + // 값 미기록: 예외 클래스명만(메시지에 평문/키가 섞일 여지 차단) + log.warn("[admin-reseed] 복호/재시드 실패 — 스킵(기동 계속). cause={}", e.getClass().getSimpleName()); + } finally { + if (plain != null) Arrays.fill(plain, '\0'); + if (key != null) Arrays.fill(key, (byte) 0); + } + } + + /** 키 파일(hex 문자열, 공백/개행 무시)을 32바이트 키로 로드. 32바이트가 아니면 예외. */ + private static byte[] loadHexKey(String path) throws Exception { + String hex = Files.readString(Path.of(path), StandardCharsets.UTF_8) + .replaceAll("\\s", ""); + byte[] key = hexToBytes(hex); + if (key.length != 32) { + throw new IllegalStateException("key length != 32 bytes"); + } + return key; + } + + /** base64(nonce12 + ciphertext + tag) → AES-256-GCM 복호 평문(char[]). */ + private static char[] decrypt(String encBase64, byte[] key) throws Exception { + byte[] blob = Base64.getDecoder().decode(encBase64.trim()); + if (blob.length <= NONCE_LEN) { + throw new IllegalStateException("cipher blob too short"); + } + byte[] nonce = Arrays.copyOfRange(blob, 0, NONCE_LEN); + byte[] ct = Arrays.copyOfRange(blob, NONCE_LEN, blob.length); + Cipher cipher = Cipher.getInstance("AES/GCM/NoPadding"); + cipher.init(Cipher.DECRYPT_MODE, new SecretKeySpec(key, "AES"), + new GCMParameterSpec(GCM_TAG_BITS, nonce)); + byte[] out = cipher.doFinal(ct); + char[] chars = new String(out, StandardCharsets.UTF_8).toCharArray(); + Arrays.fill(out, (byte) 0); + return chars; + } + + private static byte[] hexToBytes(String hex) { + int len = hex.length(); + if (len % 2 != 0) { + throw new IllegalStateException("odd hex length"); + } + byte[] out = new byte[len / 2]; + for (int i = 0; i < len; i += 2) { + out[i / 2] = (byte) ((Character.digit(hex.charAt(i), 16) << 4) + + Character.digit(hex.charAt(i + 1), 16)); + } + return out; + } + + private static boolean isBlank(String s) { + return s == null || s.isBlank(); + } +} diff --git a/backend/src/main/java/com/zioinfo/esn/controller/UserController.java b/backend/src/main/java/com/zioinfo/esn/controller/UserController.java index 4ad8205..ad99ddb 100644 --- a/backend/src/main/java/com/zioinfo/esn/controller/UserController.java +++ b/backend/src/main/java/com/zioinfo/esn/controller/UserController.java @@ -70,6 +70,16 @@ public class UserController { return ApiResponse.ok(active ? "활성화 완료" : "비활성화 완료", u); } + /** 관리자 OTP 초기화(사용자 관리 화면 버튼) — OTP 시크릿 폐기 → 다음 로그인 재등록 유도. */ + @PostMapping("/{id}/otp-reset") + public ApiResponse resetOtp(@PathVariable Long id) { + EsnUser u = service.resetOtp(id); + // 보안: OTP 시크릿 값은 기록하지 않는다(대상 id/username 요약만). + audit.log(u != null ? u.getTenantCode() : null, "USER_OTP_RESET", "USER", + String.valueOf(id), "OTP 초기화(다음 로그인 재등록)", true); + return ApiResponse.ok("OTP 초기화 완료", u); + } + @DeleteMapping("/{id}") public ApiResponse delete(@PathVariable Long id) { service.delete(id); diff --git a/backend/src/main/java/com/zioinfo/esn/mapper/UserMapper.java b/backend/src/main/java/com/zioinfo/esn/mapper/UserMapper.java index 2cfb891..3e6597c 100644 --- a/backend/src/main/java/com/zioinfo/esn/mapper/UserMapper.java +++ b/backend/src/main/java/com/zioinfo/esn/mapper/UserMapper.java @@ -15,4 +15,7 @@ public interface UserMapper { int update(EsnUser user); int updatePassword(@Param("id") Long id, @Param("passwordHash") String passwordHash); int delete(@Param("id") Long id); + + /** 관리자 OTP 초기화: 대상 사용자의 OTP 시크릿 폐기 + 등록 해제(다음 로그인 재등록 유도). */ + int resetOtpById(@Param("id") Long id); } diff --git a/backend/src/main/java/com/zioinfo/esn/service/UserService.java b/backend/src/main/java/com/zioinfo/esn/service/UserService.java index 07670df..434f73f 100644 --- a/backend/src/main/java/com/zioinfo/esn/service/UserService.java +++ b/backend/src/main/java/com/zioinfo/esn/service/UserService.java @@ -44,4 +44,13 @@ public class UserService { } public void delete(Long id) { mapper.delete(id); } + + /** + * 관리자 OTP 초기화(사용자 관리 화면 버튼). 대상 사용자의 OTP 시크릿을 폐기하고 등록을 해제한다. + * 사용자는 다음 로그인 시 OTP_SETUP(재등록) 플로우를 탄다. 시크릿은 응답/로그에 노출하지 않는다. + */ + public EsnUser resetOtp(Long id) { + mapper.resetOtpById(id); + return mapper.findById(id); + } } diff --git a/backend/src/main/java/com/zioinfo/esn/uiws/auth/OtpAuthService.java b/backend/src/main/java/com/zioinfo/esn/uiws/auth/OtpAuthService.java new file mode 100644 index 0000000..169974c --- /dev/null +++ b/backend/src/main/java/com/zioinfo/esn/uiws/auth/OtpAuthService.java @@ -0,0 +1,167 @@ +package com.zioinfo.esn.uiws.auth; + +import com.zioinfo.esn.admin.AuditService; +import com.zioinfo.esn.auth.EsnUser; +import com.zioinfo.esn.auth.JwtUtil; +import com.zioinfo.esn.auth.OtpSetupResponse; +import com.zioinfo.esn.auth.mapper.UserAuthMapper; +import com.zioinfo.esn.uiws.common.UiwsApiException; +import com.zioinfo.esn.uiws.common.UiwsErrorCode; +import com.zioinfo.esn.uiws.config.UiwsProperties; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.springframework.stereotype.Service; +import org.springframework.transaction.annotation.Transactional; + +import java.util.LinkedHashMap; +import java.util.Map; + +/** + * TOTP(OTP 2차 인증) 오케스트레이션 레이어 — UIWS AuthService 의 OTP 경로 미러. + * + *

흐름: + *

    + *
  1. 1차 로그인 성공 → {@link #beginOtp}: verify-token 발급 + (미등록이면 보류 시크릿+QR) 반환.
    2. + *
  2. {@code POST /verify-otp}(verifyToken+code) → {@link #verifyOtp}: 6자리 검증 후 access 발급. + * 최초 로그인이면 등록 확정(otp_enabled=true).
    3. + *
  3. 마이페이지: {@link #setup}/{@link #confirm}/{@link #disable}.
    4. + *
+ * + *

보안 불변: 시크릿·QR·otpauth URI 는 setup/OTP_SETUP 응답에서만 노출. 로그·감사에 시크릿/코드 미기록. + * 기존 auth(JWT·RBAC) 엔진 교체 없음 — TOTP 레이어만 추가. access 는 ESN JwtUtil(3-클레임) 정책 재사용. + */ +@Slf4j +@Service +@RequiredArgsConstructor +public class OtpAuthService { + + private final UserAuthMapper userMapper; + private final JwtUtil jwtUtil; + private final TotpService totpService; + private final UiwsProperties properties; + private final AuditService auditService; + + /** 로그인 2단계에 OTP 경로를 사용할지. */ + public boolean isEnabled() { + return properties.getAuth().isOtpEnabled(); + } + + private static boolean blank(String s) { + return s == null || s.isBlank(); + } + + /** + * 1차 로그인 성공 후 OTP 2단계 시작. + * @return 미등록: { twofa:true, verifyToken, verifyMethod:OTP_SETUP, secret, otpAuthUri, qrImage } + * 등록됨: { twofa:true, verifyToken, verifyMethod:OTP } + */ + @Transactional + public Map beginOtp(EsnUser user) { + long tokenValidity = properties.getAuth().getVerifyTokenValiditySeconds(); + String verifyToken = jwtUtil.generateVerifyToken(user.getUsername(), tokenValidity); + // 성공 시 실패카운트 초기화(잠금 회복) + userMapper.resetLoginFail(user.getUsername()); + + Map resp = new LinkedHashMap<>(); + resp.put("twofa", "true"); + resp.put("verifyToken", verifyToken); + + if (blank(user.getOtpSecret())) { + // 미등록 최초 로그인 — 보류 시크릿 발급 + QR(이 응답에서만 노출) + String secret = totpService.generateSecret(); + userMapper.updateOtpSecret(user.getUsername(), secret); + resp.put("verifyMethod", "OTP_SETUP"); + resp.put("secret", secret); + resp.put("otpAuthUri", totpService.otpAuthUri(secret, user.getUsername())); + resp.put("qrImage", totpService.qrImageDataUri(secret, user.getUsername())); + } else { + resp.put("verifyMethod", "OTP"); + } + return resp; + } + + /** + * 2단계 검증: verify-token + 6자리 코드 → access 발급. 최초 로그인이면 등록 확정. + * @return { token, type, username, role, tenant } (ESN 2FA verify 응답 shape 동일) + */ + @Transactional + public Map verifyOtp(String verifyToken, String code) { + String username = jwtUtil.parseVerifyTokenUsername(verifyToken); + if (username == null) { + throw new UiwsApiException(UiwsErrorCode.VERIFY_TOKEN_INVALID); + } + EsnUser user = userMapper.findByUsername(username); + if (user == null) { + throw new UiwsApiException(UiwsErrorCode.VERIFY_TOKEN_INVALID); + } + if (Boolean.TRUE.equals(user.getLocked())) { + throw new UiwsApiException(UiwsErrorCode.ACCOUNT_LOCKED); + } + if (!totpService.verify(user.getOtpSecret(), code)) { + // OTP 오입력도 실패 카운트에 합산(정책) — 임계 도달 시 잠금. + userMapper.incrementLoginFail(username, properties.getAuth().getMaxLoginFail()); + throw new UiwsApiException(UiwsErrorCode.VERIFY_CODE_INVALID); + } + + // 최초 로그인(보류 시크릿) → 등록 확정(멱등) + if (!Boolean.TRUE.equals(user.getOtpEnabled())) { + userMapper.enableOtp(username); + auditService.log("OTP_ENROLL", "USER", username, "최초 로그인 OTP 등록 확정"); + } + userMapper.resetLoginFail(username); + userMapper.updateLastLogin(username); + + String access = jwtUtil.generate(user.getUsername(), user.getRole(), user.getTenantCode()); + Map resp = new LinkedHashMap<>(); + resp.put("token", access); + resp.put("type", "Bearer"); + resp.put("username", user.getUsername()); + resp.put("role", user.getRole() == null ? "" : user.getRole()); + resp.put("tenant", user.getTenantCode() == null ? "" : user.getTenantCode()); + return resp; + } + + /** 마이페이지 OTP 등록/재설정 시작: 새 보류 시크릿 발급(기존 시크릿 무효화) + QR 반환. */ + @Transactional + public OtpSetupResponse setup(String username) { + EsnUser user = userMapper.findByUsername(username); + if (user == null) { + throw new UiwsApiException(UiwsErrorCode.USER_NOT_FOUND); + } + String secret = totpService.generateSecret(); + userMapper.updateOtpSecret(username, secret); // 확정 전엔 otp_enabled 유지(confirm 에서 재확정) + auditService.log("OTP_SETUP", "USER", username, "OTP 등록/재설정 시작(새 시크릿 발급)"); + return new OtpSetupResponse( + secret, + totpService.otpAuthUri(secret, username), + totpService.qrImageDataUri(secret, username)); + } + + /** 마이페이지 OTP 확인·활성화: 앱 코드 검증 성공 시 otp_enabled=true. */ + @Transactional + public void confirm(String username, String code) { + EsnUser user = userMapper.findByUsername(username); + if (user == null) { + throw new UiwsApiException(UiwsErrorCode.USER_NOT_FOUND); + } + if (blank(user.getOtpSecret())) { + throw new UiwsApiException(UiwsErrorCode.OTP_NOT_REGISTERED); + } + if (!totpService.verify(user.getOtpSecret(), code)) { + throw new UiwsApiException(UiwsErrorCode.VERIFY_CODE_INVALID); + } + userMapper.enableOtp(username); + auditService.log("OTP_ENABLE", "USER", username, "OTP 2차 인증 활성화"); + } + + /** 마이페이지 OTP 해제: 시크릿 폐기 + otp_enabled=false. */ + @Transactional + public void disable(String username) { + EsnUser user = userMapper.findByUsername(username); + if (user == null) { + throw new UiwsApiException(UiwsErrorCode.USER_NOT_FOUND); + } + userMapper.disableOtp(username); + auditService.log("OTP_DISABLE", "USER", username, "OTP 2차 인증 해제"); + } +} diff --git a/backend/src/main/java/com/zioinfo/esn/uiws/auth/TotpService.java b/backend/src/main/java/com/zioinfo/esn/uiws/auth/TotpService.java new file mode 100644 index 0000000..4cd9680 --- /dev/null +++ b/backend/src/main/java/com/zioinfo/esn/uiws/auth/TotpService.java @@ -0,0 +1,81 @@ +package com.zioinfo.esn.uiws.auth; + +import dev.samstevens.totp.code.CodeGenerator; +import dev.samstevens.totp.code.CodeVerifier; +import dev.samstevens.totp.code.DefaultCodeGenerator; +import dev.samstevens.totp.code.DefaultCodeVerifier; +import dev.samstevens.totp.code.HashingAlgorithm; +import dev.samstevens.totp.exceptions.QrGenerationException; +import dev.samstevens.totp.qr.QrData; +import dev.samstevens.totp.qr.QrGenerator; +import dev.samstevens.totp.qr.ZxingPngQrGenerator; +import dev.samstevens.totp.secret.DefaultSecretGenerator; +import dev.samstevens.totp.secret.SecretGenerator; +import dev.samstevens.totp.time.SystemTimeProvider; +import dev.samstevens.totp.time.TimeProvider; +import dev.samstevens.totp.util.Utils; +import org.springframework.stereotype.Service; + +/** + * TOTP(RFC 6238, HMAC-SHA1, 30s, 6자리, ±1 윈도우) 코덱 — UIWS TotpService 미러. + * 시크릿(otp_secret)은 esn_user 에 저장되어 있다고 가정. issuer 만 GUARDiA-ESN 로 교체. + * + *

보안 불변: 시크릿·otpauth URI·QR 은 등록 순간 발급 응답에서만 노출. 로그 기록 금지. + */ +@Service +public class TotpService { + + private final TimeProvider timeProvider = new SystemTimeProvider(); + private final CodeGenerator codeGenerator = new DefaultCodeGenerator(HashingAlgorithm.SHA1, 6); + private final SecretGenerator secretGenerator = new DefaultSecretGenerator(); + private final CodeVerifier codeVerifier = buildVerifier(); + private final QrGenerator qrGenerator = new ZxingPngQrGenerator(); + + private static final String ISSUER = "GUARDiA-ESN"; + + private CodeVerifier buildVerifier() { + DefaultCodeVerifier verifier = new DefaultCodeVerifier(codeGenerator, timeProvider); + verifier.setTimePeriod(30); + verifier.setAllowedTimePeriodDiscrepancy(1); // ±1 윈도우 허용(시계 오차) + return verifier; + } + + /** 신규 OTP 시크릿 생성(최초 로그인/마이페이지 OTP 등록용). */ + public String generateSecret() { + return secretGenerator.generate(); + } + + /** 주어진 시크릿에 대해 사용자 입력 코드가 유효한지 검증. */ + public boolean verify(String secret, String code) { + if (secret == null || secret.isBlank() || code == null || code.isBlank()) { + return false; + } + return codeVerifier.isValidCode(secret, code.trim()); + } + + /** Authenticator 앱 직접 등록용 otpauth:// URI. */ + public String otpAuthUri(String secret, String userId) { + return buildQrData(secret, userId).getUri(); + } + + /** QR 이미지(data:image/png;base64,...) — 앱으로 스캔해 등록. */ + public String qrImageDataUri(String secret, String userId) { + try { + byte[] image = qrGenerator.generate(buildQrData(secret, userId)); + return Utils.getDataUriForImage(image, qrGenerator.getImageMimeType()); + } catch (QrGenerationException e) { + throw new IllegalStateException("OTP QR 생성 실패", e); + } + } + + private QrData buildQrData(String secret, String userId) { + return new QrData.Builder() + .label(userId) + .secret(secret) + .issuer(ISSUER) + .algorithm(HashingAlgorithm.SHA1) + .digits(6) + .period(30) + .build(); + } +} diff --git a/backend/src/main/java/com/zioinfo/esn/uiws/common/UiwsErrorCode.java b/backend/src/main/java/com/zioinfo/esn/uiws/common/UiwsErrorCode.java index 08fdecf..9fb8b96 100644 --- a/backend/src/main/java/com/zioinfo/esn/uiws/common/UiwsErrorCode.java +++ b/backend/src/main/java/com/zioinfo/esn/uiws/common/UiwsErrorCode.java @@ -12,6 +12,7 @@ public enum UiwsErrorCode { // 공통 INVALID_REQUEST("ERR-UIWS-400", "요청이 올바르지 않습니다."), + UNAUTHORIZED("ERR-UIWS-401", "인증이 필요합니다."), FORBIDDEN("ERR-UIWS-403", "접근 권한이 없습니다."), NOT_FOUND("ERR-UIWS-404", "대상을 찾을 수 없습니다."), @@ -37,6 +38,11 @@ public enum UiwsErrorCode { VERIFY_TOKEN_INVALID("ERR-UIWS-2FA-401", "2차 검증 토큰이 유효하지 않거나 만료되었습니다."), VERIFY_CODE_INVALID("ERR-UIWS-2FA-401C", "인증 코드가 올바르지 않거나 만료되었습니다."), ACCOUNT_LOCKED("ERR-UIWS-2FA-LOCK", "로그인 실패 횟수 초과로 계정이 잠겼습니다. 관리자에게 문의하세요."), + OTP_NOT_REGISTERED("ERR-UIWS-2FA-OTP404", "OTP가 등록되어 있지 않습니다. 먼저 등록을 진행하세요."), + + // 비밀번호 변경(마이페이지) + PASSWORD_MISMATCH("ERR-UIWS-PW-401", "현재 비밀번호가 일치하지 않습니다."), + PASSWORD_SAME_AS_OLD("ERR-UIWS-PW-422", "새 비밀번호가 기존 비밀번호와 동일합니다."), // system(권한관리) — UIWS system 모듈 이식 DUPLICATE_KEY("ERR-UIWS-SYS-409D", "이미 존재하는 항목입니다."), diff --git a/backend/src/main/java/com/zioinfo/esn/uiws/config/UiwsProperties.java b/backend/src/main/java/com/zioinfo/esn/uiws/config/UiwsProperties.java index c52855c..4b0d5a4 100644 --- a/backend/src/main/java/com/zioinfo/esn/uiws/config/UiwsProperties.java +++ b/backend/src/main/java/com/zioinfo/esn/uiws/config/UiwsProperties.java @@ -24,6 +24,11 @@ public class UiwsProperties { public static class Auth { /** 2FA 레이어 on/off. 기본 on(켜짐). off 시 기존 단일 JWT 로그인 흐름 유지(회귀 0). */ private boolean twofaEnabled = true; + /** + * OTP(TOTP) 2단계 on/off. 기본 on. 로그인 2단계 우선순위: + * otpEnabled → OTP, (off 이고 twofaEnabled) → 이메일코드, (둘 다 off) → 단일 로그인. + */ + private boolean otpEnabled = true; /** 1차 통과 후 verify-token 유효시간(초). 계획서 300(5분). */ private long verifyTokenValiditySeconds = 300; /** 이메일 인증코드 유효시간(초). 계획서 300(5분). */ diff --git a/backend/src/main/resources/application.yml b/backend/src/main/resources/application.yml index f6fbbde..0ab6d42 100644 --- a/backend/src/main/resources/application.yml +++ b/backend/src/main/resources/application.yml @@ -30,6 +30,8 @@ spring: - classpath:db/93_esn_login_helper.sql # AI 플랫폼(Claude 전환) provider/모델 설정 시드 — esn_setting ai.* (멱등) - classpath:db/94_seed_ai_config.sql + # TOTP(OTP 2차 인증) — esn_user otp_enabled ALTER (멱등, otp_secret 은 91 에서 이미 추가) + - classpath:db/95_auth_otp.sql web: resources: static-locations: classpath:/static/ @@ -63,6 +65,19 @@ guardia: secret: ${JWT_SECRET:ZioInfoEsnJwtSecret2026VeryLongSecretKeyForHS256AlgorithmAtLeast256Bits} expiration: 86400000 +# UIWS 이식 인증 레이어(2FA/OTP). 미설정이어도 UiwsProperties 안전 기본값으로 동작. +# 로그인 2단계 우선순위: otp-enabled → OTP, (off 이고 twofa-enabled) → 이메일코드, (둘 다 off) → 단일 로그인. +esn: + uiws: + auth: + # OTP(TOTP) 2단계 on/off. off 로 두면 기존 이메일 2FA/단일 로그인 흐름 유지(회귀 0). + otp-enabled: ${ESN_OTP_ENABLED:true} + # 이메일 코드 2FA on/off. OTP on 이면 OTP 가 우선(이메일 미사용). + twofa-enabled: ${ESN_TWOFA_ENABLED:true} + verify-token-validity-seconds: ${ESN_VERIFY_TOKEN_TTL:300} + email-code-validity-seconds: ${ESN_EMAIL_CODE_TTL:300} + max-login-fail: ${ESN_MAX_LOGIN_FAIL:5} + management: endpoints: web: diff --git a/backend/src/main/resources/db/95_auth_otp.sql b/backend/src/main/resources/db/95_auth_otp.sql new file mode 100644 index 0000000..afe3816 --- /dev/null +++ b/backend/src/main/resources/db/95_auth_otp.sql @@ -0,0 +1,13 @@ +-- ===================================================================== +-- TOTP(OTP 2차 인증) 이식 — esn_user 멱등 ALTER +-- ===================================================================== +-- otp_secret 은 db/91_uiws_port.sql 에서 이미 ADD(VARCHAR(255)). +-- 여기서는 등록 확정 플래그 otp_enabled 만 추가한다. +-- schema-locations 마지막에 등재(mode=always + continue-on-error) → 멱등 재실행 안전. + +ALTER TABLE esn_user ADD COLUMN IF NOT EXISTS otp_enabled BOOLEAN DEFAULT false; + +COMMENT ON COLUMN esn_user.otp_secret IS 'TOTP 시크릿(보류/확정 공용). API 응답·로그 미노출.'; +COMMENT ON COLUMN esn_user.otp_enabled IS 'OTP 등록 확정 여부(최초 로그인 verify 성공 시 true).'; + +-- end 95_auth_otp.sql diff --git a/backend/src/main/resources/db/ops_otp_reset_all.sql b/backend/src/main/resources/db/ops_otp_reset_all.sql new file mode 100644 index 0000000..edccf06 --- /dev/null +++ b/backend/src/main/resources/db/ops_otp_reset_all.sql @@ -0,0 +1,18 @@ +-- ===================================================================== +-- [1회 운영 작업] 전 사용자 OTP 초기화 — 멱등 +-- ===================================================================== +-- 목적: 인증 강화 전환 시점에 기존 사용자 OTP 를 초기화한다. +-- 다음 로그인부터 OTP_SETUP(QR 재등록) 플로우를 타게 한다(UIMS 방식). +-- +-- ★ 이 파일은 schema-locations 에 등재하지 않는다(자동 재실행 금지). +-- 운영자가 서버에서 1회 수동 적용: +-- psql -U guardia_esn_user -d guardia_esn_db -f db/ops_otp_reset_all.sql +-- +-- 멱등: 여러 번 실행해도 결과 동일(모두 NULL/false). + +UPDATE esn_user + SET otp_secret = NULL, + otp_enabled = false + WHERE otp_secret IS NOT NULL OR otp_enabled IS DISTINCT FROM false; + +-- end ops_otp_reset_all.sql diff --git a/backend/src/main/resources/mapper/UserAuthMapper.xml b/backend/src/main/resources/mapper/UserAuthMapper.xml index aae7eb6..b8bdb16 100644 --- a/backend/src/main/resources/mapper/UserAuthMapper.xml +++ b/backend/src/main/resources/mapper/UserAuthMapper.xml @@ -23,12 +23,13 @@ + @@ -86,7 +87,7 @@ @@ -95,4 +96,18 @@ UPDATE esn_user SET password_hash = #{passwordHash} WHERE username = #{username} + + + + UPDATE esn_user SET otp_secret = #{secret} WHERE username = #{username} + + + + UPDATE esn_user SET otp_enabled = true WHERE username = #{username} + + + + UPDATE esn_user SET otp_secret = NULL, otp_enabled = false WHERE username = #{username} + + diff --git a/backend/src/main/resources/mapper/UserMapper.xml b/backend/src/main/resources/mapper/UserMapper.xml index 3e0353b..ce009f3 100644 --- a/backend/src/main/resources/mapper/UserMapper.xml +++ b/backend/src/main/resources/mapper/UserMapper.xml @@ -58,4 +58,9 @@ DELETE FROM esn_user WHERE id = #{id} + + + UPDATE esn_user SET otp_secret = NULL, otp_enabled = false WHERE id = #{id} + + diff --git a/backend/src/main/resources/static/assets/index-D38igG4E.css b/backend/src/main/resources/static/assets/index-D38igG4E.css new file mode 100644 index 0000000..1b414bf --- /dev/null +++ b/backend/src/main/resources/static/assets/index-D38igG4E.css @@ -0,0 +1 @@ +*,:before,:after{--tw-border-spacing-x: 0;--tw-border-spacing-y: 0;--tw-translate-x: 0;--tw-translate-y: 0;--tw-rotate: 0;--tw-skew-x: 0;--tw-skew-y: 0;--tw-scale-x: 1;--tw-scale-y: 1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness: proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width: 0px;--tw-ring-offset-color: #fff;--tw-ring-color: rgb(59 130 246 / .5);--tw-ring-offset-shadow: 0 0 #0000;--tw-ring-shadow: 0 0 #0000;--tw-shadow: 0 0 #0000;--tw-shadow-colored: 0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }::backdrop{--tw-border-spacing-x: 0;--tw-border-spacing-y: 0;--tw-translate-x: 0;--tw-translate-y: 0;--tw-rotate: 0;--tw-skew-x: 0;--tw-skew-y: 0;--tw-scale-x: 1;--tw-scale-y: 1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness: proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width: 0px;--tw-ring-offset-color: #fff;--tw-ring-color: rgb(59 130 246 / .5);--tw-ring-offset-shadow: 0 0 #0000;--tw-ring-shadow: 0 0 #0000;--tw-shadow: 0 0 #0000;--tw-shadow-colored: 0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }*,:before,:after{box-sizing:border-box;border-width:0;border-style:solid;border-color:#e5e7eb}:before,:after{--tw-content: ""}html,:host{line-height:1.5;-webkit-text-size-adjust:100%;-moz-tab-size:4;-o-tab-size:4;tab-size:4;font-family:ui-sans-serif,system-ui,sans-serif,"Apple Color Emoji","Segoe UI Emoji",Segoe UI Symbol,"Noto Color Emoji";font-feature-settings:normal;font-variation-settings:normal;-webkit-tap-highlight-color:transparent}body{margin:0;line-height:inherit}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-feature-settings:normal;font-variation-settings:normal;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}button,input,optgroup,select,textarea{font-family:inherit;font-feature-settings:inherit;font-variation-settings:inherit;font-size:100%;font-weight:inherit;line-height:inherit;letter-spacing:inherit;color:inherit;margin:0;padding:0}button,select{text-transform:none}button,input:where([type=button]),input:where([type=reset]),input:where([type=submit]){-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dl,dd,h1,h2,h3,h4,h5,h6,hr,figure,p,pre{margin:0}fieldset{margin:0;padding:0}legend{padding:0}ol,ul,menu{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{opacity:1;color:#9ca3af}input::placeholder,textarea::placeholder{opacity:1;color:#9ca3af}button,[role=button]{cursor:pointer}:disabled{cursor:default}img,svg,video,canvas,audio,iframe,embed,object{display:block;vertical-align:middle}img,video{max-width:100%;height:auto}[hidden]:where(:not([hidden=until-found])){display:none}.collapse{visibility:collapse}.fixed{position:fixed}.absolute{position:absolute}.relative{position:relative}.inset-0{top:0;right:0;bottom:0;left:0}.left-0\.5{left:.125rem}.top-0\.5{top:.125rem}.z-50{z-index:50}.col-span-3{grid-column:span 3 / span 3}.col-span-4{grid-column:span 4 / span 4}.col-span-full{grid-column:1 / -1}.mx-auto{margin-left:auto;margin-right:auto}.mb-1{margin-bottom:.25rem}.mb-2{margin-bottom:.5rem}.mb-3{margin-bottom:.75rem}.mb-4{margin-bottom:1rem}.mb-6{margin-bottom:1.5rem}.mb-8{margin-bottom:2rem}.ml-1{margin-left:.25rem}.ml-2{margin-left:.5rem}.ml-4{margin-left:1rem}.mt-0\.5{margin-top:.125rem}.mt-1{margin-top:.25rem}.mt-1\.5{margin-top:.375rem}.mt-2{margin-top:.5rem}.mt-3{margin-top:.75rem}.mt-4{margin-top:1rem}.block{display:block}.inline-block{display:inline-block}.flex{display:flex}.inline-flex{display:inline-flex}.table{display:table}.grid{display:grid}.hidden{display:none}.h-14{height:3.5rem}.h-44{height:11rem}.h-5{height:1.25rem}.h-6{height:1.5rem}.h-screen{height:100vh}.max-h-32{max-height:8rem}.min-h-screen{min-height:100vh}.w-11{width:2.75rem}.w-16{width:4rem}.w-24{width:6rem}.w-40{width:10rem}.w-44{width:11rem}.w-48{width:12rem}.w-5{width:1.25rem}.w-56{width:14rem}.w-64{width:16rem}.w-full{width:100%}.max-w-2xl{max-width:42rem}.max-w-\[80px\]{max-width:80px}.max-w-md{max-width:28rem}.max-w-sm{max-width:24rem}.max-w-xs{max-width:20rem}.flex-1{flex:1 1 0%}.flex-shrink-0,.shrink-0{flex-shrink:0}.translate-x-5{--tw-translate-x: 1.25rem;transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skew(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.cursor-pointer{cursor:pointer}.select-none{-webkit-user-select:none;-moz-user-select:none;user-select:none}.select-all{-webkit-user-select:all;-moz-user-select:all;user-select:all}.resize-none{resize:none}.list-inside{list-style-position:inside}.list-decimal{list-style-type:decimal}.grid-cols-1{grid-template-columns:repeat(1,minmax(0,1fr))}.grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-start{align-items:flex-start}.items-end{align-items:flex-end}.items-center{align-items:center}.justify-end{justify-content:flex-end}.justify-center{justify-content:center}.justify-between{justify-content:space-between}.gap-1{gap:.25rem}.gap-1\.5{gap:.375rem}.gap-2{gap:.5rem}.gap-3{gap:.75rem}.gap-4{gap:1rem}.gap-5{gap:1.25rem}.gap-6{gap:1.5rem}.space-y-3>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(.75rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.75rem * var(--tw-space-y-reverse))}.space-y-4>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(1rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1rem * var(--tw-space-y-reverse))}.space-y-6>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(1.5rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1.5rem * var(--tw-space-y-reverse))}.overflow-auto{overflow:auto}.overflow-hidden{overflow:hidden}.overflow-x-auto{overflow-x:auto}.overflow-y-auto{overflow-y:auto}.truncate{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.whitespace-nowrap{white-space:nowrap}.whitespace-pre-line{white-space:pre-line}.whitespace-pre-wrap{white-space:pre-wrap}.break-all{word-break:break-all}.rounded{border-radius:.25rem}.rounded-full{border-radius:9999px}.rounded-lg{border-radius:.5rem}.rounded-md{border-radius:.375rem}.rounded-xl{border-radius:.75rem}.border{border-width:1px}.border-b{border-bottom-width:1px}.border-l{border-left-width:1px}.border-r{border-right-width:1px}.border-r-2{border-right-width:2px}.border-t{border-top-width:1px}.border-accent\/40{border-color:#3ddc9766}.border-amber-500\/40{border-color:#f59e0b66}.border-blue-500\/30{border-color:#3b82f64d}.border-brand{--tw-border-opacity: 1;border-color:rgb(0 160 200 / var(--tw-border-opacity, 1))}.border-brand\/40{border-color:#00a0c866}.border-brand\/60{border-color:#00a0c899}.border-cyan-500\/30{border-color:#06b6d44d}.border-edge{--tw-border-opacity: 1;border-color:rgb(38 48 74 / var(--tw-border-opacity, 1))}.border-edge\/50{border-color:#26304a80}.border-edge\/60{border-color:#26304a99}.border-emerald-500\/40{border-color:#10b98166}.border-gray-500\/30{border-color:#6b72804d}.border-gray-500\/40{border-color:#6b728066}.border-gray-600{--tw-border-opacity: 1;border-color:rgb(75 85 99 / var(--tw-border-opacity, 1))}.border-green-500\/20{border-color:#22c55e33}.border-green-500\/30{border-color:#22c55e4d}.border-orange-500\/30{border-color:#f973164d}.border-orange-500\/40{border-color:#f9731666}.border-red-500\/20{border-color:#ef444433}.border-red-500\/30{border-color:#ef44444d}.border-red-500\/40{border-color:#ef444466}.border-red-500\/50{border-color:#ef444480}.border-rose-500\/40{border-color:#f43f5e66}.border-yellow-500\/20{border-color:#eab30833}.border-yellow-500\/30{border-color:#eab3084d}.border-yellow-500\/40{border-color:#eab30866}.bg-accent\/10{background-color:#3ddc971a}.bg-accent\/20{background-color:#3ddc9733}.bg-amber-500\/10{background-color:#f59e0b1a}.bg-amber-500\/20{background-color:#f59e0b33}.bg-black\/60{background-color:#0009}.bg-blue-500\/10{background-color:#3b82f61a}.bg-blue-500\/20{background-color:#3b82f633}.bg-brand{--tw-bg-opacity: 1;background-color:rgb(0 160 200 / var(--tw-bg-opacity, 1))}.bg-brand\/10{background-color:#00a0c81a}.bg-brand\/15{background-color:#00a0c826}.bg-brand\/20{background-color:#00a0c833}.bg-brand\/80{background-color:#00a0c8cc}.bg-brand2{--tw-bg-opacity: 1;background-color:rgb(0 90 140 / var(--tw-bg-opacity, 1))}.bg-card{--tw-bg-opacity: 1;background-color:rgb(26 34 52 / var(--tw-bg-opacity, 1))}.bg-cyan-500\/10{background-color:#06b6d41a}.bg-cyan-500\/20{background-color:#06b6d433}.bg-edge{--tw-bg-opacity: 1;background-color:rgb(38 48 74 / var(--tw-bg-opacity, 1))}.bg-edge\/60{background-color:#26304a99}.bg-emerald-500\/15{background-color:#10b98126}.bg-gray-500\/10{background-color:#6b72801a}.bg-gray-500\/20{background-color:#6b728033}.bg-green-400\/10{background-color:#4ade801a}.bg-green-500\/10{background-color:#22c55e1a}.bg-green-500\/20{background-color:#22c55e33}.bg-green-500\/5{background-color:#22c55e0d}.bg-ink{--tw-bg-opacity: 1;background-color:rgb(11 15 23 / var(--tw-bg-opacity, 1))}.bg-orange-400\/10{background-color:#fb923c1a}.bg-orange-500\/20{background-color:#f9731633}.bg-orange-500\/5{background-color:#f973160d}.bg-panel{--tw-bg-opacity: 1;background-color:rgb(19 25 39 / var(--tw-bg-opacity, 1))}.bg-purple-500\/20{background-color:#a855f733}.bg-red-400\/10{background-color:#f871711a}.bg-red-500\/10{background-color:#ef44441a}.bg-red-500\/20{background-color:#ef444433}.bg-red-500\/5{background-color:#ef44440d}.bg-rose-500\/10{background-color:#f43f5e1a}.bg-rose-500\/15{background-color:#f43f5e26}.bg-white{--tw-bg-opacity: 1;background-color:rgb(255 255 255 / var(--tw-bg-opacity, 1))}.bg-yellow-400\/10{background-color:#facc151a}.bg-yellow-500\/10{background-color:#eab3081a}.bg-yellow-500\/20{background-color:#eab30833}.bg-yellow-500\/5{background-color:#eab3080d}.p-1\.5{padding:.375rem}.p-3{padding:.75rem}.p-4{padding:1rem}.p-5{padding:1.25rem}.p-6{padding:1.5rem}.p-8{padding:2rem}.px-1\.5{padding-left:.375rem;padding-right:.375rem}.px-2{padding-left:.5rem;padding-right:.5rem}.px-3{padding-left:.75rem;padding-right:.75rem}.px-4{padding-left:1rem;padding-right:1rem}.px-6{padding-left:1.5rem;padding-right:1.5rem}.py-0\.5{padding-top:.125rem;padding-bottom:.125rem}.py-1{padding-top:.25rem;padding-bottom:.25rem}.py-1\.5{padding-top:.375rem;padding-bottom:.375rem}.py-12{padding-top:3rem;padding-bottom:3rem}.py-16{padding-top:4rem;padding-bottom:4rem}.py-2{padding-top:.5rem;padding-bottom:.5rem}.py-2\.5{padding-top:.625rem;padding-bottom:.625rem}.py-3{padding-top:.75rem;padding-bottom:.75rem}.py-8{padding-top:2rem;padding-bottom:2rem}.pb-1{padding-bottom:.25rem}.pb-3{padding-bottom:.75rem}.pl-4{padding-left:1rem}.pt-1{padding-top:.25rem}.pt-2{padding-top:.5rem}.pt-3{padding-top:.75rem}.text-left{text-align:left}.text-center{text-align:center}.text-right{text-align:right}.font-mono{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace}.text-2xl{font-size:1.5rem;line-height:2rem}.text-\[10px\]{font-size:10px}.text-\[11px\]{font-size:11px}.text-\[12px\]{font-size:12px}.text-lg{font-size:1.125rem;line-height:1.75rem}.text-sm{font-size:.875rem;line-height:1.25rem}.text-xl{font-size:1.25rem;line-height:1.75rem}.text-xs{font-size:.75rem;line-height:1rem}.font-bold{font-weight:700}.font-medium{font-weight:500}.font-semibold{font-weight:600}.uppercase{text-transform:uppercase}.leading-7{line-height:1.75rem}.leading-relaxed{line-height:1.625}.tracking-\[0\.4em\]{letter-spacing:.4em}.tracking-wide{letter-spacing:.025em}.tracking-wider{letter-spacing:.05em}.text-accent{--tw-text-opacity: 1;color:rgb(61 220 151 / var(--tw-text-opacity, 1))}.text-amber-300{--tw-text-opacity: 1;color:rgb(252 211 77 / var(--tw-text-opacity, 1))}.text-amber-400{--tw-text-opacity: 1;color:rgb(251 191 36 / var(--tw-text-opacity, 1))}.text-blue-400{--tw-text-opacity: 1;color:rgb(96 165 250 / var(--tw-text-opacity, 1))}.text-brand{--tw-text-opacity: 1;color:rgb(0 160 200 / var(--tw-text-opacity, 1))}.text-cyan-300{--tw-text-opacity: 1;color:rgb(103 232 249 / var(--tw-text-opacity, 1))}.text-cyan-400{--tw-text-opacity: 1;color:rgb(34 211 238 / var(--tw-text-opacity, 1))}.text-edge{--tw-text-opacity: 1;color:rgb(38 48 74 / var(--tw-text-opacity, 1))}.text-emerald-300{--tw-text-opacity: 1;color:rgb(110 231 183 / var(--tw-text-opacity, 1))}.text-gray-100{--tw-text-opacity: 1;color:rgb(243 244 246 / var(--tw-text-opacity, 1))}.text-gray-200{--tw-text-opacity: 1;color:rgb(229 231 235 / var(--tw-text-opacity, 1))}.text-gray-300{--tw-text-opacity: 1;color:rgb(209 213 219 / var(--tw-text-opacity, 1))}.text-gray-400{--tw-text-opacity: 1;color:rgb(156 163 175 / var(--tw-text-opacity, 1))}.text-gray-500{--tw-text-opacity: 1;color:rgb(107 114 128 / var(--tw-text-opacity, 1))}.text-gray-600{--tw-text-opacity: 1;color:rgb(75 85 99 / var(--tw-text-opacity, 1))}.text-green-300{--tw-text-opacity: 1;color:rgb(134 239 172 / var(--tw-text-opacity, 1))}.text-green-400{--tw-text-opacity: 1;color:rgb(74 222 128 / var(--tw-text-opacity, 1))}.text-ink{--tw-text-opacity: 1;color:rgb(11 15 23 / var(--tw-text-opacity, 1))}.text-orange-400{--tw-text-opacity: 1;color:rgb(251 146 60 / var(--tw-text-opacity, 1))}.text-purple-300{--tw-text-opacity: 1;color:rgb(216 180 254 / var(--tw-text-opacity, 1))}.text-red-300{--tw-text-opacity: 1;color:rgb(252 165 165 / var(--tw-text-opacity, 1))}.text-red-400{--tw-text-opacity: 1;color:rgb(248 113 113 / var(--tw-text-opacity, 1))}.text-rose-300{--tw-text-opacity: 1;color:rgb(253 164 175 / var(--tw-text-opacity, 1))}.text-rose-400{--tw-text-opacity: 1;color:rgb(251 113 133 / var(--tw-text-opacity, 1))}.text-slate-200{--tw-text-opacity: 1;color:rgb(226 232 240 / var(--tw-text-opacity, 1))}.text-slate-300{--tw-text-opacity: 1;color:rgb(203 213 225 / var(--tw-text-opacity, 1))}.text-slate-400{--tw-text-opacity: 1;color:rgb(148 163 184 / var(--tw-text-opacity, 1))}.text-slate-500{--tw-text-opacity: 1;color:rgb(100 116 139 / var(--tw-text-opacity, 1))}.text-slate-600{--tw-text-opacity: 1;color:rgb(71 85 105 / var(--tw-text-opacity, 1))}.text-white{--tw-text-opacity: 1;color:rgb(255 255 255 / var(--tw-text-opacity, 1))}.text-yellow-400{--tw-text-opacity: 1;color:rgb(250 204 21 / var(--tw-text-opacity, 1))}.placeholder-gray-600::-moz-placeholder{--tw-placeholder-opacity: 1;color:rgb(75 85 99 / var(--tw-placeholder-opacity, 1))}.placeholder-gray-600::placeholder{--tw-placeholder-opacity: 1;color:rgb(75 85 99 / var(--tw-placeholder-opacity, 1))}.placeholder-slate-600::-moz-placeholder{--tw-placeholder-opacity: 1;color:rgb(71 85 105 / var(--tw-placeholder-opacity, 1))}.placeholder-slate-600::placeholder{--tw-placeholder-opacity: 1;color:rgb(71 85 105 / var(--tw-placeholder-opacity, 1))}.outline-none{outline:2px solid transparent;outline-offset:2px}.filter{filter:var(--tw-blur) var(--tw-brightness) var(--tw-contrast) var(--tw-grayscale) var(--tw-hue-rotate) var(--tw-invert) var(--tw-saturate) var(--tw-sepia) var(--tw-drop-shadow)}.transition{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-colors{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}body{--tw-bg-opacity: 1;background-color:rgb(11 15 23 / var(--tw-bg-opacity, 1));--tw-text-opacity: 1;color:rgb(255 255 255 / var(--tw-text-opacity, 1));font-family:Noto Sans KR,-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif}::-webkit-scrollbar{width:6px;height:6px}::-webkit-scrollbar-track{background:#131927}::-webkit-scrollbar-thumb{background:#26304a;border-radius:3px}::-webkit-scrollbar-thumb:hover{background:#00a0c8}.hover\:border-brand\/50:hover{border-color:#00a0c880}.hover\:border-emerald-500\/50:hover{border-color:#10b98180}.hover\:border-rose-500\/50:hover{border-color:#f43f5e80}.hover\:bg-accent\/30:hover{background-color:#3ddc974d}.hover\:bg-brand:hover{--tw-bg-opacity: 1;background-color:rgb(0 160 200 / var(--tw-bg-opacity, 1))}.hover\:bg-brand\/30:hover{background-color:#00a0c84d}.hover\:bg-brand2:hover{--tw-bg-opacity: 1;background-color:rgb(0 90 140 / var(--tw-bg-opacity, 1))}.hover\:bg-edge:hover{--tw-bg-opacity: 1;background-color:rgb(38 48 74 / var(--tw-bg-opacity, 1))}.hover\:bg-edge\/30:hover{background-color:#26304a4d}.hover\:bg-edge\/50:hover{background-color:#26304a80}.hover\:bg-red-500\/10:hover{background-color:#ef44441a}.hover\:text-blue-300:hover{--tw-text-opacity: 1;color:rgb(147 197 253 / var(--tw-text-opacity, 1))}.hover\:text-brand:hover{--tw-text-opacity: 1;color:rgb(0 160 200 / var(--tw-text-opacity, 1))}.hover\:text-gray-300:hover{--tw-text-opacity: 1;color:rgb(209 213 219 / var(--tw-text-opacity, 1))}.hover\:text-green-300:hover{--tw-text-opacity: 1;color:rgb(134 239 172 / var(--tw-text-opacity, 1))}.hover\:text-red-300:hover{--tw-text-opacity: 1;color:rgb(252 165 165 / var(--tw-text-opacity, 1))}.hover\:text-red-400:hover{--tw-text-opacity: 1;color:rgb(248 113 113 / var(--tw-text-opacity, 1))}.hover\:text-white:hover{--tw-text-opacity: 1;color:rgb(255 255 255 / var(--tw-text-opacity, 1))}.hover\:underline:hover{text-decoration-line:underline}.focus\:border-brand:focus{--tw-border-opacity: 1;border-color:rgb(0 160 200 / var(--tw-border-opacity, 1))}.focus\:outline-none:focus{outline:2px solid transparent;outline-offset:2px}.disabled\:opacity-40:disabled{opacity:.4}.disabled\:opacity-50:disabled{opacity:.5}.disabled\:opacity-60:disabled{opacity:.6}@media (min-width: 768px){.md\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.md\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}.md\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}.md\:grid-cols-6{grid-template-columns:repeat(6,minmax(0,1fr))}.md\:grid-cols-\[200px_1fr\]{grid-template-columns:200px 1fr}}@media (min-width: 1024px){.lg\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.lg\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}.lg\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}.lg\:grid-cols-6{grid-template-columns:repeat(6,minmax(0,1fr))}}@media (min-width: 1280px){.xl\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}}:root,:root[data-theme=dark]{--uiws-bg: #0b0f17;--uiws-surface: #1a2234;--uiws-surface-2: #131927;--uiws-border: #26304a;--uiws-text: #e6edf3;--uiws-text-muted: #8892b0;--uiws-text-faint: #4d5568;--uiws-primary: #00a0c8;--uiws-primary-contrast: #ffffff;--uiws-primary-soft: rgba(0, 160, 200, .14);--uiws-danger: #e74c3c;--uiws-success: #3ddc97;--uiws-warning: #f1c40f;--uiws-row-hover: rgba(255, 255, 255, .04);--uiws-input-bg: #0b0f17;--uiws-shadow: 0 4px 20px rgba(0, 0, 0, .35)}:root[data-theme=light]{--uiws-bg: #f4f6fb;--uiws-surface: #ffffff;--uiws-surface-2: #eef1f7;--uiws-border: #d8deea;--uiws-text: #14202e;--uiws-text-muted: #5b6478;--uiws-text-faint: #97a0b5;--uiws-primary: #0089ab;--uiws-primary-contrast: #ffffff;--uiws-primary-soft: rgba(0, 137, 171, .1);--uiws-danger: #d63b2b;--uiws-success: #1f9e58;--uiws-warning: #c79a08;--uiws-row-hover: rgba(0, 0, 0, .035);--uiws-input-bg: #ffffff;--uiws-shadow: 0 4px 18px rgba(20, 30, 60, .1)}.uiws-scope{color:var(--uiws-text)}.uiws-scope a{color:var(--uiws-primary)} diff --git a/backend/src/main/resources/static/assets/index-VsUCSXRR.js b/backend/src/main/resources/static/assets/index-VsUCSXRR.js new file mode 100644 index 0000000..663db3d --- /dev/null +++ b/backend/src/main/resources/static/assets/index-VsUCSXRR.js @@ -0,0 +1,483 @@ +var x1=e=>{throw TypeError(e)};var xm=(e,t,n)=>t.has(e)||x1("Cannot "+n);var T=(e,t,n)=>(xm(e,t,"read from private field"),n?n.call(e):t.get(e)),re=(e,t,n)=>t.has(e)?x1("Cannot add the same private member more than once"):t instanceof WeakSet?t.add(e):t.set(e,n),X=(e,t,n,r)=>(xm(e,t,"write to private field"),r?r.call(e,n):t.set(e,n),n),he=(e,t,n)=>(xm(e,t,"access private method"),n);var sf=(e,t,n,r)=>({set _(a){X(e,t,a,n)},get _(){return T(e,t,r)}});(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const a of document.querySelectorAll('link[rel="modulepreload"]'))r(a);new MutationObserver(a=>{for(const i of a)if(i.type==="childList")for(const o of i.addedNodes)o.tagName==="LINK"&&o.rel==="modulepreload"&&r(o)}).observe(document,{childList:!0,subtree:!0});function n(a){const i={};return a.integrity&&(i.integrity=a.integrity),a.referrerPolicy&&(i.referrerPolicy=a.referrerPolicy),a.crossOrigin==="use-credentials"?i.credentials="include":a.crossOrigin==="anonymous"?i.credentials="omit":i.credentials="same-origin",i}function r(a){if(a.ep)return;a.ep=!0;const i=n(a);fetch(a.href,i)}})();var uf=typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{};function qe(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}var BA={exports:{}},Qh={};/** + * @license React + * react-jsx-runtime.production.js + * + * Copyright (c) Meta Platforms, Inc. and affiliates. + * + * This source code is licensed under the MIT license found in the + * LICENSE file in the root directory of this source tree. + */var UR=Symbol.for("react.transitional.element"),qR=Symbol.for("react.fragment");function IA(e,t,n){var r=null;if(n!==void 0&&(r=""+n),t.key!==void 0&&(r=""+t.key),"key"in t){n={};for(var a in t)a!=="key"&&(n[a]=t[a])}else n=t;return t=n.ref,{$$typeof:UR,type:e,key:r,ref:t!==void 0?t:null,props:n}}Qh.Fragment=qR;Qh.jsx=IA;Qh.jsxs=IA;BA.exports=Qh;var c=BA.exports,UA={exports:{}},ue={};/** + * @license React + * react.production.js + * + * Copyright (c) Meta Platforms, Inc. and affiliates. + * + * This source code is licensed under the MIT license found in the + * LICENSE file in the root directory of this source tree. + */var F0=Symbol.for("react.transitional.element"),HR=Symbol.for("react.portal"),FR=Symbol.for("react.fragment"),GR=Symbol.for("react.strict_mode"),KR=Symbol.for("react.profiler"),YR=Symbol.for("react.consumer"),VR=Symbol.for("react.context"),XR=Symbol.for("react.forward_ref"),QR=Symbol.for("react.suspense"),WR=Symbol.for("react.memo"),qA=Symbol.for("react.lazy"),ZR=Symbol.for("react.activity"),S1=Symbol.iterator;function JR(e){return e===null||typeof e!="object"?null:(e=S1&&e[S1]||e["@@iterator"],typeof e=="function"?e:null)}var HA={isMounted:function(){return!1},enqueueForceUpdate:function(){},enqueueReplaceState:function(){},enqueueSetState:function(){}},FA=Object.assign,GA={};function ss(e,t,n){this.props=e,this.context=t,this.refs=GA,this.updater=n||HA}ss.prototype.isReactComponent={};ss.prototype.setState=function(e,t){if(typeof e!="object"&&typeof e!="function"&&e!=null)throw Error("takes an object of state variables to update or a function which returns an object of state variables.");this.updater.enqueueSetState(this,e,t,"setState")};ss.prototype.forceUpdate=function(e){this.updater.enqueueForceUpdate(this,e,"forceUpdate")};function KA(){}KA.prototype=ss.prototype;function G0(e,t,n){this.props=e,this.context=t,this.refs=GA,this.updater=n||HA}var K0=G0.prototype=new KA;K0.constructor=G0;FA(K0,ss.prototype);K0.isPureReactComponent=!0;var w1=Array.isArray;function Gy(){}var et={H:null,A:null,T:null,S:null},YA=Object.prototype.hasOwnProperty;function Y0(e,t,n){var r=n.ref;return{$$typeof:F0,type:e,key:t,ref:r!==void 0?r:null,props:n}}function eP(e,t){return Y0(e.type,t,e.props)}function V0(e){return typeof e=="object"&&e!==null&&e.$$typeof===F0}function tP(e){var t={"=":"=0",":":"=2"};return"$"+e.replace(/[=:]/g,function(n){return t[n]})}var j1=/\/+/g;function Sm(e,t){return typeof e=="object"&&e!==null&&e.key!=null?tP(""+e.key):t.toString(36)}function nP(e){switch(e.status){case"fulfilled":return e.value;case"rejected":throw e.reason;default:switch(typeof e.status=="string"?e.then(Gy,Gy):(e.status="pending",e.then(function(t){e.status==="pending"&&(e.status="fulfilled",e.value=t)},function(t){e.status==="pending"&&(e.status="rejected",e.reason=t)})),e.status){case"fulfilled":return e.value;case"rejected":throw e.reason}}throw e}function Mo(e,t,n,r,a){var i=typeof e;(i==="undefined"||i==="boolean")&&(e=null);var o=!1;if(e===null)o=!0;else switch(i){case"bigint":case"string":case"number":o=!0;break;case"object":switch(e.$$typeof){case F0:case HR:o=!0;break;case qA:return o=e._init,Mo(o(e._payload),t,n,r,a)}}if(o)return a=a(e),o=r===""?"."+Sm(e,0):r,w1(a)?(n="",o!=null&&(n=o.replace(j1,"$&/")+"/"),Mo(a,t,n,"",function(u){return u})):a!=null&&(V0(a)&&(a=eP(a,n+(a.key==null||e&&e.key===a.key?"":(""+a.key).replace(j1,"$&/")+"/")+o)),t.push(a)),1;o=0;var l=r===""?".":r+":";if(w1(e))for(var s=0;s>>1,K=M[F];if(0>>1;Fa(J,z))mea(Le,J)?(M[F]=Le,M[me]=z,F=me):(M[F]=J,M[Y]=z,F=Y);else if(mea(Le,z))M[F]=Le,M[me]=z,F=me;else break e}}return L}function a(M,L){var z=M.sortIndex-L.sortIndex;return z!==0?z:M.id-L.id}if(e.unstable_now=void 0,typeof performance=="object"&&typeof performance.now=="function"){var i=performance;e.unstable_now=function(){return i.now()}}else{var o=Date,l=o.now();e.unstable_now=function(){return o.now()-l}}var s=[],u=[],d=1,f=null,h=3,p=!1,b=!1,v=!1,x=!1,m=typeof setTimeout=="function"?setTimeout:null,y=typeof clearTimeout=="function"?clearTimeout:null,g=typeof setImmediate<"u"?setImmediate:null;function S(M){for(var L=n(u);L!==null;){if(L.callback===null)r(u);else if(L.startTime<=M)r(u),L.sortIndex=L.expirationTime,t(s,L);else break;L=n(u)}}function w(M){if(v=!1,S(M),!b)if(n(s)!==null)b=!0,j||(j=!0,R());else{var L=n(u);L!==null&&C(w,L.startTime-M)}}var j=!1,A=-1,E=5,_=-1;function N(){return x?!0:!(e.unstable_now()-_M&&N());){var F=f.callback;if(typeof F=="function"){f.callback=null,h=f.priorityLevel;var K=F(f.expirationTime<=M);if(M=e.unstable_now(),typeof K=="function"){f.callback=K,S(M),L=!0;break t}f===n(s)&&r(s),S(M)}else r(s);f=n(s)}if(f!==null)L=!0;else{var G=n(u);G!==null&&C(w,G.startTime-M),L=!1}}break e}finally{f=null,h=z,p=!1}L=void 0}}finally{L?R():j=!1}}}var R;if(typeof g=="function")R=function(){g(D)};else if(typeof MessageChannel<"u"){var B=new MessageChannel,k=B.port2;B.port1.onmessage=D,R=function(){k.postMessage(null)}}else R=function(){m(D,0)};function C(M,L){A=m(function(){M(e.unstable_now())},L)}e.unstable_IdlePriority=5,e.unstable_ImmediatePriority=1,e.unstable_LowPriority=4,e.unstable_NormalPriority=3,e.unstable_Profiling=null,e.unstable_UserBlockingPriority=2,e.unstable_cancelCallback=function(M){M.callback=null},e.unstable_forceFrameRate=function(M){0>M||125F?(M.sortIndex=z,t(u,M),n(s)===null&&M===n(u)&&(v?(y(A),A=-1):v=!0,C(w,z-F))):(M.sortIndex=K,t(s,M),b||p||(b=!0,j||(j=!0,R()))),M},e.unstable_shouldYield=N,e.unstable_wrapCallback=function(M){var L=h;return function(){var z=h;h=L;try{return M.apply(this,arguments)}finally{h=z}}}})(QA);XA.exports=QA;var iP=XA.exports,WA={exports:{}},nn={};/** + * @license React + * react-dom.production.js + * + * Copyright (c) Meta Platforms, Inc. and affiliates. + * + * This source code is licensed under the MIT license found in the + * LICENSE file in the root directory of this source tree. + */var oP=O;function ZA(e){var t="https://react.dev/errors/"+e;if(1"u"||typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE!="function"))try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(JA)}catch(e){console.error(e)}}JA(),WA.exports=nn;var uP=WA.exports;/** + * @license React + * react-dom-client.production.js + * + * Copyright (c) Meta Platforms, Inc. and affiliates. + * + * This source code is licensed under the MIT license found in the + * LICENSE file in the root directory of this source tree. + */var At=iP,eE=O,cP=uP;function U(e){var t="https://react.dev/errors/"+e;if(1Do||(e.current=Wy[Do],Wy[Do]=null,Do--)}function Ye(e,t){Do++,Wy[Do]=e.current,e.current=t}var Or=Tr(null),Tu=Tr(null),Ka=Tr(null),hd=Tr(null);function pd(e,t){switch(Ye(Ka,t),Ye(Tu,e),Ye(Or,null),t.nodeType){case 9:case 11:e=(e=t.documentElement)&&(e=e.namespaceURI)?RS(e):0;break;default:if(e=t.tagName,t=t.namespaceURI)t=RS(t),e=ET(t,e);else switch(e){case"svg":e=1;break;case"math":e=2;break;default:e=0}}Rt(Or),Ye(Or,e)}function jl(){Rt(Or),Rt(Tu),Rt(Ka)}function Zy(e){e.memoizedState!==null&&Ye(hd,e);var t=Or.current,n=ET(t,e.type);t!==n&&(Ye(Tu,e),Ye(Or,n))}function md(e){Tu.current===e&&(Rt(Or),Rt(Tu)),hd.current===e&&(Rt(hd),Bu._currentValue=Fi)}var wm,_1;function Si(e){if(wm===void 0)try{throw Error()}catch(n){var t=n.stack.trim().match(/\n( *(at )?)/);wm=t&&t[1]||"",_1=-1)":-1a||s[r]!==u[a]){var d=` +`+s[r].replace(" at new "," at ");return e.displayName&&d.includes("")&&(d=d.replace("",e.displayName)),d}while(1<=r&&0<=a);break}}}finally{jm=!1,Error.prepareStackTrace=n}return(n=e?e.displayName||e.name:"")?Si(n):""}function mP(e,t){switch(e.tag){case 26:case 27:case 5:return Si(e.type);case 16:return Si("Lazy");case 13:return e.child!==t&&t!==null?Si("Suspense Fallback"):Si("Suspense");case 19:return Si("SuspenseList");case 0:case 15:return Om(e.type,!1);case 11:return Om(e.type.render,!1);case 1:return Om(e.type,!0);case 31:return Si("Activity");default:return""}}function T1(e){try{var t="",n=null;do t+=mP(e,n),n=e,e=e.return;while(e);return t}catch(r){return` +Error generating stack: `+r.message+` +`+r.stack}}var Jy=Object.prototype.hasOwnProperty,W0=At.unstable_scheduleCallback,Am=At.unstable_cancelCallback,yP=At.unstable_shouldYield,vP=At.unstable_requestPaint,Tn=At.unstable_now,gP=At.unstable_getCurrentPriorityLevel,lE=At.unstable_ImmediatePriority,sE=At.unstable_UserBlockingPriority,yd=At.unstable_NormalPriority,bP=At.unstable_LowPriority,uE=At.unstable_IdlePriority,xP=At.log,SP=At.unstable_setDisableYieldValue,$c=null,Nn=null;function Ia(e){if(typeof xP=="function"&&SP(e),Nn&&typeof Nn.setStrictMode=="function")try{Nn.setStrictMode($c,e)}catch{}}var Cn=Math.clz32?Math.clz32:OP,wP=Math.log,jP=Math.LN2;function OP(e){return e>>>=0,e===0?32:31-(wP(e)/jP|0)|0}var df=256,hf=262144,pf=4194304;function wi(e){var t=e&42;if(t!==0)return t;switch(e&-e){case 1:return 1;case 2:return 2;case 4:return 4;case 8:return 8;case 16:return 16;case 32:return 32;case 64:return 64;case 128:return 128;case 256:case 512:case 1024:case 2048:case 4096:case 8192:case 16384:case 32768:case 65536:case 131072:return e&261888;case 262144:case 524288:case 1048576:case 2097152:return e&3932160;case 4194304:case 8388608:case 16777216:case 33554432:return e&62914560;case 67108864:return 67108864;case 134217728:return 134217728;case 268435456:return 268435456;case 536870912:return 536870912;case 1073741824:return 0;default:return e}}function Jh(e,t,n){var r=e.pendingLanes;if(r===0)return 0;var a=0,i=e.suspendedLanes,o=e.pingedLanes;e=e.warmLanes;var l=r&134217727;return l!==0?(r=l&~i,r!==0?a=wi(r):(o&=l,o!==0?a=wi(o):n||(n=l&~e,n!==0&&(a=wi(n))))):(l=r&~i,l!==0?a=wi(l):o!==0?a=wi(o):n||(n=r&~e,n!==0&&(a=wi(n)))),a===0?0:t!==0&&t!==a&&!(t&i)&&(i=a&-a,n=t&-t,i>=n||i===32&&(n&4194048)!==0)?t:a}function kc(e,t){return(e.pendingLanes&~(e.suspendedLanes&~e.pingedLanes)&t)===0}function AP(e,t){switch(e){case 1:case 2:case 4:case 8:case 64:return t+250;case 16:case 32:case 128:case 256:case 512:case 1024:case 2048:case 4096:case 8192:case 16384:case 32768:case 65536:case 131072:case 262144:case 524288:case 1048576:case 2097152:return t+5e3;case 4194304:case 8388608:case 16777216:case 33554432:return-1;case 67108864:case 134217728:case 268435456:case 536870912:case 1073741824:return-1;default:return-1}}function cE(){var e=pf;return pf<<=1,!(pf&62914560)&&(pf=4194304),e}function Em(e){for(var t=[],n=0;31>n;n++)t.push(e);return t}function Dc(e,t){e.pendingLanes|=t,t!==268435456&&(e.suspendedLanes=0,e.pingedLanes=0,e.warmLanes=0)}function EP(e,t,n,r,a,i){var o=e.pendingLanes;e.pendingLanes=n,e.suspendedLanes=0,e.pingedLanes=0,e.warmLanes=0,e.expiredLanes&=n,e.entangledLanes&=n,e.errorRecoveryDisabledLanes&=n,e.shellSuspendCounter=0;var l=e.entanglements,s=e.expirationTimes,u=e.hiddenUpdates;for(n=o&~n;0"u")return null;try{return e.activeElement||e.body}catch{return e.body}}var RP=/[\n"\\]/g;function Fn(e){return e.replace(RP,function(t){return"\\"+t.charCodeAt(0).toString(16)+" "})}function nv(e,t,n,r,a,i,o,l){e.name="",o!=null&&typeof o!="function"&&typeof o!="symbol"&&typeof o!="boolean"?e.type=o:e.removeAttribute("type"),t!=null?o==="number"?(t===0&&e.value===""||e.value!=t)&&(e.value=""+Un(t)):e.value!==""+Un(t)&&(e.value=""+Un(t)):o!=="submit"&&o!=="reset"||e.removeAttribute("value"),t!=null?rv(e,o,Un(t)):n!=null?rv(e,o,Un(n)):r!=null&&e.removeAttribute("value"),a==null&&i!=null&&(e.defaultChecked=!!i),a!=null&&(e.checked=a&&typeof a!="function"&&typeof a!="symbol"),l!=null&&typeof l!="function"&&typeof l!="symbol"&&typeof l!="boolean"?e.name=""+Un(l):e.removeAttribute("name")}function bE(e,t,n,r,a,i,o,l){if(i!=null&&typeof i!="function"&&typeof i!="symbol"&&typeof i!="boolean"&&(e.type=i),t!=null||n!=null){if(!(i!=="submit"&&i!=="reset"||t!=null)){tv(e);return}n=n!=null?""+Un(n):"",t=t!=null?""+Un(t):n,l||t===e.value||(e.value=t),e.defaultValue=t}r=r??a,r=typeof r!="function"&&typeof r!="symbol"&&!!r,e.checked=l?e.checked:!!r,e.defaultChecked=!!r,o!=null&&typeof o!="function"&&typeof o!="symbol"&&typeof o!="boolean"&&(e.name=o),tv(e)}function rv(e,t,n){t==="number"&&vd(e.ownerDocument)===e||e.defaultValue===""+n||(e.defaultValue=""+n)}function el(e,t,n,r){if(e=e.options,t){t={};for(var a=0;a"u"||typeof window.document>"u"||typeof window.document.createElement>"u"),iv=!1;if(oa)try{var Ls={};Object.defineProperty(Ls,"passive",{get:function(){iv=!0}}),window.addEventListener("test",Ls,Ls),window.removeEventListener("test",Ls,Ls)}catch{iv=!1}var Ua=null,rb=null,Kf=null;function OE(){if(Kf)return Kf;var e,t=rb,n=t.length,r,a="value"in Ua?Ua.value:Ua.textContent,i=a.length;for(e=0;e=uu),B1=" ",I1=!1;function EE(e,t){switch(e){case"keyup":return o4.indexOf(t.keyCode)!==-1;case"keydown":return t.keyCode!==229;case"keypress":case"mousedown":case"focusout":return!0;default:return!1}}function _E(e){return e=e.detail,typeof e=="object"&&"data"in e?e.data:null}var Bo=!1;function s4(e,t){switch(e){case"compositionend":return _E(t);case"keypress":return t.which!==32?null:(I1=!0,B1);case"textInput":return e=t.data,e===B1&&I1?null:e;default:return null}}function u4(e,t){if(Bo)return e==="compositionend"||!ib&&EE(e,t)?(e=OE(),Kf=rb=Ua=null,Bo=!1,e):null;switch(e){case"paste":return null;case"keypress":if(!(t.ctrlKey||t.altKey||t.metaKey)||t.ctrlKey&&t.altKey){if(t.char&&1=t)return{node:n,offset:t-e};e=r}e:{for(;n;){if(n.nextSibling){n=n.nextSibling;break e}n=n.parentNode}n=void 0}n=G1(n)}}function ME(e,t){return e&&t?e===t?!0:e&&e.nodeType===3?!1:t&&t.nodeType===3?ME(e,t.parentNode):"contains"in e?e.contains(t):e.compareDocumentPosition?!!(e.compareDocumentPosition(t)&16):!1:!1}function RE(e){e=e!=null&&e.ownerDocument!=null&&e.ownerDocument.defaultView!=null?e.ownerDocument.defaultView:window;for(var t=vd(e.document);t instanceof e.HTMLIFrameElement;){try{var n=typeof t.contentWindow.location.href=="string"}catch{n=!1}if(n)e=t.contentWindow;else break;t=vd(e.document)}return t}function ob(e){var t=e&&e.nodeName&&e.nodeName.toLowerCase();return t&&(t==="input"&&(e.type==="text"||e.type==="search"||e.type==="tel"||e.type==="url"||e.type==="password")||t==="textarea"||e.contentEditable==="true")}var v4=oa&&"documentMode"in document&&11>=document.documentMode,Io=null,ov=null,fu=null,lv=!1;function Y1(e,t,n){var r=n.window===n?n.document:n.nodeType===9?n:n.ownerDocument;lv||Io==null||Io!==vd(r)||(r=Io,"selectionStart"in r&&ob(r)?r={start:r.selectionStart,end:r.selectionEnd}:(r=(r.ownerDocument&&r.ownerDocument.defaultView||window).getSelection(),r={anchorNode:r.anchorNode,anchorOffset:r.anchorOffset,focusNode:r.focusNode,focusOffset:r.focusOffset}),fu&&Mu(fu,r)||(fu=r,r=kd(ov,"onSelect"),0>=o,a-=o,xr=1<<32-Cn(t)+a|n<E?(_=A,A=null):_=A.sibling;var N=h(m,A,g[E],S);if(N===null){A===null&&(A=_);break}e&&A&&N.alternate===null&&t(m,A),y=i(N,y,E),j===null?w=N:j.sibling=N,j=N,A=_}if(E===g.length)return n(m,A),Ae&&qr(m,E),w;if(A===null){for(;EE?(_=A,A=null):_=A.sibling;var D=h(m,A,N.value,S);if(D===null){A===null&&(A=_);break}e&&A&&D.alternate===null&&t(m,A),y=i(D,y,E),j===null?w=D:j.sibling=D,j=D,A=_}if(N.done)return n(m,A),Ae&&qr(m,E),w;if(A===null){for(;!N.done;E++,N=g.next())N=f(m,N.value,S),N!==null&&(y=i(N,y,E),j===null?w=N:j.sibling=N,j=N);return Ae&&qr(m,E),w}for(A=r(A);!N.done;E++,N=g.next())N=p(A,m,E,N.value,S),N!==null&&(e&&N.alternate!==null&&A.delete(N.key===null?E:N.key),y=i(N,y,E),j===null?w=N:j.sibling=N,j=N);return e&&A.forEach(function(R){return t(m,R)}),Ae&&qr(m,E),w}function x(m,y,g,S){if(typeof g=="object"&&g!==null&&g.type===ko&&g.key===null&&(g=g.props.children),typeof g=="object"&&g!==null){switch(g.$$typeof){case ff:e:{for(var w=g.key;y!==null;){if(y.key===w){if(w=g.type,w===ko){if(y.tag===7){n(m,y.sibling),S=a(y,g.props.children),S.return=m,m=S;break e}}else if(y.elementType===w||typeof w=="object"&&w!==null&&w.$$typeof===ja&&ji(w)===y.type){n(m,y.sibling),S=a(y,g.props),Bs(S,g),S.return=m,m=S;break e}n(m,y);break}else t(m,y);y=y.sibling}g.type===ko?(S=Gi(g.props.children,m.mode,S,g.key),S.return=m,m=S):(S=Vf(g.type,g.key,g.props,null,m.mode,S),Bs(S,g),S.return=m,m=S)}return o(m);case tu:e:{for(w=g.key;y!==null;){if(y.key===w)if(y.tag===4&&y.stateNode.containerInfo===g.containerInfo&&y.stateNode.implementation===g.implementation){n(m,y.sibling),S=a(y,g.children||[]),S.return=m,m=S;break e}else{n(m,y);break}else t(m,y);y=y.sibling}S=km(g,m.mode,S),S.return=m,m=S}return o(m);case ja:return g=ji(g),x(m,y,g,S)}if(nu(g))return b(m,y,g,S);if(Ds(g)){if(w=Ds(g),typeof w!="function")throw Error(U(150));return g=w.call(g),v(m,y,g,S)}if(typeof g.then=="function")return x(m,y,gf(g),S);if(g.$$typeof===Vr)return x(m,y,vf(m,g),S);bf(m,g)}return typeof g=="string"&&g!==""||typeof g=="number"||typeof g=="bigint"?(g=""+g,y!==null&&y.tag===6?(n(m,y.sibling),S=a(y,g),S.return=m,m=S):(n(m,y),S=$m(g,m.mode,S),S.return=m,m=S),o(m)):n(m,y)}return function(m,y,g,S){try{$u=0;var w=x(m,y,g,S);return rl=null,w}catch(A){if(A===ds||A===ip)throw A;var j=An(29,A,null,m.mode);return j.lanes=S,j.return=m,j}finally{}}}var eo=YE(!0),VE=YE(!1),Oa=!1;function mb(e){e.updateQueue={baseState:e.memoizedState,firstBaseUpdate:null,lastBaseUpdate:null,shared:{pending:null,lanes:0,hiddenCallbacks:null},callbacks:null}}function pv(e,t){e=e.updateQueue,t.updateQueue===e&&(t.updateQueue={baseState:e.baseState,firstBaseUpdate:e.firstBaseUpdate,lastBaseUpdate:e.lastBaseUpdate,shared:e.shared,callbacks:null})}function Va(e){return{lane:e,tag:0,payload:null,callback:null,next:null}}function Xa(e,t,n){var r=e.updateQueue;if(r===null)return null;if(r=r.shared,Te&2){var a=r.pending;return a===null?t.next=t:(t.next=a.next,a.next=t),r.pending=t,t=bd(e),BE(e,null,n),t}return ap(e,r,t,n),bd(e)}function hu(e,t,n){if(t=t.updateQueue,t!==null&&(t=t.shared,(n&4194048)!==0)){var r=t.lanes;r&=e.pendingLanes,n|=r,t.lanes=n,dE(e,n)}}function Lm(e,t){var n=e.updateQueue,r=e.alternate;if(r!==null&&(r=r.updateQueue,n===r)){var a=null,i=null;if(n=n.firstBaseUpdate,n!==null){do{var o={lane:n.lane,tag:n.tag,payload:n.payload,callback:null,next:null};i===null?a=i=o:i=i.next=o,n=n.next}while(n!==null);i===null?a=i=t:i=i.next=t}else a=i=t;n={baseState:r.baseState,firstBaseUpdate:a,lastBaseUpdate:i,shared:r.shared,callbacks:r.callbacks},e.updateQueue=n;return}e=n.lastBaseUpdate,e===null?n.firstBaseUpdate=t:e.next=t,n.lastBaseUpdate=t}var mv=!1;function pu(){if(mv){var e=nl;if(e!==null)throw e}}function mu(e,t,n,r){mv=!1;var a=e.updateQueue;Oa=!1;var i=a.firstBaseUpdate,o=a.lastBaseUpdate,l=a.shared.pending;if(l!==null){a.shared.pending=null;var s=l,u=s.next;s.next=null,o===null?i=u:o.next=u,o=s;var d=e.alternate;d!==null&&(d=d.updateQueue,l=d.lastBaseUpdate,l!==o&&(l===null?d.firstBaseUpdate=u:l.next=u,d.lastBaseUpdate=s))}if(i!==null){var f=a.baseState;o=0,d=u=s=null,l=i;do{var h=l.lane&-536870913,p=h!==l.lane;if(p?(we&h)===h:(r&h)===h){h!==0&&h===El&&(mv=!0),d!==null&&(d=d.next={lane:0,tag:l.tag,payload:l.payload,callback:null,next:null});e:{var b=e,v=l;h=t;var x=n;switch(v.tag){case 1:if(b=v.payload,typeof b=="function"){f=b.call(x,f,h);break e}f=b;break e;case 3:b.flags=b.flags&-65537|128;case 0:if(b=v.payload,h=typeof b=="function"?b.call(x,f,h):b,h==null)break e;f=nt({},f,h);break e;case 2:Oa=!0}}h=l.callback,h!==null&&(e.flags|=64,p&&(e.flags|=8192),p=a.callbacks,p===null?a.callbacks=[h]:p.push(h))}else p={lane:h,tag:l.tag,payload:l.payload,callback:l.callback,next:null},d===null?(u=d=p,s=f):d=d.next=p,o|=h;if(l=l.next,l===null){if(l=a.shared.pending,l===null)break;p=l,l=p.next,p.next=null,a.lastBaseUpdate=p,a.shared.pending=null}}while(!0);d===null&&(s=f),a.baseState=s,a.firstBaseUpdate=u,a.lastBaseUpdate=d,i===null&&(a.shared.lanes=0),li|=o,e.lanes=o,e.memoizedState=f}}function XE(e,t){if(typeof e!="function")throw Error(U(191,e));e.call(t)}function QE(e,t){var n=e.callbacks;if(n!==null)for(e.callbacks=null,e=0;ei?i:8;var o=ie.T,l={};ie.T=l,Tb(e,!1,t,n);try{var s=a(),u=ie.S;if(u!==null&&u(l,s),s!==null&&typeof s=="object"&&typeof s.then=="function"){var d=E4(s,r);yu(e,t,d,Mn(e))}else yu(e,t,r,Mn(e))}catch(f){yu(e,t,{then:function(){},status:"rejected",reason:f},Mn())}finally{Ne.p=i,o!==null&&l.types!==null&&(o.types=l.types),ie.T=o}}function R4(){}function xv(e,t,n,r){if(e.tag!==5)throw Error(U(476));var a=S_(e).queue;x_(e,a,t,Fi,n===null?R4:function(){return w_(e),n(r)})}function S_(e){var t=e.memoizedState;if(t!==null)return t;t={memoizedState:Fi,baseState:Fi,baseQueue:null,queue:{pending:null,lanes:0,dispatch:null,lastRenderedReducer:sa,lastRenderedState:Fi},next:null};var n={};return t.next={memoizedState:n,baseState:n,baseQueue:null,queue:{pending:null,lanes:0,dispatch:null,lastRenderedReducer:sa,lastRenderedState:n},next:null},e.memoizedState=t,e=e.alternate,e!==null&&(e.memoizedState=t),t}function w_(e){var t=S_(e);t.next===null&&(t=e.alternate.memoizedState),yu(e,t.next.queue,{},Mn())}function _b(){return Ut(Bu)}function j_(){return ft().memoizedState}function O_(){return ft().memoizedState}function P4(e){for(var t=e.return;t!==null;){switch(t.tag){case 24:case 3:var n=Mn();e=Va(n);var r=Xa(t,e,n);r!==null&&(hn(r,t,n),hu(r,t,n)),t={cache:db()},e.payload=t;return}t=t.return}}function $4(e,t,n){var r=Mn();n={lane:r,revertLane:0,gesture:null,action:n,hasEagerState:!1,eagerState:null,next:null},up(e)?E_(t,n):(n=sb(e,t,n,r),n!==null&&(hn(n,e,r),__(n,t,r)))}function A_(e,t,n){var r=Mn();yu(e,t,n,r)}function yu(e,t,n,r){var a={lane:r,revertLane:0,gesture:null,action:n,hasEagerState:!1,eagerState:null,next:null};if(up(e))E_(t,a);else{var i=e.alternate;if(e.lanes===0&&(i===null||i.lanes===0)&&(i=t.lastRenderedReducer,i!==null))try{var o=t.lastRenderedState,l=i(o,n);if(a.hasEagerState=!0,a.eagerState=l,Pn(l,o))return ap(e,t,a,0),Fe===null&&rp(),!1}catch{}finally{}if(n=sb(e,t,a,r),n!==null)return hn(n,e,r),__(n,t,r),!0}return!1}function Tb(e,t,n,r){if(r={lane:2,revertLane:Lb(),gesture:null,action:r,hasEagerState:!1,eagerState:null,next:null},up(e)){if(t)throw Error(U(479))}else t=sb(e,n,r,2),t!==null&&hn(t,e,2)}function up(e){var t=e.alternate;return e===de||t!==null&&t===de}function E_(e,t){al=Ad=!0;var n=e.pending;n===null?t.next=t:(t.next=n.next,n.next=t),e.pending=t}function __(e,t,n){if(n&4194048){var r=t.lanes;r&=e.pendingLanes,n|=r,t.lanes=n,dE(e,n)}}var Du={readContext:Ut,use:lp,useCallback:ot,useContext:ot,useEffect:ot,useImperativeHandle:ot,useLayoutEffect:ot,useInsertionEffect:ot,useMemo:ot,useReducer:ot,useRef:ot,useState:ot,useDebugValue:ot,useDeferredValue:ot,useTransition:ot,useSyncExternalStore:ot,useId:ot,useHostTransitionStatus:ot,useFormState:ot,useActionState:ot,useOptimistic:ot,useMemoCache:ot,useCacheRefresh:ot};Du.useEffectEvent=ot;var T_={readContext:Ut,use:lp,useCallback:function(e,t){return Qt().memoizedState=[e,t===void 0?null:t],e},useContext:Ut,useEffect:sS,useImperativeHandle:function(e,t,n){n=n!=null?n.concat([e]):null,Wf(4194308,4,m_.bind(null,t,e),n)},useLayoutEffect:function(e,t){return Wf(4194308,4,e,t)},useInsertionEffect:function(e,t){Wf(4,2,e,t)},useMemo:function(e,t){var n=Qt();t=t===void 0?null:t;var r=e();if(to){Ia(!0);try{e()}finally{Ia(!1)}}return n.memoizedState=[r,t],r},useReducer:function(e,t,n){var r=Qt();if(n!==void 0){var a=n(t);if(to){Ia(!0);try{n(t)}finally{Ia(!1)}}}else a=t;return r.memoizedState=r.baseState=a,e={pending:null,lanes:0,dispatch:null,lastRenderedReducer:e,lastRenderedState:a},r.queue=e,e=e.dispatch=$4.bind(null,de,e),[r.memoizedState,e]},useRef:function(e){var t=Qt();return e={current:e},t.memoizedState=e},useState:function(e){e=gv(e);var t=e.queue,n=A_.bind(null,de,t);return t.dispatch=n,[e.memoizedState,n]},useDebugValue:Ab,useDeferredValue:function(e,t){var n=Qt();return Eb(n,e,t)},useTransition:function(){var e=gv(!1);return e=x_.bind(null,de,e.queue,!0,!1),Qt().memoizedState=e,[!1,e]},useSyncExternalStore:function(e,t,n){var r=de,a=Qt();if(Ae){if(n===void 0)throw Error(U(407));n=n()}else{if(n=t(),Fe===null)throw Error(U(349));we&127||t_(r,t,n)}a.memoizedState=n;var i={value:n,getSnapshot:t};return a.queue=i,sS(r_.bind(null,r,i,e),[e]),r.flags|=2048,Tl(9,{destroy:void 0},n_.bind(null,r,i,n,t),null),n},useId:function(){var e=Qt(),t=Fe.identifierPrefix;if(Ae){var n=Sr,r=xr;n=(r&~(1<<32-Cn(r)-1)).toString(32)+n,t="_"+t+"R_"+n,n=Ed++,0<\/script>",i=i.removeChild(i.firstChild);break;case"select":i=typeof r.is=="string"?o.createElement("select",{is:r.is}):o.createElement("select"),r.multiple?i.multiple=!0:r.size&&(i.size=r.size);break;default:i=typeof r.is=="string"?o.createElement(a,{is:r.is}):o.createElement(a)}}i[zt]=t,i[mn]=r;e:for(o=t.child;o!==null;){if(o.tag===5||o.tag===6)i.appendChild(o.stateNode);else if(o.tag!==4&&o.tag!==27&&o.child!==null){o.child.return=o,o=o.child;continue}if(o===t)break e;for(;o.sibling===null;){if(o.return===null||o.return===t)break e;o=o.return}o.sibling.return=o.return,o=o.sibling}t.stateNode=i;e:switch(qt(i,a,r),a){case"button":case"input":case"select":case"textarea":r=!!r.autoFocus;break e;case"img":r=!0;break e;default:r=!1}r&&kr(t)}}return Qe(t),Gm(t,t.type,e===null?null:e.memoizedProps,t.pendingProps,n),null;case 6:if(e&&t.stateNode!=null)e.memoizedProps!==r&&kr(t);else{if(typeof r!="string"&&t.stateNode===null)throw Error(U(166));if(e=Ka.current,Ao(t)){if(e=t.stateNode,n=t.memoizedProps,r=null,a=Bt,a!==null)switch(a.tag){case 27:case 5:r=a.memoizedProps}e[zt]=t,e=!!(e.nodeValue===n||r!==null&&r.suppressHydrationWarning===!0||AT(e.nodeValue,n)),e||ii(t,!0)}else e=Dd(e).createTextNode(r),e[zt]=t,t.stateNode=e}return Qe(t),null;case 31:if(n=t.memoizedState,e===null||e.memoizedState!==null){if(r=Ao(t),n!==null){if(e===null){if(!r)throw Error(U(318));if(e=t.memoizedState,e=e!==null?e.dehydrated:null,!e)throw Error(U(557));e[zt]=t}else Zi(),!(t.flags&128)&&(t.memoizedState=null),t.flags|=4;Qe(t),e=!1}else n=Dm(),e!==null&&e.memoizedState!==null&&(e.memoizedState.hydrationErrors=n),e=!0;if(!e)return t.flags&256?(On(t),t):(On(t),null);if(t.flags&128)throw Error(U(558))}return Qe(t),null;case 13:if(r=t.memoizedState,e===null||e.memoizedState!==null&&e.memoizedState.dehydrated!==null){if(a=Ao(t),r!==null&&r.dehydrated!==null){if(e===null){if(!a)throw Error(U(318));if(a=t.memoizedState,a=a!==null?a.dehydrated:null,!a)throw Error(U(317));a[zt]=t}else Zi(),!(t.flags&128)&&(t.memoizedState=null),t.flags|=4;Qe(t),a=!1}else a=Dm(),e!==null&&e.memoizedState!==null&&(e.memoizedState.hydrationErrors=a),a=!0;if(!a)return t.flags&256?(On(t),t):(On(t),null)}return On(t),t.flags&128?(t.lanes=n,t):(n=r!==null,e=e!==null&&e.memoizedState!==null,n&&(r=t.child,a=null,r.alternate!==null&&r.alternate.memoizedState!==null&&r.alternate.memoizedState.cachePool!==null&&(a=r.alternate.memoizedState.cachePool.pool),i=null,r.memoizedState!==null&&r.memoizedState.cachePool!==null&&(i=r.memoizedState.cachePool.pool),i!==a&&(r.flags|=2048)),n!==e&&n&&(t.child.flags|=8192),xf(t,t.updateQueue),Qe(t),null);case 4:return jl(),e===null&&zb(t.stateNode.containerInfo),Qe(t),null;case 10:return ea(t.type),Qe(t),null;case 19:if(Rt(ct),r=t.memoizedState,r===null)return Qe(t),null;if(a=(t.flags&128)!==0,i=r.rendering,i===null)if(a)Is(r,!1);else{if(ut!==0||e!==null&&e.flags&128)for(e=t.child;e!==null;){if(i=Od(e),i!==null){for(t.flags|=128,Is(r,!1),e=i.updateQueue,t.updateQueue=e,xf(t,e),t.subtreeFlags=0,e=n,n=t.child;n!==null;)IE(n,e),n=n.sibling;return Ye(ct,ct.current&1|2),Ae&&qr(t,r.treeForkCount),t.child}e=e.sibling}r.tail!==null&&Tn()>Cd&&(t.flags|=128,a=!0,Is(r,!1),t.lanes=4194304)}else{if(!a)if(e=Od(i),e!==null){if(t.flags|=128,a=!0,e=e.updateQueue,t.updateQueue=e,xf(t,e),Is(r,!0),r.tail===null&&r.tailMode==="hidden"&&!i.alternate&&!Ae)return Qe(t),null}else 2*Tn()-r.renderingStartTime>Cd&&n!==536870912&&(t.flags|=128,a=!0,Is(r,!1),t.lanes=4194304);r.isBackwards?(i.sibling=t.child,t.child=i):(e=r.last,e!==null?e.sibling=i:t.child=i,r.last=i)}return r.tail!==null?(e=r.tail,r.rendering=e,r.tail=e.sibling,r.renderingStartTime=Tn(),e.sibling=null,n=ct.current,Ye(ct,a?n&1|2:n&1),Ae&&qr(t,r.treeForkCount),e):(Qe(t),null);case 22:case 23:return On(t),yb(),r=t.memoizedState!==null,e!==null?e.memoizedState!==null!==r&&(t.flags|=8192):r&&(t.flags|=8192),r?n&536870912&&!(t.flags&128)&&(Qe(t),t.subtreeFlags&6&&(t.flags|=8192)):Qe(t),n=t.updateQueue,n!==null&&xf(t,n.retryQueue),n=null,e!==null&&e.memoizedState!==null&&e.memoizedState.cachePool!==null&&(n=e.memoizedState.cachePool.pool),r=null,t.memoizedState!==null&&t.memoizedState.cachePool!==null&&(r=t.memoizedState.cachePool.pool),r!==n&&(t.flags|=2048),e!==null&&Rt(Ki),null;case 24:return n=null,e!==null&&(n=e.memoizedState.cache),t.memoizedState.cache!==n&&(t.flags|=2048),ea(yt),Qe(t),null;case 25:return null;case 30:return null}throw Error(U(156,t.tag))}function B4(e,t){switch(fb(t),t.tag){case 1:return e=t.flags,e&65536?(t.flags=e&-65537|128,t):null;case 3:return ea(yt),jl(),e=t.flags,e&65536&&!(e&128)?(t.flags=e&-65537|128,t):null;case 26:case 27:case 5:return md(t),null;case 31:if(t.memoizedState!==null){if(On(t),t.alternate===null)throw Error(U(340));Zi()}return e=t.flags,e&65536?(t.flags=e&-65537|128,t):null;case 13:if(On(t),e=t.memoizedState,e!==null&&e.dehydrated!==null){if(t.alternate===null)throw Error(U(340));Zi()}return e=t.flags,e&65536?(t.flags=e&-65537|128,t):null;case 19:return Rt(ct),null;case 4:return jl(),null;case 10:return ea(t.type),null;case 22:case 23:return On(t),yb(),e!==null&&Rt(Ki),e=t.flags,e&65536?(t.flags=e&-65537|128,t):null;case 24:return ea(yt),null;case 25:return null;default:return null}}function I_(e,t){switch(fb(t),t.tag){case 3:ea(yt),jl();break;case 26:case 27:case 5:md(t);break;case 4:jl();break;case 31:t.memoizedState!==null&&On(t);break;case 13:On(t);break;case 19:Rt(ct);break;case 10:ea(t.type);break;case 22:case 23:On(t),yb(),e!==null&&Rt(Ki);break;case 24:ea(yt)}}function Uc(e,t){try{var n=t.updateQueue,r=n!==null?n.lastEffect:null;if(r!==null){var a=r.next;n=a;do{if((n.tag&e)===e){r=void 0;var i=n.create,o=n.inst;r=i(),o.destroy=r}n=n.next}while(n!==a)}}catch(l){$e(t,t.return,l)}}function oi(e,t,n){try{var r=t.updateQueue,a=r!==null?r.lastEffect:null;if(a!==null){var i=a.next;r=i;do{if((r.tag&e)===e){var o=r.inst,l=o.destroy;if(l!==void 0){o.destroy=void 0,a=t;var s=n,u=l;try{u()}catch(d){$e(a,s,d)}}}r=r.next}while(r!==i)}}catch(d){$e(t,t.return,d)}}function U_(e){var t=e.updateQueue;if(t!==null){var n=e.stateNode;try{QE(t,n)}catch(r){$e(e,e.return,r)}}}function q_(e,t,n){n.props=no(e.type,e.memoizedProps),n.state=e.memoizedState;try{n.componentWillUnmount()}catch(r){$e(e,t,r)}}function vu(e,t){try{var n=e.ref;if(n!==null){switch(e.tag){case 26:case 27:case 5:var r=e.stateNode;break;case 30:r=e.stateNode;break;default:r=e.stateNode}typeof n=="function"?e.refCleanup=n(r):n.current=r}}catch(a){$e(e,t,a)}}function wr(e,t){var n=e.ref,r=e.refCleanup;if(n!==null)if(typeof r=="function")try{r()}catch(a){$e(e,t,a)}finally{e.refCleanup=null,e=e.alternate,e!=null&&(e.refCleanup=null)}else if(typeof n=="function")try{n(null)}catch(a){$e(e,t,a)}else n.current=null}function H_(e){var t=e.type,n=e.memoizedProps,r=e.stateNode;try{e:switch(t){case"button":case"input":case"select":case"textarea":n.autoFocus&&r.focus();break e;case"img":n.src?r.src=n.src:n.srcSet&&(r.srcset=n.srcSet)}}catch(a){$e(e,e.return,a)}}function Km(e,t,n){try{var r=e.stateNode;l$(r,e.type,n,t),r[mn]=t}catch(a){$e(e,e.return,a)}}function F_(e){return e.tag===5||e.tag===3||e.tag===26||e.tag===27&&ui(e.type)||e.tag===4}function Ym(e){e:for(;;){for(;e.sibling===null;){if(e.return===null||F_(e.return))return null;e=e.return}for(e.sibling.return=e.return,e=e.sibling;e.tag!==5&&e.tag!==6&&e.tag!==18;){if(e.tag===27&&ui(e.type)||e.flags&2||e.child===null||e.tag===4)continue e;e.child.return=e,e=e.child}if(!(e.flags&2))return e.stateNode}}function Av(e,t,n){var r=e.tag;if(r===5||r===6)e=e.stateNode,t?(n.nodeType===9?n.body:n.nodeName==="HTML"?n.ownerDocument.body:n).insertBefore(e,t):(t=n.nodeType===9?n.body:n.nodeName==="HTML"?n.ownerDocument.body:n,t.appendChild(e),n=n._reactRootContainer,n!=null||t.onclick!==null||(t.onclick=Xr));else if(r!==4&&(r===27&&ui(e.type)&&(n=e.stateNode,t=null),e=e.child,e!==null))for(Av(e,t,n),e=e.sibling;e!==null;)Av(e,t,n),e=e.sibling}function Nd(e,t,n){var r=e.tag;if(r===5||r===6)e=e.stateNode,t?n.insertBefore(e,t):n.appendChild(e);else if(r!==4&&(r===27&&ui(e.type)&&(n=e.stateNode),e=e.child,e!==null))for(Nd(e,t,n),e=e.sibling;e!==null;)Nd(e,t,n),e=e.sibling}function G_(e){var t=e.stateNode,n=e.memoizedProps;try{for(var r=e.type,a=t.attributes;a.length;)t.removeAttributeNode(a[0]);qt(t,r,n),t[zt]=e,t[mn]=n}catch(i){$e(e,e.return,i)}}var Yr=!1,mt=!1,Vm=!1,SS=typeof WeakSet=="function"?WeakSet:Set,Nt=null;function I4(e,t){if(e=e.containerInfo,Rv=Id,e=RE(e),ob(e)){if("selectionStart"in e)var n={start:e.selectionStart,end:e.selectionEnd};else e:{n=(n=e.ownerDocument)&&n.defaultView||window;var r=n.getSelection&&n.getSelection();if(r&&r.rangeCount!==0){n=r.anchorNode;var a=r.anchorOffset,i=r.focusNode;r=r.focusOffset;try{n.nodeType,i.nodeType}catch{n=null;break e}var o=0,l=-1,s=-1,u=0,d=0,f=e,h=null;t:for(;;){for(var p;f!==n||a!==0&&f.nodeType!==3||(l=o+a),f!==i||r!==0&&f.nodeType!==3||(s=o+r),f.nodeType===3&&(o+=f.nodeValue.length),(p=f.firstChild)!==null;)h=f,f=p;for(;;){if(f===e)break t;if(h===n&&++u===a&&(l=o),h===i&&++d===r&&(s=o),(p=f.nextSibling)!==null)break;f=h,h=f.parentNode}f=p}n=l===-1||s===-1?null:{start:l,end:s}}else n=null}n=n||{start:0,end:0}}else n=null;for(Pv={focusedElem:e,selectionRange:n},Id=!1,Nt=t;Nt!==null;)if(t=Nt,e=t.child,(t.subtreeFlags&1028)!==0&&e!==null)e.return=t,Nt=e;else for(;Nt!==null;){switch(t=Nt,i=t.alternate,e=t.flags,t.tag){case 0:if(e&4&&(e=t.updateQueue,e=e!==null?e.events:null,e!==null))for(n=0;n title"))),qt(i,r,n),i[zt]=e,Ct(i),r=i;break e;case"link":var o=US("link","href",a).get(r+(n.href||""));if(o){for(var l=0;lx&&(o=x,x=v,v=o);var m=K1(l,v),y=K1(l,x);if(m&&y&&(p.rangeCount!==1||p.anchorNode!==m.node||p.anchorOffset!==m.offset||p.focusNode!==y.node||p.focusOffset!==y.offset)){var g=f.createRange();g.setStart(m.node,m.offset),p.removeAllRanges(),v>x?(p.addRange(g),p.extend(y.node,y.offset)):(g.setEnd(y.node,y.offset),p.addRange(g))}}}}for(f=[],p=l;p=p.parentNode;)p.nodeType===1&&f.push({element:p,left:p.scrollLeft,top:p.scrollTop});for(typeof l.focus=="function"&&l.focus(),l=0;ln?32:n,ie.T=null,n=Tv,Tv=null;var i=Wa,o=ta;if(jt=0,Cl=Wa=null,ta=0,Te&6)throw Error(U(331));var l=Te;if(Te|=4,nT(i.current),J_(i,i.current,o,n),Te=l,qc(0,!1),Nn&&typeof Nn.onPostCommitFiberRoot=="function")try{Nn.onPostCommitFiberRoot($c,i)}catch{}return!0}finally{Ne.p=a,ie.T=r,vT(e,t)}}function AS(e,t,n){t=Gn(n,t),t=wv(e.stateNode,t,2),e=Xa(e,t,2),e!==null&&(Dc(e,2),Nr(e))}function $e(e,t,n){if(e.tag===3)AS(e,e,n);else for(;t!==null;){if(t.tag===3){AS(t,e,n);break}else if(t.tag===1){var r=t.stateNode;if(typeof t.type.getDerivedStateFromError=="function"||typeof r.componentDidCatch=="function"&&(Qa===null||!Qa.has(r))){e=Gn(n,e),n=P_(2),r=Xa(t,n,2),r!==null&&($_(n,r,t,e),Dc(r,2),Nr(r));break}}t=t.return}}function Qm(e,t,n){var r=e.pingCache;if(r===null){r=e.pingCache=new H4;var a=new Set;r.set(t,a)}else a=r.get(t),a===void 0&&(a=new Set,r.set(t,a));a.has(n)||($b=!0,a.add(n),e=V4.bind(null,e,t,n),t.then(e,e))}function V4(e,t,n){var r=e.pingCache;r!==null&&r.delete(t),e.pingedLanes|=e.suspendedLanes&n,e.warmLanes&=~n,Fe===e&&(we&n)===n&&(ut===4||ut===3&&(we&62914560)===we&&300>Tn()-cp?!(Te&2)&&Ml(e,0):kb|=n,Nl===we&&(Nl=0)),Nr(e)}function bT(e,t){t===0&&(t=cE()),e=mo(e,t),e!==null&&(Dc(e,t),Nr(e))}function X4(e){var t=e.memoizedState,n=0;t!==null&&(n=t.retryLane),bT(e,n)}function Q4(e,t){var n=0;switch(e.tag){case 31:case 13:var r=e.stateNode,a=e.memoizedState;a!==null&&(n=a.retryLane);break;case 19:r=e.stateNode;break;case 22:r=e.stateNode._retryCache;break;default:throw Error(U(314))}r!==null&&r.delete(t),bT(e,n)}function W4(e,t){return W0(e,t)}var Pd=null,Po=null,Cv=!1,$d=!1,Wm=!1,Fa=0;function Nr(e){e!==Po&&e.next===null&&(Po===null?Pd=Po=e:Po=Po.next=e),$d=!0,Cv||(Cv=!0,J4())}function qc(e,t){if(!Wm&&$d){Wm=!0;do for(var n=!1,r=Pd;r!==null;){if(e!==0){var a=r.pendingLanes;if(a===0)var i=0;else{var o=r.suspendedLanes,l=r.pingedLanes;i=(1<<31-Cn(42|e)+1)-1,i&=a&~(o&~l),i=i&201326741?i&201326741|1:i?i|2:0}i!==0&&(n=!0,ES(r,i))}else i=we,i=Jh(r,r===Fe?i:0,r.cancelPendingCommit!==null||r.timeoutHandle!==-1),!(i&3)||kc(r,i)||(n=!0,ES(r,i));r=r.next}while(n);Wm=!1}}function Z4(){xT()}function xT(){$d=Cv=!1;var e=0;Fa!==0&&u$()&&(e=Fa);for(var t=Tn(),n=null,r=Pd;r!==null;){var a=r.next,i=ST(r,t);i===0?(r.next=null,n===null?Pd=a:n.next=a,a===null&&(Po=n)):(n=r,(e!==0||i&3)&&($d=!0)),r=a}jt!==0&&jt!==5||qc(e),Fa!==0&&(Fa=0)}function ST(e,t){for(var n=e.suspendedLanes,r=e.pingedLanes,a=e.expirationTimes,i=e.pendingLanes&-62914561;0l)break;var d=s.transferSize,f=s.initiatorType;d&&MS(f)&&(s=s.responseEnd,o+=d*(s"u"?null:document;function CT(e,t,n){var r=ps;if(r&&typeof t=="string"&&t){var a=Fn(t);a='link[rel="'+e+'"][href="'+a+'"]',typeof n=="string"&&(a+='[crossorigin="'+n+'"]'),zS.has(a)||(zS.add(a),e={rel:e,crossOrigin:n,href:t},r.querySelector(a)===null&&(t=r.createElement("link"),qt(t,"link",e),Ct(t),r.head.appendChild(t)))}}function g$(e){ya.D(e),CT("dns-prefetch",e,null)}function b$(e,t){ya.C(e,t),CT("preconnect",e,t)}function x$(e,t,n){ya.L(e,t,n);var r=ps;if(r&&e&&t){var a='link[rel="preload"][as="'+Fn(t)+'"]';t==="image"&&n&&n.imageSrcSet?(a+='[imagesrcset="'+Fn(n.imageSrcSet)+'"]',typeof n.imageSizes=="string"&&(a+='[imagesizes="'+Fn(n.imageSizes)+'"]')):a+='[href="'+Fn(e)+'"]';var i=a;switch(t){case"style":i=Rl(e);break;case"script":i=ms(e)}Zn.has(i)||(e=nt({rel:"preload",href:t==="image"&&n&&n.imageSrcSet?void 0:e,as:t},n),Zn.set(i,e),r.querySelector(a)!==null||t==="style"&&r.querySelector(Hc(i))||t==="script"&&r.querySelector(Fc(i))||(t=r.createElement("link"),qt(t,"link",e),Ct(t),r.head.appendChild(t)))}}function S$(e,t){ya.m(e,t);var n=ps;if(n&&e){var r=t&&typeof t.as=="string"?t.as:"script",a='link[rel="modulepreload"][as="'+Fn(r)+'"][href="'+Fn(e)+'"]',i=a;switch(r){case"audioworklet":case"paintworklet":case"serviceworker":case"sharedworker":case"worker":case"script":i=ms(e)}if(!Zn.has(i)&&(e=nt({rel:"modulepreload",href:e},t),Zn.set(i,e),n.querySelector(a)===null)){switch(r){case"audioworklet":case"paintworklet":case"serviceworker":case"sharedworker":case"worker":case"script":if(n.querySelector(Fc(i)))return}r=n.createElement("link"),qt(r,"link",e),Ct(r),n.head.appendChild(r)}}}function w$(e,t,n){ya.S(e,t,n);var r=ps;if(r&&e){var a=Jo(r).hoistableStyles,i=Rl(e);t=t||"default";var o=a.get(i);if(!o){var l={loading:0,preload:null};if(o=r.querySelector(Hc(i)))l.loading=5;else{e=nt({rel:"stylesheet",href:e,"data-precedence":t},n),(n=Zn.get(i))&&Bb(e,n);var s=o=r.createElement("link");Ct(s),qt(s,"link",e),s._p=new Promise(function(u,d){s.onload=u,s.onerror=d}),s.addEventListener("load",function(){l.loading|=1}),s.addEventListener("error",function(){l.loading|=2}),l.loading|=4,td(o,t,r)}o={type:"stylesheet",instance:o,count:1,state:l},a.set(i,o)}}}function j$(e,t){ya.X(e,t);var n=ps;if(n&&e){var r=Jo(n).hoistableScripts,a=ms(e),i=r.get(a);i||(i=n.querySelector(Fc(a)),i||(e=nt({src:e,async:!0},t),(t=Zn.get(a))&&Ib(e,t),i=n.createElement("script"),Ct(i),qt(i,"link",e),n.head.appendChild(i)),i={type:"script",instance:i,count:1,state:null},r.set(a,i))}}function O$(e,t){ya.M(e,t);var n=ps;if(n&&e){var r=Jo(n).hoistableScripts,a=ms(e),i=r.get(a);i||(i=n.querySelector(Fc(a)),i||(e=nt({src:e,async:!0,type:"module"},t),(t=Zn.get(a))&&Ib(e,t),i=n.createElement("script"),Ct(i),qt(i,"link",e),n.head.appendChild(i)),i={type:"script",instance:i,count:1,state:null},r.set(a,i))}}function BS(e,t,n,r){var a=(a=Ka.current)?Ld(a):null;if(!a)throw Error(U(446));switch(e){case"meta":case"title":return null;case"style":return typeof n.precedence=="string"&&typeof n.href=="string"?(t=Rl(n.href),n=Jo(a).hoistableStyles,r=n.get(t),r||(r={type:"style",instance:null,count:0,state:null},n.set(t,r)),r):{type:"void",instance:null,count:0,state:null};case"link":if(n.rel==="stylesheet"&&typeof n.href=="string"&&typeof n.precedence=="string"){e=Rl(n.href);var i=Jo(a).hoistableStyles,o=i.get(e);if(o||(a=a.ownerDocument||a,o={type:"stylesheet",instance:null,count:0,state:{loading:0,preload:null}},i.set(e,o),(i=a.querySelector(Hc(e)))&&!i._p&&(o.instance=i,o.state.loading=5),Zn.has(e)||(n={rel:"preload",as:"style",href:n.href,crossOrigin:n.crossOrigin,integrity:n.integrity,media:n.media,hrefLang:n.hrefLang,referrerPolicy:n.referrerPolicy},Zn.set(e,n),i||A$(a,e,n,o.state))),t&&r===null)throw Error(U(528,""));return o}if(t&&r!==null)throw Error(U(529,""));return null;case"script":return t=n.async,n=n.src,typeof n=="string"&&t&&typeof t!="function"&&typeof t!="symbol"?(t=ms(n),n=Jo(a).hoistableScripts,r=n.get(t),r||(r={type:"script",instance:null,count:0,state:null},n.set(t,r)),r):{type:"void",instance:null,count:0,state:null};default:throw Error(U(444,e))}}function Rl(e){return'href="'+Fn(e)+'"'}function Hc(e){return'link[rel="stylesheet"]['+e+"]"}function MT(e){return nt({},e,{"data-precedence":e.precedence,precedence:null})}function A$(e,t,n,r){e.querySelector('link[rel="preload"][as="style"]['+t+"]")?r.loading=1:(t=e.createElement("link"),r.preload=t,t.addEventListener("load",function(){return r.loading|=1}),t.addEventListener("error",function(){return r.loading|=2}),qt(t,"link",n),Ct(t),e.head.appendChild(t))}function ms(e){return'[src="'+Fn(e)+'"]'}function Fc(e){return"script[async]"+e}function IS(e,t,n){if(t.count++,t.instance===null)switch(t.type){case"style":var r=e.querySelector('style[data-href~="'+Fn(n.href)+'"]');if(r)return t.instance=r,Ct(r),r;var a=nt({},n,{"data-href":n.href,"data-precedence":n.precedence,href:null,precedence:null});return r=(e.ownerDocument||e).createElement("style"),Ct(r),qt(r,"style",a),td(r,n.precedence,e),t.instance=r;case"stylesheet":a=Rl(n.href);var i=e.querySelector(Hc(a));if(i)return t.state.loading|=4,t.instance=i,Ct(i),i;r=MT(n),(a=Zn.get(a))&&Bb(r,a),i=(e.ownerDocument||e).createElement("link"),Ct(i);var o=i;return o._p=new Promise(function(l,s){o.onload=l,o.onerror=s}),qt(i,"link",r),t.state.loading|=4,td(i,n.precedence,e),t.instance=i;case"script":return i=ms(n.src),(a=e.querySelector(Fc(i)))?(t.instance=a,Ct(a),a):(r=n,(a=Zn.get(i))&&(r=nt({},n),Ib(r,a)),e=e.ownerDocument||e,a=e.createElement("script"),Ct(a),qt(a,"link",r),e.head.appendChild(a),t.instance=a);case"void":return null;default:throw Error(U(443,t.type))}else t.type==="stylesheet"&&!(t.state.loading&4)&&(r=t.instance,t.state.loading|=4,td(r,n.precedence,e));return t.instance}function td(e,t,n){for(var r=n.querySelectorAll('link[rel="stylesheet"][data-precedence],style[data-precedence]'),a=r.length?r[r.length-1]:null,i=a,o=0;o title"):null)}function E$(e,t,n){if(n===1||t.itemProp!=null)return!1;switch(e){case"meta":case"title":return!0;case"style":if(typeof t.precedence!="string"||typeof t.href!="string"||t.href==="")break;return!0;case"link":if(typeof t.rel!="string"||typeof t.href!="string"||t.href===""||t.onLoad||t.onError)break;switch(t.rel){case"stylesheet":return e=t.disabled,typeof t.precedence=="string"&&e==null;default:return!0}case"script":if(t.async&&typeof t.async!="function"&&typeof t.async!="symbol"&&!t.onLoad&&!t.onError&&t.src&&typeof t.src=="string")return!0}return!1}function RT(e){return!(e.type==="stylesheet"&&!(e.state.loading&3))}function _$(e,t,n,r){if(n.type==="stylesheet"&&(typeof r.media!="string"||matchMedia(r.media).matches!==!1)&&!(n.state.loading&4)){if(n.instance===null){var a=Rl(r.href),i=t.querySelector(Hc(a));if(i){t=i._p,t!==null&&typeof t=="object"&&typeof t.then=="function"&&(e.count++,e=zd.bind(e),t.then(e,e)),n.state.loading|=4,n.instance=i,Ct(i);return}i=t.ownerDocument||t,r=MT(r),(a=Zn.get(a))&&Bb(r,a),i=i.createElement("link"),Ct(i);var o=i;o._p=new Promise(function(l,s){o.onload=l,o.onerror=s}),qt(i,"link",r),n.instance=i}e.stylesheets===null&&(e.stylesheets=new Map),e.stylesheets.set(n,t),(t=n.state.preload)&&!(n.state.loading&3)&&(e.count++,n=zd.bind(e),t.addEventListener("load",n),t.addEventListener("error",n))}}var ry=0;function T$(e,t){return e.stylesheets&&e.count===0&&rd(e,e.stylesheets),0ry?50:800)+t);return e.unsuspend=n,function(){e.unsuspend=null,clearTimeout(r),clearTimeout(a)}}:null}function zd(){if(this.count--,this.count===0&&(this.imgCount===0||!this.waitingForImages)){if(this.stylesheets)rd(this,this.stylesheets);else if(this.unsuspend){var e=this.unsuspend;this.unsuspend=null,e()}}}var Bd=null;function rd(e,t){e.stylesheets=null,e.unsuspend!==null&&(e.count++,Bd=new Map,t.forEach(N$,e),Bd=null,zd.call(e))}function N$(e,t){if(!(t.state.loading&4)){var n=Bd.get(e);if(n)var r=n.get(null);else{n=new Map,Bd.set(e,n);for(var a=e.querySelectorAll("link[data-precedence],style[data-precedence]"),i=0;i"u"||typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE!="function"))try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(IT)}catch(e){console.error(e)}}IT(),VA.exports=Wh;var L$=VA.exports;/** + * react-router v7.17.0 + * + * Copyright (c) Remix Software Inc. + * + * This source code is licensed under the MIT license found in the + * LICENSE.md file in the root directory of this source tree. + * + * @license MIT + */var XS="popstate";function QS(e){return typeof e=="object"&&e!=null&&"pathname"in e&&"search"in e&&"hash"in e&&"state"in e&&"key"in e}function z$(e={}){function t(r,a){var u;let i=(u=a.state)==null?void 0:u.masked,{pathname:o,search:l,hash:s}=i||r.location;return Uv("",{pathname:o,search:l,hash:s},a.state&&a.state.usr||null,a.state&&a.state.key||"default",i?{pathname:r.location.pathname,search:r.location.search,hash:r.location.hash}:void 0)}function n(r,a){return typeof a=="string"?a:qu(a)}return I$(t,n,null,e)}function it(e,t){if(e===!1||e===null||typeof e>"u")throw new Error(t)}function dr(e,t){if(!e){typeof console<"u"&&console.warn(t);try{throw new Error(t)}catch{}}}function B$(){return Math.random().toString(36).substring(2,10)}function WS(e,t){return{usr:e.state,key:e.key,idx:t,masked:e.mask?{pathname:e.pathname,search:e.search,hash:e.hash}:void 0}}function Uv(e,t,n=null,r,a){return{pathname:typeof e=="string"?e:e.pathname,search:"",hash:"",...typeof t=="string"?ys(t):t,state:n,key:t&&t.key||r||B$(),mask:a}}function qu({pathname:e="/",search:t="",hash:n=""}){return t&&t!=="?"&&(e+=t.charAt(0)==="?"?t:"?"+t),n&&n!=="#"&&(e+=n.charAt(0)==="#"?n:"#"+n),e}function ys(e){let t={};if(e){let n=e.indexOf("#");n>=0&&(t.hash=e.substring(n),e=e.substring(0,n));let r=e.indexOf("?");r>=0&&(t.search=e.substring(r),e=e.substring(0,r)),e&&(t.pathname=e)}return t}function I$(e,t,n,r={}){let{window:a=document.defaultView,v5Compat:i=!1}=r,o=a.history,l="POP",s=null,u=d();u==null&&(u=0,o.replaceState({...o.state,idx:u},""));function d(){return(o.state||{idx:null}).idx}function f(){l="POP";let x=d(),m=x==null?null:x-u;u=x,s&&s({action:l,location:v.location,delta:m})}function h(x,m){l="PUSH";let y=QS(x)?x:Uv(v.location,x,m);u=d()+1;let g=WS(y,u),S=v.createHref(y.mask||y);try{o.pushState(g,"",S)}catch(w){if(w instanceof DOMException&&w.name==="DataCloneError")throw w;a.location.assign(S)}i&&s&&s({action:l,location:v.location,delta:1})}function p(x,m){l="REPLACE";let y=QS(x)?x:Uv(v.location,x,m);u=d();let g=WS(y,u),S=v.createHref(y.mask||y);o.replaceState(g,"",S),i&&s&&s({action:l,location:v.location,delta:0})}function b(x){return U$(a,x)}let v={get action(){return l},get location(){return e(a,o)},listen(x){if(s)throw new Error("A history only accepts one active listener");return a.addEventListener(XS,f),s=x,()=>{a.removeEventListener(XS,f),s=null}},createHref(x){return t(a,x)},createURL:b,encodeLocation(x){let m=b(x);return{pathname:m.pathname,search:m.search,hash:m.hash}},push:h,replace:p,go(x){return o.go(x)}};return v}function U$(e,t,n=!1){let r="http://localhost";e&&(r=e.location.origin!=="null"?e.location.origin:e.location.href),it(r,"No window.location.(origin|href) available to create URL");let a=typeof t=="string"?t:qu(t);return a=a.replace(/ $/,"%20"),!n&&a.startsWith("//")&&(a=r+a),new URL(a,r)}function UT(e,t,n="/"){return q$(e,t,n,!1)}function q$(e,t,n,r,a){let i=typeof t=="string"?ys(t):t,o=fa(i.pathname||"/",n);if(o==null)return null;let l=H$(e),s=null,u=tk(o);for(let d=0;s==null&&d{let d={relativePath:u===void 0?o.path||"":u,caseSensitive:o.caseSensitive===!0,childrenIndex:l,route:o};if(d.relativePath.startsWith("/")){if(!d.relativePath.startsWith(r)&&s)return;it(d.relativePath.startsWith(r),`Absolute route path "${d.relativePath}" nested under path "${r}" is not valid. An absolute child route path must start with the combined path of all its parent routes.`),d.relativePath=d.relativePath.slice(r.length)}let f=fr([r,d.relativePath]),h=n.concat(d);o.children&&o.children.length>0&&(it(o.index!==!0,`Index routes must not have child routes. Please remove all child routes from route path "${f}".`),qT(o.children,t,h,f,s)),!(o.path==null&&!o.index)&&t.push({path:f,score:W$(f,o.index),routesMeta:h})};return e.forEach((o,l)=>{var s;if(o.path===""||!((s=o.path)!=null&&s.includes("?")))i(o,l);else for(let u of HT(o.path))i(o,l,!0,u)}),t}function HT(e){let t=e.split("/");if(t.length===0)return[];let[n,...r]=t,a=n.endsWith("?"),i=n.replace(/\?$/,"");if(r.length===0)return a?[i,""]:[i];let o=HT(r.join("/")),l=[];return l.push(...o.map(s=>s===""?i:[i,s].join("/"))),a&&l.push(...o),l.map(s=>e.startsWith("/")&&s===""?"/":s)}function F$(e){e.sort((t,n)=>t.score!==n.score?n.score-t.score:Z$(t.routesMeta.map(r=>r.childrenIndex),n.routesMeta.map(r=>r.childrenIndex)))}var G$=/^:[\w-]+$/,K$=3,Y$=2,V$=1,X$=10,Q$=-2,ZS=e=>e==="*";function W$(e,t){let n=e.split("/"),r=n.length;return n.some(ZS)&&(r+=Q$),t&&(r+=Y$),n.filter(a=>!ZS(a)).reduce((a,i)=>a+(G$.test(i)?K$:i===""?V$:X$),r)}function Z$(e,t){return e.length===t.length&&e.slice(0,-1).every((r,a)=>r===t[a])?e[e.length-1]-t[t.length-1]:0}function J$(e,t,n=!1){let{routesMeta:r}=e,a={},i="/",o=[];for(let l=0;l{if(d==="*"){let b=l[h]||"";o=i.slice(0,i.length-b.length).replace(/(.)\/+$/,"$1")}const p=l[h];return f&&!p?u[d]=void 0:u[d]=(p||"").replace(/%2F/g,"/"),u},{}),pathname:i,pathnameBase:o,pattern:e}}function ek(e,t=!1,n=!0){dr(e==="*"||!e.endsWith("*")||e.endsWith("/*"),`Route path "${e}" will be treated as if it were "${e.replace(/\*$/,"/*")}" because the \`*\` character must always follow a \`/\` in the pattern. To get rid of this warning, please change the route path to "${e.replace(/\*$/,"/*")}".`);let r=[],a="^"+e.replace(/\/*\*?$/,"").replace(/^\/*/,"/").replace(/[\\.*+^${}|()[\]]/g,"\\$&").replace(/\/:([\w-]+)(\?)?/g,(o,l,s,u,d)=>{if(r.push({paramName:l,isOptional:s!=null}),s){let f=d.charAt(u+o.length);return f&&f!=="/"?"/([^\\/]*)":"(?:/([^\\/]*))?"}return"/([^\\/]+)"}).replace(/\/([\w-]+)\?(\/|$)/g,"(/$1)?$2");return e.endsWith("*")?(r.push({paramName:"*"}),a+=e==="*"||e==="/*"?"(.*)$":"(?:\\/(.+)|\\/*)$"):n?a+="\\/*$":e!==""&&e!=="/"&&(a+="(?:(?=\\/|$))"),[new RegExp(a,t?void 0:"i"),r]}function tk(e){try{return e.split("/").map(t=>decodeURIComponent(t).replace(/\//g,"%2F")).join("/")}catch(t){return dr(!1,`The URL path "${e}" could not be decoded because it is a malformed URL segment. This is probably due to a bad percent encoding (${t}).`),e}}function fa(e,t){if(t==="/")return e;if(!e.toLowerCase().startsWith(t.toLowerCase()))return null;let n=t.endsWith("/")?t.length-1:t.length,r=e.charAt(n);return r&&r!=="/"?null:e.slice(n)||"/"}var nk=/^(?:[a-z][a-z0-9+.-]*:|\/\/)/i;function rk(e,t="/"){let{pathname:n,search:r="",hash:a=""}=typeof e=="string"?ys(e):e,i;return n?(n=FT(n),n.startsWith("/")?i=JS(n.substring(1),"/"):i=JS(n,t)):i=t,{pathname:i,search:ok(r),hash:lk(a)}}function JS(e,t){let n=Hd(t).split("/");return e.split("/").forEach(a=>{a===".."?n.length>1&&n.pop():a!=="."&&n.push(a)}),n.length>1?n.join("/"):"/"}function ay(e,t,n,r){return`Cannot include a '${e}' character in a manually specified \`to.${t}\` field [${JSON.stringify(r)}]. Please separate it out to the \`to.${n}\` field. Alternatively you may provide the full path as a string in and the router will parse it for you.`}function ak(e){return e.filter((t,n)=>n===0||t.route.path&&t.route.path.length>0)}function Gb(e){let t=ak(e);return t.map((n,r)=>r===t.length-1?n.pathname:n.pathnameBase)}function mp(e,t,n,r=!1){let a;typeof e=="string"?a=ys(e):(a={...e},it(!a.pathname||!a.pathname.includes("?"),ay("?","pathname","search",a)),it(!a.pathname||!a.pathname.includes("#"),ay("#","pathname","hash",a)),it(!a.search||!a.search.includes("#"),ay("#","search","hash",a)));let i=e===""||a.pathname==="",o=i?"/":a.pathname,l;if(o==null)l=n;else{let f=t.length-1;if(!r&&o.startsWith("..")){let h=o.split("/");for(;h[0]==="..";)h.shift(),f-=1;a.pathname=h.join("/")}l=f>=0?t[f]:"/"}let s=rk(a,l),u=o&&o!=="/"&&o.endsWith("/"),d=(i||o===".")&&n.endsWith("/");return!s.pathname.endsWith("/")&&(u||d)&&(s.pathname+="/"),s}var FT=e=>e.replace(/\/\/+/g,"/"),fr=e=>FT(e.join("/")),Hd=e=>e.replace(/\/+$/,""),ik=e=>Hd(e).replace(/^\/*/,"/"),ok=e=>!e||e==="?"?"":e.startsWith("?")?e:"?"+e,lk=e=>!e||e==="#"?"":e.startsWith("#")?e:"#"+e,sk=class{constructor(e,t,n,r=!1){this.status=e,this.statusText=t||"",this.internal=r,n instanceof Error?(this.data=n.toString(),this.error=n):this.data=n}};function uk(e){return e!=null&&typeof e.status=="number"&&typeof e.statusText=="string"&&typeof e.internal=="boolean"&&"data"in e}function ck(e){let t=e.map(n=>n.route.path).filter(Boolean);return fr(t)||"/"}var GT=typeof window<"u"&&typeof window.document<"u"&&typeof window.document.createElement<"u";function KT(e,t){let n=e;if(typeof n!="string"||!nk.test(n))return{absoluteURL:void 0,isExternal:!1,to:n};let r=n,a=!1;if(GT)try{let i=new URL(window.location.href),o=n.startsWith("//")?new URL(i.protocol+n):new URL(n),l=fa(o.pathname,t);o.origin===i.origin&&l!=null?n=l+o.search+o.hash:a=!0}catch{dr(!1,` contains an invalid URL which will probably break when clicked - please update to a valid URL path.`)}return{absoluteURL:r,isExternal:a,to:n}}Object.getOwnPropertyNames(Object.prototype).sort().join("\0");var YT=["POST","PUT","PATCH","DELETE"];new Set(YT);var fk=["GET",...YT];new Set(fk);var vs=O.createContext(null);vs.displayName="DataRouter";var yp=O.createContext(null);yp.displayName="DataRouterState";var VT=O.createContext(!1);function dk(){return O.useContext(VT)}var XT=O.createContext({isTransitioning:!1});XT.displayName="ViewTransition";var hk=O.createContext(new Map);hk.displayName="Fetchers";var pk=O.createContext(null);pk.displayName="Await";var kn=O.createContext(null);kn.displayName="Navigation";var Gc=O.createContext(null);Gc.displayName="Location";var pr=O.createContext({outlet:null,matches:[],isDataRoute:!1});pr.displayName="Route";var Kb=O.createContext(null);Kb.displayName="RouteError";var QT="REACT_ROUTER_ERROR",mk="REDIRECT",yk="ROUTE_ERROR_RESPONSE";function vk(e){if(e.startsWith(`${QT}:${mk}:{`))try{let t=JSON.parse(e.slice(28));if(typeof t=="object"&&t&&typeof t.status=="number"&&typeof t.statusText=="string"&&typeof t.location=="string"&&typeof t.reloadDocument=="boolean"&&typeof t.replace=="boolean")return t}catch{}}function gk(e){if(e.startsWith(`${QT}:${yk}:{`))try{let t=JSON.parse(e.slice(40));if(typeof t=="object"&&t&&typeof t.status=="number"&&typeof t.statusText=="string")return new sk(t.status,t.statusText,t.data)}catch{}}function bk(e,{relative:t}={}){it(gs(),"useHref() may be used only in the context of a component.");let{basename:n,navigator:r}=O.useContext(kn),{hash:a,pathname:i,search:o}=Kc(e,{relative:t}),l=i;return n!=="/"&&(l=i==="/"?n:fr([n,i])),r.createHref({pathname:l,search:o,hash:a})}function gs(){return O.useContext(Gc)!=null}function Cr(){return it(gs(),"useLocation() may be used only in the context of a component."),O.useContext(Gc).location}var WT="You should call navigate() in a React.useEffect(), not when your component is first rendered.";function ZT(e){O.useContext(kn).static||O.useLayoutEffect(e)}function vp(){let{isDataRoute:e}=O.useContext(pr);return e?$k():xk()}function xk(){it(gs(),"useNavigate() may be used only in the context of a component.");let e=O.useContext(vs),{basename:t,navigator:n}=O.useContext(kn),{matches:r}=O.useContext(pr),{pathname:a}=Cr(),i=JSON.stringify(Gb(r)),o=O.useRef(!1);return ZT(()=>{o.current=!0}),O.useCallback((s,u={})=>{if(dr(o.current,WT),!o.current)return;if(typeof s=="number"){n.go(s);return}let d=mp(s,JSON.parse(i),a,u.relative==="path");e==null&&t!=="/"&&(d.pathname=d.pathname==="/"?t:fr([t,d.pathname])),(u.replace?n.replace:n.push)(d,u.state,u)},[t,n,i,a,e])}var Sk=O.createContext(null);function wk(e){let t=O.useContext(pr).outlet;return O.useMemo(()=>t&&O.createElement(Sk.Provider,{value:e},t),[t,e])}function Kc(e,{relative:t}={}){let{matches:n}=O.useContext(pr),{pathname:r}=Cr(),a=JSON.stringify(Gb(n));return O.useMemo(()=>mp(e,JSON.parse(a),r,t==="path"),[e,a,r,t])}function jk(e,t){return JT(e,t)}function JT(e,t,n){var x;it(gs(),"useRoutes() may be used only in the context of a component.");let{navigator:r}=O.useContext(kn),{matches:a}=O.useContext(pr),i=a[a.length-1],o=i?i.params:{},l=i?i.pathname:"/",s=i?i.pathnameBase:"/",u=i&&i.route;{let m=u&&u.path||"";tN(l,!u||m.endsWith("*")||m.endsWith("*?"),`You rendered descendant (or called \`useRoutes()\`) at "${l}" (under ) but the parent route path has no trailing "*". This means if you navigate deeper, the parent won't match anymore and therefore the child routes will never render. + +Please change the parent to .`)}let d=Cr(),f;if(t){let m=typeof t=="string"?ys(t):t;it(s==="/"||((x=m.pathname)==null?void 0:x.startsWith(s)),`When overriding the location using \`\` or \`useRoutes(routes, location)\`, the location pathname must begin with the portion of the URL pathname that was matched by all parent routes. The current pathname base is "${s}" but pathname "${m.pathname}" was given in the \`location\` prop.`),f=m}else f=d;let h=f.pathname||"/",p=h;if(s!=="/"){let m=s.replace(/^\//,"").split("/");p="/"+h.replace(/^\//,"").split("/").slice(m.length).join("/")}let b=n&&n.state.matches.length?n.state.matches.map(m=>Object.assign(m,{route:n.manifest[m.route.id]||m.route})):UT(e,{pathname:p});dr(u||b!=null,`No routes matched location "${f.pathname}${f.search}${f.hash}" `),dr(b==null||b[b.length-1].route.element!==void 0||b[b.length-1].route.Component!==void 0||b[b.length-1].route.lazy!==void 0,`Matched leaf route at location "${f.pathname}${f.search}${f.hash}" does not have an element or Component. This means it will render an with a null value by default resulting in an "empty" page.`);let v=Tk(b&&b.map(m=>Object.assign({},m,{params:Object.assign({},o,m.params),pathname:fr([s,r.encodeLocation?r.encodeLocation(m.pathname.replace(/%/g,"%25").replace(/\?/g,"%3F").replace(/#/g,"%23")).pathname:m.pathname]),pathnameBase:m.pathnameBase==="/"?s:fr([s,r.encodeLocation?r.encodeLocation(m.pathnameBase.replace(/%/g,"%25").replace(/\?/g,"%3F").replace(/#/g,"%23")).pathname:m.pathnameBase])})),a,n);return t&&v?O.createElement(Gc.Provider,{value:{location:{pathname:"/",search:"",hash:"",state:null,key:"default",mask:void 0,...f},navigationType:"POP"}},v):v}function Ok(){let e=Pk(),t=uk(e)?`${e.status} ${e.statusText}`:e instanceof Error?e.message:JSON.stringify(e),n=e instanceof Error?e.stack:null,r="rgba(200,200,200, 0.5)",a={padding:"0.5rem",backgroundColor:r},i={padding:"2px 4px",backgroundColor:r},o=null;return console.error("Error handled by React Router default ErrorBoundary:",e),o=O.createElement(O.Fragment,null,O.createElement("p",null,"💿 Hey developer 👋"),O.createElement("p",null,"You can provide a way better UX than this when your app throws errors by providing your own ",O.createElement("code",{style:i},"ErrorBoundary")," or"," ",O.createElement("code",{style:i},"errorElement")," prop on your route.")),O.createElement(O.Fragment,null,O.createElement("h2",null,"Unexpected Application Error!"),O.createElement("h3",{style:{fontStyle:"italic"}},t),n?O.createElement("pre",{style:a},n):null,o)}var Ak=O.createElement(Ok,null),eN=class extends O.Component{constructor(e){super(e),this.state={location:e.location,revalidation:e.revalidation,error:e.error}}static getDerivedStateFromError(e){return{error:e}}static getDerivedStateFromProps(e,t){return t.location!==e.location||t.revalidation!=="idle"&&e.revalidation==="idle"?{error:e.error,location:e.location,revalidation:e.revalidation}:{error:e.error!==void 0?e.error:t.error,location:t.location,revalidation:e.revalidation||t.revalidation}}componentDidCatch(e,t){this.props.onError?this.props.onError(e,t):console.error("React Router caught the following error during render",e)}render(){let e=this.state.error;if(this.context&&typeof e=="object"&&e&&"digest"in e&&typeof e.digest=="string"){const n=gk(e.digest);n&&(e=n)}let t=e!==void 0?O.createElement(pr.Provider,{value:this.props.routeContext},O.createElement(Kb.Provider,{value:e,children:this.props.component})):this.props.children;return this.context?O.createElement(Ek,{error:e},t):t}};eN.contextType=VT;var iy=new WeakMap;function Ek({children:e,error:t}){let{basename:n}=O.useContext(kn);if(typeof t=="object"&&t&&"digest"in t&&typeof t.digest=="string"){let r=vk(t.digest);if(r){let a=iy.get(t);if(a)throw a;let i=KT(r.location,n);if(GT&&!iy.get(t))if(i.isExternal||r.reloadDocument)window.location.href=i.absoluteURL||i.to;else{const o=Promise.resolve().then(()=>window.__reactRouterDataRouter.navigate(i.to,{replace:r.replace}));throw iy.set(t,o),o}return O.createElement("meta",{httpEquiv:"refresh",content:`0;url=${i.absoluteURL||i.to}`})}}return e}function _k({routeContext:e,match:t,children:n}){let r=O.useContext(vs);return r&&r.static&&r.staticContext&&(t.route.errorElement||t.route.ErrorBoundary)&&(r.staticContext._deepestRenderedBoundaryId=t.route.id),O.createElement(pr.Provider,{value:e},n)}function Tk(e,t=[],n){let r=n==null?void 0:n.state;if(e==null){if(!r)return null;if(r.errors)e=r.matches;else if(t.length===0&&!r.initialized&&r.matches.length>0)e=r.matches;else return null}let a=e,i=r==null?void 0:r.errors;if(i!=null){let d=a.findIndex(f=>f.route.id&&(i==null?void 0:i[f.route.id])!==void 0);it(d>=0,`Could not find a matching route for errors on route IDs: ${Object.keys(i).join(",")}`),a=a.slice(0,Math.min(a.length,d+1))}let o=!1,l=-1;if(n&&r){o=r.renderFallback;for(let d=0;d=0?a=a.slice(0,l+1):a=[a[0]];break}}}}let s=n==null?void 0:n.onError,u=r&&s?(d,f)=>{var h,p;s(d,{location:r.location,params:((p=(h=r.matches)==null?void 0:h[0])==null?void 0:p.params)??{},pattern:ck(r.matches),errorInfo:f})}:void 0;return a.reduceRight((d,f,h)=>{let p,b=!1,v=null,x=null;r&&(p=i&&f.route.id?i[f.route.id]:void 0,v=f.route.errorElement||Ak,o&&(l<0&&h===0?(tN("route-fallback",!1,"No `HydrateFallback` element provided to render during initial hydration"),b=!0,x=null):l===h&&(b=!0,x=f.route.hydrateFallbackElement||null)));let m=t.concat(a.slice(0,h+1)),y=()=>{let g;return p?g=v:b?g=x:f.route.Component?g=O.createElement(f.route.Component,null):f.route.element?g=f.route.element:g=d,O.createElement(_k,{match:f,routeContext:{outlet:d,matches:m,isDataRoute:r!=null},children:g})};return r&&(f.route.ErrorBoundary||f.route.errorElement||h===0)?O.createElement(eN,{location:r.location,revalidation:r.revalidation,component:v,error:p,children:y(),routeContext:{outlet:null,matches:m,isDataRoute:!0},onError:u}):y()},null)}function Yb(e){return`${e} must be used within a data router. See https://reactrouter.com/en/main/routers/picking-a-router.`}function Nk(e){let t=O.useContext(vs);return it(t,Yb(e)),t}function Ck(e){let t=O.useContext(yp);return it(t,Yb(e)),t}function Mk(e){let t=O.useContext(pr);return it(t,Yb(e)),t}function Vb(e){let t=Mk(e),n=t.matches[t.matches.length-1];return it(n.route.id,`${e} can only be used on routes that contain a unique "id"`),n.route.id}function Rk(){return Vb("useRouteId")}function Pk(){var r;let e=O.useContext(Kb),t=Ck("useRouteError"),n=Vb("useRouteError");return e!==void 0?e:(r=t.errors)==null?void 0:r[n]}function $k(){let{router:e}=Nk("useNavigate"),t=Vb("useNavigate"),n=O.useRef(!1);return ZT(()=>{n.current=!0}),O.useCallback(async(a,i={})=>{dr(n.current,WT),n.current&&(typeof a=="number"?await e.navigate(a):await e.navigate(a,{fromRouteId:t,...i}))},[e,t])}var ew={};function tN(e,t,n){!t&&!ew[e]&&(ew[e]=!0,dr(!1,n))}O.memo(kk);function kk({routes:e,manifest:t,future:n,state:r,isStatic:a,onError:i}){return JT(e,void 0,{manifest:t,state:r,isStatic:a,onError:i})}function nN({to:e,replace:t,state:n,relative:r}){it(gs()," may be used only in the context of a component.");let{static:a}=O.useContext(kn);dr(!a," must not be used on the initial render in a . This is a no-op, but you should modify your code so the is only ever rendered in response to some user interaction or state change.");let{matches:i}=O.useContext(pr),{pathname:o}=Cr(),l=vp(),s=mp(e,Gb(i),o,r==="path"),u=JSON.stringify(s);return O.useEffect(()=>{l(JSON.parse(u),{replace:t,state:n,relative:r})},[l,u,r,t,n]),null}function Dk(e){return wk(e.context)}function Ee(e){it(!1,"A is only ever to be used as the child of element, never rendered directly. Please wrap your in a .")}function Lk({basename:e="/",children:t=null,location:n,navigationType:r="POP",navigator:a,static:i=!1,useTransitions:o}){it(!gs(),"You cannot render a inside another . You should never have more than one in your app.");let l=e.replace(/^\/*/,"/"),s=O.useMemo(()=>({basename:l,navigator:a,static:i,useTransitions:o,future:{}}),[l,a,i,o]);typeof n=="string"&&(n=ys(n));let{pathname:u="/",search:d="",hash:f="",state:h=null,key:p="default",mask:b}=n,v=O.useMemo(()=>{let x=fa(u,l);return x==null?null:{location:{pathname:x,search:d,hash:f,state:h,key:p,mask:b},navigationType:r}},[l,u,d,f,h,p,r,b]);return dr(v!=null,` is not able to match the URL "${u}${d}${f}" because it does not start with the basename, so the won't render anything.`),v==null?null:O.createElement(kn.Provider,{value:s},O.createElement(Gc.Provider,{children:t,value:v}))}function zk({children:e,location:t}){return jk(qv(e),t)}function qv(e,t=[]){let n=[];return O.Children.forEach(e,(r,a)=>{if(!O.isValidElement(r))return;let i=[...t,a];if(r.type===O.Fragment){n.push.apply(n,qv(r.props.children,i));return}it(r.type===Ee,`[${typeof r.type=="string"?r.type:r.type.name}] is not a component. All component children of must be a or `),it(!r.props.index||!r.props.children,"An index route cannot have child routes.");let o={id:r.props.id||i.join("-"),caseSensitive:r.props.caseSensitive,element:r.props.element,Component:r.props.Component,index:r.props.index,path:r.props.path,middleware:r.props.middleware,loader:r.props.loader,action:r.props.action,hydrateFallbackElement:r.props.hydrateFallbackElement,HydrateFallback:r.props.HydrateFallback,errorElement:r.props.errorElement,ErrorBoundary:r.props.ErrorBoundary,hasErrorBoundary:r.props.hasErrorBoundary===!0||r.props.ErrorBoundary!=null||r.props.errorElement!=null,shouldRevalidate:r.props.shouldRevalidate,handle:r.props.handle,lazy:r.props.lazy};r.props.children&&(o.children=qv(r.props.children,i)),n.push(o)}),n}var id="get",od="application/x-www-form-urlencoded";function gp(e){return typeof HTMLElement<"u"&&e instanceof HTMLElement}function Bk(e){return gp(e)&&e.tagName.toLowerCase()==="button"}function Ik(e){return gp(e)&&e.tagName.toLowerCase()==="form"}function Uk(e){return gp(e)&&e.tagName.toLowerCase()==="input"}function qk(e){return!!(e.metaKey||e.altKey||e.ctrlKey||e.shiftKey)}function Hk(e,t){return e.button===0&&(!t||t==="_self")&&!qk(e)}var Ef=null;function Fk(){if(Ef===null)try{new FormData(document.createElement("form"),0),Ef=!1}catch{Ef=!0}return Ef}var Gk=new Set(["application/x-www-form-urlencoded","multipart/form-data","text/plain"]);function oy(e){return e!=null&&!Gk.has(e)?(dr(!1,`"${e}" is not a valid \`encType\` for \`

\`/\`\` and will default to "${od}"`),null):e}function Kk(e,t){let n,r,a,i,o;if(Ik(e)){let l=e.getAttribute("action");r=l?fa(l,t):null,n=e.getAttribute("method")||id,a=oy(e.getAttribute("enctype"))||od,i=new FormData(e)}else if(Bk(e)||Uk(e)&&(e.type==="submit"||e.type==="image")){let l=e.form;if(l==null)throw new Error('Cannot submit a + {otpEnabled && ( + + )} + + )} + + {phase === 'setup' && ( +
+
    +
  1. Authenticator 앱에서 아래 QR을 스캔하세요.
    2. +
  2. 스캔이 안 되면 수동 키를 직접 입력하세요.
    3. +
  3. 앱에 표시된 6자리 코드를 입력해 확인하세요.
    4. +
+ {qrImage && ( +
+ OTP QR +
+ )} + {secret && ( +
+
수동 입력 키
+ + {secret} + +
+ )} + + setOtpCode(e.target.value.replace(/\D/g, '').slice(0, 6))} + inputMode="numeric" autoComplete="one-time-code" maxLength={6} placeholder="000000" + className={codeCls + ' mb-3'} /> +
+ + +
+
+ )} + + {phase === 'done' && ( +
+ +
+ )} + + + {/* ── 비밀번호 변경 ─────────────────────────────────────────────── */} +
+
+ +

비밀번호 변경

+
+ + + +
+
+ + setCurPw(e.target.value)} className={inputCls} /> +
+
+ + setNewPw(e.target.value)} className={inputCls} /> +
+
+ + setNewPw2(e.target.value)} className={inputCls} /> +
+ + +
+
+ + ) +} diff --git a/frontend/src/pages/UserList.tsx b/frontend/src/pages/UserList.tsx index b4b908c..48b53d8 100644 --- a/frontend/src/pages/UserList.tsx +++ b/frontend/src/pages/UserList.tsx @@ -1,7 +1,7 @@ import { useState } from 'react' import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query' -import { Plus, Edit, Trash2, X } from 'lucide-react' -import { getUsers, createUser, updateUser, deleteUser } from '../api/client' +import { Plus, Edit, Trash2, X, RefreshCw } from 'lucide-react' +import { getUsers, createUser, updateUser, deleteUser, adminOtpReset } from '../api/client' export default function UserList() { const qc = useQueryClient() @@ -22,6 +22,12 @@ export default function UserList() { onSuccess: () => qc.invalidateQueries({ queryKey: ['users'] }), }) + // 관리자 OTP 초기화 — 대상 사용자 OTP 해제(다음 로그인 재등록). 시크릿 미조회. + const otpResetMut = useMutation({ + mutationFn: adminOtpReset, + onSuccess: () => qc.invalidateQueries({ queryKey: ['users'] }), + }) + if (isLoading) return
로딩 중...
return ( @@ -66,9 +72,14 @@ export default function UserList() {
- + + + title="삭제" className="text-red-400 hover:text-red-300">