diff --git a/Cargo.lock b/Cargo.lock index f8ca8f5..73e291e 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -572,6 +572,12 @@ dependencies = [ "thiserror 1.0.69", ] +[[package]] +name = "base32" +version = "0.5.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "022dfe9eb35f19ebbcb51e0b40a5ab759f46ad60cadf7297e0bd085afb50e076" + [[package]] name = "base64" version = "0.22.1" @@ -755,12 +761,24 @@ version = "0.6.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "175812e0be2bccb6abe50bb8d566126198344f707e304f45c648fd8f2cc0365e" +[[package]] +name = "bytemuck" +version = "1.25.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "c8efb64bd706a16a1bdde310ae86b351e4d21550d98d056f22f8a7f7a2183fec" + [[package]] name = "byteorder" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b" +[[package]] +name = "byteorder-lite" +version = "0.1.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "8f1fe948ff07f4bd06c30984e69f5b4899c516a3ef74f34df92a2df2ab535495" + [[package]] name = "bytes" version = "1.12.0" @@ -1059,6 +1077,12 @@ dependencies = [ "tiny-keccak", ] +[[package]] +name = "constant_time_eq" +version = "0.3.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "7c74b8349d32d297c9134b8c88677813a227df8f779daa29bfc29c183fe3dca6" + [[package]] name = "cookie" version = "0.18.1" @@ -1581,6 +1605,15 @@ version = "2.4.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9f1f227452a390804cdb637b74a86990f2a7d7ba4b7d5693aac9b4dd6defd8d6" +[[package]] +name = "fdeflate" +version = "0.3.7" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "1e6853b52649d4ac5c0bd02320cddc5ba956bdb407c4b75a2c6b75bf51500f8c" +dependencies = [ + "simd-adler32", +] + [[package]] name = "find-msvc-tools" version = "0.1.9" @@ -2424,6 +2457,19 @@ dependencies = [ "winapi-util", ] +[[package]] +name = "image" +version = "0.25.10" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "85ab80394333c02fe689eaf900ab500fbd0c2213da414687ebf995a65d5a6104" +dependencies = [ + "bytemuck", + "byteorder-lite", + "moxcms", + "num-traits", + "png", +] + [[package]] name = "include_dir" version = "0.7.4" @@ -2619,6 +2665,7 @@ dependencies = [ "serial_test", "time", "tokio", + "totp-rs", "tower-sessions", "tracing", "tracing-subscriber", @@ -3052,6 +3099,16 @@ dependencies = [ "uuid", ] +[[package]] +name = "moxcms" +version = "0.8.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "bb85c154ba489f01b25c0d36ae69a87e4a1c73a72631fc6c0eb6dde34a73e44b" +dependencies = [ + "num-traits", + "pxfm", +] + [[package]] name = "multer" version = "3.1.0" @@ -3654,6 +3711,19 @@ version = "0.2.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b4596b6d070b27117e987119b4dac604f3c58cfb0b191112e24771b2faeac1a6" +[[package]] +name = "png" +version = "0.18.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "60769b8b31b2a9f263dae2776c37b1b28ae246943cf719eb6946a1db05128a61" +dependencies = [ + "bitflags", + "crc32fast", + "fdeflate", + "flate2", + "miniz_oxide", +] + [[package]] name = "polling" version = "3.11.0" @@ -3816,6 +3886,29 @@ dependencies = [ "unicase", ] +[[package]] +name = "pxfm" +version = "0.1.29" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "e0c5ccf5294c6ccd63a74f1565028353830a9c2f5eb0c682c355c471726a6e3f" + +[[package]] +name = "qrcodegen" +version = "1.8.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "4339fc7a1021c9c1621d87f5e3505f2805c8c105420ba2f2a4df86814590c142" + +[[package]] +name = "qrcodegen-image" +version = "1.5.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "99530e45ded4640c0eab5420fc60f9a0ec1be51a22e49cc8578b9a0d8be70712" +dependencies = [ + "base64", + "image", + "qrcodegen", +] + [[package]] name = "quick-xml" version = "0.38.4" @@ -5739,6 +5832,23 @@ version = "0.1.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5d99f8c9a7727884afe522e9bd5edbfc91a3312b36a77b5fb8926e4c31a41801" +[[package]] +name = "totp-rs" +version = "5.7.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "a2b36a9dd327e9f401320a2cb4572cc76ff43742bcfc3291f871691050f140ba" +dependencies = [ + "base32", + "constant_time_eq", + "hmac", + "qrcodegen-image", + "rand 0.9.4", + "sha1", + "sha2", + "url", + "urlencoding", +] + [[package]] name = "tower" version = "0.4.13" @@ -6144,6 +6254,12 @@ dependencies = [ "serde_derive", ] +[[package]] +name = "urlencoding" +version = "2.1.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "daf8dba3b7eb870caf1ddeed7bc9d2a049f3cfdfae7cb521b087cc33ae4c49da" + [[package]] name = "utf-8" version = "0.7.6" diff --git a/Cargo.toml b/Cargo.toml index 4523881..06a468f 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -49,6 +49,8 @@ axum-casbin = "1.3.0" loco-oauth2 = "0.5.0" passwords = "3.1.16" tower-sessions = "0.14" +# TOTP (Google Authenticator) for optional two-factor auth +totp-rs = { version = "5", features = ["qr", "gen_secret"] } [[bin]] name = "kompress-eshop-cli" diff --git a/assets/i18n/en/main.ftl b/assets/i18n/en/main.ftl index c166590..9d4b070 100644 --- a/assets/i18n/en/main.ftl +++ b/assets/i18n/en/main.ftl @@ -289,6 +289,34 @@ password-change-title = Change password password-current = Current password password-current-wrong = Your current password is incorrect. password-changed = Your password has been changed. + +# Two-factor authentication (TOTP / Google Authenticator) +security-title = Security +security-2fa-intro = Two-factor authentication (2FA) adds a one-time code from an app like Google Authenticator to your sign-in. +security-2fa-on = 2FA is on +security-2fa-off = 2FA is off +security-2fa-enable = Enable two-factor authentication +security-2fa-scan = Scan this QR code in Google Authenticator (or any compatible app). +security-2fa-manual = Or enter the key manually: +security-2fa-enter-code = Enter the 6-digit code from the app +security-2fa-confirm = Confirm and enable +security-2fa-code-wrong = That code is wrong or expired. Please try again. +security-2fa-enroll-error = Could not start 2FA setup. Please try again. +security-2fa-enabled-ok = Two-factor authentication is enabled. +security-2fa-backup-intro = Save these backup codes somewhere safe. Each can be used once if you lose access to your app. +security-2fa-backup-remaining = Backup codes remaining +security-2fa-regenerate = Generate new backup codes +security-2fa-disable = Disable two-factor authentication +security-2fa-disable-hint = Enter your current password to confirm. + +# Second login step (after password) +login-totp-title = Two-factor authentication +login-totp-intro = Enter the code from your authenticator app. +login-totp-error = That code is wrong or expired. +login-totp-code = Verification code +login-totp-submit = Verify +login-totp-backup-hint = No access to your app? Enter one of your backup codes. + account-type-locked = Account type can't be changed after registration. checkout-create-account = Create an account from this order checkout-create-account-hint = We'll email you a link to set your password. This order will be linked to your account. diff --git a/assets/i18n/sk/main.ftl b/assets/i18n/sk/main.ftl index bba36c6..164ecdf 100644 --- a/assets/i18n/sk/main.ftl +++ b/assets/i18n/sk/main.ftl @@ -289,6 +289,34 @@ password-change-title = Zmeniť heslo password-current = Súčasné heslo password-current-wrong = Vaše súčasné heslo je nesprávne. password-changed = Vaše heslo bolo zmenené. + +# Two-factor authentication (TOTP / Google Authenticator) +security-title = Zabezpečenie +security-2fa-intro = Dvojfaktorové overenie (2FA) pridáva k prihláseniu jednorazový kód z aplikácie ako Google Authenticator. +security-2fa-on = 2FA je zapnuté +security-2fa-off = 2FA je vypnuté +security-2fa-enable = Zapnúť dvojfaktorové overenie +security-2fa-scan = Naskenujte tento QR kód v aplikácii Google Authenticator (alebo inej kompatibilnej). +security-2fa-manual = Alebo zadajte kľúč ručne: +security-2fa-enter-code = Zadajte 6-miestny kód z aplikácie +security-2fa-confirm = Potvrdiť a zapnúť +security-2fa-code-wrong = Kód je nesprávny alebo vypršal. Skúste to znova. +security-2fa-enroll-error = Nepodarilo sa pripraviť 2FA. Skúste to znova. +security-2fa-enabled-ok = Dvojfaktorové overenie je zapnuté. +security-2fa-backup-intro = Uložte si tieto záložné kódy na bezpečné miesto. Každý sa dá použiť iba raz, ak nemáte prístup k aplikácii. +security-2fa-backup-remaining = Zostávajúce záložné kódy +security-2fa-regenerate = Vygenerovať nové záložné kódy +security-2fa-disable = Vypnúť dvojfaktorové overenie +security-2fa-disable-hint = Na potvrdenie zadajte svoje súčasné heslo. + +# Second login step (after password) +login-totp-title = Dvojfaktorové overenie +login-totp-intro = Zadajte kód z vašej autentifikačnej aplikácie. +login-totp-error = Kód je nesprávny alebo vypršal. +login-totp-code = Overovací kód +login-totp-submit = Overiť +login-totp-backup-hint = Nemáte prístup k aplikácii? Zadajte jeden zo svojich záložných kódov. + account-type-locked = Typ účtu sa po registrácii nedá zmeniť. checkout-create-account = Vytvoriť účet z tejto objednávky checkout-create-account-hint = Pošleme vám e-mail na nastavenie hesla. Objednávka sa priradí k vášmu účtu. diff --git a/assets/static/css/app.css b/assets/static/css/app.css index 9fd5afe..3005c3f 100644 --- a/assets/static/css/app.css +++ b/assets/static/css/app.css @@ -1,2 +1,2 @@ /*! tailwindcss v4.3.1 | MIT License | https://tailwindcss.com */ -@layer properties{@supports (((-webkit-hyphens:none)) and (not (margin-trim:inline))) or ((-moz-orient:inline) and (not (color:rgb(from red r g b)))){*,:before,:after,::backdrop{--tw-translate-x:0;--tw-translate-y:0;--tw-translate-z:0;--tw-rotate-x:initial;--tw-rotate-y:initial;--tw-rotate-z:initial;--tw-skew-x:initial;--tw-skew-y:initial;--tw-space-y-reverse:0;--tw-divide-y-reverse:0;--tw-border-style:solid;--tw-leading:initial;--tw-font-weight:initial;--tw-tracking:initial;--tw-ordinal:initial;--tw-slashed-zero:initial;--tw-numeric-figure:initial;--tw-numeric-spacing:initial;--tw-numeric-fraction:initial;--tw-shadow:0 0 #0000;--tw-shadow-color:initial;--tw-shadow-alpha:100%;--tw-inset-shadow:0 0 #0000;--tw-inset-shadow-color:initial;--tw-inset-shadow-alpha:100%;--tw-ring-color:initial;--tw-ring-shadow:0 0 #0000;--tw-inset-ring-color:initial;--tw-inset-ring-shadow:0 0 #0000;--tw-ring-inset:initial;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-offset-shadow:0 0 #0000;--tw-outline-style:solid;--tw-backdrop-blur:initial;--tw-backdrop-brightness:initial;--tw-backdrop-contrast:initial;--tw-backdrop-grayscale:initial;--tw-backdrop-hue-rotate:initial;--tw-backdrop-invert:initial;--tw-backdrop-opacity:initial;--tw-backdrop-saturate:initial;--tw-backdrop-sepia:initial;--tw-duration:initial;--tw-ease:initial;--tw-scale-x:1;--tw-scale-y:1;--tw-scale-z:1;--tw-content:""}}}@layer theme{:root,:host{--font-sans:ui-sans-serif, system-ui, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";--font-mono:ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;--color-red-600:oklch(57.7% .245 27.325);--color-amber-500:oklch(76.9% .188 70.08);--color-green-600:oklch(62.7% .194 149.214);--color-emerald-600:oklch(59.6% .145 163.225);--color-sky-500:oklch(68.5% .169 237.323);--color-indigo-400:oklch(67.3% .182 276.935);--color-indigo-600:oklch(51.1% .262 276.966);--color-slate-100:oklch(96.8% .007 247.896);--color-slate-300:oklch(86.9% .022 252.894);--color-slate-600:oklch(44.6% .043 257.281);--color-slate-700:oklch(37.2% .044 257.287);--color-slate-800:oklch(27.9% .041 260.031);--color-slate-900:oklch(20.8% .042 265.755);--color-slate-950:oklch(12.9% .042 264.695);--color-black:#000;--color-white:#fff;--spacing:.25rem;--container-sm:24rem;--container-md:28rem;--container-xl:36rem;--container-2xl:42rem;--container-3xl:48rem;--container-5xl:64rem;--container-7xl:80rem;--text-xs:.75rem;--text-xs--line-height:calc(1 / .75);--text-sm:.875rem;--text-sm--line-height:calc(1.25 / .875);--text-base:1rem;--text-base--line-height:calc(1.5 / 1);--text-lg:1.125rem;--text-lg--line-height:calc(1.75 / 1.125);--text-xl:1.25rem;--text-xl--line-height:calc(1.75 / 1.25);--text-2xl:1.5rem;--text-2xl--line-height:calc(2 / 1.5);--text-3xl:1.875rem;--text-3xl--line-height:calc(2.25 / 1.875);--text-4xl:2.25rem;--text-4xl--line-height:calc(2.5 / 2.25);--font-weight-medium:500;--font-weight-semibold:600;--font-weight-bold:700;--tracking-tight:-.025em;--tracking-wide:.025em;--tracking-wider:.05em;--leading-relaxed:1.625;--radius-sm:.25rem;--ease-in:cubic-bezier(.4, 0, 1, 1);--ease-out:cubic-bezier(0, 0, .2, 1);--default-transition-duration:.15s;--default-transition-timing-function:cubic-bezier(.4, 0, .2, 1);--default-font-family:var(--font-sans);--default-mono-font-family:var(--font-mono);--color-surface:var(--color-white);--color-surface-alt:var(--color-slate-100);--color-on-surface:var(--color-slate-700);--color-on-surface-strong:var(--color-slate-900);--color-primary:var(--color-indigo-600);--color-on-primary:var(--color-white);--color-secondary:var(--color-slate-600);--color-on-secondary:var(--color-white);--color-outline:var(--color-slate-300);--color-outline-strong:var(--color-slate-800);--color-surface-dark:var(--color-slate-900);--color-surface-dark-alt:var(--color-slate-800);--color-on-surface-dark:var(--color-slate-300);--color-on-surface-dark-strong:var(--color-white);--color-primary-dark:var(--color-indigo-400);--color-on-primary-dark:var(--color-slate-950);--color-secondary-dark:var(--color-slate-300);--color-on-secondary-dark:var(--color-slate-950);--color-outline-dark:var(--color-slate-700);--color-outline-dark-strong:var(--color-slate-300);--color-info:var(--color-sky-500);--color-on-info:var(--color-white);--color-success:var(--color-green-600);--color-on-success:var(--color-white);--color-warning:var(--color-amber-500);--color-on-warning:var(--color-white);--color-danger:var(--color-red-600);--color-on-danger:var(--color-white);--radius-radius:.375rem}}@layer base{*,:after,:before,::backdrop{box-sizing:border-box;border:0 solid;margin:0;padding:0}::file-selector-button{box-sizing:border-box;border:0 solid;margin:0;padding:0}html,:host{-webkit-text-size-adjust:100%;tab-size:4;line-height:1.5;font-family:var(--default-font-family,ui-sans-serif, system-ui, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji");font-feature-settings:var(--default-font-feature-settings,normal);font-variation-settings:var(--default-font-variation-settings,normal);-webkit-tap-highlight-color:transparent}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;-webkit-text-decoration:inherit;-webkit-text-decoration:inherit;-webkit-text-decoration:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:var(--default-mono-font-family,ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace);font-feature-settings:var(--default-mono-font-feature-settings,normal);font-variation-settings:var(--default-mono-font-variation-settings,normal);font-size:1em}small{font-size:80%}sub,sup{vertical-align:baseline;font-size:75%;line-height:0;position:relative}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}:-moz-focusring{outline:auto}progress{vertical-align:baseline}summary{display:list-item}ol,ul,menu{list-style:none}img,svg,video,canvas,audio,iframe,embed,object{vertical-align:middle;display:block}img,video{max-width:100%;height:auto}button,input,select,optgroup,textarea{font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;color:inherit;opacity:1;background-color:#0000;border-radius:0}::file-selector-button{font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;color:inherit;opacity:1;background-color:#0000;border-radius:0}:where(select:is([multiple],[size])) optgroup{font-weight:bolder}:where(select:is([multiple],[size])) optgroup option{padding-inline-start:20px}::file-selector-button{margin-inline-end:4px}::placeholder{opacity:1}@supports (not ((-webkit-appearance:-apple-pay-button))) or (contain-intrinsic-size:1px){::placeholder{color:currentColor}@supports (color:color-mix(in lab, red, red)){::placeholder{color:color-mix(in oklab, currentcolor 50%, transparent)}}}textarea{resize:vertical}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-date-and-time-value{min-height:1lh;text-align:inherit}::-webkit-datetime-edit{display:inline-flex}::-webkit-datetime-edit-fields-wrapper{padding:0}::-webkit-datetime-edit{padding-block:0}::-webkit-datetime-edit-year-field{padding-block:0}::-webkit-datetime-edit-month-field{padding-block:0}::-webkit-datetime-edit-day-field{padding-block:0}::-webkit-datetime-edit-hour-field{padding-block:0}::-webkit-datetime-edit-minute-field{padding-block:0}::-webkit-datetime-edit-second-field{padding-block:0}::-webkit-datetime-edit-millisecond-field{padding-block:0}::-webkit-datetime-edit-meridiem-field{padding-block:0}::-webkit-calendar-picker-indicator{line-height:1}:-moz-ui-invalid{box-shadow:none}button,input:where([type=button],[type=reset],[type=submit]){appearance:button}::file-selector-button{appearance:button}::-webkit-inner-spin-button{height:auto}::-webkit-outer-spin-button{height:auto}[hidden]:where(:not([hidden=until-found])){display:none!important}}@layer components;@layer utilities{.pointer-events-auto{pointer-events:auto}.pointer-events-none{pointer-events:none}.collapse{visibility:collapse}.invisible{visibility:hidden}.visible{visibility:visible}.sr-only{clip-path:inset(50%);white-space:nowrap;border-width:0;width:1px;height:1px;margin:-1px;padding:0;position:absolute;overflow:hidden}.absolute{position:absolute}.fixed{position:fixed}.relative{position:relative}.static{position:static}.sticky{position:sticky}.inset-0{inset:0}.inset-x-0{inset-inline:0}.inset-x-8{inset-inline:calc(var(--spacing) * 8)}.inset-y-0{inset-block:0}.-top-1{top:calc(var(--spacing) * -1)}.top-0{top:0}.top-1\/2{top:50%}.top-full{top:100%}.-right-1{right:calc(var(--spacing) * -1)}.right-0{right:0}.right-3{right:calc(var(--spacing) * 3)}.left-0{left:0}.left-1\/2{left:50%}.left-3{left:calc(var(--spacing) * 3)}.z-10{z-index:10}.z-20{z-index:20}.z-30{z-index:30}.z-40{z-index:40}.z-99{z-index:99}.container{width:100%}@media (min-width:40rem){.container{max-width:40rem}}@media (min-width:48rem){.container{max-width:48rem}}@media (min-width:64rem){.container{max-width:64rem}}@media (min-width:80rem){.container{max-width:80rem}}@media (min-width:96rem){.container{max-width:96rem}}.mx-4{margin-inline:calc(var(--spacing) * 4)}.mx-auto{margin-inline:auto}.mt-0\.5{margin-top:calc(var(--spacing) * .5)}.mt-1{margin-top:var(--spacing)}.mt-2{margin-top:calc(var(--spacing) * 2)}.mt-3{margin-top:calc(var(--spacing) * 3)}.mt-4{margin-top:calc(var(--spacing) * 4)}.mt-5{margin-top:calc(var(--spacing) * 5)}.mt-6{margin-top:calc(var(--spacing) * 6)}.mt-8{margin-top:calc(var(--spacing) * 8)}.mr-2{margin-right:calc(var(--spacing) * 2)}.mb-2{margin-bottom:calc(var(--spacing) * 2)}.mb-3{margin-bottom:calc(var(--spacing) * 3)}.ml-0\.5{margin-left:calc(var(--spacing) * .5)}.ml-2{margin-left:calc(var(--spacing) * 2)}.ml-3{margin-left:calc(var(--spacing) * 3)}.ml-auto{margin-left:auto}.block{display:block}.contents{display:contents}.flex{display:flex}.grid{display:grid}.hidden{display:none}.inline{display:inline}.inline-flex{display:inline-flex}.table{display:table}.aspect-square{aspect-ratio:1}.size-3{width:calc(var(--spacing) * 3);height:calc(var(--spacing) * 3)}.size-3\.5{width:calc(var(--spacing) * 3.5);height:calc(var(--spacing) * 3.5)}.size-4{width:calc(var(--spacing) * 4);height:calc(var(--spacing) * 4)}.size-5{width:calc(var(--spacing) * 5);height:calc(var(--spacing) * 5)}.size-6{width:calc(var(--spacing) * 6);height:calc(var(--spacing) * 6)}.size-7{width:calc(var(--spacing) * 7);height:calc(var(--spacing) * 7)}.size-9{width:calc(var(--spacing) * 9);height:calc(var(--spacing) * 9)}.size-10{width:calc(var(--spacing) * 10);height:calc(var(--spacing) * 10)}.size-11{width:calc(var(--spacing) * 11);height:calc(var(--spacing) * 11)}.size-12{width:calc(var(--spacing) * 12);height:calc(var(--spacing) * 12)}.size-14{width:calc(var(--spacing) * 14);height:calc(var(--spacing) * 14)}.size-16{width:calc(var(--spacing) * 16);height:calc(var(--spacing) * 16)}.size-24{width:calc(var(--spacing) * 24);height:calc(var(--spacing) * 24)}.size-full{width:100%;height:100%}.h-4{height:calc(var(--spacing) * 4)}.h-6{height:calc(var(--spacing) * 6)}.h-16{height:calc(var(--spacing) * 16)}.h-44{height:calc(var(--spacing) * 44)}.h-fit{height:fit-content}.h-px{height:1px}.max-h-56{max-height:calc(var(--spacing) * 56)}.max-h-80{max-height:calc(var(--spacing) * 80)}.min-h-screen{min-height:100vh}.w-4{width:calc(var(--spacing) * 4)}.w-7{width:calc(var(--spacing) * 7)}.w-8{width:calc(var(--spacing) * 8)}.w-11{width:calc(var(--spacing) * 11)}.w-20{width:calc(var(--spacing) * 20)}.w-24{width:calc(var(--spacing) * 24)}.w-28{width:calc(var(--spacing) * 28)}.w-56{width:calc(var(--spacing) * 56)}.w-60{width:calc(var(--spacing) * 60)}.w-64{width:calc(var(--spacing) * 64)}.w-80{width:calc(var(--spacing) * 80)}.w-fit{width:fit-content}.w-full{width:100%}.max-w-2xl{max-width:var(--container-2xl)}.max-w-3xl{max-width:var(--container-3xl)}.max-w-5xl{max-width:var(--container-5xl)}.max-w-7xl{max-width:var(--container-7xl)}.max-w-full{max-width:100%}.max-w-md{max-width:var(--container-md)}.max-w-sm{max-width:var(--container-sm)}.max-w-xl{max-width:var(--container-xl)}.min-w-0{min-width:0}.min-w-4{min-width:calc(var(--spacing) * 4)}.min-w-40{min-width:calc(var(--spacing) * 40)}.min-w-48{min-width:calc(var(--spacing) * 48)}.flex-1{flex:1}.shrink-0{flex-shrink:0}.grow{flex-grow:1}.-translate-x-1\/2{--tw-translate-x:calc(calc(1 / 2 * 100%) * -1);translate:var(--tw-translate-x) var(--tw-translate-y)}.-translate-x-24{--tw-translate-x:calc(var(--spacing) * -24);translate:var(--tw-translate-x) var(--tw-translate-y)}.-translate-x-60{--tw-translate-x:calc(var(--spacing) * -60);translate:var(--tw-translate-x) var(--tw-translate-y)}.translate-x-0{--tw-translate-x:0;translate:var(--tw-translate-x) var(--tw-translate-y)}.-translate-y-1\/2{--tw-translate-y:calc(calc(1 / 2 * 100%) * -1);translate:var(--tw-translate-x) var(--tw-translate-y)}.translate-y-0{--tw-translate-y:0;translate:var(--tw-translate-x) var(--tw-translate-y)}.translate-y-8{--tw-translate-y:calc(var(--spacing) * 8);translate:var(--tw-translate-x) var(--tw-translate-y)}.rotate-0{rotate:0deg}.rotate-180{rotate:180deg}.transform{transform:var(--tw-rotate-x,) var(--tw-rotate-y,) var(--tw-rotate-z,) var(--tw-skew-x,) var(--tw-skew-y,)}.cursor-pointer{cursor:pointer}.appearance-none{appearance:none}.grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.grid-cols-\[auto_1fr\]{grid-template-columns:auto 1fr}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-center{align-items:center}.items-end{align-items:flex-end}.items-start{align-items:flex-start}.items-stretch{align-items:stretch}.justify-between{justify-content:space-between}.justify-center{justify-content:center}.justify-end{justify-content:flex-end}.gap-0\.5{gap:calc(var(--spacing) * .5)}.gap-1{gap:var(--spacing)}.gap-1\.5{gap:calc(var(--spacing) * 1.5)}.gap-2{gap:calc(var(--spacing) * 2)}.gap-2\.5{gap:calc(var(--spacing) * 2.5)}.gap-3{gap:calc(var(--spacing) * 3)}.gap-4{gap:calc(var(--spacing) * 4)}.gap-5{gap:calc(var(--spacing) * 5)}.gap-6{gap:calc(var(--spacing) * 6)}.gap-8{gap:calc(var(--spacing) * 8)}.gap-10{gap:calc(var(--spacing) * 10)}:where(.space-y-1>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(var(--spacing) * var(--tw-space-y-reverse));margin-block-end:calc(var(--spacing) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-1\.5>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * 1.5) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 1.5) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-2>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * 2) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 2) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-3>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * 3) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 3) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-4>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * 4) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 4) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-5>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * 5) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 5) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-6>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * 6) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 6) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-8>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * 8) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 8) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-12>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * 12) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 12) * calc(1 - var(--tw-space-y-reverse)))}.gap-x-4{column-gap:calc(var(--spacing) * 4)}.gap-y-1{row-gap:var(--spacing)}:where(.divide-y>:not(:last-child)){--tw-divide-y-reverse:0;border-bottom-style:var(--tw-border-style);border-top-style:var(--tw-border-style);border-top-width:calc(1px * var(--tw-divide-y-reverse));border-bottom-width:calc(1px * calc(1 - var(--tw-divide-y-reverse)))}:where(.divide-outline>:not(:last-child)){border-color:var(--color-outline)}.truncate{text-overflow:ellipsis;white-space:nowrap;overflow:hidden}.overflow-auto{overflow:auto}.overflow-clip{overflow:clip}.overflow-hidden{overflow:hidden}.overflow-x-auto{overflow-x:auto}.overflow-y-auto{overflow-y:auto}.rounded-full{border-radius:3.40282e38px}.rounded-radius{border-radius:var(--radius-radius)}.rounded-sm{border-radius:var(--radius-sm)}.rounded-l-radius{border-top-left-radius:var(--radius-radius);border-bottom-left-radius:var(--radius-radius)}.rounded-r-radius{border-top-right-radius:var(--radius-radius);border-bottom-right-radius:var(--radius-radius)}.border{border-style:var(--tw-border-style);border-width:1px}.border-t{border-top-style:var(--tw-border-style);border-top-width:1px}.border-r{border-right-style:var(--tw-border-style);border-right-width:1px}.border-b{border-bottom-style:var(--tw-border-style);border-bottom-width:1px}.border-l{border-left-style:var(--tw-border-style);border-left-width:1px}.border-danger{border-color:var(--color-danger)}.border-info{border-color:var(--color-info)}.border-outline{border-color:var(--color-outline)}.border-primary{border-color:var(--color-primary)}.border-primary\/40{border-color:#4f39f666}@supports (color:color-mix(in lab, red, red)){.border-primary\/40{border-color:color-mix(in oklab, var(--color-primary) 40%, transparent)}}.border-secondary{border-color:var(--color-secondary)}.border-success{border-color:var(--color-success)}.border-warning{border-color:var(--color-warning)}.bg-black\/50{background-color:#00000080}@supports (color:color-mix(in lab, red, red)){.bg-black\/50{background-color:color-mix(in oklab, var(--color-black) 50%, transparent)}}.bg-danger{background-color:var(--color-danger)}.bg-danger\/10{background-color:#e400141a}@supports (color:color-mix(in lab, red, red)){.bg-danger\/10{background-color:color-mix(in oklab, var(--color-danger) 10%, transparent)}}.bg-danger\/15{background-color:#e4001426}@supports (color:color-mix(in lab, red, red)){.bg-danger\/15{background-color:color-mix(in oklab, var(--color-danger) 15%, transparent)}}.bg-info{background-color:var(--color-info)}.bg-info\/10{background-color:#00a5ef1a}@supports (color:color-mix(in lab, red, red)){.bg-info\/10{background-color:color-mix(in oklab, var(--color-info) 10%, transparent)}}.bg-info\/15{background-color:#00a5ef26}@supports (color:color-mix(in lab, red, red)){.bg-info\/15{background-color:color-mix(in oklab, var(--color-info) 15%, transparent)}}.bg-outline{background-color:var(--color-outline)}.bg-primary{background-color:var(--color-primary)}.bg-primary\/5{background-color:#4f39f60d}@supports (color:color-mix(in lab, red, red)){.bg-primary\/5{background-color:color-mix(in oklab, var(--color-primary) 5%, transparent)}}.bg-primary\/10{background-color:#4f39f61a}@supports (color:color-mix(in lab, red, red)){.bg-primary\/10{background-color:color-mix(in oklab, var(--color-primary) 10%, transparent)}}.bg-secondary{background-color:var(--color-secondary)}.bg-success{background-color:var(--color-success)}.bg-success\/10{background-color:#00a5441a}@supports (color:color-mix(in lab, red, red)){.bg-success\/10{background-color:color-mix(in oklab, var(--color-success) 10%, transparent)}}.bg-success\/15{background-color:#00a54426}@supports (color:color-mix(in lab, red, red)){.bg-success\/15{background-color:color-mix(in oklab, var(--color-success) 15%, transparent)}}.bg-surface{background-color:var(--color-surface)}.bg-surface-alt{background-color:var(--color-surface-alt)}.bg-surface-alt\/40{background-color:#f1f5f966}@supports (color:color-mix(in lab, red, red)){.bg-surface-alt\/40{background-color:color-mix(in oklab, var(--color-surface-alt) 40%, transparent)}}.bg-surface-alt\/50{background-color:#f1f5f980}@supports (color:color-mix(in lab, red, red)){.bg-surface-alt\/50{background-color:color-mix(in oklab, var(--color-surface-alt) 50%, transparent)}}.bg-surface\/40{background-color:#fff6}@supports (color:color-mix(in lab, red, red)){.bg-surface\/40{background-color:color-mix(in oklab, var(--color-surface) 40%, transparent)}}.bg-surface\/95{background-color:#fffffff2}@supports (color:color-mix(in lab, red, red)){.bg-surface\/95{background-color:color-mix(in oklab, var(--color-surface) 95%, transparent)}}.bg-transparent{background-color:#0000}.bg-warning{background-color:var(--color-warning)}.bg-warning\/10{background-color:#f99c001a}@supports (color:color-mix(in lab, red, red)){.bg-warning\/10{background-color:color-mix(in oklab, var(--color-warning) 10%, transparent)}}.bg-warning\/15{background-color:#f99c0026}@supports (color:color-mix(in lab, red, red)){.bg-warning\/15{background-color:color-mix(in oklab, var(--color-warning) 15%, transparent)}}.object-cover{object-fit:cover}.p-0\.5{padding:calc(var(--spacing) * .5)}.p-1{padding:var(--spacing)}.p-2{padding:calc(var(--spacing) * 2)}.p-4{padding:calc(var(--spacing) * 4)}.p-5{padding:calc(var(--spacing) * 5)}.p-6{padding:calc(var(--spacing) * 6)}.px-1{padding-inline:var(--spacing)}.px-2{padding-inline:calc(var(--spacing) * 2)}.px-2\.5{padding-inline:calc(var(--spacing) * 2.5)}.px-3{padding-inline:calc(var(--spacing) * 3)}.px-4{padding-inline:calc(var(--spacing) * 4)}.px-5{padding-inline:calc(var(--spacing) * 5)}.px-6{padding-inline:calc(var(--spacing) * 6)}.py-1{padding-block:var(--spacing)}.py-1\.5{padding-block:calc(var(--spacing) * 1.5)}.py-2{padding-block:calc(var(--spacing) * 2)}.py-2\.5{padding-block:calc(var(--spacing) * 2.5)}.py-3{padding-block:calc(var(--spacing) * 3)}.py-6{padding-block:calc(var(--spacing) * 6)}.py-8{padding-block:calc(var(--spacing) * 8)}.py-10{padding-block:calc(var(--spacing) * 10)}.py-12{padding-block:calc(var(--spacing) * 12)}.py-16{padding-block:calc(var(--spacing) * 16)}.pt-0{padding-top:0}.pt-1{padding-top:var(--spacing)}.pt-2{padding-top:calc(var(--spacing) * 2)}.pt-3{padding-top:calc(var(--spacing) * 3)}.pt-20{padding-top:calc(var(--spacing) * 20)}.pr-7{padding-right:calc(var(--spacing) * 7)}.pr-8{padding-right:calc(var(--spacing) * 8)}.pb-2{padding-bottom:calc(var(--spacing) * 2)}.pb-3{padding-bottom:calc(var(--spacing) * 3)}.pl-1{padding-left:var(--spacing)}.pl-3{padding-left:calc(var(--spacing) * 3)}.pl-6{padding-left:calc(var(--spacing) * 6)}.text-center{text-align:center}.text-left{text-align:left}.text-right{text-align:right}.font-mono{font-family:var(--font-mono)}.text-2xl{font-size:var(--text-2xl);line-height:var(--tw-leading,var(--text-2xl--line-height))}.text-3xl{font-size:var(--text-3xl);line-height:var(--tw-leading,var(--text-3xl--line-height))}.text-4xl{font-size:var(--text-4xl);line-height:var(--tw-leading,var(--text-4xl--line-height))}.text-base{font-size:var(--text-base);line-height:var(--tw-leading,var(--text-base--line-height))}.text-lg{font-size:var(--text-lg);line-height:var(--tw-leading,var(--text-lg--line-height))}.text-sm{font-size:var(--text-sm);line-height:var(--tw-leading,var(--text-sm--line-height))}.text-xl{font-size:var(--text-xl);line-height:var(--tw-leading,var(--text-xl--line-height))}.text-xs{font-size:var(--text-xs);line-height:var(--tw-leading,var(--text-xs--line-height))}.text-\[10px\]{font-size:10px}.leading-4{--tw-leading:calc(var(--spacing) * 4);line-height:calc(var(--spacing) * 4)}.leading-relaxed{--tw-leading:var(--leading-relaxed);line-height:var(--leading-relaxed)}.font-bold{--tw-font-weight:var(--font-weight-bold);font-weight:var(--font-weight-bold)}.font-medium{--tw-font-weight:var(--font-weight-medium);font-weight:var(--font-weight-medium)}.font-semibold{--tw-font-weight:var(--font-weight-semibold);font-weight:var(--font-weight-semibold)}.tracking-tight{--tw-tracking:var(--tracking-tight);letter-spacing:var(--tracking-tight)}.tracking-wide{--tw-tracking:var(--tracking-wide);letter-spacing:var(--tracking-wide)}.tracking-wider{--tw-tracking:var(--tracking-wider);letter-spacing:var(--tracking-wider)}.text-pretty{text-wrap:pretty}.whitespace-nowrap{white-space:nowrap}.whitespace-pre-line{white-space:pre-line}.text-danger{color:var(--color-danger)}.text-info{color:var(--color-info)}.text-on-danger{color:var(--color-on-danger)}.text-on-info{color:var(--color-on-info)}.text-on-primary{color:var(--color-on-primary)}.text-on-primary\/90{color:#ffffffe6}@supports (color:color-mix(in lab, red, red)){.text-on-primary\/90{color:color-mix(in oklab, var(--color-on-primary) 90%, transparent)}}.text-on-secondary{color:var(--color-on-secondary)}.text-on-success{color:var(--color-on-success)}.text-on-surface{color:var(--color-on-surface)}.text-on-surface-strong{color:var(--color-on-surface-strong)}.text-on-surface\/40{color:#31415866}@supports (color:color-mix(in lab, red, red)){.text-on-surface\/40{color:color-mix(in oklab, var(--color-on-surface) 40%, transparent)}}.text-on-surface\/50{color:#31415880}@supports (color:color-mix(in lab, red, red)){.text-on-surface\/50{color:color-mix(in oklab, var(--color-on-surface) 50%, transparent)}}.text-on-surface\/60{color:#31415899}@supports (color:color-mix(in lab, red, red)){.text-on-surface\/60{color:color-mix(in oklab, var(--color-on-surface) 60%, transparent)}}.text-on-surface\/70{color:#314158b3}@supports (color:color-mix(in lab, red, red)){.text-on-surface\/70{color:color-mix(in oklab, var(--color-on-surface) 70%, transparent)}}.text-on-surface\/80{color:#314158cc}@supports (color:color-mix(in lab, red, red)){.text-on-surface\/80{color:color-mix(in oklab, var(--color-on-surface) 80%, transparent)}}.text-on-warning{color:var(--color-on-warning)}.text-outline{color:var(--color-outline)}.text-primary{color:var(--color-primary)}.text-secondary{color:var(--color-secondary)}.text-success{color:var(--color-success)}.text-warning{color:var(--color-warning)}.uppercase{text-transform:uppercase}.italic{font-style:italic}.tabular-nums{--tw-numeric-spacing:tabular-nums;font-variant-numeric:var(--tw-ordinal,) var(--tw-slashed-zero,) var(--tw-numeric-figure,) var(--tw-numeric-spacing,) var(--tw-numeric-fraction,)}.underline{text-decoration-line:underline}.underline-offset-2{text-underline-offset:2px}.antialiased{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.opacity-0{opacity:0}.opacity-100{opacity:1}.shadow-lg{--tw-shadow:0 10px 15px -3px var(--tw-shadow-color,#0000001a), 0 4px 6px -4px var(--tw-shadow-color,#0000001a);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.shadow-sm{--tw-shadow:0 1px 3px 0 var(--tw-shadow-color,#0000001a), 0 1px 2px -1px var(--tw-shadow-color,#0000001a);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.outline{outline-style:var(--tw-outline-style);outline-width:1px}.outline-danger{outline-color:var(--color-danger)}.outline-primary{outline-color:var(--color-primary)}.outline-secondary{outline-color:var(--color-secondary)}.backdrop-blur{--tw-backdrop-blur:blur(8px);-webkit-backdrop-filter:var(--tw-backdrop-blur,) var(--tw-backdrop-brightness,) var(--tw-backdrop-contrast,) var(--tw-backdrop-grayscale,) var(--tw-backdrop-hue-rotate,) var(--tw-backdrop-invert,) var(--tw-backdrop-opacity,) var(--tw-backdrop-saturate,) var(--tw-backdrop-sepia,);backdrop-filter:var(--tw-backdrop-blur,) var(--tw-backdrop-brightness,) var(--tw-backdrop-contrast,) var(--tw-backdrop-grayscale,) var(--tw-backdrop-hue-rotate,) var(--tw-backdrop-invert,) var(--tw-backdrop-opacity,) var(--tw-backdrop-saturate,) var(--tw-backdrop-sepia,)}.transition{transition-property:color,background-color,border-color,outline-color,text-decoration-color,fill,stroke,--tw-gradient-from,--tw-gradient-via,--tw-gradient-to,opacity,box-shadow,transform,translate,scale,rotate,filter,-webkit-backdrop-filter,backdrop-filter,display,content-visibility,overlay,pointer-events;transition-timing-function:var(--tw-ease,var(--default-transition-timing-function));transition-duration:var(--tw-duration,var(--default-transition-duration))}.transition-all{transition-property:all;transition-timing-function:var(--tw-ease,var(--default-transition-timing-function));transition-duration:var(--tw-duration,var(--default-transition-duration))}.transition-transform{transition-property:transform,translate,scale,rotate;transition-timing-function:var(--tw-ease,var(--default-transition-timing-function));transition-duration:var(--tw-duration,var(--default-transition-duration))}.duration-300{--tw-duration:.3s;transition-duration:.3s}.duration-700{--tw-duration:.7s;transition-duration:.7s}.ease-in{--tw-ease:var(--ease-in);transition-timing-function:var(--ease-in)}.ease-out{--tw-ease:var(--ease-out);transition-timing-function:var(--ease-out)}@media (hover:hover){.group-hover\:scale-105:is(:where(.group):hover *){--tw-scale-x:105%;--tw-scale-y:105%;--tw-scale-z:105%;scale:var(--tw-scale-x) var(--tw-scale-y)}}.peer-checked\:visible:is(:where(.peer):checked~*){visibility:visible}.peer-checked\:bg-primary:is(:where(.peer):checked~*){background-color:var(--color-primary)}.peer-focus\:outline-2:is(:where(.peer):focus~*){outline-style:var(--tw-outline-style);outline-width:2px}.peer-focus\:outline-offset-2:is(:where(.peer):focus~*){outline-offset:2px}.peer-focus\:outline-outline-strong:is(:where(.peer):focus~*){outline-color:var(--color-outline-strong)}.peer-focus\:peer-checked\:outline-primary:is(:where(.peer):focus~*):is(:where(.peer):checked~*){outline-color:var(--color-primary)}.peer-active\:outline-offset-0:is(:where(.peer):active~*){outline-offset:0px}.file\:mr-4::file-selector-button{margin-right:calc(var(--spacing) * 4)}.file\:border-none::file-selector-button{--tw-border-style:none;border-style:none}.file\:bg-surface-alt::file-selector-button{background-color:var(--color-surface-alt)}.file\:px-4::file-selector-button{padding-inline:calc(var(--spacing) * 4)}.file\:py-2::file-selector-button{padding-block:calc(var(--spacing) * 2)}.file\:font-medium::file-selector-button{--tw-font-weight:var(--font-weight-medium);font-weight:var(--font-weight-medium)}.file\:text-on-surface-strong::file-selector-button{color:var(--color-on-surface-strong)}.before\:invisible:before{content:var(--tw-content);visibility:hidden}.before\:absolute:before{content:var(--tw-content);position:absolute}.before\:inset-0:before{content:var(--tw-content);inset:0}.before\:top-1\/2:before{content:var(--tw-content);top:50%}.before\:left-1\/2:before{content:var(--tw-content);left:50%}.before\:h-1\.5:before{content:var(--tw-content);height:calc(var(--spacing) * 1.5)}.before\:w-1\.5:before{content:var(--tw-content);width:calc(var(--spacing) * 1.5)}.before\:-translate-x-1\/2:before{content:var(--tw-content);--tw-translate-x:calc(calc(1 / 2 * 100%) * -1);translate:var(--tw-translate-x) var(--tw-translate-y)}.before\:-translate-y-1\/2:before{content:var(--tw-content);--tw-translate-y:calc(calc(1 / 2 * 100%) * -1);translate:var(--tw-translate-x) var(--tw-translate-y)}.before\:rounded-full:before{content:var(--tw-content);border-radius:3.40282e38px}.before\:bg-on-primary:before{content:var(--tw-content);background-color:var(--color-on-primary)}.after\:absolute:after{content:var(--tw-content);position:absolute}.after\:top-0:after{content:var(--tw-content);top:0}.after\:bottom-0:after{content:var(--tw-content);bottom:0}.after\:left-\[0\.0625rem\]:after{content:var(--tw-content);left:.0625rem}.after\:my-auto:after{content:var(--tw-content);margin-block:auto}.after\:h-5:after{content:var(--tw-content);height:calc(var(--spacing) * 5)}.after\:w-5:after{content:var(--tw-content);width:calc(var(--spacing) * 5)}.after\:rounded-full:after{content:var(--tw-content);border-radius:3.40282e38px}.after\:bg-on-surface:after{content:var(--tw-content);background-color:var(--color-on-surface)}.after\:transition-all:after{content:var(--tw-content);transition-property:all;transition-timing-function:var(--tw-ease,var(--default-transition-timing-function));transition-duration:var(--tw-duration,var(--default-transition-duration))}.after\:content-\[\'\'\]:after{--tw-content:"";content:var(--tw-content)}.peer-checked\:after\:translate-x-5:is(:where(.peer):checked~*):after{content:var(--tw-content);--tw-translate-x:calc(var(--spacing) * 5);translate:var(--tw-translate-x) var(--tw-translate-y)}.peer-checked\:after\:bg-on-primary:is(:where(.peer):checked~*):after{content:var(--tw-content);background-color:var(--color-on-primary)}.checked\:border-primary:checked{border-color:var(--color-primary)}.checked\:bg-primary:checked{background-color:var(--color-primary)}.checked\:before\:visible:checked:before{content:var(--tw-content);visibility:visible}.checked\:before\:bg-primary:checked:before{content:var(--tw-content);background-color:var(--color-primary)}@media (hover:hover){.hover\:border-primary:hover{border-color:var(--color-primary)}.hover\:bg-danger\/5:hover{background-color:#e400140d}@supports (color:color-mix(in lab, red, red)){.hover\:bg-danger\/5:hover{background-color:color-mix(in oklab, var(--color-danger) 5%, transparent)}}.hover\:bg-info\/5:hover{background-color:#00a5ef0d}@supports (color:color-mix(in lab, red, red)){.hover\:bg-info\/5:hover{background-color:color-mix(in oklab, var(--color-info) 5%, transparent)}}.hover\:bg-primary\/5:hover{background-color:#4f39f60d}@supports (color:color-mix(in lab, red, red)){.hover\:bg-primary\/5:hover{background-color:color-mix(in oklab, var(--color-primary) 5%, transparent)}}.hover\:bg-surface-alt:hover{background-color:var(--color-surface-alt)}.hover\:bg-surface-dark-alt\/5:hover{background-color:#1d293d0d}@supports (color:color-mix(in lab, red, red)){.hover\:bg-surface-dark-alt\/5:hover{background-color:color-mix(in oklab, var(--color-surface-dark-alt) 5%, transparent)}}.hover\:bg-surface\/60:hover{background-color:#fff9}@supports (color:color-mix(in lab, red, red)){.hover\:bg-surface\/60:hover{background-color:color-mix(in oklab, var(--color-surface) 60%, transparent)}}.hover\:text-on-surface-strong:hover{color:var(--color-on-surface-strong)}.hover\:text-primary:hover{color:var(--color-primary)}.hover\:underline:hover{text-decoration-line:underline}.hover\:opacity-75:hover{opacity:.75}.hover\:opacity-90:hover{opacity:.9}}.focus\:outline-hidden:focus{--tw-outline-style:none;outline-style:none}@media (forced-colors:active){.focus\:outline-hidden:focus{outline-offset:2px;outline:2px solid #0000}}.focus\:outline-2:focus{outline-style:var(--tw-outline-style);outline-width:2px}.focus\:outline-offset-2:focus{outline-offset:2px}.focus\:outline-outline-strong:focus{outline-color:var(--color-outline-strong)}.focus\:outline-primary:focus,.checked\:focus\:outline-primary:checked:focus{outline-color:var(--color-primary)}.focus-visible\:bg-primary\/10:focus-visible{background-color:#4f39f61a}@supports (color:color-mix(in lab, red, red)){.focus-visible\:bg-primary\/10:focus-visible{background-color:color-mix(in oklab, var(--color-primary) 10%, transparent)}}.focus-visible\:bg-surface-dark-alt\/10:focus-visible{background-color:#1d293d1a}@supports (color:color-mix(in lab, red, red)){.focus-visible\:bg-surface-dark-alt\/10:focus-visible{background-color:color-mix(in oklab, var(--color-surface-dark-alt) 10%, transparent)}}.focus-visible\:text-on-surface-strong:focus-visible{color:var(--color-on-surface-strong)}.focus-visible\:underline:focus-visible{text-decoration-line:underline}.focus-visible\:outline-hidden:focus-visible{--tw-outline-style:none;outline-style:none}@media (forced-colors:active){.focus-visible\:outline-hidden:focus-visible{outline-offset:2px;outline:2px solid #0000}}.focus-visible\:outline-2:focus-visible{outline-style:var(--tw-outline-style);outline-width:2px}.focus-visible\:outline-offset-2:focus-visible{outline-offset:2px}.focus-visible\:outline-danger:focus-visible{outline-color:var(--color-danger)}.focus-visible\:outline-info:focus-visible{outline-color:var(--color-info)}.focus-visible\:outline-outline:focus-visible{outline-color:var(--color-outline)}.focus-visible\:outline-primary:focus-visible{outline-color:var(--color-primary)}.focus-visible\:outline-secondary:focus-visible{outline-color:var(--color-secondary)}.focus-visible\:outline-success:focus-visible{outline-color:var(--color-success)}.focus-visible\:outline-warning:focus-visible{outline-color:var(--color-warning)}.active\:opacity-100:active{opacity:1}.active\:outline-offset-0:active{outline-offset:0px}.disabled\:cursor-not-allowed:disabled{cursor:not-allowed}.disabled\:opacity-75:disabled{opacity:.75}.has-checked\:text-on-surface-strong:has(:checked){color:var(--color-on-surface-strong)}.has-disabled\:cursor-not-allowed:has(:disabled){cursor:not-allowed}.has-disabled\:opacity-75:has(:disabled){opacity:.75}.has-\[\:checked\]\:border-primary:has(:checked){border-color:var(--color-primary)}.aria-\[current\=page\]\:bg-primary\/10[aria-current=page]{background-color:#4f39f61a}@supports (color:color-mix(in lab, red, red)){.aria-\[current\=page\]\:bg-primary\/10[aria-current=page]{background-color:color-mix(in oklab, var(--color-primary) 10%, transparent)}}.aria-\[current\=page\]\:font-semibold[aria-current=page]{--tw-font-weight:var(--font-weight-semibold);font-weight:var(--font-weight-semibold)}.aria-\[current\=page\]\:text-on-surface-strong[aria-current=page]{color:var(--color-on-surface-strong)}.aria-\[current\=page\]\:text-primary[aria-current=page]{color:var(--color-primary)}@media (min-width:40rem){.sm\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.sm\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}}@media (min-width:48rem){.md\:top-\[unset\]{top:unset}.md\:right-0{right:0}.md\:bottom-0{bottom:0}.md\:left-\[unset\]{left:unset}.md\:ml-60{margin-left:calc(var(--spacing) * 60)}.md\:flex{display:flex}.md\:hidden{display:none}.md\:h-64{height:calc(var(--spacing) * 64)}.md\:max-w-sm{max-width:var(--container-sm)}.md\:translate-x-0{--tw-translate-x:0;translate:var(--tw-translate-x) var(--tw-translate-y)}.md\:translate-x-24{--tw-translate-x:calc(var(--spacing) * 24);translate:var(--tw-translate-x) var(--tw-translate-y)}}@media (min-width:64rem){.lg\:static{position:static}.lg\:z-auto{z-index:auto}.lg\:col-span-2{grid-column:span 2/span 2}.lg\:hidden{display:none}.lg\:w-64{width:calc(var(--spacing) * 64)}.lg\:shrink-0{flex-shrink:0}.lg\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.lg\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}.lg\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}.lg\:self-start{align-self:flex-start}.lg\:overflow-visible{overflow:visible}.lg\:rounded-radius{border-radius:var(--radius-radius)}.lg\:border{border-style:var(--tw-border-style);border-width:1px}.lg\:p-3{padding:calc(var(--spacing) * 3)}}@media (min-width:80rem){.xl\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}}:where(.dark\:divide-outline-dark:where([data-theme=dark],[data-theme=dark] *)>:not(:last-child)){border-color:var(--color-outline-dark)}.dark\:border-danger:where([data-theme=dark],[data-theme=dark] *){border-color:var(--color-danger)}.dark\:border-info:where([data-theme=dark],[data-theme=dark] *){border-color:var(--color-info)}.dark\:border-outline-dark:where([data-theme=dark],[data-theme=dark] *){border-color:var(--color-outline-dark)}.dark\:border-primary-dark:where([data-theme=dark],[data-theme=dark] *){border-color:var(--color-primary-dark)}.dark\:border-primary-dark\/40:where([data-theme=dark],[data-theme=dark] *){border-color:#7d87ff66}@supports (color:color-mix(in lab, red, red)){.dark\:border-primary-dark\/40:where([data-theme=dark],[data-theme=dark] *){border-color:color-mix(in oklab, var(--color-primary-dark) 40%, transparent)}}.dark\:border-secondary-dark:where([data-theme=dark],[data-theme=dark] *){border-color:var(--color-secondary-dark)}.dark\:border-success:where([data-theme=dark],[data-theme=dark] *){border-color:var(--color-success)}.dark\:border-warning:where([data-theme=dark],[data-theme=dark] *){border-color:var(--color-warning)}.dark\:bg-danger:where([data-theme=dark],[data-theme=dark] *){background-color:var(--color-danger)}.dark\:bg-info:where([data-theme=dark],[data-theme=dark] *){background-color:var(--color-info)}.dark\:bg-outline-dark:where([data-theme=dark],[data-theme=dark] *){background-color:var(--color-outline-dark)}.dark\:bg-primary-dark:where([data-theme=dark],[data-theme=dark] *){background-color:var(--color-primary-dark)}.dark\:bg-primary-dark\/10:where([data-theme=dark],[data-theme=dark] *){background-color:#7d87ff1a}@supports (color:color-mix(in lab, red, red)){.dark\:bg-primary-dark\/10:where([data-theme=dark],[data-theme=dark] *){background-color:color-mix(in oklab, var(--color-primary-dark) 10%, transparent)}}.dark\:bg-secondary-dark:where([data-theme=dark],[data-theme=dark] *){background-color:var(--color-secondary-dark)}.dark\:bg-success:where([data-theme=dark],[data-theme=dark] *){background-color:var(--color-success)}.dark\:bg-surface-dark:where([data-theme=dark],[data-theme=dark] *){background-color:var(--color-surface-dark)}.dark\:bg-surface-dark-alt:where([data-theme=dark],[data-theme=dark] *){background-color:var(--color-surface-dark-alt)}.dark\:bg-surface-dark-alt\/40:where([data-theme=dark],[data-theme=dark] *){background-color:#1d293d66}@supports (color:color-mix(in lab, red, red)){.dark\:bg-surface-dark-alt\/40:where([data-theme=dark],[data-theme=dark] *){background-color:color-mix(in oklab, var(--color-surface-dark-alt) 40%, transparent)}}.dark\:bg-surface-dark-alt\/50:where([data-theme=dark],[data-theme=dark] *){background-color:#1d293d80}@supports (color:color-mix(in lab, red, red)){.dark\:bg-surface-dark-alt\/50:where([data-theme=dark],[data-theme=dark] *){background-color:color-mix(in oklab, var(--color-surface-dark-alt) 50%, transparent)}}.dark\:bg-surface-dark\/40:where([data-theme=dark],[data-theme=dark] *){background-color:#0f172b66}@supports (color:color-mix(in lab, red, red)){.dark\:bg-surface-dark\/40:where([data-theme=dark],[data-theme=dark] *){background-color:color-mix(in oklab, var(--color-surface-dark) 40%, transparent)}}.dark\:bg-surface-dark\/95:where([data-theme=dark],[data-theme=dark] *){background-color:#0f172bf2}@supports (color:color-mix(in lab, red, red)){.dark\:bg-surface-dark\/95:where([data-theme=dark],[data-theme=dark] *){background-color:color-mix(in oklab, var(--color-surface-dark) 95%, transparent)}}.dark\:bg-warning:where([data-theme=dark],[data-theme=dark] *){background-color:var(--color-warning)}.dark\:text-danger:where([data-theme=dark],[data-theme=dark] *){color:var(--color-danger)}.dark\:text-on-danger:where([data-theme=dark],[data-theme=dark] *){color:var(--color-on-danger)}.dark\:text-on-info:where([data-theme=dark],[data-theme=dark] *){color:var(--color-on-info)}.dark\:text-on-primary-dark:where([data-theme=dark],[data-theme=dark] *){color:var(--color-on-primary-dark)}.dark\:text-on-primary-dark\/90:where([data-theme=dark],[data-theme=dark] *){color:#020618e6}@supports (color:color-mix(in lab, red, red)){.dark\:text-on-primary-dark\/90:where([data-theme=dark],[data-theme=dark] *){color:color-mix(in oklab, var(--color-on-primary-dark) 90%, transparent)}}.dark\:text-on-secondary-dark:where([data-theme=dark],[data-theme=dark] *){color:var(--color-on-secondary-dark)}.dark\:text-on-success:where([data-theme=dark],[data-theme=dark] *){color:var(--color-on-success)}.dark\:text-on-surface-dark:where([data-theme=dark],[data-theme=dark] *){color:var(--color-on-surface-dark)}.dark\:text-on-surface-dark-strong:where([data-theme=dark],[data-theme=dark] *){color:var(--color-on-surface-dark-strong)}.dark\:text-on-surface-dark\/40:where([data-theme=dark],[data-theme=dark] *){color:#cad5e266}@supports (color:color-mix(in lab, red, red)){.dark\:text-on-surface-dark\/40:where([data-theme=dark],[data-theme=dark] *){color:color-mix(in oklab, var(--color-on-surface-dark) 40%, transparent)}}.dark\:text-on-surface-dark\/50:where([data-theme=dark],[data-theme=dark] *){color:#cad5e280}@supports (color:color-mix(in lab, red, red)){.dark\:text-on-surface-dark\/50:where([data-theme=dark],[data-theme=dark] *){color:color-mix(in oklab, var(--color-on-surface-dark) 50%, transparent)}}.dark\:text-on-surface-dark\/60:where([data-theme=dark],[data-theme=dark] *){color:#cad5e299}@supports (color:color-mix(in lab, red, red)){.dark\:text-on-surface-dark\/60:where([data-theme=dark],[data-theme=dark] *){color:color-mix(in oklab, var(--color-on-surface-dark) 60%, transparent)}}.dark\:text-on-surface-dark\/70:where([data-theme=dark],[data-theme=dark] *){color:#cad5e2b3}@supports (color:color-mix(in lab, red, red)){.dark\:text-on-surface-dark\/70:where([data-theme=dark],[data-theme=dark] *){color:color-mix(in oklab, var(--color-on-surface-dark) 70%, transparent)}}.dark\:text-on-surface-dark\/80:where([data-theme=dark],[data-theme=dark] *){color:#cad5e2cc}@supports (color:color-mix(in lab, red, red)){.dark\:text-on-surface-dark\/80:where([data-theme=dark],[data-theme=dark] *){color:color-mix(in oklab, var(--color-on-surface-dark) 80%, transparent)}}.dark\:text-on-warning:where([data-theme=dark],[data-theme=dark] *){color:var(--color-on-warning)}.dark\:text-outline-dark:where([data-theme=dark],[data-theme=dark] *){color:var(--color-outline-dark)}.dark\:text-primary-dark:where([data-theme=dark],[data-theme=dark] *){color:var(--color-primary-dark)}.dark\:text-secondary-dark:where([data-theme=dark],[data-theme=dark] *){color:var(--color-secondary-dark)}.dark\:text-warning:where([data-theme=dark],[data-theme=dark] *){color:var(--color-warning)}.dark\:peer-checked\:bg-primary-dark:where([data-theme=dark],[data-theme=dark] *):is(:where(.peer):checked~*){background-color:var(--color-primary-dark)}.dark\:peer-focus\:outline-outline-dark-strong:where([data-theme=dark],[data-theme=dark] *):is(:where(.peer):focus~*){outline-color:var(--color-outline-dark-strong)}.dark\:peer-focus\:peer-checked\:outline-primary-dark:where([data-theme=dark],[data-theme=dark] *):is(:where(.peer):focus~*):is(:where(.peer):checked~*){outline-color:var(--color-primary-dark)}.dark\:file\:bg-surface-dark-alt:where([data-theme=dark],[data-theme=dark] *)::file-selector-button{background-color:var(--color-surface-dark-alt)}.dark\:file\:text-on-surface-dark-strong:where([data-theme=dark],[data-theme=dark] *)::file-selector-button{color:var(--color-on-surface-dark-strong)}.dark\:before\:bg-on-primary-dark:where([data-theme=dark],[data-theme=dark] *):before{content:var(--tw-content);background-color:var(--color-on-primary-dark)}.dark\:after\:bg-on-surface-dark:where([data-theme=dark],[data-theme=dark] *):after{content:var(--tw-content);background-color:var(--color-on-surface-dark)}.dark\:peer-checked\:after\:bg-on-primary-dark:where([data-theme=dark],[data-theme=dark] *):is(:where(.peer):checked~*):after{content:var(--tw-content);background-color:var(--color-on-primary-dark)}.dark\:checked\:border-primary-dark:where([data-theme=dark],[data-theme=dark] *):checked{border-color:var(--color-primary-dark)}.dark\:checked\:bg-primary-dark:where([data-theme=dark],[data-theme=dark] *):checked{background-color:var(--color-primary-dark)}.dark\:checked\:before\:bg-primary-dark:where([data-theme=dark],[data-theme=dark] *):checked:before{content:var(--tw-content);background-color:var(--color-primary-dark)}@media (hover:hover){.dark\:hover\:border-primary-dark:where([data-theme=dark],[data-theme=dark] *):hover{border-color:var(--color-primary-dark)}.dark\:hover\:bg-primary-dark\/5:where([data-theme=dark],[data-theme=dark] *):hover{background-color:#7d87ff0d}@supports (color:color-mix(in lab, red, red)){.dark\:hover\:bg-primary-dark\/5:where([data-theme=dark],[data-theme=dark] *):hover{background-color:color-mix(in oklab, var(--color-primary-dark) 5%, transparent)}}.dark\:hover\:bg-surface-alt\/5:where([data-theme=dark],[data-theme=dark] *):hover{background-color:#f1f5f90d}@supports (color:color-mix(in lab, red, red)){.dark\:hover\:bg-surface-alt\/5:where([data-theme=dark],[data-theme=dark] *):hover{background-color:color-mix(in oklab, var(--color-surface-alt) 5%, transparent)}}.dark\:hover\:bg-surface-dark:where([data-theme=dark],[data-theme=dark] *):hover{background-color:var(--color-surface-dark)}.dark\:hover\:bg-surface-dark-alt:where([data-theme=dark],[data-theme=dark] *):hover{background-color:var(--color-surface-dark-alt)}.dark\:hover\:bg-surface-dark\/60:where([data-theme=dark],[data-theme=dark] *):hover{background-color:#0f172b99}@supports (color:color-mix(in lab, red, red)){.dark\:hover\:bg-surface-dark\/60:where([data-theme=dark],[data-theme=dark] *):hover{background-color:color-mix(in oklab, var(--color-surface-dark) 60%, transparent)}}.dark\:hover\:text-on-surface-dark-strong:where([data-theme=dark],[data-theme=dark] *):hover{color:var(--color-on-surface-dark-strong)}.dark\:hover\:text-primary-dark:where([data-theme=dark],[data-theme=dark] *):hover{color:var(--color-primary-dark)}}.dark\:focus\:outline-outline-dark-strong:where([data-theme=dark],[data-theme=dark] *):focus{outline-color:var(--color-outline-dark-strong)}.dark\:checked\:focus\:outline-primary-dark:where([data-theme=dark],[data-theme=dark] *):checked:focus{outline-color:var(--color-primary-dark)}.dark\:focus-visible\:bg-surface-alt\/10:where([data-theme=dark],[data-theme=dark] *):focus-visible{background-color:#f1f5f91a}@supports (color:color-mix(in lab, red, red)){.dark\:focus-visible\:bg-surface-alt\/10:where([data-theme=dark],[data-theme=dark] *):focus-visible{background-color:color-mix(in oklab, var(--color-surface-alt) 10%, transparent)}}.dark\:focus-visible\:text-on-surface-dark-strong:where([data-theme=dark],[data-theme=dark] *):focus-visible{color:var(--color-on-surface-dark-strong)}.dark\:focus-visible\:outline-danger:where([data-theme=dark],[data-theme=dark] *):focus-visible{outline-color:var(--color-danger)}.dark\:focus-visible\:outline-info:where([data-theme=dark],[data-theme=dark] *):focus-visible{outline-color:var(--color-info)}.dark\:focus-visible\:outline-outline-dark:where([data-theme=dark],[data-theme=dark] *):focus-visible{outline-color:var(--color-outline-dark)}.dark\:focus-visible\:outline-primary-dark:where([data-theme=dark],[data-theme=dark] *):focus-visible{outline-color:var(--color-primary-dark)}.dark\:focus-visible\:outline-secondary-dark:where([data-theme=dark],[data-theme=dark] *):focus-visible{outline-color:var(--color-secondary-dark)}.dark\:focus-visible\:outline-success:where([data-theme=dark],[data-theme=dark] *):focus-visible{outline-color:var(--color-success)}.dark\:focus-visible\:outline-warning:where([data-theme=dark],[data-theme=dark] *):focus-visible{outline-color:var(--color-warning)}.dark\:has-checked\:text-on-surface-dark-strong:where([data-theme=dark],[data-theme=dark] *):has(:checked){color:var(--color-on-surface-dark-strong)}.dark\:has-\[\:checked\]\:border-primary-dark:where([data-theme=dark],[data-theme=dark] *):has(:checked){border-color:var(--color-primary-dark)}.dark\:aria-\[current\=page\]\:bg-primary-dark\/10:where([data-theme=dark],[data-theme=dark] *)[aria-current=page]{background-color:#7d87ff1a}@supports (color:color-mix(in lab, red, red)){.dark\:aria-\[current\=page\]\:bg-primary-dark\/10:where([data-theme=dark],[data-theme=dark] *)[aria-current=page]{background-color:color-mix(in oklab, var(--color-primary-dark) 10%, transparent)}}.dark\:aria-\[current\=page\]\:text-on-surface-dark-strong:where([data-theme=dark],[data-theme=dark] *)[aria-current=page]{color:var(--color-on-surface-dark-strong)}.dark\:aria-\[current\=page\]\:text-primary-dark:where([data-theme=dark],[data-theme=dark] *)[aria-current=page]{color:var(--color-primary-dark)}}[x-cloak]{display:none!important}@property --tw-translate-x{syntax:"*";inherits:false;initial-value:0}@property --tw-translate-y{syntax:"*";inherits:false;initial-value:0}@property --tw-translate-z{syntax:"*";inherits:false;initial-value:0}@property --tw-rotate-x{syntax:"*";inherits:false}@property --tw-rotate-y{syntax:"*";inherits:false}@property --tw-rotate-z{syntax:"*";inherits:false}@property --tw-skew-x{syntax:"*";inherits:false}@property --tw-skew-y{syntax:"*";inherits:false}@property --tw-space-y-reverse{syntax:"*";inherits:false;initial-value:0}@property --tw-divide-y-reverse{syntax:"*";inherits:false;initial-value:0}@property --tw-border-style{syntax:"*";inherits:false;initial-value:solid}@property --tw-leading{syntax:"*";inherits:false}@property --tw-font-weight{syntax:"*";inherits:false}@property --tw-tracking{syntax:"*";inherits:false}@property --tw-ordinal{syntax:"*";inherits:false}@property --tw-slashed-zero{syntax:"*";inherits:false}@property --tw-numeric-figure{syntax:"*";inherits:false}@property --tw-numeric-spacing{syntax:"*";inherits:false}@property --tw-numeric-fraction{syntax:"*";inherits:false}@property --tw-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-shadow-color{syntax:"*";inherits:false}@property --tw-shadow-alpha{syntax:"";inherits:false;initial-value:100%}@property --tw-inset-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-inset-shadow-color{syntax:"*";inherits:false}@property --tw-inset-shadow-alpha{syntax:"";inherits:false;initial-value:100%}@property --tw-ring-color{syntax:"*";inherits:false}@property --tw-ring-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-inset-ring-color{syntax:"*";inherits:false}@property --tw-inset-ring-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-ring-inset{syntax:"*";inherits:false}@property --tw-ring-offset-width{syntax:"";inherits:false;initial-value:0}@property --tw-ring-offset-color{syntax:"*";inherits:false;initial-value:#fff}@property --tw-ring-offset-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-outline-style{syntax:"*";inherits:false;initial-value:solid}@property --tw-backdrop-blur{syntax:"*";inherits:false}@property --tw-backdrop-brightness{syntax:"*";inherits:false}@property --tw-backdrop-contrast{syntax:"*";inherits:false}@property --tw-backdrop-grayscale{syntax:"*";inherits:false}@property --tw-backdrop-hue-rotate{syntax:"*";inherits:false}@property --tw-backdrop-invert{syntax:"*";inherits:false}@property --tw-backdrop-opacity{syntax:"*";inherits:false}@property --tw-backdrop-saturate{syntax:"*";inherits:false}@property --tw-backdrop-sepia{syntax:"*";inherits:false}@property --tw-duration{syntax:"*";inherits:false}@property --tw-ease{syntax:"*";inherits:false}@property --tw-scale-x{syntax:"*";inherits:false;initial-value:1}@property --tw-scale-y{syntax:"*";inherits:false;initial-value:1}@property --tw-scale-z{syntax:"*";inherits:false;initial-value:1}@property --tw-content{syntax:"*";inherits:false;initial-value:""} \ No newline at end of file +@layer properties{@supports (((-webkit-hyphens:none)) and (not (margin-trim:inline))) or ((-moz-orient:inline) and (not (color:rgb(from red r g b)))){*,:before,:after,::backdrop{--tw-translate-x:0;--tw-translate-y:0;--tw-translate-z:0;--tw-rotate-x:initial;--tw-rotate-y:initial;--tw-rotate-z:initial;--tw-skew-x:initial;--tw-skew-y:initial;--tw-space-y-reverse:0;--tw-divide-y-reverse:0;--tw-border-style:solid;--tw-leading:initial;--tw-font-weight:initial;--tw-tracking:initial;--tw-ordinal:initial;--tw-slashed-zero:initial;--tw-numeric-figure:initial;--tw-numeric-spacing:initial;--tw-numeric-fraction:initial;--tw-shadow:0 0 #0000;--tw-shadow-color:initial;--tw-shadow-alpha:100%;--tw-inset-shadow:0 0 #0000;--tw-inset-shadow-color:initial;--tw-inset-shadow-alpha:100%;--tw-ring-color:initial;--tw-ring-shadow:0 0 #0000;--tw-inset-ring-color:initial;--tw-inset-ring-shadow:0 0 #0000;--tw-ring-inset:initial;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-offset-shadow:0 0 #0000;--tw-outline-style:solid;--tw-backdrop-blur:initial;--tw-backdrop-brightness:initial;--tw-backdrop-contrast:initial;--tw-backdrop-grayscale:initial;--tw-backdrop-hue-rotate:initial;--tw-backdrop-invert:initial;--tw-backdrop-opacity:initial;--tw-backdrop-saturate:initial;--tw-backdrop-sepia:initial;--tw-duration:initial;--tw-ease:initial;--tw-scale-x:1;--tw-scale-y:1;--tw-scale-z:1;--tw-content:""}}}@layer theme{:root,:host{--font-sans:ui-sans-serif, system-ui, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";--font-mono:ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;--color-red-600:oklch(57.7% .245 27.325);--color-amber-500:oklch(76.9% .188 70.08);--color-green-600:oklch(62.7% .194 149.214);--color-emerald-600:oklch(59.6% .145 163.225);--color-sky-500:oklch(68.5% .169 237.323);--color-indigo-400:oklch(67.3% .182 276.935);--color-indigo-600:oklch(51.1% .262 276.966);--color-slate-100:oklch(96.8% .007 247.896);--color-slate-300:oklch(86.9% .022 252.894);--color-slate-600:oklch(44.6% .043 257.281);--color-slate-700:oklch(37.2% .044 257.287);--color-slate-800:oklch(27.9% .041 260.031);--color-slate-900:oklch(20.8% .042 265.755);--color-slate-950:oklch(12.9% .042 264.695);--color-black:#000;--color-white:#fff;--spacing:.25rem;--container-sm:24rem;--container-md:28rem;--container-xl:36rem;--container-2xl:42rem;--container-3xl:48rem;--container-5xl:64rem;--container-7xl:80rem;--text-xs:.75rem;--text-xs--line-height:calc(1 / .75);--text-sm:.875rem;--text-sm--line-height:calc(1.25 / .875);--text-base:1rem;--text-base--line-height:calc(1.5 / 1);--text-lg:1.125rem;--text-lg--line-height:calc(1.75 / 1.125);--text-xl:1.25rem;--text-xl--line-height:calc(1.75 / 1.25);--text-2xl:1.5rem;--text-2xl--line-height:calc(2 / 1.5);--text-3xl:1.875rem;--text-3xl--line-height:calc(2.25 / 1.875);--text-4xl:2.25rem;--text-4xl--line-height:calc(2.5 / 2.25);--font-weight-medium:500;--font-weight-semibold:600;--font-weight-bold:700;--tracking-tight:-.025em;--tracking-wide:.025em;--tracking-wider:.05em;--leading-relaxed:1.625;--radius-sm:.25rem;--ease-in:cubic-bezier(.4, 0, 1, 1);--ease-out:cubic-bezier(0, 0, .2, 1);--default-transition-duration:.15s;--default-transition-timing-function:cubic-bezier(.4, 0, .2, 1);--default-font-family:var(--font-sans);--default-mono-font-family:var(--font-mono);--color-surface:var(--color-white);--color-surface-alt:var(--color-slate-100);--color-on-surface:var(--color-slate-700);--color-on-surface-strong:var(--color-slate-900);--color-primary:var(--color-indigo-600);--color-on-primary:var(--color-white);--color-secondary:var(--color-slate-600);--color-on-secondary:var(--color-white);--color-outline:var(--color-slate-300);--color-outline-strong:var(--color-slate-800);--color-surface-dark:var(--color-slate-900);--color-surface-dark-alt:var(--color-slate-800);--color-on-surface-dark:var(--color-slate-300);--color-on-surface-dark-strong:var(--color-white);--color-primary-dark:var(--color-indigo-400);--color-on-primary-dark:var(--color-slate-950);--color-secondary-dark:var(--color-slate-300);--color-on-secondary-dark:var(--color-slate-950);--color-outline-dark:var(--color-slate-700);--color-outline-dark-strong:var(--color-slate-300);--color-info:var(--color-sky-500);--color-on-info:var(--color-white);--color-success:var(--color-green-600);--color-on-success:var(--color-white);--color-warning:var(--color-amber-500);--color-on-warning:var(--color-white);--color-danger:var(--color-red-600);--color-on-danger:var(--color-white);--radius-radius:.375rem}}@layer base{*,:after,:before,::backdrop{box-sizing:border-box;border:0 solid;margin:0;padding:0}::file-selector-button{box-sizing:border-box;border:0 solid;margin:0;padding:0}html,:host{-webkit-text-size-adjust:100%;tab-size:4;line-height:1.5;font-family:var(--default-font-family,ui-sans-serif, system-ui, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji");font-feature-settings:var(--default-font-feature-settings,normal);font-variation-settings:var(--default-font-variation-settings,normal);-webkit-tap-highlight-color:transparent}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;-webkit-text-decoration:inherit;-webkit-text-decoration:inherit;-webkit-text-decoration:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:var(--default-mono-font-family,ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace);font-feature-settings:var(--default-mono-font-feature-settings,normal);font-variation-settings:var(--default-mono-font-variation-settings,normal);font-size:1em}small{font-size:80%}sub,sup{vertical-align:baseline;font-size:75%;line-height:0;position:relative}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}:-moz-focusring{outline:auto}progress{vertical-align:baseline}summary{display:list-item}ol,ul,menu{list-style:none}img,svg,video,canvas,audio,iframe,embed,object{vertical-align:middle;display:block}img,video{max-width:100%;height:auto}button,input,select,optgroup,textarea{font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;color:inherit;opacity:1;background-color:#0000;border-radius:0}::file-selector-button{font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;color:inherit;opacity:1;background-color:#0000;border-radius:0}:where(select:is([multiple],[size])) optgroup{font-weight:bolder}:where(select:is([multiple],[size])) optgroup option{padding-inline-start:20px}::file-selector-button{margin-inline-end:4px}::placeholder{opacity:1}@supports (not ((-webkit-appearance:-apple-pay-button))) or (contain-intrinsic-size:1px){::placeholder{color:currentColor}@supports (color:color-mix(in lab, red, red)){::placeholder{color:color-mix(in oklab, currentcolor 50%, transparent)}}}textarea{resize:vertical}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-date-and-time-value{min-height:1lh;text-align:inherit}::-webkit-datetime-edit{display:inline-flex}::-webkit-datetime-edit-fields-wrapper{padding:0}::-webkit-datetime-edit{padding-block:0}::-webkit-datetime-edit-year-field{padding-block:0}::-webkit-datetime-edit-month-field{padding-block:0}::-webkit-datetime-edit-day-field{padding-block:0}::-webkit-datetime-edit-hour-field{padding-block:0}::-webkit-datetime-edit-minute-field{padding-block:0}::-webkit-datetime-edit-second-field{padding-block:0}::-webkit-datetime-edit-millisecond-field{padding-block:0}::-webkit-datetime-edit-meridiem-field{padding-block:0}::-webkit-calendar-picker-indicator{line-height:1}:-moz-ui-invalid{box-shadow:none}button,input:where([type=button],[type=reset],[type=submit]){appearance:button}::file-selector-button{appearance:button}::-webkit-inner-spin-button{height:auto}::-webkit-outer-spin-button{height:auto}[hidden]:where(:not([hidden=until-found])){display:none!important}}@layer components;@layer utilities{.pointer-events-auto{pointer-events:auto}.pointer-events-none{pointer-events:none}.collapse{visibility:collapse}.invisible{visibility:hidden}.visible{visibility:visible}.sr-only{clip-path:inset(50%);white-space:nowrap;border-width:0;width:1px;height:1px;margin:-1px;padding:0;position:absolute;overflow:hidden}.absolute{position:absolute}.fixed{position:fixed}.relative{position:relative}.static{position:static}.sticky{position:sticky}.inset-0{inset:0}.inset-x-0{inset-inline:0}.inset-x-8{inset-inline:calc(var(--spacing) * 8)}.inset-y-0{inset-block:0}.-top-1{top:calc(var(--spacing) * -1)}.top-0{top:0}.top-1\/2{top:50%}.top-full{top:100%}.-right-1{right:calc(var(--spacing) * -1)}.right-0{right:0}.right-3{right:calc(var(--spacing) * 3)}.left-0{left:0}.left-1\/2{left:50%}.left-3{left:calc(var(--spacing) * 3)}.z-10{z-index:10}.z-20{z-index:20}.z-30{z-index:30}.z-40{z-index:40}.z-99{z-index:99}.container{width:100%}@media (min-width:40rem){.container{max-width:40rem}}@media (min-width:48rem){.container{max-width:48rem}}@media (min-width:64rem){.container{max-width:64rem}}@media (min-width:80rem){.container{max-width:80rem}}@media (min-width:96rem){.container{max-width:96rem}}.mx-4{margin-inline:calc(var(--spacing) * 4)}.mx-auto{margin-inline:auto}.mt-0\.5{margin-top:calc(var(--spacing) * .5)}.mt-1{margin-top:var(--spacing)}.mt-2{margin-top:calc(var(--spacing) * 2)}.mt-3{margin-top:calc(var(--spacing) * 3)}.mt-4{margin-top:calc(var(--spacing) * 4)}.mt-5{margin-top:calc(var(--spacing) * 5)}.mt-6{margin-top:calc(var(--spacing) * 6)}.mt-8{margin-top:calc(var(--spacing) * 8)}.mr-2{margin-right:calc(var(--spacing) * 2)}.mb-2{margin-bottom:calc(var(--spacing) * 2)}.mb-3{margin-bottom:calc(var(--spacing) * 3)}.ml-0\.5{margin-left:calc(var(--spacing) * .5)}.ml-2{margin-left:calc(var(--spacing) * 2)}.ml-3{margin-left:calc(var(--spacing) * 3)}.ml-auto{margin-left:auto}.block{display:block}.contents{display:contents}.flex{display:flex}.grid{display:grid}.hidden{display:none}.inline{display:inline}.inline-block{display:inline-block}.inline-flex{display:inline-flex}.table{display:table}.aspect-square{aspect-ratio:1}.size-3{width:calc(var(--spacing) * 3);height:calc(var(--spacing) * 3)}.size-3\.5{width:calc(var(--spacing) * 3.5);height:calc(var(--spacing) * 3.5)}.size-4{width:calc(var(--spacing) * 4);height:calc(var(--spacing) * 4)}.size-5{width:calc(var(--spacing) * 5);height:calc(var(--spacing) * 5)}.size-6{width:calc(var(--spacing) * 6);height:calc(var(--spacing) * 6)}.size-7{width:calc(var(--spacing) * 7);height:calc(var(--spacing) * 7)}.size-9{width:calc(var(--spacing) * 9);height:calc(var(--spacing) * 9)}.size-10{width:calc(var(--spacing) * 10);height:calc(var(--spacing) * 10)}.size-11{width:calc(var(--spacing) * 11);height:calc(var(--spacing) * 11)}.size-12{width:calc(var(--spacing) * 12);height:calc(var(--spacing) * 12)}.size-14{width:calc(var(--spacing) * 14);height:calc(var(--spacing) * 14)}.size-16{width:calc(var(--spacing) * 16);height:calc(var(--spacing) * 16)}.size-24{width:calc(var(--spacing) * 24);height:calc(var(--spacing) * 24)}.size-48{width:calc(var(--spacing) * 48);height:calc(var(--spacing) * 48)}.size-full{width:100%;height:100%}.h-4{height:calc(var(--spacing) * 4)}.h-6{height:calc(var(--spacing) * 6)}.h-16{height:calc(var(--spacing) * 16)}.h-44{height:calc(var(--spacing) * 44)}.h-fit{height:fit-content}.h-px{height:1px}.max-h-56{max-height:calc(var(--spacing) * 56)}.max-h-80{max-height:calc(var(--spacing) * 80)}.min-h-screen{min-height:100vh}.w-4{width:calc(var(--spacing) * 4)}.w-7{width:calc(var(--spacing) * 7)}.w-8{width:calc(var(--spacing) * 8)}.w-11{width:calc(var(--spacing) * 11)}.w-20{width:calc(var(--spacing) * 20)}.w-24{width:calc(var(--spacing) * 24)}.w-28{width:calc(var(--spacing) * 28)}.w-56{width:calc(var(--spacing) * 56)}.w-60{width:calc(var(--spacing) * 60)}.w-64{width:calc(var(--spacing) * 64)}.w-80{width:calc(var(--spacing) * 80)}.w-fit{width:fit-content}.w-full{width:100%}.max-w-2xl{max-width:var(--container-2xl)}.max-w-3xl{max-width:var(--container-3xl)}.max-w-5xl{max-width:var(--container-5xl)}.max-w-7xl{max-width:var(--container-7xl)}.max-w-full{max-width:100%}.max-w-md{max-width:var(--container-md)}.max-w-sm{max-width:var(--container-sm)}.max-w-xl{max-width:var(--container-xl)}.min-w-0{min-width:0}.min-w-4{min-width:calc(var(--spacing) * 4)}.min-w-40{min-width:calc(var(--spacing) * 40)}.min-w-48{min-width:calc(var(--spacing) * 48)}.flex-1{flex:1}.shrink-0{flex-shrink:0}.grow{flex-grow:1}.-translate-x-1\/2{--tw-translate-x:calc(calc(1 / 2 * 100%) * -1);translate:var(--tw-translate-x) var(--tw-translate-y)}.-translate-x-24{--tw-translate-x:calc(var(--spacing) * -24);translate:var(--tw-translate-x) var(--tw-translate-y)}.-translate-x-60{--tw-translate-x:calc(var(--spacing) * -60);translate:var(--tw-translate-x) var(--tw-translate-y)}.translate-x-0{--tw-translate-x:0;translate:var(--tw-translate-x) var(--tw-translate-y)}.-translate-y-1\/2{--tw-translate-y:calc(calc(1 / 2 * 100%) * -1);translate:var(--tw-translate-x) var(--tw-translate-y)}.translate-y-0{--tw-translate-y:0;translate:var(--tw-translate-x) var(--tw-translate-y)}.translate-y-8{--tw-translate-y:calc(var(--spacing) * 8);translate:var(--tw-translate-x) var(--tw-translate-y)}.rotate-0{rotate:0deg}.rotate-180{rotate:180deg}.transform{transform:var(--tw-rotate-x,) var(--tw-rotate-y,) var(--tw-rotate-z,) var(--tw-skew-x,) var(--tw-skew-y,)}.cursor-pointer{cursor:pointer}.appearance-none{appearance:none}.grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.grid-cols-\[auto_1fr\]{grid-template-columns:auto 1fr}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-center{align-items:center}.items-end{align-items:flex-end}.items-start{align-items:flex-start}.items-stretch{align-items:stretch}.justify-between{justify-content:space-between}.justify-center{justify-content:center}.justify-end{justify-content:flex-end}.gap-0\.5{gap:calc(var(--spacing) * .5)}.gap-1{gap:var(--spacing)}.gap-1\.5{gap:calc(var(--spacing) * 1.5)}.gap-2{gap:calc(var(--spacing) * 2)}.gap-2\.5{gap:calc(var(--spacing) * 2.5)}.gap-3{gap:calc(var(--spacing) * 3)}.gap-4{gap:calc(var(--spacing) * 4)}.gap-5{gap:calc(var(--spacing) * 5)}.gap-6{gap:calc(var(--spacing) * 6)}.gap-8{gap:calc(var(--spacing) * 8)}.gap-10{gap:calc(var(--spacing) * 10)}:where(.space-y-1>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(var(--spacing) * var(--tw-space-y-reverse));margin-block-end:calc(var(--spacing) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-1\.5>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * 1.5) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 1.5) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-2>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * 2) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 2) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-3>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * 3) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 3) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-4>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * 4) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 4) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-5>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * 5) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 5) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-6>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * 6) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 6) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-8>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * 8) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 8) * calc(1 - var(--tw-space-y-reverse)))}:where(.space-y-12>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * 12) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 12) * calc(1 - var(--tw-space-y-reverse)))}.gap-x-4{column-gap:calc(var(--spacing) * 4)}.gap-y-1{row-gap:var(--spacing)}:where(.divide-y>:not(:last-child)){--tw-divide-y-reverse:0;border-bottom-style:var(--tw-border-style);border-top-style:var(--tw-border-style);border-top-width:calc(1px * var(--tw-divide-y-reverse));border-bottom-width:calc(1px * calc(1 - var(--tw-divide-y-reverse)))}:where(.divide-outline>:not(:last-child)){border-color:var(--color-outline)}.truncate{text-overflow:ellipsis;white-space:nowrap;overflow:hidden}.overflow-auto{overflow:auto}.overflow-clip{overflow:clip}.overflow-hidden{overflow:hidden}.overflow-x-auto{overflow-x:auto}.overflow-y-auto{overflow-y:auto}.rounded-full{border-radius:3.40282e38px}.rounded-radius{border-radius:var(--radius-radius)}.rounded-sm{border-radius:var(--radius-sm)}.rounded-l-radius{border-top-left-radius:var(--radius-radius);border-bottom-left-radius:var(--radius-radius)}.rounded-r-radius{border-top-right-radius:var(--radius-radius);border-bottom-right-radius:var(--radius-radius)}.border{border-style:var(--tw-border-style);border-width:1px}.border-t{border-top-style:var(--tw-border-style);border-top-width:1px}.border-r{border-right-style:var(--tw-border-style);border-right-width:1px}.border-b{border-bottom-style:var(--tw-border-style);border-bottom-width:1px}.border-l{border-left-style:var(--tw-border-style);border-left-width:1px}.border-danger{border-color:var(--color-danger)}.border-danger\/40{border-color:#e4001466}@supports (color:color-mix(in lab, red, red)){.border-danger\/40{border-color:color-mix(in oklab, var(--color-danger) 40%, transparent)}}.border-info{border-color:var(--color-info)}.border-outline{border-color:var(--color-outline)}.border-primary{border-color:var(--color-primary)}.border-primary\/40{border-color:#4f39f666}@supports (color:color-mix(in lab, red, red)){.border-primary\/40{border-color:color-mix(in oklab, var(--color-primary) 40%, transparent)}}.border-secondary{border-color:var(--color-secondary)}.border-success{border-color:var(--color-success)}.border-warning{border-color:var(--color-warning)}.bg-black\/50{background-color:#00000080}@supports (color:color-mix(in lab, red, red)){.bg-black\/50{background-color:color-mix(in oklab, var(--color-black) 50%, transparent)}}.bg-danger{background-color:var(--color-danger)}.bg-danger\/5{background-color:#e400140d}@supports (color:color-mix(in lab, red, red)){.bg-danger\/5{background-color:color-mix(in oklab, var(--color-danger) 5%, transparent)}}.bg-danger\/10{background-color:#e400141a}@supports (color:color-mix(in lab, red, red)){.bg-danger\/10{background-color:color-mix(in oklab, var(--color-danger) 10%, transparent)}}.bg-danger\/15{background-color:#e4001426}@supports (color:color-mix(in lab, red, red)){.bg-danger\/15{background-color:color-mix(in oklab, var(--color-danger) 15%, transparent)}}.bg-info{background-color:var(--color-info)}.bg-info\/10{background-color:#00a5ef1a}@supports (color:color-mix(in lab, red, red)){.bg-info\/10{background-color:color-mix(in oklab, var(--color-info) 10%, transparent)}}.bg-info\/15{background-color:#00a5ef26}@supports (color:color-mix(in lab, red, red)){.bg-info\/15{background-color:color-mix(in oklab, var(--color-info) 15%, transparent)}}.bg-outline{background-color:var(--color-outline)}.bg-primary{background-color:var(--color-primary)}.bg-primary\/5{background-color:#4f39f60d}@supports (color:color-mix(in lab, red, red)){.bg-primary\/5{background-color:color-mix(in oklab, var(--color-primary) 5%, transparent)}}.bg-primary\/10{background-color:#4f39f61a}@supports (color:color-mix(in lab, red, red)){.bg-primary\/10{background-color:color-mix(in oklab, var(--color-primary) 10%, transparent)}}.bg-secondary{background-color:var(--color-secondary)}.bg-success{background-color:var(--color-success)}.bg-success\/10{background-color:#00a5441a}@supports (color:color-mix(in lab, red, red)){.bg-success\/10{background-color:color-mix(in oklab, var(--color-success) 10%, transparent)}}.bg-success\/15{background-color:#00a54426}@supports (color:color-mix(in lab, red, red)){.bg-success\/15{background-color:color-mix(in oklab, var(--color-success) 15%, transparent)}}.bg-surface{background-color:var(--color-surface)}.bg-surface-alt{background-color:var(--color-surface-alt)}.bg-surface-alt\/40{background-color:#f1f5f966}@supports (color:color-mix(in lab, red, red)){.bg-surface-alt\/40{background-color:color-mix(in oklab, var(--color-surface-alt) 40%, transparent)}}.bg-surface-alt\/50{background-color:#f1f5f980}@supports (color:color-mix(in lab, red, red)){.bg-surface-alt\/50{background-color:color-mix(in oklab, var(--color-surface-alt) 50%, transparent)}}.bg-surface\/40{background-color:#fff6}@supports (color:color-mix(in lab, red, red)){.bg-surface\/40{background-color:color-mix(in oklab, var(--color-surface) 40%, transparent)}}.bg-surface\/95{background-color:#fffffff2}@supports (color:color-mix(in lab, red, red)){.bg-surface\/95{background-color:color-mix(in oklab, var(--color-surface) 95%, transparent)}}.bg-transparent{background-color:#0000}.bg-warning{background-color:var(--color-warning)}.bg-warning\/10{background-color:#f99c001a}@supports (color:color-mix(in lab, red, red)){.bg-warning\/10{background-color:color-mix(in oklab, var(--color-warning) 10%, transparent)}}.bg-warning\/15{background-color:#f99c0026}@supports (color:color-mix(in lab, red, red)){.bg-warning\/15{background-color:color-mix(in oklab, var(--color-warning) 15%, transparent)}}.bg-white{background-color:var(--color-white)}.object-cover{object-fit:cover}.p-0\.5{padding:calc(var(--spacing) * .5)}.p-1{padding:var(--spacing)}.p-2{padding:calc(var(--spacing) * 2)}.p-4{padding:calc(var(--spacing) * 4)}.p-5{padding:calc(var(--spacing) * 5)}.p-6{padding:calc(var(--spacing) * 6)}.px-1{padding-inline:var(--spacing)}.px-2{padding-inline:calc(var(--spacing) * 2)}.px-2\.5{padding-inline:calc(var(--spacing) * 2.5)}.px-3{padding-inline:calc(var(--spacing) * 3)}.px-4{padding-inline:calc(var(--spacing) * 4)}.px-5{padding-inline:calc(var(--spacing) * 5)}.px-6{padding-inline:calc(var(--spacing) * 6)}.py-1{padding-block:var(--spacing)}.py-1\.5{padding-block:calc(var(--spacing) * 1.5)}.py-2{padding-block:calc(var(--spacing) * 2)}.py-2\.5{padding-block:calc(var(--spacing) * 2.5)}.py-3{padding-block:calc(var(--spacing) * 3)}.py-6{padding-block:calc(var(--spacing) * 6)}.py-8{padding-block:calc(var(--spacing) * 8)}.py-10{padding-block:calc(var(--spacing) * 10)}.py-12{padding-block:calc(var(--spacing) * 12)}.py-16{padding-block:calc(var(--spacing) * 16)}.pt-0{padding-top:0}.pt-1{padding-top:var(--spacing)}.pt-2{padding-top:calc(var(--spacing) * 2)}.pt-3{padding-top:calc(var(--spacing) * 3)}.pt-20{padding-top:calc(var(--spacing) * 20)}.pr-7{padding-right:calc(var(--spacing) * 7)}.pr-8{padding-right:calc(var(--spacing) * 8)}.pb-2{padding-bottom:calc(var(--spacing) * 2)}.pb-3{padding-bottom:calc(var(--spacing) * 3)}.pl-1{padding-left:var(--spacing)}.pl-3{padding-left:calc(var(--spacing) * 3)}.pl-6{padding-left:calc(var(--spacing) * 6)}.text-center{text-align:center}.text-left{text-align:left}.text-right{text-align:right}.font-mono{font-family:var(--font-mono)}.text-2xl{font-size:var(--text-2xl);line-height:var(--tw-leading,var(--text-2xl--line-height))}.text-3xl{font-size:var(--text-3xl);line-height:var(--tw-leading,var(--text-3xl--line-height))}.text-4xl{font-size:var(--text-4xl);line-height:var(--tw-leading,var(--text-4xl--line-height))}.text-base{font-size:var(--text-base);line-height:var(--tw-leading,var(--text-base--line-height))}.text-lg{font-size:var(--text-lg);line-height:var(--tw-leading,var(--text-lg--line-height))}.text-sm{font-size:var(--text-sm);line-height:var(--tw-leading,var(--text-sm--line-height))}.text-xl{font-size:var(--text-xl);line-height:var(--tw-leading,var(--text-xl--line-height))}.text-xs{font-size:var(--text-xs);line-height:var(--tw-leading,var(--text-xs--line-height))}.text-\[10px\]{font-size:10px}.leading-4{--tw-leading:calc(var(--spacing) * 4);line-height:calc(var(--spacing) * 4)}.leading-relaxed{--tw-leading:var(--leading-relaxed);line-height:var(--leading-relaxed)}.font-bold{--tw-font-weight:var(--font-weight-bold);font-weight:var(--font-weight-bold)}.font-medium{--tw-font-weight:var(--font-weight-medium);font-weight:var(--font-weight-medium)}.font-semibold{--tw-font-weight:var(--font-weight-semibold);font-weight:var(--font-weight-semibold)}.tracking-tight{--tw-tracking:var(--tracking-tight);letter-spacing:var(--tracking-tight)}.tracking-wide{--tw-tracking:var(--tracking-wide);letter-spacing:var(--tracking-wide)}.tracking-wider{--tw-tracking:var(--tracking-wider);letter-spacing:var(--tracking-wider)}.text-pretty{text-wrap:pretty}.break-all{word-break:break-all}.whitespace-nowrap{white-space:nowrap}.whitespace-pre-line{white-space:pre-line}.text-danger{color:var(--color-danger)}.text-info{color:var(--color-info)}.text-on-danger{color:var(--color-on-danger)}.text-on-info{color:var(--color-on-info)}.text-on-primary{color:var(--color-on-primary)}.text-on-primary\/90{color:#ffffffe6}@supports (color:color-mix(in lab, red, red)){.text-on-primary\/90{color:color-mix(in oklab, var(--color-on-primary) 90%, transparent)}}.text-on-secondary{color:var(--color-on-secondary)}.text-on-success{color:var(--color-on-success)}.text-on-surface{color:var(--color-on-surface)}.text-on-surface-strong{color:var(--color-on-surface-strong)}.text-on-surface\/40{color:#31415866}@supports (color:color-mix(in lab, red, red)){.text-on-surface\/40{color:color-mix(in oklab, var(--color-on-surface) 40%, transparent)}}.text-on-surface\/50{color:#31415880}@supports (color:color-mix(in lab, red, red)){.text-on-surface\/50{color:color-mix(in oklab, var(--color-on-surface) 50%, transparent)}}.text-on-surface\/60{color:#31415899}@supports (color:color-mix(in lab, red, red)){.text-on-surface\/60{color:color-mix(in oklab, var(--color-on-surface) 60%, transparent)}}.text-on-surface\/70{color:#314158b3}@supports (color:color-mix(in lab, red, red)){.text-on-surface\/70{color:color-mix(in oklab, var(--color-on-surface) 70%, transparent)}}.text-on-surface\/80{color:#314158cc}@supports (color:color-mix(in lab, red, red)){.text-on-surface\/80{color:color-mix(in oklab, var(--color-on-surface) 80%, transparent)}}.text-on-warning{color:var(--color-on-warning)}.text-outline{color:var(--color-outline)}.text-primary{color:var(--color-primary)}.text-secondary{color:var(--color-secondary)}.text-success{color:var(--color-success)}.text-warning{color:var(--color-warning)}.uppercase{text-transform:uppercase}.italic{font-style:italic}.tabular-nums{--tw-numeric-spacing:tabular-nums;font-variant-numeric:var(--tw-ordinal,) var(--tw-slashed-zero,) var(--tw-numeric-figure,) var(--tw-numeric-spacing,) var(--tw-numeric-fraction,)}.underline{text-decoration-line:underline}.underline-offset-2{text-underline-offset:2px}.antialiased{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.opacity-0{opacity:0}.opacity-100{opacity:1}.shadow-lg{--tw-shadow:0 10px 15px -3px var(--tw-shadow-color,#0000001a), 0 4px 6px -4px var(--tw-shadow-color,#0000001a);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.shadow-sm{--tw-shadow:0 1px 3px 0 var(--tw-shadow-color,#0000001a), 0 1px 2px -1px var(--tw-shadow-color,#0000001a);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.outline{outline-style:var(--tw-outline-style);outline-width:1px}.outline-danger{outline-color:var(--color-danger)}.outline-primary{outline-color:var(--color-primary)}.outline-secondary{outline-color:var(--color-secondary)}.backdrop-blur{--tw-backdrop-blur:blur(8px);-webkit-backdrop-filter:var(--tw-backdrop-blur,) var(--tw-backdrop-brightness,) var(--tw-backdrop-contrast,) var(--tw-backdrop-grayscale,) var(--tw-backdrop-hue-rotate,) var(--tw-backdrop-invert,) var(--tw-backdrop-opacity,) var(--tw-backdrop-saturate,) var(--tw-backdrop-sepia,);backdrop-filter:var(--tw-backdrop-blur,) var(--tw-backdrop-brightness,) var(--tw-backdrop-contrast,) var(--tw-backdrop-grayscale,) var(--tw-backdrop-hue-rotate,) var(--tw-backdrop-invert,) var(--tw-backdrop-opacity,) var(--tw-backdrop-saturate,) var(--tw-backdrop-sepia,)}.transition{transition-property:color,background-color,border-color,outline-color,text-decoration-color,fill,stroke,--tw-gradient-from,--tw-gradient-via,--tw-gradient-to,opacity,box-shadow,transform,translate,scale,rotate,filter,-webkit-backdrop-filter,backdrop-filter,display,content-visibility,overlay,pointer-events;transition-timing-function:var(--tw-ease,var(--default-transition-timing-function));transition-duration:var(--tw-duration,var(--default-transition-duration))}.transition-all{transition-property:all;transition-timing-function:var(--tw-ease,var(--default-transition-timing-function));transition-duration:var(--tw-duration,var(--default-transition-duration))}.transition-transform{transition-property:transform,translate,scale,rotate;transition-timing-function:var(--tw-ease,var(--default-transition-timing-function));transition-duration:var(--tw-duration,var(--default-transition-duration))}.duration-300{--tw-duration:.3s;transition-duration:.3s}.duration-700{--tw-duration:.7s;transition-duration:.7s}.ease-in{--tw-ease:var(--ease-in);transition-timing-function:var(--ease-in)}.ease-out{--tw-ease:var(--ease-out);transition-timing-function:var(--ease-out)}@media (hover:hover){.group-hover\:scale-105:is(:where(.group):hover *){--tw-scale-x:105%;--tw-scale-y:105%;--tw-scale-z:105%;scale:var(--tw-scale-x) var(--tw-scale-y)}}.peer-checked\:visible:is(:where(.peer):checked~*){visibility:visible}.peer-checked\:bg-primary:is(:where(.peer):checked~*){background-color:var(--color-primary)}.peer-focus\:outline-2:is(:where(.peer):focus~*){outline-style:var(--tw-outline-style);outline-width:2px}.peer-focus\:outline-offset-2:is(:where(.peer):focus~*){outline-offset:2px}.peer-focus\:outline-outline-strong:is(:where(.peer):focus~*){outline-color:var(--color-outline-strong)}.peer-focus\:peer-checked\:outline-primary:is(:where(.peer):focus~*):is(:where(.peer):checked~*){outline-color:var(--color-primary)}.peer-active\:outline-offset-0:is(:where(.peer):active~*){outline-offset:0px}.file\:mr-4::file-selector-button{margin-right:calc(var(--spacing) * 4)}.file\:border-none::file-selector-button{--tw-border-style:none;border-style:none}.file\:bg-surface-alt::file-selector-button{background-color:var(--color-surface-alt)}.file\:px-4::file-selector-button{padding-inline:calc(var(--spacing) * 4)}.file\:py-2::file-selector-button{padding-block:calc(var(--spacing) * 2)}.file\:font-medium::file-selector-button{--tw-font-weight:var(--font-weight-medium);font-weight:var(--font-weight-medium)}.file\:text-on-surface-strong::file-selector-button{color:var(--color-on-surface-strong)}.before\:invisible:before{content:var(--tw-content);visibility:hidden}.before\:absolute:before{content:var(--tw-content);position:absolute}.before\:inset-0:before{content:var(--tw-content);inset:0}.before\:top-1\/2:before{content:var(--tw-content);top:50%}.before\:left-1\/2:before{content:var(--tw-content);left:50%}.before\:h-1\.5:before{content:var(--tw-content);height:calc(var(--spacing) * 1.5)}.before\:w-1\.5:before{content:var(--tw-content);width:calc(var(--spacing) * 1.5)}.before\:-translate-x-1\/2:before{content:var(--tw-content);--tw-translate-x:calc(calc(1 / 2 * 100%) * -1);translate:var(--tw-translate-x) var(--tw-translate-y)}.before\:-translate-y-1\/2:before{content:var(--tw-content);--tw-translate-y:calc(calc(1 / 2 * 100%) * -1);translate:var(--tw-translate-x) var(--tw-translate-y)}.before\:rounded-full:before{content:var(--tw-content);border-radius:3.40282e38px}.before\:bg-on-primary:before{content:var(--tw-content);background-color:var(--color-on-primary)}.after\:absolute:after{content:var(--tw-content);position:absolute}.after\:top-0:after{content:var(--tw-content);top:0}.after\:bottom-0:after{content:var(--tw-content);bottom:0}.after\:left-\[0\.0625rem\]:after{content:var(--tw-content);left:.0625rem}.after\:my-auto:after{content:var(--tw-content);margin-block:auto}.after\:h-5:after{content:var(--tw-content);height:calc(var(--spacing) * 5)}.after\:w-5:after{content:var(--tw-content);width:calc(var(--spacing) * 5)}.after\:rounded-full:after{content:var(--tw-content);border-radius:3.40282e38px}.after\:bg-on-surface:after{content:var(--tw-content);background-color:var(--color-on-surface)}.after\:transition-all:after{content:var(--tw-content);transition-property:all;transition-timing-function:var(--tw-ease,var(--default-transition-timing-function));transition-duration:var(--tw-duration,var(--default-transition-duration))}.after\:content-\[\'\'\]:after{--tw-content:"";content:var(--tw-content)}.peer-checked\:after\:translate-x-5:is(:where(.peer):checked~*):after{content:var(--tw-content);--tw-translate-x:calc(var(--spacing) * 5);translate:var(--tw-translate-x) var(--tw-translate-y)}.peer-checked\:after\:bg-on-primary:is(:where(.peer):checked~*):after{content:var(--tw-content);background-color:var(--color-on-primary)}.checked\:border-primary:checked{border-color:var(--color-primary)}.checked\:bg-primary:checked{background-color:var(--color-primary)}.checked\:before\:visible:checked:before{content:var(--tw-content);visibility:visible}.checked\:before\:bg-primary:checked:before{content:var(--tw-content);background-color:var(--color-primary)}@media (hover:hover){.hover\:border-primary:hover{border-color:var(--color-primary)}.hover\:bg-danger\/5:hover{background-color:#e400140d}@supports (color:color-mix(in lab, red, red)){.hover\:bg-danger\/5:hover{background-color:color-mix(in oklab, var(--color-danger) 5%, transparent)}}.hover\:bg-info\/5:hover{background-color:#00a5ef0d}@supports (color:color-mix(in lab, red, red)){.hover\:bg-info\/5:hover{background-color:color-mix(in oklab, var(--color-info) 5%, transparent)}}.hover\:bg-primary\/5:hover{background-color:#4f39f60d}@supports (color:color-mix(in lab, red, red)){.hover\:bg-primary\/5:hover{background-color:color-mix(in oklab, var(--color-primary) 5%, transparent)}}.hover\:bg-surface-alt:hover{background-color:var(--color-surface-alt)}.hover\:bg-surface-dark-alt\/5:hover{background-color:#1d293d0d}@supports (color:color-mix(in lab, red, red)){.hover\:bg-surface-dark-alt\/5:hover{background-color:color-mix(in oklab, var(--color-surface-dark-alt) 5%, transparent)}}.hover\:bg-surface\/60:hover{background-color:#fff9}@supports (color:color-mix(in lab, red, red)){.hover\:bg-surface\/60:hover{background-color:color-mix(in oklab, var(--color-surface) 60%, transparent)}}.hover\:text-on-surface-strong:hover{color:var(--color-on-surface-strong)}.hover\:text-primary:hover{color:var(--color-primary)}.hover\:underline:hover{text-decoration-line:underline}.hover\:opacity-75:hover{opacity:.75}.hover\:opacity-90:hover{opacity:.9}}.focus\:outline-hidden:focus{--tw-outline-style:none;outline-style:none}@media (forced-colors:active){.focus\:outline-hidden:focus{outline-offset:2px;outline:2px solid #0000}}.focus\:outline-2:focus{outline-style:var(--tw-outline-style);outline-width:2px}.focus\:outline-offset-2:focus{outline-offset:2px}.focus\:outline-outline-strong:focus{outline-color:var(--color-outline-strong)}.focus\:outline-primary:focus,.checked\:focus\:outline-primary:checked:focus{outline-color:var(--color-primary)}.focus-visible\:bg-primary\/10:focus-visible{background-color:#4f39f61a}@supports (color:color-mix(in lab, red, red)){.focus-visible\:bg-primary\/10:focus-visible{background-color:color-mix(in oklab, var(--color-primary) 10%, transparent)}}.focus-visible\:bg-surface-dark-alt\/10:focus-visible{background-color:#1d293d1a}@supports (color:color-mix(in lab, red, red)){.focus-visible\:bg-surface-dark-alt\/10:focus-visible{background-color:color-mix(in oklab, var(--color-surface-dark-alt) 10%, transparent)}}.focus-visible\:text-on-surface-strong:focus-visible{color:var(--color-on-surface-strong)}.focus-visible\:underline:focus-visible{text-decoration-line:underline}.focus-visible\:outline-hidden:focus-visible{--tw-outline-style:none;outline-style:none}@media (forced-colors:active){.focus-visible\:outline-hidden:focus-visible{outline-offset:2px;outline:2px solid #0000}}.focus-visible\:outline-2:focus-visible{outline-style:var(--tw-outline-style);outline-width:2px}.focus-visible\:outline-offset-2:focus-visible{outline-offset:2px}.focus-visible\:outline-danger:focus-visible{outline-color:var(--color-danger)}.focus-visible\:outline-info:focus-visible{outline-color:var(--color-info)}.focus-visible\:outline-outline:focus-visible{outline-color:var(--color-outline)}.focus-visible\:outline-primary:focus-visible{outline-color:var(--color-primary)}.focus-visible\:outline-secondary:focus-visible{outline-color:var(--color-secondary)}.focus-visible\:outline-success:focus-visible{outline-color:var(--color-success)}.focus-visible\:outline-warning:focus-visible{outline-color:var(--color-warning)}.active\:opacity-100:active{opacity:1}.active\:outline-offset-0:active{outline-offset:0px}.disabled\:cursor-not-allowed:disabled{cursor:not-allowed}.disabled\:opacity-75:disabled{opacity:.75}.has-checked\:text-on-surface-strong:has(:checked){color:var(--color-on-surface-strong)}.has-disabled\:cursor-not-allowed:has(:disabled){cursor:not-allowed}.has-disabled\:opacity-75:has(:disabled){opacity:.75}.has-\[\:checked\]\:border-primary:has(:checked){border-color:var(--color-primary)}.aria-\[current\=page\]\:bg-primary\/10[aria-current=page]{background-color:#4f39f61a}@supports (color:color-mix(in lab, red, red)){.aria-\[current\=page\]\:bg-primary\/10[aria-current=page]{background-color:color-mix(in oklab, var(--color-primary) 10%, transparent)}}.aria-\[current\=page\]\:font-semibold[aria-current=page]{--tw-font-weight:var(--font-weight-semibold);font-weight:var(--font-weight-semibold)}.aria-\[current\=page\]\:text-on-surface-strong[aria-current=page]{color:var(--color-on-surface-strong)}.aria-\[current\=page\]\:text-primary[aria-current=page]{color:var(--color-primary)}@media (min-width:40rem){.sm\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.sm\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}}@media (min-width:48rem){.md\:top-\[unset\]{top:unset}.md\:right-0{right:0}.md\:bottom-0{bottom:0}.md\:left-\[unset\]{left:unset}.md\:ml-60{margin-left:calc(var(--spacing) * 60)}.md\:flex{display:flex}.md\:hidden{display:none}.md\:h-64{height:calc(var(--spacing) * 64)}.md\:max-w-sm{max-width:var(--container-sm)}.md\:translate-x-0{--tw-translate-x:0;translate:var(--tw-translate-x) var(--tw-translate-y)}.md\:translate-x-24{--tw-translate-x:calc(var(--spacing) * 24);translate:var(--tw-translate-x) var(--tw-translate-y)}}@media (min-width:64rem){.lg\:static{position:static}.lg\:z-auto{z-index:auto}.lg\:col-span-2{grid-column:span 2/span 2}.lg\:hidden{display:none}.lg\:w-64{width:calc(var(--spacing) * 64)}.lg\:shrink-0{flex-shrink:0}.lg\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.lg\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}.lg\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}.lg\:self-start{align-self:flex-start}.lg\:overflow-visible{overflow:visible}.lg\:rounded-radius{border-radius:var(--radius-radius)}.lg\:border{border-style:var(--tw-border-style);border-width:1px}.lg\:p-3{padding:calc(var(--spacing) * 3)}}@media (min-width:80rem){.xl\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}}:where(.dark\:divide-outline-dark:where([data-theme=dark],[data-theme=dark] *)>:not(:last-child)){border-color:var(--color-outline-dark)}.dark\:border-danger:where([data-theme=dark],[data-theme=dark] *){border-color:var(--color-danger)}.dark\:border-info:where([data-theme=dark],[data-theme=dark] *){border-color:var(--color-info)}.dark\:border-outline-dark:where([data-theme=dark],[data-theme=dark] *){border-color:var(--color-outline-dark)}.dark\:border-primary-dark:where([data-theme=dark],[data-theme=dark] *){border-color:var(--color-primary-dark)}.dark\:border-primary-dark\/40:where([data-theme=dark],[data-theme=dark] *){border-color:#7d87ff66}@supports (color:color-mix(in lab, red, red)){.dark\:border-primary-dark\/40:where([data-theme=dark],[data-theme=dark] *){border-color:color-mix(in oklab, var(--color-primary-dark) 40%, transparent)}}.dark\:border-secondary-dark:where([data-theme=dark],[data-theme=dark] *){border-color:var(--color-secondary-dark)}.dark\:border-success:where([data-theme=dark],[data-theme=dark] *){border-color:var(--color-success)}.dark\:border-warning:where([data-theme=dark],[data-theme=dark] *){border-color:var(--color-warning)}.dark\:bg-danger:where([data-theme=dark],[data-theme=dark] *){background-color:var(--color-danger)}.dark\:bg-info:where([data-theme=dark],[data-theme=dark] *){background-color:var(--color-info)}.dark\:bg-outline-dark:where([data-theme=dark],[data-theme=dark] *){background-color:var(--color-outline-dark)}.dark\:bg-primary-dark:where([data-theme=dark],[data-theme=dark] *){background-color:var(--color-primary-dark)}.dark\:bg-primary-dark\/10:where([data-theme=dark],[data-theme=dark] *){background-color:#7d87ff1a}@supports (color:color-mix(in lab, red, red)){.dark\:bg-primary-dark\/10:where([data-theme=dark],[data-theme=dark] *){background-color:color-mix(in oklab, var(--color-primary-dark) 10%, transparent)}}.dark\:bg-secondary-dark:where([data-theme=dark],[data-theme=dark] *){background-color:var(--color-secondary-dark)}.dark\:bg-success:where([data-theme=dark],[data-theme=dark] *){background-color:var(--color-success)}.dark\:bg-surface-dark:where([data-theme=dark],[data-theme=dark] *){background-color:var(--color-surface-dark)}.dark\:bg-surface-dark-alt:where([data-theme=dark],[data-theme=dark] *){background-color:var(--color-surface-dark-alt)}.dark\:bg-surface-dark-alt\/40:where([data-theme=dark],[data-theme=dark] *){background-color:#1d293d66}@supports (color:color-mix(in lab, red, red)){.dark\:bg-surface-dark-alt\/40:where([data-theme=dark],[data-theme=dark] *){background-color:color-mix(in oklab, var(--color-surface-dark-alt) 40%, transparent)}}.dark\:bg-surface-dark-alt\/50:where([data-theme=dark],[data-theme=dark] *){background-color:#1d293d80}@supports (color:color-mix(in lab, red, red)){.dark\:bg-surface-dark-alt\/50:where([data-theme=dark],[data-theme=dark] *){background-color:color-mix(in oklab, var(--color-surface-dark-alt) 50%, transparent)}}.dark\:bg-surface-dark\/40:where([data-theme=dark],[data-theme=dark] *){background-color:#0f172b66}@supports (color:color-mix(in lab, red, red)){.dark\:bg-surface-dark\/40:where([data-theme=dark],[data-theme=dark] *){background-color:color-mix(in oklab, var(--color-surface-dark) 40%, transparent)}}.dark\:bg-surface-dark\/95:where([data-theme=dark],[data-theme=dark] *){background-color:#0f172bf2}@supports (color:color-mix(in lab, red, red)){.dark\:bg-surface-dark\/95:where([data-theme=dark],[data-theme=dark] *){background-color:color-mix(in oklab, var(--color-surface-dark) 95%, transparent)}}.dark\:bg-warning:where([data-theme=dark],[data-theme=dark] *){background-color:var(--color-warning)}.dark\:text-danger:where([data-theme=dark],[data-theme=dark] *){color:var(--color-danger)}.dark\:text-on-danger:where([data-theme=dark],[data-theme=dark] *){color:var(--color-on-danger)}.dark\:text-on-info:where([data-theme=dark],[data-theme=dark] *){color:var(--color-on-info)}.dark\:text-on-primary-dark:where([data-theme=dark],[data-theme=dark] *){color:var(--color-on-primary-dark)}.dark\:text-on-primary-dark\/90:where([data-theme=dark],[data-theme=dark] *){color:#020618e6}@supports (color:color-mix(in lab, red, red)){.dark\:text-on-primary-dark\/90:where([data-theme=dark],[data-theme=dark] *){color:color-mix(in oklab, var(--color-on-primary-dark) 90%, transparent)}}.dark\:text-on-secondary-dark:where([data-theme=dark],[data-theme=dark] *){color:var(--color-on-secondary-dark)}.dark\:text-on-success:where([data-theme=dark],[data-theme=dark] *){color:var(--color-on-success)}.dark\:text-on-surface-dark:where([data-theme=dark],[data-theme=dark] *){color:var(--color-on-surface-dark)}.dark\:text-on-surface-dark-strong:where([data-theme=dark],[data-theme=dark] *){color:var(--color-on-surface-dark-strong)}.dark\:text-on-surface-dark\/40:where([data-theme=dark],[data-theme=dark] *){color:#cad5e266}@supports (color:color-mix(in lab, red, red)){.dark\:text-on-surface-dark\/40:where([data-theme=dark],[data-theme=dark] *){color:color-mix(in oklab, var(--color-on-surface-dark) 40%, transparent)}}.dark\:text-on-surface-dark\/50:where([data-theme=dark],[data-theme=dark] *){color:#cad5e280}@supports (color:color-mix(in lab, red, red)){.dark\:text-on-surface-dark\/50:where([data-theme=dark],[data-theme=dark] *){color:color-mix(in oklab, var(--color-on-surface-dark) 50%, transparent)}}.dark\:text-on-surface-dark\/60:where([data-theme=dark],[data-theme=dark] *){color:#cad5e299}@supports (color:color-mix(in lab, red, red)){.dark\:text-on-surface-dark\/60:where([data-theme=dark],[data-theme=dark] *){color:color-mix(in oklab, var(--color-on-surface-dark) 60%, transparent)}}.dark\:text-on-surface-dark\/70:where([data-theme=dark],[data-theme=dark] *){color:#cad5e2b3}@supports (color:color-mix(in lab, red, red)){.dark\:text-on-surface-dark\/70:where([data-theme=dark],[data-theme=dark] *){color:color-mix(in oklab, var(--color-on-surface-dark) 70%, transparent)}}.dark\:text-on-surface-dark\/80:where([data-theme=dark],[data-theme=dark] *){color:#cad5e2cc}@supports (color:color-mix(in lab, red, red)){.dark\:text-on-surface-dark\/80:where([data-theme=dark],[data-theme=dark] *){color:color-mix(in oklab, var(--color-on-surface-dark) 80%, transparent)}}.dark\:text-on-warning:where([data-theme=dark],[data-theme=dark] *){color:var(--color-on-warning)}.dark\:text-outline-dark:where([data-theme=dark],[data-theme=dark] *){color:var(--color-outline-dark)}.dark\:text-primary-dark:where([data-theme=dark],[data-theme=dark] *){color:var(--color-primary-dark)}.dark\:text-secondary-dark:where([data-theme=dark],[data-theme=dark] *){color:var(--color-secondary-dark)}.dark\:text-warning:where([data-theme=dark],[data-theme=dark] *){color:var(--color-warning)}.dark\:peer-checked\:bg-primary-dark:where([data-theme=dark],[data-theme=dark] *):is(:where(.peer):checked~*){background-color:var(--color-primary-dark)}.dark\:peer-focus\:outline-outline-dark-strong:where([data-theme=dark],[data-theme=dark] *):is(:where(.peer):focus~*){outline-color:var(--color-outline-dark-strong)}.dark\:peer-focus\:peer-checked\:outline-primary-dark:where([data-theme=dark],[data-theme=dark] *):is(:where(.peer):focus~*):is(:where(.peer):checked~*){outline-color:var(--color-primary-dark)}.dark\:file\:bg-surface-dark-alt:where([data-theme=dark],[data-theme=dark] *)::file-selector-button{background-color:var(--color-surface-dark-alt)}.dark\:file\:text-on-surface-dark-strong:where([data-theme=dark],[data-theme=dark] *)::file-selector-button{color:var(--color-on-surface-dark-strong)}.dark\:before\:bg-on-primary-dark:where([data-theme=dark],[data-theme=dark] *):before{content:var(--tw-content);background-color:var(--color-on-primary-dark)}.dark\:after\:bg-on-surface-dark:where([data-theme=dark],[data-theme=dark] *):after{content:var(--tw-content);background-color:var(--color-on-surface-dark)}.dark\:peer-checked\:after\:bg-on-primary-dark:where([data-theme=dark],[data-theme=dark] *):is(:where(.peer):checked~*):after{content:var(--tw-content);background-color:var(--color-on-primary-dark)}.dark\:checked\:border-primary-dark:where([data-theme=dark],[data-theme=dark] *):checked{border-color:var(--color-primary-dark)}.dark\:checked\:bg-primary-dark:where([data-theme=dark],[data-theme=dark] *):checked{background-color:var(--color-primary-dark)}.dark\:checked\:before\:bg-primary-dark:where([data-theme=dark],[data-theme=dark] *):checked:before{content:var(--tw-content);background-color:var(--color-primary-dark)}@media (hover:hover){.dark\:hover\:border-primary-dark:where([data-theme=dark],[data-theme=dark] *):hover{border-color:var(--color-primary-dark)}.dark\:hover\:bg-primary-dark\/5:where([data-theme=dark],[data-theme=dark] *):hover{background-color:#7d87ff0d}@supports (color:color-mix(in lab, red, red)){.dark\:hover\:bg-primary-dark\/5:where([data-theme=dark],[data-theme=dark] *):hover{background-color:color-mix(in oklab, var(--color-primary-dark) 5%, transparent)}}.dark\:hover\:bg-surface-alt\/5:where([data-theme=dark],[data-theme=dark] *):hover{background-color:#f1f5f90d}@supports (color:color-mix(in lab, red, red)){.dark\:hover\:bg-surface-alt\/5:where([data-theme=dark],[data-theme=dark] *):hover{background-color:color-mix(in oklab, var(--color-surface-alt) 5%, transparent)}}.dark\:hover\:bg-surface-dark:where([data-theme=dark],[data-theme=dark] *):hover{background-color:var(--color-surface-dark)}.dark\:hover\:bg-surface-dark-alt:where([data-theme=dark],[data-theme=dark] *):hover{background-color:var(--color-surface-dark-alt)}.dark\:hover\:bg-surface-dark\/60:where([data-theme=dark],[data-theme=dark] *):hover{background-color:#0f172b99}@supports (color:color-mix(in lab, red, red)){.dark\:hover\:bg-surface-dark\/60:where([data-theme=dark],[data-theme=dark] *):hover{background-color:color-mix(in oklab, var(--color-surface-dark) 60%, transparent)}}.dark\:hover\:text-on-surface-dark-strong:where([data-theme=dark],[data-theme=dark] *):hover{color:var(--color-on-surface-dark-strong)}.dark\:hover\:text-primary-dark:where([data-theme=dark],[data-theme=dark] *):hover{color:var(--color-primary-dark)}}.dark\:focus\:outline-outline-dark-strong:where([data-theme=dark],[data-theme=dark] *):focus{outline-color:var(--color-outline-dark-strong)}.dark\:checked\:focus\:outline-primary-dark:where([data-theme=dark],[data-theme=dark] *):checked:focus{outline-color:var(--color-primary-dark)}.dark\:focus-visible\:bg-surface-alt\/10:where([data-theme=dark],[data-theme=dark] *):focus-visible{background-color:#f1f5f91a}@supports (color:color-mix(in lab, red, red)){.dark\:focus-visible\:bg-surface-alt\/10:where([data-theme=dark],[data-theme=dark] *):focus-visible{background-color:color-mix(in oklab, var(--color-surface-alt) 10%, transparent)}}.dark\:focus-visible\:text-on-surface-dark-strong:where([data-theme=dark],[data-theme=dark] *):focus-visible{color:var(--color-on-surface-dark-strong)}.dark\:focus-visible\:outline-danger:where([data-theme=dark],[data-theme=dark] *):focus-visible{outline-color:var(--color-danger)}.dark\:focus-visible\:outline-info:where([data-theme=dark],[data-theme=dark] *):focus-visible{outline-color:var(--color-info)}.dark\:focus-visible\:outline-outline-dark:where([data-theme=dark],[data-theme=dark] *):focus-visible{outline-color:var(--color-outline-dark)}.dark\:focus-visible\:outline-primary-dark:where([data-theme=dark],[data-theme=dark] *):focus-visible{outline-color:var(--color-primary-dark)}.dark\:focus-visible\:outline-secondary-dark:where([data-theme=dark],[data-theme=dark] *):focus-visible{outline-color:var(--color-secondary-dark)}.dark\:focus-visible\:outline-success:where([data-theme=dark],[data-theme=dark] *):focus-visible{outline-color:var(--color-success)}.dark\:focus-visible\:outline-warning:where([data-theme=dark],[data-theme=dark] *):focus-visible{outline-color:var(--color-warning)}.dark\:has-checked\:text-on-surface-dark-strong:where([data-theme=dark],[data-theme=dark] *):has(:checked){color:var(--color-on-surface-dark-strong)}.dark\:has-\[\:checked\]\:border-primary-dark:where([data-theme=dark],[data-theme=dark] *):has(:checked){border-color:var(--color-primary-dark)}.dark\:aria-\[current\=page\]\:bg-primary-dark\/10:where([data-theme=dark],[data-theme=dark] *)[aria-current=page]{background-color:#7d87ff1a}@supports (color:color-mix(in lab, red, red)){.dark\:aria-\[current\=page\]\:bg-primary-dark\/10:where([data-theme=dark],[data-theme=dark] *)[aria-current=page]{background-color:color-mix(in oklab, var(--color-primary-dark) 10%, transparent)}}.dark\:aria-\[current\=page\]\:text-on-surface-dark-strong:where([data-theme=dark],[data-theme=dark] *)[aria-current=page]{color:var(--color-on-surface-dark-strong)}.dark\:aria-\[current\=page\]\:text-primary-dark:where([data-theme=dark],[data-theme=dark] *)[aria-current=page]{color:var(--color-primary-dark)}}[x-cloak]{display:none!important}@property --tw-translate-x{syntax:"*";inherits:false;initial-value:0}@property --tw-translate-y{syntax:"*";inherits:false;initial-value:0}@property --tw-translate-z{syntax:"*";inherits:false;initial-value:0}@property --tw-rotate-x{syntax:"*";inherits:false}@property --tw-rotate-y{syntax:"*";inherits:false}@property --tw-rotate-z{syntax:"*";inherits:false}@property --tw-skew-x{syntax:"*";inherits:false}@property --tw-skew-y{syntax:"*";inherits:false}@property --tw-space-y-reverse{syntax:"*";inherits:false;initial-value:0}@property --tw-divide-y-reverse{syntax:"*";inherits:false;initial-value:0}@property --tw-border-style{syntax:"*";inherits:false;initial-value:solid}@property --tw-leading{syntax:"*";inherits:false}@property --tw-font-weight{syntax:"*";inherits:false}@property --tw-tracking{syntax:"*";inherits:false}@property --tw-ordinal{syntax:"*";inherits:false}@property --tw-slashed-zero{syntax:"*";inherits:false}@property --tw-numeric-figure{syntax:"*";inherits:false}@property --tw-numeric-spacing{syntax:"*";inherits:false}@property --tw-numeric-fraction{syntax:"*";inherits:false}@property --tw-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-shadow-color{syntax:"*";inherits:false}@property --tw-shadow-alpha{syntax:"";inherits:false;initial-value:100%}@property --tw-inset-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-inset-shadow-color{syntax:"*";inherits:false}@property --tw-inset-shadow-alpha{syntax:"";inherits:false;initial-value:100%}@property --tw-ring-color{syntax:"*";inherits:false}@property --tw-ring-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-inset-ring-color{syntax:"*";inherits:false}@property --tw-inset-ring-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-ring-inset{syntax:"*";inherits:false}@property --tw-ring-offset-width{syntax:"";inherits:false;initial-value:0}@property --tw-ring-offset-color{syntax:"*";inherits:false;initial-value:#fff}@property --tw-ring-offset-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-outline-style{syntax:"*";inherits:false;initial-value:solid}@property --tw-backdrop-blur{syntax:"*";inherits:false}@property --tw-backdrop-brightness{syntax:"*";inherits:false}@property --tw-backdrop-contrast{syntax:"*";inherits:false}@property --tw-backdrop-grayscale{syntax:"*";inherits:false}@property --tw-backdrop-hue-rotate{syntax:"*";inherits:false}@property --tw-backdrop-invert{syntax:"*";inherits:false}@property --tw-backdrop-opacity{syntax:"*";inherits:false}@property --tw-backdrop-saturate{syntax:"*";inherits:false}@property --tw-backdrop-sepia{syntax:"*";inherits:false}@property --tw-duration{syntax:"*";inherits:false}@property --tw-ease{syntax:"*";inherits:false}@property --tw-scale-x{syntax:"*";inherits:false;initial-value:1}@property --tw-scale-y{syntax:"*";inherits:false;initial-value:1}@property --tw-scale-z{syntax:"*";inherits:false;initial-value:1}@property --tw-content{syntax:"*";inherits:false;initial-value:""} \ No newline at end of file diff --git a/assets/views/account/security.html b/assets/views/account/security.html new file mode 100644 index 0000000..f9bf027 --- /dev/null +++ b/assets/views/account/security.html @@ -0,0 +1,80 @@ +{% extends "base.html" %} +{% import "macros/ui.html" as ui %} + +{% block title %}{{ t(key="security-title", lang=lang | default(value='sk')) }}{% endblock title %} + +{% block content %} +
+

{{ t(key="security-title", lang=lang | default(value='sk')) }}

+

{{ t(key="security-2fa-intro", lang=lang | default(value='sk')) }}

+ + {% if error == "password" %} + {{ ui::alert_danger(message=t(key="password-current-wrong", lang=lang | default(value='sk')), extra="mt-4") }} + {% elif error == "code" %} + {{ ui::alert_danger(message=t(key="security-2fa-code-wrong", lang=lang | default(value='sk')), extra="mt-4") }} + {% elif error == "enroll" %} + {{ ui::alert_danger(message=t(key="security-2fa-enroll-error", lang=lang | default(value='sk')), extra="mt-4") }} + {% endif %} + + {# --- One-time backup codes, shown right after enabling / regenerating --- #} + {% if backup_codes and backup_codes | length > 0 %} +
+

{{ t(key="security-2fa-enabled-ok", lang=lang | default(value='sk')) }}

+

{{ t(key="security-2fa-backup-intro", lang=lang | default(value='sk')) }}

+
    + {% for code in backup_codes %} +
  • {{ code }}
  • + {% endfor %} +
+
+ {% endif %} + + {% if enrolling %} + {# --- Step 2: scan the QR and confirm a code --- #} +
+

{{ t(key="security-2fa-scan", lang=lang | default(value='sk')) }}

+ TOTP QR +
+

{{ t(key="security-2fa-manual", lang=lang | default(value='sk')) }}

+ {{ secret }} +
+
+ + {{ ui::input(name="code", id="code", type="text", required=true, autocomplete="one-time-code", attrs='inputmode="numeric" pattern="[0-9]*" maxlength="6" autofocus') }} + {{ ui::button(label=t(key="security-2fa-confirm", lang=lang | default(value='sk')), type="submit", extra="w-full") }} +
+
+ + {% elif totp_enabled %} + {# --- Enabled: status + remaining backup codes + disable / regenerate --- #} +
+ {{ ui::badge(label=t(key="security-2fa-on", lang=lang | default(value='sk')), variant="success") }} + {{ t(key="security-2fa-backup-remaining", lang=lang | default(value='sk')) }}: {{ backup_remaining }} +
+ +
+

{{ t(key="security-2fa-regenerate", lang=lang | default(value='sk')) }}

+ + {{ ui::input(name="current_password", id="regen_pw", type="password", required=true, autocomplete="current-password") }} + {{ ui::button(label=t(key="security-2fa-regenerate", lang=lang | default(value='sk')), type="submit", variant="outline-secondary", extra="w-full") }} +
+ +
+

{{ t(key="security-2fa-disable", lang=lang | default(value='sk')) }}

+

{{ t(key="security-2fa-disable-hint", lang=lang | default(value='sk')) }}

+ + {{ ui::input(name="current_password", id="disable_pw", type="password", required=true, autocomplete="current-password") }} + {{ ui::button(label=t(key="security-2fa-disable", lang=lang | default(value='sk')), type="submit", variant="danger", extra="w-full") }} +
+ + {% else %} + {# --- Disabled: offer to enable --- #} +
+
+ {{ ui::badge(label=t(key="security-2fa-off", lang=lang | default(value='sk')), variant="neutral") }} +
+ {{ ui::button(label=t(key="security-2fa-enable", lang=lang | default(value='sk')), type="submit", extra="mt-4 w-full") }} +
+ {% endif %} +
+{% endblock content %} diff --git a/assets/views/auth/login_totp.html b/assets/views/auth/login_totp.html new file mode 100644 index 0000000..ea895b1 --- /dev/null +++ b/assets/views/auth/login_totp.html @@ -0,0 +1,47 @@ +{% extends "base.html" %} +{% import "macros/ui.html" as ui %} + +{% block title %}{{ t(key="login-totp-title", lang=lang | default(value='sk')) }}{% endblock title %} + +{% block content %} +
+
+
+ + {{ t(key="brand", lang=lang | default(value='sk')) }} + + {{ ui::badge(label=t(key="auth", lang=lang | default(value='sk')), variant="primary") }} +
+ +
+

+ {{ t(key="login-totp-title", lang=lang | default(value='sk')) }} +

+

+ {{ t(key="login-totp-intro", lang=lang | default(value='sk')) }} +

+ + {% if error %} + {{ ui::alert_danger(message=t(key="login-totp-error", lang=lang | default(value='sk')), extra="mt-3") }} + {% endif %} + +
+
+ + {{ ui::input(name="code", id="code", type="text", required=true, autocomplete="one-time-code", attrs='inputmode="numeric" autofocus') }} +
+ {{ ui::button(label=t(key="login-totp-submit", lang=lang | default(value='sk')), type="submit", extra="mt-1 w-full") }} +
+ +

+ {{ t(key="login-totp-backup-hint", lang=lang | default(value='sk')) }} +

+
+
+
+{% endblock content %} diff --git a/assets/views/base.html b/assets/views/base.html index 5685ec6..4754dff 100644 --- a/assets/views/base.html +++ b/assets/views/base.html @@ -196,6 +196,7 @@
  • {{ t(key="account-orders", lang=lang | default(value='sk')) }}
  • {{ t(key="profile-title", lang=lang | default(value='sk')) }}
  • {{ t(key="account-change-password", lang=lang | default(value='sk')) }}
  • +
  • {{ t(key="security-title", lang=lang | default(value='sk')) }}
  • diff --git a/assets/views/partials/profile_menu.html b/assets/views/partials/profile_menu.html index 21b6737..ac6a8f6 100644 --- a/assets/views/partials/profile_menu.html +++ b/assets/views/partials/profile_menu.html @@ -61,6 +61,10 @@ {{ t(key="account-change-password", lang=lang | default(value='sk')) }} + + + {{ t(key="security-title", lang=lang | default(value='sk')) }} +
    diff --git a/migration/src/lib.rs b/migration/src/lib.rs index 6ab431c..34deeed 100644 --- a/migration/src/lib.rs +++ b/migration/src/lib.rs @@ -34,6 +34,7 @@ mod m20260618_000001_o_auth2_sessions; mod m20260618_000002_customer_profiles; mod m20260618_000003_account_type; mod m20260618_000004_account_ownership; +mod m20260620_000001_add_totp_to_users; pub struct Migrator; #[async_trait::async_trait] @@ -72,6 +73,7 @@ impl MigratorTrait for Migrator { Box::new(m20260618_000002_customer_profiles::Migration), Box::new(m20260618_000003_account_type::Migration), Box::new(m20260618_000004_account_ownership::Migration), + Box::new(m20260620_000001_add_totp_to_users::Migration), // inject-above (do not remove this comment) ] } diff --git a/migration/src/m20260620_000001_add_totp_to_users.rs b/migration/src/m20260620_000001_add_totp_to_users.rs new file mode 100644 index 0000000..bb53b78 --- /dev/null +++ b/migration/src/m20260620_000001_add_totp_to_users.rs @@ -0,0 +1,32 @@ +use loco_rs::schema::*; +use sea_orm_migration::prelude::*; + +#[derive(DeriveMigrationName)] +pub struct Migration; + +// Optional TOTP (Google Authenticator) two-factor auth. All three columns are +// nullable and only populated once a user opts in: +// - `totp_secret` base32 shared secret; present while enrolling/enabled. +// TODO(security): stored PLAINTEXT and is password- +// equivalent (must stay reversible to recompute codes). +// Encrypt at rest later with an out-of-DB key. See the +// TODO(security) block in src/models/users.rs. +// - `totp_enabled_at` NULL = 2FA off. Set only after the user confirms a +// code, so a half-finished enrollment never gates login. +// - `totp_backup_codes` JSON array of hashed one-time recovery codes. +#[async_trait::async_trait] +impl MigrationTrait for Migration { + async fn up(&self, m: &SchemaManager) -> Result<(), DbErr> { + add_column(m, "users", "totp_secret", ColType::TextNull).await?; + add_column(m, "users", "totp_enabled_at", ColType::TimestampWithTimeZoneNull).await?; + add_column(m, "users", "totp_backup_codes", ColType::TextNull).await?; + Ok(()) + } + + async fn down(&self, m: &SchemaManager) -> Result<(), DbErr> { + remove_column(m, "users", "totp_backup_codes").await?; + remove_column(m, "users", "totp_enabled_at").await?; + remove_column(m, "users", "totp_secret").await?; + Ok(()) + } +} diff --git a/src/controllers/account.rs b/src/controllers/account.rs index c13a892..c1bdeb8 100644 --- a/src/controllers/account.rs +++ b/src/controllers/account.rs @@ -363,6 +363,177 @@ async fn change_password( password_view(&v, &jar, &user, true, None) } +// ---- Two-factor authentication (TOTP / Google Authenticator) ------------- +// +// Entirely opt-in. The security page has three shapes, all rendered from +// `security.html`: +// * disabled -> an "enable" button, +// * enrolling -> the QR + a confirm-code field (secret staged, not yet on), +// * enabled -> status, remaining backup codes, disable/regenerate forms. +// Both turning 2FA off and regenerating backup codes require re-entering the +// account password, so a walk-up attacker on an open session can't weaken it. + +#[derive(Debug, Deserialize)] +struct ConfirmTotpForm { + code: String, +} + +#[derive(Debug, Deserialize)] +struct PasswordConfirmForm { + current_password: String, +} + +/// Render the security page. Exactly one of (`enrolling`, plain status) applies; +/// `backup_codes` is non-empty only on the one render right after enabling or +/// regenerating, where the plaintext codes are shown once. +#[allow(clippy::too_many_arguments)] +fn security_view( + v: &TeraView, + jar: &CookieJar, + user: &users::Model, + enrolling: bool, + qr: Option<&str>, + secret: Option<&str>, + backup_codes: &[String], + error: Option<&str>, +) -> Result { + format::view( + v, + "account/security.html", + json!({ + "logged_in_admin": false, + "logged_in_customer": true, + "account_nav": true, + "customer_name": user.name, + "customer_account_type": user.account_type, + "totp_enabled": user.totp_enabled(), + "enrolling": enrolling, + "qr": qr, + "secret": secret, + "backup_codes": backup_codes, + "backup_remaining": user.backup_codes_remaining(), + "error": error, + "lang": current_lang(jar), + }), + ) +} + +/// Common guard for every security handler: a signed-in, non-admin customer. +async fn require_customer(ctx: &AppContext, jar: &CookieJar) -> Result { + match guard::current_user(ctx, jar).await { + Some(user) if guard::is_admin(ctx, &user) => Err(Error::string("admin")), + Some(user) => Ok(user), + None => Err(Error::Unauthorized("login required".into())), + } +} + +#[debug_handler] +async fn security_page( + jar: CookieJar, + ViewEngine(v): ViewEngine, + State(ctx): State, +) -> Result { + let Some(user) = guard::current_user(&ctx, &jar).await else { + return format::redirect("/login"); + }; + if guard::is_admin(&ctx, &user) { + return format::redirect("/admin/dashboard"); + } + security_view(&v, &jar, &user, false, None, None, &[], None) +} + +/// Stage a fresh secret and show the QR + confirm-code field. +#[debug_handler] +async fn enable_totp( + jar: CookieJar, + ViewEngine(v): ViewEngine, + State(ctx): State, +) -> Result { + let Ok(user) = require_customer(&ctx, &jar).await else { + return format::redirect("/login"); + }; + // Already on — nothing to enroll. + if user.totp_enabled() { + return security_view(&v, &jar, &user, false, None, None, &[], None); + } + let user = user.into_active_model().begin_totp_enrollment(&ctx.db).await?; + let Some((qr, secret)) = user.totp_provisioning() else { + return security_view(&v, &jar, &user, false, None, None, &[], Some("enroll")); + }; + security_view(&v, &jar, &user, true, Some(&qr), Some(&secret), &[], None) +} + +/// Verify the first code against the staged secret; on success flip 2FA on and +/// show the one-time backup codes. On a wrong code, re-show the QR to retry. +#[debug_handler] +async fn confirm_totp( + jar: CookieJar, + ViewEngine(v): ViewEngine, + State(ctx): State, + Form(form): Form, +) -> Result { + let Ok(user) = require_customer(&ctx, &jar).await else { + return format::redirect("/login"); + }; + if user.totp_enabled() { + return security_view(&v, &jar, &user, false, None, None, &[], None); + } + if !user.verify_totp_code(&form.code) { + let qr = user.totp_provisioning(); + let (qr, secret) = match &qr { + Some((q, s)) => (Some(q.as_str()), Some(s.as_str())), + None => (None, None), + }; + return security_view(&v, &jar, &user, true, qr, secret, &[], Some("code")); + } + let (user, backup_codes) = user.into_active_model().enable_totp(&ctx.db).await?; + security_view(&v, &jar, &user, false, None, None, &backup_codes, None) +} + +/// Turn 2FA off — requires the account password as confirmation. +#[debug_handler] +async fn disable_totp( + jar: CookieJar, + ViewEngine(v): ViewEngine, + State(ctx): State, + Form(form): Form, +) -> Result { + let Ok(user) = require_customer(&ctx, &jar).await else { + return format::redirect("/login"); + }; + if !user.totp_enabled() { + return security_view(&v, &jar, &user, false, None, None, &[], None); + } + if !user.verify_password(&form.current_password) { + return security_view(&v, &jar, &user, false, None, None, &[], Some("password")); + } + let user = user.into_active_model().disable_totp(&ctx.db).await?; + security_view(&v, &jar, &user, false, None, None, &[], None) +} + +/// Issue a fresh set of backup codes (invalidating the old ones) — also gated by +/// the account password. +#[debug_handler] +async fn regenerate_backup_codes( + jar: CookieJar, + ViewEngine(v): ViewEngine, + State(ctx): State, + Form(form): Form, +) -> Result { + let Ok(user) = require_customer(&ctx, &jar).await else { + return format::redirect("/login"); + }; + if !user.totp_enabled() { + return security_view(&v, &jar, &user, false, None, None, &[], None); + } + if !user.verify_password(&form.current_password) { + return security_view(&v, &jar, &user, false, None, None, &[], Some("password")); + } + let (user, backup_codes) = + user.into_active_model().regenerate_backup_codes(&ctx.db).await?; + security_view(&v, &jar, &user, false, None, None, &backup_codes, None) +} + pub fn routes() -> Routes { Routes::new() .add("/account/profile", get(profile_page)) @@ -371,4 +542,9 @@ pub fn routes() -> Routes { .add("/account/orders/{order_number}", get(order_detail_page)) .add("/account/password", get(change_password_page)) .add("/account/password", post(change_password)) + .add("/account/security", get(security_page)) + .add("/account/security/enable", post(enable_totp)) + .add("/account/security/confirm", post(confirm_totp)) + .add("/account/security/disable", post(disable_totp)) + .add("/account/security/backup-codes", post(regenerate_backup_codes)) } diff --git a/src/controllers/auth.rs b/src/controllers/auth.rs index 3758d4d..17fb300 100644 --- a/src/controllers/auth.rs +++ b/src/controllers/auth.rs @@ -13,6 +13,13 @@ use time::Duration as TimeDuration; pub static EMAIL_DOMAIN_RE: OnceLock = OnceLock::new(); pub(crate) const AUTH_COOKIE: &str = "auth_token"; +/// Short-lived cookie that carries a half-authenticated session between the +/// password step and the TOTP step. It is a *separate* name from `auth_token` +/// on purpose: the auth guards only read `auth_token`, so this cookie can never +/// authenticate a request on its own — it only proves the password step passed. +pub(crate) const TOTP_PENDING_COOKIE: &str = "totp_pending"; +/// How long the user has to enter their 2FA code after the password step. +pub(crate) const TOTP_PENDING_TTL_SECS: u64 = 300; fn get_allow_email_domain_re() -> &'static Regex { EMAIL_DOMAIN_RE.get_or_init(|| { @@ -38,6 +45,24 @@ pub(crate) fn clear_auth_cookie() -> Cookie<'static> { .build() } +pub(crate) fn totp_pending_cookie(token: &str, max_age_seconds: u64) -> Cookie<'static> { + Cookie::build((TOTP_PENDING_COOKIE, token.to_string())) + .path("/") + .http_only(true) + .same_site(SameSite::Lax) + .max_age(TimeDuration::seconds(max_age_seconds as i64)) + .build() +} + +pub(crate) fn clear_totp_pending_cookie() -> Cookie<'static> { + Cookie::build((TOTP_PENDING_COOKIE, "")) + .path("/") + .http_only(true) + .same_site(SameSite::Lax) + .max_age(TimeDuration::seconds(0)) + .build() +} + #[derive(Debug, Deserialize, Serialize)] pub struct ForgotParams { pub email: String, diff --git a/src/controllers/auth_pages.rs b/src/controllers/auth_pages.rs index 3e7457a..8f629b8 100644 --- a/src/controllers/auth_pages.rs +++ b/src/controllers/auth_pages.rs @@ -85,6 +85,23 @@ async fn login( } let jwt_secret = ctx.config.get_jwt_config()?; + + // If the user opted into 2FA, the password is only the first factor: don't + // issue the real auth cookie yet. Hand out a short-lived, separate "pending" + // cookie and send them to the code-entry page. Everyone without 2FA logs in + // in a single step exactly as before. + if user.totp_enabled() { + let pending = user + .generate_jwt(&jwt_secret.secret, auth_controller::TOTP_PENDING_TTL_SECS) + .or_else(|_| unauthorized("unauthorized!"))?; + return format::render() + .cookies(&[auth_controller::totp_pending_cookie( + &pending, + auth_controller::TOTP_PENDING_TTL_SECS, + )])? + .redirect("/login/totp"); + } + let token = user .generate_jwt(&jwt_secret.secret, jwt_secret.expiration) .or_else(|_| unauthorized("unauthorized!"))?; @@ -94,6 +111,89 @@ async fn login( .redirect(home_for(&ctx, &user)) } +/// Resolve the user behind a valid, unexpired `totp_pending` cookie. Returns +/// `None` (never errors) when the cookie is missing, malformed, or expired — +/// the caller bounces such requests back to `/login`. +async fn user_from_pending(ctx: &AppContext, jar: &CookieJar) -> Option { + let cookie = jar.get(auth_controller::TOTP_PENDING_COOKIE)?; + let jwt_config = ctx.config.get_jwt_config().ok()?; + let claims = loco_rs::auth::jwt::JWT::new(&jwt_config.secret) + .validate(cookie.value()) + .ok()?; + let user = users::Model::find_by_pid(&ctx.db, &claims.claims.pid).await.ok()?; + // Defend against a stale pending cookie outliving a 2FA disable. + user.totp_enabled().then_some(user) +} + +fn login_totp_view(v: &TeraView, jar: &CookieJar, error: Option<&str>) -> Result { + format::view( + v, + "auth/login_totp.html", + json!({ + "error": error, + "logged_in_admin": false, + "lang": current_lang(jar), + }), + ) +} + +#[debug_handler] +async fn login_totp_page( + jar: CookieJar, + ViewEngine(v): ViewEngine, + State(ctx): State, +) -> Result { + if user_from_pending(&ctx, &jar).await.is_none() { + return format::redirect("/login"); + } + login_totp_view(&v, &jar, None) +} + +/// Second login factor. Accepts either a 6-digit authenticator code or one of +/// the one-time backup codes (auto-detected by length). On success the pending +/// cookie is cleared and the real `auth_token` is issued. +#[derive(Debug, serde::Deserialize)] +struct TotpLoginForm { + code: String, +} + +#[debug_handler] +async fn login_totp( + jar: CookieJar, + ViewEngine(v): ViewEngine, + State(ctx): State, + Form(form): Form, +) -> Result { + let Some(user) = user_from_pending(&ctx, &jar).await else { + return format::redirect("/login"); + }; + + let code = form.code.trim(); + let via_totp = user.verify_totp_code(code); + let via_backup = !via_totp && user.matches_backup_code(code); + + if !via_totp && !via_backup { + return login_totp_view(&v, &jar, Some("invalid")); + } + + // A used backup code must be burned so it can't be replayed. + if via_backup { + user.clone().into_active_model().consume_backup_code(&ctx.db, code).await?; + } + + let jwt_secret = ctx.config.get_jwt_config()?; + let token = user + .generate_jwt(&jwt_secret.secret, jwt_secret.expiration) + .or_else(|_| unauthorized("unauthorized!"))?; + + format::render() + .cookies(&[ + auth_controller::auth_cookie(&token, jwt_secret.expiration), + auth_controller::clear_totp_pending_cookie(), + ])? + .redirect(home_for(&ctx, &user)) +} + #[debug_handler] async fn register_page( jar: CookieJar, @@ -366,6 +466,8 @@ pub fn routes() -> Routes { Routes::new() .add("/login", get(login_page)) .add("/login", post(login)) + .add("/login/totp", get(login_totp_page)) + .add("/login/totp", post(login_totp)) .add("/register", get(register_page)) .add("/register", post(register)) .add("/verify/{token}", get(verify)) diff --git a/src/models/_entities/users.rs b/src/models/_entities/users.rs index c3dd1fc..50857c4 100644 --- a/src/models/_entities/users.rs +++ b/src/models/_entities/users.rs @@ -26,6 +26,9 @@ pub struct Model { pub magic_link_expiration: Option, pub theme: String, pub account_type: String, + pub totp_secret: Option, + pub totp_enabled_at: Option, + pub totp_backup_codes: Option, } #[derive(Copy, Clone, Debug, EnumIter, DeriveRelation)] diff --git a/src/models/users.rs b/src/models/users.rs index 6db5cbc..95a4297 100644 --- a/src/models/users.rs +++ b/src/models/users.rs @@ -5,6 +5,7 @@ use loco_rs::{auth::jwt, hash, prelude::*}; use passwords::PasswordGenerator; use serde::{Deserialize, Serialize}; use serde_json::Map; +use totp_rs::{Algorithm, Secret, TOTP}; use uuid::Uuid; use crate::models::_entities::o_auth2_sessions; @@ -16,6 +17,45 @@ pub const MAGIC_LINK_EXPIRATION_MIN: i8 = 5; /// Minimum gap between verification-email resends for one account, in seconds. pub const VERIFICATION_RESEND_COOLDOWN_SECS: i64 = 60; +// TODO(security): `users.totp_secret` is stored as a PLAINTEXT base32 string. +// Unlike `password` (a one-way hash) the TOTP secret must be kept in reversible +// form — the server needs the original value to recompute codes — so it is +// effectively password-equivalent: anyone who can read this column can mint +// valid 2FA codes for that user. It is deliberately left in plaintext for now +// and treated like the app's other server-side secrets (e.g. the SMTP password, +// kept out of the DB entirely). When secrets get a proper at-rest story, encrypt +// this column with a key held OUTSIDE the database (env / `pass`), decrypting +// only in memory. The single read/write site is `build_totp` + +// `begin_totp_enrollment` below; `totp_backup_codes` are already hashed and need +// no change. Grep `TODO(security)` to find this. + +/// TOTP (Google Authenticator) parameters. These are the values Google +/// Authenticator assumes; it ignores anything else encoded in the otpauth URL, +/// so they must stay SHA1 / 6 digits / 30s or codes won't match. +const TOTP_ISSUER: &str = "Kompress"; +const TOTP_DIGITS: usize = 6; +/// Accept codes ±1 time-step (~30s) to tolerate client/server clock drift. +const TOTP_SKEW: u8 = 1; +const TOTP_STEP: u64 = 30; +/// Number of one-time recovery codes generated when 2FA is enabled. +pub const TOTP_BACKUP_CODE_COUNT: usize = 8; + +/// Build a [`TOTP`] from a stored base32 secret and the account label (email). +/// Returns `None` if the secret can't be decoded. +fn build_totp(secret_base32: &str, account: &str) -> Option { + let bytes = Secret::Encoded(secret_base32.to_string()).to_bytes().ok()?; + TOTP::new( + Algorithm::SHA1, + TOTP_DIGITS, + TOTP_SKEW, + TOTP_STEP, + bytes, + Some(TOTP_ISSUER.to_string()), + account.to_string(), + ) + .ok() +} + #[derive(Debug, Deserialize, Serialize)] pub struct LoginParams { pub email: String, @@ -241,6 +281,68 @@ impl Model { self.account_type == "company" } + /// Whether two-factor auth is active for this account. This is the single + /// source of truth used by the login flow: a secret may be present during a + /// half-finished enrollment, but 2FA only gates login once it is *confirmed* + /// (which is what sets `totp_enabled_at`). + #[must_use] + pub fn totp_enabled(&self) -> bool { + self.totp_enabled_at.is_some() + } + + /// Build the [`TOTP`] for this user from its stored secret, if any. + fn totp(&self) -> Option { + let secret = self.totp_secret.as_deref()?; + build_totp(secret, &self.email) + } + + /// A `data:image/png;base64,...` QR for the *pending* secret plus the secret + /// itself (shown as a manual-entry fallback). Used on the enrollment page. + /// Returns `None` if no secret is staged or QR rendering fails. + #[must_use] + pub fn totp_provisioning(&self) -> Option<(String, String)> { + let totp = self.totp()?; + let qr = totp.get_qr_base64().ok()?; + Some(( + format!("data:image/png;base64,{qr}"), + self.totp_secret.clone()?, + )) + } + + /// Verify a 6-digit authenticator code against the stored secret. Returns + /// false if no secret is staged or the code is wrong. Works both during + /// enrollment confirmation and at login. + #[must_use] + pub fn verify_totp_code(&self, code: &str) -> bool { + let code = code.trim().replace(' ', ""); + self.totp() + .and_then(|t| t.check_current(&code).ok()) + .unwrap_or(false) + } + + /// Whether `code` matches one of the still-unused backup codes. + #[must_use] + pub fn matches_backup_code(&self, code: &str) -> bool { + let code = code.trim().replace([' ', '-'], ""); + self.backup_code_hashes() + .iter() + .any(|h| hash::verify_password(&code, h)) + } + + /// The stored hashed backup codes (empty if none). + fn backup_code_hashes(&self) -> Vec { + self.totp_backup_codes + .as_deref() + .and_then(|s| serde_json::from_str::>(s).ok()) + .unwrap_or_default() + } + + /// How many unused backup codes remain. + #[must_use] + pub fn backup_codes_remaining(&self) -> usize { + self.backup_code_hashes().len() + } + /// Seconds the user must still wait before another verification email may be /// sent — 0 means a resend is allowed now. Throttling resends off the last /// `email_verification_sent_at` keeps the endpoint from being an easy way to @@ -446,6 +548,96 @@ impl ActiveModel { self.magic_link_expiration = ActiveValue::set(None); self.update(db).await.map_err(ModelError::from) } + + /// Stage a fresh TOTP secret for enrollment. This does **not** turn 2FA on — + /// `totp_enabled_at` stays null until the user proves they scanned it by + /// confirming a code (see [`Self::enable_totp`]). Any previously staged + /// secret/backup codes are discarded so re-enrolling always starts clean. + pub async fn begin_totp_enrollment(mut self, db: &DatabaseConnection) -> ModelResult { + let secret = match Secret::generate_secret().to_encoded() { + Secret::Encoded(s) => s, + // generate_secret() always yields raw bytes that encode cleanly. + Secret::Raw(_) => unreachable!("to_encoded() returns Encoded"), + }; + self.totp_secret = ActiveValue::set(Some(secret)); + self.totp_enabled_at = ActiveValue::set(None); + self.totp_backup_codes = ActiveValue::set(None); + self.update(db).await.map_err(ModelError::from) + } + + /// Confirm enrollment and switch 2FA on. The caller must have already + /// verified a code against the staged secret. Generates and stores hashed + /// one-time backup codes and returns the plaintext codes to display **once**. + pub async fn enable_totp( + mut self, + db: &DatabaseConnection, + ) -> ModelResult<(Model, Vec)> { + let (plain, hashes) = generate_backup_codes()?; + let encoded = serde_json::to_string(&hashes).map_err(|e| ModelError::Any(e.into()))?; + self.totp_enabled_at = ActiveValue::set(Some(Local::now().into())); + self.totp_backup_codes = ActiveValue::set(Some(encoded)); + let model = self.update(db).await.map_err(ModelError::from)?; + Ok((model, plain)) + } + + /// Turn 2FA off and wipe all TOTP state. Callers gate this behind a fresh + /// confirmation (password or a current code). + pub async fn disable_totp(mut self, db: &DatabaseConnection) -> ModelResult { + self.totp_secret = ActiveValue::set(None); + self.totp_enabled_at = ActiveValue::set(None); + self.totp_backup_codes = ActiveValue::set(None); + self.update(db).await.map_err(ModelError::from) + } + + /// Remove a used backup code from the stored set so it can't be reused. + /// `code` is matched against the remaining hashes; a no-op if it doesn't + /// match (the caller decides whether a match was required). + pub async fn consume_backup_code( + mut self, + db: &DatabaseConnection, + code: &str, + ) -> ModelResult { + let code = code.trim().replace([' ', '-'], ""); + let current: Vec = match self.totp_backup_codes.as_ref() { + Some(s) => serde_json::from_str(s.as_str()).unwrap_or_default(), + None => Vec::new(), + }; + let remaining: Vec = current + .into_iter() + .filter(|h| !hash::verify_password(&code, h)) + .collect(); + let encoded = serde_json::to_string(&remaining).map_err(|e| ModelError::Any(e.into()))?; + self.totp_backup_codes = ActiveValue::set(Some(encoded)); + self.update(db).await.map_err(ModelError::from) + } + + /// Replace the backup codes with a fresh set (e.g. after the user used some). + /// Only meaningful while 2FA is enabled; returns the new plaintext codes. + pub async fn regenerate_backup_codes( + mut self, + db: &DatabaseConnection, + ) -> ModelResult<(Model, Vec)> { + let (plain, hashes) = generate_backup_codes()?; + let encoded = serde_json::to_string(&hashes).map_err(|e| ModelError::Any(e.into()))?; + self.totp_backup_codes = ActiveValue::set(Some(encoded)); + let model = self.update(db).await.map_err(ModelError::from)?; + Ok((model, plain)) + } +} + +/// Generate `TOTP_BACKUP_CODE_COUNT` recovery codes, returning +/// `(plaintext, hashes)`. Only the hashes are persisted; the plaintext is shown +/// to the user once and never stored. +fn generate_backup_codes() -> ModelResult<(Vec, Vec)> { + let mut plain = Vec::with_capacity(TOTP_BACKUP_CODE_COUNT); + let mut hashes = Vec::with_capacity(TOTP_BACKUP_CODE_COUNT); + for _ in 0..TOTP_BACKUP_CODE_COUNT { + let code = hash::random_string(10).to_lowercase(); + let hashed = hash::hash_password(&code).map_err(|e| ModelError::Any(e.into()))?; + plain.push(code); + hashes.push(hashed); + } + Ok((plain, hashes)) } /// Google OpenID Connect user profile (the fields our scopes request).