From 10191386488119b2c678925253bbaa098e1148e8 Mon Sep 17 00:00:00 2001
From: Adrian Rudnik <adrian@klonmaschine.de>
Date: Thu, 23 Nov 2023 22:41:17 +0100
Subject: [PATCH] Introduce admin and guest context (#33)

Implements and fixes #32
---
 frontend/package-lock.json                    |  76 +-
 .../theme-base/components/menu/_menubar.scss  |   2 +-
 .../themes/ablegram/_extensions.scss          |   6 +
 .../components/auth/LoginWithPasswordForm.vue |  66 ++
 frontend/src/components/auth/UserAvatar.vue   |  46 +
 frontend/src/components/parts/MenuBar.vue     |  70 +-
 .../components/search/SearchQueryToolbar.vue  |  18 +-
 .../structure/form/PasswordInput.vue          |  60 ++
 frontend/src/layouts/AppLayout.vue            |   5 +-
 frontend/src/layouts/FullscreenLayout.vue     |  13 +-
 frontend/src/locales/en.yaml                  |  28 +
 frontend/src/plugins/api.ts                   |  12 +-
 frontend/src/plugins/search/result/index.ts   |   2 +-
 frontend/src/router/index.ts                  |  13 +
 frontend/src/router/middleware/bootApp.ts     |   4 +
 frontend/src/stores/session.ts                |  54 ++
 frontend/src/views/OtpAuthView.vue            |  48 +
 service/crypt/crypt.go                        | 102 ++
 service/flags.go                              |  15 +
 service/go.mod                                |   5 +-
 service/go.sum                                |   6 +
 service/internal/access/auth.go               |  57 ++
 service/internal/access/errors.go             |   6 +
 service/internal/{auth => access}/logger.go   |   2 +-
 service/internal/access/otp.go                |  64 ++
 service/internal/{auth => access}/password.go |   2 +-
 service/internal/auth/auth.go                 |  37 -
 service/internal/config/config.go             |  24 +-
 service/internal/config/types.go              |   9 +-
 service/internal/ui/opener.go                 |  17 +-
 service/internal/webservice/funcs.go          |  17 +
 .../internal/webservice/middleware_auth.go    |  31 +
 .../{middleware.go => middleware_cache.go}    |   2 +-
 service/internal/webservice/routes_access.go  |  98 ++
 service/internal/webservice/routes_config.go  |  45 +-
 service/internal/webservice/routes_os.go      |  15 +-
 service/internal/webservice/server.go         |  30 +-
 service/main.go                               |  11 +-
 website/docs/.vitepress/config.mts            |   5 +
 website/docs/guests-and-server-access.md      |  30 +
 website/docs/live-demo.md                     |  15 +-
 website/docs/service-arguments.md             |  23 +
 website/docs/thanks/index.md                  |  27 +
 website/package-lock.json                     | 916 ++++++++++++++----
 44 files changed, 1779 insertions(+), 355 deletions(-)
 create mode 100644 frontend/src/components/auth/LoginWithPasswordForm.vue
 create mode 100644 frontend/src/components/auth/UserAvatar.vue
 create mode 100644 frontend/src/components/structure/form/PasswordInput.vue
 create mode 100644 frontend/src/stores/session.ts
 create mode 100644 frontend/src/views/OtpAuthView.vue
 create mode 100644 service/crypt/crypt.go
 create mode 100644 service/internal/access/auth.go
 create mode 100644 service/internal/access/errors.go
 rename service/internal/{auth => access}/logger.go (87%)
 create mode 100644 service/internal/access/otp.go
 rename service/internal/{auth => access}/password.go (97%)
 delete mode 100644 service/internal/auth/auth.go
 create mode 100644 service/internal/webservice/funcs.go
 create mode 100644 service/internal/webservice/middleware_auth.go
 rename service/internal/webservice/{middleware.go => middleware_cache.go} (93%)
 create mode 100644 service/internal/webservice/routes_access.go
 create mode 100644 website/docs/guests-and-server-access.md
 create mode 100644 website/docs/thanks/index.md

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 031046a3..3fa991fe 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -787,12 +787,12 @@
       }
     },
     "node_modules/@intlify/core-base": {
-      "version": "9.7.0",
-      "resolved": "https://registry.npmjs.org/@intlify/core-base/-/core-base-9.7.0.tgz",
-      "integrity": "sha512-1tBnfnCI23jXqGW15cagCjn2GgD487VST1dMG8P5LRzrSfx+kUzqFyTrjMNIwgq1tVaF4HnDpFMUuyrzTLKphw==",
+      "version": "9.7.1",
+      "resolved": "https://registry.npmjs.org/@intlify/core-base/-/core-base-9.7.1.tgz",
+      "integrity": "sha512-jPJTeECEhqQ7g//8g3Fb79j5SzSSRqlFCWD6pcX94uMLXU+L1m07gVZnnvzoJBnaMyJHiiwxOqZVfvu6rQfLvw==",
       "dependencies": {
-        "@intlify/message-compiler": "9.7.0",
-        "@intlify/shared": "9.7.0"
+        "@intlify/message-compiler": "9.7.1",
+        "@intlify/shared": "9.7.1"
       },
       "engines": {
         "node": ">= 16"
@@ -802,11 +802,11 @@
       }
     },
     "node_modules/@intlify/message-compiler": {
-      "version": "9.7.0",
-      "resolved": "https://registry.npmjs.org/@intlify/message-compiler/-/message-compiler-9.7.0.tgz",
-      "integrity": "sha512-/YdZCio2L2tCM5bZ2eMHbSEIQNPh1QqvZIOLI/yCVKXLscis7O0SsR2nmuU/DfCJ3iSeI8juw82C2wLvfsAeww==",
+      "version": "9.7.1",
+      "resolved": "https://registry.npmjs.org/@intlify/message-compiler/-/message-compiler-9.7.1.tgz",
+      "integrity": "sha512-HfIr2Hn/K7b0Zv4kGqkxAxwtipyxAwhI9a3krN5cuhH/G9gkaik7of1PdzjR3Mix43t2onBiKYQyaU7mo7e0aA==",
       "dependencies": {
-        "@intlify/shared": "9.7.0",
+        "@intlify/shared": "9.7.1",
         "source-map-js": "^1.0.2"
       },
       "engines": {
@@ -817,9 +817,9 @@
       }
     },
     "node_modules/@intlify/shared": {
-      "version": "9.7.0",
-      "resolved": "https://registry.npmjs.org/@intlify/shared/-/shared-9.7.0.tgz",
-      "integrity": "sha512-PUkEuk//YKu4CHS5ah3mNa3XL/+TZj6rAY/6yYN+GCNFd2u+uWUkeuwE4Q6t8dydRWlErOePHHS0KyNoof/oBw==",
+      "version": "9.7.1",
+      "resolved": "https://registry.npmjs.org/@intlify/shared/-/shared-9.7.1.tgz",
+      "integrity": "sha512-CBKnHzlUYGrk5QII9q4nElAQKO5cX1rRx8VmSWXltyOZjbkGHXYQTHULn6KwRi+CypuBCfmPkyPBHMzosypIeg==",
       "engines": {
         "node": ">= 16"
       },
@@ -949,9 +949,9 @@
       }
     },
     "node_modules/@rushstack/eslint-patch": {
-      "version": "1.5.1",
-      "resolved": "https://registry.npmjs.org/@rushstack/eslint-patch/-/eslint-patch-1.5.1.tgz",
-      "integrity": "sha512-6i/8UoL0P5y4leBIGzvkZdS85RDMG9y1ihZzmTZQ5LdHUYmZ7pKFoj8X0236s3lusPs1Fa5HTQUpwI+UfTcmeA==",
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/@rushstack/eslint-patch/-/eslint-patch-1.6.0.tgz",
+      "integrity": "sha512-2/U3GXA6YiPYQDLGwtGlnNgKYBSwCFIHf8Y9LUY5VATHdtbLlU0Y1R3QoBnT0aB4qv/BEiVVsj7LJXoQCgJ2vA==",
       "dev": true
     },
     "node_modules/@sideway/address": {
@@ -1000,9 +1000,9 @@
       "dev": true
     },
     "node_modules/@types/node": {
-      "version": "18.18.11",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-18.18.11.tgz",
-      "integrity": "sha512-c1vku6qnTeujJneYH94/4aq73XrVcsJe35UPyAsSok1ijiKrkRzK+AxQPSpNMUnC03roWBBwJx/9I8V7lQoxmA==",
+      "version": "18.18.12",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-18.18.12.tgz",
+      "integrity": "sha512-G7slVfkwOm7g8VqcEF1/5SXiMjP3Tbt+pXDU3r/qhlM2KkGm786DUD4xyMA2QzEElFrv/KZV9gjygv4LnkpbMQ==",
       "dev": true,
       "dependencies": {
         "undici-types": "~5.26.4"
@@ -1027,9 +1027,9 @@
       "dev": true
     },
     "node_modules/@types/sizzle": {
-      "version": "2.3.7",
-      "resolved": "https://registry.npmjs.org/@types/sizzle/-/sizzle-2.3.7.tgz",
-      "integrity": "sha512-sU5MNKvSFdbT97qLSabU6jxceY9BfYQe9uF+b8E1rdTecpq9ROkkKoiHlblUlhgfaz9bdCByWjAI40Y3mHf1iQ==",
+      "version": "2.3.8",
+      "resolved": "https://registry.npmjs.org/@types/sizzle/-/sizzle-2.3.8.tgz",
+      "integrity": "sha512-0vWLNK2D5MT9dg0iOo8GlKguPAU02QjmZitPEsXRuJXU/OGIOt9vT9Fc26wtYuavLxtO45v9PGleoL9Z0k1LHg==",
       "dev": true
     },
     "node_modules/@types/web-bluetooth": {
@@ -2261,9 +2261,9 @@
       "integrity": "sha512-I7K1Uu0MBPzaFKg4nI5Q7Vs2t+3gWWW648spaF+Rg7pI9ds18Ugn+lvg4SHczUdKlHI5LWBXyqfS8+DufyBsgQ=="
     },
     "node_modules/cypress": {
-      "version": "13.5.1",
-      "resolved": "https://registry.npmjs.org/cypress/-/cypress-13.5.1.tgz",
-      "integrity": "sha512-yqLViT0D/lPI8Kkm7ciF/x/DCK/H/DnogdGyiTnQgX4OVR2aM30PtK+kvklTOD1u3TuItiD9wUQAF8EYWtyZug==",
+      "version": "13.6.0",
+      "resolved": "https://registry.npmjs.org/cypress/-/cypress-13.6.0.tgz",
+      "integrity": "sha512-quIsnFmtj4dBUEJYU4OH0H12bABJpSujvWexC24Ju1gTlKMJbeT6tTO0vh7WNfiBPPjoIXLN+OUqVtiKFs6SGw==",
       "dev": true,
       "hasInstallScript": true,
       "dependencies": {
@@ -4136,9 +4136,9 @@
       }
     },
     "node_modules/lru-cache": {
-      "version": "10.0.3",
-      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.0.3.tgz",
-      "integrity": "sha512-B7gr+F6MkqB3uzINHXNctGieGsRTMwIBgxkp0yq/5BwcuDzD4A8wQpHQW6vDAm1uKSLQghmRdD9sKqf2vJ1cEg==",
+      "version": "10.1.0",
+      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.1.0.tgz",
+      "integrity": "sha512-/1clY/ui8CzjKFyjdvwPWJUYKiFVXG2I2cY0ssG7h4+hwk+XOIX7ZSG9Q7TW8TW3Kp3BUSqgFWBLgL4PJ+Blag==",
       "dev": true,
       "engines": {
         "node": "14 || >=16.14"
@@ -4845,9 +4845,9 @@
       "integrity": "sha512-KDeO94CbWI4pKsPnYpA1FPjo79EsY9I+M8ywoPBSf9XMXoe/0crjbUK7jcQEDHuc0ZMRIZsxH3TYLv4TUtHmAA=="
     },
     "node_modules/primevue": {
-      "version": "3.41.0",
-      "resolved": "https://registry.npmjs.org/primevue/-/primevue-3.41.0.tgz",
-      "integrity": "sha512-xdoB5JtAmam/05f2AbVdYA26XhHgeZZ4w+crQ5FZAeq3CkFL5tWjreWLwbtUWYhWimhdk9ZCrCvX/L+FjuWR/Q==",
+      "version": "3.41.1",
+      "resolved": "https://registry.npmjs.org/primevue/-/primevue-3.41.1.tgz",
+      "integrity": "sha512-+RDGLsw7ktS2Jz/mptPwwbW/YI5E0u1tWYustlG745FFdX3o1/Dxs47hdnvo22wysPUQr1mdh/uznsKJZMV7fw==",
       "peerDependencies": {
         "vue": "^3.0.0"
       }
@@ -5965,12 +5965,12 @@
       }
     },
     "node_modules/vue-i18n": {
-      "version": "9.7.0",
-      "resolved": "https://registry.npmjs.org/vue-i18n/-/vue-i18n-9.7.0.tgz",
-      "integrity": "sha512-8Z8kSz9U2juzuAf+6mjW1HTd5pIlYuFJZkC+HvYOglFdpzwc2rTUGjxKwN8xGdtGur1MFnyJ44TSr+TksJtY8A==",
+      "version": "9.7.1",
+      "resolved": "https://registry.npmjs.org/vue-i18n/-/vue-i18n-9.7.1.tgz",
+      "integrity": "sha512-A6DzWqJQMdzBj+392+g3zIgGV0FnFC7o/V+txs5yIALANEZzY6ZV8hM2wvZR3nTbQI7dntAmzBHMeoEteJO0kQ==",
       "dependencies": {
-        "@intlify/core-base": "9.7.0",
-        "@intlify/shared": "9.7.0",
+        "@intlify/core-base": "9.7.1",
+        "@intlify/shared": "9.7.1",
         "@vue/devtools-api": "^6.5.0"
       },
       "engines": {
@@ -6053,9 +6053,9 @@
       }
     },
     "node_modules/webpack-virtual-modules": {
-      "version": "0.6.0",
-      "resolved": "https://registry.npmjs.org/webpack-virtual-modules/-/webpack-virtual-modules-0.6.0.tgz",
-      "integrity": "sha512-KnaMTE6EItz/f2q4Gwg5/rmeKVi79OR58NoYnwDJqCk9ywMtTGbBnBcfoBtN4QbYu0lWXvyMoH2Owxuhe4qI6Q==",
+      "version": "0.6.1",
+      "resolved": "https://registry.npmjs.org/webpack-virtual-modules/-/webpack-virtual-modules-0.6.1.tgz",
+      "integrity": "sha512-poXpCylU7ExuvZK8z+On3kX+S8o/2dQ/SVYueKA0D4WEMXROXgY8Ez50/bQEUmvoSMMrWcrJqCHuhAbsiwg7Dg==",
       "dev": true
     },
     "node_modules/which": {
diff --git a/frontend/src/assets/primefaces/theme-base/components/menu/_menubar.scss b/frontend/src/assets/primefaces/theme-base/components/menu/_menubar.scss
index b5c8d215..7562ab44 100644
--- a/frontend/src/assets/primefaces/theme-base/components/menu/_menubar.scss
+++ b/frontend/src/assets/primefaces/theme-base/components/menu/_menubar.scss
@@ -35,7 +35,7 @@
   }
 }
 
-@media screen and (max-width: 960px) {
+@media screen and (max-width: 320px) {
   .p-menubar {
     position: relative;
 
diff --git a/frontend/src/assets/primefaces/themes/ablegram/_extensions.scss b/frontend/src/assets/primefaces/themes/ablegram/_extensions.scss
index a07d6700..91be71ae 100644
--- a/frontend/src/assets/primefaces/themes/ablegram/_extensions.scss
+++ b/frontend/src/assets/primefaces/themes/ablegram/_extensions.scss
@@ -122,3 +122,9 @@
       box-shadow $transitionDuration;
   }
 }
+
+/* fix background for Menubar and MegaMenu in mobile view */
+.p-menubar-root-list,
+.p-megamenu-panel {
+  background-color: white;
+}
diff --git a/frontend/src/components/auth/LoginWithPasswordForm.vue b/frontend/src/components/auth/LoginWithPasswordForm.vue
new file mode 100644
index 00000000..73401072
--- /dev/null
+++ b/frontend/src/components/auth/LoginWithPasswordForm.vue
@@ -0,0 +1,66 @@
+<template>
+  <FormGrid @submit="onFormSubmit" class="mb-3">
+    <FormRow>
+      <PasswordInput
+        :disabled="isSubmitting"
+        name="password"
+        :label="t('user-avatar.form.master-password.title')"
+        :help="t('user-avatar.form.master-password.help')"
+      />
+    </FormRow>
+
+    <SubmitButton :label="t('user-avatar.login')" :loading="isSubmitting" v-model="isSaved" />
+  </FormGrid>
+</template>
+
+<script setup lang="ts">
+import FormRow from '@/components/structure/form/FormRow.vue'
+import FormGrid from '@/components/structure/form/FormGrid.vue'
+import SubmitButton from '@/components/structure/form/SubmitButton.vue'
+import { useForm } from 'vee-validate'
+import { object, string } from 'yup'
+import { useI18n } from 'vue-i18n'
+import { ref } from 'vue'
+import { ApiError, fetchApi } from '@/plugins/api'
+import { useSessionStore } from '@/stores/session'
+import PasswordInput from '@/components/structure/form/PasswordInput.vue'
+
+const { t } = useI18n()
+const { hello } = useSessionStore()
+
+const isSaved = ref<boolean>(false)
+
+const { handleSubmit, isSubmitting, setFieldError } = useForm<{ password: string }>({
+  initialValues: {
+    password: ''
+  },
+  validationSchema: object().shape({
+    password: string().required().label(t('user-avatar.form.master-password.title'))
+  })
+})
+
+const onFormSubmit = handleSubmit(async (v) => {
+  try {
+    await fetchApi<{ password: string }>('/api/auth/password', {
+      method: 'POST',
+      body: JSON.stringify(v)
+    })
+
+    await hello()
+  } catch (e) {
+    if (e instanceof ApiError) {
+      switch (e.statusCode) {
+        case 403:
+          setFieldError('password', t('user-avatar.errors.password-invalid'))
+          return
+        case 405:
+          setFieldError('password', t('user-avatar.errors.master-password-not-set'))
+          return
+        default:
+          setFieldError('password', t('user-avatar.errors.unknown'))
+          return
+      }
+    }
+  }
+})
+</script>
diff --git a/frontend/src/components/auth/UserAvatar.vue b/frontend/src/components/auth/UserAvatar.vue
new file mode 100644
index 00000000..1eb9d110
--- /dev/null
+++ b/frontend/src/components/auth/UserAvatar.vue
@@ -0,0 +1,46 @@
+<template>
+  <Avatar
+    icon="pi pi-user"
+    class="mr-2"
+    :class="{ 'bg-black-alpha-90 text-white': isAdmin, 'text-black-alpha-90': isGuest }"
+    @click="openUserPanel"
+  />
+  <OverlayPanel ref="userPanel" class="w-full md:w-24rem">
+    <div class="mb-3">
+      <p class="font-semibold">
+        {{ username }} [{{ isAdmin ? t('role.admin') : t('role.guest') }}]
+      </p>
+      <i18n-t keypath="user-avatar.from-ip" tag="p">
+        <template v-slot:ip>
+          <code class="text-sm p-1 bg-black-alpha-10">{{ ip }}</code>
+        </template>
+      </i18n-t>
+    </div>
+
+    <Button :label="t('user-avatar.logout')" @click="goodbye" v-if="isAdmin" />
+    <LoginWithPasswordForm v-if="isGuest" />
+  </OverlayPanel>
+</template>
+
+<script setup lang="ts">
+import OverlayPanel from 'primevue/overlaypanel'
+import LoginWithPasswordForm from '@/components/auth/LoginWithPasswordForm.vue'
+import Button from 'primevue/button'
+import Avatar from 'primevue/avatar'
+import { useI18n } from 'vue-i18n'
+import { storeToRefs } from 'pinia'
+import { useSessionStore } from '@/stores/session'
+import { ref } from 'vue'
+
+const { t } = useI18n()
+const { username, ip, isGuest, isAdmin } = storeToRefs(useSessionStore())
+const { goodbye } = useSessionStore()
+
+const userPanel = ref()
+
+const openUserPanel = (event: Event) => {
+  userPanel.value.toggle(event)
+}
+</script>
+
+<style scoped lang="scss"></style>
diff --git a/frontend/src/components/parts/MenuBar.vue b/frontend/src/components/parts/MenuBar.vue
index 94b3c258..cf96fd0b 100644
--- a/frontend/src/components/parts/MenuBar.vue
+++ b/frontend/src/components/parts/MenuBar.vue
@@ -1,5 +1,5 @@
 <template>
-  <component :is="menu" :model="items" :pt="pt">
+  <Menubar :model="items" :pt="pt" breakpoint="560px">
     <template #item="{ label, item, props, hasSubmenu }">
       <RouterLink v-if="item.route" v-slot="{ navigate, href }" :to="item.route" custom>
         <a
@@ -23,33 +23,29 @@
     <template #end v-if="isMobile">
       <strong>{{ t(activeRoute.meta.title ?? '') }}</strong>
     </template>
-  </component>
+  </Menubar>
 </template>
 
 <script setup lang="ts">
+import type { ComputedRef } from 'vue'
 import { computed } from 'vue'
 import { useI18n } from 'vue-i18n'
 import { useRoute, useRouter } from 'vue-router'
 import Menubar from 'primevue/menubar'
-import MegaMenu from 'primevue/megamenu'
 import { useConfirm } from 'primevue/useconfirm'
 import type { MenuItem, MenuItemCommandEvent } from 'primevue/menuitem'
 import { fetchApi } from '@/plugins/api'
-
-import { useBreakpoints, breakpointsPrimeFlex } from '@vueuse/core'
+import { breakpointsPrimeFlex, useBreakpoints } from '@vueuse/core'
+import { storeToRefs } from 'pinia'
+import { useSessionStore } from '@/stores/session'
 
 const { t } = useI18n()
 const confirm = useConfirm()
 const router = useRouter()
 
-// Ensure we use a menu bar that is responsive enough, to not too strict
 const breakpoints = useBreakpoints(breakpointsPrimeFlex)
 const isMobile = breakpoints.smaller('sm')
 
-const menu = computed(() => {
-  return isMobile.value ? Menubar : MegaMenu
-})
-
 const activeRoute = computed(() => useRoute())
 
 const pt = {
@@ -80,7 +76,7 @@ const shutdownConfirm = (event: MenuItemCommandEvent) => {
 
 const shutdown = async () => {
   try {
-    await fetchApi('/shutdown', {
+    await fetchApi('/api/shutdown', {
       method: 'POST'
     })
   } catch (e) {
@@ -90,33 +86,45 @@ const shutdown = async () => {
   await router.push({ name: 'goodbye' })
 }
 
-const items: MenuItem[] = [
-  {
+const { isAdmin } = storeToRefs(useSessionStore())
+
+const items: ComputedRef<MenuItem[]> = computed(() => {
+  const out = []
+
+  out.push({
     label: t('menu.search.label'),
     icon: 'pi pi-fw pi-search',
     route: { name: 'search' }
-  },
-  {
+  })
+
+  out.push({
     label: t('menu.tags.label'),
     icon: 'pi pi-fw pi-tag',
     route: { name: 'tags' }
-  },
-  {
-    label: t('menu.files.label'),
-    icon: 'pi pi-fw pi-file',
-    route: { name: 'files' }
-  },
-  {
-    label: t('menu.settings.label'),
-    icon: 'pi pi-fw pi-cog',
-    route: { name: 'settings' }
-  },
-  {
-    label: t('menu.quit.label'),
-    icon: 'pi pi-fw pi-power-off',
-    command: shutdownConfirm
+  })
+
+  if (isAdmin.value) {
+    out.push({
+      label: t('menu.files.label'),
+      icon: 'pi pi-fw pi-file',
+      route: { name: 'files' }
+    })
+
+    out.push({
+      label: t('menu.settings.label'),
+      icon: 'pi pi-fw pi-cog',
+      route: { name: 'settings' }
+    })
+
+    out.push({
+      label: t('menu.quit.label'),
+      icon: 'pi pi-fw pi-power-off',
+      command: shutdownConfirm
+    })
   }
-]
+
+  return out
+})
 </script>
 
 <style lang="scss">
diff --git a/frontend/src/components/search/SearchQueryToolbar.vue b/frontend/src/components/search/SearchQueryToolbar.vue
index 64a4e187..172174c3 100644
--- a/frontend/src/components/search/SearchQueryToolbar.vue
+++ b/frontend/src/components/search/SearchQueryToolbar.vue
@@ -1,6 +1,6 @@
 <template>
   <div class="SearchQueryToolbar">
-    <MegaMenu :model="items" class="w-full" />
+    <MegaMenu :model="items" class="w-full" breakpoint="320px" />
   </div>
 </template>
 
@@ -22,22 +22,22 @@ const items = ref([
     items: [
       [
         {
-          label: t('search-query-toolbar.tools.filters.header'),
+          label: t('search-query-toolbar.tools.tags.header'),
           items: [
             {
-              label: t('search-query-toolbar.tools.filters.clear-all'),
-              icon: 'pi pi-filter-slash',
-              command: () => resetFilters()
+              label: t('search-query-toolbar.tools.tags.add-random'),
+              icon: 'pi pi-plus',
+              command: () => addRandomTagFilter()
             }
           ]
         },
         {
-          label: t('search-query-toolbar.tools.tags.header'),
+          label: t('search-query-toolbar.tools.filters.header'),
           items: [
             {
-              label: t('search-query-toolbar.tools.tags.add-random'),
-              icon: 'pi pi-plus',
-              command: () => addRandomTagFilter()
+              label: t('search-query-toolbar.tools.filters.clear-all'),
+              icon: 'pi pi-filter-slash',
+              command: () => resetFilters()
             }
           ]
         },
diff --git a/frontend/src/components/structure/form/PasswordInput.vue b/frontend/src/components/structure/form/PasswordInput.vue
new file mode 100644
index 00000000..2410a2cf
--- /dev/null
+++ b/frontend/src/components/structure/form/PasswordInput.vue
@@ -0,0 +1,60 @@
+<template>
+  <div class="TextInput field">
+    <label :for="id">{{ label }}</label>
+    <Password
+      v-model="value"
+      :binary="true"
+      class="w-full"
+      :class="{ 'p-invalid': !!errorMessage }"
+      :inputId="id"
+      toggle-mask
+      :name="id"
+      :feedback="feedback"
+      :input-props="{ ...$attrs, autocomplete: autocomplete }"
+    />
+    <small v-if="props.help">{{ props.help }}</small>
+    <small v-if="errorMessage" :id="`${id}-help`" class="p-error">{{ errorMessage }}</small>
+  </div>
+</template>
+
+<script lang="ts" setup>
+import Password from 'primevue/password'
+import { useField } from 'vee-validate'
+import { toRef } from 'vue'
+import { createIdFrom } from '@/plugins/id'
+
+const props = withDefaults(
+  defineProps<{
+    name: string
+    label: string
+    value?: string
+    help?: string
+    feedback?: boolean
+    autocomplete?: string
+  }>(),
+  {
+    feedback: false,
+    autocomplete: 'current-password'
+  }
+)
+
+const id = createIdFrom(props.name)
+
+const { errorMessage, value } = useField(toRef(props, 'name'))
+
+defineExpose({
+  errorMessage
+})
+</script>
+
+<style lang="scss">
+.TextInput {
+  display: flex;
+  flex-direction: column;
+
+  label > small {
+    display: block;
+    margin-top: 0.5rem;
+  }
+}
+</style>
diff --git a/frontend/src/layouts/AppLayout.vue b/frontend/src/layouts/AppLayout.vue
index af3494fd..b975a4f2 100644
--- a/frontend/src/layouts/AppLayout.vue
+++ b/frontend/src/layouts/AppLayout.vue
@@ -5,7 +5,7 @@
         <ProgressLogo />
         <h1 class="text-3xl p-0 m-0">Ablegram</h1>
       </div>
-      <div class="flex gap-3 mt-1 OutLinks">
+      <div class="flex gap-3 mt-1 align-items-center OutLinks">
         <a href="https://www.ablegram.app/" target="_blank">
           <i class="pi pi-fw pi-book text-xl"></i>
         </a>
@@ -13,6 +13,8 @@
         <a href="https://github.com/adrianrudnik/ablegram" target="_blank">
           <i class="pi pi-fw pi-github text-xl"></i>
         </a>
+
+        <UserAvatar />
       </div>
     </div>
 
@@ -30,6 +32,7 @@ import MenuBar from '@/components/parts/MenuBar.vue'
 import ProgressLogo from '@/components/parts/ProgressLogo.vue'
 import DynamicDialog from 'primevue/dynamicdialog'
 import ConfirmDialog from 'primevue/confirmdialog'
+import UserAvatar from '@/components/auth/UserAvatar.vue'
 </script>
 
 <style lang="scss">
diff --git a/frontend/src/layouts/FullscreenLayout.vue b/frontend/src/layouts/FullscreenLayout.vue
index 999e5664..f47062f7 100644
--- a/frontend/src/layouts/FullscreenLayout.vue
+++ b/frontend/src/layouts/FullscreenLayout.vue
@@ -2,7 +2,7 @@
   <div class="layout">
     <div class="fullscreen">
       <div class="w-25rem">
-        <h1 class="text-3xl flex flex-row gap-2 font-medium">
+        <h1 class="text-3xl flex flex-row gap-2 font-medium" v-if="showLogo">
           <img src="@/assets/media/logo.svg" class="h-2rem" alt="Ablegram logo" />
           Ablegram
         </h1>
@@ -13,6 +13,17 @@
   </div>
 </template>
 
+<script setup lang="ts">
+const props = withDefaults(
+  defineProps<{
+    showLogo?: boolean
+  }>(),
+  {
+    showLogo: true
+  }
+)
+</script>
+
 <style lang="scss">
 .layout {
   padding: 1rem;
diff --git a/frontend/src/locales/en.yaml b/frontend/src/locales/en.yaml
index 98c194c7..365647d2 100644
--- a/frontend/src/locales/en.yaml
+++ b/frontend/src/locales/en.yaml
@@ -75,6 +75,10 @@ datetime:
     dog: Dog
     pig: Pig
 
+role:
+  admin: Admin
+  guest: Guest
+
 donate:
   title:
     short: Donate
@@ -685,6 +689,30 @@ ableton-info-text-result-card:
   found-in:
     title: Found in
 
+otp-auth-view:
+  title: Authentication via OTP
+  description: >-
+    Please wait while the OTP code is being validated. You will be redirected to the main page afterwards.
+  error: >-
+    The OTP could not be validated, reason "{message}". Please try again.
+
+user-avatar:
+  from-ip: Connecting from IP {ip}.
+  login: Login
+  logout: Logout
+  form:
+    master-password:
+      title: Master password
+      help: >-
+        Login with your master password to gain admin privileges.
+  errors:
+    password-invalid: >-
+      The password is invalid.
+    master-password-not-set: >-
+      The master password is not set. Please set it in the settings.
+    unknown: >-
+      An unknown error occurred.
+
 color:
   ableton:
     # Colors picked from ableton track color picker.
diff --git a/frontend/src/plugins/api.ts b/frontend/src/plugins/api.ts
index da34a40c..e348d1e3 100644
--- a/frontend/src/plugins/api.ts
+++ b/frontend/src/plugins/api.ts
@@ -1,3 +1,13 @@
+export class ApiError extends Error {
+  public statusCode: number
+
+  constructor(message: string, statusCode: number) {
+    super(message)
+    this.statusCode = statusCode
+    this.name = 'ApiError'
+  }
+}
+
 export async function fetchApi<T>(
   url: string,
   config: RequestInit = {},
@@ -13,7 +23,7 @@ export async function fetchApi<T>(
   })
 
   if (throwOnError && !r.ok) {
-    throw new Error(r.statusText)
+    throw new ApiError(r.statusText, r.status)
   }
 
   return r.json()
diff --git a/frontend/src/plugins/search/result/index.ts b/frontend/src/plugins/search/result/index.ts
index d7490b1d..44d4d3a9 100644
--- a/frontend/src/plugins/search/result/index.ts
+++ b/frontend/src/plugins/search/result/index.ts
@@ -54,7 +54,7 @@ export enum ResultType {
   AbletonDeviceChain = 'AbletonDeviceChain',
   AbletonScene = 'AbletonScene',
   AbletonSampleReference = 'AbletonSampleReference',
-  AbletonInfotext = 'AbletonInfotext'
+  AbletonInfoText = 'AbletonInfoText'
 }
 
 export type HitFieldset =
diff --git a/frontend/src/router/index.ts b/frontend/src/router/index.ts
index d6c698d3..42b204a1 100644
--- a/frontend/src/router/index.ts
+++ b/frontend/src/router/index.ts
@@ -6,6 +6,7 @@ import TagsOverviewView from '@/views/TagsOverviewView.vue'
 import FilesView from '@/views/FilesView.vue'
 import SettingsView from '@/views/SettingsView.vue'
 import GoodbyeView from '@/views/GoodbyeView.vue'
+import OtpAuthView from '@/views/OtpAuthView.vue'
 import NotFoundView from '@/views/NotFoundView.vue'
 
 import { bootApp } from '@/router/middleware/bootApp'
@@ -63,6 +64,18 @@ const router = createRouter({
         }
       ]
     },
+    {
+      path: '/auth',
+      component: FullscreenLayout,
+      props: { showLogo: false },
+      children: [
+        {
+          path: 'otp',
+          name: 'otp',
+          component: OtpAuthView
+        }
+      ]
+    },
     {
       path: '/say/',
       component: FullscreenLayout,
diff --git a/frontend/src/router/middleware/bootApp.ts b/frontend/src/router/middleware/bootApp.ts
index 15903dc9..39f4a497 100644
--- a/frontend/src/router/middleware/bootApp.ts
+++ b/frontend/src/router/middleware/bootApp.ts
@@ -2,6 +2,7 @@ import type { NavigationGuardNext, RouteLocationNormalized } from 'vue-router'
 import { websocket } from '@/websocket'
 import { fetchApi } from '@/plugins/api'
 import { useConfigStore } from '@/stores/config'
+import { useSessionStore } from '@/stores/session'
 
 export async function bootApp(
   to: RouteLocationNormalized,
@@ -11,6 +12,9 @@ export async function bootApp(
   console.debug('Booting app')
   console.debug('Booting index: ' + websocket.status.value)
 
+  // Ensure we say hello to the server to identify us
+  await useSessionStore().hello()
+
   // Ensure the config is loaded
   await useConfigStore().load()
 
diff --git a/frontend/src/stores/session.ts b/frontend/src/stores/session.ts
new file mode 100644
index 00000000..35772450
--- /dev/null
+++ b/frontend/src/stores/session.ts
@@ -0,0 +1,54 @@
+import { defineStore } from 'pinia'
+import { computed, ref } from 'vue'
+import { fetchApi } from '@/plugins/api'
+
+const DefaultUsername = 'Unknown user'
+const DefaultIp = 'Unknown IP'
+
+export const useSessionStore = defineStore('session', () => {
+  const username = ref(DefaultUsername)
+  const ip = ref(DefaultIp)
+  const isAdmin = ref(false)
+  const isGuest = computed(() => !isAdmin.value)
+
+  const hello = async () => {
+    try {
+      const r = await fetchApi<{
+        username: string
+        ip: string
+        role: 'admin' | 'guest'
+      }>('/api/auth/hello')
+      username.value = r.username
+      ip.value = r.ip
+      isAdmin.value = r.role === 'admin'
+    } catch (e) {
+      username.value = DefaultUsername
+      ip.value = DefaultIp
+      isAdmin.value = false
+
+      console.error('Server hello failed', e)
+    }
+  }
+
+  const goodbye = async () => {
+    try {
+      await fetchApi('/api/auth/goodbye', {
+        method: 'POST'
+      })
+    } catch (e) {
+      console.error('Server goodbye failed', e)
+    }
+
+    // Refresh the session
+    await hello()
+  }
+
+  return {
+    hello,
+    goodbye,
+    username,
+    ip,
+    isAdmin,
+    isGuest
+  }
+})
diff --git a/frontend/src/views/OtpAuthView.vue b/frontend/src/views/OtpAuthView.vue
new file mode 100644
index 00000000..fb6f93c3
--- /dev/null
+++ b/frontend/src/views/OtpAuthView.vue
@@ -0,0 +1,48 @@
+<template>
+  <div class="flex flex-column sm:flex-row gap-4">
+    <ProgressSpinner v-if="!errorMessage" />
+
+    <SectionHeadline :title="t('otp-auth-view.title')">
+      <template #description>
+        <p v-if="!errorMessage">{{ t('otp-auth-view.description') }}</p>
+
+        <Message severity="error" v-if="errorMessage" :closable="false">
+          {{ t('otp-auth-view.error', { message: errorMessage }) }}
+        </Message>
+      </template>
+    </SectionHeadline>
+  </div>
+</template>
+
+<script setup lang="ts">
+import SectionHeadline from '@/components/structure/SectionHeadline.vue'
+import { useI18n } from 'vue-i18n'
+import ProgressSpinner from 'primevue/progressspinner'
+import Message from 'primevue/message'
+import { onMounted, ref } from 'vue'
+import { fetchApi } from '@/plugins/api'
+import { useRoute, useRouter } from 'vue-router'
+
+const { t } = useI18n()
+
+const errorMessage = ref<string | null>(null)
+
+const route = useRoute()
+const router = useRouter()
+
+onMounted(async () => {
+  try {
+    // We only expect a 200 response, auth itself is handled by httpOnly cookies
+    await fetchApi<{}>('/api/auth/otp', {
+      method: 'POST',
+      body: JSON.stringify({
+        token: route.query.token
+      })
+    })
+
+    await router.replace({ name: 'app' })
+  } catch (e: any) {
+    errorMessage.value = e.message
+  }
+})
+</script>
diff --git a/service/crypt/crypt.go b/service/crypt/crypt.go
new file mode 100644
index 00000000..be69c8f4
--- /dev/null
+++ b/service/crypt/crypt.go
@@ -0,0 +1,102 @@
+package crypt
+
+import (
+	"crypto/aes"
+	"crypto/cipher"
+	"crypto/rand"
+	"encoding/base64"
+	"encoding/hex"
+	"github.com/denisbrodbeck/machineid"
+)
+
+var uniqueKey []byte
+
+func GetUniqueKey() []byte {
+	// If we already generated a unique key, return it
+	if len(uniqueKey) != 0 {
+		return uniqueKey
+	}
+
+	// Otherwise, lets try to create a constant key that is bound to the machine we run on.
+	mid, err := getMachineId()
+	if err == nil {
+		uniqueKey = mid
+		return uniqueKey
+	}
+
+	// Failed to generate a machine ID.
+	// Fall back to a more aggressiv random approach.
+	// Sessions will not persist through runs in this case as the key changes every startup.
+	id := make([]byte, 16)
+
+	_, err = rand.Read(id)
+	if err != nil {
+		panic(err)
+	}
+
+	uniqueKey = id
+	return id
+}
+
+func getMachineId() ([]byte, error) {
+	mid, err := machineid.ProtectedID("ablegram")
+	if err != nil {
+		return nil, err
+	}
+
+	dec, err := hex.DecodeString(mid)
+	if err != nil {
+		return nil, err
+	}
+
+	return dec, nil
+}
+
+func Encrypt(v []byte) (string, error) {
+	c, err := aes.NewCipher(GetUniqueKey())
+	if err != nil {
+		return "", err
+	}
+
+	gcm, err := cipher.NewGCM(c)
+	if err != nil {
+		return "", err
+	}
+
+	nonce := make([]byte, gcm.NonceSize())
+	_, err = rand.Read(nonce)
+	if err != nil {
+		panic(err)
+	}
+
+	out := gcm.Seal(nonce, nonce, v, nil)
+
+	return base64.StdEncoding.EncodeToString(out), nil
+}
+
+func Decrypt(v string) (string, error) {
+	c, err := aes.NewCipher(GetUniqueKey())
+	if err != nil {
+		return "", err
+	}
+
+	gcm, err := cipher.NewGCM(c)
+	if err != nil {
+		return "", err
+	}
+
+	bv, err := base64.StdEncoding.DecodeString(v)
+	if err != nil {
+		return "", err
+	}
+
+	ns := gcm.NonceSize()
+	nonce, rv := bv[:ns], bv[ns:]
+
+	pt, err := gcm.Open(nil, nonce, rv, nil)
+	if err != nil {
+		return "", err
+	}
+
+	return string(pt), nil
+}
diff --git a/service/flags.go b/service/flags.go
index 05ed2d9b..55f073ee 100644
--- a/service/flags.go
+++ b/service/flags.go
@@ -2,6 +2,7 @@ package main
 
 import (
 	"flag"
+	"github.com/adrianrudnik/ablegram/crypt"
 	"github.com/adrianrudnik/ablegram/internal/config"
 )
 
@@ -17,6 +18,9 @@ func parseFlags(c *config.Config) {
 
 	indexerWorkerDelay := flag.Int("indexer-worker-delay", 0, "Set the delay in milliseconds between indexer workers tasks")
 
+	masterPassword := flag.String("master-password", "", "Set the master password for the webservice")
+	trustedPlatform := flag.String("trusted-platform", "", "Set the trusted platform for the webservice")
+
 	flag.Parse()
 
 	c.Log.Level = *logLevel
@@ -29,4 +33,15 @@ func parseFlags(c *config.Config) {
 	c.Behaviour.AutostartWebservice = !*noWebserviceFlag
 
 	c.Indexer.WorkerDelayInMs = *indexerWorkerDelay
+
+	if *masterPassword != "" {
+		p, err := crypt.Encrypt([]byte(*masterPassword))
+		if err != nil {
+			panic(err)
+		}
+
+		c.Webservice.MasterPassword = p
+	}
+
+	c.Webservice.TrustedPlatform = *trustedPlatform
 }
diff --git a/service/go.mod b/service/go.mod
index cc6b2a5a..5cda429f 100644
--- a/service/go.mod
+++ b/service/go.mod
@@ -3,9 +3,10 @@ module github.com/adrianrudnik/ablegram
 go 1.21
 
 require (
-	fyne.io/fyne/v2 v2.4.1
+	fyne.io/fyne/v2 v2.4.2
 	github.com/antchfx/xmlquery v1.3.18
 	github.com/blevesearch/bleve/v2 v2.3.10
+	github.com/denisbrodbeck/machineid v1.0.1
 	github.com/djherbis/times v1.6.0
 	github.com/duaneking/gozodiacs v0.0.0-20230703202012-0830be15d5c0
 	github.com/gin-contrib/cors v1.4.0
@@ -23,7 +24,7 @@ require (
 )
 
 require (
-	fyne.io/systray v1.10.1-0.20230722100817-88df1e0ffa9a // indirect
+	fyne.io/systray v1.10.1-0.20231115130155-104f5ef7839e // indirect
 	github.com/RoaringBitmap/roaring v1.6.0 // indirect
 	github.com/antchfx/xpath v1.2.5 // indirect
 	github.com/bits-and-blooms/bitset v1.11.0 // indirect
diff --git a/service/go.sum b/service/go.sum
index 11532141..089484c5 100644
--- a/service/go.sum
+++ b/service/go.sum
@@ -39,8 +39,12 @@ cloud.google.com/go/storage v1.10.0/go.mod h1:FLPqc6j+Ki4BU591ie1oL6qBQGu2Bl/tZ9
 dmitri.shuralyov.com/gpu/mtl v0.0.0-20190408044501-666a987793e9/go.mod h1:H6x//7gZCb22OMCxBHrMx7a5I7Hp++hsVxbQ4BYO7hU=
 fyne.io/fyne/v2 v2.4.1 h1:Es100N6HIhJGg8H2ZAS2j5H/YibfxecXHs2V4A4hbq8=
 fyne.io/fyne/v2 v2.4.1/go.mod h1:AWM1iPM2YfliduZ4u/kQzP9E6ARIWm0gg+57GpYzWro=
+fyne.io/fyne/v2 v2.4.2 h1:bt6/p/FTpcv0sZIN6msxto32JvKkgwKe/LzYxqv//B8=
+fyne.io/fyne/v2 v2.4.2/go.mod h1:1h3BKxmQYRJlr2g+RGVxedzr6vLVQ/AJmFWcF9CJnoQ=
 fyne.io/systray v1.10.1-0.20230722100817-88df1e0ffa9a h1:6Xf9fP3/mt72NrqlQhJWhQGcNf6GoG9X96NTaXr+K6A=
 fyne.io/systray v1.10.1-0.20230722100817-88df1e0ffa9a/go.mod h1:oM2AQqGJ1AMo4nNqZFYU8xYygSBZkW2hmdJ7n4yjedE=
+fyne.io/systray v1.10.1-0.20231115130155-104f5ef7839e h1:Hvs+kW2VwCzNToF3FmnIAzmivNgrclwPgoUdVSrjkP8=
+fyne.io/systray v1.10.1-0.20231115130155-104f5ef7839e/go.mod h1:oM2AQqGJ1AMo4nNqZFYU8xYygSBZkW2hmdJ7n4yjedE=
 github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
 github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo=
 github.com/RoaringBitmap/roaring v1.6.0 h1:dc7kRiroETgJcHhWX6BerXkZz2b3JgLGg9nTURJL/og=
@@ -118,6 +122,8 @@ github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ3
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/denisbrodbeck/machineid v1.0.1 h1:geKr9qtkB876mXguW2X6TU4ZynleN6ezuMSRhl4D7AQ=
+github.com/denisbrodbeck/machineid v1.0.1/go.mod h1:dJUwb7PTidGDeYyUBmXZ2GphQBbjJCrnectwCyxcUSI=
 github.com/djherbis/times v1.6.0 h1:w2ctJ92J8fBvWPxugmXIv7Nz7Q3iDMKNx9v5ocVH20c=
 github.com/djherbis/times v1.6.0/go.mod h1:gOHeRAz2h+VJNZ5Gmc/o7iD9k4wW7NMVqieYCY99oc0=
 github.com/duaneking/gozodiacs v0.0.0-20230703202012-0830be15d5c0 h1:Awv1Potsj5vLAop0OurteEiP1ENBr2WRNkH72LgkZl8=
diff --git a/service/internal/access/auth.go b/service/internal/access/auth.go
new file mode 100644
index 00000000..75776e4d
--- /dev/null
+++ b/service/internal/access/auth.go
@@ -0,0 +1,57 @@
+package access
+
+import (
+	"encoding/json"
+	"github.com/adrianrudnik/ablegram/crypt"
+	"time"
+)
+
+const AdminRole = "admin"
+const GuestRole = "guest"
+
+type Auth struct {
+	otp *Otp
+}
+
+func NewAuth(otp *Otp) *Auth {
+	return &Auth{
+		otp: otp,
+	}
+}
+
+func (a *Auth) ValidateToken(v string) bool {
+	_, err := crypt.Decrypt(v)
+
+	// As long as we can decrypt the payload, we are fine for now, nothing else of
+	// interest is stored in the token.
+	return err == nil
+}
+
+func (a *Auth) ConvertOtpToToken(v string) (string, error) {
+	if !a.otp.ValidateOtp(v) {
+		return "", ErrInvalidOtp
+	}
+
+	defer a.otp.InvalidateOtp(v)
+
+	return a.CreateToken()
+}
+
+func (a *Auth) CreateToken() (string, error) {
+	b, err := json.Marshal(newAuthToken())
+	if err != nil {
+		return "", ErrTokenGenerationFailed
+	}
+
+	return crypt.Encrypt(b)
+}
+
+type AuthToken struct {
+	Time time.Time `json:"time"`
+}
+
+func newAuthToken() *AuthToken {
+	return &AuthToken{
+		Time: time.Now(),
+	}
+}
diff --git a/service/internal/access/errors.go b/service/internal/access/errors.go
new file mode 100644
index 00000000..7b2f29f3
--- /dev/null
+++ b/service/internal/access/errors.go
@@ -0,0 +1,6 @@
+package access
+
+import "errors"
+
+var ErrInvalidOtp = errors.New("invalid otp")
+var ErrTokenGenerationFailed = errors.New("token generation failed")
diff --git a/service/internal/auth/logger.go b/service/internal/access/logger.go
similarity index 87%
rename from service/internal/auth/logger.go
rename to service/internal/access/logger.go
index 40a6e5cb..ddb95e20 100644
--- a/service/internal/auth/logger.go
+++ b/service/internal/access/logger.go
@@ -1,4 +1,4 @@
-package auth
+package access
 
 import (
 	"github.com/rs/zerolog"
diff --git a/service/internal/access/otp.go b/service/internal/access/otp.go
new file mode 100644
index 00000000..d9e67062
--- /dev/null
+++ b/service/internal/access/otp.go
@@ -0,0 +1,64 @@
+package access
+
+import (
+	"crypto/rand"
+	"encoding/base64"
+	"sync"
+	"time"
+)
+
+const OtpDefaultLifetime = 5 * time.Minute
+
+// Otp offers a simple way for the app to announce one-time-passes for use on the API.
+// It circumvents the need for a configured password to gain admin access.
+type Otp struct {
+	tokens    map[string]time.Time
+	tokenLock sync.RWMutex
+}
+
+func NewOtp() *Otp {
+	return &Otp{
+		tokens: make(map[string]time.Time),
+	}
+}
+
+func (o *Otp) CreateOtp() string {
+	buf := make([]byte, 64)
+	_, err := rand.Read(buf)
+	if err != nil {
+		panic(err)
+	}
+
+	token := base64.StdEncoding.EncodeToString(buf)
+
+	o.tokenLock.Lock()
+	defer o.tokenLock.Unlock()
+
+	o.tokens[token] = time.Now().Add(OtpDefaultLifetime)
+
+	return token
+}
+
+func (o *Otp) ValidateOtp(token string) bool {
+	o.tokenLock.RLock()
+	defer o.tokenLock.RUnlock()
+
+	expiry, ok := o.tokens[token]
+	if !ok {
+		return false
+	}
+
+	if expiry.Before(time.Now()) {
+		delete(o.tokens, token)
+		return false
+	}
+
+	return true
+}
+
+func (o *Otp) InvalidateOtp(token string) {
+	o.tokenLock.Lock()
+	defer o.tokenLock.Unlock()
+
+	delete(o.tokens, token)
+}
diff --git a/service/internal/auth/password.go b/service/internal/access/password.go
similarity index 97%
rename from service/internal/auth/password.go
rename to service/internal/access/password.go
index 7e4b077b..dfac1e03 100644
--- a/service/internal/auth/password.go
+++ b/service/internal/access/password.go
@@ -1,4 +1,4 @@
-package auth
+package access
 
 import (
 	"encoding/base64"
diff --git a/service/internal/auth/auth.go b/service/internal/auth/auth.go
deleted file mode 100644
index e02fe7d6..00000000
--- a/service/internal/auth/auth.go
+++ /dev/null
@@ -1,37 +0,0 @@
-package auth
-
-import (
-	"crypto/rand"
-	"encoding/base64"
-	"sync"
-)
-
-type Auth struct {
-	tokens     map[string]bool
-	tokenMutex sync.RWMutex
-}
-
-func (a *Auth) IssueToken(isExpiring bool) string {
-	buf := make([]byte, 64)
-	_, err := rand.Read(buf)
-	if err != nil {
-		panic(err)
-	}
-
-	token := base64.StdEncoding.EncodeToString(buf)
-
-	a.tokenMutex.Lock()
-	defer a.tokenMutex.Unlock()
-
-	a.tokens[token] = true
-
-	return token
-}
-
-func (a *Auth) ValidateToken(token string) bool {
-	a.tokenMutex.RLock()
-	defer a.tokenMutex.RUnlock()
-
-	_, ok := a.tokens[token]
-	return ok
-}
diff --git a/service/internal/config/config.go b/service/internal/config/config.go
index f85ee4fe..ca5be4bf 100644
--- a/service/internal/config/config.go
+++ b/service/internal/config/config.go
@@ -2,7 +2,6 @@ package config
 
 import (
 	"errors"
-	"github.com/adrianrudnik/ablegram/internal/auth"
 	"github.com/rs/zerolog"
 	"gopkg.in/yaml.v3"
 	"os"
@@ -16,7 +15,10 @@ var Version = 1
 
 func newConfig() *Config {
 	return &Config{
+		IsDevelopmentEnv: isDevelopmentMode(),
+
 		Version: Version,
+
 		Log: LogConfig{
 			Level:                  "info",
 			EnableRuntimeLogfile:   false,
@@ -36,8 +38,9 @@ func newConfig() *Config {
 		},
 
 		Webservice: WebserviceConfig{
-			OwnerPassword: auth.HashPassword(auth.GenerateRandomPassword()),
-			TryPorts:      []int{10000, 20000, 30000, 40000, 50000, 10001},
+			MasterPassword:  "",
+			TryPorts:        []int{10000, 20000, 30000, 40000, 50000, 10001},
+			TrustedPlatform: "",
 		},
 	}
 }
@@ -138,7 +141,7 @@ func GetRelativeFilePath(sub string) string {
 			return "", err
 		}
 
-		if strings.Contains(p, ".cache") && strings.Contains(p, "GoLand") {
+		if isDevelopmentMode() {
 			return "", errors.New("developer")
 		}
 
@@ -162,3 +165,16 @@ func GetRelativeFilePath(sub string) string {
 
 	return base
 }
+
+func isDevelopmentMode() bool {
+	p, err := os.Executable()
+	if err != nil {
+		return false
+	}
+
+	if strings.Contains(p, ".cache") && strings.Contains(p, "GoLand") {
+		return true
+	}
+
+	return false
+}
diff --git a/service/internal/config/types.go b/service/internal/config/types.go
index fe85b1dc..3e53aef8 100644
--- a/service/internal/config/types.go
+++ b/service/internal/config/types.go
@@ -8,6 +8,8 @@ type Config struct {
 	Collector  CollectorConfig  `yaml:"collector" json:"collector"`
 	Indexer    IndexerConfig    `yaml:"indexer" json:"indexer"`
 	Webservice WebserviceConfig `yaml:"webservice" json:"webservice"`
+
+	IsDevelopmentEnv bool `yaml:"-" json:"is_dev_env"`
 }
 
 type About struct {
@@ -40,9 +42,10 @@ type IndexerConfig struct {
 }
 
 type WebserviceConfig struct {
-	TryPorts      []int  `yaml:"try_ports" json:"-"`
-	ChosenPort    int    `yaml:"-" json:"-"`
-	OwnerPassword string `yaml:"owner_password" json:"owner_password"`
+	TryPorts        []int  `yaml:"try_ports" json:"-"`
+	ChosenPort      int    `yaml:"-" json:"-"`
+	MasterPassword  string `yaml:"master_password" json:"master_password"`
+	TrustedPlatform string `yaml:"trusted_platform" json:"trusted_platform"`
 }
 
 type CollectorTarget struct {
diff --git a/service/internal/ui/opener.go b/service/internal/ui/opener.go
index 310d8ebc..ce6fea51 100644
--- a/service/internal/ui/opener.go
+++ b/service/internal/ui/opener.go
@@ -2,12 +2,25 @@ package ui
 
 import (
 	"fmt"
+	"github.com/adrianrudnik/ablegram/internal/access"
 	"github.com/adrianrudnik/ablegram/internal/config"
 	"github.com/icza/gox/osx"
+	"net/url"
 )
 
-func OpenFrontend(c *config.Config) {
-	err := osx.OpenDefault(fmt.Sprintf("http://localhost:%d", c.Webservice.ChosenPort))
+func GenerateLocalAdminUrl(c *config.Config, otp *access.Otp) string {
+	port := c.Webservice.ChosenPort
+
+	if c.IsDevelopmentEnv {
+		port = 5173
+	}
+
+	otpToken := otp.CreateOtp()
+	return fmt.Sprintf("http://localhost:%d/auth/otp?token=%s", port, url.QueryEscape(otpToken))
+}
+
+func OpenFrontendAsAdmin(c *config.Config, otp *access.Otp) {
+	err := osx.OpenDefault(GenerateLocalAdminUrl(c, otp))
 	if err != nil {
 		Logger.Warn().Err(err).Msg("Could not open default browser")
 	}
diff --git a/service/internal/webservice/funcs.go b/service/internal/webservice/funcs.go
new file mode 100644
index 00000000..889b88db
--- /dev/null
+++ b/service/internal/webservice/funcs.go
@@ -0,0 +1,17 @@
+package webservice
+
+import (
+	"github.com/gin-gonic/gin"
+	"net/http"
+)
+
+func isAdmin(c *gin.Context) bool {
+	if c.GetString("role") != "admin" {
+		c.JSON(http.StatusForbidden, gin.H{"error": "Forbidden"})
+		c.Abort()
+
+		return false
+	}
+
+	return true
+}
diff --git a/service/internal/webservice/middleware_auth.go b/service/internal/webservice/middleware_auth.go
new file mode 100644
index 00000000..16ec9acb
--- /dev/null
+++ b/service/internal/webservice/middleware_auth.go
@@ -0,0 +1,31 @@
+package webservice
+
+import (
+	"fmt"
+	"github.com/adrianrudnik/ablegram/internal/access"
+	"github.com/gin-gonic/gin"
+	"strings"
+)
+
+func AccessMiddleware(auth *access.Auth) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		displayName := "Guest"   // used for UI display
+		role := access.GuestRole // used for authorization
+
+		// Resolve admin tokens
+		token, err := c.Cookie("ablegram-token")
+		if err == nil && auth.ValidateToken(token) {
+			role = access.AdminRole
+			displayName = "Admin"
+		}
+
+		// Resolve a custom username
+		username, err := c.Cookie("ablegram-username")
+		if err == nil {
+			displayName = username
+		}
+
+		c.Set("username", fmt.Sprintf("%.16s", strings.TrimSpace(displayName)))
+		c.Set("role", role)
+	}
+}
diff --git a/service/internal/webservice/middleware.go b/service/internal/webservice/middleware_cache.go
similarity index 93%
rename from service/internal/webservice/middleware.go
rename to service/internal/webservice/middleware_cache.go
index 1b7f444e..793bd112 100644
--- a/service/internal/webservice/middleware.go
+++ b/service/internal/webservice/middleware_cache.go
@@ -6,7 +6,7 @@ import (
 	"path/filepath"
 )
 
-func CacheControl() gin.HandlerFunc {
+func CacheMiddleware() gin.HandlerFunc {
 	return func(c *gin.Context) {
 		cacheableSuffixes := []string{
 			".css",
diff --git a/service/internal/webservice/routes_access.go b/service/internal/webservice/routes_access.go
new file mode 100644
index 00000000..e7a48449
--- /dev/null
+++ b/service/internal/webservice/routes_access.go
@@ -0,0 +1,98 @@
+package webservice
+
+import (
+	"github.com/adrianrudnik/ablegram/crypt"
+	"github.com/adrianrudnik/ablegram/internal/access"
+	"github.com/adrianrudnik/ablegram/internal/config"
+	"github.com/gin-gonic/gin"
+)
+
+func registerAccessRoutes(rg *gin.RouterGroup, conf *config.Config, auth *access.Auth, otp *access.Otp) {
+	// Used to identify the current session against the server
+	rg.GET("/auth/hello", func(c *gin.Context) {
+		c.JSON(200, gin.H{
+			"username": c.MustGet("username").(string),
+			"ip":       c.ClientIP(),
+			"role":     c.MustGet("role").(string),
+		})
+	})
+
+	rg.POST("/auth/goodbye", func(c *gin.Context) {
+		c.SetCookie("ablegram-token", "", -1, "/", "", false, true)
+		c.JSON(200, gin.H{})
+	})
+
+	rg.POST("/auth/otp", func(c *gin.Context) {
+		type userInput struct {
+			OtpToken string `json:"token"`
+		}
+
+		var input userInput
+
+		if err := c.ShouldBindJSON(&input); err != nil {
+			c.JSON(400, gin.H{"error": err.Error()})
+			return
+		}
+
+		t, err := auth.ConvertOtpToToken(input.OtpToken)
+		if err != nil {
+			Logger.Warn().
+				Str("ip", c.ClientIP()).
+				Msg("Tried to authenticate with invalid OTP token")
+
+			c.JSON(403, gin.H{"error": err.Error()})
+			return
+		}
+
+		Logger.Info().
+			Str("ip", c.ClientIP()).
+			Msg("Authenticated with valid OTP token")
+
+		c.SetCookie("ablegram-token", t, 0, "/", "", false, true)
+
+		c.JSON(200, gin.H{})
+	})
+
+	rg.POST("/auth/password", func(c *gin.Context) {
+		type userInput struct {
+			Password string `json:"password"`
+		}
+
+		var input userInput
+
+		if err := c.ShouldBindJSON(&input); err != nil {
+			c.JSON(400, gin.H{"error": err.Error()})
+			return
+		}
+
+		if conf.Webservice.MasterPassword == "" {
+			c.JSON(405, gin.H{"error": "Master password not enabled"})
+			return
+		}
+
+		pw, err := crypt.Decrypt(conf.Webservice.MasterPassword)
+		if err != nil {
+			c.JSON(500, gin.H{"error": "Could not decrypt master password"})
+			return
+		}
+
+		if input.Password != pw {
+			c.JSON(403, gin.H{"error": "Invalid password"})
+			return
+		}
+
+		setAdminCookie(c, auth)
+
+		c.JSON(200, gin.H{})
+	})
+}
+
+func setAdminCookie(c *gin.Context, auth *access.Auth) {
+	token, err := auth.CreateToken()
+	if err != nil {
+		Logger.Error().Err(err).Msg("Could not create token")
+		return
+	}
+
+	c.SetCookie("ablegram-token", token, 0, "/", "", false, true)
+}
diff --git a/service/internal/webservice/routes_config.go b/service/internal/webservice/routes_config.go
index 98425b2b..b466803b 100644
--- a/service/internal/webservice/routes_config.go
+++ b/service/internal/webservice/routes_config.go
@@ -8,10 +8,23 @@ import (
 
 func registerConfigRoutes(rg *gin.RouterGroup, conf *config.Config) {
 	rg.GET("/config", func(c *gin.Context) {
-		c.JSON(200, conf)
+		if ok := isAdmin(c); !ok {
+			return
+		}
+
+		if c.GetString("role") != "admin" {
+			c.JSON(http.StatusForbidden, gin.H{"error": "Forbidden"})
+			return
+		}
+
+		c.JSON(http.StatusOK, conf)
 	})
 
 	rg.PUT("/config/log", func(c *gin.Context) {
+		if ok := isAdmin(c); !ok {
+			return
+		}
+
 		type userInput struct {
 			Level                  string `json:"level"`
 			EnableRuntimeLogfile   bool   `json:"enable_runtime_logfile"`
@@ -27,7 +40,7 @@ func registerConfigRoutes(rg *gin.RouterGroup, conf *config.Config) {
 
 		// Early exit in demo mode, we do not want to save anything
 		if conf.Behaviour.DemoMode {
-			c.JSON(200, conf)
+			c.JSON(http.StatusOK, conf)
 			return
 		}
 
@@ -47,10 +60,14 @@ func registerConfigRoutes(rg *gin.RouterGroup, conf *config.Config) {
 			return
 		}
 
-		c.JSON(200, conf)
+		c.JSON(http.StatusOK, conf)
 	})
 
 	rg.PUT("/config/behaviour", func(c *gin.Context) {
+		if ok := isAdmin(c); !ok {
+			return
+		}
+
 		type userInput struct {
 			AutostartWebservice bool `json:"autostart_webservice"`
 			OpenBrowserOnStart  bool `json:"open_browser_on_start"`
@@ -66,7 +83,7 @@ func registerConfigRoutes(rg *gin.RouterGroup, conf *config.Config) {
 
 		// Early exit in demo mode, we do not want to save anything
 		if conf.Behaviour.DemoMode {
-			c.JSON(200, conf)
+			c.JSON(http.StatusOK, conf)
 			return
 		}
 
@@ -81,11 +98,15 @@ func registerConfigRoutes(rg *gin.RouterGroup, conf *config.Config) {
 			return
 		}
 
-		c.JSON(200, conf)
+		c.JSON(http.StatusOK, conf)
 	})
 
 	// Register new collector
 	rg.POST("/config/collector/targets", func(c *gin.Context) {
+		if ok := isAdmin(c); !ok {
+			return
+		}
+
 		type userInput struct {
 			ID                   string `json:"id"`
 			Type                 string `json:"type"`
@@ -105,7 +126,7 @@ func registerConfigRoutes(rg *gin.RouterGroup, conf *config.Config) {
 
 		// Early exit in demo mode, we do not want to save anything
 		if conf.Behaviour.DemoMode {
-			c.JSON(200, conf)
+			c.JSON(http.StatusOK, conf)
 			return
 		}
 
@@ -135,6 +156,10 @@ func registerConfigRoutes(rg *gin.RouterGroup, conf *config.Config) {
 
 	// Update existing collector
 	rg.PUT("/config/collector/targets/:id", func(c *gin.Context) {
+		if ok := isAdmin(c); !ok {
+			return
+		}
+
 		id := c.Param("id")
 
 		type userInput struct {
@@ -155,7 +180,7 @@ func registerConfigRoutes(rg *gin.RouterGroup, conf *config.Config) {
 
 		// Early exit in demo mode, we do not want to save anything
 		if conf.Behaviour.DemoMode {
-			c.JSON(200, conf)
+			c.JSON(http.StatusOK, conf)
 			return
 		}
 
@@ -181,11 +206,15 @@ func registerConfigRoutes(rg *gin.RouterGroup, conf *config.Config) {
 
 	// Delete collector
 	rg.DELETE("/config/collector/targets/:id", func(c *gin.Context) {
+		if ok := isAdmin(c); !ok {
+			return
+		}
+
 		id := c.Param("id")
 
 		// Early exit in demo mode, we do not want to save anything
 		if conf.Behaviour.DemoMode {
-			c.JSON(200, conf)
+			c.JSON(http.StatusOK, conf)
 			return
 		}
 
diff --git a/service/internal/webservice/routes_os.go b/service/internal/webservice/routes_os.go
index d7fe0600..11812680 100644
--- a/service/internal/webservice/routes_os.go
+++ b/service/internal/webservice/routes_os.go
@@ -11,10 +11,13 @@ import (
 
 func registerOsRoutes(rg *gin.RouterGroup, conf *config.Config) {
 	rg.POST("/shutdown", func(c *gin.Context) {
-		c.Status(202)
-		c.JSON(200, gin.H{"message": "Shutting down"})
+		if ok := isAdmin(c); !ok {
+			return
+		}
 
-		if !conf.Behaviour.DemoMode {
+		c.JSON(http.StatusAccepted, gin.H{"message": "Shutting down"})
+
+		if conf.Behaviour.DemoMode {
 			return
 		}
 
@@ -25,6 +28,10 @@ func registerOsRoutes(rg *gin.RouterGroup, conf *config.Config) {
 	})
 
 	rg.POST("/open", func(c *gin.Context) {
+		if ok := isAdmin(c); !ok {
+			return
+		}
+
 		var json OpenInput
 		if err := c.ShouldBindJSON(&json); err != nil {
 			c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
@@ -35,6 +42,6 @@ func registerOsRoutes(rg *gin.RouterGroup, conf *config.Config) {
 			ui.OpenDefault(json.Path)
 		}
 
-		c.JSON(200, gin.H{"status": "ok"})
+		c.JSON(http.StatusOK, gin.H{"status": "ok"})
 	})
 }
diff --git a/service/internal/webservice/server.go b/service/internal/webservice/server.go
index d60e601f..1b67bba8 100644
--- a/service/internal/webservice/server.go
+++ b/service/internal/webservice/server.go
@@ -2,9 +2,11 @@ package webservice
 
 import (
 	"embed"
+	"github.com/adrianrudnik/ablegram/internal/access"
 	"github.com/adrianrudnik/ablegram/internal/config"
 	"github.com/adrianrudnik/ablegram/internal/indexer"
 	"github.com/adrianrudnik/ablegram/internal/tagger"
+	"github.com/adrianrudnik/ablegram/internal/ui"
 	bleveHttp "github.com/blevesearch/bleve/v2/http"
 	"github.com/gin-contrib/cors"
 	"github.com/gin-contrib/logger"
@@ -12,6 +14,7 @@ import (
 	"github.com/gin-gonic/gin"
 	"github.com/gorilla/websocket"
 	"github.com/rs/zerolog"
+	"github.com/rs/zerolog/log"
 	"net/http"
 	"os"
 )
@@ -31,6 +34,8 @@ var upgrader = websocket.Upgrader{
 
 func Serve(
 	conf *config.Config,
+	auth *access.Auth,
+	otp *access.Otp,
 	indexer *indexer.Search,
 	tc *tagger.TagCollector,
 	pushChan *PushChannel,
@@ -50,10 +55,10 @@ func Serve(
 	r := gin.New()
 	r.Use(gin.Recovery())
 	r.Use(logger.SetLogger())
-	r.Use(CacheControl())
+	r.Use(CacheMiddleware())
+	r.Use(AccessMiddleware(auth))
 
 	r.Use(cors.New(cors.Config{
-		AllowOrigins:     []string{"http://localhost:10000", "http://localhost:5173"},
 		AllowMethods:     []string{"GET", "POST", "OPTIONS", "PUT", "DELETE"},
 		AllowHeaders:     []string{"Origin", "Content-Type", "Accept", "Accept-Encoding"},
 		ExposeHeaders:    []string{"*"},
@@ -63,12 +68,11 @@ func Serve(
 		},
 	}))
 
-	// No reason to support proxies yet
-	err := r.SetTrustedProxies([]string{})
-	if err != nil {
-		return err
-	}
+	// Set the trusted platform
+	// @see https://github.com/gin-gonic/gin/blob/44d0dd70924dd154e3b98bc340accc53484efa9c/gin.go#L73C1-L80C2
+	r.TrustedPlatform = conf.Webservice.TrustedPlatform
 
+	// Mount the embeded search frontend
 	frontendFS := EmbedFolder(frontendFs, ".frontend")
 
 	// Mount the Vue frontend
@@ -94,6 +98,9 @@ func Serve(
 	registerConfigRoutes(api, conf)
 	registerOsRoutes(api, conf)
 
+	// Boot up auth and otp services
+	registerAccessRoutes(api, conf, auth, otp)
+
 	// Register the bleve HTTP router
 	search := r.Group("/search")
 	registerBleveRoutes(search, indexer)
@@ -106,8 +113,15 @@ func Serve(
 		})
 	})
 
+	// Issue a single OTP and admin URL to the service console when we are in dev mode.
+	if conf.IsDevelopmentEnv {
+		log.Info().
+			Str("url", ui.GenerateLocalAdminUrl(conf, otp)).
+			Msg("Generated Admin OTP url")
+	}
+
 	// Register the fallback route to the frontend UI bootstrap
-	err = r.Run(bindAddr)
+	err := r.Run(bindAddr)
 	if err != nil {
 		return err
 	}
diff --git a/service/main.go b/service/main.go
index 6ec04538..52143ff7 100644
--- a/service/main.go
+++ b/service/main.go
@@ -9,6 +9,7 @@ import (
 	"fyne.io/fyne/v2/layout"
 	"fyne.io/fyne/v2/theme"
 	"fyne.io/fyne/v2/widget"
+	"github.com/adrianrudnik/ablegram/internal/access"
 	"github.com/adrianrudnik/ablegram/internal/collector"
 	"github.com/adrianrudnik/ablegram/internal/config"
 	"github.com/adrianrudnik/ablegram/internal/indexer"
@@ -96,6 +97,10 @@ func main() {
 	appTags := tagger.NewTagCollector()
 	appTags.WirePusher(pushChan)
 
+	// Start up the auth and otp services
+	appOtp := access.NewOtp()
+	appAuth := access.NewAuth(appOtp)
+
 	// Kick of the webservice
 	go func() {
 		if !appConfig.Behaviour.AutostartWebservice {
@@ -133,13 +138,15 @@ func main() {
 			}
 
 			time.Sleep(50 * time.Millisecond)
-			ui.OpenFrontend(appConfig)
+			ui.OpenFrontendAsAdmin(appConfig, appOtp)
 		}()
 
 		for _, port := range appConfig.Webservice.TryPorts {
 			appConfig.Webservice.ChosenPort = port
 			err := webservice.Serve(
 				appConfig,
+				appAuth,
+				appOtp,
 				appIndexer,
 				appTags,
 				appPusher,
@@ -177,7 +184,7 @@ func main() {
 
 		statusTxt := canvas.NewText("The service is processing files...", theme.ForegroundColor())
 		quitBtn := widget.NewButton("Shutdown", func() { a.Quit() })
-		startBtn := widget.NewButton("Open search", func() { ui.OpenFrontend(appConfig) })
+		startBtn := widget.NewButton("Open search", func() { ui.OpenFrontendAsAdmin(appConfig, appOtp) })
 
 		progressBar := widget.NewProgressBarInfinite()
 
diff --git a/website/docs/.vitepress/config.mts b/website/docs/.vitepress/config.mts
index 263bd6eb..d87ed760 100644
--- a/website/docs/.vitepress/config.mts
+++ b/website/docs/.vitepress/config.mts
@@ -41,6 +41,7 @@ export default defineConfig({
           {text: 'Introduction', link: '/introduction'},
           {text: 'Installation', link: '/installation'},
           {text: 'Live Demo', link: '/live-demo'},
+          {text: 'Guests & server access', link: '/guests-and-server-access.md'},
           {text: 'Service arguments', link: '/service-arguments'},
         ]
       },
@@ -94,6 +95,10 @@ export default defineConfig({
         items: [
           {text: 'Web API', link: '/push3/web-api'},
         ]
+      },
+      {
+        text: 'Thanks',
+        link: '/thanks/',
       }
     ],
 
diff --git a/website/docs/guests-and-server-access.md b/website/docs/guests-and-server-access.md
new file mode 100644
index 00000000..caf7e2f2
--- /dev/null
+++ b/website/docs/guests-and-server-access.md
@@ -0,0 +1,30 @@
+---
+description: Guest access allows you to share your Ablegram server with others. 
+---
+
+# Guest access to the server
+
+The Ablegram service provides the search frontend as a web-based application.
+
+This allows you and anyone else on the same LAN to access the search frontend using a web browser.
+
+## Restrictions
+
+As security is an important concern, the service is offered with the following restrictions:
+
+- Visitors who open the search frontend via the shared URL will be identified as guests.
+- Visitors arriving via the automatically opened browser window will be identified as admin.
+- Visitors arriving via the "Open Search" button in the GUI will be identified as admin.
+- Guests will not be able to change any settings.
+- Guests will not be able to download files.
+- Guests will not be able to perform any modifications or intrusive operations such as opening files and folders.
+
+## Advantages
+
+After all these restrictions, here is what the Guest service offers:
+
+- Guests can search and browse the library for you.
+- Guests can suggest a search result item to admins.
+- Guests can become admins using the [Master Password](./service-arguments#master-password-password) set by the admin.
+
+Other benefits will be added in the future as they are implemented and make sense in LAN or even WAN environments.
diff --git a/website/docs/live-demo.md b/website/docs/live-demo.md
index a8b8e78c..69ddf03f 100644
--- a/website/docs/live-demo.md
+++ b/website/docs/live-demo.md
@@ -6,12 +6,21 @@ description: A working read-only demo of a selection of Ableton projects is avai
 
 A working read-only demo of a selection of Ableton projects is available online.
 
-You can access this demo at [https://demo.ablegram.app/](https://demo.ablegram.app/).
+::: info Access to the live demo
+[https://demo.ablegram.app/](https://demo.ablegram.app/)
+
+To authenticate as admin, use the password `admintest`
+:::
 
 The demo itself is not a special build of Ablegram, but the same version available for download.
 
 It runs in an isolated container containing some sample project files. It is started with the following arguments
 
 ```bash
-ablegram -demo-mode -no-gui -no-browser -log-level debug
-```
\ No newline at end of file
+ablegram \
+  -demo-mode \
+  -no-gui \
+  -no-browser \
+  -master-password admintest \
+  -log-level debug
+```
diff --git a/website/docs/service-arguments.md b/website/docs/service-arguments.md
index 9355a8aa..a265bfed 100644
--- a/website/docs/service-arguments.md
+++ b/website/docs/service-arguments.md
@@ -70,3 +70,26 @@ This means that the indexer will continuously move possible payloads into the se
 The specified delay is defined in milliseconds.
 
 This introduces a pause between indexing, which can be helpful if you have a slower system.
+
+## Webservice flags
+
+The webservice is responsible for providing the API and websocket endpoints.
+
+### `-master-password={password}`
+
+The master password is used to protect the API endpoints. It is used to authenticate admins.
+
+### `-trusted-platform={header}`
+
+The service will attempt to identify the client's IP address for guest access.
+
+If the service is running behind a reverse proxy, the client's IP address will most likely be in a separate header.
+
+The service should handle most common `X-Forwarded-For` headers, but if you are using a different header, you can specify it using this flag.
+
+For example, if you need to host the service behind [Cloudflare](https://developers.cloudflare.com/fundamentals/reference/http-request-headers/#cf-connecting-ip), you could select their `CF-Connecting-IP` header.
+
+For [Google App Engine](https://cloud.google.com/appengine/docs/flexible/reference/request-headers#app_engine-specific_headers), you could select their `X-Appengine-User-Ip` header.
+
+This will allow the owning guest and all Admins to see the associated IP address of the Client.
+Guests will not be able to see the IP address of other guests.
diff --git a/website/docs/thanks/index.md b/website/docs/thanks/index.md
new file mode 100644
index 00000000..07d2d0bc
--- /dev/null
+++ b/website/docs/thanks/index.md
@@ -0,0 +1,27 @@
+---
+description: Thanks and mentions of people and projects that helped make Ablegram possible.
+---
+
+# My thanks
+
+A compiled list of OSS vendors who made this project possible in record time.
+
+## Frontend
+
+[Vue.js](https://vuejs.org/) - The frontend framework used to build the search frontend.
+
+[fyne.io](https://fyne.io/) - The GUI toolkit used to build the service GUI.
+
+[VitePress](https://vitepress.dev/) - The static site generator used to build the documentation.
+
+[VueUse](https://vueuse.org/) - The collection of useful Vue.js composition functions used in the search frontend.
+
+[PrimeVue](https://primevue.org/) - The Vue.js UI component library used in the search frontend.
+
+## Backend
+
+[Bleve](https://blevesearch.com/) - The search engine used to index and search all things that can run in-memory.
+
+[samber lo](https://github.com/samber/lo) - A nice collection of Go things you do not want to reinvent.
+
+[antchfx xpath](https://github.com/antchfx/xpath) - A nice XPath implementation for Go that allows me to spend more time processing and less time parsing.
diff --git a/website/package-lock.json b/website/package-lock.json
index 042659d8..9f0666cf 100644
--- a/website/package-lock.json
+++ b/website/package-lock.json
@@ -188,9 +188,9 @@
       }
     },
     "node_modules/@babel/parser": {
-      "version": "7.23.3",
-      "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.23.3.tgz",
-      "integrity": "sha512-uVsWNvlVsIninV2prNz/3lHCb+5CJ+e+IUBfbjToAHODtfGYLfCFuY4AU7TskI+dAKk+njsPiBjq1gKTvZOBaw==",
+      "version": "7.23.4",
+      "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.23.4.tgz",
+      "integrity": "sha512-vf3Xna6UEprW+7t6EtOmFpHNAuxw3xqPZghy+brsnusscJRW5BMUzzHZc5ICjULee81WeUV2jjakG09MDglJXQ==",
       "dev": true,
       "bin": {
         "parser": "bin/babel-parser.js"
@@ -248,9 +248,9 @@
       }
     },
     "node_modules/@esbuild/android-arm": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.19.5.tgz",
-      "integrity": "sha512-bhvbzWFF3CwMs5tbjf3ObfGqbl/17ict2/uwOSfr3wmxDE6VdS2GqY/FuzIPe0q0bdhj65zQsvqfArI9MY6+AA==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.19.7.tgz",
+      "integrity": "sha512-YGSPnndkcLo4PmVl2tKatEn+0mlVMr3yEpOOT0BeMria87PhvoJb5dg5f5Ft9fbCVgtAz4pWMzZVgSEGpDAlww==",
       "cpu": [
         "arm"
       ],
@@ -264,9 +264,9 @@
       }
     },
     "node_modules/@esbuild/android-arm64": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.19.5.tgz",
-      "integrity": "sha512-5d1OkoJxnYQfmC+Zd8NBFjkhyCNYwM4n9ODrycTFY6Jk1IGiZ+tjVJDDSwDt77nK+tfpGP4T50iMtVi4dEGzhQ==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.19.7.tgz",
+      "integrity": "sha512-YEDcw5IT7hW3sFKZBkCAQaOCJQLONVcD4bOyTXMZz5fr66pTHnAet46XAtbXAkJRfIn2YVhdC6R9g4xa27jQ1w==",
       "cpu": [
         "arm64"
       ],
@@ -280,9 +280,9 @@
       }
     },
     "node_modules/@esbuild/android-x64": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.19.5.tgz",
-      "integrity": "sha512-9t+28jHGL7uBdkBjL90QFxe7DVA+KGqWlHCF8ChTKyaKO//VLuoBricQCgwhOjA1/qOczsw843Fy4cbs4H3DVA==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.19.7.tgz",
+      "integrity": "sha512-jhINx8DEjz68cChFvM72YzrqfwJuFbfvSxZAk4bebpngGfNNRm+zRl4rtT9oAX6N9b6gBcFaJHFew5Blf6CvUw==",
       "cpu": [
         "x64"
       ],
@@ -296,9 +296,9 @@
       }
     },
     "node_modules/@esbuild/darwin-arm64": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.19.5.tgz",
-      "integrity": "sha512-mvXGcKqqIqyKoxq26qEDPHJuBYUA5KizJncKOAf9eJQez+L9O+KfvNFu6nl7SCZ/gFb2QPaRqqmG0doSWlgkqw==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.19.7.tgz",
+      "integrity": "sha512-dr81gbmWN//3ZnBIm6YNCl4p3pjnabg1/ZVOgz2fJoUO1a3mq9WQ/1iuEluMs7mCL+Zwv7AY5e3g1hjXqQZ9Iw==",
       "cpu": [
         "arm64"
       ],
@@ -312,9 +312,9 @@
       }
     },
     "node_modules/@esbuild/darwin-x64": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.19.5.tgz",
-      "integrity": "sha512-Ly8cn6fGLNet19s0X4unjcniX24I0RqjPv+kurpXabZYSXGM4Pwpmf85WHJN3lAgB8GSth7s5A0r856S+4DyiA==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.19.7.tgz",
+      "integrity": "sha512-Lc0q5HouGlzQEwLkgEKnWcSazqr9l9OdV2HhVasWJzLKeOt0PLhHaUHuzb8s/UIya38DJDoUm74GToZ6Wc7NGQ==",
       "cpu": [
         "x64"
       ],
@@ -328,9 +328,9 @@
       }
     },
     "node_modules/@esbuild/freebsd-arm64": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.19.5.tgz",
-      "integrity": "sha512-GGDNnPWTmWE+DMchq1W8Sd0mUkL+APvJg3b11klSGUDvRXh70JqLAO56tubmq1s2cgpVCSKYywEiKBfju8JztQ==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.19.7.tgz",
+      "integrity": "sha512-+y2YsUr0CxDFF7GWiegWjGtTUF6gac2zFasfFkRJPkMAuMy9O7+2EH550VlqVdpEEchWMynkdhC9ZjtnMiHImQ==",
       "cpu": [
         "arm64"
       ],
@@ -344,9 +344,9 @@
       }
     },
     "node_modules/@esbuild/freebsd-x64": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.19.5.tgz",
-      "integrity": "sha512-1CCwDHnSSoA0HNwdfoNY0jLfJpd7ygaLAp5EHFos3VWJCRX9DMwWODf96s9TSse39Br7oOTLryRVmBoFwXbuuQ==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.19.7.tgz",
+      "integrity": "sha512-CdXOxIbIzPJmJhrpmJTLx+o35NoiKBIgOvmvT+jeSadYiWJn0vFKsl+0bSG/5lwjNHoIDEyMYc/GAPR9jxusTA==",
       "cpu": [
         "x64"
       ],
@@ -360,9 +360,9 @@
       }
     },
     "node_modules/@esbuild/linux-arm": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.19.5.tgz",
-      "integrity": "sha512-lrWXLY/vJBzCPC51QN0HM71uWgIEpGSjSZZADQhq7DKhPcI6NH1IdzjfHkDQws2oNpJKpR13kv7/pFHBbDQDwQ==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.19.7.tgz",
+      "integrity": "sha512-Y+SCmWxsJOdQtjcBxoacn/pGW9HDZpwsoof0ttL+2vGcHokFlfqV666JpfLCSP2xLxFpF1lj7T3Ox3sr95YXww==",
       "cpu": [
         "arm"
       ],
@@ -376,9 +376,9 @@
       }
     },
     "node_modules/@esbuild/linux-arm64": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.19.5.tgz",
-      "integrity": "sha512-o3vYippBmSrjjQUCEEiTZ2l+4yC0pVJD/Dl57WfPwwlvFkrxoSO7rmBZFii6kQB3Wrn/6GwJUPLU5t52eq2meA==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.19.7.tgz",
+      "integrity": "sha512-inHqdOVCkUhHNvuQPT1oCB7cWz9qQ/Cz46xmVe0b7UXcuIJU3166aqSunsqkgSGMtUCWOZw3+KMwI6otINuC9g==",
       "cpu": [
         "arm64"
       ],
@@ -392,9 +392,9 @@
       }
     },
     "node_modules/@esbuild/linux-ia32": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.19.5.tgz",
-      "integrity": "sha512-MkjHXS03AXAkNp1KKkhSKPOCYztRtK+KXDNkBa6P78F8Bw0ynknCSClO/ztGszILZtyO/lVKpa7MolbBZ6oJtQ==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.19.7.tgz",
+      "integrity": "sha512-2BbiL7nLS5ZO96bxTQkdO0euGZIUQEUXMTrqLxKUmk/Y5pmrWU84f+CMJpM8+EHaBPfFSPnomEaQiG/+Gmh61g==",
       "cpu": [
         "ia32"
       ],
@@ -408,9 +408,9 @@
       }
     },
     "node_modules/@esbuild/linux-loong64": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.19.5.tgz",
-      "integrity": "sha512-42GwZMm5oYOD/JHqHska3Jg0r+XFb/fdZRX+WjADm3nLWLcIsN27YKtqxzQmGNJgu0AyXg4HtcSK9HuOk3v1Dw==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.19.7.tgz",
+      "integrity": "sha512-BVFQla72KXv3yyTFCQXF7MORvpTo4uTA8FVFgmwVrqbB/4DsBFWilUm1i2Oq6zN36DOZKSVUTb16jbjedhfSHw==",
       "cpu": [
         "loong64"
       ],
@@ -424,9 +424,9 @@
       }
     },
     "node_modules/@esbuild/linux-mips64el": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.19.5.tgz",
-      "integrity": "sha512-kcjndCSMitUuPJobWCnwQ9lLjiLZUR3QLQmlgaBfMX23UEa7ZOrtufnRds+6WZtIS9HdTXqND4yH8NLoVVIkcg==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.19.7.tgz",
+      "integrity": "sha512-DzAYckIaK+pS31Q/rGpvUKu7M+5/t+jI+cdleDgUwbU7KdG2eC3SUbZHlo6Q4P1CfVKZ1lUERRFP8+q0ob9i2w==",
       "cpu": [
         "mips64el"
       ],
@@ -440,9 +440,9 @@
       }
     },
     "node_modules/@esbuild/linux-ppc64": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.19.5.tgz",
-      "integrity": "sha512-yJAxJfHVm0ZbsiljbtFFP1BQKLc8kUF6+17tjQ78QjqjAQDnhULWiTA6u0FCDmYT1oOKS9PzZ2z0aBI+Mcyj7Q==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.19.7.tgz",
+      "integrity": "sha512-JQ1p0SmUteNdUaaiRtyS59GkkfTW0Edo+e0O2sihnY4FoZLz5glpWUQEKMSzMhA430ctkylkS7+vn8ziuhUugQ==",
       "cpu": [
         "ppc64"
       ],
@@ -456,9 +456,9 @@
       }
     },
     "node_modules/@esbuild/linux-riscv64": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.19.5.tgz",
-      "integrity": "sha512-5u8cIR/t3gaD6ad3wNt1MNRstAZO+aNyBxu2We8X31bA8XUNyamTVQwLDA1SLoPCUehNCymhBhK3Qim1433Zag==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.19.7.tgz",
+      "integrity": "sha512-xGwVJ7eGhkprY/nB7L7MXysHduqjpzUl40+XoYDGC4UPLbnG+gsyS1wQPJ9lFPcxYAaDXbdRXd1ACs9AE9lxuw==",
       "cpu": [
         "riscv64"
       ],
@@ -472,9 +472,9 @@
       }
     },
     "node_modules/@esbuild/linux-s390x": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.19.5.tgz",
-      "integrity": "sha512-Z6JrMyEw/EmZBD/OFEFpb+gao9xJ59ATsoTNlj39jVBbXqoZm4Xntu6wVmGPB/OATi1uk/DB+yeDPv2E8PqZGw==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.19.7.tgz",
+      "integrity": "sha512-U8Rhki5PVU0L0nvk+E8FjkV8r4Lh4hVEb9duR6Zl21eIEYEwXz8RScj4LZWA2i3V70V4UHVgiqMpszXvG0Yqhg==",
       "cpu": [
         "s390x"
       ],
@@ -488,9 +488,9 @@
       }
     },
     "node_modules/@esbuild/linux-x64": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.19.5.tgz",
-      "integrity": "sha512-psagl+2RlK1z8zWZOmVdImisMtrUxvwereIdyJTmtmHahJTKb64pAcqoPlx6CewPdvGvUKe2Jw+0Z/0qhSbG1A==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.19.7.tgz",
+      "integrity": "sha512-ZYZopyLhm4mcoZXjFt25itRlocKlcazDVkB4AhioiL9hOWhDldU9n38g62fhOI4Pth6vp+Mrd5rFKxD0/S+7aQ==",
       "cpu": [
         "x64"
       ],
@@ -504,9 +504,9 @@
       }
     },
     "node_modules/@esbuild/netbsd-x64": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.19.5.tgz",
-      "integrity": "sha512-kL2l+xScnAy/E/3119OggX8SrWyBEcqAh8aOY1gr4gPvw76la2GlD4Ymf832UCVbmuWeTf2adkZDK+h0Z/fB4g==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.19.7.tgz",
+      "integrity": "sha512-/yfjlsYmT1O3cum3J6cmGG16Fd5tqKMcg5D+sBYLaOQExheAJhqr8xOAEIuLo8JYkevmjM5zFD9rVs3VBcsjtQ==",
       "cpu": [
         "x64"
       ],
@@ -520,9 +520,9 @@
       }
     },
     "node_modules/@esbuild/openbsd-x64": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.19.5.tgz",
-      "integrity": "sha512-sPOfhtzFufQfTBgRnE1DIJjzsXukKSvZxloZbkJDG383q0awVAq600pc1nfqBcl0ice/WN9p4qLc39WhBShRTA==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.19.7.tgz",
+      "integrity": "sha512-MYDFyV0EW1cTP46IgUJ38OnEY5TaXxjoDmwiTXPjezahQgZd+j3T55Ht8/Q9YXBM0+T9HJygrSRGV5QNF/YVDQ==",
       "cpu": [
         "x64"
       ],
@@ -536,9 +536,9 @@
       }
     },
     "node_modules/@esbuild/sunos-x64": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.19.5.tgz",
-      "integrity": "sha512-dGZkBXaafuKLpDSjKcB0ax0FL36YXCvJNnztjKV+6CO82tTYVDSH2lifitJ29jxRMoUhgkg9a+VA/B03WK5lcg==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.19.7.tgz",
+      "integrity": "sha512-JcPvgzf2NN/y6X3UUSqP6jSS06V0DZAV/8q0PjsZyGSXsIGcG110XsdmuWiHM+pno7/mJF6fjH5/vhUz/vA9fw==",
       "cpu": [
         "x64"
       ],
@@ -552,9 +552,9 @@
       }
     },
     "node_modules/@esbuild/win32-arm64": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.19.5.tgz",
-      "integrity": "sha512-dWVjD9y03ilhdRQ6Xig1NWNgfLtf2o/STKTS+eZuF90fI2BhbwD6WlaiCGKptlqXlURVB5AUOxUj09LuwKGDTg==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.19.7.tgz",
+      "integrity": "sha512-ZA0KSYti5w5toax5FpmfcAgu3ZNJxYSRm0AW/Dao5up0YV1hDVof1NvwLomjEN+3/GMtaWDI+CIyJOMTRSTdMw==",
       "cpu": [
         "arm64"
       ],
@@ -568,9 +568,9 @@
       }
     },
     "node_modules/@esbuild/win32-ia32": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.19.5.tgz",
-      "integrity": "sha512-4liggWIA4oDgUxqpZwrDhmEfAH4d0iljanDOK7AnVU89T6CzHon/ony8C5LeOdfgx60x5cnQJFZwEydVlYx4iw==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.19.7.tgz",
+      "integrity": "sha512-CTOnijBKc5Jpk6/W9hQMMvJnsSYRYgveN6O75DTACCY18RA2nqka8dTZR+x/JqXCRiKk84+5+bRKXUSbbwsS0A==",
       "cpu": [
         "ia32"
       ],
@@ -584,9 +584,9 @@
       }
     },
     "node_modules/@esbuild/win32-x64": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.19.5.tgz",
-      "integrity": "sha512-czTrygUsB/jlM8qEW5MD8bgYU2Xg14lo6kBDXW6HdxKjh8M5PzETGiSHaz9MtbXBYDloHNUAUW2tMiKW4KM9Mw==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.19.7.tgz",
+      "integrity": "sha512-gRaP2sk6hc98N734luX4VpF318l3w+ofrtTu9j5L8EQXF+FzQKV6alCOHMVoJJHvVK/mGbwBXfOL1HETQu9IGQ==",
       "cpu": [
         "x64"
       ],
@@ -606,9 +606,9 @@
       "dev": true
     },
     "node_modules/@rollup/rollup-android-arm-eabi": {
-      "version": "4.5.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.5.0.tgz",
-      "integrity": "sha512-OINaBGY+Wc++U0rdr7BLuFClxcoWaVW3vQYqmQq6B3bqQ/2olkaoz+K8+af/Mmka/C2yN5j+L9scBkv4BtKsDA==",
+      "version": "4.5.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.5.1.tgz",
+      "integrity": "sha512-YaN43wTyEBaMqLDYeze+gQ4ZrW5RbTEGtT5o1GVDkhpdNcsLTnLRcLccvwy3E9wiDKWg9RIhuoy3JQKDRBfaZA==",
       "cpu": [
         "arm"
       ],
@@ -619,9 +619,9 @@
       ]
     },
     "node_modules/@rollup/rollup-android-arm64": {
-      "version": "4.5.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.5.0.tgz",
-      "integrity": "sha512-UdMf1pOQc4ZmUA/NTmKhgJTBimbSKnhPS2zJqucqFyBRFPnPDtwA8MzrGNTjDeQbIAWfpJVAlxejw+/lQyBK/w==",
+      "version": "4.5.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.5.1.tgz",
+      "integrity": "sha512-n1bX+LCGlQVuPlCofO0zOKe1b2XkFozAVRoczT+yxWZPGnkEAKTTYVOGZz8N4sKuBnKMxDbfhUsB1uwYdup/sw==",
       "cpu": [
         "arm64"
       ],
@@ -632,9 +632,9 @@
       ]
     },
     "node_modules/@rollup/rollup-darwin-arm64": {
-      "version": "4.5.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.5.0.tgz",
-      "integrity": "sha512-L0/CA5p/idVKI+c9PcAPGorH6CwXn6+J0Ys7Gg1axCbTPgI8MeMlhA6fLM9fK+ssFhqogMHFC8HDvZuetOii7w==",
+      "version": "4.5.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.5.1.tgz",
+      "integrity": "sha512-QqJBumdvfBqBBmyGHlKxje+iowZwrHna7pokj/Go3dV1PJekSKfmjKrjKQ/e6ESTGhkfPNLq3VXdYLAc+UtAQw==",
       "cpu": [
         "arm64"
       ],
@@ -645,9 +645,9 @@
       ]
     },
     "node_modules/@rollup/rollup-darwin-x64": {
-      "version": "4.5.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.5.0.tgz",
-      "integrity": "sha512-QZCbVqU26mNlLn8zi/XDDquNmvcr4ON5FYAHQQsyhrHx8q+sQi/6xduoznYXwk/KmKIXG5dLfR0CvY+NAWpFYQ==",
+      "version": "4.5.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.5.1.tgz",
+      "integrity": "sha512-RrkDNkR/P5AEQSPkxQPmd2ri8WTjSl0RYmuFOiEABkEY/FSg0a4riihWQGKDJ4LnV9gigWZlTMx2DtFGzUrYQw==",
       "cpu": [
         "x64"
       ],
@@ -658,9 +658,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-arm-gnueabihf": {
-      "version": "4.5.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.5.0.tgz",
-      "integrity": "sha512-VpSQ+xm93AeV33QbYslgf44wc5eJGYfYitlQzAi3OObu9iwrGXEnmu5S3ilkqE3Pr/FkgOiJKV/2p0ewf4Hrtg==",
+      "version": "4.5.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.5.1.tgz",
+      "integrity": "sha512-ZFPxvUZmE+fkB/8D9y/SWl/XaDzNSaxd1TJUSE27XAKlRpQ2VNce/86bGd9mEUgL3qrvjJ9XTGwoX0BrJkYK/A==",
       "cpu": [
         "arm"
       ],
@@ -671,9 +671,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-arm64-gnu": {
-      "version": "4.5.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.5.0.tgz",
-      "integrity": "sha512-OrEyIfpxSsMal44JpEVx9AEcGpdBQG1ZuWISAanaQTSMeStBW+oHWwOkoqR54bw3x8heP8gBOyoJiGg+fLY8qQ==",
+      "version": "4.5.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.5.1.tgz",
+      "integrity": "sha512-FEuAjzVIld5WVhu+M2OewLmjmbXWd3q7Zcx+Rwy4QObQCqfblriDMMS7p7+pwgjZoo9BLkP3wa9uglQXzsB9ww==",
       "cpu": [
         "arm64"
       ],
@@ -684,9 +684,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-arm64-musl": {
-      "version": "4.5.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.5.0.tgz",
-      "integrity": "sha512-1H7wBbQuE6igQdxMSTjtFfD+DGAudcYWhp106z/9zBA8OQhsJRnemO4XGavdzHpGhRtRxbgmUGdO3YQgrWf2RA==",
+      "version": "4.5.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.5.1.tgz",
+      "integrity": "sha512-f5Gs8WQixqGRtI0Iq/cMqvFYmgFzMinuJO24KRfnv7Ohi/HQclwrBCYkzQu1XfLEEt3DZyvveq9HWo4bLJf1Lw==",
       "cpu": [
         "arm64"
       ],
@@ -697,9 +697,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-x64-gnu": {
-      "version": "4.5.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.5.0.tgz",
-      "integrity": "sha512-FVyFI13tXw5aE65sZdBpNjPVIi4Q5mARnL/39UIkxvSgRAIqCo5sCpCELk0JtXHGee2owZz5aNLbWNfBHzr71Q==",
+      "version": "4.5.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.5.1.tgz",
+      "integrity": "sha512-CWPkPGrFfN2vj3mw+S7A/4ZaU3rTV7AkXUr08W9lNP+UzOvKLVf34tWCqrKrfwQ0NTk5GFqUr2XGpeR2p6R4gw==",
       "cpu": [
         "x64"
       ],
@@ -710,9 +710,9 @@
       ]
     },
     "node_modules/@rollup/rollup-linux-x64-musl": {
-      "version": "4.5.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.5.0.tgz",
-      "integrity": "sha512-eBPYl2sLpH/o8qbSz6vPwWlDyThnQjJfcDOGFbNjmjb44XKC1F5dQfakOsADRVrXCNzM6ZsSIPDG5dc6HHLNFg==",
+      "version": "4.5.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.5.1.tgz",
+      "integrity": "sha512-ZRETMFA0uVukUC9u31Ed1nx++29073goCxZtmZARwk5aF/ltuENaeTtRVsSQzFlzdd4J6L3qUm+EW8cbGt0CKQ==",
       "cpu": [
         "x64"
       ],
@@ -723,9 +723,9 @@
       ]
     },
     "node_modules/@rollup/rollup-win32-arm64-msvc": {
-      "version": "4.5.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.5.0.tgz",
-      "integrity": "sha512-xaOHIfLOZypoQ5U2I6rEaugS4IYtTgP030xzvrBf5js7p9WI9wik07iHmsKaej8Z83ZDxN5GyypfoyKV5O5TJA==",
+      "version": "4.5.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.5.1.tgz",
+      "integrity": "sha512-ihqfNJNb2XtoZMSCPeoo0cYMgU04ksyFIoOw5S0JUVbOhafLot+KD82vpKXOurE2+9o/awrqIxku9MRR9hozHQ==",
       "cpu": [
         "arm64"
       ],
@@ -736,9 +736,9 @@
       ]
     },
     "node_modules/@rollup/rollup-win32-ia32-msvc": {
-      "version": "4.5.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.5.0.tgz",
-      "integrity": "sha512-Al6quztQUrHwcOoU2TuFblUQ5L+/AmPBXFR6dUvyo4nRj2yQRK0WIUaGMF/uwKulvRcXkpHe3k9A8Vf93VDktA==",
+      "version": "4.5.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.5.1.tgz",
+      "integrity": "sha512-zK9MRpC8946lQ9ypFn4gLpdwr5a01aQ/odiIJeL9EbgZDMgbZjjT/XzTqJvDfTmnE1kHdbG20sAeNlpc91/wbg==",
       "cpu": [
         "ia32"
       ],
@@ -749,9 +749,9 @@
       ]
     },
     "node_modules/@rollup/rollup-win32-x64-msvc": {
-      "version": "4.5.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.5.0.tgz",
-      "integrity": "sha512-8kdW+brNhI/NzJ4fxDufuJUjepzINqJKLGHuxyAtpPG9bMbn8P5mtaCcbOm0EzLJ+atg+kF9dwg8jpclkVqx5w==",
+      "version": "4.5.1",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.5.1.tgz",
+      "integrity": "sha512-5I3Nz4Sb9TYOtkRwlH0ow+BhMH2vnh38tZ4J4mggE48M/YyJyp/0sPSxhw1UeS1+oBgQ8q7maFtSeKpeRJu41Q==",
       "cpu": [
         "x64"
       ],
@@ -761,6 +761,15 @@
         "win32"
       ]
     },
+    "node_modules/@types/hast": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/@types/hast/-/hast-3.0.3.tgz",
+      "integrity": "sha512-2fYGlaDy/qyLlhidX42wAH0KBi2TCjKMH8CHmBXgRlJ3Y+OXTiqsPQ6IWarZKwF1JoUcAJdPogv1d4b0COTpmQ==",
+      "dev": true,
+      "dependencies": {
+        "@types/unist": "*"
+      }
+    },
     "node_modules/@types/linkify-it": {
       "version": "3.0.5",
       "resolved": "https://registry.npmjs.org/@types/linkify-it/-/linkify-it-3.0.5.tgz",
@@ -768,27 +777,48 @@
       "dev": true
     },
     "node_modules/@types/markdown-it": {
-      "version": "13.0.6",
-      "resolved": "https://registry.npmjs.org/@types/markdown-it/-/markdown-it-13.0.6.tgz",
-      "integrity": "sha512-0VqpvusJn1/lwRegCxcHVdmLfF+wIsprsKMC9xW8UPcTxhFcQtoN/fBU1zMe8pH7D/RuueMh2CaBaNv+GrLqTw==",
+      "version": "13.0.7",
+      "resolved": "https://registry.npmjs.org/@types/markdown-it/-/markdown-it-13.0.7.tgz",
+      "integrity": "sha512-U/CBi2YUUcTHBt5tjO2r5QV/x0Po6nsYwQU4Y04fBS6vfoImaiZ6f8bi3CjTCxBPQSO1LMyUqkByzi8AidyxfA==",
       "dev": true,
       "dependencies": {
         "@types/linkify-it": "*",
         "@types/mdurl": "*"
       }
     },
+    "node_modules/@types/mdast": {
+      "version": "4.0.3",
+      "resolved": "https://registry.npmjs.org/@types/mdast/-/mdast-4.0.3.tgz",
+      "integrity": "sha512-LsjtqsyF+d2/yFOYaN22dHZI1Cpwkrj+g06G8+qtUKlhovPW89YhqSnfKtMbkgmEtYpH2gydRNULd6y8mciAFg==",
+      "dev": true,
+      "dependencies": {
+        "@types/unist": "*"
+      }
+    },
     "node_modules/@types/mdurl": {
       "version": "1.0.5",
       "resolved": "https://registry.npmjs.org/@types/mdurl/-/mdurl-1.0.5.tgz",
       "integrity": "sha512-6L6VymKTzYSrEf4Nev4Xa1LCHKrlTlYCBMTlQKFuddo1CvQcE52I0mwfOJayueUC7MJuXOeHTcIU683lzd0cUA==",
       "dev": true
     },
+    "node_modules/@types/unist": {
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/@types/unist/-/unist-3.0.2.tgz",
+      "integrity": "sha512-dqId9J8K/vGi5Zr7oo212BGii5m3q5Hxlkwy3WpYuKPklmBEvsbMYYyLxAQpSffdLl/gdW0XUpKWFvYmyoWCoQ==",
+      "dev": true
+    },
     "node_modules/@types/web-bluetooth": {
       "version": "0.0.20",
       "resolved": "https://registry.npmjs.org/@types/web-bluetooth/-/web-bluetooth-0.0.20.tgz",
       "integrity": "sha512-g9gZnnXVq7gM7v3tJCWV/qw7w+KeOlSHAhgF9RytFyifW6AF61hdT2ucrYhPq9hLs5JIryeupHV3qGk95dH9ow==",
       "dev": true
     },
+    "node_modules/@ungap/structured-clone": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/@ungap/structured-clone/-/structured-clone-1.2.0.tgz",
+      "integrity": "sha512-zuVdFrMJiuCDQUMCzQaD6KL28MjnqqN8XnAqiEq9PNm/hCPTSGfrXCOfwj1ow4LFb/tNymJPwsNbVePc1xFqrQ==",
+      "dev": true
+    },
     "node_modules/@vitejs/plugin-vue": {
       "version": "4.5.0",
       "resolved": "https://registry.npmjs.org/@vitejs/plugin-vue/-/plugin-vue-4.5.0.tgz",
@@ -1128,12 +1158,6 @@
         "@algolia/transporter": "4.20.0"
       }
     },
-    "node_modules/ansi-sequence-parser": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/ansi-sequence-parser/-/ansi-sequence-parser-1.1.1.tgz",
-      "integrity": "sha512-vJXt3yiaUL4UU546s3rPXlsry/RnM730G1+HkpKE012AN0sx1eOrxSu95oKDIonskeLTijMgqWZ3uDEe3NFvyg==",
-      "dev": true
-    },
     "node_modules/anymatch": {
       "version": "3.1.3",
       "resolved": "https://registry.npmjs.org/anymatch/-/anymatch-3.1.3.tgz",
@@ -1168,6 +1192,36 @@
         "node": ">=8"
       }
     },
+    "node_modules/ccount": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/ccount/-/ccount-2.0.1.tgz",
+      "integrity": "sha512-eyrF0jiFpY+3drT6383f1qhkbGsLSifNAjA61IUjZjmLCWjItY6LB9ft9YhoDgwfmclB2zhu51Lc7+95b8NRAg==",
+      "dev": true,
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
+    "node_modules/character-entities-html4": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/character-entities-html4/-/character-entities-html4-2.1.0.tgz",
+      "integrity": "sha512-1v7fgQRj6hnSwFpq1Eu0ynr/CDEw0rXo2B61qXrLNdHZmPKgb7fqS1a2JwF0rISo9q77jDI8VMEHoApn8qDoZA==",
+      "dev": true,
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
+    "node_modules/character-entities-legacy": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/character-entities-legacy/-/character-entities-legacy-3.0.0.tgz",
+      "integrity": "sha512-RpPp0asT/6ufRm//AJVwpViZbGM/MkjQFxJccQRHmISF/22NBtsHqAWmL+/pmkPWoIUJdWyeVleTl1wydHATVQ==",
+      "dev": true,
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
     "node_modules/chokidar": {
       "version": "3.5.3",
       "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-3.5.3.tgz",
@@ -1195,16 +1249,60 @@
         "fsevents": "~2.3.2"
       }
     },
+    "node_modules/comma-separated-tokens": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/comma-separated-tokens/-/comma-separated-tokens-2.0.3.tgz",
+      "integrity": "sha512-Fu4hJdvzeylCfQPp9SGWidpzrMs7tTrlu6Vb8XGaRGck8QSNZJJp538Wrb60Lax4fPwR64ViY468OIUTbRlGZg==",
+      "dev": true,
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
     "node_modules/csstype": {
       "version": "3.1.2",
       "resolved": "https://registry.npmjs.org/csstype/-/csstype-3.1.2.tgz",
       "integrity": "sha512-I7K1Uu0MBPzaFKg4nI5Q7Vs2t+3gWWW648spaF+Rg7pI9ds18Ugn+lvg4SHczUdKlHI5LWBXyqfS8+DufyBsgQ==",
       "dev": true
     },
+    "node_modules/dequal": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/dequal/-/dequal-2.0.3.tgz",
+      "integrity": "sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==",
+      "dev": true,
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/devlop": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/devlop/-/devlop-1.1.0.tgz",
+      "integrity": "sha512-RWmIqhcFf1lRYBvNmr7qTNuyCt/7/ns2jbpp1+PalgE/rDQcBT0fioSMUpJ93irlUhC5hrg4cYqe6U+0ImW0rA==",
+      "dev": true,
+      "dependencies": {
+        "dequal": "^2.0.0"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
+    "node_modules/entities": {
+      "version": "4.5.0",
+      "resolved": "https://registry.npmjs.org/entities/-/entities-4.5.0.tgz",
+      "integrity": "sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==",
+      "dev": true,
+      "engines": {
+        "node": ">=0.12"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/entities?sponsor=1"
+      }
+    },
     "node_modules/esbuild": {
-      "version": "0.19.5",
-      "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.19.5.tgz",
-      "integrity": "sha512-bUxalY7b1g8vNhQKdB24QDmHeY4V4tw/s6Ak5z+jJX9laP5MoQseTOMemAr0gxssjNcH0MCViG8ONI2kksvfFQ==",
+      "version": "0.19.7",
+      "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.19.7.tgz",
+      "integrity": "sha512-6brbTZVqxhqgbpqBR5MzErImcpA0SQdoKOkcWK/U30HtQxnokIpG3TX2r0IJqbFUzqLjhU/zC1S5ndgakObVCQ==",
       "dev": true,
       "hasInstallScript": true,
       "bin": {
@@ -1214,28 +1312,28 @@
         "node": ">=12"
       },
       "optionalDependencies": {
-        "@esbuild/android-arm": "0.19.5",
-        "@esbuild/android-arm64": "0.19.5",
-        "@esbuild/android-x64": "0.19.5",
-        "@esbuild/darwin-arm64": "0.19.5",
-        "@esbuild/darwin-x64": "0.19.5",
-        "@esbuild/freebsd-arm64": "0.19.5",
-        "@esbuild/freebsd-x64": "0.19.5",
-        "@esbuild/linux-arm": "0.19.5",
-        "@esbuild/linux-arm64": "0.19.5",
-        "@esbuild/linux-ia32": "0.19.5",
-        "@esbuild/linux-loong64": "0.19.5",
-        "@esbuild/linux-mips64el": "0.19.5",
-        "@esbuild/linux-ppc64": "0.19.5",
-        "@esbuild/linux-riscv64": "0.19.5",
-        "@esbuild/linux-s390x": "0.19.5",
-        "@esbuild/linux-x64": "0.19.5",
-        "@esbuild/netbsd-x64": "0.19.5",
-        "@esbuild/openbsd-x64": "0.19.5",
-        "@esbuild/sunos-x64": "0.19.5",
-        "@esbuild/win32-arm64": "0.19.5",
-        "@esbuild/win32-ia32": "0.19.5",
-        "@esbuild/win32-x64": "0.19.5"
+        "@esbuild/android-arm": "0.19.7",
+        "@esbuild/android-arm64": "0.19.7",
+        "@esbuild/android-x64": "0.19.7",
+        "@esbuild/darwin-arm64": "0.19.7",
+        "@esbuild/darwin-x64": "0.19.7",
+        "@esbuild/freebsd-arm64": "0.19.7",
+        "@esbuild/freebsd-x64": "0.19.7",
+        "@esbuild/linux-arm": "0.19.7",
+        "@esbuild/linux-arm64": "0.19.7",
+        "@esbuild/linux-ia32": "0.19.7",
+        "@esbuild/linux-loong64": "0.19.7",
+        "@esbuild/linux-mips64el": "0.19.7",
+        "@esbuild/linux-ppc64": "0.19.7",
+        "@esbuild/linux-riscv64": "0.19.7",
+        "@esbuild/linux-s390x": "0.19.7",
+        "@esbuild/linux-x64": "0.19.7",
+        "@esbuild/netbsd-x64": "0.19.7",
+        "@esbuild/openbsd-x64": "0.19.7",
+        "@esbuild/sunos-x64": "0.19.7",
+        "@esbuild/win32-arm64": "0.19.7",
+        "@esbuild/win32-ia32": "0.19.7",
+        "@esbuild/win32-x64": "0.19.7"
       }
     },
     "node_modules/estree-walker": {
@@ -1291,6 +1389,147 @@
         "node": ">= 6"
       }
     },
+    "node_modules/hast-util-from-parse5": {
+      "version": "8.0.1",
+      "resolved": "https://registry.npmjs.org/hast-util-from-parse5/-/hast-util-from-parse5-8.0.1.tgz",
+      "integrity": "sha512-Er/Iixbc7IEa7r/XLtuG52zoqn/b3Xng/w6aZQ0xGVxzhw5xUFxcRqdPzP6yFi/4HBYRaifaI5fQ1RH8n0ZeOQ==",
+      "dev": true,
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "@types/unist": "^3.0.0",
+        "devlop": "^1.0.0",
+        "hastscript": "^8.0.0",
+        "property-information": "^6.0.0",
+        "vfile": "^6.0.0",
+        "vfile-location": "^5.0.0",
+        "web-namespaces": "^2.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/hast-util-parse-selector": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/hast-util-parse-selector/-/hast-util-parse-selector-4.0.0.tgz",
+      "integrity": "sha512-wkQCkSYoOGCRKERFWcxMVMOcYE2K1AaNLU8DXS9arxnLOUEWbOXKXiJUNzEpqZ3JOKpnha3jkFrumEjVliDe7A==",
+      "dev": true,
+      "dependencies": {
+        "@types/hast": "^3.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/hast-util-raw": {
+      "version": "9.0.1",
+      "resolved": "https://registry.npmjs.org/hast-util-raw/-/hast-util-raw-9.0.1.tgz",
+      "integrity": "sha512-5m1gmba658Q+lO5uqL5YNGQWeh1MYWZbZmWrM5lncdcuiXuo5E2HT/CIOp0rLF8ksfSwiCVJ3twlgVRyTGThGA==",
+      "dev": true,
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "@types/unist": "^3.0.0",
+        "@ungap/structured-clone": "^1.0.0",
+        "hast-util-from-parse5": "^8.0.0",
+        "hast-util-to-parse5": "^8.0.0",
+        "html-void-elements": "^3.0.0",
+        "mdast-util-to-hast": "^13.0.0",
+        "parse5": "^7.0.0",
+        "unist-util-position": "^5.0.0",
+        "unist-util-visit": "^5.0.0",
+        "vfile": "^6.0.0",
+        "web-namespaces": "^2.0.0",
+        "zwitch": "^2.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/hast-util-to-html": {
+      "version": "9.0.0",
+      "resolved": "https://registry.npmjs.org/hast-util-to-html/-/hast-util-to-html-9.0.0.tgz",
+      "integrity": "sha512-IVGhNgg7vANuUA2XKrT6sOIIPgaYZnmLx3l/CCOAK0PtgfoHrZwX7jCSYyFxHTrGmC6S9q8aQQekjp4JPZF+cw==",
+      "dev": true,
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "@types/unist": "^3.0.0",
+        "ccount": "^2.0.0",
+        "comma-separated-tokens": "^2.0.0",
+        "hast-util-raw": "^9.0.0",
+        "hast-util-whitespace": "^3.0.0",
+        "html-void-elements": "^3.0.0",
+        "mdast-util-to-hast": "^13.0.0",
+        "property-information": "^6.0.0",
+        "space-separated-tokens": "^2.0.0",
+        "stringify-entities": "^4.0.0",
+        "zwitch": "^2.0.4"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/hast-util-to-parse5": {
+      "version": "8.0.0",
+      "resolved": "https://registry.npmjs.org/hast-util-to-parse5/-/hast-util-to-parse5-8.0.0.tgz",
+      "integrity": "sha512-3KKrV5ZVI8if87DVSi1vDeByYrkGzg4mEfeu4alwgmmIeARiBLKCZS2uw5Gb6nU9x9Yufyj3iudm6i7nl52PFw==",
+      "dev": true,
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "comma-separated-tokens": "^2.0.0",
+        "devlop": "^1.0.0",
+        "property-information": "^6.0.0",
+        "space-separated-tokens": "^2.0.0",
+        "web-namespaces": "^2.0.0",
+        "zwitch": "^2.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/hast-util-whitespace": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/hast-util-whitespace/-/hast-util-whitespace-3.0.0.tgz",
+      "integrity": "sha512-88JUN06ipLwsnv+dVn+OIYOvAuvBMy/Qoi6O7mQHxdPXpjy+Cd6xRkWwux7DKO+4sYILtLBRIKgsdpS2gQc7qw==",
+      "dev": true,
+      "dependencies": {
+        "@types/hast": "^3.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/hastscript": {
+      "version": "8.0.0",
+      "resolved": "https://registry.npmjs.org/hastscript/-/hastscript-8.0.0.tgz",
+      "integrity": "sha512-dMOtzCEd3ABUeSIISmrETiKuyydk1w0pa+gE/uormcTpSYuaNJPbX1NU3JLyscSLjwAQM8bWMhhIlnCqnRvDTw==",
+      "dev": true,
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "comma-separated-tokens": "^2.0.0",
+        "hast-util-parse-selector": "^4.0.0",
+        "property-information": "^6.0.0",
+        "space-separated-tokens": "^2.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/html-void-elements": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/html-void-elements/-/html-void-elements-3.0.0.tgz",
+      "integrity": "sha512-bEqo66MRXsUGxWHV5IP0PUiAWwoEjba4VCzg0LjFJBpchPaTfyfCKTG6bc5F8ucKec3q5y6qOdGyYTSBEvhCrg==",
+      "dev": true,
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
     "node_modules/immutable": {
       "version": "4.3.4",
       "resolved": "https://registry.npmjs.org/immutable/-/immutable-4.3.4.tgz",
@@ -1339,12 +1578,6 @@
         "node": ">=0.12.0"
       }
     },
-    "node_modules/jsonc-parser": {
-      "version": "3.2.0",
-      "resolved": "https://registry.npmjs.org/jsonc-parser/-/jsonc-parser-3.2.0.tgz",
-      "integrity": "sha512-gfFQZrcTc8CnKXp6Y4/CBT3fTc0OVuDofpre4aEeEpSBPV5X5v4+Vmx+8snU7RLPrNHPKSgLxGo9YuQzz20o+w==",
-      "dev": true
-    },
     "node_modules/magic-string": {
       "version": "0.30.5",
       "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.5.tgz",
@@ -1363,10 +1596,119 @@
       "integrity": "sha512-1I+1qpDt4idfgLQG+BNWmrqku+7/2bi5nLf4YwF8y8zXvmfiTBY3PV3ZibfrjBueCByROpuBjLLFCajqkgYoLQ==",
       "dev": true
     },
+    "node_modules/mdast-util-to-hast": {
+      "version": "13.0.2",
+      "resolved": "https://registry.npmjs.org/mdast-util-to-hast/-/mdast-util-to-hast-13.0.2.tgz",
+      "integrity": "sha512-U5I+500EOOw9e3ZrclN3Is3fRpw8c19SMyNZlZ2IS+7vLsNzb2Om11VpIVOR+/0137GhZsFEF6YiKD5+0Hr2Og==",
+      "dev": true,
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "@types/mdast": "^4.0.0",
+        "@ungap/structured-clone": "^1.0.0",
+        "devlop": "^1.0.0",
+        "micromark-util-sanitize-uri": "^2.0.0",
+        "trim-lines": "^3.0.0",
+        "unist-util-position": "^5.0.0",
+        "unist-util-visit": "^5.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/micromark-util-character": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/micromark-util-character/-/micromark-util-character-2.0.1.tgz",
+      "integrity": "sha512-3wgnrmEAJ4T+mGXAUfMvMAbxU9RDG43XmGce4j6CwPtVxB3vfwXSZ6KhFwDzZ3mZHhmPimMAXg71veiBGzeAZw==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "GitHub Sponsors",
+          "url": "https://github.com/sponsors/unifiedjs"
+        },
+        {
+          "type": "OpenCollective",
+          "url": "https://opencollective.com/unified"
+        }
+      ],
+      "dependencies": {
+        "micromark-util-symbol": "^2.0.0",
+        "micromark-util-types": "^2.0.0"
+      }
+    },
+    "node_modules/micromark-util-encode": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/micromark-util-encode/-/micromark-util-encode-2.0.0.tgz",
+      "integrity": "sha512-pS+ROfCXAGLWCOc8egcBvT0kf27GoWMqtdarNfDcjb6YLuV5cM3ioG45Ys2qOVqeqSbjaKg72vU+Wby3eddPsA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "GitHub Sponsors",
+          "url": "https://github.com/sponsors/unifiedjs"
+        },
+        {
+          "type": "OpenCollective",
+          "url": "https://opencollective.com/unified"
+        }
+      ]
+    },
+    "node_modules/micromark-util-sanitize-uri": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/micromark-util-sanitize-uri/-/micromark-util-sanitize-uri-2.0.0.tgz",
+      "integrity": "sha512-WhYv5UEcZrbAtlsnPuChHUAsu/iBPOVaEVsntLBIdpibO0ddy8OzavZz3iL2xVvBZOpolujSliP65Kq0/7KIYw==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "GitHub Sponsors",
+          "url": "https://github.com/sponsors/unifiedjs"
+        },
+        {
+          "type": "OpenCollective",
+          "url": "https://opencollective.com/unified"
+        }
+      ],
+      "dependencies": {
+        "micromark-util-character": "^2.0.0",
+        "micromark-util-encode": "^2.0.0",
+        "micromark-util-symbol": "^2.0.0"
+      }
+    },
+    "node_modules/micromark-util-symbol": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/micromark-util-symbol/-/micromark-util-symbol-2.0.0.tgz",
+      "integrity": "sha512-8JZt9ElZ5kyTnO94muPxIGS8oyElRJaiJO8EzV6ZSyGQ1Is8xwl4Q45qU5UOg+bGH4AikWziz0iN4sFLWs8PGw==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "GitHub Sponsors",
+          "url": "https://github.com/sponsors/unifiedjs"
+        },
+        {
+          "type": "OpenCollective",
+          "url": "https://opencollective.com/unified"
+        }
+      ]
+    },
+    "node_modules/micromark-util-types": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/micromark-util-types/-/micromark-util-types-2.0.0.tgz",
+      "integrity": "sha512-oNh6S2WMHWRZrmutsRmDDfkzKtxF+bc2VxLC9dvtrDIRFln627VsFP6fLMgTryGDljgLPjkrzQSDcPrjPyDJ5w==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "GitHub Sponsors",
+          "url": "https://github.com/sponsors/unifiedjs"
+        },
+        {
+          "type": "OpenCollective",
+          "url": "https://opencollective.com/unified"
+        }
+      ]
+    },
     "node_modules/minisearch": {
-      "version": "6.2.0",
-      "resolved": "https://registry.npmjs.org/minisearch/-/minisearch-6.2.0.tgz",
-      "integrity": "sha512-BECkorDF1TY2rGKt9XHdSeP9TP29yUbrAaCh/C03wpyf1vx3uYcP/+8XlMcpTkgoU0rBVnHMAOaP83Rc9Tm+TQ==",
+      "version": "6.3.0",
+      "resolved": "https://registry.npmjs.org/minisearch/-/minisearch-6.3.0.tgz",
+      "integrity": "sha512-ihFnidEeU8iXzcVHy74dhkxh/dn8Dc08ERl0xwoMMGqp4+LvRSCgicb+zGqWthVokQKvCSxITlh3P08OzdTYCQ==",
       "dev": true
     },
     "node_modules/mrmime": {
@@ -1405,6 +1747,18 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/parse5": {
+      "version": "7.1.2",
+      "resolved": "https://registry.npmjs.org/parse5/-/parse5-7.1.2.tgz",
+      "integrity": "sha512-Czj1WaSVpaoj0wbhMzLmWD69anp2WH7FXMB9n1Sy8/ZFF9jolSQVMu1Ij5WIyGmcBmhk7EOndpO4mIpihVqAXw==",
+      "dev": true,
+      "dependencies": {
+        "entities": "^4.4.0"
+      },
+      "funding": {
+        "url": "https://github.com/inikulin/parse5?sponsor=1"
+      }
+    },
     "node_modules/picocolors": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.0.0.tgz",
@@ -1461,6 +1815,16 @@
         "url": "https://opencollective.com/preact"
       }
     },
+    "node_modules/property-information": {
+      "version": "6.4.0",
+      "resolved": "https://registry.npmjs.org/property-information/-/property-information-6.4.0.tgz",
+      "integrity": "sha512-9t5qARVofg2xQqKtytzt+lZ4d1Qvj8t5B8fEwXK6qOfgRLgH/b13QlgEyDh033NOS31nXeFbYv7CLUDG1CeifQ==",
+      "dev": true,
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
     "node_modules/readdirp": {
       "version": "3.6.0",
       "resolved": "https://registry.npmjs.org/readdirp/-/readdirp-3.6.0.tgz",
@@ -1474,9 +1838,9 @@
       }
     },
     "node_modules/rollup": {
-      "version": "4.5.0",
-      "resolved": "https://registry.npmjs.org/rollup/-/rollup-4.5.0.tgz",
-      "integrity": "sha512-41xsWhzxqjMDASCxH5ibw1mXk+3c4TNI2UjKbLxe6iEzrSQnqOzmmK8/3mufCPbzHNJ2e04Fc1ddI35hHy+8zg==",
+      "version": "4.5.1",
+      "resolved": "https://registry.npmjs.org/rollup/-/rollup-4.5.1.tgz",
+      "integrity": "sha512-0EQribZoPKpb5z1NW/QYm3XSR//Xr8BeEXU49Lc/mQmpmVVG5jPUVrpc2iptup/0WMrY9mzas0fxH+TjYvG2CA==",
       "dev": true,
       "bin": {
         "rollup": "dist/bin/rollup"
@@ -1486,18 +1850,18 @@
         "npm": ">=8.0.0"
       },
       "optionalDependencies": {
-        "@rollup/rollup-android-arm-eabi": "4.5.0",
-        "@rollup/rollup-android-arm64": "4.5.0",
-        "@rollup/rollup-darwin-arm64": "4.5.0",
-        "@rollup/rollup-darwin-x64": "4.5.0",
-        "@rollup/rollup-linux-arm-gnueabihf": "4.5.0",
-        "@rollup/rollup-linux-arm64-gnu": "4.5.0",
-        "@rollup/rollup-linux-arm64-musl": "4.5.0",
-        "@rollup/rollup-linux-x64-gnu": "4.5.0",
-        "@rollup/rollup-linux-x64-musl": "4.5.0",
-        "@rollup/rollup-win32-arm64-msvc": "4.5.0",
-        "@rollup/rollup-win32-ia32-msvc": "4.5.0",
-        "@rollup/rollup-win32-x64-msvc": "4.5.0",
+        "@rollup/rollup-android-arm-eabi": "4.5.1",
+        "@rollup/rollup-android-arm64": "4.5.1",
+        "@rollup/rollup-darwin-arm64": "4.5.1",
+        "@rollup/rollup-darwin-x64": "4.5.1",
+        "@rollup/rollup-linux-arm-gnueabihf": "4.5.1",
+        "@rollup/rollup-linux-arm64-gnu": "4.5.1",
+        "@rollup/rollup-linux-arm64-musl": "4.5.1",
+        "@rollup/rollup-linux-x64-gnu": "4.5.1",
+        "@rollup/rollup-linux-x64-musl": "4.5.1",
+        "@rollup/rollup-win32-arm64-msvc": "4.5.1",
+        "@rollup/rollup-win32-ia32-msvc": "4.5.1",
+        "@rollup/rollup-win32-x64-msvc": "4.5.1",
         "fsevents": "~2.3.2"
       }
     },
@@ -1525,16 +1889,22 @@
       "dev": true,
       "peer": true
     },
-    "node_modules/shiki": {
-      "version": "0.14.5",
-      "resolved": "https://registry.npmjs.org/shiki/-/shiki-0.14.5.tgz",
-      "integrity": "sha512-1gCAYOcmCFONmErGTrS1fjzJLA7MGZmKzrBNX7apqSwhyITJg2O102uFzXUeBxNnEkDA9vHIKLyeKq0V083vIw==",
+    "node_modules/shikiji": {
+      "version": "0.7.4",
+      "resolved": "https://registry.npmjs.org/shikiji/-/shikiji-0.7.4.tgz",
+      "integrity": "sha512-N5dmPvyhH/zfcsuWysUEAMwRJDMz26LUns2VEUs5y4Ozbf5jkAODU0Yswjcf/tZAwpFnk5x3y34dupFMnF2+NA==",
       "dev": true,
       "dependencies": {
-        "ansi-sequence-parser": "^1.1.0",
-        "jsonc-parser": "^3.2.0",
-        "vscode-oniguruma": "^1.7.0",
-        "vscode-textmate": "^8.0.0"
+        "hast-util-to-html": "^9.0.0"
+      }
+    },
+    "node_modules/shikiji-transformers": {
+      "version": "0.7.4",
+      "resolved": "https://registry.npmjs.org/shikiji-transformers/-/shikiji-transformers-0.7.4.tgz",
+      "integrity": "sha512-oykilNekcW2FnRGbvZm+RNWHYroSeCVMOaMMwAbxozZgpTdcJtHoA+1+MDFw6/o2hCkX88kKbxG6FwAZoUZ6WQ==",
+      "dev": true,
+      "dependencies": {
+        "shikiji": "0.7.4"
       }
     },
     "node_modules/source-map-js": {
@@ -1546,6 +1916,30 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/space-separated-tokens": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/space-separated-tokens/-/space-separated-tokens-2.0.2.tgz",
+      "integrity": "sha512-PEGlAwrG8yXGXRjW32fGbg66JAlOAwbObuqVoJpv/mRgoWDQfgH1wDPvtzWyUSNAXBGSk8h755YDbbcEy3SH2Q==",
+      "dev": true,
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
+    "node_modules/stringify-entities": {
+      "version": "4.0.3",
+      "resolved": "https://registry.npmjs.org/stringify-entities/-/stringify-entities-4.0.3.tgz",
+      "integrity": "sha512-BP9nNHMhhfcMbiuQKCqMjhDP5yBCAxsPu4pHFFzJ6Alo9dZgY4VLDPutXqIjpRiMoKdp7Av85Gr73Q5uH9k7+g==",
+      "dev": true,
+      "dependencies": {
+        "character-entities-html4": "^2.0.0",
+        "character-entities-legacy": "^3.0.0"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
     "node_modules/tabbable": {
       "version": "6.2.0",
       "resolved": "https://registry.npmjs.org/tabbable/-/tabbable-6.2.0.tgz",
@@ -1564,10 +1958,20 @@
         "node": ">=8.0"
       }
     },
+    "node_modules/trim-lines": {
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/trim-lines/-/trim-lines-3.0.1.tgz",
+      "integrity": "sha512-kRj8B+YHZCc9kQYdWfJB2/oUl9rA99qbowYYBtr4ui4mZyAQ2JpvVBd/6U2YloATfqBhBTSMhTpgBHtU0Mf3Rg==",
+      "dev": true,
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
     "node_modules/typescript": {
-      "version": "5.2.2",
-      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.2.2.tgz",
-      "integrity": "sha512-mI4WrpHsbCIcwT9cF4FZvr80QUeKvsUsUvKDoR+X/7XHQH98xYD8YHZg7ANtz2GtZt/CBq2QJ0thkGJMHfqc1w==",
+      "version": "5.3.2",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.3.2.tgz",
+      "integrity": "sha512-6l+RyNy7oAHDfxC4FzSJcz9vnjTKxrLpDG5M2Vu4SHRVNg6xzqZp6LYSR9zjqQTu8DU/f5xwxUdADOkbrIX2gQ==",
       "dev": true,
       "bin": {
         "tsc": "bin/tsc",
@@ -1577,10 +1981,121 @@
         "node": ">=14.17"
       }
     },
-    "node_modules/vite": {
+    "node_modules/unist-util-is": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/unist-util-is/-/unist-util-is-6.0.0.tgz",
+      "integrity": "sha512-2qCTHimwdxLfz+YzdGfkqNlH0tLi9xjTnHddPmJwtIG9MGsdbutfTc4P+haPD7l7Cjxf/WZj+we5qfVPvvxfYw==",
+      "dev": true,
+      "dependencies": {
+        "@types/unist": "^3.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/unist-util-position": {
       "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/vite/-/vite-5.0.0.tgz",
-      "integrity": "sha512-ESJVM59mdyGpsiNAeHQOR/0fqNoOyWPYesFto8FFZugfmhdHx8Fzd8sF3Q/xkVhZsyOxHfdM7ieiVAorI9RjFw==",
+      "resolved": "https://registry.npmjs.org/unist-util-position/-/unist-util-position-5.0.0.tgz",
+      "integrity": "sha512-fucsC7HjXvkB5R3kTCO7kUjRdrS0BJt3M/FPxmHMBOm8JQi2BsHAHFsy27E0EolP8rp0NzXsJ+jNPyDWvOJZPA==",
+      "dev": true,
+      "dependencies": {
+        "@types/unist": "^3.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/unist-util-stringify-position": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/unist-util-stringify-position/-/unist-util-stringify-position-4.0.0.tgz",
+      "integrity": "sha512-0ASV06AAoKCDkS2+xw5RXJywruurpbC4JZSm7nr7MOt1ojAzvyyaO+UxZf18j8FCF6kmzCZKcAgN/yu2gm2XgQ==",
+      "dev": true,
+      "dependencies": {
+        "@types/unist": "^3.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/unist-util-visit": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/unist-util-visit/-/unist-util-visit-5.0.0.tgz",
+      "integrity": "sha512-MR04uvD+07cwl/yhVuVWAtw+3GOR/knlL55Nd/wAdblk27GCVt3lqpTivy/tkJcZoNPzTwS1Y+KMojlLDhoTzg==",
+      "dev": true,
+      "dependencies": {
+        "@types/unist": "^3.0.0",
+        "unist-util-is": "^6.0.0",
+        "unist-util-visit-parents": "^6.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/unist-util-visit-parents": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/unist-util-visit-parents/-/unist-util-visit-parents-6.0.1.tgz",
+      "integrity": "sha512-L/PqWzfTP9lzzEa6CKs0k2nARxTdZduw3zyh8d2NVBnsyvHjSX4TWse388YrrQKbvI8w20fGjGlhgT96WwKykw==",
+      "dev": true,
+      "dependencies": {
+        "@types/unist": "^3.0.0",
+        "unist-util-is": "^6.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/vfile": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/vfile/-/vfile-6.0.1.tgz",
+      "integrity": "sha512-1bYqc7pt6NIADBJ98UiG0Bn/CHIVOoZ/IyEkqIruLg0mE1BKzkOXY2D6CSqQIcKqgadppE5lrxgWXJmXd7zZJw==",
+      "dev": true,
+      "dependencies": {
+        "@types/unist": "^3.0.0",
+        "unist-util-stringify-position": "^4.0.0",
+        "vfile-message": "^4.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/vfile-location": {
+      "version": "5.0.2",
+      "resolved": "https://registry.npmjs.org/vfile-location/-/vfile-location-5.0.2.tgz",
+      "integrity": "sha512-NXPYyxyBSH7zB5U6+3uDdd6Nybz6o6/od9rk8bp9H8GR3L+cm/fC0uUTbqBmUTnMCUDslAGBOIKNfvvb+gGlDg==",
+      "dev": true,
+      "dependencies": {
+        "@types/unist": "^3.0.0",
+        "vfile": "^6.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/vfile-message": {
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/vfile-message/-/vfile-message-4.0.2.tgz",
+      "integrity": "sha512-jRDZ1IMLttGj41KcZvlrYAaI3CfqpLpfpf+Mfig13viT6NKvRzWZ+lXz0Y5D60w6uJIBAOGq9mSHf0gktF0duw==",
+      "dev": true,
+      "dependencies": {
+        "@types/unist": "^3.0.0",
+        "unist-util-stringify-position": "^4.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/vite": {
+      "version": "5.0.2",
+      "resolved": "https://registry.npmjs.org/vite/-/vite-5.0.2.tgz",
+      "integrity": "sha512-6CCq1CAJCNM1ya2ZZA7+jS2KgnhbzvxakmlIjN24cF/PXhRMzpM/z8QgsVJA/Dm5fWUWnVEsmtBoMhmerPxT0g==",
       "dev": true,
       "dependencies": {
         "esbuild": "^0.19.3",
@@ -1633,24 +2148,25 @@
       }
     },
     "node_modules/vitepress": {
-      "version": "1.0.0-rc.28",
-      "resolved": "https://registry.npmjs.org/vitepress/-/vitepress-1.0.0-rc.28.tgz",
-      "integrity": "sha512-cB0DNhX1jgmyZxPSrH5E+YpgpSlLuDL4ec9UjeqTe/Si1+MEvIJRgifB0RjGfojKa+gkSo97nLO6WN+iFgtgXQ==",
+      "version": "1.0.0-rc.30",
+      "resolved": "https://registry.npmjs.org/vitepress/-/vitepress-1.0.0-rc.30.tgz",
+      "integrity": "sha512-OolAbFU2hjs0KuIpPq0wRd4vJlTMvrFgHSh/hB+XQid7U31KtB6F1NxWihMwKkwncpxu9mt2Somet5AGiyTgPA==",
       "dev": true,
       "dependencies": {
         "@docsearch/css": "^3.5.2",
         "@docsearch/js": "^3.5.2",
-        "@types/markdown-it": "^13.0.6",
+        "@types/markdown-it": "^13.0.7",
         "@vitejs/plugin-vue": "^4.5.0",
         "@vue/devtools-api": "^6.5.1",
         "@vueuse/core": "^10.6.1",
         "@vueuse/integrations": "^10.6.1",
         "focus-trap": "^7.5.4",
         "mark.js": "8.11.1",
-        "minisearch": "^6.2.0",
+        "minisearch": "^6.3.0",
         "mrmime": "^1.0.1",
-        "shiki": "^0.14.5",
-        "vite": "^5.0.0",
+        "shikiji": "^0.7.2",
+        "shikiji-transformers": "^0.7.2",
+        "vite": "^5.0.2",
         "vue": "^3.3.8"
       },
       "bin": {
@@ -1669,18 +2185,6 @@
         }
       }
     },
-    "node_modules/vscode-oniguruma": {
-      "version": "1.7.0",
-      "resolved": "https://registry.npmjs.org/vscode-oniguruma/-/vscode-oniguruma-1.7.0.tgz",
-      "integrity": "sha512-L9WMGRfrjOhgHSdOYgCt/yRMsXzLDJSL7BPrOZt73gU0iWO4mpqzqQzOz5srxqTvMBaR0XZTSrVWo4j55Rc6cA==",
-      "dev": true
-    },
-    "node_modules/vscode-textmate": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/vscode-textmate/-/vscode-textmate-8.0.0.tgz",
-      "integrity": "sha512-AFbieoL7a5LMqcnOF04ji+rpXadgOXnZsxQr//r83kLPr7biP7am3g9zbaZIaBGwBRWeSvoMD4mgPdX3e4NWBg==",
-      "dev": true
-    },
     "node_modules/vue": {
       "version": "3.3.8",
       "resolved": "https://registry.npmjs.org/vue/-/vue-3.3.8.tgz",
@@ -1701,6 +2205,26 @@
           "optional": true
         }
       }
+    },
+    "node_modules/web-namespaces": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/web-namespaces/-/web-namespaces-2.0.1.tgz",
+      "integrity": "sha512-bKr1DkiNa2krS7qxNtdrtHAmzuYGFQLiQ13TsorsdT6ULTkPLKuu5+GsFpDlg6JFjUTwX2DyhMPG2be8uPrqsQ==",
+      "dev": true,
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
+    "node_modules/zwitch": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/zwitch/-/zwitch-2.0.4.tgz",
+      "integrity": "sha512-bXE4cR/kVZhKZX/RjPEflHaKVhUVl85noU3v6b8apfQEc1x4A+zBxjZ4lN8LqGd6WZ3dl98pY4o717VFmoPp+A==",
+      "dev": true,
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
     }
   }
 }