--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/src/lib/User.luan	Fri Jul 11 20:57:49 2025 -0600
@@ -0,0 +1,180 @@
+local Luan = require "luan:Luan.luan"
+local error = Luan.error
+local ipairs = Luan.ipairs or error()
+local range = Luan.range or error()
+local to_string = Luan.to_string or error()
+local get_local_only = Luan.get_local_only or error()
+local set_local_only = Luan.set_local_only or error()
+local String = require "luan:String.luan"
+local regex = String.regex or error()
+local Math = require "luan:Math.luan"
+local random = Math.random or error()
+local Table = require "luan:Table.luan"
+local concat = Table.concat or error()
+local Html = require "luan:Html.luan"
+local html_encode = Html.encode or error()
+local Lucene = require "luan:lucene/Lucene.luan"
+local lucene_quote = Lucene.quote or error()
+local Http = require "luan:http/Http.luan"
+local Db = require "site:/lib/Db.luan"
+local Utils = require "site:/lib/Utils.luan"
+local long_or_nil = Utils.long_or_nil or error()
+local Uploadcare = require "site:/lib/Uploadcare.luan"
+local uploadcare_url = Uploadcare.url or error()
+local uploadcare_thumb_url = Uploadcare.thumb_url or error()
+local Logging = require "luan:logging/Logging.luan"
+local logger = Logging.logger "User"
+
+
+local User = {}
+
+local function from_doc(doc)
+	doc.type == "user" or error "wrong type"
+	return User.new {
+		id = doc.id
+		email = doc.user_email
+		password = doc.password
+		name = doc.user_name
+		code = doc.code
+		registered = doc.user_registered
+		new_email = doc.new_email
+		pic_uuid = doc.pic_uuid
+		pic_filename = doc.pic_filename
+		title = doc.title
+		bio = doc.bio
+		theme_data = doc.theme_data
+		theme_date = doc.theme_date
+		mp_id = doc.mp_id
+		source = doc.source or doc.seller
+	}
+end
+
+local function to_doc(user)
+	return {
+		type = "user"
+		id = user.id
+		user_email = user.email
+		password = user.password
+		user_name = user.name
+		code = user.code
+		user_registered = long_or_nil(user.registered)
+		new_email = user.new_email
+		pic_uuid = user.pic_uuid
+		pic_filename = user.pic_filename
+		title = user.title
+		bio = user.bio
+		theme_data = user.theme_data
+		theme_date = long_or_nil(user.theme_date)
+		mp_id = user.mp_id
+		source = user.source
+	}
+end
+
+function User.new(user)
+
+	function user.save()
+		local doc = to_doc(user)
+		Db.save(doc)
+		user.id = doc.id
+	end
+
+	function user.reload()
+		return User.get_by_id(user.id) or error(user.id)
+	end
+
+	function user.delete()
+		Db.run_in_transaction( function()
+			local id = user.id
+			Db.delete("icon_user_id:"..id)
+			Db.delete("link_user_id:"..id)
+			Db.delete("pic_user_id:"..id)
+			Db.delete("id:"..id)
+		end )
+	end
+
+	function user.login()
+		local id = to_string(user.id)
+		Http.response.set_persistent_cookie("user",id)
+		Http.response.set_persistent_cookie("password",user.password)
+		Http.request.cookies.user = id
+		Http.request.cookies.password = user.password or error()
+	end
+
+	function user.html_title()
+		return html_encode(user.title or user.name)
+	end
+
+	function user.get_pic_url()
+		local pic_uuid = user.pic_uuid
+		return pic_uuid and uploadcare_thumb_url(pic_uuid)
+	end
+
+	return user
+end
+
+local function get_by_id(id)
+	local doc = Db.get_document("id:"..id)
+	return doc and doc.type=="user" and from_doc(doc) or nil
+end
+User.get_by_id = get_by_id
+
+function User.get_by_email(email)
+	local doc = Db.get_document("user_email:"..lucene_quote(email))
+	return doc and from_doc(doc)
+end
+
+function User.get_by_name(name)
+	local doc = Db.get_document("user_name:"..lucene_quote(name))
+	return doc and from_doc(doc)
+end
+
+function User.search(query,sort,rows)
+	rows = rows or 1000000
+	local users = {}
+	local docs = Db.search(query,1,rows,{sort=sort})
+	for _, doc in ipairs(docs) do
+		users[#users+1] = from_doc(doc)
+	end
+	return users
+end
+
+User.name_regex = regex "^[a-zA-Z0-9_-]+$"
+
+function User.current()
+	local user = get_local_only(User,"current")
+	if user == nil then
+		local id = Http.request.cookies.user
+		local password = Http.request.cookies.password
+		if id == nil or password == nil then
+			user = "nil"
+		else
+			user = get_by_id(id)
+			if user == nil or user.registered == nil or user.password ~= password then
+				user = "nil"
+			end
+		end
+		set_local_only(User,"current",user)
+	end
+	return user ~= "nil" and user or nil
+end
+
+function User.current_required()
+	local user = User.current()
+	user or Http.response.send_redirect "/login.html"
+	return user
+end
+
+function User.new_code()
+	local t = {}
+	for _ in range(1,6) do
+		t[#t+1] = to_string(random(0,9))
+	end
+	return concat(t)
+end
+
+function User.get_background_img_url(data)
+	local uuid = data.background_img_uuid
+	return uuid and uploadcare_url(uuid)
+end
+
+return User