@red-hat-developer-hub/backstage-plugin-intelligent-assistant-backend 3.0.0

package/dist/service/middleware/createPermissionMiddleware.cjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createPermissionMiddleware.cjs.js","sources":["../../../src/service/middleware/createPermissionMiddleware.ts"],"sourcesContent":["/*\n * Copyright Red Hat, Inc.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { LoggerService } from '@backstage/backend-plugin-api';\nimport { NotAllowedError } from '@backstage/errors';\nimport type { BasicPermission } from '@backstage/plugin-permission-common';\n\nimport type { RequestHandler } from 'express';\n\nimport type { Authorizer } from '../types';\nimport { getIdentity } from './getIdentity';\n\nexport function createPermissionMiddleware(\n  authorizer: Authorizer,\n  permission: BasicPermission,\n  logger: LoggerService,\n): RequestHandler {\n  return async (req, res, next) => {\n    try {\n      const { credentials } = getIdentity(req);\n      await authorizer.authorizeUser(permission, credentials);\n      return next();\n    } catch (error) {\n      if (error instanceof NotAllowedError) {\n        logger.error(error.message);\n        return res.status(403).json({ error: error.message });\n      }\n      logger.error(`Unexpected authorization error: ${error}`);\n      return res.status(500).json({ error: 'Internal authorization error' });\n    }\n  };\n}\n"],"names":["getIdentity","NotAllowedError"],"mappings":";;;;;AAyBO,SAAS,0BAAA,CACd,UAAA,EACA,UAAA,EACA,MAAA,EACgB;AAChB,EAAA,OAAO,OAAO,GAAA,EAAK,GAAA,EAAK,IAAA,KAAS;AAC/B,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,WAAA,EAAY,GAAIA,uBAAA,CAAY,GAAG,CAAA;AACvC,MAAA,MAAM,UAAA,CAAW,aAAA,CAAc,UAAA,EAAY,WAAW,CAAA;AACtD,MAAA,OAAO,IAAA,EAAK;AAAA,IACd,SAAS,KAAA,EAAO;AACd,MAAA,IAAI,iBAAiBC,sBAAA,EAAiB;AACpC,QAAA,MAAA,CAAO,KAAA,CAAM,MAAM,OAAO,CAAA;AAC1B,QAAA,OAAO,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,KAAA,CAAM,OAAA,EAAS,CAAA;AAAA,MACtD;AACA,MAAA,MAAA,CAAO,KAAA,CAAM,CAAA,gCAAA,EAAmC,KAAK,CAAA,CAAE,CAAA;AACvD,MAAA,OAAO,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,gCAAgC,CAAA;AAAA,IACvE;AAAA,EACF,CAAA;AACF;;;;"}

package/dist/service/middleware/createRateLimitMiddleware.cjs.js

@@ -0,0 +1,52 @@
+'use strict';
+
+var rateLimit = require('express-rate-limit');
+var constant = require('../constant.cjs.js');
+var getIdentity = require('./getIdentity.cjs.js');
+
+function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'default' in e ? e : { default: e }; }
+
+var rateLimit__default = /*#__PURE__*/_interopDefaultCompat(rateLimit);
+
+function getRateLimitMax(config, tier) {
+  const configKey = tier === "expensive" ? "intelligent-assistant.rateLimit.expensive.max" : "intelligent-assistant.rateLimit.general.max";
+  const defaultMax = tier === "expensive" ? constant.DEFAULT_EXPENSIVE_RATE_LIMIT_MAX : constant.DEFAULT_GENERAL_RATE_LIMIT_MAX;
+  const configured = config.getOptionalNumber(configKey);
+  if (configured === void 0) {
+    return defaultMax;
+  }
+  if (configured <= 0) {
+    return 0;
+  }
+  return Math.floor(configured);
+}
+function createRateLimitMiddleware(config, tier, logger) {
+  const max = getRateLimitMax(config, tier);
+  if (max === 0) {
+    logger?.warn(`Rate limiting disabled for "${tier}" tier (max=0)`);
+    return (_req, _res, next) => next();
+  }
+  return rateLimit__default.default({
+    windowMs: constant.RATE_LIMIT_WINDOW_MS,
+    max,
+    standardHeaders: false,
+    legacyHeaders: false,
+    keyGenerator: (req) => getIdentity.getIdentity(req).userEntityRef,
+    handler: (req, res, _next, options) => {
+      const resetTime = req.rateLimit?.resetTime;
+      const retryAfter = resetTime ? Math.max(1, Math.ceil((resetTime.getTime() - Date.now()) / 1e3)) : Math.ceil(constant.RATE_LIMIT_WINDOW_MS / 1e3);
+      res.setHeader("Retry-After", String(retryAfter));
+      res.status(options.statusCode).json({
+        error: {
+          name: "RateLimitExceeded",
+          message: "Too many requests. Please try again later.",
+          retryAfter
+        }
+      });
+    }
+  });
+}
+
+exports.createRateLimitMiddleware = createRateLimitMiddleware;
+exports.getRateLimitMax = getRateLimitMax;
+//# sourceMappingURL=createRateLimitMiddleware.cjs.js.map

package/dist/service/middleware/createRateLimitMiddleware.cjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createRateLimitMiddleware.cjs.js","sources":["../../../src/service/middleware/createRateLimitMiddleware.ts"],"sourcesContent":["/*\n * Copyright Red Hat, Inc.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { LoggerService } from '@backstage/backend-plugin-api';\nimport { Config } from '@backstage/config';\n\nimport type { RequestHandler } from 'express';\nimport rateLimit from 'express-rate-limit';\n\nimport {\n  DEFAULT_EXPENSIVE_RATE_LIMIT_MAX,\n  DEFAULT_GENERAL_RATE_LIMIT_MAX,\n  RATE_LIMIT_WINDOW_MS,\n} from '../constant';\nimport { getIdentity } from './getIdentity';\n\nexport type RateLimitTier = 'expensive' | 'general';\n\nexport function getRateLimitMax(config: Config, tier: RateLimitTier): number {\n  const configKey =\n    tier === 'expensive'\n      ? 'intelligent-assistant.rateLimit.expensive.max'\n      : 'intelligent-assistant.rateLimit.general.max';\n  const defaultMax =\n    tier === 'expensive'\n      ? DEFAULT_EXPENSIVE_RATE_LIMIT_MAX\n      : DEFAULT_GENERAL_RATE_LIMIT_MAX;\n\n  const configured = config.getOptionalNumber(configKey);\n  if (configured === undefined) {\n    return defaultMax;\n  }\n\n  if (configured <= 0) {\n    return 0; // rate limit of 0 means disabled\n  }\n\n  return Math.floor(configured);\n}\n\nexport function createRateLimitMiddleware(\n  config: Config,\n  tier: RateLimitTier,\n  logger?: LoggerService,\n): RequestHandler {\n  const max = getRateLimitMax(config, tier);\n\n  if (max === 0) {\n    logger?.warn(`Rate limiting disabled for \"${tier}\" tier (max=0)`);\n    return (_req, _res, next) => next();\n  }\n\n  return rateLimit({\n    windowMs: RATE_LIMIT_WINDOW_MS,\n    max,\n    standardHeaders: false,\n    legacyHeaders: false,\n    keyGenerator: req => getIdentity(req).userEntityRef,\n    handler: (req, res, _next, options) => {\n      const resetTime = req.rateLimit?.resetTime;\n      const retryAfter = resetTime\n        ? Math.max(1, Math.ceil((resetTime.getTime() - Date.now()) / 1000))\n        : Math.ceil(RATE_LIMIT_WINDOW_MS / 1000);\n\n      res.setHeader('Retry-After', String(retryAfter));\n      res.status(options.statusCode).json({\n        error: {\n          name: 'RateLimitExceeded',\n          message: 'Too many requests. Please try again later.',\n          retryAfter,\n        },\n      });\n    },\n  });\n}\n"],"names":["DEFAULT_EXPENSIVE_RATE_LIMIT_MAX","DEFAULT_GENERAL_RATE_LIMIT_MAX","rateLimit","RATE_LIMIT_WINDOW_MS","getIdentity"],"mappings":";;;;;;;;;;AA+BO,SAAS,eAAA,CAAgB,QAAgB,IAAA,EAA6B;AAC3E,EAAA,MAAM,SAAA,GACJ,IAAA,KAAS,WAAA,GACL,+CAAA,GACA,6CAAA;AACN,EAAA,MAAM,UAAA,GACJ,IAAA,KAAS,WAAA,GACLA,yCAAA,GACAC,uCAAA;AAEN,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,iBAAA,CAAkB,SAAS,CAAA;AACrD,EAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,IAAA,OAAO,UAAA;AAAA,EACT;AAEA,EAAA,IAAI,cAAc,CAAA,EAAG;AACnB,IAAA,OAAO,CAAA;AAAA,EACT;AAEA,EAAA,OAAO,IAAA,CAAK,MAAM,UAAU,CAAA;AAC9B;AAEO,SAAS,yBAAA,CACd,MAAA,EACA,IAAA,EACA,MAAA,EACgB;AAChB,EAAA,MAAM,GAAA,GAAM,eAAA,CAAgB,MAAA,EAAQ,IAAI,CAAA;AAExC,EAAA,IAAI,QAAQ,CAAA,EAAG;AACb,IAAA,MAAA,EAAQ,IAAA,CAAK,CAAA,4BAAA,EAA+B,IAAI,CAAA,cAAA,CAAgB,CAAA;AAChE,IAAA,OAAO,CAAC,IAAA,EAAM,IAAA,EAAM,IAAA,KAAS,IAAA,EAAK;AAAA,EACpC;AAEA,EAAA,OAAOC,0BAAA,CAAU;AAAA,IACf,QAAA,EAAUC,6BAAA;AAAA,IACV,GAAA;AAAA,IACA,eAAA,EAAiB,KAAA;AAAA,IACjB,aAAA,EAAe,KAAA;AAAA,IACf,YAAA,EAAc,CAAA,GAAA,KAAOC,uBAAA,CAAY,GAAG,CAAA,CAAE,aAAA;AAAA,IACtC,OAAA,EAAS,CAAC,GAAA,EAAK,GAAA,EAAK,OAAO,OAAA,KAAY;AACrC,MAAA,MAAM,SAAA,GAAY,IAAI,SAAA,EAAW,SAAA;AACjC,MAAA,MAAM,aAAa,SAAA,GACf,IAAA,CAAK,IAAI,CAAA,EAAG,IAAA,CAAK,MAAM,SAAA,CAAU,OAAA,KAAY,IAAA,CAAK,GAAA,MAAS,GAAI,CAAC,IAChE,IAAA,CAAK,IAAA,CAAKD,gCAAuB,GAAI,CAAA;AAEzC,MAAA,GAAA,CAAI,SAAA,CAAU,aAAA,EAAe,MAAA,CAAO,UAAU,CAAC,CAAA;AAC/C,MAAA,GAAA,CAAI,MAAA,CAAO,OAAA,CAAQ,UAAU,CAAA,CAAE,IAAA,CAAK;AAAA,QAClC,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,mBAAA;AAAA,UACN,OAAA,EAAS,4CAAA;AAAA,UACT;AAAA;AACF,OACD,CAAA;AAAA,IACH;AAAA,GACD,CAAA;AACH;;;;;"}

package/dist/service/middleware/getIdentity.cjs.js

@@ -0,0 +1,39 @@
+'use strict';
+
+var errors = require('@backstage/errors');
+
+function createIdentityMiddleware(httpAuth, userInfo, logger) {
+  return async (req, res, next) => {
+    if (req.credentials && req.userEntityRef) {
+      return next();
+    }
+    try {
+      const credentials = await httpAuth.credentials(req);
+      const user = await userInfo.getUserInfo(credentials);
+      req.credentials = credentials;
+      req.userEntityRef = user.userEntityRef;
+      return next();
+    } catch (error) {
+      logger.error("Identity resolution failed for request", error);
+      if (error instanceof errors.NotAllowedError) {
+        return res.status(403).json({ error: "Forbidden" });
+      }
+      if (error instanceof errors.AuthenticationError) {
+        return res.status(401).json({ error: "Unauthorized" });
+      }
+      return res.status(500).json({ error: "Internal Server Error" });
+    }
+  };
+}
+function getIdentity(req) {
+  if (!req.credentials || !req.userEntityRef) {
+    throw new Error(
+      "Identity middleware did not run \u2014 credentials/userEntityRef missing on request"
+    );
+  }
+  return { credentials: req.credentials, userEntityRef: req.userEntityRef };
+}
+
+exports.createIdentityMiddleware = createIdentityMiddleware;
+exports.getIdentity = getIdentity;
+//# sourceMappingURL=getIdentity.cjs.js.map

package/dist/service/middleware/getIdentity.cjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getIdentity.cjs.js","sources":["../../../src/service/middleware/getIdentity.ts"],"sourcesContent":["/*\n * Copyright Red Hat, Inc.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type {\n  BackstageCredentials,\n  HttpAuthService,\n  LoggerService,\n  UserInfoService,\n} from '@backstage/backend-plugin-api';\nimport { AuthenticationError, NotAllowedError } from '@backstage/errors';\n\nimport type { Request, RequestHandler } from 'express';\n\n/**\n * Creates an Express middleware that resolves Backstage identity once per\n * request and attaches `req.credentials` and `req.userEntityRef`.\n *\n * A guard check skips resolution if both fields are already populated,\n * making it safe for multiple routers to apply independently.\n */\nexport function createIdentityMiddleware(\n  httpAuth: HttpAuthService,\n  userInfo: UserInfoService,\n  logger: LoggerService,\n): RequestHandler {\n  return async (req, res, next) => {\n    if (req.credentials && req.userEntityRef) {\n      return next();\n    }\n\n    try {\n      const credentials = await httpAuth.credentials(req);\n      const user = await userInfo.getUserInfo(credentials);\n      req.credentials = credentials;\n      req.userEntityRef = user.userEntityRef;\n      return next();\n    } catch (error) {\n      logger.error('Identity resolution failed for request', error);\n\n      if (error instanceof NotAllowedError) {\n        return res.status(403).json({ error: 'Forbidden' });\n      }\n      if (error instanceof AuthenticationError) {\n        return res.status(401).json({ error: 'Unauthorized' });\n      }\n      return res.status(500).json({ error: 'Internal Server Error' });\n    }\n  };\n}\n\n/**\n * Extracts identity fields from the request, narrowing the types.\n * Throws if the identity middleware has not run.\n */\nexport function getIdentity(req: Request): {\n  credentials: BackstageCredentials;\n  userEntityRef: string;\n} {\n  if (!req.credentials || !req.userEntityRef) {\n    throw new Error(\n      'Identity middleware did not run — credentials/userEntityRef missing on request',\n    );\n  }\n  return { credentials: req.credentials, userEntityRef: req.userEntityRef };\n}\n"],"names":["NotAllowedError","AuthenticationError"],"mappings":";;;;AAiCO,SAAS,wBAAA,CACd,QAAA,EACA,QAAA,EACA,MAAA,EACgB;AAChB,EAAA,OAAO,OAAO,GAAA,EAAK,GAAA,EAAK,IAAA,KAAS;AAC/B,IAAA,IAAI,GAAA,CAAI,WAAA,IAAe,GAAA,CAAI,aAAA,EAAe;AACxC,MAAA,OAAO,IAAA,EAAK;AAAA,IACd;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,WAAA,GAAc,MAAM,QAAA,CAAS,WAAA,CAAY,GAAG,CAAA;AAClD,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,WAAA,CAAY,WAAW,CAAA;AACnD,MAAA,GAAA,CAAI,WAAA,GAAc,WAAA;AAClB,MAAA,GAAA,CAAI,gBAAgB,IAAA,CAAK,aAAA;AACzB,MAAA,OAAO,IAAA,EAAK;AAAA,IACd,SAAS,KAAA,EAAO;AACd,MAAA,MAAA,CAAO,KAAA,CAAM,0CAA0C,KAAK,CAAA;AAE5D,MAAA,IAAI,iBAAiBA,sBAAA,EAAiB;AACpC,QAAA,OAAO,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,aAAa,CAAA;AAAA,MACpD;AACA,MAAA,IAAI,iBAAiBC,0BAAA,EAAqB;AACxC,QAAA,OAAO,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,gBAAgB,CAAA;AAAA,MACvD;AACA,MAAA,OAAO,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,yBAAyB,CAAA;AAAA,IAChE;AAAA,EACF,CAAA;AACF;AAMO,SAAS,YAAY,GAAA,EAG1B;AACA,EAAA,IAAI,CAAC,GAAA,CAAI,WAAA,IAAe,CAAC,IAAI,aAAA,EAAe;AAC1C,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AACA,EAAA,OAAO,EAAE,WAAA,EAAa,GAAA,CAAI,WAAA,EAAa,aAAA,EAAe,IAAI,aAAA,EAAc;AAC1E;;;;;"}

package/dist/service/notebooks/VectorStoresOperator.cjs.js

@@ -0,0 +1,347 @@
+'use strict';
+
+var errors = require('@backstage/errors');
+var FormData = require('form-data');
+
+function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'default' in e ? e : { default: e }; }
+
+var FormData__default = /*#__PURE__*/_interopDefaultCompat(FormData);
+
+function mapHttpStatusToError(status, defaultMessage, errorDetail) {
+  const detail = errorDetail?.detail;
+  const message = (typeof detail === "string" ? detail : detail?.message || detail?.cause) || defaultMessage;
+  switch (status) {
+    case 404:
+      return new errors.NotFoundError(message);
+    case 409:
+      return new errors.ConflictError(message);
+    case 400:
+      return new errors.InputError(message);
+    case 403:
+      return new errors.NotAllowedError(message);
+    default:
+      return new Error(message);
+  }
+}
+async function handleHttpError(response, logger, operation) {
+  let error;
+  try {
+    error = await response.json();
+  } catch {
+    error = { detail: await response.text() };
+  }
+  logger.error(`Failed to ${operation}:`, error);
+  let status = response.status;
+  if (status === 500 && operation === "retrieve vector store") {
+    logger.warn(
+      `Treating 500 error as 404 for ${operation} (lightspeed-core limitation)`
+    );
+    status = 404;
+  }
+  throw mapHttpStatusToError(status, `Failed to ${operation}`, error);
+}
+class VectorStoresOperator {
+  static instance = null;
+  baseURL;
+  logger;
+  constructor(lightspeedCoreUrl, logger) {
+    this.baseURL = lightspeedCoreUrl;
+    this.logger = logger;
+  }
+  /**
+   * Get the singleton instance of VectorStoresOperator
+   * @param lightspeedCoreUrl - Lightspeed core URL (required on first call)
+   * @param logger - Logger service (required on first call)
+   * @returns The singleton instance
+   */
+  static getInstance(lightspeedCoreUrl, logger) {
+    if (!VectorStoresOperator.instance) {
+      VectorStoresOperator.instance = new VectorStoresOperator(
+        lightspeedCoreUrl,
+        logger
+      );
+    }
+    return VectorStoresOperator.instance;
+  }
+  /**
+   * Reset the singleton instance (primarily for testing)
+   */
+  static resetInstance() {
+    VectorStoresOperator.instance = null;
+  }
+  /**
+   * Vector Stores API - mirrors LlamaStackClient.vectorStores structure
+   */
+  vectorStores = {
+    /**
+     * Create a new vector store
+     * POST /v1/vector-stores
+     */
+    create: async (params) => {
+      this.logger.debug("VectorStoresOperator: Creating vector store", params);
+      const response = await fetch(`${this.baseURL}/v1/vector-stores`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify(params)
+      });
+      if (!response.ok) {
+        await handleHttpError(response, this.logger, "create vector store");
+      }
+      return response.json();
+    },
+    /**
+     * Retrieve a vector store by ID
+     * GET /v1/vector-stores/{id}
+     */
+    retrieve: async (vectorStoreId) => {
+      this.logger.debug(
+        `VectorStoresOperator: Retrieving vector store ${vectorStoreId}`
+      );
+      const response = await fetch(
+        `${this.baseURL}/v1/vector-stores/${vectorStoreId}`,
+        {
+          method: "GET",
+          headers: {
+            "Content-Type": "application/json"
+          }
+        }
+      );
+      if (!response.ok) {
+        await handleHttpError(response, this.logger, "retrieve vector store");
+      }
+      return response.json();
+    },
+    /**
+     * Update a vector store
+     * PUT /v1/vector-stores/{id}
+     */
+    update: async (vectorStoreId, params) => {
+      this.logger.debug(
+        `VectorStoresOperator: Updating vector store ${vectorStoreId}`,
+        params
+      );
+      const response = await fetch(
+        `${this.baseURL}/v1/vector-stores/${vectorStoreId}`,
+        {
+          method: "PUT",
+          headers: {
+            "Content-Type": "application/json"
+          },
+          body: JSON.stringify(params)
+        }
+      );
+      if (!response.ok) {
+        await handleHttpError(response, this.logger, "update vector store");
+      }
+      return response.json();
+    },
+    /**
+     * Delete a vector store
+     * DELETE /v1/vector-stores/{id}
+     */
+    delete: async (vectorStoreId) => {
+      this.logger.debug(
+        `VectorStoresOperator: Deleting vector store ${vectorStoreId}`
+      );
+      const response = await fetch(
+        `${this.baseURL}/v1/vector-stores/${vectorStoreId}`,
+        {
+          method: "DELETE",
+          headers: {
+            "Content-Type": "application/json"
+          }
+        }
+      );
+      if (!response.ok) {
+        await handleHttpError(response, this.logger, "delete vector store");
+      }
+      if (response.status === 204 || response.headers.get("content-length") === "0") {
+        return { deleted: true };
+      }
+      return response.json();
+    },
+    /**
+     * List all vector stores
+     * GET /v1/vector-stores
+     */
+    list: async () => {
+      this.logger.debug("VectorStoresOperator: Listing vector stores");
+      const response = await fetch(`${this.baseURL}/v1/vector-stores`, {
+        method: "GET",
+        headers: {
+          "Content-Type": "application/json"
+        }
+      });
+      if (!response.ok) {
+        await handleHttpError(response, this.logger, "list vector stores");
+      }
+      return response.json();
+    },
+    /**
+     * Vector Store Files API - nested structure matching LlamaStackClient
+     */
+    files: {
+      /**
+       * Add a file to a vector store
+       * POST /v1/vector-stores/{id}/files
+       */
+      create: async (vectorStoreId, params) => {
+        this.logger.debug(
+          `VectorStoresOperator: Adding file to vector store ${vectorStoreId}`,
+          params
+        );
+        const response = await fetch(
+          `${this.baseURL}/v1/vector-stores/${vectorStoreId}/files`,
+          {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/json"
+            },
+            body: JSON.stringify(params)
+          }
+        );
+        if (!response.ok) {
+          await handleHttpError(
+            response,
+            this.logger,
+            "add file to vector store"
+          );
+        }
+        return response.json();
+      },
+      /**
+       * List files in a vector store
+       * GET /v1/vector-stores/{id}/files
+       */
+      list: async (vectorStoreId) => {
+        this.logger.debug(
+          `VectorStoresOperator: Listing files in vector store ${vectorStoreId}`
+        );
+        const response = await fetch(
+          `${this.baseURL}/v1/vector-stores/${vectorStoreId}/files`,
+          {
+            method: "GET",
+            headers: {
+              "Content-Type": "application/json"
+            }
+          }
+        );
+        if (!response.ok) {
+          await handleHttpError(response, this.logger, "list files");
+        }
+        return response.json();
+      },
+      /**
+       * Retrieve a file from a vector store
+       * GET /v1/vector-stores/{id}/files/{file_id}
+       */
+      retrieve: async (vectorStoreId, fileId) => {
+        this.logger.debug(
+          `VectorStoresOperator: Retrieving file ${fileId} from vector store ${vectorStoreId}`
+        );
+        const response = await fetch(
+          `${this.baseURL}/v1/vector-stores/${vectorStoreId}/files/${fileId}`,
+          {
+            method: "GET",
+            headers: {
+              "Content-Type": "application/json"
+            }
+          }
+        );
+        if (!response.ok) {
+          await handleHttpError(response, this.logger, "retrieve file");
+        }
+        return response.json();
+      },
+      /**
+       * Delete a file from a vector store
+       * DELETE /v1/vector-stores/{id}/files/{file_id}
+       */
+      delete: async (vectorStoreId, fileId) => {
+        this.logger.debug(
+          `VectorStoresOperator: Deleting file ${fileId} from vector store ${vectorStoreId}`
+        );
+        const response = await fetch(
+          `${this.baseURL}/v1/vector-stores/${vectorStoreId}/files/${fileId}`,
+          {
+            method: "DELETE",
+            headers: {
+              "Content-Type": "application/json"
+            }
+          }
+        );
+        if (!response.ok) {
+          await handleHttpError(response, this.logger, "delete file");
+        }
+        if (response.status === 204 || response.headers.get("content-length") === "0") {
+          return { deleted: true };
+        }
+        return response.json();
+      }
+    }
+  };
+  /**
+   * Files API - mirrors LlamaStackClient.files structure
+   */
+  files = {
+    /**
+     * Upload a file
+     * POST /v1/files
+     */
+    create: async (params) => {
+      this.logger.debug("VectorStoresOperator: Uploading file", {
+        purpose: params.purpose,
+        fileName: params.file.name
+      });
+      const formData = new FormData__default.default();
+      formData.append("file", params.file.buffer, {
+        filename: params.file.name,
+        contentType: params.file.type || "text/plain"
+      });
+      formData.append("purpose", params.purpose);
+      const formBuffer = await new Promise((resolve, reject) => {
+        const chunks = [];
+        formData.on("data", (chunk) => {
+          chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+        });
+        formData.on("end", () => resolve(Buffer.concat(chunks)));
+        formData.on("error", reject);
+        formData.resume();
+      });
+      const response = await fetch(`${this.baseURL}/v1/files`, {
+        method: "POST",
+        body: formBuffer,
+        headers: formData.getHeaders()
+      });
+      if (!response.ok) {
+        await handleHttpError(response, this.logger, "upload file");
+      }
+      return response.json();
+    },
+    /**
+     * Delete a file
+     * DELETE /v1/files/{file_id}
+     */
+    delete: async (fileId) => {
+      this.logger.debug(`VectorStoresOperator: Deleting file ${fileId}`);
+      const response = await fetch(`${this.baseURL}/v1/files/${fileId}`, {
+        method: "DELETE",
+        headers: {
+          "Content-Type": "application/json"
+        }
+      });
+      if (!response.ok) {
+        await handleHttpError(response, this.logger, "delete file");
+      }
+      if (response.status === 204 || response.headers.get("content-length") === "0") {
+        return { deleted: true };
+      }
+      return response.json();
+    }
+  };
+}
+
+exports.VectorStoresOperator = VectorStoresOperator;
+//# sourceMappingURL=VectorStoresOperator.cjs.js.map

package/dist/service/notebooks/VectorStoresOperator.cjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VectorStoresOperator.cjs.js","sources":["../../../src/service/notebooks/VectorStoresOperator.ts"],"sourcesContent":["/*\n * Copyright Red Hat, Inc.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { LoggerService } from '@backstage/backend-plugin-api';\nimport {\n  ConflictError,\n  InputError,\n  NotAllowedError,\n  NotFoundError,\n} from '@backstage/errors';\n\nimport FormData from 'form-data';\n\n/**\n * Map HTTP status code to appropriate Backstage error type\n * @param status - HTTP status code\n * @param defaultMessage - Default error message\n * @param errorDetail - Error details from response\n * @returns Appropriate Backstage error instance\n */\nfunction mapHttpStatusToError(\n  status: number,\n  defaultMessage: string,\n  errorDetail?: any,\n): Error {\n  const detail = errorDetail?.detail;\n  const message =\n    (typeof detail === 'string' ? detail : detail?.message || detail?.cause) ||\n    defaultMessage;\n\n  switch (status) {\n    case 404:\n      return new NotFoundError(message);\n    case 409:\n      return new ConflictError(message);\n    case 400:\n      return new InputError(message);\n    case 403:\n      return new NotAllowedError(message);\n    default:\n      return new Error(message);\n  }\n}\n\n/**\n * Handle HTTP error response\n * @param response - Fetch response object\n * @param logger - Logger service\n * @param operation - Operation description for logging\n * @returns Never (always throws)\n */\nasync function handleHttpError(\n  response: Response,\n  logger: LoggerService,\n  operation: string,\n): Promise<never> {\n  let error;\n  try {\n    error = await response.json();\n  } catch {\n    error = { detail: await response.text() };\n  }\n  logger.error(`Failed to ${operation}:`, error);\n\n  let status = response.status;\n  if (status === 500 && operation === 'retrieve vector store') {\n    logger.warn(\n      `Treating 500 error as 404 for ${operation} (lightspeed-core limitation)`,\n    );\n    status = 404;\n  }\n\n  throw mapHttpStatusToError(status, `Failed to ${operation}`, error);\n}\n\n/**\n * VectorStoresOperator - HTTP client wrapper for lightspeed-core vector store endpoints\n *\n * This class provides the same interface as LlamaStackClient but proxies calls through\n * lightspeed-core REST API instead of calling llama stack directly.\n *\n * Implemented as a singleton to ensure single instance across the application.\n */\nexport class VectorStoresOperator {\n  private static instance: VectorStoresOperator | null = null;\n  private baseURL: string;\n  private logger: LoggerService;\n\n  private constructor(lightspeedCoreUrl: string, logger: LoggerService) {\n    this.baseURL = lightspeedCoreUrl;\n    this.logger = logger;\n  }\n\n  /**\n   * Get the singleton instance of VectorStoresOperator\n   * @param lightspeedCoreUrl - Lightspeed core URL (required on first call)\n   * @param logger - Logger service (required on first call)\n   * @returns The singleton instance\n   */\n  static getInstance(\n    lightspeedCoreUrl: string,\n    logger: LoggerService,\n  ): VectorStoresOperator {\n    if (!VectorStoresOperator.instance) {\n      VectorStoresOperator.instance = new VectorStoresOperator(\n        lightspeedCoreUrl,\n        logger,\n      );\n    }\n    return VectorStoresOperator.instance;\n  }\n\n  /**\n   * Reset the singleton instance (primarily for testing)\n   */\n  static resetInstance(): void {\n    VectorStoresOperator.instance = null;\n  }\n\n  /**\n   * Vector Stores API - mirrors LlamaStackClient.vectorStores structure\n   */\n  vectorStores = {\n    /**\n     * Create a new vector store\n     * POST /v1/vector-stores\n     */\n    create: async (params: {\n      name: string;\n      provider_id?: string;\n      embedding_model?: string;\n      embedding_dimension?: number;\n      metadata?: Record<string, any>;\n    }): Promise<any> => {\n      this.logger.debug('VectorStoresOperator: Creating vector store', params);\n\n      const response = await fetch(`${this.baseURL}/v1/vector-stores`, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n        },\n        body: JSON.stringify(params),\n      });\n\n      if (!response.ok) {\n        await handleHttpError(response, this.logger, 'create vector store');\n      }\n\n      return response.json();\n    },\n\n    /**\n     * Retrieve a vector store by ID\n     * GET /v1/vector-stores/{id}\n     */\n    retrieve: async (vectorStoreId: string): Promise<any> => {\n      this.logger.debug(\n        `VectorStoresOperator: Retrieving vector store ${vectorStoreId}`,\n      );\n\n      const response = await fetch(\n        `${this.baseURL}/v1/vector-stores/${vectorStoreId}`,\n        {\n          method: 'GET',\n          headers: {\n            'Content-Type': 'application/json',\n          },\n        },\n      );\n      if (!response.ok) {\n        await handleHttpError(response, this.logger, 'retrieve vector store');\n      }\n\n      return response.json();\n    },\n\n    /**\n     * Update a vector store\n     * PUT /v1/vector-stores/{id}\n     */\n    update: async (\n      vectorStoreId: string,\n      params: {\n        embedding_model?: string;\n        embedding_dimension?: number;\n        metadata?: Record<string, any>;\n      },\n    ): Promise<any> => {\n      this.logger.debug(\n        `VectorStoresOperator: Updating vector store ${vectorStoreId}`,\n        params,\n      );\n\n      const response = await fetch(\n        `${this.baseURL}/v1/vector-stores/${vectorStoreId}`,\n        {\n          method: 'PUT',\n          headers: {\n            'Content-Type': 'application/json',\n          },\n          body: JSON.stringify(params),\n        },\n      );\n\n      if (!response.ok) {\n        await handleHttpError(response, this.logger, 'update vector store');\n      }\n\n      return response.json();\n    },\n\n    /**\n     * Delete a vector store\n     * DELETE /v1/vector-stores/{id}\n     */\n    delete: async (vectorStoreId: string): Promise<any> => {\n      this.logger.debug(\n        `VectorStoresOperator: Deleting vector store ${vectorStoreId}`,\n      );\n\n      const response = await fetch(\n        `${this.baseURL}/v1/vector-stores/${vectorStoreId}`,\n        {\n          method: 'DELETE',\n          headers: {\n            'Content-Type': 'application/json',\n          },\n        },\n      );\n\n      if (!response.ok) {\n        await handleHttpError(response, this.logger, 'delete vector store');\n      }\n\n      // DELETE may return 204 No Content or empty body\n      if (\n        response.status === 204 ||\n        response.headers.get('content-length') === '0'\n      ) {\n        return { deleted: true };\n      }\n\n      return response.json();\n    },\n\n    /**\n     * List all vector stores\n     * GET /v1/vector-stores\n     */\n    list: async (): Promise<any> => {\n      this.logger.debug('VectorStoresOperator: Listing vector stores');\n\n      const response = await fetch(`${this.baseURL}/v1/vector-stores`, {\n        method: 'GET',\n        headers: {\n          'Content-Type': 'application/json',\n        },\n      });\n\n      if (!response.ok) {\n        await handleHttpError(response, this.logger, 'list vector stores');\n      }\n\n      return response.json();\n    },\n\n    /**\n     * Vector Store Files API - nested structure matching LlamaStackClient\n     */\n    files: {\n      /**\n       * Add a file to a vector store\n       * POST /v1/vector-stores/{id}/files\n       */\n      create: async (\n        vectorStoreId: string,\n        params: {\n          file_id: string;\n          attributes?: Record<string, any>;\n          chunking_strategy?: any;\n        },\n      ): Promise<any> => {\n        this.logger.debug(\n          `VectorStoresOperator: Adding file to vector store ${vectorStoreId}`,\n          params,\n        );\n\n        const response = await fetch(\n          `${this.baseURL}/v1/vector-stores/${vectorStoreId}/files`,\n          {\n            method: 'POST',\n            headers: {\n              'Content-Type': 'application/json',\n            },\n            body: JSON.stringify(params),\n          },\n        );\n\n        if (!response.ok) {\n          await handleHttpError(\n            response,\n            this.logger,\n            'add file to vector store',\n          );\n        }\n\n        return response.json();\n      },\n\n      /**\n       * List files in a vector store\n       * GET /v1/vector-stores/{id}/files\n       */\n      list: async (vectorStoreId: string): Promise<any> => {\n        this.logger.debug(\n          `VectorStoresOperator: Listing files in vector store ${vectorStoreId}`,\n        );\n\n        const response = await fetch(\n          `${this.baseURL}/v1/vector-stores/${vectorStoreId}/files`,\n          {\n            method: 'GET',\n            headers: {\n              'Content-Type': 'application/json',\n            },\n          },\n        );\n\n        if (!response.ok) {\n          await handleHttpError(response, this.logger, 'list files');\n        }\n\n        return response.json();\n      },\n\n      /**\n       * Retrieve a file from a vector store\n       * GET /v1/vector-stores/{id}/files/{file_id}\n       */\n      retrieve: async (vectorStoreId: string, fileId: string): Promise<any> => {\n        this.logger.debug(\n          `VectorStoresOperator: Retrieving file ${fileId} from vector store ${vectorStoreId}`,\n        );\n\n        const response = await fetch(\n          `${this.baseURL}/v1/vector-stores/${vectorStoreId}/files/${fileId}`,\n          {\n            method: 'GET',\n            headers: {\n              'Content-Type': 'application/json',\n            },\n          },\n        );\n\n        if (!response.ok) {\n          await handleHttpError(response, this.logger, 'retrieve file');\n        }\n\n        return response.json();\n      },\n\n      /**\n       * Delete a file from a vector store\n       * DELETE /v1/vector-stores/{id}/files/{file_id}\n       */\n      delete: async (vectorStoreId: string, fileId: string): Promise<any> => {\n        this.logger.debug(\n          `VectorStoresOperator: Deleting file ${fileId} from vector store ${vectorStoreId}`,\n        );\n\n        const response = await fetch(\n          `${this.baseURL}/v1/vector-stores/${vectorStoreId}/files/${fileId}`,\n          {\n            method: 'DELETE',\n            headers: {\n              'Content-Type': 'application/json',\n            },\n          },\n        );\n\n        if (!response.ok) {\n          await handleHttpError(response, this.logger, 'delete file');\n        }\n\n        // DELETE may return 204 No Content or empty body\n        if (\n          response.status === 204 ||\n          response.headers.get('content-length') === '0'\n        ) {\n          return { deleted: true };\n        }\n\n        return response.json();\n      },\n    },\n  };\n\n  /**\n   * Files API - mirrors LlamaStackClient.files structure\n   */\n  files = {\n    /**\n     * Upload a file\n     * POST /v1/files\n     */\n    create: async (params: {\n      file: any; // File-like object from toFile()\n      purpose: string;\n    }): Promise<any> => {\n      this.logger.debug('VectorStoresOperator: Uploading file', {\n        purpose: params.purpose,\n        fileName: params.file.name,\n      });\n\n      // Create FormData for multipart upload using form-data package\n      const formData = new FormData();\n\n      // Append buffer directly with metadata\n      formData.append('file', params.file.buffer, {\n        filename: params.file.name,\n        contentType: params.file.type || 'text/plain',\n      });\n      formData.append('purpose', params.purpose);\n\n      // Convert FormData stream to Buffer\n      const formBuffer = await new Promise<Buffer>((resolve, reject) => {\n        const chunks: Buffer[] = [];\n        formData.on('data', (chunk: string | Buffer) => {\n          chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));\n        });\n        formData.on('end', () => resolve(Buffer.concat(chunks)));\n        formData.on('error', reject);\n        formData.resume();\n      });\n\n      const response = await fetch(`${this.baseURL}/v1/files`, {\n        method: 'POST',\n        body: formBuffer as unknown as BodyInit,\n        headers: formData.getHeaders(),\n      });\n\n      if (!response.ok) {\n        await handleHttpError(response, this.logger, 'upload file');\n      }\n\n      return response.json();\n    },\n\n    /**\n     * Delete a file\n     * DELETE /v1/files/{file_id}\n     */\n    delete: async (fileId: string): Promise<any> => {\n      this.logger.debug(`VectorStoresOperator: Deleting file ${fileId}`);\n\n      const response = await fetch(`${this.baseURL}/v1/files/${fileId}`, {\n        method: 'DELETE',\n        headers: {\n          'Content-Type': 'application/json',\n        },\n      });\n\n      if (!response.ok) {\n        await handleHttpError(response, this.logger, 'delete file');\n      }\n\n      if (\n        response.status === 204 ||\n        response.headers.get('content-length') === '0'\n      ) {\n        return { deleted: true };\n      }\n\n      return response.json();\n    },\n  };\n}\n"],"names":["NotFoundError","ConflictError","InputError","NotAllowedError","FormData"],"mappings":";;;;;;;;;AAiCA,SAAS,oBAAA,CACP,MAAA,EACA,cAAA,EACA,WAAA,EACO;AACP,EAAA,MAAM,SAAS,WAAA,EAAa,MAAA;AAC5B,EAAA,MAAM,OAAA,GAAA,CACH,OAAO,MAAA,KAAW,QAAA,GAAW,SAAS,MAAA,EAAQ,OAAA,IAAW,QAAQ,KAAA,KAClE,cAAA;AAEF,EAAA,QAAQ,MAAA;AAAQ,IACd,KAAK,GAAA;AACH,MAAA,OAAO,IAAIA,qBAAc,OAAO,CAAA;AAAA,IAClC,KAAK,GAAA;AACH,MAAA,OAAO,IAAIC,qBAAc,OAAO,CAAA;AAAA,IAClC,KAAK,GAAA;AACH,MAAA,OAAO,IAAIC,kBAAW,OAAO,CAAA;AAAA,IAC/B,KAAK,GAAA;AACH,MAAA,OAAO,IAAIC,uBAAgB,OAAO,CAAA;AAAA,IACpC;AACE,MAAA,OAAO,IAAI,MAAM,OAAO,CAAA;AAAA;AAE9B;AASA,eAAe,eAAA,CACb,QAAA,EACA,MAAA,EACA,SAAA,EACgB;AAChB,EAAA,IAAI,KAAA;AACJ,EAAA,IAAI;AACF,IAAA,KAAA,GAAQ,MAAM,SAAS,IAAA,EAAK;AAAA,EAC9B,CAAA,CAAA,MAAQ;AACN,IAAA,KAAA,GAAQ,EAAE,MAAA,EAAQ,MAAM,QAAA,CAAS,MAAK,EAAE;AAAA,EAC1C;AACA,EAAA,MAAA,CAAO,KAAA,CAAM,CAAA,UAAA,EAAa,SAAS,CAAA,CAAA,CAAA,EAAK,KAAK,CAAA;AAE7C,EAAA,IAAI,SAAS,QAAA,CAAS,MAAA;AACtB,EAAA,IAAI,MAAA,KAAW,GAAA,IAAO,SAAA,KAAc,uBAAA,EAAyB;AAC3D,IAAA,MAAA,CAAO,IAAA;AAAA,MACL,iCAAiC,SAAS,CAAA,6BAAA;AAAA,KAC5C;AACA,IAAA,MAAA,GAAS,GAAA;AAAA,EACX;AAEA,EAAA,MAAM,oBAAA,CAAqB,MAAA,EAAQ,CAAA,UAAA,EAAa,SAAS,IAAI,KAAK,CAAA;AACpE;AAUO,MAAM,oBAAA,CAAqB;AAAA,EAChC,OAAe,QAAA,GAAwC,IAAA;AAAA,EAC/C,OAAA;AAAA,EACA,MAAA;AAAA,EAEA,WAAA,CAAY,mBAA2B,MAAA,EAAuB;AACpE,IAAA,IAAA,CAAK,OAAA,GAAU,iBAAA;AACf,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAO,WAAA,CACL,iBAAA,EACA,MAAA,EACsB;AACtB,IAAA,IAAI,CAAC,qBAAqB,QAAA,EAAU;AAClC,MAAA,oBAAA,CAAqB,WAAW,IAAI,oBAAA;AAAA,QAClC,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO,oBAAA,CAAqB,QAAA;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,aAAA,GAAsB;AAC3B,IAAA,oBAAA,CAAqB,QAAA,GAAW,IAAA;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA,EAKA,YAAA,GAAe;AAAA;AAAA;AAAA;AAAA;AAAA,IAKb,MAAA,EAAQ,OAAO,MAAA,KAMK;AAClB,MAAA,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,6CAAA,EAA+C,MAAM,CAAA;AAEvE,MAAA,MAAM,WAAW,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,iBAAA,CAAA,EAAqB;AAAA,QAC/D,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB;AAAA,SAClB;AAAA,QACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,MAAM;AAAA,OAC5B,CAAA;AAED,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,eAAA,CAAgB,QAAA,EAAU,IAAA,CAAK,MAAA,EAAQ,qBAAqB,CAAA;AAAA,MACpE;AAEA,MAAA,OAAO,SAAS,IAAA,EAAK;AAAA,IACvB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA,QAAA,EAAU,OAAO,aAAA,KAAwC;AACvD,MAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,QACV,iDAAiD,aAAa,CAAA;AAAA,OAChE;AAEA,MAAA,MAAM,WAAW,MAAM,KAAA;AAAA,QACrB,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,kBAAA,EAAqB,aAAa,CAAA,CAAA;AAAA,QACjD;AAAA,UACE,MAAA,EAAQ,KAAA;AAAA,UACR,OAAA,EAAS;AAAA,YACP,cAAA,EAAgB;AAAA;AAClB;AACF,OACF;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,eAAA,CAAgB,QAAA,EAAU,IAAA,CAAK,MAAA,EAAQ,uBAAuB,CAAA;AAAA,MACtE;AAEA,MAAA,OAAO,SAAS,IAAA,EAAK;AAAA,IACvB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA,MAAA,EAAQ,OACN,aAAA,EACA,MAAA,KAKiB;AACjB,MAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,QACV,+CAA+C,aAAa,CAAA,CAAA;AAAA,QAC5D;AAAA,OACF;AAEA,MAAA,MAAM,WAAW,MAAM,KAAA;AAAA,QACrB,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,kBAAA,EAAqB,aAAa,CAAA,CAAA;AAAA,QACjD;AAAA,UACE,MAAA,EAAQ,KAAA;AAAA,UACR,OAAA,EAAS;AAAA,YACP,cAAA,EAAgB;AAAA,WAClB;AAAA,UACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,MAAM;AAAA;AAC7B,OACF;AAEA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,eAAA,CAAgB,QAAA,EAAU,IAAA,CAAK,MAAA,EAAQ,qBAAqB,CAAA;AAAA,MACpE;AAEA,MAAA,OAAO,SAAS,IAAA,EAAK;AAAA,IACvB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA,MAAA,EAAQ,OAAO,aAAA,KAAwC;AACrD,MAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,QACV,+CAA+C,aAAa,CAAA;AAAA,OAC9D;AAEA,MAAA,MAAM,WAAW,MAAM,KAAA;AAAA,QACrB,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,kBAAA,EAAqB,aAAa,CAAA,CAAA;AAAA,QACjD;AAAA,UACE,MAAA,EAAQ,QAAA;AAAA,UACR,OAAA,EAAS;AAAA,YACP,cAAA,EAAgB;AAAA;AAClB;AACF,OACF;AAEA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,eAAA,CAAgB,QAAA,EAAU,IAAA,CAAK,MAAA,EAAQ,qBAAqB,CAAA;AAAA,MACpE;AAGA,MAAA,IACE,QAAA,CAAS,WAAW,GAAA,IACpB,QAAA,CAAS,QAAQ,GAAA,CAAI,gBAAgB,MAAM,GAAA,EAC3C;AACA,QAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,MACzB;AAEA,MAAA,OAAO,SAAS,IAAA,EAAK;AAAA,IACvB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA,MAAM,YAA0B;AAC9B,MAAA,IAAA,CAAK,MAAA,CAAO,MAAM,6CAA6C,CAAA;AAE/D,MAAA,MAAM,WAAW,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,iBAAA,CAAA,EAAqB;AAAA,QAC/D,MAAA,EAAQ,KAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB;AAAA;AAClB,OACD,CAAA;AAED,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,eAAA,CAAgB,QAAA,EAAU,IAAA,CAAK,MAAA,EAAQ,oBAAoB,CAAA;AAAA,MACnE;AAEA,MAAA,OAAO,SAAS,IAAA,EAAK;AAAA,IACvB,CAAA;AAAA;AAAA;AAAA;AAAA,IAKA,KAAA,EAAO;AAAA;AAAA;AAAA;AAAA;AAAA,MAKL,MAAA,EAAQ,OACN,aAAA,EACA,MAAA,KAKiB;AACjB,QAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,UACV,qDAAqD,aAAa,CAAA,CAAA;AAAA,UAClE;AAAA,SACF;AAEA,QAAA,MAAM,WAAW,MAAM,KAAA;AAAA,UACrB,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,kBAAA,EAAqB,aAAa,CAAA,MAAA,CAAA;AAAA,UACjD;AAAA,YACE,MAAA,EAAQ,MAAA;AAAA,YACR,OAAA,EAAS;AAAA,cACP,cAAA,EAAgB;AAAA,aAClB;AAAA,YACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,MAAM;AAAA;AAC7B,SACF;AAEA,QAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,UAAA,MAAM,eAAA;AAAA,YACJ,QAAA;AAAA,YACA,IAAA,CAAK,MAAA;AAAA,YACL;AAAA,WACF;AAAA,QACF;AAEA,QAAA,OAAO,SAAS,IAAA,EAAK;AAAA,MACvB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,IAAA,EAAM,OAAO,aAAA,KAAwC;AACnD,QAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,UACV,uDAAuD,aAAa,CAAA;AAAA,SACtE;AAEA,QAAA,MAAM,WAAW,MAAM,KAAA;AAAA,UACrB,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,kBAAA,EAAqB,aAAa,CAAA,MAAA,CAAA;AAAA,UACjD;AAAA,YACE,MAAA,EAAQ,KAAA;AAAA,YACR,OAAA,EAAS;AAAA,cACP,cAAA,EAAgB;AAAA;AAClB;AACF,SACF;AAEA,QAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,UAAA,MAAM,eAAA,CAAgB,QAAA,EAAU,IAAA,CAAK,MAAA,EAAQ,YAAY,CAAA;AAAA,QAC3D;AAEA,QAAA,OAAO,SAAS,IAAA,EAAK;AAAA,MACvB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,QAAA,EAAU,OAAO,aAAA,EAAuB,MAAA,KAAiC;AACvE,QAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,UACV,CAAA,sCAAA,EAAyC,MAAM,CAAA,mBAAA,EAAsB,aAAa,CAAA;AAAA,SACpF;AAEA,QAAA,MAAM,WAAW,MAAM,KAAA;AAAA,UACrB,GAAG,IAAA,CAAK,OAAO,CAAA,kBAAA,EAAqB,aAAa,UAAU,MAAM,CAAA,CAAA;AAAA,UACjE;AAAA,YACE,MAAA,EAAQ,KAAA;AAAA,YACR,OAAA,EAAS;AAAA,cACP,cAAA,EAAgB;AAAA;AAClB;AACF,SACF;AAEA,QAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,UAAA,MAAM,eAAA,CAAgB,QAAA,EAAU,IAAA,CAAK,MAAA,EAAQ,eAAe,CAAA;AAAA,QAC9D;AAEA,QAAA,OAAO,SAAS,IAAA,EAAK;AAAA,MACvB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,MAAA,EAAQ,OAAO,aAAA,EAAuB,MAAA,KAAiC;AACrE,QAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,UACV,CAAA,oCAAA,EAAuC,MAAM,CAAA,mBAAA,EAAsB,aAAa,CAAA;AAAA,SAClF;AAEA,QAAA,MAAM,WAAW,MAAM,KAAA;AAAA,UACrB,GAAG,IAAA,CAAK,OAAO,CAAA,kBAAA,EAAqB,aAAa,UAAU,MAAM,CAAA,CAAA;AAAA,UACjE;AAAA,YACE,MAAA,EAAQ,QAAA;AAAA,YACR,OAAA,EAAS;AAAA,cACP,cAAA,EAAgB;AAAA;AAClB;AACF,SACF;AAEA,QAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,UAAA,MAAM,eAAA,CAAgB,QAAA,EAAU,IAAA,CAAK,MAAA,EAAQ,aAAa,CAAA;AAAA,QAC5D;AAGA,QAAA,IACE,QAAA,CAAS,WAAW,GAAA,IACpB,QAAA,CAAS,QAAQ,GAAA,CAAI,gBAAgB,MAAM,GAAA,EAC3C;AACA,UAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,QACzB;AAEA,QAAA,OAAO,SAAS,IAAA,EAAK;AAAA,MACvB;AAAA;AACF,GACF;AAAA;AAAA;AAAA;AAAA,EAKA,KAAA,GAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,IAKN,MAAA,EAAQ,OAAO,MAAA,KAGK;AAClB,MAAA,IAAA,CAAK,MAAA,CAAO,MAAM,sCAAA,EAAwC;AAAA,QACxD,SAAS,MAAA,CAAO,OAAA;AAAA,QAChB,QAAA,EAAU,OAAO,IAAA,CAAK;AAAA,OACvB,CAAA;AAGD,MAAA,MAAM,QAAA,GAAW,IAAIC,yBAAA,EAAS;AAG9B,MAAA,QAAA,CAAS,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ;AAAA,QAC1C,QAAA,EAAU,OAAO,IAAA,CAAK,IAAA;AAAA,QACtB,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,IAAA,IAAQ;AAAA,OAClC,CAAA;AACD,MAAA,QAAA,CAAS,MAAA,CAAO,SAAA,EAAW,MAAA,CAAO,OAAO,CAAA;AAGzC,MAAA,MAAM,aAAa,MAAM,IAAI,OAAA,CAAgB,CAAC,SAAS,MAAA,KAAW;AAChE,QAAA,MAAM,SAAmB,EAAC;AAC1B,QAAA,QAAA,CAAS,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAA2B;AAC9C,UAAA,MAAA,CAAO,IAAA,CAAK,OAAO,QAAA,CAAS,KAAK,IAAI,KAAA,GAAQ,MAAA,CAAO,IAAA,CAAK,KAAK,CAAC,CAAA;AAAA,QACjE,CAAC,CAAA;AACD,QAAA,QAAA,CAAS,EAAA,CAAG,OAAO,MAAM,OAAA,CAAQ,OAAO,MAAA,CAAO,MAAM,CAAC,CAAC,CAAA;AACvD,QAAA,QAAA,CAAS,EAAA,CAAG,SAAS,MAAM,CAAA;AAC3B,QAAA,QAAA,CAAS,MAAA,EAAO;AAAA,MAClB,CAAC,CAAA;AAED,MAAA,MAAM,WAAW,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,SAAA,CAAA,EAAa;AAAA,QACvD,MAAA,EAAQ,MAAA;AAAA,QACR,IAAA,EAAM,UAAA;AAAA,QACN,OAAA,EAAS,SAAS,UAAA;AAAW,OAC9B,CAAA;AAED,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,eAAA,CAAgB,QAAA,EAAU,IAAA,CAAK,MAAA,EAAQ,aAAa,CAAA;AAAA,MAC5D;AAEA,MAAA,OAAO,SAAS,IAAA,EAAK;AAAA,IACvB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA,MAAA,EAAQ,OAAO,MAAA,KAAiC;AAC9C,MAAA,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,CAAA,oCAAA,EAAuC,MAAM,CAAA,CAAE,CAAA;AAEjE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,CAAA,EAAG,KAAK,OAAO,CAAA,UAAA,EAAa,MAAM,CAAA,CAAA,EAAI;AAAA,QACjE,MAAA,EAAQ,QAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB;AAAA;AAClB,OACD,CAAA;AAED,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,eAAA,CAAgB,QAAA,EAAU,IAAA,CAAK,MAAA,EAAQ,aAAa,CAAA;AAAA,MAC5D;AAEA,MAAA,IACE,QAAA,CAAS,WAAW,GAAA,IACpB,QAAA,CAAS,QAAQ,GAAA,CAAI,gBAAgB,MAAM,GAAA,EAC3C;AACA,QAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,MACzB;AAEA,MAAA,OAAO,SAAS,IAAA,EAAK;AAAA,IACvB;AAAA,GACF;AACF;;;;"}

package/dist/service/notebooks/documents/documentHelpers.cjs.js

@@ -0,0 +1,36 @@
+'use strict';
+
+var errors = require('@backstage/errors');
+require('htmlparser2');
+require('dns/promises');
+require('net');
+var constant = require('../../constant.cjs.js');
+var fileParser = require('./fileParser.cjs.js');
+
+const isValidFileSize = (fileSize) => {
+  const maxSize = constant.DEFAULT_MAX_FILE_SIZE_MB;
+  return fileSize <= maxSize;
+};
+const isValidFileType = (fileType) => {
+  const normalizedType = fileType.toLowerCase().replace(/^\./, "");
+  return Object.values(constant.SupportedFileType).includes(
+    normalizedType
+  );
+};
+const parseFileContent = async (logger, fileType, file) => {
+  if (!file) {
+    throw new errors.InputError("No file uploaded");
+  }
+  if (!isValidFileSize(file.size)) {
+    throw new errors.InputError(
+      `File size exceeds ${constant.DEFAULT_MAX_FILE_SIZE_MB / 1024 / 1024}MB limit`
+    );
+  }
+  logger.info(`Parsing file ${file.originalname} for fileType ${fileType}`);
+  return await fileParser.parseFile(file.buffer, file.originalname, fileType);
+};
+
+exports.isValidFileSize = isValidFileSize;
+exports.isValidFileType = isValidFileType;
+exports.parseFileContent = parseFileContent;
+//# sourceMappingURL=documentHelpers.cjs.js.map

package/dist/service/notebooks/documents/documentHelpers.cjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentHelpers.cjs.js","sources":["../../../../src/service/notebooks/documents/documentHelpers.ts"],"sourcesContent":["/*\n * Copyright Red Hat, Inc.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { LoggerService } from '@backstage/backend-plugin-api';\nimport { InputError } from '@backstage/errors';\n\nimport { Parser } from 'htmlparser2';\n\nimport dns from 'dns/promises';\nimport { isIP } from 'net';\n\nimport {\n  DEFAULT_MAX_FILE_SIZE_MB,\n  FILTERED_CONTENT_MARKER,\n  HTML_BLOCK_TAGS,\n  HTML_IGNORED_TAGS,\n  MAX_CONSECUTIVE_NEWLINES,\n  PROMPT_INJECTION_PATTERNS,\n  SSRF_BLOCKED_HOSTNAMES,\n  SupportedFileType,\n} from '../../constant';\nimport { parseFile } from './fileParser';\n\n// ==============================================================================\n// URL Support Functions (Reserved for Future URL File Type Support)\n// ==============================================================================\n// The following functions are currently unused but reserved for future\n// implementation of URL file type parsing. They provide:\n// - URL validation and format checking\n// - SSRF (Server-Side Request Forgery) protection\n// - HTML content parsing and sanitization\n// - Prompt injection attack prevention\n//\n// These functions were part of the URL parsing implementation that was removed\n// but are kept here to facilitate re-implementation if needed in the future.\n// ==============================================================================\n\n/**\n * Validate URL format\n * @reserved Reserved for future URL file type support\n */\nexport const isValidURL = (urlString: string): boolean => {\n  try {\n    const url = new URL(urlString);\n    return url.protocol === 'http:' || url.protocol === 'https:';\n  } catch {\n    return false;\n  }\n};\n\n/**\n * Validate file size (max 20MB by default)\n */\nexport const isValidFileSize = (fileSize: number): boolean => {\n  const maxSize = DEFAULT_MAX_FILE_SIZE_MB;\n  return fileSize <= maxSize;\n};\n\n/**\n * Validate file type\n */\nexport const isValidFileType = (fileType: string): boolean => {\n  const normalizedType = fileType.toLowerCase().replace(/^\\./, '');\n  return Object.values(SupportedFileType).includes(\n    normalizedType as SupportedFileType,\n  );\n};\n\n/**\n * Parse file from upload\n * @param logger - Logger service\n * @param fileType - File type\n * @param file - File to parse\n * @returns Parsed file\n */\nexport const parseFileContent = async (\n  logger: LoggerService,\n  fileType: string,\n  file?: Express.Multer.File,\n) => {\n  if (!file) {\n    throw new InputError('No file uploaded');\n  }\n  if (!isValidFileSize(file.size)) {\n    throw new InputError(\n      `File size exceeds ${DEFAULT_MAX_FILE_SIZE_MB / 1024 / 1024}MB limit`,\n    );\n  }\n  logger.info(`Parsing file ${file.originalname} for fileType ${fileType}`);\n  return await parseFile(file.buffer, file.originalname, fileType);\n};\n\n/**\n * Check if an IP address is private, internal, or a metadata endpoint\n * Blocks SSRF attacks to internal networks\n * @reserved Reserved for future URL file type support\n */\nconst isPrivateOrInternalIP = (ip: string): boolean => {\n  // Check if it's a valid IP\n  const ipVersion = isIP(ip);\n  if (ipVersion === 0) {\n    return false; // Not a valid IP\n  }\n\n  if (ipVersion === 4) {\n    const parts = ip.split('.').map(Number);\n\n    switch (parts[0]) {\n      case 0: // 0.0.0.0/8 - Current network\n      case 10: // 10.0.0.0/8 - Private\n      case 127: // 127.0.0.0/8 - Loopback\n        return true;\n      case 100: // 100.64.0.0/10 - Carrier-grade NAT\n        return parts[1] >= 64 && parts[1] <= 127;\n      case 169: // 169.254.0.0/16 - Link-local (includes cloud metadata endpoint 169.254.169.254)\n        return parts[1] === 254;\n      case 172: // 172.16.0.0/12 - Private\n        return parts[1] >= 16 && parts[1] <= 31;\n      case 192: // 192.168.0.0/16 - Private\n        return parts[1] === 168;\n      default:\n        // 224.0.0.0/4 - Multicast, 240.0.0.0/4 - Reserved\n        return parts[0] >= 224;\n    }\n  } else if (ipVersion === 6) {\n    const lower = ip.toLowerCase();\n\n    // ::1 - Loopback\n    if (lower === '::1' || lower === '0:0:0:0:0:0:0:1') return true;\n\n    // fc00::/7 - Unique local address\n    if (lower.startsWith('fc') || lower.startsWith('fd')) return true;\n\n    // fe80::/10 - Link-local\n    if (\n      lower.startsWith('fe8') ||\n      lower.startsWith('fe9') ||\n      lower.startsWith('fea') ||\n      lower.startsWith('feb')\n    )\n      return true;\n\n    // ::ffff:0:0/96 - IPv4-mapped IPv6\n    if (lower.startsWith('::ffff:')) {\n      const ipv4Part = ip.substring(7);\n      // Check if it's in dotted-decimal format (e.g., ::ffff:127.0.0.1)\n      if (ipv4Part.includes('.')) {\n        return isPrivateOrInternalIP(ipv4Part);\n      }\n      // Handle hex format (e.g., ::ffff:7f00:1 which is 127.0.0.1)\n      // Extract the hex parts and check against private ranges\n      const parts = ipv4Part.split(':');\n      if (parts.length >= 1) {\n        const firstHex = parseInt(parts[0], 16);\n        // Check for common private ranges in hex:\n        // 127.x.x.x -> 0x7F00-0x7FFF (loopback)\n        // 10.x.x.x -> 0x0A00-0x0AFF (private)\n        // 192.168.x.x -> 0xC0A8 (private)\n        // 172.16-31.x.x -> 0xAC10-0xAC1F (private)\n        // 169.254.x.x -> 0xA9FE (link-local)\n        if (\n          (firstHex >= 0x7f00 && firstHex <= 0x7fff) || // 127.x.x.x\n          (firstHex >= 0x0a00 && firstHex <= 0x0aff) || // 10.x.x.x\n          firstHex === 0xc0a8 || // 192.168.x.x\n          (firstHex >= 0xac10 && firstHex <= 0xac1f) || // 172.16-31.x.x\n          firstHex === 0xa9fe // 169.254.x.x\n        ) {\n          return true;\n        }\n      }\n    }\n  }\n\n  return false;\n};\n\n/**\n * Validate URL and check for SSRF (Server-Side Request Forgery) vulnerabilities\n *\n * This function protects against SSRF attacks by:\n * 1. Blocking access to private/internal IP ranges (RFC 1918, link-local, loopback)\n * 2. Blocking access to cloud metadata endpoints (AWS, GCP, Azure)\n * 3. Resolving hostnames to IPs to prevent DNS rebinding attacks\n *\n * @param urlString - URL to validate\n * @throws InputError if URL points to blocked hostname or private IP\n * @reserved Reserved for future URL file type support\n */\nexport const validateURLForSSRF = async (urlString: string): Promise<void> => {\n  const url = new URL(urlString);\n\n  // Strip brackets from IPv6 addresses (e.g., [::1] -> ::1)\n  const hostname = url.hostname.replace(/^\\[|\\]$/g, '');\n\n  // Check if hostname is already an IP address\n  const ipVersion = isIP(hostname);\n  if (ipVersion !== 0) {\n    if (isPrivateOrInternalIP(hostname)) {\n      throw new InputError(\n        'Access to private/internal IP addresses is not allowed',\n      );\n    }\n    return;\n  }\n\n  // Block localhost and common internal hostnames used in SSRF attacks\n  const lowerHostname = hostname.toLowerCase();\n  if (SSRF_BLOCKED_HOSTNAMES.includes(lowerHostname as any)) {\n    throw new InputError(`Access to ${lowerHostname} is not allowed`);\n  }\n\n  // Resolve hostname to IP addresses\n  try {\n    const addresses = await dns.resolve(hostname);\n\n    // Check all resolved IPs\n    for (const address of addresses) {\n      if (isPrivateOrInternalIP(address)) {\n        throw new InputError(\n          `URL resolves to private/internal IP address (${address}), which is not allowed`,\n        );\n      }\n    }\n  } catch (error: any) {\n    // Re-throw InputError from isPrivateOrInternalIP check\n    if (error instanceof InputError) {\n      throw error;\n    }\n    // DNS resolution failure is a user input issue (invalid hostname)\n    throw new InputError(`Failed to resolve hostname: ${error.message}`);\n  }\n};\n\n/**\n * Strip HTML tags and extract readable text from HTML content\n * @reserved Reserved for future URL file type support\n */\nexport const stripHtmlTags = (html: string): string => {\n  let text = '';\n  let ignoring = false;\n\n  const parser = new Parser(\n    {\n      onopentag(name) {\n        if (HTML_IGNORED_TAGS.has(name)) ignoring = true;\n      },\n      onclosetag(name) {\n        if (HTML_IGNORED_TAGS.has(name)) ignoring = false;\n        if (HTML_BLOCK_TAGS.has(name)) text += '\\n';\n      },\n      ontext(data) {\n        if (!ignoring) text += data;\n      },\n    },\n    { decodeEntities: true },\n  );\n\n  parser.write(html);\n  parser.end();\n\n  return text\n    .replace(/\\n\\s*\\n/g, '\\n\\n')\n    .replace(/[ \\t]+/g, ' ')\n    .trim();\n};\n\n/**\n * Sanitize content to prevent prompt injection attacks\n * Detects and filters common prompt injection patterns\n * @param content - Raw content to sanitize\n * @returns Sanitized content with prompt injection patterns removed\n * @reserved Reserved for future URL file type support\n */\nexport const sanitizeContentForRAG = (content: string): string => {\n  let sanitized = content;\n\n  // Replace prompt injection patterns with filtered marker\n  for (const pattern of PROMPT_INJECTION_PATTERNS) {\n    sanitized = sanitized.replace(pattern, FILTERED_CONTENT_MARKER);\n  }\n\n  // Limit excessive consecutive newlines to prevent context stuffing\n  const newlinePattern = new RegExp(\n    `\\\\n{${MAX_CONSECUTIVE_NEWLINES + 1},}`,\n    'g',\n  );\n  sanitized = sanitized.replace(\n    newlinePattern,\n    '\\n'.repeat(MAX_CONSECUTIVE_NEWLINES),\n  );\n\n  // Normalize excessive whitespace\n  sanitized = sanitized.replace(/[ \\t]{10,}/g, ' ');\n\n  return sanitized.trim();\n};\n"],"names":["DEFAULT_MAX_FILE_SIZE_MB","SupportedFileType","InputError","parseFile"],"mappings":";;;;;;;;;AAiEO,MAAM,eAAA,GAAkB,CAAC,QAAA,KAA8B;AAC5D,EAAA,MAAM,OAAA,GAAUA,iCAAA;AAChB,EAAA,OAAO,QAAA,IAAY,OAAA;AACrB;AAKO,MAAM,eAAA,GAAkB,CAAC,QAAA,KAA8B;AAC5D,EAAA,MAAM,iBAAiB,QAAA,CAAS,WAAA,EAAY,CAAE,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/D,EAAA,OAAO,MAAA,CAAO,MAAA,CAAOC,0BAAiB,CAAA,CAAE,QAAA;AAAA,IACtC;AAAA,GACF;AACF;AASO,MAAM,gBAAA,GAAmB,OAC9B,MAAA,EACA,QAAA,EACA,IAAA,KACG;AACH,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,MAAM,IAAIC,kBAAW,kBAAkB,CAAA;AAAA,EACzC;AACA,EAAA,IAAI,CAAC,eAAA,CAAgB,IAAA,CAAK,IAAI,CAAA,EAAG;AAC/B,IAAA,MAAM,IAAIA,iBAAA;AAAA,MACR,CAAA,kBAAA,EAAqBF,iCAAA,GAA2B,IAAA,GAAO,IAAI,CAAA,QAAA;AAAA,KAC7D;AAAA,EACF;AACA,EAAA,MAAA,CAAO,KAAK,CAAA,aAAA,EAAgB,IAAA,CAAK,YAAY,CAAA,cAAA,EAAiB,QAAQ,CAAA,CAAE,CAAA;AACxE,EAAA,OAAO,MAAMG,oBAAA,CAAU,IAAA,CAAK,MAAA,EAAQ,IAAA,CAAK,cAAc,QAAQ,CAAA;AACjE;;;;;;"}