@sockethub/platform-caldav 1.0.0-beta.0 → 1.0.0-beta.1

package/README.md

@@ -8,9 +8,13 @@ subscription links, without a CalDAV account.
 Requests accept only public HTTPS services by default. Administrators can opt
 in to HTTP with `packageConfig.allowInsecureHttp` and private-network targets
 with `packageConfig.allowPrivateAddresses`; these are server settings and
-cannot be enabled by a connected client. Credentials and OAuth tokens are sent
-only to the configured origin. Every calendar and item target is checked
-against the authenticated account before it is used.
+cannot be enabled by a connected client. Address checks use the shared
+outbound URL guard, including IPv6 embeddings of private ranges and the
+local-use NAT64 prefix `64:ff9b:1::/48`. See
+[Outbound URL guard](../../docs/configuration.md#outbound-url-guard).
+Credentials and OAuth tokens are sent only to the configured origin. Every
+calendar and item target is checked against the authenticated account before
+it is used.
 
 ## Authentication
 

package/dist/index.js

@@ -39408,7 +39408,7 @@ var ActivityStreamSchema = {
 var package_default = {
   name: "@sockethub/schemas",
   description: "JSON schema files for validating Sockethub Activity Streams",
-  version: "3.0.0-beta.0",
+  version: "3.0.0-beta.1",
   type: "module",
   private: false,
   author: "Nick Jennings <nick@silverbucket.net>",
@@ -39478,7 +39478,7 @@ var package_default = {
     "ajv-formats": "^2.1.1",
     "ajv-formats-draft2019": "^1.6.1"
   },
-  gitHead: "75002ae8f15d7679bd58a9327f5a1d7eeaffa237",
+  gitHead: "06c9062f1cb5f0c0599fd979e6e91da79f08eda0",
   types: "./dist/index.d.ts"
 };
 
@@ -39640,7 +39640,8 @@ var SockethubConfigSchema = {
           type: "object",
           additionalProperties: false,
           properties: {
-            connectTimeoutMs: { type: "number" }
+            connectTimeoutMs: { type: "number" },
+            allowPrivateAddresses: { type: "boolean" }
           }
         },
         "@sockethub/platform-metadata": {
@@ -39730,11 +39731,23 @@ var SockethubConfigSchema = {
       type: "object",
       additionalProperties: false,
       properties: {
+        maxInstancesPerSession: {
+          type: "integer",
+          minimum: 0,
+          default: 10,
+          description: "Maximum persistent instances per socket session. 0 disables the cap."
+        },
+        maxInstancesPerIp: {
+          type: "integer",
+          minimum: 0,
+          default: 20,
+          description: "Maximum persistent instances per client IP, including HTTP actions. 0 disables the cap."
+        },
         maxPlatformInstances: {
           type: "number",
           minimum: 0,
           default: 100,
-          description: "Upper bound on concurrently running platform instances " + "(child processes). Each persistent-platform actor forks " + "its own process, so an unbounded count is a resource " + "exhaustion risk on public instances. 0 disables the cap."
+          description: "Upper bound on concurrently running persistent platform instances " + "(child processes). Each persistent-platform actor forks " + "its own process, so an unbounded count is a resource " + "exhaustion risk on public instances. 0 disables the cap."
         }
       }
     },
@@ -39915,33 +39928,66 @@ var SockethubConfigSchema = {
 };
 var SockethubConfigSchemaId = versionedSchemaId(SockethubConfigSchema.$id, package_default.version);
 
-// ../schemas/src/service-descriptor.ts
-var import_ajv = __toESM(require_ajv(), 1);
-var ajv = new import_ajv.default({ strictTypes: false, allErrors: true });
+// ../schemas/src/helpers/codegen.ts
+var available;
+var warned = false;
+function isCodegenAvailable() {
+  if (available === undefined) {
+    try {
+      new Function("return true");
+      available = true;
+    } catch {
+      available = false;
+    }
+  }
+  return available;
+}
+function warnCodegenUnavailable() {
+  if (warned) {
+    return;
+  }
+  warned = true;
+  console.warn("[@sockethub/schemas] Schema validation is disabled: this environment's Content Security Policy blocks `new Function`, which Ajv needs to compile schemas. The Sockethub server still validates every message.");
+}
 
 // ../schemas/src/validator.ts
-var import_ajv2 = __toESM(require_ajv(), 1);
+var import_ajv = __toESM(require_ajv(), 1);
 var import_ajv_formats = __toESM(require_dist(), 1);
 var import_ajv_formats_draft2019 = __toESM(require_ajv_formats_draft2019(), 1);
-var ajv2 = new import_ajv2.default({ strictTypes: false, allErrors: true });
-import_ajv_formats.default(ajv2);
-import_ajv_formats_draft2019.default(ajv2);
 var schemaURL = "https://sockethub.org/schemas/v0";
 var schemas = {};
 var systemContextsRegistered = false;
 schemas[`${schemaURL}/activity-stream`] = ActivityStreamSchema;
-for (const uri in schemas) {
-  ajv2.addSchema(schemas[uri], uri);
+var ajv;
+function getAjv() {
+  if (!isCodegenAvailable()) {
+    warnCodegenUnavailable();
+    return;
+  }
+  if (!ajv) {
+    const instance = new import_ajv.default({ strictTypes: false, allErrors: true });
+    import_ajv_formats.default(instance);
+    import_ajv_formats_draft2019.default(instance);
+    for (const uri in schemas) {
+      instance.addSchema(schemas[uri], uri);
+    }
+    ajv = instance;
+  }
+  return ajv;
 }
 function registerSystemContext(platformId, contextUrl) {
   registerPlatformContext(platformId, contextUrl, `${schemaURL}/context/${platformId}/messages`, `${schemaURL}/context/${platformId}/credentials`);
+  const instance = getAjv();
+  if (!instance) {
+    return;
+  }
   const messageSchemaRef = `${schemaURL}/context/${platformId}/messages`;
-  if (!ajv2.getSchema(messageSchemaRef)) {
-    ajv2.addSchema({}, messageSchemaRef);
+  if (!instance.getSchema(messageSchemaRef)) {
+    instance.addSchema({}, messageSchemaRef);
   }
   const credentialsSchemaRef = `${schemaURL}/context/${platformId}/credentials`;
-  if (!ajv2.getSchema(credentialsSchemaRef)) {
-    ajv2.addSchema({}, credentialsSchemaRef);
+  if (!instance.getSchema(credentialsSchemaRef)) {
+    instance.addSchema({}, credentialsSchemaRef);
   }
 }
 function registerSystemPlatformContexts() {
@@ -68338,7 +68384,7 @@ END:VCALENDAR\r
 var package_default2 = {
   name: "@sockethub/platform-caldav",
   description: "A Sockethub platform for synchronizing CalDAV calendars, events, and tasks",
-  version: "1.0.0-beta.0",
+  version: "1.0.0-beta.1",
   type: "module",
   private: false,
   license: "LGPL-3.0+",
@@ -68372,16 +68418,16 @@ var package_default2 = {
     test: "bun test src/"
   },
   dependencies: {
-    "@sockethub/dav": "^1.0.0-beta.0",
-    "@sockethub/schemas": "^3.0.0-beta.0",
-    "@sockethub/util": "^1.0.0-beta.0",
+    "@sockethub/dav": "^1.0.0-beta.1",
+    "@sockethub/schemas": "^3.0.0-beta.1",
+    "@sockethub/util": "^1.0.0-beta.1",
     undici: "^7.30.0"
   },
   devDependencies: {
     "@types/bun": "latest"
   },
   peerDependencies: {
-    "@sockethub/server": "^5.0.0-beta.0"
+    "@sockethub/server": "^5.0.0-beta.1"
   },
   peerDependenciesMeta: {
     "@sockethub/server": {
@@ -68389,7 +68435,7 @@ var package_default2 = {
     }
   },
   types: "./dist/index.d.ts",
-  gitHead: "75002ae8f15d7679bd58a9327f5a1d7eeaffa237"
+  gitHead: "06c9062f1cb5f0c0599fd979e6e91da79f08eda0"
 };
 
 // src/schema.ts
@@ -69068,4 +69114,4 @@ export {
   foldLine
 };
 
-//# debugId=C209879031D74BD164756E2164756E21
+//# debugId=0A21E97D9B80118364756E2164756E21