@svgrid/grid 2.6.21 → 2.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (358) hide show
  1. package/CHANGELOG.md +150 -88
  2. package/README.md +221 -199
  3. package/dist/FlexRender.svelte +96 -96
  4. package/dist/GridFooter.svelte +181 -181
  5. package/dist/GridMenus.svelte +201 -18
  6. package/dist/SvAutoComplete.svelte +169 -165
  7. package/dist/SvAvatar.svelte +75 -75
  8. package/dist/SvCalendar.svelte +503 -503
  9. package/dist/SvCarousel.svelte +141 -141
  10. package/dist/SvCheckBox.svelte +102 -102
  11. package/dist/SvCircularProgress.svelte +109 -109
  12. package/dist/SvColorInput.svelte +181 -181
  13. package/dist/SvComboBox.svelte +279 -275
  14. package/dist/SvContextMenu.svelte +116 -116
  15. package/dist/SvCountryInput.svelte +163 -163
  16. package/dist/SvDateRangeInput.svelte +25 -3
  17. package/dist/SvDrawer.svelte +254 -254
  18. package/dist/SvDropDownList.svelte +378 -374
  19. package/dist/SvDurationInput.svelte +126 -126
  20. package/dist/SvField.svelte +293 -293
  21. package/dist/SvForm.svelte +437 -437
  22. package/dist/SvGrid.controller.svelte.d.ts +61 -9
  23. package/dist/SvGrid.controller.svelte.js +363 -123
  24. package/dist/SvGrid.css +222 -1
  25. package/dist/SvGrid.helpers.d.ts +55 -0
  26. package/dist/SvGrid.helpers.js +83 -0
  27. package/dist/SvGrid.svelte +255 -56
  28. package/dist/SvGrid.types.d.ts +146 -1
  29. package/dist/SvGridCellEditor.svelte +744 -662
  30. package/dist/SvGridChart.svelte +1716 -1716
  31. package/dist/SvGridChartPanel.svelte +485 -485
  32. package/dist/SvGridChartView.svelte +70 -70
  33. package/dist/SvGridDropdown.svelte +728 -728
  34. package/dist/SvGridSelect.svelte +270 -266
  35. package/dist/SvGridSelect.svelte.d.ts +1 -1
  36. package/dist/SvGroupCell.svelte +116 -116
  37. package/dist/SvListBox.svelte +334 -326
  38. package/dist/SvMaskedInput.svelte +122 -122
  39. package/dist/SvMenu.svelte +124 -124
  40. package/dist/SvMenuList.svelte +146 -146
  41. package/dist/SvMultiSelect.svelte +293 -289
  42. package/dist/SvMultiSelect.svelte.d.ts +1 -1
  43. package/dist/SvNumberInput.svelte +172 -168
  44. package/dist/SvOtpInput.svelte +158 -158
  45. package/dist/SvPasswordInput.svelte +151 -151
  46. package/dist/SvPhoneInput.svelte +133 -133
  47. package/dist/SvPopover.svelte +197 -197
  48. package/dist/SvProgress.svelte +116 -116
  49. package/dist/SvRadioGroup.svelte +107 -107
  50. package/dist/SvRating.svelte +112 -112
  51. package/dist/SvResult.svelte +73 -73
  52. package/dist/SvRichCell.svelte +125 -0
  53. package/dist/SvRichCell.svelte.d.ts +15 -0
  54. package/dist/SvRichText.svelte +211 -211
  55. package/dist/SvRowGroupPanel.svelte +170 -170
  56. package/dist/SvScrollArea.svelte +61 -61
  57. package/dist/SvSlider.svelte +203 -203
  58. package/dist/SvSwitchButton.svelte +108 -108
  59. package/dist/SvTagsInput.svelte +115 -115
  60. package/dist/SvTextArea.svelte +5 -1
  61. package/dist/SvTextInput.svelte +147 -147
  62. package/dist/SvTimePicker.svelte +245 -245
  63. package/dist/SvToaster.svelte +159 -159
  64. package/dist/SvToggleButton.svelte +85 -85
  65. package/dist/SvTooltip.svelte +161 -161
  66. package/dist/SvTour.svelte +208 -208
  67. package/dist/SvTree.svelte +444 -444
  68. package/dist/SvTreeSelect.svelte +239 -235
  69. package/dist/SvTreeSelect.svelte.d.ts +1 -1
  70. package/dist/builtin-editors.d.ts +2 -2
  71. package/dist/builtin-editors.js +19 -3
  72. package/dist/cdn/GridMenus-C4oLsJyj.js +600 -0
  73. package/dist/cdn/GridMenus-yEivjNwl.js +601 -0
  74. package/dist/cdn/SvDateRangeInput-Bh0A0JkF.js +199 -0
  75. package/dist/cdn/SvDateRangeInput-DflbiP7N.js +198 -0
  76. package/dist/cdn/SvDateTimePicker-BWwpfB_o.js +812 -0
  77. package/dist/cdn/SvDateTimePicker-Bivn8dAP.js +816 -0
  78. package/dist/cdn/SvGridCellEditor-AXL8cHGO.js +550 -0
  79. package/dist/cdn/SvGridCellEditor-Ba7rY3eu.js +549 -0
  80. package/dist/cdn/{SvGridChart-BwVos976.js → SvGridChart-Bs2GIR2Q.js} +1 -1
  81. package/dist/cdn/{SvGridChart-BEJmNNx9.js → SvGridChart-CwhFz7GV.js} +1 -1
  82. package/dist/cdn/{SvGridChartPanel-BOknOkrP.js → SvGridChartPanel-1WXuStzM.js} +1 -1
  83. package/dist/cdn/{SvGridChartPanel-D2PjII4O.js → SvGridChartPanel-e5_nqNP9.js} +1 -1
  84. package/dist/cdn/{SvGridChartView-00LPUHL1.js → SvGridChartView-SmPW10dI.js} +1 -1
  85. package/dist/cdn/{SvGridChartView-BhUEJ5ki.js → SvGridChartView-eSPuJE6g.js} +1 -1
  86. package/dist/cdn/{SvGridDropdown-D0VdjeR8.js → SvGridDropdown-B1ZcLpgs.js} +1 -1
  87. package/dist/cdn/{SvGridDropdown-D13MtJ2j.js → SvGridDropdown-CtdbHcIS.js} +1 -1
  88. package/dist/cdn/column-resize-DsfNXMom.js +102 -0
  89. package/dist/cdn/date-format-CcP1tafP.js +1395 -0
  90. package/dist/cdn/date-format-DZT7T1wf.js +1393 -0
  91. package/dist/cdn/{editor-registry-CiI0xlKg.js → editor-registry-BhgE3S84.js} +51 -25
  92. package/dist/cdn/row-resize-BRcimkUT.js +95 -0
  93. package/dist/cdn/{src-BYq-qyrp.js → src-COC0vnpg.js} +7846 -7317
  94. package/dist/cdn/{src-DBel9wRZ.js → src-pYGV2rMR.js} +10033 -9504
  95. package/dist/cdn/svgrid.js +15 -11
  96. package/dist/cdn/svgrid.svelte-external.js +15 -11
  97. package/dist/cell-values.d.ts +16 -0
  98. package/dist/cell-values.js +28 -0
  99. package/dist/chart-export.js +8 -8
  100. package/dist/clipboard.d.ts +22 -0
  101. package/dist/clipboard.js +405 -27
  102. package/dist/column-groups.js +1 -1
  103. package/dist/column-resize.d.ts +46 -0
  104. package/dist/column-resize.js +205 -0
  105. package/dist/columns.d.ts +0 -3
  106. package/dist/columns.js +0 -57
  107. package/dist/core.d.ts +19 -4
  108. package/dist/core.js +460 -119
  109. package/dist/editing.js +12 -7
  110. package/dist/editors/cell-editors.d.ts +11 -0
  111. package/dist/editors/cell-editors.js +18 -1
  112. package/dist/filtering/excel-filters.js +28 -0
  113. package/dist/grid-messages.d.ts +15 -0
  114. package/dist/grid-messages.js +15 -0
  115. package/dist/group-display.d.ts +1 -1
  116. package/dist/index.d.ts +6 -1
  117. package/dist/index.js +10 -0
  118. package/dist/list-option.d.ts +6 -0
  119. package/dist/menus.js +41 -8
  120. package/dist/row-resize.d.ts +11 -0
  121. package/dist/row-resize.js +7 -1
  122. package/dist/sanitize-html.d.ts +37 -0
  123. package/dist/sanitize-html.js +234 -0
  124. package/dist/selection-bar-view.svelte.d.ts +25 -0
  125. package/dist/selection-bar-view.svelte.js +13 -0
  126. package/dist/selection.d.ts +2 -1
  127. package/dist/selection.js +133 -8
  128. package/dist/spreadsheet.d.ts +1 -1
  129. package/dist/spreadsheet.js +1 -1
  130. package/package.json +11 -11
  131. package/src/FlexRender.svelte +96 -96
  132. package/src/GridFooter.svelte +181 -181
  133. package/src/GridMenus.svelte +201 -18
  134. package/src/SvAutoComplete.svelte +169 -165
  135. package/src/SvAvatar.svelte +75 -75
  136. package/src/SvCalendar.svelte +503 -503
  137. package/src/SvCalendar.test.ts +226 -226
  138. package/src/SvCarousel.svelte +141 -141
  139. package/src/SvCheckBox.svelte +102 -102
  140. package/src/SvCircularProgress.svelte +109 -109
  141. package/src/SvColorInput.svelte +181 -181
  142. package/src/SvComboBox.svelte +279 -275
  143. package/src/SvContextMenu.svelte +116 -116
  144. package/src/SvCountryInput.svelte +163 -163
  145. package/src/SvDateRangeInput.svelte +25 -3
  146. package/src/SvDrawer.svelte +254 -254
  147. package/src/SvDropDownList.svelte +378 -374
  148. package/src/SvDurationInput.svelte +126 -126
  149. package/src/SvField.svelte +293 -293
  150. package/src/SvForm.svelte +437 -437
  151. package/src/SvForm.test.ts +411 -411
  152. package/src/SvGrid.controller.svelte.ts +404 -133
  153. package/src/SvGrid.css +222 -1
  154. package/src/SvGrid.helpers.ts +87 -0
  155. package/src/SvGrid.svelte +255 -56
  156. package/src/SvGrid.types.ts +2092 -1940
  157. package/src/SvGridCellEditor.svelte +744 -662
  158. package/src/SvGridChart.svelte +1716 -1716
  159. package/src/SvGridChartPanel.svelte +485 -485
  160. package/src/SvGridChartView.svelte +70 -70
  161. package/src/SvGridDropdown.svelte +728 -728
  162. package/src/SvGridSelect.svelte +270 -266
  163. package/src/SvGroupCell.svelte +116 -116
  164. package/src/SvListBox.svelte +334 -326
  165. package/src/SvMaskedInput.svelte +122 -122
  166. package/src/SvMenu.svelte +124 -124
  167. package/src/SvMenu.test.ts +97 -97
  168. package/src/SvMenuList.svelte +146 -146
  169. package/src/SvMultiSelect.svelte +293 -289
  170. package/src/SvNumberInput.svelte +172 -168
  171. package/src/SvOtpInput.svelte +158 -158
  172. package/src/SvPasswordInput.svelte +151 -151
  173. package/src/SvPhoneInput.svelte +133 -133
  174. package/src/SvPopover.svelte +197 -197
  175. package/src/SvProgress.svelte +116 -116
  176. package/src/SvRadioGroup.svelte +107 -107
  177. package/src/SvRating.svelte +112 -112
  178. package/src/SvResult.svelte +73 -73
  179. package/src/SvRichCell.svelte +125 -0
  180. package/src/SvRichText.svelte +211 -211
  181. package/src/SvRowGroupPanel.svelte +170 -170
  182. package/src/SvScrollArea.svelte +61 -61
  183. package/src/SvSlider.svelte +203 -203
  184. package/src/SvSwitchButton.svelte +108 -108
  185. package/src/SvTagsInput.svelte +115 -115
  186. package/src/SvTextArea.svelte +5 -1
  187. package/src/SvTextInput.svelte +147 -147
  188. package/src/SvTimePicker.svelte +245 -245
  189. package/src/SvToaster.svelte +159 -159
  190. package/src/SvToaster.test.ts +95 -95
  191. package/src/SvToggleButton.svelte +85 -85
  192. package/src/SvTooltip.svelte +161 -161
  193. package/src/SvTour.svelte +208 -208
  194. package/src/SvTree.svelte +444 -444
  195. package/src/SvTreeSelect.svelte +239 -235
  196. package/src/a11y/dismissable.test.ts +119 -119
  197. package/src/a11y/dismissable.ts +114 -114
  198. package/src/a11y.contract.test.ts +49 -49
  199. package/src/a11y.test.ts +59 -59
  200. package/src/a11y.ts +61 -61
  201. package/src/ai.test.ts +502 -502
  202. package/src/ai.ts +1419 -1419
  203. package/src/build-api.coverage.test.ts +633 -633
  204. package/src/build-api.ts +846 -846
  205. package/src/builtin-editors.grid.test.ts +83 -83
  206. package/src/builtin-editors.test.ts +18 -1
  207. package/src/builtin-editors.ts +19 -3
  208. package/src/cell-formatting.ts +171 -171
  209. package/src/cell-render.test.ts +513 -513
  210. package/src/cell-render.ts +496 -496
  211. package/src/cell-values.ts +148 -118
  212. package/src/chart-export.ts +202 -202
  213. package/src/chart-view.svelte.ts +36 -36
  214. package/src/chart.ts +2321 -2321
  215. package/src/clipboard.test.ts +93 -20
  216. package/src/clipboard.ts +433 -33
  217. package/src/collaboration.test.ts +104 -104
  218. package/src/collaboration.ts +167 -167
  219. package/src/column-groups.ts +78 -78
  220. package/src/column-resize.test.ts +381 -0
  221. package/src/column-resize.ts +227 -0
  222. package/src/columns.test.ts +0 -103
  223. package/src/columns.ts +0 -58
  224. package/src/core.aggregate.test.ts +134 -0
  225. package/src/core.filter.test.ts +156 -0
  226. package/src/core.grouping.test.ts +146 -0
  227. package/src/core.performance.test.ts +30 -30
  228. package/src/core.row-shape.test.ts +119 -0
  229. package/src/core.rowmodel-cache.test.ts +121 -0
  230. package/src/core.sort.test.ts +293 -0
  231. package/src/core.ts +1865 -1468
  232. package/src/createAutocomplete.svelte.ts +132 -132
  233. package/src/createCombobox.svelte.ts +191 -191
  234. package/src/createCountryInput.svelte.ts +157 -157
  235. package/src/createDropdownList.svelte.ts +168 -168
  236. package/src/createForm.svelte.ts +386 -386
  237. package/src/createGrid.svelte.ts +42 -42
  238. package/src/createGrid.test.ts +10 -10
  239. package/src/createGridState.svelte.ts +17 -17
  240. package/src/createListbox.svelte.ts +250 -250
  241. package/src/createMenu.svelte.ts +224 -224
  242. package/src/createPopoverSelect.svelte.ts +213 -213
  243. package/src/createSlider.svelte.ts +191 -191
  244. package/src/createTooltip.svelte.ts +144 -144
  245. package/src/createTree.svelte.ts +322 -322
  246. package/src/date-string-column.test.ts +87 -0
  247. package/src/datetime/date-core.ts +206 -206
  248. package/src/datetime/date-restrict.ts +61 -61
  249. package/src/datetime/timezone.ts +135 -135
  250. package/src/dock-manager-model.ts +596 -596
  251. package/src/dock-model.ts +374 -374
  252. package/src/editing.test.ts +974 -949
  253. package/src/editing.ts +609 -606
  254. package/src/editor-block-prop.test.ts +132 -0
  255. package/src/editor-contract.ts +171 -171
  256. package/src/editor-registry.grid.test.ts +144 -144
  257. package/src/editor-registry.ts +122 -122
  258. package/src/editors/cell-editors.ts +27 -1
  259. package/src/export-data-api.test.ts +126 -126
  260. package/src/export-format.test.ts +107 -107
  261. package/src/export-format.ts +601 -601
  262. package/src/filter-operators.ts +160 -160
  263. package/src/filtering/excel-filters.ts +325 -295
  264. package/src/filtering/normalize-fast-path.test.ts +104 -0
  265. package/src/flex-render.ts +3 -3
  266. package/src/form-field.ts +127 -127
  267. package/src/grid-messages.ts +34 -0
  268. package/src/group-display.test.ts +167 -167
  269. package/src/group-display.ts +200 -200
  270. package/src/headless.ts +87 -87
  271. package/src/index.ts +25 -1
  272. package/src/js-scroller.svelte.ts +173 -173
  273. package/src/keyboard-handlers.ts +270 -270
  274. package/src/keyboard.test.ts +59 -59
  275. package/src/keyboard.ts +97 -97
  276. package/src/list-nav.test.ts +49 -49
  277. package/src/list-nav.ts +29 -29
  278. package/src/list-option.test.ts +56 -56
  279. package/src/list-option.ts +179 -173
  280. package/src/menus.test.ts +43 -0
  281. package/src/menus.ts +597 -567
  282. package/src/merge-objects.ts +48 -48
  283. package/src/move-cells.test.ts +850 -0
  284. package/src/number-editor-literal.test.ts +84 -0
  285. package/src/number-editor.grid.test.ts +160 -0
  286. package/src/overlays.test.ts +90 -90
  287. package/src/positioning.ts +268 -268
  288. package/src/render-component.ts +28 -28
  289. package/src/resize-props.test.ts +361 -0
  290. package/src/row-drag-touch.ts +211 -211
  291. package/src/row-drag.test.ts +353 -353
  292. package/src/row-drag.ts +415 -415
  293. package/src/row-resize.test.ts +524 -493
  294. package/src/row-resize.ts +228 -210
  295. package/src/sanitize-html.test.ts +182 -0
  296. package/src/sanitize-html.ts +235 -0
  297. package/src/scheduler-ical.ts +181 -181
  298. package/src/scheduler-model.test.ts +562 -562
  299. package/src/scheduler-model.ts +873 -873
  300. package/src/selection-bar-view.svelte.ts +36 -0
  301. package/src/selection.test.ts +900 -743
  302. package/src/selection.ts +135 -8
  303. package/src/server-data-source.test.ts +383 -383
  304. package/src/server-data-source.ts +469 -469
  305. package/src/sparkline.test.ts +68 -68
  306. package/src/sparkline.ts +169 -169
  307. package/src/spreadsheet.test.ts +488 -488
  308. package/src/spreadsheet.ts +312 -312
  309. package/src/static-functions.ts +11 -11
  310. package/src/subscribe.ts +38 -38
  311. package/src/summaries.ts +113 -113
  312. package/src/svgrid-wrapper.types.ts +563 -563
  313. package/src/svgrid.async-editor-options.test.ts +273 -273
  314. package/src/svgrid.auto-row-height.test.ts +204 -204
  315. package/src/svgrid.behavior.test.ts +910 -910
  316. package/src/svgrid.charting.test.ts +534 -534
  317. package/src/svgrid.comments-autocomplete.test.ts +127 -127
  318. package/src/svgrid.context-menu.test.ts +147 -147
  319. package/src/svgrid.features.test.ts +157 -157
  320. package/src/svgrid.filter-depth.test.ts +163 -163
  321. package/src/svgrid.filter-menu-listbox.svelte.test.ts +377 -331
  322. package/src/svgrid.filter-menu-scroll.test.ts +112 -112
  323. package/src/svgrid.grand-total.test.ts +188 -188
  324. package/src/svgrid.group-display-mode.test.ts +171 -171
  325. package/src/svgrid.group-footers.test.ts +121 -121
  326. package/src/svgrid.group-pagination.test.ts +153 -153
  327. package/src/svgrid.in-suggest-snapshot.svelte.test.ts +91 -0
  328. package/src/svgrid.menu-scroll-close.test.ts +204 -0
  329. package/src/svgrid.new-features.wrapper.test.ts +251 -251
  330. package/src/svgrid.selection-bar-seam.test.ts +185 -0
  331. package/src/svgrid.tree-data.test.ts +186 -186
  332. package/src/svgrid.upsell-license.test.ts +117 -0
  333. package/src/svgrid.wrapper.test.ts +63 -63
  334. package/src/svgriddropdown.async-panel.svelte.test.ts +195 -195
  335. package/src/test-setup.ts +62 -62
  336. package/src/themes/index.ts +288 -288
  337. package/src/toast-store.svelte.ts +250 -250
  338. package/src/toast-store.test.ts +147 -147
  339. package/src/tree-row-model.test.ts +168 -168
  340. package/src/ui-buttons.test.ts +144 -144
  341. package/src/ui-inputs.test.ts +118 -118
  342. package/src/ui-localization.test.ts +113 -113
  343. package/src/ui-range.test.ts +70 -70
  344. package/src/ui-selection.test.ts +155 -155
  345. package/src/ui-tier1.test.ts +142 -142
  346. package/src/virtual.test.ts +88 -88
  347. package/src/virtualization/column-virtualizer.test.ts +27 -27
  348. package/src/virtualization/column-virtualizer.ts +30 -30
  349. package/src/virtualization/svelte-virtualizer.svelte.ts +26 -26
  350. package/src/virtualization/types.ts +30 -30
  351. package/src/virtualization/virtualizer.test.ts +47 -47
  352. package/src/virtualization/virtualizer.ts +322 -322
  353. package/dist/cdn/GridMenus-BfTAKn84.js +0 -488
  354. package/dist/cdn/GridMenus-C3bJd7w8.js +0 -489
  355. package/dist/cdn/SvDateTimePicker-CHnUkWcH.js +0 -2206
  356. package/dist/cdn/SvDateTimePicker-CRQH_U7E.js +0 -2201
  357. package/dist/cdn/SvGridCellEditor-BGUCzuPB.js +0 -523
  358. package/dist/cdn/SvGridCellEditor-G8IMWIws.js +0 -522
package/src/sanitize-html.ts ADDED
@@ -0,0 +1,235 @@
1
+ /**
2
+ * sanitize-html - a dependency-free HTML sanitizer and a small Markdown
3
+ * renderer, sized for what a grid cell needs to display.
4
+ *
5
+ * A rich-text cell has to paint markup that came from a user, which is the one
6
+ * place a data grid can hand an attacker script execution. Everything rendered
7
+ * through `SvRichCell` goes through `sanitizeHtml` first, and the allowlist is
8
+ * deliberately narrower than a general-purpose sanitizer: it covers the tags
9
+ * `SvRichText` can produce, plus links and images.
10
+ *
11
+ * The parse uses the platform parser where there is one (`DOMParser`, which
12
+ * neither executes scripts nor runs loaders on a detached document) and a
13
+ * conservative regex stripper during SSR, where there is no DOM. The SSR path
14
+ * is stricter by design: when in doubt it drops markup rather than passing it
15
+ * through, and the hydrated client re-sanitizes with the real parser anyway.
16
+ *
17
+ * This is not a general-purpose sanitizer for arbitrary third-party HTML. It is
18
+ * a narrow allowlist for cell content. To render something outside the
19
+ * allowlist, extend it explicitly rather than widening the defaults.
20
+ */
21
+
22
+ /** Tags that survive sanitization. Everything else is unwrapped or dropped. */
23
+ const ALLOWED_TAGS = new Set([
24
+ 'a', 'b', 'blockquote', 'br', 'code', 'del', 'div', 'em', 'h1', 'h2', 'h3',
25
+ 'h4', 'h5', 'h6', 'i', 'img', 'li', 'mark', 'ol', 'p', 'pre', 's', 'small',
26
+ 'span', 'strong', 'sub', 'sup', 'u', 'ul',
27
+ ])
28
+
29
+ /** Tags whose whole subtree is removed rather than unwrapped. What sits inside
30
+ * a <script> or <style> is code, so keeping its text would be worse than
31
+ * losing it. */
32
+ const DROP_SUBTREE = new Set([
33
+ 'script', 'style', 'iframe', 'object', 'embed', 'noscript', 'template',
34
+ 'svg', 'math', 'form', 'input', 'button', 'textarea', 'select', 'link',
35
+ 'meta', 'base', 'title', 'head',
36
+ ])
37
+
38
+ /** Attributes allowed per tag. `*` applies to every allowed tag. A `style`
39
+ * attribute is never allowed: it is the classic sanitizer hole (url(...)
40
+ * payloads, position tricks that let a cell cover the page chrome), and cell
41
+ * styling belongs to the column rather than to the data. */
42
+ const ALLOWED_ATTRS: Record<string, Set<string>> = {
43
+ '*': new Set(['class', 'dir', 'lang', 'title']),
44
+ a: new Set(['href', 'target', 'rel']),
45
+ img: new Set(['src', 'alt', 'width', 'height']),
46
+ ol: new Set(['start']),
47
+ }
48
+
49
+ /** URL schemes a href/src may use. Anything else, `javascript:` and
50
+ * `vbscript:` included, is dropped. `data:` is allowed only on an image src
51
+ * and only for image media types, because `data:text/html` is a script
52
+ * vector. */
53
+ const SAFE_URL = /^(?:https?:|mailto:|tel:|\/|\.\/|\.\.\/|#)/i
54
+ const SAFE_IMG_DATA_URL = /^data:image\/(?:png|jpe?g|gif|webp|avif);base64,[a-z0-9+/=]*$/i
55
+
56
+ function isSafeUrl(value: string, tag: string, attr: string): boolean {
57
+ // Strip control characters and whitespace first: "java\tscript:" and
58
+ // "java\nscript:" are both read as javascript: by browsers.
59
+ // Matching control characters is the whole point here, hence the disable.
60
+ // eslint-disable-next-line no-control-regex
61
+ const url = value.replace(/[\u0000-\u0020\u007f]/g, '')
62
+ if (tag === 'img' && attr === 'src' && SAFE_IMG_DATA_URL.test(url)) return true
63
+ return SAFE_URL.test(url)
64
+ }
65
+
66
+ function attrAllowed(tag: string, attr: string): boolean {
67
+ if (attr.startsWith('on')) return false // every event handler, in one rule
68
+ if (ALLOWED_ATTRS['*']!.has(attr)) return true
69
+ return ALLOWED_ATTRS[tag]?.has(attr) ?? false
70
+ }
71
+
72
+ /** DOM path: walk the parsed tree and strip anything off the allowlist. */
73
+ function sanitizeWithDom(html: string): string {
74
+ const doc = new DOMParser().parseFromString(`<body>${html}</body>`, 'text/html')
75
+ const walk = (node: Element): void => {
76
+ // Snapshot the child list: the loop mutates it as it unwraps and removes.
77
+ for (const child of [...node.children]) {
78
+ const tag = child.tagName.toLowerCase()
79
+ if (DROP_SUBTREE.has(tag)) {
80
+ child.remove()
81
+ continue
82
+ }
83
+ if (!ALLOWED_TAGS.has(tag)) {
84
+ // Unwrap rather than drop, so an unknown wrapper does not cost the user
85
+ // the text inside it.
86
+ walk(child)
87
+ child.replaceWith(...child.childNodes)
88
+ continue
89
+ }
90
+ for (const attr of [...child.attributes]) {
91
+ const name = attr.name.toLowerCase()
92
+ if (!attrAllowed(tag, name)) {
93
+ child.removeAttribute(attr.name)
94
+ continue
95
+ }
96
+ if ((name === 'href' || name === 'src') && !isSafeUrl(attr.value, tag, name)) {
97
+ child.removeAttribute(attr.name)
98
+ }
99
+ }
100
+ // A link that opens a new tab gets rel="noopener", so the opened page
101
+ // cannot reach back through window.opener.
102
+ if (tag === 'a' && child.getAttribute('target')) {
103
+ child.setAttribute('rel', 'noopener noreferrer')
104
+ }
105
+ walk(child)
106
+ }
107
+ }
108
+ walk(doc.body)
109
+ return doc.body.innerHTML
110
+ }
111
+
112
+ /**
113
+ * SSR path: no DOM, so drop dangerous subtrees outright and keep only
114
+ * allowlisted tags in their attribute-free form. Stricter than the DOM path on
115
+ * purpose - the client re-sanitizes on hydration, so the cost is a moment of
116
+ * plainer markup rather than a hole.
117
+ */
118
+ function sanitizeWithoutDom(html: string): string {
119
+ let out = html
120
+ for (const tag of DROP_SUBTREE) {
121
+ out = out.replace(new RegExp(`<${tag}\\b[\\s\\S]*?</${tag}\\s*>`, 'gi'), '')
122
+ out = out.replace(new RegExp(`<${tag}\\b[^>]*/?>`, 'gi'), '')
123
+ }
124
+ return out.replace(/<\/?([a-z0-9-]+)([^>]*)>/gi, (match, rawTag: string, attrs: string) => {
125
+ const tag = rawTag.toLowerCase()
126
+ if (!ALLOWED_TAGS.has(tag)) return ''
127
+ if (match.startsWith('</')) return `</${tag}>`
128
+ return attrs.trim() ? `<${tag}>` : match
129
+ })
130
+ }
131
+
132
+ /**
133
+ * Return `html` with everything outside the allowlist removed. Idempotent, so
134
+ * it is safe to call on already-sanitized markup.
135
+ */
136
+ export function sanitizeHtml(html: string | null | undefined): string {
137
+ const input = String(html ?? '')
138
+ if (!input) return ''
139
+ if (!input.includes('<')) return input // no angle bracket, no markup to strip
140
+ return typeof DOMParser === 'undefined' ? sanitizeWithoutDom(input) : sanitizeWithDom(input)
141
+ }
142
+
143
+ /** Escape text so it embeds in HTML as literal characters. */
144
+ function escapeHtml(text: string): string {
145
+ return text
146
+ .replace(/&/g, '&amp;')
147
+ .replace(/</g, '&lt;')
148
+ .replace(/>/g, '&gt;')
149
+ .replace(/"/g, '&quot;')
150
+ }
151
+
152
+ /** A sentinel that cannot occur in escaped input, used to park inline-code
153
+ * spans while the emphasis and link passes run over the rest. */
154
+ const MARK = '\u0000'
155
+
156
+ /** Inline Markdown. Code is extracted first so backticks protect their
157
+ * contents from the emphasis and link passes. */
158
+ function renderInline(text: string): string {
159
+ const code: string[] = []
160
+ let out = escapeHtml(text).replace(/`([^`]+)`/g, (_m, c: string) => {
161
+ code.push(c)
162
+ return `${MARK}${code.length - 1}${MARK}`
163
+ })
164
+ out = out
165
+ .replace(/!\[([^\]]*)\]\(([^)\s]+)\)/g, '<img src="$2" alt="$1">')
166
+ .replace(/\[([^\]]+)\]\(([^)\s]+)\)/g, '<a href="$2">$1</a>')
167
+ .replace(/\*\*([^*]+)\*\*/g, '<strong>$1</strong>')
168
+ .replace(/(^|[^*])\*([^*]+)\*/g, '$1<em>$2</em>')
169
+ .replace(/~~([^~]+)~~/g, '<del>$1</del>')
170
+ return out.replace(new RegExp(`${MARK}(\\d+)${MARK}`, 'g'), (_m, i: string) => `<code>${code[Number(i)]}</code>`)
171
+ }
172
+
173
+ /**
174
+ * Render a common Markdown subset to HTML: headings, bold, italic,
175
+ * strikethrough, inline code, links, images, and bullet / ordered lists.
176
+ *
177
+ * Deliberately not a full CommonMark implementation - a grid cell shows a line
178
+ * or two, and a complete parser is a dependency this package does not take. The
179
+ * output is sanitized, so a Markdown link cannot smuggle `javascript:`.
180
+ */
181
+ export function renderMarkdown(markdown: string | null | undefined): string {
182
+ const src = String(markdown ?? '')
183
+ if (!src) return ''
184
+ const out: string[] = []
185
+ let list: 'ul' | 'ol' | null = null
186
+ const closeList = () => {
187
+ if (list) out.push(`</${list}>`)
188
+ list = null
189
+ }
190
+ for (const line of src.split(/\r?\n/)) {
191
+ const heading = line.match(/^(#{1,6})\s+(.*)$/)
192
+ const bullet = line.match(/^\s*[-*+]\s+(.*)$/)
193
+ const ordered = line.match(/^\s*\d+[.)]\s+(.*)$/)
194
+ if (heading) {
195
+ closeList()
196
+ const level = heading[1]!.length
197
+ out.push(`<h${level}>${renderInline(heading[2]!)}</h${level}>`)
198
+ } else if (bullet || ordered) {
199
+ const want = bullet ? 'ul' : 'ol'
200
+ if (list !== want) {
201
+ closeList()
202
+ out.push(`<${want}>`)
203
+ list = want
204
+ }
205
+ out.push(`<li>${renderInline((bullet ?? ordered)![1]!)}</li>`)
206
+ } else if (!line.trim()) {
207
+ closeList()
208
+ } else {
209
+ closeList()
210
+ out.push(`<p>${renderInline(line)}</p>`)
211
+ }
212
+ }
213
+ closeList()
214
+ return sanitizeHtml(out.join(''))
215
+ }
216
+
217
+ /** Strip markup down to readable text, for exports, aria labels and tooltips
218
+ * where a cell's HTML has to collapse to one plain string. */
219
+ export function htmlToText(html: string | null | undefined): string {
220
+ const clean = sanitizeHtml(html)
221
+ if (!clean) return ''
222
+ const spaced = clean
223
+ .replace(/<\/(p|div|h[1-6]|li|blockquote|pre)>/gi, ' ')
224
+ .replace(/<br\s*\/?>/gi, ' ')
225
+ return spaced
226
+ .replace(/<[^>]*>/g, '')
227
+ .replace(/&nbsp;/gi, ' ')
228
+ .replace(/&lt;/gi, '<')
229
+ .replace(/&gt;/gi, '>')
230
+ .replace(/&quot;/gi, '"')
231
+ .replace(/&#39;/gi, "'")
232
+ .replace(/&amp;/gi, '&')
233
+ .replace(/\s+/g, ' ')
234
+ .trim()
235
+ }
package/src/scheduler-ical.ts CHANGED
@@ -1,181 +1,181 @@
1
- /**
2
- * scheduler-ical - pure, dependency-free iCalendar (RFC 5545) import / export for
3
- * the scheduler. Works on a small {@link ICalEvent} shape so it stays data-model
4
- * agnostic: map your rows to/from it. Handles timed + all-day events, RRULE
5
- * round-trip (via the shared {@link RecurrenceRule}), STATUS, DESCRIPTION and
6
- * LOCATION. No `Date.now()` in the core - `toICS` accepts a stamp.
7
- */
8
- import type { RecurrenceRule } from './recurrence'
9
-
10
- /** One VEVENT: the fields SvGrid reads from and writes to an iCalendar feed. */
11
- export type ICalEvent = {
12
- uid?: string
13
- title: string
14
- description?: string
15
- location?: string
16
- start: Date
17
- end: Date
18
- allDay?: boolean
19
- status?: 'confirmed' | 'tentative' | 'cancelled'
20
- rrule?: RecurrenceRule | null
21
- }
22
-
23
- const WD = ['SU', 'MO', 'TU', 'WE', 'TH', 'FR', 'SA'] as const
24
- const pad = (n: number) => String(n).padStart(2, '0')
25
-
26
- const utcStamp = (d: Date) =>
27
- `${d.getUTCFullYear()}${pad(d.getUTCMonth() + 1)}${pad(d.getUTCDate())}T${pad(d.getUTCHours())}${pad(d.getUTCMinutes())}${pad(d.getUTCSeconds())}Z`
28
- const dateOnly = (d: Date) => `${d.getUTCFullYear()}${pad(d.getUTCMonth() + 1)}${pad(d.getUTCDate())}`
29
-
30
- const escText = (s: string) =>
31
- s.replace(/\\/g, '\\\\').replace(/;/g, '\\;').replace(/,/g, '\\,').replace(/\r?\n/g, '\\n')
32
- const unescText = (s: string) =>
33
- s.replace(/\\n/gi, '\n').replace(/\\,/g, ',').replace(/\\;/g, ';').replace(/\\\\/g, '\\')
34
-
35
- /** Fold a content line at 74 octets (RFC 5545 line folding). */
36
- function fold(line: string): string {
37
- if (line.length <= 74) return line
38
- let out = line.slice(0, 74)
39
- let rest = line.slice(74)
40
- while (rest.length > 73) {
41
- out += '\r\n ' + rest.slice(0, 73)
42
- rest = rest.slice(73)
43
- }
44
- return out + '\r\n ' + rest
45
- }
46
-
47
- // --- RRULE serialize / parse ------------------------------------------------
48
-
49
- /** A {@link RecurrenceRule} -> an iCal `RRULE` value (without the `RRULE:` name). */
50
- export function ruleToRRule(rule: RecurrenceRule): string {
51
- const parts = [`FREQ=${rule.freq.toUpperCase()}`]
52
- if (rule.interval && rule.interval > 1) parts.push(`INTERVAL=${rule.interval}`)
53
- if (rule.weekdays?.length) {
54
- if (rule.weekOfMonth != null && rule.weekdays.length === 1) {
55
- parts.push(`BYDAY=${rule.weekOfMonth}${WD[rule.weekdays[0]!]}`)
56
- } else {
57
- parts.push(`BYDAY=${rule.weekdays.map((w) => WD[w]).join(',')}`)
58
- }
59
- }
60
- if (rule.day != null && rule.weekOfMonth == null) parts.push(`BYMONTHDAY=${rule.day}`)
61
- if (rule.month != null) parts.push(`BYMONTH=${rule.month + 1}`)
62
- if (rule.count != null) parts.push(`COUNT=${rule.count}`)
63
- if (rule.until != null) parts.push(`UNTIL=${utcStamp(new Date(rule.until as string))}`)
64
- return parts.join(';')
65
- }
66
-
67
- /** An iCal `RRULE` value -> a {@link RecurrenceRule}. */
68
- export function rruleToRule(value: string): RecurrenceRule | null {
69
- const map: Record<string, string> = {}
70
- for (const kv of value.split(';')) {
71
- const [k, v] = kv.split('=')
72
- if (k && v) map[k.toUpperCase()] = v
73
- }
74
- const freq = (map.FREQ ?? '').toLowerCase()
75
- if (!['daily', 'weekly', 'monthly', 'yearly'].includes(freq)) return null
76
- const rule: RecurrenceRule = { freq: freq as RecurrenceRule['freq'] }
77
- if (map.INTERVAL) rule.interval = Number(map.INTERVAL)
78
- if (map.BYDAY) {
79
- const parts = map.BYDAY.split(',')
80
- const m = parts[0]!.match(/^(-?\d+)?([A-Z]{2})$/)
81
- if (parts.length === 1 && m && m[1]) {
82
- rule.weekOfMonth = Number(m[1])
83
- rule.weekdays = [WD.indexOf(m[2] as (typeof WD)[number])]
84
- } else {
85
- rule.weekdays = parts.map((p) => WD.indexOf(p.replace(/^-?\d+/, '') as (typeof WD)[number])).filter((n) => n >= 0)
86
- }
87
- }
88
- if (map.BYMONTHDAY) rule.day = Number(map.BYMONTHDAY)
89
- if (map.BYMONTH) rule.month = Number(map.BYMONTH) - 1
90
- if (map.COUNT) rule.count = Number(map.COUNT)
91
- if (map.UNTIL) rule.until = parseICalDate(map.UNTIL).date.toISOString()
92
- return rule
93
- }
94
-
95
- // --- export -----------------------------------------------------------------
96
-
97
- /** Serialize events to an iCalendar string. `stamp` sets DTSTAMP (default epoch). */
98
- export function toICS(events: ReadonlyArray<ICalEvent>, opts: { prodId?: string; stamp?: Date } = {}): string {
99
- const stamp = utcStamp(opts.stamp ?? new Date(0))
100
- const lines = ['BEGIN:VCALENDAR', 'VERSION:2.0', `PRODID:${opts.prodId ?? '-//SvGrid//Scheduler//EN'}`]
101
- events.forEach((e, i) => {
102
- lines.push('BEGIN:VEVENT')
103
- lines.push(`UID:${e.uid ?? `svgrid-${i}-${e.start.getTime()}`}`)
104
- lines.push(`DTSTAMP:${stamp}`)
105
- if (e.allDay) {
106
- lines.push(`DTSTART;VALUE=DATE:${dateOnly(e.start)}`)
107
- lines.push(`DTEND;VALUE=DATE:${dateOnly(e.end)}`)
108
- } else {
109
- lines.push(`DTSTART:${utcStamp(e.start)}`)
110
- lines.push(`DTEND:${utcStamp(e.end)}`)
111
- }
112
- lines.push(`SUMMARY:${escText(e.title)}`)
113
- if (e.description) lines.push(`DESCRIPTION:${escText(e.description)}`)
114
- if (e.location) lines.push(`LOCATION:${escText(e.location)}`)
115
- if (e.status) lines.push(`STATUS:${e.status.toUpperCase()}`)
116
- if (e.rrule) lines.push(`RRULE:${ruleToRRule(e.rrule)}`)
117
- lines.push('END:VEVENT')
118
- })
119
- lines.push('END:VCALENDAR')
120
- return lines.map(fold).join('\r\n')
121
- }
122
-
123
- // --- import -----------------------------------------------------------------
124
-
125
- function parseICalDate(value: string): { date: Date; allDay: boolean } {
126
- // 20260706 (date) | 20260706T093000Z (utc) | 20260706T093000 (local/floating)
127
- const m = value.match(/^(\d{4})(\d{2})(\d{2})(?:T(\d{2})(\d{2})(\d{2})(Z)?)?$/)
128
- if (!m) return { date: new Date(NaN), allDay: false }
129
- const [, y, mo, d, hh, mm, ss, z] = m
130
- if (hh == null) return { date: new Date(Number(y), Number(mo) - 1, Number(d)), allDay: true }
131
- if (z) return { date: new Date(Date.UTC(+y!, +mo! - 1, +d!, +hh, +mm!, +ss!)), allDay: false }
132
- return { date: new Date(+y!, +mo! - 1, +d!, +hh, +mm!, +ss!), allDay: false }
133
- }
134
-
135
- /** Parse an iCalendar string into events (unfolds lines, reads VEVENT blocks). */
136
- export function fromICS(text: string): ICalEvent[] {
137
- // Unfold: a line starting with space/tab continues the previous one.
138
- const raw = text.replace(/\r\n/g, '\n').split('\n')
139
- const unfolded: string[] = []
140
- for (const line of raw) {
141
- if ((line.startsWith(' ') || line.startsWith('\t')) && unfolded.length) {
142
- unfolded[unfolded.length - 1] += line.slice(1)
143
- } else unfolded.push(line)
144
- }
145
- const out: ICalEvent[] = []
146
- let cur: Partial<ICalEvent> & { _allDayStart?: boolean } = {}
147
- let inEvent = false
148
- for (const line of unfolded) {
149
- if (line === 'BEGIN:VEVENT') {
150
- inEvent = true
151
- cur = {}
152
- continue
153
- }
154
- if (line === 'END:VEVENT') {
155
- if (cur.title && cur.start && cur.end) out.push({ title: cur.title, start: cur.start, end: cur.end, allDay: cur.allDay, uid: cur.uid, description: cur.description, location: cur.location, status: cur.status, rrule: cur.rrule ?? null })
156
- inEvent = false
157
- continue
158
- }
159
- if (!inEvent) continue
160
- const ci = line.indexOf(':')
161
- if (ci < 0) continue
162
- const nameAndParams = line.slice(0, ci)
163
- const value = line.slice(ci + 1)
164
- const name = nameAndParams.split(';')[0]!.toUpperCase()
165
- if (name === 'UID') cur.uid = value
166
- else if (name === 'SUMMARY') cur.title = unescText(value)
167
- else if (name === 'DESCRIPTION') cur.description = unescText(value)
168
- else if (name === 'LOCATION') cur.location = unescText(value)
169
- else if (name === 'STATUS') cur.status = value.toLowerCase() as ICalEvent['status']
170
- else if (name === 'DTSTART') {
171
- const { date, allDay } = parseICalDate(value)
172
- cur.start = date
173
- cur.allDay = allDay
174
- } else if (name === 'DTEND') {
175
- cur.end = parseICalDate(value).date
176
- } else if (name === 'RRULE') {
177
- cur.rrule = rruleToRule(value) ?? undefined
178
- }
179
- }
180
- return out
181
- }
1
+ /**
2
+ * scheduler-ical - pure, dependency-free iCalendar (RFC 5545) import / export for
3
+ * the scheduler. Works on a small {@link ICalEvent} shape so it stays data-model
4
+ * agnostic: map your rows to/from it. Handles timed + all-day events, RRULE
5
+ * round-trip (via the shared {@link RecurrenceRule}), STATUS, DESCRIPTION and
6
+ * LOCATION. No `Date.now()` in the core - `toICS` accepts a stamp.
7
+ */
8
+ import type { RecurrenceRule } from './recurrence'
9
+
10
+ /** One VEVENT: the fields SvGrid reads from and writes to an iCalendar feed. */
11
+ export type ICalEvent = {
12
+ uid?: string
13
+ title: string
14
+ description?: string
15
+ location?: string
16
+ start: Date
17
+ end: Date
18
+ allDay?: boolean
19
+ status?: 'confirmed' | 'tentative' | 'cancelled'
20
+ rrule?: RecurrenceRule | null
21
+ }
22
+
23
+ const WD = ['SU', 'MO', 'TU', 'WE', 'TH', 'FR', 'SA'] as const
24
+ const pad = (n: number) => String(n).padStart(2, '0')
25
+
26
+ const utcStamp = (d: Date) =>
27
+ `${d.getUTCFullYear()}${pad(d.getUTCMonth() + 1)}${pad(d.getUTCDate())}T${pad(d.getUTCHours())}${pad(d.getUTCMinutes())}${pad(d.getUTCSeconds())}Z`
28
+ const dateOnly = (d: Date) => `${d.getUTCFullYear()}${pad(d.getUTCMonth() + 1)}${pad(d.getUTCDate())}`
29
+
30
+ const escText = (s: string) =>
31
+ s.replace(/\\/g, '\\\\').replace(/;/g, '\\;').replace(/,/g, '\\,').replace(/\r?\n/g, '\\n')
32
+ const unescText = (s: string) =>
33
+ s.replace(/\\n/gi, '\n').replace(/\\,/g, ',').replace(/\\;/g, ';').replace(/\\\\/g, '\\')
34
+
35
+ /** Fold a content line at 74 octets (RFC 5545 line folding). */
36
+ function fold(line: string): string {
37
+ if (line.length <= 74) return line
38
+ let out = line.slice(0, 74)
39
+ let rest = line.slice(74)
40
+ while (rest.length > 73) {
41
+ out += '\r\n ' + rest.slice(0, 73)
42
+ rest = rest.slice(73)
43
+ }
44
+ return out + '\r\n ' + rest
45
+ }
46
+
47
+ // --- RRULE serialize / parse ------------------------------------------------
48
+
49
+ /** A {@link RecurrenceRule} -> an iCal `RRULE` value (without the `RRULE:` name). */
50
+ export function ruleToRRule(rule: RecurrenceRule): string {
51
+ const parts = [`FREQ=${rule.freq.toUpperCase()}`]
52
+ if (rule.interval && rule.interval > 1) parts.push(`INTERVAL=${rule.interval}`)
53
+ if (rule.weekdays?.length) {
54
+ if (rule.weekOfMonth != null && rule.weekdays.length === 1) {
55
+ parts.push(`BYDAY=${rule.weekOfMonth}${WD[rule.weekdays[0]!]}`)
56
+ } else {
57
+ parts.push(`BYDAY=${rule.weekdays.map((w) => WD[w]).join(',')}`)
58
+ }
59
+ }
60
+ if (rule.day != null && rule.weekOfMonth == null) parts.push(`BYMONTHDAY=${rule.day}`)
61
+ if (rule.month != null) parts.push(`BYMONTH=${rule.month + 1}`)
62
+ if (rule.count != null) parts.push(`COUNT=${rule.count}`)
63
+ if (rule.until != null) parts.push(`UNTIL=${utcStamp(new Date(rule.until as string))}`)
64
+ return parts.join(';')
65
+ }
66
+
67
+ /** An iCal `RRULE` value -> a {@link RecurrenceRule}. */
68
+ export function rruleToRule(value: string): RecurrenceRule | null {
69
+ const map: Record<string, string> = {}
70
+ for (const kv of value.split(';')) {
71
+ const [k, v] = kv.split('=')
72
+ if (k && v) map[k.toUpperCase()] = v
73
+ }
74
+ const freq = (map.FREQ ?? '').toLowerCase()
75
+ if (!['daily', 'weekly', 'monthly', 'yearly'].includes(freq)) return null
76
+ const rule: RecurrenceRule = { freq: freq as RecurrenceRule['freq'] }
77
+ if (map.INTERVAL) rule.interval = Number(map.INTERVAL)
78
+ if (map.BYDAY) {
79
+ const parts = map.BYDAY.split(',')
80
+ const m = parts[0]!.match(/^(-?\d+)?([A-Z]{2})$/)
81
+ if (parts.length === 1 && m && m[1]) {
82
+ rule.weekOfMonth = Number(m[1])
83
+ rule.weekdays = [WD.indexOf(m[2] as (typeof WD)[number])]
84
+ } else {
85
+ rule.weekdays = parts.map((p) => WD.indexOf(p.replace(/^-?\d+/, '') as (typeof WD)[number])).filter((n) => n >= 0)
86
+ }
87
+ }
88
+ if (map.BYMONTHDAY) rule.day = Number(map.BYMONTHDAY)
89
+ if (map.BYMONTH) rule.month = Number(map.BYMONTH) - 1
90
+ if (map.COUNT) rule.count = Number(map.COUNT)
91
+ if (map.UNTIL) rule.until = parseICalDate(map.UNTIL).date.toISOString()
92
+ return rule
93
+ }
94
+
95
+ // --- export -----------------------------------------------------------------
96
+
97
+ /** Serialize events to an iCalendar string. `stamp` sets DTSTAMP (default epoch). */
98
+ export function toICS(events: ReadonlyArray<ICalEvent>, opts: { prodId?: string; stamp?: Date } = {}): string {
99
+ const stamp = utcStamp(opts.stamp ?? new Date(0))
100
+ const lines = ['BEGIN:VCALENDAR', 'VERSION:2.0', `PRODID:${opts.prodId ?? '-//SvGrid//Scheduler//EN'}`]
101
+ events.forEach((e, i) => {
102
+ lines.push('BEGIN:VEVENT')
103
+ lines.push(`UID:${e.uid ?? `svgrid-${i}-${e.start.getTime()}`}`)
104
+ lines.push(`DTSTAMP:${stamp}`)
105
+ if (e.allDay) {
106
+ lines.push(`DTSTART;VALUE=DATE:${dateOnly(e.start)}`)
107
+ lines.push(`DTEND;VALUE=DATE:${dateOnly(e.end)}`)
108
+ } else {
109
+ lines.push(`DTSTART:${utcStamp(e.start)}`)
110
+ lines.push(`DTEND:${utcStamp(e.end)}`)
111
+ }
112
+ lines.push(`SUMMARY:${escText(e.title)}`)
113
+ if (e.description) lines.push(`DESCRIPTION:${escText(e.description)}`)
114
+ if (e.location) lines.push(`LOCATION:${escText(e.location)}`)
115
+ if (e.status) lines.push(`STATUS:${e.status.toUpperCase()}`)
116
+ if (e.rrule) lines.push(`RRULE:${ruleToRRule(e.rrule)}`)
117
+ lines.push('END:VEVENT')
118
+ })
119
+ lines.push('END:VCALENDAR')
120
+ return lines.map(fold).join('\r\n')
121
+ }
122
+
123
+ // --- import -----------------------------------------------------------------
124
+
125
+ function parseICalDate(value: string): { date: Date; allDay: boolean } {
126
+ // 20260706 (date) | 20260706T093000Z (utc) | 20260706T093000 (local/floating)
127
+ const m = value.match(/^(\d{4})(\d{2})(\d{2})(?:T(\d{2})(\d{2})(\d{2})(Z)?)?$/)
128
+ if (!m) return { date: new Date(NaN), allDay: false }
129
+ const [, y, mo, d, hh, mm, ss, z] = m
130
+ if (hh == null) return { date: new Date(Number(y), Number(mo) - 1, Number(d)), allDay: true }
131
+ if (z) return { date: new Date(Date.UTC(+y!, +mo! - 1, +d!, +hh, +mm!, +ss!)), allDay: false }
132
+ return { date: new Date(+y!, +mo! - 1, +d!, +hh, +mm!, +ss!), allDay: false }
133
+ }
134
+
135
+ /** Parse an iCalendar string into events (unfolds lines, reads VEVENT blocks). */
136
+ export function fromICS(text: string): ICalEvent[] {
137
+ // Unfold: a line starting with space/tab continues the previous one.
138
+ const raw = text.replace(/\r\n/g, '\n').split('\n')
139
+ const unfolded: string[] = []
140
+ for (const line of raw) {
141
+ if ((line.startsWith(' ') || line.startsWith('\t')) && unfolded.length) {
142
+ unfolded[unfolded.length - 1] += line.slice(1)
143
+ } else unfolded.push(line)
144
+ }
145
+ const out: ICalEvent[] = []
146
+ let cur: Partial<ICalEvent> & { _allDayStart?: boolean } = {}
147
+ let inEvent = false
148
+ for (const line of unfolded) {
149
+ if (line === 'BEGIN:VEVENT') {
150
+ inEvent = true
151
+ cur = {}
152
+ continue
153
+ }
154
+ if (line === 'END:VEVENT') {
155
+ if (cur.title && cur.start && cur.end) out.push({ title: cur.title, start: cur.start, end: cur.end, allDay: cur.allDay, uid: cur.uid, description: cur.description, location: cur.location, status: cur.status, rrule: cur.rrule ?? null })
156
+ inEvent = false
157
+ continue
158
+ }
159
+ if (!inEvent) continue
160
+ const ci = line.indexOf(':')
161
+ if (ci < 0) continue
162
+ const nameAndParams = line.slice(0, ci)
163
+ const value = line.slice(ci + 1)
164
+ const name = nameAndParams.split(';')[0]!.toUpperCase()
165
+ if (name === 'UID') cur.uid = value
166
+ else if (name === 'SUMMARY') cur.title = unescText(value)
167
+ else if (name === 'DESCRIPTION') cur.description = unescText(value)
168
+ else if (name === 'LOCATION') cur.location = unescText(value)
169
+ else if (name === 'STATUS') cur.status = value.toLowerCase() as ICalEvent['status']
170
+ else if (name === 'DTSTART') {
171
+ const { date, allDay } = parseICalDate(value)
172
+ cur.start = date
173
+ cur.allDay = allDay
174
+ } else if (name === 'DTEND') {
175
+ cur.end = parseICalDate(value).date
176
+ } else if (name === 'RRULE') {
177
+ cur.rrule = rruleToRule(value) ?? undefined
178
+ }
179
+ }
180
+ return out
181
+ }