@svgrid/grid 2.6.22 → 2.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (331) hide show
  1. package/CHANGELOG.md +88 -88
  2. package/README.md +199 -199
  3. package/dist/FlexRender.svelte +96 -96
  4. package/dist/GridFooter.svelte +181 -181
  5. package/dist/GridMenus.svelte +184 -6
  6. package/dist/SvAutoComplete.svelte +169 -165
  7. package/dist/SvAvatar.svelte +75 -75
  8. package/dist/SvCalendar.svelte +503 -503
  9. package/dist/SvCarousel.svelte +141 -141
  10. package/dist/SvCheckBox.svelte +102 -102
  11. package/dist/SvCircularProgress.svelte +109 -109
  12. package/dist/SvColorInput.svelte +181 -181
  13. package/dist/SvComboBox.svelte +279 -275
  14. package/dist/SvContextMenu.svelte +116 -116
  15. package/dist/SvCountryInput.svelte +163 -163
  16. package/dist/SvDateRangeInput.svelte +25 -3
  17. package/dist/SvDrawer.svelte +254 -254
  18. package/dist/SvDropDownList.svelte +378 -374
  19. package/dist/SvDurationInput.svelte +126 -126
  20. package/dist/SvField.svelte +293 -293
  21. package/dist/SvForm.svelte +437 -437
  22. package/dist/SvGrid.controller.svelte.d.ts +48 -1
  23. package/dist/SvGrid.controller.svelte.js +214 -52
  24. package/dist/SvGrid.css +221 -0
  25. package/dist/SvGrid.helpers.d.ts +55 -0
  26. package/dist/SvGrid.helpers.js +83 -0
  27. package/dist/SvGrid.svelte +145 -0
  28. package/dist/SvGrid.types.d.ts +105 -0
  29. package/dist/SvGridCellEditor.svelte +744 -662
  30. package/dist/SvGridChart.svelte +1716 -1716
  31. package/dist/SvGridChartPanel.svelte +485 -485
  32. package/dist/SvGridChartView.svelte +70 -70
  33. package/dist/SvGridDropdown.svelte +728 -728
  34. package/dist/SvGridSelect.svelte +270 -266
  35. package/dist/SvGridSelect.svelte.d.ts +1 -1
  36. package/dist/SvGroupCell.svelte +116 -116
  37. package/dist/SvListBox.svelte +334 -326
  38. package/dist/SvMaskedInput.svelte +122 -122
  39. package/dist/SvMenu.svelte +124 -124
  40. package/dist/SvMenuList.svelte +146 -146
  41. package/dist/SvMultiSelect.svelte +293 -289
  42. package/dist/SvMultiSelect.svelte.d.ts +1 -1
  43. package/dist/SvNumberInput.svelte +172 -168
  44. package/dist/SvOtpInput.svelte +158 -158
  45. package/dist/SvPasswordInput.svelte +151 -151
  46. package/dist/SvPhoneInput.svelte +133 -133
  47. package/dist/SvPopover.svelte +197 -197
  48. package/dist/SvProgress.svelte +116 -116
  49. package/dist/SvRadioGroup.svelte +107 -107
  50. package/dist/SvRating.svelte +112 -112
  51. package/dist/SvResult.svelte +73 -73
  52. package/dist/SvRichCell.svelte +125 -0
  53. package/dist/SvRichCell.svelte.d.ts +15 -0
  54. package/dist/SvRichText.svelte +211 -211
  55. package/dist/SvRowGroupPanel.svelte +170 -170
  56. package/dist/SvScrollArea.svelte +61 -61
  57. package/dist/SvSlider.svelte +203 -203
  58. package/dist/SvSwitchButton.svelte +108 -108
  59. package/dist/SvTagsInput.svelte +115 -115
  60. package/dist/SvTextArea.svelte +5 -1
  61. package/dist/SvTextInput.svelte +147 -147
  62. package/dist/SvTimePicker.svelte +245 -245
  63. package/dist/SvToaster.svelte +159 -159
  64. package/dist/SvToggleButton.svelte +85 -85
  65. package/dist/SvTooltip.svelte +161 -161
  66. package/dist/SvTour.svelte +208 -208
  67. package/dist/SvTree.svelte +444 -444
  68. package/dist/SvTreeSelect.svelte +239 -235
  69. package/dist/SvTreeSelect.svelte.d.ts +1 -1
  70. package/dist/builtin-editors.d.ts +2 -2
  71. package/dist/builtin-editors.js +19 -3
  72. package/dist/cdn/GridMenus-C4oLsJyj.js +600 -0
  73. package/dist/cdn/GridMenus-yEivjNwl.js +601 -0
  74. package/dist/cdn/SvDateRangeInput-Bh0A0JkF.js +199 -0
  75. package/dist/cdn/SvDateRangeInput-DflbiP7N.js +198 -0
  76. package/dist/cdn/SvDateTimePicker-BWwpfB_o.js +812 -0
  77. package/dist/cdn/SvDateTimePicker-Bivn8dAP.js +816 -0
  78. package/dist/cdn/SvGridCellEditor-AXL8cHGO.js +550 -0
  79. package/dist/cdn/SvGridCellEditor-Ba7rY3eu.js +549 -0
  80. package/dist/cdn/{SvGridChart-BwVos976.js → SvGridChart-Bs2GIR2Q.js} +1 -1
  81. package/dist/cdn/{SvGridChart-BEJmNNx9.js → SvGridChart-CwhFz7GV.js} +1 -1
  82. package/dist/cdn/{SvGridChartPanel-BOknOkrP.js → SvGridChartPanel-1WXuStzM.js} +1 -1
  83. package/dist/cdn/{SvGridChartPanel-D2PjII4O.js → SvGridChartPanel-e5_nqNP9.js} +1 -1
  84. package/dist/cdn/{SvGridChartView-00LPUHL1.js → SvGridChartView-SmPW10dI.js} +1 -1
  85. package/dist/cdn/{SvGridChartView-BhUEJ5ki.js → SvGridChartView-eSPuJE6g.js} +1 -1
  86. package/dist/cdn/{SvGridDropdown-D0VdjeR8.js → SvGridDropdown-B1ZcLpgs.js} +1 -1
  87. package/dist/cdn/{SvGridDropdown-D13MtJ2j.js → SvGridDropdown-CtdbHcIS.js} +1 -1
  88. package/dist/cdn/date-format-CcP1tafP.js +1395 -0
  89. package/dist/cdn/date-format-DZT7T1wf.js +1393 -0
  90. package/dist/cdn/{editor-registry-CiI0xlKg.js → editor-registry-BhgE3S84.js} +51 -25
  91. package/dist/cdn/{src-C9Hihx1W.js → src-COC0vnpg.js} +7233 -6701
  92. package/dist/cdn/{src-D1lXwq1l.js → src-pYGV2rMR.js} +5747 -5215
  93. package/dist/cdn/svgrid.js +15 -13
  94. package/dist/cdn/svgrid.svelte-external.js +15 -13
  95. package/dist/cell-values.d.ts +16 -0
  96. package/dist/cell-values.js +28 -0
  97. package/dist/chart-export.js +8 -8
  98. package/dist/clipboard.d.ts +22 -0
  99. package/dist/clipboard.js +405 -27
  100. package/dist/editing.js +12 -7
  101. package/dist/editors/cell-editors.d.ts +11 -0
  102. package/dist/editors/cell-editors.js +18 -1
  103. package/dist/grid-messages.d.ts +15 -0
  104. package/dist/grid-messages.js +15 -0
  105. package/dist/index.d.ts +4 -0
  106. package/dist/index.js +4 -0
  107. package/dist/list-option.d.ts +6 -0
  108. package/dist/menus.js +40 -7
  109. package/dist/sanitize-html.d.ts +37 -0
  110. package/dist/sanitize-html.js +234 -0
  111. package/dist/selection-bar-view.svelte.d.ts +25 -0
  112. package/dist/selection-bar-view.svelte.js +13 -0
  113. package/dist/selection.d.ts +2 -1
  114. package/dist/selection.js +129 -13
  115. package/package.json +11 -11
  116. package/src/FlexRender.svelte +96 -96
  117. package/src/GridFooter.svelte +181 -181
  118. package/src/GridMenus.svelte +184 -6
  119. package/src/SvAutoComplete.svelte +169 -165
  120. package/src/SvAvatar.svelte +75 -75
  121. package/src/SvCalendar.svelte +503 -503
  122. package/src/SvCalendar.test.ts +226 -226
  123. package/src/SvCarousel.svelte +141 -141
  124. package/src/SvCheckBox.svelte +102 -102
  125. package/src/SvCircularProgress.svelte +109 -109
  126. package/src/SvColorInput.svelte +181 -181
  127. package/src/SvComboBox.svelte +279 -275
  128. package/src/SvContextMenu.svelte +116 -116
  129. package/src/SvCountryInput.svelte +163 -163
  130. package/src/SvDateRangeInput.svelte +25 -3
  131. package/src/SvDrawer.svelte +254 -254
  132. package/src/SvDropDownList.svelte +378 -374
  133. package/src/SvDurationInput.svelte +126 -126
  134. package/src/SvField.svelte +293 -293
  135. package/src/SvForm.svelte +437 -437
  136. package/src/SvForm.test.ts +411 -411
  137. package/src/SvGrid.controller.svelte.ts +251 -61
  138. package/src/SvGrid.css +221 -0
  139. package/src/SvGrid.helpers.ts +87 -0
  140. package/src/SvGrid.svelte +145 -0
  141. package/src/SvGrid.types.ts +2092 -1980
  142. package/src/SvGridCellEditor.svelte +744 -662
  143. package/src/SvGridChart.svelte +1716 -1716
  144. package/src/SvGridChartPanel.svelte +485 -485
  145. package/src/SvGridChartView.svelte +70 -70
  146. package/src/SvGridDropdown.svelte +728 -728
  147. package/src/SvGridSelect.svelte +270 -266
  148. package/src/SvGroupCell.svelte +116 -116
  149. package/src/SvListBox.svelte +334 -326
  150. package/src/SvMaskedInput.svelte +122 -122
  151. package/src/SvMenu.svelte +124 -124
  152. package/src/SvMenu.test.ts +97 -97
  153. package/src/SvMenuList.svelte +146 -146
  154. package/src/SvMultiSelect.svelte +293 -289
  155. package/src/SvNumberInput.svelte +172 -168
  156. package/src/SvOtpInput.svelte +158 -158
  157. package/src/SvPasswordInput.svelte +151 -151
  158. package/src/SvPhoneInput.svelte +133 -133
  159. package/src/SvPopover.svelte +197 -197
  160. package/src/SvProgress.svelte +116 -116
  161. package/src/SvRadioGroup.svelte +107 -107
  162. package/src/SvRating.svelte +112 -112
  163. package/src/SvResult.svelte +73 -73
  164. package/src/SvRichCell.svelte +125 -0
  165. package/src/SvRichText.svelte +211 -211
  166. package/src/SvRowGroupPanel.svelte +170 -170
  167. package/src/SvScrollArea.svelte +61 -61
  168. package/src/SvSlider.svelte +203 -203
  169. package/src/SvSwitchButton.svelte +108 -108
  170. package/src/SvTagsInput.svelte +115 -115
  171. package/src/SvTextArea.svelte +5 -1
  172. package/src/SvTextInput.svelte +147 -147
  173. package/src/SvTimePicker.svelte +245 -245
  174. package/src/SvToaster.svelte +159 -159
  175. package/src/SvToaster.test.ts +95 -95
  176. package/src/SvToggleButton.svelte +85 -85
  177. package/src/SvTooltip.svelte +161 -161
  178. package/src/SvTour.svelte +208 -208
  179. package/src/SvTree.svelte +444 -444
  180. package/src/SvTreeSelect.svelte +239 -235
  181. package/src/a11y/dismissable.test.ts +119 -119
  182. package/src/a11y/dismissable.ts +114 -114
  183. package/src/a11y.contract.test.ts +49 -49
  184. package/src/a11y.test.ts +59 -59
  185. package/src/a11y.ts +61 -61
  186. package/src/ai.test.ts +502 -502
  187. package/src/ai.ts +1419 -1419
  188. package/src/build-api.coverage.test.ts +633 -633
  189. package/src/build-api.ts +846 -846
  190. package/src/builtin-editors.grid.test.ts +83 -83
  191. package/src/builtin-editors.test.ts +18 -1
  192. package/src/builtin-editors.ts +19 -3
  193. package/src/cell-formatting.ts +171 -171
  194. package/src/cell-render.test.ts +513 -513
  195. package/src/cell-render.ts +496 -496
  196. package/src/cell-values.ts +148 -118
  197. package/src/chart-export.ts +202 -202
  198. package/src/chart-view.svelte.ts +36 -36
  199. package/src/chart.ts +2321 -2321
  200. package/src/clipboard.test.ts +93 -20
  201. package/src/clipboard.ts +433 -33
  202. package/src/collaboration.test.ts +104 -104
  203. package/src/collaboration.ts +167 -167
  204. package/src/column-groups.ts +78 -78
  205. package/src/core.performance.test.ts +30 -30
  206. package/src/core.ts +1865 -1865
  207. package/src/createAutocomplete.svelte.ts +132 -132
  208. package/src/createCombobox.svelte.ts +191 -191
  209. package/src/createCountryInput.svelte.ts +157 -157
  210. package/src/createDropdownList.svelte.ts +168 -168
  211. package/src/createForm.svelte.ts +386 -386
  212. package/src/createGrid.svelte.ts +42 -42
  213. package/src/createGrid.test.ts +10 -10
  214. package/src/createGridState.svelte.ts +17 -17
  215. package/src/createListbox.svelte.ts +250 -250
  216. package/src/createMenu.svelte.ts +224 -224
  217. package/src/createPopoverSelect.svelte.ts +213 -213
  218. package/src/createSlider.svelte.ts +191 -191
  219. package/src/createTooltip.svelte.ts +144 -144
  220. package/src/createTree.svelte.ts +322 -322
  221. package/src/date-string-column.test.ts +87 -0
  222. package/src/datetime/date-core.ts +206 -206
  223. package/src/datetime/date-restrict.ts +61 -61
  224. package/src/datetime/timezone.ts +135 -135
  225. package/src/dock-manager-model.ts +596 -596
  226. package/src/dock-model.ts +374 -374
  227. package/src/editing.test.ts +974 -949
  228. package/src/editing.ts +609 -606
  229. package/src/editor-block-prop.test.ts +132 -0
  230. package/src/editor-contract.ts +171 -171
  231. package/src/editor-registry.grid.test.ts +144 -144
  232. package/src/editor-registry.ts +122 -122
  233. package/src/editors/cell-editors.ts +27 -1
  234. package/src/export-data-api.test.ts +126 -126
  235. package/src/export-format.test.ts +107 -107
  236. package/src/export-format.ts +601 -601
  237. package/src/filter-operators.ts +160 -160
  238. package/src/filtering/excel-filters.ts +325 -325
  239. package/src/flex-render.ts +3 -3
  240. package/src/form-field.ts +127 -127
  241. package/src/grid-messages.ts +34 -0
  242. package/src/group-display.test.ts +167 -167
  243. package/src/group-display.ts +200 -200
  244. package/src/headless.ts +87 -87
  245. package/src/index.ts +13 -0
  246. package/src/js-scroller.svelte.ts +173 -173
  247. package/src/keyboard-handlers.ts +270 -270
  248. package/src/keyboard.test.ts +59 -59
  249. package/src/keyboard.ts +97 -97
  250. package/src/list-nav.test.ts +49 -49
  251. package/src/list-nav.ts +29 -29
  252. package/src/list-option.test.ts +56 -56
  253. package/src/list-option.ts +179 -173
  254. package/src/menus.test.ts +43 -0
  255. package/src/menus.ts +597 -567
  256. package/src/merge-objects.ts +48 -48
  257. package/src/move-cells.test.ts +850 -0
  258. package/src/number-editor-literal.test.ts +84 -0
  259. package/src/number-editor.grid.test.ts +160 -0
  260. package/src/overlays.test.ts +90 -90
  261. package/src/positioning.ts +268 -268
  262. package/src/render-component.ts +28 -28
  263. package/src/row-drag-touch.ts +211 -211
  264. package/src/row-drag.test.ts +353 -353
  265. package/src/row-drag.ts +415 -415
  266. package/src/row-resize.test.ts +524 -524
  267. package/src/row-resize.ts +228 -228
  268. package/src/sanitize-html.test.ts +182 -0
  269. package/src/sanitize-html.ts +235 -0
  270. package/src/scheduler-ical.ts +181 -181
  271. package/src/scheduler-model.test.ts +562 -562
  272. package/src/scheduler-model.ts +873 -873
  273. package/src/selection-bar-view.svelte.ts +36 -0
  274. package/src/selection.test.ts +900 -743
  275. package/src/selection.ts +131 -13
  276. package/src/server-data-source.test.ts +383 -383
  277. package/src/server-data-source.ts +469 -469
  278. package/src/sparkline.test.ts +68 -68
  279. package/src/sparkline.ts +169 -169
  280. package/src/spreadsheet.test.ts +488 -488
  281. package/src/spreadsheet.ts +312 -312
  282. package/src/static-functions.ts +11 -11
  283. package/src/subscribe.ts +38 -38
  284. package/src/summaries.ts +113 -113
  285. package/src/svgrid-wrapper.types.ts +563 -563
  286. package/src/svgrid.async-editor-options.test.ts +273 -273
  287. package/src/svgrid.auto-row-height.test.ts +204 -204
  288. package/src/svgrid.behavior.test.ts +910 -910
  289. package/src/svgrid.charting.test.ts +534 -534
  290. package/src/svgrid.comments-autocomplete.test.ts +127 -127
  291. package/src/svgrid.context-menu.test.ts +147 -147
  292. package/src/svgrid.features.test.ts +157 -157
  293. package/src/svgrid.filter-depth.test.ts +163 -163
  294. package/src/svgrid.filter-menu-listbox.svelte.test.ts +377 -331
  295. package/src/svgrid.filter-menu-scroll.test.ts +112 -112
  296. package/src/svgrid.grand-total.test.ts +188 -188
  297. package/src/svgrid.group-display-mode.test.ts +171 -171
  298. package/src/svgrid.group-footers.test.ts +121 -121
  299. package/src/svgrid.group-pagination.test.ts +153 -153
  300. package/src/svgrid.in-suggest-snapshot.svelte.test.ts +91 -0
  301. package/src/svgrid.menu-scroll-close.test.ts +204 -0
  302. package/src/svgrid.new-features.wrapper.test.ts +251 -251
  303. package/src/svgrid.selection-bar-seam.test.ts +185 -0
  304. package/src/svgrid.tree-data.test.ts +186 -186
  305. package/src/svgrid.upsell-license.test.ts +117 -0
  306. package/src/svgrid.wrapper.test.ts +63 -63
  307. package/src/svgriddropdown.async-panel.svelte.test.ts +195 -195
  308. package/src/test-setup.ts +62 -62
  309. package/src/themes/index.ts +288 -288
  310. package/src/toast-store.svelte.ts +250 -250
  311. package/src/toast-store.test.ts +147 -147
  312. package/src/tree-row-model.test.ts +168 -168
  313. package/src/ui-buttons.test.ts +144 -144
  314. package/src/ui-inputs.test.ts +118 -118
  315. package/src/ui-localization.test.ts +113 -113
  316. package/src/ui-range.test.ts +70 -70
  317. package/src/ui-selection.test.ts +155 -155
  318. package/src/ui-tier1.test.ts +142 -142
  319. package/src/virtual.test.ts +88 -88
  320. package/src/virtualization/column-virtualizer.test.ts +27 -27
  321. package/src/virtualization/column-virtualizer.ts +30 -30
  322. package/src/virtualization/svelte-virtualizer.svelte.ts +26 -26
  323. package/src/virtualization/types.ts +30 -30
  324. package/src/virtualization/virtualizer.test.ts +47 -47
  325. package/src/virtualization/virtualizer.ts +322 -322
  326. package/dist/cdn/GridMenus-BuoBPqxx.js +0 -493
  327. package/dist/cdn/GridMenus-n4llxoOI.js +0 -494
  328. package/dist/cdn/SvDateTimePicker-CHnUkWcH.js +0 -2206
  329. package/dist/cdn/SvDateTimePicker-CRQH_U7E.js +0 -2201
  330. package/dist/cdn/SvGridCellEditor-BGUCzuPB.js +0 -523
  331. package/dist/cdn/SvGridCellEditor-G8IMWIws.js +0 -522
package/src/sanitize-html.ts ADDED
@@ -0,0 +1,235 @@
1
+ /**
2
+ * sanitize-html - a dependency-free HTML sanitizer and a small Markdown
3
+ * renderer, sized for what a grid cell needs to display.
4
+ *
5
+ * A rich-text cell has to paint markup that came from a user, which is the one
6
+ * place a data grid can hand an attacker script execution. Everything rendered
7
+ * through `SvRichCell` goes through `sanitizeHtml` first, and the allowlist is
8
+ * deliberately narrower than a general-purpose sanitizer: it covers the tags
9
+ * `SvRichText` can produce, plus links and images.
10
+ *
11
+ * The parse uses the platform parser where there is one (`DOMParser`, which
12
+ * neither executes scripts nor runs loaders on a detached document) and a
13
+ * conservative regex stripper during SSR, where there is no DOM. The SSR path
14
+ * is stricter by design: when in doubt it drops markup rather than passing it
15
+ * through, and the hydrated client re-sanitizes with the real parser anyway.
16
+ *
17
+ * This is not a general-purpose sanitizer for arbitrary third-party HTML. It is
18
+ * a narrow allowlist for cell content. To render something outside the
19
+ * allowlist, extend it explicitly rather than widening the defaults.
20
+ */
21
+
22
+ /** Tags that survive sanitization. Everything else is unwrapped or dropped. */
23
+ const ALLOWED_TAGS = new Set([
24
+ 'a', 'b', 'blockquote', 'br', 'code', 'del', 'div', 'em', 'h1', 'h2', 'h3',
25
+ 'h4', 'h5', 'h6', 'i', 'img', 'li', 'mark', 'ol', 'p', 'pre', 's', 'small',
26
+ 'span', 'strong', 'sub', 'sup', 'u', 'ul',
27
+ ])
28
+
29
+ /** Tags whose whole subtree is removed rather than unwrapped. What sits inside
30
+ * a <script> or <style> is code, so keeping its text would be worse than
31
+ * losing it. */
32
+ const DROP_SUBTREE = new Set([
33
+ 'script', 'style', 'iframe', 'object', 'embed', 'noscript', 'template',
34
+ 'svg', 'math', 'form', 'input', 'button', 'textarea', 'select', 'link',
35
+ 'meta', 'base', 'title', 'head',
36
+ ])
37
+
38
+ /** Attributes allowed per tag. `*` applies to every allowed tag. A `style`
39
+ * attribute is never allowed: it is the classic sanitizer hole (url(...)
40
+ * payloads, position tricks that let a cell cover the page chrome), and cell
41
+ * styling belongs to the column rather than to the data. */
42
+ const ALLOWED_ATTRS: Record<string, Set<string>> = {
43
+ '*': new Set(['class', 'dir', 'lang', 'title']),
44
+ a: new Set(['href', 'target', 'rel']),
45
+ img: new Set(['src', 'alt', 'width', 'height']),
46
+ ol: new Set(['start']),
47
+ }
48
+
49
+ /** URL schemes a href/src may use. Anything else, `javascript:` and
50
+ * `vbscript:` included, is dropped. `data:` is allowed only on an image src
51
+ * and only for image media types, because `data:text/html` is a script
52
+ * vector. */
53
+ const SAFE_URL = /^(?:https?:|mailto:|tel:|\/|\.\/|\.\.\/|#)/i
54
+ const SAFE_IMG_DATA_URL = /^data:image\/(?:png|jpe?g|gif|webp|avif);base64,[a-z0-9+/=]*$/i
55
+
56
+ function isSafeUrl(value: string, tag: string, attr: string): boolean {
57
+ // Strip control characters and whitespace first: "java\tscript:" and
58
+ // "java\nscript:" are both read as javascript: by browsers.
59
+ // Matching control characters is the whole point here, hence the disable.
60
+ // eslint-disable-next-line no-control-regex
61
+ const url = value.replace(/[\u0000-\u0020\u007f]/g, '')
62
+ if (tag === 'img' && attr === 'src' && SAFE_IMG_DATA_URL.test(url)) return true
63
+ return SAFE_URL.test(url)
64
+ }
65
+
66
+ function attrAllowed(tag: string, attr: string): boolean {
67
+ if (attr.startsWith('on')) return false // every event handler, in one rule
68
+ if (ALLOWED_ATTRS['*']!.has(attr)) return true
69
+ return ALLOWED_ATTRS[tag]?.has(attr) ?? false
70
+ }
71
+
72
+ /** DOM path: walk the parsed tree and strip anything off the allowlist. */
73
+ function sanitizeWithDom(html: string): string {
74
+ const doc = new DOMParser().parseFromString(`<body>${html}</body>`, 'text/html')
75
+ const walk = (node: Element): void => {
76
+ // Snapshot the child list: the loop mutates it as it unwraps and removes.
77
+ for (const child of [...node.children]) {
78
+ const tag = child.tagName.toLowerCase()
79
+ if (DROP_SUBTREE.has(tag)) {
80
+ child.remove()
81
+ continue
82
+ }
83
+ if (!ALLOWED_TAGS.has(tag)) {
84
+ // Unwrap rather than drop, so an unknown wrapper does not cost the user
85
+ // the text inside it.
86
+ walk(child)
87
+ child.replaceWith(...child.childNodes)
88
+ continue
89
+ }
90
+ for (const attr of [...child.attributes]) {
91
+ const name = attr.name.toLowerCase()
92
+ if (!attrAllowed(tag, name)) {
93
+ child.removeAttribute(attr.name)
94
+ continue
95
+ }
96
+ if ((name === 'href' || name === 'src') && !isSafeUrl(attr.value, tag, name)) {
97
+ child.removeAttribute(attr.name)
98
+ }
99
+ }
100
+ // A link that opens a new tab gets rel="noopener", so the opened page
101
+ // cannot reach back through window.opener.
102
+ if (tag === 'a' && child.getAttribute('target')) {
103
+ child.setAttribute('rel', 'noopener noreferrer')
104
+ }
105
+ walk(child)
106
+ }
107
+ }
108
+ walk(doc.body)
109
+ return doc.body.innerHTML
110
+ }
111
+
112
+ /**
113
+ * SSR path: no DOM, so drop dangerous subtrees outright and keep only
114
+ * allowlisted tags in their attribute-free form. Stricter than the DOM path on
115
+ * purpose - the client re-sanitizes on hydration, so the cost is a moment of
116
+ * plainer markup rather than a hole.
117
+ */
118
+ function sanitizeWithoutDom(html: string): string {
119
+ let out = html
120
+ for (const tag of DROP_SUBTREE) {
121
+ out = out.replace(new RegExp(`<${tag}\\b[\\s\\S]*?</${tag}\\s*>`, 'gi'), '')
122
+ out = out.replace(new RegExp(`<${tag}\\b[^>]*/?>`, 'gi'), '')
123
+ }
124
+ return out.replace(/<\/?([a-z0-9-]+)([^>]*)>/gi, (match, rawTag: string, attrs: string) => {
125
+ const tag = rawTag.toLowerCase()
126
+ if (!ALLOWED_TAGS.has(tag)) return ''
127
+ if (match.startsWith('</')) return `</${tag}>`
128
+ return attrs.trim() ? `<${tag}>` : match
129
+ })
130
+ }
131
+
132
+ /**
133
+ * Return `html` with everything outside the allowlist removed. Idempotent, so
134
+ * it is safe to call on already-sanitized markup.
135
+ */
136
+ export function sanitizeHtml(html: string | null | undefined): string {
137
+ const input = String(html ?? '')
138
+ if (!input) return ''
139
+ if (!input.includes('<')) return input // no angle bracket, no markup to strip
140
+ return typeof DOMParser === 'undefined' ? sanitizeWithoutDom(input) : sanitizeWithDom(input)
141
+ }
142
+
143
+ /** Escape text so it embeds in HTML as literal characters. */
144
+ function escapeHtml(text: string): string {
145
+ return text
146
+ .replace(/&/g, '&amp;')
147
+ .replace(/</g, '&lt;')
148
+ .replace(/>/g, '&gt;')
149
+ .replace(/"/g, '&quot;')
150
+ }
151
+
152
+ /** A sentinel that cannot occur in escaped input, used to park inline-code
153
+ * spans while the emphasis and link passes run over the rest. */
154
+ const MARK = '\u0000'
155
+
156
+ /** Inline Markdown. Code is extracted first so backticks protect their
157
+ * contents from the emphasis and link passes. */
158
+ function renderInline(text: string): string {
159
+ const code: string[] = []
160
+ let out = escapeHtml(text).replace(/`([^`]+)`/g, (_m, c: string) => {
161
+ code.push(c)
162
+ return `${MARK}${code.length - 1}${MARK}`
163
+ })
164
+ out = out
165
+ .replace(/!\[([^\]]*)\]\(([^)\s]+)\)/g, '<img src="$2" alt="$1">')
166
+ .replace(/\[([^\]]+)\]\(([^)\s]+)\)/g, '<a href="$2">$1</a>')
167
+ .replace(/\*\*([^*]+)\*\*/g, '<strong>$1</strong>')
168
+ .replace(/(^|[^*])\*([^*]+)\*/g, '$1<em>$2</em>')
169
+ .replace(/~~([^~]+)~~/g, '<del>$1</del>')
170
+ return out.replace(new RegExp(`${MARK}(\\d+)${MARK}`, 'g'), (_m, i: string) => `<code>${code[Number(i)]}</code>`)
171
+ }
172
+
173
+ /**
174
+ * Render a common Markdown subset to HTML: headings, bold, italic,
175
+ * strikethrough, inline code, links, images, and bullet / ordered lists.
176
+ *
177
+ * Deliberately not a full CommonMark implementation - a grid cell shows a line
178
+ * or two, and a complete parser is a dependency this package does not take. The
179
+ * output is sanitized, so a Markdown link cannot smuggle `javascript:`.
180
+ */
181
+ export function renderMarkdown(markdown: string | null | undefined): string {
182
+ const src = String(markdown ?? '')
183
+ if (!src) return ''
184
+ const out: string[] = []
185
+ let list: 'ul' | 'ol' | null = null
186
+ const closeList = () => {
187
+ if (list) out.push(`</${list}>`)
188
+ list = null
189
+ }
190
+ for (const line of src.split(/\r?\n/)) {
191
+ const heading = line.match(/^(#{1,6})\s+(.*)$/)
192
+ const bullet = line.match(/^\s*[-*+]\s+(.*)$/)
193
+ const ordered = line.match(/^\s*\d+[.)]\s+(.*)$/)
194
+ if (heading) {
195
+ closeList()
196
+ const level = heading[1]!.length
197
+ out.push(`<h${level}>${renderInline(heading[2]!)}</h${level}>`)
198
+ } else if (bullet || ordered) {
199
+ const want = bullet ? 'ul' : 'ol'
200
+ if (list !== want) {
201
+ closeList()
202
+ out.push(`<${want}>`)
203
+ list = want
204
+ }
205
+ out.push(`<li>${renderInline((bullet ?? ordered)![1]!)}</li>`)
206
+ } else if (!line.trim()) {
207
+ closeList()
208
+ } else {
209
+ closeList()
210
+ out.push(`<p>${renderInline(line)}</p>`)
211
+ }
212
+ }
213
+ closeList()
214
+ return sanitizeHtml(out.join(''))
215
+ }
216
+
217
+ /** Strip markup down to readable text, for exports, aria labels and tooltips
218
+ * where a cell's HTML has to collapse to one plain string. */
219
+ export function htmlToText(html: string | null | undefined): string {
220
+ const clean = sanitizeHtml(html)
221
+ if (!clean) return ''
222
+ const spaced = clean
223
+ .replace(/<\/(p|div|h[1-6]|li|blockquote|pre)>/gi, ' ')
224
+ .replace(/<br\s*\/?>/gi, ' ')
225
+ return spaced
226
+ .replace(/<[^>]*>/g, '')
227
+ .replace(/&nbsp;/gi, ' ')
228
+ .replace(/&lt;/gi, '<')
229
+ .replace(/&gt;/gi, '>')
230
+ .replace(/&quot;/gi, '"')
231
+ .replace(/&#39;/gi, "'")
232
+ .replace(/&amp;/gi, '&')
233
+ .replace(/\s+/g, ' ')
234
+ .trim()
235
+ }
package/src/scheduler-ical.ts CHANGED
@@ -1,181 +1,181 @@
1
- /**
2
- * scheduler-ical - pure, dependency-free iCalendar (RFC 5545) import / export for
3
- * the scheduler. Works on a small {@link ICalEvent} shape so it stays data-model
4
- * agnostic: map your rows to/from it. Handles timed + all-day events, RRULE
5
- * round-trip (via the shared {@link RecurrenceRule}), STATUS, DESCRIPTION and
6
- * LOCATION. No `Date.now()` in the core - `toICS` accepts a stamp.
7
- */
8
- import type { RecurrenceRule } from './recurrence'
9
-
10
- /** One VEVENT: the fields SvGrid reads from and writes to an iCalendar feed. */
11
- export type ICalEvent = {
12
- uid?: string
13
- title: string
14
- description?: string
15
- location?: string
16
- start: Date
17
- end: Date
18
- allDay?: boolean
19
- status?: 'confirmed' | 'tentative' | 'cancelled'
20
- rrule?: RecurrenceRule | null
21
- }
22
-
23
- const WD = ['SU', 'MO', 'TU', 'WE', 'TH', 'FR', 'SA'] as const
24
- const pad = (n: number) => String(n).padStart(2, '0')
25
-
26
- const utcStamp = (d: Date) =>
27
- `${d.getUTCFullYear()}${pad(d.getUTCMonth() + 1)}${pad(d.getUTCDate())}T${pad(d.getUTCHours())}${pad(d.getUTCMinutes())}${pad(d.getUTCSeconds())}Z`
28
- const dateOnly = (d: Date) => `${d.getUTCFullYear()}${pad(d.getUTCMonth() + 1)}${pad(d.getUTCDate())}`
29
-
30
- const escText = (s: string) =>
31
- s.replace(/\\/g, '\\\\').replace(/;/g, '\\;').replace(/,/g, '\\,').replace(/\r?\n/g, '\\n')
32
- const unescText = (s: string) =>
33
- s.replace(/\\n/gi, '\n').replace(/\\,/g, ',').replace(/\\;/g, ';').replace(/\\\\/g, '\\')
34
-
35
- /** Fold a content line at 74 octets (RFC 5545 line folding). */
36
- function fold(line: string): string {
37
- if (line.length <= 74) return line
38
- let out = line.slice(0, 74)
39
- let rest = line.slice(74)
40
- while (rest.length > 73) {
41
- out += '\r\n ' + rest.slice(0, 73)
42
- rest = rest.slice(73)
43
- }
44
- return out + '\r\n ' + rest
45
- }
46
-
47
- // --- RRULE serialize / parse ------------------------------------------------
48
-
49
- /** A {@link RecurrenceRule} -> an iCal `RRULE` value (without the `RRULE:` name). */
50
- export function ruleToRRule(rule: RecurrenceRule): string {
51
- const parts = [`FREQ=${rule.freq.toUpperCase()}`]
52
- if (rule.interval && rule.interval > 1) parts.push(`INTERVAL=${rule.interval}`)
53
- if (rule.weekdays?.length) {
54
- if (rule.weekOfMonth != null && rule.weekdays.length === 1) {
55
- parts.push(`BYDAY=${rule.weekOfMonth}${WD[rule.weekdays[0]!]}`)
56
- } else {
57
- parts.push(`BYDAY=${rule.weekdays.map((w) => WD[w]).join(',')}`)
58
- }
59
- }
60
- if (rule.day != null && rule.weekOfMonth == null) parts.push(`BYMONTHDAY=${rule.day}`)
61
- if (rule.month != null) parts.push(`BYMONTH=${rule.month + 1}`)
62
- if (rule.count != null) parts.push(`COUNT=${rule.count}`)
63
- if (rule.until != null) parts.push(`UNTIL=${utcStamp(new Date(rule.until as string))}`)
64
- return parts.join(';')
65
- }
66
-
67
- /** An iCal `RRULE` value -> a {@link RecurrenceRule}. */
68
- export function rruleToRule(value: string): RecurrenceRule | null {
69
- const map: Record<string, string> = {}
70
- for (const kv of value.split(';')) {
71
- const [k, v] = kv.split('=')
72
- if (k && v) map[k.toUpperCase()] = v
73
- }
74
- const freq = (map.FREQ ?? '').toLowerCase()
75
- if (!['daily', 'weekly', 'monthly', 'yearly'].includes(freq)) return null
76
- const rule: RecurrenceRule = { freq: freq as RecurrenceRule['freq'] }
77
- if (map.INTERVAL) rule.interval = Number(map.INTERVAL)
78
- if (map.BYDAY) {
79
- const parts = map.BYDAY.split(',')
80
- const m = parts[0]!.match(/^(-?\d+)?([A-Z]{2})$/)
81
- if (parts.length === 1 && m && m[1]) {
82
- rule.weekOfMonth = Number(m[1])
83
- rule.weekdays = [WD.indexOf(m[2] as (typeof WD)[number])]
84
- } else {
85
- rule.weekdays = parts.map((p) => WD.indexOf(p.replace(/^-?\d+/, '') as (typeof WD)[number])).filter((n) => n >= 0)
86
- }
87
- }
88
- if (map.BYMONTHDAY) rule.day = Number(map.BYMONTHDAY)
89
- if (map.BYMONTH) rule.month = Number(map.BYMONTH) - 1
90
- if (map.COUNT) rule.count = Number(map.COUNT)
91
- if (map.UNTIL) rule.until = parseICalDate(map.UNTIL).date.toISOString()
92
- return rule
93
- }
94
-
95
- // --- export -----------------------------------------------------------------
96
-
97
- /** Serialize events to an iCalendar string. `stamp` sets DTSTAMP (default epoch). */
98
- export function toICS(events: ReadonlyArray<ICalEvent>, opts: { prodId?: string; stamp?: Date } = {}): string {
99
- const stamp = utcStamp(opts.stamp ?? new Date(0))
100
- const lines = ['BEGIN:VCALENDAR', 'VERSION:2.0', `PRODID:${opts.prodId ?? '-//SvGrid//Scheduler//EN'}`]
101
- events.forEach((e, i) => {
102
- lines.push('BEGIN:VEVENT')
103
- lines.push(`UID:${e.uid ?? `svgrid-${i}-${e.start.getTime()}`}`)
104
- lines.push(`DTSTAMP:${stamp}`)
105
- if (e.allDay) {
106
- lines.push(`DTSTART;VALUE=DATE:${dateOnly(e.start)}`)
107
- lines.push(`DTEND;VALUE=DATE:${dateOnly(e.end)}`)
108
- } else {
109
- lines.push(`DTSTART:${utcStamp(e.start)}`)
110
- lines.push(`DTEND:${utcStamp(e.end)}`)
111
- }
112
- lines.push(`SUMMARY:${escText(e.title)}`)
113
- if (e.description) lines.push(`DESCRIPTION:${escText(e.description)}`)
114
- if (e.location) lines.push(`LOCATION:${escText(e.location)}`)
115
- if (e.status) lines.push(`STATUS:${e.status.toUpperCase()}`)
116
- if (e.rrule) lines.push(`RRULE:${ruleToRRule(e.rrule)}`)
117
- lines.push('END:VEVENT')
118
- })
119
- lines.push('END:VCALENDAR')
120
- return lines.map(fold).join('\r\n')
121
- }
122
-
123
- // --- import -----------------------------------------------------------------
124
-
125
- function parseICalDate(value: string): { date: Date; allDay: boolean } {
126
- // 20260706 (date) | 20260706T093000Z (utc) | 20260706T093000 (local/floating)
127
- const m = value.match(/^(\d{4})(\d{2})(\d{2})(?:T(\d{2})(\d{2})(\d{2})(Z)?)?$/)
128
- if (!m) return { date: new Date(NaN), allDay: false }
129
- const [, y, mo, d, hh, mm, ss, z] = m
130
- if (hh == null) return { date: new Date(Number(y), Number(mo) - 1, Number(d)), allDay: true }
131
- if (z) return { date: new Date(Date.UTC(+y!, +mo! - 1, +d!, +hh, +mm!, +ss!)), allDay: false }
132
- return { date: new Date(+y!, +mo! - 1, +d!, +hh, +mm!, +ss!), allDay: false }
133
- }
134
-
135
- /** Parse an iCalendar string into events (unfolds lines, reads VEVENT blocks). */
136
- export function fromICS(text: string): ICalEvent[] {
137
- // Unfold: a line starting with space/tab continues the previous one.
138
- const raw = text.replace(/\r\n/g, '\n').split('\n')
139
- const unfolded: string[] = []
140
- for (const line of raw) {
141
- if ((line.startsWith(' ') || line.startsWith('\t')) && unfolded.length) {
142
- unfolded[unfolded.length - 1] += line.slice(1)
143
- } else unfolded.push(line)
144
- }
145
- const out: ICalEvent[] = []
146
- let cur: Partial<ICalEvent> & { _allDayStart?: boolean } = {}
147
- let inEvent = false
148
- for (const line of unfolded) {
149
- if (line === 'BEGIN:VEVENT') {
150
- inEvent = true
151
- cur = {}
152
- continue
153
- }
154
- if (line === 'END:VEVENT') {
155
- if (cur.title && cur.start && cur.end) out.push({ title: cur.title, start: cur.start, end: cur.end, allDay: cur.allDay, uid: cur.uid, description: cur.description, location: cur.location, status: cur.status, rrule: cur.rrule ?? null })
156
- inEvent = false
157
- continue
158
- }
159
- if (!inEvent) continue
160
- const ci = line.indexOf(':')
161
- if (ci < 0) continue
162
- const nameAndParams = line.slice(0, ci)
163
- const value = line.slice(ci + 1)
164
- const name = nameAndParams.split(';')[0]!.toUpperCase()
165
- if (name === 'UID') cur.uid = value
166
- else if (name === 'SUMMARY') cur.title = unescText(value)
167
- else if (name === 'DESCRIPTION') cur.description = unescText(value)
168
- else if (name === 'LOCATION') cur.location = unescText(value)
169
- else if (name === 'STATUS') cur.status = value.toLowerCase() as ICalEvent['status']
170
- else if (name === 'DTSTART') {
171
- const { date, allDay } = parseICalDate(value)
172
- cur.start = date
173
- cur.allDay = allDay
174
- } else if (name === 'DTEND') {
175
- cur.end = parseICalDate(value).date
176
- } else if (name === 'RRULE') {
177
- cur.rrule = rruleToRule(value) ?? undefined
178
- }
179
- }
180
- return out
181
- }
1
+ /**
2
+ * scheduler-ical - pure, dependency-free iCalendar (RFC 5545) import / export for
3
+ * the scheduler. Works on a small {@link ICalEvent} shape so it stays data-model
4
+ * agnostic: map your rows to/from it. Handles timed + all-day events, RRULE
5
+ * round-trip (via the shared {@link RecurrenceRule}), STATUS, DESCRIPTION and
6
+ * LOCATION. No `Date.now()` in the core - `toICS` accepts a stamp.
7
+ */
8
+ import type { RecurrenceRule } from './recurrence'
9
+
10
+ /** One VEVENT: the fields SvGrid reads from and writes to an iCalendar feed. */
11
+ export type ICalEvent = {
12
+ uid?: string
13
+ title: string
14
+ description?: string
15
+ location?: string
16
+ start: Date
17
+ end: Date
18
+ allDay?: boolean
19
+ status?: 'confirmed' | 'tentative' | 'cancelled'
20
+ rrule?: RecurrenceRule | null
21
+ }
22
+
23
+ const WD = ['SU', 'MO', 'TU', 'WE', 'TH', 'FR', 'SA'] as const
24
+ const pad = (n: number) => String(n).padStart(2, '0')
25
+
26
+ const utcStamp = (d: Date) =>
27
+ `${d.getUTCFullYear()}${pad(d.getUTCMonth() + 1)}${pad(d.getUTCDate())}T${pad(d.getUTCHours())}${pad(d.getUTCMinutes())}${pad(d.getUTCSeconds())}Z`
28
+ const dateOnly = (d: Date) => `${d.getUTCFullYear()}${pad(d.getUTCMonth() + 1)}${pad(d.getUTCDate())}`
29
+
30
+ const escText = (s: string) =>
31
+ s.replace(/\\/g, '\\\\').replace(/;/g, '\\;').replace(/,/g, '\\,').replace(/\r?\n/g, '\\n')
32
+ const unescText = (s: string) =>
33
+ s.replace(/\\n/gi, '\n').replace(/\\,/g, ',').replace(/\\;/g, ';').replace(/\\\\/g, '\\')
34
+
35
+ /** Fold a content line at 74 octets (RFC 5545 line folding). */
36
+ function fold(line: string): string {
37
+ if (line.length <= 74) return line
38
+ let out = line.slice(0, 74)
39
+ let rest = line.slice(74)
40
+ while (rest.length > 73) {
41
+ out += '\r\n ' + rest.slice(0, 73)
42
+ rest = rest.slice(73)
43
+ }
44
+ return out + '\r\n ' + rest
45
+ }
46
+
47
+ // --- RRULE serialize / parse ------------------------------------------------
48
+
49
+ /** A {@link RecurrenceRule} -> an iCal `RRULE` value (without the `RRULE:` name). */
50
+ export function ruleToRRule(rule: RecurrenceRule): string {
51
+ const parts = [`FREQ=${rule.freq.toUpperCase()}`]
52
+ if (rule.interval && rule.interval > 1) parts.push(`INTERVAL=${rule.interval}`)
53
+ if (rule.weekdays?.length) {
54
+ if (rule.weekOfMonth != null && rule.weekdays.length === 1) {
55
+ parts.push(`BYDAY=${rule.weekOfMonth}${WD[rule.weekdays[0]!]}`)
56
+ } else {
57
+ parts.push(`BYDAY=${rule.weekdays.map((w) => WD[w]).join(',')}`)
58
+ }
59
+ }
60
+ if (rule.day != null && rule.weekOfMonth == null) parts.push(`BYMONTHDAY=${rule.day}`)
61
+ if (rule.month != null) parts.push(`BYMONTH=${rule.month + 1}`)
62
+ if (rule.count != null) parts.push(`COUNT=${rule.count}`)
63
+ if (rule.until != null) parts.push(`UNTIL=${utcStamp(new Date(rule.until as string))}`)
64
+ return parts.join(';')
65
+ }
66
+
67
+ /** An iCal `RRULE` value -> a {@link RecurrenceRule}. */
68
+ export function rruleToRule(value: string): RecurrenceRule | null {
69
+ const map: Record<string, string> = {}
70
+ for (const kv of value.split(';')) {
71
+ const [k, v] = kv.split('=')
72
+ if (k && v) map[k.toUpperCase()] = v
73
+ }
74
+ const freq = (map.FREQ ?? '').toLowerCase()
75
+ if (!['daily', 'weekly', 'monthly', 'yearly'].includes(freq)) return null
76
+ const rule: RecurrenceRule = { freq: freq as RecurrenceRule['freq'] }
77
+ if (map.INTERVAL) rule.interval = Number(map.INTERVAL)
78
+ if (map.BYDAY) {
79
+ const parts = map.BYDAY.split(',')
80
+ const m = parts[0]!.match(/^(-?\d+)?([A-Z]{2})$/)
81
+ if (parts.length === 1 && m && m[1]) {
82
+ rule.weekOfMonth = Number(m[1])
83
+ rule.weekdays = [WD.indexOf(m[2] as (typeof WD)[number])]
84
+ } else {
85
+ rule.weekdays = parts.map((p) => WD.indexOf(p.replace(/^-?\d+/, '') as (typeof WD)[number])).filter((n) => n >= 0)
86
+ }
87
+ }
88
+ if (map.BYMONTHDAY) rule.day = Number(map.BYMONTHDAY)
89
+ if (map.BYMONTH) rule.month = Number(map.BYMONTH) - 1
90
+ if (map.COUNT) rule.count = Number(map.COUNT)
91
+ if (map.UNTIL) rule.until = parseICalDate(map.UNTIL).date.toISOString()
92
+ return rule
93
+ }
94
+
95
+ // --- export -----------------------------------------------------------------
96
+
97
+ /** Serialize events to an iCalendar string. `stamp` sets DTSTAMP (default epoch). */
98
+ export function toICS(events: ReadonlyArray<ICalEvent>, opts: { prodId?: string; stamp?: Date } = {}): string {
99
+ const stamp = utcStamp(opts.stamp ?? new Date(0))
100
+ const lines = ['BEGIN:VCALENDAR', 'VERSION:2.0', `PRODID:${opts.prodId ?? '-//SvGrid//Scheduler//EN'}`]
101
+ events.forEach((e, i) => {
102
+ lines.push('BEGIN:VEVENT')
103
+ lines.push(`UID:${e.uid ?? `svgrid-${i}-${e.start.getTime()}`}`)
104
+ lines.push(`DTSTAMP:${stamp}`)
105
+ if (e.allDay) {
106
+ lines.push(`DTSTART;VALUE=DATE:${dateOnly(e.start)}`)
107
+ lines.push(`DTEND;VALUE=DATE:${dateOnly(e.end)}`)
108
+ } else {
109
+ lines.push(`DTSTART:${utcStamp(e.start)}`)
110
+ lines.push(`DTEND:${utcStamp(e.end)}`)
111
+ }
112
+ lines.push(`SUMMARY:${escText(e.title)}`)
113
+ if (e.description) lines.push(`DESCRIPTION:${escText(e.description)}`)
114
+ if (e.location) lines.push(`LOCATION:${escText(e.location)}`)
115
+ if (e.status) lines.push(`STATUS:${e.status.toUpperCase()}`)
116
+ if (e.rrule) lines.push(`RRULE:${ruleToRRule(e.rrule)}`)
117
+ lines.push('END:VEVENT')
118
+ })
119
+ lines.push('END:VCALENDAR')
120
+ return lines.map(fold).join('\r\n')
121
+ }
122
+
123
+ // --- import -----------------------------------------------------------------
124
+
125
+ function parseICalDate(value: string): { date: Date; allDay: boolean } {
126
+ // 20260706 (date) | 20260706T093000Z (utc) | 20260706T093000 (local/floating)
127
+ const m = value.match(/^(\d{4})(\d{2})(\d{2})(?:T(\d{2})(\d{2})(\d{2})(Z)?)?$/)
128
+ if (!m) return { date: new Date(NaN), allDay: false }
129
+ const [, y, mo, d, hh, mm, ss, z] = m
130
+ if (hh == null) return { date: new Date(Number(y), Number(mo) - 1, Number(d)), allDay: true }
131
+ if (z) return { date: new Date(Date.UTC(+y!, +mo! - 1, +d!, +hh, +mm!, +ss!)), allDay: false }
132
+ return { date: new Date(+y!, +mo! - 1, +d!, +hh, +mm!, +ss!), allDay: false }
133
+ }
134
+
135
+ /** Parse an iCalendar string into events (unfolds lines, reads VEVENT blocks). */
136
+ export function fromICS(text: string): ICalEvent[] {
137
+ // Unfold: a line starting with space/tab continues the previous one.
138
+ const raw = text.replace(/\r\n/g, '\n').split('\n')
139
+ const unfolded: string[] = []
140
+ for (const line of raw) {
141
+ if ((line.startsWith(' ') || line.startsWith('\t')) && unfolded.length) {
142
+ unfolded[unfolded.length - 1] += line.slice(1)
143
+ } else unfolded.push(line)
144
+ }
145
+ const out: ICalEvent[] = []
146
+ let cur: Partial<ICalEvent> & { _allDayStart?: boolean } = {}
147
+ let inEvent = false
148
+ for (const line of unfolded) {
149
+ if (line === 'BEGIN:VEVENT') {
150
+ inEvent = true
151
+ cur = {}
152
+ continue
153
+ }
154
+ if (line === 'END:VEVENT') {
155
+ if (cur.title && cur.start && cur.end) out.push({ title: cur.title, start: cur.start, end: cur.end, allDay: cur.allDay, uid: cur.uid, description: cur.description, location: cur.location, status: cur.status, rrule: cur.rrule ?? null })
156
+ inEvent = false
157
+ continue
158
+ }
159
+ if (!inEvent) continue
160
+ const ci = line.indexOf(':')
161
+ if (ci < 0) continue
162
+ const nameAndParams = line.slice(0, ci)
163
+ const value = line.slice(ci + 1)
164
+ const name = nameAndParams.split(';')[0]!.toUpperCase()
165
+ if (name === 'UID') cur.uid = value
166
+ else if (name === 'SUMMARY') cur.title = unescText(value)
167
+ else if (name === 'DESCRIPTION') cur.description = unescText(value)
168
+ else if (name === 'LOCATION') cur.location = unescText(value)
169
+ else if (name === 'STATUS') cur.status = value.toLowerCase() as ICalEvent['status']
170
+ else if (name === 'DTSTART') {
171
+ const { date, allDay } = parseICalDate(value)
172
+ cur.start = date
173
+ cur.allDay = allDay
174
+ } else if (name === 'DTEND') {
175
+ cur.end = parseICalDate(value).date
176
+ } else if (name === 'RRULE') {
177
+ cur.rrule = rruleToRule(value) ?? undefined
178
+ }
179
+ }
180
+ return out
181
+ }