dsh-calendar 0.10.1 → 0.10.2

package/CHANGELOG.md

@@ -4,6 +4,10 @@
 
 [历史英文记录](docs/CHANGELOG.en.md)
 
+## 0.10.2 (2026-10-05)
+
+- 严格验证真实 ISO 日期，拒绝不存在的日期、模糊地域格式与缺少时区的日期时间，防止日程悄悄改期。
+
 ## 0.10.1 (2026-10-03)
 
 - 修复语言切换时菜单和悬浮按钮不更新；日期、星期、重复规则、ICS 告警与连接引导支持英文。

package/README.en.md

@@ -2,9 +2,11 @@
 
 [中文](README.md)
 
+![dsh-calendar whale girl plugin cover](https://raw.githubusercontent.com/STARDUSTLC666/dsh-calendar/main/assets/cover-whale-girl.png)
+
 View, create and reschedule CalDAV events from DSH.
 
-[![npm](https://img.shields.io/npm/v/dsh-calendar)](https://www.npmjs.com/package/dsh-calendar) [![downloads](https://img.shields.io/npm/dm/dsh-calendar)](https://www.npmjs.com/package/dsh-calendar)
+[![npm](https://img.shields.io/npm/v/dsh-calendar)](https://www.npmjs.com/package/dsh-calendar) [![downloads](https://raw.githubusercontent.com/STARDUSTLC666/dsh-suite/npm-downloads/assets/dsh-calendar-downloads.svg)](https://www.npmjs.com/package/dsh-calendar)
 
 ## What it does
 

package/README.md

@@ -2,9 +2,11 @@
 
 [English](README.en.md)
 
+![dsh-calendar 鲸鱼娘插件封面](https://raw.githubusercontent.com/STARDUSTLC666/dsh-calendar/main/assets/cover-whale-girl.png)
+
 连接 CalDAV 日历，在 DSH 中查看、创建和调整日程。
 
-[![npm](https://img.shields.io/npm/v/dsh-calendar)](https://www.npmjs.com/package/dsh-calendar) [![downloads](https://img.shields.io/npm/dm/dsh-calendar)](https://www.npmjs.com/package/dsh-calendar)
+[![npm](https://img.shields.io/npm/v/dsh-calendar)](https://www.npmjs.com/package/dsh-calendar) [![downloads](https://raw.githubusercontent.com/STARDUSTLC666/dsh-suite/npm-downloads/assets/dsh-calendar-downloads.svg)](https://www.npmjs.com/package/dsh-calendar)
 
 ## 功能
 

package/docs/CHANGELOG.en.md

@@ -4,6 +4,10 @@
 
 These English notes preserve the earlier translations. The main changelog contains the consolidated version history.
 
+## 0.10.2 (2026-10-05)
+
+- Validate real ISO calendar dates, rejecting nonexistent dates, ambiguous locale formats and datetimes without a timezone.
+
 ## 0.10.0 (2026-10-03)
 
 - Import ICS files or pasted content with an explicit preview, selection and batch confirmation. Preserve recurrence rules, excluded dates, moved exceptions and timezone definitions.

package/docs/USAGE.en.md

@@ -2,6 +2,10 @@
 
 [Overview](../README.en.md) · [Changelog](../CHANGELOG.md) · [Validation](VALIDATION.md)
 
+## Current improvements
+
+Use YYYY-MM-DD for dates and ISO datetimes with Z or a UTC offset. Invalid dates fail before remote creation or updates. Existing events are preserved.
+
 ## Installation
 
 ```bash

package/docs/USAGE.md

@@ -2,6 +2,10 @@
 
 [返回简介](../README.md) · [更新记录](../CHANGELOG.md) · [验证记录](VALIDATION.md)
 
+## 本次改进
+
+日期使用 YYYY-MM-DD；带时间使用带 Z 或 UTC 偏移的 ISO 格式。错误日期会在创建或更新远端日程前报错，原日程保留。
+
 ## 安装
 
 ```bash

package/lib/ical.js

@@ -6,6 +6,7 @@
  */
 import { randomUUID } from 'node:crypto';
 import ICAL from 'ical.js';
+import { assertIsoTime } from './time.js';
 /** 展开重复事件超出迭代预算：显式报错，避免把「没走到窗口」静默当成「窗口内没有实例」。 */
 export class ExpansionLimitError extends Error {
     constructor(message) {
@@ -445,6 +446,7 @@ export function updateICalString(data, changes) {
 }
 /** 把 ISO 字符串解析成 ICAL.Time（全天 YYYY-MM-DD 或转 UTC 的定时时间）。 */
 function parseTime(value, allDay) {
+    assertIsoTime(value, '时间');
     if (allDay || isDateOnly(value)) {
         return ICAL.Time.fromDateString(value);
     }

package/lib/time.d.ts

@@ -0,0 +1,3 @@
+/** Validate calendar dates before Date/ical.js can silently normalize them. */
+export declare const DATE_ONLY_PATTERN: RegExp;
+export declare function assertIsoTime(value: string, label: string): void;

package/lib/time.js

@@ -0,0 +1,26 @@
+/** Validate calendar dates before Date/ical.js can silently normalize them. */
+export const DATE_ONLY_PATTERN = /^(\d{4})-(\d{2})-(\d{2})$/;
+const DATETIME_PATTERN = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2})(?::(\d{2})(?:\.(\d{1,9}))?)?(Z|[+-]\d{2}:\d{2})$/;
+export function assertIsoTime(value, label) {
+    const dateOnly = DATE_ONLY_PATTERN.exec(value);
+    const parts = dateOnly ?? DATETIME_PATTERN.exec(value);
+    const invalid = () => new Error(label + ' 不是合法的 ISO 8601 时间：' + value + '。必须是真实存在的日期；定时事件须含时区，例如 2025-01-01T09:00:00+08:00 或 2025-01-01T09:00:00Z。');
+    if (!parts)
+        throw invalid();
+    const year = Number(parts[1]), month = Number(parts[2]), day = Number(parts[3]);
+    const leap = year % 4 === 0 && (year % 100 !== 0 || year % 400 === 0);
+    const days = [31, leap ? 29 : 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];
+    if (year < 1 || month < 1 || month > 12 || day < 1 || day > days[month - 1])
+        throw invalid();
+    if (dateOnly)
+        return;
+    const hour = Number(parts[4]), minute = Number(parts[5]), second = Number(parts[6] ?? 0);
+    // ISO 8601 permits 24:00 only as midnight at the end of this valid date.
+    if (hour > 24 || minute > 59 || second > 59 || (hour === 24 && (minute !== 0 || second !== 0 || /[1-9]/.test(parts[7] ?? ''))))
+        throw invalid();
+    const zone = parts[8];
+    if (zone !== 'Z' && (Number(zone.slice(1, 3)) > 23 || Number(zone.slice(4)) > 59))
+        throw invalid();
+    if (Number.isNaN(new Date(value).getTime()))
+        throw invalid();
+}

package/lib/tools.d.ts

@@ -6,6 +6,7 @@
  */
 import { type CalendarConfig } from './config.js';
 import { type CalendarEvent } from './ical.js';
+export { assertIsoTime } from './time.js';
 /** 模型可见的内容块。 */
 export interface ContentBlock {
     type: 'text';
@@ -29,7 +30,6 @@ export interface CalendarToolDefinition {
 }
 export declare function asRecord(args: unknown): Record<string, unknown>;
 export declare function optionalString(args: Record<string, unknown>, key: string): string | undefined;
-export declare function assertIsoTime(value: string, label: string): void;
 export declare function assertTimeRange(start: string, end: string): void;
 export declare function isoNoMillis(value: string): string;
 /** 按开始时间升序稳定排序（CalDAV 服务端返回顺序不保证稳定）。 */

package/lib/tools.js

@@ -7,6 +7,8 @@
 import { CalendarService } from './caldav.js';
 import { CALENDAR_PROVIDERS, buildCaldavUrl, resolveAuthMethod, resolveConfig, resolveCredentials, validateOAuthUrl, } from './config.js';
 import { compileParameters } from './parameters.js';
+import { assertIsoTime, DATE_ONLY_PATTERN } from './time.js';
+export { assertIsoTime } from './time.js';
 const EVENT_SCHEMA = { type: 'object', additionalProperties: true };
 const TIMEOUT_MS = 60000;
 export function asRecord(args) {
@@ -48,28 +50,11 @@ function clampedInteger(args, key, fallback, min, max) {
         return fallback;
     return Math.min(max, Math.max(min, value));
 }
-const DATE_ONLY_PATTERN = /^(\d{4})-(\d{2})-(\d{2})$/;
-export function assertIsoTime(value, label) {
-    const dateOnly = DATE_ONLY_PATTERN.exec(value);
-    if (dateOnly !== null) {
-        const year = Number(dateOnly[1]);
-        const month = Number(dateOnly[2]);
-        const day = Number(dateOnly[3]);
-        const date = new Date(Date.UTC(year, month - 1, day));
-        if (date.getUTCFullYear() !== year || date.getUTCMonth() !== month - 1 || date.getUTCDate() !== day) {
-            throw new Error(label + ' 不是合法的日期：' + value + '（YYYY-MM-DD 必须是真实存在的日期）。');
-        }
-        return;
-    }
-    if (Number.isNaN(new Date(value).getTime())) {
-        throw new Error(label + ' 不是合法的 ISO 8601 时间，例如 2025-01-01T09:00:00+08:00 或 2025-01-01T09:00:00Z。');
-    }
-}
 /** 日期/时间统一转 epoch 毫秒（date-only 按 UTC 零点），用于范围比较。 */
 function toEpochMs(value) {
     const dateOnly = DATE_ONLY_PATTERN.exec(value);
     if (dateOnly !== null) {
-        return Date.UTC(Number(dateOnly[1]), Number(dateOnly[2]) - 1, Number(dateOnly[3]));
+        return new Date(value + 'T00:00:00Z').getTime();
     }
     return new Date(value).getTime();
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-calendar",
-  "version": "0.10.1",
+  "version": "0.10.2",
   "description": "连接 CalDAV 日历，在 DSH 中查看、创建和调整日程。",
   "type": "module",
   "main": "lib/index.js",