jishushell 0.4.30 → 0.5.22

package/dist/services/webdav/server.js

@@ -0,0 +1,420 @@
+/**
+ * WebDAV server logic for the AI NAS (M3 W4 PR-3).
+ *
+ * Implements a focused subset of RFC 4918 — the methods iOS Files,
+ * macOS Finder, Windows Explorer, and FX (Android) actually issue:
+ *
+ *   OPTIONS   capability advertisement
+ *   PROPFIND  list (Depth: 0 / 1)
+ *   GET       stream a file
+ *   HEAD      same headers as GET, no body
+ *   PUT       upload (octet-stream pass-through; overwrites are normal)
+ *   DELETE    soft-delete to .trash via FilesManager
+ *   MKCOL     create directory
+ *   MOVE      rename / move within the WebDAV root
+ *   COPY      shallow file copy (no recursive copy in this PR)
+ *
+ * Locking (LOCK / UNLOCK / PROPPATCH) is intentionally NOT implemented;
+ * we return 501 — clients fall back to optimistic concurrency.
+ *
+ * All request paths are validated through the FilesManager surface so
+ * we share path-safety, symlink defense, and the audit log with the
+ * /api/files routes. Authentication runs upstream (see routes/webdav.ts).
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { FilesError, } from "../files-manager.js";
+import { buildMultistatus, parseDepth, } from "./xml-builder.js";
+import { isAllowed } from "../app-passwords.js";
+import { resolveSafe } from "../../utils/path-safety.js";
+import { atomicWriteStream } from "../../utils/safe-write.js";
+import { withPathLock } from "../../utils/path-locks.js";
+import { FILES_ROOT } from "../../config.js";
+// ── Path extraction ────────────────────────────────
+/**
+ * Strip the mount prefix from req.url and decode each segment, then
+ * normalize: leading / trailing slash removed, "." collapsed. Returns
+ * the files/-relative path the rest of the WebDAV server uses.
+ */
+export function extractRel(reqUrl, mountPrefix) {
+    const cleanPrefix = mountPrefix.replace(/\/+$/, "");
+    let urlPath = reqUrl;
+    // Strip query string — WebDAV doesn't use it
+    const q = urlPath.indexOf("?");
+    if (q >= 0)
+        urlPath = urlPath.slice(0, q);
+    if (urlPath.startsWith(cleanPrefix))
+        urlPath = urlPath.slice(cleanPrefix.length);
+    if (urlPath.startsWith("/"))
+        urlPath = urlPath.slice(1);
+    if (urlPath.endsWith("/"))
+        urlPath = urlPath.slice(0, -1);
+    // Decode each segment so `%E7%AC%94%E8%AE%B0` becomes `笔记`
+    return urlPath
+        .split("/")
+        .map((s) => {
+        try {
+            return decodeURIComponent(s);
+        }
+        catch {
+            return s;
+        }
+    })
+        .filter((s) => s !== "")
+        .join("/");
+}
+// ── Auth scope check ───────────────────────────────
+function checkScope(ctx, rel, needsWrite) {
+    return isAllowed(ctx.authedAs, rel, needsWrite);
+}
+function send403(reply, reason) {
+    reply
+        .code(403)
+        .header("Content-Type", "text/plain; charset=utf-8")
+        .send(`forbidden: ${reason ?? "scope mismatch"}`);
+}
+// ── OPTIONS ────────────────────────────────────────
+export async function handleOptions(_ctx, _req, reply) {
+    reply
+        .code(200)
+        .header("Allow", "OPTIONS, GET, HEAD, PUT, DELETE, PROPFIND, MKCOL, MOVE, COPY")
+        .header("DAV", "1")
+        .header("MS-Author-Via", "DAV") // Windows Explorer compatibility
+        .send();
+}
+// ── PROPFIND ───────────────────────────────────────
+export async function handlePropfind(ctx, req, reply) {
+    const rel = extractRel(req.url, ctx.mountPrefix);
+    const scope = checkScope(ctx, rel, false);
+    if (!scope.allowed)
+        return send403(reply, scope.reason);
+    const depth = parseDepth(req.headers.depth);
+    const targetAbs = resolveSafe(FILES_ROOT, rel);
+    let stat;
+    try {
+        const ls = fs.lstatSync(targetAbs);
+        if (ls.isSymbolicLink()) {
+            reply.code(403).send("symlinks not exposed via WebDAV");
+            return;
+        }
+        stat = fs.statSync(targetAbs);
+    }
+    catch (e) {
+        if (e?.code === "ENOENT") {
+            reply.code(404).send();
+            return;
+        }
+        throw e;
+    }
+    const resources = [
+        statToResource(rel, stat, basename(rel) || "files"),
+    ];
+    if (depth >= 1 && stat.isDirectory()) {
+        let entries;
+        try {
+            entries = fs.readdirSync(targetAbs);
+        }
+        catch {
+            entries = [];
+        }
+        for (const name of entries) {
+            if (name.startsWith("."))
+                continue; // hidden / .trash never exposed
+            const childAbs = path.join(targetAbs, name);
+            let childStat;
+            try {
+                const ls = fs.lstatSync(childAbs);
+                if (ls.isSymbolicLink())
+                    continue;
+                childStat = fs.statSync(childAbs);
+            }
+            catch {
+                continue;
+            }
+            const childRel = rel ? `${rel}/${name}` : name;
+            const childScope = checkScope(ctx, childRel, false);
+            if (!childScope.allowed)
+                continue; // hide outside-scope children
+            resources.push(statToResource(childRel, childStat, name));
+        }
+    }
+    const xml = buildMultistatus(ctx.mountPrefix, resources);
+    reply
+        .code(207)
+        .header("Content-Type", 'application/xml; charset="utf-8"')
+        .header("DAV", "1")
+        .send(xml);
+}
+function statToResource(rel, stat, displayName) {
+    const isDir = stat.isDirectory();
+    return {
+        pathRel: rel,
+        displayName,
+        isDir,
+        size: isDir ? 0 : stat.size,
+        mtime: Math.floor(stat.mtimeMs / 1000),
+        etag: `W/"${stat.size}-${Math.floor(stat.mtimeMs)}"`,
+        mime: isDir ? undefined : guessMime(displayName),
+    };
+}
+function basename(rel) {
+    if (!rel)
+        return "";
+    const idx = rel.lastIndexOf("/");
+    return idx === -1 ? rel : rel.slice(idx + 1);
+}
+const MIME_BY_EXT = {
+    ".txt": "text/plain; charset=utf-8",
+    ".md": "text/markdown; charset=utf-8",
+    ".json": "application/json",
+    ".pdf": "application/pdf",
+    ".jpg": "image/jpeg",
+    ".jpeg": "image/jpeg",
+    ".png": "image/png",
+    ".webp": "image/webp",
+    ".gif": "image/gif",
+    ".mp4": "video/mp4",
+    ".mov": "video/quicktime",
+    ".mp3": "audio/mpeg",
+    ".zip": "application/zip",
+};
+function guessMime(name) {
+    const ext = path.extname(name).toLowerCase();
+    return MIME_BY_EXT[ext] ?? "application/octet-stream";
+}
+// ── GET / HEAD ─────────────────────────────────────
+export async function handleGet(ctx, req, reply, bodyless) {
+    const rel = extractRel(req.url, ctx.mountPrefix);
+    const scope = checkScope(ctx, rel, false);
+    if (!scope.allowed)
+        return send403(reply, scope.reason);
+    if (rel === "") {
+        reply.code(403).send("cannot GET the WebDAV root");
+        return;
+    }
+    try {
+        const r = await ctx.filesManager.readStream(rel);
+        reply
+            .header("Content-Type", r.mime)
+            .header("Content-Length", String(r.size))
+            .header("ETag", r.etag)
+            .header("Last-Modified", new Date(r.mtime * 1000).toUTCString())
+            .header("Accept-Ranges", "bytes");
+        if (bodyless) {
+            reply.code(200).send();
+        }
+        else {
+            reply.code(200).send(r.openStream());
+        }
+    }
+    catch (e) {
+        sendFilesError(reply, e);
+    }
+}
+// ── PUT ────────────────────────────────────────────
+export async function handlePut(ctx, req, reply) {
+    const rel = extractRel(req.url, ctx.mountPrefix);
+    const scope = checkScope(ctx, rel, true);
+    if (!scope.allowed)
+        return send403(reply, scope.reason);
+    if (rel === "") {
+        reply.code(405).send("cannot PUT the WebDAV root");
+        return;
+    }
+    // Content-Length is mandatory for the same reason as /api/files.
+    const cl = req.headers["content-length"];
+    const clNum = typeof cl === "string" ? Number.parseInt(cl, 10) : Number.NaN;
+    if (!Number.isFinite(clNum) || clNum < 0) {
+        reply.code(411).send("Content-Length required");
+        return;
+    }
+    const body = req.raw;
+    if (!body) {
+        reply.code(400).send("missing body");
+        return;
+    }
+    try {
+        // WebDAV PUT default-overwrites; matches RFC 4918 §9.7.
+        const result = await ctx.filesManager.writeStream(rel, body, {
+            overwrite: true,
+            expectedSize: clNum,
+        });
+        // 201 if newly created, 204 if overwritten — FilesManager doesn't
+        // currently distinguish; default to 201 (Finder accepts both).
+        reply
+            .code(201)
+            .header("ETag", result.etag)
+            .header("Content-Length", "0")
+            .send();
+    }
+    catch (e) {
+        sendFilesError(reply, e);
+    }
+}
+// ── DELETE ─────────────────────────────────────────
+export async function handleDelete(ctx, req, reply) {
+    const rel = extractRel(req.url, ctx.mountPrefix);
+    const scope = checkScope(ctx, rel, true);
+    if (!scope.allowed)
+        return send403(reply, scope.reason);
+    if (rel === "") {
+        reply.code(405).send("cannot DELETE the WebDAV root");
+        return;
+    }
+    try {
+        await ctx.filesManager.remove(rel);
+        reply.code(204).send();
+    }
+    catch (e) {
+        sendFilesError(reply, e);
+    }
+}
+// ── MKCOL ──────────────────────────────────────────
+export async function handleMkcol(ctx, req, reply) {
+    const rel = extractRel(req.url, ctx.mountPrefix);
+    const scope = checkScope(ctx, rel, true);
+    if (!scope.allowed)
+        return send403(reply, scope.reason);
+    if (rel === "") {
+        reply.code(405).send("cannot MKCOL the WebDAV root");
+        return;
+    }
+    // RFC 4918 §9.3: MKCOL must reject a request with a body.
+    const cl = Number.parseInt(req.headers["content-length"], 10);
+    if (Number.isFinite(cl) && cl > 0) {
+        reply.code(415).send("MKCOL must not include a body");
+        return;
+    }
+    try {
+        await ctx.filesManager.mkdir(rel);
+        reply.code(201).send();
+    }
+    catch (e) {
+        sendFilesError(reply, e);
+    }
+}
+// ── MOVE ───────────────────────────────────────────
+export async function handleMove(ctx, req, reply) {
+    const fromRel = extractRel(req.url, ctx.mountPrefix);
+    const toRel = parseDestinationHeader(req, ctx.mountPrefix);
+    if (toRel === null) {
+        reply.code(400).send("invalid Destination header");
+        return;
+    }
+    const fromScope = checkScope(ctx, fromRel, true);
+    if (!fromScope.allowed)
+        return send403(reply, fromScope.reason);
+    const toScope = checkScope(ctx, toRel, true);
+    if (!toScope.allowed)
+        return send403(reply, toScope.reason);
+    const overwrite = String(req.headers.overwrite ?? "T")
+        .trim()
+        .toUpperCase() !== "F";
+    try {
+        await ctx.filesManager.move(fromRel, toRel, overwrite);
+        // 201 if the destination was newly created, 204 if overwritten.
+        // Without knowing pre-state we default to 201 (clients accept it).
+        reply.code(201).header("Content-Length", "0").send();
+    }
+    catch (e) {
+        sendFilesError(reply, e);
+    }
+}
+// ── COPY ───────────────────────────────────────────
+export async function handleCopy(ctx, req, reply) {
+    const fromRel = extractRel(req.url, ctx.mountPrefix);
+    const toRel = parseDestinationHeader(req, ctx.mountPrefix);
+    if (toRel === null) {
+        reply.code(400).send("invalid Destination header");
+        return;
+    }
+    const fromScope = checkScope(ctx, fromRel, false);
+    if (!fromScope.allowed)
+        return send403(reply, fromScope.reason);
+    const toScope = checkScope(ctx, toRel, true);
+    if (!toScope.allowed)
+        return send403(reply, toScope.reason);
+    const overwrite = String(req.headers.overwrite ?? "T")
+        .trim()
+        .toUpperCase() !== "F";
+    // For W4 we only support file copy (not recursive directory copy).
+    // Finder relies primarily on MOVE; recursive COPY is rare. Returning
+    // 502 Bad Gateway with a clear body lets clients fall back.
+    const fromAbs = resolveSafe(FILES_ROOT, fromRel);
+    let stat;
+    try {
+        stat = fs.statSync(fromAbs);
+    }
+    catch {
+        reply.code(404).send();
+        return;
+    }
+    if (stat.isDirectory()) {
+        reply
+            .code(502)
+            .send("recursive directory COPY is not supported in this build");
+        return;
+    }
+    const toAbs = resolveSafe(FILES_ROOT, toRel);
+    try {
+        if (!overwrite && fs.existsSync(toAbs)) {
+            reply.code(412).send();
+            return;
+        }
+        fs.mkdirSync(path.dirname(toAbs), { recursive: true });
+        // Stream copy via atomicWriteStream so we get tmp+rename atomicity
+        await withPathLock(toAbs, async () => {
+            await atomicWriteStream(toAbs, fs.createReadStream(fromAbs));
+        });
+        reply.code(201).header("Content-Length", "0").send();
+    }
+    catch (e) {
+        sendFilesError(reply, e);
+    }
+}
+function parseDestinationHeader(req, mountPrefix) {
+    const raw = req.headers.destination;
+    if (typeof raw !== "string" || !raw)
+        return null;
+    // Destination may be a full URL (https://host/webdav/x) or a path-only
+    // value. We strip everything up to and including the mount prefix.
+    let dest = raw;
+    try {
+        const u = new URL(raw);
+        dest = u.pathname;
+    }
+    catch {
+        // Not a full URL — assume path-only
+    }
+    const cleanPrefix = mountPrefix.replace(/\/+$/, "");
+    if (!dest.startsWith(cleanPrefix))
+        return null;
+    let rest = dest.slice(cleanPrefix.length);
+    if (rest.startsWith("/"))
+        rest = rest.slice(1);
+    if (rest.endsWith("/"))
+        rest = rest.slice(0, -1);
+    return rest
+        .split("/")
+        .map((s) => {
+        try {
+            return decodeURIComponent(s);
+        }
+        catch {
+            return s;
+        }
+    })
+        .filter((s) => s !== "")
+        .join("/");
+}
+// ── Error mapping ──────────────────────────────────
+function sendFilesError(reply, e) {
+    if (e instanceof FilesError) {
+        reply.code(e.httpStatus).send(e.message);
+        return;
+    }
+    const err = e;
+    console.error("[webdav] unexpected:", err.message);
+    reply.code(500).send(err.message ?? "internal error");
+}
+//# sourceMappingURL=server.js.map

package/dist/services/webdav/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/services/webdav/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EAEL,UAAU,GACX,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,gBAAgB,EAChB,UAAU,GAEX,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAoB,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAU7C,sDAAsD;AAEtD;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,WAAmB;IAC5D,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,OAAO,GAAG,MAAM,CAAC;IACrB,6CAA6C;IAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACjF,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1D,2DAA2D;IAC3D,OAAO,OAAO;SACX,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,CAAC;YACH,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SACvB,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,sDAAsD;AAEtD,SAAS,UAAU,CACjB,GAAkB,EAClB,GAAW,EACX,UAAmB;IAEnB,OAAO,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,OAAO,CAAC,KAAmB,EAAE,MAAe;IACnD,KAAK;SACF,IAAI,CAAC,GAAG,CAAC;SACT,MAAM,CAAC,cAAc,EAAE,2BAA2B,CAAC;SACnD,IAAI,CAAC,cAAc,MAAM,IAAI,gBAAgB,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,sDAAsD;AAEtD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAmB,EACnB,IAAoB,EACpB,KAAmB;IAEnB,KAAK;SACF,IAAI,CAAC,GAAG,CAAC;SACT,MAAM,CACL,OAAO,EACP,8DAA8D,CAC/D;SACA,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC;SAClB,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,iCAAiC;SAChE,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,sDAAsD;AAEtD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAkB,EAClB,GAAmB,EACnB,KAAmB;IAEnB,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAExD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,KAA2B,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAE/C,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QACD,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IAED,MAAM,SAAS,GAAkB;QAC/B,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC;KACpD,CAAC;IAEF,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACrC,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS,CAAC,gCAAgC;YACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC5C,IAAI,SAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;gBAClC,IAAI,EAAE,CAAC,cAAc,EAAE;oBAAE,SAAS;gBAClC,SAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/C,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YACpD,IAAI,CAAC,UAAU,CAAC,OAAO;gBAAE,SAAS,CAAC,8BAA8B;YACjE,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACzD,KAAK;SACF,IAAI,CAAC,GAAG,CAAC;SACT,MAAM,CAAC,cAAc,EAAE,kCAAkC,CAAC;SAC1D,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC;SAClB,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CACrB,GAAW,EACX,IAAc,EACd,WAAmB;IAEnB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,OAAO;QACL,OAAO,EAAE,GAAG;QACZ,WAAW;QACX,KAAK;QACL,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtC,IAAI,EAAE,MAAM,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG;QACpD,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,WAAW,GAA2B;IAC1C,MAAM,EAAE,2BAA2B;IACnC,KAAK,EAAE,8BAA8B;IACrC,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,iBAAiB;CAC1B,CAAC;AAEF,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7C,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;AACxD,CAAC;AAED,sDAAsD;AAEtD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAkB,EAClB,GAAmB,EACnB,KAAmB,EACnB,QAAiB;IAEjB,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAExD,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACjD,KAAK;aACF,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC;aAC9B,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aACxC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC;aACtB,MAAM,CAAC,eAAe,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;aAC/D,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACpC,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,sDAAsD;AAEtD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAkB,EAClB,GAAmB,EACnB,KAAmB;IAEnB,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAExD,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,iEAAiE;IACjE,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IAC5E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,GAA0B,CAAC;IAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,wDAAwD;QACxD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE;YAC3D,SAAS,EAAE,IAAI;YACf,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,kEAAkE;QAClE,+DAA+D;QAC/D,KAAK;aACF,IAAI,CAAC,GAAG,CAAC;aACT,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC;aAC3B,MAAM,CAAC,gBAAgB,EAAE,GAAG,CAAC;aAC7B,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,sDAAsD;AAEtD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAkB,EAClB,GAAmB,EACnB,KAAmB;IAEnB,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAExD,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,sDAAsD;AAEtD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAkB,EAClB,GAAmB,EACnB,KAAmB;IAEnB,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAExD,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IAED,0DAA0D;IAC1D,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAW,EAAE,EAAE,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,sDAAsD;AAEtD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAkB,EAClB,GAAmB,EACnB,KAAmB;IAEnB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IAC3D,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAE5D,MAAM,SAAS,GACb,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC;SACjC,IAAI,EAAE;SACN,WAAW,EAAE,KAAK,GAAG,CAAC;IAE3B,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QACvD,gEAAgE;QAChE,mEAAmE;QACnE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,sDAAsD;AAEtD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAkB,EAClB,GAAmB,EACnB,KAAmB;IAEnB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IAC3D,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAE5D,MAAM,SAAS,GACb,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC;SACjC,IAAI,EAAE;SACN,WAAW,EAAE,KAAK,GAAG,CAAC;IAE3B,mEAAmE;IACnE,qEAAqE;IACrE,4DAA4D;IAC5D,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACvB,KAAK;aACF,IAAI,CAAC,GAAG,CAAC;aACT,IAAI,CAAC,yDAAyD,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QACD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,mEAAmE;QACnE,MAAM,YAAY,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;YACnC,MAAM,iBAAiB,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,GAAmB,EACnB,WAAmB;IAEnB,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;IACpC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACjD,uEAAuE;IACvE,mEAAmE;IACnE,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;IACD,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjD,OAAO,IAAI;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,CAAC;YACH,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SACvB,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,sDAAsD;AAEtD,SAAS,cAAc,CAAC,KAAmB,EAAE,CAAU;IACrD,IAAI,CAAC,YAAY,UAAU,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,CAA8B,CAAC;IAC3C,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACnD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC;AACxD,CAAC"}

package/dist/services/webdav/xml-builder.d.ts

@@ -0,0 +1,73 @@
+/**
+ * WebDAV XML serialization (M3 W4 PR-2).
+ *
+ * We serialize a tiny subset of RFC 4918 PROPFIND multistatus responses
+ * — exactly what iOS Files / macOS Finder / Windows Explorer / WinSCP
+ * actually inspect. We deliberately avoid pulling an XML library:
+ * outputs are template-driven and the surface is < 200 lines.
+ *
+ * Properties supported per resource:
+ *   D:displayname
+ *   D:resourcetype          (<D:collection/> for dirs, empty for files)
+ *   D:getcontentlength      (files only)
+ *   D:getlastmodified       (RFC 1123)
+ *   D:creationdate          (ISO 8601 with timezone)
+ *   D:getetag               (weak, "W/\"size-mtime\"")
+ *   D:getcontenttype        (files only)
+ *   D:supportedlock         (empty — we do not implement locking)
+ *   D:lockdiscovery         (empty)
+ *
+ * Properties NOT supported (clients tolerate missing): D:quota-*,
+ * D:executable, D:source — return 404 in propstat if explicitly asked.
+ *
+ * Caller is responsible for path safety on `href` — we URL-encode but
+ * do not validate the path is inside the WebDAV root.
+ */
+export interface DavResource {
+    /**
+     * Path relative to the WebDAV root, WITHOUT the leading `/webdav`
+     * mount prefix. For the root itself pass `""`. For a directory
+     * `notes`, pass `"notes"` — the builder appends a trailing slash
+     * for collections automatically.
+     */
+    pathRel: string;
+    displayName: string;
+    isDir: boolean;
+    size: number;
+    /** Unix seconds. */
+    mtime: number;
+    /** Already-formed weak ETag, e.g. `W/"123-456789"`. */
+    etag: string;
+    /** Files only; ignored for directories. */
+    mime?: string;
+}
+/**
+ * Build a complete <D:multistatus> XML document for a PROPFIND.
+ *
+ * @param mountPrefix the absolute URL prefix the client used to reach
+ *                    us, e.g. `/webdav` (must NOT end in `/`)
+ * @param resources   ordered list; the first entry should be the
+ *                    target resource itself (Depth: 0 returns only
+ *                    this), followed by children (Depth: 1)
+ */
+export declare function buildMultistatus(mountPrefix: string, resources: DavResource[]): string;
+/**
+ * Build a `<D:multistatus>` for a single 404 — used when MOVE/COPY
+ * destination doesn't exist, or PROPFIND on missing path.
+ */
+export declare function buildNotFoundMultistatus(mountPrefix: string, pathRel: string): string;
+export declare function escapeXml(s: string): string;
+/**
+ * Encode one path segment per RFC 3986. Path-segment-safe, but
+ * percent-encodes anything outside the allowed set so spaces, CJK
+ * characters etc. survive transit.
+ */
+export declare function encodePathSegment(seg: string): string;
+export declare function rfc1123(unixSec: number): string;
+export declare function iso8601(unixSec: number): string;
+/**
+ * Parse a Depth header. Returns 0, 1, or "infinity"; defaults to
+ * infinity per RFC 4918, but we cap at 1 because directory walks at
+ * arbitrary depth are a DOS surface.
+ */
+export declare function parseDepth(header: string | undefined): 0 | 1;

package/dist/services/webdav/xml-builder.js

@@ -0,0 +1,156 @@
+/**
+ * WebDAV XML serialization (M3 W4 PR-2).
+ *
+ * We serialize a tiny subset of RFC 4918 PROPFIND multistatus responses
+ * — exactly what iOS Files / macOS Finder / Windows Explorer / WinSCP
+ * actually inspect. We deliberately avoid pulling an XML library:
+ * outputs are template-driven and the surface is < 200 lines.
+ *
+ * Properties supported per resource:
+ *   D:displayname
+ *   D:resourcetype          (<D:collection/> for dirs, empty for files)
+ *   D:getcontentlength      (files only)
+ *   D:getlastmodified       (RFC 1123)
+ *   D:creationdate          (ISO 8601 with timezone)
+ *   D:getetag               (weak, "W/\"size-mtime\"")
+ *   D:getcontenttype        (files only)
+ *   D:supportedlock         (empty — we do not implement locking)
+ *   D:lockdiscovery         (empty)
+ *
+ * Properties NOT supported (clients tolerate missing): D:quota-*,
+ * D:executable, D:source — return 404 in propstat if explicitly asked.
+ *
+ * Caller is responsible for path safety on `href` — we URL-encode but
+ * do not validate the path is inside the WebDAV root.
+ */
+/**
+ * Build a complete <D:multistatus> XML document for a PROPFIND.
+ *
+ * @param mountPrefix the absolute URL prefix the client used to reach
+ *                    us, e.g. `/webdav` (must NOT end in `/`)
+ * @param resources   ordered list; the first entry should be the
+ *                    target resource itself (Depth: 0 returns only
+ *                    this), followed by children (Depth: 1)
+ */
+export function buildMultistatus(mountPrefix, resources) {
+    const responses = resources.map((r) => buildResponse(mountPrefix, r)).join("");
+    return (`<?xml version="1.0" encoding="utf-8"?>\n` +
+        `<D:multistatus xmlns:D="DAV:">${responses}</D:multistatus>\n`);
+}
+function buildResponse(mountPrefix, r) {
+    const href = buildHref(mountPrefix, r);
+    const propLines = [
+        `<D:displayname>${escapeXml(r.displayName)}</D:displayname>`,
+        r.isDir
+            ? `<D:resourcetype><D:collection/></D:resourcetype>`
+            : `<D:resourcetype/>`,
+        `<D:getlastmodified>${rfc1123(r.mtime)}</D:getlastmodified>`,
+        `<D:creationdate>${iso8601(r.mtime)}</D:creationdate>`,
+        `<D:getetag>${escapeXml(r.etag)}</D:getetag>`,
+        `<D:supportedlock/>`,
+        `<D:lockdiscovery/>`,
+    ];
+    if (!r.isDir) {
+        propLines.push(`<D:getcontentlength>${r.size}</D:getcontentlength>`);
+        if (r.mime) {
+            propLines.push(`<D:getcontenttype>${escapeXml(r.mime)}</D:getcontenttype>`);
+        }
+    }
+    return (`<D:response>` +
+        `<D:href>${href}</D:href>` +
+        `<D:propstat>` +
+        `<D:prop>${propLines.join("")}</D:prop>` +
+        `<D:status>HTTP/1.1 200 OK</D:status>` +
+        `</D:propstat>` +
+        `</D:response>`);
+}
+/**
+ * URL-encode each path segment (NOT the slashes between them) and
+ * append a trailing slash for collections — required by RFC 4918 so
+ * Finder / iOS Files render the icon as a directory rather than a
+ * zero-byte file.
+ */
+function buildHref(mountPrefix, r) {
+    const cleanPrefix = mountPrefix.replace(/\/+$/, "");
+    const segs = (r.pathRel || "").split("/").filter(Boolean);
+    const encoded = segs.map(encodePathSegment).join("/");
+    let href = encoded ? `${cleanPrefix}/${encoded}` : `${cleanPrefix}/`;
+    if (r.isDir && !href.endsWith("/"))
+        href += "/";
+    return href;
+}
+/**
+ * Build a `<D:multistatus>` for a single 404 — used when MOVE/COPY
+ * destination doesn't exist, or PROPFIND on missing path.
+ */
+export function buildNotFoundMultistatus(mountPrefix, pathRel) {
+    const href = encodeURI(`${mountPrefix.replace(/\/+$/, "")}/${pathRel}`);
+    return (`<?xml version="1.0" encoding="utf-8"?>\n` +
+        `<D:multistatus xmlns:D="DAV:">` +
+        `<D:response>` +
+        `<D:href>${escapeXml(href)}</D:href>` +
+        `<D:status>HTTP/1.1 404 Not Found</D:status>` +
+        `</D:response>` +
+        `</D:multistatus>\n`);
+}
+// ── Helpers ────────────────────────────────────────
+const XML_ESCAPES = {
+    "&": "&amp;",
+    "<": "&lt;",
+    ">": "&gt;",
+    '"': "&quot;",
+    "'": "&apos;",
+};
+export function escapeXml(s) {
+    return s.replace(/[&<>"']/g, (c) => XML_ESCAPES[c] ?? c);
+}
+/**
+ * Encode one path segment per RFC 3986. Path-segment-safe, but
+ * percent-encodes anything outside the allowed set so spaces, CJK
+ * characters etc. survive transit.
+ */
+export function encodePathSegment(seg) {
+    // encodeURIComponent encodes too aggressively (escapes /, ?, #) but
+    // for a single segment that's exactly what we want — we then assemble
+    // segments with literal `/` ourselves.
+    return encodeURIComponent(seg)
+        .replace(/'/g, "%27")
+        .replace(/\(/g, "%28")
+        .replace(/\)/g, "%29");
+}
+const RFC1123_DAYS = ["Sun", "Mon", "Tue", "Wed", "Thu", "Fri", "Sat"];
+const RFC1123_MONTHS = [
+    "Jan", "Feb", "Mar", "Apr", "May", "Jun",
+    "Jul", "Aug", "Sep", "Oct", "Nov", "Dec",
+];
+export function rfc1123(unixSec) {
+    const d = new Date(unixSec * 1000);
+    const dayName = RFC1123_DAYS[d.getUTCDay()];
+    const day = String(d.getUTCDate()).padStart(2, "0");
+    const monthName = RFC1123_MONTHS[d.getUTCMonth()];
+    const year = d.getUTCFullYear();
+    const hh = String(d.getUTCHours()).padStart(2, "0");
+    const mm = String(d.getUTCMinutes()).padStart(2, "0");
+    const ss = String(d.getUTCSeconds()).padStart(2, "0");
+    return `${dayName}, ${day} ${monthName} ${year} ${hh}:${mm}:${ss} GMT`;
+}
+export function iso8601(unixSec) {
+    return new Date(unixSec * 1000).toISOString();
+}
+/**
+ * Parse a Depth header. Returns 0, 1, or "infinity"; defaults to
+ * infinity per RFC 4918, but we cap at 1 because directory walks at
+ * arbitrary depth are a DOS surface.
+ */
+export function parseDepth(header) {
+    if (header === undefined || header === null)
+        return 1;
+    const s = String(header).trim().toLowerCase();
+    if (s === "0")
+        return 0;
+    if (s === "1")
+        return 1;
+    // "infinity" defaults to 1 — we do not walk arbitrary depth
+    return 1;
+}
+//# sourceMappingURL=xml-builder.js.map