libre-webui 0.25.0 → 0.26.0

package/backend/dist/utils/hybridRetrieval.js

@@ -0,0 +1,119 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Lexical scoring and rank fusion for hybrid document retrieval.
+ *
+ * Chunk text is encrypted at rest in both storage dialects, so Libre keeps
+ * lexical scoring in-process instead of building an on-disk full-text index
+ * that would persist plaintext tokens next to the ciphertext. BM25 runs over
+ * the ACL-scoped candidate set the caller already loaded, and reciprocal-rank
+ * fusion merges that ranking with the vector ranking. Document-frequency
+ * statistics are computed per query over the candidate corpus, which keeps
+ * scores comparable inside one search and requires no maintained state.
+ */
+const BM25_K1 = 1.2;
+const BM25_B = 0.75;
+export const RRF_K = 60;
+const WORD_PATTERN = /[\p{L}\p{N}]+/gu;
+/** Unicode-aware tokens, lowercased, single characters dropped. */
+export const tokenizeForRetrieval = (text) => {
+    const tokens = [];
+    for (const match of text.toLowerCase().matchAll(WORD_PATTERN)) {
+        if (match[0].length > 1)
+            tokens.push(match[0]);
+    }
+    return tokens;
+};
+/**
+ * Okapi BM25 over one candidate set. Returns only candidates with a
+ * positive score, best first, ties broken by id for deterministic output.
+ */
+export const scoreCandidatesBm25 = (query, candidates, options = {}) => {
+    const queryTerms = [...new Set(tokenizeForRetrieval(query))];
+    if (queryTerms.length === 0 || candidates.length === 0)
+        return [];
+    const queryWords = options.requireQueryWordMatch
+        ? query
+            .split(/\s+/)
+            .map(word => tokenizeForRetrieval(word))
+            .filter(subtokens => subtokens.length > 0)
+        : [];
+    const termFrequencies = [];
+    const lengths = [];
+    const documentFrequency = new Map();
+    for (const candidate of candidates) {
+        const tokens = tokenizeForRetrieval(candidate.text);
+        const frequency = new Map();
+        for (const token of tokens) {
+            frequency.set(token, (frequency.get(token) ?? 0) + 1);
+        }
+        termFrequencies.push(frequency);
+        lengths.push(tokens.length);
+        for (const term of queryTerms) {
+            if (frequency.has(term)) {
+                documentFrequency.set(term, (documentFrequency.get(term) ?? 0) + 1);
+            }
+        }
+    }
+    const totalLength = lengths.reduce((sum, length) => sum + length, 0);
+    const averageLength = totalLength > 0 ? totalLength / candidates.length : 1;
+    const scored = [];
+    for (let index = 0; index < candidates.length; index += 1) {
+        const frequency = termFrequencies[index];
+        const length = lengths[index];
+        let score = 0;
+        let matchedTerms = 0;
+        for (const term of queryTerms) {
+            const termFrequency = frequency.get(term);
+            if (!termFrequency)
+                continue;
+            matchedTerms += 1;
+            const matching = documentFrequency.get(term) ?? 0;
+            const idf = Math.log(1 + (candidates.length - matching + 0.5) / (matching + 0.5));
+            score +=
+                (idf * (termFrequency * (BM25_K1 + 1))) /
+                    (termFrequency +
+                        BM25_K1 * (1 - BM25_B + (BM25_B * length) / averageLength));
+        }
+        if (queryWords.length > 0 && matchedTerms > 0) {
+            const matchesWholeWord = queryWords.some(subtokens => subtokens.every(subtoken => frequency.has(subtoken)));
+            if (!matchesWholeWord)
+                continue;
+        }
+        if (score > 0)
+            scored.push({ id: candidates[index].id, score });
+    }
+    return scored.sort((left, right) => right.score - left.score || left.id.localeCompare(right.id));
+};
+/**
+ * Reciprocal-rank fusion of independently ranked id lists. An id absent
+ * from a list simply contributes nothing for that list; ids appearing in
+ * several lists accumulate. Best first, ties broken by id.
+ */
+export const reciprocalRankFusion = (rankedLists, k = RRF_K) => {
+    const scores = new Map();
+    for (const list of rankedLists) {
+        for (let rank = 0; rank < list.length; rank += 1) {
+            const id = list[rank];
+            scores.set(id, (scores.get(id) ?? 0) + 1 / (k + rank + 1));
+        }
+    }
+    return [...scores.entries()]
+        .map(([id, score]) => ({ id, score }))
+        .sort((left, right) => right.score - left.score || left.id.localeCompare(right.id));
+};
+//# sourceMappingURL=hybridRetrieval.js.map

package/backend/dist/utils/hybridRetrieval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hybridRetrieval.js","sourceRoot":"","sources":["../../src/utils/hybridRetrieval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;;;GAUG;AAEH,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,MAAM,GAAG,IAAI,CAAC;AACpB,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;AAExB,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAEvC,mEAAmE;AACnE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,IAAY,EAAY,EAAE;IAC7D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9D,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAwBF;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,KAAa,EACb,UAAyC,EACzC,OAAO,GAAuB,EAAE,EACb,EAAE;IACrB,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClE,MAAM,UAAU,GAAG,OAAO,CAAC,qBAAqB;QAC9C,CAAC,CAAC,KAAK;aACF,KAAK,CAAC,KAAK,CAAC;aACZ,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;aACvC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QAC9C,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,eAAe,GAA+B,EAAE,CAAC;IACvD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC5C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5E,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,aAAa;gBAAE,SAAS;YAC7B,YAAY,IAAI,CAAC,CAAC;YAClB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAClB,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,CAC5D,CAAC;YACF,KAAK;gBACH,CAAC,GAAG,GAAG,CAAC,aAAa,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;oBACvC,CAAC,aAAa;wBACZ,OAAO,GAAG,CAAC,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,gBAAgB,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CACnD,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CACrD,CAAC;YACF,IAAI,CAAC,gBAAgB;gBAAE,SAAS;QAClC,CAAC;QACD,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAChB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAC7E,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,WAA2C,EAC3C,CAAC,GAAG,KAAK,EACU,EAAE;IACrB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;YACjD,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;SACzB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;SACrC,IAAI,CACH,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAC9D,CAAC;AACN,CAAC,CAAC"}

package/backend/dist/utils/icsCalendar.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Minimal, dependency-free iCalendar (RFC 5545) support for calendar
+ * import/export. The exporter emits UTC timestamps and maps the native
+ * recurrence union onto basic RRULEs; the importer accepts the common
+ * subset (UTC or floating DTSTART/DTEND, DATE values, simple FREQ rules)
+ * and reports what it skipped rather than guessing. Interval, COUNT,
+ * UNTIL, and EXDATE are deliberately out of scope for now.
+ */
+import type { AutomationTrigger, CalendarEvent } from '../types/index.js';
+export declare const serializeCalendarToIcs: (calendarName: string, events: readonly CalendarEvent[]) => string;
+export interface ParsedIcsEvent {
+    title: string;
+    notes?: string;
+    startAt: number;
+    endAt?: number;
+    allDay: boolean;
+    recurrence?: AutomationTrigger;
+    reminderMinutes?: number;
+    /** Property names the parser understood but could not preserve. */
+    dropped: string[];
+}
+export interface IcsParseResult {
+    events: ParsedIcsEvent[];
+    skipped: number;
+}
+export declare const parseIcsCalendar: (source: string, maximumEvents: number) => IcsParseResult;
+//# sourceMappingURL=icsCalendar.d.ts.map

package/backend/dist/utils/icsCalendar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"icsCalendar.d.ts","sourceRoot":"","sources":["../../src/utils/icsCalendar.ts"],"names":[],"mappings":"AAiBA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAsJ1E,eAAO,MAAM,sBAAsB,iBACnB,MAAM,UACZ,SAAS,aAAa,EAAE,KAC/B,MAwCF,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;CACjB;AA+DD,eAAO,MAAM,gBAAgB,WACnB,MAAM,iBACC,MAAM,KACpB,cA6FF,CAAC"}

package/backend/dist/utils/icsCalendar.js

@@ -0,0 +1,313 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+const pad = (value, width = 2) => String(value).padStart(width, '0');
+const toUtcStamp = (epochMs) => {
+    const date = new Date(epochMs);
+    return (`${date.getUTCFullYear()}${pad(date.getUTCMonth() + 1)}` +
+        `${pad(date.getUTCDate())}T${pad(date.getUTCHours())}` +
+        `${pad(date.getUTCMinutes())}${pad(date.getUTCSeconds())}Z`);
+};
+const toDateStamp = (epochMs) => {
+    const date = new Date(epochMs);
+    return `${date.getFullYear()}${pad(date.getMonth() + 1)}${pad(date.getDate())}`;
+};
+const escapeText = (value) => value
+    .replace(/\\/g, '\\\\')
+    .replace(/;/g, '\\;')
+    .replace(/,/g, '\\,')
+    .replace(/\r?\n/g, '\\n');
+const unescapeText = (value) => value
+    .replace(/\\n/gi, '\n')
+    .replace(/\\,/g, ',')
+    .replace(/\\;/g, ';')
+    .replace(/\\\\/g, '\\');
+/** RFC 5545 line folding at 75 octets. */
+const foldLine = (line) => {
+    if (Buffer.byteLength(line, 'utf8') <= 75)
+        return line;
+    const parts = [];
+    let current = '';
+    for (const character of line) {
+        if (Buffer.byteLength(current + character, 'utf8') > 74) {
+            parts.push(current);
+            current = character;
+        }
+        else {
+            current += character;
+        }
+    }
+    if (current)
+        parts.push(current);
+    return parts.join('\r\n ');
+};
+const WEEKDAYS = ['SU', 'MO', 'TU', 'WE', 'TH', 'FR', 'SA'];
+const recurrenceToRrule = (recurrence) => {
+    switch (recurrence.kind) {
+        case 'once':
+            return undefined;
+        case 'hourly':
+            return 'FREQ=HOURLY';
+        case 'daily':
+            return 'FREQ=DAILY';
+        case 'weekly':
+            return `FREQ=WEEKLY;BYDAY=${WEEKDAYS[recurrence.dayOfWeek] ?? 'MO'}`;
+        case 'monthly':
+            return `FREQ=MONTHLY;BYMONTHDAY=${recurrence.dayOfMonth}`;
+        case 'yearly':
+            return (`FREQ=YEARLY;BYMONTH=${recurrence.month + 1};` +
+                `BYMONTHDAY=${recurrence.dayOfMonth}`);
+    }
+};
+/**
+ * Maps a simple RRULE back onto the native recurrence union using the
+ * event's own start for the time-of-day fields. Unsupported rules return
+ * undefined so the caller can import the event without recurrence.
+ */
+const rruleToRecurrence = (rrule, startAt) => {
+    const fields = new Map();
+    for (const part of rrule.split(';')) {
+        const separator = part.indexOf('=');
+        if (separator > 0) {
+            fields.set(part.slice(0, separator).toUpperCase(), part.slice(separator + 1).toUpperCase());
+        }
+    }
+    // Interval/count/until change occurrence math; refuse rather than drift.
+    if ((fields.has('INTERVAL') && fields.get('INTERVAL') !== '1') ||
+        fields.has('COUNT') ||
+        fields.has('UNTIL')) {
+        return undefined;
+    }
+    const start = new Date(startAt);
+    const hour = start.getHours();
+    const minute = start.getMinutes();
+    switch (fields.get('FREQ')) {
+        case 'HOURLY':
+            return { kind: 'hourly', minute };
+        case 'DAILY':
+            return { kind: 'daily', hour, minute };
+        case 'WEEKLY': {
+            const byDay = fields.get('BYDAY');
+            const dayOfWeek = byDay
+                ? WEEKDAYS.indexOf(byDay.slice(0, 2))
+                : start.getDay();
+            if (byDay && (byDay.includes(',') || dayOfWeek === -1))
+                return undefined;
+            return {
+                kind: 'weekly',
+                dayOfWeek: dayOfWeek === -1 ? start.getDay() : dayOfWeek,
+                hour,
+                minute,
+            };
+        }
+        case 'MONTHLY': {
+            const dayOfMonth = Number(fields.get('BYMONTHDAY') ?? start.getDate());
+            if (!Number.isSafeInteger(dayOfMonth) || dayOfMonth < 1) {
+                return undefined;
+            }
+            return { kind: 'monthly', dayOfMonth, hour, minute };
+        }
+        case 'YEARLY': {
+            const month = fields.has('BYMONTH')
+                ? Number(fields.get('BYMONTH')) - 1
+                : start.getMonth();
+            const dayOfMonth = Number(fields.get('BYMONTHDAY') ?? start.getDate());
+            if (!Number.isSafeInteger(month) ||
+                month < 0 ||
+                month > 11 ||
+                !Number.isSafeInteger(dayOfMonth) ||
+                dayOfMonth < 1) {
+                return undefined;
+            }
+            return { kind: 'yearly', month, dayOfMonth, hour, minute };
+        }
+        default:
+            return undefined;
+    }
+};
+export const serializeCalendarToIcs = (calendarName, events) => {
+    const lines = [
+        'BEGIN:VCALENDAR',
+        'VERSION:2.0',
+        'PRODID:-//Libre WebUI//Calendar//EN',
+        `X-WR-CALNAME:${escapeText(calendarName)}`,
+    ];
+    for (const event of events) {
+        lines.push('BEGIN:VEVENT');
+        lines.push(`UID:${escapeText(event.id)}@libre-webui`);
+        lines.push(`DTSTAMP:${toUtcStamp(event.updatedAt)}`);
+        if (event.allDay) {
+            lines.push(`DTSTART;VALUE=DATE:${toDateStamp(event.startAt)}`);
+            if (event.endAt !== undefined) {
+                lines.push(`DTEND;VALUE=DATE:${toDateStamp(event.endAt)}`);
+            }
+        }
+        else {
+            lines.push(`DTSTART:${toUtcStamp(event.startAt)}`);
+            if (event.endAt !== undefined) {
+                lines.push(`DTEND:${toUtcStamp(event.endAt)}`);
+            }
+        }
+        lines.push(`SUMMARY:${escapeText(event.title)}`);
+        if (event.notes) {
+            lines.push(`DESCRIPTION:${escapeText(event.notes)}`);
+        }
+        if (event.recurrence) {
+            const rrule = recurrenceToRrule(event.recurrence);
+            if (rrule)
+                lines.push(`RRULE:${rrule}`);
+        }
+        if (event.reminderMinutes !== undefined) {
+            lines.push('BEGIN:VALARM');
+            lines.push('ACTION:DISPLAY');
+            lines.push(`TRIGGER:-PT${event.reminderMinutes}M`);
+            lines.push('END:VALARM');
+        }
+        lines.push('END:VEVENT');
+    }
+    lines.push('END:VCALENDAR');
+    return lines.map(foldLine).join('\r\n') + '\r\n';
+};
+const parseStamp = (raw, parameters) => {
+    const isDate = /VALUE=DATE(?:;|$)/i.test(parameters) || /^\d{8}$/.test(raw);
+    if (isDate) {
+        const match = /^(\d{4})(\d{2})(\d{2})$/.exec(raw);
+        if (!match)
+            return undefined;
+        return {
+            epochMs: new Date(Number(match[1]), Number(match[2]) - 1, Number(match[3])).getTime(),
+            allDay: true,
+        };
+    }
+    const match = /^(\d{4})(\d{2})(\d{2})T(\d{2})(\d{2})(\d{2})(Z?)$/.exec(raw);
+    if (!match)
+        return undefined;
+    const [, year, month, day, hour, minute, second, zulu] = match;
+    const epochMs = zulu
+        ? Date.UTC(Number(year), Number(month) - 1, Number(day), Number(hour), Number(minute), Number(second))
+        : new Date(Number(year), Number(month) - 1, Number(day), Number(hour), Number(minute), Number(second)).getTime();
+    return { epochMs, allDay: false };
+};
+const parseAlarmMinutes = (block) => {
+    for (const line of block) {
+        const match = /^TRIGGER[^:]*:-PT(?:(\d+)H)?(?:(\d+)M)?/i.exec(line);
+        if (match) {
+            const hours = Number(match[1] ?? 0);
+            const minutes = Number(match[2] ?? 0);
+            const total = hours * 60 + minutes;
+            if (total > 0)
+                return total;
+        }
+    }
+    return undefined;
+};
+/** Unfold RFC 5545 continuation lines and split into logical lines. */
+const logicalLines = (source) => source
+    .replace(/\r\n[ \t]/g, '')
+    .replace(/\n[ \t]/g, '')
+    .split(/\r?\n/)
+    .filter(Boolean);
+export const parseIcsCalendar = (source, maximumEvents) => {
+    const lines = logicalLines(source);
+    const events = [];
+    let skipped = 0;
+    let index = 0;
+    while (index < lines.length) {
+        if (lines[index].toUpperCase() !== 'BEGIN:VEVENT') {
+            index += 1;
+            continue;
+        }
+        const block = [];
+        index += 1;
+        while (index < lines.length &&
+            lines[index].toUpperCase() !== 'END:VEVENT') {
+            block.push(lines[index]);
+            index += 1;
+        }
+        index += 1;
+        if (events.length >= maximumEvents) {
+            skipped += 1;
+            continue;
+        }
+        const properties = new Map();
+        const alarm = [];
+        let inAlarm = false;
+        for (const line of block) {
+            const upper = line.toUpperCase();
+            if (upper === 'BEGIN:VALARM') {
+                inAlarm = true;
+                continue;
+            }
+            if (upper === 'END:VALARM') {
+                inAlarm = false;
+                continue;
+            }
+            if (inAlarm) {
+                alarm.push(line);
+                continue;
+            }
+            const separator = line.indexOf(':');
+            if (separator <= 0)
+                continue;
+            const nameAndParameters = line.slice(0, separator);
+            const parameterSplit = nameAndParameters.indexOf(';');
+            const name = (parameterSplit === -1
+                ? nameAndParameters
+                : nameAndParameters.slice(0, parameterSplit)).toUpperCase();
+            const parameters = parameterSplit === -1
+                ? ''
+                : nameAndParameters.slice(parameterSplit + 1);
+            if (!properties.has(name)) {
+                properties.set(name, { parameters, value: line.slice(separator + 1) });
+            }
+        }
+        const start = properties.get('DTSTART');
+        const parsedStart = start
+            ? parseStamp(start.value, start.parameters)
+            : undefined;
+        if (!parsedStart) {
+            skipped += 1;
+            continue;
+        }
+        const end = properties.get('DTEND');
+        const parsedEnd = end ? parseStamp(end.value, end.parameters) : undefined;
+        const dropped = [];
+        let recurrence;
+        const rrule = properties.get('RRULE');
+        if (rrule) {
+            recurrence = rruleToRecurrence(rrule.value, parsedStart.epochMs);
+            if (!recurrence)
+                dropped.push('RRULE');
+        }
+        if (properties.has('EXDATE'))
+            dropped.push('EXDATE');
+        const reminderMinutes = parseAlarmMinutes(alarm);
+        events.push({
+            title: unescapeText(properties.get('SUMMARY')?.value ?? 'Untitled event'),
+            ...(properties.get('DESCRIPTION')
+                ? { notes: unescapeText(properties.get('DESCRIPTION').value) }
+                : {}),
+            startAt: parsedStart.epochMs,
+            ...(parsedEnd ? { endAt: parsedEnd.epochMs } : {}),
+            allDay: parsedStart.allDay,
+            ...(recurrence ? { recurrence } : {}),
+            ...(reminderMinutes !== undefined ? { reminderMinutes } : {}),
+            dropped,
+        });
+    }
+    return { events, skipped };
+};
+//# sourceMappingURL=icsCalendar.js.map

package/backend/dist/utils/icsCalendar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"icsCalendar.js","sourceRoot":"","sources":["../../src/utils/icsCalendar.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAaH,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,KAAK,GAAG,CAAC,EAAU,EAAE,CAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAErC,MAAM,UAAU,GAAG,CAAC,OAAe,EAAU,EAAE;IAC7C,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,CACL,GAAG,IAAI,CAAC,cAAc,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,EAAE;QACxD,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE;QACtD,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,GAAG,CAC5D,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,OAAe,EAAU,EAAE;IAC9C,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;AAClF,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,KAAa,EAAU,EAAE,CAC3C,KAAK;KACF,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;KACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;KACpB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;KACpB,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAE9B,MAAM,YAAY,GAAG,CAAC,KAAa,EAAU,EAAE,CAC7C,KAAK;KACF,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;KACtB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;KACpB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;KACpB,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAE5B,0CAA0C;AAC1C,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAU,EAAE;IACxC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,GAAG,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;YACxD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,SAAS,CAAC;QACvB,CAAC;IACH,CAAC;IACD,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC;AAErE,MAAM,iBAAiB,GAAG,CACxB,UAA6B,EACT,EAAE;IACtB,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,MAAM;YACT,OAAO,SAAS,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC;QACvB,KAAK,OAAO;YACV,OAAO,YAAY,CAAC;QACtB,KAAK,QAAQ;YACX,OAAO,qBAAqB,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;QACvE,KAAK,SAAS;YACZ,OAAO,2BAA2B,UAAU,CAAC,UAAU,EAAE,CAAC;QAC5D,KAAK,QAAQ;YACX,OAAO,CACL,uBAAuB,UAAU,CAAC,KAAK,GAAG,CAAC,GAAG;gBAC9C,cAAc,UAAU,CAAC,UAAU,EAAE,CACtC,CAAC;IACN,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,CACxB,KAAa,EACb,OAAe,EACgB,EAAE;IACjC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,CAAC,GAAG,CACR,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,WAAW,EAAE,EACtC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CACxC,CAAC;QACJ,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,IACE,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;QACnB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EACnB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;IAClC,QAAQ,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,KAAK,QAAQ;YACX,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QACpC,KAAK,OAAO;YACV,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACzC,KAAK,QAAQ,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,SAAS,GAAG,KAAK;gBACrB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAA8B,CAAC;gBAClE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAC;YACzE,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS;gBACxD,IAAI;gBACJ,MAAM;aACP,CAAC;QACJ,CAAC;QACD,KAAK,SAAS,EAAE,CAAC;YACf,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;gBACxD,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACvD,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;gBACjC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC;gBACnC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACvE,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;gBAC5B,KAAK,GAAG,CAAC;gBACT,KAAK,GAAG,EAAE;gBACV,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;gBACjC,UAAU,GAAG,CAAC,EACd,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC7D,CAAC;QACD;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,YAAoB,EACpB,MAAgC,EACxB,EAAE;IACV,MAAM,KAAK,GAAa;QACtB,iBAAiB;QACjB,aAAa;QACb,qCAAqC;QACrC,gBAAgB,UAAU,CAAC,YAAY,CAAC,EAAE;KAC3C,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,OAAO,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,WAAW,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,sBAAsB,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC/D,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,oBAAoB,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,WAAW,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACnD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,SAAS,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,WAAW,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,eAAe,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3B,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5B,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;AACnD,CAAC,CAAC;AAmBF,MAAM,UAAU,GAAG,CACjB,GAAW,EACX,UAAkB,EACgC,EAAE;IACpD,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5E,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,OAAO;YACL,OAAO,EAAE,IAAI,IAAI,CACf,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAChB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EACpB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CACjB,CAAC,OAAO,EAAE;YACX,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,mDAAmD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5E,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IAC/D,MAAM,OAAO,GAAG,IAAI;QAClB,CAAC,CAAC,IAAI,CAAC,GAAG,CACN,MAAM,CAAC,IAAI,CAAC,EACZ,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EACjB,MAAM,CAAC,GAAG,CAAC,EACX,MAAM,CAAC,IAAI,CAAC,EACZ,MAAM,CAAC,MAAM,CAAC,EACd,MAAM,CAAC,MAAM,CAAC,CACf;QACH,CAAC,CAAC,IAAI,IAAI,CACN,MAAM,CAAC,IAAI,CAAC,EACZ,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EACjB,MAAM,CAAC,GAAG,CAAC,EACX,MAAM,CAAC,IAAI,CAAC,EACZ,MAAM,CAAC,MAAM,CAAC,EACd,MAAM,CAAC,MAAM,CAAC,CACf,CAAC,OAAO,EAAE,CAAC;IAChB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,KAAe,EAAsB,EAAE;IAChE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACpC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,KAAK,GAAG,EAAE,GAAG,OAAO,CAAC;YACnC,IAAI,KAAK,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,uEAAuE;AACvE,MAAM,YAAY,GAAG,CAAC,MAAc,EAAY,EAAE,CAChD,MAAM;KACH,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;KACzB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;KACvB,KAAK,CAAC,OAAO,CAAC;KACd,MAAM,CAAC,OAAO,CAAC,CAAC;AAErB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,MAAc,EACd,aAAqB,EACL,EAAE;IAClB,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,cAAc,EAAE,CAAC;YAClD,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,IAAI,CAAC,CAAC;QACX,OACE,KAAK,GAAG,KAAK,CAAC,MAAM;YACpB,KAAK,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,YAAY,EAC3C,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YACzB,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;QACX,IAAI,MAAM,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAAiD,CAAC;QAC5E,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;gBAC7B,OAAO,GAAG,IAAI,CAAC;gBACf,SAAS;YACX,CAAC;YACD,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;gBAC3B,OAAO,GAAG,KAAK,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,SAAS;YACX,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,SAAS,IAAI,CAAC;gBAAE,SAAS;YAC7B,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACnD,MAAM,cAAc,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACtD,MAAM,IAAI,GAAG,CACX,cAAc,KAAK,CAAC,CAAC;gBACnB,CAAC,CAAC,iBAAiB;gBACnB,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAC/C,CAAC,WAAW,EAAE,CAAC;YAChB,MAAM,UAAU,GACd,cAAc,KAAK,CAAC,CAAC;gBACnB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;YAClD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,KAAK;YACvB,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC;YAC3C,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,UAAyC,CAAC;QAC9C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,KAAK,EAAE,CAAC;YACV,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;YACjE,IAAI,CAAC,UAAU;gBAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,KAAK,IAAI,gBAAgB,CAAC;YACzE,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC;gBAC/B,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAE,CAAC,KAAK,CAAC,EAAE;gBAC/D,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC,CAAC"}

package/backend/dist/utils/imageEditUpload.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Image-edit upload validation (IMAGE-01). Every reference image and mask
+ * is checked against declared MIME, sniffed magic bytes, and byte ceilings
+ * before anything reaches a provider. PNG is the interoperable default —
+ * masks must carry an alpha channel, which only PNG guarantees here.
+ */
+export declare const IMAGE_EDIT_GLOBAL_MAX_IMAGE_BYTES: number;
+export declare const IMAGE_EDIT_GLOBAL_MAX_REFERENCE_IMAGES = 4;
+export type ImageEditFormat = 'png' | 'jpeg' | 'webp';
+export declare class ImageEditUploadError extends Error {
+    readonly code: 'missing_file' | 'unsupported_mime_type' | 'signature_mismatch' | 'file_too_large' | 'too_many_images';
+    constructor(code: 'missing_file' | 'unsupported_mime_type' | 'signature_mismatch' | 'file_too_large' | 'too_many_images', message: string);
+}
+export declare const detectImageEditFormat: (buffer: Buffer) => ImageEditFormat | null;
+export interface ValidatedImageEditInput {
+    buffer: Buffer;
+    mimeType: string;
+    filename: string;
+}
+export declare const validateImageEditUpload: (file: {
+    buffer: Buffer;
+    mimetype?: string;
+    size: number;
+}, options: {
+    allowedMimeTypes?: string[];
+    maxBytes?: number;
+    filename: string;
+}) => ValidatedImageEditInput;
+//# sourceMappingURL=imageEditUpload.d.ts.map

package/backend/dist/utils/imageEditUpload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"imageEditUpload.d.ts","sourceRoot":"","sources":["../../src/utils/imageEditUpload.ts"],"names":[],"mappings":"AAiBA;;;;;GAKG;AAEH,eAAO,MAAM,iCAAiC,QAAmB,CAAC;AAClE,eAAO,MAAM,sCAAsC,IAAI,CAAC;AAExD,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;AAQtD,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,IAAI,EACT,cAAc,GACd,uBAAuB,GACvB,oBAAoB,GACpB,gBAAgB,GAChB,iBAAiB;IANvB,YACW,IAAI,EACT,cAAc,GACd,uBAAuB,GACvB,oBAAoB,GACpB,gBAAgB,GAChB,iBAAiB,EACrB,OAAO,EAAE,MAAM,EAIhB;CACF;AAED,eAAO,MAAM,qBAAqB,WACxB,MAAM,KACb,eAAe,GAAG,IAoBpB,CAAC;AAIF,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,eAAO,MAAM,uBAAuB,SAC5B;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,WAChD;IACP,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB,KACA,uBA2CF,CAAC"}

package/backend/dist/utils/imageEditUpload.js

@@ -0,0 +1,82 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Image-edit upload validation (IMAGE-01). Every reference image and mask
+ * is checked against declared MIME, sniffed magic bytes, and byte ceilings
+ * before anything reaches a provider. PNG is the interoperable default —
+ * masks must carry an alpha channel, which only PNG guarantees here.
+ */
+export const IMAGE_EDIT_GLOBAL_MAX_IMAGE_BYTES = 10 * 1024 * 1024;
+export const IMAGE_EDIT_GLOBAL_MAX_REFERENCE_IMAGES = 4;
+const FORMAT_MIME = {
+    png: 'image/png',
+    jpeg: 'image/jpeg',
+    webp: 'image/webp',
+};
+export class ImageEditUploadError extends Error {
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'ImageEditUploadError';
+    }
+}
+export const detectImageEditFormat = (buffer) => {
+    if (buffer.length >= 8 && buffer.subarray(0, 4).equals(PNG_MAGIC)) {
+        return 'png';
+    }
+    if (buffer.length >= 3 &&
+        buffer[0] === 0xff &&
+        buffer[1] === 0xd8 &&
+        buffer[2] === 0xff) {
+        return 'jpeg';
+    }
+    if (buffer.length >= 12 &&
+        buffer.subarray(0, 4).toString('ascii') === 'RIFF' &&
+        buffer.subarray(8, 12).toString('ascii') === 'WEBP') {
+        return 'webp';
+    }
+    return null;
+};
+const PNG_MAGIC = Buffer.from([0x89, 0x50, 0x4e, 0x47]);
+export const validateImageEditUpload = (file, options) => {
+    if (!file || !file.buffer || file.buffer.length === 0) {
+        throw new ImageEditUploadError('missing_file', 'An image file is required');
+    }
+    const maxBytes = Math.min(options.maxBytes ?? IMAGE_EDIT_GLOBAL_MAX_IMAGE_BYTES, IMAGE_EDIT_GLOBAL_MAX_IMAGE_BYTES);
+    if (file.buffer.length > maxBytes) {
+        throw new ImageEditUploadError('file_too_large', `Image inputs are limited to ${maxBytes} bytes`);
+    }
+    const format = detectImageEditFormat(file.buffer);
+    if (!format) {
+        throw new ImageEditUploadError('signature_mismatch', 'Image content is not a recognized PNG, JPEG, or WebP file');
+    }
+    const sniffedMime = FORMAT_MIME[format];
+    const declared = file.mimetype?.toLowerCase().split(';')[0]?.trim();
+    if (declared && declared !== sniffedMime) {
+        throw new ImageEditUploadError('signature_mismatch', 'Image content does not match its declared MIME type');
+    }
+    const allowed = (options.allowedMimeTypes?.length ? options.allowedMimeTypes : ['image/png']).map(value => value.toLowerCase());
+    if (!allowed.includes(sniffedMime)) {
+        throw new ImageEditUploadError('unsupported_mime_type', `This model accepts only: ${allowed.join(', ')}`);
+    }
+    return {
+        buffer: file.buffer,
+        mimeType: sniffedMime,
+        filename: options.filename,
+    };
+};
+//# sourceMappingURL=imageEditUpload.js.map

package/backend/dist/utils/imageEditUpload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"imageEditUpload.js","sourceRoot":"","sources":["../../src/utils/imageEditUpload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,iCAAiC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAClE,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC;AAIxD,MAAM,WAAW,GAAoC;IACnD,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,YAAY;CACnB,CAAC;AAEF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YACW,IAKY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;oBARN,IAAI;QASb,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,MAAc,EACU,EAAE;IAC1B,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAClE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,MAAM,CAAC,MAAM,IAAI,CAAC;QAClB,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;QAClB,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;QAClB,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAClB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IACE,MAAM,CAAC,MAAM,IAAI,EAAE;QACnB,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,MAAM;QAClD,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,MAAM,EACnD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAQxD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,IAAyD,EACzD,OAIC,EACwB,EAAE;IAC3B,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,oBAAoB,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CACvB,OAAO,CAAC,QAAQ,IAAI,iCAAiC,EACrD,iCAAiC,CAClC,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,oBAAoB,CAC5B,gBAAgB,EAChB,+BAA+B,QAAQ,QAAQ,CAChD,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,oBAAoB,CAC5B,oBAAoB,EACpB,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACpE,IAAI,QAAQ,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QACzC,MAAM,IAAI,oBAAoB,CAC5B,oBAAoB,EACpB,qDAAqD,CACtD,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,CACd,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAC5E,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,oBAAoB,CAC5B,uBAAuB,EACvB,4BAA4B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,WAAW;QACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC;AACJ,CAAC,CAAC"}

package/backend/dist/utils/logRedaction.d.ts

@@ -0,0 +1,2 @@
+export declare const redactLogFields: (value: unknown, depth?: number) => unknown;
+//# sourceMappingURL=logRedaction.d.ts.map

package/backend/dist/utils/logRedaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logRedaction.d.ts","sourceRoot":"","sources":["../../src/utils/logRedaction.ts"],"names":[],"mappings":"AA6BA,eAAO,MAAM,eAAe,UAAW,OAAO,qBAAc,OAoC3D,CAAC"}