libre-webui 0.25.0 → 0.26.0

package/backend/dist/utils/resourceLimits.js.map

@@ -1 +1 @@
-{"version":3,"file":"resourceLimits.js","sourceRoot":"","sources":["../../src/utils/resourceLimits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AACzC,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAO,CAAC;AAC/C,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAChD,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAClD,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AACjD,MAAM,CAAC,MAAM,+BAA+B,GAAG,GAAG,CAAC;AACnD,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAM,CAAC;AACtD,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAC3C,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAC9C,MAAM,CAAC,MAAM,kCAAkC,GAAG,KAAM,CAAC;AACzD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAEzC,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YACE,OAAe,EACN,UAAqB;QAE9B,KAAK,CAAC,OAAO,CAAC,CAAC;0BAFN,UAAU;QAGnB,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF"}
+{"version":3,"file":"resourceLimits.js","sourceRoot":"","sources":["../../src/utils/resourceLimits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAC9C,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAChD,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1D,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAI,CAAC;AACvD,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAC3C,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,CAAC;AACpD,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AACzC,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAO,CAAC;AAC/C,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAChD,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAClD,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AACjD,MAAM,CAAC,MAAM,+BAA+B,GAAG,GAAG,CAAC;AACnD,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAM,CAAC;AACtD,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAC3C,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAC9C,MAAM,CAAC,MAAM,kCAAkC,GAAG,KAAM,CAAC;AACzD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AACzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAC/C,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAI,CAAC;AACvD,MAAM,CAAC,MAAM,0BAA0B,GAAG,OAAS,CAAC;AACpD,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AACzC,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAClD,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACxC,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AACzC,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAC3C,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAClD,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAM,CAAC;AAChD,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AACvC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAClC,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AACtC,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACxC,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AACzC,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AACjD,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAO,CAAC;AACrD,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AACrC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAClC,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAC9C,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAO,CAAC;AACrD,MAAM,CAAC,MAAM,2BAA2B,GAAG,OAAS,CAAC;AACrD,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACxC,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAC1C,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAM,CAAC;AAC3C,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAK,CAAC;AAChD,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AACrD,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAC3C,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AACzC,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAChD,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAC7C,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC;AACrD,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC7D,MAAM,CAAC,MAAM,oCAAoC,GAAG,EAAE,CAAC;AACvD,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAC9C,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AACjD,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAK,CAAC;AAClD,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAC9C,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AACtC,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAC3C,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAK,CAAC;AAC5C,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAC7C,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AACzC,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAC3C,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAC5C,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAC1D,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAS,CAAC;AAC9C,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAK,CAAC;AAE3C,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YACE,OAAe,EACN,UAA2B;QAEpC,KAAK,CAAC,OAAO,CAAC,CAAC;0BAFN,UAAU;QAGnB,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF"}

package/backend/dist/utils/toolEgress.d.ts

@@ -0,0 +1,22 @@
+export declare class ToolEgressError extends Error {
+    constructor(message: string);
+}
+export declare const isAllowlistedPrivateHost: (hostname: string) => boolean;
+export interface ToolHttpRequest {
+    url: string;
+    method: string;
+    headers?: Record<string, string>;
+    body?: string;
+    timeoutMs: number;
+    maxResponseBytes: number;
+    signal?: AbortSignal;
+}
+export interface ToolHttpResponse {
+    status: number;
+    headers: Record<string, string>;
+    bodyText: string;
+    truncated: boolean;
+}
+export declare const validateToolServerUrl: (rawUrl: string) => URL;
+export declare function secureToolRequest(request: ToolHttpRequest): Promise<ToolHttpResponse>;
+//# sourceMappingURL=toolEgress.d.ts.map

package/backend/dist/utils/toolEgress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolEgress.d.ts","sourceRoot":"","sources":["../../src/utils/toolEgress.ts"],"names":[],"mappings":"AAuCA,qBAAa,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAUD,eAAO,MAAM,wBAAwB,aAAc,MAAM,KAAG,OACR,CAAC;AAErD,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,eAAO,MAAM,qBAAqB,WAAY,MAAM,KAAG,GAgBtD,CAAC;AAgCF,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,gBAAgB,CAAC,CAoF3B"}

package/backend/dist/utils/toolEgress.js

@@ -0,0 +1,157 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Egress guard for tool-server requests. Every request resolves the target
+ * host itself, refuses private/loopback/metadata address space, and pins the
+ * connection to the resolved address so a DNS rebind between check and use
+ * cannot redirect the call. Redirects are refused outright: a registered
+ * tool destination is exact. Response reads are size-capped and every call
+ * carries a hard timeout combined with the caller's abort signal.
+ *
+ * An administrator can allow exact internal hostnames through the
+ * TOOLS_PRIVATE_NETWORK_ALLOWLIST environment variable (comma-separated,
+ * matched case-insensitively against the URL hostname). Allowlisted hosts
+ * are still connection-pinned and capped.
+ */
+import { lookup } from 'node:dns/promises';
+import { isIP } from 'node:net';
+import { Agent, fetch } from 'undici';
+import { createPinnedLookup, isPublicIpAddress } from './webpageFetcher.js';
+const ABSOLUTE_MAX_RESPONSE_BYTES = 4 * 1024 * 1024;
+const ABSOLUTE_MAX_TIMEOUT_MS = 120000;
+export class ToolEgressError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ToolEgressError';
+    }
+}
+const privateHostAllowlist = () => new Set((process.env.TOOLS_PRIVATE_NETWORK_ALLOWLIST ?? '')
+    .split(',')
+    .map(entry => entry.trim().toLowerCase())
+    .filter(Boolean));
+export const isAllowlistedPrivateHost = (hostname) => privateHostAllowlist().has(hostname.toLowerCase());
+export const validateToolServerUrl = (rawUrl) => {
+    let url;
+    try {
+        url = new URL(rawUrl);
+    }
+    catch {
+        throw new ToolEgressError('Invalid tool server URL');
+    }
+    if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+        throw new ToolEgressError('Only http and https tool servers are supported');
+    }
+    if (url.username || url.password) {
+        throw new ToolEgressError('Tool server URLs cannot contain embedded credentials');
+    }
+    return url;
+};
+const resolveTarget = async (url) => {
+    const hostname = url.hostname.replace(/^\[|\]$/g, '');
+    const literalKind = isIP(hostname);
+    const resolved = literalKind !== 0
+        ? [{ address: hostname, family: literalKind }]
+        : await lookup(hostname, { all: true });
+    if (resolved.length === 0) {
+        throw new ToolEgressError('Tool server host could not be resolved');
+    }
+    const allowPrivate = isAllowlistedPrivateHost(url.hostname);
+    for (const { address } of resolved) {
+        if (!allowPrivate && !isPublicIpAddress(address)) {
+            throw new ToolEgressError('Tool server resolves to a private or local address');
+        }
+    }
+    const [first] = resolved;
+    if (first.family !== 4 && first.family !== 6) {
+        throw new ToolEgressError('Unsupported address family');
+    }
+    return { address: first.address, family: first.family };
+};
+export async function secureToolRequest(request) {
+    const url = validateToolServerUrl(request.url);
+    const target = await resolveTarget(url);
+    const maxBytes = Math.min(Math.max(1, request.maxResponseBytes), ABSOLUTE_MAX_RESPONSE_BYTES);
+    const timeoutMs = Math.min(Math.max(1000, request.timeoutMs), ABSOLUTE_MAX_TIMEOUT_MS);
+    // The size cap is enforced by the read loop below, which stops at maxBytes
+    // and cancels the stream. A dispatcher-level maxResponseSize cannot do the
+    // job here: it destroys the request as soon as the limit is crossed, so an
+    // oversized body would surface as a transport failure instead of the
+    // truncated result the caller is documented to receive.
+    const dispatcher = new Agent({
+        connect: { lookup: createPinnedLookup(target) },
+    });
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(new ToolEgressError('Tool request timed out')), timeoutMs);
+    const forwardAbort = () => controller.abort(request.signal?.reason);
+    request.signal?.addEventListener('abort', forwardAbort, { once: true });
+    if (request.signal?.aborted)
+        forwardAbort();
+    try {
+        const response = await fetch(url, {
+            method: request.method,
+            redirect: 'manual',
+            signal: controller.signal,
+            dispatcher,
+            headers: {
+                'User-Agent': 'Libre-WebUI/1.0 (+tool gateway)',
+                ...request.headers,
+            },
+            ...(request.body !== undefined ? { body: request.body } : {}),
+        });
+        if (response.status >= 300 && response.status < 400) {
+            await response.body?.cancel();
+            throw new ToolEgressError('Tool server responded with a redirect; registered destinations are exact');
+        }
+        const reader = response.body?.getReader();
+        const chunks = [];
+        let received = 0;
+        let truncated = false;
+        if (reader) {
+            for (;;) {
+                const { done, value } = await reader.read();
+                if (done)
+                    break;
+                received += value.byteLength;
+                if (received > maxBytes) {
+                    truncated = true;
+                    const keep = value.byteLength - (received - maxBytes);
+                    if (keep > 0)
+                        chunks.push(value.subarray(0, keep));
+                    await reader.cancel();
+                    break;
+                }
+                chunks.push(value);
+            }
+        }
+        const headers = {};
+        response.headers.forEach((value, key) => {
+            headers[key] = value;
+        });
+        return {
+            status: response.status,
+            headers,
+            bodyText: Buffer.concat(chunks).toString('utf-8'),
+            truncated,
+        };
+    }
+    finally {
+        clearTimeout(timer);
+        request.signal?.removeEventListener('abort', forwardAbort);
+        await dispatcher.close();
+    }
+}
+//# sourceMappingURL=toolEgress.js.map

package/backend/dist/utils/toolEgress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolEgress.js","sourceRoot":"","sources":["../../src/utils/toolEgress.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE5E,MAAM,2BAA2B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACpD,MAAM,uBAAuB,GAAG,MAAO,CAAC;AAExC,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,oBAAoB,GAAG,GAAgB,EAAE,CAC7C,IAAI,GAAG,CACL,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,EAAE,CAAC;KAChD,KAAK,CAAC,GAAG,CAAC;KACV,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;KACxC,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;AAEJ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,QAAgB,EAAW,EAAE,CACpE,oBAAoB,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;AAmBrD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,MAAc,EAAO,EAAE;IAC3D,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,yBAAyB,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,eAAe,CAAC,gDAAgD,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,eAAe,CACvB,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAOF,MAAM,aAAa,GAAG,KAAK,EAAE,GAAQ,EAA2B,EAAE;IAChE,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,QAAQ,GACZ,WAAW,KAAK,CAAC;QACf,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAoB,EAAE,CAAC;QACvD,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,YAAY,GAAG,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5D,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC,YAAY,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,eAAe,CACvB,oDAAoD,CACrD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC;IACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,eAAe,CAAC,4BAA4B,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAe,EAAE,CAAC;AACnE,CAAC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAwB;IAExB,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CACvB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,EACrC,2BAA2B,CAC5B,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,EACjC,uBAAuB,CACxB,CAAC;IAEF,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,qEAAqE;IACrE,wDAAwD;IACxD,MAAM,UAAU,GAAG,IAAI,KAAK,CAAC;QAC3B,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE;KAChD,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,wBAAwB,CAAC,CAAC,EACrE,SAAS,CACV,CAAC;IACF,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpE,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,YAAY,EAAE,CAAC;IAE5C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,UAAU;YACV,OAAO,EAAE;gBACP,YAAY,EAAE,iCAAiC;gBAC/C,GAAG,OAAO,CAAC,OAAO;aACnB;YACD,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACpD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,eAAe,CACvB,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,MAAM,EAAE,CAAC;YACX,SAAS,CAAC;gBACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI;oBAAE,MAAM;gBAChB,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC;gBAC7B,IAAI,QAAQ,GAAG,QAAQ,EAAE,CAAC;oBACxB,SAAS,GAAG,IAAI,CAAC;oBACjB,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC;oBACtD,IAAI,IAAI,GAAG,CAAC;wBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;oBACnD,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;oBACtB,MAAM;gBACR,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACtC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,OAAO;YACL,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO;YACP,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACjD,SAAS;SACV,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC3D,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;AACH,CAAC"}

package/backend/dist/utils/websocketMessages.d.ts

@@ -23,6 +23,12 @@ export declare function sendAssistantChunk(ws: WebSocketLike, data: AssistantChu
 export declare function sendAssistantComplete(ws: WebSocketLike, data: unknown): boolean;
 export declare function sendAssistantCancelled(ws: WebSocketLike, data: unknown, options?: SendOptions): boolean;
 export declare function sendToolStatus(ws: WebSocketLike, data: ToolStatusData, options?: SendOptions): boolean;
+/**
+ * A normalized chat tool event (chat.tool-call.v1 / chat.tool-result.v1 /
+ * chat.approval.v1). The same payload shapes are appended to the durable
+ * event stream in team mode.
+ */
+export declare function sendToolEvent(ws: WebSocketLike, data: unknown, options?: SendOptions): boolean;
 export declare function sendError(ws: WebSocketLike, data: unknown): boolean;
 export declare function buildAssistantFakeStreamChunks(content: string, messageId?: string, batchSize?: number): AssistantChunkData[];
 export declare function streamAssistantFakeChunks(ws: WebSocketLike, content: string, messageId?: string, delayMs?: number, signal?: AbortSignal): Promise<void>;

package/backend/dist/utils/websocketMessages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"websocketMessages.d.ts","sourceRoot":"","sources":["../../src/utils/websocketMessages.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AA6BD,wBAAgB,aAAa,CAAC,EAAE,EAAE,aAAa,GAAG,OAAO,CAIxD;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAEzE;AAED,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,kBAAkB,EACxB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAET;AAED,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,OAAO,GACZ,OAAO,CAET;AAED,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAET;AAED,wBAAgB,cAAc,CAC5B,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,cAAc,EACpB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAET;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAEnE;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,GAAE,MAAU,GACpB,kBAAkB,EAAE,CAkBtB;AAED,wBAAsB,yBAAyB,CAC7C,EAAE,EAAE,aAAa,EACjB,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,GAAE,MAAY,EACrB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAoBf"}
+{"version":3,"file":"websocketMessages.d.ts","sourceRoot":"","sources":["../../src/utils/websocketMessages.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AA8BD,wBAAgB,aAAa,CAAC,EAAE,EAAE,aAAa,GAAG,OAAO,CAIxD;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAEzE;AAED,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,kBAAkB,EACxB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAET;AAED,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,OAAO,GACZ,OAAO,CAET;AAED,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAET;AAED,wBAAgB,cAAc,CAC5B,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,cAAc,EACpB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAET;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAET;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAEnE;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,GAAE,MAAU,GACpB,kBAAkB,EAAE,CAkBtB;AAED,wBAAsB,yBAAyB,CAC7C,EAAE,EAAE,aAAa,EACjB,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,GAAE,MAAY,EACrB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAoBf"}

package/backend/dist/utils/websocketMessages.js

@@ -46,6 +46,14 @@ export function sendAssistantCancelled(ws, data, options) {
 export function sendToolStatus(ws, data, options) {
     return sendWebSocketMessage(ws, 'tool_status', data, options);
 }
+/**
+ * A normalized chat tool event (chat.tool-call.v1 / chat.tool-result.v1 /
+ * chat.approval.v1). The same payload shapes are appended to the durable
+ * event stream in team mode.
+ */
+export function sendToolEvent(ws, data, options) {
+    return sendWebSocketMessage(ws, 'tool_event', data, options);
+}
 export function sendError(ws, data) {
     return sendWebSocketMessage(ws, 'error', data);
 }

package/backend/dist/utils/websocketMessages.js.map

@@ -1 +1 @@
-{"version":3,"file":"websocketMessages.js","sourceRoot":"","sources":["../../src/utils/websocketMessages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAkCH,SAAS,oBAAoB,CAC3B,EAAiB,EACjB,IAA0B,EAC1B,IAAa,EACb,OAAO,GAAgB,EAAE;IAEzB,IAAI,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAiB;IAC7C,OAAO,oBAAoB,CAAC,EAAE,EAAE,WAAW,EAAE;QAC3C,OAAO,EAAE,0BAA0B;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAAiB,EAAE,IAAa;IAC9D,OAAO,oBAAoB,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,EAAiB,EACjB,IAAwB,EACxB,OAAqB;IAErB,OAAO,oBAAoB,CAAC,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,EAAiB,EACjB,IAAa;IAEb,OAAO,oBAAoB,CAAC,EAAE,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,EAAiB,EACjB,IAAa,EACb,OAAqB;IAErB,OAAO,oBAAoB,CAAC,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,EAAiB,EACjB,IAAoB,EACpB,OAAqB;IAErB,OAAO,oBAAoB,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,EAAiB,EAAE,IAAa;IACxD,OAAO,oBAAoB,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,OAAe,EACf,SAAkB,EAClB,SAAS,GAAW,CAAC;IAErB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAyB,EAAE,CAAC;IAExC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;QAE7C,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YAC9C,KAAK;YACL,IAAI,EAAE,MAAM;YACZ,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,EAAiB,EACjB,OAAe,EACf,SAAkB,EAClB,OAAO,GAAW,GAAG,EACrB,MAAoB;IAEpB,MAAM,MAAM,GAAG,8BAA8B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAElE,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO;QAC5B,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAE9B,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;gBAChC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC1C,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;gBAC7B,SAAS,MAAM;oBACb,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;oBAC5C,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"websocketMessages.js","sourceRoot":"","sources":["../../src/utils/websocketMessages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAmCH,SAAS,oBAAoB,CAC3B,EAAiB,EACjB,IAA0B,EAC1B,IAAa,EACb,OAAO,GAAgB,EAAE;IAEzB,IAAI,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAiB;IAC7C,OAAO,oBAAoB,CAAC,EAAE,EAAE,WAAW,EAAE;QAC3C,OAAO,EAAE,0BAA0B;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAAiB,EAAE,IAAa;IAC9D,OAAO,oBAAoB,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,EAAiB,EACjB,IAAwB,EACxB,OAAqB;IAErB,OAAO,oBAAoB,CAAC,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,EAAiB,EACjB,IAAa;IAEb,OAAO,oBAAoB,CAAC,EAAE,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,EAAiB,EACjB,IAAa,EACb,OAAqB;IAErB,OAAO,oBAAoB,CAAC,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,EAAiB,EACjB,IAAoB,EACpB,OAAqB;IAErB,OAAO,oBAAoB,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,EAAiB,EACjB,IAAa,EACb,OAAqB;IAErB,OAAO,oBAAoB,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,EAAiB,EAAE,IAAa;IACxD,OAAO,oBAAoB,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,OAAe,EACf,SAAkB,EAClB,SAAS,GAAW,CAAC;IAErB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAyB,EAAE,CAAC;IAExC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;QAE7C,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YAC9C,KAAK;YACL,IAAI,EAAE,MAAM;YACZ,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,EAAiB,EACjB,OAAe,EACf,SAAkB,EAClB,OAAO,GAAW,GAAG,EACrB,MAAoB;IAEpB,MAAM,MAAM,GAAG,8BAA8B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAElE,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO;QAC5B,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAE9B,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;gBAChC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC1C,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;gBAC7B,SAAS,MAAM;oBACb,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;oBAC5C,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC"}

package/backend/dist/utils/zipArchive.d.ts

@@ -0,0 +1,32 @@
+export interface ZipArchiveLimits {
+    maxEntries: number;
+    maxEntryBytes: number;
+    maxTotalBytes: number;
+}
+export declare const DEFAULT_ZIP_ARCHIVE_LIMITS: Readonly<ZipArchiveLimits>;
+export declare class ZipArchiveError extends Error {
+    constructor(message: string);
+}
+interface ZipEntryRecord {
+    path: string;
+    method: number;
+    compressedSize: number;
+    uncompressedSize: number;
+    localHeaderOffset: number;
+}
+export declare class ZipArchive {
+    private readonly buffer;
+    private readonly entryMap;
+    private readonly limits;
+    private inflatedTotal;
+    constructor(buffer: Buffer, entryMap: Map<string, ZipEntryRecord>, limits: Readonly<ZipArchiveLimits>);
+    entryPaths(): string[];
+    has(path: string): boolean;
+    /** Returns the decompressed bytes of one entry, or null when absent. */
+    read(path: string): Buffer | null;
+    private inflate;
+    private resolveDataOffset;
+}
+export declare const readZipArchive: (buffer: Buffer, limits?: Readonly<ZipArchiveLimits>) => ZipArchive;
+export {};
+//# sourceMappingURL=zipArchive.d.ts.map

package/backend/dist/utils/zipArchive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zipArchive.d.ts","sourceRoot":"","sources":["../../src/utils/zipArchive.ts"],"names":[],"mappings":"AAyCA,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,gBAAgB,CAK9D,CAAC;AAEL,qBAAa,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,UAAU;IAInB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IALzB,OAAO,CAAC,aAAa,CAAK;IAE1B,YACmB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,EACrC,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EACjD;IAEJ,UAAU,IAAI,MAAM,EAAE,CAErB;IAED,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzB;IAED,wEAAwE;IACxE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAmBhC;IAED,OAAO,CAAC,OAAO;IAkBf,OAAO,CAAC,iBAAiB;CAc1B;AAgBD,eAAO,MAAM,cAAc,WACjB,MAAM,WACN,QAAQ,CAAC,gBAAgB,CAAC,KACjC,UAqEF,CAAC"}

package/backend/dist/utils/zipArchive.js

@@ -0,0 +1,171 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { inflateRawSync } from 'node:zlib';
+/**
+ * Minimal read-only ZIP archive parser for OOXML document extraction.
+ *
+ * Deliberately dependency-free: office uploads are size-capped buffers, so a
+ * central-directory walk plus zlib raw-inflate covers every legitimate DOCX,
+ * PPTX, and XLSX file without pulling an archive library into the supply
+ * chain. Encrypted entries, zip64 archives, and unknown compression methods
+ * are rejected instead of guessed at, and every inflate call is bounded so a
+ * crafted archive cannot expand past the configured budget.
+ */
+const EOCD_SIGNATURE = 0x06054b50;
+const CENTRAL_DIRECTORY_SIGNATURE = 0x02014b50;
+const LOCAL_HEADER_SIGNATURE = 0x04034b50;
+const EOCD_MIN_BYTES = 22;
+const MAX_EOCD_SCAN_BYTES = EOCD_MIN_BYTES + 65535;
+const ZIP64_MARKER_16 = 0xffff;
+const ZIP64_MARKER_32 = 0xffffffff;
+const METHOD_STORED = 0;
+const METHOD_DEFLATED = 8;
+const FLAG_ENCRYPTED = 0x0001;
+export const DEFAULT_ZIP_ARCHIVE_LIMITS = Object.freeze({
+    maxEntries: 4096,
+    maxEntryBytes: 64 * 1024 * 1024,
+    maxTotalBytes: 256 * 1024 * 1024,
+});
+export class ZipArchiveError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ZipArchiveError';
+    }
+}
+export class ZipArchive {
+    constructor(buffer, entryMap, limits) {
+        this.buffer = buffer;
+        this.entryMap = entryMap;
+        this.limits = limits;
+        this.inflatedTotal = 0;
+    }
+    entryPaths() {
+        return [...this.entryMap.keys()];
+    }
+    has(path) {
+        return this.entryMap.has(path);
+    }
+    /** Returns the decompressed bytes of one entry, or null when absent. */
+    read(path) {
+        const entry = this.entryMap.get(path);
+        if (!entry)
+            return null;
+        const dataOffset = this.resolveDataOffset(entry);
+        const compressed = this.buffer.subarray(dataOffset, dataOffset + entry.compressedSize);
+        if (compressed.length !== entry.compressedSize) {
+            throw new ZipArchiveError(`Archive entry ${path} is truncated`);
+        }
+        const inflated = this.inflate(entry, compressed);
+        this.inflatedTotal += inflated.length;
+        if (this.inflatedTotal > this.limits.maxTotalBytes) {
+            throw new ZipArchiveError('Archive exceeds the total decompressed size budget');
+        }
+        return inflated;
+    }
+    inflate(entry, compressed) {
+        if (entry.method === METHOD_STORED) {
+            return compressed;
+        }
+        try {
+            return inflateRawSync(compressed, {
+                maxOutputLength: Math.min(entry.uncompressedSize, this.limits.maxEntryBytes),
+            });
+        }
+        catch {
+            throw new ZipArchiveError(`Archive entry ${entry.path} failed to decompress within its declared size`);
+        }
+    }
+    resolveDataOffset(entry) {
+        const header = entry.localHeaderOffset;
+        if (header + 30 > this.buffer.length ||
+            this.buffer.readUInt32LE(header) !== LOCAL_HEADER_SIGNATURE) {
+            throw new ZipArchiveError(`Archive entry ${entry.path} has an invalid local header`);
+        }
+        const nameLength = this.buffer.readUInt16LE(header + 26);
+        const extraLength = this.buffer.readUInt16LE(header + 28);
+        return header + 30 + nameLength + extraLength;
+    }
+}
+const findEndOfCentralDirectory = (buffer) => {
+    const scanStart = Math.max(0, buffer.length - MAX_EOCD_SCAN_BYTES);
+    for (let offset = buffer.length - EOCD_MIN_BYTES; offset >= scanStart; offset -= 1) {
+        if (buffer.readUInt32LE(offset) === EOCD_SIGNATURE) {
+            return offset;
+        }
+    }
+    throw new ZipArchiveError('Not a ZIP archive');
+};
+export const readZipArchive = (buffer, limits = DEFAULT_ZIP_ARCHIVE_LIMITS) => {
+    if (buffer.length < EOCD_MIN_BYTES) {
+        throw new ZipArchiveError('Not a ZIP archive');
+    }
+    const eocd = findEndOfCentralDirectory(buffer);
+    const entryCount = buffer.readUInt16LE(eocd + 10);
+    const centralDirectoryOffset = buffer.readUInt32LE(eocd + 16);
+    if (entryCount === ZIP64_MARKER_16 ||
+        centralDirectoryOffset === ZIP64_MARKER_32) {
+        throw new ZipArchiveError('zip64 archives are not supported');
+    }
+    if (entryCount > limits.maxEntries) {
+        throw new ZipArchiveError(`Archive declares ${entryCount} entries; at most ${limits.maxEntries} are allowed`);
+    }
+    const entries = new Map();
+    let cursor = centralDirectoryOffset;
+    for (let index = 0; index < entryCount; index += 1) {
+        if (cursor + 46 > buffer.length ||
+            buffer.readUInt32LE(cursor) !== CENTRAL_DIRECTORY_SIGNATURE) {
+            throw new ZipArchiveError('Central directory is corrupt');
+        }
+        const flags = buffer.readUInt16LE(cursor + 8);
+        const method = buffer.readUInt16LE(cursor + 10);
+        const compressedSize = buffer.readUInt32LE(cursor + 20);
+        const uncompressedSize = buffer.readUInt32LE(cursor + 24);
+        const nameLength = buffer.readUInt16LE(cursor + 28);
+        const extraLength = buffer.readUInt16LE(cursor + 30);
+        const commentLength = buffer.readUInt16LE(cursor + 32);
+        const localHeaderOffset = buffer.readUInt32LE(cursor + 42);
+        const path = buffer
+            .subarray(cursor + 46, cursor + 46 + nameLength)
+            .toString('utf8');
+        cursor += 46 + nameLength + extraLength + commentLength;
+        if ((flags & FLAG_ENCRYPTED) !== 0) {
+            throw new ZipArchiveError('Encrypted archive entries are not supported');
+        }
+        if (method !== METHOD_STORED && method !== METHOD_DEFLATED) {
+            throw new ZipArchiveError(`Archive entry ${path} uses an unsupported compression method`);
+        }
+        if (compressedSize === ZIP64_MARKER_32 ||
+            uncompressedSize === ZIP64_MARKER_32 ||
+            localHeaderOffset === ZIP64_MARKER_32) {
+            throw new ZipArchiveError('zip64 archive entries are not supported');
+        }
+        if (uncompressedSize > limits.maxEntryBytes) {
+            throw new ZipArchiveError(`Archive entry ${path} exceeds the per-entry decompressed size budget`);
+        }
+        if (path.endsWith('/'))
+            continue; // directory marker
+        entries.set(path, {
+            path,
+            method,
+            compressedSize,
+            uncompressedSize,
+            localHeaderOffset,
+        });
+    }
+    return new ZipArchive(buffer, entries, limits);
+};
+//# sourceMappingURL=zipArchive.js.map

package/backend/dist/utils/zipArchive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zipArchive.js","sourceRoot":"","sources":["../../src/utils/zipArchive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C;;;;;;;;;GASG;AAEH,MAAM,cAAc,GAAG,UAAU,CAAC;AAClC,MAAM,2BAA2B,GAAG,UAAU,CAAC;AAC/C,MAAM,sBAAsB,GAAG,UAAU,CAAC;AAC1C,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,mBAAmB,GAAG,cAAc,GAAG,KAAM,CAAC;AACpD,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,eAAe,GAAG,UAAU,CAAC;AACnC,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,cAAc,GAAG,MAAM,CAAC;AAQ9B,MAAM,CAAC,MAAM,0BAA0B,GACrC,MAAM,CAAC,MAAM,CAAC;IACZ,UAAU,EAAE,IAAI;IAChB,aAAa,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC/B,aAAa,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;CACjC,CAAC,CAAC;AAEL,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAUD,MAAM,OAAO,UAAU;IAGrB,YACmB,MAAc,EACd,QAAqC,EACrC,MAAkC;QAFlC,WAAM,GAAN,MAAM,CAAQ;QACd,aAAQ,GAAR,QAAQ,CAA6B;QACrC,WAAM,GAAN,MAAM,CAA4B;QAL7C,kBAAa,GAAG,CAAC,CAAC;IAMvB,CAAC;IAEJ,UAAU;QACR,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,wEAAwE;IACxE,IAAI,CAAC,IAAY;QACf,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CACrC,UAAU,EACV,UAAU,GAAG,KAAK,CAAC,cAAc,CAClC,CAAC;QACF,IAAI,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;YAC/C,MAAM,IAAI,eAAe,CAAC,iBAAiB,IAAI,eAAe,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACjD,IAAI,CAAC,aAAa,IAAI,QAAQ,CAAC,MAAM,CAAC;QACtC,IAAI,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YACnD,MAAM,IAAI,eAAe,CACvB,oDAAoD,CACrD,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,OAAO,CAAC,KAAqB,EAAE,UAAkB;QACvD,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YACnC,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,IAAI,CAAC;YACH,OAAO,cAAc,CAAC,UAAU,EAAE;gBAChC,eAAe,EAAE,IAAI,CAAC,GAAG,CACvB,KAAK,CAAC,gBAAgB,EACtB,IAAI,CAAC,MAAM,CAAC,aAAa,CAC1B;aACF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,eAAe,CACvB,iBAAiB,KAAK,CAAC,IAAI,gDAAgD,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,KAAqB;QAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,iBAAiB,CAAC;QACvC,IACE,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM;YAChC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,sBAAsB,EAC3D,CAAC;YACD,MAAM,IAAI,eAAe,CACvB,iBAAiB,KAAK,CAAC,IAAI,8BAA8B,CAC1D,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAC1D,OAAO,MAAM,GAAG,EAAE,GAAG,UAAU,GAAG,WAAW,CAAC;IAChD,CAAC;CACF;AAED,MAAM,yBAAyB,GAAG,CAAC,MAAc,EAAU,EAAE;IAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,mBAAmB,CAAC,CAAC;IACnE,KACE,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,cAAc,EAC3C,MAAM,IAAI,SAAS,EACnB,MAAM,IAAI,CAAC,EACX,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,cAAc,EAAE,CAAC;YACnD,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,eAAe,CAAC,mBAAmB,CAAC,CAAC;AACjD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,MAAc,EACd,MAAM,GAA+B,0BAA0B,EACnD,EAAE;IACd,IAAI,MAAM,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,IAAI,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAClD,MAAM,sBAAsB,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAC9D,IACE,UAAU,KAAK,eAAe;QAC9B,sBAAsB,KAAK,eAAe,EAC1C,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,kCAAkC,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,UAAU,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CACvB,oBAAoB,UAAU,qBAAqB,MAAM,CAAC,UAAU,cAAc,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAClD,IAAI,MAAM,GAAG,sBAAsB,CAAC;IACpC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,UAAU,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACnD,IACE,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM;YAC3B,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,2BAA2B,EAC3D,CAAC;YACD,MAAM,IAAI,eAAe,CAAC,8BAA8B,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAChD,MAAM,cAAc,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACxD,MAAM,gBAAgB,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACrD,MAAM,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACvD,MAAM,iBAAiB,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM;aAChB,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE,GAAG,UAAU,CAAC;aAC/C,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,IAAI,EAAE,GAAG,UAAU,GAAG,WAAW,GAAG,aAAa,CAAC;QACxD,IAAI,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,eAAe,CAAC,6CAA6C,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;YAC3D,MAAM,IAAI,eAAe,CACvB,iBAAiB,IAAI,yCAAyC,CAC/D,CAAC;QACJ,CAAC;QACD,IACE,cAAc,KAAK,eAAe;YAClC,gBAAgB,KAAK,eAAe;YACpC,iBAAiB,KAAK,eAAe,EACrC,CAAC;YACD,MAAM,IAAI,eAAe,CAAC,yCAAyC,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,gBAAgB,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;YAC5C,MAAM,IAAI,eAAe,CACvB,iBAAiB,IAAI,iDAAiD,CACvE,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,mBAAmB;QACrD,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;YAChB,IAAI;YACJ,MAAM;YACN,cAAc;YACd,gBAAgB;YAChB,iBAAiB;SAClB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACjD,CAAC,CAAC"}

package/backend/dist/websocketServer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"websocketServer.d.ts","sourceRoot":"","sources":["../src/websocketServer.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,MAAM,CAAC;AA2GpD,eAAO,MAAM,wBAAwB,WAC3B,MAAM,GAAG,SAAS,iDAEzB,OAqBF,CAAC;AAuDF,MAAM,WAAW,0BAA0B;IACzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AASD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,GACb,0BAA0B,CAq6B5B"}
+{"version":3,"file":"websocketServer.d.ts","sourceRoot":"","sources":["../src/websocketServer.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,MAAM,CAAC;AAgIpD,eAAO,MAAM,wBAAwB,WAC3B,MAAM,GAAG,SAAS,iDAEzB,OAqBF,CAAC;AAuDF,MAAM,WAAW,0BAA0B;IACzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AASD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,GACb,0BAA0B,CAkjC5B"}