libre-webui 0.25.0 → 0.27.0

package/backend/dist/services/securityAuditService.js

@@ -35,6 +35,7 @@ import { createHash, randomUUID } from 'node:crypto';
 import { getPersistence } from '../persistence/index.js';
 import { encryptionService } from './encryptionService.js';
 import { createLogger } from '../utils/logger.js';
+import { currentLogContext } from '../observability/requestContext.js';
 const logger = createLogger('services:security-audit');
 const SECRET_KEY_PATTERN = /pass(word)?|secret|token|key|authorization|cookie|credential|bearer|jwt/i;
 const MAX_DETAIL_STRING = 256;
@@ -109,7 +110,7 @@ export const buildAuditEvent = (input) => ({
     target_type: input.targetType ?? null,
     target_id: input.targetId ?? null,
     result: input.result,
-    request_id: input.requestId ?? null,
+    request_id: input.requestId ?? currentLogContext()?.requestId ?? null,
     ip_hash: input.ipHash ?? null,
     details: redactAuditDetails(input.details),
 });

package/backend/dist/services/securityAuditService.js.map

@@ -1 +1 @@
-{"version":3,"file":"securityAuditService.js","sourceRoot":"","sources":["../../src/services/securityAuditService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAMzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,yBAAyB,CAAC,CAAC;AAgBvD,MAAM,kBAAkB,GACtB,0EAA0E,CAAC;AAC7E,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B,MAAM,4BAA4B,GAAG,GAAG,CAAC;AACzC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,IAAI,gBAAgB,GAAG,CAAC,CAAC;AAEzB,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAW,EAAE;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3E,MAAM,IAAI,GACR,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QACnC,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,4BAA4B,CAAC;IACnC,OAAO,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,KAAc,EAAE,KAAa,EAAW,EAAE;IAC7D,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,MAAM,GAAG,iBAAiB;YACrC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,GAAG;YACzC,CAAC,CAAC,KAAK,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,KAAK,IAAI,gBAAgB;QAAE,OAAO,aAAa,CAAC;IACpD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAA4B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAe,CAAC,EAAE,CAAC;YAC1D,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC3C,QAAQ,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,OAA4C,EAC7B,EAAE;IACjB,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACpD,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,gBAAgB,EAAE,CAAC;YAC7D,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,sEAAsE;AACtE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,EAAsB,EAAiB,EAAE;IACpE,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACpE,CAAC,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,KAA8B,EACE,EAAE,CAAC,CAAC;IACpC,EAAE,EAAE,UAAU,EAAE;IAChB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;IACvB,aAAa,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;IACxC,UAAU,EAAE,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;IACzE,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,WAAW,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;IACrC,SAAS,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;IACjC,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,UAAU,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;IACnC,OAAO,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;IAC7B,OAAO,EAAE,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC;CAC3C,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,KAAK,IAAmB,EAAE;IACvD,gBAAgB,IAAI,CAAC,CAAC;IACtB,IAAI,gBAAgB,GAAG,oBAAoB;QAAE,OAAO;IACpD,gBAAgB,GAAG,CAAC,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CACxD,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,EAAE,CAChC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACnC,KAA8B,EACf,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAClD,eAAe,CAAC,KAAK,CAAC,CACvB,CAAC;QACF,MAAM,sBAAsB,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE;YACpD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK;SACN,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EAAE,KAQtC,EAA6C,EAAE;IAC9C,MAAM,WAAW,GAAG,cAAc,CAAC,iBAAiB,CAAC,CAAC;IACtD,MAAM,OAAO,GAAuB;QAClC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC;KACtD,CAAC;IACF,OAAO,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAChE,CAAC,CAAC"}
+{"version":3,"file":"securityAuditService.js","sourceRoot":"","sources":["../../src/services/securityAuditService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAMzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAEvE,MAAM,MAAM,GAAG,YAAY,CAAC,yBAAyB,CAAC,CAAC;AAgBvD,MAAM,kBAAkB,GACtB,0EAA0E,CAAC;AAC7E,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B,MAAM,4BAA4B,GAAG,GAAG,CAAC;AACzC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,IAAI,gBAAgB,GAAG,CAAC,CAAC;AAEzB,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAW,EAAE;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3E,MAAM,IAAI,GACR,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QACnC,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,4BAA4B,CAAC;IACnC,OAAO,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,KAAc,EAAE,KAAa,EAAW,EAAE;IAC7D,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,MAAM,GAAG,iBAAiB;YACrC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,GAAG;YACzC,CAAC,CAAC,KAAK,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,KAAK,IAAI,gBAAgB;QAAE,OAAO,aAAa,CAAC;IACpD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAA4B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAe,CAAC,EAAE,CAAC;YAC1D,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC3C,QAAQ,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,OAA4C,EAC7B,EAAE;IACjB,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACpD,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,gBAAgB,EAAE,CAAC;YAC7D,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,sEAAsE;AACtE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,EAAsB,EAAiB,EAAE;IACpE,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACpE,CAAC,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,KAA8B,EACE,EAAE,CAAC,CAAC;IACpC,EAAE,EAAE,UAAU,EAAE;IAChB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;IACvB,aAAa,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;IACxC,UAAU,EAAE,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;IACzE,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,WAAW,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;IACrC,SAAS,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;IACjC,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,UAAU,EAAE,KAAK,CAAC,SAAS,IAAI,iBAAiB,EAAE,EAAE,SAAS,IAAI,IAAI;IACrE,OAAO,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;IAC7B,OAAO,EAAE,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC;CAC3C,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,KAAK,IAAmB,EAAE;IACvD,gBAAgB,IAAI,CAAC,CAAC;IACtB,IAAI,gBAAgB,GAAG,oBAAoB;QAAE,OAAO;IACpD,gBAAgB,GAAG,CAAC,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CACxD,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,EAAE,CAChC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACnC,KAA8B,EACf,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAClD,eAAe,CAAC,KAAK,CAAC,CACvB,CAAC;QACF,MAAM,sBAAsB,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE;YACpD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK;SACN,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EAAE,KAQtC,EAA6C,EAAE;IAC9C,MAAM,WAAW,GAAG,cAAc,CAAC,iBAAiB,CAAC,CAAC;IACtD,MAAM,OAAO,GAAuB;QAClC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC;KACtD,CAAC;IACF,OAAO,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAChE,CAAC,CAAC"}

package/backend/dist/services/sharedResourceAccess.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Shared helpers for the "shared with me" access pattern (SHARE-01).
+ *
+ * Every shareable surface resolves access the same way: the owner always
+ * passes, anyone else needs a live grant, and the surfaced metadata
+ * collapses `admin` down to `write` because resource deletion stays an
+ * owner-only power.
+ */
+import { type AuthzActor, type ShareableResourceType } from './authorizationService.js';
+export interface SharedResourceMeta {
+    /** Owner of a resource shared with the actor. */
+    ownerUserId: string;
+    permission: 'read' | 'write';
+}
+/**
+ * Shared-access metadata when the actor may perform `action`, or null.
+ * Never call for resources the actor owns; owners carry no `shared` meta.
+ */
+export declare const sharedMetaFor: (actor: AuthzActor, type: ShareableResourceType, id: string, ownerUserId: string, action?: 'read' | 'write') => Promise<SharedResourceMeta | null>;
+/**
+ * Distinct resource ids of one type granted to the actor directly or through
+ * a group, excluding any ids the caller already holds.
+ */
+export declare const grantedResourceIdsFor: (actor: AuthzActor, type: ShareableResourceType, excludeIds?: ReadonlySet<string>) => Promise<string[]>;
+//# sourceMappingURL=sharedResourceAccess.d.ts.map

package/backend/dist/services/sharedResourceAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sharedResourceAccess.d.ts","sourceRoot":"","sources":["../../src/services/sharedResourceAccess.ts"],"names":[],"mappings":"AAiBA;;;;;;;GAOG;AAEH,OAAO,EAEL,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC3B,MAAM,2BAA2B,CAAC;AAGnC,MAAM,WAAW,kBAAkB;IACjC,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;CAC9B;AAED;;;GAGG;AACH,eAAO,MAAM,aAAa,UACjB,UAAU,QACX,qBAAqB,MACvB,MAAM,eACG,MAAM,WACX,MAAM,GAAG,OAAO,KACvB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAQnC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,UACzB,UAAU,QACX,qBAAqB,eACf,WAAW,CAAC,MAAM,CAAC,KAC9B,OAAO,CAAC,MAAM,EAAE,CAWlB,CAAC"}

package/backend/dist/services/sharedResourceAccess.js

@@ -0,0 +1,59 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Shared helpers for the "shared with me" access pattern (SHARE-01).
+ *
+ * Every shareable surface resolves access the same way: the owner always
+ * passes, anyone else needs a live grant, and the surfaced metadata
+ * collapses `admin` down to `write` because resource deletion stays an
+ * owner-only power.
+ */
+import { authorize, } from './authorizationService.js';
+import { listGrantsForActor } from './resourceGrantService.js';
+/**
+ * Shared-access metadata when the actor may perform `action`, or null.
+ * Never call for resources the actor owns; owners carry no `shared` meta.
+ */
+export const sharedMetaFor = async (actor, type, id, ownerUserId, action = 'read') => {
+    const decision = await authorize(actor, action, { type, id, ownerUserId });
+    if (!decision.allowed)
+        return null;
+    const writable = await authorize(actor, 'write', { type, id, ownerUserId });
+    return {
+        ownerUserId,
+        permission: writable.allowed ? 'write' : 'read',
+    };
+};
+/**
+ * Distinct resource ids of one type granted to the actor directly or through
+ * a group, excluding any ids the caller already holds.
+ */
+export const grantedResourceIdsFor = async (actor, type, excludeIds = new Set()) => {
+    const grants = await listGrantsForActor(actor);
+    const ids = [];
+    const seen = new Set(excludeIds);
+    for (const grant of grants) {
+        if (grant.resource_type !== type)
+            continue;
+        if (seen.has(grant.resource_id))
+            continue;
+        seen.add(grant.resource_id);
+        ids.push(grant.resource_id);
+    }
+    return ids;
+};
+//# sourceMappingURL=sharedResourceAccess.js.map

package/backend/dist/services/sharedResourceAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sharedResourceAccess.js","sourceRoot":"","sources":["../../src/services/sharedResourceAccess.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;GAOG;AAEH,OAAO,EACL,SAAS,GAGV,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAQ/D;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAChC,KAAiB,EACjB,IAA2B,EAC3B,EAAU,EACV,WAAmB,EACnB,MAAM,GAAqB,MAAM,EACG,EAAE;IACtC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5E,OAAO;QACL,WAAW;QACX,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;KAChD,CAAC;AACJ,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACxC,KAAiB,EACjB,IAA2B,EAC3B,UAAU,GAAwB,IAAI,GAAG,EAAE,EACxB,EAAE;IACrB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI;YAAE,SAAS;QAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;YAAE,SAAS;QAC1C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC"}

package/backend/dist/services/skillService.d.ts

@@ -0,0 +1,137 @@
+import { type AuthzActor } from './authorizationService.js';
+import { type SharedResourceMeta } from './sharedResourceAccess.js';
+export interface Skill {
+    id: string;
+    slug: string;
+    name: string;
+    description: string;
+    instructions: string;
+    enabled: boolean;
+    version: number;
+    createdAt: number;
+    updatedAt: number;
+    ownerUserId: string;
+}
+export interface SkillInput {
+    slug?: unknown;
+    name?: unknown;
+    description?: unknown;
+    instructions?: unknown;
+    enabled?: unknown;
+}
+export interface SkillRevision {
+    version: number;
+    instructions: string;
+    createdAt: number;
+}
+export interface SkillManifest {
+    slug: string;
+    name: string;
+    description: string;
+}
+export interface SkillFile {
+    path: string;
+    content: string;
+    size: number;
+    createdAt: number;
+    updatedAt: number;
+}
+export interface SkillFileSummary {
+    path: string;
+    size: number;
+    updatedAt: number;
+}
+export declare const SKILL_EXPORT_FORMAT = "libre-skill.v1";
+export interface SkillExport {
+    slug: string;
+    name: string;
+    description: string;
+    instructions: string;
+    enabled: boolean;
+    version: number;
+    exportedAt: number;
+    format: typeof SKILL_EXPORT_FORMAT;
+    files?: {
+        path: string;
+        content: string;
+    }[];
+}
+export declare const listSkills: (userId: string) => Promise<Skill[]>;
+export interface SkillWithAccess extends Skill {
+    shared?: SharedResourceMeta;
+}
+/** Own skills followed by skills shared with the actor. */
+export declare const listSkillsWithShared: (actor: AuthzActor) => Promise<SkillWithAccess[]>;
+export declare const getSkill: (skillId: string, actor: AuthzActor) => Promise<Skill | null>;
+export declare const getSkillBySlug: (userId: string, slug: string) => Promise<Skill | null>;
+export declare const createSkill: (userId: string, input: SkillInput) => Promise<Skill>;
+export declare const updateSkill: (skillId: string, actor: AuthzActor, input: SkillInput) => Promise<Skill | null>;
+export declare const deleteSkill: (skillId: string, userId: string) => Promise<boolean>;
+export declare const listVersions: (skillId: string, actor: AuthzActor) => Promise<SkillRevision[] | null>;
+/** A rollback replays an archived revision forward as the next version. */
+export declare const rollbackSkill: (skillId: string, actor: AuthzActor, version: number) => Promise<Skill | null>;
+export declare const sanitizeSkillFilePath: (value: unknown) => string;
+export declare const listSkillFiles: (skillId: string, actor: AuthzActor) => Promise<SkillFileSummary[] | null>;
+export declare const getSkillFile: (skillId: string, actor: AuthzActor, path: unknown) => Promise<SkillFile | null>;
+export declare const putSkillFile: (skillId: string, actor: AuthzActor, input: {
+    path?: unknown;
+    content?: unknown;
+}) => Promise<SkillFileSummary | null>;
+export declare const deleteSkillFile: (skillId: string, actor: AuthzActor, path: unknown) => Promise<boolean | null>;
+/**
+ * The SKILL.md interchange form: YAML-style frontmatter carrying the
+ * manifest fields, followed by the Markdown instructions verbatim.
+ */
+export declare const skillToMarkdown: (skill: {
+    slug: string;
+    name: string;
+    description: string;
+    instructions: string;
+}) => string;
+/** Parse a SKILL.md document (frontmatter + body) into a skill input. */
+export declare const skillFromMarkdown: (markdown: string) => SkillInput;
+export declare const exportSkill: (skillId: string, actor: AuthzActor) => Promise<(SkillExport & {
+    markdown: string;
+}) | null>;
+export declare const importSkill: (userId: string, payload: unknown, options?: {
+    overwriteSlug?: boolean;
+}) => Promise<Skill>;
+/** The lazy manifest line: what the model sees before loading instructions. */
+export declare const skillManifest: (skill: Skill) => SkillManifest;
+/**
+ * Accepted source spellings, resolved to candidate SKILL.md URLs:
+ * - a direct URL to a Markdown document,
+ * - `owner/repo` or `owner/repo/skill` shorthand,
+ * - a skills.sh listing URL,
+ * - a github.com repo, tree, or blob URL.
+ */
+export declare const resolveSkillSourceCandidates: (rawSource: string) => string[];
+/** Import one skill from a remote SKILL.md source. */
+export declare const importSkillFromUrl: (userId: string, source: string, options?: {
+    overwriteSlug?: boolean;
+    apiBase?: string;
+}) => Promise<Skill>;
+export interface RemoteSkillFolder {
+    owner: string;
+    repo: string;
+    ref: string;
+    dir: string;
+}
+/**
+ * Recognize a raw.githubusercontent.com SKILL.md URL whose document sits in
+ * a subdirectory — the only shape that can carry companion files.
+ */
+export declare const parseRawGitHubSkillUrl: (candidate: string) => RemoteSkillFolder | null;
+/**
+ * List and download the text files that live next to a remote SKILL.md.
+ * Directories are walked two levels deep; binaries, oversized files, and
+ * anything beyond the per-skill budget are skipped rather than failing the
+ * import.
+ */
+export declare const fetchSkillCompanionFiles: (folder: RemoteSkillFolder, options?: {
+    apiBase?: string;
+}) => Promise<{
+    path: string;
+    content: string;
+}[]>;
+//# sourceMappingURL=skillService.d.ts.map

package/backend/dist/services/skillService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skillService.d.ts","sourceRoot":"","sources":["../../src/services/skillService.ts"],"names":[],"mappings":"AAoCA,OAAO,EAGL,KAAK,UAAU,EAChB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,2BAA2B,CAAC;AAgBnC,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AAEpD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,OAAO,mBAAmB,CAAC;IACnC,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC7C;AA6JD,eAAO,MAAM,UAAU,WAAkB,MAAM,KAAG,OAAO,CAAC,KAAK,EAAE,CAGhE,CAAC;AAEF,MAAM,WAAW,eAAgB,SAAQ,KAAK;IAC5C,MAAM,CAAC,EAAE,kBAAkB,CAAC;CAC7B;AAED,2DAA2D;AAC3D,eAAO,MAAM,oBAAoB,UACxB,UAAU,KAChB,OAAO,CAAC,eAAe,EAAE,CAmB3B,CAAC;AAEF,eAAO,MAAM,QAAQ,YACV,MAAM,SACR,UAAU,KAChB,OAAO,CAAC,KAAK,GAAG,IAAI,CAGtB,CAAC;AAEF,eAAO,MAAM,cAAc,WACjB,MAAM,QACR,MAAM,KACX,OAAO,CAAC,KAAK,GAAG,IAAI,CAGtB,CAAC;AAEF,eAAO,MAAM,WAAW,WACd,MAAM,SACP,UAAU,KAChB,OAAO,CAAC,KAAK,CAsBf,CAAC;AAEF,eAAO,MAAM,WAAW,YACb,MAAM,SACR,UAAU,SACV,UAAU,KAChB,OAAO,CAAC,KAAK,GAAG,IAAI,CAyCtB,CAAC;AAEF,eAAO,MAAM,WAAW,YACb,MAAM,UACP,MAAM,KACb,OAAO,CAAC,OAAO,CAajB,CAAC;AAEF,eAAO,MAAM,YAAY,YACd,MAAM,SACR,UAAU,KAChB,OAAO,CAAC,aAAa,EAAE,GAAG,IAAI,CAShC,CAAC;AAEF,2EAA2E;AAC3E,eAAO,MAAM,aAAa,YACf,MAAM,SACR,UAAU,WACR,MAAM,KACd,OAAO,CAAC,KAAK,GAAG,IAAI,CA+BtB,CAAC;AAUF,eAAO,MAAM,qBAAqB,UAAW,OAAO,KAAG,MAiCtD,CAAC;AA2DF,eAAO,MAAM,cAAc,YAChB,MAAM,SACR,UAAU,KAChB,OAAO,CAAC,gBAAgB,EAAE,GAAG,IAAI,CAInC,CAAC;AAEF,eAAO,MAAM,YAAY,YACd,MAAM,SACR,UAAU,QACX,OAAO,KACZ,OAAO,CAAC,SAAS,GAAG,IAAI,CAK1B,CAAC;AAEF,eAAO,MAAM,YAAY,YACd,MAAM,SACR,UAAU,SACV;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,KAC3C,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAyCjC,CAAC;AAEF,eAAO,MAAM,eAAe,YACjB,MAAM,SACR,UAAU,QACX,OAAO,KACZ,OAAO,CAAC,OAAO,GAAG,IAAI,CAkBxB,CAAC;AAgDF;;;GAGG;AACH,eAAO,MAAM,eAAe,UAAW;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB,KAAG,MAYH,CAAC;AAIF,yEAAyE;AACzE,eAAO,MAAM,iBAAiB,aAAc,MAAM,KAAG,UA8BpD,CAAC;AAEF,eAAO,MAAM,WAAW,YACb,MAAM,SACR,UAAU,KAChB,OAAO,CAAC,CAAC,WAAW,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,IAAI,CAgBrD,CAAC;AAEF,eAAO,MAAM,WAAW,WACd,MAAM,WACL,OAAO,YACP;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,KACnC,OAAO,CAAC,KAAK,CAyDf,CAAC;AAEF,+EAA+E;AAC/E,eAAO,MAAM,aAAa,UAAW,KAAK,KAAG,aAI3C,CAAC;AAoCH;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,cAAe,MAAM,KAAG,MAAM,EA6DtE,CAAC;AAEF,sDAAsD;AACtD,eAAO,MAAM,kBAAkB,WACrB,MAAM,UACN,MAAM,YACL;IAAE,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,KACrD,OAAO,CAAC,KAAK,CAwEf,CAAC;AA8CF,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;GAGG;AACH,eAAO,MAAM,sBAAsB,cACtB,MAAM,KAChB,iBAAiB,GAAG,IAatB,CAAC;AAgBF;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,WAC3B,iBAAiB,YAChB;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,KAC5B,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CA0D7C,CAAC"}