libre-webui 0.25.0 → 0.27.0

package/backend/dist/utils/webauthn.js

@@ -0,0 +1,294 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Minimal WebAuthn (passkey) server-side verification on node:crypto.
+ *
+ * Scope is deliberate: attestation is accepted as `none` (the statement is
+ * not evaluated — standard for consumer passkeys), and the two algorithms
+ * browsers actually negotiate are supported: ES256 (COSE -7) and EdDSA
+ * (COSE -8). The bounded CBOR reader below decodes only the subset WebAuthn
+ * structures use: unsigned/negative integers, byte/text strings, arrays,
+ * and maps.
+ */
+import { createHash, createPublicKey, verify as cryptoVerify, } from 'node:crypto';
+export class WebAuthnError extends Error {
+}
+const MAX_CBOR_ITEMS = 1024;
+const readCbor = (buffer, offset, depth) => {
+    if (depth > 8)
+        throw new WebAuthnError('CBOR nesting too deep');
+    if (offset >= buffer.length)
+        throw new WebAuthnError('CBOR truncated');
+    const initial = buffer[offset];
+    const majorType = initial >> 5;
+    const additional = initial & 0x1f;
+    let length = 0;
+    let headerBytes = 1;
+    if (additional < 24) {
+        length = additional;
+    }
+    else if (additional === 24) {
+        if (offset + 2 > buffer.length)
+            throw new WebAuthnError('CBOR truncated');
+        length = buffer[offset + 1];
+        headerBytes = 2;
+    }
+    else if (additional === 25) {
+        if (offset + 3 > buffer.length)
+            throw new WebAuthnError('CBOR truncated');
+        length = buffer.readUInt16BE(offset + 1);
+        headerBytes = 3;
+    }
+    else if (additional === 26) {
+        if (offset + 5 > buffer.length)
+            throw new WebAuthnError('CBOR truncated');
+        length = buffer.readUInt32BE(offset + 1);
+        headerBytes = 5;
+    }
+    else if (additional === 27) {
+        if (offset + 9 > buffer.length)
+            throw new WebAuthnError('CBOR truncated');
+        const big = buffer.readBigUInt64BE(offset + 1);
+        if (big > BigInt(Number.MAX_SAFE_INTEGER)) {
+            throw new WebAuthnError('CBOR value too large');
+        }
+        length = Number(big);
+        headerBytes = 9;
+    }
+    else {
+        throw new WebAuthnError('Unsupported CBOR additional info');
+    }
+    switch (majorType) {
+        case 0:
+            return { value: length, bytesRead: headerBytes };
+        case 1:
+            return { value: -1 - length, bytesRead: headerBytes };
+        case 2: {
+            const end = offset + headerBytes + length;
+            if (end > buffer.length)
+                throw new WebAuthnError('CBOR truncated');
+            return {
+                value: buffer.subarray(offset + headerBytes, end),
+                bytesRead: headerBytes + length,
+            };
+        }
+        case 3: {
+            const end = offset + headerBytes + length;
+            if (end > buffer.length)
+                throw new WebAuthnError('CBOR truncated');
+            return {
+                value: buffer.subarray(offset + headerBytes, end).toString('utf8'),
+                bytesRead: headerBytes + length,
+            };
+        }
+        case 4: {
+            if (length > MAX_CBOR_ITEMS)
+                throw new WebAuthnError('CBOR array too large');
+            const items = [];
+            let cursor = offset + headerBytes;
+            for (let index = 0; index < length; index++) {
+                const item = readCbor(buffer, cursor, depth + 1);
+                items.push(item.value);
+                cursor += item.bytesRead;
+            }
+            return { value: items, bytesRead: cursor - offset };
+        }
+        case 5: {
+            if (length > MAX_CBOR_ITEMS)
+                throw new WebAuthnError('CBOR map too large');
+            const map = new Map();
+            let cursor = offset + headerBytes;
+            for (let index = 0; index < length; index++) {
+                const key = readCbor(buffer, cursor, depth + 1);
+                cursor += key.bytesRead;
+                const value = readCbor(buffer, cursor, depth + 1);
+                cursor += value.bytesRead;
+                if (typeof key.value !== 'number' && typeof key.value !== 'string') {
+                    throw new WebAuthnError('Unsupported CBOR map key');
+                }
+                map.set(key.value, value.value);
+            }
+            return { value: map, bytesRead: cursor - offset };
+        }
+        case 7: {
+            if (additional === 20)
+                return { value: false, bytesRead: 1 };
+            if (additional === 21)
+                return { value: true, bytesRead: 1 };
+            if (additional === 22)
+                return { value: null, bytesRead: 1 };
+            throw new WebAuthnError('Unsupported CBOR simple value');
+        }
+        default:
+            throw new WebAuthnError('Unsupported CBOR major type');
+    }
+};
+/** Decode one CBOR item and report how many bytes it consumed. */
+export const decodeCbor = (buffer) => readCbor(buffer, 0, 0);
+export const parseAuthenticatorData = (authData) => {
+    if (authData.length < 37) {
+        throw new WebAuthnError('Authenticator data too short');
+    }
+    const rpIdHash = authData.subarray(0, 32);
+    const flags = authData[32];
+    const signCount = authData.readUInt32BE(33);
+    const attestedCredentialIncluded = (flags & 0x40) !== 0;
+    let credentialId = null;
+    let publicKey = null;
+    if (attestedCredentialIncluded) {
+        if (authData.length < 55) {
+            throw new WebAuthnError('Attested credential data too short');
+        }
+        const credentialIdLength = authData.readUInt16BE(53);
+        if (credentialIdLength === 0 || credentialIdLength > 1023) {
+            throw new WebAuthnError('Invalid credential id length');
+        }
+        const credentialIdEnd = 55 + credentialIdLength;
+        if (authData.length < credentialIdEnd) {
+            throw new WebAuthnError('Attested credential data truncated');
+        }
+        credentialId = authData.subarray(55, credentialIdEnd);
+        const key = readCbor(authData, credentialIdEnd, 0);
+        if (!(key.value instanceof Map)) {
+            throw new WebAuthnError('COSE public key is not a map');
+        }
+        publicKey = key.value;
+    }
+    return {
+        rpIdHash,
+        userPresent: (flags & 0x01) !== 0,
+        userVerified: (flags & 0x04) !== 0,
+        signCount,
+        credentialId,
+        publicKey,
+    };
+};
+const asBuffer = (value, name) => {
+    if (!Buffer.isBuffer(value)) {
+        throw new WebAuthnError(`COSE key is missing ${name}`);
+    }
+    return value;
+};
+/** Extract the supported key material from a COSE public-key map. */
+export const extractPublicKey = (cose) => {
+    const kty = cose.get(1);
+    const alg = cose.get(3);
+    if (alg === -7) {
+        if (kty !== 2 || cose.get(-1) !== 1) {
+            throw new WebAuthnError('ES256 requires an EC2 P-256 key');
+        }
+        const x = asBuffer(cose.get(-2), 'x');
+        const y = asBuffer(cose.get(-3), 'y');
+        if (x.length !== 32 || y.length !== 32) {
+            throw new WebAuthnError('Invalid P-256 coordinate length');
+        }
+        return {
+            alg: -7,
+            x: x.toString('base64url'),
+            y: y.toString('base64url'),
+        };
+    }
+    if (alg === -8) {
+        if (kty !== 1 || cose.get(-1) !== 6) {
+            throw new WebAuthnError('EdDSA requires an Ed25519 key');
+        }
+        const x = asBuffer(cose.get(-2), 'x');
+        if (x.length !== 32) {
+            throw new WebAuthnError('Invalid Ed25519 key length');
+        }
+        return { alg: -8, x: x.toString('base64url') };
+    }
+    throw new WebAuthnError('Unsupported credential algorithm');
+};
+const publicKeyObject = (stored) => {
+    if (stored.alg === -7) {
+        return createPublicKey({
+            key: { kty: 'EC', crv: 'P-256', x: stored.x, y: stored.y },
+            format: 'jwk',
+        });
+    }
+    if (stored.alg === -8) {
+        return createPublicKey({
+            key: { kty: 'OKP', crv: 'Ed25519', x: stored.x },
+            format: 'jwk',
+        });
+    }
+    throw new WebAuthnError('Unsupported credential algorithm');
+};
+/** Verify a WebAuthn assertion signature over authData || sha256(clientData). */
+export const verifyAssertionSignature = (stored, authData, clientDataJson, signature) => {
+    const signedData = Buffer.concat([
+        authData,
+        createHash('sha256').update(clientDataJson).digest(),
+    ]);
+    const key = publicKeyObject(stored);
+    try {
+        if (stored.alg === -7) {
+            return cryptoVerify('sha256', signedData, { key, dsaEncoding: 'der' }, signature);
+        }
+        return cryptoVerify(null, signedData, key, signature);
+    }
+    catch {
+        return false;
+    }
+};
+export const parseClientDataJson = (clientDataJson) => {
+    let parsed;
+    try {
+        parsed = JSON.parse(clientDataJson.toString('utf8'));
+    }
+    catch {
+        throw new WebAuthnError('clientDataJSON is not valid JSON');
+    }
+    const record = parsed;
+    if (typeof record.type !== 'string' ||
+        typeof record.challenge !== 'string' ||
+        typeof record.origin !== 'string') {
+        throw new WebAuthnError('clientDataJSON is missing required fields');
+    }
+    return {
+        type: record.type,
+        challenge: record.challenge,
+        origin: record.origin,
+    };
+};
+/** The registrable-domain rule: the origin's hostname must equal the RP id
+ * or be a subdomain of it. */
+export const originMatchesRpId = (origin, rpId) => {
+    let hostname;
+    try {
+        hostname = new URL(origin).hostname;
+    }
+    catch {
+        return false;
+    }
+    return hostname === rpId || hostname.endsWith(`.${rpId}`);
+};
+/** Parse an attestation object far enough to reach authData ('none' policy). */
+export const parseAttestationObject = (attestationObject) => {
+    const decoded = decodeCbor(attestationObject);
+    if (!(decoded.value instanceof Map)) {
+        throw new WebAuthnError('Attestation object is not a CBOR map');
+    }
+    const authData = decoded.value.get('authData');
+    if (!Buffer.isBuffer(authData)) {
+        throw new WebAuthnError('Attestation object is missing authData');
+    }
+    return authData;
+};
+export const sha256 = (input) => createHash('sha256').update(input).digest();
+//# sourceMappingURL=webauthn.js.map

package/backend/dist/utils/webauthn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthn.js","sourceRoot":"","sources":["../../src/utils/webauthn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;;GASG;AAEH,OAAO,EACL,UAAU,EACV,eAAe,EACf,MAAM,IAAI,YAAY,GACvB,MAAM,aAAa,CAAC;AAErB,MAAM,OAAO,aAAc,SAAQ,KAAK;CAAG;AAkB3C,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,MAAc,EAAE,KAAa,EAAY,EAAE;IAC3E,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,uBAAuB,CAAC,CAAC;IAChE,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,aAAa,CAAC,gBAAgB,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,OAAO,GAAG,IAAI,CAAC;IAElC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,UAAU,GAAG,EAAE,EAAE,CAAC;QACpB,MAAM,GAAG,UAAU,CAAC;IACtB,CAAC;SAAM,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QAC7B,IAAI,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAC1E,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC5B,WAAW,GAAG,CAAC,CAAC;IAClB,CAAC;SAAM,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QAC7B,IAAI,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAC1E,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzC,WAAW,GAAG,CAAC,CAAC;IAClB,CAAC;SAAM,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QAC7B,IAAI,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAC1E,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzC,WAAW,GAAG,CAAC,CAAC;IAClB,CAAC;SAAM,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QAC7B,IAAI,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/C,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,aAAa,CAAC,sBAAsB,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,WAAW,GAAG,CAAC,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,aAAa,CAAC,kCAAkC,CAAC,CAAC;IAC9D,CAAC;IAED,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,CAAC;YACJ,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;QACnD,KAAK,CAAC;YACJ,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;QACxD,KAAK,CAAC,EAAE,CAAC;YACP,MAAM,GAAG,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;YAC1C,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM;gBAAE,MAAM,IAAI,aAAa,CAAC,gBAAgB,CAAC,CAAC;YACnE,OAAO;gBACL,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,WAAW,EAAE,GAAG,CAAC;gBACjD,SAAS,EAAE,WAAW,GAAG,MAAM;aAChC,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,EAAE,CAAC;YACP,MAAM,GAAG,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;YAC1C,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM;gBAAE,MAAM,IAAI,aAAa,CAAC,gBAAgB,CAAC,CAAC;YACnE,OAAO;gBACL,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,WAAW,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAClE,SAAS,EAAE,WAAW,GAAG,MAAM;aAChC,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,EAAE,CAAC;YACP,IAAI,MAAM,GAAG,cAAc;gBACzB,MAAM,IAAI,aAAa,CAAC,sBAAsB,CAAC,CAAC;YAClD,MAAM,KAAK,GAAgB,EAAE,CAAC;YAC9B,IAAI,MAAM,GAAG,MAAM,GAAG,WAAW,CAAC;YAClC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACjD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACvB,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC;YAC3B,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACtD,CAAC;QACD,KAAK,CAAC,EAAE,CAAC;YACP,IAAI,MAAM,GAAG,cAAc;gBACzB,MAAM,IAAI,aAAa,CAAC,oBAAoB,CAAC,CAAC;YAChD,MAAM,GAAG,GAAG,IAAI,GAAG,EAA8B,CAAC;YAClD,IAAI,MAAM,GAAG,MAAM,GAAG,WAAW,CAAC;YAClC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC5C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAChD,MAAM,IAAI,GAAG,CAAC,SAAS,CAAC;gBACxB,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAClD,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;gBAC1B,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACnE,MAAM,IAAI,aAAa,CAAC,0BAA0B,CAAC,CAAC;gBACtD,CAAC;gBACD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACpD,CAAC;QACD,KAAK,CAAC,EAAE,CAAC;YACP,IAAI,UAAU,KAAK,EAAE;gBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;YAC7D,IAAI,UAAU,KAAK,EAAE;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;YAC5D,IAAI,UAAU,KAAK,EAAE;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,aAAa,CAAC,+BAA+B,CAAC,CAAC;QAC3D,CAAC;QACD;YACE,MAAM,IAAI,aAAa,CAAC,6BAA6B,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC,CAAC;AAEF,kEAAkE;AAClE,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,MAAc,EAC2B,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAcrE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,QAAgB,EACS,EAAE;IAC3B,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,aAAa,CAAC,8BAA8B,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,SAAS,GAAG,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC5C,MAAM,0BAA0B,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAExD,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,SAAS,GAA2C,IAAI,CAAC;IAC7D,IAAI,0BAA0B,EAAE,CAAC;QAC/B,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,aAAa,CAAC,oCAAoC,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACrD,IAAI,kBAAkB,KAAK,CAAC,IAAI,kBAAkB,GAAG,IAAI,EAAE,CAAC;YAC1D,MAAM,IAAI,aAAa,CAAC,8BAA8B,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,eAAe,GAAG,EAAE,GAAG,kBAAkB,CAAC;QAChD,IAAI,QAAQ,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YACtC,MAAM,IAAI,aAAa,CAAC,oCAAoC,CAAC,CAAC;QAChE,CAAC;QACD,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,YAAY,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,aAAa,CAAC,8BAA8B,CAAC,CAAC;QAC1D,CAAC;QACD,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC;IACxB,CAAC;IAED,OAAO;QACL,QAAQ;QACR,WAAW,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACjC,YAAY,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAClC,SAAS;QACT,YAAY;QACZ,SAAS;KACV,CAAC;AACJ,CAAC,CAAC;AAYF,MAAM,QAAQ,GAAG,CAAC,KAA4B,EAAE,IAAY,EAAU,EAAE;IACtE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,aAAa,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,qEAAqE;AACrE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,IAAqC,EACpB,EAAE;IACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QACf,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,aAAa,CAAC,iCAAiC,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACvC,MAAM,IAAI,aAAa,CAAC,iCAAiC,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO;YACL,GAAG,EAAE,CAAC,CAAC;YACP,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC1B,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;SAC3B,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QACf,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,aAAa,CAAC,+BAA+B,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,aAAa,CAAC,4BAA4B,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,IAAI,aAAa,CAAC,kCAAkC,CAAC,CAAC;AAC9D,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,MAAuB,EAAE,EAAE;IAClD,IAAI,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO,eAAe,CAAC;YACrB,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE;YAC1D,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO,eAAe,CAAC;YACrB,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE;YAChD,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,aAAa,CAAC,kCAAkC,CAAC,CAAC;AAC9D,CAAC,CAAC;AAEF,iFAAiF;AACjF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,MAAuB,EACvB,QAAgB,EAChB,cAAsB,EACtB,SAAiB,EACR,EAAE;IACX,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;QAC/B,QAAQ;QACR,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,EAAE;KACrD,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;YACtB,OAAO,YAAY,CACjB,QAAQ,EACR,UAAU,EACV,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,EAC3B,SAAS,CACV,CAAC;QACJ,CAAC;QACD,OAAO,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAUF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,cAAsB,EACJ,EAAE;IACpB,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC,kCAAkC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,IACE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAC/B,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QACpC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EACjC,CAAC;QACD,MAAM,IAAI,aAAa,CAAC,2CAA2C,CAAC,CAAC;IACvE,CAAC;IACD,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC,CAAC;AAEF;8BAC8B;AAC9B,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAc,EAAE,IAAY,EAAW,EAAE;IACzE,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AAC5D,CAAC,CAAC;AAEF,gFAAgF;AAChF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,iBAAyB,EAAU,EAAE;IAC1E,MAAM,OAAO,GAAG,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,YAAY,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,aAAa,CAAC,sCAAsC,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,aAAa,CAAC,wCAAwC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAU,EAAE,CACvD,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/backend/dist/utils/websocketMessages.d.ts

@@ -23,6 +23,12 @@ export declare function sendAssistantChunk(ws: WebSocketLike, data: AssistantChu
 export declare function sendAssistantComplete(ws: WebSocketLike, data: unknown): boolean;
 export declare function sendAssistantCancelled(ws: WebSocketLike, data: unknown, options?: SendOptions): boolean;
 export declare function sendToolStatus(ws: WebSocketLike, data: ToolStatusData, options?: SendOptions): boolean;
+/**
+ * A normalized chat tool event (chat.tool-call.v1 / chat.tool-result.v1 /
+ * chat.approval.v1). The same payload shapes are appended to the durable
+ * event stream in team mode.
+ */
+export declare function sendToolEvent(ws: WebSocketLike, data: unknown, options?: SendOptions): boolean;
 export declare function sendError(ws: WebSocketLike, data: unknown): boolean;
 export declare function buildAssistantFakeStreamChunks(content: string, messageId?: string, batchSize?: number): AssistantChunkData[];
 export declare function streamAssistantFakeChunks(ws: WebSocketLike, content: string, messageId?: string, delayMs?: number, signal?: AbortSignal): Promise<void>;

package/backend/dist/utils/websocketMessages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"websocketMessages.d.ts","sourceRoot":"","sources":["../../src/utils/websocketMessages.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AA6BD,wBAAgB,aAAa,CAAC,EAAE,EAAE,aAAa,GAAG,OAAO,CAIxD;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAEzE;AAED,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,kBAAkB,EACxB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAET;AAED,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,OAAO,GACZ,OAAO,CAET;AAED,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAET;AAED,wBAAgB,cAAc,CAC5B,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,cAAc,EACpB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAET;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAEnE;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,GAAE,MAAU,GACpB,kBAAkB,EAAE,CAkBtB;AAED,wBAAsB,yBAAyB,CAC7C,EAAE,EAAE,aAAa,EACjB,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,GAAE,MAAY,EACrB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAoBf"}
+{"version":3,"file":"websocketMessages.d.ts","sourceRoot":"","sources":["../../src/utils/websocketMessages.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AA8BD,wBAAgB,aAAa,CAAC,EAAE,EAAE,aAAa,GAAG,OAAO,CAIxD;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAEzE;AAED,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,kBAAkB,EACxB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAET;AAED,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,OAAO,GACZ,OAAO,CAET;AAED,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAET;AAED,wBAAgB,cAAc,CAC5B,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,cAAc,EACpB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAET;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAET;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAEnE;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,GAAE,MAAU,GACpB,kBAAkB,EAAE,CAkBtB;AAED,wBAAsB,yBAAyB,CAC7C,EAAE,EAAE,aAAa,EACjB,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,GAAE,MAAY,EACrB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAoBf"}

package/backend/dist/utils/websocketMessages.js

@@ -46,6 +46,14 @@ export function sendAssistantCancelled(ws, data, options) {
 export function sendToolStatus(ws, data, options) {
     return sendWebSocketMessage(ws, 'tool_status', data, options);
 }
+/**
+ * A normalized chat tool event (chat.tool-call.v1 / chat.tool-result.v1 /
+ * chat.approval.v1). The same payload shapes are appended to the durable
+ * event stream in team mode.
+ */
+export function sendToolEvent(ws, data, options) {
+    return sendWebSocketMessage(ws, 'tool_event', data, options);
+}
 export function sendError(ws, data) {
     return sendWebSocketMessage(ws, 'error', data);
 }

package/backend/dist/utils/websocketMessages.js.map

@@ -1 +1 @@
-{"version":3,"file":"websocketMessages.js","sourceRoot":"","sources":["../../src/utils/websocketMessages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAkCH,SAAS,oBAAoB,CAC3B,EAAiB,EACjB,IAA0B,EAC1B,IAAa,EACb,OAAO,GAAgB,EAAE;IAEzB,IAAI,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAiB;IAC7C,OAAO,oBAAoB,CAAC,EAAE,EAAE,WAAW,EAAE;QAC3C,OAAO,EAAE,0BAA0B;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAAiB,EAAE,IAAa;IAC9D,OAAO,oBAAoB,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,EAAiB,EACjB,IAAwB,EACxB,OAAqB;IAErB,OAAO,oBAAoB,CAAC,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,EAAiB,EACjB,IAAa;IAEb,OAAO,oBAAoB,CAAC,EAAE,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,EAAiB,EACjB,IAAa,EACb,OAAqB;IAErB,OAAO,oBAAoB,CAAC,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,EAAiB,EACjB,IAAoB,EACpB,OAAqB;IAErB,OAAO,oBAAoB,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,EAAiB,EAAE,IAAa;IACxD,OAAO,oBAAoB,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,OAAe,EACf,SAAkB,EAClB,SAAS,GAAW,CAAC;IAErB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAyB,EAAE,CAAC;IAExC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;QAE7C,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YAC9C,KAAK;YACL,IAAI,EAAE,MAAM;YACZ,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,EAAiB,EACjB,OAAe,EACf,SAAkB,EAClB,OAAO,GAAW,GAAG,EACrB,MAAoB;IAEpB,MAAM,MAAM,GAAG,8BAA8B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAElE,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO;QAC5B,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAE9B,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;gBAChC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC1C,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;gBAC7B,SAAS,MAAM;oBACb,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;oBAC5C,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"websocketMessages.js","sourceRoot":"","sources":["../../src/utils/websocketMessages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAmCH,SAAS,oBAAoB,CAC3B,EAAiB,EACjB,IAA0B,EAC1B,IAAa,EACb,OAAO,GAAgB,EAAE;IAEzB,IAAI,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAiB;IAC7C,OAAO,oBAAoB,CAAC,EAAE,EAAE,WAAW,EAAE;QAC3C,OAAO,EAAE,0BAA0B;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAAiB,EAAE,IAAa;IAC9D,OAAO,oBAAoB,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,EAAiB,EACjB,IAAwB,EACxB,OAAqB;IAErB,OAAO,oBAAoB,CAAC,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,EAAiB,EACjB,IAAa;IAEb,OAAO,oBAAoB,CAAC,EAAE,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,EAAiB,EACjB,IAAa,EACb,OAAqB;IAErB,OAAO,oBAAoB,CAAC,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,EAAiB,EACjB,IAAoB,EACpB,OAAqB;IAErB,OAAO,oBAAoB,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,EAAiB,EACjB,IAAa,EACb,OAAqB;IAErB,OAAO,oBAAoB,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,EAAiB,EAAE,IAAa;IACxD,OAAO,oBAAoB,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,OAAe,EACf,SAAkB,EAClB,SAAS,GAAW,CAAC;IAErB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAyB,EAAE,CAAC;IAExC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;QAE7C,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YAC9C,KAAK;YACL,IAAI,EAAE,MAAM;YACZ,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,EAAiB,EACjB,OAAe,EACf,SAAkB,EAClB,OAAO,GAAW,GAAG,EACrB,MAAoB;IAEpB,MAAM,MAAM,GAAG,8BAA8B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAElE,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO;QAC5B,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAE9B,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;gBAChC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC1C,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;gBAC7B,SAAS,MAAM;oBACb,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;oBAC5C,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC"}

package/backend/dist/utils/zipArchive.d.ts

@@ -0,0 +1,32 @@
+export interface ZipArchiveLimits {
+    maxEntries: number;
+    maxEntryBytes: number;
+    maxTotalBytes: number;
+}
+export declare const DEFAULT_ZIP_ARCHIVE_LIMITS: Readonly<ZipArchiveLimits>;
+export declare class ZipArchiveError extends Error {
+    constructor(message: string);
+}
+interface ZipEntryRecord {
+    path: string;
+    method: number;
+    compressedSize: number;
+    uncompressedSize: number;
+    localHeaderOffset: number;
+}
+export declare class ZipArchive {
+    private readonly buffer;
+    private readonly entryMap;
+    private readonly limits;
+    private inflatedTotal;
+    constructor(buffer: Buffer, entryMap: Map<string, ZipEntryRecord>, limits: Readonly<ZipArchiveLimits>);
+    entryPaths(): string[];
+    has(path: string): boolean;
+    /** Returns the decompressed bytes of one entry, or null when absent. */
+    read(path: string): Buffer | null;
+    private inflate;
+    private resolveDataOffset;
+}
+export declare const readZipArchive: (buffer: Buffer, limits?: Readonly<ZipArchiveLimits>) => ZipArchive;
+export {};
+//# sourceMappingURL=zipArchive.d.ts.map

package/backend/dist/utils/zipArchive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zipArchive.d.ts","sourceRoot":"","sources":["../../src/utils/zipArchive.ts"],"names":[],"mappings":"AAyCA,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,gBAAgB,CAK9D,CAAC;AAEL,qBAAa,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,UAAU;IAInB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IALzB,OAAO,CAAC,aAAa,CAAK;IAE1B,YACmB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,EACrC,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EACjD;IAEJ,UAAU,IAAI,MAAM,EAAE,CAErB;IAED,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzB;IAED,wEAAwE;IACxE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAmBhC;IAED,OAAO,CAAC,OAAO;IAkBf,OAAO,CAAC,iBAAiB;CAc1B;AAgBD,eAAO,MAAM,cAAc,WACjB,MAAM,WACN,QAAQ,CAAC,gBAAgB,CAAC,KACjC,UAqEF,CAAC"}

package/backend/dist/utils/zipArchive.js

@@ -0,0 +1,171 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { inflateRawSync } from 'node:zlib';
+/**
+ * Minimal read-only ZIP archive parser for OOXML document extraction.
+ *
+ * Deliberately dependency-free: office uploads are size-capped buffers, so a
+ * central-directory walk plus zlib raw-inflate covers every legitimate DOCX,
+ * PPTX, and XLSX file without pulling an archive library into the supply
+ * chain. Encrypted entries, zip64 archives, and unknown compression methods
+ * are rejected instead of guessed at, and every inflate call is bounded so a
+ * crafted archive cannot expand past the configured budget.
+ */
+const EOCD_SIGNATURE = 0x06054b50;
+const CENTRAL_DIRECTORY_SIGNATURE = 0x02014b50;
+const LOCAL_HEADER_SIGNATURE = 0x04034b50;
+const EOCD_MIN_BYTES = 22;
+const MAX_EOCD_SCAN_BYTES = EOCD_MIN_BYTES + 65535;
+const ZIP64_MARKER_16 = 0xffff;
+const ZIP64_MARKER_32 = 0xffffffff;
+const METHOD_STORED = 0;
+const METHOD_DEFLATED = 8;
+const FLAG_ENCRYPTED = 0x0001;
+export const DEFAULT_ZIP_ARCHIVE_LIMITS = Object.freeze({
+    maxEntries: 4096,
+    maxEntryBytes: 64 * 1024 * 1024,
+    maxTotalBytes: 256 * 1024 * 1024,
+});
+export class ZipArchiveError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ZipArchiveError';
+    }
+}
+export class ZipArchive {
+    constructor(buffer, entryMap, limits) {
+        this.buffer = buffer;
+        this.entryMap = entryMap;
+        this.limits = limits;
+        this.inflatedTotal = 0;
+    }
+    entryPaths() {
+        return [...this.entryMap.keys()];
+    }
+    has(path) {
+        return this.entryMap.has(path);
+    }
+    /** Returns the decompressed bytes of one entry, or null when absent. */
+    read(path) {
+        const entry = this.entryMap.get(path);
+        if (!entry)
+            return null;
+        const dataOffset = this.resolveDataOffset(entry);
+        const compressed = this.buffer.subarray(dataOffset, dataOffset + entry.compressedSize);
+        if (compressed.length !== entry.compressedSize) {
+            throw new ZipArchiveError(`Archive entry ${path} is truncated`);
+        }
+        const inflated = this.inflate(entry, compressed);
+        this.inflatedTotal += inflated.length;
+        if (this.inflatedTotal > this.limits.maxTotalBytes) {
+            throw new ZipArchiveError('Archive exceeds the total decompressed size budget');
+        }
+        return inflated;
+    }
+    inflate(entry, compressed) {
+        if (entry.method === METHOD_STORED) {
+            return compressed;
+        }
+        try {
+            return inflateRawSync(compressed, {
+                maxOutputLength: Math.min(entry.uncompressedSize, this.limits.maxEntryBytes),
+            });
+        }
+        catch {
+            throw new ZipArchiveError(`Archive entry ${entry.path} failed to decompress within its declared size`);
+        }
+    }
+    resolveDataOffset(entry) {
+        const header = entry.localHeaderOffset;
+        if (header + 30 > this.buffer.length ||
+            this.buffer.readUInt32LE(header) !== LOCAL_HEADER_SIGNATURE) {
+            throw new ZipArchiveError(`Archive entry ${entry.path} has an invalid local header`);
+        }
+        const nameLength = this.buffer.readUInt16LE(header + 26);
+        const extraLength = this.buffer.readUInt16LE(header + 28);
+        return header + 30 + nameLength + extraLength;
+    }
+}
+const findEndOfCentralDirectory = (buffer) => {
+    const scanStart = Math.max(0, buffer.length - MAX_EOCD_SCAN_BYTES);
+    for (let offset = buffer.length - EOCD_MIN_BYTES; offset >= scanStart; offset -= 1) {
+        if (buffer.readUInt32LE(offset) === EOCD_SIGNATURE) {
+            return offset;
+        }
+    }
+    throw new ZipArchiveError('Not a ZIP archive');
+};
+export const readZipArchive = (buffer, limits = DEFAULT_ZIP_ARCHIVE_LIMITS) => {
+    if (buffer.length < EOCD_MIN_BYTES) {
+        throw new ZipArchiveError('Not a ZIP archive');
+    }
+    const eocd = findEndOfCentralDirectory(buffer);
+    const entryCount = buffer.readUInt16LE(eocd + 10);
+    const centralDirectoryOffset = buffer.readUInt32LE(eocd + 16);
+    if (entryCount === ZIP64_MARKER_16 ||
+        centralDirectoryOffset === ZIP64_MARKER_32) {
+        throw new ZipArchiveError('zip64 archives are not supported');
+    }
+    if (entryCount > limits.maxEntries) {
+        throw new ZipArchiveError(`Archive declares ${entryCount} entries; at most ${limits.maxEntries} are allowed`);
+    }
+    const entries = new Map();
+    let cursor = centralDirectoryOffset;
+    for (let index = 0; index < entryCount; index += 1) {
+        if (cursor + 46 > buffer.length ||
+            buffer.readUInt32LE(cursor) !== CENTRAL_DIRECTORY_SIGNATURE) {
+            throw new ZipArchiveError('Central directory is corrupt');
+        }
+        const flags = buffer.readUInt16LE(cursor + 8);
+        const method = buffer.readUInt16LE(cursor + 10);
+        const compressedSize = buffer.readUInt32LE(cursor + 20);
+        const uncompressedSize = buffer.readUInt32LE(cursor + 24);
+        const nameLength = buffer.readUInt16LE(cursor + 28);
+        const extraLength = buffer.readUInt16LE(cursor + 30);
+        const commentLength = buffer.readUInt16LE(cursor + 32);
+        const localHeaderOffset = buffer.readUInt32LE(cursor + 42);
+        const path = buffer
+            .subarray(cursor + 46, cursor + 46 + nameLength)
+            .toString('utf8');
+        cursor += 46 + nameLength + extraLength + commentLength;
+        if ((flags & FLAG_ENCRYPTED) !== 0) {
+            throw new ZipArchiveError('Encrypted archive entries are not supported');
+        }
+        if (method !== METHOD_STORED && method !== METHOD_DEFLATED) {
+            throw new ZipArchiveError(`Archive entry ${path} uses an unsupported compression method`);
+        }
+        if (compressedSize === ZIP64_MARKER_32 ||
+            uncompressedSize === ZIP64_MARKER_32 ||
+            localHeaderOffset === ZIP64_MARKER_32) {
+            throw new ZipArchiveError('zip64 archive entries are not supported');
+        }
+        if (uncompressedSize > limits.maxEntryBytes) {
+            throw new ZipArchiveError(`Archive entry ${path} exceeds the per-entry decompressed size budget`);
+        }
+        if (path.endsWith('/'))
+            continue; // directory marker
+        entries.set(path, {
+            path,
+            method,
+            compressedSize,
+            uncompressedSize,
+            localHeaderOffset,
+        });
+    }
+    return new ZipArchive(buffer, entries, limits);
+};
+//# sourceMappingURL=zipArchive.js.map

package/backend/dist/utils/zipArchive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zipArchive.js","sourceRoot":"","sources":["../../src/utils/zipArchive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C;;;;;;;;;GASG;AAEH,MAAM,cAAc,GAAG,UAAU,CAAC;AAClC,MAAM,2BAA2B,GAAG,UAAU,CAAC;AAC/C,MAAM,sBAAsB,GAAG,UAAU,CAAC;AAC1C,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,mBAAmB,GAAG,cAAc,GAAG,KAAM,CAAC;AACpD,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,eAAe,GAAG,UAAU,CAAC;AACnC,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,cAAc,GAAG,MAAM,CAAC;AAQ9B,MAAM,CAAC,MAAM,0BAA0B,GACrC,MAAM,CAAC,MAAM,CAAC;IACZ,UAAU,EAAE,IAAI;IAChB,aAAa,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC/B,aAAa,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;CACjC,CAAC,CAAC;AAEL,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAUD,MAAM,OAAO,UAAU;IAGrB,YACmB,MAAc,EACd,QAAqC,EACrC,MAAkC;QAFlC,WAAM,GAAN,MAAM,CAAQ;QACd,aAAQ,GAAR,QAAQ,CAA6B;QACrC,WAAM,GAAN,MAAM,CAA4B;QAL7C,kBAAa,GAAG,CAAC,CAAC;IAMvB,CAAC;IAEJ,UAAU;QACR,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,wEAAwE;IACxE,IAAI,CAAC,IAAY;QACf,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CACrC,UAAU,EACV,UAAU,GAAG,KAAK,CAAC,cAAc,CAClC,CAAC;QACF,IAAI,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;YAC/C,MAAM,IAAI,eAAe,CAAC,iBAAiB,IAAI,eAAe,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACjD,IAAI,CAAC,aAAa,IAAI,QAAQ,CAAC,MAAM,CAAC;QACtC,IAAI,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YACnD,MAAM,IAAI,eAAe,CACvB,oDAAoD,CACrD,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,OAAO,CAAC,KAAqB,EAAE,UAAkB;QACvD,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YACnC,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,IAAI,CAAC;YACH,OAAO,cAAc,CAAC,UAAU,EAAE;gBAChC,eAAe,EAAE,IAAI,CAAC,GAAG,CACvB,KAAK,CAAC,gBAAgB,EACtB,IAAI,CAAC,MAAM,CAAC,aAAa,CAC1B;aACF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,eAAe,CACvB,iBAAiB,KAAK,CAAC,IAAI,gDAAgD,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,KAAqB;QAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,iBAAiB,CAAC;QACvC,IACE,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM;YAChC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,sBAAsB,EAC3D,CAAC;YACD,MAAM,IAAI,eAAe,CACvB,iBAAiB,KAAK,CAAC,IAAI,8BAA8B,CAC1D,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAC1D,OAAO,MAAM,GAAG,EAAE,GAAG,UAAU,GAAG,WAAW,CAAC;IAChD,CAAC;CACF;AAED,MAAM,yBAAyB,GAAG,CAAC,MAAc,EAAU,EAAE;IAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,mBAAmB,CAAC,CAAC;IACnE,KACE,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,cAAc,EAC3C,MAAM,IAAI,SAAS,EACnB,MAAM,IAAI,CAAC,EACX,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,cAAc,EAAE,CAAC;YACnD,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,eAAe,CAAC,mBAAmB,CAAC,CAAC;AACjD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,MAAc,EACd,MAAM,GAA+B,0BAA0B,EACnD,EAAE;IACd,IAAI,MAAM,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,IAAI,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAClD,MAAM,sBAAsB,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAC9D,IACE,UAAU,KAAK,eAAe;QAC9B,sBAAsB,KAAK,eAAe,EAC1C,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,kCAAkC,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,UAAU,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CACvB,oBAAoB,UAAU,qBAAqB,MAAM,CAAC,UAAU,cAAc,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAClD,IAAI,MAAM,GAAG,sBAAsB,CAAC;IACpC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,UAAU,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACnD,IACE,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM;YAC3B,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,2BAA2B,EAC3D,CAAC;YACD,MAAM,IAAI,eAAe,CAAC,8BAA8B,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAChD,MAAM,cAAc,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACxD,MAAM,gBAAgB,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACrD,MAAM,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACvD,MAAM,iBAAiB,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM;aAChB,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE,GAAG,UAAU,CAAC;aAC/C,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,IAAI,EAAE,GAAG,UAAU,GAAG,WAAW,GAAG,aAAa,CAAC;QACxD,IAAI,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,eAAe,CAAC,6CAA6C,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;YAC3D,MAAM,IAAI,eAAe,CACvB,iBAAiB,IAAI,yCAAyC,CAC/D,CAAC;QACJ,CAAC;QACD,IACE,cAAc,KAAK,eAAe;YAClC,gBAAgB,KAAK,eAAe;YACpC,iBAAiB,KAAK,eAAe,EACrC,CAAC;YACD,MAAM,IAAI,eAAe,CAAC,yCAAyC,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,gBAAgB,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;YAC5C,MAAM,IAAI,eAAe,CACvB,iBAAiB,IAAI,iDAAiD,CACvE,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,mBAAmB;QACrD,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;YAChB,IAAI;YACJ,MAAM;YACN,cAAc;YACd,gBAAgB;YAChB,iBAAiB;SAClB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACjD,CAAC,CAAC"}

package/backend/dist/websocketServer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"websocketServer.d.ts","sourceRoot":"","sources":["../src/websocketServer.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,MAAM,CAAC;AA2GpD,eAAO,MAAM,wBAAwB,WAC3B,MAAM,GAAG,SAAS,iDAEzB,OAqBF,CAAC;AAuDF,MAAM,WAAW,0BAA0B;IACzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AASD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,GACb,0BAA0B,CAq6B5B"}
+{"version":3,"file":"websocketServer.d.ts","sourceRoot":"","sources":["../src/websocketServer.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAmB,MAAM,EAAE,MAAM,MAAM,CAAC;AAgIpD,eAAO,MAAM,wBAAwB,WAC3B,MAAM,GAAG,SAAS,iDAEzB,OAqBF,CAAC;AAuDF,MAAM,WAAW,0BAA0B;IACzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AASD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,GACb,0BAA0B,CAkjC5B"}