7 files changed, 324 insertions, 1 deletions

diff --git a/apps/dav/lib/Command/ClearCalendarUnshares.php b/apps/dav/lib/Command/ClearCalendarUnshares.php
new file mode 100644
index 00000000000..bb367a9cd0f
--- /dev/null
+++ b/apps/dav/lib/Command/ClearCalendarUnshares.php
@@ -0,0 +1,114 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: 2025 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace OCA\DAV\Command;
+
+use OCA\DAV\CalDAV\CalDavBackend;
+use OCA\DAV\CalDAV\Sharing\Backend;
+use OCA\DAV\CalDAV\Sharing\Service;
+use OCA\DAV\Connector\Sabre\Principal;
+use OCA\DAV\DAV\Sharing\Backend as BackendAlias;
+use OCA\DAV\DAV\Sharing\SharingMapper;
+use OCP\IAppConfig;
+use OCP\IUserManager;
+use Symfony\Component\Console\Attribute\AsCommand;
+use Symfony\Component\Console\Command\Command;
+use Symfony\Component\Console\Helper\QuestionHelper;
+use Symfony\Component\Console\Helper\Table;
+use Symfony\Component\Console\Input\InputArgument;
+use Symfony\Component\Console\Input\InputInterface;
+use Symfony\Component\Console\Output\OutputInterface;
+use Symfony\Component\Console\Question\ConfirmationQuestion;
+
+#[AsCommand(
+	name: 'dav:clear-calendar-unshares',
+	description: 'Clear calendar unshares for a user',
+	hidden: false,
+)]
+class ClearCalendarUnshares extends Command {
+	public function __construct(
+		private IUserManager $userManager,
+		private IAppConfig $appConfig,
+		private Principal $principal,
+		private CalDavBackend $caldav,
+		private Backend $sharingBackend,
+		private Service $sharingService,
+		private SharingMapper $mapper,
+	) {
+		parent::__construct();
+	}
+
+	protected function configure(): void {
+		$this->addArgument(
+			'uid',
+			InputArgument::REQUIRED,
+			'User whose unshares to clear'
+		);
+	}
+
+	protected function execute(InputInterface $input, OutputInterface $output): int {
+		$user = (string)$input->getArgument('uid');
+		if (!$this->userManager->userExists($user)) {
+			throw new \InvalidArgumentException("User $user is unknown");
+		}
+
+		$principal = $this->principal->getPrincipalByPath('principals/users/' . $user);
+		if ($principal === null) {
+			throw new \InvalidArgumentException("Unable to fetch principal for user $user ");
+		}
+
+		$shares = $this->mapper->getSharesByPrincipals([$principal['uri']], 'calendar');
+		$unshares = array_filter($shares, static fn ($share) => $share['access'] === BackendAlias::ACCESS_UNSHARED);
+
+		if (count($unshares) === 0) {
+			$output->writeln("User $user has no calendar unshares");
+			return self::SUCCESS;
+		}
+
+		$rows = array_map(fn ($share) => $this->formatCalendarUnshare($share), $shares);
+
+		$table = new Table($output);
+		$table
+			->setHeaders(['Share Id', 'Calendar Id', 'Calendar URI', 'Calendar Name'])
+			->setRows($rows)
+			->render();
+
+		$output->writeln('');
+
+		/** @var QuestionHelper $helper */
+		$helper = $this->getHelper('question');
+		$question = new ConfirmationQuestion('Please confirm to delete the above calendar unshare entries [y/n]', false);
+
+		if ($helper->ask($input, $output, $question)) {
+			$this->mapper->deleteUnsharesByPrincipal($principal['uri'], 'calendar');
+			$output->writeln("Calendar unshares for user $user deleted");
+		}
+
+		return self::SUCCESS;
+	}
+
+	private function formatCalendarUnshare(array $share): array {
+		$calendarInfo = $this->caldav->getCalendarById($share['resourceid']);
+
+		$resourceUri = 'Resource not found';
+		$resourceName = '';
+
+		if ($calendarInfo !== null) {
+			$resourceUri = $calendarInfo['uri'];
+			$resourceName = $calendarInfo['{DAV:}displayname'];
+		}
+
+		return [
+			$share['id'],
+			$share['resourceid'],
+			$resourceUri,
+			$resourceName,
+		];
+	}
+}
diff --git a/apps/dav/lib/Command/ClearContactsPhotoCache.php b/apps/dav/lib/Command/ClearContactsPhotoCache.php
new file mode 100644
index 00000000000..82e64c3145a
--- /dev/null
+++ b/apps/dav/lib/Command/ClearContactsPhotoCache.php
@@ -0,0 +1,75 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: 2025 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace OCA\DAV\Command;
+
+use OCP\Files\AppData\IAppDataFactory;
+use OCP\Files\NotPermittedException;
+use Symfony\Component\Console\Attribute\AsCommand;
+use Symfony\Component\Console\Command\Command;
+use Symfony\Component\Console\Helper\ProgressBar;
+use Symfony\Component\Console\Helper\QuestionHelper;
+use Symfony\Component\Console\Input\InputInterface;
+use Symfony\Component\Console\Output\OutputInterface;
+use Symfony\Component\Console\Question\ConfirmationQuestion;
+
+#[AsCommand(
+	name: 'dav:clear-contacts-photo-cache',
+	description: 'Clear cached contact photos',
+	hidden: false,
+)]
+class ClearContactsPhotoCache extends Command {
+
+	public function __construct(
+		private IAppDataFactory $appDataFactory,
+	) {
+		parent::__construct();
+	}
+
+	protected function execute(InputInterface $input, OutputInterface $output): int {
+		$photoCacheAppData = $this->appDataFactory->get('dav-photocache');
+
+		$folders = $photoCacheAppData->getDirectoryListing();
+		$countFolders = count($folders);
+
+		if ($countFolders === 0) {
+			$output->writeln('No cached contact photos found.');
+			return self::SUCCESS;
+		}
+
+		$output->writeln('Found ' . count($folders) . ' cached contact photos.');
+
+		/** @var QuestionHelper $helper */
+		$helper = $this->getHelper('question');
+		$question = new ConfirmationQuestion('Please confirm to clear the contacts photo cache [y/n] ', true);
+
+		if ($helper->ask($input, $output, $question) === false) {
+			$output->writeln('Clearing the contacts photo cache aborted.');
+			return self::SUCCESS;
+		}
+
+		$progressBar = new ProgressBar($output, $countFolders);
+		$progressBar->start();
+
+		foreach ($folders as $folder) {
+			try {
+				$folder->delete();
+			} catch (NotPermittedException) {
+			}
+			$progressBar->advance();
+		}
+
+		$progressBar->finish();
+
+		$output->writeln('');
+		$output->writeln('Contacts photo cache cleared.');
+
+		return self::SUCCESS;
+	}
+}
diff --git a/apps/dav/lib/Command/ExportCalendar.php b/apps/dav/lib/Command/ExportCalendar.php
index 5758cd4fa87..6ed8aa2cfe4 100644
--- a/apps/dav/lib/Command/ExportCalendar.php
+++ b/apps/dav/lib/Command/ExportCalendar.php
@@ -79,7 +79,7 @@ class ExportCalendar extends Command {
 			if ($handle === false) {
 				throw new InvalidArgumentException("Location <$location> is not valid. Can not open location for write operation.");
 			}
-			
+
 			foreach ($this->exportService->export($calendar, $options) as $chunk) {
 				fwrite($handle, $chunk);
 			}
diff --git a/apps/dav/lib/Command/ListCalendarShares.php b/apps/dav/lib/Command/ListCalendarShares.php
new file mode 100644
index 00000000000..2729bc80530
--- /dev/null
+++ b/apps/dav/lib/Command/ListCalendarShares.php
@@ -0,0 +1,131 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: 2025 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace OCA\DAV\Command;
+
+use OCA\DAV\CalDAV\CalDavBackend;
+use OCA\DAV\CalDAV\Sharing\Backend;
+use OCA\DAV\Connector\Sabre\Principal;
+use OCA\DAV\DAV\Sharing\SharingMapper;
+use OCP\IUserManager;
+use Symfony\Component\Console\Attribute\AsCommand;
+use Symfony\Component\Console\Command\Command;
+use Symfony\Component\Console\Helper\Table;
+use Symfony\Component\Console\Input\InputArgument;
+use Symfony\Component\Console\Input\InputInterface;
+use Symfony\Component\Console\Input\InputOption;
+use Symfony\Component\Console\Output\OutputInterface;
+
+#[AsCommand(
+	name: 'dav:list-calendar-shares',
+	description: 'List all calendar shares for a user',
+	hidden: false,
+)]
+class ListCalendarShares extends Command {
+	public function __construct(
+		private IUserManager $userManager,
+		private Principal $principal,
+		private CalDavBackend $caldav,
+		private SharingMapper $mapper,
+	) {
+		parent::__construct();
+	}
+
+	protected function configure(): void {
+		$this->addArgument(
+			'uid',
+			InputArgument::REQUIRED,
+			'User whose calendar shares will be listed'
+		);
+		$this->addOption(
+			'calendar-id',
+			'',
+			InputOption::VALUE_REQUIRED,
+			'List only shares for the given calendar id id',
+			null,
+		);
+	}
+
+	protected function execute(InputInterface $input, OutputInterface $output): int {
+		$user = (string)$input->getArgument('uid');
+		if (!$this->userManager->userExists($user)) {
+			throw new \InvalidArgumentException("User $user is unknown");
+		}
+
+		$principal = $this->principal->getPrincipalByPath('principals/users/' . $user);
+		if ($principal === null) {
+			throw new \InvalidArgumentException("Unable to fetch principal for user $user");
+		}
+
+		$memberships = array_merge(
+			[$principal['uri']],
+			$this->principal->getGroupMembership($principal['uri']),
+			$this->principal->getCircleMembership($principal['uri']),
+		);
+
+		$shares = $this->mapper->getSharesByPrincipals($memberships, 'calendar');
+
+		$calendarId = $input->getOption('calendar-id');
+		if ($calendarId !== null) {
+			$shares = array_filter($shares, fn ($share) => $share['resourceid'] === (int)$calendarId);
+		}
+
+		$rows = array_map(fn ($share) => $this->formatCalendarShare($share), $shares);
+
+		if (count($rows) > 0) {
+			$table = new Table($output);
+			$table
+				->setHeaders(['Share Id', 'Calendar Id', 'Calendar URI', 'Calendar Name', 'Calendar Owner', 'Access By', 'Permissions'])
+				->setRows($rows)
+				->render();
+		} else {
+			$output->writeln("User $user has no calendar shares");
+		}
+
+		return self::SUCCESS;
+	}
+
+	private function formatCalendarShare(array $share): array {
+		$calendarInfo = $this->caldav->getCalendarById($share['resourceid']);
+
+		$calendarUri = 'Resource not found';
+		$calendarName = '';
+		$calendarOwner = '';
+
+		if ($calendarInfo !== null) {
+			$calendarUri = $calendarInfo['uri'];
+			$calendarName = $calendarInfo['{DAV:}displayname'];
+			$calendarOwner = $calendarInfo['{http://nextcloud.com/ns}owner-displayname'] . ' (' . $calendarInfo['principaluri'] . ')';
+		}
+
+		$accessBy = match (true) {
+			str_starts_with($share['principaluri'], 'principals/users/') => 'Individual',
+			str_starts_with($share['principaluri'], 'principals/groups/') => 'Group (' . $share['principaluri'] . ')',
+			str_starts_with($share['principaluri'], 'principals/circles/') => 'Team (' . $share['principaluri'] . ')',
+			default => $share['principaluri'],
+		};
+
+		$permissions = match ($share['access']) {
+			Backend::ACCESS_READ => 'Read',
+			Backend::ACCESS_READ_WRITE => 'Read/Write',
+			Backend::ACCESS_UNSHARED => 'Unshare',
+			default => $share['access'],
+		};
+
+		return [
+			$share['id'],
+			$share['resourceid'],
+			$calendarUri,
+			$calendarName,
+			$calendarOwner,
+			$accessBy,
+			$permissions,
+		];
+	}
+}
diff --git a/apps/dav/lib/Command/ListCalendars.php b/apps/dav/lib/Command/ListCalendars.php
index 06a1f7397c4..408a7e5247f 100644
--- a/apps/dav/lib/Command/ListCalendars.php
+++ b/apps/dav/lib/Command/ListCalendars.php
@@ -1,4 +1,5 @@
 <?php
+
 /**
  * SPDX-FileCopyrightText: 2018 Nextcloud GmbH and Nextcloud contributors
  * SPDX-License-Identifier: AGPL-3.0-or-later
diff --git a/apps/dav/lib/Command/MoveCalendar.php b/apps/dav/lib/Command/MoveCalendar.php
index 36f20e5b547..b8acc191cc3 100644
--- a/apps/dav/lib/Command/MoveCalendar.php
+++ b/apps/dav/lib/Command/MoveCalendar.php
@@ -1,4 +1,5 @@
 <?php
+
 /**
  * SPDX-FileCopyrightText: 2016 Nextcloud GmbH and Nextcloud contributors
  * SPDX-License-Identifier: AGPL-3.0-or-later
diff --git a/apps/dav/lib/Command/SendEventReminders.php b/apps/dav/lib/Command/SendEventReminders.php
index f5afb30ed70..89bb5ce8c20 100644
--- a/apps/dav/lib/Command/SendEventReminders.php
+++ b/apps/dav/lib/Command/SendEventReminders.php
@@ -1,4 +1,5 @@
 <?php
+
 /**
  * SPDX-FileCopyrightText: 2019 Nextcloud GmbH and Nextcloud contributors
  * SPDX-License-Identifier: AGPL-3.0-or-later