@bobfrankston/mailx 1.0.1

package/packages/mailx-api/index.js

@@ -0,0 +1,375 @@
+/**
+ * @bobfrankston/mailx-api
+ * Express Router with all REST endpoints for the mailx client.
+ */
+import { Router } from "express";
+import { loadSettings, saveSettings, loadAllowlist, saveAllowlist } from "@bobfrankston/mailx-settings";
+import { simpleParser } from "mailparser";
+/** Sanitize HTML email body — strip remote content (images, CSS, scripts, event handlers) */
+function sanitizeHtml(html) {
+    let hasRemoteContent = false;
+    // Remove <script> tags and content
+    let clean = html.replace(/<script\b[^>]*>[\s\S]*?<\/script>/gi, "");
+    // Remove event handlers (onclick, onload, onerror, etc.)
+    clean = clean.replace(/\s+on\w+\s*=\s*("[^"]*"|'[^']*'|[^\s>]+)/gi, "");
+    // Replace remote images with placeholder — keep data: and cid: URIs
+    clean = clean.replace(/<img\b([^>]*)\bsrc\s*=\s*("[^"]*"|'[^']*')/gi, (match, before, src) => {
+        const url = src.slice(1, -1); // remove quotes
+        if (url.startsWith("data:") || url.startsWith("cid:"))
+            return match;
+        hasRemoteContent = true;
+        return `<img${before}src="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='20' height='20'%3E%3Crect fill='%23888' width='20' height='20' rx='3'/%3E%3Ctext x='10' y='14' text-anchor='middle' fill='white' font-size='12'%3E⊘%3C/text%3E%3C/svg%3E" data-blocked-src=${src} title="Remote image blocked"`;
+    });
+    // Block remote CSS via <link> tags
+    clean = clean.replace(/<link\b[^>]*rel\s*=\s*["']stylesheet["'][^>]*>/gi, (match) => {
+        hasRemoteContent = true;
+        return `<!-- blocked: ${match.replace(/--/g, "")} -->`;
+    });
+    // Block background images in inline styles
+    clean = clean.replace(/url\s*\(\s*(['"]?)(https?:\/\/[^)]+)\1\s*\)/gi, (match, _q, url) => {
+        hasRemoteContent = true;
+        return `url("") /* blocked: ${url} */`;
+    });
+    // Remove <form> tags
+    clean = clean.replace(/<\/?form\b[^>]*>/gi, "");
+    // Remove <iframe> tags (within email body)
+    clean = clean.replace(/<iframe\b[^>]*>[\s\S]*?<\/iframe>/gi, "");
+    return { html: clean, hasRemoteContent };
+}
+export function createApiRouter(db, imapManager) {
+    const router = Router();
+    router.use((req, res, next) => { res.type("json"); res.set("Cache-Control", "no-store"); next(); });
+    // ── Accounts ──
+    router.get("/accounts", (req, res) => {
+        const accounts = db.getAccounts();
+        res.json(accounts);
+    });
+    // ── Folders ──
+    router.get("/folders/:accountId", (req, res) => {
+        const folders = db.getFolders(req.params.accountId);
+        res.json(folders);
+    });
+    // ── Messages ──
+    // Unified inbox — MUST be before :accountId/:folderId route
+    router.get("/messages/unified/inbox", (req, res) => {
+        const page = Number(req.query.page) || 1;
+        const pageSize = Number(req.query.pageSize) || 50;
+        const accounts = db.getAccounts();
+        let allItems = [];
+        for (const account of accounts) {
+            const folders = db.getFolders(account.id);
+            const inbox = folders.find(f => f.specialUse === "inbox");
+            if (!inbox)
+                continue;
+            const result = db.getMessages({ accountId: account.id, folderId: inbox.id, page: 1, pageSize: 10000 });
+            allItems.push(...result.items);
+        }
+        // Sort by date descending
+        allItems.sort((a, b) => b.date - a.date);
+        const total = allItems.length;
+        const offset = (page - 1) * pageSize;
+        const items = allItems.slice(offset, offset + pageSize);
+        res.json({ items, total, page, pageSize });
+    });
+    // Per-folder messages (after unified to avoid route conflict)
+    router.get("/messages/:accountId/:folderId", (req, res) => {
+        const result = db.getMessages({
+            accountId: req.params.accountId,
+            folderId: Number(req.params.folderId),
+            page: Number(req.query.page) || 1,
+            pageSize: Number(req.query.pageSize) || 50,
+            sort: req.query.sort || "date",
+            sortDir: req.query.sortDir || "desc",
+            search: req.query.search
+        });
+        res.json(result);
+    });
+    router.get("/message/:accountId/:uid", async (req, res) => {
+        try {
+            const { accountId, uid } = req.params;
+            let allowRemote = req.query.allowRemote === "true";
+            const envelope = db.getMessageByUid(accountId, Number(uid));
+            if (!envelope)
+                return res.status(404).json({ error: "Message not found" });
+            // Load body from store or fetch on demand from IMAP
+            let bodyHtml = "";
+            let bodyText = "";
+            let hasRemoteContent = false;
+            let attachments = [];
+            const t0 = Date.now();
+            const raw = await imapManager.fetchMessageBody(accountId, envelope.folderId, envelope.uid);
+            const t1 = Date.now();
+            if (raw) {
+                const parsed = await simpleParser(raw);
+                const t2 = Date.now();
+                if (t2 - t0 > 2000)
+                    console.log(`  [slow] Message ${uid}: fetch=${t1 - t0}ms parse=${t2 - t1}ms total=${t2 - t0}ms (${raw.length} bytes)`);
+                bodyHtml = parsed.html || "";
+                bodyText = parsed.text || "";
+                attachments = (parsed.attachments || []).map((a, i) => ({
+                    id: i,
+                    filename: a.filename || `attachment-${i}`,
+                    mimeType: a.contentType || "application/octet-stream",
+                    size: a.size || 0,
+                    contentId: a.contentId || ""
+                }));
+            }
+            // Sanitize HTML — block remote content unless allowed or sender is on allow-list
+            if (bodyHtml && !allowRemote) {
+                const allowList = loadAllowlist();
+                const senderAddr = envelope.from?.address || "";
+                const senderDomain = senderAddr.split("@")[1] || "";
+                const toAddrs = (envelope.to || []).map((a) => a.address);
+                const isAllowed = allowList.senders.includes(senderAddr) ||
+                    allowList.domains.includes(senderDomain) ||
+                    toAddrs.some((a) => allowList.recipients?.includes(a));
+                if (isAllowed) {
+                    allowRemote = true;
+                }
+                else {
+                    const result = sanitizeHtml(bodyHtml);
+                    bodyHtml = result.html;
+                    hasRemoteContent = result.hasRemoteContent;
+                }
+            }
+            const message = {
+                ...envelope,
+                bodyHtml,
+                bodyText,
+                hasRemoteContent,
+                attachments
+            };
+            res.json(message);
+        }
+        catch (e) {
+            res.status(500).json({ error: e.message });
+        }
+    });
+    router.patch("/message/:accountId/:uid/flags", async (req, res) => {
+        const { accountId, uid } = req.params;
+        const { flags } = req.body;
+        const envelope = db.getMessageByUid(accountId, Number(uid));
+        // Local-first: update DB, queue IMAP sync
+        await imapManager.updateFlagsLocal(accountId, Number(uid), envelope?.folderId || 0, flags);
+        res.json({ ok: true });
+    });
+    // ── Remote content allow-list ──
+    router.post("/settings/allow-remote", (req, res) => {
+        const { type, value } = req.body;
+        const list = loadAllowlist();
+        if (type === "sender" && !list.senders.includes(value)) {
+            list.senders.push(value);
+        }
+        else if (type === "domain" && !list.domains.includes(value)) {
+            list.domains.push(value);
+        }
+        else if (type === "recipient") {
+            if (!list.recipients)
+                list.recipients = [];
+            if (!list.recipients.includes(value))
+                list.recipients.push(value);
+        }
+        saveAllowlist(list);
+        console.log(`  [allow] Added ${type}: ${value}`);
+        res.json({ ok: true });
+    });
+    // ── Search ──
+    router.get("/search", (req, res) => {
+        const q = req.query.q || "";
+        const page = Number(req.query.page) || 1;
+        const pageSize = Number(req.query.pageSize) || 50;
+        if (!q.trim())
+            return res.json({ items: [], total: 0, page, pageSize });
+        const result = db.searchMessages(q, page, pageSize);
+        res.json(result);
+    });
+    router.post("/search/rebuild", (req, res) => {
+        const count = db.rebuildSearchIndex();
+        console.log(`  Rebuilt search index: ${count} messages`);
+        res.json({ ok: true, indexed: count });
+    });
+    // ── Sync status ──
+    router.get("/sync/pending", (req, res) => {
+        const count = db.getTotalPendingSyncCount();
+        res.json({ pending: count });
+    });
+    // ── Sync ──
+    router.post("/sync", async (req, res) => {
+        try {
+            await imapManager.syncAll();
+            res.json({ ok: true });
+        }
+        catch (e) {
+            res.status(500).json({ error: e.message });
+        }
+    });
+    router.post("/sync/:accountId", async (req, res) => {
+        try {
+            const folders = await imapManager.syncFolders(req.params.accountId);
+            // INBOX first
+            folders.sort((a, b) => {
+                if (a.specialUse === "inbox")
+                    return -1;
+                if (b.specialUse === "inbox")
+                    return 1;
+                return 0;
+            });
+            for (const folder of folders) {
+                try {
+                    await imapManager.syncFolder(req.params.accountId, folder.id);
+                }
+                catch (e) {
+                    // Non-existent folders handled internally by syncFolder caller
+                    console.error(`  Skipping folder ${folder.path}: ${e.message}`);
+                }
+            }
+            res.json({ ok: true });
+        }
+        catch (e) {
+            res.status(500).json({ error: e.message });
+        }
+    });
+    // ── Send ──
+    router.post("/send", async (req, res) => {
+        try {
+            const msg = req.body;
+            const settings = loadSettings();
+            const account = settings.accounts.find(a => a.id === msg.from);
+            if (!account)
+                return res.status(400).json({ error: `Unknown account: ${msg.from}` });
+            // Build RFC 822 message
+            const to = msg.to.map(a => a.name ? `${a.name} <${a.address}>` : a.address).join(", ");
+            const cc = msg.cc?.map(a => a.name ? `${a.name} <${a.address}>` : a.address).join(", ");
+            const bcc = msg.bcc?.map(a => a.name ? `${a.name} <${a.address}>` : a.address).join(", ");
+            const headers = [
+                `From: ${account.name} <${account.email}>`,
+                `To: ${to}`,
+                cc ? `Cc: ${cc}` : null,
+                bcc ? `Bcc: ${bcc}` : null,
+                `Subject: ${msg.subject}`,
+                `Date: ${new Date().toUTCString()}`,
+                msg.inReplyTo ? `In-Reply-To: ${msg.inReplyTo}` : null,
+                msg.references?.length ? `References: ${msg.references.join(" ")}` : null,
+                `MIME-Version: 1.0`,
+                `Content-Type: text/html; charset=UTF-8`,
+            ].filter(h => h !== null).join("\r\n");
+            const rawMessage = `${headers}\r\n\r\n${msg.bodyHtml || msg.bodyText || ""}`;
+            // Local-first: save to sync queue, worker will APPEND to Outbox and send
+            imapManager.queueOutgoingLocal(account.id, rawMessage);
+            console.log(`  Queued locally: ${msg.subject} via ${account.id}`);
+            // Record recipient addresses for autocomplete
+            for (const addr of msg.to)
+                db.recordSentAddress(addr.name, addr.address);
+            if (msg.cc)
+                for (const addr of msg.cc)
+                    db.recordSentAddress(addr.name, addr.address);
+            if (msg.bcc)
+                for (const addr of msg.bcc)
+                    db.recordSentAddress(addr.name, addr.address);
+            res.json({ ok: true, queued: true });
+        }
+        catch (e) {
+            console.error(`  Send error: ${e.message}`);
+            res.status(500).json({ error: e.message });
+        }
+    });
+    // ── Delete ──
+    router.delete("/message/:accountId/:uid", async (req, res) => {
+        try {
+            const { accountId, uid } = req.params;
+            const envelope = db.getMessageByUid(accountId, Number(uid));
+            if (!envelope)
+                return res.status(404).json({ error: "Message not found" });
+            await imapManager.trashMessage(accountId, envelope.folderId, envelope.uid);
+            res.json({ ok: true });
+        }
+        catch (e) {
+            console.error(`  Delete error: ${e.message}`);
+            res.status(500).json({ error: e.message });
+        }
+    });
+    // ── Undelete (move from Trash back to original folder) ──
+    router.post("/message/:accountId/:uid/undelete", async (req, res) => {
+        try {
+            const { accountId, uid } = req.params;
+            const { folderId } = req.body;
+            await imapManager.undeleteMessage(accountId, Number(uid), folderId);
+            res.json({ ok: true });
+        }
+        catch (e) {
+            console.error(`  Undelete error: ${e.message}`);
+            res.status(500).json({ error: e.message });
+        }
+    });
+    // ── Drafts ──
+    router.post("/draft", async (req, res) => {
+        try {
+            const { accountId, subject, bodyHtml, bodyText, to, cc, previousDraftUid } = req.body;
+            const settings = loadSettings();
+            const account = settings.accounts.find(a => a.id === accountId);
+            if (!account)
+                return res.status(400).json({ error: `Unknown account: ${accountId}` });
+            const headers = [
+                `From: ${account.name} <${account.email}>`,
+                to ? `To: ${to}` : null,
+                cc ? `Cc: ${cc}` : null,
+                `Subject: ${subject || "(no subject)"}`,
+                `Date: ${new Date().toUTCString()}`,
+                `MIME-Version: 1.0`,
+                `Content-Type: text/html; charset=UTF-8`,
+            ].filter(h => h !== null).join("\r\n");
+            const raw = `${headers}\r\n\r\n${bodyHtml || bodyText || ""}`;
+            const uid = await imapManager.saveDraft(accountId, raw, previousDraftUid);
+            res.json({ ok: true, draftUid: uid });
+        }
+        catch (e) {
+            console.error(`  Draft save error: ${e.message}`);
+            res.status(500).json({ error: e.message });
+        }
+    });
+    router.delete("/draft", async (req, res) => {
+        try {
+            const { accountId, draftUid } = req.body;
+            if (accountId && draftUid) {
+                await imapManager.deleteDraft(accountId, draftUid);
+            }
+            res.json({ ok: true });
+        }
+        catch (e) {
+            res.status(500).json({ error: e.message });
+        }
+    });
+    // ── Contacts ──
+    router.get("/contacts", (req, res) => {
+        const q = req.query.q || "";
+        if (q.length < 1)
+            return res.json([]);
+        const results = db.searchContacts(q);
+        res.json(results);
+    });
+    router.post("/contacts/sync-google", async (req, res) => {
+        try {
+            await imapManager.syncAllContacts();
+            res.json({ ok: true });
+        }
+        catch (e) {
+            res.status(500).json({ error: e.message });
+        }
+    });
+    router.post("/contacts/seed", (req, res) => {
+        const added = db.seedContactsFromMessages();
+        console.log(`  Seeded ${added} contacts from message history`);
+        res.json({ ok: true, added });
+    });
+    // ── Settings ──
+    router.get("/settings", (req, res) => {
+        const settings = loadSettings();
+        res.json(settings);
+    });
+    router.put("/settings", (req, res) => {
+        saveSettings(req.body);
+        res.json({ ok: true });
+    });
+    return router;
+}
+//# sourceMappingURL=index.js.map

package/packages/mailx-api/node_modules/nodemailer/.ncurc.js

@@ -0,0 +1,9 @@
+'use strict';
+
+module.exports = {
+    upgrade: true,
+    reject: [
+        // API changes break existing tests
+        'proxy'
+    ]
+};

package/packages/mailx-api/node_modules/nodemailer/.prettierignore

@@ -0,0 +1,8 @@
+node_modules
+coverage
+*.min.js
+dist
+build
+.nyc_output
+package-lock.json
+CHANGELOG.md

package/packages/mailx-api/node_modules/nodemailer/.prettierrc

@@ -0,0 +1,12 @@
+{
+    "printWidth": 140,
+    "tabWidth": 4,
+    "useTabs": false,
+    "semi": true,
+    "singleQuote": true,
+    "quoteProps": "as-needed",
+    "trailingComma": "none",
+    "bracketSpacing": true,
+    "arrowParens": "avoid",
+    "endOfLine": "lf"
+}

package/packages/mailx-api/node_modules/nodemailer/.prettierrc.js

@@ -0,0 +1,10 @@
+'use strict';
+
+module.exports = {
+    printWidth: 160,
+    tabWidth: 4,
+    singleQuote: true,
+    endOfLine: 'lf',
+    trailingComma: 'none',
+    arrowParens: 'avoid'
+};

package/packages/mailx-api/node_modules/nodemailer/.release-please-config.json

@@ -0,0 +1,9 @@
+{
+    "packages": {
+        ".": {
+            "release-type": "node",
+            "package-name": "nodemailer",
+            "pull-request-title-pattern": "chore${scope}: release ${version} [skip-ci]"
+        }
+    }
+}

package/packages/mailx-api/node_modules/nodemailer/LICENSE

@@ -0,0 +1,16 @@
+Copyright (c) 2011-2023 Andris Reinman
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/packages/mailx-api/node_modules/nodemailer/README.md

@@ -0,0 +1,86 @@
+# Nodemailer
+
+[![Nodemailer](https://raw.githubusercontent.com/nodemailer/nodemailer/master/assets/nm_logo_200x136.png)](https://nodemailer.com/about/)
+
+Send emails from Node.js – easy as cake! 🍰✉️
+
+[![NPM](https://nodei.co/npm/nodemailer.png?downloads=true&downloadRank=true&stars=true)](https://nodemailer.com/about/)
+
+See [nodemailer.com](https://nodemailer.com/) for documentation and terms.
+
+> [!TIP]
+> Check out **[EmailEngine](https://emailengine.app/?utm_source=github-nodemailer&utm_campaign=nodemailer&utm_medium=readme-link)** – a self-hosted email gateway that allows making **REST requests against IMAP and SMTP servers**. EmailEngine also sends webhooks whenever something changes on the registered accounts.\
+> \
+> Using the email accounts registered with EmailEngine, you can receive and [send emails](https://emailengine.app/sending-emails?utm_source=github-nodemailer&utm_campaign=nodemailer&utm_medium=readme-link). EmailEngine supports OAuth2, delayed sends, opens and clicks tracking, bounce detection, etc. All on top of regular email accounts without an external MTA service.
+
+## Having an issue?
+
+#### First review the docs
+
+Documentation for Nodemailer can be found at [nodemailer.com](https://nodemailer.com/about/).
+
+#### Nodemailer throws a SyntaxError for "..."
+
+You are using an older Node.js version than v6.0. Upgrade Node.js to get support for the spread operator. Nodemailer supports all Node.js versions starting from Node.js@v6.0.0.
+
+#### I'm having issues with Gmail
+
+Gmail either works well, or it does not work at all. It is probably easier to switch to an alternative service instead of fixing issues with Gmail. If Gmail does not work for you, then don't use it. Read more about it [here](https://nodemailer.com/usage/using-gmail/).
+
+#### I get ETIMEDOUT errors
+
+Check your firewall settings. Timeout usually occurs when you try to open a connection to a firewalled port either on the server or on your machine. Some ISPs also block email ports to prevent spamming.
+
+#### Nodemailer works on one machine but not in another
+
+It's either a firewall issue, or your SMTP server blocks authentication attempts from some servers.
+
+#### I get TLS errors
+
+- If you are running the code on your machine, check your antivirus settings. Antiviruses often mess around with email ports usage. Node.js might not recognize the MITM cert your antivirus is using.
+- Latest Node versions allow only TLS versions 1.2 and higher. Some servers might still use TLS 1.1 or lower. Check Node.js docs on how to get correct TLS support for your app. You can change this with [tls.minVersion](https://nodejs.org/dist/latest-v16.x/docs/api/tls.html#tls_tls_createsecurecontext_options) option
+- You might have the wrong value for the `secure` option. This should be set to `true` only for port 465. For every other port, it should be `false`. Setting it to `false` does not mean that Nodemailer would not use TLS. Nodemailer would still try to upgrade the connection to use TLS if the server supports it.
+- Older Node versions do not fully support the certificate chain of the newest Let's Encrypt certificates. Either set [tls.rejectUnauthorized](https://nodejs.org/dist/latest-v16.x/docs/api/tls.html#tlsconnectoptions-callback) to `false` to skip chain verification or upgrade your Node version
+
+```js
+let configOptions = {
+    host: 'smtp.example.com',
+    port: 587,
+    tls: {
+        rejectUnauthorized: true,
+        minVersion: 'TLSv1.2'
+    }
+};
+```
+
+#### I have issues with DNS / hosts file
+
+Node.js uses [c-ares](https://nodejs.org/en/docs/meta/topics/dependencies/#c-ares) to resolve domain names, not the DNS library provided by the system, so if you have some custom DNS routing set up, it might be ignored. Nodemailer runs [dns.resolve4()](https://nodejs.org/dist/latest-v16.x/docs/api/dns.html#dnsresolve4hostname-options-callback) and [dns.resolve6()](https://nodejs.org/dist/latest-v16.x/docs/api/dns.html#dnsresolve6hostname-options-callback) to resolve hostname into an IP address. If both calls fail, then Nodemailer will fall back to [dns.lookup()](https://nodejs.org/dist/latest-v16.x/docs/api/dns.html#dnslookuphostname-options-callback). If this does not work for you, you can hard code the IP address into the configuration like shown below. In that case, Nodemailer would not perform any DNS lookups.
+
+```js
+let configOptions = {
+    host: '1.2.3.4',
+    port: 465,
+    secure: true,
+    tls: {
+        // must provide server name, otherwise TLS certificate check will fail
+        servername: 'example.com'
+    }
+};
+```
+
+#### I have an issue with TypeScript types
+
+Nodemailer has official support for Node.js only. For anything related to TypeScript, you need to directly contact the authors of the [type definitions](https://www.npmjs.com/package/@types/nodemailer).
+
+#### I have a different problem
+
+If you are having issues with Nodemailer, then the best way to find help would be [Stack Overflow](https://stackoverflow.com/search?q=nodemailer) or revisit the [docs](https://nodemailer.com/about/).
+
+### License
+
+Nodemailer is licensed under the **MIT No Attribution license**
+
+---
+
+The Nodemailer logo was designed by [Sven Kristjansen](https://www.behance.net/kristjansen).

package/packages/mailx-api/node_modules/nodemailer/SECURITY.txt

@@ -0,0 +1,22 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Contact: mailto:andris@reinman.eu
+Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/5D952A46E1D8C931F6364E01DC6C83F4D584D364
+Preferred-Languages: en, et
+-----BEGIN PGP SIGNATURE-----
+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+=BUZr
+-----END PGP SIGNATURE-----

package/packages/mailx-api/node_modules/nodemailer/eslint.config.js

@@ -0,0 +1,88 @@
+'use strict';
+
+const globals = require('globals');
+
+module.exports = [
+    {
+        ignores: ['node_modules/**', 'coverage/**', 'dist/**', 'build/**', '.nyc_output/**']
+    },
+    {
+        files: ['**/*.js'],
+        languageOptions: {
+            ecmaVersion: 2017,
+            sourceType: 'script',
+            globals: Object.assign({}, globals.node, globals.es2017, {
+                it: true,
+                describe: true,
+                beforeEach: true,
+                afterEach: true
+            })
+        },
+        rules: {
+            // Error detection
+            'for-direction': 'error',
+            'no-await-in-loop': 'error',
+            'no-div-regex': 'error',
+            eqeqeq: 'error',
+            'dot-notation': 'error',
+            curly: 'error',
+            'no-fallthrough': 'error',
+            'no-unused-expressions': [
+                'error',
+                {
+                    allowShortCircuit: true
+                }
+            ],
+            'no-unused-vars': [
+                'error',
+                {
+                    varsIgnorePattern: '^_',
+                    argsIgnorePattern: '^_',
+                    caughtErrorsIgnorePattern: '^_'
+                }
+            ],
+            'handle-callback-err': 'error',
+            'no-new': 'error',
+            'new-cap': 'error',
+            'no-eval': 'error',
+            'no-invalid-this': 'error',
+            radix: ['error', 'always'],
+            'no-use-before-define': ['error', 'nofunc'],
+            'callback-return': ['error', ['callback', 'cb', 'done']],
+            'no-regex-spaces': 'error',
+            'no-empty': 'error',
+            'no-duplicate-case': 'error',
+            'no-empty-character-class': 'error',
+            'no-redeclare': 'off', // Disabled per project preference
+            'block-scoped-var': 'error',
+            'no-sequences': 'error',
+            'no-throw-literal': 'error',
+            'no-useless-call': 'error',
+            'no-useless-concat': 'error',
+            'no-void': 'error',
+            yoda: 'error',
+            'no-undef': 'error',
+            'global-require': 'error',
+            'no-var': 'error',
+            'no-bitwise': 'error',
+            'no-lonely-if': 'error',
+            'no-mixed-spaces-and-tabs': 'error',
+            'arrow-body-style': ['error', 'as-needed'],
+            'arrow-parens': ['error', 'as-needed'],
+            'prefer-arrow-callback': 'error',
+            'object-shorthand': 'error',
+            'prefer-spread': 'error',
+            'no-prototype-builtins': 'off', // Disabled per project preference
+            strict: ['error', 'global'],
+
+            // Disable all formatting rules (handled by Prettier)
+            indent: 'off',
+            quotes: 'off',
+            'linebreak-style': 'off',
+            semi: 'off',
+            'quote-props': 'off',
+            'comma-dangle': 'off',
+            'comma-style': 'off'
+        }
+    }
+];