@rapidmx/activesync-plugin 1.0.0-beta.2 → 1.0.0-beta.3

package/dist/lib/MimeHeaderUtils.js

@@ -0,0 +1,395 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import addressparser from "nodemailer/lib/addressparser";
+/**
+ * Raw RFC 5322 header-block helpers for the MIME a device composes (`ComposeMailCommand`).
+ *
+ * **Inline copy of restapi** (`util/MimeHeaderUtils.ts` in restapi's source, not exported by the `@rapidmx/restapi`
+ * 0.9.0 this plugin builds against): `extractOriginatorHeaders()`, `hasAddressLikeDisplayName()`,
+ * `checkOriginatorHeaders()`, `isPlainAddress()` and `safeDisplayName()` with their private helpers, kept identical - replace them with restapi's exports once the
+ * dependency is bumped.
+ *
+ * **Plugin-side** (`checkComposedOriginators()`, `stripHeader()`): a second, byte-preserving lexer
+ * (`lexHeaderFields()`) that is at least as eager as the parser reading the message later (mailparser/mailsplit):
+ * the header block ends at the first empty line (`CRLF CRLF` or `LF LF`); CRLF, LF and a bare CR all end a physical
+ * line; a line starting with a space or tab continues the previous field; and a field's name is everything before
+ * its first colon with surrounding whitespace ignored - mailsplit trims names the same way, so a leading space on the
+ * very first line or a form feed before the colon still names a `From`.
+ */
+// ---------------------------------------------------------------------------------------------------------------
+// Inline copy of restapi's util/MimeHeaderUtils.ts
+// ---------------------------------------------------------------------------------------------------------------
+/**
+ * Splits a raw RFC 5322 message into its header block and body, at the first blank line. Decodes/encodes via
+ * the `binary` (latin1) encoding so every byte round-trips exactly.
+ */
+function splitRawIntoHeaderAndBody(raw) {
+    const text = raw.toString("binary");
+    const match = text.match(/\r\n\r\n|\n\n/);
+    if (!match || match.index === undefined) {
+        return { headerText: text, bodyText: "" };
+    }
+    return { headerText: text.slice(0, match.index), bodyText: text.slice(match.index + match[0].length) };
+}
+/**
+ * Strips quoted strings and (nested) comments out of a structured header value, so what is left is only the part a
+ * mail client would interpret as address syntax. An unterminated quote/comment swallows the rest of the value.
+ */
+function stripQuotedStringsAndComments(value) {
+    let result = "";
+    let inQuote = false;
+    let commentDepth = 0;
+    for (let i = 0; i < value.length; i++) {
+        const ch = value[i];
+        if (ch === "\\" && (inQuote || commentDepth > 0)) {
+            i++;
+            continue;
+        }
+        if (inQuote) {
+            if (ch === '"') {
+                inQuote = false;
+                result += " ";
+            }
+            continue;
+        }
+        if (ch === "(") {
+            commentDepth++;
+            continue;
+        }
+        if (commentDepth > 0) {
+            if (ch === ")") {
+                commentDepth--;
+                if (commentDepth === 0) {
+                    result += " ";
+                }
+            }
+            continue;
+        }
+        if (ch === '"') {
+            inQuote = true;
+            continue;
+        }
+        result += ch;
+    }
+    return result;
+}
+/**
+ * Collects the text of every quoted string and comment in a structured header value (the counterpart of
+ * `stripQuotedStringsAndComments()`) - where a display name or comment shows the reader text of the sender's choice.
+ */
+function quotedStringsAndComments(value) {
+    const parts = [];
+    let current = "";
+    let inQuote = false;
+    let commentDepth = 0;
+    for (let i = 0; i < value.length; i++) {
+        const ch = value[i];
+        if (ch === "\\" && (inQuote || commentDepth > 0)) {
+            current += value[i + 1] ?? "";
+            i++;
+            continue;
+        }
+        if (inQuote) {
+            if (ch === '"') {
+                inQuote = false;
+                parts.push(current);
+                current = "";
+            }
+            else {
+                current += ch;
+            }
+            continue;
+        }
+        if (ch === "(") {
+            commentDepth++;
+            current += commentDepth > 1 ? ch : "";
+            continue;
+        }
+        if (commentDepth > 0) {
+            if (ch === ")") {
+                commentDepth--;
+                if (commentDepth === 0) {
+                    parts.push(current);
+                    current = "";
+                    continue;
+                }
+            }
+            current += ch;
+            continue;
+        }
+        if (ch === '"') {
+            inQuote = true;
+        }
+    }
+    if (inQuote || commentDepth > 0) {
+        parts.push(current);
+    }
+    return parts;
+}
+/** The top-level header block unfolded into logical lines, with CRLF, LF *and* a bare CR all treated as line breaks -
+ * the tolerant lexing every originator-header check here shares, so a header can't hide behind a line ending some
+ * other parser would honor. Continuation lines are joined with a single space. */
+function lexLogicalHeaderLines(raw) {
+    const { headerText } = splitRawIntoHeaderAndBody(raw);
+    const logical = [];
+    for (const line of headerText.split(/\r\n|\n|\r/)) {
+        if (/^[ \t]/.test(line) && logical.length > 0) {
+            logical[logical.length - 1] += " " + line.trim();
+        }
+        else if (line.length > 0) {
+            logical.push(line);
+        }
+    }
+    return logical;
+}
+/**
+ * Every top-level `From` and `Sender` header value of `raw`, found exactly the way `checkOriginatorHeaders()` finds
+ * them: header names case-insensitive, whitespace before the colon allowed (the obsolete `From :` form), folded
+ * values unfolded, and a bare CR treated as a line break.
+ */
+export function extractOriginatorHeaders(raw) {
+    const values = { from: [], sender: [] };
+    for (const line of lexLogicalHeaderLines(raw)) {
+        const match = line.match(/^(from|sender)[ \t]*:(.*)$/i);
+        if (match) {
+            values[match[1].toLowerCase()].push(match[2].trim());
+        }
+    }
+    return values;
+}
+/** Decodes RFC 2047 encoded words (B and Q) to UTF-8 text - enough to see what a display name shows the reader. */
+function decodeEncodedWords(text) {
+    return text.replace(/=\?[^?]+\?([bBqQ])\?([^?]*)\?=/g, (_match, encoding, data) => {
+        if (encoding.toUpperCase() === "B") {
+            return Buffer.from(data, "base64").toString("utf8");
+        }
+        const bytes = Buffer.from(data.replace(/_/g, " ").replace(/=([0-9A-Fa-f]{2})/g, (_m, hex) => String.fromCharCode(parseInt(hex, 16))), "binary");
+        return bytes.toString("utf8");
+    });
+}
+/** An `@`, or a look-alike a reader would take for one (fullwidth, small and other compatibility forms). */
+const AT_SIGN_LIKE = /[@＠﹫]/;
+/** Whether `text` (a raw header fragment, read as latin1 bytes) shows an address-like `@` once decoded. */
+function showsAtSign(text) {
+    const asUtf8 = Buffer.from(text, "binary").toString("utf8");
+    return AT_SIGN_LIKE.test(decodeEncodedWords(asUtf8)) || AT_SIGN_LIKE.test(decodeEncodedWords(text));
+}
+/**
+ * Whether any display name, group name or comment in one `From`/`Sender` header value contains an address-like `@`
+ * (RFC 2047 encoded words decoded, look-alike `@` characters included): `"ceo@example.com" <me@example.com>` shows
+ * the reader an address the sender doesn't own, though its real address is fine.
+ */
+export function hasAddressLikeDisplayName(value) {
+    if (quotedStringsAndComments(value).some(showsAtSign)) {
+        return true;
+    }
+    const visit = (entries) => entries.some((entry) => (typeof entry.name === "string" && showsAtSign(entry.name)) || (Array.isArray(entry.group) && visit(entry.group)));
+    return visit(addressparser(value));
+}
+/**
+ * Refuses a raw RFC 5322 message whose originator headers name anyone other than an allowed sender. Every `From`
+ * and `Sender` header in the top-level header block is checked - header names case-insensitively (including the
+ * obsolete `From :` form with whitespace before the colon), folded values unfolded, and a bare CR treated as a line
+ * break too, so a header can't be hidden from this scan behind a line ending another parser would honor. Returns a
+ * refusal reason, or `undefined` if the message passes. Fails closed on:
+ * - no `From` header, more than one `From` header, or more than one `Sender` header;
+ * - a `From`/`Sender` value that yields no address at all (e.g. only an empty group);
+ * - any parsed entry without an address (a malformed list, e.g. an unquoted display name containing a comma);
+ * - any parsed address - group members included - that `isAllowed` rejects;
+ * - any addr-spec-looking token outside quoted strings/comments that `isAllowed` rejects - covers the tolerant
+ * parser recovering `<me@example.com> <other@example.com>` as one mailbox with the second as its "display name";
+ * - with `options.rejectAddressLikeDisplayNames`, any display name, group name or comment containing an address.
+ *
+ * Quoted display names and RFC 2047 encoded words are never treated as addresses. `isAllowed` receives each address
+ * exactly as parsed; normalize (e.g. lowercase) inside it.
+ */
+export function checkOriginatorHeaders(raw, isAllowed, options = {}) {
+    const values = extractOriginatorHeaders(raw);
+    if (values.from.length === 0) {
+        return "The message has no From header.";
+    }
+    if (values.from.length > 1) {
+        return "The message has more than one From header.";
+    }
+    if (values.sender.length > 1) {
+        return "The message has more than one Sender header.";
+    }
+    const refusal = (name) => `The ${name} header names an address that is not one of the sending mailbox's own addresses.`;
+    for (const [name, headerValues] of [
+        ["From", values.from],
+        ["Sender", values.sender],
+    ]) {
+        for (const value of headerValues) {
+            const parsed = addressparser(value, { flatten: true });
+            if (parsed.length === 0) {
+                return `The ${name} header contains no address.`;
+            }
+            if (parsed.some((entry) => !entry.address || !isAllowed(entry.address))) {
+                return refusal(name);
+            }
+            const tokens = stripQuotedStringsAndComments(value)
+                .split(/[\s<>,;:]+/)
+                .filter((token) => token.includes("@"));
+            if (tokens.some((token) => !isAllowed(token))) {
+                return refusal(name);
+            }
+            if (options.rejectAddressLikeDisplayNames && hasAddressLikeDisplayName(value)) {
+                return `The ${name} header's display name or comment contains an address.`;
+            }
+        }
+    }
+    return undefined;
+}
+/** One plain address: no display name, angle brackets, group, comment, list, quoting, control characters or whitespace. */
+const PLAIN_ADDRESS_PATTERN = /^[^\s()<>@,;:\\"[\]]+@[^\s()<>@,;:\\"[\]]+$/;
+/** RFC 5321's address length limit. */
+const MAX_PLAIN_ADDRESS_LENGTH = 320;
+/** Whether `value` holds a control character (C0 or DEL); a tab only counts when `tabCounts`. */
+function hasControlCharacter(value, tabCounts) {
+    for (let i = 0; i < value.length; i++) {
+        const code = value.charCodeAt(i);
+        if ((code < 0x20 && (tabCounts || code !== 0x09)) || code === 0x7f) {
+            return true;
+        }
+    }
+    return false;
+}
+/** Whether `address` is exactly one plain address (`local@domain`, nothing around it), at most 320 characters - safe to
+ * hand to a composer as one recipient, e.g. a meeting attendee or organizer. */
+export function isPlainAddress(address) {
+    return (typeof address === "string" &&
+        address.length <= MAX_PLAIN_ADDRESS_LENGTH &&
+        !hasControlCharacter(address, true) &&
+        PLAIN_ADDRESS_PATTERN.test(address));
+}
+/**
+ * `name` as a display name that's safe to put in front of one of our own addresses in a `From` (or an iCalendar `CN`)
+ * this server composes: trimmed, or `undefined` - so the caller omits the name - when it isn't a string, is blank,
+ * contains a line break or other control character, or shows an address-like `@` (look-alikes and RFC 2047 encoded
+ * words included, the same rule as `hasAddressLikeDisplayName()`). A display name like `ceo@example.com` in front of a
+ * real address shows the reader an address the sender doesn't own.
+ */
+export function safeDisplayName(name) {
+    if (typeof name !== "string" || hasControlCharacter(name, false)) {
+        return undefined;
+    }
+    const clean = name.trim();
+    if (clean.length === 0 || AT_SIGN_LIKE.test(clean) || AT_SIGN_LIKE.test(decodeEncodedWords(clean))) {
+        return undefined;
+    }
+    return clean;
+}
+/** Every top-level header field of `raw`, in order, with byte offsets - see this module's doc comment. */
+function lexHeaderFields(raw) {
+    const text = raw.toString("latin1");
+    const separator = /\r\n\r\n|\n\n/.exec(text);
+    // The header block keeps the terminator of its last line; the empty line itself belongs to the separator.
+    const headerEnd = separator ? separator.index + (separator[0] === "\n\n" ? 1 : 2) : text.length;
+    const fields = [];
+    const lineRegex = /([^\r\n]*)(\r\n|\n|\r|$)/y;
+    let position = 0;
+    while (position < headerEnd) {
+        lineRegex.lastIndex = position;
+        const match = lineRegex.exec(text);
+        const content = match[1];
+        const lineEnd = position + match[0].length;
+        const current = fields[fields.length - 1];
+        if (/^[ \t]/.test(content) && current) {
+            current.end = lineEnd;
+        }
+        else if (content.length > 0) {
+            const colon = content.indexOf(":");
+            fields.push({ name: colon === -1 ? "" : content.slice(0, colon).trim().toLowerCase(), start: position, end: lineEnd });
+        }
+        position = lineEnd;
+    }
+    return { text, fields };
+}
+/** An addr-spec-looking run inside display text: no whitespace, brackets, quotes, separators or second `@`. */
+const DISPLAY_ADDRESS_TOKEN = /[^\s@<>()[\]",;:\\]+@[^\s@<>()[\]",;:\\]+/g;
+/**
+ * Whether every address shown in one `From`/`Sender` value's display names, group names and comments is one
+ * `isAllowed` accepts - the case `hasAddressLikeDisplayName()` would refuse although it names only the sender itself
+ * (`"me@example.com" <me@example.com>`, as clients do when the display name is the address, e.g. autodiscover's
+ * `DisplayName`). Each text is read the way `hasAddressLikeDisplayName()` reads it (as UTF-8 and as latin1, RFC 2047
+ * encoded words decoded). A look-alike `@` (fullwidth or small) is never accepted, and neither is an `@` left over once
+ * every allowed address is removed (`a@b@c`, a lone encoded `@`, an address split by a quote).
+ */
+function displayTextShowsOnlyAllowedAddresses(value, isAllowed) {
+    const texts = [...quotedStringsAndComments(value)];
+    const visit = (entries) => {
+        for (const entry of entries) {
+            if (typeof entry.name === "string") {
+                texts.push(entry.name);
+            }
+            if (Array.isArray(entry.group)) {
+                visit(entry.group);
+            }
+        }
+    };
+    visit(addressparser(value));
+    return texts.every((text) => [decodeEncodedWords(Buffer.from(text, "binary").toString("utf8")), decodeEncodedWords(text)].every((view) => {
+        if (/[＠﹫]/.test(view)) {
+            return false;
+        }
+        const remainder = view.replace(DISPLAY_ADDRESS_TOKEN, (token) => (isAllowed(token) ? " " : "@"));
+        return !remainder.includes("@");
+    }));
+}
+/**
+ * The ActiveSync compose sender check: restapi's `checkOriginatorHeaders()` with `rejectAddressLikeDisplayNames`, plus
+ * two plugin-side refusals restapi doesn't make. Returns a refusal reason, or `undefined` if the message passes.
+ * - **Relaxed for the sender's own address**: a display name or comment that shows an address is still accepted when
+ * every address it shows is one of the mailbox's own (`"me@example.com" <me@example.com>`) - see
+ * `displayTextShowsOnlyAllowedAddresses()`. Any other address, or a look-alike `@`, is refused as restapi refuses it.
+ * - **A `From`/`Sender` field restapi's lexer can't see** - the tolerant `lexHeaderFields()` counts more of them (e.g.
+ * a leading space on the first line, or a form feed before the colon, both of which mailsplit still reads as `From`).
+ * - **An empty group** (`victims:;, me@example.com`) - it contributes no address, only text of the sender's choice
+ * shown beside the real address, and RFC 5322 doesn't allow groups in `From`/`Sender` at all.
+ */
+export function checkComposedOriginators(raw, isAllowed) {
+    const refusal = checkOriginatorHeaders(raw, isAllowed);
+    if (refusal !== undefined) {
+        return refusal;
+    }
+    const exact = extractOriginatorHeaders(raw);
+    for (const [name, values] of [
+        ["From", exact.from],
+        ["Sender", exact.sender],
+    ]) {
+        if (values.some((value) => hasAddressLikeDisplayName(value) && !displayTextShowsOnlyAllowedAddresses(value, isAllowed))) {
+            return `The ${name} header's display name or comment contains an address.`;
+        }
+    }
+    const fields = lexHeaderFields(raw).fields;
+    const count = (name) => fields.filter((field) => field.name === name).length;
+    if (count("from") !== exact.from.length || count("sender") !== exact.sender.length) {
+        return "The message has a From or Sender header in a form this server doesn't accept.";
+    }
+    const hasEmptyGroup = (value) => addressparser(value).some((entry) => Array.isArray(entry.group) && entry.group.length === 0);
+    if ([...exact.from, ...exact.sender].some(hasEmptyGroup)) {
+        return "The From or Sender header contains an empty group.";
+    }
+    return undefined;
+}
+/**
+ * Returns a copy of `raw` with every top-level header field named `name` (case-insensitive, whitespace before the
+ * colon allowed, including its folded continuation lines) removed, found with `lexHeaderFields()` - so a field
+ * written `Bcc :` is removed too. Only the header block is touched; every other byte is copied verbatim.
+ */
+export function stripHeader(raw, name) {
+    const target = name.toLowerCase();
+    const { text, fields } = lexHeaderFields(raw);
+    let result = "";
+    let copiedUpTo = 0;
+    for (const field of fields) {
+        if (field.name === target) {
+            result += text.slice(copiedUpTo, field.start);
+            copiedUpTo = field.end;
+        }
+    }
+    return Buffer.from(result + text.slice(copiedUpTo), "latin1");
+}
+//# sourceMappingURL=MimeHeaderUtils.js.map

package/dist/lib/MimeHeaderUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MimeHeaderUtils.js","sourceRoot":"","sources":["../../src/MimeHeaderUtils.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,aAAa,MAAM,8BAA8B,CAAC;AAEzD;;;;;;;;;;;;;;GAcG;AAEH,kHAAkH;AAClH,mDAAmD;AACnD,kHAAkH;AAElH;;;GAGG;AACH,SAAS,yBAAyB,CAAC,GAAW;IAC1C,MAAM,IAAI,GAAW,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,KAAK,GAA4B,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACnE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;AAC3G,CAAC;AAED;;;GAGG;AACH,SAAS,6BAA6B,CAAC,KAAa;IAChD,IAAI,MAAM,GAAW,EAAE,CAAC;IACxB,IAAI,OAAO,GAAY,KAAK,CAAC;IAC7B,IAAI,YAAY,GAAW,CAAC,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,EAAE,GAAW,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,OAAO,IAAI,YAAY,GAAG,CAAC,CAAC,EAAE,CAAC;YAC/C,CAAC,EAAE,CAAC;YACJ,SAAS;QACb,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACb,OAAO,GAAG,KAAK,CAAC;gBAChB,MAAM,IAAI,GAAG,CAAC;YAClB,CAAC;YACD,SAAS;QACb,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACb,YAAY,EAAE,CAAC;YACf,SAAS;QACb,CAAC;QACD,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACnB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACb,YAAY,EAAE,CAAC;gBACf,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;oBACrB,MAAM,IAAI,GAAG,CAAC;gBAClB,CAAC;YACL,CAAC;YACD,SAAS;QACb,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACb,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACjB,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,wBAAwB,CAAC,KAAa;IAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAW,EAAE,CAAC;IACzB,IAAI,OAAO,GAAY,KAAK,CAAC;IAC7B,IAAI,YAAY,GAAW,CAAC,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,EAAE,GAAW,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,OAAO,IAAI,YAAY,GAAG,CAAC,CAAC,EAAE,CAAC;YAC/C,OAAO,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,CAAC,EAAE,CAAC;YACJ,SAAS;QACb,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACb,OAAO,GAAG,KAAK,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACpB,OAAO,GAAG,EAAE,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACJ,OAAO,IAAI,EAAE,CAAC;YAClB,CAAC;YACD,SAAS;QACb,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACb,YAAY,EAAE,CAAC;YACf,OAAO,IAAI,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,SAAS;QACb,CAAC;QACD,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACnB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACb,YAAY,EAAE,CAAC;gBACf,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;oBACrB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACpB,OAAO,GAAG,EAAE,CAAC;oBACb,SAAS;gBACb,CAAC;YACL,CAAC;YACD,OAAO,IAAI,EAAE,CAAC;YACd,SAAS;QACb,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,IAAI,CAAC;QACnB,CAAC;IACL,CAAC;IACD,IAAI,OAAO,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;kFAEkF;AAClF,SAAS,qBAAqB,CAAC,GAAW;IACtC,MAAM,EAAE,UAAU,EAAE,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAChD,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACrD,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAW;IAChD,MAAM,MAAM,GAAsB,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC3D,KAAK,MAAM,IAAI,IAAI,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,KAAK,GAA4B,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjF,IAAI,KAAK,EAAE,CAAC;YACR,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAuB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,mHAAmH;AACnH,SAAS,kBAAkB,CAAC,IAAY;IACpC,OAAO,IAAI,CAAC,OAAO,CAAC,iCAAiC,EAAE,CAAC,MAAM,EAAE,QAAgB,EAAE,IAAY,EAAE,EAAE;QAC9F,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,CAAC;YACjC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,KAAK,GAAW,MAAM,CAAC,IAAI,CAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,EAAE,EAAE,GAAW,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAClH,QAAQ,CACX,CAAC;QACF,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACP,CAAC;AAED,4GAA4G;AAC5G,MAAM,YAAY,GAAG,OAAO,CAAC;AAE7B,2GAA2G;AAC3G,SAAS,WAAW,CAAC,IAAY;IAC7B,MAAM,MAAM,GAAW,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpE,OAAO,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;AACxG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACnD,IAAI,wBAAwB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,OAA2C,EAAW,EAAE,CACnE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/I,OAAO,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AACvC,CAAC;AAYD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,sBAAsB,CAClC,GAAW,EACX,SAAuC,EACvC,UAAwC,EAAE;IAE1C,MAAM,MAAM,GAAsB,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,iCAAiC,CAAC;IAC7C,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,4CAA4C,CAAC;IACxD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,8CAA8C,CAAC;IAC1D,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,OAAO,IAAI,kFAAkF,CAAC;IACxI,KAAK,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI;QAC/B,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;KACJ,EAAE,CAAC;QACxB,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YAC/B,MAAM,MAAM,GAA2B,aAAa,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,OAAO,IAAI,8BAA8B,CAAC;YACrD,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACtE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YACD,MAAM,MAAM,GAAa,6BAA6B,CAAC,KAAK,CAAC;iBACxD,KAAK,CAAC,YAAY,CAAC;iBACnB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5C,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC5C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YACD,IAAI,OAAO,CAAC,6BAA6B,IAAI,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5E,OAAO,OAAO,IAAI,wDAAwD,CAAC;YAC/E,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,2HAA2H;AAC3H,MAAM,qBAAqB,GAAG,6CAA6C,CAAC;AAE5E,uCAAuC;AACvC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAErC,iGAAiG;AACjG,SAAS,mBAAmB,CAAC,KAAa,EAAE,SAAkB;IAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,GAAW,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACjE,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;gFACgF;AAChF,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC3C,OAAO,CACH,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,CAAC,MAAM,IAAI,wBAAwB;QAC1C,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC;QACnC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CACtC,CAAC;AACN,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAa;IACzC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,KAAK,GAAW,IAAI,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACjG,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAgBD,0GAA0G;AAC1G,SAAS,eAAe,CAAC,GAAW;IAChC,MAAM,IAAI,GAAW,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,SAAS,GAA2B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,0GAA0G;IAC1G,MAAM,SAAS,GAAW,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IACxG,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,2BAA2B,CAAC;IAC9C,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,OAAO,QAAQ,GAAG,SAAS,EAAE,CAAC;QAC1B,SAAS,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC/B,MAAM,KAAK,GAAoB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC;QACrD,MAAM,OAAO,GAAW,KAAK,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,OAAO,GAAW,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACnD,MAAM,OAAO,GAA4B,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACnE,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC;QAC1B,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAW,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3H,CAAC;QACD,QAAQ,GAAG,OAAO,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,+GAA+G;AAC/G,MAAM,qBAAqB,GAAG,4CAA4C,CAAC;AAE3E;;;;;;;GAOG;AACH,SAAS,oCAAoC,CAAC,KAAa,EAAE,SAAuC;IAChG,MAAM,KAAK,GAAa,CAAC,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,CAAC,OAA2C,EAAQ,EAAE;QAChE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7B,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;QACL,CAAC;IACL,CAAC,CAAC;IACF,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5B,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CACxB,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE;QACxG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,SAAS,GAAW,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzG,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC,CAAC,CACL,CAAC;AACN,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAW,EAAE,SAAuC;IACzF,MAAM,OAAO,GAAuB,sBAAsB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC3E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAsB,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAC/D,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI;QACzB,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;KACH,EAAE,CAAC;QACxB,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;YACtH,OAAO,OAAO,IAAI,wDAAwD,CAAC;QAC/E,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAkB,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;IAC7F,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACjF,OAAO,+EAA+E,CAAC;IAC3F,CAAC;IACD,MAAM,aAAa,GAAG,CAAC,KAAa,EAAW,EAAE,CAC5C,aAAa,CAAC,KAAK,CAA6B,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;IAC9H,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QACvD,OAAO,oDAAoD,CAAC;IAChE,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,IAAY;IACjD,MAAM,MAAM,GAAW,IAAI,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,MAAM,GAAW,EAAE,CAAC;IACxB,IAAI,UAAU,GAAW,CAAC,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAC9C,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC;QAC3B,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;AAClE,CAAC"}

package/dist/lib/RegexPatternUtils.js

@@ -0,0 +1,30 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { StringUtils } from "@rapidrest/core";
+/**
+ * Mirrors `@rapidrest/service-core`'s private `ModelUtils.MAX_PATTERN_LENGTH`: a `regex(...)` query operand
+ * longer than this is rejected as a potential ReDoS pattern with `INVALID_REQUEST`. The check runs against the
+ * operand AFTER escaping, so a raw client term well under the limit can still exceed it once each regex
+ * metacharacter doubles in length.
+ */
+export const MAX_REGEX_PATTERN_LENGTH = 100;
+/**
+ * Escapes `value` for a literal-substring `regex(...)` match, truncating the raw term (never mid-escape or
+ * mid-code-point) so the escaped result always fits `MAX_REGEX_PATTERN_LENGTH`. Matching on a prefix of an
+ * over-long search term still yields a superset of the full term's matches, which is a far better outcome than
+ * the whole command failing.
+ */
+export function boundedEscapedPattern(value, maxLength = MAX_REGEX_PATTERN_LENGTH) {
+    let pattern = "";
+    for (const char of value) {
+        const escaped = StringUtils.escapeRegExp(char);
+        if (pattern.length + escaped.length > maxLength) {
+            break;
+        }
+        pattern += escaped;
+    }
+    return pattern;
+}
+//# sourceMappingURL=RegexPatternUtils.js.map

package/dist/lib/RegexPatternUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RegexPatternUtils.js","sourceRoot":"","sources":["../../src/RegexPatternUtils.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,YAAoB,wBAAwB;IAC7F,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC9C,MAAM;QACV,CAAC;QACD,OAAO,IAAI,OAAO,CAAC;IACvB,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC"}

package/dist/lib/RestapiCompat.js

@@ -0,0 +1,41 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { createHash } from "crypto";
+import { BaseEntity } from "@rapidrest/service-core";
+/**
+ * Inline copies of small restapi helpers that the `@rapidmx/restapi` 0.9.0 this plugin builds against doesn't export
+ * yet. Each matches restapi's source exactly - replace the copy with restapi's export once the dependency is bumped.
+ */
+/** The longest value `boundIndexedValue()` stores verbatim (restapi `util/ConversationUtils.ts`). */
+export const MAX_INDEXED_VALUE_LENGTH = 255;
+/**
+ * Returns `value` unchanged when it's at most `MAX_INDEXED_VALUE_LENGTH` characters, otherwise
+ * `sha256:<64 hex digits>` of its UTF-8 bytes - how restapi stores indexed identifiers from untrusted mail/calendar
+ * data (`Message.messageId`, `Message.conversationId`, `CalendarEvent.icalUid`). Idempotent, so a lookup value passed
+ * through it matches the stored one. Copy of restapi's `boundIndexedValue()` (`util/ConversationUtils.ts`).
+ */
+export function boundIndexedValue(value) {
+    if (typeof value !== "string" || value.length <= MAX_INDEXED_VALUE_LENGTH) {
+        return value;
+    }
+    return `sha256:${createHash("sha256").update(value, "utf8").digest("hex")}`;
+}
+/**
+ * `row` as an instance of `repo`'s model class, for use as the `existing` argument of `RepoUtils.update()`.
+ *
+ * `update()` only enforces its optimistic lock (a version mismatch -> 409, a version-filtered write, and the
+ * `version`/`dateModified` bump) when `existing instanceof BaseEntity`. The Mongo backend's `find()`/`findOne()` return
+ * plain documents, so passing one straight through silently turns a version-checked write into an unconditional
+ * overwrite that other devices' change streams never see. SQL reads already return entity instances, which pass
+ * through as-is. Copy of restapi's `asEntity()` (`util/EntityUtils.ts`).
+ */
+export function asEntity(repo, row) {
+    if (row instanceof BaseEntity) {
+        return row;
+    }
+    const modelClass = repo.modelClass;
+    return modelClass ? new modelClass(row) : row;
+}
+//# sourceMappingURL=RestapiCompat.js.map

package/dist/lib/RestapiCompat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RestapiCompat.js","sourceRoot":"","sources":["../../src/RestapiCompat.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,UAAU,EAAkB,MAAM,yBAAyB,CAAC;AAErE;;;GAGG;AAEH,qGAAqG;AACrG,MAAM,CAAC,MAAM,wBAAwB,GAAW,GAAG,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAsC,KAAQ;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,wBAAwB,EAAE,CAAC;QACxE,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAO,CAAC;AACrF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,QAAQ,CAAI,IAAoB,EAAE,GAAM;IACpD,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC;IACf,CAAC;IACD,MAAM,UAAU,GAAS,IAAY,CAAC,UAAU,CAAC;IACjD,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AAClD,CAAC"}