@rapidmx/restapi 0.1.0

package/dist/lib/models/types.js

@@ -0,0 +1,108 @@
+/**
+ * The kind of well-known folder a `Folder` represents. `USER` is any folder created by the mailbox owner
+ * (or a client) rather than one of the special system folders every mailbox is provisioned with.
+ */
+export var FolderType;
+(function (FolderType) {
+    FolderType["INBOX"] = "inbox";
+    FolderType["SENT_ITEMS"] = "sent_items";
+    FolderType["DRAFTS"] = "drafts";
+    FolderType["DELETED_ITEMS"] = "deleted_items";
+    FolderType["OUTBOX"] = "outbox";
+    FolderType["JUNK"] = "junk";
+    FolderType["CALENDAR"] = "calendar";
+    FolderType["CONTACTS"] = "contacts";
+    FolderType["TASKS"] = "tasks";
+    FolderType["NOTES"] = "notes";
+    FolderType["USER"] = "user";
+})(FolderType || (FolderType = {}));
+/** The kind of address a `Recipient` represents on a `Message`. */
+export var RecipientType;
+(function (RecipientType) {
+    RecipientType["TO"] = "to";
+    RecipientType["CC"] = "cc";
+    RecipientType["BCC"] = "bcc";
+})(RecipientType || (RecipientType = {}));
+export var MessageImportance;
+(function (MessageImportance) {
+    MessageImportance["LOW"] = "low";
+    MessageImportance["NORMAL"] = "normal";
+    MessageImportance["HIGH"] = "high";
+})(MessageImportance || (MessageImportance = {}));
+export var ContactAddressKind;
+(function (ContactAddressKind) {
+    ContactAddressKind["HOME"] = "home";
+    ContactAddressKind["WORK"] = "work";
+    ContactAddressKind["OTHER"] = "other";
+})(ContactAddressKind || (ContactAddressKind = {}));
+export var AttendeeRole;
+(function (AttendeeRole) {
+    AttendeeRole["REQUIRED"] = "required";
+    AttendeeRole["OPTIONAL"] = "optional";
+    AttendeeRole["RESOURCE"] = "resource";
+})(AttendeeRole || (AttendeeRole = {}));
+export var AttendeeResponseStatus;
+(function (AttendeeResponseStatus) {
+    AttendeeResponseStatus["NEEDS_ACTION"] = "needsAction";
+    AttendeeResponseStatus["ACCEPTED"] = "accepted";
+    AttendeeResponseStatus["DECLINED"] = "declined";
+    AttendeeResponseStatus["TENTATIVE"] = "tentative";
+})(AttendeeResponseStatus || (AttendeeResponseStatus = {}));
+export var RecurrenceFrequency;
+(function (RecurrenceFrequency) {
+    RecurrenceFrequency["DAILY"] = "daily";
+    RecurrenceFrequency["WEEKLY"] = "weekly";
+    RecurrenceFrequency["MONTHLY"] = "monthly";
+    RecurrenceFrequency["YEARLY"] = "yearly";
+})(RecurrenceFrequency || (RecurrenceFrequency = {}));
+export var CalendarEventStatus;
+(function (CalendarEventStatus) {
+    CalendarEventStatus["TENTATIVE"] = "tentative";
+    CalendarEventStatus["CONFIRMED"] = "confirmed";
+    CalendarEventStatus["CANCELLED"] = "cancelled";
+})(CalendarEventStatus || (CalendarEventStatus = {}));
+export var BusyStatus;
+(function (BusyStatus) {
+    BusyStatus["FREE"] = "free";
+    BusyStatus["BUSY"] = "busy";
+    BusyStatus["TENTATIVE"] = "tentative";
+    BusyStatus["OUT_OF_OFFICE"] = "oof";
+})(BusyStatus || (BusyStatus = {}));
+export var TaskPriority;
+(function (TaskPriority) {
+    TaskPriority["LOW"] = "low";
+    TaskPriority["NORMAL"] = "normal";
+    TaskPriority["HIGH"] = "high";
+})(TaskPriority || (TaskPriority = {}));
+/** The kind of record a `ScanResult` was produced for. */
+export var ScanTargetType;
+(function (ScanTargetType) {
+    ScanTargetType["MESSAGE"] = "message";
+    ScanTargetType["ATTACHMENT"] = "attachment";
+})(ScanTargetType || (ScanTargetType = {}));
+export var SpamVerdict;
+(function (SpamVerdict) {
+    SpamVerdict["CLEAN"] = "clean";
+    SpamVerdict["SUSPECT"] = "suspect";
+    SpamVerdict["SPAM"] = "spam";
+})(SpamVerdict || (SpamVerdict = {}));
+export var AvVerdict;
+(function (AvVerdict) {
+    AvVerdict["CLEAN"] = "clean";
+    AvVerdict["INFECTED"] = "infected";
+    AvVerdict["ERROR"] = "error";
+})(AvVerdict || (AvVerdict = {}));
+export var QuarantineReason;
+(function (QuarantineReason) {
+    QuarantineReason["INFECTED"] = "infected";
+    QuarantineReason["SPAM_POLICY"] = "spam_policy";
+    QuarantineReason["OTHER"] = "other";
+})(QuarantineReason || (QuarantineReason = {}));
+export var IngestStatus;
+(function (IngestStatus) {
+    IngestStatus["PENDING"] = "pending";
+    IngestStatus["SCANNING"] = "scanning";
+    IngestStatus["DELIVERED"] = "delivered";
+    IngestStatus["FAILED"] = "failed";
+})(IngestStatus || (IngestStatus = {}));
+//# sourceMappingURL=types.js.map

package/dist/lib/models/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/models/types.ts"],"names":[],"mappings":"AAMA;;;GAGG;AACH,MAAM,CAAN,IAAY,UAYX;AAZD,WAAY,UAAU;IAClB,6BAAe,CAAA;IACf,uCAAyB,CAAA;IACzB,+BAAiB,CAAA;IACjB,6CAA+B,CAAA;IAC/B,+BAAiB,CAAA;IACjB,2BAAa,CAAA;IACb,mCAAqB,CAAA;IACrB,mCAAqB,CAAA;IACrB,6BAAe,CAAA;IACf,6BAAe,CAAA;IACf,2BAAa,CAAA;AACjB,CAAC,EAZW,UAAU,KAAV,UAAU,QAYrB;AA4ED,mEAAmE;AACnE,MAAM,CAAN,IAAY,aAIX;AAJD,WAAY,aAAa;IACrB,0BAAS,CAAA;IACT,0BAAS,CAAA;IACT,4BAAW,CAAA;AACf,CAAC,EAJW,aAAa,KAAb,aAAa,QAIxB;AAiBD,MAAM,CAAN,IAAY,iBAIX;AAJD,WAAY,iBAAiB;IACzB,gCAAW,CAAA;IACX,sCAAiB,CAAA;IACjB,kCAAa,CAAA;AACjB,CAAC,EAJW,iBAAiB,KAAjB,iBAAiB,QAI5B;AAwID,MAAM,CAAN,IAAY,kBAIX;AAJD,WAAY,kBAAkB;IAC1B,mCAAa,CAAA;IACb,mCAAa,CAAA;IACb,qCAAe,CAAA;AACnB,CAAC,EAJW,kBAAkB,KAAlB,kBAAkB,QAI7B;AA4ED,MAAM,CAAN,IAAY,YAIX;AAJD,WAAY,YAAY;IACpB,qCAAqB,CAAA;IACrB,qCAAqB,CAAA;IACrB,qCAAqB,CAAA;AACzB,CAAC,EAJW,YAAY,KAAZ,YAAY,QAIvB;AAED,MAAM,CAAN,IAAY,sBAKX;AALD,WAAY,sBAAsB;IAC9B,sDAA4B,CAAA;IAC5B,+CAAqB,CAAA;IACrB,+CAAqB,CAAA;IACrB,iDAAuB,CAAA;AAC3B,CAAC,EALW,sBAAsB,KAAtB,sBAAsB,QAKjC;AAWD,MAAM,CAAN,IAAY,mBAKX;AALD,WAAY,mBAAmB;IAC3B,sCAAe,CAAA;IACf,wCAAiB,CAAA;IACjB,0CAAmB,CAAA;IACnB,wCAAiB,CAAA;AACrB,CAAC,EALW,mBAAmB,KAAnB,mBAAmB,QAK9B;AAeD,MAAM,CAAN,IAAY,mBAIX;AAJD,WAAY,mBAAmB;IAC3B,8CAAuB,CAAA;IACvB,8CAAuB,CAAA;IACvB,8CAAuB,CAAA;AAC3B,CAAC,EAJW,mBAAmB,KAAnB,mBAAmB,QAI9B;AAED,MAAM,CAAN,IAAY,UAKX;AALD,WAAY,UAAU;IAClB,2BAAa,CAAA;IACb,2BAAa,CAAA;IACb,qCAAuB,CAAA;IACvB,mCAAqB,CAAA;AACzB,CAAC,EALW,UAAU,KAAV,UAAU,QAKrB;AA+FD,MAAM,CAAN,IAAY,YAIX;AAJD,WAAY,YAAY;IACpB,2BAAW,CAAA;IACX,iCAAiB,CAAA;IACjB,6BAAa,CAAA;AACjB,CAAC,EAJW,YAAY,KAAZ,YAAY,QAIvB;AA8CD,0DAA0D;AAC1D,MAAM,CAAN,IAAY,cAGX;AAHD,WAAY,cAAc;IACtB,qCAAmB,CAAA;IACnB,2CAAyB,CAAA;AAC7B,CAAC,EAHW,cAAc,KAAd,cAAc,QAGzB;AAED,MAAM,CAAN,IAAY,WAIX;AAJD,WAAY,WAAW;IACnB,8BAAe,CAAA;IACf,kCAAmB,CAAA;IACnB,4BAAa,CAAA;AACjB,CAAC,EAJW,WAAW,KAAX,WAAW,QAItB;AAED,MAAM,CAAN,IAAY,SAIX;AAJD,WAAY,SAAS;IACjB,4BAAe,CAAA;IACf,kCAAqB,CAAA;IACrB,4BAAe,CAAA;AACnB,CAAC,EAJW,SAAS,KAAT,SAAS,QAIpB;AA+BD,MAAM,CAAN,IAAY,gBAIX;AAJD,WAAY,gBAAgB;IACxB,yCAAqB,CAAA;IACrB,+CAA2B,CAAA;IAC3B,mCAAe,CAAA;AACnB,CAAC,EAJW,gBAAgB,KAAhB,gBAAgB,QAI3B;AAiDD,MAAM,CAAN,IAAY,YAKX;AALD,WAAY,YAAY;IACpB,mCAAmB,CAAA;IACnB,qCAAqB,CAAA;IACrB,uCAAuB,CAAA;IACvB,iCAAiB,CAAA;AACrB,CAAC,EALW,YAAY,KAAZ,YAAY,QAKvB"}

package/dist/lib/mongo.js

@@ -0,0 +1,8 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+export * from "./models/mongo.js";
+export * from "./routes/mongo.js";
+export * from "./jobs/mongo.js";
+//# sourceMappingURL=mongo.js.map

package/dist/lib/mongo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongo.js","sourceRoot":"","sources":["../../src/mongo.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC"}

package/dist/lib/push/MailPushRoute.js

@@ -0,0 +1,42 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { BasePushRoute } from "@rapidrest/service-core";
+/**
+ * Real-time push notifications for the webmail client, built entirely on `service-core`'s own
+ * `BasePushRoute` (WebSocket connect/subscribe/unsubscribe, Redis pub/sub fan-out) — no mail-specific override
+ * is needed, since `BasePushRoute`'s channel model already matches this library's own permission model exactly.
+ *
+ * **Channels are bare entity uids** — a `Mailbox.uid` or a `Folder.uid`, the same uid `ACLUtils.hasPermission()`
+ * is checked against everywhere else in this library — NOT a prefixed name like `"mailbox:<uid>"`.
+ * `BasePushRoute.connect()`'s SUBSCRIBE handler calls `aclUtils.hasPermission(user, channel, ACLAction.READ)`
+ * with the client-supplied channel value verbatim, so a client subscribes directly to the `uid` of whichever
+ * `Mailbox`/`Folder` it wants live updates for — that uid resolves to the real `AccessControlList` document the
+ * same way every other read in this library does, including the `parentUid` inheritance chain (subscribing to
+ * a `Mailbox` uid a caller can read does NOT also deliver that mailbox's folders' events - each `Folder` is a
+ * separate channel a client subscribes to independently, matching how `Folder`'s own ACL is a separate document
+ * from its owning `Mailbox`'s).
+ *
+ * Publishing is done via `NotificationUtils.sendMessage(uids, type, action, data)` (`@Inject(NotificationUtils)`
+ * in the base route classes) at the mutation call sites — see `BaseScopedChildRoute`/`BaseFolderRoute`/
+ * `ScanQueueJob` for where this library calls it. A message arrives at a subscribed client as
+ * `{type: "MESSAGE", channel, data: {type, action, data}}` (the outer envelope from `BasePushRoute`'s Redis
+ * subscription forwarding, the inner `{type, action, data}` from `NotificationUtils.sendMessage()`).
+ *
+ * !!Note!! like `BasePushRoute` itself, this class is not automatically registered with a server — the
+ * consuming application must apply `@Route("/push")` (or any other chosen base path) to its own subclass:
+ * ```ts
+ * import { MailPushRoute } from "@rapidrest/mail";
+ * import { RouteDecorators } from "@rapidrest/service-core";
+ * const { Route } = RouteDecorators;
+ *
+ * @Route("/push")
+ * export class PushRoute extends MailPushRoute {}
+ * ```
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class MailPushRoute extends BasePushRoute {
+}
+//# sourceMappingURL=MailPushRoute.js.map

package/dist/lib/push/MailPushRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MailPushRoute.js","sourceRoot":"","sources":["../../../src/push/MailPushRoute.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,OAAO,aAAc,SAAQ,aAAa;CAAG"}

package/dist/lib/push/index.js

@@ -0,0 +1,6 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+export * from "./MailPushRoute.js";
+//# sourceMappingURL=index.js.map

package/dist/lib/push/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/push/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,cAAc,oBAAoB,CAAC"}

package/dist/lib/routes/BaseAttachmentRoute.js

@@ -0,0 +1,142 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import * as crypto from "crypto";
+import { ApiError, ObjectDecorators } from "@rapidrest/core";
+import { ACLAction, ApiErrorMessages, ApiErrors, DocDecorators, RouteDecorators, } from "@rapidrest/service-core";
+import { RecoverableRepoUtils } from "../util/RecoverableRepoUtils.js";
+import { BaseScopedChildRoute } from "./BaseScopedChildRoute.js";
+const { Inject } = ObjectDecorators;
+const { Description, Returns, Summary } = DocDecorators;
+const { Get, Param, Post, Request, Response, User: AuthUser } = RouteDecorators;
+/**
+ * Extends `BaseScopedChildRoute` (scoped by `folderUid` — see the architecture note on `Message.mailboxUid`)
+ * for `Attachment` with `upload`/`download` endpoints that move binary content through the configured
+ * `BlobStore` — `Attachment` records never carry binary content inline, only metadata plus a `blobKey`.
+ * Ordinary `create` is deliberately NOT used for uploading an attachment's content (it would require the
+ * client to already have a `blobKey`, which only this route can mint) — `upload` replaces it as the way a new
+ * attachment record is created.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class BaseAttachmentRoute extends BaseScopedChildRoute {
+    constructor() {
+        super(...arguments);
+        this.scopeProperty = "folderUid";
+    }
+    async getMessageRepo() {
+        if (!this.messageRepo) {
+            this.messageRepo = await this._objectFactory.newInstance(RecoverableRepoUtils, {
+                name: this.messageClass.name,
+                args: [this.messageClass],
+            });
+        }
+        return this.messageRepo;
+    }
+    async upload(req, user) {
+        if (!this.repoUtils || !this.blobStore) {
+            throw new ApiError(ApiErrors.INTERNAL_ERROR, 500, ApiErrorMessages.INTERNAL_ERROR);
+        }
+        const messageUid = req.query["messageUid"];
+        const filename = req.query["filename"];
+        const mimeType = req.query["mimeType"];
+        const isInline = req.query["isInline"] === "true";
+        const contentId = req.query["contentId"];
+        const raw = req.rawBody;
+        if (!raw || raw.length === 0 || Array.isArray(messageUid) || !messageUid || Array.isArray(filename) || !filename) {
+            throw new ApiError(ApiErrors.INVALID_REQUEST, 400, ApiErrorMessages.INVALID_REQUEST);
+        }
+        // `folderUid`/`mailboxUid` are ALWAYS derived from the owning `Message` record here, never taken from
+        // the client — `Attachment.folderUid`/`mailboxUid`'s own doc comment describes them as "denormalized
+        // from that Message", and trusting client-supplied values for them (as this route previously did) let
+        // any caller with CREATE access to ANY folder they own attach content to a `messageUid` belonging to a
+        // completely different mailbox, by simply asserting whatever `folderUid`/`mailboxUid` they liked — a
+        // cross-mailbox attachment-planting and quota-poisoning primitive (`MailboxQuotaRecalcJob.
+        // recalcMailbox()` sums `Attachment.find({ messageUid })` for every message, with no mailbox check of
+        // its own). Resolving the message server-side and checking permission against *its* `folderUid` closes
+        // that gap entirely: an attacker can no longer create an attachment against a message they don't have
+        // UPDATE access to, regardless of what folder/mailbox uids they supply.
+        const messageRepo = await this.getMessageRepo();
+        const message = await messageRepo.findOne(messageUid, { ignoreACL: true });
+        if (!message) {
+            throw new ApiError(ApiErrors.INVALID_REQUEST, 400, ApiErrorMessages.INVALID_REQUEST);
+        }
+        if (!(await this.aclUtils.hasPermission(user, message.folderUid, ACLAction.UPDATE))) {
+            throw new ApiError(ApiErrors.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        const blobKey = `attachments/${crypto.randomUUID()}`;
+        await this.blobStore.put(blobKey, raw, {
+            contentType: Array.isArray(mimeType) ? mimeType[0] : mimeType,
+        });
+        return await this.doCreateObject({
+            messageUid,
+            folderUid: message.folderUid,
+            mailboxUid: message.mailboxUid,
+            filename,
+            mimeType: (Array.isArray(mimeType) ? mimeType[0] : mimeType) ?? "application/octet-stream",
+            sizeBytes: raw.length,
+            blobKey,
+            contentId: Array.isArray(contentId) ? contentId[0] : contentId,
+            isInline,
+        }, { user, ignoreACL: true });
+    }
+    async download(id, res, user) {
+        if (!this.repoUtils || !this.blobStore) {
+            throw new ApiError(ApiErrors.INTERNAL_ERROR, 500, ApiErrorMessages.INTERNAL_ERROR);
+        }
+        const attachment = await this.repoUtils.findOne(id, { ignoreACL: true });
+        if (!attachment || !(await this.aclUtils.hasPermission(user, attachment.folderUid, ACLAction.READ))) {
+            throw new ApiError(ApiErrors.NOT_FOUND, 404, ApiErrorMessages.NOT_FOUND);
+        }
+        // `HttpResponse` is a framework-agnostic abstraction over multiple HTTP runtimes (uWS, Bun) that does
+        // not guarantee a real Node.js `Writable` to pipe a stream into — buffering the full content and
+        // calling `send()` is the one approach guaranteed to work across all of them. Revisit with true
+        // streaming (e.g. an `HttpResponse.pipeFrom()` runtime primitive) if large-attachment memory use
+        // becomes a real problem; deferred here the same way MAPI Fast Transfer streaming is deferred.
+        const content = await this.blobStore.get(attachment.blobKey);
+        res.setHeader("content-type", attachment.mimeType);
+        res.setHeader("content-length", attachment.sizeBytes);
+        res.setHeader("content-disposition", `${attachment.isInline ? "inline" : "attachment"}; filename="${attachment.filename}"`);
+        res.send(content);
+    }
+}
+__decorate([
+    Inject("BlobStore"),
+    __metadata("design:type", Object)
+], BaseAttachmentRoute.prototype, "blobStore", void 0);
+__decorate([
+    Summary("Upload attachment"),
+    Description("Stores the request body as a new attachment's binary content and creates its metadata record."),
+    Returns([Object]),
+    Post("/upload"),
+    __param(0, Request),
+    __param(1, AuthUser),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseAttachmentRoute.prototype, "upload", null);
+__decorate([
+    Summary("Download attachment content"),
+    Description("Streams the binary content of an attachment."),
+    Get("/:id/content"),
+    __param(0, Param("id")),
+    __param(1, Response),
+    __param(2, AuthUser),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseAttachmentRoute.prototype, "download", null);
+//# sourceMappingURL=BaseAttachmentRoute.js.map

package/dist/lib/routes/BaseAttachmentRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseAttachmentRoute.js","sourceRoot":"","sources":["../../../src/routes/BaseAttachmentRoute.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAgB,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EACH,SAAS,EACT,gBAAgB,EAChB,SAAS,EACT,aAAa,EAGb,eAAe,GAClB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AACpC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC;AACxD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC;AAEhF;;;;;;;;;GASG;AACH,MAAM,OAAgB,mBAAuE,SAAQ,oBAAuB;IAA5H;;QACuB,kBAAa,GAAW,WAAW,CAAC;IA+G3D,CAAC;IArGW,KAAK,CAAC,cAAc;QACxB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,oBAAoB,EAAE;gBAC5E,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;gBAC5B,IAAI,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;aAC5B,CAAC,CAAC;QACP,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC5B,CAAC;IAMY,AAAN,KAAK,CAAC,MAAM,CAAU,GAAgB,EAAY,IAAc;QACnE,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACrC,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,EAAE,gBAAgB,CAAC,cAAc,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,UAAU,GAAkC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAkC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAkC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAY,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,MAAM,CAAC;QAC3D,MAAM,SAAS,GAAkC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACxE,MAAM,GAAG,GAAuB,GAAG,CAAC,OAAO,CAAC;QAE5C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/G,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,GAAG,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC;QACzF,CAAC;QAED,sGAAsG;QACtG,qGAAqG;QACrG,sGAAsG;QACtG,uGAAuG;QACvG,qGAAqG;QACrG,2FAA2F;QAC3F,sGAAsG;QACtG,uGAAuG;QACvG,sGAAsG;QACtG,wEAAwE;QACxE,MAAM,WAAW,GAA4B,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACzE,MAAM,OAAO,GAAkB,MAAM,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,GAAG,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,QAAS,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QACzG,CAAC;QAED,MAAM,OAAO,GAAW,eAAe,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;QAC7D,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE;YACnC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ;SAChE,CAAC,CAAC;QAEH,OAAO,MAAM,IAAI,CAAC,cAAc,CAC5B;YACI,UAAU;YACV,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ;YACR,QAAQ,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,0BAA0B;YAC1F,SAAS,EAAE,GAAG,CAAC,MAAM;YACrB,OAAO;YACP,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YAC9D,QAAQ;SACJ,EACR,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAC5B,CAAC;IACN,CAAC;IAKY,AAAN,KAAK,CAAC,QAAQ,CACJ,EAAU,EACb,GAAiB,EACjB,IAAc;QAExB,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACrC,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,EAAE,gBAAgB,CAAC,cAAc,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,UAAU,GAAkB,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,QAAS,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACnG,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC7E,CAAC;QAED,sGAAsG;QACtG,iGAAiG;QACjG,gGAAgG;QAChG,iGAAiG;QACjG,+FAA+F;QAC/F,MAAM,OAAO,GAAW,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACrE,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QACtD,GAAG,CAAC,SAAS,CACT,qBAAqB,EACrB,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,eAAe,UAAU,CAAC,QAAQ,GAAG,CACxF,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;CACJ;AAvGW;IADP,MAAM,CAAC,WAAW,CAAC;;sDACU;AAgBjB;IAJZ,OAAO,CAAC,mBAAmB,CAAC;IAC5B,WAAW,CAAC,+FAA+F,CAAC;IAC5G,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;IACjB,IAAI,CAAC,SAAS,CAAC;IACK,WAAA,OAAO,CAAA;IAAoB,WAAA,QAAQ,CAAA;;;;iDAsDvD;AAKY;IAHZ,OAAO,CAAC,6BAA6B,CAAC;IACtC,WAAW,CAAC,8CAA8C,CAAC;IAC3D,GAAG,CAAC,cAAc,CAAC;IAEf,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IACX,WAAA,QAAQ,CAAA;IACR,WAAA,QAAQ,CAAA;;;;mDAwBZ"}

package/dist/lib/routes/BaseCalendarShareLinkRoute.js

@@ -0,0 +1,123 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import * as crypto from "crypto";
+import { RouteDecorators } from "@rapidrest/service-core";
+import { BaseScopedChildRoute } from "./BaseScopedChildRoute.js";
+const { Param, Query, Request, User: AuthUser } = RouteDecorators;
+/**
+ * Extends `BaseScopedChildRoute` (scoped by `folderUid`) for `CalendarShareLink` with the two pieces of
+ * bookkeeping that make anonymous share-link consumption work with NO separate route or lookup of its own
+ * (see `BaseScopedChildRoute`'s doc comment and its local `resolveEffectiveUser()` helper for the read side of
+ * this mechanism):
+ *
+ * 1. `create()`/`update()` always mint (or preserve) `token` server-side, discarding any value the client
+ * supplied for it — `token` is the sole credential an anonymous caller presents, so its unguessability can't
+ * depend on the client, and it must never change after creation (a client "updating" it would orphan the ACL
+ * record already granted under the old value).
+ * 2. `create()`/`update()`/`delete()` keep a real `ACLRecord` for the link's token in sync on the shared
+ * folder's `AccessControlList` (`{userOrRoleId: token, actions: permittedActions}`) — granted on create,
+ * re-granted (upserted, picking up any `permittedActions`/`folderUid` change) on update, and revoked on
+ * delete. `ExternalShareExpirationJob` does the same revocation for links it GCs after they expire.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class BaseCalendarShareLinkRoute extends BaseScopedChildRoute {
+    /** Grants (or re-grants, upserting) `link.token` access to `link.folderUid`'s ACL, matching `link`'s
+     * current `permittedActions`. A no-op if the folder has no ACL document (should never happen in practice —
+     * every `Folder` is seeded with one on creation — but this is a background-adjacent write, not a
+     * request the caller is blocked on, so failing open rather than throwing keeps a missing/corrupt folder
+     * ACL from turning "create a share link" into a 500. */
+    async grantShareTokenAccess(link) {
+        const acl = await this.aclUtils.findACL(link.folderUid);
+        if (!acl) {
+            return;
+        }
+        acl.records = [
+            ...acl.records.filter((record) => record.userOrRoleId !== link.token),
+            { userOrRoleId: link.token, actions: link.permittedActions },
+        ];
+        await this.aclUtils.saveACL(acl);
+    }
+    /** Removes any ACL record for `token` from `folderUid`'s ACL. A no-op if the folder has no ACL document or
+     * no matching record - same fail-open rationale as `grantShareTokenAccess()`. */
+    async revokeShareTokenAccess(folderUid, token) {
+        const acl = await this.aclUtils.findACL(folderUid);
+        if (!acl) {
+            return;
+        }
+        const records = acl.records.filter((record) => record.userOrRoleId !== token);
+        if (records.length === acl.records.length) {
+            return;
+        }
+        acl.records = records;
+        await this.aclUtils.saveACL(acl);
+    }
+    async create(obj, req, user) {
+        for (const single of Array.isArray(obj) ? obj : [obj]) {
+            single.token = crypto.randomBytes(32).toString("base64url");
+        }
+        const created = await super.create(obj, req, user);
+        for (const single of Array.isArray(created) ? created : [created]) {
+            await this.grantShareTokenAccess(single);
+        }
+        return created;
+    }
+    async update(id, obj, req, user) {
+        // `token` is immutable once minted - a client-supplied change would orphan the ACL record already
+        // granted under the old value, since nothing would ever revoke it.
+        delete obj.token;
+        const existing = this.repoUtils ? await this.repoUtils.findOne(id, { ignoreACL: true }) : undefined;
+        const updated = await super.update(id, obj, req, user);
+        if (existing && existing.folderUid !== updated.folderUid) {
+            await this.revokeShareTokenAccess(existing.folderUid, existing.token);
+        }
+        await this.grantShareTokenAccess(updated);
+        return updated;
+    }
+    async delete(id, version, purge, req, user) {
+        const existing = this.repoUtils ? await this.repoUtils.findOne(id, { ignoreACL: true }) : undefined;
+        await super.delete(id, version, purge, req, user);
+        if (existing) {
+            await this.revokeShareTokenAccess(existing.folderUid, existing.token);
+        }
+    }
+}
+__decorate([
+    __param(1, Request),
+    __param(2, AuthUser),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseCalendarShareLinkRoute.prototype, "create", null);
+__decorate([
+    __param(2, Request),
+    __param(3, AuthUser),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseCalendarShareLinkRoute.prototype, "update", null);
+__decorate([
+    __param(0, Param("id")),
+    __param(1, Query("version")),
+    __param(2, Query("purge")),
+    __param(3, Request),
+    __param(4, AuthUser),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseCalendarShareLinkRoute.prototype, "delete", null);
+//# sourceMappingURL=BaseCalendarShareLinkRoute.js.map

package/dist/lib/routes/BaseCalendarShareLinkRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseCalendarShareLinkRoute.js","sourceRoot":"","sources":["../../../src/routes/BaseCalendarShareLinkRoute.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAEjC,OAAO,EAAe,eAAe,EAA6C,MAAM,yBAAyB,CAAC;AAClH,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC;AAElE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAgB,0BAAwD,SAAQ,oBAAuB;IACzG;;;;4DAIwD;IAChD,KAAK,CAAC,qBAAqB,CAAC,IAAO;QACvC,MAAM,GAAG,GAAkC,MAAM,IAAI,CAAC,QAAS,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxF,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,OAAO;QACX,CAAC;QACD,GAAG,CAAC,OAAO,GAAG;YACV,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC;YACrE,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE;SAC/D,CAAC;QACF,MAAM,IAAI,CAAC,QAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAED;qFACiF;IACzE,KAAK,CAAC,sBAAsB,CAAC,SAAiB,EAAE,KAAa;QACjE,MAAM,GAAG,GAAkC,MAAM,IAAI,CAAC,QAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACnF,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,OAAO;QACX,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,KAAK,KAAK,CAAC,CAAC;QAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACxC,OAAO;QACX,CAAC;QACD,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QACtB,MAAM,IAAI,CAAC,QAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAEY,AAAN,KAAK,CAAC,MAAM,CAAC,GAAY,EAAW,GAAgB,EAAY,IAAc;QACjF,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,MAAc,CAAC,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,OAAO,GAAY,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5D,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAEY,AAAN,KAAK,CAAC,MAAM,CACf,EAAU,EACV,GAAoB,EACX,GAAiB,EAChB,IAAc;QAExB,kGAAkG;QAClG,mEAAmE;QACnE,OAAQ,GAAW,CAAC,KAAK,CAAC;QAE1B,MAAM,QAAQ,GAAkB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnH,MAAM,OAAO,GAAM,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAE1D,IAAI,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;YACvD,MAAM,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAE1C,OAAO,OAAO,CAAC;IACnB,CAAC;IAEY,AAAN,KAAK,CAAC,MAAM,CACF,EAAU,EACL,OAA2B,EAC7B,KAAyB,EAChC,GAAgB,EACf,IAAc;QAExB,MAAM,QAAQ,GAAkB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnH,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAClD,IAAI,QAAQ,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1E,CAAC;IACL,CAAC;CACJ;AA7CgB;IAAsB,WAAA,OAAO,CAAA;IAAoB,WAAA,QAAQ,CAAA;;;;wDASrE;AAEY;IAGR,WAAA,OAAO,CAAA;IACP,WAAA,QAAQ,CAAA;;;;wDAeZ;AAEY;IACR,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IACX,WAAA,KAAK,CAAC,SAAS,CAAC,CAAA;IAChB,WAAA,KAAK,CAAC,OAAO,CAAC,CAAA;IACd,WAAA,OAAO,CAAA;IACP,WAAA,QAAQ,CAAA;;;;wDAOZ"}