@rapidmx/restapi 0.1.0

package/dist/lib/routes/sql/ContactListRouteSQL.js

@@ -0,0 +1,26 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { RepoUtils, RouteDecorators } from "@rapidrest/service-core";
+import { ContactListSQL } from "../../sql.js";
+import { BaseScopedChildRoute } from "../BaseScopedChildRoute.js";
+const { Model } = RouteDecorators;
+let ContactListRouteSQL = class ContactListRouteSQL extends BaseScopedChildRoute {
+    constructor() {
+        super(...arguments);
+        this.repoUtilsClass = RepoUtils;
+        this.scopeProperty = "mailboxUid";
+    }
+};
+ContactListRouteSQL = __decorate([
+    Model(ContactListSQL)
+], ContactListRouteSQL);
+export { ContactListRouteSQL };
+//# sourceMappingURL=ContactListRouteSQL.js.map

package/dist/lib/routes/sql/ContactListRouteSQL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContactListRouteSQL.js","sourceRoot":"","sources":["../../../../src/routes/sql/ContactListRouteSQL.ts"],"names":[],"mappings":";;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,MAAM,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC;AAG3B,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,oBAAoC;IAAtE;;QACgB,mBAAc,GAAQ,SAAS,CAAC;QAChC,kBAAa,GAAW,YAAY,CAAC;IAC5D,CAAC;CAAA,CAAA;AAHY,mBAAmB;IAD/B,KAAK,CAAC,cAAc,CAAC;GACT,mBAAmB,CAG/B"}

package/dist/lib/routes/sql/ContactRouteSQL.js

@@ -0,0 +1,27 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { RouteDecorators } from "@rapidrest/service-core";
+import { ContactSQL } from "../../sql.js";
+import { BaseScopedChildRoute } from "../BaseScopedChildRoute.js";
+import { RecoverableRepoUtils } from "../../util/RecoverableRepoUtils.js";
+const { Model } = RouteDecorators;
+let ContactRouteSQL = class ContactRouteSQL extends BaseScopedChildRoute {
+    constructor() {
+        super(...arguments);
+        this.repoUtilsClass = RecoverableRepoUtils;
+        this.scopeProperty = "folderUid";
+    }
+};
+ContactRouteSQL = __decorate([
+    Model(ContactSQL)
+], ContactRouteSQL);
+export { ContactRouteSQL };
+//# sourceMappingURL=ContactRouteSQL.js.map

package/dist/lib/routes/sql/ContactRouteSQL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContactRouteSQL.js","sourceRoot":"","sources":["../../../../src/routes/sql/ContactRouteSQL.ts"],"names":[],"mappings":";;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,MAAM,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC;AAG3B,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,oBAAgC;IAA9D;;QACgB,mBAAc,GAAQ,oBAAoB,CAAC;QAC3C,kBAAa,GAAW,WAAW,CAAC;IAC3D,CAAC;CAAA,CAAA;AAHY,eAAe;IAD3B,KAAK,CAAC,UAAU,CAAC;GACL,eAAe,CAG3B"}

package/dist/lib/routes/sql/FolderRouteSQL.js

@@ -0,0 +1,26 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { RouteDecorators } from "@rapidrest/service-core";
+import { FolderSQL } from "../../sql.js";
+import { BaseFolderRoute } from "../BaseFolderRoute.js";
+import { RecoverableRepoUtils } from "../../util/RecoverableRepoUtils.js";
+const { Model } = RouteDecorators;
+let FolderRouteSQL = class FolderRouteSQL extends BaseFolderRoute {
+    constructor() {
+        super(...arguments);
+        this.repoUtilsClass = RecoverableRepoUtils;
+    }
+};
+FolderRouteSQL = __decorate([
+    Model(FolderSQL)
+], FolderRouteSQL);
+export { FolderRouteSQL };
+//# sourceMappingURL=FolderRouteSQL.js.map

package/dist/lib/routes/sql/FolderRouteSQL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FolderRouteSQL.js","sourceRoot":"","sources":["../../../../src/routes/sql/FolderRouteSQL.ts"],"names":[],"mappings":";;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,MAAM,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC;AAG3B,IAAM,cAAc,GAApB,MAAM,cAAe,SAAQ,eAA0B;IAAvD;;QACgB,mBAAc,GAAQ,oBAAoB,CAAC;IAClE,CAAC;CAAA,CAAA;AAFY,cAAc;IAD1B,KAAK,CAAC,SAAS,CAAC;GACJ,cAAc,CAE1B"}

package/dist/lib/routes/sql/IngestQueueRouteSQL.js

@@ -0,0 +1,29 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { RepoUtils, RouteDecorators } from "@rapidrest/service-core";
+import { IngestQueueEntrySQL } from "../../sql.js";
+import { BaseScopedChildRoute } from "../BaseScopedChildRoute.js";
+const { Model } = RouteDecorators;
+/**
+ * See `IngestQueueRouteMongo` for the rationale — identical behavior against the SQL backend.
+ */
+let IngestQueueRouteSQL = class IngestQueueRouteSQL extends BaseScopedChildRoute {
+    constructor() {
+        super(...arguments);
+        this.repoUtilsClass = RepoUtils;
+        this.scopeProperty = "mailboxUid";
+    }
+};
+IngestQueueRouteSQL = __decorate([
+    Model(IngestQueueEntrySQL)
+], IngestQueueRouteSQL);
+export { IngestQueueRouteSQL };
+//# sourceMappingURL=IngestQueueRouteSQL.js.map

package/dist/lib/routes/sql/IngestQueueRouteSQL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IngestQueueRouteSQL.js","sourceRoot":"","sources":["../../../../src/routes/sql/IngestQueueRouteSQL.ts"],"names":[],"mappings":";;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,MAAM,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC;AAElC;;GAEG;AAEI,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,oBAAyC;IAA3E;;QACgB,mBAAc,GAAQ,SAAS,CAAC;QAChC,kBAAa,GAAW,YAAY,CAAC;IAC5D,CAAC;CAAA,CAAA;AAHY,mBAAmB;IAD/B,KAAK,CAAC,mBAAmB,CAAC;GACd,mBAAmB,CAG/B"}

package/dist/lib/routes/sql/MailIngestRouteSQL.js

@@ -0,0 +1,35 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { Raw } from "typeorm";
+import { IngestQueueEntrySQL, MailboxSQL } from "../../sql.js";
+import { BaseMailIngestRoute } from "../BaseMailIngestRoute.js";
+export class MailIngestRouteSQL extends BaseMailIngestRoute {
+    constructor() {
+        super(...arguments);
+        this.mailboxClass = MailboxSQL;
+        this.ingestQueueClass = IngestQueueEntrySQL;
+    }
+    /**
+     * `MailboxSQL.aliasAddresses` is a `simple-json` column, stored as a serialized JSON array string (e.g.
+     * `["a@example.com","b@example.com"]`). A plain equality filter compares against that whole string, so it
+     * never matches a single address. Match the serialized substring instead, anchored on the surrounding
+     * quotes the JSON encoding produces, so a partial-address match (e.g. "ob@example.co" against a stored
+     * "bob@example.com") can't produce a false positive.
+     *
+     * Returns a TypeORM `Raw()` `FindOperator` (a live object, not an `op(value)`-encoded string) so this can
+     * bind `%`/`_` as literal characters via an explicit `ESCAPE` clause — `RepoUtils`'s shared query-string DSL
+     * has no such escaping for its own `like(...)` operator, and `address` here ultimately originates from
+     * whatever RCPT TO value an anonymous internet SMTP client sends. Without escaping, an address containing
+     * `%`/`_` would turn this intended *exact*-alias-match into a wildcard/substring match, enabling blind
+     * alias enumeration via `GET /internal/mta/resolve`'s 200/404 response and mis-delivery to an unintended
+     * mailbox whose alias happens to satisfy the resulting pattern - a real, confirmed vulnerability, not a
+     * theoretical one.
+     */
+    aliasQueryValue(address) {
+        const escaped = address.replace(/[\\%_]/g, (ch) => `\\${ch}`);
+        return Raw((alias) => `${alias} LIKE :pattern ESCAPE '\\'`, { pattern: `%"${escaped}"%` });
+    }
+}
+//# sourceMappingURL=MailIngestRouteSQL.js.map

package/dist/lib/routes/sql/MailIngestRouteSQL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MailIngestRouteSQL.js","sourceRoot":"","sources":["../../../../src/routes/sql/MailIngestRouteSQL.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,MAAM,OAAO,kBAAmB,SAAQ,mBAAoD;IAA5F;;QACc,iBAAY,GAAQ,UAAU,CAAC;QAC/B,qBAAgB,GAAQ,mBAAmB,CAAC;IAsB1D,CAAC;IApBG;;;;;;;;;;;;;;;OAeG;IACO,eAAe,CAAC,OAAe;QACrC,MAAM,OAAO,GAAW,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtE,OAAO,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,4BAA4B,EAAE,EAAE,OAAO,EAAE,KAAK,OAAO,IAAI,EAAE,CAAC,CAAC;IAC/F,CAAC;CACJ"}

package/dist/lib/routes/sql/MailboxRouteSQL.js

@@ -0,0 +1,64 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { Raw } from "typeorm";
+import { AccessControlListSQL, DatabaseDecorators, RepoUtils, RouteDecorators } from "@rapidrest/service-core";
+import { MailboxSQL } from "../../sql.js";
+import { BaseMailboxRoute } from "../BaseMailboxRoute.js";
+const { Model } = RouteDecorators;
+const { Repository } = DatabaseDecorators;
+let MailboxRouteSQL = class MailboxRouteSQL extends BaseMailboxRoute {
+    constructor() {
+        super(...arguments);
+        this.repoUtilsClass = RepoUtils;
+    }
+    /**
+     * `AccessControlListSQL.records` is a `simple-json` column (serialized as a single JSON string), the same
+     * shape as `MailboxSQL.aliasAddresses` — see `MailIngestRouteSQL.aliasQueryValue()` for the identical
+     * problem/solution this mirrors: match the serialized substring via `LIKE`, anchored on the `userOrRoleId`
+     * key specifically (not just any quoted occurrence, which could otherwise false-positive-match a
+     * coincidentally identical string inside a record's `actions` array) and escaped so a candidate id
+     * containing `%`/`_` can't turn this intended exact match into an unintended wildcard/substring match.
+     *
+     * KNOWN LIMITATION: a `LIKE '%...%'` scan of the whole `records` column can't use a standard index the way
+     * a normalized join table could, so this degrades on a very large ACL table (every mailbox/folder/message/
+     * etc.'s ACL lives in this one table). Acceptable for now given the library's existing precedent of
+     * similar tradeoffs elsewhere (e.g. search index eventual consistency); revisit with a dedicated
+     * reverse-lookup table if this becomes a real bottleneck.
+     */
+    async findAccessibleMailboxUids(user) {
+        if (!this.aclRepo) {
+            return [];
+        }
+        const candidates = [user.uid, ...(user.roles ?? [])];
+        const where = candidates.map((id) => {
+            const escaped = id.replace(/[\\%_]/g, (ch) => `\\${ch}`);
+            return {
+                records: Raw((alias) => `${alias} LIKE :pattern ESCAPE '\\'`, {
+                    pattern: `%"userOrRoleId":"${escaped}"%`,
+                }),
+            };
+        });
+        const acls = await this.aclRepo.find({ where });
+        return acls.map((acl) => acl.uid);
+    }
+};
+__decorate([
+    Repository(AccessControlListSQL),
+    __metadata("design:type", Function)
+], MailboxRouteSQL.prototype, "aclRepo", void 0);
+MailboxRouteSQL = __decorate([
+    Model(MailboxSQL)
+], MailboxRouteSQL);
+export { MailboxRouteSQL };
+//# sourceMappingURL=MailboxRouteSQL.js.map

package/dist/lib/routes/sql/MailboxRouteSQL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MailboxRouteSQL.js","sourceRoot":"","sources":["../../../../src/routes/sql/MailboxRouteSQL.ts"],"names":[],"mappings":";;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,GAAG,EAAwC,MAAM,SAAS,CAAC;AAEpE,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/G,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,MAAM,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC;AAClC,MAAM,EAAE,UAAU,EAAE,GAAG,kBAAkB,CAAC;AAGnC,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,gBAA4B;IAA1D;;QACgB,mBAAc,GAAQ,SAAS,CAAC;IAmCvD,CAAC;IA9BG;;;;;;;;;;;;;OAaG;IACO,KAAK,CAAC,yBAAyB,CAAC,IAAa;QACnD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,EAAE,CAAC;QACd,CAAC;QACD,MAAM,UAAU,GAAa,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YAChC,MAAM,OAAO,GAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACjE,OAAO;gBACH,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,4BAA4B,EAAE;oBAC1D,OAAO,EAAE,oBAAoB,OAAO,IAAI;iBAC3C,CAAC;aACL,CAAC;QACN,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAA2B,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;CACJ,CAAA;AAhCW;IADP,UAAU,CAAC,oBAAoB,CAAC;;gDACyB;AAJjD,eAAe;IAD3B,KAAK,CAAC,UAAU,CAAC;GACL,eAAe,CAoC3B"}

package/dist/lib/routes/sql/MessageRouteSQL.js

@@ -0,0 +1,27 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { RouteDecorators } from "@rapidrest/service-core";
+import { FolderSQL, MessageSQL } from "../../sql.js";
+import { BaseMessageRoute } from "../BaseMessageRoute.js";
+import { RecoverableRepoUtils } from "../../util/RecoverableRepoUtils.js";
+const { Model } = RouteDecorators;
+let MessageRouteSQL = class MessageRouteSQL extends BaseMessageRoute {
+    constructor() {
+        super(...arguments);
+        this.repoUtilsClass = RecoverableRepoUtils;
+        this.folderClass = FolderSQL;
+    }
+};
+MessageRouteSQL = __decorate([
+    Model(MessageSQL)
+], MessageRouteSQL);
+export { MessageRouteSQL };
+//# sourceMappingURL=MessageRouteSQL.js.map

package/dist/lib/routes/sql/MessageRouteSQL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MessageRouteSQL.js","sourceRoot":"","sources":["../../../../src/routes/sql/MessageRouteSQL.ts"],"names":[],"mappings":";;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,MAAM,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC;AAG3B,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,gBAA4B;IAA1D;;QACgB,mBAAc,GAAQ,oBAAoB,CAAC;QACpD,gBAAW,GAAQ,SAAS,CAAC;IAC3C,CAAC;CAAA,CAAA;AAHY,eAAe;IAD3B,KAAK,CAAC,UAAU,CAAC;GACL,eAAe,CAG3B"}

package/dist/lib/routes/sql/NoteRouteSQL.js

@@ -0,0 +1,26 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { RepoUtils, RouteDecorators } from "@rapidrest/service-core";
+import { NoteSQL } from "../../sql.js";
+import { BaseScopedChildRoute } from "../BaseScopedChildRoute.js";
+const { Model } = RouteDecorators;
+let NoteRouteSQL = class NoteRouteSQL extends BaseScopedChildRoute {
+    constructor() {
+        super(...arguments);
+        this.repoUtilsClass = RepoUtils;
+        this.scopeProperty = "folderUid";
+    }
+};
+NoteRouteSQL = __decorate([
+    Model(NoteSQL)
+], NoteRouteSQL);
+export { NoteRouteSQL };
+//# sourceMappingURL=NoteRouteSQL.js.map

package/dist/lib/routes/sql/NoteRouteSQL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NoteRouteSQL.js","sourceRoot":"","sources":["../../../../src/routes/sql/NoteRouteSQL.ts"],"names":[],"mappings":";;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,MAAM,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC;AAG3B,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,oBAA6B;IAAxD;;QACgB,mBAAc,GAAQ,SAAS,CAAC;QAChC,kBAAa,GAAW,WAAW,CAAC;IAC3D,CAAC;CAAA,CAAA;AAHY,YAAY;IADxB,KAAK,CAAC,OAAO,CAAC;GACF,YAAY,CAGxB"}

package/dist/lib/routes/sql/QuarantineRouteSQL.js

@@ -0,0 +1,29 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { RepoUtils, RouteDecorators } from "@rapidrest/service-core";
+import { QuarantineEntrySQL } from "../../sql.js";
+import { BaseScopedChildRoute } from "../BaseScopedChildRoute.js";
+const { Model } = RouteDecorators;
+/**
+ * See `QuarantineRouteMongo` for the rationale — identical behavior against the SQL backend.
+ */
+let QuarantineRouteSQL = class QuarantineRouteSQL extends BaseScopedChildRoute {
+    constructor() {
+        super(...arguments);
+        this.repoUtilsClass = RepoUtils;
+        this.scopeProperty = "mailboxUid";
+    }
+};
+QuarantineRouteSQL = __decorate([
+    Model(QuarantineEntrySQL)
+], QuarantineRouteSQL);
+export { QuarantineRouteSQL };
+//# sourceMappingURL=QuarantineRouteSQL.js.map

package/dist/lib/routes/sql/QuarantineRouteSQL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"QuarantineRouteSQL.js","sourceRoot":"","sources":["../../../../src/routes/sql/QuarantineRouteSQL.ts"],"names":[],"mappings":";;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,MAAM,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC;AAElC;;GAEG;AAEI,IAAM,kBAAkB,GAAxB,MAAM,kBAAmB,SAAQ,oBAAwC;IAAzE;;QACgB,mBAAc,GAAQ,SAAS,CAAC;QAChC,kBAAa,GAAW,YAAY,CAAC;IAC5D,CAAC;CAAA,CAAA;AAHY,kBAAkB;IAD9B,KAAK,CAAC,kBAAkB,CAAC;GACb,kBAAkB,CAG9B"}

package/dist/lib/routes/sql/SearchRouteSQL.js

@@ -0,0 +1,13 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { MailboxSQL } from "../../sql.js";
+import { BaseSearchRoute } from "../BaseSearchRoute.js";
+export class SearchRouteSQL extends BaseSearchRoute {
+    constructor() {
+        super(...arguments);
+        this.mailboxClass = MailboxSQL;
+    }
+}
+//# sourceMappingURL=SearchRouteSQL.js.map

package/dist/lib/routes/sql/SearchRouteSQL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SearchRouteSQL.js","sourceRoot":"","sources":["../../../../src/routes/sql/SearchRouteSQL.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,OAAO,cAAe,SAAQ,eAA2B;IAA/D;;QACc,iBAAY,GAAQ,UAAU,CAAC;IAC7C,CAAC;CAAA"}

package/dist/lib/routes/sql/TaskRouteSQL.js

@@ -0,0 +1,27 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { RouteDecorators } from "@rapidrest/service-core";
+import { TaskSQL } from "../../sql.js";
+import { BaseScopedChildRoute } from "../BaseScopedChildRoute.js";
+import { RecoverableRepoUtils } from "../../util/RecoverableRepoUtils.js";
+const { Model } = RouteDecorators;
+let TaskRouteSQL = class TaskRouteSQL extends BaseScopedChildRoute {
+    constructor() {
+        super(...arguments);
+        this.repoUtilsClass = RecoverableRepoUtils;
+        this.scopeProperty = "folderUid";
+    }
+};
+TaskRouteSQL = __decorate([
+    Model(TaskSQL)
+], TaskRouteSQL);
+export { TaskRouteSQL };
+//# sourceMappingURL=TaskRouteSQL.js.map

package/dist/lib/routes/sql/TaskRouteSQL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TaskRouteSQL.js","sourceRoot":"","sources":["../../../../src/routes/sql/TaskRouteSQL.ts"],"names":[],"mappings":";;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,MAAM,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC;AAG3B,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,oBAA6B;IAAxD;;QACgB,mBAAc,GAAQ,oBAAoB,CAAC;QAC3C,kBAAa,GAAW,WAAW,CAAC;IAC3D,CAAC;CAAA,CAAA;AAHY,YAAY;IADxB,KAAK,CAAC,OAAO,CAAC;GACF,YAAY,CAGxB"}

package/dist/lib/routes/sql/index.js

@@ -0,0 +1,15 @@
+export * from "./AttachmentRouteSQL.js";
+export * from "./CalendarEventRouteSQL.js";
+export * from "./CalendarShareLinkRouteSQL.js";
+export * from "./ContactListRouteSQL.js";
+export * from "./ContactRouteSQL.js";
+export * from "./FolderRouteSQL.js";
+export * from "./IngestQueueRouteSQL.js";
+export * from "./MailboxRouteSQL.js";
+export * from "./MailIngestRouteSQL.js";
+export * from "./MessageRouteSQL.js";
+export * from "./NoteRouteSQL.js";
+export * from "./QuarantineRouteSQL.js";
+export * from "./SearchRouteSQL.js";
+export * from "./TaskRouteSQL.js";
+//# sourceMappingURL=index.js.map

package/dist/lib/routes/sql/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/routes/sql/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC"}

package/dist/lib/routes/sql.js

@@ -0,0 +1,2 @@
+export * from "./sql/index.js";
+//# sourceMappingURL=sql.js.map

package/dist/lib/routes/sql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql.js","sourceRoot":"","sources":["../../../src/routes/sql.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC"}

package/dist/lib/scan/AvScanProvider.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=AvScanProvider.js.map

package/dist/lib/scan/AvScanProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AvScanProvider.js","sourceRoot":"","sources":["../../../src/scan/AvScanProvider.ts"],"names":[],"mappings":""}

package/dist/lib/scan/ClamAvScanProvider.js

@@ -0,0 +1,112 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import * as net from "net";
+import { ObjectDecorators } from "@rapidrest/core";
+import { AvVerdict } from "../models/types.js";
+const { Config, Logger } = ObjectDecorators;
+/** The maximum size, in bytes, of a single chunk sent per the INSTREAM protocol's chunk-length prefix. */
+const CHUNK_SIZE = 64 * 1024;
+/**
+ * `AvScanProvider` adapter for ClamAV, talking to `clamd` via the INSTREAM protocol (a length-prefixed chunk
+ * stream over a TCP or Unix socket) — chosen over shelling out to the `clamscan` CLI so scanning doesn't incur
+ * a process-spawn per call and works transparently against a remote `clamd` instance.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class ClamAvScanProvider {
+    constructor() {
+        this.name = "clamav";
+        this.host = "127.0.0.1";
+        this.port = 3310;
+        this.timeoutMs = 30000;
+    }
+    async scanBuffer(content, filename) {
+        try {
+            const reply = await this.instream(content);
+            return parseReply(reply);
+        }
+        catch (err) {
+            // A scan-engine outage must not silently pass content through as clean — fail closed to `ERROR`
+            // so the caller's verdict-routing treats it the same as an infected result (quarantine), not clean.
+            this.logger?.error(`ClamAV scan failed for '${filename ?? "(unnamed)"}': ${err.message}`);
+            return { verdict: AvVerdict.ERROR };
+        }
+    }
+    instream(content) {
+        return new Promise((resolve, reject) => {
+            const socket = net.createConnection({ host: this.host, port: this.port });
+            const chunks = [];
+            let settled = false;
+            const finish = (err, result) => {
+                if (settled) {
+                    return;
+                }
+                settled = true;
+                socket.destroy();
+                if (err) {
+                    reject(err);
+                }
+                else {
+                    resolve(result);
+                }
+            };
+            socket.setTimeout(this.timeoutMs, () => finish(new Error("clamd connection timed out")));
+            socket.on("error", (err) => finish(err));
+            socket.on("data", (data) => chunks.push(data));
+            socket.on("end", () => finish(undefined, Buffer.concat(chunks).toString("utf-8").replace(/\0$/, "")));
+            socket.on("connect", () => {
+                socket.write("zINSTREAM\0");
+                for (let offset = 0; offset < content.length; offset += CHUNK_SIZE) {
+                    const chunk = content.subarray(offset, Math.min(offset + CHUNK_SIZE, content.length));
+                    const lengthPrefix = Buffer.alloc(4);
+                    lengthPrefix.writeUInt32BE(chunk.length, 0);
+                    socket.write(lengthPrefix);
+                    socket.write(chunk);
+                }
+                // A zero-length chunk terminates the stream per the INSTREAM protocol.
+                const terminator = Buffer.alloc(4);
+                terminator.writeUInt32BE(0, 0);
+                socket.write(terminator);
+            });
+        });
+    }
+}
+__decorate([
+    Config("mail:scan:av:clamav:host", "127.0.0.1"),
+    __metadata("design:type", String)
+], ClamAvScanProvider.prototype, "host", void 0);
+__decorate([
+    Config("mail:scan:av:clamav:port", 3310),
+    __metadata("design:type", Number)
+], ClamAvScanProvider.prototype, "port", void 0);
+__decorate([
+    Config("mail:scan:av:clamav:timeout_ms", 30000),
+    __metadata("design:type", Number)
+], ClamAvScanProvider.prototype, "timeoutMs", void 0);
+__decorate([
+    Logger,
+    __metadata("design:type", Object)
+], ClamAvScanProvider.prototype, "logger", void 0);
+/** Parses a clamd INSTREAM reply, e.g. `"stream: OK"` or `"stream: Eicar-Test-Signature FOUND"`. */
+function parseReply(reply) {
+    const match = reply.match(/:\s*(.+?)\s+FOUND$/);
+    if (match) {
+        return { verdict: AvVerdict.INFECTED, signatureName: match[1] };
+    }
+    if (reply.includes("ERROR")) {
+        return { verdict: AvVerdict.ERROR };
+    }
+    return { verdict: AvVerdict.CLEAN };
+}
+//# sourceMappingURL=ClamAvScanProvider.js.map

package/dist/lib/scan/ClamAvScanProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClamAvScanProvider.js","sourceRoot":"","sources":["../../../src/scan/ClamAvScanProvider.ts"],"names":[],"mappings":";;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAE5C,0GAA0G;AAC1G,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7B;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IAA/B;QACoB,SAAI,GAAW,QAAQ,CAAC;QAGhC,SAAI,GAAW,WAAW,CAAC;QAG3B,SAAI,GAAW,IAAI,CAAC;QAGpB,cAAS,GAAW,KAAM,CAAC;IAyDvC,CAAC;IApDU,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,QAAiB;QACtD,IAAI,CAAC;YACD,MAAM,KAAK,GAAW,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACnD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gGAAgG;YAChG,oGAAoG;YACpG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,2BAA2B,QAAQ,IAAI,WAAW,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1F,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC;QACxC,CAAC;IACL,CAAC;IAEO,QAAQ,CAAC,OAAe;QAC5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1E,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,MAAe,EAAE,EAAE;gBAC5C,IAAI,OAAO,EAAE,CAAC;oBACV,OAAO;gBACX,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,IAAI,GAAG,EAAE,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChB,CAAC;qBAAM,CAAC;oBACJ,OAAO,CAAC,MAAO,CAAC,CAAC;gBACrB,CAAC;YACL,CAAC,CAAC;YAEF,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC;YACzF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACzC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACvD,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YAEtG,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;gBACtB,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;gBAC5B,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,MAAM,IAAI,UAAU,EAAE,CAAC;oBACjE,MAAM,KAAK,GAAW,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;oBAC9F,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBACrC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;oBAC5C,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;oBAC3B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACxB,CAAC;gBACD,uEAAuE;gBACvE,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACnC,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC/B,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC7B,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;CACJ;AA/DW;IADP,MAAM,CAAC,0BAA0B,EAAE,WAAW,CAAC;;gDACb;AAG3B;IADP,MAAM,CAAC,0BAA0B,EAAE,IAAI,CAAC;;gDACb;AAGpB;IADP,MAAM,CAAC,gCAAgC,EAAE,KAAM,CAAC;;qDACd;AAG3B;IADP,MAAM;;kDACa;AAwDxB,oGAAoG;AACpG,SAAS,UAAU,CAAC,KAAa;IAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAChD,IAAI,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC;AACxC,CAAC"}