@rapidmx/restapi 0.1.0

package/dist/lib/scan/RspamdSpamScanProvider.js

@@ -0,0 +1,100 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { ObjectDecorators } from "@rapidrest/core";
+import { SpamVerdict } from "../models/types.js";
+const { Config, Logger } = ObjectDecorators;
+/**
+ * `SpamScanProvider` adapter for rspamd, talking to its HTTP controller `checkv2` endpoint. Chosen over
+ * SpamAssassin's `spamc`/`spamd` line protocol for HTTP-native integration matching this library's HTTP-first
+ * design — a `SpamAssassinScanProvider` implementing the same interface via `spamc` is a straightforward
+ * drop-in alternative for a deployment that already runs SpamAssassin instead.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class RspamdSpamScanProvider {
+    constructor() {
+        this.name = "rspamd";
+        this.url = "http://127.0.0.1:11333";
+        this.timeoutMs = 15000;
+    }
+    async scoreMessage(raw, envelope) {
+        const headers = {
+            "Content-Type": "application/octet-stream",
+            From: envelope.from,
+        };
+        if (envelope.to.length > 0) {
+            headers["Rcpt"] = envelope.to.join(",");
+        }
+        if (envelope.remoteIp) {
+            headers["IP"] = envelope.remoteIp;
+        }
+        if (envelope.helo) {
+            headers["Helo"] = envelope.helo;
+        }
+        const controller = new AbortController();
+        const timeoutHandle = setTimeout(() => controller.abort(), this.timeoutMs);
+        try {
+            const response = await fetch(`${this.url}/checkv2`, {
+                method: "POST",
+                headers,
+                body: new Uint8Array(raw),
+                signal: controller.signal,
+            });
+            if (!response.ok) {
+                throw new Error(`rspamd returned HTTP ${response.status}`);
+            }
+            const body = (await response.json());
+            return {
+                score: body.score,
+                verdict: mapAction(body.action),
+                symbols: Object.keys(body.symbols ?? {}),
+            };
+        }
+        catch (err) {
+            // A scan-engine outage must not silently pass every message through as clean — fail closed to
+            // `SUSPECT` so it's routed for human review/Junk rather than blind delivery to the inbox.
+            this.logger?.error(`rspamd scan failed: ${err.message}`);
+            return { score: 0, verdict: SpamVerdict.SUSPECT, symbols: ["SCAN_ENGINE_UNAVAILABLE"] };
+        }
+        finally {
+            clearTimeout(timeoutHandle);
+        }
+    }
+}
+__decorate([
+    Config("mail:scan:spam:rspamd:url", "http://127.0.0.1:11333"),
+    __metadata("design:type", String)
+], RspamdSpamScanProvider.prototype, "url", void 0);
+__decorate([
+    Config("mail:scan:spam:rspamd:timeout_ms", 15000),
+    __metadata("design:type", Number)
+], RspamdSpamScanProvider.prototype, "timeoutMs", void 0);
+__decorate([
+    Logger,
+    __metadata("design:type", Object)
+], RspamdSpamScanProvider.prototype, "logger", void 0);
+function mapAction(action) {
+    switch (action) {
+        case "reject":
+        case "soft reject":
+            return SpamVerdict.SPAM;
+        case "add header":
+        case "rewrite subject":
+        case "greylist":
+            return SpamVerdict.SUSPECT;
+        default:
+            return SpamVerdict.CLEAN;
+    }
+}
+//# sourceMappingURL=RspamdSpamScanProvider.js.map

package/dist/lib/scan/RspamdSpamScanProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RspamdSpamScanProvider.js","sourceRoot":"","sources":["../../../src/scan/RspamdSpamScanProvider.ts"],"names":[],"mappings":";;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAS5C;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAsB;IAAnC;QACoB,SAAI,GAAW,QAAQ,CAAC;QAGhC,QAAG,GAAW,wBAAwB,CAAC;QAGvC,cAAS,GAAW,KAAM,CAAC;IA+CvC,CAAC;IA1CU,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,QAAsB;QACzD,MAAM,OAAO,GAA2B;YACpC,cAAc,EAAE,0BAA0B;YAC1C,IAAI,EAAE,QAAQ,CAAC,IAAI;SACtB,CAAC;QACF,IAAI,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACtC,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC;QACpC,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3E,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,UAAU,EAAE;gBAChD,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC;gBACzB,MAAM,EAAE,UAAU,CAAC,MAAM;aAC5B,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,IAAI,GAA0B,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAC;YACrF,OAAO;gBACH,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC/B,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;aAC3C,CAAC;QACN,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,8FAA8F;YAC9F,0FAA0F;YAC1F,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,uBAAuB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC5F,CAAC;gBAAS,CAAC;YACP,YAAY,CAAC,aAAa,CAAC,CAAC;QAChC,CAAC;IACL,CAAC;CACJ;AAlDW;IADP,MAAM,CAAC,2BAA2B,EAAE,wBAAwB,CAAC;;mDACf;AAGvC;IADP,MAAM,CAAC,kCAAkC,EAAE,KAAM,CAAC;;yDAChB;AAG3B;IADP,MAAM;;sDACa;AA8CxB,SAAS,SAAS,CAAC,MAAuC;IACtD,QAAQ,MAAM,EAAE,CAAC;QACb,KAAK,QAAQ,CAAC;QACd,KAAK,aAAa;YACd,OAAO,WAAW,CAAC,IAAI,CAAC;QAC5B,KAAK,YAAY,CAAC;QAClB,KAAK,iBAAiB,CAAC;QACvB,KAAK,UAAU;YACX,OAAO,WAAW,CAAC,OAAO,CAAC;QAC/B;YACI,OAAO,WAAW,CAAC,KAAK,CAAC;IACjC,CAAC;AACL,CAAC"}

package/dist/lib/scan/ScanPipeline.js

@@ -0,0 +1,118 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import sanitizeHtml from "sanitize-html";
+import { simpleParser } from "mailparser";
+import { ObjectDecorators } from "@rapidrest/core";
+import { AvVerdict, SpamVerdict } from "../models/types.js";
+const { Config, Inject, Logger } = ObjectDecorators;
+/** Verdicts ranked worst-to-best, used to combine the raw-message and per-attachment AV results. */
+const AV_SEVERITY = {
+    [AvVerdict.INFECTED]: 2,
+    [AvVerdict.ERROR]: 1,
+    [AvVerdict.CLEAN]: 0,
+};
+/**
+ * Orchestrates SPAM scoring, AV scanning, and HTML sanitization for a single raw RFC 5322 message — the
+ * ingestion-time gate that every inbound message (via `MailIngestRoute`) and outbound send (via the webmail/
+ * EAS/MAPI "send" routes) passes through before delivery/relay. AV scanning covers the full raw message buffer
+ * *and* each decoded attachment (not just attachments), which is what catches embedded/malicious HTML.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class ScanPipeline {
+    async run(raw, envelope) {
+        if (!this.spamScanProvider || !this.avScanProvider) {
+            throw new Error("ScanPipeline requires both a SpamScanProvider and an AvScanProvider to be registered. " +
+                "Configure `scan:spam:provider`/`scan:av:provider`.");
+        }
+        const parsed = await simpleParser(raw);
+        const [spam, rawAv, attachmentResults] = await Promise.all([
+            this.spamScanProvider.scoreMessage(raw, envelope),
+            this.avScanProvider.scanBuffer(raw),
+            this.scanAttachments(parsed.attachments ?? []),
+        ]);
+        let worstAv = rawAv;
+        for (const attachment of attachmentResults) {
+            if (AV_SEVERITY[attachment.av.verdict] > AV_SEVERITY[worstAv.verdict]) {
+                worstAv = attachment.av;
+            }
+        }
+        const sanitizedHtml = typeof parsed.html === "string" ? this.sanitize(parsed.html) : undefined;
+        return { spam, av: worstAv, attachments: attachmentResults, sanitizedHtml };
+    }
+    async scanAttachments(attachments) {
+        const results = [];
+        for (const attachment of attachments) {
+            const av = await this.avScanProvider.scanBuffer(attachment.content, attachment.filename);
+            results.push({
+                filename: attachment.filename,
+                contentType: attachment.contentType,
+                content: attachment.content,
+                contentId: attachment.contentId,
+                isInline: attachment.contentDisposition === "inline",
+                av,
+            });
+        }
+        return results;
+    }
+    /**
+     * Strips `<script>` tags and other active/executable content from an HTML body. Defense in depth alongside
+     * clamd's own HTML/JS signature detection (run against the raw message above) and whatever sandboxing the
+     * eventual client renderer applies.
+     */
+    sanitize(html) {
+        return sanitizeHtml(html, {
+            allowedTags: this.allowedTags ?? sanitizeHtml.defaults.allowedTags.filter((tag) => tag !== "script"),
+            allowVulnerableTags: false,
+            disallowedTagsMode: "discard",
+            allowedSchemes: ["http", "https", "mailto", "cid"],
+        });
+    }
+}
+__decorate([
+    Inject("SpamScanProvider"),
+    __metadata("design:type", Object)
+], ScanPipeline.prototype, "spamScanProvider", void 0);
+__decorate([
+    Inject("AvScanProvider"),
+    __metadata("design:type", Object)
+], ScanPipeline.prototype, "avScanProvider", void 0);
+__decorate([
+    Config("mail:scan:sanitize:allowed_tags"),
+    __metadata("design:type", Array)
+], ScanPipeline.prototype, "allowedTags", void 0);
+__decorate([
+    Logger,
+    __metadata("design:type", Object)
+], ScanPipeline.prototype, "logger", void 0);
+/**
+ * Combines a spam verdict and an AV verdict into where the message should be routed on ingestion.
+ *
+ * `AvVerdict.ERROR` and `SpamVerdict.SUSPECT` are the providers' own documented fail-closed outcomes for a
+ * scan-engine outage (see `ClamAvScanProvider.scanBuffer()`/`RspamdSpamScanProvider.scoreMessage()`) - treating
+ * them as equivalent to a clean/normal verdict here would silently deliver every message straight to the
+ * inbox, completely unscanned, for the entire duration of an AV/spam engine outage. `ERROR` quarantines
+ * (matching AV's own "treat like infected" intent); `SUSPECT` routes to Junk for human review rather than
+ * blind inbox delivery.
+ */
+export function resolveDeliveryVerdict(result) {
+    if (result.av.verdict === AvVerdict.INFECTED || result.av.verdict === AvVerdict.ERROR) {
+        return "quarantine";
+    }
+    if (result.spam.verdict === SpamVerdict.SPAM || result.spam.verdict === SpamVerdict.SUSPECT) {
+        return "junk";
+    }
+    return "deliver";
+}
+//# sourceMappingURL=ScanPipeline.js.map

package/dist/lib/scan/ScanPipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ScanPipeline.js","sourceRoot":"","sources":["../../../src/scan/ScanPipeline.ts"],"names":[],"mappings":";;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,YAAY,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,YAAY,EAA8C,MAAM,YAAY,CAAC;AACtF,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAG5D,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAsBpD,oGAAoG;AACpG,MAAM,WAAW,GAA8B;IAC3C,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;IACvB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;IACpB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;CACvB,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,OAAO,YAAY;IAgBd,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,QAAsB;QAChD,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACX,wFAAwF;gBACpF,oDAAoD,CAC3D,CAAC;QACN,CAAC;QAED,MAAM,MAAM,GAAe,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QAEnD,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,iBAAiB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvD,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC;YACjD,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC;YACnC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;SACjD,CAAC,CAAC;QAEH,IAAI,OAAO,GAAiB,KAAK,CAAC;QAClC,KAAK,MAAM,UAAU,IAAI,iBAAiB,EAAE,CAAC;YACzC,IAAI,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpE,OAAO,GAAG,UAAU,CAAC,EAAE,CAAC;YAC5B,CAAC;QACL,CAAC;QAED,MAAM,aAAa,GACf,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE7E,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC;IAChF,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,WAA+B;QACzD,MAAM,OAAO,GAAmC,EAAE,CAAC;QACnD,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACnC,MAAM,EAAE,GAAiB,MAAM,IAAI,CAAC,cAAe,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;YACxG,OAAO,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,QAAQ,EAAE,UAAU,CAAC,kBAAkB,KAAK,QAAQ;gBACpD,EAAE;aACL,CAAC,CAAC;QACP,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACK,QAAQ,CAAC,IAAY;QACzB,OAAO,YAAY,CAAC,IAAI,EAAE;YACtB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC;YACpG,mBAAmB,EAAE,KAAK;YAC1B,kBAAkB,EAAE,SAAS;YAC7B,cAAc,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC;SACrD,CAAC,CAAC;IACP,CAAC;CACJ;AArEW;IADP,MAAM,CAAC,kBAAkB,CAAC;;sDACiB;AAGpC;IADP,MAAM,CAAC,gBAAgB,CAAC;;oDACe;AAGhC;IADP,MAAM,CAAC,iCAAiC,CAAC;;iDACX;AAGvB;IADP,MAAM;;4CACa;AA8DxB;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA0B;IAC7D,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC,QAAQ,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;QACpF,OAAO,YAAY,CAAC;IACxB,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,WAAW,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC;QAC1F,OAAO,MAAM,CAAC;IAClB,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC"}

package/dist/lib/scan/SpamScanProvider.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=SpamScanProvider.js.map

package/dist/lib/scan/SpamScanProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SpamScanProvider.js","sourceRoot":"","sources":["../../../src/scan/SpamScanProvider.ts"],"names":[],"mappings":""}

package/dist/lib/scan/index.js

@@ -0,0 +1,10 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+export * from "./SpamScanProvider.js";
+export * from "./AvScanProvider.js";
+export * from "./RspamdSpamScanProvider.js";
+export * from "./ClamAvScanProvider.js";
+export * from "./ScanPipeline.js";
+//# sourceMappingURL=index.js.map

package/dist/lib/scan/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/scan/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC"}

package/dist/lib/search/MongoTextSearchProvider.js

@@ -0,0 +1,116 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { ObjectDecorators } from "@rapidrest/core";
+import { ConnectionManager } from "@rapidrest/service-core";
+const { Config, Init, Inject, Logger } = ObjectDecorators;
+const COLLECTION_NAME = "mail_search_index";
+/**
+ * `SearchProvider` backed by MongoDB's native `$text` index — the embedded default for a Mongo-backed
+ * deployment that hasn't opted into a dedicated search engine. Documents are stored in a collection separate
+ * from the entities they're derived from (`mail_search_index`), keyed by `<entityType>:<entityUid>`.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class MongoTextSearchProvider {
+    constructor() {
+        this.name = "mongo";
+        this.datasourceName = "mongo";
+    }
+    async init() {
+        const conn = this.connectionManager?.connections.get(this.datasourceName);
+        const db = conn?.db;
+        if (!db) {
+            throw new Error(`MongoTextSearchProvider: no MongoDB connection found for datasource '${this.datasourceName}'.`);
+        }
+        this.collection = db.collection(COLLECTION_NAME);
+        await this.collection.createIndex({ subject: "text", body: "text", attachmentText: "text", participants: "text" }, { name: "mail_search_text" });
+        await this.collection.createIndex({ mailboxUid: 1, entityType: 1 });
+    }
+    docId(entityType, entityUid) {
+        return `${entityType}:${entityUid}`;
+    }
+    toStoredDoc(doc) {
+        return {
+            _id: this.docId(doc.entityType, doc.entityUid),
+            entityType: doc.entityType,
+            entityUid: doc.entityUid,
+            mailboxUid: doc.mailboxUid,
+            subject: doc.subject,
+            body: doc.body,
+            attachmentText: doc.attachmentText?.join("\n"),
+            participants: doc.participants?.join(" "),
+            dateForSort: doc.dateForSort,
+        };
+    }
+    async index(doc) {
+        await this.bulkIndex([doc]);
+    }
+    async bulkIndex(docs) {
+        if (!this.collection || docs.length === 0) {
+            return;
+        }
+        await this.collection.bulkWrite(docs.map((doc) => ({
+            replaceOne: {
+                filter: { _id: this.docId(doc.entityType, doc.entityUid) },
+                replacement: this.toStoredDoc(doc),
+                upsert: true,
+            },
+        })));
+    }
+    async remove(entityType, entityUid) {
+        await this.collection?.deleteOne({ _id: this.docId(entityType, entityUid) });
+    }
+    async search(query) {
+        if (!this.collection) {
+            return { results: [] };
+        }
+        const limit = Math.min(query.limit ?? 25, 200);
+        const skip = query.cursor ? Math.max(0, parseInt(query.cursor, 10) || 0) : 0;
+        const filter = { mailboxUid: query.mailboxUid, $text: { $search: query.text } };
+        if (query.entityTypes && query.entityTypes.length > 0) {
+            filter.entityType = { $in: query.entityTypes };
+        }
+        const cursor = this.collection
+            .find(filter, { projection: { score: { $meta: "textScore" } } })
+            .sort({ score: { $meta: "textScore" } })
+            .skip(skip)
+            .limit(limit + 1);
+        const rows = await cursor.toArray();
+        const hasMore = rows.length > limit;
+        const page = hasMore ? rows.slice(0, limit) : rows;
+        return {
+            results: page.map((row) => ({
+                entityType: row.entityType,
+                entityUid: row.entityUid,
+                score: row.score ?? 0,
+            })),
+            nextCursor: hasMore ? String(skip + limit) : undefined,
+        };
+    }
+}
+__decorate([
+    Inject(ConnectionManager),
+    __metadata("design:type", ConnectionManager)
+], MongoTextSearchProvider.prototype, "connectionManager", void 0);
+__decorate([
+    Config("mail:search:mongo:datasource", "mongo"),
+    __metadata("design:type", String)
+], MongoTextSearchProvider.prototype, "datasourceName", void 0);
+__decorate([
+    Logger,
+    __metadata("design:type", Object)
+], MongoTextSearchProvider.prototype, "logger", void 0);
+__decorate([
+    Init,
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], MongoTextSearchProvider.prototype, "init", null);
+//# sourceMappingURL=MongoTextSearchProvider.js.map

package/dist/lib/search/MongoTextSearchProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MongoTextSearchProvider.js","sourceRoot":"","sources":["../../../src/search/MongoTextSearchProvider.ts"],"names":[],"mappings":";;;;;;;;;AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAE1D,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAe5C;;;;;;GAMG;AACH,MAAM,OAAO,uBAAuB;IAApC;QACoB,SAAI,GAAW,OAAO,CAAC;QAM/B,mBAAc,GAAW,OAAO,CAAC;IAiG7C,CAAC;IAzFiB,AAAN,KAAK,CAAC,IAAI;QACd,MAAM,IAAI,GAAQ,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC/E,MAAM,EAAE,GAAmB,IAAI,EAAE,EAAE,CAAC;QACpC,IAAI,CAAC,EAAE,EAAE,CAAC;YACN,MAAM,IAAI,KAAK,CACX,wEAAwE,IAAI,CAAC,cAAc,IAAI,CAClG,CAAC;QACN,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,UAAU,CAAY,eAAe,CAAC,CAAC;QAC5D,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAC7B,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAC/E,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAC/B,CAAC;QACF,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IAEO,KAAK,CAAC,UAA4B,EAAE,SAAiB;QACzD,OAAO,GAAG,UAAU,IAAI,SAAS,EAAE,CAAC;IACxC,CAAC;IAEO,WAAW,CAAC,GAAmB;QACnC,OAAO;YACH,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC;YAC9C,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC;YAC9C,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC;YACzC,WAAW,EAAE,GAAG,CAAC,WAAW;SAC/B,CAAC;IACN,CAAC;IAEM,KAAK,CAAC,KAAK,CAAC,GAAmB;QAClC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,IAAsB;QACzC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxC,OAAO;QACX,CAAC;QACD,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAC3B,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACf,UAAU,EAAE;gBACR,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE;gBAC1D,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;gBAClC,MAAM,EAAE,IAAI;aACf;SACJ,CAAC,CAAC,CACN,CAAC;IACN,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,UAA4B,EAAE,SAAiB;QAC/D,MAAM,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,KAAkB;QAClC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACnB,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,KAAK,GAAW,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,IAAI,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAErF,MAAM,MAAM,GAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QACrF,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,CAAC,UAAU,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QACnD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU;aACzB,IAAI,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;aAC/D,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;aACvC,IAAI,CAAC,IAAI,CAAC;aACV,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACtB,MAAM,IAAI,GAAuC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QAExE,MAAM,OAAO,GAAY,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QAC7C,MAAM,IAAI,GAAuC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEvF,OAAO;YACH,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACxB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC;aACxB,CAAC,CAAC;YACH,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;SACzD,CAAC;IACN,CAAC;CACJ;AApGW;IADP,MAAM,CAAC,iBAAiB,CAAC;8BACE,iBAAiB;kEAAC;AAGtC;IADP,MAAM,CAAC,8BAA8B,EAAE,OAAO,CAAC;;+DACP;AAGjC;IADP,MAAM;;uDACa;AAKN;IADb,IAAI;;;;mDAeJ"}

package/dist/lib/search/OpenSearchProvider.js

@@ -0,0 +1,156 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { ObjectDecorators } from "@rapidrest/core";
+import { importOptional } from "../util/OptionalDeps.js";
+const { Config, Init, Logger } = ObjectDecorators;
+/**
+ * `SearchProvider` adapter for a dedicated OpenSearch cluster, via the optional peer dependency
+ * `@opensearch-project/opensearch` — the recommended provider for larger deployments where the embedded
+ * Mongo/Postgres default's relevance ranking and indexing throughput become a bottleneck. Selected via the
+ * `search:provider: "opensearch"` config key.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class OpenSearchProvider {
+    constructor() {
+        this.name = "opensearch";
+        this.url = "https://localhost:9200";
+        this.index_ = "mail_search_index";
+    }
+    async init() {
+        const { Client } = await importOptional("@opensearch-project/opensearch");
+        this.client = new Client({
+            node: this.url,
+            auth: this.username ? { username: this.username, password: this.password } : undefined,
+        });
+        const exists = await this.client.indices.exists({ index: this.index_ });
+        if (!exists.body) {
+            await this.client.indices.create({
+                index: this.index_,
+                body: {
+                    mappings: {
+                        properties: {
+                            entityType: { type: "keyword" },
+                            entityUid: { type: "keyword" },
+                            mailboxUid: { type: "keyword" },
+                            subject: { type: "text" },
+                            body: { type: "text" },
+                            attachmentText: { type: "text" },
+                            participants: { type: "text" },
+                            dateForSort: { type: "date" },
+                        },
+                    },
+                },
+            });
+        }
+    }
+    docId(entityType, entityUid) {
+        return `${entityType}:${entityUid}`;
+    }
+    async index(doc) {
+        await this.client.index({
+            index: this.index_,
+            id: this.docId(doc.entityType, doc.entityUid),
+            body: doc,
+            refresh: false,
+        });
+    }
+    async bulkIndex(docs) {
+        if (docs.length === 0) {
+            return;
+        }
+        const body = docs.flatMap((doc) => [
+            { index: { _index: this.index_, _id: this.docId(doc.entityType, doc.entityUid) } },
+            doc,
+        ]);
+        await this.client.bulk({ body });
+    }
+    async remove(entityType, entityUid) {
+        try {
+            await this.client.delete({ index: this.index_, id: this.docId(entityType, entityUid) });
+        }
+        catch (err) {
+            // A 404 (already absent) is not an error for a remove() call — every other status is.
+            if (err?.meta?.statusCode !== 404) {
+                throw err;
+            }
+        }
+    }
+    async search(query) {
+        const limit = Math.min(query.limit ?? 25, 200);
+        const from = query.cursor ? Math.max(0, parseInt(query.cursor, 10) || 0) : 0;
+        const filter = [{ term: { mailboxUid: query.mailboxUid } }];
+        if (query.entityTypes && query.entityTypes.length > 0) {
+            filter.push({ terms: { entityType: query.entityTypes } });
+        }
+        const response = await this.client.search({
+            index: this.index_,
+            body: {
+                query: {
+                    bool: {
+                        must: [
+                            {
+                                multi_match: {
+                                    query: query.text,
+                                    fields: ["subject^3", "body", "attachmentText", "participants^2"],
+                                },
+                            },
+                        ],
+                        filter,
+                    },
+                },
+                from,
+                size: limit + 1,
+            },
+        });
+        const hits = response.body.hits.hits;
+        const hasMore = hits.length > limit;
+        const page = hasMore ? hits.slice(0, limit) : hits;
+        return {
+            results: page.map((hit) => ({
+                entityType: hit._source.entityType,
+                entityUid: hit._source.entityUid,
+                score: hit._score,
+            })),
+            nextCursor: hasMore ? String(from + limit) : undefined,
+        };
+    }
+}
+__decorate([
+    Config("mail:search:opensearch:url", "https://localhost:9200"),
+    __metadata("design:type", String)
+], OpenSearchProvider.prototype, "url", void 0);
+__decorate([
+    Config("mail:search:opensearch:index", "mail_search_index"),
+    __metadata("design:type", String)
+], OpenSearchProvider.prototype, "index_", void 0);
+__decorate([
+    Config("mail:search:opensearch:username"),
+    __metadata("design:type", String)
+], OpenSearchProvider.prototype, "username", void 0);
+__decorate([
+    Config("mail:search:opensearch:password"),
+    __metadata("design:type", String)
+], OpenSearchProvider.prototype, "password", void 0);
+__decorate([
+    Logger,
+    __metadata("design:type", Object)
+], OpenSearchProvider.prototype, "logger", void 0);
+__decorate([
+    Init,
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], OpenSearchProvider.prototype, "init", null);
+//# sourceMappingURL=OpenSearchProvider.js.map

package/dist/lib/search/OpenSearchProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenSearchProvider.js","sourceRoot":"","sources":["../../../src/search/OpenSearchProvider.ts"],"names":[],"mappings":";;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,OAAO,kBAAkB;IAA/B;QACoB,SAAI,GAAW,YAAY,CAAC;QAGpC,QAAG,GAAW,wBAAwB,CAAC;QAGvC,WAAM,GAAW,mBAAmB,CAAC;IAyHjD,CAAC;IA3GiB,AAAN,KAAK,CAAC,IAAI;QACd,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,cAAc,CAAM,gCAAgC,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC;YACrB,IAAI,EAAE,IAAI,CAAC,GAAG;YACd,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;SACzF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC7B,KAAK,EAAE,IAAI,CAAC,MAAM;gBAClB,IAAI,EAAE;oBACF,QAAQ,EAAE;wBACN,UAAU,EAAE;4BACR,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;4BAC/B,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;4BAC9B,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;4BAC/B,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;4BACzB,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;4BACtB,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;4BAChC,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;4BAC9B,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;yBAChC;qBACJ;iBACJ;aACJ,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,UAA4B,EAAE,SAAiB;QACzD,OAAO,GAAG,UAAU,IAAI,SAAS,EAAE,CAAC;IACxC,CAAC;IAEM,KAAK,CAAC,KAAK,CAAC,GAAmB;QAClC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YACpB,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC;YAC7C,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,KAAK;SACjB,CAAC,CAAC;IACP,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,IAAsB;QACzC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO;QACX,CAAC;QACD,MAAM,IAAI,GAAU,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;YACtC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE;YAClF,GAAG;SACN,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,UAA4B,EAAE,SAAiB;QAC/D,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,sFAAsF;YACtF,IAAI,GAAG,EAAE,IAAI,EAAE,UAAU,KAAK,GAAG,EAAE,CAAC;gBAChC,MAAM,GAAG,CAAC;YACd,CAAC;QACL,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,KAAkB;QAClC,MAAM,KAAK,GAAW,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,IAAI,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAErF,MAAM,MAAM,GAAU,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACnE,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACtC,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,IAAI,EAAE;gBACF,KAAK,EAAE;oBACH,IAAI,EAAE;wBACF,IAAI,EAAE;4BACF;gCACI,WAAW,EAAE;oCACT,KAAK,EAAE,KAAK,CAAC,IAAI;oCACjB,MAAM,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,gBAAgB,EAAE,gBAAgB,CAAC;iCACpE;6BACJ;yBACJ;wBACD,MAAM;qBACT;iBACJ;gBACD,IAAI;gBACJ,IAAI,EAAE,KAAK,GAAG,CAAC;aAClB;SACJ,CAAC,CAAC;QAEH,MAAM,IAAI,GAAU,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5C,MAAM,OAAO,GAAY,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QAC7C,MAAM,IAAI,GAAU,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAE1D,OAAO;YACH,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACxB,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU;gBAClC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS;gBAChC,KAAK,EAAE,GAAG,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;SACzD,CAAC;IACN,CAAC;CACJ;AA5HW;IADP,MAAM,CAAC,4BAA4B,EAAE,wBAAwB,CAAC;;+CAChB;AAGvC;IADP,MAAM,CAAC,8BAA8B,EAAE,mBAAmB,CAAC;;kDACf;AAGrC;IADP,MAAM,CAAC,iCAAiC,CAAC;;oDAChB;AAGlB;IADP,MAAM,CAAC,iCAAiC,CAAC;;oDAChB;AAGlB;IADP,MAAM;;kDACa;AAKN;IADb,IAAI;;;;8CA4BJ"}