@rapidmx/restapi 0.1.0

package/dist/lib/jobs/AttachmentExtractionJob.js

@@ -0,0 +1,124 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import * as crypto from "crypto";
+import { ObjectDecorators } from "@rapidrest/core";
+import { BackgroundService, RepoUtils } from "@rapidrest/service-core";
+import { ExtractorRegistry } from "../search/extraction/ExtractorRegistry.js";
+import { RecoverableRepoUtils } from "../util/RecoverableRepoUtils.js";
+const { Config, Init, Inject, Logger } = ObjectDecorators;
+/**
+ * Runs `ExtractorRegistry` (PDF/DOCX/plain-text/HTML text extraction) over `Attachment` records that haven't
+ * been processed yet (`extractedTextBlobKey` unset), as a background job — never inline on ingestion, since
+ * extraction can be slow and must not block SMTP-ACK or webmail send/save-draft latency (see the architecture
+ * plan's rationale for this).
+ *
+ * Every eligible attachment gets `extractedTextBlobKey` set exactly once, even when nothing extractable was
+ * found (an empty-content blob) — this is what marks an attachment as "already attempted" so an unsupported
+ * MIME type (e.g. an image) isn't re-selected by this job forever. When extraction *does* produce non-empty
+ * text for an attachment whose parent `Message` was already search-indexed, this job clears that message's
+ * `searchIndexedAt` back to `undefined` so `SearchIndexJob` re-indexes it with the newly available text.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class AttachmentExtractionJob extends BackgroundService {
+    constructor() {
+        super(...arguments);
+        this.extractorRegistry = new ExtractorRegistry();
+        this.scheduleExpr = "*/20 * * * * *";
+        this.batchSize = 25;
+    }
+    get schedule() {
+        return this.scheduleExpr;
+    }
+    async init() {
+        this.attachmentRepo = await this._objectFactory.newInstance(RepoUtils, {
+            name: this.attachmentClass.name,
+            args: [this.attachmentClass],
+        });
+        this.messageRepo = await this._objectFactory.newInstance(RecoverableRepoUtils, {
+            name: this.messageClass.name,
+            args: [this.messageClass],
+        });
+    }
+    async start() {
+        // Nothing to do at startup beyond `init()` above; processing happens entirely in `run()`.
+    }
+    stop() {
+        // Do nothing
+    }
+    async run() {
+        if (!this.attachmentRepo || !this.blobStore) {
+            return;
+        }
+        // `limit` must be passed both via `options` (used by the Mongo backend) *and* baked into the query
+        // object itself (all `ModelUtils.buildSearchQuerySQL` reads - it ignores `options.limit` entirely and
+        // falls back to its own default of 100 otherwise). Confirmed by real-database testing: on the SQL
+        // backend, `options.limit` alone silently caps at 100 regardless of the configured batch size.
+        const pending = await this.attachmentRepo.find({ extractedTextBlobKey: null, limit: this.batchSize }, { ignoreACL: true, limit: this.batchSize });
+        for (const attachment of pending) {
+            try {
+                await this.processAttachment(attachment);
+            }
+            catch (err) {
+                this.logger?.warn(`AttachmentExtractionJob: failed to process attachment ${attachment.uid}: ${err.message}`);
+            }
+        }
+    }
+    async processAttachment(attachment) {
+        const content = await this.blobStore.get(attachment.blobKey);
+        const text = await this.extractorRegistry.extract(attachment.mimeType, content);
+        const extractedTextBlobKey = `attachment-text/${crypto.randomUUID()}`;
+        await this.blobStore.put(extractedTextBlobKey, Buffer.from(text ?? "", "utf-8"), {
+            contentType: "text/plain",
+        });
+        await this.attachmentRepo.update({ uid: attachment.uid, version: attachment.version, extractedTextBlobKey }, attachment, { ignoreACL: true });
+        if (text && text.length > 0) {
+            const message = await this.messageRepo.findOne(attachment.messageUid, {
+                ignoreACL: true,
+            });
+            if (message?.searchIndexedAt) {
+                // Explicit `null`, not `undefined`: TypeORM's `Repository.update()` silently drops any
+                // property whose value is `undefined` from its generated `SET` clause, so on the SQL backend
+                // an `undefined` here would leave the persisted `searchIndexedAt` completely untouched (still
+                // reporting "already indexed") - a real, confirmed cross-backend bug caught by real-database
+                // testing. MongoDB's own `updateOne($set: ...)` happens to coerce either value to `null`
+                // equivalently, so `null` is correct there too.
+                await this.messageRepo.update({ uid: message.uid, version: message.version, searchIndexedAt: null }, message, { ignoreACL: true, skipPush: true });
+            }
+        }
+    }
+}
+__decorate([
+    Inject("BlobStore"),
+    __metadata("design:type", Object)
+], AttachmentExtractionJob.prototype, "blobStore", void 0);
+__decorate([
+    Config("mail:jobs:attachment_extraction:schedule", "*/20 * * * * *"),
+    __metadata("design:type", String)
+], AttachmentExtractionJob.prototype, "scheduleExpr", void 0);
+__decorate([
+    Config("mail:jobs:attachment_extraction:batch_size", 25),
+    __metadata("design:type", Number)
+], AttachmentExtractionJob.prototype, "batchSize", void 0);
+__decorate([
+    Logger,
+    __metadata("design:type", Object)
+], AttachmentExtractionJob.prototype, "logger", void 0);
+__decorate([
+    Init,
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], AttachmentExtractionJob.prototype, "init", null);
+//# sourceMappingURL=AttachmentExtractionJob.js.map

package/dist/lib/jobs/AttachmentExtractionJob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AttachmentExtractionJob.js","sourceRoot":"","sources":["../../../src/jobs/AttachmentExtractionJob.ts"],"names":[],"mappings":";;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAiB,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAEvE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAE1D;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAgB,uBAAiE,SAAQ,iBAAiB;IAAhH;;QAaY,sBAAiB,GAAsB,IAAI,iBAAiB,EAAE,CAAC;QAG/D,iBAAY,GAAW,gBAAgB,CAAC;QAGxC,cAAS,GAAW,EAAE,CAAC;IAsFnC,CAAC;IAjFG,IAAW,QAAQ;QACf,OAAO,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;IAGY,AAAN,KAAK,CAAC,IAAI;QACb,IAAI,CAAC,cAAc,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,SAAS,EAAE;YACpE,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI;YAC/B,IAAI,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,oBAAoB,EAAE;YAC5E,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;YAC5B,IAAI,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;SAC5B,CAAC,CAAC;IACP,CAAC;IAEM,KAAK,CAAC,KAAK;QACd,0FAA0F;IAC9F,CAAC;IAEM,IAAI;QACP,aAAa;IACjB,CAAC;IAEM,KAAK,CAAC,GAAG;QACZ,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,OAAO;QACX,CAAC;QAED,mGAAmG;QACnG,sGAAsG;QACtG,kGAAkG;QAClG,+FAA+F;QAC/F,MAAM,OAAO,GAAQ,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAC/C,EAAE,oBAAoB,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAS,EAC5D,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAC7C,CAAC;QAEF,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACD,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,yDAAyD,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACjH,CAAC;QACL,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,UAAa;QACzC,MAAM,OAAO,GAAW,MAAM,IAAI,CAAC,SAAU,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACtE,MAAM,IAAI,GAAuB,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEpG,MAAM,oBAAoB,GAAG,mBAAmB,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;QACtE,MAAM,IAAI,CAAC,SAAU,CAAC,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,EAAE;YAC9E,WAAW,EAAE,YAAY;SAC5B,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,cAAe,CAAC,MAAM,CAC7B,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,OAAO,EAAG,UAAkB,CAAC,OAAO,EAAE,oBAAoB,EAAS,EAC1F,UAAU,EACV,EAAE,SAAS,EAAE,IAAI,EAAE,CACtB,CAAC;QAEF,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAkB,MAAM,IAAI,CAAC,WAAY,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE;gBAClF,SAAS,EAAE,IAAI;aAClB,CAAC,CAAC;YACH,IAAI,OAAO,EAAE,eAAe,EAAE,CAAC;gBAC3B,uFAAuF;gBACvF,6FAA6F;gBAC7F,8FAA8F;gBAC9F,6FAA6F;gBAC7F,yFAAyF;gBACzF,gDAAgD;gBAChD,MAAM,IAAI,CAAC,WAAY,CAAC,MAAM,CAC1B,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAG,OAAe,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,EAAS,EACrF,OAAO,EACP,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CACtC,CAAC;YACN,CAAC;QACL,CAAC;IACL,CAAC;CACJ;AA9FW;IADP,MAAM,CAAC,WAAW,CAAC;;0DACU;AAKtB;IADP,MAAM,CAAC,0CAA0C,EAAE,gBAAgB,CAAC;;6DACrB;AAGxC;IADP,MAAM,CAAC,4CAA4C,EAAE,EAAE,CAAC;;0DAC1B;AAGvB;IADP,MAAM;;uDACa;AAOP;IADZ,IAAI;;;;mDAUJ"}

package/dist/lib/jobs/CalendarReminderJob.js

@@ -0,0 +1,132 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { ObjectDecorators } from "@rapidrest/core";
+import { BackgroundService, NotificationUtils } from "@rapidrest/service-core";
+import { RecoverableRepoUtils } from "../util/RecoverableRepoUtils.js";
+const { Config, Init, Inject, Logger } = ObjectDecorators;
+/**
+ * Polls upcoming `CalendarEvent` records and dispatches a `"reminder"` push notification once each event's
+ * configured `reminderMinutesBeforeStart` fire time falls within this job's own polling window.
+ *
+ * `CalendarEvent` has no persisted "reminder already sent" flag, and adding one is out of scope here, so this
+ * job takes the simplest correct-enough approach: the query only prunes past events (`startDate` lower-bounded
+ * at `now`, via `ModelUtils.buildSearchQuery`'s single-sided `gte(...)` operator, which - unlike its two-sided
+ * `range(...)` operator - has confirmed correct Date coercion on both backends), and everything else (the
+ * upper lookahead bound, and the actual reminder-fire-time arithmetic) is computed/filtered in-process.
+ *
+ * KNOWN LIMITATION: without a persisted "reminder already sent" flag (e.g. a future `CalendarEvent.
+ * reminderSentAt`), a reminder could in principle fire more than once if this job's own polling window ever
+ * overlaps across runs (e.g. after a restart, or a run that took longer than `windowSeconds`). This is a
+ * deliberate simplification, not an oversight - flagged here for a future follow-up.
+ *
+ * Concrete entity classes are supplied by the Mongo/SQL subclasses (`CalendarReminderJobMongo`/
+ * `CalendarReminderJobSQL`), following the same generic pattern `ScanQueueJob` uses.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class CalendarReminderJob extends BackgroundService {
+    constructor() {
+        super(...arguments);
+        this.scheduleExpr = "0 * * * * *";
+        this.batchSize = 200;
+        this.windowSeconds = 60;
+    }
+    get schedule() {
+        return this.scheduleExpr;
+    }
+    async init() {
+        this.calendarEventRepo = await this._objectFactory.newInstance(RecoverableRepoUtils, {
+            name: this.calendarEventClass.name,
+            args: [this.calendarEventClass],
+        });
+    }
+    async start() {
+        // Nothing to do at startup beyond `init()` above; processing happens entirely in `run()`.
+    }
+    stop() {
+        // Do nothing
+    }
+    async run() {
+        if (!this.calendarEventRepo) {
+            return;
+        }
+        const now = new Date();
+        const windowEnd = new Date(now.getTime() + this.windowSeconds * 1000);
+        // A generous upper bound (24 hours) on candidates fetched per run - actual eligibility is decided below
+        // by comparing each candidate's computed reminder fire time against [now, windowEnd].
+        const lookaheadEnd = new Date(now.getTime() + 24 * 60 * 60 * 1000);
+        // `limit` must be passed both via `options` (used by the Mongo backend) *and* baked into the query
+        // object itself (all `ModelUtils.buildSearchQuerySQL` reads - it ignores `options.limit` entirely and
+        // falls back to its own default of 100 otherwise). Confirmed by real-database testing: on the SQL
+        // backend, `options.limit` alone silently caps at 100 regardless of the configured batch size - and
+        // since this job's own default `batch_size` (200) already exceeds that fallback, this was a live bug
+        // on every SQL deployment out of the box, not just a high-`batch_size` edge case.
+        //
+        // `sort: "startDate"` (ascending) ensures that when the candidate set IS truncated at `batchSize`, the
+        // soonest-due events are the ones kept - without it, truncation could arbitrarily drop an event whose
+        // reminder is due imminently in favor of one due much later, silently skipping (and, per this job's own
+        // documented "no persisted already-sent flag" limitation, never retrying) that reminder.
+        const candidates = await this.calendarEventRepo.find({ startDate: `gte(${now.toISOString()})`, limit: this.batchSize, sort: "startDate" }, { ignoreACL: true, limit: this.batchSize });
+        for (const event of candidates) {
+            try {
+                if (event.reminderMinutesBeforeStart === undefined || event.reminderMinutesBeforeStart === null) {
+                    continue;
+                }
+                // The query already lower-bounds `startDate` at `now`; only the upper lookahead bound needs
+                // checking here.
+                if (event.startDate > lookaheadEnd) {
+                    continue;
+                }
+                const fireAt = new Date(event.startDate.getTime() - event.reminderMinutesBeforeStart * 60 * 1000);
+                if (fireAt >= now && fireAt <= windowEnd) {
+                    this.notificationUtils?.sendMessage([event.folderUid, event.mailboxUid], "CalendarEvent", "reminder", {
+                        eventUid: event.uid,
+                        title: event.title,
+                        startDate: event.startDate,
+                    });
+                }
+            }
+            catch (err) {
+                this.logger?.warn(`CalendarReminderJob: failed to process reminder for event ${event.uid}: ${err.message}`);
+            }
+        }
+    }
+}
+__decorate([
+    Inject(NotificationUtils),
+    __metadata("design:type", NotificationUtils)
+], CalendarReminderJob.prototype, "notificationUtils", void 0);
+__decorate([
+    Config("mail:jobs:calendar_reminder:schedule", "0 * * * * *"),
+    __metadata("design:type", String)
+], CalendarReminderJob.prototype, "scheduleExpr", void 0);
+__decorate([
+    Config("mail:jobs:calendar_reminder:batch_size", 200),
+    __metadata("design:type", Number)
+], CalendarReminderJob.prototype, "batchSize", void 0);
+__decorate([
+    Config("mail:jobs:calendar_reminder:window_seconds", 60),
+    __metadata("design:type", Number)
+], CalendarReminderJob.prototype, "windowSeconds", void 0);
+__decorate([
+    Logger,
+    __metadata("design:type", Object)
+], CalendarReminderJob.prototype, "logger", void 0);
+__decorate([
+    Init,
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], CalendarReminderJob.prototype, "init", null);
+//# sourceMappingURL=CalendarReminderJob.js.map

package/dist/lib/jobs/CalendarReminderJob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CalendarReminderJob.js","sourceRoot":"","sources":["../../../src/jobs/CalendarReminderJob.ts"],"names":[],"mappings":";;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAiB,MAAM,yBAAyB,CAAC;AAC9F,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAEvE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAE1D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAgB,mBAA8C,SAAQ,iBAAiB;IAA7F;;QAYY,iBAAY,GAAW,aAAa,CAAC;QAGrC,cAAS,GAAW,GAAG,CAAC;QAGxB,kBAAa,GAAW,EAAE,CAAC;IA4EvC,CAAC;IAvEG,IAAW,QAAQ;QACf,OAAO,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;IAGY,AAAN,KAAK,CAAC,IAAI;QACb,IAAI,CAAC,iBAAiB,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,oBAAoB,EAAE;YAClF,IAAI,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI;YAClC,IAAI,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC;SAClC,CAAC,CAAC;IACP,CAAC;IAEM,KAAK,CAAC,KAAK;QACd,0FAA0F;IAC9F,CAAC;IAEM,IAAI;QACP,aAAa;IACjB,CAAC;IAEM,KAAK,CAAC,GAAG;QACZ,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC1B,OAAO;QACX,CAAC;QAED,MAAM,GAAG,GAAS,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAS,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;QAC5E,wGAAwG;QACxG,sFAAsF;QACtF,MAAM,YAAY,GAAS,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAEzE,mGAAmG;QACnG,sGAAsG;QACtG,kGAAkG;QAClG,oGAAoG;QACpG,qGAAqG;QACrG,kFAAkF;QAClF,EAAE;QACF,uGAAuG;QACvG,sGAAsG;QACtG,wGAAwG;QACxG,yFAAyF;QACzF,MAAM,UAAU,GAAS,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CACtD,EAAE,SAAS,EAAE,OAAO,GAAG,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW,EAAS,EAC3F,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAC7C,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACD,IAAI,KAAK,CAAC,0BAA0B,KAAK,SAAS,IAAI,KAAK,CAAC,0BAA0B,KAAK,IAAI,EAAE,CAAC;oBAC9F,SAAS;gBACb,CAAC;gBACD,4FAA4F;gBAC5F,iBAAiB;gBACjB,IAAI,KAAK,CAAC,SAAS,GAAG,YAAY,EAAE,CAAC;oBACjC,SAAS;gBACb,CAAC;gBAED,MAAM,MAAM,GAAS,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,0BAA0B,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;gBACxG,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;oBACvC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE;wBAClG,QAAQ,EAAE,KAAK,CAAC,GAAG;wBACnB,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,SAAS,EAAE,KAAK,CAAC,SAAS;qBAC7B,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,6DAA6D,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAChH,CAAC;QACL,CAAC;IACL,CAAC;CACJ;AArFW;IADP,MAAM,CAAC,iBAAiB,CAAC;8BACE,iBAAiB;8DAAC;AAGtC;IADP,MAAM,CAAC,sCAAsC,EAAE,aAAa,CAAC;;yDACjB;AAGrC;IADP,MAAM,CAAC,wCAAwC,EAAE,GAAG,CAAC;;sDACtB;AAGxB;IADP,MAAM,CAAC,4CAA4C,EAAE,EAAE,CAAC;;0DACtB;AAG3B;IADP,MAAM;;mDACa;AAOP;IADZ,IAAI;;;;+CAMJ"}

package/dist/lib/jobs/EasDeviceStateCleanupJob.js

@@ -0,0 +1,101 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { ObjectDecorators } from "@rapidrest/core";
+import { BackgroundService, RepoUtils } from "@rapidrest/service-core";
+const { Config, Init, Logger } = ObjectDecorators;
+/**
+ * Prunes `DeviceSyncState` rows for EAS devices that haven't synced in more than `device_ttl_days` days (or
+ * that have never successfully synced at all), keeping the collection from growing unbounded with abandoned
+ * device pairings.
+ *
+ * Concrete entity classes are supplied by the Mongo/SQL subclasses (`EasDeviceStateCleanupJobMongo`/
+ * `EasDeviceStateCleanupJobSQL`), following the same generic pattern `ScanQueueJob` uses.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class EasDeviceStateCleanupJob extends BackgroundService {
+    constructor() {
+        super(...arguments);
+        this.scheduleExpr = "0 0 4 * * *";
+        this.batchSize = 500;
+        this.deviceTtlDays = 90;
+    }
+    get schedule() {
+        return this.scheduleExpr;
+    }
+    async init() {
+        this.deviceSyncStateRepo = await this._objectFactory.newInstance(RepoUtils, {
+            name: this.deviceSyncStateClass.name,
+            args: [this.deviceSyncStateClass],
+        });
+    }
+    async start() {
+        // Nothing to do at startup beyond `init()` above; processing happens entirely in `run()`.
+    }
+    stop() {
+        // Do nothing
+    }
+    async run() {
+        if (!this.deviceSyncStateRepo) {
+            return;
+        }
+        const cutoff = new Date(Date.now() - this.deviceTtlDays * 24 * 60 * 60 * 1000);
+        // `ModelUtils.buildSearchQuery` supports single-sided `lt(...)` comparisons with correct Date
+        // coercion on both backends, so the "stale" half of this job's criteria is pushed into the query. The
+        // "never synced at all" half (`lastSyncAt` unset) is a separate, plain-equality query rather than an
+        // `$or` of the two — `$or` support isn't confirmed identical across both backends' query builders, and
+        // a second bounded query is just as cheap for a low-frequency daily cleanup job.
+        //
+        // `limit` is passed both via `options` (all the Mongo backend of `RepoUtils.find()` actually reads)
+        // *and* baked into each query object (all `ModelUtils.buildSearchQuerySQL` reads - it ignores
+        // `options.limit` entirely and falls back to its own default of 100 otherwise). Confirmed by
+        // real-database testing: on the SQL backend, `options.limit` alone silently caps at 100 regardless of
+        // the configured batch size.
+        const [stale, neverSynced] = await Promise.all([
+            this.deviceSyncStateRepo.find({ lastSyncAt: `lt(${cutoff.toISOString()})`, limit: this.batchSize }, { ignoreACL: true, limit: this.batchSize }),
+            this.deviceSyncStateRepo.find({ lastSyncAt: null, limit: this.batchSize }, { ignoreACL: true, limit: this.batchSize }),
+        ]);
+        for (const row of [...stale, ...neverSynced]) {
+            try {
+                await this.deviceSyncStateRepo.delete(row.uid, { ignoreACL: true, purge: true });
+            }
+            catch (err) {
+                this.logger?.warn(`EasDeviceStateCleanupJob: failed to delete stale device sync state ${row.uid}: ${err.message}`);
+            }
+        }
+    }
+}
+__decorate([
+    Config("mail:jobs:eas_device_cleanup:schedule", "0 0 4 * * *"),
+    __metadata("design:type", String)
+], EasDeviceStateCleanupJob.prototype, "scheduleExpr", void 0);
+__decorate([
+    Config("mail:jobs:eas_device_cleanup:batch_size", 500),
+    __metadata("design:type", Number)
+], EasDeviceStateCleanupJob.prototype, "batchSize", void 0);
+__decorate([
+    Config("mail:jobs:eas_device_cleanup:device_ttl_days", 90),
+    __metadata("design:type", Number)
+], EasDeviceStateCleanupJob.prototype, "deviceTtlDays", void 0);
+__decorate([
+    Logger,
+    __metadata("design:type", Object)
+], EasDeviceStateCleanupJob.prototype, "logger", void 0);
+__decorate([
+    Init,
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], EasDeviceStateCleanupJob.prototype, "init", null);
+//# sourceMappingURL=EasDeviceStateCleanupJob.js.map

package/dist/lib/jobs/EasDeviceStateCleanupJob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EasDeviceStateCleanupJob.js","sourceRoot":"","sources":["../../../src/jobs/EasDeviceStateCleanupJob.ts"],"names":[],"mappings":";;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAiB,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEtF,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAElD;;;;;;;;;GASG;AACH,MAAM,OAAgB,wBAAoD,SAAQ,iBAAiB;IAAnG;;QASY,iBAAY,GAAW,aAAa,CAAC;QAGrC,cAAS,GAAW,GAAG,CAAC;QAGxB,kBAAa,GAAW,EAAE,CAAC;IA8DvC,CAAC;IAzDG,IAAW,QAAQ;QACf,OAAO,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;IAGY,AAAN,KAAK,CAAC,IAAI;QACb,IAAI,CAAC,mBAAmB,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,SAAS,EAAE;YACzE,IAAI,EAAE,IAAI,CAAC,oBAAoB,CAAC,IAAI;YACpC,IAAI,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC;SACpC,CAAC,CAAC;IACP,CAAC;IAEM,KAAK,CAAC,KAAK;QACd,0FAA0F;IAC9F,CAAC;IAEM,IAAI;QACP,aAAa;IACjB,CAAC;IAEM,KAAK,CAAC,GAAG;QACZ,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC5B,OAAO;QACX,CAAC;QAED,MAAM,MAAM,GAAS,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAErF,8FAA8F;QAC9F,sGAAsG;QACtG,qGAAqG;QACrG,uGAAuG;QACvG,iFAAiF;QACjF,EAAE;QACF,oGAAoG;QACpG,8FAA8F;QAC9F,6FAA6F;QAC7F,sGAAsG;QACtG,6BAA6B;QAC7B,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,GAAe,MAAM,OAAO,CAAC,GAAG,CAAC;YACvD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CACzB,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAS,EAC3E,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAC7C;YACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CACzB,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAS,EAClD,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAC7C;SACJ,CAAC,CAAC;QAEH,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,KAAK,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACD,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACrF,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,sEAAsE,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACvH,CAAC;QACL,CAAC;IACL,CAAC;CACJ;AApEW;IADP,MAAM,CAAC,uCAAuC,EAAE,aAAa,CAAC;;8DAClB;AAGrC;IADP,MAAM,CAAC,yCAAyC,EAAE,GAAG,CAAC;;2DACvB;AAGxB;IADP,MAAM,CAAC,8CAA8C,EAAE,EAAE,CAAC;;+DACxB;AAG3B;IADP,MAAM;;wDACa;AAOP;IADZ,IAAI;;;;oDAMJ"}

package/dist/lib/jobs/ExternalShareExpirationJob.js

@@ -0,0 +1,117 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { ObjectDecorators } from "@rapidrest/core";
+import { BackgroundService, ACLUtils, RepoUtils } from "@rapidrest/service-core";
+const { Config, Init, Inject, Logger } = ObjectDecorators;
+/**
+ * Garbage-collects expired `CalendarShareLink` rows (anonymous external calendar-sharing links whose
+ * `expiresAt` has passed), also revoking the `ACLRecord` each link's `token` was granted on its shared
+ * folder's `AccessControlList` (see `BaseCalendarShareLinkRoute`, which grants/upserts that same record on
+ * create/update — this job is the other half of keeping it in sync, for links that expire rather than being
+ * explicitly deleted via the API).
+ *
+ * Concrete entity classes are supplied by the Mongo/SQL subclasses (`ExternalShareExpirationJobMongo`/
+ * `ExternalShareExpirationJobSQL`), following the same generic pattern `ScanQueueJob` uses.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class ExternalShareExpirationJob extends BackgroundService {
+    constructor() {
+        super(...arguments);
+        this.scheduleExpr = "0 0 5 * * *";
+        this.batchSize = 500;
+    }
+    get schedule() {
+        return this.scheduleExpr;
+    }
+    async init() {
+        this.calendarShareLinkRepo = await this._objectFactory.newInstance(RepoUtils, {
+            name: this.calendarShareLinkClass.name,
+            args: [this.calendarShareLinkClass],
+        });
+    }
+    async start() {
+        // Nothing to do at startup beyond `init()` above; processing happens entirely in `run()`.
+    }
+    stop() {
+        // Do nothing
+    }
+    async run() {
+        if (!this.calendarShareLinkRepo) {
+            return;
+        }
+        const now = new Date();
+        // `ModelUtils.buildSearchQuery` supports single-sided `lt(...)`/`gt(...)`/`gte(...)`/`lte(...)`
+        // comparisons with correct Date coercion on both backends (only its two-sided `range(...)` operator
+        // has a documented Date-coercion gap) - a plain `lt(now)` on `expiresAt` also naturally excludes rows
+        // where it's unset, on both Mongo (`$lt` against a missing field never matches) and SQL (comparing
+        // NULL is never true), so this needs no additional in-process filtering for that case.
+        //
+        // `limit` is passed both via `options` (all the Mongo backend of `RepoUtils.find()` actually reads)
+        // *and* baked into the query object itself (all `ModelUtils.buildSearchQuerySQL` reads - it ignores
+        // `options.limit` entirely and falls back to its own default of 100 otherwise). Confirmed by
+        // real-database testing: on the SQL backend, `options.limit` alone silently caps at 100 regardless of
+        // the configured batch size.
+        const links = await this.calendarShareLinkRepo.find({ expiresAt: `lt(${now.toISOString()})`, limit: this.batchSize }, { ignoreACL: true, limit: this.batchSize });
+        for (const link of links) {
+            try {
+                await this.calendarShareLinkRepo.delete(link.uid, { ignoreACL: true, purge: true });
+                await this.revokeShareTokenAccess(link.folderUid, link.token);
+            }
+            catch (err) {
+                this.logger?.warn(`ExternalShareExpirationJob: failed to delete expired share link ${link.uid}: ${err.message}`);
+            }
+        }
+    }
+    /** Removes any ACL record for `token` from `folderUid`'s ACL - see `BaseCalendarShareLinkRoute`'s identical
+     * helper for the full rationale (kept as a separate copy here rather than a shared import, since this job
+     * has no other dependency on the routes layer and the logic is a few lines). A no-op if the folder has no
+     * ACL document or no matching record - failing open here keeps a missing/corrupt folder ACL from turning a
+     * routine expiration sweep into a failed job run for every OTHER link in the same batch. */
+    async revokeShareTokenAccess(folderUid, token) {
+        const acl = await this.aclUtils?.findACL(folderUid);
+        if (!acl) {
+            return;
+        }
+        const records = acl.records.filter((record) => record.userOrRoleId !== token);
+        if (records.length === acl.records.length) {
+            return;
+        }
+        acl.records = records;
+        await this.aclUtils.saveACL(acl);
+    }
+}
+__decorate([
+    Inject(ACLUtils),
+    __metadata("design:type", ACLUtils)
+], ExternalShareExpirationJob.prototype, "aclUtils", void 0);
+__decorate([
+    Config("mail:jobs:external_share_expiration:schedule", "0 0 5 * * *"),
+    __metadata("design:type", String)
+], ExternalShareExpirationJob.prototype, "scheduleExpr", void 0);
+__decorate([
+    Config("mail:jobs:external_share_expiration:batch_size", 500),
+    __metadata("design:type", Number)
+], ExternalShareExpirationJob.prototype, "batchSize", void 0);
+__decorate([
+    Logger,
+    __metadata("design:type", Object)
+], ExternalShareExpirationJob.prototype, "logger", void 0);
+__decorate([
+    Init,
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], ExternalShareExpirationJob.prototype, "init", null);
+//# sourceMappingURL=ExternalShareExpirationJob.js.map

package/dist/lib/jobs/ExternalShareExpirationJob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExternalShareExpirationJob.js","sourceRoot":"","sources":["../../../src/jobs/ExternalShareExpirationJob.ts"],"names":[],"mappings":";;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAiB,QAAQ,EAAE,SAAS,EAA0B,MAAM,yBAAyB,CAAC;AAExH,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAE1D;;;;;;;;;;;GAWG;AACH,MAAM,OAAgB,0BAAwD,SAAQ,iBAAiB;IAAvG;;QAYY,iBAAY,GAAW,aAAa,CAAC;QAGrC,cAAS,GAAW,GAAG,CAAC;IA2EpC,CAAC;IAtEG,IAAW,QAAQ;QACf,OAAO,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;IAGY,AAAN,KAAK,CAAC,IAAI;QACb,IAAI,CAAC,qBAAqB,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,SAAS,EAAE;YAC3E,IAAI,EAAE,IAAI,CAAC,sBAAsB,CAAC,IAAI;YACtC,IAAI,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC;SACtC,CAAC,CAAC;IACP,CAAC;IAEM,KAAK,CAAC,KAAK;QACd,0FAA0F;IAC9F,CAAC;IAEM,IAAI;QACP,aAAa;IACjB,CAAC;IAEM,KAAK,CAAC,GAAG;QACZ,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC9B,OAAO;QACX,CAAC;QAED,MAAM,GAAG,GAAS,IAAI,IAAI,EAAE,CAAC;QAE7B,gGAAgG;QAChG,oGAAoG;QACpG,sGAAsG;QACtG,mGAAmG;QACnG,uFAAuF;QACvF,EAAE;QACF,oGAAoG;QACpG,oGAAoG;QACpG,6FAA6F;QAC7F,sGAAsG;QACtG,6BAA6B;QAC7B,MAAM,KAAK,GAAQ,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CACpD,EAAE,SAAS,EAAE,MAAM,GAAG,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAS,EACvE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAC7C,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,IAAI,CAAC;gBACD,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpF,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,mEAAmE,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACrH,CAAC;QACL,CAAC;IACL,CAAC;IAED;;;;gGAI4F;IACpF,KAAK,CAAC,sBAAsB,CAAC,SAAiB,EAAE,KAAa;QACjE,MAAM,GAAG,GAAkC,MAAM,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACnF,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,OAAO;QACX,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,KAAK,KAAK,CAAC,CAAC;QAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACxC,OAAO;QACX,CAAC;QACD,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QACtB,MAAM,IAAI,CAAC,QAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;CACJ;AAjFW;IADP,MAAM,CAAC,QAAQ,CAAC;8BACE,QAAQ;4DAAC;AAGpB;IADP,MAAM,CAAC,8CAA8C,EAAE,aAAa,CAAC;;gEACzB;AAGrC;IADP,MAAM,CAAC,gDAAgD,EAAE,GAAG,CAAC;;6DAC9B;AAGxB;IADP,MAAM;;0DACa;AAOP;IADZ,IAAI;;;;sDAMJ"}