Merge pull request #7026 from mailcow/staging

Automatic PR to nightly from 2026-01-29T09:19:39Z

.github/workflows/close_old_issues_and_prs.yml

@@ -14,7 +14,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Mark/Close Stale Issues and Pull Requests 🗑️
-        uses: actions/stale@v10.2.0
+        uses: actions/stale@v10.1.1
         with:
           repo-token: ${{ secrets.STALE_ACTION_PAT }}
           days-before-stale: 60

.github/workflows/image_builds.yml

@@ -15,7 +15,7 @@ jobs:
         images:
           - "acme-mailcow"
           - "clamd-mailcow"
-          - "dockerapi-mailcow"
+          - "controller-mailcow"
           - "dovecot-mailcow"
           - "netfilter-mailcow"
           - "olefy-mailcow"

data/Dockerfiles/acme/acme.sh

@@ -48,11 +48,11 @@ if [[ "${SKIP_LETS_ENCRYPT}" =~ ^([yY][eE][sS]|[yY])+$ ]]; then
   exec $(readlink -f "$0")
 fi
 
-log_f "Waiting for Docker API..."
-until ping dockerapi -c1 > /dev/null; do
+log_f "Waiting for Controller .."
+until ping controller -c1 > /dev/null; do
   sleep 1
 done
-log_f "Docker API OK"
+log_f "Controller OK"
 
 log_f "Waiting for Postfix..."
 until ping postfix -c1 > /dev/null; do

data/Dockerfiles/acme/reload-configurations.sh

@@ -2,32 +2,32 @@
 
 # Reading container IDs
 # Wrapping as array to ensure trimmed content when calling $NGINX etc.
-NGINX=($(curl --silent --insecure https://dockerapi.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/json | jq -r ".[] | {name: .Config.Labels[\"com.docker.compose.service\"], project: .Config.Labels[\"com.docker.compose.project\"], id: .Id}" | jq -rc "select( .name | tostring | contains(\"nginx-mailcow\")) | select( .project | tostring | contains(\"${COMPOSE_PROJECT_NAME,,}\")) | .id" | tr "\n" " "))
-DOVECOT=($(curl --silent --insecure https://dockerapi.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/json | jq -r ".[] | {name: .Config.Labels[\"com.docker.compose.service\"], project: .Config.Labels[\"com.docker.compose.project\"], id: .Id}" | jq -rc "select( .name | tostring | contains(\"dovecot-mailcow\")) | select( .project | tostring | contains(\"${COMPOSE_PROJECT_NAME,,}\")) | .id" | tr "\n" " "))
-POSTFIX=($(curl --silent --insecure https://dockerapi.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/json | jq -r ".[] | {name: .Config.Labels[\"com.docker.compose.service\"], project: .Config.Labels[\"com.docker.compose.project\"], id: .Id}" | jq -rc "select( .name | tostring | contains(\"postfix-mailcow\")) | select( .project | tostring | contains(\"${COMPOSE_PROJECT_NAME,,}\")) | .id" | tr "\n" " "))
+NGINX=($(curl --silent --insecure https://controller.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/json | jq -r ".[] | {name: .Config.Labels[\"com.docker.compose.service\"], project: .Config.Labels[\"com.docker.compose.project\"], id: .Id}" | jq -rc "select( .name | tostring | contains(\"nginx-mailcow\")) | select( .project | tostring | contains(\"${COMPOSE_PROJECT_NAME,,}\")) | .id" | tr "\n" " "))
+DOVECOT=($(curl --silent --insecure https://controller.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/json | jq -r ".[] | {name: .Config.Labels[\"com.docker.compose.service\"], project: .Config.Labels[\"com.docker.compose.project\"], id: .Id}" | jq -rc "select( .name | tostring | contains(\"dovecot-mailcow\")) | select( .project | tostring | contains(\"${COMPOSE_PROJECT_NAME,,}\")) | .id" | tr "\n" " "))
+POSTFIX=($(curl --silent --insecure https://controller.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/json | jq -r ".[] | {name: .Config.Labels[\"com.docker.compose.service\"], project: .Config.Labels[\"com.docker.compose.project\"], id: .Id}" | jq -rc "select( .name | tostring | contains(\"postfix-mailcow\")) | select( .project | tostring | contains(\"${COMPOSE_PROJECT_NAME,,}\")) | .id" | tr "\n" " "))
 
 reload_nginx(){
   echo "Reloading Nginx..."
-  NGINX_RELOAD_RET=$(curl -X POST --insecure https://dockerapi.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${NGINX}/exec -d '{"cmd":"reload", "task":"nginx"}' --silent -H 'Content-type: application/json' | jq -r .type)
+  NGINX_RELOAD_RET=$(curl -X POST --insecure https://controller.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${NGINX}/exec -d '{"cmd":"reload", "task":"nginx"}' --silent -H 'Content-type: application/json' | jq -r .type)
   [[ ${NGINX_RELOAD_RET} != 'success' ]] && { echo "Could not reload Nginx, restarting container..."; restart_container ${NGINX} ; }
 }
 
 reload_dovecot(){
   echo "Reloading Dovecot..."
-  DOVECOT_RELOAD_RET=$(curl -X POST --insecure https://dockerapi.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${DOVECOT}/exec -d '{"cmd":"reload", "task":"dovecot"}' --silent -H 'Content-type: application/json' | jq -r .type)
+  DOVECOT_RELOAD_RET=$(curl -X POST --insecure https://controller.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${DOVECOT}/exec -d '{"cmd":"reload", "task":"dovecot"}' --silent -H 'Content-type: application/json' | jq -r .type)
   [[ ${DOVECOT_RELOAD_RET} != 'success' ]] && { echo "Could not reload Dovecot, restarting container..."; restart_container ${DOVECOT} ; }
 }
 
 reload_postfix(){
   echo "Reloading Postfix..."
-  POSTFIX_RELOAD_RET=$(curl -X POST --insecure https://dockerapi.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${POSTFIX}/exec -d '{"cmd":"reload", "task":"postfix"}' --silent -H 'Content-type: application/json' | jq -r .type)
+  POSTFIX_RELOAD_RET=$(curl -X POST --insecure https://controller.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${POSTFIX}/exec -d '{"cmd":"reload", "task":"postfix"}' --silent -H 'Content-type: application/json' | jq -r .type)
   [[ ${POSTFIX_RELOAD_RET} != 'success' ]] && { echo "Could not reload Postfix, restarting container..."; restart_container ${POSTFIX} ; }
 }
 
 restart_container(){
   for container in $*; do
     echo "Restarting ${container}..."
-    C_REST_OUT=$(curl -X POST --insecure https://dockerapi.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${container}/restart --silent | jq -r '.msg')
+    C_REST_OUT=$(curl -X POST --insecure https://controller.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${container}/restart --silent | jq -r '.msg')
     echo "${C_REST_OUT}"
   done
 }

data/Dockerfiles/controller/Dockerfile

@@ -6,22 +6,29 @@ ARG PIP_BREAK_SYSTEM_PACKAGES=1
 WORKDIR /app
 
 RUN apk add --update --no-cache python3 \
+  bash \
   py3-pip \
   openssl \
   tzdata \
   py3-psutil \
   py3-redis \
   py3-async-timeout \
+  supervisor \
+  curl \
 && pip3 install --upgrade pip \
   fastapi \
   uvicorn \
   aiodocker \
   docker
-RUN mkdir /app/modules
+
+COPY mailcow-adm/ /app/mailcow-adm/
+RUN pip3 install -r /app/mailcow-adm/requirements.txt
+
+COPY api/ /app/api/
 
 COPY docker-entrypoint.sh /app/
-COPY main.py /app/main.py
-COPY modules/ /app/modules/
+COPY supervisord.conf /etc/supervisor/supervisord.conf
+COPY stop-supervisor.sh /usr/local/sbin/stop-supervisor.sh
 
 ENTRYPOINT ["/bin/sh", "/app/docker-entrypoint.sh"]
-CMD ["python", "main.py"]
+CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/supervisord.conf"]

data/Dockerfiles/controller/api/main.py

@@ -254,8 +254,8 @@ if __name__ == '__main__':
     app,
     host="0.0.0.0",
     port=443,
-    ssl_certfile="/app/dockerapi_cert.pem",
-    ssl_keyfile="/app/dockerapi_key.pem",
+    ssl_certfile="/app/controller_cert.pem",
+    ssl_keyfile="/app/controller_key.pem",
     log_level="info",
     loop="none"
   )

data/Dockerfiles/controller/docker-entrypoint.sh

@@ -0,0 +1,9 @@
+#!/bin/bash
+
+`openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 -nodes \
+  -keyout /app/controller_key.pem \
+  -out /app/controller_cert.pem \
+  -subj /CN=controller/O=mailcow \
+  -addext subjectAltName=DNS:controller`
+
+exec "$@"

data/Dockerfiles/controller/mailcow-adm/mailcow-adm.py

@@ -0,0 +1,61 @@
+#!/usr/bin/env python3
+# -*- coding: utf-8 -*-
+
+import argparse
+import sys
+
+from models.AliasModel import AliasModel
+from models.MailboxModel import MailboxModel
+from models.SyncjobModel import SyncjobModel
+from models.CalendarModel import CalendarModel
+from models.MailerModel import MailerModel
+from models.AddressbookModel import AddressbookModel
+from models.MaildirModel import MaildirModel
+from models.DomainModel import DomainModel
+from models.DomainadminModel import DomainadminModel
+from models.StatusModel import StatusModel
+
+from modules.Utils import Utils
+
+
+
+
+def main():
+    utils = Utils()
+
+    model_map = {
+        MailboxModel.parser_command: MailboxModel,
+        AliasModel.parser_command: AliasModel,
+        SyncjobModel.parser_command: SyncjobModel,
+        CalendarModel.parser_command: CalendarModel,
+        AddressbookModel.parser_command: AddressbookModel,
+        MailerModel.parser_command: MailerModel,
+        MaildirModel.parser_command: MaildirModel,
+        DomainModel.parser_command: DomainModel,
+        DomainadminModel.parser_command: DomainadminModel,
+        StatusModel.parser_command: StatusModel
+    }
+
+    parser = argparse.ArgumentParser(description="mailcow Admin Tool")
+    subparsers = parser.add_subparsers(dest="command", required=True)
+
+    for model in model_map.values():
+        model.add_parser(subparsers)
+
+    args = parser.parse_args()
+
+
+    for cmd, model_cls in model_map.items():
+        if args.command == cmd and model_cls.has_required_args(args):
+            instance = model_cls(**vars(args))
+            action = getattr(instance, args.object, None)
+            if callable(action):
+                res = action()
+                utils.pprint(res)
+                sys.exit(0)
+
+    parser.print_help()
+
+
+if __name__ == "__main__":
+    main()

data/Dockerfiles/controller/mailcow-adm/models/AddressbookModel.py

@@ -0,0 +1,140 @@
+from modules.Sogo import Sogo
+from models.BaseModel import BaseModel
+
+class AddressbookModel(BaseModel):
+    parser_command = "addressbook"
+    required_args = {
+        "add": [["username", "name"]],
+        "delete": [["username", "name"]],
+        "get":  [["username", "name"]],
+        "set_acl": [["username", "name", "sharee_email", "acl"]],
+        "get_acl": [["username", "name"]],
+        "delete_acl": [["username", "name", "sharee_email"]],
+        "add_contact": [["username", "name", "contact_name", "contact_email", "type"]],
+        "delete_contact": [["username", "name", "contact_name"]],
+    }
+
+    def __init__(
+        self,
+        username=None,
+        name=None,
+        sharee_email=None,
+        acl=None,
+        subscribe=None,
+        ics=None,
+        contact_name=None,
+        contact_email=None,
+        type=None,
+        **kwargs
+    ):
+        self.sogo = Sogo(username)
+
+        self.name = name
+        self.acl = acl
+        self.sharee_email = sharee_email
+        self.subscribe = subscribe
+        self.ics = ics
+        self.contact_name = contact_name
+        self.contact_email = contact_email
+        self.type = type
+
+    def add(self):
+        """
+        Add a new addressbook.
+        :return: Response from SOGo API.
+        """
+        return self.sogo.addAddressbook(self.name)
+
+    def set_acl(self):
+        """
+        Set ACL for the addressbook.
+        :return: Response from SOGo API.
+        """
+        addressbook_id = self.sogo.getAddressbookIdByName(self.name)
+        if not addressbook_id:
+            print(f"Addressbook '{self.name}' not found for user '{self.username}'.")
+            return None
+        return self.sogo.setAddressbookACL(addressbook_id, self.sharee_email, self.acl, self.subscribe)
+
+    def delete_acl(self):
+        """
+        Delete the addressbook ACL.
+        :return: Response from SOGo API.
+        """
+        addressbook_id = self.sogo.getAddressbookIdByName(self.name)
+        if not addressbook_id:
+            print(f"Addressbook '{self.name}' not found for user '{self.username}'.")
+            return None
+        return self.sogo.deleteAddressbookACL(addressbook_id, self.sharee_email)
+
+    def get_acl(self):
+        """
+        Get the ACL for the addressbook.
+        :return: Response from SOGo API.
+        """
+        addressbook_id = self.sogo.getAddressbookIdByName(self.name)
+        if not addressbook_id:
+            print(f"Addressbook '{self.name}' not found for user '{self.username}'.")
+            return None
+        return self.sogo.getAddressbookACL(addressbook_id)
+
+    def add_contact(self):
+        """
+        Add a new contact to the addressbook.
+        :return: Response from SOGo API.
+        """
+        addressbook_id = self.sogo.getAddressbookIdByName(self.name)
+        if not addressbook_id:
+            print(f"Addressbook '{self.name}' not found for user '{self.username}'.")
+            return None
+        if self.type == "card":
+            return self.sogo.addAddressbookContact(addressbook_id, self.contact_name, self.contact_email)
+        elif self.type == "list":
+            return self.sogo.addAddressbookContactList(addressbook_id, self.contact_name, self.contact_email)
+
+    def delete_contact(self):
+        """
+        Delete a contact or contactlist from the addressbook.
+        :return: Response from SOGo API.
+        """
+        addressbook_id = self.sogo.getAddressbookIdByName(self.name)
+        if not addressbook_id:
+            print(f"Addressbook '{self.name}' not found for user '{self.username}'.")
+            return None
+        return self.sogo.deleteAddressbookItem(addressbook_id, self.contact_name)
+
+    def get(self):
+        """
+        Retrieve addressbooks list.
+        :return: Response from SOGo API.
+        """
+        return self.sogo.getAddressbookList()
+
+    def delete(self):
+        """
+        Delete the addressbook.
+        :return: Response from SOGo API.
+        """
+
+        addressbook_id = self.sogo.getAddressbookIdByName(self.name)
+        if not addressbook_id:
+            print(f"Addressbook '{self.name}' not found for user '{self.username}'.")
+            return None
+        return self.sogo.deleteAddressbook(addressbook_id)
+
+    @classmethod
+    def add_parser(cls, subparsers):
+        parser = subparsers.add_parser(
+            cls.parser_command,
+            help="Manage addressbooks (add, delete, get, set_acl, get_acl, delete_acl, add_contact, delete_contact)"
+        )
+        parser.add_argument("object", choices=list(cls.required_args.keys()), help="Action to perform: add, delete, get, set_acl, get_acl, delete_acl, add_contact, delete_contact")
+        parser.add_argument("--username", required=True, help="Username of the addressbook owner (e.g. user@example.com)")
+        parser.add_argument("--name", help="Addressbook name")
+        parser.add_argument("--sharee-email", help="Email address to share the addressbook with")
+        parser.add_argument("--acl", help="ACL rights for the sharee (e.g. r, w, rw)")
+        parser.add_argument("--subscribe", action='store_true', help="Subscribe the sharee to the addressbook")
+        parser.add_argument("--contact-name", help="Name of the contact or contactlist to add or delete")
+        parser.add_argument("--contact-email", help="Email address of the contact to add")
+        parser.add_argument("--type", choices=["card", "list"], help="Type of contact to add: card (single contact) or list (distribution list)")
+

data/Dockerfiles/controller/mailcow-adm/models/AliasModel.py

@@ -0,0 +1,107 @@
+from modules.Mailcow import Mailcow
+from models.BaseModel import BaseModel
+
+class AliasModel(BaseModel):
+    parser_command = "alias"
+    required_args = {
+        "add": [["address", "goto"]],
+        "delete": [["id"]],
+        "get":  [["id"]],
+        "edit": [["id"]]
+    }
+
+    def __init__(
+        self,
+        id=None,
+        address=None,
+        goto=None,
+        active=None,
+        sogo_visible=None,
+        **kwargs
+    ):
+        self.mailcow = Mailcow()
+
+        self.id = id
+        self.address = address
+        self.goto = goto
+        self.active = active
+        self.sogo_visible = sogo_visible
+
+    @classmethod
+    def from_dict(cls, data):
+        return cls(
+            address=data.get("address"),
+            goto=data.get("goto"),
+            active=data.get("active", None),
+            sogo_visible=data.get("sogo_visible", None)
+        )
+
+    def getAdd(self):
+        """
+        Get the alias details as a dictionary for adding, sets default values.
+        :return: Dictionary containing alias details.
+        """
+
+        alias = {
+            "address": self.address,
+            "goto": self.goto,
+            "active": self.active if self.active is not None else 1,
+            "sogo_visible": self.sogo_visible if self.sogo_visible is not None else 0
+        }
+        return {key: value for key, value in alias.items() if value is not None}
+
+    def getEdit(self):
+        """
+        Get the alias details as a dictionary for editing, sets no default values.
+        :return: Dictionary containing mailbox details.
+        """
+
+        alias = {
+            "address": self.address,
+            "goto": self.goto,
+            "active": self.active,
+            "sogo_visible": self.sogo_visible
+        }
+        return {key: value for key, value in alias.items() if value is not None}
+
+    def get(self):
+        """
+        Get the mailbox details from the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.getAlias(self.id)
+
+    def delete(self):
+        """
+        Get the mailbox details from the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.deleteAlias(self.id)
+
+    def add(self):
+        """
+        Get the mailbox details from the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.addAlias(self.getAdd())
+
+    def edit(self):
+        """
+        Get the mailbox details from the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.editAlias(self.id, self.getEdit())
+
+    @classmethod
+    def add_parser(cls, subparsers):
+        parser = subparsers.add_parser(
+            cls.parser_command,
+            help="Manage aliases (add, delete, get, edit)"
+        )
+        parser.add_argument("object", choices=list(cls.required_args.keys()), help="Action to perform: add, delete, get, edit")
+        parser.add_argument("--id", help="Alias object ID (required for get, edit, delete)")
+        parser.add_argument("--address", help="Alias email address (e.g. alias@example.com)")
+        parser.add_argument("--goto", help="Destination address(es), comma-separated (e.g. user1@example.com,user2@example.com)")
+        parser.add_argument("--active", choices=["1", "0"], help="Activate (1) or deactivate (0) the alias")
+        parser.add_argument("--sogo-visible", choices=["1", "0"], help="Show alias in SOGo addressbook (1 = yes, 0 = no)")
+

data/Dockerfiles/controller/mailcow-adm/models/BaseModel.py

@@ -0,0 +1,35 @@
+class BaseModel:
+    parser_command = ""
+    required_args = {}
+
+    @classmethod
+    def has_required_args(cls, args):
+        """
+        Validate that all required arguments are present.
+        """
+        object_name = args.object if hasattr(args, "object") else args.get("object")
+        required_lists = cls.required_args.get(object_name, False)
+
+        if not required_lists:
+            return False
+
+        for required_set in required_lists:
+            result = True
+            for required_args in required_set:
+                if isinstance(args, dict):
+                    if not args.get(required_args):
+                        result = False
+                        break
+                elif not hasattr(args, required_args):
+                    result = False
+                    break
+            if result:
+                break
+
+        if not result:
+            print(f"Required arguments for '{object_name}': {required_lists}")
+        return result
+
+    @classmethod
+    def add_parser(cls, subparsers):
+        pass

data/Dockerfiles/controller/mailcow-adm/models/CalendarModel.py

@@ -0,0 +1,111 @@
+from modules.Sogo import Sogo
+from models.BaseModel import BaseModel
+
+class CalendarModel(BaseModel):
+    parser_command = "calendar"
+    required_args = {
+        "add": [["username", "name"]],
+        "delete": [["username", "name"]],
+        "get":  [["username"]],
+        "import_ics": [["username", "name", "ics"]],
+        "set_acl": [["username", "name", "sharee_email", "acl"]],
+        "get_acl": [["username", "name"]],
+        "delete_acl": [["username", "name", "sharee_email"]],
+    }
+
+    def __init__(
+        self,
+        username=None,
+        name=None,
+        sharee_email=None,
+        acl=None,
+        subscribe=None,
+        ics=None,
+        **kwargs
+    ):
+        self.sogo = Sogo(username)
+
+        self.name = name
+        self.acl = acl
+        self.sharee_email = sharee_email
+        self.subscribe = subscribe
+        self.ics = ics
+
+    def add(self):
+        """
+        Add a new calendar.
+        :return: Response from SOGo API.
+        """
+        return self.sogo.addCalendar(self.name)
+
+    def delete(self):
+        """
+        Delete a calendar.
+        :return: Response from SOGo API.
+        """
+        calendar_id = self.sogo.getCalendarIdByName(self.name)
+        if not calendar_id:
+            print(f"Calendar '{self.name}' not found for user '{self.username}'.")
+            return None
+        return self.sogo.deleteCalendar(calendar_id)
+
+    def get(self):
+        """
+        Get the calendar details.
+        :return: Response from SOGo API.
+        """
+        return self.sogo.getCalendar()
+
+    def set_acl(self):
+        """
+        Set ACL for the calendar.
+        :return: Response from SOGo API.
+        """
+        calendar_id = self.sogo.getCalendarIdByName(self.name)
+        if not calendar_id:
+            print(f"Calendar '{self.name}' not found for user '{self.username}'.")
+            return None
+        return self.sogo.setCalendarACL(calendar_id, self.sharee_email, self.acl, self.subscribe)
+
+    def delete_acl(self):
+        """
+        Delete the calendar ACL.
+        :return: Response from SOGo API.
+        """
+        calendar_id = self.sogo.getCalendarIdByName(self.name)
+        if not calendar_id:
+            print(f"Calendar '{self.name}' not found for user '{self.username}'.")
+            return None
+        return self.sogo.deleteCalendarACL(calendar_id, self.sharee_email)
+
+    def get_acl(self):
+        """
+        Get the ACL for the calendar.
+        :return: Response from SOGo API.
+        """
+        calendar_id = self.sogo.getCalendarIdByName(self.name)
+        if not calendar_id:
+            print(f"Calendar '{self.name}' not found for user '{self.username}'.")
+            return None
+        return self.sogo.getCalendarACL(calendar_id)
+
+    def import_ics(self):
+        """
+        Import a calendar from an ICS file.
+        :return: Response from SOGo API.
+        """
+        return self.sogo.importCalendar(self.name, self.ics)
+
+    @classmethod
+    def add_parser(cls, subparsers):
+        parser = subparsers.add_parser(
+            cls.parser_command,
+            help="Manage calendars (add, delete, get, import_ics, set_acl, get_acl, delete_acl)"
+        )
+        parser.add_argument("object", choices=list(cls.required_args.keys()), help="Action to perform: add, delete, get, import_ics, set_acl, get_acl, delete_acl")
+        parser.add_argument("--username", required=True, help="Username of the calendar owner (e.g. user@example.com)")
+        parser.add_argument("--name", help="Calendar name")
+        parser.add_argument("--ics", help="Path to ICS file for import")
+        parser.add_argument("--sharee-email", help="Email address to share the calendar with")
+        parser.add_argument("--acl", help="ACL rights for the sharee (e.g. r, w, rw)")
+        parser.add_argument("--subscribe", action='store_true', help="Subscribe the sharee to the calendar")

data/Dockerfiles/controller/mailcow-adm/models/DomainModel.py

@@ -0,0 +1,162 @@
+from modules.Mailcow import Mailcow
+from models.BaseModel import BaseModel
+
+class DomainModel(BaseModel):
+    parser_command = "domain"
+    required_args = {
+        "add": [["domain"]],
+        "delete": [["domain"]],
+        "get":  [["domain"]],
+        "edit": [["domain"]]
+    }
+
+    def __init__(
+        self,
+        domain=None,
+        active=None,
+        aliases=None,
+        backupmx=None,
+        defquota=None,
+        description=None,
+        mailboxes=None,
+        maxquota=None,
+        quota=None,
+        relay_all_recipients=None,
+        rl_frame=None,
+        rl_value=None,
+        restart_sogo=None,
+        tags=None,
+        **kwargs
+    ):
+        self.mailcow = Mailcow()
+
+        self.domain = domain
+        self.active = active
+        self.aliases = aliases
+        self.backupmx = backupmx
+        self.defquota = defquota
+        self.description = description
+        self.mailboxes = mailboxes
+        self.maxquota = maxquota
+        self.quota = quota
+        self.relay_all_recipients = relay_all_recipients
+        self.rl_frame = rl_frame
+        self.rl_value = rl_value
+        self.restart_sogo = restart_sogo
+        self.tags = tags
+
+    @classmethod
+    def from_dict(cls, data):
+        return cls(
+            domain=data.get("domain"),
+            active=data.get("active", None),
+            aliases=data.get("aliases", None),
+            backupmx=data.get("backupmx", None),
+            defquota=data.get("defquota", None),
+            description=data.get("description", None),
+            mailboxes=data.get("mailboxes", None),
+            maxquota=data.get("maxquota", None),
+            quota=data.get("quota", None),
+            relay_all_recipients=data.get("relay_all_recipients", None),
+            rl_frame=data.get("rl_frame", None),
+            rl_value=data.get("rl_value", None),
+            restart_sogo=data.get("restart_sogo", None),
+            tags=data.get("tags", None)
+        )
+
+    def getAdd(self):
+        """
+        Get the domain details as a dictionary for adding, sets default values.
+        :return: Dictionary containing domain details.
+        """
+        domain = {
+            "domain": self.domain,
+            "active": self.active if self.active is not None else 1,
+            "aliases": self.aliases if self.aliases is not None else 400,
+            "backupmx": self.backupmx if self.backupmx is not None else 0,
+            "defquota": self.defquota if self.defquota is not None else 3072,
+            "description": self.description if self.description is not None else "",
+            "mailboxes": self.mailboxes if self.mailboxes is not None else 10,
+            "maxquota": self.maxquota if self.maxquota is not None else 10240,
+            "quota": self.quota if self.quota is not None else 10240,
+            "relay_all_recipients": self.relay_all_recipients if self.relay_all_recipients is not None else 0,
+            "rl_frame": self.rl_frame,
+            "rl_value": self.rl_value,
+            "restart_sogo": self.restart_sogo if self.restart_sogo is not None else 0,
+            "tags": self.tags if self.tags is not None else []
+        }
+        return {key: value for key, value in domain.items() if value is not None}
+
+    def getEdit(self):
+        """
+        Get the domain details as a dictionary for editing, sets no default values.
+        :return: Dictionary containing domain details.
+        """
+        domain = {
+            "domain": self.domain,
+            "active": self.active,
+            "aliases": self.aliases,
+            "backupmx": self.backupmx,
+            "defquota": self.defquota,
+            "description": self.description,
+            "mailboxes": self.mailboxes,
+            "maxquota": self.maxquota,
+            "quota": self.quota,
+            "relay_all_recipients": self.relay_all_recipients,
+            "rl_frame": self.rl_frame,
+            "rl_value": self.rl_value,
+            "restart_sogo": self.restart_sogo,
+            "tags": self.tags
+        }
+        return {key: value for key, value in domain.items() if value is not None}
+
+    def get(self):
+        """
+        Get the domain details from the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.getDomain(self.domain)
+
+    def delete(self):
+        """
+        Delete the domain from the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.deleteDomain(self.domain)
+
+    def add(self):
+        """
+        Add the domain to the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.addDomain(self.getAdd())
+
+    def edit(self):
+        """
+        Edit the domain in the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.editDomain(self.domain, self.getEdit())
+
+    @classmethod
+    def add_parser(cls, subparsers):
+        parser = subparsers.add_parser(
+            cls.parser_command,
+            help="Manage domains (add, delete, get, edit)"
+        )
+        parser.add_argument("object", choices=list(cls.required_args.keys()), help="Action to perform: add, delete, get, edit")
+        parser.add_argument("--domain", required=True, help="Domain name (e.g. domain.tld)")
+        parser.add_argument("--active", choices=["1", "0"], help="Activate (1) or deactivate (0) the domain")
+        parser.add_argument("--aliases", help="Number of aliases allowed for the domain")
+        parser.add_argument("--backupmx", choices=["1", "0"], help="Enable (1) or disable (0) backup MX")
+        parser.add_argument("--defquota", help="Default quota for mailboxes in MB")
+        parser.add_argument("--description", help="Description of the domain")
+        parser.add_argument("--mailboxes", help="Number of mailboxes allowed for the domain")
+        parser.add_argument("--maxquota", help="Maximum quota for the domain in MB")
+        parser.add_argument("--quota", help="Quota used by the domain in MB")
+        parser.add_argument("--relay-all-recipients", choices=["1", "0"], help="Relay all recipients (1 = yes, 0 = no)")
+        parser.add_argument("--rl-frame", help="Rate limit frame (e.g., s, m, h)")
+        parser.add_argument("--rl-value", help="Rate limit value")
+        parser.add_argument("--restart-sogo", help="Restart SOGo after changes (1 = yes, 0 = no)")
+        parser.add_argument("--tags", nargs="*", help="Tags for the domain")
+

data/Dockerfiles/controller/mailcow-adm/models/DomainadminModel.py

@@ -0,0 +1,106 @@
+from modules.Mailcow import Mailcow
+from models.BaseModel import BaseModel
+
+class DomainadminModel(BaseModel):
+    parser_command = "domainadmin"
+    required_args = {
+        "add": [["username", "domains", "password"]],
+        "delete": [["username"]],
+        "get":  [["username"]],
+        "edit": [["username"]]
+    }
+
+    def __init__(
+        self,
+        username=None,
+        domains=None,
+        password=None,
+        active=None,
+        **kwargs
+    ):
+        self.mailcow = Mailcow()
+
+        self.username = username
+        self.domains = domains
+        self.password = password
+        self.password2 = password
+        self.active = active
+
+    @classmethod
+    def from_dict(cls, data):
+        return cls(
+            username=data.get("username"),
+            domains=data.get("domains"),
+            password=data.get("password"),
+            password2=data.get("password"),
+            active=data.get("active", None),
+        )
+
+    def getAdd(self):
+        """
+        Get the domain admin details as a dictionary for adding, sets default values.
+        :return: Dictionary containing domain admin details.
+        """
+        domainadmin = {
+            "username": self.username,
+            "domains": self.domains,
+            "password": self.password,
+            "password2": self.password2,
+            "active": self.active if self.active is not None else "1"
+        }
+        return {key: value for key, value in domainadmin.items() if value is not None}
+
+    def getEdit(self):
+        """
+        Get the domain admin details as a dictionary for editing, sets no default values.
+        :return: Dictionary containing domain admin details.
+        """
+        domainadmin = {
+            "username": self.username,
+            "domains": self.domains,
+            "password": self.password,
+            "password2": self.password2,
+            "active": self.active
+        }
+        return {key: value for key, value in domainadmin.items() if value is not None}
+
+    def get(self):
+        """
+        Get the domain admin details from the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.getDomainadmin(self.username)
+
+    def delete(self):
+        """
+        Delete the domain admin from the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.deleteDomainadmin(self.username)
+
+    def add(self):
+        """
+        Add the domain admin to the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.addDomainadmin(self.getAdd())
+
+    def edit(self):
+        """
+        Edit the domain admin in the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.editDomainadmin(self.username, self.getEdit())
+
+    @classmethod
+    def add_parser(cls, subparsers):
+        parser = subparsers.add_parser(
+            cls.parser_command,
+            help="Manage domain admins (add, delete, get, edit)"
+        )
+        parser.add_argument("object", choices=list(cls.required_args.keys()), help="Action to perform: add, delete, get, edit")
+        parser.add_argument("--username", help="Username for the domain admin")
+        parser.add_argument("--domains", help="Comma-separated list of domains")
+        parser.add_argument("--password", help="Password for the domain admin")
+        parser.add_argument("--active", choices=["1", "0"], help="Activate (1) or deactivate (0) the domain admin")
+

data/Dockerfiles/controller/mailcow-adm/models/MailboxModel.py

@@ -0,0 +1,164 @@
+from modules.Mailcow import Mailcow
+from models.BaseModel import BaseModel
+
+class MailboxModel(BaseModel):
+    parser_command = "mailbox"
+    required_args = {
+        "add": [["username", "password"]],
+        "delete": [["username"]],
+        "get":  [["username"]],
+        "edit": [["username"]]
+    }
+
+    def __init__(
+        self,
+        password=None,
+        username=None,
+        domain=None,
+        local_part=None,
+        active=None,
+        sogo_access=None,
+        name=None,
+        authsource=None,
+        quota=None,
+        force_pw_update=None,
+        tls_enforce_in=None,
+        tls_enforce_out=None,
+        tags=None,
+        sender_acl=None,
+        **kwargs
+    ):
+        self.mailcow = Mailcow()
+
+        if username is not None and "@" in username:
+            self.username = username
+            self.local_part, self.domain = username.split("@")
+        else:
+            self.username = f"{local_part}@{domain}"
+            self.local_part = local_part
+            self.domain = domain
+
+        self.password = password
+        self.password2 = password
+        self.active = active
+        self.sogo_access = sogo_access
+        self.name = name
+        self.authsource = authsource
+        self.quota = quota
+        self.force_pw_update = force_pw_update
+        self.tls_enforce_in = tls_enforce_in
+        self.tls_enforce_out = tls_enforce_out
+        self.tags = tags
+        self.sender_acl = sender_acl
+
+    @classmethod
+    def from_dict(cls, data):
+        return cls(
+            domain=data.get("domain"),
+            local_part=data.get("local_part"),
+            password=data.get("password"),
+            password2=data.get("password"),
+            active=data.get("active", None),
+            sogo_access=data.get("sogo_access", None),
+            name=data.get("name", None),
+            authsource=data.get("authsource", None),
+            quota=data.get("quota", None),
+            force_pw_update=data.get("force_pw_update", None),
+            tls_enforce_in=data.get("tls_enforce_in", None),
+            tls_enforce_out=data.get("tls_enforce_out", None),
+            tags=data.get("tags", None),
+            sender_acl=data.get("sender_acl", None)
+        )
+
+    def getAdd(self):
+        """
+        Get the mailbox details as a dictionary for adding, sets default values.
+        :return: Dictionary containing mailbox details.
+        """
+
+        mailbox = {
+            "domain": self.domain,
+            "local_part": self.local_part,
+            "password": self.password,
+            "password2": self.password2,
+            "active": self.active if self.active is not None else 1,
+            "name": self.name if self.name is not None else "",
+            "authsource": self.authsource if self.authsource is not None else "mailcow",
+            "quota": self.quota if self.quota is not None else 0,
+            "force_pw_update": self.force_pw_update if self.force_pw_update is not None else 0,
+            "tls_enforce_in": self.tls_enforce_in if self.tls_enforce_in is not None else 0,
+            "tls_enforce_out": self.tls_enforce_out if self.tls_enforce_out is not None else 0,
+            "tags": self.tags if self.tags is not None else []
+        }
+        return {key: value for key, value in mailbox.items() if value is not None}
+
+    def getEdit(self):
+        """
+        Get the mailbox details as a dictionary for editing, sets no default values.
+        :return: Dictionary containing mailbox details.
+        """
+
+        mailbox = {
+            "domain": self.domain,
+            "local_part": self.local_part,
+            "password": self.password,
+            "password2": self.password2,
+            "active": self.active,
+            "name": self.name,
+            "authsource": self.authsource,
+            "quota": self.quota,
+            "force_pw_update": self.force_pw_update,
+            "tls_enforce_in": self.tls_enforce_in,
+            "tls_enforce_out": self.tls_enforce_out,
+            "tags": self.tags
+        }
+        return {key: value for key, value in mailbox.items() if value is not None}
+
+    def get(self):
+        """
+        Get the mailbox details from the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.getMailbox(self.username)
+
+    def delete(self):
+        """
+        Get the mailbox details from the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.deleteMailbox(self.username)
+
+    def add(self):
+        """
+        Get the mailbox details from the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.addMailbox(self.getAdd())
+
+    def edit(self):
+        """
+        Get the mailbox details from the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.editMailbox(self.username, self.getEdit())
+
+    @classmethod
+    def add_parser(cls, subparsers):
+        parser = subparsers.add_parser(
+            cls.parser_command,
+            help="Manage mailboxes (add, delete, get, edit)"
+        )
+        parser.add_argument("object", choices=list(cls.required_args.keys()), help="Action to perform: add, delete, get, edit")
+        parser.add_argument("--username", help="Full email address of the mailbox (e.g. user@example.com)")
+        parser.add_argument("--password", help="Password for the mailbox (required for add)")
+        parser.add_argument("--active", choices=["1", "0"], help="Activate (1) or deactivate (0) the mailbox")
+        parser.add_argument("--sogo-access", choices=["1", "0"], help="Redirect mailbox to SOGo after web login (1 = yes, 0 = no)")
+        parser.add_argument("--name", help="Display name of the mailbox owner")
+        parser.add_argument("--authsource", help="Authentication source (default: mailcow)")
+        parser.add_argument("--quota", help="Mailbox quota in bytes (0 = unlimited)")
+        parser.add_argument("--force-pw-update", choices=["1", "0"], help="Force password update on next login (1 = yes, 0 = no)")
+        parser.add_argument("--tls-enforce-in", choices=["1", "0"], help="Enforce TLS for incoming emails (1 = yes, 0 = no)")
+        parser.add_argument("--tls-enforce-out", choices=["1", "0"], help="Enforce TLS for outgoing emails (1 = yes, 0 = no)")
+        parser.add_argument("--tags", help="Comma-separated list of tags for the mailbox")
+        parser.add_argument("--sender-acl", help="Comma-separated list of allowed sender addresses for this mailbox")
+

data/Dockerfiles/controller/mailcow-adm/models/MaildirModel.py

@@ -0,0 +1,67 @@
+from modules.Dovecot import Dovecot
+from models.BaseModel import BaseModel
+
+class MaildirModel(BaseModel):
+    parser_command = "maildir"
+    required_args = {
+        "encrypt": [],
+        "decrypt": [],
+        "restore": [["username", "item"], ["list"]]
+    }
+
+    def __init__(
+        self,
+        username=None,
+        source=None,
+        item=None,
+        overwrite=None,
+        list=None,
+        **kwargs
+    ):
+        self.dovecot = Dovecot()
+
+        for key, value in kwargs.items():
+            setattr(self, key, value)
+
+        self.username = username
+        self.source = source
+        self.item = item
+        self.overwrite = overwrite
+        self.list = list
+
+    def encrypt(self):
+        """
+        Encrypt the maildir for the specified user or all.
+        :return: Response from Dovecot.
+        """
+        return self.dovecot.encryptMaildir(self.source_dir, self.output_dir)
+
+    def decrypt(self):
+        """
+        Decrypt the maildir for the specified user or all.
+        :return: Response from Dovecot.
+        """
+        return self.dovecot.decryptMaildir(self.source_dir, self.output_dir)
+
+    def restore(self):
+        """
+        Restore or List maildir data for the specified user.
+        :return: Response from Dovecot.
+        """
+        if self.list:
+            return self.dovecot.listDeletedMaildirs()
+        return self.dovecot.restoreMaildir(self.username, self.item)
+
+
+    @classmethod
+    def add_parser(cls, subparsers):
+        parser = subparsers.add_parser(
+            cls.parser_command,
+            help="Manage maildir (encrypt, decrypt, restore)"
+        )
+        parser.add_argument("object", choices=list(cls.required_args.keys()), help="Action to perform: encrypt, decrypt, restore")
+        parser.add_argument("--item", help="Item to restore")
+        parser.add_argument("--username", help="Username to restore the item to")
+        parser.add_argument("--list", action="store_true", help="List items to restore")
+        parser.add_argument("--source-dir", help="Path to the source maildir to import/encrypt/decrypt")
+        parser.add_argument("--output-dir", help="Directory to store encrypted/decrypted files inside the Dovecot container")

data/Dockerfiles/controller/mailcow-adm/models/MailerModel.py

@@ -0,0 +1,62 @@
+import json
+from models.BaseModel import BaseModel
+from modules.Mailer import Mailer
+
+class MailerModel(BaseModel):
+    parser_command = "mail"
+    required_args = {
+        "send": [["sender", "recipient", "subject", "body"]]
+    }
+
+    def __init__(
+        self,
+        sender=None,
+        recipient=None,
+        subject=None,
+        body=None,
+        context=None,
+        **kwargs
+    ):
+        self.sender = sender
+        self.recipient = recipient
+        self.subject = subject
+        self.body = body
+        self.context = context
+
+    def send(self):
+        if self.context is not None:
+            try:
+                self.context = json.loads(self.context)
+            except json.JSONDecodeError as e:
+                return f"Invalid context JSON: {e}"
+        else:
+            self.context = {}
+
+        mailer = Mailer(
+            smtp_host="postfix-mailcow",
+            smtp_port=25,
+            username=self.sender,
+            password="",
+            use_tls=True
+        )
+        res = mailer.send_mail(
+            subject=self.subject,
+            from_addr=self.sender,
+            to_addrs=self.recipient.split(","),
+            template=self.body,
+            context=self.context
+        )
+        return res
+
+    @classmethod
+    def add_parser(cls, subparsers):
+        parser = subparsers.add_parser(
+            cls.parser_command,
+            help="Send emails via SMTP"
+        )
+        parser.add_argument("object", choices=list(cls.required_args.keys()), help="Action to perform: send")
+        parser.add_argument("--sender", required=True, help="Email sender address")
+        parser.add_argument("--recipient", required=True, help="Email recipient address (comma-separated for multiple)")
+        parser.add_argument("--subject", required=True, help="Email subject")
+        parser.add_argument("--body", required=True, help="Email body (Jinja2 template supported)")
+        parser.add_argument("--context", help="Context for Jinja2 template rendering (JSON format)")

data/Dockerfiles/controller/mailcow-adm/models/StatusModel.py

@@ -0,0 +1,45 @@
+from modules.Mailcow import Mailcow
+from models.BaseModel import BaseModel
+
+class StatusModel(BaseModel):
+    parser_command = "status"
+    required_args = {
+        "version": [[]],
+        "vmail": [[]],
+        "containers":  [[]]
+    }
+
+    def __init__(
+        self,
+        **kwargs
+    ):
+        self.mailcow = Mailcow()
+
+    def version(self):
+        """
+        Get the version of the mailcow instance.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.getStatusVersion()
+
+    def vmail(self):
+        """
+        Get the vmail details from the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.getStatusVmail()
+
+    def containers(self):
+        """
+        Get the status of containers in the mailcow instance.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.getStatusContainers()
+
+    @classmethod
+    def add_parser(cls, subparsers):
+        parser = subparsers.add_parser(
+            cls.parser_command,
+            help="Get information about mailcow (version, vmail, containers)"
+        )
+        parser.add_argument("object", choices=list(cls.required_args.keys()), help="Action to perform: version, vmail, containers")

data/Dockerfiles/controller/mailcow-adm/models/SyncjobModel.py

@@ -0,0 +1,221 @@
+from modules.Mailcow import Mailcow
+from models.BaseModel import BaseModel
+
+class SyncjobModel(BaseModel):
+    parser_command = "syncjob"
+    required_args = {
+        "add": [["username", "host1", "port1", "user1", "password1", "enc1"]],
+        "delete": [["id"]],
+        "get":  [["username"]],
+        "edit": [["id"]],
+        "run": [["id"]]
+    }
+
+    def __init__(
+        self,
+        id=None,
+        username=None,
+        host1=None,
+        port1=None,
+        user1=None,
+        password1=None,
+        enc1=None,
+        mins_interval=None,
+        subfolder2=None,
+        maxage=None,
+        maxbytespersecond=None,
+        timeout1=None,
+        timeout2=None,
+        exclude=None,
+        custom_parameters=None,
+        delete2duplicates=None,
+        delete1=None,
+        delete2=None,
+        automap=None,
+        skipcrossduplicates=None,
+        subscribeall=None,
+        active=None,
+        force=None,
+        **kwargs
+    ):
+        self.mailcow = Mailcow()
+
+        for key, value in kwargs.items():
+            setattr(self, key, value)
+
+        self.id = id
+        self.username = username
+        self.host1 = host1
+        self.port1 = port1
+        self.user1 = user1
+        self.password1 = password1
+        self.enc1 = enc1
+        self.mins_interval = mins_interval
+        self.subfolder2 = subfolder2
+        self.maxage = maxage
+        self.maxbytespersecond = maxbytespersecond
+        self.timeout1 = timeout1
+        self.timeout2 = timeout2
+        self.exclude = exclude
+        self.custom_parameters = custom_parameters
+        self.delete2duplicates = delete2duplicates
+        self.delete1 = delete1
+        self.delete2 = delete2
+        self.automap = automap
+        self.skipcrossduplicates = skipcrossduplicates
+        self.subscribeall = subscribeall
+        self.active = active
+        self.force = force
+
+    @classmethod
+    def from_dict(cls, data):
+        return cls(
+            username=data.get("username"),
+            host1=data.get("host1"),
+            port1=data.get("port1"),
+            user1=data.get("user1"),
+            password1=data.get("password1"),
+            enc1=data.get("enc1"),
+            mins_interval=data.get("mins_interval", None),
+            subfolder2=data.get("subfolder2", None),
+            maxage=data.get("maxage", None),
+            maxbytespersecond=data.get("maxbytespersecond", None),
+            timeout1=data.get("timeout1", None),
+            timeout2=data.get("timeout2", None),
+            exclude=data.get("exclude", None),
+            custom_parameters=data.get("custom_parameters", None),
+            delete2duplicates=data.get("delete2duplicates", None),
+            delete1=data.get("delete1", None),
+            delete2=data.get("delete2", None),
+            automap=data.get("automap", None),
+            skipcrossduplicates=data.get("skipcrossduplicates", None),
+            subscribeall=data.get("subscribeall", None),
+            active=data.get("active", None),
+        )
+
+    def getAdd(self):
+        """
+        Get the sync job details as a dictionary for adding, sets default values.
+        :return: Dictionary containing sync job details.
+        """
+        syncjob = {
+            "username": self.username,
+            "host1": self.host1,
+            "port1": self.port1,
+            "user1": self.user1,
+            "password1": self.password1,
+            "enc1": self.enc1,
+            "mins_interval": self.mins_interval if self.mins_interval is not None else 20,
+            "subfolder2": self.subfolder2 if self.subfolder2 is not None else "",
+            "maxage": self.maxage if self.maxage is not None else 0,
+            "maxbytespersecond": self.maxbytespersecond if self.maxbytespersecond is not None else 0,
+            "timeout1": self.timeout1 if self.timeout1 is not None else 600,
+            "timeout2": self.timeout2 if self.timeout2 is not None else 600,
+            "exclude": self.exclude if self.exclude is not None else "(?i)spam|(?i)junk",
+            "custom_parameters": self.custom_parameters if self.custom_parameters is not None else "",
+            "delete2duplicates": 1 if self.delete2duplicates else 0,
+            "delete1": 1 if self.delete1 else 0,
+            "delete2": 1 if self.delete2 else 0,
+            "automap": 1 if self.automap else 0,
+            "skipcrossduplicates": 1 if self.skipcrossduplicates else 0,
+            "subscribeall": 1 if self.subscribeall else 0,
+            "active": 1 if self.active else 0
+        }
+        return {key: value for key, value in syncjob.items() if value is not None}
+
+    def getEdit(self):
+        """
+        Get the sync job details as a dictionary for editing, sets no default values.
+        :return: Dictionary containing sync job details.
+        """
+        syncjob = {
+            "username": self.username,
+            "host1": self.host1,
+            "port1": self.port1,
+            "user1": self.user1,
+            "password1": self.password1,
+            "enc1": self.enc1,
+            "mins_interval": self.mins_interval,
+            "subfolder2": self.subfolder2,
+            "maxage": self.maxage,
+            "maxbytespersecond": self.maxbytespersecond,
+            "timeout1": self.timeout1,
+            "timeout2": self.timeout2,
+            "exclude": self.exclude,
+            "custom_parameters": self.custom_parameters,
+            "delete2duplicates": self.delete2duplicates,
+            "delete1": self.delete1,
+            "delete2": self.delete2,
+            "automap": self.automap,
+            "skipcrossduplicates": self.skipcrossduplicates,
+            "subscribeall": self.subscribeall,
+            "active": self.active
+        }
+        return {key: value for key, value in syncjob.items() if value is not None}
+
+    def get(self):
+        """
+        Get the sync job details from the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.getSyncjob(self.username)
+
+    def delete(self):
+        """
+        Get the sync job details from the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.deleteSyncjob(self.id)
+
+    def add(self):
+        """
+        Get the sync job details from the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.addSyncjob(self.getAdd())
+
+    def edit(self):
+        """
+        Get the sync job details from the mailcow API.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.editSyncjob(self.id, self.getEdit())
+
+    def run(self):
+        """
+        Run the sync job.
+        :return: Response from the mailcow API.
+        """
+        return self.mailcow.runSyncjob(self.id, force=self.force)
+
+    @classmethod
+    def add_parser(cls, subparsers):
+        parser = subparsers.add_parser(
+            cls.parser_command,
+            help="Manage sync jobs (add, delete, get, edit)"
+        )
+        parser.add_argument("object", choices=list(cls.required_args.keys()), help="Action to perform: add, delete, get, edit")
+        parser.add_argument("--id", help="Syncjob object ID (required for edit, delete, run)")
+        parser.add_argument("--username", help="Target mailbox username (e.g. user@example.com)")
+        parser.add_argument("--host1", help="Source IMAP server hostname")
+        parser.add_argument("--port1", help="Source IMAP server port")
+        parser.add_argument("--user1", help="Source IMAP account username")
+        parser.add_argument("--password1", help="Source IMAP account password")
+        parser.add_argument("--enc1", choices=["PLAIN", "SSL", "TLS"], help="Encryption for source server connection")
+        parser.add_argument("--mins-interval", help="Sync interval in minutes (default: 20)")
+        parser.add_argument("--subfolder2", help="Destination subfolder (default: empty)")
+        parser.add_argument("--maxage", help="Maximum mail age in days (default: 0 = unlimited)")
+        parser.add_argument("--maxbytespersecond", help="Maximum bandwidth in bytes/sec (default: 0 = unlimited)")
+        parser.add_argument("--timeout1", help="Timeout for source server in seconds (default: 600)")
+        parser.add_argument("--timeout2", help="Timeout for destination server in seconds (default: 600)")
+        parser.add_argument("--exclude", help="Regex pattern to exclude folders (default: (?i)spam|(?i)junk)")
+        parser.add_argument("--custom-parameters", help="Additional imapsync parameters")
+        parser.add_argument("--delete2duplicates", choices=["1", "0"], help="Delete duplicates on destination (1 = yes, 0 = no)")
+        parser.add_argument("--del1", choices=["1", "0"], help="Delete mails on source after sync (1 = yes, 0 = no)")
+        parser.add_argument("--del2", choices=["1", "0"], help="Delete mails on destination after sync (1 = yes, 0 = no)")
+        parser.add_argument("--automap", choices=["1", "0"], help="Enable folder automapping (1 = yes, 0 = no)")
+        parser.add_argument("--skipcrossduplicates", choices=["1", "0"], help="Skip cross-account duplicates (1 = yes, 0 = no)")
+        parser.add_argument("--subscribeall", choices=["1", "0"], help="Subscribe to all folders (1 = yes, 0 = no)")
+        parser.add_argument("--active", choices=["1", "0"], help="Activate syncjob (1 = yes, 0 = no)")
+        parser.add_argument("--force", action="store_true", help="Force the syncjob to run even if it is not active")
+

data/Dockerfiles/controller/mailcow-adm/modules/Docker.py

@@ -0,0 +1,128 @@
+import docker
+from docker.errors import APIError
+
+class Docker:
+    def __init__(self):
+        self.client = docker.from_env()
+
+    def exec_command(self, container_name, cmd, user=None):
+        """
+        Execute a command in a container by its container name.
+        :param container_name: The name of the container.
+        :param cmd: The command to execute as a list (e.g., ["ls", "-la"]).
+        :param user: The user to execute the command as (optional).
+        :return: A standardized response with status, output, and exit_code.
+        """
+
+        filters = {"name": container_name}
+
+        try:
+            for container in self.client.containers.list(filters=filters):
+                exec_result = container.exec_run(cmd, user=user)
+                return {
+                    "status": "success",
+                    "exit_code": exec_result.exit_code,
+                    "output": exec_result.output.decode("utf-8")
+                }
+        except APIError as e:
+            return {
+                "status": "error",
+                "exit_code": "APIError",
+                "output": str(e)
+            }
+        except Exception as e:
+            return {
+                "status": "error",
+                "exit_code": "Exception",
+                "output": str(e)
+            }
+
+    def start_container(self, container_name):
+        """
+        Start a container by its container name.
+        :param container_name: The name of the container.
+        :return: A standardized response with status, output, and exit_code.
+        """
+
+        filters = {"name": container_name}
+
+        try:
+            for container in self.client.containers.list(filters=filters):
+                container.start()
+                return {
+                    "status": "success",
+                    "exit_code": "0",
+                    "output": f"Container '{container_name}' started successfully."
+                }
+        except APIError as e:
+            return {
+                "status": "error",
+                "exit_code": "APIError",
+                "output": str(e)
+            }
+        except Exception as e:
+            return {
+                "status": "error",
+                "error_type": "Exception",
+                "output": str(e)
+            }
+
+    def stop_container(self, container_name):
+        """
+        Stop a container by its container name.
+        :param container_name: The name of the container.
+        :return: A standardized response with status, output, and exit_code.
+        """
+
+        filters = {"name": container_name}
+
+        try:
+            for container in self.client.containers.list(filters=filters):
+                container.stop()
+                return {
+                    "status": "success",
+                    "exit_code": "0",
+                    "output": f"Container '{container_name}' stopped successfully."
+                }
+        except APIError as e:
+            return {
+                "status": "error",
+                "exit_code": "APIError",
+                "output": str(e)
+            }
+        except Exception as e:
+            return {
+                "status": "error",
+                "exit_code": "Exception",
+                "output": str(e)
+            }
+
+    def restart_container(self, container_name):
+        """
+        Restart a container by its container name.
+        :param container_name: The name of the container.
+        :return: A standardized response with status, output, and exit_code.
+        """
+
+        filters = {"name": container_name}
+
+        try:
+            for container in self.client.containers.list(filters=filters):
+                container.restart()
+                return {
+                    "status": "success",
+                    "exit_code": "0",
+                    "output": f"Container '{container_name}' restarted successfully."
+                }
+        except APIError as e:
+            return {
+                "status": "error",
+                "exit_code": "APIError",
+                "output": str(e)
+            }
+        except Exception as e:
+            return {
+                "status": "error",
+                "exit_code": "Exception",
+                "output": str(e)
+            }

data/Dockerfiles/controller/mailcow-adm/modules/Dovecot.py

@@ -0,0 +1,206 @@
+import os
+
+from modules.Docker import Docker
+
+class Dovecot:
+    def __init__(self):
+        self.docker = Docker()
+
+    def decryptMaildir(self, source_dir="/var/vmail/", output_dir=None):
+        """
+        Decrypt files in /var/vmail using doveadm if they are encrypted.
+        :param output_dir: Directory inside the Dovecot container to store decrypted files, Default overwrite.
+        """
+        private_key = "/mail_crypt/ecprivkey.pem"
+        public_key = "/mail_crypt/ecpubkey.pem"
+
+        if output_dir:
+            # Ensure the output directory exists inside the container
+            mkdir_result = self.docker.exec_command("dovecot-mailcow", f"bash -c 'mkdir -p {output_dir} && chown vmail:vmail {output_dir}'")
+            if mkdir_result.get("status") != "success":
+                print(f"Error creating output directory: {mkdir_result.get('output')}")
+                return
+
+        find_command = [
+            "find", source_dir, "-type", "f", "-regextype", "egrep", "-regex", ".*S=.*W=.*"
+        ]
+
+        try:
+            find_result = self.docker.exec_command("dovecot-mailcow", " ".join(find_command))
+            if find_result.get("status") != "success":
+                print(f"Error finding files: {find_result.get('output')}")
+                return
+
+            files = find_result.get("output", "").splitlines()
+
+            for file in files:
+                head_command = f"head -c7 {file}"
+                head_result = self.docker.exec_command("dovecot-mailcow", head_command)
+                if head_result.get("status") == "success" and head_result.get("output", "").strip() == "CRYPTED":
+                    if output_dir:
+                        # Preserve the directory structure in the output directory
+                        relative_path = os.path.relpath(file, source_dir)
+                        output_file = os.path.join(output_dir, relative_path)
+                        current_path = output_dir
+                        for part in os.path.dirname(relative_path).split(os.sep):
+                            current_path = os.path.join(current_path, part)
+                            mkdir_result = self.docker.exec_command("dovecot-mailcow", f"bash -c '[ ! -d {current_path} ] && mkdir {current_path} && chown vmail:vmail {current_path}'")
+                            if mkdir_result.get("status") != "success":
+                                print(f"Error creating directory {current_path}: {mkdir_result.get('output')}")
+                                continue
+                    else:
+                        # Overwrite the original file
+                        output_file = file
+
+                    decrypt_command = (
+                        f"bash -c 'doveadm fs get compress lz4:1:crypt:private_key_path={private_key}:public_key_path={public_key}:posix:prefix=/ {file} > {output_file}'"
+                    )
+
+                    decrypt_result = self.docker.exec_command("dovecot-mailcow", decrypt_command)
+                    if decrypt_result.get("status") == "success":
+                        print(f"Decrypted {file}")
+
+                        # Verify the file size and set permissions
+                        size_check_command = f"bash -c '[ -s {output_file} ] && chmod 600 {output_file} && chown vmail:vmail {output_file} || rm -f {output_file}'"
+                        size_check_result = self.docker.exec_command("dovecot-mailcow", size_check_command)
+                        if size_check_result.get("status") != "success":
+                            print(f"Error setting permissions for {output_file}: {size_check_result.get('output')}\n")
+
+        except Exception as e:
+            print(f"Error during decryption: {e}")
+
+        return "Done"
+
+    def encryptMaildir(self, source_dir="/var/vmail/", output_dir=None):
+        """
+        Encrypt files in /var/vmail using doveadm if they are not already encrypted.
+        :param source_dir: Directory inside the Dovecot container to encrypt files.
+        :param output_dir: Directory inside the Dovecot container to store encrypted files, Default overwrite.
+        """
+        private_key = "/mail_crypt/ecprivkey.pem"
+        public_key = "/mail_crypt/ecpubkey.pem"
+
+        if output_dir:
+            # Ensure the output directory exists inside the container
+            mkdir_result = self.docker.exec_command("dovecot-mailcow", f"mkdir -p {output_dir}")
+            if mkdir_result.get("status") != "success":
+                print(f"Error creating output directory: {mkdir_result.get('output')}")
+                return
+
+        find_command = [
+            "find", source_dir, "-type", "f", "-regextype", "egrep", "-regex", ".*S=.*W=.*"
+        ]
+
+        try:
+            find_result = self.docker.exec_command("dovecot-mailcow", " ".join(find_command))
+            if find_result.get("status") != "success":
+                print(f"Error finding files: {find_result.get('output')}")
+                return
+
+            files = find_result.get("output", "").splitlines()
+
+            for file in files:
+                head_command = f"head -c7 {file}"
+                head_result = self.docker.exec_command("dovecot-mailcow", head_command)
+                if head_result.get("status") == "success" and head_result.get("output", "").strip() != "CRYPTED":
+                    if output_dir:
+                        # Preserve the directory structure in the output directory
+                        relative_path = os.path.relpath(file, source_dir)
+                        output_file = os.path.join(output_dir, relative_path)
+                        current_path = output_dir
+                        for part in os.path.dirname(relative_path).split(os.sep):
+                            current_path = os.path.join(current_path, part)
+                            mkdir_result = self.docker.exec_command("dovecot-mailcow", f"bash -c '[ ! -d {current_path} ] && mkdir {current_path} && chown vmail:vmail {current_path}'")
+                            if mkdir_result.get("status") != "success":
+                                print(f"Error creating directory {current_path}: {mkdir_result.get('output')}")
+                                continue
+                    else:
+                        # Overwrite the original file
+                        output_file = file
+
+                    encrypt_command = (
+                        f"bash -c 'doveadm fs put crypt private_key_path={private_key}:public_key_path={public_key}:posix:prefix=/ {file} {output_file}'"
+                    )
+
+                    encrypt_result = self.docker.exec_command("dovecot-mailcow", encrypt_command)
+                    if encrypt_result.get("status") == "success":
+                        print(f"Encrypted {file}")
+
+                        # Set permissions
+                        permissions_command = f"bash -c 'chmod 600 {output_file} && chown 5000:5000 {output_file}'"
+                        permissions_result = self.docker.exec_command("dovecot-mailcow", permissions_command)
+                        if permissions_result.get("status") != "success":
+                            print(f"Error setting permissions for {output_file}: {permissions_result.get('output')}\n")
+
+        except Exception as e:
+            print(f"Error during encryption: {e}")
+
+        return "Done"
+
+    def listDeletedMaildirs(self, source_dir="/var/vmail/_garbage"):
+        """
+        List deleted maildirs in the specified garbage directory.
+        :param source_dir: Directory to search for deleted maildirs.
+        :return: List of maildirs.
+        """
+        list_command = ["bash", "-c", f"ls -la {source_dir}"]
+
+        try:
+            result = self.docker.exec_command("dovecot-mailcow", list_command)
+            if result.get("status") != "success":
+                print(f"Error listing deleted maildirs: {result.get('output')}")
+                return []
+
+            lines = result.get("output", "").splitlines()
+            maildirs = {}
+
+            for idx, line in enumerate(lines):
+                parts = line.split()
+                if "_" in line:
+                    folder_name = parts[-1]
+                    time, maildir = folder_name.split("_", 1)
+
+                    if maildir.endswith("_index"):
+                        main_item = maildir[:-6]
+                        if main_item in maildirs:
+                            maildirs[main_item]["has_index"] = True
+                    else:
+                        maildirs[maildir] = {"item": idx, "time": time, "name": maildir, "has_index": False}
+
+            return list(maildirs.values())
+
+        except Exception as e:
+            print(f"Error during listing deleted maildirs: {e}")
+            return []
+
+    def restoreMaildir(self, username, item, source_dir="/var/vmail/_garbage"):
+        """
+        Restore a maildir item for a specific user from the deleted maildirs.
+        :param username: Username to restore the item to.
+        :param item: Item to restore (e.g., mailbox, folder).
+        :param source_dir: Directory containing deleted maildirs.
+        :return: Response from Dovecot.
+        """
+        username_splitted = username.split("@")
+        maildirs = self.listDeletedMaildirs()
+
+        maildir = None
+        for mdir in maildirs:
+            if mdir["item"] == int(item):
+                maildir = mdir
+                break
+        if not maildir:
+            return {"status": "error", "message": "Maildir not found."}
+
+        restore_command = f"mv {source_dir}/{maildir['time']}_{maildir['name']} /var/vmail/{username_splitted[1]}/{username_splitted[0]}"
+        restore_index_command = f"mv {source_dir}/{maildir['time']}_{maildir['name']}_index /var/vmail_index/{username}"
+
+        result = self.docker.exec_command("dovecot-mailcow", ["bash", "-c", restore_command])
+        if result.get("status") != "success":
+            return {"status": "error", "message": "Failed to restore maildir."}
+
+        result = self.docker.exec_command("dovecot-mailcow", ["bash", "-c", restore_index_command])
+        if result.get("status") != "success":
+            return {"status": "error", "message": "Failed to restore maildir index."}
+
+        return "Done"

data/Dockerfiles/controller/mailcow-adm/modules/Mailcow.py

@@ -0,0 +1,457 @@
+import requests
+import urllib3
+import sys
+import os
+import subprocess
+import tempfile
+import mysql.connector
+from contextlib import contextmanager
+from datetime import datetime
+from modules.Docker import Docker
+
+
+class Mailcow:
+    def __init__(self):
+        self.apiUrl = "/api/v1"
+        self.ignore_ssl_errors = True
+
+        self.baseUrl = f"https://{os.getenv('IPv4_NETWORK', '172.22.1')}.247:{os.getenv('HTTPS_PORT', '443')}"
+        self.host = os.getenv("MAILCOW_HOSTNAME", "")
+        self.apiKey = ""
+        if self.ignore_ssl_errors:
+            urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)
+
+        self.db_config = {
+            'user': os.getenv('DBUSER'),
+            'password': os.getenv('DBPASS'),
+            'database': os.getenv('DBNAME'),
+            'unix_socket': '/var/run/mysqld/mysqld.sock',
+        }
+
+        self.docker = Docker()
+
+
+    # API Functions
+    def addDomain(self, domain):
+        """
+        Add a domain to the mailcow instance.
+        :param domain: Dictionary containing domain details.
+        :return: Response from the mailcow API.
+        """
+
+        return self.post('/add/domain', domain)
+
+    def addMailbox(self, mailbox):
+        """
+        Add a mailbox to the mailcow instance.
+        :param mailbox: Dictionary containing mailbox details.
+        :return: Response from the mailcow API.
+        """
+
+        return self.post('/add/mailbox', mailbox)
+
+    def addAlias(self, alias):
+        """
+        Add an alias to the mailcow instance.
+        :param alias: Dictionary containing alias details.
+        :return: Response from the mailcow API.
+        """
+
+        return self.post('/add/alias', alias)
+
+    def addSyncjob(self, syncjob):
+        """
+        Add a sync job to the mailcow instance.
+        :param syncjob: Dictionary containing sync job details.
+        :return: Response from the mailcow API.
+        """
+
+        return self.post('/add/syncjob', syncjob)
+
+    def addDomainadmin(self, domainadmin):
+        """
+        Add a domain admin to the mailcow instance.
+        :param domainadmin: Dictionary containing domain admin details.
+        :return: Response from the mailcow API.
+        """
+
+        return self.post('/add/domain-admin', domainadmin)
+
+    def deleteDomain(self, domain):
+        """
+        Delete a domain from the mailcow instance.
+        :param domain: Name of the domain to delete.
+        :return: Response from the mailcow API.
+        """
+
+        items = [domain]
+        return self.post('/delete/domain', items)
+
+    def deleteAlias(self, id):
+        """
+        Delete an alias from the mailcow instance.
+        :param id: ID of the alias to delete.
+        :return: Response from the mailcow API.
+        """
+
+        items = [id]
+        return self.post('/delete/alias', items)
+
+    def deleteSyncjob(self, id):
+        """
+        Delete a sync job from the mailcow instance.
+        :param id: ID of the sync job to delete.
+        :return: Response from the mailcow API.
+        """
+
+        items = [id]
+        return self.post('/delete/syncjob', items)
+
+    def deleteMailbox(self, mailbox):
+        """
+        Delete a mailbox from the mailcow instance.
+        :param mailbox: Name of the mailbox to delete.
+        :return: Response from the mailcow API.
+        """
+
+        items = [mailbox]
+        return self.post('/delete/mailbox', items)
+
+    def deleteDomainadmin(self, username):
+        """
+        Delete a domain admin from the mailcow instance.
+        :param username: Username of the domain admin to delete.
+        :return: Response from the mailcow API.
+        """
+
+        items = [username]
+        return self.post('/delete/domain-admin', items)
+
+    def post(self, endpoint, data):
+        """
+        Make a POST request to the mailcow API.
+        :param endpoint: The API endpoint to post to.
+        :param data: Data to be sent in the POST request.
+        :return: Response from the mailcow API.
+        """
+
+        url = f"{self.baseUrl}{self.apiUrl}/{endpoint.lstrip('/')}"
+        headers = {
+            "Content-Type": "application/json",
+            "Host": self.host
+        }
+        if self.apiKey:
+            headers["X-Api-Key"] = self.apiKey
+        response = requests.post(
+            url,
+            json=data,
+            headers=headers,
+            verify=not self.ignore_ssl_errors
+        )
+        response.raise_for_status()
+        return response.json()
+
+    def getDomain(self, domain):
+        """
+        Get a domain from the mailcow instance.
+        :param domain: Name of the domain to get.
+        :return: Response from the mailcow API.
+        """
+
+        return self.get(f'/get/domain/{domain}')
+
+    def getMailbox(self, username):
+        """
+        Get a mailbox from the mailcow instance.
+        :param mailbox: Dictionary containing mailbox details (e.g. {"username": "user@example.com"})
+        :return: Response from the mailcow API.
+        """
+        return self.get(f'/get/mailbox/{username}')
+
+    def getAlias(self, id):
+        """
+        Get an alias from the mailcow instance.
+        :param alias: Dictionary containing alias details (e.g. {"address": "alias@example.com"})
+        :return: Response from the mailcow API.
+        """
+        return self.get(f'/get/alias/{id}')
+
+    def getSyncjob(self, id):
+        """
+        Get a sync job from the mailcow instance.
+        :param syncjob: Dictionary containing sync job details (e.g. {"id": "123"})
+        :return: Response from the mailcow API.
+        """
+        return self.get(f'/get/syncjobs/{id}')
+
+    def getDomainadmin(self, username):
+        """
+        Get a domain admin from the mailcow instance.
+        :param username: Username of the domain admin to get.
+        :return: Response from the mailcow API.
+        """
+        return self.get(f'/get/domain-admin/{username}')
+
+    def getStatusVersion(self):
+        """
+        Get the version of the mailcow instance.
+        :return: Response from the mailcow API.
+        """
+        return self.get('/get/status/version')
+
+    def getStatusVmail(self):
+        """
+        Get the vmail status from the mailcow instance.
+        :return: Response from the mailcow API.
+        """
+        return self.get('/get/status/vmail')
+
+    def getStatusContainers(self):
+        """
+        Get the status of containers from the mailcow instance.
+        :return: Response from the mailcow API.
+        """
+        return self.get('/get/status/containers')
+
+    def get(self, endpoint, params=None):
+        """
+        Make a GET request to the mailcow API.
+        :param endpoint: The API endpoint to get from.
+        :param params: Parameters to be sent in the GET request.
+        :return: Response from the mailcow API.
+        """
+
+        url = f"{self.baseUrl}{self.apiUrl}/{endpoint.lstrip('/')}"
+        headers = {
+            "Content-Type": "application/json",
+            "Host": self.host
+        }
+        if self.apiKey:
+            headers["X-Api-Key"] = self.apiKey
+        response = requests.get(
+            url,
+            params=params,
+            headers=headers,
+            verify=not self.ignore_ssl_errors
+        )
+        response.raise_for_status()
+        return response.json()
+
+    def editDomain(self, domain, attributes):
+        """
+        Edit an existing domain in the mailcow instance.
+        :param domain: Name of the domain to edit
+        :param attributes: Dictionary containing the new domain attributes.
+        """
+
+        items = [domain]
+        return self.edit('/edit/domain', items, attributes)
+
+    def editMailbox(self, mailbox, attributes):
+        """
+        Edit an existing mailbox in the mailcow instance.
+        :param mailbox: Name of the mailbox to edit
+        :param attributes: Dictionary containing the new mailbox attributes.
+        """
+
+        items = [mailbox]
+        return self.edit('/edit/mailbox', items, attributes)
+
+    def editAlias(self, alias, attributes):
+        """
+        Edit an existing alias in the mailcow instance.
+        :param alias: Name of the alias to edit
+        :param attributes: Dictionary containing the new alias attributes.
+        """
+
+        items = [alias]
+        return self.edit('/edit/alias', items, attributes)
+
+    def editSyncjob(self, syncjob, attributes):
+        """
+        Edit an existing sync job in the mailcow instance.
+        :param syncjob: Name of the sync job to edit
+        :param attributes: Dictionary containing the new sync job attributes.
+        """
+
+        items = [syncjob]
+        return self.edit('/edit/syncjob', items, attributes)
+
+    def editDomainadmin(self, username, attributes):
+        """
+        Edit an existing domain admin in the mailcow instance.
+        :param username: Username of the domain admin to edit
+        :param attributes: Dictionary containing the new domain admin attributes.
+        """
+
+        items = [username]
+        return self.edit('/edit/domain-admin', items, attributes)
+
+    def edit(self, endpoint, items, attributes):
+        """
+        Make a POST request to edit items in the mailcow API.
+        :param items: List of items to edit.
+        :param attributes: Dictionary containing the new attributes for the items.
+        :return: Response from the mailcow API.
+        """
+
+        url = f"{self.baseUrl}{self.apiUrl}/{endpoint.lstrip('/')}"
+        headers = {
+            "Content-Type": "application/json",
+            "Host": self.host
+        }
+        if self.apiKey:
+            headers["X-Api-Key"] = self.apiKey
+        data = {
+            "items": items,
+            "attr": attributes
+        }
+        response = requests.post(
+            url,
+            json=data,
+            headers=headers,
+            verify=not self.ignore_ssl_errors
+        )
+        response.raise_for_status()
+        return response.json()
+
+
+    # System Functions
+    def runSyncjob(self, id, force=False):
+        """
+        Run a sync job.
+        :param id: ID of the sync job to run.
+        :return: Response from the imapsync script.
+        """
+
+        creds_path = "/app/sieve.creds"
+
+        conn = mysql.connector.connect(**self.db_config)
+        cursor = conn.cursor(dictionary=True)
+
+        with open(creds_path, 'r') as file:
+            master_user, master_pass = file.read().strip().split(':')
+
+        query = ("SELECT * FROM imapsync WHERE id = %s")
+        cursor.execute(query, (id,))
+
+        success = False
+        syncjob = cursor.fetchone()
+        if not syncjob:
+            cursor.close()
+            conn.close()
+            return f"Sync job with ID {id} not found."
+        if syncjob['active'] == 0 and not force:
+            cursor.close()
+            conn.close()
+            return f"Sync job with ID {id} is not active."
+
+        enc1_flag = "--tls1" if syncjob['enc1'] == "TLS" else "--ssl1" if syncjob['enc1'] == "SSL" else None
+
+
+        passfile1_path = f"/tmp/passfile1_{id}.txt"
+        passfile2_path = f"/tmp/passfile2_{id}.txt"
+        passfile1_cmd = [
+            "sh", "-c",
+            f"echo {syncjob['password1']} > {passfile1_path}"
+        ]
+        passfile2_cmd = [
+            "sh", "-c",
+            f"echo {master_pass} > {passfile2_path}"
+        ]
+
+        self.docker.exec_command("dovecot-mailcow", passfile1_cmd)
+        self.docker.exec_command("dovecot-mailcow", passfile2_cmd)
+
+        imapsync_cmd = [
+            "/usr/local/bin/imapsync",
+            "--tmpdir", "/tmp",
+            "--nofoldersizes",
+            "--addheader"
+        ]
+
+        if int(syncjob['timeout1']) > 0:
+            imapsync_cmd.extend(['--timeout1', str(syncjob['timeout1'])])
+        if int(syncjob['timeout2']) > 0:
+            imapsync_cmd.extend(['--timeout2', str(syncjob['timeout2'])])
+        if syncjob['exclude']:
+            imapsync_cmd.extend(['--exclude', syncjob['exclude']])
+        if syncjob['subfolder2']:
+            imapsync_cmd.extend(['--subfolder2', syncjob['subfolder2']])
+        if int(syncjob['maxage']) > 0:
+            imapsync_cmd.extend(['--maxage', str(syncjob['maxage'])])
+        if int(syncjob['maxbytespersecond']) > 0:
+            imapsync_cmd.extend(['--maxbytespersecond', str(syncjob['maxbytespersecond'])])
+        if int(syncjob['delete2duplicates']) == 1:
+            imapsync_cmd.append("--delete2duplicates")
+        if int(syncjob['subscribeall']) == 1:
+            imapsync_cmd.append("--subscribeall")
+        if int(syncjob['delete1']) == 1:
+            imapsync_cmd.append("--delete")
+        if int(syncjob['delete2']) == 1:
+            imapsync_cmd.append("--delete2")
+        if int(syncjob['automap']) == 1:
+            imapsync_cmd.append("--automap")
+        if int(syncjob['skipcrossduplicates']) == 1:
+            imapsync_cmd.append("--skipcrossduplicates")
+        if enc1_flag:
+            imapsync_cmd.append(enc1_flag)
+
+        imapsync_cmd.extend([
+            "--host1", syncjob['host1'],
+            "--user1", syncjob['user1'],
+            "--passfile1", passfile1_path,
+            "--port1", str(syncjob['port1']),
+            "--host2", "localhost",
+            "--user2", f"{syncjob['user2']}*{master_user}",
+            "--passfile2", passfile2_path
+        ])
+
+        if syncjob['dry'] == 1:
+            imapsync_cmd.append("--dry")
+
+        imapsync_cmd.extend([
+            "--no-modulesversion",
+            "--noreleasecheck"
+        ])
+
+        try:
+            cursor.execute("UPDATE imapsync SET is_running = 1, success = NULL, exit_status = NULL WHERE id = %s", (id,))
+            conn.commit()
+
+            result = self.docker.exec_command("dovecot-mailcow", imapsync_cmd)
+            print(result)
+
+            success = result['status'] == "success" and result['exit_code'] == 0
+            cursor.execute(
+                "UPDATE imapsync SET returned_text = %s, success = %s, exit_status = %s WHERE id = %s",
+                (result['output'], int(success), result['exit_code'], id)
+            )
+            conn.commit()
+
+        except Exception as e:
+            cursor.execute(
+                "UPDATE imapsync SET returned_text = %s, success = 0 WHERE id = %s",
+                (str(e), id)
+            )
+            conn.commit()
+
+        finally:
+            cursor.execute("UPDATE imapsync SET last_run = NOW(), is_running = 0 WHERE id = %s", (id,))
+            conn.commit()
+
+        delete_passfile1_cmd = [
+            "sh", "-c",
+            f"rm -f {passfile1_path}"
+        ]
+        delete_passfile2_cmd = [
+            "sh", "-c",
+            f"rm -f {passfile2_path}"
+        ]
+        self.docker.exec_command("dovecot-mailcow", delete_passfile1_cmd)
+        self.docker.exec_command("dovecot-mailcow", delete_passfile2_cmd)
+
+        cursor.close()
+        conn.close()
+
+        return "Sync job completed successfully." if success else "Sync job failed."

data/Dockerfiles/controller/mailcow-adm/modules/Mailer.py

@@ -0,0 +1,64 @@
+import smtplib
+import json
+import os
+from email.mime.text import MIMEText
+from email.mime.multipart import MIMEMultipart
+from jinja2 import Environment, BaseLoader
+
+class Mailer:
+    def __init__(self, smtp_host, smtp_port, username, password, use_tls=True):
+        self.smtp_host = smtp_host
+        self.smtp_port = smtp_port
+        self.username = username
+        self.password = password
+        self.use_tls = use_tls
+        self.server = None
+        self.env = Environment(loader=BaseLoader())
+
+    def connect(self):
+        print("Connecting to the SMTP server...")
+        self.server = smtplib.SMTP(self.smtp_host, self.smtp_port)
+        if self.use_tls:
+            self.server.starttls()
+            print("TLS activated!")
+        if self.username and self.password:
+            self.server.login(self.username, self.password)
+            print("Authenticated!")
+
+    def disconnect(self):
+        if self.server:
+            try:
+                if self.server.sock:
+                    self.server.quit()
+            except smtplib.SMTPServerDisconnected:
+                pass
+            finally:
+                self.server = None
+
+    def render_inline_template(self, template_string, context):
+        template = self.env.from_string(template_string)
+        return template.render(context)
+
+    def send_mail(self, subject, from_addr, to_addrs, template, context = {}):
+        try:
+            if template == "":
+                print("Cannot send email, template is empty!")
+                return "Failed: Template is empty."
+
+            body = self.render_inline_template(template, context)
+
+            msg = MIMEMultipart()
+            msg['From'] = from_addr
+            msg['To'] = ', '.join(to_addrs) if isinstance(to_addrs, list) else to_addrs
+            msg['Subject'] = subject
+            msg.attach(MIMEText(body, 'html'))
+
+            self.connect()
+            self.server.sendmail(from_addr, to_addrs, msg.as_string())
+            self.disconnect()
+            return f"Success: Email sent to {msg['To']}"
+        except Exception as e:
+            print(f"Error during send_mail: {type(e).__name__}: {e}")
+            return f"Failed: {type(e).__name__}: {e}"
+        finally:
+            self.disconnect()

data/Dockerfiles/controller/mailcow-adm/modules/Reader.py

@@ -0,0 +1,51 @@
+from jinja2 import Environment, Template
+import csv
+
+def split_at(value, sep, idx):
+    try:
+        return value.split(sep)[idx]
+    except Exception:
+        return ''
+
+class Reader:
+    """
+    Reader class to handle reading and processing of CSV and JSON files for mailcow.
+    """
+
+    def __init__(self):
+        pass
+
+    def read_csv(self, file_path, delimiter=',', encoding='iso-8859-1'):
+        """
+        Read a CSV file and return a list of dictionaries.
+        Each dictionary represents a row in the CSV file.
+        :param file_path: Path to the CSV file.
+        :param delimiter: Delimiter used in the CSV file (default: ',').
+        """
+        with open(file_path, mode='r', encoding=encoding) as file:
+            reader = csv.DictReader(file, delimiter=delimiter)
+            reader.fieldnames = [h.replace(" ", "_") if h else h for h in reader.fieldnames]
+            return [row for row in reader]
+
+    def map_csv_data(self, data, mapping_file_path, encoding='iso-8859-1'):
+        """
+        Map CSV data to a specific structure based on the provided Jinja2 template file.
+        :param data: List of dictionaries representing CSV rows.
+        :param mapping_file_path: Path to the Jinja2 template file.
+        :return: List of dictionaries with mapped data.
+        """
+        with open(mapping_file_path, 'r', encoding=encoding) as tpl_file:
+            template_content = tpl_file.read()
+        env = Environment()
+        env.filters['split_at'] = split_at
+        template = env.from_string(template_content)
+
+        mapped_data = []
+        for row in data:
+            rendered = template.render(**row)
+            try:
+                mapped_row = eval(rendered)
+            except Exception:
+                mapped_row = rendered
+            mapped_data.append(mapped_row)
+        return mapped_data

data/Dockerfiles/controller/mailcow-adm/modules/Sogo.py

@@ -0,0 +1,512 @@
+import requests
+import urllib3
+import os
+from uuid import uuid4
+from collections import defaultdict
+
+
+class Sogo:
+    def __init__(self, username, password=""):
+        self.apiUrl = "/SOGo/so"
+        self.davUrl = "/SOGo/dav"
+        self.ignore_ssl_errors = True
+
+        self.baseUrl = f"https://{os.getenv('IPv4_NETWORK', '172.22.1')}.247:{os.getenv('HTTPS_PORT', '443')}"
+        self.host = os.getenv("MAILCOW_HOSTNAME", "")
+        if self.ignore_ssl_errors:
+            urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)
+        self.username = username
+        self.password = password
+
+    def addCalendar(self, calendar_name):
+        """
+        Add a new calendar to the sogo instance.
+        :param calendar_name: Name of the calendar to be created
+        :return: Response from the sogo API.
+        """
+
+        res = self.post(f"/{self.username}/Calendar/createFolder", {
+            "name": calendar_name
+        })
+        try:
+            return res.json()
+        except ValueError:
+            return res.text
+
+    def getCalendarIdByName(self, calendar_name):
+        """
+        Get the calendar ID by its name.
+        :param calendar_name: Name of the calendar to find
+        :return: Calendar ID if found, otherwise None.
+        """
+
+        res = self.get(f"/{self.username}/Calendar/calendarslist")
+        try:
+            for calendar in res.json()["calendars"]:
+                if calendar['name'] == calendar_name:
+                    return calendar['id']
+        except ValueError:
+            return None
+        return None
+
+    def getCalendar(self):
+        """
+        Get calendar list.
+        :return: Response from SOGo API.
+        """
+
+        res = self.get(f"/{self.username}/Calendar/calendarslist")
+        try:
+            return res.json()
+        except ValueError:
+            return res.text
+
+    def deleteCalendar(self, calendar_id):
+        """
+        Delete a calendar.
+        :param calendar_id: ID of the calendar to be deleted
+        :return: Response from SOGo API.
+        """
+        res = self.get(f"/{self.username}/Calendar/{calendar_id}/delete")
+        return res.status_code == 204
+
+    def importCalendar(self, calendar_name, ics_file):
+        """
+        Import a calendar from an ICS file.
+        :param calendar_name: Name of the calendar to import into
+        :param ics_file: Path to the ICS file to import
+        :return: Response from SOGo API.
+        """
+
+        try:
+            with open(ics_file, "rb") as f:
+                pass
+        except Exception as e:
+            print(f"Could not open ICS file '{ics_file}': {e}")
+            return {"status": "error", "message": str(e)}
+
+        new_calendar = self.addCalendar(calendar_name)
+        selected_calendar = new_calendar.json()["id"]
+
+        url = f"{self.baseUrl}{self.apiUrl}/{self.username}/Calendar/{selected_calendar}/import"
+        auth = (self.username, self.password)
+        with open(ics_file, "rb") as f:
+            files = {'icsFile': (ics_file, f, 'text/calendar')}
+            res = requests.post(
+                url,
+                files=files,
+                auth=auth,
+                verify=not self.ignore_ssl_errors
+            )
+            try:
+                return res.json()
+            except ValueError:
+                return res.text
+
+        return None
+
+    def setCalendarACL(self, calendar_id, sharee_email, acl="r", subscribe=False):
+        """
+        Set CalDAV calendar permissions for a user (sharee).
+        :param calendar_id: ID of the calendar to share
+        :param sharee_email: Email of the user to share with
+        :param acl: "w" for write, "r" for read-only or combination "rw" for read-write
+        :param subscribe: True will scubscribe the sharee to the calendar
+        :return: None
+        """
+
+        # Access rights
+        if acl == "" or len(acl) > 2:
+            return "Invalid acl level specified. Use 'w', 'r' or combinations like 'rw'."
+        rights = [{
+            "c_email": sharee_email,
+            "uid": sharee_email,
+            "userClass": "normal-user",
+            "rights": {
+                "Public": "None",
+                "Private": "None",
+                "Confidential": "None",
+                "canCreateObjects": 0,
+                "canEraseObjects": 0
+            }
+        }]
+        if "w" in acl:
+            rights[0]["rights"]["canCreateObjects"] = 1
+            rights[0]["rights"]["canEraseObjects"] = 1
+        if "r" in acl:
+            rights[0]["rights"]["Public"] = "Viewer"
+            rights[0]["rights"]["Private"] = "Viewer"
+            rights[0]["rights"]["Confidential"] = "Viewer"
+
+        r_add = self.get(f"/{self.username}/Calendar/{calendar_id}/addUserInAcls?uid={sharee_email}")
+        if r_add.status_code < 200 or r_add.status_code > 299:
+            try:
+                return r_add.json()
+            except ValueError:
+                return r_add.text
+
+        r_save = self.post(f"/{self.username}/Calendar/{calendar_id}/saveUserRights", rights)
+        if r_save.status_code < 200 or r_save.status_code > 299:
+            try:
+                return r_save.json()
+            except ValueError:
+                return r_save.text
+
+        if subscribe:
+            r_subscribe = self.get(f"/{self.username}/Calendar/{calendar_id}/subscribeUsers?uids={sharee_email}")
+            if r_subscribe.status_code < 200 or r_subscribe.status_code > 299:
+                try:
+                    return r_subscribe.json()
+                except ValueError:
+                    return r_subscribe.text
+
+        return r_save.status_code == 200
+
+    def getCalendarACL(self, calendar_id):
+        """
+        Get CalDAV calendar permissions for a user (sharee).
+        :param calendar_id: ID of the calendar to get ACL from
+        :return: Response from SOGo API.
+        """
+
+        res = self.get(f"/{self.username}/Calendar/{calendar_id}/acls")
+        try:
+            return res.json()
+        except ValueError:
+            return res.text
+
+    def deleteCalendarACL(self, calendar_id, sharee_email):
+        """
+        Delete a calendar ACL for a user (sharee).
+        :param calendar_id: ID of the calendar to delete ACL from
+        :param sharee_email: Email of the user whose ACL to delete
+        :return: Response from SOGo API.
+        """
+
+        res = self.get(f"/{self.username}/Calendar/{calendar_id}/removeUserFromAcls?uid={sharee_email}")
+        return res.status_code == 204
+
+    def addAddressbook(self, addressbook_name):
+        """
+        Add a new addressbook to the sogo instance.
+        :param addressbook_name: Name of the addressbook to be created
+        :return: Response from the sogo API.
+        """
+
+        res = self.post(f"/{self.username}/Contacts/createFolder", {
+            "name": addressbook_name
+        })
+        try:
+            return res.json()
+        except ValueError:
+            return res.text
+
+    def getAddressbookIdByName(self, addressbook_name):
+        """
+        Get the addressbook ID by its name.
+        :param addressbook_name: Name of the addressbook to find
+        :return: Addressbook ID if found, otherwise None.
+        """
+
+        res = self.get(f"/{self.username}/Contacts/addressbooksList")
+        try:
+            for addressbook in res.json()["addressbooks"]:
+                if addressbook['name'] == addressbook_name:
+                    return addressbook['id']
+        except ValueError:
+            return None
+        return None
+
+    def deleteAddressbook(self, addressbook_id):
+        """
+        Delete an addressbook.
+        :param addressbook_id: ID of the addressbook to be deleted
+        :return: Response from SOGo API.
+        """
+
+        res = self.get(f"/{self.username}/Contacts/{addressbook_id}/delete")
+        return res.status_code == 204
+
+    def getAddressbookList(self):
+        """
+        Get addressbook list.
+        :return: Response from SOGo API.
+        """
+
+        res = self.get(f"/{self.username}/Contacts/addressbooksList")
+        try:
+            return res.json()
+        except ValueError:
+            return res.text
+
+    def setAddressbookACL(self, addressbook_id, sharee_email, acl="r", subscribe=False):
+        """
+        Set CalDAV addressbook permissions for a user (sharee).
+        :param addressbook_id: ID of the addressbook to share
+        :param sharee_email: Email of the user to share with
+        :param acl: "w" for write, "r" for read-only or combination "rw" for read-write
+        :param subscribe: True will subscribe the sharee to the addressbook
+        :return: None
+        """
+
+        # Access rights
+        if acl == "" or len(acl) > 2:
+            print("Invalid acl level specified. Use 's', 'w', 'r' or combinations like 'rws'.")
+            return "Invalid acl level specified. Use 'w', 'r' or combinations like 'rw'."
+        rights = [{
+            "c_email": sharee_email,
+            "uid": sharee_email,
+            "userClass": "normal-user",
+            "rights": {
+                "canCreateObjects": 0,
+                "canEditObjects": 0,
+                "canEraseObjects": 0,
+                "canViewObjects": 0,
+            }
+        }]
+        if "w" in acl:
+            rights[0]["rights"]["canCreateObjects"] = 1
+            rights[0]["rights"]["canEditObjects"] = 1
+            rights[0]["rights"]["canEraseObjects"] = 1
+        if "r" in acl:
+            rights[0]["rights"]["canViewObjects"] = 1
+
+        r_add = self.get(f"/{self.username}/Contacts/{addressbook_id}/addUserInAcls?uid={sharee_email}")
+        if r_add.status_code < 200 or r_add.status_code > 299:
+            try:
+                return r_add.json()
+            except ValueError:
+                return r_add.text
+
+        r_save = self.post(f"/{self.username}/Contacts/{addressbook_id}/saveUserRights", rights)
+        if r_save.status_code < 200 or r_save.status_code > 299:
+            try:
+                return r_save.json()
+            except ValueError:
+                return r_save.text
+
+        if subscribe:
+            r_subscribe = self.get(f"/{self.username}/Contacts/{addressbook_id}/subscribeUsers?uids={sharee_email}")
+            if r_subscribe.status_code < 200 or r_subscribe.status_code > 299:
+                try:
+                    return r_subscribe.json()
+                except ValueError:
+                    return r_subscribe.text
+
+        return r_save.status_code == 200
+
+    def getAddressbookACL(self, addressbook_id):
+        """
+        Get CalDAV addressbook permissions for a user (sharee).
+        :param addressbook_id: ID of the addressbook to get ACL from
+        :return: Response from SOGo API.
+        """
+
+        res = self.get(f"/{self.username}/Contacts/{addressbook_id}/acls")
+        try:
+            return res.json()
+        except ValueError:
+            return res.text
+
+    def deleteAddressbookACL(self, addressbook_id, sharee_email):
+        """
+        Delete an addressbook ACL for a user (sharee).
+        :param addressbook_id: ID of the addressbook to delete ACL from
+        :param sharee_email: Email of the user whose ACL to delete
+        :return: Response from SOGo API.
+        """
+
+        res = self.get(f"/{self.username}/Contacts/{addressbook_id}/removeUserFromAcls?uid={sharee_email}")
+        return res.status_code == 204
+
+    def getAddressbookNewGuid(self, addressbook_id):
+        """
+        Request a new GUID for a SOGo addressbook.
+        :param addressbook_id: ID of the addressbook
+        :return: JSON response from SOGo or None if not found
+        """
+        res = self.get(f"/{self.username}/Contacts/{addressbook_id}/newguid")
+        try:
+            return res.json()
+        except ValueError:
+            return res.text
+
+    def addAddressbookContact(self, addressbook_id, contact_name, contact_email):
+        """
+        Save a vCard as a contact in the specified addressbook.
+        :param addressbook_id: ID of the addressbook
+        :param contact_name: Name of the contact
+        :param contact_email: Email of the contact
+        :return: JSON response from SOGo or None if not found
+        """
+        vcard_id = self.getAddressbookNewGuid(addressbook_id)
+        contact_data = {
+            "id": vcard_id["id"],
+            "pid": vcard_id["pid"],
+            "c_cn": contact_name,
+            "emails": [{
+                "type": "pref",
+                "value": contact_email
+            }],
+            "isNew": True,
+            "c_component": "vcard",
+        }
+
+        endpoint = f"/{self.username}/Contacts/{addressbook_id}/{vcard_id['id']}/saveAsContact"
+        res = self.post(endpoint, contact_data)
+        try:
+            return res.json()
+        except ValueError:
+            return res.text
+
+    def getAddressbookContacts(self, addressbook_id, contact_email=None):
+        """
+        Get all contacts from the specified addressbook.
+        :param addressbook_id: ID of the addressbook
+        :return: JSON response with contacts or None if not found
+        """
+        res = self.get(f"/{self.username}/Contacts/{addressbook_id}/view")
+        try:
+            res_json = res.json()
+            headers = res_json.get("headers", [])
+            if not headers or len(headers) < 2:
+                return []
+
+            field_names = headers[0]
+            contacts = []
+            for row in headers[1:]:
+                contact = dict(zip(field_names, row))
+                contacts.append(contact)
+
+            if contact_email:
+                contact = {}
+                for c in contacts:
+                    if c["c_mail"] == contact_email or c["c_cn"] == contact_email:
+                        contact = c
+                        break
+                return contact
+
+            return contacts
+        except ValueError:
+            return res.text
+
+    def addAddressbookContactList(self, addressbook_id, contact_name, contact_email=None):
+        """
+        Add a new contact list to the addressbook.
+        :param addressbook_id: ID of the addressbook
+        :param contact_name: Name of the contact list
+        :param contact_email: Comma-separated emails to include in the list
+        :return: Response from SOGo API.
+        """
+        gal_domain = self.username.split("@")[-1]
+        vlist_id = self.getAddressbookNewGuid(addressbook_id)
+        contact_emails = contact_email.split(",") if contact_email else []
+        contacts = self.getAddressbookContacts(addressbook_id)
+
+        refs = []
+        for contact in contacts:
+            if contact['c_mail'] in contact_emails:
+                refs.append({
+                    "refs": [],
+                    "categories": [],
+                    "c_screenname": contact.get("c_screenname", ""),
+                    "pid": contact.get("pid", vlist_id["pid"]),
+                    "id": contact.get("id", ""),
+                    "notes": [""],
+                    "empty": " ",
+                    "hasphoto": contact.get("hasphoto", 0),
+                    "c_cn": contact.get("c_cn", ""),
+                    "c_uid": contact.get("c_uid", None),
+                    "containername": contact.get("containername", f"GAL {gal_domain}"),  # or your addressbook name
+                    "sourceid": contact.get("sourceid", gal_domain),
+                    "c_component": contact.get("c_component", "vcard"),
+                    "c_sn": contact.get("c_sn", ""),
+                    "c_givenname": contact.get("c_givenname", ""),
+                    "c_name": contact.get("c_name", contact.get("id", "")),
+                    "c_telephonenumber": contact.get("c_telephonenumber", ""),
+                    "fn": contact.get("fn", ""),
+                    "c_mail": contact.get("c_mail", ""),
+                    "emails": contact.get("emails", []),
+                    "c_o": contact.get("c_o", ""),
+                    "reference": contact.get("id", ""),
+                    "birthday": contact.get("birthday", "")
+                })
+
+        contact_data = {
+            "refs": refs,
+            "categories": [],
+            "c_screenname": None,
+            "pid": vlist_id["pid"],
+            "c_component": "vlist",
+            "notes": [""],
+            "empty": " ",
+            "isNew": True,
+            "id": vlist_id["id"],
+            "c_cn": contact_name,
+            "birthday": ""
+        }
+
+        endpoint = f"/{self.username}/Contacts/{addressbook_id}/{vlist_id['id']}/saveAsList"
+        res = self.post(endpoint, contact_data)
+        try:
+            return res.json()
+        except ValueError:
+            return res.text
+
+    def deleteAddressbookItem(self, addressbook_id, contact_name):
+        """
+        Delete an addressbook item by its ID.
+        :param addressbook_id: ID of the addressbook item to delete
+        :param contact_name: Name of the contact to delete
+        :return: Response from SOGo API.
+        """
+        res = self.getAddressbookContacts(addressbook_id, contact_name)
+
+        if "id" not in res:
+            print(f"Contact '{contact_name}' not found in addressbook '{addressbook_id}'.")
+            return None
+        res = self.post(f"/{self.username}/Contacts/{addressbook_id}/batchDelete", {
+            "uids": [res["id"]],
+        })
+        return res.status_code == 204
+
+    def get(self, endpoint, params=None):
+        """
+        Make a GET request to the mailcow API.
+        :param endpoint: The API endpoint to get.
+        :param params: Optional parameters for the GET request.
+        :return: Response from the mailcow API.
+        """
+        url = f"{self.baseUrl}{self.apiUrl}{endpoint}"
+        auth = (self.username, self.password)
+        headers = {"Host": self.host}
+
+        response = requests.get(
+            url,
+            params=params,
+            auth=auth,
+            headers=headers,
+            verify=not self.ignore_ssl_errors
+        )
+        return response
+
+    def post(self, endpoint, data):
+        """
+        Make a POST request to the mailcow API.
+        :param endpoint: The API endpoint to post to.
+        :param data: Data to be sent in the POST request.
+        :return: Response from the mailcow API.
+        """
+        url = f"{self.baseUrl}{self.apiUrl}{endpoint}"
+        auth = (self.username, self.password)
+        headers = {"Host": self.host}
+
+        response = requests.post(
+            url,
+            json=data,
+            auth=auth,
+            headers=headers,
+            verify=not self.ignore_ssl_errors
+        )
+        return response
+

data/Dockerfiles/controller/mailcow-adm/modules/Utils.py

@@ -0,0 +1,37 @@
+import json
+import random
+import string
+
+
+class Utils:
+    def __init(self):
+        pass
+
+    def normalize_email(self, email):
+        replacements = {
+            "ä": "ae", "ö": "oe", "ü": "ue", "ß": "ss",
+            "Ä": "Ae", "Ö": "Oe", "Ü": "Ue"
+        }
+        for orig, repl in replacements.items():
+            email = email.replace(orig, repl)
+        return email
+
+    def generate_password(self, length=8):
+        chars = string.ascii_letters + string.digits
+        return ''.join(random.choices(chars, k=length))
+
+    def pprint(self, data=""):
+        """
+        Pretty print a dictionary, list, or text.
+        If data is a text containing JSON, it will be printed in a formatted way.
+        """
+        if isinstance(data, (dict, list)):
+            print(json.dumps(data, indent=2, ensure_ascii=False))
+        elif isinstance(data, str):
+            try:
+                json_data = json.loads(data)
+                print(json.dumps(json_data, indent=2, ensure_ascii=False))
+            except json.JSONDecodeError:
+                print(data)
+        else:
+            print(data)

data/Dockerfiles/controller/mailcow-adm/requirements.txt

@@ -0,0 +1,4 @@
+jinja2
+requests
+mysql-connector-python
+pytest

data/Dockerfiles/controller/mailcow-adm/tests/test_AliasModel.py

@@ -0,0 +1,94 @@
+import pytest
+import json
+import sys
+import os
+
+sys.path.append(os.path.abspath(os.path.join(os.path.dirname(__file__), "../")))
+from models.DomainModel import DomainModel
+from models.AliasModel import AliasModel
+
+
+def test_model():
+    # Generate random alias
+    random_alias = f"alias_test{os.urandom(4).hex()}@mailcow.local"
+
+    # Create an instance of AliasModel
+    model = AliasModel(
+        address=random_alias,
+        goto="test@mailcow.local,test2@mailcow.local"
+    )
+
+    # Test the parser_command attribute
+    assert model.parser_command == "alias", "Parser command should be 'alias'"
+
+    # add Domain for testing
+    domain_model = DomainModel(domain="mailcow.local")
+    domain_model.add()
+
+    # 1. Alias add tests, should success
+    r_add = model.add()
+    assert isinstance(r_add, list), f"Expected a array but received: {json.dumps(r_add, indent=2)}"
+    assert len(r_add) > 0, f"Wrong array received: {json.dumps(r_add, indent=2)}"
+    assert "type" in r_add[0], f"'type' key missing in response: {json.dumps(r_add, indent=2)}"
+    assert r_add[0]['type'] == "success", f"Wrong 'type' received: {r_add[0]['type']}\n{json.dumps(r_add, indent=2)}"
+    assert "msg" in r_add[0], f"'msg' key missing in response: {json.dumps(r_add, indent=2)}"
+    assert isinstance(r_add[0]['msg'], list), f"Expected a 'msg' array but received: {json.dumps(r_add, indent=2)}"
+    assert len(r_add[0]['msg']) > 0 and len(r_add[0]['msg']) <= 3, f"Wrong 'msg' array received: {json.dumps(r_add, indent=2)}"
+    assert r_add[0]['msg'][0] == "alias_added", f"Wrong 'msg' received: {r_add[0]['msg'][0]}, expected: 'alias_added'\n{json.dumps(r_add, indent=2)}"
+
+    # Assign created alias ID for further tests
+    model.id = r_add[0]['msg'][2]
+
+    # 2. Alias add tests, should fail because the alias already exists
+    r_add = model.add()
+    assert isinstance(r_add, list), f"Expected a array but received: {json.dumps(r_add, indent=2)}"
+    assert len(r_add) > 0, f"Wrong array received: {json.dumps(r_add, indent=2)}"
+    assert "type" in r_add[0], f"'type' key missing in response: {json.dumps(r_add, indent=2)}"
+    assert r_add[0]['type'] == "danger", f"Wrong 'type' received: {r_add[0]['type']}\n{json.dumps(r_add, indent=2)}"
+    assert "msg" in r_add[0], f"'msg' key missing in response: {json.dumps(r_add, indent=2)}"
+    assert isinstance(r_add[0]['msg'], list), f"Expected a 'msg' array but received: {json.dumps(r_add, indent=2)}"
+    assert len(r_add[0]['msg']) > 0 and len(r_add[0]['msg']) <= 2, f"Wrong 'msg' array received: {json.dumps(r_add, indent=2)}"
+    assert r_add[0]['msg'][0] == "is_alias_or_mailbox", f"Wrong 'msg' received: {r_add[0]['msg'][0]}, expected: 'is_alias_or_mailbox'\n{json.dumps(r_add, indent=2)}"
+
+    # 3. Alias get tests
+    r_get = model.get()
+    assert isinstance(r_get, dict), f"Expected a dict but received: {json.dumps(r_get, indent=2)}"
+    assert "domain" in r_get, f"'domain' key missing in response: {json.dumps(r_get, indent=2)}"
+    assert "goto" in r_get, f"'goto' key missing in response: {json.dumps(r_get, indent=2)}"
+    assert "address" in r_get, f"'address' key missing in response: {json.dumps(r_get, indent=2)}"
+    assert r_get['domain'] == model.address.split("@")[1], f"Wrong 'domain' received: {r_get['domain']}, expected: {model.address.split('@')[1]}\n{json.dumps(r_get, indent=2)}"
+    assert r_get['goto'] == model.goto, f"Wrong 'goto' received: {r_get['goto']}, expected: {model.goto}\n{json.dumps(r_get, indent=2)}"
+    assert r_get['address'] == model.address, f"Wrong 'address' received: {r_get['address']}, expected: {model.address}\n{json.dumps(r_get, indent=2)}"
+
+    # 4. Alias edit tests
+    model.goto = "test@mailcow.local"
+    model.active = 0
+    r_edit = model.edit()
+    assert isinstance(r_edit, list), f"Expected a array but received: {json.dumps(r_edit, indent=2)}"
+    assert len(r_edit) > 0, f"Wrong array received: {json.dumps(r_edit, indent=2)}"
+    assert "type" in r_edit[0], f"'type' key missing in response: {json.dumps(r_edit, indent=2)}"
+    assert r_edit[0]['type'] == "success", f"Wrong 'type' received: {r_edit[0]['type']}\n{json.dumps(r_edit, indent=2)}"
+    assert "msg" in r_edit[0], f"'msg' key missing in response: {json.dumps(r_edit, indent=2)}"
+    assert isinstance(r_edit[0]['msg'], list), f"Expected a 'msg' array but received: {json.dumps(r_edit, indent=2)}"
+    assert len(r_edit[0]['msg']) > 0 and len(r_edit[0]['msg']) <= 2, f"Wrong 'msg' array received: {json.dumps(r_edit, indent=2)}"
+    assert r_edit[0]['msg'][0] == "alias_modified", f"Wrong 'msg' received: {r_edit[0]['msg'][0]}, expected: 'alias_modified'\n{json.dumps(r_edit, indent=2)}"
+
+    # 5. Alias delete tests
+    r_delete = model.delete()
+    assert isinstance(r_delete, list), f"Expected a array but received: {json.dumps(r_delete, indent=2)}"
+    assert len(r_delete) > 0, f"Wrong array received: {json.dumps(r_delete, indent=2)}"
+    assert "type" in r_delete[0], f"'type' key missing in response: {json.dumps(r_delete, indent=2)}"
+    assert r_delete[0]['type'] == "success", f"Wrong 'type' received: {r_delete[0]['type']}\n{json.dumps(r_delete, indent=2)}"
+    assert "msg" in r_delete[0], f"'msg' key missing in response: {json.dumps(r_delete, indent=2)}"
+    assert isinstance(r_delete[0]['msg'], list), f"Expected a 'msg' array but received: {json.dumps(r_delete, indent=2)}"
+    assert len(r_delete[0]['msg']) > 0 and len(r_delete[0]['msg']) <= 2, f"Wrong 'msg' array received: {json.dumps(r_delete, indent=2)}"
+    assert r_delete[0]['msg'][0] == "alias_removed", f"Wrong 'msg' received: {r_delete[0]['msg'][0]}, expected: 'alias_removed'\n{json.dumps(r_delete, indent=2)}"
+
+    # delete testing Domain
+    domain_model.delete()
+
+
+if __name__ == "__main__":
+  print("Running AliasModel tests...")
+  test_model()
+  print("All tests passed!")

data/Dockerfiles/controller/mailcow-adm/tests/test_BaseModel.py

@@ -0,0 +1,71 @@
+import pytest
+from models.BaseModel import BaseModel
+
+
+class Args:
+    def __init__(self, **kwargs):
+        for key, value in kwargs.items():
+            setattr(self, key, value)
+
+
+def test_has_required_args():
+    BaseModel.required_args = {
+        "test_object": [["arg1"], ["arg2", "arg3"]],
+    }
+
+    # Test cases with Args object
+    args = Args(object="non_existent_object")
+    assert BaseModel.has_required_args(args) == False
+
+    args = Args(object="test_object")
+    assert BaseModel.has_required_args(args) == False
+
+    args = Args(object="test_object", arg1="value")
+    assert BaseModel.has_required_args(args) == True
+
+    args = Args(object="test_object", arg2="value")
+    assert BaseModel.has_required_args(args) == False
+
+    args = Args(object="test_object", arg3="value")
+    assert BaseModel.has_required_args(args) == False
+
+    args = Args(object="test_object", arg2="value", arg3="value")
+    assert BaseModel.has_required_args(args) == True
+
+    # Test cases with dict object
+    args = {"object": "non_existent_object"}
+    assert BaseModel.has_required_args(args) == False
+
+    args = {"object": "test_object"}
+    assert BaseModel.has_required_args(args) == False
+
+    args = {"object": "test_object", "arg1": "value"}
+    assert BaseModel.has_required_args(args) == True
+
+    args = {"object": "test_object", "arg2": "value"}
+    assert BaseModel.has_required_args(args) == False
+
+    args = {"object": "test_object", "arg3": "value"}
+    assert BaseModel.has_required_args(args) == False
+
+    args = {"object": "test_object", "arg2": "value", "arg3": "value"}
+    assert BaseModel.has_required_args(args) == True
+
+
+    BaseModel.required_args = {
+        "test_object": [[]],
+    }
+
+    # Test cases with Args object
+    args = Args(object="non_existent_object")
+    assert BaseModel.has_required_args(args) == False
+
+    args = Args(object="test_object")
+    assert BaseModel.has_required_args(args) == True
+
+    # Test cases with dict object
+    args = {"object": "non_existent_object"}
+    assert BaseModel.has_required_args(args) == False
+
+    args = {"object": "test_object"}
+    assert BaseModel.has_required_args(args) == True

data/Dockerfiles/controller/mailcow-adm/tests/test_DomainModel.py

@@ -0,0 +1,74 @@
+import pytest
+import json
+import sys
+import os
+
+sys.path.append(os.path.abspath(os.path.join(os.path.dirname(__file__), "../")))
+from models.DomainModel import DomainModel
+
+
+def test_model():
+    # Create an instance of DomainModel
+    model = DomainModel(
+        domain="mailcow.local",
+    )
+
+    # Test the parser_command attribute
+    assert model.parser_command == "domain", "Parser command should be 'domain'"
+
+    # 1. Domain add tests, should success
+    r_add = model.add()
+    assert isinstance(r_add, list), f"Expected a array but received: {json.dumps(r_add, indent=2)}"
+    assert len(r_add) > 0 and len(r_add) >= 2, f"Wrong array received: {json.dumps(r_add, indent=2)}"
+    assert "type" in r_add[1], f"'type' key missing in response: {json.dumps(r_add, indent=2)}"
+    assert r_add[1]['type'] == "success", f"Wrong 'type' received: {r_add[1]['type']}\n{json.dumps(r_add, indent=2)}"
+    assert "msg" in r_add[1], f"'msg' key missing in response: {json.dumps(r_add, indent=2)}"
+    assert isinstance(r_add[1]['msg'], list), f"Expected a 'msg' array but received: {json.dumps(r_add, indent=2)}"
+    assert len(r_add[1]['msg']) > 0 and len(r_add[1]['msg']) <= 2, f"Wrong 'msg' array received: {json.dumps(r_add, indent=2)}"
+    assert r_add[1]['msg'][0] == "domain_added", f"Wrong 'msg' received: {r_add[1]['msg'][0]}, expected: 'domain_added'\n{json.dumps(r_add, indent=2)}"
+
+    # 2. Domain add tests, should fail because the domain already exists
+    r_add = model.add()
+    assert isinstance(r_add, list), f"Expected a array but received: {json.dumps(r_add, indent=2)}"
+    assert len(r_add) > 0, f"Wrong array received: {json.dumps(r_add, indent=2)}"
+    assert "type" in r_add[0], f"'type' key missing in response: {json.dumps(r_add, indent=2)}"
+    assert r_add[0]['type'] == "danger", f"Wrong 'type' received: {r_add[0]['type']}\n{json.dumps(r_add, indent=2)}"
+    assert "msg" in r_add[0], f"'msg' key missing in response: {json.dumps(r_add, indent=2)}"
+    assert isinstance(r_add[0]['msg'], list), f"Expected a 'msg' array but received: {json.dumps(r_add, indent=2)}"
+    assert len(r_add[0]['msg']) > 0 and len(r_add[0]['msg']) <= 2, f"Wrong 'msg' array received: {json.dumps(r_add, indent=2)}"
+    assert r_add[0]['msg'][0] == "domain_exists", f"Wrong 'msg' received: {r_add[0]['msg'][0]}, expected: 'domain_exists'\n{json.dumps(r_add, indent=2)}"
+
+    # 3. Domain get tests
+    r_get = model.get()
+    assert isinstance(r_get, dict), f"Expected a dict but received: {json.dumps(r_get, indent=2)}"
+    assert "domain_name" in r_get, f"'domain_name' key missing in response: {json.dumps(r_get, indent=2)}"
+    assert r_get['domain_name'] == model.domain, f"Wrong 'domain_name' received: {r_get['domain_name']}, expected: {model.domain}\n{json.dumps(r_get, indent=2)}"
+
+    # 4. Domain edit tests
+    model.active = 0
+    r_edit = model.edit()
+    assert isinstance(r_edit, list), f"Expected a array but received: {json.dumps(r_edit, indent=2)}"
+    assert len(r_edit) > 0, f"Wrong array received: {json.dumps(r_edit, indent=2)}"
+    assert "type" in r_edit[0], f"'type' key missing in response: {json.dumps(r_edit, indent=2)}"
+    assert r_edit[0]['type'] == "success", f"Wrong 'type' received: {r_edit[0]['type']}\n{json.dumps(r_edit, indent=2)}"
+    assert "msg" in r_edit[0], f"'msg' key missing in response: {json.dumps(r_edit, indent=2)}"
+    assert isinstance(r_edit[0]['msg'], list), f"Expected a 'msg' array but received: {json.dumps(r_edit, indent=2)}"
+    assert len(r_edit[0]['msg']) > 0 and len(r_edit[0]['msg']) <= 2, f"Wrong 'msg' array received: {json.dumps(r_edit, indent=2)}"
+    assert r_edit[0]['msg'][0] == "domain_modified", f"Wrong 'msg' received: {r_edit[0]['msg'][0]}, expected: 'domain_modified'\n{json.dumps(r_edit, indent=2)}"
+
+    # 5. Domain delete tests
+    r_delete = model.delete()
+    assert isinstance(r_delete, list), f"Expected a array but received: {json.dumps(r_delete, indent=2)}"
+    assert len(r_delete) > 0, f"Wrong array received: {json.dumps(r_delete, indent=2)}"
+    assert "type" in r_delete[0], f"'type' key missing in response: {json.dumps(r_delete, indent=2)}"
+    assert r_delete[0]['type'] == "success", f"Wrong 'type' received: {r_delete[0]['type']}\n{json.dumps(r_delete, indent=2)}"
+    assert "msg" in r_delete[0], f"'msg' key missing in response: {json.dumps(r_delete, indent=2)}"
+    assert isinstance(r_delete[0]['msg'], list), f"Expected a 'msg' array but received: {json.dumps(r_delete, indent=2)}"
+    assert len(r_delete[0]['msg']) > 0 and len(r_delete[0]['msg']) <= 2, f"Wrong 'msg' array received: {json.dumps(r_delete, indent=2)}"
+    assert r_delete[0]['msg'][0] == "domain_removed", f"Wrong 'msg' received: {r_delete[0]['msg'][0]}, expected: 'domain_removed'\n{json.dumps(r_delete, indent=2)}"
+
+
+if __name__ == "__main__":
+  print("Running DomainModel tests...")
+  test_model()
+  print("All tests passed!")

data/Dockerfiles/controller/mailcow-adm/tests/test_DomainadminModel.py

@@ -0,0 +1,89 @@
+import pytest
+import json
+import sys
+import os
+
+sys.path.append(os.path.abspath(os.path.join(os.path.dirname(__file__), "../")))
+from models.DomainModel import DomainModel
+from models.DomainadminModel import DomainadminModel
+
+
+def test_model():
+    # Generate random domainadmin
+    random_username = f"dadmin_test{os.urandom(4).hex()}"
+    random_password = f"{os.urandom(4).hex()}"
+
+    # Create an instance of DomainadminModel
+    model = DomainadminModel(
+        username=random_username,
+        password=random_password,
+        domains="mailcow.local",
+    )
+
+    # Test the parser_command attribute
+    assert model.parser_command == "domainadmin", "Parser command should be 'domainadmin'"
+
+    # add Domain for testing
+    domain_model = DomainModel(domain="mailcow.local")
+    domain_model.add()
+
+    # 1. Domainadmin add tests, should success
+    r_add = model.add()
+    assert isinstance(r_add, list), f"Expected a array but received: {json.dumps(r_add, indent=2)}"
+    assert len(r_add) > 0, f"Wrong array received: {json.dumps(r_add, indent=2)}"
+    assert "type" in r_add[0], f"'type' key missing in response: {json.dumps(r_add, indent=2)}"
+    assert r_add[0]['type'] == "success", f"Wrong 'type' received: {r_add[0]['type']}\n{json.dumps(r_add, indent=2)}"
+    assert "msg" in r_add[0], f"'msg' key missing in response: {json.dumps(r_add, indent=2)}"
+    assert isinstance(r_add[0]['msg'], list), f"Expected a 'msg' array but received: {json.dumps(r_add, indent=2)}"
+    assert len(r_add[0]['msg']) > 0 and len(r_add[0]['msg']) <= 3, f"Wrong 'msg' array received: {json.dumps(r_add, indent=2)}"
+    assert r_add[0]['msg'][0] == "domain_admin_added", f"Wrong 'msg' received: {r_add[0]['msg'][0]}, expected: 'domain_admin_added'\n{json.dumps(r_add, indent=2)}"
+
+    # 2. Domainadmin add tests, should fail because the domainadmin already exists
+    r_add = model.add()
+    assert isinstance(r_add, list), f"Expected a array but received: {json.dumps(r_add, indent=2)}"
+    assert len(r_add) > 0, f"Wrong array received: {json.dumps(r_add, indent=2)}"
+    assert "type" in r_add[0], f"'type' key missing in response: {json.dumps(r_add, indent=2)}"
+    assert r_add[0]['type'] == "danger", f"Wrong 'type' received: {r_add[0]['type']}\n{json.dumps(r_add, indent=2)}"
+    assert "msg" in r_add[0], f"'msg' key missing in response: {json.dumps(r_add, indent=2)}"
+    assert isinstance(r_add[0]['msg'], list), f"Expected a 'msg' array but received: {json.dumps(r_add, indent=2)}"
+    assert len(r_add[0]['msg']) > 0 and len(r_add[0]['msg']) <= 2, f"Wrong 'msg' array received: {json.dumps(r_add, indent=2)}"
+    assert r_add[0]['msg'][0] == "object_exists", f"Wrong 'msg' received: {r_add[0]['msg'][0]}, expected: 'object_exists'\n{json.dumps(r_add, indent=2)}"
+
+    # 3. Domainadmin get tests
+    r_get = model.get()
+    assert isinstance(r_get, dict), f"Expected a dict but received: {json.dumps(r_get, indent=2)}"
+    assert "selected_domains" in r_get, f"'selected_domains' key missing in response: {json.dumps(r_get, indent=2)}"
+    assert "username" in r_get, f"'username' key missing in response: {json.dumps(r_get, indent=2)}"
+    assert set(model.domains.replace(" ", "").split(",")) == set(r_get['selected_domains']), f"Wrong 'selected_domains' received: {r_get['selected_domains']}, expected: {model.domains}\n{json.dumps(r_get, indent=2)}"
+    assert r_get['username'] == model.username, f"Wrong 'username' received: {r_get['username']}, expected: {model.username}\n{json.dumps(r_get, indent=2)}"
+
+    # 4. Domainadmin edit tests
+    model.active = 0
+    r_edit = model.edit()
+    assert isinstance(r_edit, list), f"Expected a array but received: {json.dumps(r_edit, indent=2)}"
+    assert len(r_edit) > 0, f"Wrong array received: {json.dumps(r_edit, indent=2)}"
+    assert "type" in r_edit[0], f"'type' key missing in response: {json.dumps(r_edit, indent=2)}"
+    assert r_edit[0]['type'] == "success", f"Wrong 'type' received: {r_edit[0]['type']}\n{json.dumps(r_edit, indent=2)}"
+    assert "msg" in r_edit[0], f"'msg' key missing in response: {json.dumps(r_edit, indent=2)}"
+    assert isinstance(r_edit[0]['msg'], list), f"Expected a 'msg' array but received: {json.dumps(r_edit, indent=2)}"
+    assert len(r_edit[0]['msg']) > 0 and len(r_edit[0]['msg']) <= 2, f"Wrong 'msg' array received: {json.dumps(r_edit, indent=2)}"
+    assert r_edit[0]['msg'][0] == "domain_admin_modified", f"Wrong 'msg' received: {r_edit[0]['msg'][0]}, expected: 'domain_admin_modified'\n{json.dumps(r_edit, indent=2)}"
+
+    # 5. Domainadmin delete tests
+    r_delete = model.delete()
+    assert isinstance(r_delete, list), f"Expected a array but received: {json.dumps(r_delete, indent=2)}"
+    assert len(r_delete) > 0, f"Wrong array received: {json.dumps(r_delete, indent=2)}"
+    assert "type" in r_delete[0], f"'type' key missing in response: {json.dumps(r_delete, indent=2)}"
+    assert r_delete[0]['type'] == "success", f"Wrong 'type' received: {r_delete[0]['type']}\n{json.dumps(r_delete, indent=2)}"
+    assert "msg" in r_delete[0], f"'msg' key missing in response: {json.dumps(r_delete, indent=2)}"
+    assert isinstance(r_delete[0]['msg'], list), f"Expected a 'msg' array but received: {json.dumps(r_delete, indent=2)}"
+    assert len(r_delete[0]['msg']) > 0 and len(r_delete[0]['msg']) <= 2, f"Wrong 'msg' array received: {json.dumps(r_delete, indent=2)}"
+    assert r_delete[0]['msg'][0] == "domain_admin_removed", f"Wrong 'msg' received: {r_delete[0]['msg'][0]}, expected: 'domain_admin_removed'\n{json.dumps(r_delete, indent=2)}"
+
+    # delete testing Domain
+    domain_model.delete()
+
+if __name__ == "__main__":
+  print("Running DomainadminModel tests...")
+  test_model()
+  print("All tests passed!")

data/Dockerfiles/controller/mailcow-adm/tests/test_MailboxModel.py

@@ -0,0 +1,89 @@
+import pytest
+import json
+import sys
+import os
+
+sys.path.append(os.path.abspath(os.path.join(os.path.dirname(__file__), "../")))
+from models.DomainModel import DomainModel
+from models.MailboxModel import MailboxModel
+
+
+def test_model():
+    # Generate random mailbox
+    random_username = f"mbox_test{os.urandom(4).hex()}@mailcow.local"
+    random_password = f"{os.urandom(4).hex()}"
+
+    # Create an instance of MailboxModel
+    model = MailboxModel(
+        username=random_username,
+        password=random_password
+    )
+
+    # Test the parser_command attribute
+    assert model.parser_command == "mailbox", "Parser command should be 'mailbox'"
+
+    # add Domain for testing
+    domain_model = DomainModel(domain="mailcow.local")
+    domain_model.add()
+
+    # 1. Mailbox add tests, should success
+    r_add = model.add()
+    assert isinstance(r_add, list), f"Expected a array but received: {json.dumps(r_add, indent=2)}"
+    assert len(r_add) > 0 and len(r_add) <= 2, f"Wrong array received: {json.dumps(r_add, indent=2)}"
+    assert "type" in r_add[1], f"'type' key missing in response: {json.dumps(r_add, indent=2)}"
+    assert r_add[1]['type'] == "success", f"Wrong 'type' received: {r_add[1]['type']}\n{json.dumps(r_add, indent=2)}"
+    assert "msg" in r_add[1], f"'msg' key missing in response: {json.dumps(r_add, indent=2)}"
+    assert isinstance(r_add[1]['msg'], list), f"Expected a 'msg' array but received: {json.dumps(r_add, indent=2)}"
+    assert len(r_add[1]['msg']) > 0 and len(r_add[1]['msg']) <= 3, f"Wrong 'msg' array received: {json.dumps(r_add, indent=2)}"
+    assert r_add[1]['msg'][0] == "mailbox_added", f"Wrong 'msg' received: {r_add[1]['msg'][0]}, expected: 'mailbox_added'\n{json.dumps(r_add, indent=2)}"
+
+    # 2. Mailbox add tests, should fail because the mailbox already exists
+    r_add = model.add()
+    assert isinstance(r_add, list), f"Expected a array but received: {json.dumps(r_add, indent=2)}"
+    assert len(r_add) > 0, f"Wrong array received: {json.dumps(r_add, indent=2)}"
+    assert "type" in r_add[0], f"'type' key missing in response: {json.dumps(r_add, indent=2)}"
+    assert r_add[0]['type'] == "danger", f"Wrong 'type' received: {r_add[0]['type']}\n{json.dumps(r_add, indent=2)}"
+    assert "msg" in r_add[0], f"'msg' key missing in response: {json.dumps(r_add, indent=2)}"
+    assert isinstance(r_add[0]['msg'], list), f"Expected a 'msg' array but received: {json.dumps(r_add, indent=2)}"
+    assert len(r_add[0]['msg']) > 0 and len(r_add[0]['msg']) <= 2, f"Wrong 'msg' array received: {json.dumps(r_add, indent=2)}"
+    assert r_add[0]['msg'][0] == "object_exists", f"Wrong 'msg' received: {r_add[0]['msg'][0]}, expected: 'object_exists'\n{json.dumps(r_add, indent=2)}"
+
+    # 3. Mailbox get tests
+    r_get = model.get()
+    assert isinstance(r_get, dict), f"Expected a dict but received: {json.dumps(r_get, indent=2)}"
+    assert "domain" in r_get, f"'domain' key missing in response: {json.dumps(r_get, indent=2)}"
+    assert "local_part" in r_get, f"'local_part' key missing in response: {json.dumps(r_get, indent=2)}"
+    assert r_get['domain'] == model.domain, f"Wrong 'domain' received: {r_get['domain']}, expected: {model.domain}\n{json.dumps(r_get, indent=2)}"
+    assert r_get['local_part'] == model.local_part, f"Wrong 'local_part' received: {r_get['local_part']}, expected: {model.local_part}\n{json.dumps(r_get, indent=2)}"
+
+    # 4. Mailbox edit tests
+    model.active = 0
+    r_edit = model.edit()
+    assert isinstance(r_edit, list), f"Expected a array but received: {json.dumps(r_edit, indent=2)}"
+    assert len(r_edit) > 0, f"Wrong array received: {json.dumps(r_edit, indent=2)}"
+    assert "type" in r_edit[0], f"'type' key missing in response: {json.dumps(r_edit, indent=2)}"
+    assert r_edit[0]['type'] == "success", f"Wrong 'type' received: {r_edit[0]['type']}\n{json.dumps(r_edit, indent=2)}"
+    assert "msg" in r_edit[0], f"'msg' key missing in response: {json.dumps(r_edit, indent=2)}"
+    assert isinstance(r_edit[0]['msg'], list), f"Expected a 'msg' array but received: {json.dumps(r_edit, indent=2)}"
+    assert len(r_edit[0]['msg']) > 0 and len(r_edit[0]['msg']) <= 2, f"Wrong 'msg' array received: {json.dumps(r_edit, indent=2)}"
+    assert r_edit[0]['msg'][0] == "mailbox_modified", f"Wrong 'msg' received: {r_edit[0]['msg'][0]}, expected: 'mailbox_modified'\n{json.dumps(r_edit, indent=2)}"
+
+    # 5. Mailbox delete tests
+    r_delete = model.delete()
+    assert isinstance(r_delete, list), f"Expected a array but received: {json.dumps(r_delete, indent=2)}"
+    assert len(r_delete) > 0, f"Wrong array received: {json.dumps(r_delete, indent=2)}"
+    assert "type" in r_delete[0], f"'type' key missing in response: {json.dumps(r_delete, indent=2)}"
+    assert r_delete[0]['type'] == "success", f"Wrong 'type' received: {r_delete[0]['type']}\n{json.dumps(r_delete, indent=2)}"
+    assert "msg" in r_delete[0], f"'msg' key missing in response: {json.dumps(r_delete, indent=2)}"
+    assert isinstance(r_delete[0]['msg'], list), f"Expected a 'msg' array but received: {json.dumps(r_delete, indent=2)}"
+    assert len(r_delete[0]['msg']) > 0 and len(r_delete[0]['msg']) <= 2, f"Wrong 'msg' array received: {json.dumps(r_delete, indent=2)}"
+    assert r_delete[0]['msg'][0] == "mailbox_removed", f"Wrong 'msg' received: {r_delete[0]['msg'][0]}, expected: 'mailbox_removed'\n{json.dumps(r_delete, indent=2)}"
+
+    # delete testing Domain
+    domain_model.delete()
+
+
+if __name__ == "__main__":
+  print("Running MailboxModel tests...")
+  test_model()
+  print("All tests passed!")

data/Dockerfiles/controller/mailcow-adm/tests/test_StatusModel.py

@@ -0,0 +1,39 @@
+import pytest
+import json
+import sys
+import os
+
+sys.path.append(os.path.abspath(os.path.join(os.path.dirname(__file__), "../")))
+from models.StatusModel import StatusModel
+
+
+def test_model():
+    # Create an instance of StatusModel
+    model = StatusModel()
+
+    # Test the parser_command attribute
+    assert model.parser_command == "status", "Parser command should be 'status'"
+
+    # 1. Status version tests
+    r_version = model.version()
+    assert isinstance(r_version, dict), f"Expected a dict but received: {json.dumps(r_version, indent=2)}"
+    assert "version" in r_version, f"'version' key missing in response: {json.dumps(r_version, indent=2)}"
+
+    # 2. Status vmail tests
+    r_vmail = model.vmail()
+    assert isinstance(r_vmail, dict), f"Expected a dict but received: {json.dumps(r_vmail, indent=2)}"
+    assert "type" in r_vmail, f"'type' key missing in response: {json.dumps(r_vmail, indent=2)}"
+    assert "disk" in r_vmail, f"'disk' key missing in response: {json.dumps(r_vmail, indent=2)}"
+    assert "used" in r_vmail, f"'used' key missing in response: {json.dumps(r_vmail, indent=2)}"
+    assert "total" in r_vmail, f"'total' key missing in response: {json.dumps(r_vmail, indent=2)}"
+    assert "used_percent" in r_vmail, f"'used_percent' key missing in response: {json.dumps(r_vmail, indent=2)}"
+
+    # 3. Status containers tests
+    r_containers = model.containers()
+    assert isinstance(r_containers, dict), f"Expected a dict but received: {json.dumps(r_containers, indent=2)}"
+
+
+if __name__ == "__main__":
+  print("Running StatusModel tests...")
+  test_model()
+  print("All tests passed!")

data/Dockerfiles/controller/mailcow-adm/tests/test_SyncjobModel.py

@@ -0,0 +1,106 @@
+import pytest
+import json
+import sys
+import os
+
+sys.path.append(os.path.abspath(os.path.join(os.path.dirname(__file__), "../")))
+from models.DomainModel import DomainModel
+from models.MailboxModel import MailboxModel
+from models.SyncjobModel import SyncjobModel
+
+
+def test_model():
+    # Generate random Mailbox
+    random_username = f"mbox_test@mailcow.local"
+    random_password = f"{os.urandom(4).hex()}"
+
+    # Create an instance of SyncjobModel
+    model = SyncjobModel(
+        username=random_username,
+        host1="mailcow.local",
+        port1=993,
+        user1="testuser@mailcow.local",
+        password1="testpassword",
+        enc1="SSL",
+    )
+
+    # Test the parser_command attribute
+    assert model.parser_command == "syncjob", "Parser command should be 'syncjob'"
+
+    # add Domain and Mailbox for testing
+    domain_model = DomainModel(domain="mailcow.local")
+    domain_model.add()
+    mbox_model = MailboxModel(username=random_username, password=random_password)
+    mbox_model.add()
+
+    # 1. Syncjob add tests, should success
+    r_add = model.add()
+    assert isinstance(r_add, list), f"Expected a array but received: {json.dumps(r_add, indent=2)}"
+    assert len(r_add) > 0 and len(r_add) <= 2, f"Wrong array received: {json.dumps(r_add, indent=2)}"
+    assert "type" in r_add[0], f"'type' key missing in response: {json.dumps(r_add, indent=2)}"
+    assert r_add[0]['type'] == "success", f"Wrong 'type' received: {r_add[0]['type']}\n{json.dumps(r_add, indent=2)}"
+    assert "msg" in r_add[0], f"'msg' key missing in response: {json.dumps(r_add, indent=2)}"
+    assert isinstance(r_add[0]['msg'], list), f"Expected a 'msg' array but received: {json.dumps(r_add, indent=2)}"
+    assert len(r_add[0]['msg']) > 0 and len(r_add[0]['msg']) <= 3, f"Wrong 'msg' array received: {json.dumps(r_add, indent=2)}"
+    assert r_add[0]['msg'][0] == "mailbox_modified", f"Wrong 'msg' received: {r_add[0]['msg'][0]}, expected: 'mailbox_modified'\n{json.dumps(r_add, indent=2)}"
+
+    # Assign created syncjob ID for further tests
+    model.id = r_add[0]['msg'][2]
+
+    # 2. Syncjob add tests, should fail because the syncjob already exists
+    r_add = model.add()
+    assert isinstance(r_add, list), f"Expected a array but received: {json.dumps(r_add, indent=2)}"
+    assert len(r_add) > 0, f"Wrong array received: {json.dumps(r_add, indent=2)}"
+    assert "type" in r_add[0], f"'type' key missing in response: {json.dumps(r_add, indent=2)}"
+    assert r_add[0]['type'] == "danger", f"Wrong 'type' received: {r_add[0]['type']}\n{json.dumps(r_add, indent=2)}"
+    assert "msg" in r_add[0], f"'msg' key missing in response: {json.dumps(r_add, indent=2)}"
+    assert isinstance(r_add[0]['msg'], list), f"Expected a 'msg' array but received: {json.dumps(r_add, indent=2)}"
+    assert len(r_add[0]['msg']) > 0 and len(r_add[0]['msg']) <= 2, f"Wrong 'msg' array received: {json.dumps(r_add, indent=2)}"
+    assert r_add[0]['msg'][0] == "object_exists", f"Wrong 'msg' received: {r_add[0]['msg'][0]}, expected: 'object_exists'\n{json.dumps(r_add, indent=2)}"
+
+    # 3. Syncjob get tests
+    r_get = model.get()
+    assert isinstance(r_get, list), f"Expected a list but received: {json.dumps(r_get, indent=2)}"
+    assert "user2" in r_get[0], f"'user2' key missing in response: {json.dumps(r_get, indent=2)}"
+    assert "host1" in r_get[0], f"'host1' key missing in response: {json.dumps(r_get, indent=2)}"
+    assert "port1" in r_get[0], f"'port1' key missing in response: {json.dumps(r_get, indent=2)}"
+    assert "user1" in r_get[0], f"'user1' key missing in response: {json.dumps(r_get, indent=2)}"
+    assert "enc1" in r_get[0], f"'enc1' key missing in response: {json.dumps(r_get, indent=2)}"
+    assert r_get[0]['user2'] == model.username, f"Wrong 'user2' received: {r_get[0]['user2']}, expected: {model.username}\n{json.dumps(r_get, indent=2)}"
+    assert r_get[0]['host1'] == model.host1, f"Wrong 'host1' received: {r_get[0]['host1']}, expected: {model.host1}\n{json.dumps(r_get, indent=2)}"
+    assert r_get[0]['port1'] == model.port1, f"Wrong 'port1' received: {r_get[0]['port1']}, expected: {model.port1}\n{json.dumps(r_get, indent=2)}"
+    assert r_get[0]['user1'] == model.user1, f"Wrong 'user1' received: {r_get[0]['user1']}, expected: {model.user1}\n{json.dumps(r_get, indent=2)}"
+    assert r_get[0]['enc1'] == model.enc1, f"Wrong 'enc1' received: {r_get[0]['enc1']}, expected: {model.enc1}\n{json.dumps(r_get, indent=2)}"
+
+    # 4. Syncjob edit tests
+    model.active = 1
+    r_edit = model.edit()
+    assert isinstance(r_edit, list), f"Expected a array but received: {json.dumps(r_edit, indent=2)}"
+    assert len(r_edit) > 0, f"Wrong array received: {json.dumps(r_edit, indent=2)}"
+    assert "type" in r_edit[0], f"'type' key missing in response: {json.dumps(r_edit, indent=2)}"
+    assert r_edit[0]['type'] == "success", f"Wrong 'type' received: {r_edit[0]['type']}\n{json.dumps(r_edit, indent=2)}"
+    assert "msg" in r_edit[0], f"'msg' key missing in response: {json.dumps(r_edit, indent=2)}"
+    assert isinstance(r_edit[0]['msg'], list), f"Expected a 'msg' array but received: {json.dumps(r_edit, indent=2)}"
+    assert len(r_edit[0]['msg']) > 0 and len(r_edit[0]['msg']) <= 2, f"Wrong 'msg' array received: {json.dumps(r_edit, indent=2)}"
+    assert r_edit[0]['msg'][0] == "mailbox_modified", f"Wrong 'msg' received: {r_edit[0]['msg'][0]}, expected: 'mailbox_modified'\n{json.dumps(r_edit, indent=2)}"
+
+    # 5. Syncjob delete tests
+    r_delete = model.delete()
+    assert isinstance(r_delete, list), f"Expected a array but received: {json.dumps(r_delete, indent=2)}"
+    assert len(r_delete) > 0, f"Wrong array received: {json.dumps(r_delete, indent=2)}"
+    assert "type" in r_delete[0], f"'type' key missing in response: {json.dumps(r_delete, indent=2)}"
+    assert r_delete[0]['type'] == "success", f"Wrong 'type' received: {r_delete[0]['type']}\n{json.dumps(r_delete, indent=2)}"
+    assert "msg" in r_delete[0], f"'msg' key missing in response: {json.dumps(r_delete, indent=2)}"
+    assert isinstance(r_delete[0]['msg'], list), f"Expected a 'msg' array but received: {json.dumps(r_delete, indent=2)}"
+    assert len(r_delete[0]['msg']) > 0 and len(r_delete[0]['msg']) <= 2, f"Wrong 'msg' array received: {json.dumps(r_delete, indent=2)}"
+    assert r_delete[0]['msg'][0] == "deleted_syncjob", f"Wrong 'msg' received: {r_delete[0]['msg'][0]}, expected: 'deleted_syncjob'\n{json.dumps(r_delete, indent=2)}"
+
+    # delete testing Domain and Mailbox
+    mbox_model.delete()
+    domain_model.delete()
+
+
+if __name__ == "__main__":
+  print("Running SyncjobModel tests...")
+  test_model()
+  print("All tests passed!")

data/Dockerfiles/controller/stop-supervisor.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+
+printf "READY\n";
+
+while read line; do
+  echo "Processing Event: $line" >&2;
+  kill -3 $(cat "/var/run/supervisord.pid")
+done < /dev/stdin

data/Dockerfiles/controller/supervisord.conf

@@ -0,0 +1,17 @@
+[supervisord]
+nodaemon=true
+user=root
+pidfile=/var/run/supervisord.pid
+
+[program:api]
+command=python /app/api/main.py
+autostart=true
+autorestart=true
+stdout_logfile=/dev/stdout
+stderr_logfile=/dev/stderr
+stdout_logfile_maxbytes=0
+stderr_logfile_maxbytes=0
+
+[eventlistener:processes]
+command=/usr/local/sbin/stop-supervisor.sh
+events=PROCESS_STATE_STOPPED, PROCESS_STATE_EXITED, PROCESS_STATE_FATAL

data/Dockerfiles/dockerapi/docker-entrypoint.sh

@@ -1,9 +0,0 @@
-#!/bin/bash
-
-`openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 -nodes \
-  -keyout /app/dockerapi_key.pem \
-  -out /app/dockerapi_cert.pem \
-  -subj /CN=dockerapi/O=mailcow \
-  -addext subjectAltName=DNS:dockerapi`
-
-exec "$@"

data/Dockerfiles/dovecot/sa-rules.sh

@@ -25,11 +25,11 @@ sed -i -e 's/\([^\\]\)\$\([^\/]\)/\1\\$\2/g' /etc/rspamd/custom/sa-rules
 
 if [[ "$(cat /etc/rspamd/custom/sa-rules | md5sum | cut -d' ' -f1)" != "${HASH_SA_RULES}" ]]; then
   CONTAINER_NAME=rspamd-mailcow
-  CONTAINER_ID=$(curl --silent --insecure https://dockerapi.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/json | \
+  CONTAINER_ID=$(curl --silent --insecure https://controller.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/json | \
     jq -r ".[] | {name: .Config.Labels[\"com.docker.compose.service\"], project: .Config.Labels[\"com.docker.compose.project\"], id: .Id}" | \
     jq -rc "select( .name | tostring | contains(\"${CONTAINER_NAME}\")) | select( .project | tostring | contains(\"${COMPOSE_PROJECT_NAME,,}\")) | .id")
   if [[ ! -z ${CONTAINER_ID} ]]; then
-    curl --silent --insecure -XPOST --connect-timeout 15 --max-time 120 https://dockerapi.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${CONTAINER_ID}/restart
+    curl --silent --insecure -XPOST --connect-timeout 15 --max-time 120 https://controller.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${CONTAINER_ID}/restart
   fi
 fi
 

data/Dockerfiles/phpfpm/docker-entrypoint.sh

@@ -32,7 +32,7 @@ session.save_path = "tcp://'${REDIS_HOST}':'${REDIS_PORT}'?auth='${REDISPASS}'"
 # Check mysql_upgrade (master and slave)
 CONTAINER_ID=
 until [[ ! -z "${CONTAINER_ID}" ]] && [[ "${CONTAINER_ID}" =~ ^[[:alnum:]]*$ ]]; do
-  CONTAINER_ID=$(curl --silent --insecure https://dockerapi.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/json | jq -r ".[] | {name: .Config.Labels[\"com.docker.compose.service\"], project: .Config.Labels[\"com.docker.compose.project\"], id: .Id}" 2> /dev/null | jq -rc "select( .name | tostring | contains(\"mysql-mailcow\")) | select( .project | tostring | contains(\"${COMPOSE_PROJECT_NAME,,}\")) | .id" 2> /dev/null)
+  CONTAINER_ID=$(curl --silent --insecure https://controller.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/json | jq -r ".[] | {name: .Config.Labels[\"com.docker.compose.service\"], project: .Config.Labels[\"com.docker.compose.project\"], id: .Id}" 2> /dev/null | jq -rc "select( .name | tostring | contains(\"mysql-mailcow\")) | select( .project | tostring | contains(\"${COMPOSE_PROJECT_NAME,,}\")) | .id" 2> /dev/null)
   echo "Could not get mysql-mailcow container id... trying again"
   sleep 2
 done
@@ -44,7 +44,7 @@ until [[ ${SQL_UPGRADE_STATUS} == 'success' ]]; do
     echo "Tried to upgrade MySQL and failed, giving up after ${SQL_LOOP_C} retries and starting container (oops, not good)"
     break
   fi
-  SQL_FULL_UPGRADE_RETURN=$(curl --silent --insecure -XPOST https://dockerapi.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${CONTAINER_ID}/exec -d '{"cmd":"system", "task":"mysql_upgrade"}' --silent -H 'Content-type: application/json')
+  SQL_FULL_UPGRADE_RETURN=$(curl --silent --insecure -XPOST https://controller.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${CONTAINER_ID}/exec -d '{"cmd":"system", "task":"mysql_upgrade"}' --silent -H 'Content-type: application/json')
   SQL_UPGRADE_STATUS=$(echo ${SQL_FULL_UPGRADE_RETURN} | jq -r .type)
   SQL_LOOP_C=$((SQL_LOOP_C+1))
   echo "SQL upgrade iteration #${SQL_LOOP_C}"
@@ -69,12 +69,12 @@ done
 
 # doing post-installation stuff, if SQL was upgraded (master and slave)
 if [ ${SQL_CHANGED} -eq 1 ]; then
-  POSTFIX=$(curl --silent --insecure https://dockerapi.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/json | jq -r ".[] | {name: .Config.Labels[\"com.docker.compose.service\"], project: .Config.Labels[\"com.docker.compose.project\"], id: .Id}" 2> /dev/null | jq -rc "select( .name | tostring | contains(\"postfix-mailcow\")) | select( .project | tostring | contains(\"${COMPOSE_PROJECT_NAME,,}\")) | .id" 2> /dev/null)
+  POSTFIX=$(curl --silent --insecure https://controller.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/json | jq -r ".[] | {name: .Config.Labels[\"com.docker.compose.service\"], project: .Config.Labels[\"com.docker.compose.project\"], id: .Id}" 2> /dev/null | jq -rc "select( .name | tostring | contains(\"postfix-mailcow\")) | select( .project | tostring | contains(\"${COMPOSE_PROJECT_NAME,,}\")) | .id" 2> /dev/null)
   if [[ -z "${POSTFIX}" ]] || ! [[ "${POSTFIX}" =~ ^[[:alnum:]]*$ ]]; then
     echo "Could not determine Postfix container ID, skipping Postfix restart."
   else
     echo "Restarting Postfix"
-    curl -X POST --silent --insecure https://dockerapi.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${POSTFIX}/restart | jq -r '.msg'
+    curl -X POST --silent --insecure https://controller.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${POSTFIX}/restart | jq -r '.msg'
     echo "Sleeping 5 seconds..."
     sleep 5
   fi
@@ -83,7 +83,7 @@ fi
 # Check mysql tz import (master and slave)
 TZ_CHECK=$(mariadb --skip-ssl --socket=/var/run/mysqld/mysqld.sock -u ${DBUSER} -p${DBPASS} ${DBNAME} -e "SELECT CONVERT_TZ('2019-11-02 23:33:00','Europe/Berlin','UTC') AS time;" -BN 2> /dev/null)
 if [[ -z ${TZ_CHECK} ]] || [[ "${TZ_CHECK}" == "NULL" ]]; then
-  SQL_FULL_TZINFO_IMPORT_RETURN=$(curl --silent --insecure -XPOST https://dockerapi.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${CONTAINER_ID}/exec -d '{"cmd":"system", "task":"mysql_tzinfo_to_sql"}' --silent -H 'Content-type: application/json')
+  SQL_FULL_TZINFO_IMPORT_RETURN=$(curl --silent --insecure -XPOST https://controller.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${CONTAINER_ID}/exec -d '{"cmd":"system", "task":"mysql_tzinfo_to_sql"}' --silent -H 'Content-type: application/json')
   echo "MySQL mysql_tzinfo_to_sql - debug output:"
   echo ${SQL_FULL_TZINFO_IMPORT_RETURN}
 fi

data/Dockerfiles/watchdog/watchdog.sh

@@ -200,12 +200,12 @@ get_container_ip() {
     else
       sleep 0.5
       # get long container id for exact match
-      CONTAINER_ID=($(curl --silent --insecure https://dockerapi.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/json | jq -r ".[] | {name: .Config.Labels[\"com.docker.compose.service\"], project: .Config.Labels[\"com.docker.compose.project\"], id: .Id}" | jq -rc "select( .name | tostring == \"${1}\") | select( .project | tostring | contains(\"${COMPOSE_PROJECT_NAME,,}\")) | .id"))
+      CONTAINER_ID=($(curl --silent --insecure https://controller.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/json | jq -r ".[] | {name: .Config.Labels[\"com.docker.compose.service\"], project: .Config.Labels[\"com.docker.compose.project\"], id: .Id}" | jq -rc "select( .name | tostring == \"${1}\") | select( .project | tostring | contains(\"${COMPOSE_PROJECT_NAME,,}\")) | .id"))
       # returned id can have multiple elements (if scaled), shuffle for random test
       CONTAINER_ID=($(printf "%s\n" "${CONTAINER_ID[@]}" | shuf))
       if [[ ! -z ${CONTAINER_ID} ]]; then
         for matched_container in "${CONTAINER_ID[@]}"; do
-          CONTAINER_IPS=($(curl --silent --insecure https://dockerapi.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${matched_container}/json | jq -r '.NetworkSettings.Networks[].IPAddress'))
+          CONTAINER_IPS=($(curl --silent --insecure https://controller.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${matched_container}/json | jq -r '.NetworkSettings.Networks[].IPAddress'))
           for ip_match in "${CONTAINER_IPS[@]}"; do
             # grep will do nothing if one of these vars is empty
             [[ -z ${ip_match} ]] && continue
@@ -1075,15 +1075,15 @@ while true; do
 done
 ) &
 
-# Monitor dockerapi
+# Monitor controller
 (
 while true; do
-  while nc -z dockerapi 443; do
+  while nc -z controller 443; do
     sleep 3
   done
-  log_msg "Cannot find dockerapi-mailcow, waiting to recover..."
+  log_msg "Cannot find controller-mailcow, waiting to recover..."
   kill -STOP ${BACKGROUND_TASKS[*]}
-  until nc -z dockerapi 443; do
+  until nc -z controller 443; do
     sleep 3
   done
   kill -CONT ${BACKGROUND_TASKS[*]}
@@ -1143,12 +1143,12 @@ while true; do
   elif [[ ${com_pipe_answer} =~ .+-mailcow ]]; then
     kill -STOP ${BACKGROUND_TASKS[*]}
     sleep 10
-    CONTAINER_ID=$(curl --silent --insecure https://dockerapi.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/json | jq -r ".[] | {name: .Config.Labels[\"com.docker.compose.service\"], project: .Config.Labels[\"com.docker.compose.project\"], id: .Id}" | jq -rc "select( .name | tostring | contains(\"${com_pipe_answer}\")) | select( .project | tostring | contains(\"${COMPOSE_PROJECT_NAME,,}\")) | .id")
+    CONTAINER_ID=$(curl --silent --insecure https://controller.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/json | jq -r ".[] | {name: .Config.Labels[\"com.docker.compose.service\"], project: .Config.Labels[\"com.docker.compose.project\"], id: .Id}" | jq -rc "select( .name | tostring | contains(\"${com_pipe_answer}\")) | select( .project | tostring | contains(\"${COMPOSE_PROJECT_NAME,,}\")) | .id")
     if [[ ! -z ${CONTAINER_ID} ]]; then
       if [[ "${com_pipe_answer}" == "php-fpm-mailcow" ]]; then
-        HAS_INITDB=$(curl --silent --insecure -XPOST https://dockerapi.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${CONTAINER_ID}/top | jq '.msg.Processes[] | contains(["php -c /usr/local/etc/php -f /web/inc/init_db.inc.php"])' | grep true)
+        HAS_INITDB=$(curl --silent --insecure -XPOST https://controller.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${CONTAINER_ID}/top | jq '.msg.Processes[] | contains(["php -c /usr/local/etc/php -f /web/inc/init_db.inc.php"])' | grep true)
       fi
-      S_RUNNING=$(($(date +%s) - $(curl --silent --insecure https://dockerapi.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${CONTAINER_ID}/json | jq .State.StartedAt | xargs -n1 date +%s -d)))
+      S_RUNNING=$(($(date +%s) - $(curl --silent --insecure https://controller.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${CONTAINER_ID}/json | jq .State.StartedAt | xargs -n1 date +%s -d)))
       if [ ${S_RUNNING} -lt 360 ]; then
         log_msg "Container is running for less than 360 seconds, skipping action..."
       elif [[ ! -z ${HAS_INITDB} ]]; then
@@ -1156,7 +1156,7 @@ while true; do
         sleep 60
       else
         log_msg "Sending restart command to ${CONTAINER_ID}..."
-        curl --silent --insecure -XPOST https://dockerapi.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${CONTAINER_ID}/restart
+        curl --silent --insecure -XPOST https://controller.${COMPOSE_PROJECT_NAME}_mailcow-network/containers/${CONTAINER_ID}/restart
         notify_error "${com_pipe_answer}"
         log_msg "Wait for restarted container to settle and continue watching..."
         sleep 35

data/conf/nginx/templates/sites-default.conf.j2

@@ -185,6 +185,7 @@ location ^~ /Microsoft-Server-ActiveSync {
     auth_request_set $user $upstream_http_x_user;
     auth_request_set $auth $upstream_http_x_auth;
     auth_request_set $auth_type $upstream_http_x_auth_type;
+    auth_request_set $real_ip $remote_addr;
     proxy_set_header x-webobjects-remote-user "$user";
     proxy_set_header Authorization "$auth";
     proxy_set_header x-webobjects-auth-type "$auth_type";
@@ -210,6 +211,7 @@ location ^~ /SOGo {
         auth_request_set $user $upstream_http_x_user;
         auth_request_set $auth $upstream_http_x_auth;
         auth_request_set $auth_type $upstream_http_x_auth_type;
+        auth_request_set $real_ip $remote_addr;
         proxy_set_header x-webobjects-remote-user "$user";
         proxy_set_header Authorization "$auth";
         proxy_set_header x-webobjects-auth-type "$auth_type";
@@ -232,6 +234,7 @@ location ^~ /SOGo {
     auth_request_set $user $upstream_http_x_user;
     auth_request_set $auth $upstream_http_x_auth;
     auth_request_set $auth_type $upstream_http_x_auth_type;
+    auth_request_set $real_ip $remote_addr;
     proxy_set_header x-webobjects-remote-user "$user";
     proxy_set_header Authorization "$auth";
     proxy_set_header x-webobjects-auth-type "$auth_type";

data/conf/postfix/postscreen_access.cidr

@@ -1,6 +1,6 @@
-# Whitelist generated by Postwhite v3.4 on Sun Feb  1 00:29:33 UTC 2026
+# Whitelist generated by Postwhite v3.4 on Thu Jan  1 00:24:01 UTC 2026
 # https://github.com/stevejenkins/postwhite/
-# 2102 total rules
+# 2105 total rules
 2a00:1450:4000::/36	permit
 2a01:111:f400::/48	permit
 2a01:111:f403:2800::/53	permit
@@ -54,8 +54,8 @@
 8.36.116.0/24	permit
 8.39.144.0/24	permit
 12.130.86.238	permit
-13.107.213.51	permit
-13.107.246.51	permit
+13.107.213.38	permit
+13.107.246.38	permit
 13.108.16.0/20	permit
 13.110.208.0/21	permit
 13.110.209.0/24	permit
@@ -2088,6 +2088,11 @@
 2001:748:400:3301::3	permit
 2001:748:400:3301::4	permit
 2404:6800:4000::/36	permit
+2603:1010:3:3::5b	permit
+2603:1020:201:10::10f	permit
+2603:1030:20e:3::23c	permit
+2603:1030:b:3::152	permit
+2603:1030:c02:8::14	permit
 2607:f8b0:4000::/36	permit
 2620:109:c003:104::/64	permit
 2620:109:c003:104::215	permit
@@ -2100,8 +2105,6 @@
 2620:10d:c09c:400::8:1	permit
 2620:119:50c0:207::/64	permit
 2620:119:50c0:207::215	permit
-2620:1ec:46::51	permit
-2620:1ec:bdf::51	permit
 2800:3f0:4000::/36	permit
 49.12.4.251 permit # checks.mailcow.email
 2a01:4f8:c17:7906::10 permit # checks.mailcow.email

data/web/admin/dashboard.php

@@ -2,7 +2,18 @@
 require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/prerequisites.inc.php';
 require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/triggers.admin.inc.php';
 
-protect_route(['admin']);
+if (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'domainadmin') {
+  header('Location: /domainadmin/mailbox');
+  exit();
+}
+elseif (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'user') {
+  header('Location: /user');
+  exit();
+}
+elseif (!isset($_SESSION['mailcow_cc_role']) || $_SESSION['mailcow_cc_role'] != "admin") {
+  header('Location: /admin');
+  exit();
+}
 
 require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/header.inc.php';
 $_SESSION['return_to'] = $_SERVER['REQUEST_URI'];

data/web/admin/index.php

@@ -3,11 +3,8 @@ require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/prerequisites.inc.php';
 require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/triggers.admin.inc.php';
 
 if (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'admin') {
-  // Only redirect to dashboard if NO pending actions
-  if (empty($_SESSION['pending_tfa_setup']) && empty($_SESSION['pending_pw_update'])) {
-    header('Location: /admin/dashboard');
-    exit();
-  }
+  header('Location: /admin/dashboard');
+  exit();
 }
 elseif (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'domainadmin') {
   header('Location: /domainadmin/mailbox');

data/web/admin/mailbox.php

@@ -2,7 +2,18 @@
 require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/prerequisites.inc.php';
 require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/triggers.admin.inc.php';
 
-protect_route(['admin']);
+if (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'domainadmin') {
+  header('Location: /domainadmin/mailbox');
+  exit();
+}
+elseif (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'user') {
+  header('Location: /user');
+  exit();
+}
+elseif (!isset($_SESSION['mailcow_cc_role']) || $_SESSION['mailcow_cc_role'] != "admin") {
+  header('Location: /admin');
+  exit();
+}
 
 require_once $_SERVER['DOCUMENT_ROOT'] .  '/inc/header.inc.php';
 $_SESSION['return_to'] = $_SERVER['REQUEST_URI'];

data/web/admin/queue.php

@@ -2,7 +2,19 @@
 require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/prerequisites.inc.php';
 require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/triggers.admin.inc.php';
 
-protect_route(['admin']);
+if (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'domainadmin') {
+  header('Location: /domainadmin/mailbox');
+  exit();
+}
+elseif (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'user') {
+  header('Location: /user');
+  exit();
+}
+elseif (!isset($_SESSION['mailcow_cc_role']) || $_SESSION['mailcow_cc_role'] != "admin") {
+  header('Location: /admin');
+  exit();
+}
+
 
 require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/header.inc.php';
 $js_minifier->add('/web/js/site/queue.js');

data/web/admin/system.php

@@ -2,7 +2,18 @@
 require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/prerequisites.inc.php';
 require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/triggers.admin.inc.php';
 
-protect_route(['admin']);
+if (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'domainadmin') {
+  header('Location: /domainadmin/mailbox');
+  exit();
+}
+elseif (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'user') {
+  header('Location: /user');
+  exit();
+}
+elseif (!isset($_SESSION['mailcow_cc_role']) || $_SESSION['mailcow_cc_role'] != "admin") {
+  header('Location: /admin');
+  exit();
+}
 
 require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/header.inc.php';
 $_SESSION['return_to'] = $_SERVER['REQUEST_URI'];

data/web/api/openapi.yaml

@@ -5352,9 +5352,9 @@ paths:
                       started_at: "2019-12-22T21:00:01.622856172Z"
                       state: running
                       type: info
-                    dockerapi-mailcow:
-                      container: dockerapi-mailcow
-                      image: "mailcow/dockerapi:1.36"
+                    controller-mailcow:
+                      container: controller-mailcow
+                      image: "mailcow/controller:1.36"
                       started_at: "2019-12-22T20:59:59.984797808Z"
                       state: running
                       type: info

data/web/domainadmin/index.php

@@ -3,11 +3,8 @@ require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/prerequisites.inc.php';
 require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/triggers.domainadmin.inc.php';
 
 if (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'domainadmin') {
-  // Only redirect to mailbox if NO pending actions
-  if (empty($_SESSION['pending_tfa_setup']) && empty($_SESSION['pending_pw_update'])) {
-    header('Location: /domainadmin/mailbox');
-    exit();
-  }
+  header('Location: /domainadmin/mailbox');
+  exit();
 }
 elseif (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'admin') {
   header('Location: /admin/dashboard');

data/web/domainadmin/mailbox.php

@@ -2,7 +2,18 @@
 require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/prerequisites.inc.php';
 require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/triggers.domainadmin.inc.php';
 
-protect_route(['domainadmin']);
+if (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'admin') {
+  header('Location: /admin/dashboard');
+  exit();
+}
+elseif (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'user') {
+  header('Location: /user');
+  exit();
+}
+elseif (!isset($_SESSION['mailcow_cc_role']) || $_SESSION['mailcow_cc_role'] != "domainadmin") {
+  header('Location: /domainadmin');
+  exit();
+}
 
 require_once $_SERVER['DOCUMENT_ROOT'] .  '/inc/header.inc.php';
 $_SESSION['return_to'] = $_SERVER['REQUEST_URI'];

data/web/domainadmin/user.php

@@ -2,28 +2,41 @@
 require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/prerequisites.inc.php';
 require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/triggers.domainadmin.inc.php';
 
-/*
-/ DOMAIN ADMIN
-*/
+if (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'domainadmin') {
 
-protect_route(['domainadmin']);
+  /*
+  / DOMAIN ADMIN
+  */
 
-require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/header.inc.php';
-$_SESSION['return_to'] = $_SERVER['REQUEST_URI'];
-$tfa_data = get_tfa();
-$fido2_data = fido2(array("action" => "get_friendly_names"));
-$username = $_SESSION['mailcow_cc_username'];
+  require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/header.inc.php';
+  $_SESSION['return_to'] = $_SERVER['REQUEST_URI'];
+  $tfa_data = get_tfa();
+  $fido2_data = fido2(array("action" => "get_friendly_names"));
+  $username = $_SESSION['mailcow_cc_username'];
 
-$template = 'domainadmin.twig';
-$template_data = [
-  'acl' => $_SESSION['acl'],
-  'acl_json' => json_encode($_SESSION['acl']),
-  'user_spam_score' => mailbox('get', 'spam_score', $username),
-  'tfa_data' => $tfa_data,
-  'fido2_data' => $fido2_data,
-  'lang_user' => json_encode($lang['user']),
-  'lang_datatables' => json_encode($lang['datatables']),
-];
+  $template = 'domainadmin.twig';
+  $template_data = [
+    'acl' => $_SESSION['acl'],
+    'acl_json' => json_encode($_SESSION['acl']),
+    'user_spam_score' => mailbox('get', 'spam_score', $username),
+    'tfa_data' => $tfa_data,
+    'fido2_data' => $fido2_data,
+    'lang_user' => json_encode($lang['user']),
+    'lang_datatables' => json_encode($lang['datatables']),
+  ];
+}
+elseif (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'admin') {
+  header('Location: /admin/dashboard');
+  exit();
+}
+elseif (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'user') {
+  header('Location: /user');
+  exit();
+}
+else {
+  header('Location: /domainadmin');
+  exit();
+}
 
 $js_minifier->add('/web/js/site/user.js');
 $js_minifier->add('/web/js/site/pwgen.js');

data/web/edit.php

@@ -1,8 +1,10 @@
 <?php
 require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/prerequisites.inc.php';
-
-protect_route();
-
+$AuthUsers = array("admin", "domainadmin", "user");
+if (!isset($_SESSION['mailcow_cc_role']) OR !in_array($_SESSION['mailcow_cc_role'], $AuthUsers)) {
+  header('Location: /');
+  exit();
+}
 require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/header.inc.php';
 
 $template = 'edit.twig';

data/web/inc/footer.inc.php

@@ -64,8 +64,6 @@ $globalVariables = [
   'pending_tfa_methods' => @$_SESSION['pending_tfa_methods'],
   'pending_tfa_authmechs' => $pending_tfa_authmechs,
   'pending_mailcow_cc_username' => @$_SESSION['pending_mailcow_cc_username'],
-  'pending_tfa_setup' => !empty($_SESSION['pending_tfa_setup']),
-  'pending_pw_update_modal' => !empty($_SESSION['pending_pw_update']),
   'lang_footer' => json_encode($lang['footer']),
   'lang_acl' => json_encode($lang['acl']),
   'lang_tfa' => json_encode($lang['tfa']),

data/web/inc/functions.admin.inc.php

@@ -121,56 +121,34 @@ function admin($_action, $_data = null) {
             continue;
           }
         }
-        // Check if this is a self password change via forced update
-        if ($username == $_SESSION['mailcow_cc_username'] && !empty($_SESSION['pending_pw_update'])) {
-          // Forced password update: only change password and clear force_pw_update flag
-          if (!empty($password)) {
-            if (password_check($password, $_data['password2']) !== true) {
-              return false;
-            }
-            $password_hashed = hash_password($password);
-            $stmt = $pdo->prepare("UPDATE `admin` SET `password` = :password_hashed,
-              `attributes` = JSON_SET(COALESCE(`attributes`, '{}'), '$.force_pw_update', '0')
-              WHERE `username` = :username");
-            $stmt->execute(array(
-              ':password_hashed' => $password_hashed,
-              ':username' => $username
-            ));
-            unset($_SESSION['pending_pw_update']);
+        if (!empty($password)) {
+          if (password_check($password, $password2) !== true) {
+            return false;
           }
-        } else {
-          // Normal admin edit: update all attributes
-          $force_tfa = intval($_data['force_tfa'] ?? 0) ? 1 : 0;
-          $force_pw_update = intval($_data['force_pw_update'] ?? 0) ? 1 : 0;
-          if (!empty($password)) {
-            if (password_check($password, $password2) !== true) {
-              return false;
-            }
-            $password_hashed = hash_password($password);
-            $stmt = $pdo->prepare("UPDATE `admin` SET `username` = :username_new, `active` = :active, `password` = :password_hashed,
-              `attributes` = JSON_SET(COALESCE(`attributes`, '{}'), '$.force_tfa', :force_tfa, '$.force_pw_update', :force_pw_update)
-              WHERE `username` = :username");
-            $stmt->execute(array(
-              ':password_hashed' => $password_hashed,
-              ':username_new' => $username_new,
-              ':username' => $username,
-              ':active' => $active,
-              ':force_tfa' => strval($force_tfa),
-              ':force_pw_update' => strval($force_pw_update)
-            ));
+          $password_hashed = hash_password($password);
+          $stmt = $pdo->prepare("UPDATE `admin` SET `username` = :username_new, `active` = :active, `password` = :password_hashed WHERE `username` = :username");
+          $stmt->execute(array(
+            ':password_hashed' => $password_hashed,
+            ':username_new' => $username_new,
+            ':username' => $username,
+            ':active' => $active
+          ));
+          if (isset($_data['disable_tfa'])) {
+            $stmt = $pdo->prepare("UPDATE `tfa` SET `active` = '0' WHERE `username` = :username");
+            $stmt->execute(array(':username' => $username));
           }
           else {
-            $stmt = $pdo->prepare("UPDATE `admin` SET `username` = :username_new, `active` = :active,
-              `attributes` = JSON_SET(COALESCE(`attributes`, '{}'), '$.force_tfa', :force_tfa, '$.force_pw_update', :force_pw_update)
-              WHERE `username` = :username");
-            $stmt->execute(array(
-              ':username_new' => $username_new,
-              ':username' => $username,
-              ':active' => $active,
-              ':force_tfa' => strval($force_tfa),
-              ':force_pw_update' => strval($force_pw_update)
-            ));
+            $stmt = $pdo->prepare("UPDATE `tfa` SET `username` = :username_new WHERE `username` = :username");
+            $stmt->execute(array(':username_new' => $username_new, ':username' => $username));
           }
+        }
+        else {
+          $stmt = $pdo->prepare("UPDATE `admin` SET `username` = :username_new, `active` = :active WHERE `username` = :username");
+          $stmt->execute(array(
+            ':username_new' => $username_new,
+            ':username' => $username,
+            ':active' => $active
+          ));
           if (isset($_data['disable_tfa'])) {
             $stmt = $pdo->prepare("UPDATE `tfa` SET `active` = '0' WHERE `username` = :username");
             $stmt->execute(array(':username' => $username));
@@ -245,8 +223,7 @@ function admin($_action, $_data = null) {
         `tfa`.`active` AS `tfa_active`,
         `admin`.`username`,
         `admin`.`created`,
-        `admin`.`active` AS `active`,
-        `admin`.`attributes` AS `attributes`
+        `admin`.`active` AS `active`
           FROM `admin`
           LEFT OUTER JOIN `tfa` ON `tfa`.`username`=`admin`.`username`
             WHERE `admin`.`username`= :admin AND `superadmin` = '1'");
@@ -263,7 +240,6 @@ function admin($_action, $_data = null) {
       $admindata['active'] = $row['active'];
       $admindata['active_int'] = $row['active'];
       $admindata['created'] = $row['created'];
-      $admindata['attributes'] = json_decode($row['attributes'], true) ?? array('force_tfa' => '0', 'force_pw_update' => '0');
       return $admindata;
     break;
   }

data/web/inc/functions.auth.inc.php

@@ -82,7 +82,7 @@ function admin_login($user, $pass){
   }
 
   $user = strtolower(trim($user));
-  $stmt = $pdo->prepare("SELECT `password`, `attributes` FROM `admin`
+  $stmt = $pdo->prepare("SELECT `password` FROM `admin`
       WHERE `superadmin` = '1'
       AND `active` = '1'
       AND `username` = :user");
@@ -91,13 +91,6 @@ function admin_login($user, $pass){
 
   // verify password
   if (verify_hash($row['password'], $pass)) {
-    $admin_attrs = json_decode($row['attributes'], true) ?? [];
-
-    // Check force_pw_update
-    if (intval($admin_attrs['force_pw_update'] ?? 0) == 1) {
-      $_SESSION['pending_pw_update'] = true;
-    }
-
     // check for tfa authenticators
     $authenticators = get_tfa($user);
     if (isset($authenticators['additional']) && is_array($authenticators['additional']) && count($authenticators['additional']) > 0) {
@@ -117,10 +110,6 @@ function admin_login($user, $pass){
       // Reactivate TFA if it was set to "deactivate TFA for next login"
       $stmt = $pdo->prepare("UPDATE `tfa` SET `active`='1' WHERE `username` = :user");
       $stmt->execute(array(':user' => $user));
-      // Check force_tfa: only force setup if NO TFA exists at all
-      if (intval($admin_attrs['force_tfa'] ?? 0) == 1 && !tfa_exists($user)) {
-        $_SESSION['pending_tfa_setup'] = true;
-      }
       $_SESSION['return'][] =  array(
         'type' => 'success',
         'log' => array(__FUNCTION__, $user, '*'),
@@ -146,7 +135,7 @@ function domainadmin_login($user, $pass){
     return false;
   }
 
-  $stmt = $pdo->prepare("SELECT `password`, `attributes` FROM `admin`
+  $stmt = $pdo->prepare("SELECT `password` FROM `admin`
       WHERE `superadmin` = '0'
       AND `active`='1'
       AND `username` = :user");
@@ -155,13 +144,6 @@ function domainadmin_login($user, $pass){
 
   // verify password
   if (verify_hash($row['password'], $pass) !== false) {
-    $admin_attrs = json_decode($row['attributes'], true) ?? [];
-
-    // Check force_pw_update
-    if (intval($admin_attrs['force_pw_update'] ?? 0) == 1) {
-      $_SESSION['pending_pw_update'] = true;
-    }
-
     // check for tfa authenticators
     $authenticators = get_tfa($user);
     if (isset($authenticators['additional']) && is_array($authenticators['additional']) && count($authenticators['additional']) > 0) {
@@ -181,10 +163,6 @@ function domainadmin_login($user, $pass){
       // Reactivate TFA if it was set to "deactivate TFA for next login"
       $stmt = $pdo->prepare("UPDATE `tfa` SET `active`='1' WHERE `username` = :user");
       $stmt->execute(array(':user' => $user));
-      // Check force_tfa: only force setup if NO TFA exists at all
-      if (intval($admin_attrs['force_tfa'] ?? 0) == 1 && !tfa_exists($user)) {
-        $_SESSION['pending_tfa_setup'] = true;
-      }
       $_SESSION['return'][] =  array(
         'type' => 'success',
         'log' => array(__FUNCTION__, $user, '*'),
@@ -308,10 +286,6 @@ function user_login($user, $pass, $extra = null){
               // Reactivate TFA if it was set to "deactivate TFA for next login"
               $stmt = $pdo->prepare("UPDATE `tfa` SET `active`='1' WHERE `username` = :user");
               $stmt->execute(array(':user' => $user));
-              // Check force_tfa: only force setup if NO TFA exists at all
-              if (intval($row['attributes']['force_tfa']) == 1 && !tfa_exists($user)) {
-                $_SESSION['pending_tfa_setup'] = true;
-              }
               $_SESSION['return'][] =  array(
                 'type' => 'success',
                 'log' => array(__FUNCTION__, $user, '*', 'Provider: Keycloak'),
@@ -364,10 +338,6 @@ function user_login($user, $pass, $extra = null){
             // Reactivate TFA if it was set to "deactivate TFA for next login"
             $stmt = $pdo->prepare("UPDATE `tfa` SET `active`='1' WHERE `username` = :user");
             $stmt->execute(array(':user' => $user));
-            // Check force_tfa: only force setup if NO TFA exists at all
-            if (intval($row['attributes']['force_tfa']) == 1 && !tfa_exists($user)) {
-              $_SESSION['pending_tfa_setup'] = true;
-            }
             $_SESSION['return'][] =  array(
               'type' => 'success',
               'log' => array(__FUNCTION__, $user, '*', 'Provider: LDAP'),
@@ -411,10 +381,6 @@ function user_login($user, $pass, $extra = null){
             // Reactivate TFA if it was set to "deactivate TFA for next login"
             $stmt = $pdo->prepare("UPDATE `tfa` SET `active`='1' WHERE `username` = :user");
             $stmt->execute(array(':user' => $user));
-            // Check force_tfa: only force setup if NO TFA exists at all
-            if (intval($row['attributes']['force_tfa']) == 1 && !tfa_exists($user)) {
-              $_SESSION['pending_tfa_setup'] = true;
-            }
             $_SESSION['return'][] =  array(
               'type' => 'success',
               'log' => array(__FUNCTION__, $user, '*', 'Provider: mailcow'),

data/web/inc/functions.docker.inc.php

@@ -4,12 +4,12 @@ function docker($action, $service_name = null, $attr1 = null, $attr2 = null, $ex
   global $redis;
   $curl = curl_init();
   curl_setopt($curl, CURLOPT_HTTPHEADER,array('Content-Type: application/json' ));
-  // We are using our mail certificates for dockerapi, the names will not match, the certs are trusted anyway
+  // We are using our mail certificates for controller, the names will not match, the certs are trusted anyway
   curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 0);
   curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, 0);
   switch($action) {
     case 'get_id':
-      curl_setopt($curl, CURLOPT_URL, 'https://dockerapi:443/containers/json');
+      curl_setopt($curl, CURLOPT_URL, 'https://controller:443/containers/json');
       curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
       curl_setopt($curl, CURLOPT_POST, 0);
       curl_setopt($curl, CURLOPT_TIMEOUT, $DOCKER_TIMEOUT);
@@ -35,7 +35,7 @@ function docker($action, $service_name = null, $attr1 = null, $attr2 = null, $ex
       return false;
     break;
     case 'containers':
-      curl_setopt($curl, CURLOPT_URL, 'https://dockerapi:443/containers/json');
+      curl_setopt($curl, CURLOPT_URL, 'https://controller:443/containers/json');
       curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
       curl_setopt($curl, CURLOPT_POST, 0);
       curl_setopt($curl, CURLOPT_TIMEOUT, $DOCKER_TIMEOUT);
@@ -63,7 +63,7 @@ function docker($action, $service_name = null, $attr1 = null, $attr2 = null, $ex
     break;
     case 'info':
       if (empty($service_name)) {
-        curl_setopt($curl, CURLOPT_URL, 'https://dockerapi:443/containers/json');
+        curl_setopt($curl, CURLOPT_URL, 'https://controller:443/containers/json');
         curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
         curl_setopt($curl, CURLOPT_POST, 0);
         curl_setopt($curl, CURLOPT_TIMEOUT, $DOCKER_TIMEOUT);
@@ -71,7 +71,7 @@ function docker($action, $service_name = null, $attr1 = null, $attr2 = null, $ex
       else {
         $container_id = docker('get_id', $service_name);
         if (ctype_xdigit($container_id)) {
-          curl_setopt($curl, CURLOPT_URL, 'https://dockerapi:443/containers/' . $container_id . '/json');
+          curl_setopt($curl, CURLOPT_URL, 'https://controller:443/containers/' . $container_id . '/json');
         }
         else {
           return false;
@@ -102,7 +102,7 @@ function docker($action, $service_name = null, $attr1 = null, $attr2 = null, $ex
             }
           }
           else {
-            if (isset($decoded_response['Config']['Labels']['com.docker.compose.project']) 
+            if (isset($decoded_response['Config']['Labels']['com.docker.compose.project'])
               && strtolower($decoded_response['Config']['Labels']['com.docker.compose.project']) == strtolower(getenv('COMPOSE_PROJECT_NAME'))) {
               unset($container['Config']['Env']);
               $out[$decoded_response['Config']['Labels']['com.docker.compose.service']]['State'] = $decoded_response['State'];
@@ -123,7 +123,7 @@ function docker($action, $service_name = null, $attr1 = null, $attr2 = null, $ex
       if (!empty($attr1)) {
         $container_id = docker('get_id', $service_name);
         if (ctype_xdigit($container_id) && ctype_alnum($attr1)) {
-          curl_setopt($curl, CURLOPT_URL, 'https://dockerapi:443/containers/' . $container_id . '/' . $attr1);
+          curl_setopt($curl, CURLOPT_URL, 'https://controller:443/containers/' . $container_id . '/' . $attr1);
           curl_setopt($curl, CURLOPT_POST, 1);
           curl_setopt($curl, CURLOPT_TIMEOUT, $DOCKER_TIMEOUT);
           if (!empty($attr2)) {
@@ -157,7 +157,7 @@ function docker($action, $service_name = null, $attr1 = null, $attr2 = null, $ex
       }
 
       $container_id = $service_name;
-      curl_setopt($curl, CURLOPT_URL, 'https://dockerapi:443/container/' . $container_id . '/stats/update');
+      curl_setopt($curl, CURLOPT_URL, 'https://controller:443/container/' . $container_id . '/stats/update');
       curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
       curl_setopt($curl, CURLOPT_POST, 1);
       curl_setopt($curl, CURLOPT_TIMEOUT, $DOCKER_TIMEOUT);
@@ -175,7 +175,7 @@ function docker($action, $service_name = null, $attr1 = null, $attr2 = null, $ex
       return false;
     break;
     case 'host_stats':
-      curl_setopt($curl, CURLOPT_URL, 'https://dockerapi:443/host/stats');
+      curl_setopt($curl, CURLOPT_URL, 'https://controller:443/host/stats');
       curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
       curl_setopt($curl, CURLOPT_POST, 0);
       curl_setopt($curl, CURLOPT_TIMEOUT, $DOCKER_TIMEOUT);

data/web/inc/functions.domain_admin.inc.php

@@ -195,23 +195,17 @@ function domain_admin($_action, $_data = null) {
               ));
             }
           }
-          $force_tfa = intval($_data['force_tfa'] ?? 0) ? 1 : 0;
-          $force_pw_update = intval($_data['force_pw_update'] ?? 0) ? 1 : 0;
           if (!empty($password)) {
             if (password_check($password, $password2) !== true) {
               return false;
             }
             $password_hashed = hash_password($password);
-            $stmt = $pdo->prepare("UPDATE `admin` SET `username` = :username_new, `active` = :active, `password` = :password_hashed,
-              `attributes` = JSON_SET(COALESCE(`attributes`, '{}'), '$.force_tfa', :force_tfa, '$.force_pw_update', :force_pw_update)
-              WHERE `username` = :username");
+            $stmt = $pdo->prepare("UPDATE `admin` SET `username` = :username_new, `active` = :active, `password` = :password_hashed WHERE `username` = :username");
             $stmt->execute(array(
               ':password_hashed' => $password_hashed,
               ':username_new' => $username_new,
               ':username' => $username,
-              ':active' => $active,
-              ':force_tfa' => strval($force_tfa),
-              ':force_pw_update' => strval($force_pw_update)
+              ':active' => $active
             ));
             if (isset($_data['disable_tfa'])) {
               $stmt = $pdo->prepare("UPDATE `tfa` SET `active` = '0' WHERE `username` = :username");
@@ -223,15 +217,11 @@ function domain_admin($_action, $_data = null) {
             }
           }
           else {
-            $stmt = $pdo->prepare("UPDATE `admin` SET `username` = :username_new, `active` = :active,
-              `attributes` = JSON_SET(COALESCE(`attributes`, '{}'), '$.force_tfa', :force_tfa, '$.force_pw_update', :force_pw_update)
-              WHERE `username` = :username");
+            $stmt = $pdo->prepare("UPDATE `admin` SET `username` = :username_new, `active` = :active WHERE `username` = :username");
             $stmt->execute(array(
               ':username_new' => $username_new,
               ':username' => $username,
-              ':active' => $active,
-              ':force_tfa' => strval($force_tfa),
-              ':force_pw_update' => strval($force_pw_update)
+              ':active' => $active
             ));
             if (isset($_data['disable_tfa'])) {
               $stmt = $pdo->prepare("UPDATE `tfa` SET `active` = '0' WHERE `username` = :username");
@@ -254,37 +244,31 @@ function domain_admin($_action, $_data = null) {
       // Can only edit itself
       elseif ($_SESSION['mailcow_cc_role'] == "domainadmin") {
         $username = $_SESSION['mailcow_cc_username'];
-        $password_old		= $_data['user_old_pass'] ?? '';
+        $password_old		= $_data['user_old_pass'];
         $password_new	= $_data['user_new_pass'];
         $password_new2	= $_data['user_new_pass2'];
 
-        // Only verify old password if this is NOT a forced password update
-        if (empty($_SESSION['pending_pw_update'])) {
-          $stmt = $pdo->prepare("SELECT `password` FROM `admin`
-              WHERE `username` = :user");
-          $stmt->execute(array(':user' => $username));
-          $row = $stmt->fetch(PDO::FETCH_ASSOC);
-          if (!verify_hash($row['password'], $password_old)) {
-            $_SESSION['return'][] = array(
-              'type' => 'danger',
-              'log' => array(__FUNCTION__, $_action, $_data_log),
-              'msg' => 'access_denied'
-            );
-            return false;
-          }
+        $stmt = $pdo->prepare("SELECT `password` FROM `admin`
+            WHERE `username` = :user");
+        $stmt->execute(array(':user' => $username));
+        $row = $stmt->fetch(PDO::FETCH_ASSOC);
+        if (!verify_hash($row['password'], $password_old)) {
+          $_SESSION['return'][] = array(
+            'type' => 'danger',
+            'log' => array(__FUNCTION__, $_action, $_data_log),
+            'msg' => 'access_denied'
+          );
+          return false;
         }
         if (password_check($password_new, $password_new2) !== true) {
           return false;
         }
         $password_hashed = hash_password($password_new);
-        $stmt = $pdo->prepare("UPDATE `admin` SET `password` = :password_hashed,
-          `attributes` = JSON_SET(COALESCE(`attributes`, '{}'), '$.force_pw_update', '0')
-          WHERE `username` = :username");
+        $stmt = $pdo->prepare("UPDATE `admin` SET `password` = :password_hashed WHERE `username` = :username");
         $stmt->execute(array(
           ':password_hashed' => $password_hashed,
           ':username' => $username
         ));
-        unset($_SESSION['pending_pw_update']);
         $_SESSION['return'][] = array(
           'type' => 'success',
           'log' => array(__FUNCTION__, $_action, $_data_log),
@@ -376,11 +360,9 @@ function domain_admin($_action, $_data = null) {
         `tfa`.`active` AS `tfa_active`,
         `domain_admins`.`username`,
         `domain_admins`.`created`,
-        `domain_admins`.`active` AS `active`,
-        `admin`.`attributes` AS `attributes`
+        `domain_admins`.`active` AS `active`
           FROM `domain_admins`
           LEFT OUTER JOIN `tfa` ON `tfa`.`username`=`domain_admins`.`username`
-          LEFT OUTER JOIN `admin` ON `admin`.`username`=`domain_admins`.`username`
             WHERE `domain_admins`.`username`= :domain_admin");
       $stmt->execute(array(
         ':domain_admin' => $_data
@@ -395,7 +377,6 @@ function domain_admin($_action, $_data = null) {
       $domainadmindata['active'] = $row['active'];
       $domainadmindata['active_int'] = $row['active'];
       $domainadmindata['created'] = $row['created'];
-      $domainadmindata['attributes'] = json_decode($row['attributes'], true) ?? array('force_tfa' => '0', 'force_pw_update' => '0');
       // GET SELECTED
       $stmt = $pdo->prepare("SELECT `domain` FROM `domain`
         WHERE `domain` IN (

data/web/inc/functions.inc.php

@@ -524,6 +524,16 @@ function sys_mail($_data) {
     'msg' => 'Mass mail job completed, sent ' . count($rcpts) . ' mails'
   );
 }
+function get_remote_ip($use_x_real_ip = true) {
+    $remote = $_SERVER['REMOTE_ADDR'];
+    if ($use_x_real_ip && !empty($_SERVER['HTTP_X_REAL_IP'])) {
+      $remote = $_SERVER['HTTP_X_REAL_IP'];
+    }
+    if (filter_var($remote, FILTER_VALIDATE_IP) === false) {
+      $remote = '0.0.0.0';
+    }
+    return $remote;
+}
 function logger($_data = false) {
   /*
   logger() will be called as last function
@@ -1033,24 +1043,20 @@ function edit_user_account($_data) {
   }
 
   // edit password
-  $is_forced_pw_update = !empty($_SESSION['pending_pw_update']);
-  if (((!empty($password_old) || $is_forced_pw_update) && !empty($_data['user_new_pass']) && !empty($_data['user_new_pass2']))) {
-    // Only verify old password if this is NOT a forced password update
-    if (!$is_forced_pw_update) {
-      $stmt = $pdo->prepare("SELECT `password` FROM `mailbox`
-          WHERE `kind` NOT REGEXP 'location|thing|group'
-            AND `username` = :user AND authsource = 'mailcow'");
-      $stmt->execute(array(':user' => $username));
-      $row = $stmt->fetch(PDO::FETCH_ASSOC);
+  if (!empty($password_old) && !empty($_data['user_new_pass']) && !empty($_data['user_new_pass2'])) {
+    $stmt = $pdo->prepare("SELECT `password` FROM `mailbox`
+        WHERE `kind` NOT REGEXP 'location|thing|group'
+          AND `username` = :user AND authsource = 'mailcow'");
+    $stmt->execute(array(':user' => $username));
+    $row = $stmt->fetch(PDO::FETCH_ASSOC);
 
-      if (!verify_hash($row['password'], $password_old)) {
-        $_SESSION['return'][] =  array(
-          'type' => 'danger',
-          'log' => array(__FUNCTION__, $_data_log),
-          'msg' => 'access_denied'
-        );
-        return false;
-      }
+    if (!verify_hash($row['password'], $password_old)) {
+      $_SESSION['return'][] =  array(
+        'type' => 'danger',
+        'log' => array(__FUNCTION__, $_data_log),
+        'msg' => 'access_denied'
+      );
+      return false;
     }
 
     $password_new = $_data['user_new_pass'];
@@ -1214,52 +1220,50 @@ function set_tfa($_data) {
   global $iam_settings;
 
   $_data_log = $_data;
+  $access_denied = null;
   !isset($_data_log['confirm_password']) ?: $_data_log['confirm_password'] = '*';
+  $username = $_SESSION['mailcow_cc_username'];
 
-  // skip password check if this is a forced TFA enrollment after login
-  if (!empty($_SESSION['pending_tfa_setup'])) {
-    $username = $_SESSION['mailcow_cc_username'];
-    if (empty($username) || !isset($_SESSION['mailcow_cc_role'])) {
-      $_SESSION['return'][] = array('type' => 'danger', 'log' => array(__FUNCTION__, $_data_log), 'msg' => 'access_denied');
-      return false;
+  // check for empty user and role
+  if (!isset($_SESSION['mailcow_cc_role']) || empty($username)) $access_denied = true;
+
+  // check admin confirm password
+  if ($access_denied === null) {
+    $stmt = $pdo->prepare("SELECT `password` FROM `admin`
+        WHERE `username` = :username");
+    $stmt->execute(array(':username' => $username));
+    $row = $stmt->fetch(PDO::FETCH_ASSOC);
+    if ($row) {
+      if (!verify_hash($row['password'], $_data["confirm_password"])) $access_denied = true;
+      else $access_denied = false;
     }
-  } else {
-    $username = $_SESSION['mailcow_cc_username'];
-    $access_denied = null;
+  }
 
-    if (!isset($_SESSION['mailcow_cc_role']) || empty($username)) $access_denied = true;
-
-    // check admin password
-    if ($access_denied === null) {
-      $stmt = $pdo->prepare("SELECT `password` FROM `admin` WHERE `username` = :username");
-      $stmt->execute(array(':username' => $username));
-      $row = $stmt->fetch(PDO::FETCH_ASSOC);
-      if ($row) {
+  // check mailbox confirm password
+  if ($access_denied === null) {
+    $stmt = $pdo->prepare("SELECT `password`, `authsource` FROM `mailbox`
+        WHERE `username` = :username");
+    $stmt->execute(array(':username' => $username));
+    $row = $stmt->fetch(PDO::FETCH_ASSOC);
+    if ($row) {
+      if ($row['authsource'] == 'ldap'){
+        if (!ldap_mbox_login($username, $_data["confirm_password"], $iam_settings)) $access_denied = true;
+        else $access_denied = false;
+      } else {
         if (!verify_hash($row['password'], $_data["confirm_password"])) $access_denied = true;
         else $access_denied = false;
       }
     }
+  }
 
-    // check mailbox password
-    if ($access_denied === null) {
-      $stmt = $pdo->prepare("SELECT `password`, `authsource` FROM `mailbox` WHERE `username` = :username");
-      $stmt->execute(array(':username' => $username));
-      $row = $stmt->fetch(PDO::FETCH_ASSOC);
-      if ($row) {
-        if ($row['authsource'] == 'ldap'){
-          if (!ldap_mbox_login($username, $_data["confirm_password"], $iam_settings)) $access_denied = true;
-          else $access_denied = false;
-        } else {
-          if (!verify_hash($row['password'], $_data["confirm_password"])) $access_denied = true;
-          else $access_denied = false;
-        }
-      }
-    }
-
-    if ($access_denied) {
-      $_SESSION['return'][] = array('type' => 'danger', 'log' => array(__FUNCTION__, $_data_log), 'msg' => 'access_denied');
-      return false;
-    }
+  // set access_denied error
+  if ($access_denied){
+    $_SESSION['return'][] =  array(
+      'type' => 'danger',
+      'log' => array(__FUNCTION__, $_data_log),
+      'msg' => 'access_denied'
+    );
+    return false;
   }
 
   switch ($_data["tfa_method"]) {
@@ -1312,7 +1316,6 @@ function set_tfa($_data) {
         );
         return false;
       }
-      unset($_SESSION['pending_tfa_setup']);
       $_SESSION['return'][] =  array(
         'type' => 'success',
         'log' => array(__FUNCTION__, $_data_log),
@@ -1326,7 +1329,6 @@ function set_tfa($_data) {
         //$stmt->execute(array(':username' => $username));
         $stmt = $pdo->prepare("INSERT INTO `tfa` (`username`, `key_id`, `authmech`, `secret`, `active`) VALUES (?, ?, 'totp', ?, '1')");
         $stmt->execute(array($username, $key_id, $_POST['totp_secret']));
-        unset($_SESSION['pending_tfa_setup']);
         $_SESSION['return'][] =  array(
           'type' => 'success',
           'log' => array(__FUNCTION__, $_data_log),
@@ -1355,7 +1357,6 @@ function set_tfa($_data) {
             0
         ));
 
-        unset($_SESSION['pending_tfa_setup']);
         $_SESSION['return'][] =  array(
             'type' => 'success',
             'log' => array(__FUNCTION__, $_data_log),
@@ -1363,25 +1364,6 @@ function set_tfa($_data) {
         );
     break;
     case "none":
-      // Block TFA removal if force_tfa policy is active
-      $is_forced_tfa = false;
-      if ($_SESSION['mailcow_cc_role'] === 'user') {
-        $stmt_check = $pdo->prepare("SELECT JSON_EXTRACT(`attributes`, '$.force_tfa') FROM `mailbox` WHERE `username` = ?");
-        $stmt_check->execute(array($username));
-        $is_forced_tfa = ($stmt_check->fetchColumn() == '1');
-      } else {
-        $stmt_check = $pdo->prepare("SELECT JSON_EXTRACT(`attributes`, '$.force_tfa') FROM `admin` WHERE `username` = ?");
-        $stmt_check->execute(array($username));
-        $is_forced_tfa = ($stmt_check->fetchColumn() == '1');
-      }
-      if ($is_forced_tfa) {
-        $_SESSION['return'][] =  array(
-          'type' => 'danger',
-          'log' => array(__FUNCTION__, $_data_log),
-          'msg' => 'tfa_removal_blocked'
-        );
-        return false;
-      }
       $stmt = $pdo->prepare("DELETE FROM `tfa` WHERE `username` = :username");
       $stmt->execute(array(':username' => $username));
       $_SESSION['return'][] =  array(
@@ -1634,26 +1616,6 @@ function unset_tfa_key($_data) {
       return false;
     }
 
-    // Block key removal if force_tfa policy is active
-    $is_forced_tfa = false;
-    if ($_SESSION['mailcow_cc_role'] === 'user') {
-      $stmt_check = $pdo->prepare("SELECT JSON_EXTRACT(`attributes`, '$.force_tfa') FROM `mailbox` WHERE `username` = ?");
-      $stmt_check->execute(array($username));
-      $is_forced_tfa = ($stmt_check->fetchColumn() == '1');
-    } else {
-      $stmt_check = $pdo->prepare("SELECT JSON_EXTRACT(`attributes`, '$.force_tfa') FROM `admin` WHERE `username` = ?");
-      $stmt_check->execute(array($username));
-      $is_forced_tfa = ($stmt_check->fetchColumn() == '1');
-    }
-    if ($is_forced_tfa) {
-      $_SESSION['return'][] =  array(
-        'type' => 'danger',
-        'log' => array(__FUNCTION__, $_data_log),
-        'msg' => 'tfa_removal_blocked'
-      );
-      return false;
-    }
-
     // check if it's last key
     $stmt = $pdo->prepare("SELECT COUNT(*) AS `keys` FROM `tfa`
       WHERE `username` = :username AND `active` = '1'");
@@ -1686,15 +1648,6 @@ function unset_tfa_key($_data) {
     return false;
   }
 }
-function tfa_exists($username) {
-  global $pdo;
-  if (empty($username)) {
-    return false;
-  }
-  $stmt = $pdo->prepare("SELECT COUNT(*) as count FROM `tfa` WHERE `username` = :username");
-  $stmt->execute(array(':username' => $username));
-  return $stmt->fetch(PDO::FETCH_ASSOC)['count'] > 0;
-}
 function get_tfa($username = null, $id = null) {
   global $pdo;
   if (empty($username) && isset($_SESSION['mailcow_cc_username'])) {
@@ -3497,49 +3450,6 @@ function set_user_loggedin_session($user) {
   unset($_SESSION['pending_mailcow_cc_role']);
   unset($_SESSION['pending_tfa_methods']);
 }
-function protect_route($allowed_roles = ['admin', 'domainadmin', 'user'], $redirects = []) {
-  // Check if user is authenticated
-  if (!isset($_SESSION['mailcow_cc_role'])) {
-    if (isset($redirects['unauthenticated'])) {
-      header('Location: ' . $redirects['unauthenticated']);
-    } else {
-      header('Location: /');
-    }
-    exit();
-  }
-
-  // Check for pending actions (2FA setup, password update)
-  if (!empty($_SESSION['pending_tfa_setup']) || !empty($_SESSION['pending_pw_update'])) {
-    $pending_redirect = '/';
-    if ($_SESSION['mailcow_cc_role'] === 'admin') {
-      $pending_redirect = '/admin';
-    } elseif ($_SESSION['mailcow_cc_role'] === 'domainadmin') {
-      $pending_redirect = '/domainadmin';
-    }
-    header('Location: ' . $pending_redirect);
-    exit();
-  }
-
-  // Check if user's role is in the allowed roles for the route
-  if (!in_array($_SESSION['mailcow_cc_role'], $allowed_roles)) {
-    if (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'admin') {
-      header('Location: /admin/dashboard');
-      exit();
-    }
-    elseif (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'domainadmin') {
-      header('Location: /domainadmin/mailbox');
-      exit();
-    }
-    elseif (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'user') {
-      header('Location: /user');
-      exit();
-    }
-    else {
-      header('Location: /');
-      exit();
-    }
-  }
-}
 function get_logs($application, $lines = false) {
   if ($lines === false) {
     $lines = $GLOBALS['LOG_LINES'] - 1;

data/web/inc/functions.mailbox.inc.php

@@ -475,10 +475,11 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
             ':delete2duplicates' => $delete2duplicates,
             ':active' => $active,
           ));
+          $id = $pdo->lastInsertId();
           $_SESSION['return'][] = array(
             'type' => 'success',
             'log' => array(__FUNCTION__, $_action, $_type, $_data_log, $_attr),
-            'msg' => array('mailbox_modified', $username)
+            'msg' => array('mailbox_modified', $username, $id)
           );
         break;
         case 'domain':
@@ -1083,7 +1084,6 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
           }
           $active = (isset($_data['active'])) ? intval($_data['active']) : intval($MAILBOX_DEFAULT_ATTRIBUTES['active']);
           $force_pw_update = (isset($_data['force_pw_update'])) ? intval($_data['force_pw_update']) : intval($MAILBOX_DEFAULT_ATTRIBUTES['force_pw_update']);
-          $force_tfa = (isset($_data['force_tfa'])) ? intval($_data['force_tfa']) : intval($MAILBOX_DEFAULT_ATTRIBUTES['force_tfa']);
           $tls_enforce_in = (isset($_data['tls_enforce_in'])) ? intval($_data['tls_enforce_in']) : intval($MAILBOX_DEFAULT_ATTRIBUTES['tls_enforce_in']);
           $tls_enforce_out = (isset($_data['tls_enforce_out'])) ? intval($_data['tls_enforce_out']) : intval($MAILBOX_DEFAULT_ATTRIBUTES['tls_enforce_out']);
           $sogo_access = (isset($_data['sogo_access'])) ? intval($_data['sogo_access']) : intval($MAILBOX_DEFAULT_ATTRIBUTES['sogo_access']);
@@ -1100,12 +1100,10 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
           $attribute_hash = (!empty($_data['attribute_hash'])) ? $_data['attribute_hash'] : '';
           if (in_array($authsource, array('keycloak', 'generic-oidc', 'ldap'))){
             $force_pw_update = 0;
-            $force_tfa = 0;
           }
           $mailbox_attrs = json_encode(
             array(
               'force_pw_update' => strval($force_pw_update),
-              'force_tfa' => strval($force_tfa),
               'tls_enforce_in' => strval($tls_enforce_in),
               'tls_enforce_out' => strval($tls_enforce_out),
               'sogo_access' => strval($sogo_access),
@@ -1723,7 +1721,6 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
           $attr["rl_frame"]                    = (!empty($_data['rl_frame'])) ? $_data['rl_frame'] : "s";
           $attr["rl_value"]                    = (!empty($_data['rl_value'])) ? $_data['rl_value'] : "";
           $attr["force_pw_update"]             = isset($_data['force_pw_update']) ? intval($_data['force_pw_update']) : intval($MAILBOX_DEFAULT_ATTRIBUTES['force_pw_update']);
-          $attr["force_tfa"]                   = isset($_data['force_tfa']) ? intval($_data['force_tfa']) : intval($MAILBOX_DEFAULT_ATTRIBUTES['force_tfa']);
           $attr["sogo_access"]                 = isset($_data['sogo_access']) ? intval($_data['sogo_access']) : intval($MAILBOX_DEFAULT_ATTRIBUTES['sogo_access']);
           $attr["active"]                      = isset($_data['active']) ? intval($_data['active']) : 1;
           $attr["tls_enforce_in"]              = isset($_data['tls_enforce_in']) ? intval($_data['tls_enforce_in']) : intval($MAILBOX_DEFAULT_ATTRIBUTES['tls_enforce_in']);
@@ -3069,7 +3066,6 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
             if (!empty($is_now)) {
               $active               = (isset($_data['active'])) ? intval($_data['active']) : $is_now['active'];
               (int)$force_pw_update = (isset($_data['force_pw_update'])) ? intval($_data['force_pw_update']) : intval($is_now['attributes']['force_pw_update']);
-              (int)$force_tfa       = (isset($_data['force_tfa'])) ? intval($_data['force_tfa']) : intval($is_now['attributes']['force_tfa']);
               (int)$sogo_access     = (isset($_data['sogo_access']) && hasACLAccess("sogo_access")) ? intval($_data['sogo_access']) : intval($is_now['attributes']['sogo_access']);
               (int)$imap_access     = (isset($_data['imap_access']) && hasACLAccess("protocol_access")) ? intval($_data['imap_access']) : intval($is_now['attributes']['imap_access']);
               (int)$pop3_access     = (isset($_data['pop3_access']) && hasACLAccess("protocol_access")) ? intval($_data['pop3_access']) : intval($is_now['attributes']['pop3_access']);
@@ -3093,7 +3089,6 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
               }
               if (in_array($authsource, array('keycloak', 'generic-oidc', 'ldap'))){
                 $force_pw_update = 0;
-                $force_tfa = 0;
               }
               $pw_recovery_email    = (isset($_data['pw_recovery_email']) && $authsource == 'mailcow') ? $_data['pw_recovery_email'] : $is_now['attributes']['recovery_email'];
             }
@@ -3365,7 +3360,6 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
                   `quota` = :quota_b,
                   `authsource` = :authsource,
                   `attributes` = JSON_SET(`attributes`, '$.force_pw_update', :force_pw_update),
-                  `attributes` = JSON_SET(`attributes`, '$.force_tfa', :force_tfa),
                   `attributes` = JSON_SET(`attributes`, '$.sogo_access', :sogo_access),
                   `attributes` = JSON_SET(`attributes`, '$.imap_access', :imap_access),
                   `attributes` = JSON_SET(`attributes`, '$.sieve_access', :sieve_access),
@@ -3383,7 +3377,6 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
                 ':quota_b' => $quota_b,
                 ':attribute_hash' => $attribute_hash,
                 ':force_pw_update' => $force_pw_update,
-                ':force_tfa' => $force_tfa,
                 ':sogo_access' => $sogo_access,
                 ':imap_access' => $imap_access,
                 ':pop3_access' => $pop3_access,

data/web/inc/init_db.inc.php

@@ -4,7 +4,7 @@ function init_db_schema()
   try {
     global $pdo;
 
-    $db_version = "19022026_1220";
+    $db_version = "28012026_1000";
 
     $stmt = $pdo->query("SHOW TABLES LIKE 'versions'");
     $num_results = count($stmt->fetchAll(PDO::FETCH_ASSOC));
@@ -76,8 +76,7 @@ function init_db_schema()
           "superadmin" => "TINYINT(1) NOT NULL DEFAULT '0'",
           "created" => "DATETIME(0) NOT NULL DEFAULT NOW(0)",
           "modified" => "DATETIME ON UPDATE NOW(0)",
-          "active" => "TINYINT(1) NOT NULL DEFAULT '1'",
-          "attributes" => "JSON"
+          "active" => "TINYINT(1) NOT NULL DEFAULT '1'"
         ),
         "keys" => array(
           "primary" => array(
@@ -1391,11 +1390,6 @@ function init_db_schema()
     $pdo->query("UPDATE `mailbox` SET `attributes` =  JSON_SET(`attributes`, '$.passwd_update', \"0\") WHERE JSON_VALUE(`attributes`, '$.passwd_update') IS NULL;");
     $pdo->query("UPDATE `mailbox` SET `attributes` =  JSON_SET(`attributes`, '$.relayhost', \"0\") WHERE JSON_VALUE(`attributes`, '$.relayhost') IS NULL;");
     $pdo->query("UPDATE `mailbox` SET `attributes` =  JSON_SET(`attributes`, '$.force_pw_update', \"0\") WHERE JSON_VALUE(`attributes`, '$.force_pw_update') IS NULL;");
-    $pdo->query("UPDATE `mailbox` SET `attributes` =  JSON_SET(`attributes`, '$.force_tfa', \"0\") WHERE JSON_VALUE(`attributes`, '$.force_tfa') IS NULL;");
-    // admin attributes
-    $pdo->query("UPDATE `admin` SET `attributes` = '{}' WHERE `attributes` = '' OR `attributes` IS NULL;");
-    $pdo->query("UPDATE `admin` SET `attributes` =  JSON_SET(`attributes`, '$.force_tfa', \"0\") WHERE JSON_VALUE(`attributes`, '$.force_tfa') IS NULL;");
-    $pdo->query("UPDATE `admin` SET `attributes` =  JSON_SET(`attributes`, '$.force_pw_update', \"0\") WHERE JSON_VALUE(`attributes`, '$.force_pw_update') IS NULL;");
     $pdo->query("UPDATE `mailbox` SET `attributes` =  JSON_SET(`attributes`, '$.sieve_access', \"1\") WHERE JSON_VALUE(`attributes`, '$.sieve_access') IS NULL;");
     $pdo->query("UPDATE `mailbox` SET `attributes` =  JSON_SET(`attributes`, '$.sogo_access', \"1\") WHERE JSON_VALUE(`attributes`, '$.sogo_access') IS NULL;");
     $pdo->query("UPDATE `mailbox` SET `attributes` =  JSON_SET(`attributes`, '$.imap_access', \"1\") WHERE JSON_VALUE(`attributes`, '$.imap_access') IS NULL;");
@@ -1455,7 +1449,6 @@ function init_db_schema()
         "rl_frame" => "s",
         "rl_value" => "",
         "force_pw_update" => intval($GLOBALS['MAILBOX_DEFAULT_ATTRIBUTES']['force_pw_update']),
-        "force_tfa" => intval($GLOBALS['MAILBOX_DEFAULT_ATTRIBUTES']['force_tfa']),
         "sogo_access" => intval($GLOBALS['MAILBOX_DEFAULT_ATTRIBUTES']['sogo_access']),
         "active" => 1,
         "tls_enforce_in" => intval($GLOBALS['MAILBOX_DEFAULT_ATTRIBUTES']['tls_enforce_in']),

data/web/inc/lib/composer.json

@@ -11,7 +11,6 @@
         "directorytree/ldaprecord": "^3.3",
         "twig/twig": "^3.0",
         "stevenmaguire/oauth2-keycloak": "^4.0",
-        "league/oauth2-client": "^2.7",
-        "bacon/bacon-qr-code": "^2.0"
+        "league/oauth2-client": "^2.7"
     }
 }

data/web/inc/lib/composer.lock

@@ -4,62 +4,8 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "50fb4a320500820e36f30eabc45222a0",
+    "content-hash": "8f5a147cdb147b935a158b86f47a4747",
     "packages": [
-        {
-            "name": "bacon/bacon-qr-code",
-            "version": "2.0.8",
-            "source": {
-                "type": "git",
-                "url": "https://github.com/Bacon/BaconQrCode.git",
-                "reference": "8674e51bb65af933a5ffaf1c308a660387c35c22"
-            },
-            "dist": {
-                "type": "zip",
-                "url": "https://api.github.com/repos/Bacon/BaconQrCode/zipball/8674e51bb65af933a5ffaf1c308a660387c35c22",
-                "reference": "8674e51bb65af933a5ffaf1c308a660387c35c22",
-                "shasum": ""
-            },
-            "require": {
-                "dasprid/enum": "^1.0.3",
-                "ext-iconv": "*",
-                "php": "^7.1 || ^8.0"
-            },
-            "require-dev": {
-                "phly/keep-a-changelog": "^2.1",
-                "phpunit/phpunit": "^7 | ^8 | ^9",
-                "spatie/phpunit-snapshot-assertions": "^4.2.9",
-                "squizlabs/php_codesniffer": "^3.4"
-            },
-            "suggest": {
-                "ext-imagick": "to generate QR code images"
-            },
-            "type": "library",
-            "autoload": {
-                "psr-4": {
-                    "BaconQrCode\\": "src/"
-                }
-            },
-            "notification-url": "https://packagist.org/downloads/",
-            "license": [
-                "BSD-2-Clause"
-            ],
-            "authors": [
-                {
-                    "name": "Ben Scholzen 'DASPRiD'",
-                    "email": "mail@dasprids.de",
-                    "homepage": "https://dasprids.de/",
-                    "role": "Developer"
-                }
-            ],
-            "description": "BaconQrCode is a QR code generator for PHP.",
-            "homepage": "https://github.com/Bacon/BaconQrCode",
-            "support": {
-                "issues": "https://github.com/Bacon/BaconQrCode/issues",
-                "source": "https://github.com/Bacon/BaconQrCode/tree/2.0.8"
-            },
-            "time": "2022-12-07T17:46:57+00:00"
-        },
         {
             "name": "bshaffer/oauth2-server-php",
             "version": "v1.11.1",
@@ -191,56 +137,6 @@
             ],
             "time": "2024-02-09T16:56:22+00:00"
         },
-        {
-            "name": "dasprid/enum",
-            "version": "1.0.7",
-            "source": {
-                "type": "git",
-                "url": "https://github.com/DASPRiD/Enum.git",
-                "reference": "b5874fa9ed0043116c72162ec7f4fb50e02e7cce"
-            },
-            "dist": {
-                "type": "zip",
-                "url": "https://api.github.com/repos/DASPRiD/Enum/zipball/b5874fa9ed0043116c72162ec7f4fb50e02e7cce",
-                "reference": "b5874fa9ed0043116c72162ec7f4fb50e02e7cce",
-                "shasum": ""
-            },
-            "require": {
-                "php": ">=7.1 <9.0"
-            },
-            "require-dev": {
-                "phpunit/phpunit": "^7 || ^8 || ^9 || ^10 || ^11",
-                "squizlabs/php_codesniffer": "*"
-            },
-            "type": "library",
-            "autoload": {
-                "psr-4": {
-                    "DASPRiD\\Enum\\": "src/"
-                }
-            },
-            "notification-url": "https://packagist.org/downloads/",
-            "license": [
-                "BSD-2-Clause"
-            ],
-            "authors": [
-                {
-                    "name": "Ben Scholzen 'DASPRiD'",
-                    "email": "mail@dasprids.de",
-                    "homepage": "https://dasprids.de/",
-                    "role": "Developer"
-                }
-            ],
-            "description": "PHP 7.1 enum implementation",
-            "keywords": [
-                "enum",
-                "map"
-            ],
-            "support": {
-                "issues": "https://github.com/DASPRiD/Enum/issues",
-                "source": "https://github.com/DASPRiD/Enum/tree/1.0.7"
-            },
-            "time": "2025-09-16T12:23:56+00:00"
-        },
         {
             "name": "ddeboer/imap",
             "version": "1.13.1",
@@ -318,32 +214,30 @@
         },
         {
             "name": "directorytree/ldaprecord",
-            "version": "v3.8.5",
+            "version": "v2.20.5",
             "source": {
                 "type": "git",
                 "url": "https://github.com/DirectoryTree/LdapRecord.git",
-                "reference": "00e5f088f8c4028d5f398783cccc2e8119a27a65"
+                "reference": "5bd0a5a9d257cf1049ae83055dbba4c3479ddf16"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/DirectoryTree/LdapRecord/zipball/00e5f088f8c4028d5f398783cccc2e8119a27a65",
-                "reference": "00e5f088f8c4028d5f398783cccc2e8119a27a65",
+                "url": "https://api.github.com/repos/DirectoryTree/LdapRecord/zipball/5bd0a5a9d257cf1049ae83055dbba4c3479ddf16",
+                "reference": "5bd0a5a9d257cf1049ae83055dbba4c3479ddf16",
                 "shasum": ""
             },
             "require": {
-                "ext-iconv": "*",
                 "ext-json": "*",
                 "ext-ldap": "*",
-                "illuminate/collections": "^8.0|^9.0|^10.0|^11.0|^12.0",
-                "illuminate/contracts": "^8.0|^9.0|^10.0|^11.0|^12.0",
-                "nesbot/carbon": "*",
-                "php": ">=8.1",
-                "psr/log": "*",
-                "psr/simple-cache": "^1.0|^2.0|^3.0"
+                "illuminate/contracts": "^5.0|^6.0|^7.0|^8.0|^9.0|^10.0",
+                "nesbot/carbon": "^1.0|^2.0",
+                "php": ">=7.3",
+                "psr/log": "^1.0|^2.0|^3.0",
+                "psr/simple-cache": "^1.0|^2.0",
+                "symfony/polyfill-php80": "^1.25",
+                "tightenco/collect": "^5.6|^6.0|^7.0|^8.0|^9.0"
             },
             "require-dev": {
-                "fakerphp/faker": "^1.21",
-                "laravel/pint": "^1.6",
                 "mockery/mockery": "^1.0",
                 "phpunit/phpunit": "^9.0",
                 "spatie/ray": "^1.24"
@@ -390,7 +284,7 @@
                     "type": "github"
                 }
             ],
-            "time": "2025-10-06T02:22:34+00:00"
+            "time": "2023-10-11T16:34:34+00:00"
         },
         {
             "name": "firebase/php-jwt",
@@ -783,107 +677,6 @@
             ],
             "time": "2023-04-17T16:00:45+00:00"
         },
-        {
-            "name": "illuminate/collections",
-            "version": "v10.49.0",
-            "source": {
-                "type": "git",
-                "url": "https://github.com/illuminate/collections.git",
-                "reference": "6ae9c74fa92d4e1824d1b346cd435e8eacdc3232"
-            },
-            "dist": {
-                "type": "zip",
-                "url": "https://api.github.com/repos/illuminate/collections/zipball/6ae9c74fa92d4e1824d1b346cd435e8eacdc3232",
-                "reference": "6ae9c74fa92d4e1824d1b346cd435e8eacdc3232",
-                "shasum": ""
-            },
-            "require": {
-                "illuminate/conditionable": "^10.0",
-                "illuminate/contracts": "^10.0",
-                "illuminate/macroable": "^10.0",
-                "php": "^8.1"
-            },
-            "suggest": {
-                "symfony/var-dumper": "Required to use the dump method (^6.2)."
-            },
-            "type": "library",
-            "extra": {
-                "branch-alias": {
-                    "dev-master": "10.x-dev"
-                }
-            },
-            "autoload": {
-                "files": [
-                    "helpers.php"
-                ],
-                "psr-4": {
-                    "Illuminate\\Support\\": ""
-                }
-            },
-            "notification-url": "https://packagist.org/downloads/",
-            "license": [
-                "MIT"
-            ],
-            "authors": [
-                {
-                    "name": "Taylor Otwell",
-                    "email": "taylor@laravel.com"
-                }
-            ],
-            "description": "The Illuminate Collections package.",
-            "homepage": "https://laravel.com",
-            "support": {
-                "issues": "https://github.com/laravel/framework/issues",
-                "source": "https://github.com/laravel/framework"
-            },
-            "time": "2025-09-08T19:05:53+00:00"
-        },
-        {
-            "name": "illuminate/conditionable",
-            "version": "v10.49.0",
-            "source": {
-                "type": "git",
-                "url": "https://github.com/illuminate/conditionable.git",
-                "reference": "47c700320b7a419f0d188d111f3bbed978fcbd3f"
-            },
-            "dist": {
-                "type": "zip",
-                "url": "https://api.github.com/repos/illuminate/conditionable/zipball/47c700320b7a419f0d188d111f3bbed978fcbd3f",
-                "reference": "47c700320b7a419f0d188d111f3bbed978fcbd3f",
-                "shasum": ""
-            },
-            "require": {
-                "php": "^8.0.2"
-            },
-            "type": "library",
-            "extra": {
-                "branch-alias": {
-                    "dev-master": "10.x-dev"
-                }
-            },
-            "autoload": {
-                "psr-4": {
-                    "Illuminate\\Support\\": ""
-                }
-            },
-            "notification-url": "https://packagist.org/downloads/",
-            "license": [
-                "MIT"
-            ],
-            "authors": [
-                {
-                    "name": "Taylor Otwell",
-                    "email": "taylor@laravel.com"
-                }
-            ],
-            "description": "The Illuminate Conditionable package.",
-            "homepage": "https://laravel.com",
-            "support": {
-                "issues": "https://github.com/laravel/framework/issues",
-                "source": "https://github.com/laravel/framework"
-            },
-            "time": "2025-03-24T11:47:24+00:00"
-        },
         {
             "name": "illuminate/contracts",
             "version": "v10.44.0",
@@ -932,52 +725,6 @@
             },
             "time": "2024-01-15T18:52:32+00:00"
         },
-        {
-            "name": "illuminate/macroable",
-            "version": "v10.49.0",
-            "source": {
-                "type": "git",
-                "url": "https://github.com/illuminate/macroable.git",
-                "reference": "dff667a46ac37b634dcf68909d9d41e94dc97c27"
-            },
-            "dist": {
-                "type": "zip",
-                "url": "https://api.github.com/repos/illuminate/macroable/zipball/dff667a46ac37b634dcf68909d9d41e94dc97c27",
-                "reference": "dff667a46ac37b634dcf68909d9d41e94dc97c27",
-                "shasum": ""
-            },
-            "require": {
-                "php": "^8.1"
-            },
-            "type": "library",
-            "extra": {
-                "branch-alias": {
-                    "dev-master": "10.x-dev"
-                }
-            },
-            "autoload": {
-                "psr-4": {
-                    "Illuminate\\Support\\": ""
-                }
-            },
-            "notification-url": "https://packagist.org/downloads/",
-            "license": [
-                "MIT"
-            ],
-            "authors": [
-                {
-                    "name": "Taylor Otwell",
-                    "email": "taylor@laravel.com"
-                }
-            ],
-            "description": "The Illuminate Macroable package.",
-            "homepage": "https://laravel.com",
-            "support": {
-                "issues": "https://github.com/laravel/framework/issues",
-                "source": "https://github.com/laravel/framework"
-            },
-            "time": "2023-06-05T12:46:42+00:00"
-        },
         {
             "name": "league/oauth2-client",
             "version": "2.7.0",
@@ -2705,6 +2452,145 @@
             ],
             "time": "2023-12-26T14:02:43+00:00"
         },
+        {
+            "name": "symfony/var-dumper",
+            "version": "v6.4.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/var-dumper.git",
+                "reference": "0435a08f69125535336177c29d56af3abc1f69da"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/var-dumper/zipball/0435a08f69125535336177c29d56af3abc1f69da",
+                "reference": "0435a08f69125535336177c29d56af3abc1f69da",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.1",
+                "symfony/deprecation-contracts": "^2.5|^3",
+                "symfony/polyfill-mbstring": "~1.0"
+            },
+            "conflict": {
+                "symfony/console": "<5.4"
+            },
+            "require-dev": {
+                "ext-iconv": "*",
+                "symfony/console": "^5.4|^6.0|^7.0",
+                "symfony/error-handler": "^6.3|^7.0",
+                "symfony/http-kernel": "^5.4|^6.0|^7.0",
+                "symfony/process": "^5.4|^6.0|^7.0",
+                "symfony/uid": "^5.4|^6.0|^7.0",
+                "twig/twig": "^2.13|^3.0.4"
+            },
+            "bin": [
+                "Resources/bin/var-dump-server"
+            ],
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "Resources/functions/dump.php"
+                ],
+                "psr-4": {
+                    "Symfony\\Component\\VarDumper\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides mechanisms for walking through any arbitrary PHP variable",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "debug",
+                "dump"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/var-dumper/tree/v6.4.3"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2024-01-23T14:53:30+00:00"
+        },
+        {
+            "name": "tightenco/collect",
+            "version": "v9.52.7",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/tighten/collect.git",
+                "reference": "b15143cd11fe01a700fcc449df61adc64452fa6d"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/tighten/collect/zipball/b15143cd11fe01a700fcc449df61adc64452fa6d",
+                "reference": "b15143cd11fe01a700fcc449df61adc64452fa6d",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^8.0",
+                "symfony/var-dumper": "^3.4 || ^4.0 || ^5.0 || ^6.0"
+            },
+            "require-dev": {
+                "mockery/mockery": "^1.0",
+                "nesbot/carbon": "^2.23.0",
+                "phpunit/phpunit": "^8.3"
+            },
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "src/Collect/Support/helpers.php",
+                    "src/Collect/Support/alias.php"
+                ],
+                "psr-4": {
+                    "Tightenco\\Collect\\": "src/Collect"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Taylor Otwell",
+                    "email": "taylorotwell@gmail.com"
+                }
+            ],
+            "description": "Collect - Illuminate Collections as a separate package.",
+            "keywords": [
+                "collection",
+                "laravel"
+            ],
+            "support": {
+                "issues": "https://github.com/tighten/collect/issues",
+                "source": "https://github.com/tighten/collect/tree/v9.52.7"
+            },
+            "time": "2023-04-14T21:51:36+00:00"
+        },
         {
             "name": "twig/twig",
             "version": "v3.14.0",
@@ -2788,10 +2674,10 @@
     "packages-dev": [],
     "aliases": [],
     "minimum-stability": "stable",
-    "stability-flags": {},
+    "stability-flags": [],
     "prefer-stable": false,
     "prefer-lowest": false,
-    "platform": {},
-    "platform-dev": {},
+    "platform": [],
+    "platform-dev": [],
     "plugin-api-version": "2.6.0"
 }

data/web/inc/lib/vendor/bacon/bacon-qr-code/LICENSE

@@ -1,22 +0,0 @@
-Copyright (c) 2017, Ben Scholzen 'DASPRiD'
-All rights reserved.
-
-Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions are met:
-
-1. Redistributions of source code must retain the above copyright notice, this
-   list of conditions and the following disclaimer.
-2. Redistributions in binary form must reproduce the above copyright notice,
-   this list of conditions and the following disclaimer in the documentation
-   and/or other materials provided with the distribution.
-
-THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
-ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
-WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
-DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
-ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
-(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
-LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
-ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
-(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
-SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

data/web/inc/lib/vendor/bacon/bacon-qr-code/README.md

@@ -1,39 +0,0 @@
-# QR Code generator
-
-[![PHP CI](https://github.com/Bacon/BaconQrCode/actions/workflows/ci.yml/badge.svg)](https://github.com/Bacon/BaconQrCode/actions/workflows/ci.yml)
-[![codecov](https://codecov.io/gh/Bacon/BaconQrCode/branch/master/graph/badge.svg?token=rD0HcAiEEx)](https://codecov.io/gh/Bacon/BaconQrCode)
-[![Latest Stable Version](https://poser.pugx.org/bacon/bacon-qr-code/v/stable)](https://packagist.org/packages/bacon/bacon-qr-code)
-[![Total Downloads](https://poser.pugx.org/bacon/bacon-qr-code/downloads)](https://packagist.org/packages/bacon/bacon-qr-code)
-[![License](https://poser.pugx.org/bacon/bacon-qr-code/license)](https://packagist.org/packages/bacon/bacon-qr-code)
-
-
-## Introduction
-BaconQrCode is a port of QR code portion of the ZXing library. It currently
-only features the encoder part, but could later receive the decoder part as
-well.
-
-As the Reed Solomon codec implementation of the ZXing library performs quite
-slow in PHP, it was exchanged with the implementation by Phil Karn.
-
-
-## Example usage
-```php
-use BaconQrCode\Renderer\ImageRenderer;
-use BaconQrCode\Renderer\Image\ImagickImageBackEnd;
-use BaconQrCode\Renderer\RendererStyle\RendererStyle;
-use BaconQrCode\Writer;
-
-$renderer = new ImageRenderer(
-    new RendererStyle(400),
-    new ImagickImageBackEnd()
-);
-$writer = new Writer($renderer);
-$writer->writeFile('Hello World!', 'qrcode.png');
-```
-
-## Available image renderer back ends
-BaconQrCode comes with multiple back ends for rendering images. Currently included are the following:
-
-- `ImagickImageBackEnd`: renders raster images using the Imagick library
-- `SvgImageBackEnd`: renders SVG files using XMLWriter
-- `EpsImageBackEnd`: renders EPS files

data/web/inc/lib/vendor/bacon/bacon-qr-code/composer.json

@@ -1,44 +0,0 @@
-{
-    "name": "bacon/bacon-qr-code",
-    "description": "BaconQrCode is a QR code generator for PHP.",
-    "license" : "BSD-2-Clause",
-    "homepage": "https://github.com/Bacon/BaconQrCode",
-    "require": {
-        "php": "^7.1 || ^8.0",
-        "ext-iconv": "*",
-        "dasprid/enum": "^1.0.3"
-    },
-    "suggest": {
-        "ext-imagick": "to generate QR code images"
-    },
-    "authors": [
-        {
-            "name": "Ben Scholzen 'DASPRiD'",
-            "email": "mail@dasprids.de",
-            "homepage": "https://dasprids.de/",
-            "role": "Developer"
-        }
-    ],
-    "autoload": {
-        "psr-4": {
-            "BaconQrCode\\": "src/"
-        }
-    },
-    "require-dev": {
-        "phpunit/phpunit": "^7 | ^8 | ^9",
-        "spatie/phpunit-snapshot-assertions": "^4.2.9",
-        "squizlabs/php_codesniffer": "^3.4",
-        "phly/keep-a-changelog": "^2.1"
-    },
-    "config": {
-        "allow-plugins": {
-            "ocramius/package-versions": true
-        }
-    },
-    "archive": {
-        "exclude": [
-            "/test",
-            "/phpunit.xml.dist"
-        ]
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/phpunit.xml.dist

@@ -1,13 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<phpunit xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="https://schema.phpunit.de/9.3/phpunit.xsd" bootstrap="vendor/autoload.php" colors="true">
-  <coverage processUncoveredFiles="true">
-    <include>
-      <directory suffix=".php">src</directory>
-    </include>
-  </coverage>
-  <testsuites>
-    <testsuite name="BaconQrCode Tests">
-      <directory>./test</directory>
-    </testsuite>
-  </testsuites>
-</phpunit>

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Common/BitArray.php

@@ -1,372 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Common;
-
-use BaconQrCode\Exception\InvalidArgumentException;
-use SplFixedArray;
-
-/**
- * A simple, fast array of bits.
- */
-final class BitArray
-{
-    /**
-     * Bits represented as an array of integers.
-     *
-     * @var SplFixedArray<int>
-     */
-    private $bits;
-
-    /**
-     * Size of the bit array in bits.
-     *
-     * @var int
-     */
-    private $size;
-
-    /**
-     * Creates a new bit array with a given size.
-     */
-    public function __construct(int $size = 0)
-    {
-        $this->size = $size;
-        $this->bits = SplFixedArray::fromArray(array_fill(0, ($this->size + 31) >> 3, 0));
-    }
-
-    /**
-     * Gets the size in bits.
-     */
-    public function getSize() : int
-    {
-        return $this->size;
-    }
-
-    /**
-     * Gets the size in bytes.
-     */
-    public function getSizeInBytes() : int
-    {
-        return ($this->size + 7) >> 3;
-    }
-
-    /**
-     * Ensures that the array has a minimum capacity.
-     */
-    public function ensureCapacity(int $size) : void
-    {
-        if ($size > count($this->bits) << 5) {
-            $this->bits->setSize(($size + 31) >> 5);
-        }
-    }
-
-    /**
-     * Gets a specific bit.
-     */
-    public function get(int $i) : bool
-    {
-        return 0 !== ($this->bits[$i >> 5] & (1 << ($i & 0x1f)));
-    }
-
-    /**
-     * Sets a specific bit.
-     */
-    public function set(int $i) : void
-    {
-        $this->bits[$i >> 5] = $this->bits[$i >> 5] | 1 << ($i & 0x1f);
-    }
-
-    /**
-     * Flips a specific bit.
-     */
-    public function flip(int $i) : void
-    {
-        $this->bits[$i >> 5] ^= 1 << ($i & 0x1f);
-    }
-
-    /**
-     * Gets the next set bit position from a given position.
-     */
-    public function getNextSet(int $from) : int
-    {
-        if ($from >= $this->size) {
-            return $this->size;
-        }
-
-        $bitsOffset = $from >> 5;
-        $currentBits = $this->bits[$bitsOffset];
-        $bitsLength = count($this->bits);
-        $currentBits &= ~((1 << ($from & 0x1f)) - 1);
-
-        while (0 === $currentBits) {
-            if (++$bitsOffset === $bitsLength) {
-                return $this->size;
-            }
-
-            $currentBits = $this->bits[$bitsOffset];
-        }
-
-        $result = ($bitsOffset << 5) + BitUtils::numberOfTrailingZeros($currentBits);
-        return $result > $this->size ? $this->size : $result;
-    }
-
-    /**
-     * Gets the next unset bit position from a given position.
-     */
-    public function getNextUnset(int $from) : int
-    {
-        if ($from >= $this->size) {
-            return $this->size;
-        }
-
-        $bitsOffset = $from >> 5;
-        $currentBits = ~$this->bits[$bitsOffset];
-        $bitsLength = count($this->bits);
-        $currentBits &= ~((1 << ($from & 0x1f)) - 1);
-
-        while (0 === $currentBits) {
-            if (++$bitsOffset === $bitsLength) {
-                return $this->size;
-            }
-
-            $currentBits = ~$this->bits[$bitsOffset];
-        }
-
-        $result = ($bitsOffset << 5) + BitUtils::numberOfTrailingZeros($currentBits);
-        return $result > $this->size ? $this->size : $result;
-    }
-
-    /**
-     * Sets a bulk of bits.
-     */
-    public function setBulk(int $i, int $newBits) : void
-    {
-        $this->bits[$i >> 5] = $newBits;
-    }
-
-    /**
-     * Sets a range of bits.
-     *
-     * @throws InvalidArgumentException if end is smaller than start
-     */
-    public function setRange(int $start, int $end) : void
-    {
-        if ($end < $start) {
-            throw new InvalidArgumentException('End must be greater or equal to start');
-        }
-
-        if ($end === $start) {
-            return;
-        }
-
-        --$end;
-
-        $firstInt = $start >> 5;
-        $lastInt = $end >> 5;
-
-        for ($i = $firstInt; $i <= $lastInt; ++$i) {
-            $firstBit = $i > $firstInt ? 0 : $start & 0x1f;
-            $lastBit = $i < $lastInt ? 31 : $end & 0x1f;
-
-            if (0 === $firstBit && 31 === $lastBit) {
-                $mask = 0x7fffffff;
-            } else {
-                $mask = 0;
-
-                for ($j = $firstBit; $j < $lastBit; ++$j) {
-                    $mask |= 1 << $j;
-                }
-            }
-
-            $this->bits[$i] = $this->bits[$i] | $mask;
-        }
-    }
-
-    /**
-     * Clears the bit array, unsetting every bit.
-     */
-    public function clear() : void
-    {
-        $bitsLength = count($this->bits);
-
-        for ($i = 0; $i < $bitsLength; ++$i) {
-            $this->bits[$i] = 0;
-        }
-    }
-
-    /**
-     * Checks if a range of bits is set or not set.
-
-     * @throws InvalidArgumentException if end is smaller than start
-     */
-    public function isRange(int $start, int $end, bool $value) : bool
-    {
-        if ($end < $start) {
-            throw new InvalidArgumentException('End must be greater or equal to start');
-        }
-
-        if ($end === $start) {
-            return true;
-        }
-
-        --$end;
-
-        $firstInt = $start >> 5;
-        $lastInt = $end >> 5;
-
-        for ($i = $firstInt; $i <= $lastInt; ++$i) {
-            $firstBit = $i > $firstInt ? 0 : $start & 0x1f;
-            $lastBit = $i < $lastInt ? 31 : $end & 0x1f;
-
-            if (0 === $firstBit && 31 === $lastBit) {
-                $mask = 0x7fffffff;
-            } else {
-                $mask = 0;
-
-                for ($j = $firstBit; $j <= $lastBit; ++$j) {
-                    $mask |= 1 << $j;
-                }
-            }
-
-            if (($this->bits[$i] & $mask) !== ($value ? $mask : 0)) {
-                return false;
-            }
-        }
-
-        return true;
-    }
-
-    /**
-     * Appends a bit to the array.
-     */
-    public function appendBit(bool $bit) : void
-    {
-        $this->ensureCapacity($this->size + 1);
-
-        if ($bit) {
-            $this->bits[$this->size >> 5] = $this->bits[$this->size >> 5] | (1 << ($this->size & 0x1f));
-        }
-
-        ++$this->size;
-    }
-
-    /**
-     * Appends a number of bits (up to 32) to the array.
-
-     * @throws InvalidArgumentException if num bits is not between 0 and 32
-     */
-    public function appendBits(int $value, int $numBits) : void
-    {
-        if ($numBits < 0 || $numBits > 32) {
-            throw new InvalidArgumentException('Num bits must be between 0 and 32');
-        }
-
-        $this->ensureCapacity($this->size + $numBits);
-
-        for ($numBitsLeft = $numBits; $numBitsLeft > 0; $numBitsLeft--) {
-            $this->appendBit((($value >> ($numBitsLeft - 1)) & 0x01) === 1);
-        }
-    }
-
-    /**
-     * Appends another bit array to this array.
-     */
-    public function appendBitArray(self $other) : void
-    {
-        $otherSize = $other->getSize();
-        $this->ensureCapacity($this->size + $other->getSize());
-
-        for ($i = 0; $i < $otherSize; ++$i) {
-            $this->appendBit($other->get($i));
-        }
-    }
-
-    /**
-     * Makes an exclusive-or comparision on the current bit array.
-     *
-     * @throws InvalidArgumentException if sizes don't match
-     */
-    public function xorBits(self $other) : void
-    {
-        $bitsLength = count($this->bits);
-        $otherBits  = $other->getBitArray();
-
-        if ($bitsLength !== count($otherBits)) {
-            throw new InvalidArgumentException('Sizes don\'t match');
-        }
-
-        for ($i = 0; $i < $bitsLength; ++$i) {
-            $this->bits[$i] = $this->bits[$i] ^ $otherBits[$i];
-        }
-    }
-
-    /**
-     * Converts the bit array to a byte array.
-     *
-     * @return SplFixedArray<int>
-     */
-    public function toBytes(int $bitOffset, int $numBytes) : SplFixedArray
-    {
-        $bytes = new SplFixedArray($numBytes);
-
-        for ($i = 0; $i < $numBytes; ++$i) {
-            $byte = 0;
-
-            for ($j = 0; $j < 8; ++$j) {
-                if ($this->get($bitOffset)) {
-                    $byte |= 1 << (7 - $j);
-                }
-
-                ++$bitOffset;
-            }
-
-            $bytes[$i] = $byte;
-        }
-
-        return $bytes;
-    }
-
-    /**
-     * Gets the internal bit array.
-     *
-     * @return SplFixedArray<int>
-     */
-    public function getBitArray() : SplFixedArray
-    {
-        return $this->bits;
-    }
-
-    /**
-     * Reverses the array.
-     */
-    public function reverse() : void
-    {
-        $newBits = new SplFixedArray(count($this->bits));
-
-        for ($i = 0; $i < $this->size; ++$i) {
-            if ($this->get($this->size - $i - 1)) {
-                $newBits[$i >> 5] = $newBits[$i >> 5] | (1 << ($i & 0x1f));
-            }
-        }
-
-        $this->bits = $newBits;
-    }
-
-    /**
-     * Returns a string representation of the bit array.
-     */
-    public function __toString() : string
-    {
-        $result = '';
-
-        for ($i = 0; $i < $this->size; ++$i) {
-            if (0 === ($i & 0x07)) {
-                $result .= ' ';
-            }
-
-            $result .= $this->get($i) ? 'X' : '.';
-        }
-
-        return $result;
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Common/BitMatrix.php

@@ -1,313 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Common;
-
-use BaconQrCode\Exception\InvalidArgumentException;
-use SplFixedArray;
-
-/**
- * Bit matrix.
- *
- * Represents a 2D matrix of bits. In function arguments below, and throughout
- * the common module, x is the column position, and y is the row position. The
- * ordering is always x, y. The origin is at the top-left.
- */
-class BitMatrix
-{
-    /**
-     * Width of the bit matrix.
-     *
-     * @var int
-     */
-    private $width;
-
-    /**
-     * Height of the bit matrix.
-     *
-     * @var int
-     */
-    private $height;
-
-    /**
-     * Size in bits of each individual row.
-     *
-     * @var int
-     */
-    private $rowSize;
-
-    /**
-     * Bits representation.
-     *
-     * @var SplFixedArray<int>
-     */
-    private $bits;
-
-    /**
-     * @throws InvalidArgumentException if a dimension is smaller than zero
-     */
-    public function __construct(int $width, int $height = null)
-    {
-        if (null === $height) {
-            $height = $width;
-        }
-
-        if ($width < 1 || $height < 1) {
-            throw new InvalidArgumentException('Both dimensions must be greater than zero');
-        }
-
-        $this->width = $width;
-        $this->height = $height;
-        $this->rowSize = ($width + 31) >> 5;
-        $this->bits = SplFixedArray::fromArray(array_fill(0, $this->rowSize * $height, 0));
-    }
-
-    /**
-     * Gets the requested bit, where true means black.
-     */
-    public function get(int $x, int $y) : bool
-    {
-        $offset = $y * $this->rowSize + ($x >> 5);
-        return 0 !== (BitUtils::unsignedRightShift($this->bits[$offset], ($x & 0x1f)) & 1);
-    }
-
-    /**
-     * Sets the given bit to true.
-     */
-    public function set(int $x, int $y) : void
-    {
-        $offset = $y * $this->rowSize + ($x >> 5);
-        $this->bits[$offset] = $this->bits[$offset] | (1 << ($x & 0x1f));
-    }
-
-    /**
-     * Flips the given bit.
-     */
-    public function flip(int $x, int $y) : void
-    {
-        $offset = $y * $this->rowSize + ($x >> 5);
-        $this->bits[$offset] = $this->bits[$offset] ^ (1 << ($x & 0x1f));
-    }
-
-    /**
-     * Clears all bits (set to false).
-     */
-    public function clear() : void
-    {
-        $max = count($this->bits);
-
-        for ($i = 0; $i < $max; ++$i) {
-            $this->bits[$i] = 0;
-        }
-    }
-
-    /**
-     * Sets a square region of the bit matrix to true.
-     *
-     * @throws InvalidArgumentException if left or top are negative
-     * @throws InvalidArgumentException if width or height are smaller than 1
-     * @throws InvalidArgumentException if region does not fit into the matix
-     */
-    public function setRegion(int $left, int $top, int $width, int $height) : void
-    {
-        if ($top < 0 || $left < 0) {
-            throw new InvalidArgumentException('Left and top must be non-negative');
-        }
-
-        if ($height < 1 || $width < 1) {
-            throw new InvalidArgumentException('Width and height must be at least 1');
-        }
-
-        $right = $left + $width;
-        $bottom = $top + $height;
-
-        if ($bottom > $this->height || $right > $this->width) {
-            throw new InvalidArgumentException('The region must fit inside the matrix');
-        }
-
-        for ($y = $top; $y < $bottom; ++$y) {
-            $offset = $y * $this->rowSize;
-
-            for ($x = $left; $x < $right; ++$x) {
-                $index = $offset + ($x >> 5);
-                $this->bits[$index] = $this->bits[$index] | (1 << ($x & 0x1f));
-            }
-        }
-    }
-
-    /**
-     * A fast method to retrieve one row of data from the matrix as a BitArray.
-     */
-    public function getRow(int $y, BitArray $row = null) : BitArray
-    {
-        if (null === $row || $row->getSize() < $this->width) {
-            $row = new BitArray($this->width);
-        }
-
-        $offset = $y * $this->rowSize;
-
-        for ($x = 0; $x < $this->rowSize; ++$x) {
-            $row->setBulk($x << 5, $this->bits[$offset + $x]);
-        }
-
-        return $row;
-    }
-
-    /**
-     * Sets a row of data from a BitArray.
-     */
-    public function setRow(int $y, BitArray $row) : void
-    {
-        $bits = $row->getBitArray();
-
-        for ($i = 0; $i < $this->rowSize; ++$i) {
-            $this->bits[$y * $this->rowSize + $i] = $bits[$i];
-        }
-    }
-
-    /**
-     * This is useful in detecting the enclosing rectangle of a 'pure' barcode.
-     *
-     * @return int[]|null
-     */
-    public function getEnclosingRectangle() : ?array
-    {
-        $left = $this->width;
-        $top = $this->height;
-        $right = -1;
-        $bottom = -1;
-
-        for ($y = 0; $y < $this->height; ++$y) {
-            for ($x32 = 0; $x32 < $this->rowSize; ++$x32) {
-                $bits = $this->bits[$y * $this->rowSize + $x32];
-
-                if (0 !== $bits) {
-                    if ($y < $top) {
-                        $top = $y;
-                    }
-
-                    if ($y > $bottom) {
-                        $bottom = $y;
-                    }
-
-                    if ($x32 * 32 < $left) {
-                        $bit = 0;
-
-                        while (($bits << (31 - $bit)) === 0) {
-                            $bit++;
-                        }
-
-                        if (($x32 * 32 + $bit) < $left) {
-                            $left = $x32 * 32 + $bit;
-                        }
-                    }
-                }
-
-                if ($x32 * 32 + 31 > $right) {
-                    $bit = 31;
-
-                    while (0 === BitUtils::unsignedRightShift($bits, $bit)) {
-                        --$bit;
-                    }
-
-                    if (($x32 * 32 + $bit) > $right) {
-                        $right = $x32 * 32 + $bit;
-                    }
-                }
-            }
-        }
-
-        $width = $right - $left;
-        $height = $bottom - $top;
-
-        if ($width < 0 || $height < 0) {
-            return null;
-        }
-
-        return [$left, $top, $width, $height];
-    }
-
-    /**
-     * Gets the most top left set bit.
-     *
-     * This is useful in detecting a corner of a 'pure' barcode.
-     *
-     * @return int[]|null
-     */
-    public function getTopLeftOnBit() : ?array
-    {
-        $bitsOffset = 0;
-
-        while ($bitsOffset < count($this->bits) && 0 === $this->bits[$bitsOffset]) {
-            ++$bitsOffset;
-        }
-
-        if (count($this->bits) === $bitsOffset) {
-            return null;
-        }
-
-        $x = intdiv($bitsOffset, $this->rowSize);
-        $y = ($bitsOffset % $this->rowSize) << 5;
-
-        $bits = $this->bits[$bitsOffset];
-        $bit = 0;
-
-        while (0 === ($bits << (31 - $bit))) {
-            ++$bit;
-        }
-
-        $x += $bit;
-
-        return [$x, $y];
-    }
-
-    /**
-     * Gets the most bottom right set bit.
-     *
-     * This is useful in detecting a corner of a 'pure' barcode.
-     *
-     * @return int[]|null
-     */
-    public function getBottomRightOnBit() : ?array
-    {
-        $bitsOffset = count($this->bits) - 1;
-
-        while ($bitsOffset >= 0 && 0 === $this->bits[$bitsOffset]) {
-            --$bitsOffset;
-        }
-
-        if ($bitsOffset < 0) {
-            return null;
-        }
-
-        $x = intdiv($bitsOffset, $this->rowSize);
-        $y = ($bitsOffset % $this->rowSize) << 5;
-
-        $bits = $this->bits[$bitsOffset];
-        $bit  = 0;
-
-        while (0 === BitUtils::unsignedRightShift($bits, $bit)) {
-            --$bit;
-        }
-
-        $x += $bit;
-
-        return [$x, $y];
-    }
-
-    /**
-     * Gets the width of the matrix,
-     */
-    public function getWidth() : int
-    {
-        return $this->width;
-    }
-
-    /**
-     * Gets the height of the matrix.
-     */
-    public function getHeight() : int
-    {
-        return $this->height;
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Common/BitUtils.php

@@ -1,41 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Common;
-
-/**
- * General bit utilities.
- *
- * All utility methods are based on 32-bit integers and also work on 64-bit
- * systems.
- */
-final class BitUtils
-{
-    private function __construct()
-    {
-    }
-
-    /**
-     * Performs an unsigned right shift.
-     *
-     * This is the same as the unsigned right shift operator ">>>" in other
-     * languages.
-     */
-    public static function unsignedRightShift(int $a, int $b) : int
-    {
-        return (
-            $a >= 0
-            ? $a >> $b
-            : (($a & 0x7fffffff) >> $b) | (0x40000000 >> ($b - 1))
-        );
-    }
-
-    /**
-     * Gets the number of trailing zeros.
-     */
-    public static function numberOfTrailingZeros(int $i) : int
-    {
-        $lastPos = strrpos(str_pad(decbin($i), 32, '0', STR_PAD_LEFT), '1');
-        return $lastPos === false ? 32 : 31 - $lastPos;
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Common/CharacterSetEci.php

@@ -1,183 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Common;
-
-use BaconQrCode\Exception\InvalidArgumentException;
-use DASPRiD\Enum\AbstractEnum;
-
-/**
- * Encapsulates a Character Set ECI, according to "Extended Channel Interpretations" 5.3.1.1 of ISO 18004.
- *
- * @method static self CP437()
- * @method static self ISO8859_1()
- * @method static self ISO8859_2()
- * @method static self ISO8859_3()
- * @method static self ISO8859_4()
- * @method static self ISO8859_5()
- * @method static self ISO8859_6()
- * @method static self ISO8859_7()
- * @method static self ISO8859_8()
- * @method static self ISO8859_9()
- * @method static self ISO8859_10()
- * @method static self ISO8859_11()
- * @method static self ISO8859_12()
- * @method static self ISO8859_13()
- * @method static self ISO8859_14()
- * @method static self ISO8859_15()
- * @method static self ISO8859_16()
- * @method static self SJIS()
- * @method static self CP1250()
- * @method static self CP1251()
- * @method static self CP1252()
- * @method static self CP1256()
- * @method static self UNICODE_BIG_UNMARKED()
- * @method static self UTF8()
- * @method static self ASCII()
- * @method static self BIG5()
- * @method static self GB18030()
- * @method static self EUC_KR()
- */
-final class CharacterSetEci extends AbstractEnum
-{
-    protected const CP437 = [[0, 2]];
-    protected const ISO8859_1 = [[1, 3], 'ISO-8859-1'];
-    protected const ISO8859_2 = [[4], 'ISO-8859-2'];
-    protected const ISO8859_3 = [[5], 'ISO-8859-3'];
-    protected const ISO8859_4 = [[6], 'ISO-8859-4'];
-    protected const ISO8859_5 = [[7], 'ISO-8859-5'];
-    protected const ISO8859_6 = [[8], 'ISO-8859-6'];
-    protected const ISO8859_7 = [[9], 'ISO-8859-7'];
-    protected const ISO8859_8 = [[10], 'ISO-8859-8'];
-    protected const ISO8859_9 = [[11], 'ISO-8859-9'];
-    protected const ISO8859_10 = [[12], 'ISO-8859-10'];
-    protected const ISO8859_11 = [[13], 'ISO-8859-11'];
-    protected const ISO8859_12 = [[14], 'ISO-8859-12'];
-    protected const ISO8859_13 = [[15], 'ISO-8859-13'];
-    protected const ISO8859_14 = [[16], 'ISO-8859-14'];
-    protected const ISO8859_15 = [[17], 'ISO-8859-15'];
-    protected const ISO8859_16 = [[18], 'ISO-8859-16'];
-    protected const SJIS = [[20], 'Shift_JIS'];
-    protected const CP1250 = [[21], 'windows-1250'];
-    protected const CP1251 = [[22], 'windows-1251'];
-    protected const CP1252 = [[23], 'windows-1252'];
-    protected const CP1256 = [[24], 'windows-1256'];
-    protected const UNICODE_BIG_UNMARKED = [[25], 'UTF-16BE', 'UnicodeBig'];
-    protected const UTF8 = [[26], 'UTF-8'];
-    protected const ASCII = [[27, 170], 'US-ASCII'];
-    protected const BIG5 = [[28]];
-    protected const GB18030 = [[29], 'GB2312', 'EUC_CN', 'GBK'];
-    protected const EUC_KR = [[30], 'EUC-KR'];
-
-    /**
-     * @var int[]
-     */
-    private $values;
-
-    /**
-     * @var string[]
-     */
-    private $otherEncodingNames;
-
-    /**
-     * @var array<int, self>|null
-     */
-    private static $valueToEci;
-
-    /**
-     * @var array<string, self>|null
-     */
-    private static $nameToEci;
-
-    /**
-     * @param int[] $values
-     */
-    public function __construct(array $values, string ...$otherEncodingNames)
-    {
-        $this->values = $values;
-        $this->otherEncodingNames = $otherEncodingNames;
-    }
-
-    /**
-     * Returns the primary value.
-     */
-    public function getValue() : int
-    {
-        return $this->values[0];
-    }
-
-    /**
-     * Gets character set ECI by value.
-     *
-     * Returns the representing ECI of a given value, or null if it is legal but unsupported.
-     *
-     * @throws InvalidArgumentException if value is not between 0 and 900
-     */
-    public static function getCharacterSetEciByValue(int $value) : ?self
-    {
-        if ($value < 0 || $value >= 900) {
-            throw new InvalidArgumentException('Value must be between 0 and 900');
-        }
-
-        $valueToEci = self::valueToEci();
-
-        if (! array_key_exists($value, $valueToEci)) {
-            return null;
-        }
-
-        return $valueToEci[$value];
-    }
-
-    /**
-     * Returns character set ECI by name.
-     *
-     * Returns the representing ECI of a given name, or null if it is legal but unsupported
-     */
-    public static function getCharacterSetEciByName(string $name) : ?self
-    {
-        $nameToEci = self::nameToEci();
-        $name = strtolower($name);
-
-        if (! array_key_exists($name, $nameToEci)) {
-            return null;
-        }
-
-        return $nameToEci[$name];
-    }
-
-    private static function valueToEci() : array
-    {
-        if (null !== self::$valueToEci) {
-            return self::$valueToEci;
-        }
-
-        self::$valueToEci = [];
-
-        foreach (self::values() as $eci) {
-            foreach ($eci->values as $value) {
-                self::$valueToEci[$value] = $eci;
-            }
-        }
-
-        return self::$valueToEci;
-    }
-
-    private static function nameToEci() : array
-    {
-        if (null !== self::$nameToEci) {
-            return self::$nameToEci;
-        }
-
-        self::$nameToEci = [];
-
-        foreach (self::values() as $eci) {
-            self::$nameToEci[strtolower($eci->name())] = $eci;
-
-            foreach ($eci->otherEncodingNames as $name) {
-                self::$nameToEci[strtolower($name)] = $eci;
-            }
-        }
-
-        return self::$nameToEci;
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Common/EcBlock.php

@@ -1,49 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Common;
-
-/**
- * Encapsulates the parameters for one error-correction block in one symbol version.
- *
- * This includes the number of data codewords, and the number of times a block with these parameters is used
- * consecutively in the QR code version's format.
- */
-final class EcBlock
-{
-    /**
-     * How many times the block is used.
-     *
-     * @var int
-     */
-    private $count;
-
-    /**
-     * Number of data codewords.
-     *
-     * @var int
-     */
-    private $dataCodewords;
-
-    public function __construct(int $count, int $dataCodewords)
-    {
-        $this->count = $count;
-        $this->dataCodewords = $dataCodewords;
-    }
-
-    /**
-     * Returns how many times the block is used.
-     */
-    public function getCount() : int
-    {
-        return $this->count;
-    }
-
-    /**
-     * Returns the number of data codewords.
-     */
-    public function getDataCodewords() : int
-    {
-        return $this->dataCodewords;
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Common/EcBlocks.php

@@ -1,74 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Common;
-
-/**
- * Encapsulates a set of error-correction blocks in one symbol version.
- *
- * Most versions will use blocks of differing sizes within one version, so, this encapsulates the parameters for each
- * set of blocks. It also holds the number of error-correction codewords per block since it will be the same across all
- * blocks within one version.
- */
-final class EcBlocks
-{
-    /**
-     * Number of EC codewords per block.
-     *
-     * @var int
-     */
-    private $ecCodewordsPerBlock;
-
-    /**
-     * List of EC blocks.
-     *
-     * @var EcBlock[]
-     */
-    private $ecBlocks;
-
-    public function __construct(int $ecCodewordsPerBlock, EcBlock ...$ecBlocks)
-    {
-        $this->ecCodewordsPerBlock = $ecCodewordsPerBlock;
-        $this->ecBlocks = $ecBlocks;
-    }
-
-    /**
-     * Returns the number of EC codewords per block.
-     */
-    public function getEcCodewordsPerBlock() : int
-    {
-        return $this->ecCodewordsPerBlock;
-    }
-
-    /**
-     * Returns the total number of EC block appearances.
-     */
-    public function getNumBlocks() : int
-    {
-        $total = 0;
-
-        foreach ($this->ecBlocks as $ecBlock) {
-            $total += $ecBlock->getCount();
-        }
-
-        return $total;
-    }
-
-    /**
-     * Returns the total count of EC codewords.
-     */
-    public function getTotalEcCodewords() : int
-    {
-        return $this->ecCodewordsPerBlock * $this->getNumBlocks();
-    }
-
-    /**
-     * Returns the EC blocks included in this collection.
-     *
-     * @return EcBlock[]
-     */
-    public function getEcBlocks() : array
-    {
-        return $this->ecBlocks;
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Common/ErrorCorrectionLevel.php

@@ -1,63 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Common;
-
-use BaconQrCode\Exception\OutOfBoundsException;
-use DASPRiD\Enum\AbstractEnum;
-
-/**
- * Enum representing the four error correction levels.
- *
- * @method static self L() ~7% correction
- * @method static self M() ~15% correction
- * @method static self Q() ~25% correction
- * @method static self H() ~30% correction
- */
-final class ErrorCorrectionLevel extends AbstractEnum
-{
-    protected const L = [0x01];
-    protected const M = [0x00];
-    protected const Q = [0x03];
-    protected const H = [0x02];
-
-    /**
-     * @var int
-     */
-    private $bits;
-
-    protected function __construct(int $bits)
-    {
-        $this->bits = $bits;
-    }
-
-    /**
-     * @throws OutOfBoundsException if number of bits is invalid
-     */
-    public static function forBits(int $bits) : self
-    {
-        switch ($bits) {
-            case 0:
-                return self::M();
-
-            case 1:
-                return self::L();
-
-            case 2:
-                return self::H();
-
-            case 3:
-                return self::Q();
-        }
-
-        throw new OutOfBoundsException('Invalid number of bits');
-    }
-
-    /**
-     * Returns the two bits used to encode this error correction level.
-     */
-    public function getBits() : int
-    {
-        return $this->bits;
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Common/FormatInformation.php

@@ -1,203 +0,0 @@
-<?php
-/**
- * BaconQrCode
- *
- * @link      http://github.com/Bacon/BaconQrCode For the canonical source repository
- * @copyright 2013 Ben 'DASPRiD' Scholzen
- * @license   http://opensource.org/licenses/BSD-2-Clause Simplified BSD License
- */
-
-namespace BaconQrCode\Common;
-
-/**
- * Encapsulates a QR Code's format information, including the data mask used and error correction level.
- */
-class FormatInformation
-{
-    /**
-     * Mask for format information.
-     */
-    private const FORMAT_INFO_MASK_QR = 0x5412;
-
-    /**
-     * Lookup table for decoding format information.
-     *
-     * See ISO 18004:2006, Annex C, Table C.1
-     */
-    private const FORMAT_INFO_DECODE_LOOKUP = [
-        [0x5412, 0x00],
-        [0x5125, 0x01],
-        [0x5e7c, 0x02],
-        [0x5b4b, 0x03],
-        [0x45f9, 0x04],
-        [0x40ce, 0x05],
-        [0x4f97, 0x06],
-        [0x4aa0, 0x07],
-        [0x77c4, 0x08],
-        [0x72f3, 0x09],
-        [0x7daa, 0x0a],
-        [0x789d, 0x0b],
-        [0x662f, 0x0c],
-        [0x6318, 0x0d],
-        [0x6c41, 0x0e],
-        [0x6976, 0x0f],
-        [0x1689, 0x10],
-        [0x13be, 0x11],
-        [0x1ce7, 0x12],
-        [0x19d0, 0x13],
-        [0x0762, 0x14],
-        [0x0255, 0x15],
-        [0x0d0c, 0x16],
-        [0x083b, 0x17],
-        [0x355f, 0x18],
-        [0x3068, 0x19],
-        [0x3f31, 0x1a],
-        [0x3a06, 0x1b],
-        [0x24b4, 0x1c],
-        [0x2183, 0x1d],
-        [0x2eda, 0x1e],
-        [0x2bed, 0x1f],
-    ];
-
-    /**
-     * Offset i holds the number of 1 bits in the binary representation of i.
-     *
-     * @var int[]
-     */
-    private const BITS_SET_IN_HALF_BYTE = [0, 1, 1, 2, 1, 2, 2, 3, 1, 2, 2, 3, 2, 3, 3, 4];
-
-    /**
-     * Error correction level.
-     *
-     * @var ErrorCorrectionLevel
-     */
-    private $ecLevel;
-
-    /**
-     * Data mask.
-     *
-     * @var int
-     */
-    private $dataMask;
-
-    protected function __construct(int $formatInfo)
-    {
-        $this->ecLevel = ErrorCorrectionLevel::forBits(($formatInfo >> 3) & 0x3);
-        $this->dataMask = $formatInfo & 0x7;
-    }
-
-    /**
-     * Checks how many bits are different between two integers.
-     */
-    public static function numBitsDiffering(int $a, int $b) : int
-    {
-        $a ^= $b;
-
-        return (
-            self::BITS_SET_IN_HALF_BYTE[$a & 0xf]
-            + self::BITS_SET_IN_HALF_BYTE[(BitUtils::unsignedRightShift($a, 4) & 0xf)]
-            + self::BITS_SET_IN_HALF_BYTE[(BitUtils::unsignedRightShift($a, 8) & 0xf)]
-            + self::BITS_SET_IN_HALF_BYTE[(BitUtils::unsignedRightShift($a, 12) & 0xf)]
-            + self::BITS_SET_IN_HALF_BYTE[(BitUtils::unsignedRightShift($a, 16) & 0xf)]
-            + self::BITS_SET_IN_HALF_BYTE[(BitUtils::unsignedRightShift($a, 20) & 0xf)]
-            + self::BITS_SET_IN_HALF_BYTE[(BitUtils::unsignedRightShift($a, 24) & 0xf)]
-            + self::BITS_SET_IN_HALF_BYTE[(BitUtils::unsignedRightShift($a, 28) & 0xf)]
-        );
-    }
-
-    /**
-     * Decodes format information.
-     */
-    public static function decodeFormatInformation(int $maskedFormatInfo1, int $maskedFormatInfo2) : ?self
-    {
-        $formatInfo = self::doDecodeFormatInformation($maskedFormatInfo1, $maskedFormatInfo2);
-
-        if (null !== $formatInfo) {
-            return $formatInfo;
-        }
-
-        // Should return null, but, some QR codes apparently do not mask this info. Try again by actually masking the
-        // pattern first.
-        return self::doDecodeFormatInformation(
-            $maskedFormatInfo1 ^ self::FORMAT_INFO_MASK_QR,
-            $maskedFormatInfo2 ^ self::FORMAT_INFO_MASK_QR
-        );
-    }
-
-    /**
-     * Internal method for decoding format information.
-     */
-    private static function doDecodeFormatInformation(int $maskedFormatInfo1, int $maskedFormatInfo2) : ?self
-    {
-        $bestDifference = PHP_INT_MAX;
-        $bestFormatInfo = 0;
-
-        foreach (self::FORMAT_INFO_DECODE_LOOKUP as $decodeInfo) {
-            $targetInfo = $decodeInfo[0];
-
-            if ($targetInfo === $maskedFormatInfo1 || $targetInfo === $maskedFormatInfo2) {
-                // Found an exact match
-                return new self($decodeInfo[1]);
-            }
-
-            $bitsDifference = self::numBitsDiffering($maskedFormatInfo1, $targetInfo);
-
-            if ($bitsDifference < $bestDifference) {
-                $bestFormatInfo = $decodeInfo[1];
-                $bestDifference = $bitsDifference;
-            }
-
-            if ($maskedFormatInfo1 !== $maskedFormatInfo2) {
-                // Also try the other option
-                $bitsDifference = self::numBitsDiffering($maskedFormatInfo2, $targetInfo);
-
-                if ($bitsDifference < $bestDifference) {
-                    $bestFormatInfo = $decodeInfo[1];
-                    $bestDifference = $bitsDifference;
-                }
-            }
-        }
-
-        // Hamming distance of the 32 masked codes is 7, by construction, so <= 3 bits differing means we found a match.
-        if ($bestDifference <= 3) {
-            return new self($bestFormatInfo);
-        }
-
-        return null;
-    }
-
-    /**
-     * Returns the error correction level.
-     */
-    public function getErrorCorrectionLevel() : ErrorCorrectionLevel
-    {
-        return $this->ecLevel;
-    }
-
-    /**
-     * Returns the data mask.
-     */
-    public function getDataMask() : int
-    {
-        return $this->dataMask;
-    }
-
-    /**
-     * Hashes the code of the EC level.
-     */
-    public function hashCode() : int
-    {
-        return ($this->ecLevel->getBits() << 3) | $this->dataMask;
-    }
-
-    /**
-     * Verifies if this instance equals another one.
-     */
-    public function equals(self $other) : bool
-    {
-        return (
-            $this->ecLevel === $other->ecLevel
-            && $this->dataMask === $other->dataMask
-        );
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Common/Mode.php

@@ -1,79 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Common;
-
-use DASPRiD\Enum\AbstractEnum;
-
-/**
- * Enum representing various modes in which data can be encoded to bits.
- *
- * @method static self TERMINATOR()
- * @method static self NUMERIC()
- * @method static self ALPHANUMERIC()
- * @method static self STRUCTURED_APPEND()
- * @method static self BYTE()
- * @method static self ECI()
- * @method static self KANJI()
- * @method static self FNC1_FIRST_POSITION()
- * @method static self FNC1_SECOND_POSITION()
- * @method static self HANZI()
- */
-final class Mode extends AbstractEnum
-{
-    protected const TERMINATOR = [[0, 0, 0], 0x00];
-    protected const NUMERIC = [[10, 12, 14], 0x01];
-    protected const ALPHANUMERIC = [[9, 11, 13], 0x02];
-    protected const STRUCTURED_APPEND = [[0, 0, 0], 0x03];
-    protected const BYTE = [[8, 16, 16], 0x04];
-    protected const ECI = [[0, 0, 0], 0x07];
-    protected const KANJI = [[8, 10, 12], 0x08];
-    protected const FNC1_FIRST_POSITION = [[0, 0, 0], 0x05];
-    protected const FNC1_SECOND_POSITION = [[0, 0, 0], 0x09];
-    protected const HANZI = [[8, 10, 12], 0x0d];
-
-    /**
-     * @var int[]
-     */
-    private $characterCountBitsForVersions;
-
-    /**
-     * @var int
-     */
-    private $bits;
-
-    /**
-     * @param int[] $characterCountBitsForVersions
-     */
-    protected function __construct(array $characterCountBitsForVersions, int $bits)
-    {
-        $this->characterCountBitsForVersions = $characterCountBitsForVersions;
-        $this->bits = $bits;
-    }
-
-    /**
-     * Returns the number of bits used in a specific QR code version.
-     */
-    public function getCharacterCountBits(Version $version) : int
-    {
-        $number = $version->getVersionNumber();
-
-        if ($number <= 9) {
-            $offset = 0;
-        } elseif ($number <= 26) {
-            $offset = 1;
-        } else {
-            $offset = 2;
-        }
-
-        return $this->characterCountBitsForVersions[$offset];
-    }
-
-    /**
-     * Returns the four bits used to encode this mode.
-     */
-    public function getBits() : int
-    {
-        return $this->bits;
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Common/ReedSolomonCodec.php

@@ -1,468 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Common;
-
-use BaconQrCode\Exception\InvalidArgumentException;
-use BaconQrCode\Exception\RuntimeException;
-use SplFixedArray;
-
-/**
- * Reed-Solomon codec for 8-bit characters.
- *
- * Based on libfec by Phil Karn, KA9Q.
- */
-final class ReedSolomonCodec
-{
-    /**
-     * Symbol size in bits.
-     *
-     * @var int
-     */
-    private $symbolSize;
-
-    /**
-     * Block size in symbols.
-     *
-     * @var int
-     */
-    private $blockSize;
-
-    /**
-     * First root of RS code generator polynomial, index form.
-     *
-     * @var int
-     */
-    private $firstRoot;
-
-    /**
-     * Primitive element to generate polynomial roots, index form.
-     *
-     * @var int
-     */
-    private $primitive;
-
-    /**
-     * Prim-th root of 1, index form.
-     *
-     * @var int
-     */
-    private $iPrimitive;
-
-    /**
-     * RS code generator polynomial degree (number of roots).
-     *
-     * @var int
-     */
-    private $numRoots;
-
-    /**
-     * Padding bytes at front of shortened block.
-     *
-     * @var int
-     */
-    private $padding;
-
-    /**
-     * Log lookup table.
-     *
-     * @var SplFixedArray
-     */
-    private $alphaTo;
-
-    /**
-     * Anti-Log lookup table.
-     *
-     * @var SplFixedArray
-     */
-    private $indexOf;
-
-    /**
-     * Generator polynomial.
-     *
-     * @var SplFixedArray
-     */
-    private $generatorPoly;
-
-    /**
-     * @throws InvalidArgumentException if symbol size ist not between 0 and 8
-     * @throws InvalidArgumentException if first root is invalid
-     * @throws InvalidArgumentException if num roots is invalid
-     * @throws InvalidArgumentException if padding is invalid
-     * @throws RuntimeException if field generator polynomial is not primitive
-     */
-    public function __construct(
-        int $symbolSize,
-        int $gfPoly,
-        int $firstRoot,
-        int $primitive,
-        int $numRoots,
-        int $padding
-    ) {
-        if ($symbolSize < 0 || $symbolSize > 8) {
-            throw new InvalidArgumentException('Symbol size must be between 0 and 8');
-        }
-
-        if ($firstRoot < 0 || $firstRoot >= (1 << $symbolSize)) {
-            throw new InvalidArgumentException('First root must be between 0 and ' . (1 << $symbolSize));
-        }
-
-        if ($numRoots < 0 || $numRoots >= (1 << $symbolSize)) {
-            throw new InvalidArgumentException('Num roots must be between 0 and ' . (1 << $symbolSize));
-        }
-
-        if ($padding < 0 || $padding >= ((1 << $symbolSize) - 1 - $numRoots)) {
-            throw new InvalidArgumentException(
-                'Padding must be between 0 and ' . ((1 << $symbolSize) - 1 - $numRoots)
-            );
-        }
-
-        $this->symbolSize = $symbolSize;
-        $this->blockSize = (1 << $symbolSize) - 1;
-        $this->padding = $padding;
-        $this->alphaTo = SplFixedArray::fromArray(array_fill(0, $this->blockSize + 1, 0), false);
-        $this->indexOf = SplFixedArray::fromArray(array_fill(0, $this->blockSize + 1, 0), false);
-
-        // Generate galous field lookup table
-        $this->indexOf[0] = $this->blockSize;
-        $this->alphaTo[$this->blockSize] = 0;
-
-        $sr = 1;
-
-        for ($i = 0; $i < $this->blockSize; ++$i) {
-            $this->indexOf[$sr] = $i;
-            $this->alphaTo[$i]  = $sr;
-
-            $sr <<= 1;
-
-            if ($sr & (1 << $symbolSize)) {
-                $sr ^= $gfPoly;
-            }
-
-            $sr &= $this->blockSize;
-        }
-
-        if (1 !== $sr) {
-            throw new RuntimeException('Field generator polynomial is not primitive');
-        }
-
-        // Form RS code generator polynomial from its roots
-        $this->generatorPoly = SplFixedArray::fromArray(array_fill(0, $numRoots + 1, 0), false);
-        $this->firstRoot = $firstRoot;
-        $this->primitive = $primitive;
-        $this->numRoots = $numRoots;
-
-        // Find prim-th root of 1, used in decoding
-        for ($iPrimitive = 1; ($iPrimitive % $primitive) !== 0; $iPrimitive += $this->blockSize) {
-        }
-
-        $this->iPrimitive = intdiv($iPrimitive, $primitive);
-
-        $this->generatorPoly[0] = 1;
-
-        for ($i = 0, $root = $firstRoot * $primitive; $i < $numRoots; ++$i, $root += $primitive) {
-            $this->generatorPoly[$i + 1] = 1;
-
-            for ($j = $i; $j > 0; $j--) {
-                if ($this->generatorPoly[$j] !== 0) {
-                    $this->generatorPoly[$j] = $this->generatorPoly[$j - 1] ^ $this->alphaTo[
-                        $this->modNn($this->indexOf[$this->generatorPoly[$j]] + $root)
-                    ];
-                } else {
-                    $this->generatorPoly[$j] = $this->generatorPoly[$j - 1];
-                }
-            }
-
-            $this->generatorPoly[$j] = $this->alphaTo[$this->modNn($this->indexOf[$this->generatorPoly[0]] + $root)];
-        }
-
-        // Convert generator poly to index form for quicker encoding
-        for ($i = 0; $i <= $numRoots; ++$i) {
-            $this->generatorPoly[$i] = $this->indexOf[$this->generatorPoly[$i]];
-        }
-    }
-
-    /**
-     * Encodes data and writes result back into parity array.
-     */
-    public function encode(SplFixedArray $data, SplFixedArray $parity) : void
-    {
-        for ($i = 0; $i < $this->numRoots; ++$i) {
-            $parity[$i] = 0;
-        }
-
-        $iterations = $this->blockSize - $this->numRoots - $this->padding;
-
-        for ($i = 0; $i < $iterations; ++$i) {
-            $feedback = $this->indexOf[$data[$i] ^ $parity[0]];
-
-            if ($feedback !== $this->blockSize) {
-                // Feedback term is non-zero
-                $feedback = $this->modNn($this->blockSize - $this->generatorPoly[$this->numRoots] + $feedback);
-
-                for ($j = 1; $j < $this->numRoots; ++$j) {
-                    $parity[$j] = $parity[$j] ^ $this->alphaTo[
-                        $this->modNn($feedback + $this->generatorPoly[$this->numRoots - $j])
-                    ];
-                }
-            }
-
-            for ($j = 0; $j < $this->numRoots - 1; ++$j) {
-                $parity[$j] = $parity[$j + 1];
-            }
-
-            if ($feedback !== $this->blockSize) {
-                $parity[$this->numRoots - 1] = $this->alphaTo[$this->modNn($feedback + $this->generatorPoly[0])];
-            } else {
-                $parity[$this->numRoots - 1] = 0;
-            }
-        }
-    }
-
-    /**
-     * Decodes received data.
-     */
-    public function decode(SplFixedArray $data, SplFixedArray $erasures = null) : ?int
-    {
-        // This speeds up the initialization a bit.
-        $numRootsPlusOne = SplFixedArray::fromArray(array_fill(0, $this->numRoots + 1, 0), false);
-        $numRoots = SplFixedArray::fromArray(array_fill(0, $this->numRoots, 0), false);
-
-        $lambda = clone $numRootsPlusOne;
-        $b = clone $numRootsPlusOne;
-        $t = clone $numRootsPlusOne;
-        $omega = clone $numRootsPlusOne;
-        $root = clone $numRoots;
-        $loc = clone $numRoots;
-
-        $numErasures = (null !== $erasures ? count($erasures) : 0);
-
-        // Form the Syndromes; i.e., evaluate data(x) at roots of g(x)
-        $syndromes = SplFixedArray::fromArray(array_fill(0, $this->numRoots, $data[0]), false);
-
-        for ($i = 1; $i < $this->blockSize - $this->padding; ++$i) {
-            for ($j = 0; $j < $this->numRoots; ++$j) {
-                if ($syndromes[$j] === 0) {
-                    $syndromes[$j] = $data[$i];
-                } else {
-                    $syndromes[$j] = $data[$i] ^ $this->alphaTo[
-                        $this->modNn($this->indexOf[$syndromes[$j]] + ($this->firstRoot + $j) * $this->primitive)
-                    ];
-                }
-            }
-        }
-
-        // Convert syndromes to index form, checking for nonzero conditions
-        $syndromeError = 0;
-
-        for ($i = 0; $i < $this->numRoots; ++$i) {
-            $syndromeError |= $syndromes[$i];
-            $syndromes[$i] = $this->indexOf[$syndromes[$i]];
-        }
-
-        if (! $syndromeError) {
-            // If syndrome is zero, data[] is a codeword and there are no errors to correct, so return data[]
-            // unmodified.
-            return 0;
-        }
-
-        $lambda[0] = 1;
-
-        if ($numErasures > 0) {
-            // Init lambda to be the erasure locator polynomial
-            $lambda[1] = $this->alphaTo[$this->modNn($this->primitive * ($this->blockSize - 1 - $erasures[0]))];
-
-            for ($i = 1; $i < $numErasures; ++$i) {
-                $u = $this->modNn($this->primitive * ($this->blockSize - 1 - $erasures[$i]));
-
-                for ($j = $i + 1; $j > 0; --$j) {
-                    $tmp = $this->indexOf[$lambda[$j - 1]];
-
-                    if ($tmp !== $this->blockSize) {
-                        $lambda[$j] = $lambda[$j] ^ $this->alphaTo[$this->modNn($u + $tmp)];
-                    }
-                }
-            }
-        }
-
-        for ($i = 0; $i <= $this->numRoots; ++$i) {
-            $b[$i] = $this->indexOf[$lambda[$i]];
-        }
-
-        // Begin Berlekamp-Massey algorithm to determine error+erasure locator polynomial
-        $r  = $numErasures;
-        $el = $numErasures;
-
-        while (++$r <= $this->numRoots) {
-            // Compute discrepancy at the r-th step in poly form
-            $discrepancyR = 0;
-
-            for ($i = 0; $i < $r; ++$i) {
-                if ($lambda[$i] !== 0 && $syndromes[$r - $i - 1] !== $this->blockSize) {
-                    $discrepancyR ^= $this->alphaTo[
-                        $this->modNn($this->indexOf[$lambda[$i]] + $syndromes[$r - $i - 1])
-                    ];
-                }
-            }
-
-            $discrepancyR = $this->indexOf[$discrepancyR];
-
-            if ($discrepancyR === $this->blockSize) {
-                $tmp = $b->toArray();
-                array_unshift($tmp, $this->blockSize);
-                array_pop($tmp);
-                $b = SplFixedArray::fromArray($tmp, false);
-                continue;
-            }
-
-            $t[0] = $lambda[0];
-
-            for ($i = 0; $i < $this->numRoots; ++$i) {
-                if ($b[$i] !== $this->blockSize) {
-                    $t[$i + 1] = $lambda[$i + 1] ^ $this->alphaTo[$this->modNn($discrepancyR + $b[$i])];
-                } else {
-                    $t[$i + 1] = $lambda[$i + 1];
-                }
-            }
-
-            if (2 * $el <= $r + $numErasures - 1) {
-                $el = $r + $numErasures - $el;
-
-                for ($i = 0; $i <= $this->numRoots; ++$i) {
-                    $b[$i] = (
-                        $lambda[$i] === 0
-                        ? $this->blockSize
-                        : $this->modNn($this->indexOf[$lambda[$i]] - $discrepancyR + $this->blockSize)
-                    );
-                }
-            } else {
-                $tmp = $b->toArray();
-                array_unshift($tmp, $this->blockSize);
-                array_pop($tmp);
-                $b = SplFixedArray::fromArray($tmp, false);
-            }
-
-            $lambda = clone $t;
-        }
-
-        // Convert lambda to index form and compute deg(lambda(x))
-        $degLambda = 0;
-
-        for ($i = 0; $i <= $this->numRoots; ++$i) {
-            $lambda[$i] = $this->indexOf[$lambda[$i]];
-
-            if ($lambda[$i] !== $this->blockSize) {
-                $degLambda = $i;
-            }
-        }
-
-        // Find roots of the error+erasure locator polynomial by Chien search.
-        $reg = clone $lambda;
-        $reg[0] = 0;
-        $count = 0;
-        $i = 1;
-
-        for ($k = $this->iPrimitive - 1; $i <= $this->blockSize; ++$i, $k = $this->modNn($k + $this->iPrimitive)) {
-            $q = 1;
-
-            for ($j = $degLambda; $j > 0; $j--) {
-                if ($reg[$j] !== $this->blockSize) {
-                    $reg[$j] = $this->modNn($reg[$j] + $j);
-                    $q ^= $this->alphaTo[$reg[$j]];
-                }
-            }
-
-            if ($q !== 0) {
-                // Not a root
-                continue;
-            }
-
-            // Store root (index-form) and error location number
-            $root[$count] = $i;
-            $loc[$count] = $k;
-
-            if (++$count === $degLambda) {
-                break;
-            }
-        }
-
-        if ($degLambda !== $count) {
-            // deg(lambda) unequal to number of roots: uncorrectable error detected
-            return null;
-        }
-
-        // Compute err+eras evaluate poly omega(x) = s(x)*lambda(x) (modulo x**numRoots). In index form. Also find
-        // deg(omega).
-        $degOmega = $degLambda - 1;
-
-        for ($i = 0; $i <= $degOmega; ++$i) {
-            $tmp = 0;
-
-            for ($j = $i; $j >= 0; --$j) {
-                if ($syndromes[$i - $j] !== $this->blockSize && $lambda[$j] !== $this->blockSize) {
-                    $tmp ^= $this->alphaTo[$this->modNn($syndromes[$i - $j] + $lambda[$j])];
-                }
-            }
-
-            $omega[$i] = $this->indexOf[$tmp];
-        }
-
-        // Compute error values in poly-form. num1 = omega(inv(X(l))), num2 = inv(X(l))**(firstRoot-1) and
-        // den = lambda_pr(inv(X(l))) all in poly form.
-        for ($j = $count - 1; $j >= 0; --$j) {
-            $num1 = 0;
-
-            for ($i = $degOmega; $i >= 0; $i--) {
-                if ($omega[$i] !== $this->blockSize) {
-                    $num1 ^= $this->alphaTo[$this->modNn($omega[$i] + $i * $root[$j])];
-                }
-            }
-
-            $num2 = $this->alphaTo[$this->modNn($root[$j] * ($this->firstRoot - 1) + $this->blockSize)];
-            $den  = 0;
-
-            // lambda[i+1] for i even is the formal derivativelambda_pr of lambda[i]
-            for ($i = min($degLambda, $this->numRoots - 1) & ~1; $i >= 0; $i -= 2) {
-                if ($lambda[$i + 1] !== $this->blockSize) {
-                    $den ^= $this->alphaTo[$this->modNn($lambda[$i + 1] + $i * $root[$j])];
-                }
-            }
-
-            // Apply error to data
-            if ($num1 !== 0 && $loc[$j] >= $this->padding) {
-                $data[$loc[$j] - $this->padding] = $data[$loc[$j] - $this->padding] ^ (
-                    $this->alphaTo[
-                        $this->modNn(
-                            $this->indexOf[$num1] + $this->indexOf[$num2] + $this->blockSize - $this->indexOf[$den]
-                        )
-                    ]
-                );
-            }
-        }
-
-        if (null !== $erasures) {
-            if (count($erasures) < $count) {
-                $erasures->setSize($count);
-            }
-
-            for ($i = 0; $i < $count; $i++) {
-                $erasures[$i] = $loc[$i];
-            }
-        }
-
-        return $count;
-    }
-
-    /**
-     * Computes $x % GF_SIZE, where GF_SIZE is 2**GF_BITS - 1, without a slow divide.
-     */
-    private function modNn(int $x) : int
-    {
-        while ($x >= $this->blockSize) {
-            $x -= $this->blockSize;
-            $x = ($x >> $this->symbolSize) + ($x & $this->blockSize);
-        }
-
-        return $x;
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Common/Version.php

@@ -1,596 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Common;
-
-use BaconQrCode\Exception\InvalidArgumentException;
-use SplFixedArray;
-
-/**
- * Version representation.
- */
-final class Version
-{
-    private const VERSION_DECODE_INFO = [
-        0x07c94,
-        0x085bc,
-        0x09a99,
-        0x0a4d3,
-        0x0bbf6,
-        0x0c762,
-        0x0d847,
-        0x0e60d,
-        0x0f928,
-        0x10b78,
-        0x1145d,
-        0x12a17,
-        0x13532,
-        0x149a6,
-        0x15683,
-        0x168c9,
-        0x177ec,
-        0x18ec4,
-        0x191e1,
-        0x1afab,
-        0x1b08e,
-        0x1cc1a,
-        0x1d33f,
-        0x1ed75,
-        0x1f250,
-        0x209d5,
-        0x216f0,
-        0x228ba,
-        0x2379f,
-        0x24b0b,
-        0x2542e,
-        0x26a64,
-        0x27541,
-        0x28c69,
-    ];
-
-    /**
-     * Version number of this version.
-     *
-     * @var int
-     */
-    private $versionNumber;
-
-    /**
-     * Alignment pattern centers.
-     *
-     * @var SplFixedArray
-     */
-    private $alignmentPatternCenters;
-
-    /**
-     * Error correction blocks.
-     *
-     * @var EcBlocks[]
-     */
-    private $ecBlocks;
-
-    /**
-     * Total number of codewords.
-     *
-     * @var int
-     */
-    private $totalCodewords;
-
-    /**
-     * Cached version instances.
-     *
-     * @var array<int, self>|null
-     */
-    private static $versions;
-
-    /**
-     * @param int[] $alignmentPatternCenters
-     */
-    private function __construct(
-        int $versionNumber,
-        array $alignmentPatternCenters,
-        EcBlocks ...$ecBlocks
-    ) {
-        $this->versionNumber = $versionNumber;
-        $this->alignmentPatternCenters = $alignmentPatternCenters;
-        $this->ecBlocks = $ecBlocks;
-
-        $totalCodewords = 0;
-        $ecCodewords = $ecBlocks[0]->getEcCodewordsPerBlock();
-
-        foreach ($ecBlocks[0]->getEcBlocks() as $ecBlock) {
-            $totalCodewords += $ecBlock->getCount() * ($ecBlock->getDataCodewords() + $ecCodewords);
-        }
-
-        $this->totalCodewords = $totalCodewords;
-    }
-
-    /**
-     * Returns the version number.
-     */
-    public function getVersionNumber() : int
-    {
-        return $this->versionNumber;
-    }
-
-    /**
-     * Returns the alignment pattern centers.
-     *
-     * @return int[]
-     */
-    public function getAlignmentPatternCenters() : array
-    {
-        return $this->alignmentPatternCenters;
-    }
-
-    /**
-     * Returns the total number of codewords.
-     */
-    public function getTotalCodewords() : int
-    {
-        return $this->totalCodewords;
-    }
-
-    /**
-     * Calculates the dimension for the current version.
-     */
-    public function getDimensionForVersion() : int
-    {
-        return 17 + 4 * $this->versionNumber;
-    }
-
-    /**
-     * Returns the number of EC blocks for a specific EC level.
-     */
-    public function getEcBlocksForLevel(ErrorCorrectionLevel $ecLevel) : EcBlocks
-    {
-        return $this->ecBlocks[$ecLevel->ordinal()];
-    }
-
-    /**
-     * Gets a provisional version number for a specific dimension.
-     *
-     * @throws InvalidArgumentException if dimension is not 1 mod 4
-     */
-    public static function getProvisionalVersionForDimension(int $dimension) : self
-    {
-        if (1 !== $dimension % 4) {
-            throw new InvalidArgumentException('Dimension is not 1 mod 4');
-        }
-
-        return self::getVersionForNumber(intdiv($dimension - 17, 4));
-    }
-
-    /**
-     * Gets a version instance for a specific version number.
-     *
-     * @throws InvalidArgumentException if version number is out of range
-     */
-    public static function getVersionForNumber(int $versionNumber) : self
-    {
-        if ($versionNumber < 1 || $versionNumber > 40) {
-            throw new InvalidArgumentException('Version number must be between 1 and 40');
-        }
-
-        return self::versions()[$versionNumber - 1];
-    }
-
-    /**
-     * Decodes version information from an integer and returns the version.
-     */
-    public static function decodeVersionInformation(int $versionBits) : ?self
-    {
-        $bestDifference = PHP_INT_MAX;
-        $bestVersion = 0;
-
-        foreach (self::VERSION_DECODE_INFO as $i => $targetVersion) {
-            if ($targetVersion === $versionBits) {
-                return self::getVersionForNumber($i + 7);
-            }
-
-            $bitsDifference = FormatInformation::numBitsDiffering($versionBits, $targetVersion);
-
-            if ($bitsDifference < $bestDifference) {
-                $bestVersion = $i + 7;
-                $bestDifference = $bitsDifference;
-            }
-        }
-
-        if ($bestDifference <= 3) {
-            return self::getVersionForNumber($bestVersion);
-        }
-
-        return null;
-    }
-
-    /**
-     * Builds the function pattern for the current version.
-     */
-    public function buildFunctionPattern() : BitMatrix
-    {
-        $dimension = $this->getDimensionForVersion();
-        $bitMatrix = new BitMatrix($dimension);
-
-        // Top left finder pattern + separator + format
-        $bitMatrix->setRegion(0, 0, 9, 9);
-        // Top right finder pattern + separator + format
-        $bitMatrix->setRegion($dimension - 8, 0, 8, 9);
-        // Bottom left finder pattern + separator + format
-        $bitMatrix->setRegion(0, $dimension - 8, 9, 8);
-
-        // Alignment patterns
-        $max = count($this->alignmentPatternCenters);
-
-        for ($x = 0; $x < $max; ++$x) {
-            $i = $this->alignmentPatternCenters[$x] - 2;
-
-            for ($y = 0; $y < $max; ++$y) {
-                if (($x === 0 && ($y === 0 || $y === $max - 1)) || ($x === $max - 1 && $y === 0)) {
-                    // No alignment patterns near the three finder paterns
-                    continue;
-                }
-
-                $bitMatrix->setRegion($this->alignmentPatternCenters[$y] - 2, $i, 5, 5);
-            }
-        }
-
-        // Vertical timing pattern
-        $bitMatrix->setRegion(6, 9, 1, $dimension - 17);
-        // Horizontal timing pattern
-        $bitMatrix->setRegion(9, 6, $dimension - 17, 1);
-
-        if ($this->versionNumber > 6) {
-            // Version info, top right
-            $bitMatrix->setRegion($dimension - 11, 0, 3, 6);
-            // Version info, bottom left
-            $bitMatrix->setRegion(0, $dimension - 11, 6, 3);
-        }
-
-        return $bitMatrix;
-    }
-
-    /**
-     * Returns a string representation for the version.
-     */
-    public function __toString() : string
-    {
-        return (string) $this->versionNumber;
-    }
-
-    /**
-     * Build and cache a specific version.
-     *
-     * See ISO 18004:2006 6.5.1 Table 9.
-     *
-     * @return array<int, self>
-     */
-    private static function versions() : array
-    {
-        if (null !== self::$versions) {
-            return self::$versions;
-        }
-
-        return self::$versions = [
-            new self(
-                1,
-                [],
-                new EcBlocks(7, new EcBlock(1, 19)),
-                new EcBlocks(10, new EcBlock(1, 16)),
-                new EcBlocks(13, new EcBlock(1, 13)),
-                new EcBlocks(17, new EcBlock(1, 9))
-            ),
-            new self(
-                2,
-                [6, 18],
-                new EcBlocks(10, new EcBlock(1, 34)),
-                new EcBlocks(16, new EcBlock(1, 28)),
-                new EcBlocks(22, new EcBlock(1, 22)),
-                new EcBlocks(28, new EcBlock(1, 16))
-            ),
-            new self(
-                3,
-                [6, 22],
-                new EcBlocks(15, new EcBlock(1, 55)),
-                new EcBlocks(26, new EcBlock(1, 44)),
-                new EcBlocks(18, new EcBlock(2, 17)),
-                new EcBlocks(22, new EcBlock(2, 13))
-            ),
-            new self(
-                4,
-                [6, 26],
-                new EcBlocks(20, new EcBlock(1, 80)),
-                new EcBlocks(18, new EcBlock(2, 32)),
-                new EcBlocks(26, new EcBlock(3, 24)),
-                new EcBlocks(16, new EcBlock(4, 9))
-            ),
-            new self(
-                5,
-                [6, 30],
-                new EcBlocks(26, new EcBlock(1, 108)),
-                new EcBlocks(24, new EcBlock(2, 43)),
-                new EcBlocks(18, new EcBlock(2, 15), new EcBlock(2, 16)),
-                new EcBlocks(22, new EcBlock(2, 11), new EcBlock(2, 12))
-            ),
-            new self(
-                6,
-                [6, 34],
-                new EcBlocks(18, new EcBlock(2, 68)),
-                new EcBlocks(16, new EcBlock(4, 27)),
-                new EcBlocks(24, new EcBlock(4, 19)),
-                new EcBlocks(28, new EcBlock(4, 15))
-            ),
-            new self(
-                7,
-                [6, 22, 38],
-                new EcBlocks(20, new EcBlock(2, 78)),
-                new EcBlocks(18, new EcBlock(4, 31)),
-                new EcBlocks(18, new EcBlock(2, 14), new EcBlock(4, 15)),
-                new EcBlocks(26, new EcBlock(4, 13), new EcBlock(1, 14))
-            ),
-            new self(
-                8,
-                [6, 24, 42],
-                new EcBlocks(24, new EcBlock(2, 97)),
-                new EcBlocks(22, new EcBlock(2, 38), new EcBlock(2, 39)),
-                new EcBlocks(22, new EcBlock(4, 18), new EcBlock(2, 19)),
-                new EcBlocks(26, new EcBlock(4, 14), new EcBlock(2, 15))
-            ),
-            new self(
-                9,
-                [6, 26, 46],
-                new EcBlocks(30, new EcBlock(2, 116)),
-                new EcBlocks(22, new EcBlock(3, 36), new EcBlock(2, 37)),
-                new EcBlocks(20, new EcBlock(4, 16), new EcBlock(4, 17)),
-                new EcBlocks(24, new EcBlock(4, 12), new EcBlock(4, 13))
-            ),
-            new self(
-                10,
-                [6, 28, 50],
-                new EcBlocks(18, new EcBlock(2, 68), new EcBlock(2, 69)),
-                new EcBlocks(26, new EcBlock(4, 43), new EcBlock(1, 44)),
-                new EcBlocks(24, new EcBlock(6, 19), new EcBlock(2, 20)),
-                new EcBlocks(28, new EcBlock(6, 15), new EcBlock(2, 16))
-            ),
-            new self(
-                11,
-                [6, 30, 54],
-                new EcBlocks(20, new EcBlock(4, 81)),
-                new EcBlocks(30, new EcBlock(1, 50), new EcBlock(4, 51)),
-                new EcBlocks(28, new EcBlock(4, 22), new EcBlock(4, 23)),
-                new EcBlocks(24, new EcBlock(3, 12), new EcBlock(8, 13))
-            ),
-            new self(
-                12,
-                [6, 32, 58],
-                new EcBlocks(24, new EcBlock(2, 92), new EcBlock(2, 93)),
-                new EcBlocks(22, new EcBlock(6, 36), new EcBlock(2, 37)),
-                new EcBlocks(26, new EcBlock(4, 20), new EcBlock(6, 21)),
-                new EcBlocks(28, new EcBlock(7, 14), new EcBlock(4, 15))
-            ),
-            new self(
-                13,
-                [6, 34, 62],
-                new EcBlocks(26, new EcBlock(4, 107)),
-                new EcBlocks(22, new EcBlock(8, 37), new EcBlock(1, 38)),
-                new EcBlocks(24, new EcBlock(8, 20), new EcBlock(4, 21)),
-                new EcBlocks(22, new EcBlock(12, 11), new EcBlock(4, 12))
-            ),
-            new self(
-                14,
-                [6, 26, 46, 66],
-                new EcBlocks(30, new EcBlock(3, 115), new EcBlock(1, 116)),
-                new EcBlocks(24, new EcBlock(4, 40), new EcBlock(5, 41)),
-                new EcBlocks(20, new EcBlock(11, 16), new EcBlock(5, 17)),
-                new EcBlocks(24, new EcBlock(11, 12), new EcBlock(5, 13))
-            ),
-            new self(
-                15,
-                [6, 26, 48, 70],
-                new EcBlocks(22, new EcBlock(5, 87), new EcBlock(1, 88)),
-                new EcBlocks(24, new EcBlock(5, 41), new EcBlock(5, 42)),
-                new EcBlocks(30, new EcBlock(5, 24), new EcBlock(7, 25)),
-                new EcBlocks(24, new EcBlock(11, 12), new EcBlock(7, 13))
-            ),
-            new self(
-                16,
-                [6, 26, 50, 74],
-                new EcBlocks(24, new EcBlock(5, 98), new EcBlock(1, 99)),
-                new EcBlocks(28, new EcBlock(7, 45), new EcBlock(3, 46)),
-                new EcBlocks(24, new EcBlock(15, 19), new EcBlock(2, 20)),
-                new EcBlocks(30, new EcBlock(3, 15), new EcBlock(13, 16))
-            ),
-            new self(
-                17,
-                [6, 30, 54, 78],
-                new EcBlocks(28, new EcBlock(1, 107), new EcBlock(5, 108)),
-                new EcBlocks(28, new EcBlock(10, 46), new EcBlock(1, 47)),
-                new EcBlocks(28, new EcBlock(1, 22), new EcBlock(15, 23)),
-                new EcBlocks(28, new EcBlock(2, 14), new EcBlock(17, 15))
-            ),
-            new self(
-                18,
-                [6, 30, 56, 82],
-                new EcBlocks(30, new EcBlock(5, 120), new EcBlock(1, 121)),
-                new EcBlocks(26, new EcBlock(9, 43), new EcBlock(4, 44)),
-                new EcBlocks(28, new EcBlock(17, 22), new EcBlock(1, 23)),
-                new EcBlocks(28, new EcBlock(2, 14), new EcBlock(19, 15))
-            ),
-            new self(
-                19,
-                [6, 30, 58, 86],
-                new EcBlocks(28, new EcBlock(3, 113), new EcBlock(4, 114)),
-                new EcBlocks(26, new EcBlock(3, 44), new EcBlock(11, 45)),
-                new EcBlocks(26, new EcBlock(17, 21), new EcBlock(4, 22)),
-                new EcBlocks(26, new EcBlock(9, 13), new EcBlock(16, 14))
-            ),
-            new self(
-                20,
-                [6, 34, 62, 90],
-                new EcBlocks(28, new EcBlock(3, 107), new EcBlock(5, 108)),
-                new EcBlocks(26, new EcBlock(3, 41), new EcBlock(13, 42)),
-                new EcBlocks(30, new EcBlock(15, 24), new EcBlock(5, 25)),
-                new EcBlocks(28, new EcBlock(15, 15), new EcBlock(10, 16))
-            ),
-            new self(
-                21,
-                [6, 28, 50, 72, 94],
-                new EcBlocks(28, new EcBlock(4, 116), new EcBlock(4, 117)),
-                new EcBlocks(26, new EcBlock(17, 42)),
-                new EcBlocks(28, new EcBlock(17, 22), new EcBlock(6, 23)),
-                new EcBlocks(30, new EcBlock(19, 16), new EcBlock(6, 17))
-            ),
-            new self(
-                22,
-                [6, 26, 50, 74, 98],
-                new EcBlocks(28, new EcBlock(2, 111), new EcBlock(7, 112)),
-                new EcBlocks(28, new EcBlock(17, 46)),
-                new EcBlocks(30, new EcBlock(7, 24), new EcBlock(16, 25)),
-                new EcBlocks(24, new EcBlock(34, 13))
-            ),
-            new self(
-                23,
-                [6, 30, 54, 78, 102],
-                new EcBlocks(30, new EcBlock(4, 121), new EcBlock(5, 122)),
-                new EcBlocks(28, new EcBlock(4, 47), new EcBlock(14, 48)),
-                new EcBlocks(30, new EcBlock(11, 24), new EcBlock(14, 25)),
-                new EcBlocks(30, new EcBlock(16, 15), new EcBlock(14, 16))
-            ),
-            new self(
-                24,
-                [6, 28, 54, 80, 106],
-                new EcBlocks(30, new EcBlock(6, 117), new EcBlock(4, 118)),
-                new EcBlocks(28, new EcBlock(6, 45), new EcBlock(14, 46)),
-                new EcBlocks(30, new EcBlock(11, 24), new EcBlock(16, 25)),
-                new EcBlocks(30, new EcBlock(30, 16), new EcBlock(2, 17))
-            ),
-            new self(
-                25,
-                [6, 32, 58, 84, 110],
-                new EcBlocks(26, new EcBlock(8, 106), new EcBlock(4, 107)),
-                new EcBlocks(28, new EcBlock(8, 47), new EcBlock(13, 48)),
-                new EcBlocks(30, new EcBlock(7, 24), new EcBlock(22, 25)),
-                new EcBlocks(30, new EcBlock(22, 15), new EcBlock(13, 16))
-            ),
-            new self(
-                26,
-                [6, 30, 58, 86, 114],
-                new EcBlocks(28, new EcBlock(10, 114), new EcBlock(2, 115)),
-                new EcBlocks(28, new EcBlock(19, 46), new EcBlock(4, 47)),
-                new EcBlocks(28, new EcBlock(28, 22), new EcBlock(6, 23)),
-                new EcBlocks(30, new EcBlock(33, 16), new EcBlock(4, 17))
-            ),
-            new self(
-                27,
-                [6, 34, 62, 90, 118],
-                new EcBlocks(30, new EcBlock(8, 122), new EcBlock(4, 123)),
-                new EcBlocks(28, new EcBlock(22, 45), new EcBlock(3, 46)),
-                new EcBlocks(30, new EcBlock(8, 23), new EcBlock(26, 24)),
-                new EcBlocks(30, new EcBlock(12, 15), new EcBlock(28, 16))
-            ),
-            new self(
-                28,
-                [6, 26, 50, 74, 98, 122],
-                new EcBlocks(30, new EcBlock(3, 117), new EcBlock(10, 118)),
-                new EcBlocks(28, new EcBlock(3, 45), new EcBlock(23, 46)),
-                new EcBlocks(30, new EcBlock(4, 24), new EcBlock(31, 25)),
-                new EcBlocks(30, new EcBlock(11, 15), new EcBlock(31, 16))
-            ),
-            new self(
-                29,
-                [6, 30, 54, 78, 102, 126],
-                new EcBlocks(30, new EcBlock(7, 116), new EcBlock(7, 117)),
-                new EcBlocks(28, new EcBlock(21, 45), new EcBlock(7, 46)),
-                new EcBlocks(30, new EcBlock(1, 23), new EcBlock(37, 24)),
-                new EcBlocks(30, new EcBlock(19, 15), new EcBlock(26, 16))
-            ),
-            new self(
-                30,
-                [6, 26, 52, 78, 104, 130],
-                new EcBlocks(30, new EcBlock(5, 115), new EcBlock(10, 116)),
-                new EcBlocks(28, new EcBlock(19, 47), new EcBlock(10, 48)),
-                new EcBlocks(30, new EcBlock(15, 24), new EcBlock(25, 25)),
-                new EcBlocks(30, new EcBlock(23, 15), new EcBlock(25, 16))
-            ),
-            new self(
-                31,
-                [6, 30, 56, 82, 108, 134],
-                new EcBlocks(30, new EcBlock(13, 115), new EcBlock(3, 116)),
-                new EcBlocks(28, new EcBlock(2, 46), new EcBlock(29, 47)),
-                new EcBlocks(30, new EcBlock(42, 24), new EcBlock(1, 25)),
-                new EcBlocks(30, new EcBlock(23, 15), new EcBlock(28, 16))
-            ),
-            new self(
-                32,
-                [6, 34, 60, 86, 112, 138],
-                new EcBlocks(30, new EcBlock(17, 115)),
-                new EcBlocks(28, new EcBlock(10, 46), new EcBlock(23, 47)),
-                new EcBlocks(30, new EcBlock(10, 24), new EcBlock(35, 25)),
-                new EcBlocks(30, new EcBlock(19, 15), new EcBlock(35, 16))
-            ),
-            new self(
-                33,
-                [6, 30, 58, 86, 114, 142],
-                new EcBlocks(30, new EcBlock(17, 115), new EcBlock(1, 116)),
-                new EcBlocks(28, new EcBlock(14, 46), new EcBlock(21, 47)),
-                new EcBlocks(30, new EcBlock(29, 24), new EcBlock(19, 25)),
-                new EcBlocks(30, new EcBlock(11, 15), new EcBlock(46, 16))
-            ),
-            new self(
-                34,
-                [6, 34, 62, 90, 118, 146],
-                new EcBlocks(30, new EcBlock(13, 115), new EcBlock(6, 116)),
-                new EcBlocks(28, new EcBlock(14, 46), new EcBlock(23, 47)),
-                new EcBlocks(30, new EcBlock(44, 24), new EcBlock(7, 25)),
-                new EcBlocks(30, new EcBlock(59, 16), new EcBlock(1, 17))
-            ),
-            new self(
-                35,
-                [6, 30, 54, 78, 102, 126, 150],
-                new EcBlocks(30, new EcBlock(12, 121), new EcBlock(7, 122)),
-                new EcBlocks(28, new EcBlock(12, 47), new EcBlock(26, 48)),
-                new EcBlocks(30, new EcBlock(39, 24), new EcBlock(14, 25)),
-                new EcBlocks(30, new EcBlock(22, 15), new EcBlock(41, 16))
-            ),
-            new self(
-                36,
-                [6, 24, 50, 76, 102, 128, 154],
-                new EcBlocks(30, new EcBlock(6, 121), new EcBlock(14, 122)),
-                new EcBlocks(28, new EcBlock(6, 47), new EcBlock(34, 48)),
-                new EcBlocks(30, new EcBlock(46, 24), new EcBlock(10, 25)),
-                new EcBlocks(30, new EcBlock(2, 15), new EcBlock(64, 16))
-            ),
-            new self(
-                37,
-                [6, 28, 54, 80, 106, 132, 158],
-                new EcBlocks(30, new EcBlock(17, 122), new EcBlock(4, 123)),
-                new EcBlocks(28, new EcBlock(29, 46), new EcBlock(14, 47)),
-                new EcBlocks(30, new EcBlock(49, 24), new EcBlock(10, 25)),
-                new EcBlocks(30, new EcBlock(24, 15), new EcBlock(46, 16))
-            ),
-            new self(
-                38,
-                [6, 32, 58, 84, 110, 136, 162],
-                new EcBlocks(30, new EcBlock(4, 122), new EcBlock(18, 123)),
-                new EcBlocks(28, new EcBlock(13, 46), new EcBlock(32, 47)),
-                new EcBlocks(30, new EcBlock(48, 24), new EcBlock(14, 25)),
-                new EcBlocks(30, new EcBlock(42, 15), new EcBlock(32, 16))
-            ),
-            new self(
-                39,
-                [6, 26, 54, 82, 110, 138, 166],
-                new EcBlocks(30, new EcBlock(20, 117), new EcBlock(4, 118)),
-                new EcBlocks(28, new EcBlock(40, 47), new EcBlock(7, 48)),
-                new EcBlocks(30, new EcBlock(43, 24), new EcBlock(22, 25)),
-                new EcBlocks(30, new EcBlock(10, 15), new EcBlock(67, 16))
-            ),
-            new self(
-                40,
-                [6, 30, 58, 86, 114, 142, 170],
-                new EcBlocks(30, new EcBlock(19, 118), new EcBlock(6, 119)),
-                new EcBlocks(28, new EcBlock(18, 47), new EcBlock(31, 48)),
-                new EcBlocks(30, new EcBlock(34, 24), new EcBlock(34, 25)),
-                new EcBlocks(30, new EcBlock(20, 15), new EcBlock(61, 16))
-            ),
-        ];
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Encoder/BlockPair.php

@@ -1,58 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Encoder;
-
-use SplFixedArray;
-
-/**
- * Block pair.
- */
-final class BlockPair
-{
-    /**
-     * Data bytes in the block.
-     *
-     * @var SplFixedArray<int>
-     */
-    private $dataBytes;
-
-    /**
-     * Error correction bytes in the block.
-     *
-     * @var SplFixedArray<int>
-     */
-    private $errorCorrectionBytes;
-
-    /**
-     * Creates a new block pair.
-     *
-     * @param SplFixedArray<int> $data
-     * @param SplFixedArray<int> $errorCorrection
-     */
-    public function __construct(SplFixedArray $data, SplFixedArray $errorCorrection)
-    {
-        $this->dataBytes = $data;
-        $this->errorCorrectionBytes = $errorCorrection;
-    }
-
-    /**
-     * Gets the data bytes.
-     *
-     * @return SplFixedArray<int>
-     */
-    public function getDataBytes() : SplFixedArray
-    {
-        return $this->dataBytes;
-    }
-
-    /**
-     * Gets the error correction bytes.
-     *
-     * @return SplFixedArray<int>
-     */
-    public function getErrorCorrectionBytes() : SplFixedArray
-    {
-        return $this->errorCorrectionBytes;
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Encoder/ByteMatrix.php

@@ -1,150 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Encoder;
-
-use SplFixedArray;
-use Traversable;
-
-/**
- * Byte matrix.
- */
-final class ByteMatrix
-{
-    /**
-     * Bytes in the matrix, represented as array.
-     *
-     * @var SplFixedArray<SplFixedArray<int>>
-     */
-    private $bytes;
-
-    /**
-     * Width of the matrix.
-     *
-     * @var int
-     */
-    private $width;
-
-    /**
-     * Height of the matrix.
-     *
-     * @var int
-     */
-    private $height;
-
-    public function __construct(int $width, int $height)
-    {
-        $this->height = $height;
-        $this->width = $width;
-        $this->bytes = new SplFixedArray($height);
-
-        for ($y = 0; $y < $height; ++$y) {
-            $this->bytes[$y] = SplFixedArray::fromArray(array_fill(0, $width, 0));
-        }
-    }
-
-    /**
-     * Gets the width of the matrix.
-     */
-    public function getWidth() : int
-    {
-        return $this->width;
-    }
-
-    /**
-     * Gets the height of the matrix.
-     */
-    public function getHeight() : int
-    {
-        return $this->height;
-    }
-
-    /**
-     * Gets the internal representation of the matrix.
-     *
-     * @return SplFixedArray<SplFixedArray<int>>
-     */
-    public function getArray() : SplFixedArray
-    {
-        return $this->bytes;
-    }
-
-    /**
-     * @return Traversable<int>
-     */
-    public function getBytes() : Traversable
-    {
-        foreach ($this->bytes as $row) {
-            foreach ($row as $byte) {
-                yield $byte;
-            }
-        }
-    }
-
-    /**
-     * Gets the byte for a specific position.
-     */
-    public function get(int $x, int $y) : int
-    {
-        return $this->bytes[$y][$x];
-    }
-
-    /**
-     * Sets the byte for a specific position.
-     */
-    public function set(int $x, int $y, int $value) : void
-    {
-        $this->bytes[$y][$x] = $value;
-    }
-
-    /**
-     * Clears the matrix with a specific value.
-     */
-    public function clear(int $value) : void
-    {
-        for ($y = 0; $y < $this->height; ++$y) {
-            for ($x = 0; $x < $this->width; ++$x) {
-                $this->bytes[$y][$x] = $value;
-            }
-        }
-    }
-
-    public function __clone()
-    {
-        $this->bytes = clone $this->bytes;
-
-        foreach ($this->bytes as $index => $row) {
-            $this->bytes[$index] = clone $row;
-        }
-    }
-
-    /**
-     * Returns a string representation of the matrix.
-     */
-    public function __toString() : string
-    {
-        $result = '';
-
-        for ($y = 0; $y < $this->height; $y++) {
-            for ($x = 0; $x < $this->width; $x++) {
-                switch ($this->bytes[$y][$x]) {
-                    case 0:
-                        $result .= ' 0';
-                        break;
-
-                    case 1:
-                        $result .= ' 1';
-                        break;
-
-                    default:
-                        $result .= '  ';
-                        break;
-                }
-            }
-
-            $result .= "\n";
-        }
-
-        return $result;
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Encoder/Encoder.php

@@ -1,668 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Encoder;
-
-use BaconQrCode\Common\BitArray;
-use BaconQrCode\Common\CharacterSetEci;
-use BaconQrCode\Common\ErrorCorrectionLevel;
-use BaconQrCode\Common\Mode;
-use BaconQrCode\Common\ReedSolomonCodec;
-use BaconQrCode\Common\Version;
-use BaconQrCode\Exception\WriterException;
-use SplFixedArray;
-
-/**
- * Encoder.
- */
-final class Encoder
-{
-    /**
-     * Default byte encoding.
-     */
-    public const DEFAULT_BYTE_MODE_ECODING = 'ISO-8859-1';
-
-    /**
-     * The original table is defined in the table 5 of JISX0510:2004 (p.19).
-     */
-    private const ALPHANUMERIC_TABLE = [
-        -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,  // 0x00-0x0f
-        -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,  // 0x10-0x1f
-        36, -1, -1, -1, 37, 38, -1, -1, -1, -1, 39, 40, -1, 41, 42, 43,  // 0x20-0x2f
-        0,   1,  2,  3,  4,  5,  6,  7,  8,  9, 44, -1, -1, -1, -1, -1,  // 0x30-0x3f
-        -1, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24,  // 0x40-0x4f
-        25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, -1, -1, -1, -1, -1,  // 0x50-0x5f
-    ];
-
-    /**
-     * Codec cache.
-     *
-     * @var array<string,ReedSolomonCodec>
-     */
-    private static $codecs = [];
-
-    /**
-     * Encodes "content" with the error correction level "ecLevel".
-     */
-    public static function encode(
-        string $content,
-        ErrorCorrectionLevel $ecLevel,
-        string $encoding = self::DEFAULT_BYTE_MODE_ECODING,
-        ?Version $forcedVersion = null
-    ) : QrCode {
-        // Pick an encoding mode appropriate for the content. Note that this
-        // will not attempt to use multiple modes / segments even if that were
-        // more efficient. Would be nice.
-        $mode = self::chooseMode($content, $encoding);
-
-        // This will store the header information, like mode and length, as well
-        // as "header" segments like an ECI segment.
-        $headerBits = new BitArray();
-
-        // Append ECI segment if applicable
-        if (Mode::BYTE() === $mode && self::DEFAULT_BYTE_MODE_ECODING !== $encoding) {
-            $eci = CharacterSetEci::getCharacterSetEciByName($encoding);
-
-            if (null !== $eci) {
-                self::appendEci($eci, $headerBits);
-            }
-        }
-
-        // (With ECI in place,) Write the mode marker
-        self::appendModeInfo($mode, $headerBits);
-
-        // Collect data within the main segment, separately, to count its size
-        // if needed. Don't add it to main payload yet.
-        $dataBits = new BitArray();
-        self::appendBytes($content, $mode, $dataBits, $encoding);
-
-        // Hard part: need to know version to know how many bits length takes.
-        // But need to know how many bits it takes to know version. First we
-        // take a guess at version by assuming version will be the minimum, 1:
-        $provisionalBitsNeeded = $headerBits->getSize()
-            + $mode->getCharacterCountBits(Version::getVersionForNumber(1))
-            + $dataBits->getSize();
-        $provisionalVersion = self::chooseVersion($provisionalBitsNeeded, $ecLevel);
-
-        // Use that guess to calculate the right version. I am still not sure
-        // this works in 100% of cases.
-        $bitsNeeded = $headerBits->getSize()
-            + $mode->getCharacterCountBits($provisionalVersion)
-            + $dataBits->getSize();
-        $version = self::chooseVersion($bitsNeeded, $ecLevel);
-
-        if (null !== $forcedVersion) {
-            // Forced version check
-            if ($version->getVersionNumber() <= $forcedVersion->getVersionNumber()) {
-                // Calculated minimum version is same or equal as forced version
-                $version = $forcedVersion;
-            } else {
-                throw new WriterException(
-                    'Invalid version! Calculated version: '
-                    . $version->getVersionNumber()
-                    . ', requested version: '
-                    . $forcedVersion->getVersionNumber()
-                );
-            }
-        }
-
-        $headerAndDataBits = new BitArray();
-        $headerAndDataBits->appendBitArray($headerBits);
-
-        // Find "length" of main segment and write it.
-        $numLetters = (Mode::BYTE() === $mode ? $dataBits->getSizeInBytes() : strlen($content));
-        self::appendLengthInfo($numLetters, $version, $mode, $headerAndDataBits);
-
-        // Put data together into the overall payload.
-        $headerAndDataBits->appendBitArray($dataBits);
-        $ecBlocks = $version->getEcBlocksForLevel($ecLevel);
-        $numDataBytes = $version->getTotalCodewords() - $ecBlocks->getTotalEcCodewords();
-
-        // Terminate the bits properly.
-        self::terminateBits($numDataBytes, $headerAndDataBits);
-
-        // Interleave data bits with error correction code.
-        $finalBits = self::interleaveWithEcBytes(
-            $headerAndDataBits,
-            $version->getTotalCodewords(),
-            $numDataBytes,
-            $ecBlocks->getNumBlocks()
-        );
-
-        // Choose the mask pattern.
-        $dimension = $version->getDimensionForVersion();
-        $matrix = new ByteMatrix($dimension, $dimension);
-        $maskPattern = self::chooseMaskPattern($finalBits, $ecLevel, $version, $matrix);
-
-        // Build the matrix.
-        MatrixUtil::buildMatrix($finalBits, $ecLevel, $version, $maskPattern, $matrix);
-
-        return new QrCode($mode, $ecLevel, $version, $maskPattern, $matrix);
-    }
-
-    /**
-     * Gets the alphanumeric code for a byte.
-     */
-    private static function getAlphanumericCode(int $code) : int
-    {
-        if (isset(self::ALPHANUMERIC_TABLE[$code])) {
-            return self::ALPHANUMERIC_TABLE[$code];
-        }
-
-        return -1;
-    }
-
-    /**
-     * Chooses the best mode for a given content.
-     */
-    private static function chooseMode(string $content, string $encoding = null) : Mode
-    {
-        if (null !== $encoding && 0 === strcasecmp($encoding, 'SHIFT-JIS')) {
-            return self::isOnlyDoubleByteKanji($content) ? Mode::KANJI() : Mode::BYTE();
-        }
-
-        $hasNumeric = false;
-        $hasAlphanumeric = false;
-        $contentLength = strlen($content);
-
-        for ($i = 0; $i < $contentLength; ++$i) {
-            $char = $content[$i];
-
-            if (ctype_digit($char)) {
-                $hasNumeric = true;
-            } elseif (-1 !== self::getAlphanumericCode(ord($char))) {
-                $hasAlphanumeric = true;
-            } else {
-                return Mode::BYTE();
-            }
-        }
-
-        if ($hasAlphanumeric) {
-            return Mode::ALPHANUMERIC();
-        } elseif ($hasNumeric) {
-            return Mode::NUMERIC();
-        }
-
-        return Mode::BYTE();
-    }
-
-    /**
-     * Calculates the mask penalty for a matrix.
-     */
-    private static function calculateMaskPenalty(ByteMatrix $matrix) : int
-    {
-        return (
-            MaskUtil::applyMaskPenaltyRule1($matrix)
-            + MaskUtil::applyMaskPenaltyRule2($matrix)
-            + MaskUtil::applyMaskPenaltyRule3($matrix)
-            + MaskUtil::applyMaskPenaltyRule4($matrix)
-        );
-    }
-
-    /**
-     * Checks if content only consists of double-byte kanji characters.
-     */
-    private static function isOnlyDoubleByteKanji(string $content) : bool
-    {
-        $bytes = @iconv('utf-8', 'SHIFT-JIS', $content);
-
-        if (false === $bytes) {
-            return false;
-        }
-
-        $length = strlen($bytes);
-
-        if (0 !== $length % 2) {
-            return false;
-        }
-
-        for ($i = 0; $i < $length; $i += 2) {
-            $byte = $bytes[$i] & 0xff;
-
-            if (($byte < 0x81 || $byte > 0x9f) && $byte < 0xe0 || $byte > 0xeb) {
-                return false;
-            }
-        }
-
-        return true;
-    }
-
-    /**
-     * Chooses the best mask pattern for a matrix.
-     */
-    private static function chooseMaskPattern(
-        BitArray $bits,
-        ErrorCorrectionLevel $ecLevel,
-        Version $version,
-        ByteMatrix $matrix
-    ) : int {
-        $minPenalty = PHP_INT_MAX;
-        $bestMaskPattern = -1;
-
-        for ($maskPattern = 0; $maskPattern < QrCode::NUM_MASK_PATTERNS; ++$maskPattern) {
-            MatrixUtil::buildMatrix($bits, $ecLevel, $version, $maskPattern, $matrix);
-            $penalty = self::calculateMaskPenalty($matrix);
-
-            if ($penalty < $minPenalty) {
-                $minPenalty = $penalty;
-                $bestMaskPattern = $maskPattern;
-            }
-        }
-
-        return $bestMaskPattern;
-    }
-
-    /**
-     * Chooses the best version for the input.
-     *
-     * @throws WriterException if data is too big
-     */
-    private static function chooseVersion(int $numInputBits, ErrorCorrectionLevel $ecLevel) : Version
-    {
-        for ($versionNum = 1; $versionNum <= 40; ++$versionNum) {
-            $version = Version::getVersionForNumber($versionNum);
-            $numBytes = $version->getTotalCodewords();
-
-            $ecBlocks = $version->getEcBlocksForLevel($ecLevel);
-            $numEcBytes = $ecBlocks->getTotalEcCodewords();
-
-            $numDataBytes = $numBytes - $numEcBytes;
-            $totalInputBytes = intdiv($numInputBits + 8, 8);
-
-            if ($numDataBytes >= $totalInputBytes) {
-                return $version;
-            }
-        }
-
-        throw new WriterException('Data too big');
-    }
-
-    /**
-     * Terminates the bits in a bit array.
-     *
-     * @throws WriterException if data bits cannot fit in the QR code
-     * @throws WriterException if bits size does not equal the capacity
-     */
-    private static function terminateBits(int $numDataBytes, BitArray $bits) : void
-    {
-        $capacity = $numDataBytes << 3;
-
-        if ($bits->getSize() > $capacity) {
-            throw new WriterException('Data bits cannot fit in the QR code');
-        }
-
-        for ($i = 0; $i < 4 && $bits->getSize() < $capacity; ++$i) {
-            $bits->appendBit(false);
-        }
-
-        $numBitsInLastByte = $bits->getSize() & 0x7;
-
-        if ($numBitsInLastByte > 0) {
-            for ($i = $numBitsInLastByte; $i < 8; ++$i) {
-                $bits->appendBit(false);
-            }
-        }
-
-        $numPaddingBytes = $numDataBytes - $bits->getSizeInBytes();
-
-        for ($i = 0; $i < $numPaddingBytes; ++$i) {
-            $bits->appendBits(0 === ($i & 0x1) ? 0xec : 0x11, 8);
-        }
-
-        if ($bits->getSize() !== $capacity) {
-            throw new WriterException('Bits size does not equal capacity');
-        }
-    }
-
-    /**
-     * Gets number of data- and EC bytes for a block ID.
-     *
-     * @return int[]
-     * @throws WriterException if block ID is too large
-     * @throws WriterException if EC bytes mismatch
-     * @throws WriterException if RS blocks mismatch
-     * @throws WriterException if total bytes mismatch
-     */
-    private static function getNumDataBytesAndNumEcBytesForBlockId(
-        int $numTotalBytes,
-        int $numDataBytes,
-        int $numRsBlocks,
-        int $blockId
-    ) : array {
-        if ($blockId >= $numRsBlocks) {
-            throw new WriterException('Block ID too large');
-        }
-
-        $numRsBlocksInGroup2 = $numTotalBytes % $numRsBlocks;
-        $numRsBlocksInGroup1 = $numRsBlocks - $numRsBlocksInGroup2;
-        $numTotalBytesInGroup1 = intdiv($numTotalBytes, $numRsBlocks);
-        $numTotalBytesInGroup2 = $numTotalBytesInGroup1 + 1;
-        $numDataBytesInGroup1 = intdiv($numDataBytes, $numRsBlocks);
-        $numDataBytesInGroup2 = $numDataBytesInGroup1 + 1;
-        $numEcBytesInGroup1 = $numTotalBytesInGroup1 - $numDataBytesInGroup1;
-        $numEcBytesInGroup2 = $numTotalBytesInGroup2 - $numDataBytesInGroup2;
-
-        if ($numEcBytesInGroup1 !== $numEcBytesInGroup2) {
-            throw new WriterException('EC bytes mismatch');
-        }
-
-        if ($numRsBlocks !== $numRsBlocksInGroup1 + $numRsBlocksInGroup2) {
-            throw new WriterException('RS blocks mismatch');
-        }
-
-        if ($numTotalBytes !==
-            (($numDataBytesInGroup1 + $numEcBytesInGroup1) * $numRsBlocksInGroup1)
-            + (($numDataBytesInGroup2 + $numEcBytesInGroup2) * $numRsBlocksInGroup2)
-        ) {
-            throw new WriterException('Total bytes mismatch');
-        }
-
-        if ($blockId < $numRsBlocksInGroup1) {
-            return [$numDataBytesInGroup1, $numEcBytesInGroup1];
-        } else {
-            return [$numDataBytesInGroup2, $numEcBytesInGroup2];
-        }
-    }
-
-    /**
-     * Interleaves data with EC bytes.
-     *
-     * @throws WriterException if number of bits and data bytes does not match
-     * @throws WriterException if data bytes does not match offset
-     * @throws WriterException if an interleaving error occurs
-     */
-    private static function interleaveWithEcBytes(
-        BitArray $bits,
-        int $numTotalBytes,
-        int $numDataBytes,
-        int $numRsBlocks
-    ) : BitArray {
-        if ($bits->getSizeInBytes() !== $numDataBytes) {
-            throw new WriterException('Number of bits and data bytes does not match');
-        }
-
-        $dataBytesOffset = 0;
-        $maxNumDataBytes = 0;
-        $maxNumEcBytes   = 0;
-
-        $blocks = new SplFixedArray($numRsBlocks);
-
-        for ($i = 0; $i < $numRsBlocks; ++$i) {
-            list($numDataBytesInBlock, $numEcBytesInBlock) = self::getNumDataBytesAndNumEcBytesForBlockId(
-                $numTotalBytes,
-                $numDataBytes,
-                $numRsBlocks,
-                $i
-            );
-
-            $size = $numDataBytesInBlock;
-            $dataBytes = $bits->toBytes(8 * $dataBytesOffset, $size);
-            $ecBytes = self::generateEcBytes($dataBytes, $numEcBytesInBlock);
-            $blocks[$i] = new BlockPair($dataBytes, $ecBytes);
-
-            $maxNumDataBytes = max($maxNumDataBytes, $size);
-            $maxNumEcBytes = max($maxNumEcBytes, count($ecBytes));
-            $dataBytesOffset += $numDataBytesInBlock;
-        }
-
-        if ($numDataBytes !== $dataBytesOffset) {
-            throw new WriterException('Data bytes does not match offset');
-        }
-
-        $result = new BitArray();
-
-        for ($i = 0; $i < $maxNumDataBytes; ++$i) {
-            foreach ($blocks as $block) {
-                $dataBytes = $block->getDataBytes();
-
-                if ($i < count($dataBytes)) {
-                    $result->appendBits($dataBytes[$i], 8);
-                }
-            }
-        }
-
-        for ($i = 0; $i < $maxNumEcBytes; ++$i) {
-            foreach ($blocks as $block) {
-                $ecBytes = $block->getErrorCorrectionBytes();
-
-                if ($i < count($ecBytes)) {
-                    $result->appendBits($ecBytes[$i], 8);
-                }
-            }
-        }
-
-        if ($numTotalBytes !== $result->getSizeInBytes()) {
-            throw new WriterException(
-                'Interleaving error: ' . $numTotalBytes . ' and ' . $result->getSizeInBytes() . ' differ'
-            );
-        }
-
-        return $result;
-    }
-
-    /**
-     * Generates EC bytes for given data.
-     *
-     * @param  SplFixedArray<int> $dataBytes
-     * @return SplFixedArray<int>
-     */
-    private static function generateEcBytes(SplFixedArray $dataBytes, int $numEcBytesInBlock) : SplFixedArray
-    {
-        $numDataBytes = count($dataBytes);
-        $toEncode = new SplFixedArray($numDataBytes + $numEcBytesInBlock);
-
-        for ($i = 0; $i < $numDataBytes; $i++) {
-            $toEncode[$i] = $dataBytes[$i] & 0xff;
-        }
-
-        $ecBytes = new SplFixedArray($numEcBytesInBlock);
-        $codec = self::getCodec($numDataBytes, $numEcBytesInBlock);
-        $codec->encode($toEncode, $ecBytes);
-
-        return $ecBytes;
-    }
-
-    /**
-     * Gets an RS codec and caches it.
-     */
-    private static function getCodec(int $numDataBytes, int $numEcBytesInBlock) : ReedSolomonCodec
-    {
-        $cacheId = $numDataBytes . '-' . $numEcBytesInBlock;
-
-        if (isset(self::$codecs[$cacheId])) {
-            return self::$codecs[$cacheId];
-        }
-
-        return self::$codecs[$cacheId] = new ReedSolomonCodec(
-            8,
-            0x11d,
-            0,
-            1,
-            $numEcBytesInBlock,
-            255 - $numDataBytes - $numEcBytesInBlock
-        );
-    }
-
-    /**
-     * Appends mode information to a bit array.
-     */
-    private static function appendModeInfo(Mode $mode, BitArray $bits) : void
-    {
-        $bits->appendBits($mode->getBits(), 4);
-    }
-
-    /**
-     * Appends length information to a bit array.
-     *
-     * @throws WriterException if num letters is bigger than expected
-     */
-    private static function appendLengthInfo(int $numLetters, Version $version, Mode $mode, BitArray $bits) : void
-    {
-        $numBits = $mode->getCharacterCountBits($version);
-
-        if ($numLetters >= (1 << $numBits)) {
-            throw new WriterException($numLetters . ' is bigger than ' . ((1 << $numBits) - 1));
-        }
-
-        $bits->appendBits($numLetters, $numBits);
-    }
-
-    /**
-     * Appends bytes to a bit array in a specific mode.
-     *
-     * @throws WriterException if an invalid mode was supplied
-     */
-    private static function appendBytes(string $content, Mode $mode, BitArray $bits, string $encoding) : void
-    {
-        switch ($mode) {
-            case Mode::NUMERIC():
-                self::appendNumericBytes($content, $bits);
-                break;
-
-            case Mode::ALPHANUMERIC():
-                self::appendAlphanumericBytes($content, $bits);
-                break;
-
-            case Mode::BYTE():
-                self::append8BitBytes($content, $bits, $encoding);
-                break;
-
-            case Mode::KANJI():
-                self::appendKanjiBytes($content, $bits);
-                break;
-
-            default:
-                throw new WriterException('Invalid mode: ' . $mode);
-        }
-    }
-
-    /**
-     * Appends numeric bytes to a bit array.
-     */
-    private static function appendNumericBytes(string $content, BitArray $bits) : void
-    {
-        $length = strlen($content);
-        $i = 0;
-
-        while ($i < $length) {
-            $num1 = (int) $content[$i];
-
-            if ($i + 2 < $length) {
-                // Encode three numeric letters in ten bits.
-                $num2 = (int) $content[$i + 1];
-                $num3 = (int) $content[$i + 2];
-                $bits->appendBits($num1 * 100 + $num2 * 10 + $num3, 10);
-                $i += 3;
-            } elseif ($i + 1 < $length) {
-                // Encode two numeric letters in seven bits.
-                $num2 = (int) $content[$i + 1];
-                $bits->appendBits($num1 * 10 + $num2, 7);
-                $i += 2;
-            } else {
-                // Encode one numeric letter in four bits.
-                $bits->appendBits($num1, 4);
-                ++$i;
-            }
-        }
-    }
-
-    /**
-     * Appends alpha-numeric bytes to a bit array.
-     *
-     * @throws WriterException if an invalid alphanumeric code was found
-     */
-    private static function appendAlphanumericBytes(string $content, BitArray $bits) : void
-    {
-        $length = strlen($content);
-        $i = 0;
-
-        while ($i < $length) {
-            $code1 = self::getAlphanumericCode(ord($content[$i]));
-
-            if (-1 === $code1) {
-                throw new WriterException('Invalid alphanumeric code');
-            }
-
-            if ($i + 1 < $length) {
-                $code2 = self::getAlphanumericCode(ord($content[$i + 1]));
-
-                if (-1 === $code2) {
-                    throw new WriterException('Invalid alphanumeric code');
-                }
-
-                // Encode two alphanumeric letters in 11 bits.
-                $bits->appendBits($code1 * 45 + $code2, 11);
-                $i += 2;
-            } else {
-                // Encode one alphanumeric letter in six bits.
-                $bits->appendBits($code1, 6);
-                ++$i;
-            }
-        }
-    }
-
-    /**
-     * Appends regular 8-bit bytes to a bit array.
-     *
-     * @throws WriterException if content cannot be encoded to target encoding
-     */
-    private static function append8BitBytes(string $content, BitArray $bits, string $encoding) : void
-    {
-        $bytes = @iconv('utf-8', $encoding, $content);
-
-        if (false === $bytes) {
-            throw new WriterException('Could not encode content to ' . $encoding);
-        }
-
-        $length = strlen($bytes);
-
-        for ($i = 0; $i < $length; $i++) {
-            $bits->appendBits(ord($bytes[$i]), 8);
-        }
-    }
-
-    /**
-     * Appends KANJI bytes to a bit array.
-     *
-     * @throws WriterException if content does not seem to be encoded in SHIFT-JIS
-     * @throws WriterException if an invalid byte sequence occurs
-     */
-    private static function appendKanjiBytes(string $content, BitArray $bits) : void
-    {
-        if (strlen($content) % 2 > 0) {
-            // We just do a simple length check here. The for loop will check
-            // individual characters.
-            throw new WriterException('Content does not seem to be encoded in SHIFT-JIS');
-        }
-
-        $length = strlen($content);
-
-        for ($i = 0; $i < $length; $i += 2) {
-            $byte1 = ord($content[$i]) & 0xff;
-            $byte2 = ord($content[$i + 1]) & 0xff;
-            $code = ($byte1 << 8) | $byte2;
-
-            if ($code >= 0x8140 && $code <= 0x9ffc) {
-                $subtracted = $code - 0x8140;
-            } elseif ($code >= 0xe040 && $code <= 0xebbf) {
-                $subtracted = $code - 0xc140;
-            } else {
-                throw new WriterException('Invalid byte sequence');
-            }
-
-            $encoded = (($subtracted >> 8) * 0xc0) + ($subtracted & 0xff);
-
-            $bits->appendBits($encoded, 13);
-        }
-    }
-
-    /**
-     * Appends ECI information to a bit array.
-     */
-    private static function appendEci(CharacterSetEci $eci, BitArray $bits) : void
-    {
-        $mode = Mode::ECI();
-        $bits->appendBits($mode->getBits(), 4);
-        $bits->appendBits($eci->getValue(), 8);
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Encoder/MaskUtil.php

@@ -1,271 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Encoder;
-
-use BaconQrCode\Common\BitUtils;
-use BaconQrCode\Exception\InvalidArgumentException;
-
-/**
- * Mask utility.
- */
-final class MaskUtil
-{
-    /**#@+
-     * Penalty weights from section 6.8.2.1
-     */
-    const N1 = 3;
-    const N2 = 3;
-    const N3 = 40;
-    const N4 = 10;
-    /**#@-*/
-
-    private function __construct()
-    {
-    }
-
-    /**
-     * Applies mask penalty rule 1 and returns the penalty.
-     *
-     * Finds repetitive cells with the same color and gives penalty to them.
-     * Example: 00000 or 11111.
-     */
-    public static function applyMaskPenaltyRule1(ByteMatrix $matrix) : int
-    {
-        return (
-            self::applyMaskPenaltyRule1Internal($matrix, true)
-            + self::applyMaskPenaltyRule1Internal($matrix, false)
-        );
-    }
-
-    /**
-     * Applies mask penalty rule 2 and returns the penalty.
-     *
-     * Finds 2x2 blocks with the same color and gives penalty to them. This is
-     * actually equivalent to the spec's rule, which is to find MxN blocks and
-     * give a penalty proportional to (M-1)x(N-1), because this is the number of
-     * 2x2 blocks inside such a block.
-     */
-    public static function applyMaskPenaltyRule2(ByteMatrix $matrix) : int
-    {
-        $penalty = 0;
-        $array = $matrix->getArray();
-        $width = $matrix->getWidth();
-        $height = $matrix->getHeight();
-
-        for ($y = 0; $y < $height - 1; ++$y) {
-            for ($x = 0; $x < $width - 1; ++$x) {
-                $value = $array[$y][$x];
-
-                if ($value === $array[$y][$x + 1]
-                    && $value === $array[$y + 1][$x]
-                    && $value === $array[$y + 1][$x + 1]
-                ) {
-                    ++$penalty;
-                }
-            }
-        }
-
-        return self::N2 * $penalty;
-    }
-
-    /**
-     * Applies mask penalty rule 3 and returns the penalty.
-     *
-     * Finds consecutive cells of 00001011101 or 10111010000, and gives penalty
-     * to them. If we find patterns like 000010111010000, we give penalties
-     * twice (i.e. 40 * 2).
-     */
-    public static function applyMaskPenaltyRule3(ByteMatrix $matrix) : int
-    {
-        $penalty = 0;
-        $array = $matrix->getArray();
-        $width = $matrix->getWidth();
-        $height = $matrix->getHeight();
-
-        for ($y = 0; $y < $height; ++$y) {
-            for ($x = 0; $x < $width; ++$x) {
-                if ($x + 6 < $width
-                    && 1 === $array[$y][$x]
-                    && 0 === $array[$y][$x + 1]
-                    && 1 === $array[$y][$x + 2]
-                    && 1 === $array[$y][$x + 3]
-                    && 1 === $array[$y][$x + 4]
-                    && 0 === $array[$y][$x + 5]
-                    && 1 === $array[$y][$x + 6]
-                    && (
-                        (
-                            $x + 10 < $width
-                            && 0 === $array[$y][$x + 7]
-                            && 0 === $array[$y][$x + 8]
-                            && 0 === $array[$y][$x + 9]
-                            && 0 === $array[$y][$x + 10]
-                        )
-                        || (
-                            $x - 4 >= 0
-                            && 0 === $array[$y][$x - 1]
-                            && 0 === $array[$y][$x - 2]
-                            && 0 === $array[$y][$x - 3]
-                            && 0 === $array[$y][$x - 4]
-                        )
-                    )
-                ) {
-                    $penalty += self::N3;
-                }
-
-                if ($y + 6 < $height
-                    && 1 === $array[$y][$x]
-                    && 0 === $array[$y + 1][$x]
-                    && 1 === $array[$y + 2][$x]
-                    && 1 === $array[$y + 3][$x]
-                    && 1 === $array[$y + 4][$x]
-                    && 0 === $array[$y + 5][$x]
-                    && 1 === $array[$y + 6][$x]
-                    && (
-                        (
-                            $y + 10 < $height
-                            && 0 === $array[$y + 7][$x]
-                            && 0 === $array[$y + 8][$x]
-                            && 0 === $array[$y + 9][$x]
-                            && 0 === $array[$y + 10][$x]
-                        )
-                        || (
-                            $y - 4 >= 0
-                            && 0 === $array[$y - 1][$x]
-                            && 0 === $array[$y - 2][$x]
-                            && 0 === $array[$y - 3][$x]
-                            && 0 === $array[$y - 4][$x]
-                        )
-                    )
-                ) {
-                    $penalty += self::N3;
-                }
-            }
-        }
-
-        return $penalty;
-    }
-
-    /**
-     * Applies mask penalty rule 4 and returns the penalty.
-     *
-     * Calculates the ratio of dark cells and gives penalty if the ratio is far
-     * from 50%. It gives 10 penalty for 5% distance.
-     */
-    public static function applyMaskPenaltyRule4(ByteMatrix $matrix) : int
-    {
-        $numDarkCells = 0;
-
-        $array = $matrix->getArray();
-        $width = $matrix->getWidth();
-        $height = $matrix->getHeight();
-
-        for ($y = 0; $y < $height; ++$y) {
-            $arrayY = $array[$y];
-
-            for ($x = 0; $x < $width; ++$x) {
-                if (1 === $arrayY[$x]) {
-                    ++$numDarkCells;
-                }
-            }
-        }
-
-        $numTotalCells = $height * $width;
-        $darkRatio = $numDarkCells / $numTotalCells;
-        $fixedPercentVariances = (int) (abs($darkRatio - 0.5) * 20);
-
-        return $fixedPercentVariances * self::N4;
-    }
-
-    /**
-     * Returns the mask bit for "getMaskPattern" at "x" and "y".
-     *
-     * See 8.8 of JISX0510:2004 for mask pattern conditions.
-     *
-     * @throws InvalidArgumentException if an invalid mask pattern was supplied
-     */
-    public static function getDataMaskBit(int $maskPattern, int $x, int $y) : bool
-    {
-        switch ($maskPattern) {
-            case 0:
-                $intermediate = ($y + $x) & 0x1;
-                break;
-
-            case 1:
-                $intermediate = $y & 0x1;
-                break;
-
-            case 2:
-                $intermediate = $x % 3;
-                break;
-
-            case 3:
-                $intermediate = ($y + $x) % 3;
-                break;
-
-            case 4:
-                $intermediate = (BitUtils::unsignedRightShift($y, 1) + (int) ($x / 3)) & 0x1;
-                break;
-
-            case 5:
-                $temp = $y * $x;
-                $intermediate = ($temp & 0x1) + ($temp % 3);
-                break;
-
-            case 6:
-                $temp = $y * $x;
-                $intermediate = (($temp & 0x1) + ($temp % 3)) & 0x1;
-                break;
-
-            case 7:
-                $temp = $y * $x;
-                $intermediate = (($temp % 3) + (($y + $x) & 0x1)) & 0x1;
-                break;
-
-            default:
-                throw new InvalidArgumentException('Invalid mask pattern: ' . $maskPattern);
-        }
-
-        return 0 == $intermediate;
-    }
-
-    /**
-     * Helper function for applyMaskPenaltyRule1.
-     *
-     * We need this for doing this calculation in both vertical and horizontal
-     * orders respectively.
-     */
-    private static function applyMaskPenaltyRule1Internal(ByteMatrix $matrix, bool $isHorizontal) : int
-    {
-        $penalty = 0;
-        $iLimit = $isHorizontal ? $matrix->getHeight() : $matrix->getWidth();
-        $jLimit = $isHorizontal ? $matrix->getWidth() : $matrix->getHeight();
-        $array = $matrix->getArray();
-
-        for ($i = 0; $i < $iLimit; ++$i) {
-            $numSameBitCells = 0;
-            $prevBit = -1;
-
-            for ($j = 0; $j < $jLimit; $j++) {
-                $bit = $isHorizontal ? $array[$i][$j] : $array[$j][$i];
-
-                if ($bit === $prevBit) {
-                    ++$numSameBitCells;
-                } else {
-                    if ($numSameBitCells >= 5) {
-                        $penalty += self::N1 + ($numSameBitCells - 5);
-                    }
-
-                    $numSameBitCells = 1;
-                    $prevBit = $bit;
-                }
-            }
-
-            if ($numSameBitCells >= 5) {
-                $penalty += self::N1 + ($numSameBitCells - 5);
-            }
-        }
-
-        return $penalty;
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Encoder/MatrixUtil.php

@@ -1,513 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Encoder;
-
-use BaconQrCode\Common\BitArray;
-use BaconQrCode\Common\ErrorCorrectionLevel;
-use BaconQrCode\Common\Version;
-use BaconQrCode\Exception\RuntimeException;
-use BaconQrCode\Exception\WriterException;
-
-/**
- * Matrix utility.
- */
-final class MatrixUtil
-{
-    /**
-     * Position detection pattern.
-     */
-    private const POSITION_DETECTION_PATTERN = [
-        [1, 1, 1, 1, 1, 1, 1],
-        [1, 0, 0, 0, 0, 0, 1],
-        [1, 0, 1, 1, 1, 0, 1],
-        [1, 0, 1, 1, 1, 0, 1],
-        [1, 0, 1, 1, 1, 0, 1],
-        [1, 0, 0, 0, 0, 0, 1],
-        [1, 1, 1, 1, 1, 1, 1],
-    ];
-
-    /**
-     * Position adjustment pattern.
-     */
-    private const POSITION_ADJUSTMENT_PATTERN = [
-        [1, 1, 1, 1, 1],
-        [1, 0, 0, 0, 1],
-        [1, 0, 1, 0, 1],
-        [1, 0, 0, 0, 1],
-        [1, 1, 1, 1, 1],
-    ];
-
-    /**
-     * Coordinates for position adjustment patterns for each version.
-     */
-    private const POSITION_ADJUSTMENT_PATTERN_COORDINATE_TABLE = [
-        [null, null, null, null, null, null, null], // Version 1
-        [   6,   18, null, null, null, null, null], // Version 2
-        [   6,   22, null, null, null, null, null], // Version 3
-        [   6,   26, null, null, null, null, null], // Version 4
-        [   6,   30, null, null, null, null, null], // Version 5
-        [   6,   34, null, null, null, null, null], // Version 6
-        [   6,   22,   38, null, null, null, null], // Version 7
-        [   6,   24,   42, null, null, null, null], // Version 8
-        [   6,   26,   46, null, null, null, null], // Version 9
-        [   6,   28,   50, null, null, null, null], // Version 10
-        [   6,   30,   54, null, null, null, null], // Version 11
-        [   6,   32,   58, null, null, null, null], // Version 12
-        [   6,   34,   62, null, null, null, null], // Version 13
-        [   6,   26,   46,   66, null, null, null], // Version 14
-        [   6,   26,   48,   70, null, null, null], // Version 15
-        [   6,   26,   50,   74, null, null, null], // Version 16
-        [   6,   30,   54,   78, null, null, null], // Version 17
-        [   6,   30,   56,   82, null, null, null], // Version 18
-        [   6,   30,   58,   86, null, null, null], // Version 19
-        [   6,   34,   62,   90, null, null, null], // Version 20
-        [   6,   28,   50,   72,   94, null, null], // Version 21
-        [   6,   26,   50,   74,   98, null, null], // Version 22
-        [   6,   30,   54,   78,  102, null, null], // Version 23
-        [   6,   28,   54,   80,  106, null, null], // Version 24
-        [   6,   32,   58,   84,  110, null, null], // Version 25
-        [   6,   30,   58,   86,  114, null, null], // Version 26
-        [   6,   34,   62,   90,  118, null, null], // Version 27
-        [   6,   26,   50,   74,   98,  122, null], // Version 28
-        [   6,   30,   54,   78,  102,  126, null], // Version 29
-        [   6,   26,   52,   78,  104,  130, null], // Version 30
-        [   6,   30,   56,   82,  108,  134, null], // Version 31
-        [   6,   34,   60,   86,  112,  138, null], // Version 32
-        [   6,   30,   58,   86,  114,  142, null], // Version 33
-        [   6,   34,   62,   90,  118,  146, null], // Version 34
-        [   6,   30,   54,   78,  102,  126,  150], // Version 35
-        [   6,   24,   50,   76,  102,  128,  154], // Version 36
-        [   6,   28,   54,   80,  106,  132,  158], // Version 37
-        [   6,   32,   58,   84,  110,  136,  162], // Version 38
-        [   6,   26,   54,   82,  110,  138,  166], // Version 39
-        [   6,   30,   58,   86,  114,  142,  170], // Version 40
-    ];
-
-    /**
-     * Type information coordinates.
-     */
-    private const TYPE_INFO_COORDINATES = [
-        [8, 0],
-        [8, 1],
-        [8, 2],
-        [8, 3],
-        [8, 4],
-        [8, 5],
-        [8, 7],
-        [8, 8],
-        [7, 8],
-        [5, 8],
-        [4, 8],
-        [3, 8],
-        [2, 8],
-        [1, 8],
-        [0, 8],
-    ];
-
-    /**
-     * Version information polynomial.
-     */
-    private const VERSION_INFO_POLY = 0x1f25;
-
-    /**
-     * Type information polynomial.
-     */
-    private const TYPE_INFO_POLY = 0x537;
-
-    /**
-     * Type information mask pattern.
-     */
-    private const TYPE_INFO_MASK_PATTERN = 0x5412;
-
-    /**
-     * Clears a given matrix.
-     */
-    public static function clearMatrix(ByteMatrix $matrix) : void
-    {
-        $matrix->clear(-1);
-    }
-
-    /**
-     * Builds a complete matrix.
-     */
-    public static function buildMatrix(
-        BitArray $dataBits,
-        ErrorCorrectionLevel $level,
-        Version $version,
-        int $maskPattern,
-        ByteMatrix $matrix
-    ) : void {
-        self::clearMatrix($matrix);
-        self::embedBasicPatterns($version, $matrix);
-        self::embedTypeInfo($level, $maskPattern, $matrix);
-        self::maybeEmbedVersionInfo($version, $matrix);
-        self::embedDataBits($dataBits, $maskPattern, $matrix);
-    }
-
-    /**
-     * Removes the position detection patterns from a matrix.
-     *
-     * This can be useful if you need to render those patterns separately.
-     */
-    public static function removePositionDetectionPatterns(ByteMatrix $matrix) : void
-    {
-        $pdpWidth = count(self::POSITION_DETECTION_PATTERN[0]);
-
-        self::removePositionDetectionPattern(0, 0, $matrix);
-        self::removePositionDetectionPattern($matrix->getWidth() - $pdpWidth, 0, $matrix);
-        self::removePositionDetectionPattern(0, $matrix->getWidth() - $pdpWidth, $matrix);
-    }
-
-    /**
-     * Embeds type information into a matrix.
-     */
-    private static function embedTypeInfo(ErrorCorrectionLevel $level, int $maskPattern, ByteMatrix $matrix) : void
-    {
-        $typeInfoBits = new BitArray();
-        self::makeTypeInfoBits($level, $maskPattern, $typeInfoBits);
-
-        $typeInfoBitsSize = $typeInfoBits->getSize();
-
-        for ($i = 0; $i < $typeInfoBitsSize; ++$i) {
-            $bit = $typeInfoBits->get($typeInfoBitsSize - 1 - $i);
-
-            $x1 = self::TYPE_INFO_COORDINATES[$i][0];
-            $y1 = self::TYPE_INFO_COORDINATES[$i][1];
-
-            $matrix->set($x1, $y1, (int) $bit);
-
-            if ($i < 8) {
-                $x2 = $matrix->getWidth() - $i - 1;
-                $y2 = 8;
-            } else {
-                $x2 = 8;
-                $y2 = $matrix->getHeight() - 7 + ($i - 8);
-            }
-
-            $matrix->set($x2, $y2, (int) $bit);
-        }
-    }
-
-    /**
-     * Generates type information bits and appends them to a bit array.
-     *
-     * @throws RuntimeException if bit array resulted in invalid size
-     */
-    private static function makeTypeInfoBits(ErrorCorrectionLevel $level, int $maskPattern, BitArray $bits) : void
-    {
-        $typeInfo = ($level->getBits() << 3) | $maskPattern;
-        $bits->appendBits($typeInfo, 5);
-
-        $bchCode = self::calculateBchCode($typeInfo, self::TYPE_INFO_POLY);
-        $bits->appendBits($bchCode, 10);
-
-        $maskBits = new BitArray();
-        $maskBits->appendBits(self::TYPE_INFO_MASK_PATTERN, 15);
-        $bits->xorBits($maskBits);
-
-        if (15 !== $bits->getSize()) {
-            throw new RuntimeException('Bit array resulted in invalid size: ' . $bits->getSize());
-        }
-    }
-
-    /**
-     * Embeds version information if required.
-     */
-    private static function maybeEmbedVersionInfo(Version $version, ByteMatrix $matrix) : void
-    {
-        if ($version->getVersionNumber() < 7) {
-            return;
-        }
-
-        $versionInfoBits = new BitArray();
-        self::makeVersionInfoBits($version, $versionInfoBits);
-
-        $bitIndex = 6 * 3 - 1;
-
-        for ($i = 0; $i < 6; ++$i) {
-            for ($j = 0; $j < 3; ++$j) {
-                $bit = $versionInfoBits->get($bitIndex);
-                --$bitIndex;
-
-                $matrix->set($i, $matrix->getHeight() - 11 + $j, (int) $bit);
-                $matrix->set($matrix->getHeight() - 11 + $j, $i, (int) $bit);
-            }
-        }
-    }
-
-    /**
-     * Generates version information bits and appends them to a bit array.
-     *
-     * @throws RuntimeException if bit array resulted in invalid size
-     */
-    private static function makeVersionInfoBits(Version $version, BitArray $bits) : void
-    {
-        $bits->appendBits($version->getVersionNumber(), 6);
-
-        $bchCode = self::calculateBchCode($version->getVersionNumber(), self::VERSION_INFO_POLY);
-        $bits->appendBits($bchCode, 12);
-
-        if (18 !== $bits->getSize()) {
-            throw new RuntimeException('Bit array resulted in invalid size: ' . $bits->getSize());
-        }
-    }
-
-    /**
-     * Calculates the BCH code for a value and a polynomial.
-     */
-    private static function calculateBchCode(int $value, int $poly) : int
-    {
-        $msbSetInPoly = self::findMsbSet($poly);
-        $value <<= $msbSetInPoly - 1;
-
-        while (self::findMsbSet($value) >= $msbSetInPoly) {
-            $value ^= $poly << (self::findMsbSet($value) - $msbSetInPoly);
-        }
-
-        return $value;
-    }
-
-    /**
-     * Finds and MSB set.
-     */
-    private static function findMsbSet(int $value) : int
-    {
-        $numDigits = 0;
-
-        while (0 !== $value) {
-            $value >>= 1;
-            ++$numDigits;
-        }
-
-        return $numDigits;
-    }
-
-    /**
-     * Embeds basic patterns into a matrix.
-     */
-    private static function embedBasicPatterns(Version $version, ByteMatrix $matrix) : void
-    {
-        self::embedPositionDetectionPatternsAndSeparators($matrix);
-        self::embedDarkDotAtLeftBottomCorner($matrix);
-        self::maybeEmbedPositionAdjustmentPatterns($version, $matrix);
-        self::embedTimingPatterns($matrix);
-    }
-
-    /**
-     * Embeds position detection patterns and separators into a byte matrix.
-     */
-    private static function embedPositionDetectionPatternsAndSeparators(ByteMatrix $matrix) : void
-    {
-        $pdpWidth = count(self::POSITION_DETECTION_PATTERN[0]);
-
-        self::embedPositionDetectionPattern(0, 0, $matrix);
-        self::embedPositionDetectionPattern($matrix->getWidth() - $pdpWidth, 0, $matrix);
-        self::embedPositionDetectionPattern(0, $matrix->getWidth() - $pdpWidth, $matrix);
-
-        $hspWidth = 8;
-
-        self::embedHorizontalSeparationPattern(0, $hspWidth - 1, $matrix);
-        self::embedHorizontalSeparationPattern($matrix->getWidth() - $hspWidth, $hspWidth - 1, $matrix);
-        self::embedHorizontalSeparationPattern(0, $matrix->getWidth() - $hspWidth, $matrix);
-
-        $vspSize = 7;
-
-        self::embedVerticalSeparationPattern($vspSize, 0, $matrix);
-        self::embedVerticalSeparationPattern($matrix->getHeight() - $vspSize - 1, 0, $matrix);
-        self::embedVerticalSeparationPattern($vspSize, $matrix->getHeight() - $vspSize, $matrix);
-    }
-
-    /**
-     * Embeds a single position detection pattern into a byte matrix.
-     */
-    private static function embedPositionDetectionPattern(int $xStart, int $yStart, ByteMatrix $matrix) : void
-    {
-        for ($y = 0; $y < 7; ++$y) {
-            for ($x = 0; $x < 7; ++$x) {
-                $matrix->set($xStart + $x, $yStart + $y, self::POSITION_DETECTION_PATTERN[$y][$x]);
-            }
-        }
-    }
-
-    private static function removePositionDetectionPattern(int $xStart, int $yStart, ByteMatrix $matrix) : void
-    {
-        for ($y = 0; $y < 7; ++$y) {
-            for ($x = 0; $x < 7; ++$x) {
-                $matrix->set($xStart + $x, $yStart + $y, 0);
-            }
-        }
-    }
-
-    /**
-     * Embeds a single horizontal separation pattern.
-     *
-     * @throws RuntimeException if a byte was already set
-     */
-    private static function embedHorizontalSeparationPattern(int $xStart, int $yStart, ByteMatrix $matrix) : void
-    {
-        for ($x = 0; $x < 8; $x++) {
-            if (-1 !== $matrix->get($xStart + $x, $yStart)) {
-                throw new RuntimeException('Byte already set');
-            }
-
-            $matrix->set($xStart + $x, $yStart, 0);
-        }
-    }
-
-    /**
-     * Embeds a single vertical separation pattern.
-     *
-     * @throws RuntimeException if a byte was already set
-     */
-    private static function embedVerticalSeparationPattern(int $xStart, int $yStart, ByteMatrix $matrix) : void
-    {
-        for ($y = 0; $y < 7; $y++) {
-            if (-1 !== $matrix->get($xStart, $yStart + $y)) {
-                throw new RuntimeException('Byte already set');
-            }
-
-            $matrix->set($xStart, $yStart + $y, 0);
-        }
-    }
-
-    /**
-     * Embeds a dot at the left bottom corner.
-     *
-     * @throws RuntimeException if a byte was already set to 0
-     */
-    private static function embedDarkDotAtLeftBottomCorner(ByteMatrix $matrix) : void
-    {
-        if (0 === $matrix->get(8, $matrix->getHeight() - 8)) {
-            throw new RuntimeException('Byte already set to 0');
-        }
-
-        $matrix->set(8, $matrix->getHeight() - 8, 1);
-    }
-
-    /**
-     * Embeds position adjustment patterns if required.
-     */
-    private static function maybeEmbedPositionAdjustmentPatterns(Version $version, ByteMatrix $matrix) : void
-    {
-        if ($version->getVersionNumber() < 2) {
-            return;
-        }
-
-        $index = $version->getVersionNumber() - 1;
-
-        $coordinates = self::POSITION_ADJUSTMENT_PATTERN_COORDINATE_TABLE[$index];
-        $numCoordinates = count($coordinates);
-
-        for ($i = 0; $i < $numCoordinates; ++$i) {
-            for ($j = 0; $j < $numCoordinates; ++$j) {
-                $y = $coordinates[$i];
-                $x = $coordinates[$j];
-
-                if (null === $x || null === $y) {
-                    continue;
-                }
-
-                if (-1 === $matrix->get($x, $y)) {
-                    self::embedPositionAdjustmentPattern($x - 2, $y - 2, $matrix);
-                }
-            }
-        }
-    }
-
-    /**
-     * Embeds a single position adjustment pattern.
-     */
-    private static function embedPositionAdjustmentPattern(int $xStart, int $yStart, ByteMatrix $matrix) : void
-    {
-        for ($y = 0; $y < 5; $y++) {
-            for ($x = 0; $x < 5; $x++) {
-                $matrix->set($xStart + $x, $yStart + $y, self::POSITION_ADJUSTMENT_PATTERN[$y][$x]);
-            }
-        }
-    }
-
-    /**
-     * Embeds timing patterns into a matrix.
-     */
-    private static function embedTimingPatterns(ByteMatrix $matrix) : void
-    {
-        $matrixWidth = $matrix->getWidth();
-
-        for ($i = 8; $i < $matrixWidth - 8; ++$i) {
-            $bit = ($i + 1) % 2;
-
-            if (-1 === $matrix->get($i, 6)) {
-                $matrix->set($i, 6, $bit);
-            }
-
-            if (-1 === $matrix->get(6, $i)) {
-                $matrix->set(6, $i, $bit);
-            }
-        }
-    }
-
-    /**
-     * Embeds "dataBits" using "getMaskPattern".
-     *
-     * For debugging purposes, it skips masking process if "getMaskPattern" is -1. See 8.7 of JISX0510:2004 (p.38) for
-     * how to embed data bits.
-     *
-     * @throws WriterException if not all bits could be consumed
-     */
-    private static function embedDataBits(BitArray $dataBits, int $maskPattern, ByteMatrix $matrix) : void
-    {
-        $bitIndex = 0;
-        $direction = -1;
-
-        // Start from the right bottom cell.
-        $x = $matrix->getWidth() - 1;
-        $y = $matrix->getHeight() - 1;
-
-        while ($x > 0) {
-            // Skip vertical timing pattern.
-            if (6 === $x) {
-                --$x;
-            }
-
-            while ($y >= 0 && $y < $matrix->getHeight()) {
-                for ($i = 0; $i < 2; $i++) {
-                    $xx = $x - $i;
-
-                    // Skip the cell if it's not empty.
-                    if (-1 !== $matrix->get($xx, $y)) {
-                        continue;
-                    }
-
-                    if ($bitIndex < $dataBits->getSize()) {
-                        $bit = $dataBits->get($bitIndex);
-                        ++$bitIndex;
-                    } else {
-                        // Padding bit. If there is no bit left, we'll fill the
-                        // left cells with 0, as described in 8.4.9 of
-                        // JISX0510:2004 (p. 24).
-                        $bit = false;
-                    }
-
-                    // Skip masking if maskPattern is -1.
-                    if (-1 !== $maskPattern && MaskUtil::getDataMaskBit($maskPattern, $xx, $y)) {
-                        $bit = ! $bit;
-                    }
-
-                    $matrix->set($xx, $y, (int) $bit);
-                }
-
-                $y += $direction;
-            }
-
-            $direction  = -$direction;
-            $y += $direction;
-            $x -= 2;
-        }
-
-        // All bits should be consumed
-        if ($dataBits->getSize() !== $bitIndex) {
-            throw new WriterException('Not all bits consumed (' . $bitIndex . ' out of ' . $dataBits->getSize() .')');
-        }
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Encoder/QrCode.php

@@ -1,141 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Encoder;
-
-use BaconQrCode\Common\ErrorCorrectionLevel;
-use BaconQrCode\Common\Mode;
-use BaconQrCode\Common\Version;
-
-/**
- * QR code.
- */
-final class QrCode
-{
-    /**
-     * Number of possible mask patterns.
-     */
-    public const NUM_MASK_PATTERNS = 8;
-
-    /**
-     * Mode of the QR code.
-     *
-     * @var Mode
-     */
-    private $mode;
-
-    /**
-     * EC level of the QR code.
-     *
-     * @var ErrorCorrectionLevel
-     */
-    private $errorCorrectionLevel;
-
-    /**
-     * Version of the QR code.
-     *
-     * @var Version
-     */
-    private $version;
-
-    /**
-     * Mask pattern of the QR code.
-     *
-     * @var int
-     */
-    private $maskPattern = -1;
-
-    /**
-     * Matrix of the QR code.
-     *
-     * @var ByteMatrix
-     */
-    private $matrix;
-
-    public function __construct(
-        Mode $mode,
-        ErrorCorrectionLevel $errorCorrectionLevel,
-        Version $version,
-        int $maskPattern,
-        ByteMatrix $matrix
-    ) {
-        $this->mode = $mode;
-        $this->errorCorrectionLevel = $errorCorrectionLevel;
-        $this->version = $version;
-        $this->maskPattern = $maskPattern;
-        $this->matrix = $matrix;
-    }
-
-    /**
-     * Gets the mode.
-     */
-    public function getMode() : Mode
-    {
-        return $this->mode;
-    }
-
-    /**
-     * Gets the EC level.
-     */
-    public function getErrorCorrectionLevel() : ErrorCorrectionLevel
-    {
-        return $this->errorCorrectionLevel;
-    }
-
-    /**
-     * Gets the version.
-     */
-    public function getVersion() : Version
-    {
-        return $this->version;
-    }
-
-    /**
-     * Gets the mask pattern.
-     */
-    public function getMaskPattern() : int
-    {
-        return $this->maskPattern;
-    }
-
-    /**
-     * Gets the matrix.
-     *
-     * @return ByteMatrix
-     */
-    public function getMatrix()
-    {
-        return $this->matrix;
-    }
-
-    /**
-     * Validates whether a mask pattern is valid.
-     */
-    public static function isValidMaskPattern(int $maskPattern) : bool
-    {
-        return $maskPattern > 0 && $maskPattern < self::NUM_MASK_PATTERNS;
-    }
-
-    /**
-     * Returns a string representation of the QR code.
-     */
-    public function __toString() : string
-    {
-        $result = "<<\n"
-                . ' mode: ' . $this->mode . "\n"
-                . ' ecLevel: ' . $this->errorCorrectionLevel . "\n"
-                . ' version: ' . $this->version . "\n"
-                . ' maskPattern: ' . $this->maskPattern . "\n";
-
-        if ($this->matrix === null) {
-            $result .= " matrix: null\n";
-        } else {
-            $result .= " matrix:\n";
-            $result .= $this->matrix;
-        }
-
-        $result .= ">>\n";
-
-        return $result;
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Exception/ExceptionInterface.php

@@ -1,10 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Exception;
-
-use Throwable;
-
-interface ExceptionInterface extends Throwable
-{
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Exception/InvalidArgumentException.php

@@ -1,8 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Exception;
-
-final class InvalidArgumentException extends \InvalidArgumentException implements ExceptionInterface
-{
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Exception/OutOfBoundsException.php

@@ -1,8 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Exception;
-
-final class OutOfBoundsException extends \OutOfBoundsException implements ExceptionInterface
-{
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Exception/RuntimeException.php

@@ -1,8 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Exception;
-
-final class RuntimeException extends \RuntimeException implements ExceptionInterface
-{
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Exception/UnexpectedValueException.php

@@ -1,8 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Exception;
-
-final class UnexpectedValueException extends \UnexpectedValueException implements ExceptionInterface
-{
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Exception/WriterException.php

@@ -1,8 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Exception;
-
-final class WriterException extends \RuntimeException implements ExceptionInterface
-{
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Renderer/Color/Alpha.php

@@ -1,57 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Renderer\Color;
-
-use BaconQrCode\Exception;
-
-final class Alpha implements ColorInterface
-{
-    /**
-     * @var int
-     */
-    private $alpha;
-
-    /**
-     * @var ColorInterface
-     */
-    private $baseColor;
-
-    /**
-     * @param int $alpha the alpha value, 0 to 100
-     */
-    public function __construct(int $alpha, ColorInterface $baseColor)
-    {
-        if ($alpha < 0 || $alpha > 100) {
-            throw new Exception\InvalidArgumentException('Alpha must be between 0 and 100');
-        }
-
-        $this->alpha = $alpha;
-        $this->baseColor = $baseColor;
-    }
-
-    public function getAlpha() : int
-    {
-        return $this->alpha;
-    }
-
-    public function getBaseColor() : ColorInterface
-    {
-        return $this->baseColor;
-    }
-
-    public function toRgb() : Rgb
-    {
-        return $this->baseColor->toRgb();
-    }
-
-    public function toCmyk() : Cmyk
-    {
-        return $this->baseColor->toCmyk();
-    }
-
-    public function toGray() : Gray
-    {
-        return $this->baseColor->toGray();
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Renderer/Color/Cmyk.php

@@ -1,103 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Renderer\Color;
-
-use BaconQrCode\Exception;
-
-final class Cmyk implements ColorInterface
-{
-    /**
-     * @var int
-     */
-    private $cyan;
-
-    /**
-     * @var int
-     */
-    private $magenta;
-
-    /**
-     * @var int
-     */
-    private $yellow;
-
-    /**
-     * @var int
-     */
-    private $black;
-
-    /**
-     * @param int $cyan the cyan amount, 0 to 100
-     * @param int $magenta the magenta amount, 0 to 100
-     * @param int $yellow the yellow amount, 0 to 100
-     * @param int $black the black amount, 0 to 100
-     */
-    public function __construct(int $cyan, int $magenta, int $yellow, int $black)
-    {
-        if ($cyan < 0 || $cyan > 100) {
-            throw new Exception\InvalidArgumentException('Cyan must be between 0 and 100');
-        }
-
-        if ($magenta < 0 || $magenta > 100) {
-            throw new Exception\InvalidArgumentException('Magenta must be between 0 and 100');
-        }
-
-        if ($yellow < 0 || $yellow > 100) {
-            throw new Exception\InvalidArgumentException('Yellow must be between 0 and 100');
-        }
-
-        if ($black < 0 || $black > 100) {
-            throw new Exception\InvalidArgumentException('Black must be between 0 and 100');
-        }
-
-        $this->cyan = $cyan;
-        $this->magenta = $magenta;
-        $this->yellow = $yellow;
-        $this->black = $black;
-    }
-
-    public function getCyan() : int
-    {
-        return $this->cyan;
-    }
-
-    public function getMagenta() : int
-    {
-        return $this->magenta;
-    }
-
-    public function getYellow() : int
-    {
-        return $this->yellow;
-    }
-
-    public function getBlack() : int
-    {
-        return $this->black;
-    }
-
-    public function toRgb() : Rgb
-    {
-        $k = $this->black / 100;
-        $c = (-$k * $this->cyan + $k * 100 + $this->cyan) / 100;
-        $m = (-$k * $this->magenta + $k * 100 + $this->magenta) / 100;
-        $y = (-$k * $this->yellow + $k * 100 + $this->yellow) / 100;
-
-        return new Rgb(
-            (int) (-$c * 255 + 255),
-            (int) (-$m * 255 + 255),
-            (int) (-$y * 255 + 255)
-        );
-    }
-
-    public function toCmyk() : Cmyk
-    {
-        return $this;
-    }
-
-    public function toGray() : Gray
-    {
-        return $this->toRgb()->toGray();
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Renderer/Color/ColorInterface.php

@@ -1,22 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Renderer\Color;
-
-interface ColorInterface
-{
-    /**
-     * Converts the color to RGB.
-     */
-    public function toRgb() : Rgb;
-
-    /**
-     * Converts the color to CMYK.
-     */
-    public function toCmyk() : Cmyk;
-
-    /**
-     * Converts the color to gray.
-     */
-    public function toGray() : Gray;
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Renderer/Color/Gray.php

@@ -1,46 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Renderer\Color;
-
-use BaconQrCode\Exception;
-
-final class Gray implements ColorInterface
-{
-    /**
-     * @var int
-     */
-    private $gray;
-
-    /**
-     * @param int $gray the gray value between 0 (black) and 100 (white)
-     */
-    public function __construct(int $gray)
-    {
-        if ($gray < 0 || $gray > 100) {
-            throw new Exception\InvalidArgumentException('Gray must be between 0 and 100');
-        }
-
-        $this->gray = (int) $gray;
-    }
-
-    public function getGray() : int
-    {
-        return $this->gray;
-    }
-
-    public function toRgb() : Rgb
-    {
-        return new Rgb((int) ($this->gray * 2.55), (int) ($this->gray * 2.55), (int) ($this->gray * 2.55));
-    }
-
-    public function toCmyk() : Cmyk
-    {
-        return new Cmyk(0, 0, 0, 100 - $this->gray);
-    }
-
-    public function toGray() : Gray
-    {
-        return $this;
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Renderer/Color/Rgb.php

@@ -1,88 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Renderer\Color;
-
-use BaconQrCode\Exception;
-
-final class Rgb implements ColorInterface
-{
-    /**
-     * @var int
-     */
-    private $red;
-
-    /**
-     * @var int
-     */
-    private $green;
-
-    /**
-     * @var int
-     */
-    private $blue;
-
-    /**
-     * @param int $red the red amount of the color, 0 to 255
-     * @param int $green the green amount of the color, 0 to 255
-     * @param int $blue the blue amount of the color, 0 to 255
-     */
-    public function __construct(int $red, int $green, int $blue)
-    {
-        if ($red < 0 || $red > 255) {
-            throw new Exception\InvalidArgumentException('Red must be between 0 and 255');
-        }
-
-        if ($green < 0 || $green > 255) {
-            throw new Exception\InvalidArgumentException('Green must be between 0 and 255');
-        }
-
-        if ($blue < 0 || $blue > 255) {
-            throw new Exception\InvalidArgumentException('Blue must be between 0 and 255');
-        }
-
-        $this->red = $red;
-        $this->green = $green;
-        $this->blue = $blue;
-    }
-
-    public function getRed() : int
-    {
-        return $this->red;
-    }
-
-    public function getGreen() : int
-    {
-        return $this->green;
-    }
-
-    public function getBlue() : int
-    {
-        return $this->blue;
-    }
-
-    public function toRgb() : Rgb
-    {
-        return $this;
-    }
-
-    public function toCmyk() : Cmyk
-    {
-        $c = 1 - ($this->red / 255);
-        $m = 1 - ($this->green / 255);
-        $y = 1 - ($this->blue / 255);
-        $k = min($c, $m, $y);
-
-        return new Cmyk(
-            (int) (100 * ($c - $k) / (1 - $k)),
-            (int) (100 * ($m - $k) / (1 - $k)),
-            (int) (100 * ($y - $k) / (1 - $k)),
-            (int) (100 * $k)
-        );
-    }
-
-    public function toGray() : Gray
-    {
-        return new Gray((int) (($this->red * 0.21 + $this->green * 0.71 + $this->blue * 0.07) / 2.55));
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Renderer/Eye/CompositeEye.php

@@ -1,38 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Renderer\Eye;
-
-use BaconQrCode\Renderer\Path\Path;
-
-/**
- * Combines the style of two different eyes.
- */
-final class CompositeEye implements EyeInterface
-{
-    /**
-     * @var EyeInterface
-     */
-    private $externalEye;
-
-    /**
-     * @var EyeInterface
-     */
-    private $internalEye;
-
-    public function __construct(EyeInterface $externalEye, EyeInterface $internalEye)
-    {
-        $this->externalEye = $externalEye;
-        $this->internalEye = $internalEye;
-    }
-
-    public function getExternalPath() : Path
-    {
-        return $this->externalEye->getExternalPath();
-    }
-
-    public function getInternalPath() : Path
-    {
-        return $this->internalEye->getInternalPath();
-    }
-}

data/web/inc/lib/vendor/bacon/bacon-qr-code/src/Renderer/Eye/EyeInterface.php

@@ -1,26 +0,0 @@
-<?php
-declare(strict_types = 1);
-
-namespace BaconQrCode\Renderer\Eye;
-
-use BaconQrCode\Renderer\Path\Path;
-
-/**
- * Interface for describing the look of an eye.
- */
-interface EyeInterface
-{
-    /**
-     * Returns the path of the external eye element.
-     *
-     * The path origin point (0, 0) must be anchored at the middle of the path.
-     */
-    public function getExternalPath() : Path;
-
-    /**
-     * Returns the path of the internal eye element.
-     *
-     * The path origin point (0, 0) must be anchored at the middle of the path.
-     */
-    public function getInternalPath() : Path;
-}