Warning: This build has drifted.
The coverage report for this pull request build may be inaccurate because its base commit is no longer the HEAD of its target branch.
This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

    • Learn more: For more information on this, see Tracking coverage changes for pull request builds.
    • Fix now: For a quick fix, rebase this PR at GitHub. Your next report should be accurate.
    • Prevent going forward: To avoid this issue with future PRs, see these Recommended CI Configurations.

fix(reconcile): normalize email refs and skip unparseable addresses

Two edges the address-based matching missed, found by an independent review. (1) An add for an unmatched email spec sent the ref verbatim, so a display-name ref like "Alice <a@x.com>" made the server create a shadow user and grant it, never the real user, and the drift never showed again. canonicalRef now normalizes an email ref to its plain address, so the add resolves to the real user. (2) A quoted local part ("john smith"@x.com) unquotes to an address mail.ParseAddress cannot read back, so exporting it emitted a ref that failed its own validation. emailAddress now requires the address to re-parse, so such stored emails fall back to the id on export and match, keeping the rule 5 round trip.