@rapidmx/mapi-plugin 1.0.0-beta.10

package/dist/lib/rop/TaskNamedProperties.js

@@ -0,0 +1,29 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+/**
+ * The Task named-property identity table (`(PropertySet GUID, LID)` pairs) this pragmatic subset supports, per
+ * `[MS-OXPROPS]`/`[MS-OXOTASK]` - the exact `CalendarNamedProperties.ts` precedent, adapted for `PSETID_Task`,
+ * shared by `PropertyResolvers.ts` (the read side: `taskValueFor`). Read-only in this pass - see
+ * `TaskTarget.ts`'s own doc comment for why there's no write-side (`RopSetProperties`/`RopSaveChangesMessage`)
+ * counterpart yet.
+ */
+export const PSETID_TASK = "00062003-0000-0000-c000-000000000046";
+/** `PidLidTaskStatus` (`PT_LONG`) - `[MS-OXOTASK]` §2.2.2.1.5's own `olTaskNotStarted`(0)/`olTaskInProgress`(1)/
+ * `olTaskComplete`(2)/`olTaskWaiting`(3)/`olTaskDeferred`(4) values. This data model's `Task.completed` is a
+ * plain boolean with no in-progress/waiting/deferred distinction, so only `olTaskNotStarted`/`olTaskComplete`
+ * are ever produced - a documented, harmless approximation, the same category as `CalendarNamedProperties.ts`'s
+ * own `olWorkingElsewhere` gap. */
+export const LID_TASK_STATUS = 0x8101;
+export const TASK_STATUS_NOT_STARTED = 0;
+export const TASK_STATUS_COMPLETE = 2;
+/** `PidLidPercentComplete` (`PT_R8`, `[MS-OXOTASK]` §2.2.2.1.6) - `0.0`-`1.0`. No partial-progress tracking in
+ * this data model either, so this is always `1.0` (complete) or `0.0` (not started), mirroring
+ * `LID_TASK_STATUS`'s own two-value approximation. */
+export const LID_PERCENT_COMPLETE = 0x8102;
+/** `PidLidTaskDueDate` (`PT_SYSTIME`, `[MS-OXOTASK]` §2.2.2.2.4). */
+export const LID_TASK_DUE_DATE = 0x8105;
+/** `PidLidTaskComplete` (`PT_BOOLEAN`, `[MS-OXOTASK]` §2.2.2.1.9) - maps directly to `Task.completed`. */
+export const LID_TASK_COMPLETE = 0x811c;
+//# sourceMappingURL=TaskNamedProperties.js.map

package/dist/lib/rop/TaskNamedProperties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TaskNamedProperties.js","sourceRoot":"","sources":["../../../src/rop/TaskNamedProperties.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,sCAAsC,CAAC;AAElE;;;;mCAImC;AACnC,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AACtC,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AACzC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC;;sDAEsD;AACtD,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAE3C,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAExC,0GAA0G;AAC1G,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC"}

package/dist/lib/rop/TaskTarget.js

@@ -0,0 +1,15 @@
+/** Degrades to empty-looking values for a `"task:<uid>"` target whose real `Task` has since vanished
+ * (soft-deleted or otherwise) - the same "don't fail the whole ROP over one stale row" principle
+ * `MessageTarget.resolveMessageInfo`/`ContactTarget.resolveContactInfo` already apply. */
+export async function resolveTaskInfo(target, taskRepo) {
+    const uid = target.slice("task:".length);
+    const task = await taskRepo.findOne(uid, { ignoreACL: true });
+    return {
+        title: task?.title ?? "",
+        completed: task?.completed ?? false,
+        dueDate: task?.dueDate,
+    };
+}
+/** The order a `TASKS` folder's contents table lists tasks in (see `ContentsTable.ts`). */
+export const TASK_SORT = { title: "ASC", uid: "ASC" };
+//# sourceMappingURL=TaskTarget.js.map

package/dist/lib/rop/TaskTarget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TaskTarget.js","sourceRoot":"","sources":["../../../src/rop/TaskTarget.ts"],"names":[],"mappings":"AAyBA;;0FAE0F;AAC1F,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,QAAwB;IAC1E,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,IAAI,GAAqB,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChF,OAAO;QACH,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;QACxB,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,KAAK;QACnC,OAAO,EAAE,IAAI,EAAE,OAAO;KACzB,CAAC;AACN,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,MAAM,SAAS,GAAa,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC"}

package/dist/lib/rop/TransportSend.js

@@ -0,0 +1,16 @@
+/**
+ * Sends `message` and throws unless the transport accepted it for at least one recipient and rejected none.
+ *
+ * The same rule as restapi's own `sendOrThrow()` (`transport/TransportResultUtils.ts`), which isn't exported from
+ * the `@rapidmx/restapi` package root, so it can't be imported here; keep the two in sync. Every bundled transport
+ * reports a failed relay through `TransportResult.rejected` rather than throwing, so a bare `send()` would treat a
+ * rejected message as sent.
+ */
+export async function sendOrThrow(transport, message) {
+    const result = await transport.send(message);
+    if (!result || (result.accepted ?? []).length === 0 || (result.rejected ?? []).length > 0) {
+        throw new Error(`The mail transport did not accept the message (rejected: ${(result?.rejected ?? []).length}).`);
+    }
+    return result;
+}
+//# sourceMappingURL=TransportSend.js.map

package/dist/lib/rop/TransportSend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TransportSend.js","sourceRoot":"","sources":["../../../src/rop/TransportSend.ts"],"names":[],"mappings":"AAMA;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,SAAwB,EAAE,OAAwB;IAChF,MAAM,MAAM,GAAgC,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1E,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;IACrH,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/lib/sql/MapiEmsmdbRouteSQL.js

@@ -0,0 +1,85 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { AuditLogEntrySQL, CalendarEventSQL, ContactSQL, FolderSQL, LabelSQL, MailboxSQL, MessageSQL, TaskSQL } from "@rapidmx/restapi/sql";
+import { BaseMapiEmsmdbRoute } from "../BaseMapiEmsmdbRoute.js";
+import { RopLogonHandler } from "../rop/RopLogonHandler.js";
+import { RopReleaseHandler } from "../rop/RopReleaseHandler.js";
+import { RopOpenFolderHandler } from "../rop/RopOpenFolderHandler.js";
+import { RopGetHierarchyTableHandler } from "../rop/RopGetHierarchyTableHandler.js";
+import { RopGetContentsTableHandler } from "../rop/RopGetContentsTableHandler.js";
+import { RopSetColumnsHandler } from "../rop/RopSetColumnsHandler.js";
+import { RopQueryRowsHandler } from "../rop/RopQueryRowsHandler.js";
+import { RopOpenMessageHandler } from "../rop/RopOpenMessageHandler.js";
+import { RopGetPropertiesSpecificHandler } from "../rop/RopGetPropertiesSpecificHandler.js";
+import { RopOpenStreamHandler } from "../rop/RopOpenStreamHandler.js";
+import { RopReadStreamHandler } from "../rop/RopReadStreamHandler.js";
+import { RopCreateMessageHandler } from "../rop/RopCreateMessageHandler.js";
+import { RopSetPropertiesHandler } from "../rop/RopSetPropertiesHandler.js";
+import { RopWriteStreamHandler } from "../rop/RopWriteStreamHandler.js";
+import { RopSaveChangesMessageHandler } from "../rop/RopSaveChangesMessageHandler.js";
+import { RopSubmitMessageHandler } from "../rop/RopSubmitMessageHandler.js";
+import { RopGetPropertyIdsFromNamesHandler } from "../rop/RopGetPropertyIdsFromNamesHandler.js";
+import { RopDeleteMessagesHandler } from "../rop/RopDeleteMessagesHandler.js";
+import { RopDeleteFolderHandler } from "../rop/RopDeleteFolderHandler.js";
+import { RopFastTransferSourceCopyToHandler } from "../rop/RopFastTransferSourceCopyToHandler.js";
+import { RopFastTransferSourceCopyPropertiesHandler } from "../rop/RopFastTransferSourceCopyPropertiesHandler.js";
+import { RopFastTransferSourceGetBufferHandler } from "../rop/RopFastTransferSourceGetBufferHandler.js";
+import { RouteDecorators } from "@rapidrest/service-core";
+const { Route } = RouteDecorators;
+/**
+ * SQL-backed concrete `BaseMapiEmsmdbRoute`, mounted at `/mapi/emsmdb`. Exported from this plugin's
+ * `./sql` entry point, so the server host mounts it without a wrapper class of its
+ * own.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+let MapiEmsmdbRouteSQL = class MapiEmsmdbRouteSQL extends BaseMapiEmsmdbRoute {
+    constructor() {
+        super(...arguments);
+        this.mailboxClass = MailboxSQL;
+        this.folderClass = FolderSQL;
+        this.messageClass = MessageSQL;
+        this.calendarEventClass = CalendarEventSQL;
+        this.contactClass = ContactSQL;
+        this.taskClass = TaskSQL;
+        this.labelClass = LabelSQL;
+        this.auditLogClass = AuditLogEntrySQL;
+        this.ropHandlerClasses = [
+            RopLogonHandler,
+            RopReleaseHandler,
+            RopOpenFolderHandler,
+            RopGetHierarchyTableHandler,
+            RopGetContentsTableHandler,
+            RopSetColumnsHandler,
+            RopQueryRowsHandler,
+            RopOpenMessageHandler,
+            RopGetPropertiesSpecificHandler,
+            RopOpenStreamHandler,
+            RopReadStreamHandler,
+            RopCreateMessageHandler,
+            RopSetPropertiesHandler,
+            RopWriteStreamHandler,
+            RopSaveChangesMessageHandler,
+            RopSubmitMessageHandler,
+            RopGetPropertyIdsFromNamesHandler,
+            RopDeleteMessagesHandler,
+            RopDeleteFolderHandler,
+            RopFastTransferSourceCopyToHandler,
+            RopFastTransferSourceCopyPropertiesHandler,
+            RopFastTransferSourceGetBufferHandler,
+        ];
+    }
+};
+MapiEmsmdbRouteSQL = __decorate([
+    Route("/mapi/emsmdb")
+], MapiEmsmdbRouteSQL);
+export { MapiEmsmdbRouteSQL };
+//# sourceMappingURL=MapiEmsmdbRouteSQL.js.map

package/dist/lib/sql/MapiEmsmdbRouteSQL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MapiEmsmdbRouteSQL.js","sourceRoot":"","sources":["../../../src/sql/MapiEmsmdbRouteSQL.ts"],"names":[],"mappings":";;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC5I,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,kCAAkC,EAAE,MAAM,8CAA8C,CAAC;AAClG,OAAO,EAAE,0CAA0C,EAAE,MAAM,sDAAsD,CAAC;AAClH,OAAO,EAAE,qCAAqC,EAAE,MAAM,iDAAiD,CAAC;AACxG,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,MAAM,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC;AAElC;;;;;;GAMG;AAEI,IAAM,kBAAkB,GAAxB,MAAM,kBAAmB,SAAQ,mBAA+B;IAAhE;;QACO,iBAAY,GAAQ,UAAU,CAAC;QAC/B,gBAAW,GAAQ,SAAS,CAAC;QAC7B,iBAAY,GAAQ,UAAU,CAAC;QAC/B,uBAAkB,GAAQ,gBAAgB,CAAC;QAC3C,iBAAY,GAAQ,UAAU,CAAC;QAC/B,cAAS,GAAQ,OAAO,CAAC;QACzB,eAAU,GAAQ,QAAQ,CAAC;QAC3B,kBAAa,GAAQ,gBAAgB,CAAC;QACtC,sBAAiB,GAAU;YACjC,eAAe;YACf,iBAAiB;YACjB,oBAAoB;YACpB,2BAA2B;YAC3B,0BAA0B;YAC1B,oBAAoB;YACpB,mBAAmB;YACnB,qBAAqB;YACrB,+BAA+B;YAC/B,oBAAoB;YACpB,oBAAoB;YACpB,uBAAuB;YACvB,uBAAuB;YACvB,qBAAqB;YACrB,4BAA4B;YAC5B,uBAAuB;YACvB,iCAAiC;YACjC,wBAAwB;YACxB,sBAAsB;YACtB,kCAAkC;YAClC,0CAA0C;YAC1C,qCAAqC;SACxC,CAAC;IACN,CAAC;CAAA,CAAA;AAjCY,kBAAkB;IAD9B,KAAK,CAAC,cAAc,CAAC;GACT,kBAAkB,CAiC9B"}

package/dist/lib/sql/MapiNspiRouteSQL.js

@@ -0,0 +1,33 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { ContactSQL, MailboxSQL } from "@rapidmx/restapi/sql";
+import { BaseMapiNspiRoute } from "../BaseMapiNspiRoute.js";
+import { RouteDecorators } from "@rapidrest/service-core";
+const { Route } = RouteDecorators;
+/**
+ * SQL-backed concrete `BaseMapiNspiRoute`, mounted at `/mapi/nspi`. Exported from this plugin's
+ * `./sql` entry point, so the server host mounts it without a wrapper class of its
+ * own.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+let MapiNspiRouteSQL = class MapiNspiRouteSQL extends BaseMapiNspiRoute {
+    constructor() {
+        super(...arguments);
+        this.mailboxClass = MailboxSQL;
+        this.contactClass = ContactSQL;
+    }
+};
+MapiNspiRouteSQL = __decorate([
+    Route("/mapi/nspi")
+], MapiNspiRouteSQL);
+export { MapiNspiRouteSQL };
+//# sourceMappingURL=MapiNspiRouteSQL.js.map

package/dist/lib/sql/MapiNspiRouteSQL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MapiNspiRouteSQL.js","sourceRoot":"","sources":["../../../src/sql/MapiNspiRouteSQL.ts"],"names":[],"mappings":";;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,MAAM,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC;AAElC;;;;;;GAMG;AAEI,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,iBAA6B;IAA5D;;QACO,iBAAY,GAAQ,UAAU,CAAC;QAC/B,iBAAY,GAAQ,UAAU,CAAC;IAC7C,CAAC;CAAA,CAAA;AAHY,gBAAgB;IAD5B,KAAK,CAAC,YAAY,CAAC;GACP,gBAAgB,CAG5B"}

package/dist/lib/sql/index.js

@@ -0,0 +1,7 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+export * from "./MapiEmsmdbRouteSQL.js";
+export * from "./MapiNspiRouteSQL.js";
+//# sourceMappingURL=index.js.map

package/dist/lib/sql/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/sql/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC"}

package/dist/lib/sql.js

@@ -0,0 +1,6 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+export * from "./sql/index.js";
+//# sourceMappingURL=sql.js.map

package/dist/lib/sql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql.js","sourceRoot":"","sources":["../../src/sql.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,cAAc,gBAAgB,CAAC"}

package/dist/types/BaseMapiEmsmdbRoute.d.ts

@@ -0,0 +1,139 @@
+import { type JWTUser } from "@rapidrest/core";
+import { HttpRequest, HttpResponse } from "@rapidrest/service-core";
+import { type RopBuffer } from "./codec/RopBuffer.js";
+import { Mailbox } from "@rapidmx/restapi";
+/** The largest `RopBufferSize` accepted - the `[MS-OXCRPC]` ROP input buffer limit. */
+export declare const MAX_ROP_BUFFER_SIZE = 32767;
+/** A decoded `Execute` request: the ROP buffer framing plus the client's `MaxRopOut`. */
+export interface ExecuteRequest extends RopBuffer {
+    /** The most bytes the client accepts in the response's `RopBuffer`. */
+    maxRopOut: number;
+}
+/**
+ * Decodes an `Execute` request body's `Flags`/`RopBufferSize`/`RopBuffer`/`MaxRopOut` and the ROP buffer framing
+ * inside it. Throws a 400 `ApiError` for a malformed body - a `RopBufferSize` over `MAX_ROP_BUFFER_SIZE` or past the
+ * end of the body, or a ROP buffer `decodeRopBuffer` rejects - instead of letting a bare `RangeError` surface as a
+ * 500. A body that ends before `MaxRopOut` gets the largest response a `RopBuffer` can carry.
+ * `AuxiliaryBufferSize`/`AuxiliaryBuffer` are left unread - no auxiliary-payload support in this pragmatic subset.
+ */
+export declare function decodeExecuteRequest(rawBody: Buffer): ExecuteRequest;
+/**
+ * Abstract base for the single fixed EMSMDB endpoint (`POST /mapi/emsmdb` by `[MS-OXCMAPIHTTP]` convention,
+ * though the concrete path is left to the consuming application to mount via `@Route(...)` - see
+ * `BaseEasRoute.ts` for the identical undecorated-base-class pattern this follows). Like EAS, MAPI/HTTP
+ * multiplexes several request types against one URL - here via the `X-RequestType` **header**
+ * (`Connect`/`Execute`/`Disconnect`/`NotificationWait`) rather than a query parameter - so there is exactly
+ * one `@Post()` method, not one per request type.
+ *
+ * **Auth**: `@Auth(["jwt"])` - unchanged from every other route in this app. Real, modern Exchange Server's
+ * own MAPI virtual directory genuinely supports `OAuth` as a configured `IISAuthenticationMethods` value
+ * alongside `NTLM`/`Negotiate`, so Bearer-token auth on this exact endpoint is real current Exchange
+ * behavior, not a deviation this library invents - see the architecture plan's "Auth" section.
+ *
+ * **Connect/Disconnect are complete**: `Connect` establishes a real `MapiSessionContext` (via
+ * `MapiSessionManager`) and sets the two spec-fixed session cookies (`MapiContext`/`MapiSequence`);
+ * `Disconnect` releases the session. **`Execute` dispatches real ROPs** (starting with `RopLogon`/`RopRelease`
+ * - build-order step 4) via `RopDispatcher`, using whichever `RopHandler`s `ropHandlerClasses` registers;
+ * an unrecognized `RopId` simply stops processing (see `RopDispatcher`'s own doc comment for why), the same
+ * "real, functional, no commands implemented yet" stance `BaseEasRoute`'s own skeleton step took for its
+ * empty `commandHandlerClasses` before `ProvisionCommand` landed - here scoped per-ROP instead of per-request.
+ *
+ * **Always non-chunked**: every response here uses `Content-Length` (via `res.status(200).send(buffer)`),
+ * never `Transfer-Encoding: chunked` - both are equally spec-valid per `[MS-OXCMAPIHTTP]`'s own "Common
+ * Response Format", and skipping the `PROCESSING`/`PENDING`/`DONE` keep-alive meta-tag streaming matches
+ * every other route in this library's own response idiom. See the architecture plan's "Protocol facts"
+ * section for the full reasoning and its documented limitation.
+ *
+ * `mailboxClass`/`folderClass` are supplied by the Mongo/SQL concrete subclasses, following the exact
+ * one-line-per-backend pattern used throughout this library's other routes/jobs. `folderRepo` is built once
+ * here (not per-handler, unlike EAS's per-command repo pattern) and threaded through `RopContext` to every
+ * `RopHandler` - see `RopHandler.ts`'s own doc comment for why.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export declare abstract class BaseMapiEmsmdbRoute<M extends Mailbox> {
+    protected abstract mailboxClass: any;
+    protected abstract folderClass: any;
+    protected abstract messageClass: any;
+    protected abstract calendarEventClass: any;
+    protected abstract contactClass: any;
+    protected abstract taskClass: any;
+    protected abstract labelClass: any;
+    /** The backend's `AuditLogEntry` class. When set, messages deleted through MAPI are audited like REST deletes. */
+    protected auditLogClass?: any;
+    /** ROP handler classes to instantiate (one each) in `@Init`, keyed by their own `ropId`. Empty until a
+     * concrete `RopHandler` lands - every ROP is then simply left unprocessed (see `RopDispatcher`'s own doc
+     * comment), the correct, honest behavior for a transport skeleton with no ROPs implemented yet. */
+    protected ropHandlerClasses: any[];
+    private _objectFactory?;
+    private mailboxRepo?;
+    private folderRepo?;
+    private messageRepo?;
+    private calendarEventRepo?;
+    private contactRepo?;
+    private taskRepo?;
+    private labelRepo?;
+    private sessionManager?;
+    private readonly ropHandlers;
+    private blobStore?;
+    private scanPipeline?;
+    private mailTransport?;
+    /** Publishes the live `Folder` counts-update event `refreshFolderCounts()` sends after a ROP handler changes what
+     * a folder holds through `context.messageRepo` directly - see `folderCountsContext()`/`RopContext.notifyFolderCounts`. */
+    private notificationUtils?;
+    private logger;
+    private config?;
+    init(): Promise<void>;
+    dispatch(req: HttpRequest, res: HttpResponse, user?: JWTUser): Promise<void>;
+    /**
+     * `Connect` establishes a new Session Context - never trusts the request body's own `UserDn` field for
+     * mailbox identity (the same "never a client-supplied mailbox, always resolved from the authenticated
+     * JWT" principle `BaseEasRoute`/`BaseSearchRoute` already apply via `resolveCallerMailboxUid`) - so the
+     * request body is never decoded at all here.
+     */
+    private handleConnect;
+    /**
+     * `Execute` decodes the outer envelope (`Flags`/`RopBufferSize`/`RopBuffer`/`MaxRopOut`/...) and the inner ROP
+     * buffer framing (`RopBuffer.ts`), dispatches every contained ROP via `RopDispatcher`, and re-encodes the
+     * collected responses - preserving the incoming `handleTable` unchanged (this pragmatic subset never
+     * allocates/frees table-wide handle slots at the framing level; individual `RopHandler`s manage their own
+     * entries within `session.handles` instead).
+     *
+     * - **One request at a time per session.** Only the caller's own session (whose mailbox is still the caller's) is
+     * locked. The lock is taken before any ROP runs and renewed every `SESSION_LOCK_RENEW_MS` while the request runs,
+     * so a slow request keeps it; an overlapping request gets `X-ResponseCode` 15 (Invalid Sequence) without any side
+     * effects. The save stays compare-and-set. Each `Execute` also refreshes the session's place in the per-user cap.
+     * - **Retries.** While a request with an `X-RequestId` runs, an in-progress marker for that id is kept (renewed with
+     * the lock); a retry of it is answered with code 15 instead of running again. Its response then replaces the
+     * marker, and a request repeating the last id (a client retrying after a lost response) gets that response again
+     * instead of running its ROPs twice. A request that ends without a stored response drops its marker.
+     * `MapiSequence` isn't validated - the lock and the replay cache cover what it guards against here.
+     * - **Output size.** ROP responses are held to the client's `MaxRopOut`, less the `RopSize` field and handle
+     * table, and to what a 16-bit `RopSize` can describe (see `dispatchRops`). Room for a `RopBufferTooSmall` covering
+     * the rest of the request is kept free as ROPs run, so a response that doesn't fit is always answered that way (a
+     * normal, stored response). Only a `MaxRopOut` too small for a `RopBufferTooSmall` of the whole request answers
+     * `ecBufferTooSmall` in the body `ErrorCode`, before any ROP runs, so nothing is stored and a retry changes nothing.
+     * - **Released handles.** Once the session is saved, the FastTransfer streams and write-stream chunks of handles
+     * the request released are deleted from the shared store; `Disconnect` and session eviction delete a session's
+     * whole set.
+     * - **Malformed ROPs.** A ROP that can't be decoded answers 400; the ROPs before it already ran, so the session is
+     * still saved first.
+     */
+    private handleExecute;
+    /** Runs an `Execute` under its session's lock. `running.requestId` is set while this request's in-progress marker is
+     * stored, and cleared once its response is stored instead. */
+    private executeLocked;
+    /** What `refreshFolderCounts()` (`@rapidmx/restapi`) needs to recompute, re-cache and publish a folder's counts -
+     * see `RopContext.notifyFolderCounts`'s own doc comment for why a ROP handler must call it after adding, deleting
+     * or moving a `Message` row through `context.messageRepo` itself. */
+    private folderCountsContext;
+    /** Writes an `Execute` failure body (no ROP buffer) with the given `X-ResponseCode` and `ErrorCode`. */
+    private sendExecuteFailure;
+    /**
+     * Loads the session named by the `MapiContext` cookie, but only if the authenticated caller is the user who
+     * `Connect`ed it. The cookie value alone is a bearer token for someone else's mailbox otherwise, so a session
+     * belonging to another user is treated exactly like one that doesn't exist.
+     */
+    private loadOwnSession;
+    private handleDisconnect;
+}

package/dist/types/BaseMapiNspiRoute.d.ts

@@ -0,0 +1,38 @@
+import { type JWTUser } from "@rapidrest/core";
+import { HttpRequest, HttpResponse } from "@rapidrest/service-core";
+import { Mailbox } from "@rapidmx/restapi";
+/**
+ * Abstract base for the single fixed NSPI endpoint (`POST /mapi/nspi` by `[MS-OXCMAPIHTTP]` convention, though
+ * the concrete path is left to the consuming application to mount via `@Route(...)`, the identical
+ * undecorated-base-class pattern `BaseMapiEmsmdbRoute`/`BaseEasRoute` already establish). Dispatches on the
+ * `X-RequestType` header, the same multiplexing mechanism EMSMDB uses - but unlike EMSMDB, there is no ROP
+ * buffer framing here: each `X-RequestType` value (`Bind`/`Unbind`/`GetMatches`) is its own flat, self-
+ * contained request/response body (`[MS-OXCMAPIHTTP]` §2.2.5), so this route dispatches directly to a small
+ * handler function per operation instead of decoding a multiplexed stream.
+ *
+ * **Pragmatic subset scope**: only `Bind`/`Unbind`/`GetMatches` are implemented - real NSPI's other dozen-plus
+ * request types (`QueryRows`, `ResolveNames`, `GetProps`, `ModProps`, ...) are genuine full address-book/
+ * directory-replication operations this deployment's own minimal GAL-lookup use case doesn't need; an
+ * unrecognized `X-RequestType` gets a `501`, the same "recognized-but-deferred vs malformed" distinction
+ * `BaseMapiEmsmdbRoute`'s own `NotificationWait` case already draws. See `NspiBindHandler.ts`'s own doc comment
+ * for why no real NSPI session state is created or tracked between calls.
+ *
+ * **Auth**: `@Auth(["jwt"])`, unchanged from every other route in this app - the same reasoning
+ * `BaseMapiEmsmdbRoute`'s own doc comment already gives for why Bearer-token auth on an address-book endpoint
+ * is real, current Exchange behavior, not a deviation this library invents.
+ *
+ * `mailboxClass`/`contactClass` are supplied by the Mongo/SQL concrete subclasses. GAL search itself (see
+ * `NspiGetMatchesHandler.ts`) uses `RepoUtils`'s `regex(...)` operator, which compiles identically on both
+ * backends - no per-backend hook needed here.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export declare abstract class BaseMapiNspiRoute<M extends Mailbox> {
+    protected abstract mailboxClass: any;
+    protected abstract contactClass: any;
+    private _objectFactory?;
+    private mailboxRepo?;
+    private contactRepo?;
+    init(): Promise<void>;
+    dispatch(req: HttpRequest, res: HttpResponse, user?: JWTUser): Promise<void>;
+}