@rapidmx/mapi-plugin 1.0.0-beta.10

package/dist/lib/BaseMapiEmsmdbRoute.js

@@ -0,0 +1,489 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { ApiError, ObjectDecorators } from "@rapidrest/core";
+import { ApiErrorMessages, ApiErrors, NotificationUtils, RepoUtils, RouteDecorators, } from "@rapidrest/service-core";
+import { BufferReader, BufferWriter, DecodeError } from "./codec/BufferCursor.js";
+import { decodeRopBuffer, encodeRopBuffer } from "./codec/RopBuffer.js";
+import { MapiSessionManager, SESSION_LOCK_RENEW_MS, takeReleasedHandleData } from "./MapiSessionManager.js";
+import { dispatchRops, ExecuteBufferTooSmallError, MAX_ROPS_LIST_BYTES } from "./RopDispatcher.js";
+import { handleDataOwners } from "./rop/HandleDataCache.js";
+import { handleDataStoreOf } from "./rop/RopHandler.js";
+import { ScanPipeline } from "@rapidmx/restapi/scan";
+import { RecoverableRepoUtils, recordAuditLog, refreshFolderCounts, resolveCallerMailboxUid, } from "@rapidmx/restapi";
+const { Config, Init, Inject, Logger } = ObjectDecorators;
+const { Auth, Post, Request, Response, User: AuthUser } = RouteDecorators;
+/** `[MS-OXCMAPIHTTP]` `X-ResponseCode` 10, "Context Not Found": the session context named by the `MapiContext`
+ * cookie doesn't exist (expired, ended, or not the caller's). The client `Connect`s again. `X-ResponseCode` only takes
+ * the spec's small status values; the MAPI HRESULT goes in the body's `ErrorCode` (`ERROR_SESSION_NOT_FOUND`). */
+const RESPONSE_CODE_CONTEXT_NOT_FOUND = 10;
+/** The well-known MAPI HRESULT `MAPI_E_LOGON_FAILED`, reused as the body `ErrorCode` for "no such session -
+ * reconnect". Not a claim of exact `[MS-OXCRPC]` return-value-table parity for this specific condition. */
+const ERROR_SESSION_NOT_FOUND = 0x80040111;
+/** `MAPI_E_TOO_BIG`, the body `ErrorCode` when a request would grow the session past `MAX_SESSION_BYTES`. */
+const ERROR_SESSION_TOO_BIG = 0x80040305;
+/** `[MS-OXCMAPIHTTP]` `X-ResponseCode` 15, "Invalid Sequence": the request overlapped another one on the same
+ * session context. Sent when the session changed underneath this request (see `MapiSessionManager.save()`). */
+const RESPONSE_CODE_INVALID_SEQUENCE = 15;
+/** `ecBufferTooSmall` ([MS-OXCRPC]), the body `ErrorCode` when the client's `MaxRopOut` can't even hold a
+ * `RopBufferTooSmall` carrying the whole request. No ROP has run by then. */
+const ERROR_BUFFER_TOO_SMALL = 0x0000047d;
+/** The largest `RopBufferSize` accepted - the `[MS-OXCRPC]` ROP input buffer limit. */
+export const MAX_ROP_BUFFER_SIZE = 32767;
+/**
+ * Decodes an `Execute` request body's `Flags`/`RopBufferSize`/`RopBuffer`/`MaxRopOut` and the ROP buffer framing
+ * inside it. Throws a 400 `ApiError` for a malformed body - a `RopBufferSize` over `MAX_ROP_BUFFER_SIZE` or past the
+ * end of the body, or a ROP buffer `decodeRopBuffer` rejects - instead of letting a bare `RangeError` surface as a
+ * 500. A body that ends before `MaxRopOut` gets the largest response a `RopBuffer` can carry.
+ * `AuxiliaryBufferSize`/`AuxiliaryBuffer` are left unread - no auxiliary-payload support in this pragmatic subset.
+ */
+export function decodeExecuteRequest(rawBody) {
+    try {
+        const reader = new BufferReader(rawBody);
+        reader.readUInt32LE(); // Flags - unused by this pragmatic subset (no client ROP-response hints honored)
+        const ropBufferSize = reader.readUInt32LE();
+        if (ropBufferSize > MAX_ROP_BUFFER_SIZE || ropBufferSize > reader.remaining) {
+            throw new RangeError(`Execute: invalid RopBufferSize ${ropBufferSize}.`);
+        }
+        const ropBuffer = decodeRopBuffer(reader.readBytes(ropBufferSize));
+        const maxRopOut = reader.remaining >= 4 ? reader.readUInt32LE() : MAX_ROPS_LIST_BYTES + 2;
+        return { ...ropBuffer, maxRopOut };
+    }
+    catch {
+        throw new ApiError(ApiErrors.INVALID_REQUEST, 400, ApiErrorMessages.INVALID_REQUEST);
+    }
+}
+function firstHeader(req, name) {
+    const value = req.headers[name];
+    return Array.isArray(value) ? value[0] : value;
+}
+/**
+ * Abstract base for the single fixed EMSMDB endpoint (`POST /mapi/emsmdb` by `[MS-OXCMAPIHTTP]` convention,
+ * though the concrete path is left to the consuming application to mount via `@Route(...)` - see
+ * `BaseEasRoute.ts` for the identical undecorated-base-class pattern this follows). Like EAS, MAPI/HTTP
+ * multiplexes several request types against one URL - here via the `X-RequestType` **header**
+ * (`Connect`/`Execute`/`Disconnect`/`NotificationWait`) rather than a query parameter - so there is exactly
+ * one `@Post()` method, not one per request type.
+ *
+ * **Auth**: `@Auth(["jwt"])` - unchanged from every other route in this app. Real, modern Exchange Server's
+ * own MAPI virtual directory genuinely supports `OAuth` as a configured `IISAuthenticationMethods` value
+ * alongside `NTLM`/`Negotiate`, so Bearer-token auth on this exact endpoint is real current Exchange
+ * behavior, not a deviation this library invents - see the architecture plan's "Auth" section.
+ *
+ * **Connect/Disconnect are complete**: `Connect` establishes a real `MapiSessionContext` (via
+ * `MapiSessionManager`) and sets the two spec-fixed session cookies (`MapiContext`/`MapiSequence`);
+ * `Disconnect` releases the session. **`Execute` dispatches real ROPs** (starting with `RopLogon`/`RopRelease`
+ * - build-order step 4) via `RopDispatcher`, using whichever `RopHandler`s `ropHandlerClasses` registers;
+ * an unrecognized `RopId` simply stops processing (see `RopDispatcher`'s own doc comment for why), the same
+ * "real, functional, no commands implemented yet" stance `BaseEasRoute`'s own skeleton step took for its
+ * empty `commandHandlerClasses` before `ProvisionCommand` landed - here scoped per-ROP instead of per-request.
+ *
+ * **Always non-chunked**: every response here uses `Content-Length` (via `res.status(200).send(buffer)`),
+ * never `Transfer-Encoding: chunked` - both are equally spec-valid per `[MS-OXCMAPIHTTP]`'s own "Common
+ * Response Format", and skipping the `PROCESSING`/`PENDING`/`DONE` keep-alive meta-tag streaming matches
+ * every other route in this library's own response idiom. See the architecture plan's "Protocol facts"
+ * section for the full reasoning and its documented limitation.
+ *
+ * `mailboxClass`/`folderClass` are supplied by the Mongo/SQL concrete subclasses, following the exact
+ * one-line-per-backend pattern used throughout this library's other routes/jobs. `folderRepo` is built once
+ * here (not per-handler, unlike EAS's per-command repo pattern) and threaded through `RopContext` to every
+ * `RopHandler` - see `RopHandler.ts`'s own doc comment for why.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class BaseMapiEmsmdbRoute {
+    constructor() {
+        /** ROP handler classes to instantiate (one each) in `@Init`, keyed by their own `ropId`. Empty until a
+         * concrete `RopHandler` lands - every ROP is then simply left unprocessed (see `RopDispatcher`'s own doc
+         * comment), the correct, honest behavior for a transport skeleton with no ROPs implemented yet. */
+        this.ropHandlerClasses = [];
+        this.ropHandlers = new Map();
+    }
+    async init() {
+        this.mailboxRepo = await this._objectFactory.newInstance(RepoUtils, {
+            name: this.mailboxClass.name,
+            args: [this.mailboxClass],
+        });
+        this.folderRepo = await this._objectFactory.newInstance(RecoverableRepoUtils, {
+            name: this.folderClass.name,
+            args: [this.folderClass],
+        });
+        this.messageRepo = await this._objectFactory.newInstance(RecoverableRepoUtils, {
+            name: this.messageClass.name,
+            args: [this.messageClass],
+        });
+        this.calendarEventRepo = await this._objectFactory.newInstance(RecoverableRepoUtils, {
+            name: this.calendarEventClass.name,
+            args: [this.calendarEventClass],
+        });
+        this.contactRepo = await this._objectFactory.newInstance(RecoverableRepoUtils, {
+            name: this.contactClass.name,
+            args: [this.contactClass],
+        });
+        this.taskRepo = await this._objectFactory.newInstance(RecoverableRepoUtils, {
+            name: this.taskClass.name,
+            args: [this.taskClass],
+        });
+        // Label extends plain BaseEntity, not RecoverableBaseEntity (see restapi's own model doc comment) - no
+        // soft-delete support to preserve, so a plain RepoUtils is correct here, matching mailboxRepo's own
+        // choice for the identical reason.
+        this.labelRepo = await this._objectFactory.newInstance(RepoUtils, {
+            name: this.labelClass.name,
+            args: [this.labelClass],
+        });
+        this.sessionManager = await this._objectFactory.newInstance(MapiSessionManager);
+        for (const HandlerClass of this.ropHandlerClasses) {
+            const handler = await this._objectFactory.newInstance(HandlerClass);
+            this.ropHandlers.set(handler.ropId, handler);
+        }
+    }
+    async dispatch(req, res, user) {
+        if (!this.mailboxRepo ||
+            !this.folderRepo ||
+            !this.messageRepo ||
+            !this.calendarEventRepo ||
+            !this.contactRepo ||
+            !this.taskRepo ||
+            !this.labelRepo ||
+            !this.sessionManager ||
+            !this.blobStore ||
+            !this.scanPipeline ||
+            !this.mailTransport) {
+            throw new ApiError(ApiErrors.INTERNAL_ERROR, 500, ApiErrorMessages.INTERNAL_ERROR);
+        }
+        if (!user) {
+            throw new ApiError(ApiErrors.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        const requestType = firstHeader(req, "x-requesttype");
+        const clientInfo = firstHeader(req, "x-clientinfo") ?? "";
+        const requestId = firstHeader(req, "x-requestid") ?? "";
+        res.setHeader("Content-Type", "application/mapi-http")
+            .setHeader("X-RequestType", requestType ?? "")
+            .setHeader("X-RequestId", requestId)
+            .setHeader("X-ResponseCode", "0")
+            .setHeader("X-ClientInfo", clientInfo)
+            .setHeader("X-ServerApplication", "RapidREST-Mail");
+        switch (requestType) {
+            case "Connect":
+                await this.handleConnect(req, res, user);
+                return;
+            case "Execute":
+                await this.handleExecute(req, res, user);
+                return;
+            case "Disconnect":
+                await this.handleDisconnect(req, res, user);
+                return;
+            case "NotificationWait":
+                // Real, spec-defined request type, deliberately deferred - no push-notification support in
+                // this pass (see the architecture plan's ROP scope table). Distinct from an unrecognized
+                // X-RequestType value (400 below), the same distinction BaseEasRoute draws between 501
+                // ("recognized but deferred") and 400 ("malformed request").
+                res.status(501).send();
+                return;
+            default:
+                throw new ApiError(ApiErrors.INVALID_REQUEST, 400, ApiErrorMessages.INVALID_REQUEST);
+        }
+    }
+    /**
+     * `Connect` establishes a new Session Context - never trusts the request body's own `UserDn` field for
+     * mailbox identity (the same "never a client-supplied mailbox, always resolved from the authenticated
+     * JWT" principle `BaseEasRoute`/`BaseSearchRoute` already apply via `resolveCallerMailboxUid`) - so the
+     * request body is never decoded at all here.
+     */
+    async handleConnect(req, res, user) {
+        const mailboxUid = await resolveCallerMailboxUid(this.mailboxRepo, user);
+        if (!mailboxUid) {
+            throw new ApiError(ApiErrors.NOT_FOUND, 404, ApiErrorMessages.NOT_FOUND);
+        }
+        const mailbox = await this.mailboxRepo.findOne(mailboxUid, { ignoreACL: true });
+        const session = await this.sessionManager.create(mailboxUid, user.uid);
+        res.appendHeader("Set-Cookie", `MapiContext=${session.uid}`);
+        res.appendHeader("Set-Cookie", `MapiSequence=0`);
+        const body = new BufferWriter();
+        body.writeUInt32LE(0); // StatusCode
+        body.writeUInt32LE(0); // ErrorCode
+        body.writeUInt32LE(60000); // PollsMax (ms) - pragmatic constant, not a tuned server policy value
+        body.writeUInt32LE(3); // RetryCount - pragmatic constant
+        body.writeUInt32LE(5000); // RetryDelay (ms) - pragmatic constant
+        // DnPrefix: this library addresses mailboxes by UID/SMTP-address, never real X.500 DNs, so this is a
+        // fixed, unused placeholder rather than a real DN prefix a client could build recipients from.
+        body.writeNullTerminatedString8("/");
+        body.writeNullTerminatedUtf16LE(mailbox?.displayName ?? "");
+        body.writeUInt32LE(0); // AuxiliaryBufferSize
+        res.status(200).send(body.toBuffer());
+    }
+    /**
+     * `Execute` decodes the outer envelope (`Flags`/`RopBufferSize`/`RopBuffer`/`MaxRopOut`/...) and the inner ROP
+     * buffer framing (`RopBuffer.ts`), dispatches every contained ROP via `RopDispatcher`, and re-encodes the
+     * collected responses - preserving the incoming `handleTable` unchanged (this pragmatic subset never
+     * allocates/frees table-wide handle slots at the framing level; individual `RopHandler`s manage their own
+     * entries within `session.handles` instead).
+     *
+     * - **One request at a time per session.** Only the caller's own session (whose mailbox is still the caller's) is
+     * locked. The lock is taken before any ROP runs and renewed every `SESSION_LOCK_RENEW_MS` while the request runs,
+     * so a slow request keeps it; an overlapping request gets `X-ResponseCode` 15 (Invalid Sequence) without any side
+     * effects. The save stays compare-and-set. Each `Execute` also refreshes the session's place in the per-user cap.
+     * - **Retries.** While a request with an `X-RequestId` runs, an in-progress marker for that id is kept (renewed with
+     * the lock); a retry of it is answered with code 15 instead of running again. Its response then replaces the
+     * marker, and a request repeating the last id (a client retrying after a lost response) gets that response again
+     * instead of running its ROPs twice. A request that ends without a stored response drops its marker.
+     * `MapiSequence` isn't validated - the lock and the replay cache cover what it guards against here.
+     * - **Output size.** ROP responses are held to the client's `MaxRopOut`, less the `RopSize` field and handle
+     * table, and to what a 16-bit `RopSize` can describe (see `dispatchRops`). Room for a `RopBufferTooSmall` covering
+     * the rest of the request is kept free as ROPs run, so a response that doesn't fit is always answered that way (a
+     * normal, stored response). Only a `MaxRopOut` too small for a `RopBufferTooSmall` of the whole request answers
+     * `ecBufferTooSmall` in the body `ErrorCode`, before any ROP runs, so nothing is stored and a retry changes nothing.
+     * - **Released handles.** Once the session is saved, the FastTransfer streams and write-stream chunks of handles
+     * the request released are deleted from the shared store; `Disconnect` and session eviction delete a session's
+     * whole set.
+     * - **Malformed ROPs.** A ROP that can't be decoded answers 400; the ROPs before it already ran, so the session is
+     * still saved first.
+     */
+    async handleExecute(req, res, user) {
+        const sessionId = req.cookies["MapiContext"];
+        if (!sessionId) {
+            this.sendExecuteFailure(res, RESPONSE_CODE_CONTEXT_NOT_FOUND, ERROR_SESSION_NOT_FOUND);
+            return;
+        }
+        // Ownership first: someone else's session (or a mailbox reassigned since Connect) is never locked by this caller.
+        const owned = await this.loadOwnSession(req, user);
+        if (!owned || (await resolveCallerMailboxUid(this.mailboxRepo, user)) !== owned.mailboxUid) {
+            this.sendExecuteFailure(res, RESPONSE_CODE_CONTEXT_NOT_FOUND, ERROR_SESSION_NOT_FOUND);
+            return;
+        }
+        const lockToken = await this.sessionManager.acquireLock(sessionId);
+        if (!lockToken) {
+            this.sendExecuteFailure(res, RESPONSE_CODE_INVALID_SEQUENCE, RESPONSE_CODE_INVALID_SEQUENCE);
+            return;
+        }
+        const running = {};
+        // Renewed while the request runs, so a slow Execute never loses its lock (or its in-progress marker) to a retry.
+        // Renewals run one after another, and stop once the lock is lost. The marker is only extended while it is still
+        // this request's marker, so a renewal landing after the response was stored never turns it back into a marker.
+        let renewing = Promise.resolve();
+        const renewal = setInterval(() => {
+            renewing = renewing.then(async () => {
+                const held = await this.sessionManager.renewLock(sessionId, lockToken).catch(() => true);
+                if (!held) {
+                    clearInterval(renewal);
+                    return;
+                }
+                if (running.requestId) {
+                    await this.sessionManager.renewInProgress(sessionId, running.requestId).catch(() => undefined);
+                }
+            });
+        }, SESSION_LOCK_RENEW_MS);
+        renewal.unref();
+        try {
+            await this.executeLocked(req, res, user, running);
+        }
+        finally {
+            clearInterval(renewal);
+            await renewing;
+            if (running.requestId) {
+                await this.sessionManager.clearInProgress(sessionId, running.requestId).catch(() => undefined);
+            }
+            await this.sessionManager.releaseLock(sessionId, lockToken);
+        }
+    }
+    /** Runs an `Execute` under its session's lock. `running.requestId` is set while this request's in-progress marker is
+     * stored, and cleared once its response is stored instead. */
+    async executeLocked(req, res, user, running) {
+        // Loaded again under the lock: the copy read before locking may already be out of date.
+        const session = await this.loadOwnSession(req, user);
+        if (!session) {
+            this.sendExecuteFailure(res, RESPONSE_CODE_CONTEXT_NOT_FOUND, ERROR_SESSION_NOT_FOUND);
+            return;
+        }
+        const requestId = firstHeader(req, "x-requestid") ?? "";
+        const replay = requestId ? await this.sessionManager.storedResponse(session.uid, requestId) : undefined;
+        if (replay === "inProgress") {
+            // The same request is still running elsewhere (its lock lapsed, or its pod died moments ago).
+            this.sendExecuteFailure(res, RESPONSE_CODE_INVALID_SEQUENCE, RESPONSE_CODE_INVALID_SEQUENCE);
+            return;
+        }
+        if (replay) {
+            res.status(200).send(replay);
+            return;
+        }
+        if (requestId) {
+            await this.sessionManager.markInProgress(session.uid, requestId);
+            running.requestId = requestId;
+        }
+        await this.sessionManager.touch(session).catch(() => undefined);
+        const { ropsList, handleTable, maxRopOut } = decodeExecuteRequest(req.rawBody ?? Buffer.alloc(0));
+        const context = {
+            mailboxUid: session.mailboxUid,
+            userUid: session.userUid,
+            session,
+            mailboxRepo: this.mailboxRepo,
+            folderRepo: this.folderRepo,
+            messageRepo: this.messageRepo,
+            calendarEventRepo: this.calendarEventRepo,
+            contactRepo: this.contactRepo,
+            taskRepo: this.taskRepo,
+            labelRepo: this.labelRepo,
+            folderClass: this.folderClass,
+            messageClass: this.messageClass,
+            calendarEventClass: this.calendarEventClass,
+            contactClass: this.contactClass,
+            taskClass: this.taskClass,
+            labelClass: this.labelClass,
+            blobStore: this.blobStore,
+            scanPipeline: this.scanPipeline,
+            mailTransport: this.mailTransport,
+            handleData: this.sessionManager.handleDataStore,
+            audit: this.auditLogClass
+                ? (params) => recordAuditLog(this._objectFactory, this.auditLogClass, { config: this.config, req, user, logger: this.logger }, params)
+                : undefined,
+            notifyFolderCounts: (folderUids, options) => refreshFolderCounts(this.folderCountsContext(), folderUids, options),
+        };
+        // RopSize (2 bytes) and the echoed handle table share MaxRopOut with the ROP responses. dispatchRops only throws
+        // for a request it can't decode (a failing ROP gets a failure response instead).
+        const dispatched = await dispatchRops(ropsList, this.ropHandlers, context, {
+            maxOutputBytes: maxRopOut - 2 - handleTable.length * 4,
+        }).catch((error) => ({ error }));
+        const saved = await this.sessionManager.save(session);
+        const released = takeReleasedHandleData(session);
+        if (saved === "saved") {
+            // Streams and write chunks of handles this request released; best effort, they expire anyway.
+            const store = handleDataStoreOf(context);
+            const owners = handleDataOwners(session.uid, session.userUid);
+            await Promise.all(released.map((key) => store.delete(key, owners).catch(() => undefined)));
+        }
+        if (!Buffer.isBuffer(dispatched) && !(dispatched.error instanceof ExecuteBufferTooSmallError)) {
+            throw dispatched.error instanceof DecodeError ? new ApiError(ApiErrors.INVALID_REQUEST, 400, ApiErrorMessages.INVALID_REQUEST) : dispatched.error;
+        }
+        if (saved !== "saved") {
+            // conflict: another request saved first (possible once a lock has expired), so this request's handle
+            // changes can't be kept and the client retries. missing: the session ended meanwhile. tooBig: see
+            // MAX_SESSION_BYTES.
+            const [responseCode, errorCode] = saved === "conflict"
+                ? [RESPONSE_CODE_INVALID_SEQUENCE, RESPONSE_CODE_INVALID_SEQUENCE]
+                : saved === "missing"
+                    ? [RESPONSE_CODE_CONTEXT_NOT_FOUND, ERROR_SESSION_NOT_FOUND]
+                    : [0, ERROR_SESSION_TOO_BIG];
+            this.sendExecuteFailure(res, responseCode, errorCode);
+            return;
+        }
+        if (!Buffer.isBuffer(dispatched)) {
+            // [MS-OXCRPC] ecBufferTooSmall: not even a RopBufferTooSmall of the whole request fits, so no ROP ran.
+            this.sendExecuteFailure(res, 0, ERROR_BUFFER_TOO_SMALL);
+            return;
+        }
+        const responseRopsList = dispatched;
+        const responseRopBuffer = encodeRopBuffer({ ropsList: responseRopsList, handleTable });
+        const body = new BufferWriter();
+        body.writeUInt32LE(0); // StatusCode
+        body.writeUInt32LE(0); // ErrorCode
+        body.writeUInt32LE(0); // Flags
+        body.writeUInt32LE(responseRopBuffer.length);
+        body.writeBytes(responseRopBuffer);
+        body.writeUInt32LE(0); // AuxiliaryBufferSize
+        const responseBody = body.toBuffer();
+        if (requestId) {
+            await this.sessionManager.storeResponse(session.uid, requestId, responseBody);
+            delete running.requestId;
+        }
+        res.status(200).send(responseBody);
+    }
+    /** What `refreshFolderCounts()` (`@rapidmx/restapi`) needs to recompute, re-cache and publish a folder's counts -
+     * see `RopContext.notifyFolderCounts`'s own doc comment for why a ROP handler must call it after adding, deleting
+     * or moving a `Message` row through `context.messageRepo` itself. */
+    folderCountsContext() {
+        return {
+            messageRepo: this.messageRepo,
+            folderRepo: this.folderRepo,
+            folderClass: this.folderClass,
+            notificationUtils: this.notificationUtils,
+            logger: this.logger,
+        };
+    }
+    /** Writes an `Execute` failure body (no ROP buffer) with the given `X-ResponseCode` and `ErrorCode`. */
+    sendExecuteFailure(res, responseCode, errorCode) {
+        res.setHeader("X-ResponseCode", String(responseCode));
+        const body = new BufferWriter();
+        body.writeUInt32LE(0); // StatusCode
+        body.writeUInt32LE(errorCode); // ErrorCode
+        body.writeUInt32LE(0); // Flags
+        body.writeUInt32LE(0); // RopBufferSize
+        body.writeUInt32LE(0); // AuxiliaryBufferSize
+        res.status(200).send(body.toBuffer());
+    }
+    /**
+     * Loads the session named by the `MapiContext` cookie, but only if the authenticated caller is the user who
+     * `Connect`ed it. The cookie value alone is a bearer token for someone else's mailbox otherwise, so a session
+     * belonging to another user is treated exactly like one that doesn't exist.
+     */
+    async loadOwnSession(req, user) {
+        const sessionId = req.cookies["MapiContext"];
+        const session = sessionId ? await this.sessionManager.load(sessionId) : undefined;
+        return session && session.userUid === user.uid ? session : undefined;
+    }
+    async handleDisconnect(req, res, user) {
+        // Another user's session is left alone, with the same success response as for an unknown session.
+        const session = await this.loadOwnSession(req, user);
+        if (session) {
+            await this.sessionManager.destroy(session.uid);
+        }
+        const body = new BufferWriter();
+        body.writeUInt32LE(0); // StatusCode
+        body.writeUInt32LE(0); // ErrorCode
+        body.writeUInt32LE(0); // AuxiliaryBufferSize
+        res.status(200).send(body.toBuffer());
+    }
+}
+__decorate([
+    Inject("BlobStore"),
+    __metadata("design:type", Object)
+], BaseMapiEmsmdbRoute.prototype, "blobStore", void 0);
+__decorate([
+    Inject(ScanPipeline),
+    __metadata("design:type", ScanPipeline)
+], BaseMapiEmsmdbRoute.prototype, "scanPipeline", void 0);
+__decorate([
+    Inject("MailTransport"),
+    __metadata("design:type", Object)
+], BaseMapiEmsmdbRoute.prototype, "mailTransport", void 0);
+__decorate([
+    Inject(NotificationUtils),
+    __metadata("design:type", NotificationUtils)
+], BaseMapiEmsmdbRoute.prototype, "notificationUtils", void 0);
+__decorate([
+    Logger,
+    __metadata("design:type", Object)
+], BaseMapiEmsmdbRoute.prototype, "logger", void 0);
+__decorate([
+    Config(),
+    __metadata("design:type", Object)
+], BaseMapiEmsmdbRoute.prototype, "config", void 0);
+__decorate([
+    Init,
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], BaseMapiEmsmdbRoute.prototype, "init", null);
+__decorate([
+    Auth(["jwt"]),
+    Post(),
+    __param(0, Request),
+    __param(1, Response),
+    __param(2, AuthUser),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseMapiEmsmdbRoute.prototype, "dispatch", null);
+//# sourceMappingURL=BaseMapiEmsmdbRoute.js.map

package/dist/lib/BaseMapiEmsmdbRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseMapiEmsmdbRoute.js","sourceRoot":"","sources":["../../src/BaseMapiEmsmdbRoute.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAgB,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EACH,gBAAgB,EAChB,SAAS,EAGT,iBAAiB,EAEjB,SAAS,EACT,eAAe,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,eAAe,EAAkB,MAAM,sBAAsB,CAAC;AACxF,OAAO,EAAsB,kBAAkB,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAChI,OAAO,EAAE,YAAY,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACnG,OAAO,EAAE,gBAAgB,EAAwB,MAAM,0BAA0B,CAAC;AAClF,OAAO,EAAE,iBAAiB,EAAoC,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAGH,oBAAoB,EACpB,cAAc,EACd,mBAAmB,EACnB,uBAAuB,GAG1B,MAAM,kBAAkB,CAAC;AAC1B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAC1D,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC;AAE1E;;kHAEkH;AAClH,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAE3C;2GAC2G;AAC3G,MAAM,uBAAuB,GAAG,UAAU,CAAC;AAE3C,6GAA6G;AAC7G,MAAM,qBAAqB,GAAG,UAAU,CAAC;AAEzC;+GAC+G;AAC/G,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAE1C;6EAC6E;AAC7E,MAAM,sBAAsB,GAAG,UAAU,CAAC;AAE1C,uFAAuF;AACvF,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAQzC;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAChD,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,iFAAiF;QACxG,MAAM,aAAa,GAAW,MAAM,CAAC,YAAY,EAAE,CAAC;QACpD,IAAI,aAAa,GAAG,mBAAmB,IAAI,aAAa,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YAC1E,MAAM,IAAI,UAAU,CAAC,kCAAkC,aAAa,GAAG,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,mBAAmB,GAAG,CAAC,CAAC;QAC1F,OAAO,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,GAAG,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC;IACzF,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,GAAgB,EAAE,IAAY;IAC/C,MAAM,KAAK,GAAkC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,OAAgB,mBAAmB;IAAzC;QAWI;;2GAEmG;QACzF,sBAAiB,GAAU,EAAE,CAAC;QAavB,gBAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;IA8XjE,CAAC;IAvWgB,AAAN,KAAK,CAAC,IAAI;QACb,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,SAAS,EAAE;YACjE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;YAC5B,IAAI,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,oBAAoB,EAAE;YAC3E,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;YAC3B,IAAI,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,oBAAoB,EAAE;YAC5E,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;YAC5B,IAAI,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,oBAAoB,EAAE;YAClF,IAAI,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI;YAClC,IAAI,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,oBAAoB,EAAE;YAC5E,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;YAC5B,IAAI,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,oBAAoB,EAAE;YACzE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI;YACzB,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;SACzB,CAAC,CAAC;QACH,uGAAuG;QACvG,oGAAoG;QACpG,mCAAmC;QACnC,IAAI,CAAC,SAAS,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,SAAS,EAAE;YAC/D,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAC1B,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;QACjF,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAChD,MAAM,OAAO,GAAe,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;YACjF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;IACL,CAAC;IAIY,AAAN,KAAK,CAAC,QAAQ,CACR,GAAgB,EACf,GAAiB,EACjB,IAAc;QAExB,IACI,CAAC,IAAI,CAAC,WAAW;YACjB,CAAC,IAAI,CAAC,UAAU;YAChB,CAAC,IAAI,CAAC,WAAW;YACjB,CAAC,IAAI,CAAC,iBAAiB;YACvB,CAAC,IAAI,CAAC,WAAW;YACjB,CAAC,IAAI,CAAC,QAAQ;YACd,CAAC,IAAI,CAAC,SAAS;YACf,CAAC,IAAI,CAAC,cAAc;YACpB,CAAC,IAAI,CAAC,SAAS;YACf,CAAC,IAAI,CAAC,YAAY;YAClB,CAAC,IAAI,CAAC,aAAa,EACrB,CAAC;YACC,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,EAAE,gBAAgB,CAAC,cAAc,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QACzG,CAAC;QAED,MAAM,WAAW,GAAuB,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC1E,MAAM,UAAU,GAAW,WAAW,CAAC,GAAG,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC;QAClE,MAAM,SAAS,GAAW,WAAW,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC;QAEhE,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,uBAAuB,CAAC;aACjD,SAAS,CAAC,eAAe,EAAE,WAAW,IAAI,EAAE,CAAC;aAC7C,SAAS,CAAC,aAAa,EAAE,SAAS,CAAC;aACnC,SAAS,CAAC,gBAAgB,EAAE,GAAG,CAAC;aAChC,SAAS,CAAC,cAAc,EAAE,UAAU,CAAC;aACrC,SAAS,CAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;QAExD,QAAQ,WAAW,EAAE,CAAC;YAClB,KAAK,SAAS;gBACV,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gBACzC,OAAO;YACX,KAAK,SAAS;gBACV,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gBACzC,OAAO;YACX,KAAK,YAAY;gBACb,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC5C,OAAO;YACX,KAAK,kBAAkB;gBACnB,2FAA2F;gBAC3F,yFAAyF;gBACzF,uFAAuF;gBACvF,6DAA6D;gBAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;gBACvB,OAAO;YACX;gBACI,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,GAAG,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC;QAC7F,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,aAAa,CAAC,GAAgB,EAAE,GAAiB,EAAE,IAAa;QAC1E,MAAM,UAAU,GAAuB,MAAM,uBAAuB,CAAC,IAAI,CAAC,WAAY,EAAE,IAAI,CAAC,CAAC;QAC9F,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,OAAO,GAAkB,MAAM,IAAI,CAAC,WAAY,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEhG,MAAM,OAAO,GAAuB,MAAM,IAAI,CAAC,cAAe,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5F,GAAG,CAAC,YAAY,CAAC,YAAY,EAAE,eAAe,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7D,GAAG,CAAC,YAAY,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;QAEjD,MAAM,IAAI,GAAG,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa;QACpC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY;QACnC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,sEAAsE;QACjG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,kCAAkC;QACzD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,uCAAuC;QACjE,qGAAqG;QACrG,+FAA+F;QAC/F,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;QAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACK,KAAK,CAAC,aAAa,CAAC,GAAgB,EAAE,GAAiB,EAAE,IAAa;QAC1E,MAAM,SAAS,GAAuB,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,+BAA+B,EAAE,uBAAuB,CAAC,CAAC;YACvF,OAAO;QACX,CAAC;QACD,kHAAkH;QAClH,MAAM,KAAK,GAAmC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACnF,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,uBAAuB,CAAC,IAAI,CAAC,WAAY,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;YAC1F,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,+BAA+B,EAAE,uBAAuB,CAAC,CAAC;YACvF,OAAO;QACX,CAAC;QACD,MAAM,SAAS,GAAuB,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACxF,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,8BAA8B,EAAE,8BAA8B,CAAC,CAAC;YAC7F,OAAO;QACX,CAAC;QACD,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,iHAAiH;QACjH,gHAAgH;QAChH,+GAA+G;QAC/G,IAAI,QAAQ,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE;YAC7B,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBAChC,MAAM,IAAI,GAAY,MAAM,IAAI,CAAC,cAAe,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBACnG,IAAI,CAAC,IAAI,EAAE,CAAC;oBACR,aAAa,CAAC,OAAO,CAAC,CAAC;oBACvB,OAAO;gBACX,CAAC;gBACD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;oBACpB,MAAM,IAAI,CAAC,cAAe,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACpG,CAAC;YACL,CAAC,CAAC,CAAC;QACP,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAC1B,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;gBAAS,CAAC;YACP,aAAa,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM,QAAQ,CAAC;YACf,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACpB,MAAM,IAAI,CAAC,cAAe,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACpG,CAAC;YACD,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACjE,CAAC;IACL,CAAC;IAED;kEAC8D;IACtD,KAAK,CAAC,aAAa,CAAC,GAAgB,EAAE,GAAiB,EAAE,IAAa,EAAE,OAA+B;QAC3G,wFAAwF;QACxF,MAAM,OAAO,GAAmC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrF,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,+BAA+B,EAAE,uBAAuB,CAAC,CAAC;YACvF,OAAO;QACX,CAAC;QAED,MAAM,SAAS,GAAW,WAAW,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC;QAChE,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAe,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzG,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC1B,8FAA8F;YAC9F,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,8BAA8B,EAAE,8BAA8B,CAAC,CAAC;YAC7F,OAAO;QACX,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACT,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7B,OAAO;QACX,CAAC;QACD,IAAI,SAAS,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,cAAe,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAClE,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;QAClC,CAAC;QACD,MAAM,IAAI,CAAC,cAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAEjE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClG,MAAM,OAAO,GAAe;YACxB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO;YACP,WAAW,EAAE,IAAI,CAAC,WAAY;YAC9B,UAAU,EAAE,IAAI,CAAC,UAAW;YAC5B,WAAW,EAAE,IAAI,CAAC,WAAY;YAC9B,iBAAiB,EAAE,IAAI,CAAC,iBAAkB;YAC1C,WAAW,EAAE,IAAI,CAAC,WAAY;YAC9B,QAAQ,EAAE,IAAI,CAAC,QAAS;YACxB,SAAS,EAAE,IAAI,CAAC,SAAU;YAC1B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAU;YAC1B,YAAY,EAAE,IAAI,CAAC,YAAa;YAChC,aAAa,EAAE,IAAI,CAAC,aAAc;YAClC,UAAU,EAAE,IAAI,CAAC,cAAe,CAAC,eAAe;YAChD,KAAK,EAAE,IAAI,CAAC,aAAa;gBACrB,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CACP,cAAc,CAAC,IAAI,CAAC,cAAe,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC;gBAC/H,CAAC,CAAC,SAAS;YACf,kBAAkB,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC;SACpH,CAAC;QACF,iHAAiH;QACjH,iFAAiF;QACjF,MAAM,UAAU,GAAgC,MAAM,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE;YACpG,cAAc,EAAE,SAAS,GAAG,CAAC,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC;SACzD,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAE1C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAa,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACpB,8FAA8F;YAC9F,MAAM,KAAK,GAAoB,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9D,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,YAAY,0BAA0B,CAAC,EAAE,CAAC;YAC5F,MAAM,UAAU,CAAC,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,GAAG,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;QACtJ,CAAC;QACD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACpB,qGAAqG;YACrG,kGAAkG;YAClG,qBAAqB;YACrB,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,GAC3B,KAAK,KAAK,UAAU;gBAChB,CAAC,CAAC,CAAC,8BAA8B,EAAE,8BAA8B,CAAC;gBAClE,CAAC,CAAC,KAAK,KAAK,SAAS;oBACnB,CAAC,CAAC,CAAC,+BAA+B,EAAE,uBAAuB,CAAC;oBAC5D,CAAC,CAAC,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;YACvC,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;YACtD,OAAO;QACX,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,uGAAuG;YACvG,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,sBAAsB,CAAC,CAAC;YACxD,OAAO;QACX,CAAC;QACD,MAAM,gBAAgB,GAAW,UAAU,CAAC;QAE5C,MAAM,iBAAiB,GAAW,eAAe,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC,CAAC;QAC/F,MAAM,IAAI,GAAG,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa;QACpC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY;QACnC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ;QAC/B,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACnC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;QAC7C,MAAM,YAAY,GAAW,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7C,IAAI,SAAS,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,cAAe,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;YAC/E,OAAO,OAAO,CAAC,SAAS,CAAC;QAC7B,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvC,CAAC;IAED;;yEAEqE;IAC7D,mBAAmB;QACvB,OAAO;YACH,WAAW,EAAE,IAAI,CAAC,WAAY;YAC9B,UAAU,EAAE,IAAI,CAAC,UAAW;YAC5B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,MAAM,EAAE,IAAI,CAAC,MAAM;SACtB,CAAC;IACN,CAAC;IAED,wGAAwG;IAChG,kBAAkB,CAAC,GAAiB,EAAE,YAAoB,EAAE,SAAiB;QACjF,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa;QACpC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;QAC3C,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ;QAC/B,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB;QACvC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;QAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,cAAc,CAAC,GAAgB,EAAE,IAAa;QACxD,MAAM,SAAS,GAAuB,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACjE,MAAM,OAAO,GAAmC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnH,OAAO,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,GAAgB,EAAE,GAAiB,EAAE,IAAa;QAC7E,kGAAkG;QAClG,MAAM,OAAO,GAAmC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrF,IAAI,OAAO,EAAE,CAAC;YACV,MAAM,IAAI,CAAC,cAAe,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa;QACpC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY;QACnC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;QAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1C,CAAC;CACJ;AA3XW;IADP,MAAM,CAAC,WAAW,CAAC;;sDACU;AAGtB;IADP,MAAM,CAAC,YAAY,CAAC;8BACE,YAAY;yDAAC;AAG5B;IADP,MAAM,CAAC,eAAe,CAAC;;0DACI;AAKpB;IADP,MAAM,CAAC,iBAAiB,CAAC;8BACE,iBAAiB;8DAAC;AAGtC;IADP,MAAM;;mDACa;AAGZ;IADP,MAAM,EAAE;;mDACY;AAGR;IADZ,IAAI;;;;+CAsCJ;AAIY;IAFZ,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,IAAI,EAAE;IAEF,WAAA,OAAO,CAAA;IACP,WAAA,QAAQ,CAAA;IACR,WAAA,QAAQ,CAAA;;;;mDAoDZ"}

package/dist/lib/BaseMapiNspiRoute.js

@@ -0,0 +1,114 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { ApiError, ObjectDecorators } from "@rapidrest/core";
+import { ApiErrorMessages, ApiErrors, RepoUtils, RouteDecorators } from "@rapidrest/service-core";
+import { handleNspiBind, handleNspiUnbind } from "./nspi/NspiBindHandler.js";
+import { handleNspiGetMatches } from "./nspi/NspiGetMatchesHandler.js";
+import { resolveCallerMailboxUid } from "@rapidmx/restapi";
+const { Init } = ObjectDecorators;
+const { Auth, Post, Request, Response, User: AuthUser } = RouteDecorators;
+function firstHeader(req, name) {
+    const value = req.headers[name];
+    return Array.isArray(value) ? value[0] : value;
+}
+/**
+ * Abstract base for the single fixed NSPI endpoint (`POST /mapi/nspi` by `[MS-OXCMAPIHTTP]` convention, though
+ * the concrete path is left to the consuming application to mount via `@Route(...)`, the identical
+ * undecorated-base-class pattern `BaseMapiEmsmdbRoute`/`BaseEasRoute` already establish). Dispatches on the
+ * `X-RequestType` header, the same multiplexing mechanism EMSMDB uses - but unlike EMSMDB, there is no ROP
+ * buffer framing here: each `X-RequestType` value (`Bind`/`Unbind`/`GetMatches`) is its own flat, self-
+ * contained request/response body (`[MS-OXCMAPIHTTP]` §2.2.5), so this route dispatches directly to a small
+ * handler function per operation instead of decoding a multiplexed stream.
+ *
+ * **Pragmatic subset scope**: only `Bind`/`Unbind`/`GetMatches` are implemented - real NSPI's other dozen-plus
+ * request types (`QueryRows`, `ResolveNames`, `GetProps`, `ModProps`, ...) are genuine full address-book/
+ * directory-replication operations this deployment's own minimal GAL-lookup use case doesn't need; an
+ * unrecognized `X-RequestType` gets a `501`, the same "recognized-but-deferred vs malformed" distinction
+ * `BaseMapiEmsmdbRoute`'s own `NotificationWait` case already draws. See `NspiBindHandler.ts`'s own doc comment
+ * for why no real NSPI session state is created or tracked between calls.
+ *
+ * **Auth**: `@Auth(["jwt"])`, unchanged from every other route in this app - the same reasoning
+ * `BaseMapiEmsmdbRoute`'s own doc comment already gives for why Bearer-token auth on an address-book endpoint
+ * is real, current Exchange behavior, not a deviation this library invents.
+ *
+ * `mailboxClass`/`contactClass` are supplied by the Mongo/SQL concrete subclasses. GAL search itself (see
+ * `NspiGetMatchesHandler.ts`) uses `RepoUtils`'s `regex(...)` operator, which compiles identically on both
+ * backends - no per-backend hook needed here.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class BaseMapiNspiRoute {
+    async init() {
+        this.mailboxRepo = await this._objectFactory.newInstance(RepoUtils, {
+            name: this.mailboxClass.name,
+            args: [this.mailboxClass],
+        });
+        this.contactRepo = await this._objectFactory.newInstance(RepoUtils, {
+            name: this.contactClass.name,
+            args: [this.contactClass],
+        });
+    }
+    async dispatch(req, res, user) {
+        if (!this.mailboxRepo || !this.contactRepo) {
+            throw new ApiError(ApiErrors.INTERNAL_ERROR, 500, ApiErrorMessages.INTERNAL_ERROR);
+        }
+        if (!user) {
+            throw new ApiError(ApiErrors.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        const requestType = firstHeader(req, "x-requesttype");
+        res.setHeader("Content-Type", "application/mapi-http")
+            .setHeader("X-RequestType", requestType ?? "")
+            .setHeader("X-ResponseCode", "0")
+            .setHeader("X-ServerApplication", "RapidREST-Mail");
+        switch (requestType) {
+            case "Bind":
+                await handleNspiBind(res, user, this.mailboxRepo);
+                return;
+            case "Unbind":
+                handleNspiUnbind(res);
+                return;
+            case "GetMatches": {
+                const mailboxUid = await resolveCallerMailboxUid(this.mailboxRepo, user);
+                if (!mailboxUid) {
+                    throw new ApiError(ApiErrors.NOT_FOUND, 404, ApiErrorMessages.NOT_FOUND);
+                }
+                await handleNspiGetMatches(req, res, mailboxUid, this.contactRepo);
+                return;
+            }
+            default:
+                res.status(501).send();
+                return;
+        }
+    }
+}
+__decorate([
+    Init,
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], BaseMapiNspiRoute.prototype, "init", null);
+__decorate([
+    Auth(["jwt"]),
+    Post(),
+    __param(0, Request),
+    __param(1, Response),
+    __param(2, AuthUser),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseMapiNspiRoute.prototype, "dispatch", null);
+//# sourceMappingURL=BaseMapiNspiRoute.js.map

package/dist/lib/BaseMapiNspiRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseMapiNspiRoute.js","sourceRoot":"","sources":["../../src/BaseMapiNspiRoute.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAgB,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAA4C,SAAS,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC5I,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAW,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AACpE,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC;AAClC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC;AAE1E,SAAS,WAAW,CAAC,GAAgB,EAAE,IAAY;IAC/C,MAAM,KAAK,GAAkC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,OAAgB,iBAAiB;IAWtB,AAAN,KAAK,CAAC,IAAI;QACb,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,SAAS,EAAE;YACjE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;YAC5B,IAAI,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,SAAS,EAAE;YACjE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;YAC5B,IAAI,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;SAC5B,CAAC,CAAC;IACP,CAAC;IAIY,AAAN,KAAK,CAAC,QAAQ,CAAU,GAAgB,EAAY,GAAiB,EAAY,IAAc;QAClG,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACzC,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,EAAE,gBAAgB,CAAC,cAAc,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QACzG,CAAC;QAED,MAAM,WAAW,GAAuB,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC1E,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,uBAAuB,CAAC;aACjD,SAAS,CAAC,eAAe,EAAE,WAAW,IAAI,EAAE,CAAC;aAC7C,SAAS,CAAC,gBAAgB,EAAE,GAAG,CAAC;aAChC,SAAS,CAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;QAExD,QAAQ,WAAW,EAAE,CAAC;YAClB,KAAK,MAAM;gBACP,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;gBAClD,OAAO;YACX,KAAK,QAAQ;gBACT,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACtB,OAAO;YACX,KAAK,YAAY,CAAC,CAAC,CAAC;gBAChB,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;gBACzE,IAAI,CAAC,UAAU,EAAE,CAAC;oBACd,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBAC7E,CAAC;gBACD,MAAM,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;gBACnE,OAAO;YACX,CAAC;YACD;gBACI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;gBACvB,OAAO;QACf,CAAC;IACL,CAAC;CACJ;AA/CgB;IADZ,IAAI;;;;6CAUJ;AAIY;IAFZ,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,IAAI,EAAE;IACgB,WAAA,OAAO,CAAA;IAAoB,WAAA,QAAQ,CAAA;IAAqB,WAAA,QAAQ,CAAA;;;;iDAiCtF"}