@rapidmx/mapi-plugin 1.0.0-beta.10

package/dist/lib/nspi/NspiBindHandler.js

@@ -0,0 +1,54 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import crypto from "crypto";
+import { BufferWriter } from "../codec/BufferCursor.js";
+import { encodeGuid } from "../codec/MapiGuid.js";
+import { resolveCallerMailboxUid } from "@rapidmx/restapi";
+/** `[MS-OXNSPI]` §2.2.1.2's own `MAPI_E_NOT_FOUND` error code, reused for "the caller has no mailbox in this
+ * deployment" - the one real failure mode `Bind` can hit in this pragmatic subset. */
+const ERROR_NOT_FOUND = 0x8004010f;
+/**
+ * `Bind`/`Unbind` request types (`[MS-OXCMAPIHTTP]` §2.2.5.1/§2.2.5.2, backed by `[MS-OXNSPI]`'s own `NspiBind`/
+ * `NspiUnbind` methods): establishes/tears down an NSPI Session Context, the address-book endpoint's own
+ * analog of EMSMDB's `Connect`/`Disconnect`.
+ *
+ * **No real session state is created or tracked** - a deliberate, documented simplification, not an oversight:
+ * every subsequent NSPI operation in this pragmatic subset (`GetMatches`) is independently `@Auth(["jwt"])`-
+ * protected and re-resolves the caller's own mailbox from that same JWT, exactly the way `RopLogon`/every ROP
+ * handler already does for EMSMDB - the real spec's `MapiContext`-equivalent session cookie exists mainly for
+ * multi-server-farm request affinity, not additional authentication, so this pragmatic subset mints an opaque,
+ * unvalidated cookie value purely for wire-format conformance and never checks it again. `HasState`/`State`
+ * (an optional `STAT` scoping the bind to one address-book container) is accepted but not decoded at all -
+ * this pragmatic subset has exactly one "container" (a mailbox's own `Contact` list) regardless.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export async function handleNspiBind(res, user, mailboxRepo) {
+    const mailboxUid = await resolveCallerMailboxUid(mailboxRepo, user);
+    if (!mailboxUid) {
+        const body = new BufferWriter();
+        body.writeUInt32LE(ERROR_NOT_FOUND); // StatusCode - MUST NOT be 0 on failure
+        body.writeUInt32LE(0); // AuxiliaryBufferSize
+        res.status(200).send(body.toBuffer());
+        return;
+    }
+    res.appendHeader("Set-Cookie", `NspiContext=${crypto.randomUUID()}`); // opaque, unvalidated - see class doc comment
+    const body = new BufferWriter();
+    body.writeUInt32LE(0); // StatusCode - success
+    body.writeUInt32LE(0); // ErrorCode - success
+    body.writeBytes(encodeGuid(crypto.randomUUID())); // ServerGuid - a fresh value per Bind is harmless, see class doc comment
+    body.writeUInt32LE(0); // AuxiliaryBufferSize
+    res.status(200).send(body.toBuffer());
+}
+/** `Unbind` never fails and has nothing to tear down - see `handleNspiBind`'s own doc comment for why no real
+ * session exists to release. */
+export function handleNspiUnbind(res) {
+    const body = new BufferWriter();
+    body.writeUInt32LE(0); // StatusCode
+    body.writeUInt32LE(0); // ErrorCode
+    body.writeUInt32LE(0); // AuxiliaryBufferSize
+    res.status(200).send(body.toBuffer());
+}
+//# sourceMappingURL=NspiBindHandler.js.map

package/dist/lib/nspi/NspiBindHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NspiBindHandler.js","sourceRoot":"","sources":["../../../src/nspi/NspiBindHandler.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,MAAM,MAAM,QAAQ,CAAC;AAG5B,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE3D;sFACsF;AACtF,MAAM,eAAe,GAAG,UAAU,CAAC;AAEnC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAiB,EAAE,IAAa,EAAE,WAA2B;IAC9F,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC,wCAAwC;QAC7E,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;QAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtC,OAAO;IACX,CAAC;IAED,GAAG,CAAC,YAAY,CAAC,YAAY,EAAE,eAAe,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,8CAA8C;IAEpH,MAAM,IAAI,GAAG,IAAI,YAAY,EAAE,CAAC;IAChC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB;IAC9C,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;IAC7C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,yEAAyE;IAC3H,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;IAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;gCACgC;AAChC,MAAM,UAAU,gBAAgB,CAAC,GAAiB;IAC9C,MAAM,IAAI,GAAG,IAAI,YAAY,EAAE,CAAC;IAChC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa;IACpC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY;IACnC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;IAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;AAC1C,CAAC"}

package/dist/lib/nspi/NspiCodec.js

@@ -0,0 +1,106 @@
+import { MAX_PROPERTY_TAG_COUNT, PropertyType, readPropertyTag, readPropertyTagArray, readTaggedPropertyValue, writePropertyTag, writePropertyValue, } from "../codec/PropertyValue.js";
+export function readStat(reader) {
+    return {
+        sortType: reader.readUInt32LE(),
+        containerId: reader.readUInt32LE(),
+        currentRec: reader.readUInt32LE(),
+        delta: reader.readInt32LE(),
+        numPos: reader.readUInt32LE(),
+        totalRecs: reader.readUInt32LE(),
+        codePage: reader.readUInt32LE(),
+        templateLocale: reader.readUInt32LE(),
+        sortLocale: reader.readUInt32LE(),
+    };
+}
+export function writeStat(writer, stat) {
+    writer.writeUInt32LE(stat.sortType);
+    writer.writeUInt32LE(stat.containerId);
+    writer.writeUInt32LE(stat.currentRec);
+    writer.writeInt32LE(stat.delta);
+    writer.writeUInt32LE(stat.numPos);
+    writer.writeUInt32LE(stat.totalRecs);
+    writer.writeUInt32LE(stat.codePage);
+    writer.writeUInt32LE(stat.templateLocale);
+    writer.writeUInt32LE(stat.sortLocale);
+}
+/** A blank `STAT` (`SortType`/`ContainerID`/... all zero) - what this pragmatic subset always echoes back
+ * (in `Bind`'s optional acknowledgement and `GetMatches`' response) regardless of the caller's own request
+ * `STAT`, since no real per-container/locale state is tracked. */
+export const BLANK_STAT = {
+    sortType: 0,
+    containerId: 0,
+    currentRec: 0,
+    delta: 0,
+    numPos: 0,
+    totalRecs: 0,
+    codePage: 0,
+    templateLocale: 0,
+    sortLocale: 0,
+};
+/** `LargePropertyTagArray` (`[MS-OXCMAPIHTTP]` §2.2.1.8): a 4-byte count followed by that many `PropertyTag`
+ * structures (`[MS-OXCDATA]` §2.9 - the same `PropertyType`-then-`PropertyId` encoding `PropertyValue.ts`'s own
+ * `readPropertyTag`/`writePropertyTag` already implement). */
+export function readLargePropertyTagArray(reader) {
+    const tags = readPropertyTagArray(reader, reader.readUInt32LE());
+    if (!tags) {
+        // Every requested column is resolved for every returned row, so the count is capped like EMSMDB's.
+        throw new RangeError(`NspiCodec: a LargePropertyTagArray may hold at most ${MAX_PROPERTY_TAG_COUNT} tags.`);
+    }
+    return tags;
+}
+export function writeLargePropertyTagArray(writer, tags) {
+    writer.writeUInt32LE(tags.length);
+    for (const tag of tags) {
+        writePropertyTag(writer, tag);
+    }
+}
+/** Writes one column's `AddressBookPropertyValue` (`[MS-OXCMAPIHTTP]` §2.2.1.1): a `PtypString`/`PtypString8`/
+ * `PtypBinary` value is preceded by a `HasValue` byte (always `0xFF`/`TRUE` in this pragmatic subset, which
+ * never reports a missing column value - the same "always emit a real value of the right type" principle
+ * `PropertyResolvers.defaultValueForType` already applies for EMSMDB); every other (fixed-size) type has no
+ * such prefix. `PtypMultiple*` columns (which need a `HasValue` byte per *element*, not just once) are never
+ * produced by this pragmatic subset's own fixed GAL column set and are intentionally not handled here. */
+function writeAddressBookPropertyValue(writer, type, value) {
+    if (type === PropertyType.PtypString || type === PropertyType.PtypString8 || type === PropertyType.PtypBinary) {
+        writer.writeUInt8(0xff); // HasValue - always TRUE, see function doc comment
+    }
+    writePropertyValue(writer, type, value);
+}
+/** Writes one `AddressBookPropertyRow` (`[MS-OXCMAPIHTTP]` §2.2.1.7) - always `Flags=0x00` (every column
+ * value present without error), the exact `StandardPropertyRow`-equivalent choice `RopQueryRowsHandler`/
+ * `RopGetPropertiesSpecificHandler` already make for EMSMDB's own row encoding. */
+export function writeAddressBookPropertyRow(writer, columns, values) {
+    writer.writeUInt8(0x00); // Flags - see function doc comment
+    columns.forEach((column, index) => writeAddressBookPropertyValue(writer, column.propertyType, values[index]));
+}
+/** Decodes a `Restriction` (`[MS-OXCDATA]` §2.12)'s leading `RestrictType` byte and, only for a
+ * `ContentRestriction`/`RES_CONTENT` (`0x03`) - the shape a real client's own GAL "search as you type" sends -
+ * extracts the plain string search term from its `TaggedValue` field.
+ *
+ * **Throws for any other restriction type** (`AND`/`OR`/`PropertyRestriction`/...) rather than degrading
+ * gracefully - unlike this pragmatic subset's usual "return a default instead of failing" stance elsewhere,
+ * a restriction's own byte length is type-dependent (12 different packet formats, several recursively nested),
+ * so once an unrecognized `RestrictType` is seen there is no safe way to know how many bytes to skip to reach
+ * the request body's own subsequent fields (`RowCount`/`Columns`/...) - silently returning `undefined` here
+ * would leave the reader mid-structure and corrupt every field decoded afterward. Throwing is the honest,
+ * safe choice for an input this narrow codec was never meant to parse, not a design gap.
+ *
+ * `FuzzyLevelLow`/`FuzzyLevelHigh` (exact/substring/prefix matching, case sensitivity) and the restriction's
+ * own target `PropertyTag` are decoded to advance the reader correctly but not honored - this pragmatic
+ * subset always does a case-insensitive substring match against its own fixed Contact field set regardless of
+ * which property or fuzzy level the client's restriction actually named. */
+export function extractContentRestrictionSearchTerm(reader) {
+    const restrictType = reader.readUInt8();
+    if (restrictType !== 0x03) {
+        throw new Error(`NspiCodec: unsupported restriction type 0x${restrictType.toString(16)} (only ContentRestriction/RES_CONTENT is supported)`);
+    }
+    reader.readUInt16LE(); // FuzzyLevelLow - not honored, see function doc comment
+    reader.readUInt16LE(); // FuzzyLevelHigh - not honored, see function doc comment
+    readPropertyTag(reader); // PropertyTag (the restriction's own target column) - not honored
+    const tagged = readTaggedPropertyValue(reader);
+    if (typeof tagged.value !== "string") {
+        throw new Error("NspiCodec: ContentRestriction's TaggedValue was not a string.");
+    }
+    return tagged.value;
+}
+//# sourceMappingURL=NspiCodec.js.map

package/dist/lib/nspi/NspiCodec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NspiCodec.js","sourceRoot":"","sources":["../../../src/nspi/NspiCodec.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,sBAAsB,EACtB,YAAY,EACZ,eAAe,EACf,oBAAoB,EACpB,uBAAuB,EACvB,gBAAgB,EAChB,kBAAkB,GAGrB,MAAM,2BAA2B,CAAC;AA6BnC,MAAM,UAAU,QAAQ,CAAC,MAAoB;IACzC,OAAO;QACH,QAAQ,EAAE,MAAM,CAAC,YAAY,EAAE;QAC/B,WAAW,EAAE,MAAM,CAAC,YAAY,EAAE;QAClC,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE;QACjC,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE;QAC7B,SAAS,EAAE,MAAM,CAAC,YAAY,EAAE;QAChC,QAAQ,EAAE,MAAM,CAAC,YAAY,EAAE;QAC/B,cAAc,EAAE,MAAM,CAAC,YAAY,EAAE;QACrC,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE;KACpC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAoB,EAAE,IAAU;IACtD,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC1C,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED;;kEAEkE;AAClE,MAAM,CAAC,MAAM,UAAU,GAAS;IAC5B,QAAQ,EAAE,CAAC;IACX,WAAW,EAAE,CAAC;IACd,UAAU,EAAE,CAAC;IACb,KAAK,EAAE,CAAC;IACR,MAAM,EAAE,CAAC;IACT,SAAS,EAAE,CAAC;IACZ,QAAQ,EAAE,CAAC;IACX,cAAc,EAAE,CAAC;IACjB,UAAU,EAAE,CAAC;CAChB,CAAC;AAEF;;8DAE8D;AAC9D,MAAM,UAAU,yBAAyB,CAAC,MAAoB;IAC1D,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,mGAAmG;QACnG,MAAM,IAAI,UAAU,CAAC,uDAAuD,sBAAsB,QAAQ,CAAC,CAAC;IAChH,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAAoB,EAAE,IAAmB;IAChF,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;AACL,CAAC;AAED;;;;;0GAK0G;AAC1G,SAAS,6BAA6B,CAAC,MAAoB,EAAE,IAAkB,EAAE,KAAwB;IACrG,IAAI,IAAI,KAAK,YAAY,CAAC,UAAU,IAAI,IAAI,KAAK,YAAY,CAAC,WAAW,IAAI,IAAI,KAAK,YAAY,CAAC,UAAU,EAAE,CAAC;QAC5G,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,mDAAmD;IAChF,CAAC;IACD,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED;;mFAEmF;AACnF,MAAM,UAAU,2BAA2B,CAAC,MAAoB,EAAE,OAAsB,EAAE,MAA2B;IACjH,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,mCAAmC;IAC5D,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,6BAA6B,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAClH,CAAC;AAED;;;;;;;;;;;;;;;4EAe4E;AAC5E,MAAM,UAAU,mCAAmC,CAAC,MAAoB;IACpE,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IACxC,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,6CAA6C,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,qDAAqD,CAAC,CAAC;IACjJ,CAAC;IACD,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,wDAAwD;IAC/E,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,yDAAyD;IAChF,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,kEAAkE;IAC3F,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC;AACxB,CAAC"}

package/dist/lib/nspi/NspiGetMatchesHandler.js

@@ -0,0 +1,142 @@
+import { boundedEscapedPattern } from "../RegexPatternUtils.js";
+import { BufferReader, BufferWriter } from "../codec/BufferCursor.js";
+import { PropertyType } from "../codec/PropertyValue.js";
+import { defaultValueForType } from "../rop/PropertyResolvers.js";
+import { BLANK_STAT, extractContentRestrictionSearchTerm, readLargePropertyTagArray, readStat, writeAddressBookPropertyRow, writeLargePropertyTagArray, writeStat, } from "./NspiCodec.js";
+/** `PidTagDisplayName`/`PidTagEmailAddress` - the small default column set this pragmatic subset returns when
+ * a client's `GetMatches` request omits its own `Columns` field, mirroring EAS's own GAL result shape
+ * (`SearchCommand.ts`'s `DisplayName`/`EmailAddress`). */
+const PID_TAG_DISPLAY_NAME = 0x3001;
+const PID_TAG_EMAIL_ADDRESS = 0x3003;
+/** The most rows one `GetMatches` lookup asks the repo for per query - `RepoUtils.find()`'s own page cap. */
+export const MAX_MATCH_ROWS = 1000;
+const DEFAULT_COLUMNS = [
+    { propertyId: PID_TAG_DISPLAY_NAME, propertyType: PropertyType.PtypString },
+    { propertyId: PID_TAG_EMAIL_ADDRESS, propertyType: PropertyType.PtypString },
+];
+/** A small, non-cryptographic FNV-1a 32-bit hash of a `Contact.uid`, used as that contact's `MinimalEntryID`
+ * in a `GetMatches` response. Deterministic per `uid` but not persisted or globally coordinated - acceptable
+ * here since no other operation in this pragmatic subset ever looks a `MinimalEntryID` back up (`NspiGetProps`/
+ * `NspiQueryRows`/... are out of scope), so nothing depends on it staying stable beyond a single response. */
+function minimalEntryIdFor(uid) {
+    let hash = 0x811c9dc5;
+    for (let i = 0; i < uid.length; i++) {
+        hash ^= uid.charCodeAt(i);
+        hash = Math.imul(hash, 0x01000193);
+    }
+    return hash >>> 0;
+}
+function valueForColumn(contact, column) {
+    switch (column.propertyId) {
+        case PID_TAG_DISPLAY_NAME:
+            return contact.displayName;
+        case PID_TAG_EMAIL_ADDRESS:
+            // Optional-chained on `emails` itself, not just its first element - a Contact predating this field
+            // (or otherwise missing it) would throw on a bare `contact.emails[0]` before the `?.` on `.address`
+            // ever gets a chance to help.
+            return contact.emails?.[0]?.address ?? "";
+        default:
+            return defaultValueForType(column.propertyType);
+    }
+}
+/** Finds every `Contact` in `mailboxUid` matching `searchTerm` (a case-insensitive substring match against
+ * `displayName`/`givenName`/`surname`/`company`, queried per-field and merged in memory - the same two-backend
+ * workaround `SearchCommand.ts` already established for its own identical `$or`-is-Mongo-only /
+ * `ILike()`-needs-wrapping gaps) - or every `Contact` in the mailbox at all when `searchTerm` is `undefined`
+ * (no filter was supplied, or (`extractContentRestrictionSearchTerm`'s own contract) the filter was already
+ * known-good by the time this is called).
+ *
+ * Uses `RepoUtils`'s `regex(...)` operator (`@rapidrest/service-core` ^2.0), not `like(...)`: `like()` compiles
+ * a **glob** pattern (`*`/`?` as wildcards), which would require wrapping the term in `*...*` to get a substring
+ * match and would still treat a literal `*`/`?` in the search term itself as a wildcard (glob syntax has no
+ * escape for those two characters). `regex()` takes a real, already-anchoring-free regular expression compiled
+ * case-insensitively on both backends (`$regex`/`~*`/`REGEXP`), so escaping the term with `StringUtils
+ * .escapeRegExp` here gives a genuine literal-substring match with no residual wildcard ambiguity. `regex()`
+ * patterns are also independently validated by the framework itself (`ModelUtils.isUnsafeRegexPattern`) against
+ * catastrophic-backtracking shapes, but that guard is for patterns a caller assembles from parts; escaping the
+ * entire term with `escapeRegExp` before it ever reaches here already prevents any of those shapes from forming
+ * in the first place, since no unescaped metacharacter survives. */
+async function findMatchingContacts(mailboxUid, contactRepo, searchTerm, limit) {
+    // `limit` goes in both the query (what the SQL query builder reads) and the options (what Mongo reads);
+    // without it each backend silently falls back to its own 100-row default regardless of `RowCount`.
+    if (!searchTerm) {
+        return contactRepo.find({ mailboxUid, limit }, { ignoreACL: true, limit });
+    }
+    // Bounded so the escaped operand never trips service-core's regex length guard, which would fail the whole
+    // NSPI call with INVALID_REQUEST for a long or metacharacter-heavy search term.
+    const pattern = boundedEscapedPattern(searchTerm);
+    const perField = await Promise.all(["displayName", "givenName", "surname", "company"].map((field) => contactRepo.find({ mailboxUid, [field]: `regex(${pattern})`, limit }, { ignoreACL: true, limit })));
+    const byUid = new Map();
+    for (const contact of perField.flat()) {
+        byUid.set(contact.uid, contact);
+    }
+    return Array.from(byUid.values()).sort((a, b) => a.displayName.localeCompare(b.displayName));
+}
+/**
+ * `GetMatches` request type (`[MS-OXCMAPIHTTP]` §2.2.5.5, backed by `[MS-OXNSPI]`'s own `NspiGetMatches`
+ * method): searches the GAL (this library's `Contact` records, the same source of truth EAS's own `Search`
+ * command already uses) for entries matching the client's restriction, returning up to `RowCount` matches as
+ * `AddressBookPropertyRow`s. This is the real operation behind a client's own address-book "search as you
+ * type" UI - the closest real NSPI equivalent to this plan's own "minimal prefix/substring lookups" scope.
+ *
+ * `HasState`/`State` (an input `STAT` scoping the search and reporting position) and `HasMinimalIds`/
+ * `MinimalIds` (an "Explicit Table" restricting the search to a caller-supplied candidate set) are decoded to
+ * advance the reader correctly but not honored - this pragmatic subset always searches the caller's entire
+ * Contact list fresh on every call (no real per-container/table state, see `NspiBindHandler.ts`'s own doc
+ * comment for the same reasoning applied to `Bind`). `HasFilter`'s `Filter` is decoded via
+ * `NspiCodec.extractContentRestrictionSearchTerm` - see that function's own doc comment for why an
+ * unsupported restriction type throws rather than degrading. `HasPropertyName` (an alternate open-by-named-
+ * property addressing mode) is decoded to advance the reader correctly but never itself used to select a
+ * search field.
+ *
+ * The response's own `State` is always `BLANK_STAT` (with `TotalRecs` set to the real match count) - no real
+ * per-container `STAT` is tracked, matching this pragmatic subset's stated scope.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export async function handleNspiGetMatches(req, res, mailboxUid, contactRepo) {
+    const reader = new BufferReader(req.rawBody ?? Buffer.alloc(0));
+    reader.readUInt32LE(); // Reserved
+    if (reader.readUInt8()) {
+        readStat(reader); // State - not honored, see function doc comment
+    }
+    if (reader.readUInt8()) {
+        // MinimalIds (an Explicit Table) - not honored, see function doc comment
+        // Skipped in one bounds-checked read rather than a loop over a client-supplied 32-bit count.
+        reader.readBytes(reader.readUInt32LE() * 4);
+    }
+    reader.readUInt32LE(); // InterfaceOptionFlags - reserved, always 0
+    const searchTerm = reader.readUInt8() ? extractContentRestrictionSearchTerm(reader) : undefined;
+    if (reader.readUInt8()) {
+        reader.readBytes(16); // PropertyNameGuid - not honored, see function doc comment
+        reader.readUInt32LE(); // PropertyNameId
+    }
+    const rowCount = reader.readUInt32LE();
+    const columns = reader.readUInt8() ? readLargePropertyTagArray(reader) : DEFAULT_COLUMNS;
+    // AuxiliaryBufferSize/AuxiliaryBuffer intentionally left unread - no auxiliary-payload support.
+    const matches = await findMatchingContacts(mailboxUid, contactRepo, searchTerm, Math.min(Math.max(rowCount, 1), MAX_MATCH_ROWS));
+    const page = matches.slice(0, rowCount);
+    const body = new BufferWriter();
+    body.writeUInt32LE(0); // StatusCode - success
+    body.writeUInt32LE(0); // ErrorCode - success
+    body.writeUInt8(1); // HasState
+    writeStat(body, { ...BLANK_STAT, totalRecs: matches.length });
+    body.writeUInt8(page.length > 0 ? 1 : 0); // HasMinimalIds
+    if (page.length > 0) {
+        body.writeUInt32LE(page.length);
+        for (const contact of page) {
+            body.writeUInt32LE(minimalEntryIdFor(contact.uid));
+        }
+    }
+    body.writeUInt8(page.length > 0 ? 1 : 0); // HasColumnsAndRows
+    if (page.length > 0) {
+        writeLargePropertyTagArray(body, columns);
+        body.writeUInt32LE(page.length);
+        for (const contact of page) {
+            writeAddressBookPropertyRow(body, columns, columns.map((column) => valueForColumn(contact, column)));
+        }
+    }
+    body.writeUInt32LE(0); // AuxiliaryBufferSize
+    res.status(200).send(body.toBuffer());
+}
+//# sourceMappingURL=NspiGetMatchesHandler.js.map

package/dist/lib/nspi/NspiGetMatchesHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NspiGetMatchesHandler.js","sourceRoot":"","sources":["../../../src/nspi/NspiGetMatchesHandler.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,YAAY,EAA4C,MAAM,2BAA2B,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EACH,UAAU,EACV,mCAAmC,EACnC,yBAAyB,EACzB,QAAQ,EACR,2BAA2B,EAC3B,0BAA0B,EAC1B,SAAS,GACZ,MAAM,gBAAgB,CAAC;AAExB;;0DAE0D;AAC1D,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,6GAA6G;AAC7G,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC;AAEnC,MAAM,eAAe,GAAkB;IACnC,EAAE,UAAU,EAAE,oBAAoB,EAAE,YAAY,EAAE,YAAY,CAAC,UAAU,EAAE;IAC3E,EAAE,UAAU,EAAE,qBAAqB,EAAE,YAAY,EAAE,YAAY,CAAC,UAAU,EAAE;CAC/E,CAAC;AAEF;;;8GAG8G;AAC9G,SAAS,iBAAiB,CAAC,GAAW;IAClC,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,CAAC;AACtB,CAAC;AAQD,SAAS,cAAc,CAAC,OAAmB,EAAE,MAAmB;IAC5D,QAAQ,MAAM,CAAC,UAAU,EAAE,CAAC;QACxB,KAAK,oBAAoB;YACrB,OAAO,OAAO,CAAC,WAAW,CAAC;QAC/B,KAAK,qBAAqB;YACtB,mGAAmG;YACnG,oGAAoG;YACpG,8BAA8B;YAC9B,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;QAC9C;YACI,OAAO,mBAAmB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACxD,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;oEAgBoE;AACpE,KAAK,UAAU,oBAAoB,CAC/B,UAAkB,EAClB,WAA2B,EAC3B,UAA8B,EAC9B,KAAa;IAEb,wGAAwG;IACxG,mGAAmG;IACnG,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,OAAO,WAAW,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,2GAA2G;IAC3G,gFAAgF;IAChF,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,CAAC,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC7D,WAAW,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,KAAK,CAAC,EAAE,SAAS,OAAO,GAAG,EAAE,KAAK,EAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAC3G,CACJ,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAkB,EAAE,CAAC;QACpD,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;AACjG,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAgB,EAAE,GAAiB,EAAE,UAAkB,EAAE,WAA2B;IAC3H,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,WAAW;IAClC,IAAI,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;QACrB,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,gDAAgD;IACtE,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;QACrB,yEAAyE;QACzE,6FAA6F;QAC7F,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,4CAA4C;IACnE,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,mCAAmC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChG,IAAI,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;QACrB,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,2DAA2D;QACjF,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,iBAAiB;IAC5C,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;IACzF,gGAAgG;IAEhG,MAAM,OAAO,GAAG,MAAM,oBAAoB,CACtC,UAAU,EACV,WAAW,EACX,UAAU,EACV,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,cAAc,CAAC,CAClD,CAAC;IACF,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAExC,MAAM,IAAI,GAAG,IAAI,YAAY,EAAE,CAAC;IAChC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB;IAC9C,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;IAC7C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW;IAC/B,SAAS,CAAC,IAAI,EAAE,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB;IAC1D,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;IACL,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB;IAC9D,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClB,0BAA0B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;YACzB,2BAA2B,CACvB,IAAI,EACJ,OAAO,EACP,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAC3D,CAAC;QACN,CAAC;IACL,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;IAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;AAC1C,CAAC"}

package/dist/lib/rop/AddressList.js

@@ -0,0 +1,114 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import addressparser from "nodemailer/lib/addressparser/index.js";
+import { literalQueryValue } from "./RestapiRules.js";
+/** Splits a `PidTagDisplayTo`/`Cc`/`Bcc`-style string on the semicolons Outlook separates recipients with,
+ * trimming and dropping empty entries. Commas are not separators: a resolved recipient's display name commonly
+ * contains one (`Doe, Jane <jane@example.com>`). */
+export function splitAddressList(value) {
+    if (!value) {
+        return [];
+    }
+    return value
+        .split(";")
+        .map((s) => s.trim())
+        .filter((s) => s.length > 0);
+}
+/** A bare `local@domain.tld` address: no whitespace (so no CR/LF), display name, angle brackets, quoting or
+ * separators. */
+const PLAIN_EMAIL_ADDRESS = /^[^\s@<>()[\]",;:\\]+@[^\s@<>()[\]",;:\\]+\.[^\s@<>()[\]",;:\\.]+$/;
+/** `true` for a plain SMTP address (see `PLAIN_EMAIL_ADDRESS`) no longer than RFC 5321's 254 characters. These
+ * strings reach MIME headers, the SMTP envelope and iCalendar `mailto:` lines, where a CR/LF would inject content. */
+export function isPlainEmailAddress(value) {
+    return value.length <= 254 && PLAIN_EMAIL_ADDRESS.test(value);
+}
+/** Control characters (CR/LF included) are replaced in display names; nodemailer encodes the rest. */
+function cleanName(name) {
+    return [...name].map((char) => (char.charCodeAt(0) < 0x20 || char.charCodeAt(0) === 0x7f ? " " : char)).join("").replace(/ +/g, " ").trim();
+}
+/**
+ * Parses one `;`-separated entry with nodemailer's `addressparser`: `jane@example.com`, `Jane <jane@example.com>`,
+ * `"Doe, Jane" <jane@example.com>` or a bare display name `Jane Doe`. An entry holding several addresses yields one
+ * recipient each. Any address that isn't a plain SMTP address marks the entry invalid.
+ */
+export function parseRecipientEntry(entry) {
+    const parts = addressparser(entry, { flatten: true });
+    const addressed = parts.filter((part) => part.address);
+    if (addressed.length === 0) {
+        const name = cleanName(entry);
+        // Something address-shaped that addressparser couldn't take apart isn't a display name to look up.
+        return [/[@<>]/.test(name) ? { name, invalid: true } : { name }];
+    }
+    const nameOnlyParts = parts.filter((part) => !part.address && part.name).map((part) => part.name);
+    return addressed.map((part) => {
+        const name = cleanName(addressed.length === 1 ? [...nameOnlyParts, part.name].filter(Boolean).join(", ") : part.name);
+        const address = String(part.address);
+        return isPlainEmailAddress(address) && !/[\r\n]/.test(entry) ? { name, address } : { name, invalid: true };
+    });
+}
+/** Every entry of a `PidTagDisplayTo`/`Cc`/`Bcc`-style string - see `parseRecipientEntry`. */
+export function parseRecipientList(value) {
+    return splitAddressList(value).flatMap(parseRecipientEntry);
+}
+/** The plain addresses in a `PidTagDisplayTo`/`Cc`/`Bcc`-style string, including those written as
+ * `Name <address>`, skipping display names without an address and anything invalid. */
+export function parseAddressList(value) {
+    return parseRecipientList(value)
+        .filter((entry) => entry.address !== undefined)
+        .map((entry) => entry.address);
+}
+/** The most contacts looked at when resolving one display name - two is enough to tell "exactly one" apart. */
+const MAX_NAME_MATCHES = 2;
+/** The most recipients (To, Cc and Bcc together) one submitted message or meeting may have - the same limit
+ * `@rapidmx/activesync`'s `ComposeMailCommand` enforces (`MAX_COMPOSE_RECIPIENTS`). */
+export const MAX_RECIPIENTS_PER_MESSAGE = 500;
+/** The caller's contacts whose display name is exactly `name`. The name comes from the client, so it is matched
+ * literally (`literalQueryValue`) and re-checked on the returned rows; a name the query layer rejects matches nothing.
+ * Charged to `budget` like every other single-query lookup (`resolveContentsKind`, `RopDeleteFolderHandler`'s own
+ * per-item delete) before the real DB round trip runs - a bare display name is exactly what a client crafting a
+ * malicious draft controls, and `RopSubmitMessageHandler` calls this once per unresolved To/Cc/Bcc entry (up to
+ * `MAX_RECIPIENTS_PER_MESSAGE` each), so without this charge a large recipient list would run unmetered queries. */
+async function findContactsByDisplayName(context, name) {
+    if (!context.contactRepo) {
+        return [];
+    }
+    context.budget?.chargeQueries();
+    try {
+        const rows = await context.contactRepo.find({ mailboxUid: context.mailboxUid, displayName: literalQueryValue(name), limit: MAX_NAME_MATCHES }, { ignoreACL: true, limit: MAX_NAME_MATCHES });
+        return rows.filter((row) => row.displayName === name);
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Resolves a display string into addresses. An entry carrying an address is used as is; a bare display name (Outlook
+ * writes names, not addresses, into `PidTagDisplayTo` once it has resolved a recipient against an address book) is
+ * looked up among the caller's own contacts by exact display name and used when exactly one contact matches, with
+ * that contact's first valid email address.
+ */
+export async function resolveRecipientList(value, context) {
+    const resolution = { recipients: [], unresolved: [], invalid: [] };
+    for (const entry of parseRecipientList(value)) {
+        if (entry.invalid) {
+            resolution.invalid.push(entry.name);
+        }
+        else if (entry.address) {
+            resolution.recipients.push({ name: entry.name, address: entry.address });
+        }
+        else {
+            const contacts = await findContactsByDisplayName(context, entry.name);
+            const address = contacts.length === 1 ? contacts[0].emails?.map((email) => email.address).find(isPlainEmailAddress) : undefined;
+            if (address) {
+                resolution.recipients.push({ name: entry.name, address });
+            }
+            else {
+                resolution.unresolved.push(entry.name);
+            }
+        }
+    }
+    return resolution;
+}
+//# sourceMappingURL=AddressList.js.map

package/dist/lib/rop/AddressList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AddressList.js","sourceRoot":"","sources":["../../../src/rop/AddressList.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,aAAa,MAAM,uCAAuC,CAAC;AAElE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAGtD;;oDAEoD;AACpD,MAAM,UAAU,gBAAgB,CAAC,KAAyB;IACtD,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;IACd,CAAC;IACD,OAAO,KAAK;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACrC,CAAC;AAED;iBACiB;AACjB,MAAM,mBAAmB,GAAG,oEAAoE,CAAC;AAEjG;sHACsH;AACtH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC7C,OAAO,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAUD,sGAAsG;AACtG,SAAS,SAAS,CAAC,IAAY;IAC3B,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAChJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC7C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,mGAAmG;QACnG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClG,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC1B,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC/G,CAAC,CAAC,CAAC;AACP,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IACxD,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAChE,CAAC;AAED;uFACuF;AACvF,MAAM,UAAU,gBAAgB,CAAC,KAAyB;IACtD,OAAO,kBAAkB,CAAC,KAAK,CAAC;SAC3B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;SAC9C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAQ,CAAC,CAAC;AACxC,CAAC;AAgBD,+GAA+G;AAC/G,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B;uFACuF;AACvF,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAE9C;;;;;oHAKoH;AACpH,KAAK,UAAU,yBAAyB,CACpC,OAAkE,EAClE,IAAY;IAEZ,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACd,CAAC;IACD,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC;IAChC,IAAI,CAAC;QACD,MAAM,IAAI,GAA+D,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CACnG,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,WAAW,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAS,EACxG,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAC/C,CAAC;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,CAAC;IACd,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,KAAyB,EACzB,OAAkE;IAElE,MAAM,UAAU,GAAwB,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACxF,KAAK,MAAM,KAAK,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACvB,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC;aAAM,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACtE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChI,IAAI,OAAO,EAAE,CAAC;gBACV,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACJ,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3C,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC"}

package/dist/lib/rop/CalendarEventTarget.js

@@ -0,0 +1,30 @@
+import { BusyStatus } from "@rapidmx/restapi";
+import { findAllCapped, MAX_COLLECTION_ROWS } from "./RepoPaging.js";
+/** Degrades to empty-looking values for a `"calendarEvent:<uid>"` target whose real `CalendarEvent` has since
+ * vanished (soft-deleted or otherwise) - the same "don't fail the whole ROP over one stale row" principle
+ * `MessageTarget.resolveMessageInfo`/`FolderTarget.resolveFolderInfo` already apply. */
+export async function resolveCalendarEventInfo(target, calendarEventRepo) {
+    const uid = target.slice("calendarEvent:".length);
+    const event = await calendarEventRepo.findOne(uid, { ignoreACL: true });
+    return {
+        title: event?.title ?? "",
+        location: event?.location,
+        startDate: event?.startDate ?? new Date(0),
+        endDate: event?.endDate ?? new Date(0),
+        timezone: event?.timezone ?? "UTC",
+        busyStatus: event?.busyStatus ?? BusyStatus.BUSY,
+        recurrenceRule: event?.recurrenceRule,
+        reminderMinutesBeforeStart: event?.reminderMinutesBeforeStart,
+        organizerAddress: event?.organizer?.address ?? "",
+        attendees: event?.attendees ?? [],
+    };
+}
+/** The order a calendar folder's events are listed in: latest start first, ties broken by `uid`. */
+export const CALENDAR_EVENT_SORT = { startDate: "DESC", uid: "ASC" };
+/** Resolves the calendar events directly in `folderUid`, latest first and capped at `MAX_COLLECTION_ROWS`, as
+ * `"calendarEvent:<uid>"` target strings. */
+export async function resolveFolderCalendarEvents(folderUid, calendarEventRepo, budget) {
+    const { items: events } = await findAllCapped(calendarEventRepo, { folderUid }, CALENDAR_EVENT_SORT, MAX_COLLECTION_ROWS, budget);
+    return events.map((e) => `calendarEvent:${e.uid}`);
+}
+//# sourceMappingURL=CalendarEventTarget.js.map

package/dist/lib/rop/CalendarEventTarget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CalendarEventTarget.js","sourceRoot":"","sources":["../../../src/rop/CalendarEventTarget.ts"],"names":[],"mappings":"AAKA,OAAO,EAAY,UAAU,EAAiC,MAAM,kBAAkB,CAAC;AAEvF,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAiB,MAAM,iBAAiB,CAAC;AAuBpF;;wFAEwF;AACxF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAAc,EAAE,iBAAiC;IAC5F,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,KAAK,GAA8B,MAAM,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnG,OAAO;QACH,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;QACzB,QAAQ,EAAE,KAAK,EAAE,QAAQ;QACzB,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC;QACtC,QAAQ,EAAE,KAAK,EAAE,QAAQ,IAAI,KAAK;QAClC,UAAU,EAAE,KAAK,EAAE,UAAU,IAAI,UAAU,CAAC,IAAI;QAChD,cAAc,EAAE,KAAK,EAAE,cAAc;QACrC,0BAA0B,EAAE,KAAK,EAAE,0BAA0B;QAC7D,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,IAAI,EAAE;QACjD,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,EAAE;KACpC,CAAC;AACN,CAAC;AAED,oGAAoG;AACpG,MAAM,CAAC,MAAM,mBAAmB,GAAa,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AAE/E;6CAC6C;AAC7C,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,SAAiB,EAAE,iBAAiC,EAAE,MAAsB;IAC1H,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAgB,iBAAiB,EAAE,EAAE,SAAS,EAAE,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC;IACjJ,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;AACvD,CAAC"}

package/dist/lib/rop/CalendarNamedProperties.js

@@ -0,0 +1,57 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { AttendeeResponseStatus, BusyStatus } from "@rapidmx/restapi";
+/**
+ * The Calendar named-property identity table (`(PropertySet GUID, LID)` pairs) this pragmatic subset supports,
+ * per `[MS-OXPROPS]` - each pinned against its own MS-OXPROPS page (not invented), shared by `PropertyResolvers.ts`
+ * (the read side: `calendarEventValueFor`) and `RopSaveChangesMessageHandler.ts` (the write side: decoding a
+ * draft's accumulated `RopSetProperties` values back into a real `CalendarEvent`) so both directions of this
+ * mapping stay in exactly one place. See the architecture plan's "Calendar support" section for the full table.
+ */
+export const PSETID_APPOINTMENT = "00062002-0000-0000-c000-000000000046";
+export const PSETID_COMMON = "00062008-0000-0000-c000-000000000046";
+export const PSETID_MEETING = "6ed8da90-450b-101b-98da-00aa003f1305";
+export const LID_LOCATION = 0x8208;
+export const LID_APPOINTMENT_START_WHOLE = 0x820d;
+export const LID_APPOINTMENT_END_WHOLE = 0x820e;
+export const LID_BUSY_STATUS = 0x8205;
+export const LID_RECURRING = 0x8223;
+export const LID_REMINDER_SET = 0x8503;
+export const LID_REMINDER_DELTA = 0x8501;
+export const LID_RESPONSE_STATUS = 0x8218;
+export const LID_APPOINTMENT_RECUR = 0x8216;
+export const LID_TIME_ZONE_STRUCT = 0x8233;
+/** `PidLidGlobalObjectId` (`PSETID_Meeting`) - see `GlobalObjectId.ts` for the BLOB it carries and
+ * `MeetingMessageClassHandler.ts` for how a meeting response's own copy of it is correlated back to the
+ * original `CalendarEvent`. */
+export const LID_GLOBAL_OBJECT_ID = 0x00000003;
+/** `PidLidBusyStatus`'s wire values (`[MS-OXOCAL]` §2.2.1.2, confirmed this session) - a different numbering
+ * than `CalendarSyncAdapter`'s own `BUSY_STATUS_CODES` table for the unrelated MS-ASCAL `BusyStatus` field.
+ * `olWorkingElsewhere` (0x00000004) has no equivalent in this library's own `BusyStatus` enum - never produced,
+ * and decoded (via `BUSY_STATUS_FROM_CODE`) with a fallback to `BUSY`, a documented, harmless approximation. */
+export const BUSY_STATUS_CODES = {
+    [BusyStatus.FREE]: 0,
+    [BusyStatus.TENTATIVE]: 1,
+    [BusyStatus.BUSY]: 2,
+    [BusyStatus.OUT_OF_OFFICE]: 3,
+};
+export const BUSY_STATUS_FROM_CODE = {
+    0: BusyStatus.FREE,
+    1: BusyStatus.TENTATIVE,
+    2: BusyStatus.BUSY,
+    3: BusyStatus.OUT_OF_OFFICE,
+};
+/** `PidLidResponseStatus`'s wire values (`[MS-OXOCAL]` §2.2.1.11, confirmed this session) for the caller's own
+ * attendee record. `respOrganized` (0x00000001) is returned when the caller *is* the organizer - not a value
+ * `AttendeeResponseStatus` itself has a case for, since that enum only models an attendee's own response. */
+export const RESPONSE_STATUS_CODES = {
+    [AttendeeResponseStatus.NEEDS_ACTION]: 5, // respNotResponded
+    [AttendeeResponseStatus.TENTATIVE]: 2, // respTentative
+    [AttendeeResponseStatus.ACCEPTED]: 3, // respAccepted
+    [AttendeeResponseStatus.DECLINED]: 4, // respDeclined
+};
+export const RESPONSE_STATUS_ORGANIZED = 1; // respOrganized
+export const RESPONSE_STATUS_NONE = 0; // respNone
+//# sourceMappingURL=CalendarNamedProperties.js.map

package/dist/lib/rop/CalendarNamedProperties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CalendarNamedProperties.js","sourceRoot":"","sources":["../../../src/rop/CalendarNamedProperties.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEtE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,sCAAsC,CAAC;AACzE,MAAM,CAAC,MAAM,aAAa,GAAG,sCAAsC,CAAC;AACpE,MAAM,CAAC,MAAM,cAAc,GAAG,sCAAsC,CAAC;AAErE,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC;AACnC,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAClD,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAChD,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AACtC,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AACpC,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACvC,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AACzC,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAC1C,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAC5C,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAE3C;;+BAE+B;AAC/B,MAAM,CAAC,MAAM,oBAAoB,GAAG,UAAU,CAAC;AAE/C;;;gHAGgH;AAChH,MAAM,CAAC,MAAM,iBAAiB,GAA+B;IACzD,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;IACpB,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;IACzB,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;IACpB,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAA+B;IAC7D,CAAC,EAAE,UAAU,CAAC,IAAI;IAClB,CAAC,EAAE,UAAU,CAAC,SAAS;IACvB,CAAC,EAAE,UAAU,CAAC,IAAI;IAClB,CAAC,EAAE,UAAU,CAAC,aAAa;CAC9B,CAAC;AAEF;;6GAE6G;AAC7G,MAAM,CAAC,MAAM,qBAAqB,GAA2C;IACzE,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,mBAAmB;IAC7D,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,gBAAgB;IACvD,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,eAAe;IACrD,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,eAAe;CACxD,CAAC;AACF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,CAAC,gBAAgB;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,CAAC,WAAW"}

package/dist/lib/rop/ContactTarget.js

@@ -0,0 +1,19 @@
+/** Degrades to empty-looking values for a `"contact:<uid>"` target whose real `Contact` has since vanished
+ * (soft-deleted or otherwise) - the same "don't fail the whole ROP over one stale row" principle
+ * `MessageTarget.resolveMessageInfo`/`CalendarEventTarget.resolveCalendarEventInfo` already apply. */
+export async function resolveContactInfo(target, contactRepo) {
+    const uid = target.slice("contact:".length);
+    const contact = await contactRepo.findOne(uid, { ignoreACL: true });
+    return {
+        displayName: contact?.displayName ?? "",
+        givenName: contact?.givenName,
+        surname: contact?.surname,
+        email: contact?.emails?.[0]?.address,
+        businessPhone: contact?.phones?.[0]?.phoneNumber,
+        companyName: contact?.company,
+        jobTitle: contact?.jobTitle,
+    };
+}
+/** The order a `CONTACTS` folder's contents table lists contacts in (see `ContentsTable.ts`). */
+export const CONTACT_SORT = { displayName: "ASC", uid: "ASC" };
+//# sourceMappingURL=ContactTarget.js.map

package/dist/lib/rop/ContactTarget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContactTarget.js","sourceRoot":"","sources":["../../../src/rop/ContactTarget.ts"],"names":[],"mappings":"AA8BA;;sGAEsG;AACtG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,WAA2B;IAChF,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAwB,MAAM,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzF,OAAO;QACH,WAAW,EAAE,OAAO,EAAE,WAAW,IAAI,EAAE;QACvC,SAAS,EAAE,OAAO,EAAE,SAAS;QAC7B,OAAO,EAAE,OAAO,EAAE,OAAO;QACzB,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO;QACpC,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW;QAChD,WAAW,EAAE,OAAO,EAAE,OAAO;QAC7B,QAAQ,EAAE,OAAO,EAAE,QAAQ;KAC9B,CAAC;AACN,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,MAAM,YAAY,GAAa,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC"}