@rapidmx/mapi-plugin 1.0.0-beta.3

package/dist/lib/mongo/MapiEmsmdbRouteMongo.js

@@ -0,0 +1,84 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { CalendarEventMongo, ContactMongo, FolderMongo, LabelMongo, MailboxMongo, MessageMongo, TaskMongo } from "@rapidmx/restapi/mongo";
+import { BaseMapiEmsmdbRoute } from "../BaseMapiEmsmdbRoute.js";
+import { RopLogonHandler } from "../rop/RopLogonHandler.js";
+import { RopReleaseHandler } from "../rop/RopReleaseHandler.js";
+import { RopOpenFolderHandler } from "../rop/RopOpenFolderHandler.js";
+import { RopGetHierarchyTableHandler } from "../rop/RopGetHierarchyTableHandler.js";
+import { RopGetContentsTableHandler } from "../rop/RopGetContentsTableHandler.js";
+import { RopSetColumnsHandler } from "../rop/RopSetColumnsHandler.js";
+import { RopQueryRowsHandler } from "../rop/RopQueryRowsHandler.js";
+import { RopOpenMessageHandler } from "../rop/RopOpenMessageHandler.js";
+import { RopGetPropertiesSpecificHandler } from "../rop/RopGetPropertiesSpecificHandler.js";
+import { RopOpenStreamHandler } from "../rop/RopOpenStreamHandler.js";
+import { RopReadStreamHandler } from "../rop/RopReadStreamHandler.js";
+import { RopCreateMessageHandler } from "../rop/RopCreateMessageHandler.js";
+import { RopSetPropertiesHandler } from "../rop/RopSetPropertiesHandler.js";
+import { RopWriteStreamHandler } from "../rop/RopWriteStreamHandler.js";
+import { RopSaveChangesMessageHandler } from "../rop/RopSaveChangesMessageHandler.js";
+import { RopSubmitMessageHandler } from "../rop/RopSubmitMessageHandler.js";
+import { RopGetPropertyIdsFromNamesHandler } from "../rop/RopGetPropertyIdsFromNamesHandler.js";
+import { RopDeleteMessagesHandler } from "../rop/RopDeleteMessagesHandler.js";
+import { RopDeleteFolderHandler } from "../rop/RopDeleteFolderHandler.js";
+import { RopFastTransferSourceCopyToHandler } from "../rop/RopFastTransferSourceCopyToHandler.js";
+import { RopFastTransferSourceCopyPropertiesHandler } from "../rop/RopFastTransferSourceCopyPropertiesHandler.js";
+import { RopFastTransferSourceGetBufferHandler } from "../rop/RopFastTransferSourceGetBufferHandler.js";
+import { RouteDecorators } from "@rapidrest/service-core";
+const { Route } = RouteDecorators;
+/**
+ * Mongo-backed concrete `BaseMapiEmsmdbRoute`, mounted at `/mapi/emsmdb`. Exported from this plugin's
+ * `./mongo` entry point, so the server host mounts it without a wrapper class of its
+ * own.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+let MapiEmsmdbRouteMongo = class MapiEmsmdbRouteMongo extends BaseMapiEmsmdbRoute {
+    constructor() {
+        super(...arguments);
+        this.mailboxClass = MailboxMongo;
+        this.folderClass = FolderMongo;
+        this.messageClass = MessageMongo;
+        this.calendarEventClass = CalendarEventMongo;
+        this.contactClass = ContactMongo;
+        this.taskClass = TaskMongo;
+        this.labelClass = LabelMongo;
+        this.ropHandlerClasses = [
+            RopLogonHandler,
+            RopReleaseHandler,
+            RopOpenFolderHandler,
+            RopGetHierarchyTableHandler,
+            RopGetContentsTableHandler,
+            RopSetColumnsHandler,
+            RopQueryRowsHandler,
+            RopOpenMessageHandler,
+            RopGetPropertiesSpecificHandler,
+            RopOpenStreamHandler,
+            RopReadStreamHandler,
+            RopCreateMessageHandler,
+            RopSetPropertiesHandler,
+            RopWriteStreamHandler,
+            RopSaveChangesMessageHandler,
+            RopSubmitMessageHandler,
+            RopGetPropertyIdsFromNamesHandler,
+            RopDeleteMessagesHandler,
+            RopDeleteFolderHandler,
+            RopFastTransferSourceCopyToHandler,
+            RopFastTransferSourceCopyPropertiesHandler,
+            RopFastTransferSourceGetBufferHandler,
+        ];
+    }
+};
+MapiEmsmdbRouteMongo = __decorate([
+    Route("/mapi/emsmdb")
+], MapiEmsmdbRouteMongo);
+export { MapiEmsmdbRouteMongo };
+//# sourceMappingURL=MapiEmsmdbRouteMongo.js.map

package/dist/lib/mongo/MapiEmsmdbRouteMongo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MapiEmsmdbRouteMongo.js","sourceRoot":"","sources":["../../../src/mongo/MapiEmsmdbRouteMongo.ts"],"names":[],"mappings":";;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAC1I,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,kCAAkC,EAAE,MAAM,8CAA8C,CAAC;AAClG,OAAO,EAAE,0CAA0C,EAAE,MAAM,sDAAsD,CAAC;AAClH,OAAO,EAAE,qCAAqC,EAAE,MAAM,iDAAiD,CAAC;AACxG,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,MAAM,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC;AAElC;;;;;;GAMG;AAEI,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,mBAAiC;IAApE;;QACO,iBAAY,GAAQ,YAAY,CAAC;QACjC,gBAAW,GAAQ,WAAW,CAAC;QAC/B,iBAAY,GAAQ,YAAY,CAAC;QACjC,uBAAkB,GAAQ,kBAAkB,CAAC;QAC7C,iBAAY,GAAQ,YAAY,CAAC;QACjC,cAAS,GAAQ,SAAS,CAAC;QAC3B,eAAU,GAAQ,UAAU,CAAC;QAC7B,sBAAiB,GAAU;YACjC,eAAe;YACf,iBAAiB;YACjB,oBAAoB;YACpB,2BAA2B;YAC3B,0BAA0B;YAC1B,oBAAoB;YACpB,mBAAmB;YACnB,qBAAqB;YACrB,+BAA+B;YAC/B,oBAAoB;YACpB,oBAAoB;YACpB,uBAAuB;YACvB,uBAAuB;YACvB,qBAAqB;YACrB,4BAA4B;YAC5B,uBAAuB;YACvB,iCAAiC;YACjC,wBAAwB;YACxB,sBAAsB;YACtB,kCAAkC;YAClC,0CAA0C;YAC1C,qCAAqC;SACxC,CAAC;IACN,CAAC;CAAA,CAAA;AAhCY,oBAAoB;IADhC,KAAK,CAAC,cAAc,CAAC;GACT,oBAAoB,CAgChC"}

package/dist/lib/mongo/MapiNspiRouteMongo.js

@@ -0,0 +1,33 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { ContactMongo, MailboxMongo } from "@rapidmx/restapi/mongo";
+import { BaseMapiNspiRoute } from "../BaseMapiNspiRoute.js";
+import { RouteDecorators } from "@rapidrest/service-core";
+const { Route } = RouteDecorators;
+/**
+ * Mongo-backed concrete `BaseMapiNspiRoute`, mounted at `/mapi/nspi`. Exported from this plugin's
+ * `./mongo` entry point, so the server host mounts it without a wrapper class of its
+ * own.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+let MapiNspiRouteMongo = class MapiNspiRouteMongo extends BaseMapiNspiRoute {
+    constructor() {
+        super(...arguments);
+        this.mailboxClass = MailboxMongo;
+        this.contactClass = ContactMongo;
+    }
+};
+MapiNspiRouteMongo = __decorate([
+    Route("/mapi/nspi")
+], MapiNspiRouteMongo);
+export { MapiNspiRouteMongo };
+//# sourceMappingURL=MapiNspiRouteMongo.js.map

package/dist/lib/mongo/MapiNspiRouteMongo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MapiNspiRouteMongo.js","sourceRoot":"","sources":["../../../src/mongo/MapiNspiRouteMongo.ts"],"names":[],"mappings":";;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,MAAM,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC;AAElC;;;;;;GAMG;AAEI,IAAM,kBAAkB,GAAxB,MAAM,kBAAmB,SAAQ,iBAA+B;IAAhE;;QACO,iBAAY,GAAQ,YAAY,CAAC;QACjC,iBAAY,GAAQ,YAAY,CAAC;IAC/C,CAAC;CAAA,CAAA;AAHY,kBAAkB;IAD9B,KAAK,CAAC,YAAY,CAAC;GACP,kBAAkB,CAG9B"}

package/dist/lib/mongo/index.js

@@ -0,0 +1,7 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+export * from "./MapiEmsmdbRouteMongo.js";
+export * from "./MapiNspiRouteMongo.js";
+//# sourceMappingURL=index.js.map

package/dist/lib/mongo/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/mongo/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC"}

package/dist/lib/mongo.js

@@ -0,0 +1,6 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+export * from "./mongo/index.js";
+//# sourceMappingURL=mongo.js.map

package/dist/lib/mongo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongo.js","sourceRoot":"","sources":["../../src/mongo.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,cAAc,kBAAkB,CAAC"}

package/dist/lib/nspi/NspiBindHandler.js

@@ -0,0 +1,54 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import crypto from "crypto";
+import { BufferWriter } from "../codec/BufferCursor.js";
+import { encodeGuid } from "../codec/MapiGuid.js";
+import { resolveCallerMailboxUid } from "@rapidmx/restapi";
+/** `[MS-OXNSPI]` §2.2.1.2's own `MAPI_E_NOT_FOUND` error code, reused for "the caller has no mailbox in this
+ * deployment" - the one real failure mode `Bind` can hit in this pragmatic subset. */
+const ERROR_NOT_FOUND = 0x8004010f;
+/**
+ * `Bind`/`Unbind` request types (`[MS-OXCMAPIHTTP]` §2.2.5.1/§2.2.5.2, backed by `[MS-OXNSPI]`'s own `NspiBind`/
+ * `NspiUnbind` methods): establishes/tears down an NSPI Session Context, the address-book endpoint's own
+ * analog of EMSMDB's `Connect`/`Disconnect`.
+ *
+ * **No real session state is created or tracked** - a deliberate, documented simplification, not an oversight:
+ * every subsequent NSPI operation in this pragmatic subset (`GetMatches`) is independently `@Auth(["jwt"])`-
+ * protected and re-resolves the caller's own mailbox from that same JWT, exactly the way `RopLogon`/every ROP
+ * handler already does for EMSMDB - the real spec's `MapiContext`-equivalent session cookie exists mainly for
+ * multi-server-farm request affinity, not additional authentication, so this pragmatic subset mints an opaque,
+ * unvalidated cookie value purely for wire-format conformance and never checks it again. `HasState`/`State`
+ * (an optional `STAT` scoping the bind to one address-book container) is accepted but not decoded at all -
+ * this pragmatic subset has exactly one "container" (a mailbox's own `Contact` list) regardless.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export async function handleNspiBind(res, user, mailboxRepo) {
+    const mailboxUid = await resolveCallerMailboxUid(mailboxRepo, user);
+    if (!mailboxUid) {
+        const body = new BufferWriter();
+        body.writeUInt32LE(ERROR_NOT_FOUND); // StatusCode - MUST NOT be 0 on failure
+        body.writeUInt32LE(0); // AuxiliaryBufferSize
+        res.status(200).send(body.toBuffer());
+        return;
+    }
+    res.appendHeader("Set-Cookie", `NspiContext=${crypto.randomUUID()}`); // opaque, unvalidated - see class doc comment
+    const body = new BufferWriter();
+    body.writeUInt32LE(0); // StatusCode - success
+    body.writeUInt32LE(0); // ErrorCode - success
+    body.writeBytes(encodeGuid(crypto.randomUUID())); // ServerGuid - a fresh value per Bind is harmless, see class doc comment
+    body.writeUInt32LE(0); // AuxiliaryBufferSize
+    res.status(200).send(body.toBuffer());
+}
+/** `Unbind` never fails and has nothing to tear down - see `handleNspiBind`'s own doc comment for why no real
+ * session exists to release. */
+export function handleNspiUnbind(res) {
+    const body = new BufferWriter();
+    body.writeUInt32LE(0); // StatusCode
+    body.writeUInt32LE(0); // ErrorCode
+    body.writeUInt32LE(0); // AuxiliaryBufferSize
+    res.status(200).send(body.toBuffer());
+}
+//# sourceMappingURL=NspiBindHandler.js.map

package/dist/lib/nspi/NspiBindHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NspiBindHandler.js","sourceRoot":"","sources":["../../../src/nspi/NspiBindHandler.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,MAAM,MAAM,QAAQ,CAAC;AAG5B,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE3D;sFACsF;AACtF,MAAM,eAAe,GAAG,UAAU,CAAC;AAEnC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAiB,EAAE,IAAa,EAAE,WAA2B;IAC9F,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC,wCAAwC;QAC7E,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;QAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtC,OAAO;IACX,CAAC;IAED,GAAG,CAAC,YAAY,CAAC,YAAY,EAAE,eAAe,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,8CAA8C;IAEpH,MAAM,IAAI,GAAG,IAAI,YAAY,EAAE,CAAC;IAChC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB;IAC9C,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;IAC7C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,yEAAyE;IAC3H,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;IAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;gCACgC;AAChC,MAAM,UAAU,gBAAgB,CAAC,GAAiB;IAC9C,MAAM,IAAI,GAAG,IAAI,YAAY,EAAE,CAAC;IAChC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa;IACpC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY;IACnC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;IAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;AAC1C,CAAC"}

package/dist/lib/nspi/NspiCodec.js

@@ -0,0 +1,106 @@
+import { PropertyType, readPropertyTag, readTaggedPropertyValue, writePropertyTag, writePropertyValue, } from "../codec/PropertyValue.js";
+export function readStat(reader) {
+    return {
+        sortType: reader.readUInt32LE(),
+        containerId: reader.readUInt32LE(),
+        currentRec: reader.readUInt32LE(),
+        delta: reader.readInt32LE(),
+        numPos: reader.readUInt32LE(),
+        totalRecs: reader.readUInt32LE(),
+        codePage: reader.readUInt32LE(),
+        templateLocale: reader.readUInt32LE(),
+        sortLocale: reader.readUInt32LE(),
+    };
+}
+export function writeStat(writer, stat) {
+    writer.writeUInt32LE(stat.sortType);
+    writer.writeUInt32LE(stat.containerId);
+    writer.writeUInt32LE(stat.currentRec);
+    writer.writeInt32LE(stat.delta);
+    writer.writeUInt32LE(stat.numPos);
+    writer.writeUInt32LE(stat.totalRecs);
+    writer.writeUInt32LE(stat.codePage);
+    writer.writeUInt32LE(stat.templateLocale);
+    writer.writeUInt32LE(stat.sortLocale);
+}
+/** A blank `STAT` (`SortType`/`ContainerID`/... all zero) - what this pragmatic subset always echoes back
+ * (in `Bind`'s optional acknowledgement and `GetMatches`' response) regardless of the caller's own request
+ * `STAT`, since no real per-container/locale state is tracked. */
+export const BLANK_STAT = {
+    sortType: 0,
+    containerId: 0,
+    currentRec: 0,
+    delta: 0,
+    numPos: 0,
+    totalRecs: 0,
+    codePage: 0,
+    templateLocale: 0,
+    sortLocale: 0,
+};
+/** `LargePropertyTagArray` (`[MS-OXCMAPIHTTP]` §2.2.1.8): a 4-byte count followed by that many `PropertyTag`
+ * structures (`[MS-OXCDATA]` §2.9 - the same `PropertyType`-then-`PropertyId` encoding `PropertyValue.ts`'s own
+ * `readPropertyTag`/`writePropertyTag` already implement). */
+export function readLargePropertyTagArray(reader) {
+    const count = reader.readUInt32LE();
+    const tags = [];
+    for (let i = 0; i < count; i++) {
+        tags.push(readPropertyTag(reader));
+    }
+    return tags;
+}
+export function writeLargePropertyTagArray(writer, tags) {
+    writer.writeUInt32LE(tags.length);
+    for (const tag of tags) {
+        writePropertyTag(writer, tag);
+    }
+}
+/** Writes one column's `AddressBookPropertyValue` (`[MS-OXCMAPIHTTP]` §2.2.1.1): a `PtypString`/`PtypString8`/
+ * `PtypBinary` value is preceded by a `HasValue` byte (always `0xFF`/`TRUE` in this pragmatic subset, which
+ * never reports a missing column value - the same "always emit a real value of the right type" principle
+ * `PropertyResolvers.defaultValueForType` already applies for EMSMDB); every other (fixed-size) type has no
+ * such prefix. `PtypMultiple*` columns (which need a `HasValue` byte per *element*, not just once) are never
+ * produced by this pragmatic subset's own fixed GAL column set and are intentionally not handled here. */
+function writeAddressBookPropertyValue(writer, type, value) {
+    if (type === PropertyType.PtypString || type === PropertyType.PtypString8 || type === PropertyType.PtypBinary) {
+        writer.writeUInt8(0xff); // HasValue - always TRUE, see function doc comment
+    }
+    writePropertyValue(writer, type, value);
+}
+/** Writes one `AddressBookPropertyRow` (`[MS-OXCMAPIHTTP]` §2.2.1.7) - always `Flags=0x00` (every column
+ * value present without error), the exact `StandardPropertyRow`-equivalent choice `RopQueryRowsHandler`/
+ * `RopGetPropertiesSpecificHandler` already make for EMSMDB's own row encoding. */
+export function writeAddressBookPropertyRow(writer, columns, values) {
+    writer.writeUInt8(0x00); // Flags - see function doc comment
+    columns.forEach((column, index) => writeAddressBookPropertyValue(writer, column.propertyType, values[index]));
+}
+/** Decodes a `Restriction` (`[MS-OXCDATA]` §2.12)'s leading `RestrictType` byte and, only for a
+ * `ContentRestriction`/`RES_CONTENT` (`0x03`) - the shape a real client's own GAL "search as you type" sends -
+ * extracts the plain string search term from its `TaggedValue` field.
+ *
+ * **Throws for any other restriction type** (`AND`/`OR`/`PropertyRestriction`/...) rather than degrading
+ * gracefully - unlike this pragmatic subset's usual "return a default instead of failing" stance elsewhere,
+ * a restriction's own byte length is type-dependent (12 different packet formats, several recursively nested),
+ * so once an unrecognized `RestrictType` is seen there is no safe way to know how many bytes to skip to reach
+ * the request body's own subsequent fields (`RowCount`/`Columns`/...) - silently returning `undefined` here
+ * would leave the reader mid-structure and corrupt every field decoded afterward. Throwing is the honest,
+ * safe choice for an input this narrow codec was never meant to parse, not a design gap.
+ *
+ * `FuzzyLevelLow`/`FuzzyLevelHigh` (exact/substring/prefix matching, case sensitivity) and the restriction's
+ * own target `PropertyTag` are decoded to advance the reader correctly but not honored - this pragmatic
+ * subset always does a case-insensitive substring match against its own fixed Contact field set regardless of
+ * which property or fuzzy level the client's restriction actually named. */
+export function extractContentRestrictionSearchTerm(reader) {
+    const restrictType = reader.readUInt8();
+    if (restrictType !== 0x03) {
+        throw new Error(`NspiCodec: unsupported restriction type 0x${restrictType.toString(16)} (only ContentRestriction/RES_CONTENT is supported)`);
+    }
+    reader.readUInt16LE(); // FuzzyLevelLow - not honored, see function doc comment
+    reader.readUInt16LE(); // FuzzyLevelHigh - not honored, see function doc comment
+    readPropertyTag(reader); // PropertyTag (the restriction's own target column) - not honored
+    const tagged = readTaggedPropertyValue(reader);
+    if (typeof tagged.value !== "string") {
+        throw new Error("NspiCodec: ContentRestriction's TaggedValue was not a string.");
+    }
+    return tagged.value;
+}
+//# sourceMappingURL=NspiCodec.js.map

package/dist/lib/nspi/NspiCodec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NspiCodec.js","sourceRoot":"","sources":["../../../src/nspi/NspiCodec.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,YAAY,EACZ,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,kBAAkB,GAGrB,MAAM,2BAA2B,CAAC;AA6BnC,MAAM,UAAU,QAAQ,CAAC,MAAoB;IACzC,OAAO;QACH,QAAQ,EAAE,MAAM,CAAC,YAAY,EAAE;QAC/B,WAAW,EAAE,MAAM,CAAC,YAAY,EAAE;QAClC,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE;QACjC,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE;QAC7B,SAAS,EAAE,MAAM,CAAC,YAAY,EAAE;QAChC,QAAQ,EAAE,MAAM,CAAC,YAAY,EAAE;QAC/B,cAAc,EAAE,MAAM,CAAC,YAAY,EAAE;QACrC,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE;KACpC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAoB,EAAE,IAAU;IACtD,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC1C,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED;;kEAEkE;AAClE,MAAM,CAAC,MAAM,UAAU,GAAS;IAC5B,QAAQ,EAAE,CAAC;IACX,WAAW,EAAE,CAAC;IACd,UAAU,EAAE,CAAC;IACb,KAAK,EAAE,CAAC;IACR,MAAM,EAAE,CAAC;IACT,SAAS,EAAE,CAAC;IACZ,QAAQ,EAAE,CAAC;IACX,cAAc,EAAE,CAAC;IACjB,UAAU,EAAE,CAAC;CAChB,CAAC;AAEF;;8DAE8D;AAC9D,MAAM,UAAU,yBAAyB,CAAC,MAAoB;IAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;IACpC,MAAM,IAAI,GAAkB,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAAoB,EAAE,IAAmB;IAChF,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;AACL,CAAC;AAED;;;;;0GAK0G;AAC1G,SAAS,6BAA6B,CAAC,MAAoB,EAAE,IAAkB,EAAE,KAAwB;IACrG,IAAI,IAAI,KAAK,YAAY,CAAC,UAAU,IAAI,IAAI,KAAK,YAAY,CAAC,WAAW,IAAI,IAAI,KAAK,YAAY,CAAC,UAAU,EAAE,CAAC;QAC5G,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,mDAAmD;IAChF,CAAC;IACD,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED;;mFAEmF;AACnF,MAAM,UAAU,2BAA2B,CAAC,MAAoB,EAAE,OAAsB,EAAE,MAA2B;IACjH,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,mCAAmC;IAC5D,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,6BAA6B,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAClH,CAAC;AAED;;;;;;;;;;;;;;;4EAe4E;AAC5E,MAAM,UAAU,mCAAmC,CAAC,MAAoB;IACpE,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IACxC,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,6CAA6C,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,qDAAqD,CAAC,CAAC;IACjJ,CAAC;IACD,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,wDAAwD;IAC/E,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,yDAAyD;IAChF,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,kEAAkE;IAC3F,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC;AACxB,CAAC"}

package/dist/lib/nspi/NspiGetMatchesHandler.js

@@ -0,0 +1,142 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { StringUtils } from "@rapidrest/core";
+import { BufferReader, BufferWriter } from "../codec/BufferCursor.js";
+import { PropertyType } from "../codec/PropertyValue.js";
+import { defaultValueForType } from "../rop/PropertyResolvers.js";
+import { BLANK_STAT, extractContentRestrictionSearchTerm, readLargePropertyTagArray, readStat, writeAddressBookPropertyRow, writeLargePropertyTagArray, writeStat, } from "./NspiCodec.js";
+/** `PidTagDisplayName`/`PidTagEmailAddress` - the small default column set this pragmatic subset returns when
+ * a client's `GetMatches` request omits its own `Columns` field, mirroring EAS's own GAL result shape
+ * (`SearchCommand.ts`'s `DisplayName`/`EmailAddress`). */
+const PID_TAG_DISPLAY_NAME = 0x3001;
+const PID_TAG_EMAIL_ADDRESS = 0x3003;
+const DEFAULT_COLUMNS = [
+    { propertyId: PID_TAG_DISPLAY_NAME, propertyType: PropertyType.PtypString },
+    { propertyId: PID_TAG_EMAIL_ADDRESS, propertyType: PropertyType.PtypString },
+];
+/** A small, non-cryptographic FNV-1a 32-bit hash of a `Contact.uid`, used as that contact's `MinimalEntryID`
+ * in a `GetMatches` response. Deterministic per `uid` but not persisted or globally coordinated - acceptable
+ * here since no other operation in this pragmatic subset ever looks a `MinimalEntryID` back up (`NspiGetProps`/
+ * `NspiQueryRows`/... are out of scope), so nothing depends on it staying stable beyond a single response. */
+function minimalEntryIdFor(uid) {
+    let hash = 0x811c9dc5;
+    for (let i = 0; i < uid.length; i++) {
+        hash ^= uid.charCodeAt(i);
+        hash = Math.imul(hash, 0x01000193);
+    }
+    return hash >>> 0;
+}
+function valueForColumn(contact, column) {
+    switch (column.propertyId) {
+        case PID_TAG_DISPLAY_NAME:
+            return contact.displayName;
+        case PID_TAG_EMAIL_ADDRESS:
+            // Optional-chained on `emails` itself, not just its first element - a Contact predating this field
+            // (or otherwise missing it) would throw on a bare `contact.emails[0]` before the `?.` on `.address`
+            // ever gets a chance to help.
+            return contact.emails?.[0]?.address ?? "";
+        default:
+            return defaultValueForType(column.propertyType);
+    }
+}
+/** Finds every `Contact` in `mailboxUid` matching `searchTerm` (a case-insensitive substring match against
+ * `displayName`/`givenName`/`surname`/`company`, queried per-field and merged in memory - the same two-backend
+ * workaround `SearchCommand.ts` already established for its own identical `$or`-is-Mongo-only /
+ * `ILike()`-needs-wrapping gaps) - or every `Contact` in the mailbox at all when `searchTerm` is `undefined`
+ * (no filter was supplied, or (`extractContentRestrictionSearchTerm`'s own contract) the filter was already
+ * known-good by the time this is called).
+ *
+ * Uses `RepoUtils`'s `regex(...)` operator (`@rapidrest/service-core` ^2.0), not `like(...)`: `like()` compiles
+ * a **glob** pattern (`*`/`?` as wildcards), which would require wrapping the term in `*...*` to get a substring
+ * match and would still treat a literal `*`/`?` in the search term itself as a wildcard (glob syntax has no
+ * escape for those two characters). `regex()` takes a real, already-anchoring-free regular expression compiled
+ * case-insensitively on both backends (`$regex`/`~*`/`REGEXP`), so escaping the term with `StringUtils
+ * .escapeRegExp` here gives a genuine literal-substring match with no residual wildcard ambiguity. `regex()`
+ * patterns are also independently validated by the framework itself (`ModelUtils.isUnsafeRegexPattern`) against
+ * catastrophic-backtracking shapes, but that guard is for patterns a caller assembles from parts; escaping the
+ * entire term with `escapeRegExp` before it ever reaches here already prevents any of those shapes from forming
+ * in the first place, since no unescaped metacharacter survives. */
+async function findMatchingContacts(mailboxUid, contactRepo, searchTerm) {
+    if (!searchTerm) {
+        return contactRepo.find({ mailboxUid }, { ignoreACL: true });
+    }
+    const pattern = StringUtils.escapeRegExp(searchTerm);
+    const perField = await Promise.all(["displayName", "givenName", "surname", "company"].map((field) => contactRepo.find({ mailboxUid, [field]: `regex(${pattern})` }, { ignoreACL: true })));
+    const byUid = new Map();
+    for (const contact of perField.flat()) {
+        byUid.set(contact.uid, contact);
+    }
+    return Array.from(byUid.values()).sort((a, b) => a.displayName.localeCompare(b.displayName));
+}
+/**
+ * `GetMatches` request type (`[MS-OXCMAPIHTTP]` §2.2.5.5, backed by `[MS-OXNSPI]`'s own `NspiGetMatches`
+ * method): searches the GAL (this library's `Contact` records, the same source of truth EAS's own `Search`
+ * command already uses) for entries matching the client's restriction, returning up to `RowCount` matches as
+ * `AddressBookPropertyRow`s. This is the real operation behind a client's own address-book "search as you
+ * type" UI - the closest real NSPI equivalent to this plan's own "minimal prefix/substring lookups" scope.
+ *
+ * `HasState`/`State` (an input `STAT` scoping the search and reporting position) and `HasMinimalIds`/
+ * `MinimalIds` (an "Explicit Table" restricting the search to a caller-supplied candidate set) are decoded to
+ * advance the reader correctly but not honored - this pragmatic subset always searches the caller's entire
+ * Contact list fresh on every call (no real per-container/table state, see `NspiBindHandler.ts`'s own doc
+ * comment for the same reasoning applied to `Bind`). `HasFilter`'s `Filter` is decoded via
+ * `NspiCodec.extractContentRestrictionSearchTerm` - see that function's own doc comment for why an
+ * unsupported restriction type throws rather than degrading. `HasPropertyName` (an alternate open-by-named-
+ * property addressing mode) is decoded to advance the reader correctly but never itself used to select a
+ * search field.
+ *
+ * The response's own `State` is always `BLANK_STAT` (with `TotalRecs` set to the real match count) - no real
+ * per-container `STAT` is tracked, matching this pragmatic subset's stated scope.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export async function handleNspiGetMatches(req, res, mailboxUid, contactRepo) {
+    const reader = new BufferReader(req.rawBody ?? Buffer.alloc(0));
+    reader.readUInt32LE(); // Reserved
+    if (reader.readUInt8()) {
+        readStat(reader); // State - not honored, see function doc comment
+    }
+    if (reader.readUInt8()) {
+        // MinimalIds (an Explicit Table) - not honored, see function doc comment
+        const minimalIdCount = reader.readUInt32LE();
+        for (let i = 0; i < minimalIdCount; i++) {
+            reader.readUInt32LE();
+        }
+    }
+    reader.readUInt32LE(); // InterfaceOptionFlags - reserved, always 0
+    const searchTerm = reader.readUInt8() ? extractContentRestrictionSearchTerm(reader) : undefined;
+    if (reader.readUInt8()) {
+        reader.readBytes(16); // PropertyNameGuid - not honored, see function doc comment
+        reader.readUInt32LE(); // PropertyNameId
+    }
+    const rowCount = reader.readUInt32LE();
+    const columns = reader.readUInt8() ? readLargePropertyTagArray(reader) : DEFAULT_COLUMNS;
+    // AuxiliaryBufferSize/AuxiliaryBuffer intentionally left unread - no auxiliary-payload support.
+    const matches = await findMatchingContacts(mailboxUid, contactRepo, searchTerm);
+    const page = matches.slice(0, rowCount);
+    const body = new BufferWriter();
+    body.writeUInt32LE(0); // StatusCode - success
+    body.writeUInt32LE(0); // ErrorCode - success
+    body.writeUInt8(1); // HasState
+    writeStat(body, { ...BLANK_STAT, totalRecs: matches.length });
+    body.writeUInt8(page.length > 0 ? 1 : 0); // HasMinimalIds
+    if (page.length > 0) {
+        body.writeUInt32LE(page.length);
+        for (const contact of page) {
+            body.writeUInt32LE(minimalEntryIdFor(contact.uid));
+        }
+    }
+    body.writeUInt8(page.length > 0 ? 1 : 0); // HasColumnsAndRows
+    if (page.length > 0) {
+        writeLargePropertyTagArray(body, columns);
+        body.writeUInt32LE(page.length);
+        for (const contact of page) {
+            writeAddressBookPropertyRow(body, columns, columns.map((column) => valueForColumn(contact, column)));
+        }
+    }
+    body.writeUInt32LE(0); // AuxiliaryBufferSize
+    res.status(200).send(body.toBuffer());
+}
+//# sourceMappingURL=NspiGetMatchesHandler.js.map

package/dist/lib/nspi/NspiGetMatchesHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NspiGetMatchesHandler.js","sourceRoot":"","sources":["../../../src/nspi/NspiGetMatchesHandler.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,YAAY,EAA4C,MAAM,2BAA2B,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EACH,UAAU,EACV,mCAAmC,EACnC,yBAAyB,EACzB,QAAQ,EACR,2BAA2B,EAC3B,0BAA0B,EAC1B,SAAS,GACZ,MAAM,gBAAgB,CAAC;AAExB;;0DAE0D;AAC1D,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,eAAe,GAAkB;IACnC,EAAE,UAAU,EAAE,oBAAoB,EAAE,YAAY,EAAE,YAAY,CAAC,UAAU,EAAE;IAC3E,EAAE,UAAU,EAAE,qBAAqB,EAAE,YAAY,EAAE,YAAY,CAAC,UAAU,EAAE;CAC/E,CAAC;AAEF;;;8GAG8G;AAC9G,SAAS,iBAAiB,CAAC,GAAW;IAClC,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,CAAC;AACtB,CAAC;AAQD,SAAS,cAAc,CAAC,OAAmB,EAAE,MAAmB;IAC5D,QAAQ,MAAM,CAAC,UAAU,EAAE,CAAC;QACxB,KAAK,oBAAoB;YACrB,OAAO,OAAO,CAAC,WAAW,CAAC;QAC/B,KAAK,qBAAqB;YACtB,mGAAmG;YACnG,oGAAoG;YACpG,8BAA8B;YAC9B,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;QAC9C;YACI,OAAO,mBAAmB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACxD,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;oEAgBoE;AACpE,KAAK,UAAU,oBAAoB,CAC/B,UAAkB,EAClB,WAA2B,EAC3B,UAA8B;IAE9B,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,OAAO,WAAW,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,CAAC,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC7D,WAAW,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,KAAK,CAAC,EAAE,SAAS,OAAO,GAAG,EAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAC7F,CACJ,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAkB,EAAE,CAAC;QACpD,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;AACjG,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAgB,EAAE,GAAiB,EAAE,UAAkB,EAAE,WAA2B;IAC3H,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,WAAW;IAClC,IAAI,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;QACrB,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,gDAAgD;IACtE,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;QACrB,yEAAyE;QACzE,MAAM,cAAc,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;QAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,CAAC,YAAY,EAAE,CAAC;QAC1B,CAAC;IACL,CAAC;IACD,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,4CAA4C;IACnE,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,mCAAmC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChG,IAAI,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;QACrB,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,2DAA2D;QACjF,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,iBAAiB;IAC5C,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;IACzF,gGAAgG;IAEhG,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAExC,MAAM,IAAI,GAAG,IAAI,YAAY,EAAE,CAAC;IAChC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB;IAC9C,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;IAC7C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW;IAC/B,SAAS,CAAC,IAAI,EAAE,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB;IAC1D,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;IACL,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB;IAC9D,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClB,0BAA0B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;YACzB,2BAA2B,CACvB,IAAI,EACJ,OAAO,EACP,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAC3D,CAAC;QACN,CAAC;IACL,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;IAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;AAC1C,CAAC"}

package/dist/lib/rop/CalendarEventTarget.js

@@ -0,0 +1,27 @@
+import { BusyStatus } from "@rapidmx/restapi";
+/** Degrades to empty-looking values for a `"calendarEvent:<uid>"` target whose real `CalendarEvent` has since
+ * vanished (soft-deleted or otherwise) - the same "don't fail the whole ROP over one stale row" principle
+ * `MessageTarget.resolveMessageInfo`/`FolderTarget.resolveFolderInfo` already apply. */
+export async function resolveCalendarEventInfo(target, calendarEventRepo) {
+    const uid = target.slice("calendarEvent:".length);
+    const event = await calendarEventRepo.findOne(uid, { ignoreACL: true });
+    return {
+        title: event?.title ?? "",
+        location: event?.location,
+        startDate: event?.startDate ?? new Date(0),
+        endDate: event?.endDate ?? new Date(0),
+        timezone: event?.timezone ?? "UTC",
+        busyStatus: event?.busyStatus ?? BusyStatus.BUSY,
+        recurrenceRule: event?.recurrenceRule,
+        reminderMinutesBeforeStart: event?.reminderMinutesBeforeStart,
+        organizerAddress: event?.organizer?.address ?? "",
+        attendees: event?.attendees ?? [],
+    };
+}
+/** Resolves the calendar events directly in `folderUid`, as `"calendarEvent:<uid>"` target strings, for
+ * `RopGetContentsTable` against a `CALENDAR`-type folder. */
+export async function resolveFolderCalendarEvents(folderUid, calendarEventRepo) {
+    const events = await calendarEventRepo.find({ folderUid }, { ignoreACL: true });
+    return events.map((e) => `calendarEvent:${e.uid}`);
+}
+//# sourceMappingURL=CalendarEventTarget.js.map

package/dist/lib/rop/CalendarEventTarget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CalendarEventTarget.js","sourceRoot":"","sources":["../../../src/rop/CalendarEventTarget.ts"],"names":[],"mappings":"AAKA,OAAO,EAAY,UAAU,EAAiC,MAAM,kBAAkB,CAAC;AAuBvF;;wFAEwF;AACxF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAAc,EAAE,iBAAiC;IAC5F,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,KAAK,GAA8B,MAAM,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnG,OAAO;QACH,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;QACzB,QAAQ,EAAE,KAAK,EAAE,QAAQ;QACzB,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC;QACtC,QAAQ,EAAE,KAAK,EAAE,QAAQ,IAAI,KAAK;QAClC,UAAU,EAAE,KAAK,EAAE,UAAU,IAAI,UAAU,CAAC,IAAI;QAChD,cAAc,EAAE,KAAK,EAAE,cAAc;QACrC,0BAA0B,EAAE,KAAK,EAAE,0BAA0B;QAC7D,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,IAAI,EAAE;QACjD,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,EAAE;KACpC,CAAC;AACN,CAAC;AAED;6DAC6D;AAC7D,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,SAAiB,EAAE,iBAAiC;IAClG,MAAM,MAAM,GAAoB,MAAM,iBAAiB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjG,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;AACvD,CAAC"}

package/dist/lib/rop/CalendarNamedProperties.js

@@ -0,0 +1,57 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { AttendeeResponseStatus, BusyStatus } from "@rapidmx/restapi";
+/**
+ * The Calendar named-property identity table (`(PropertySet GUID, LID)` pairs) this pragmatic subset supports,
+ * per `[MS-OXPROPS]` - each pinned against its own MS-OXPROPS page (not invented), shared by `PropertyResolvers.ts`
+ * (the read side: `calendarEventValueFor`) and `RopSaveChangesMessageHandler.ts` (the write side: decoding a
+ * draft's accumulated `RopSetProperties` values back into a real `CalendarEvent`) so both directions of this
+ * mapping stay in exactly one place. See the architecture plan's "Calendar support" section for the full table.
+ */
+export const PSETID_APPOINTMENT = "00062002-0000-0000-c000-000000000046";
+export const PSETID_COMMON = "00062008-0000-0000-c000-000000000046";
+export const PSETID_MEETING = "6ed8da90-450b-101b-98da-00aa003f1305";
+export const LID_LOCATION = 0x8208;
+export const LID_APPOINTMENT_START_WHOLE = 0x820d;
+export const LID_APPOINTMENT_END_WHOLE = 0x820e;
+export const LID_BUSY_STATUS = 0x8205;
+export const LID_RECURRING = 0x8223;
+export const LID_REMINDER_SET = 0x8503;
+export const LID_REMINDER_DELTA = 0x8501;
+export const LID_RESPONSE_STATUS = 0x8218;
+export const LID_APPOINTMENT_RECUR = 0x8216;
+export const LID_TIME_ZONE_STRUCT = 0x8233;
+/** `PidLidGlobalObjectId` (`PSETID_Meeting`) - see `GlobalObjectId.ts` for the BLOB it carries and
+ * `MeetingMessageClassHandler.ts` for how a meeting response's own copy of it is correlated back to the
+ * original `CalendarEvent`. */
+export const LID_GLOBAL_OBJECT_ID = 0x00000003;
+/** `PidLidBusyStatus`'s wire values (`[MS-OXOCAL]` §2.2.1.2, confirmed this session) - a different numbering
+ * than `CalendarSyncAdapter`'s own `BUSY_STATUS_CODES` table for the unrelated MS-ASCAL `BusyStatus` field.
+ * `olWorkingElsewhere` (0x00000004) has no equivalent in this library's own `BusyStatus` enum - never produced,
+ * and decoded (via `BUSY_STATUS_FROM_CODE`) with a fallback to `BUSY`, a documented, harmless approximation. */
+export const BUSY_STATUS_CODES = {
+    [BusyStatus.FREE]: 0,
+    [BusyStatus.TENTATIVE]: 1,
+    [BusyStatus.BUSY]: 2,
+    [BusyStatus.OUT_OF_OFFICE]: 3,
+};
+export const BUSY_STATUS_FROM_CODE = {
+    0: BusyStatus.FREE,
+    1: BusyStatus.TENTATIVE,
+    2: BusyStatus.BUSY,
+    3: BusyStatus.OUT_OF_OFFICE,
+};
+/** `PidLidResponseStatus`'s wire values (`[MS-OXOCAL]` §2.2.1.11, confirmed this session) for the caller's own
+ * attendee record. `respOrganized` (0x00000001) is returned when the caller *is* the organizer - not a value
+ * `AttendeeResponseStatus` itself has a case for, since that enum only models an attendee's own response. */
+export const RESPONSE_STATUS_CODES = {
+    [AttendeeResponseStatus.NEEDS_ACTION]: 5, // respNotResponded
+    [AttendeeResponseStatus.TENTATIVE]: 2, // respTentative
+    [AttendeeResponseStatus.ACCEPTED]: 3, // respAccepted
+    [AttendeeResponseStatus.DECLINED]: 4, // respDeclined
+};
+export const RESPONSE_STATUS_ORGANIZED = 1; // respOrganized
+export const RESPONSE_STATUS_NONE = 0; // respNone
+//# sourceMappingURL=CalendarNamedProperties.js.map

package/dist/lib/rop/CalendarNamedProperties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CalendarNamedProperties.js","sourceRoot":"","sources":["../../../src/rop/CalendarNamedProperties.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEtE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,sCAAsC,CAAC;AACzE,MAAM,CAAC,MAAM,aAAa,GAAG,sCAAsC,CAAC;AACpE,MAAM,CAAC,MAAM,cAAc,GAAG,sCAAsC,CAAC;AAErE,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC;AACnC,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAClD,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAChD,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AACtC,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AACpC,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACvC,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AACzC,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAC1C,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAC5C,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAE3C;;+BAE+B;AAC/B,MAAM,CAAC,MAAM,oBAAoB,GAAG,UAAU,CAAC;AAE/C;;;gHAGgH;AAChH,MAAM,CAAC,MAAM,iBAAiB,GAA+B;IACzD,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;IACpB,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;IACzB,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;IACpB,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAA+B;IAC7D,CAAC,EAAE,UAAU,CAAC,IAAI;IAClB,CAAC,EAAE,UAAU,CAAC,SAAS;IACvB,CAAC,EAAE,UAAU,CAAC,IAAI;IAClB,CAAC,EAAE,UAAU,CAAC,aAAa;CAC9B,CAAC;AAEF;;6GAE6G;AAC7G,MAAM,CAAC,MAAM,qBAAqB,GAA2C;IACzE,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,mBAAmB;IAC7D,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,gBAAgB;IACvD,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,eAAe;IACrD,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,eAAe;CACxD,CAAC;AACF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,CAAC,gBAAgB;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,CAAC,WAAW"}

package/dist/lib/rop/ContactTarget.js

@@ -0,0 +1,23 @@
+/** Degrades to empty-looking values for a `"contact:<uid>"` target whose real `Contact` has since vanished
+ * (soft-deleted or otherwise) - the same "don't fail the whole ROP over one stale row" principle
+ * `MessageTarget.resolveMessageInfo`/`CalendarEventTarget.resolveCalendarEventInfo` already apply. */
+export async function resolveContactInfo(target, contactRepo) {
+    const uid = target.slice("contact:".length);
+    const contact = await contactRepo.findOne(uid, { ignoreACL: true });
+    return {
+        displayName: contact?.displayName ?? "",
+        givenName: contact?.givenName,
+        surname: contact?.surname,
+        email: contact?.emails?.[0]?.address,
+        businessPhone: contact?.phones?.[0]?.phoneNumber,
+        companyName: contact?.company,
+        jobTitle: contact?.jobTitle,
+    };
+}
+/** Resolves the contacts directly in `folderUid`, as `"contact:<uid>"` target strings, for
+ * `RopGetContentsTable` against a `CONTACTS`-type folder. */
+export async function resolveFolderContacts(folderUid, contactRepo) {
+    const contacts = await contactRepo.find({ folderUid }, { ignoreACL: true });
+    return contacts.map((c) => `contact:${c.uid}`);
+}
+//# sourceMappingURL=ContactTarget.js.map

package/dist/lib/rop/ContactTarget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContactTarget.js","sourceRoot":"","sources":["../../../src/rop/ContactTarget.ts"],"names":[],"mappings":"AA6BA;;sGAEsG;AACtG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,WAA2B;IAChF,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAwB,MAAM,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzF,OAAO;QACH,WAAW,EAAE,OAAO,EAAE,WAAW,IAAI,EAAE;QACvC,SAAS,EAAE,OAAO,EAAE,SAAS;QAC7B,OAAO,EAAE,OAAO,EAAE,OAAO;QACzB,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO;QACpC,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW;QAChD,WAAW,EAAE,OAAO,EAAE,OAAO;QAC7B,QAAQ,EAAE,OAAO,EAAE,QAAQ;KAC9B,CAAC;AACN,CAAC;AAED;6DAC6D;AAC7D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,SAAiB,EAAE,WAA2B;IACtF,MAAM,QAAQ,GAAc,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvF,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;AACnD,CAAC"}