@rapidmx/mapi-plugin 1.0.0-beta.10

package/dist/lib/rop/MeetingMessageClassHandler.js

@@ -0,0 +1,241 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import MailComposer from "nodemailer/lib/mail-composer/index.js";
+import { AttendeeResponseStatus, buildEventIcs } from "@rapidmx/restapi";
+import { BufferReader } from "../codec/BufferCursor.js";
+import { isPlainEmailAddress } from "./AddressList.js";
+import { decodeGlobalObjectId, globalObjectIdInstanceDate } from "../codec/GlobalObjectId.js";
+import { LID_GLOBAL_OBJECT_ID, PSETID_MEETING } from "./CalendarNamedProperties.js";
+import { resolveNamedProperty } from "./NamedPropertyRegistry.js";
+import { asEntity, boundIndexedValue, literalQueryValue } from "./RestapiRules.js";
+import { sendOrThrow } from "./TransportSend.js";
+/** `PidTagMessageClass` suffix -> the caller's own new `AttendeeResponseStatus`, per `[MS-OXOCAL]`'s meeting
+ * response object naming convention. An unrecognized suffix (a message class this pragmatic subset doesn't
+ * know how to interpret as a response) is answered with `MAPI_E_INVALID_PARAMETER`. */
+const RESPONSE_STATUS_BY_MESSAGE_CLASS = {
+    "IPM.Schedule.Meeting.Resp.Pos": AttendeeResponseStatus.ACCEPTED,
+    "IPM.Schedule.Meeting.Resp.Tent": AttendeeResponseStatus.TENTATIVE,
+    "IPM.Schedule.Meeting.Resp.Neg": AttendeeResponseStatus.DECLINED,
+};
+/** Scans `properties` (a draft handle's accumulated `RopSetProperties` values) for the one already-assigned
+ * named property matching `(guid, lid)`, returning its raw stored string value - the single-property analog of
+ * `RopSaveChangesMessageHandler.ts`'s own full-table decode loop, needed here only for `PidLidGlobalObjectId`. */
+function findNamedPropertyValue(session, properties, guid, lid) {
+    for (const [key, value] of Object.entries(properties)) {
+        const propertyId = Number(key);
+        if (propertyId < 0x8000) {
+            continue;
+        }
+        const named = resolveNamedProperty(session, propertyId);
+        if (named && named.kind === "lid" && named.lid === lid && named.guid.toLowerCase() === guid) {
+            return value;
+        }
+    }
+    return undefined;
+}
+/** `MAPI_E_INVALID_PARAMETER`: not a response this server understands (unknown message class, no or malformed
+ * `PidLidGlobalObjectId`). */
+const ERROR_INVALID_PARAMETER = 0x80070057;
+/** `MAPI_E_NOT_FOUND`: no meeting in the caller's mailbox matches, or the caller isn't one of its attendees. */
+const ERROR_NOT_FOUND = 0x8004010f;
+/** `MAPI_E_CALL_FAILED`: the response was recorded but the iTIP `REPLY` couldn't be sent to the organizer. */
+const ERROR_CALL_FAILED = 0x80004005;
+/**
+ * Handles a submitted `"IPM.Schedule.Meeting.Resp.{Pos,Neg,Tent}"` message - an attendee's own response to a
+ * meeting invite. Delegated to from `RopSubmitMessageHandler` for that message-class prefix, instead of the ordinary
+ * mail or Appointment paths. Returns the ROP's `ReturnValue`.
+ *
+ * Mirrors restapi's `BaseCalendarEventRoute.respond()`. It correlates the response via `PidLidGlobalObjectId`
+ * (echoed by a real client from the invite it's responding to - see `GlobalObjectId.ts`) to **the caller's own
+ * copy** of the meeting: the query is scoped to the caller's `mailboxUid`, which is the access check. The
+ * organizer's copy (in another mailbox) is never touched here; the organizer's server applies the iTIP `REPLY` sent
+ * below, exactly as for a REST response. A native Outlook `GlobalObjectId` decodes to the uppercase hex form of its
+ * iCalendar UID, which is matched in either case.
+ *
+ * **One occurrence of a recurring meeting** (the `GlobalObjectId`'s instance date is set): the caller's exception
+ * copy for that date is used when there is one, comparing dates in the event's own time zone. Without one, the
+ * series is left alone - responding to one occurrence must not change or delete every other occurrence. Declining
+ * adds the occurrence to the caller's series `recurrenceRule.exceptions` (so it leaves their calendar); accepting or
+ * tentatively accepting changes nothing locally. Either way the `REPLY` names just that occurrence (`RECURRENCE-ID`).
+ *
+ * **The whole meeting** (no instance date, or a copy that doesn't recur): the caller's `Attendee.responseStatus` is
+ * recorded; declining soft-deletes the caller's copy instead. Declining an occurrence through its exception copy also
+ * adds that occurrence to the series' exceptions, so the series doesn't show it again. Every update is versioned
+ * (`asEntity`), so a concurrent change fails the response instead of being overwritten.
+ *
+ * The `REPLY` (restapi's own `buildEventIcs`) goes out through `sendOrThrow`, so a transport that rejects it is
+ * reported as `MAPI_E_CALL_FAILED` instead of success; the response itself stays recorded. An organizer or attendee
+ * address that isn't a plain SMTP address is not mailed at all. A response that can't be matched to a meeting the
+ * caller attends is an error (`MAPI_E_NOT_FOUND`/`MAPI_E_INVALID_PARAMETER`), not a silent success.
+ */
+export async function submitMeetingResponse(messageClass, draftProperties, context) {
+    const responseStatus = RESPONSE_STATUS_BY_MESSAGE_CLASS[messageClass];
+    const globalObjectIdBase64 = responseStatus
+        ? findNamedPropertyValue(context.session, draftProperties, PSETID_MEETING, LID_GLOBAL_OBJECT_ID)
+        : undefined;
+    if (!globalObjectIdBase64) {
+        return ERROR_INVALID_PARAMETER;
+    }
+    const globalObjectId = Buffer.from(globalObjectIdBase64, "base64");
+    let icalUid;
+    try {
+        icalUid = decodeGlobalObjectId(new BufferReader(globalObjectId));
+    }
+    catch {
+        return ERROR_INVALID_PARAMETER;
+    }
+    const copies = await findCallerCopies(context, icalUid);
+    const picked = pickOccurrence(copies, globalObjectIdInstanceDate(globalObjectId));
+    const mailbox = picked ? await context.mailboxRepo.findOne(context.mailboxUid, { ignoreACL: true }) : undefined;
+    if (!picked || !mailbox) {
+        return ERROR_NOT_FOUND;
+    }
+    const { event, occurrence } = picked;
+    const callerAddresses = new Set([mailbox.primarySmtpAddress.toLowerCase(), ...mailbox.aliasAddresses.map((a) => a.toLowerCase())]);
+    const respondingAttendee = event.attendees.find((attendee) => callerAddresses.has(attendee.address.toLowerCase()));
+    if (!respondingAttendee) {
+        return ERROR_NOT_FOUND;
+    }
+    const updatedAttendee = { ...respondingAttendee, responseStatus };
+    let replyEvent = event;
+    if (occurrence) {
+        if (responseStatus === AttendeeResponseStatus.DECLINED) {
+            await addSeriesException(context, event, occurrence);
+        }
+        const duration = new Date(event.endDate).getTime() - new Date(event.startDate).getTime();
+        replyEvent = { ...event, recurrenceRule: undefined, recurrenceId: occurrence, startDate: occurrence, endDate: new Date(occurrence.getTime() + duration) };
+    }
+    else if (responseStatus === AttendeeResponseStatus.DECLINED) {
+        await context.calendarEventRepo.delete(event.uid, { ignoreACL: true });
+        // Declining an occurrence that has its own exception copy: deleting the copy alone would bring the series'
+        // original occurrence back, so it is excluded from the series too (as restapi's ScanQueueJob does for an
+        // occurrence CANCEL).
+        const series = copies.find((copy) => copy.recurrenceId == null);
+        if (event.recurrenceId != null && series?.recurrenceRule) {
+            await addSeriesException(context, series, new Date(event.recurrenceId));
+        }
+    }
+    else {
+        const attendees = event.attendees.map((attendee) => (attendee === respondingAttendee ? updatedAttendee : attendee));
+        await context.calendarEventRepo.update({ uid: event.uid, version: event.version, attendees }, asEntity(context.calendarEventRepo, event), {
+            ignoreACL: true,
+        });
+    }
+    try {
+        await sendReply(context, replyEvent, updatedAttendee, mailbox.displayName);
+    }
+    catch {
+        return ERROR_CALL_FAILED;
+    }
+    return 0;
+}
+/** The most copies of one meeting (series plus exceptions) considered in the caller's mailbox. */
+const MAX_EVENT_COPIES = 100;
+const REPLY_SUBJECT_PREFIX = {
+    [AttendeeResponseStatus.ACCEPTED]: "Accepted",
+    [AttendeeResponseStatus.TENTATIVE]: "Tentative",
+    [AttendeeResponseStatus.DECLINED]: "Declined",
+};
+/** Adds `occurrence` to `series`' recurrence exceptions (a versioned update), unless it is already there. */
+async function addSeriesException(context, series, occurrence) {
+    const rule = series.recurrenceRule;
+    const exceptions = (rule.exceptions ?? []).map((date) => new Date(date));
+    if (exceptions.some((date) => date.getTime() === occurrence.getTime())) {
+        return;
+    }
+    const recurrenceRule = { ...rule, exceptions: [...exceptions, occurrence] };
+    await context.calendarEventRepo.update({ uid: series.uid, version: series.version, recurrenceRule }, asEntity(context.calendarEventRepo, series), {
+        ignoreACL: true,
+    });
+}
+/**
+ * The caller's copies of the meeting `icalUid` names. An `OutlookID`'s hex UID may have been stored in either case, so a
+ * miss is retried in lower case.
+ *
+ * The UID comes from the client (and originally from whoever sent the invite), so it is looked up the way restapi
+ * stores it (`boundIndexedValue`, hashed past 255 characters), matched literally (a UID like `ne(x)` is not an
+ * operator), and every returned row's `icalUid` is compared again.
+ */
+async function findCallerCopies(context, icalUid) {
+    const find = async (uid) => {
+        const key = boundIndexedValue(uid);
+        try {
+            const rows = await context.calendarEventRepo.find({ icalUid: literalQueryValue(key), mailboxUid: context.mailboxUid, limit: MAX_EVENT_COPIES }, { ignoreACL: true, limit: MAX_EVENT_COPIES });
+            return rows.filter((row) => row.icalUid === key);
+        }
+        catch {
+            return []; // a UID the query layer can't take as a value matches nothing
+        }
+    };
+    const events = await find(icalUid);
+    return events.length > 0 || icalUid.toLowerCase() === icalUid ? events : find(icalUid.toLowerCase());
+}
+/** `timeZone` when `Intl` accepts it, otherwise `"UTC"`. */
+function usableTimeZone(timeZone) {
+    try {
+        return new Intl.DateTimeFormat("en-US", { timeZone: timeZone || "UTC" }).resolvedOptions().timeZone;
+    }
+    catch {
+        return "UTC";
+    }
+}
+/** `date`'s calendar date (`YYYY-MM-DD`) in `timeZone`. */
+function dateInZone(date, timeZone) {
+    return new Intl.DateTimeFormat("en-CA", { timeZone, year: "numeric", month: "2-digit", day: "2-digit" }).format(date);
+}
+/** How far `timeZone`'s wall clock is ahead of UTC at `date`, in milliseconds (minute precision). */
+function zoneOffsetMs(date, timeZone) {
+    const parts = {};
+    const format = new Intl.DateTimeFormat("en-US", { timeZone, hourCycle: "h23", year: "numeric", month: "numeric", day: "numeric", hour: "numeric", minute: "numeric" });
+    for (const part of format.formatToParts(date)) {
+        parts[part.type] = part.value;
+    }
+    const wallClock = Date.UTC(Number(parts.year), Number(parts.month) - 1, Number(parts.day), Number(parts.hour), Number(parts.minute));
+    return wallClock - Math.floor(date.getTime() / 60000) * 60000;
+}
+/** The start of `series`' occurrence on `instanceDate`: the series' local start time on that date in the series'
+ * own time zone, so a daylight-saving change in between keeps the same wall-clock time. */
+function occurrenceStart(series, instanceDate) {
+    const timeZone = usableTimeZone(series.timezone);
+    const start = new Date(series.startDate);
+    const days = Math.round((Date.parse(instanceDate) - Date.parse(dateInZone(start, timeZone))) / 86400000);
+    const shifted = new Date(start.getTime() + days * 86400000);
+    return new Date(shifted.getTime() - (zoneOffsetMs(shifted, timeZone) - zoneOffsetMs(start, timeZone)));
+}
+/**
+ * The copy a response applies to. For an `instanceDate`, the caller's exception copy for that date (its
+ * `recurrenceId`'s date in the event's time zone) when one exists; otherwise the series (no `recurrenceId`), with
+ * `occurrence` set to the named occurrence's start when the series recurs.
+ */
+function pickOccurrence(events, instanceDate) {
+    const exception = instanceDate
+        ? events.find((event) => event.recurrenceId != null && dateInZone(new Date(event.recurrenceId), usableTimeZone(event.timezone)) === instanceDate)
+        : undefined;
+    const series = events.find((event) => event.recurrenceId == null);
+    if (exception || !series) {
+        return exception ? { event: exception } : undefined;
+    }
+    return { event: series, occurrence: instanceDate && series.recurrenceRule ? occurrenceStart(series, instanceDate) : undefined };
+}
+/** Sends the iTIP `REPLY` for `attendee`'s response to the organizer, the same message `BaseCalendarEventRoute.respond()`
+ * sends. Throws when the transport doesn't accept it. */
+async function sendReply(context, event, attendee, displayName) {
+    const organizerAddress = event.organizer?.address ?? "";
+    if (!isPlainEmailAddress(organizerAddress) || !isPlainEmailAddress(attendee.address)) {
+        return;
+    }
+    const ics = buildEventIcs({ ...event, attendees: [attendee] }, "REPLY", { onlyAttendee: attendee });
+    const raw = await new MailComposer({
+        from: { name: displayName ?? "", address: attendee.address },
+        to: organizerAddress,
+        subject: `${REPLY_SUBJECT_PREFIX[attendee.responseStatus]}: ${event.title}`,
+        text: `${attendee.displayName ?? attendee.address} has responded ${attendee.responseStatus} to: ${event.title}`,
+        icalEvent: { method: "reply", content: ics },
+    })
+        .compile()
+        .build();
+    await sendOrThrow(context.mailTransport, { raw, envelopeFrom: attendee.address, envelopeTo: [organizerAddress] });
+}
+//# sourceMappingURL=MeetingMessageClassHandler.js.map

package/dist/lib/rop/MeetingMessageClassHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MeetingMessageClassHandler.js","sourceRoot":"","sources":["../../../src/rop/MeetingMessageClassHandler.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,YAAY,MAAM,uCAAuC,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAqC,MAAM,kBAAkB,CAAC;AAC5G,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAE9F,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACpF,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEnF,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD;;uFAEuF;AACvF,MAAM,gCAAgC,GAA2C;IAC7E,+BAA+B,EAAE,sBAAsB,CAAC,QAAQ;IAChE,gCAAgC,EAAE,sBAAsB,CAAC,SAAS;IAClE,+BAA+B,EAAE,sBAAsB,CAAC,QAAQ;CACnE,CAAC;AAEF;;kHAEkH;AAClH,SAAS,sBAAsB,CAAC,OAA2B,EAAE,UAAkC,EAAE,IAAY,EAAE,GAAW;IACtH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,UAAU,GAAG,MAAM,EAAE,CAAC;YACtB,SAAS;QACb,CAAC;QACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACxD,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;YAC1F,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED;8BAC8B;AAC9B,MAAM,uBAAuB,GAAG,UAAU,CAAC;AAC3C,gHAAgH;AAChH,MAAM,eAAe,GAAG,UAAU,CAAC;AACnC,8GAA8G;AAC9G,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAErC;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,YAAoB,EAAE,eAAuC,EAAE,OAAmB;IAC1H,MAAM,cAAc,GAAG,gCAAgC,CAAC,YAAY,CAAC,CAAC;IACtE,MAAM,oBAAoB,GAAG,cAAc;QACvC,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,oBAAoB,CAAC;QAChG,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACxB,OAAO,uBAAuB,CAAC;IACnC,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;IACnE,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACD,OAAO,GAAG,oBAAoB,CAAC,IAAI,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,uBAAuB,CAAC;IACnC,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,0BAA0B,CAAC,cAAc,CAAC,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChH,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,eAAe,CAAC;IAC3B,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IACrC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,WAAW,EAAE,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3I,MAAM,kBAAkB,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACnH,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACtB,OAAO,eAAe,CAAC;IAC3B,CAAC;IAED,MAAM,eAAe,GAAa,EAAE,GAAG,kBAAkB,EAAE,cAAc,EAAE,CAAC;IAC5E,IAAI,UAAU,GAAqB,KAAK,CAAC;IACzC,IAAI,UAAU,EAAE,CAAC;QACb,IAAI,cAAc,KAAK,sBAAsB,CAAC,QAAQ,EAAE,CAAC;YACrD,MAAM,kBAAkB,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QACzF,UAAU,GAAG,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;IAC9J,CAAC;SAAM,IAAI,cAAc,KAAK,sBAAsB,CAAC,QAAQ,EAAE,CAAC;QAC5D,MAAM,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,2GAA2G;QAC3G,yGAAyG;QACzG,sBAAsB;QACtB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC;QAChE,IAAI,KAAK,CAAC,YAAY,IAAI,IAAI,IAAI,MAAM,EAAE,cAAc,EAAE,CAAC;YACvD,MAAM,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;QAC5E,CAAC;IACL,CAAC;SAAM,CAAC;QACJ,MAAM,SAAS,GAAe,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,KAAK,kBAAkB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChI,MAAM,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,KAAK,CAAC,EAAE;YACtI,SAAS,EAAE,IAAI;SAClB,CAAC,CAAC;IACP,CAAC;IAED,IAAI,CAAC;QACD,MAAM,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,iBAAiB,CAAC;IAC7B,CAAC;IACD,OAAO,CAAC,CAAC;AACb,CAAC;AAED,kGAAkG;AAClG,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAI7B,MAAM,oBAAoB,GAA2B;IACjD,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,UAAU;IAC7C,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,WAAW;IAC/C,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,UAAU;CAChD,CAAC;AAEF,6GAA6G;AAC7G,KAAK,UAAU,kBAAkB,CAAC,OAAmB,EAAE,MAAwB,EAAE,UAAgB;IAC7F,MAAM,IAAI,GAAG,MAAM,CAAC,cAAe,CAAC;IACpC,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzE,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACrE,OAAO;IACX,CAAC;IACD,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,CAAC,GAAG,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC;IAC5E,MAAM,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,MAAM,CAAC,EAAE;QAC9I,SAAS,EAAE,IAAI;KAClB,CAAC,CAAC;AACP,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,gBAAgB,CAAC,OAAmB,EAAE,OAAe;IAChE,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAA+B,EAAE;QAC5D,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC;YACD,MAAM,IAAI,GAAuB,MAAM,OAAO,CAAC,iBAAiB,CAAC,IAAI,CACjE,EAAE,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,gBAAgB,EAAS,EACnG,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAC/C,CAAC;YACF,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,GAAG,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,EAAE,CAAC,CAAC,8DAA8D;QAC7E,CAAC;IACL,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;AACzG,CAAC;AAED,4DAA4D;AAC5D,SAAS,cAAc,CAAC,QAA4B;IAChD,IAAI,CAAC;QACD,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,IAAI,KAAK,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC;IACxG,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,2DAA2D;AAC3D,SAAS,UAAU,CAAC,IAAU,EAAE,QAAgB;IAC5C,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC1H,CAAC;AAED,qGAAqG;AACrG,SAAS,YAAY,CAAC,IAAU,EAAE,QAAgB;IAC9C,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACvK,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;IAClC,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACrI,OAAO,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC;AAClE,CAAC;AAED;2FAC2F;AAC3F,SAAS,eAAe,CAAC,MAAwB,EAAE,YAAoB;IACnE,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC;IACzG,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,QAAQ,CAAC,CAAC;IAC5D,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC3G,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,MAA0B,EAAE,YAAgC;IAChF,MAAM,SAAS,GAAG,YAAY;QAC1B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI,IAAI,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,YAAY,CAAC;QACjJ,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC;IAClE,IAAI,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AACpI,CAAC;AAED;yDACyD;AACzD,KAAK,UAAU,SAAS,CAAC,OAAmB,EAAE,KAAuB,EAAE,QAAkB,EAAE,WAA+B;IACtH,MAAM,gBAAgB,GAAG,KAAK,CAAC,SAAS,EAAE,OAAO,IAAI,EAAE,CAAC;IACxD,IAAI,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACnF,OAAO;IACX,CAAC;IACD,MAAM,GAAG,GAAG,aAAa,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpG,MAAM,GAAG,GAAW,MAAM,IAAI,YAAY,CAAC;QACvC,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;QAC5D,EAAE,EAAE,gBAAgB;QACpB,OAAO,EAAE,GAAG,oBAAoB,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE;QAC3E,IAAI,EAAE,GAAG,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,OAAO,kBAAkB,QAAQ,CAAC,cAAc,QAAQ,KAAK,CAAC,KAAK,EAAE;QAC/G,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE;KAC/C,CAAC;SACG,OAAO,EAAE;SACT,KAAK,EAAE,CAAC;IACb,MAAM,WAAW,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;AACtH,CAAC"}

package/dist/lib/rop/MessageBodyStream.js

@@ -0,0 +1,68 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { simpleParser } from "mailparser";
+import { BufferWriter } from "../codec/BufferCursor.js";
+import { handleDataCache, handleDataKey } from "./HandleDataCache.js";
+/** `PidTagBody` (`[MS-OXPROPS]`): property ID `0x1000`, `PtypString`. The only streamable property this
+ * pragmatic subset supports via `RopOpenStream`/`RopReadStream` - `PidTagHtml`/`PidTagRtfCompressed` are a
+ * documented gap (see `RopOpenStreamHandler`'s own doc comment). */
+export const PID_TAG_BODY = 0x1000;
+/**
+ * Resolves a `"message:<uid>"` target's plain-text body as the exact byte sequence `RopReadStream` must serve
+ * for a streamed `PtypString` property - confirmed via `[MS-OXCPRPT]`'s `RopOpenStream` page ("a string of
+ * Unicode characters in UTF-16LE format encoding with terminating null character"), the identical encoding
+ * `writePropertyValue()` already uses for an inline `PtypString` value, so this reuses
+ * `BufferWriter.writeNullTerminatedUtf16LE` rather than reimplementing it.
+ *
+ * Always derived from the message's raw MIME source (`bodyBlobKey`, via `mailparser` - the same fallback path
+ * `ItemOperationsCommand.fetchMessage()` already uses for EAS's own plain-text body delivery) rather than
+ * `sanitizedHtmlBlobKey` - `PidTagBody` is specifically the plain-text body per `[MS-OXPROPS]`, unlike EAS's
+ * `Body` element, which can carry either format tagged by its own `Type` field.
+ *
+ * Does no caching itself - `loadStreamBody` below is what the stream ROPs call. With a `budget`, nothing is fetched
+ * once its bytes are used up, and the raw message's size is charged before it is parsed.
+ */
+export async function resolveMessageBodyBytes(target, messageRepo, blobStore, budget) {
+    budget?.assertBytesLeft();
+    const uid = target.slice("message:".length);
+    const message = await messageRepo.findOne(uid, { ignoreACL: true });
+    if (!message) {
+        return Buffer.alloc(0);
+    }
+    const raw = await blobStore.get(message.bodyBlobKey);
+    budget?.chargeBytes(raw.length);
+    const parsed = await simpleParser(raw);
+    const writer = new BufferWriter();
+    writer.writeNullTerminatedUtf16LE(parsed.text ?? "");
+    return writer.toBuffer();
+}
+/**
+ * The body bytes for the read stream at `handleIndex`. Parsed once and kept in `HandleDataCache` (outside the
+ * session JSON) for the life of the handle, so reading a large body in many `RopReadStream` chunks costs one
+ * fetch and one MIME parse instead of one per chunk. A cache miss (eviction, or a request served by another
+ * replica) just resolves the body again: a stored message's body never changes, so the bytes are the same.
+ *
+ * Within one `Execute`, streams opened on the same message share a single parse (`ExecuteBudget.bodies`), and each
+ * parse's bytes count against the request's byte budget.
+ */
+export async function loadStreamBody(context, handleIndex, stream) {
+    const key = handleDataKey(context.session.uid, handleIndex, stream.generation);
+    const cached = handleDataCache.get(key);
+    if (cached) {
+        return cached;
+    }
+    const budget = context.budget;
+    let pending = budget?.bodies.get(stream.entityUid);
+    if (!pending) {
+        budget?.assertBytesLeft();
+        pending = resolveMessageBodyBytes(stream.entityUid, context.messageRepo, context.blobStore, budget);
+        budget?.bodies.set(stream.entityUid, pending);
+        budget?.chargeBytes((await pending).length);
+    }
+    const bytes = await pending;
+    handleDataCache.set(key, bytes);
+    return bytes;
+}
+//# sourceMappingURL=MessageBodyStream.js.map

package/dist/lib/rop/MessageBodyStream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MessageBodyStream.js","sourceRoot":"","sources":["../../../src/rop/MessageBodyStream.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG1C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAGxD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGtE;;oEAEoE;AACpE,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC;AAEnC;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAAc,EAAE,WAA2B,EAAE,SAAoB,EAAE,MAAsB;IACnI,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAwB,MAAM,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzF,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;IAClC,MAAM,CAAC,0BAA0B,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAmB,EAAE,WAAmB,EAAE,MAAwB;IACnG,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,MAAM,EAAE,CAAC;QACT,OAAO,MAAM,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,OAAO,GAAG,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,MAAM,EAAE,eAAe,EAAE,CAAC;QAC1B,OAAO,GAAG,uBAAuB,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACpG,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,EAAE,WAAW,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC;IAC5B,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAChC,OAAO,KAAK,CAAC;AACjB,CAAC"}

package/dist/lib/rop/MessageTarget.js

@@ -0,0 +1,57 @@
+import { findAllCapped, MAX_COLLECTION_ROWS } from "./RepoPaging.js";
+/** Degrades to empty-looking values for a `"message:<uid>"` target whose real `Message` has since vanished
+ * (soft-deleted or otherwise), the same "don't fail the whole ROP over one stale row" principle
+ * `FolderTarget.resolveFolderInfo` already applies. */
+export async function resolveMessageInfo(target, messageRepo) {
+    const uid = target.slice("message:".length);
+    const message = await messageRepo.findOne(uid, { ignoreACL: true });
+    return {
+        subject: message?.subject ?? "",
+        read: message?.flags?.read ?? false,
+        hasAttachments: message?.hasAttachments ?? false,
+        receivedDate: message?.receivedDate ?? new Date(0),
+        labelUids: message?.labelUids ?? [],
+    };
+}
+/** The order a folder's messages are listed in: newest first, ties broken by `uid` so paging is stable. */
+export const MESSAGE_SORT = { receivedDate: "DESC", uid: "ASC" };
+/** Resolves the messages directly in `folderUid`, newest first and capped at `MAX_COLLECTION_ROWS`, as
+ * `"message:<uid>"` target strings. */
+export async function resolveFolderMessages(folderUid, messageRepo, budget) {
+    const { items: messages } = await findAllCapped(messageRepo, { folderUid }, MESSAGE_SORT, MAX_COLLECTION_ROWS, budget);
+    return messages.map((m) => `message:${m.uid}`);
+}
+/**
+ * Returns `target`'s existing MID if an earlier `RopQueryRows` row already assigned one, otherwise assigns and
+ * remembers the next free small integer MID. The exact `FolderTarget.assignOrGetFid` pattern, adapted for
+ * messages: this is what lets a client `RopOpenMessage` a message it only ever learned about via a
+ * `RopQueryRows` row's `PidTagMid` column.
+ *
+ * Backed by `session.messageTargetIds` (target -> MID) and `session.nextMessageId`, an O(1) reverse index/
+ * counter pair rather than a linear scan of `session.messageIds` plus a `Math.max(...spread)` over its keys -
+ * see `FolderTarget.assignOrGetFid`'s own doc comment for why both of those were real costs (not just
+ * theoretical ones) at real mailbox/session scale: `messageIds` only ever grows for a session's lifetime as a
+ * client pages through a mailbox, so a linear-scan lookup repeated once per row is quadratic over a session
+ * that pages through many messages.
+ */
+export function assignOrGetMid(session, target) {
+    const existing = session.messageTargetIds[target];
+    if (existing !== undefined) {
+        return existing;
+    }
+    const mid = session.nextMessageId++;
+    session.messageIds[String(mid)] = target;
+    session.messageTargetIds[target] = mid;
+    // MIDs are handed out consecutively, so the mapped ones are exactly [firstMessageId, nextMessageId). Past the cap
+    // the oldest is forgotten: opening it by that MID fails until a table row assigns the item a new one.
+    while (session.nextMessageId - session.firstMessageId > MAX_MESSAGE_IDS) {
+        const oldest = String(session.firstMessageId++);
+        delete session.messageTargetIds[session.messageIds[oldest]];
+        delete session.messageIds[oldest];
+    }
+    return mid;
+}
+/** The most MIDs one session keeps mapped. A session paging through a very large mailbox would otherwise grow its
+ * MID maps - saved with the session on every `Execute` - without bound. */
+export const MAX_MESSAGE_IDS = 20000;
+//# sourceMappingURL=MessageTarget.js.map

package/dist/lib/rop/MessageTarget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MessageTarget.js","sourceRoot":"","sources":["../../../src/rop/MessageTarget.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAiB,MAAM,iBAAiB,CAAC;AAkBpF;;uDAEuD;AACvD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,WAA2B;IAChF,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAwB,MAAM,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzF,OAAO;QACH,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE;QAC/B,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,KAAK;QACnC,cAAc,EAAE,OAAO,EAAE,cAAc,IAAI,KAAK;QAChD,YAAY,EAAE,OAAO,EAAE,YAAY,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC;QAClD,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,EAAE;KACtC,CAAC;AACN,CAAC;AAED,2GAA2G;AAC3G,MAAM,CAAC,MAAM,YAAY,GAAa,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AAE3E;uCACuC;AACvC,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,SAAiB,EAAE,WAA2B,EAAE,MAAsB;IAC9G,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAU,WAAW,EAAE,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAChI,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,cAAc,CAAC,OAA2B,EAAE,MAAc;IACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IACpC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC;IACzC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC;IACvC,kHAAkH;IAClH,sGAAsG;IACtG,OAAO,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,cAAc,GAAG,eAAe,EAAE,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;QAChD,OAAO,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED;2EAC2E;AAC3E,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC"}

package/dist/lib/rop/NamedPropertyRegistry.js

@@ -0,0 +1,69 @@
+/** The first numeric property ID this pragmatic subset ever assigns to a named property - real Exchange also
+ * reserves the `0x0000`-`0x7FFF` range for well-known/`PidTag*` properties, only ever assigning named
+ * properties IDs at `0x8000` and above (`[MS-OXCPRPT]`'s own `RopGetPropertyIdsFromNames` processing rules). */
+const FIRST_NAMED_PROPERTY_ID = 0x8000;
+/** A `PropertyName`'s registry key - a JSON string rather than a delimiter-joined one (e.g. `"<guid>:<lid>"`)
+ * because a string-`Kind` named property's own `name` is an arbitrary client-supplied string that could
+ * legitimately contain any delimiter this codec might otherwise pick (some real named properties do use
+ * URN-shaped names). `JSON.stringify` on a small, fixed-shape object has no such ambiguity. */
+function keyFor(propertyName) {
+    return propertyName.kind === "lid"
+        ? JSON.stringify({ guid: propertyName.guid.toLowerCase(), kind: "lid", lid: propertyName.lid })
+        : JSON.stringify({ guid: propertyName.guid.toLowerCase(), kind: "name", name: propertyName.name });
+}
+/** The most distinct named properties one session registers. The registry is saved with the session on every
+ * `Execute`, and a name can be up to 255 bytes, so letting a client fill the whole `0x8000`-`0xFFFF` ID space
+ * would make every request carry megabytes of session state. Real clients register a few hundred at most. */
+export const MAX_NAMED_PROPERTIES_PER_SESSION = 4096;
+/** The highest numeric property ID handed out - see `MAX_NAMED_PROPERTIES_PER_SESSION`. */
+const LAST_NAMED_PROPERTY_ID = FIRST_NAMED_PROPERTY_ID + MAX_NAMED_PROPERTIES_PER_SESSION - 1;
+/**
+ * Returns `propertyName`'s existing numeric property ID if an earlier `RopGetPropertyIdsFromNames` call in
+ * this session already assigned one, otherwise assigns and remembers the next free ID starting at
+ * `FIRST_NAMED_PROPERTY_ID`. This pragmatic subset always behaves as if the request's own `Flags` field
+ * requested "assign a new ID if unmapped" (`0x02`) - real Exchange's alternative (`0x00`, "only return
+ * already-mapped IDs") exists to let a client probe without committing a mailbox-wide registration; since this
+ * registry is already only ever session-scoped (not a real persisted per-mailbox mapping table), there is no
+ * meaningful difference between "probe" and "assign" here.
+ *
+ * Backed by `session.namedProperties`/`namedPropertyIds` (a forward and reverse map, kept in sync) and
+ * `session.nextNamedPropertyId`, an O(1) lookup/assignment pair rather than a linear scan plus a
+ * `Math.max(...spread)` over `Object.values(session.namedProperties)` - both real costs at scale: the spread
+ * form risks a `RangeError: Maximum call stack size exceeded` once a session has registered enough distinct
+ * names to exceed V8's function-argument-count limit, and the registry only ever grows for a session's
+ * lifetime, so a linear scan repeated once per property per row is quadratic over a session that resolves many
+ * named properties.
+ *
+ * Once `nextNamedPropertyId` would exceed `LAST_NAMED_PROPERTY_ID` (`MAX_NAMED_PROPERTIES_PER_SESSION` distinct
+ * names already registered this session), a *new*
+ * name can no longer be assigned a real ID; this returns `0x0000` for it instead of throwing, the exact value
+ * `[MS-OXCPRPT]`'s own `RopGetPropertyIdsFromNames` processing rules already use for "this `PropertyName`
+ * could not be resolved" (the same value this pragmatic subset already produces for a `Kind = 0xFF` entry) -
+ * not a new failure mode, just the same one applied to a different unmappable case. A name already registered
+ * before the registry filled up keeps returning its real, previously-assigned ID.
+ */
+export function assignOrGetNamedPropertyId(session, propertyName) {
+    const key = keyFor(propertyName);
+    const existing = session.namedProperties[key];
+    if (existing !== undefined) {
+        return existing;
+    }
+    if (session.nextNamedPropertyId > LAST_NAMED_PROPERTY_ID) {
+        return 0x0000;
+    }
+    const id = session.nextNamedPropertyId++;
+    session.namedProperties[key] = id;
+    session.namedPropertyIds[id] = key;
+    return id;
+}
+/** The reverse lookup `RopSetProperties`/`RopGetPropertiesSpecific`/`RopQueryRows` use to recognize an incoming
+ * property ID `>= 0x8000` as one of this session's own mapped named properties - an O(1) lookup against
+ * `session.namedPropertyIds` (kept in sync by `assignOrGetNamedPropertyId`) rather than a linear scan of
+ * `session.namedProperties` with a `JSON.parse` per candidate - see that function's own doc comment for why
+ * this matters at scale, particularly since this is called once per named-property column per row from
+ * `RopQueryRows`. */
+export function resolveNamedProperty(session, propertyId) {
+    const key = session.namedPropertyIds[propertyId];
+    return key !== undefined ? JSON.parse(key) : undefined;
+}
+//# sourceMappingURL=NamedPropertyRegistry.js.map

package/dist/lib/rop/NamedPropertyRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NamedPropertyRegistry.js","sourceRoot":"","sources":["../../../src/rop/NamedPropertyRegistry.ts"],"names":[],"mappings":"AAmBA;;gHAEgH;AAChH,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAEvC;;;+FAG+F;AAC/F,SAAS,MAAM,CAAC,YAA0B;IACtC,OAAO,YAAY,CAAC,IAAI,KAAK,KAAK;QAC9B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC;QAC/F,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3G,CAAC;AAED;;6GAE6G;AAC7G,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,CAAC;AAErD,2FAA2F;AAC3F,MAAM,sBAAsB,GAAG,uBAAuB,GAAG,gCAAgC,GAAG,CAAC,CAAC;AAE9F;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAA2B,EAAE,YAA0B;IAC9F,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,IAAI,OAAO,CAAC,mBAAmB,GAAG,sBAAsB,EAAE,CAAC;QACvD,OAAO,MAAM,CAAC;IAClB,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IACzC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;IAClC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC;IACnC,OAAO,EAAE,CAAC;AACd,CAAC;AAED;;;;;qBAKqB;AACrB,MAAM,UAAU,oBAAoB,CAAC,OAA2B,EAAE,UAAkB;IAChF,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACjD,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC"}