@rapidmx/mapi-plugin 1.0.0-beta.3

package/dist/lib/rop/RopLogonHandler.js

@@ -0,0 +1,132 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { BufferWriter } from "../codec/BufferCursor.js";
+import { encodeGuid } from "../codec/MapiGuid.js";
+import { FolderType } from "@rapidmx/restapi";
+import { assignOrGetFid } from "./FolderTarget.js";
+const ROP_ID_LOGON = 0xfe;
+/** A fixed replica identity shared by every logon in this deployment - legitimate per `[MS-OXCSTOR]`'s own
+ * "RopLogon ROP Success Response Buffer for Private Mailbox" section ("If the client did not set
+ * USE_PER_MDB_REPLID_MAPPING... this value MUST be identical for all private mailbox logons on the same RPC
+ * session"); this pragmatic subset never varies replica identity, so one fixed constant satisfies that. */
+const REPL_ID = 1;
+const REPL_GUID = "00000000-0000-0000-0000-000000000001";
+/**
+ * Order matches `[MS-OXCSTOR]` §2.2.1.1.3 ("RopLogon ROP Success Response Buffer for Private Mailbox")'s
+ * `FolderIds` list exactly: Root, Deferred Action, Spooler Queue, IPM Subtree, Inbox, Outbox, Sent Items,
+ * Deleted Items, Common Views, Schedule, Search, Views, Shortcuts (13 folders total, confirmed against the
+ * spec page directly). Folders with a matching `FolderType` resolve to a real `Folder` when one exists for
+ * this mailbox; the rest are virtual placeholders. Root/IPM Subtree have no real backing row at all in this
+ * data model, matching how EAS's own `FolderSync` already represents "the root" as `ParentId "0"` rather than
+ * a real `Folder` - not a new gap this ROP introduces. Deferred Action/Spooler Queue/Common Views/Schedule/
+ * Search/Views/Shortcuts are MAPI-internal administrative folders this library's `FolderType` enum has no
+ * concept of at all (it models the REST/EAS-relevant folder kinds - Inbox/Sent/Drafts/Deleted/Outbox/Junk/
+ * Calendar/Contacts/Tasks/Notes/User - not Exchange's own internal bookkeeping folders). A real client rarely
+ * if ever tries to open most of these directly; documented gap, not silently dropped.
+ */
+const SPECIAL_FOLDERS = [
+    { name: "root" },
+    { name: "deferredAction" },
+    { name: "spoolerQueue" },
+    { name: "ipmSubtree" },
+    { name: "inbox", folderType: FolderType.INBOX },
+    { name: "outbox", folderType: FolderType.OUTBOX },
+    { name: "sentItems", folderType: FolderType.SENT_ITEMS },
+    { name: "deletedItems", folderType: FolderType.DELETED_ITEMS },
+    { name: "commonViews" },
+    { name: "schedule" },
+    { name: "search" },
+    { name: "views" },
+    { name: "shortcuts" },
+];
+/**
+ * `RopLogon` (`[MS-OXCSTOR]`/`[MS-OXCROPS]`): the first ROP of any session, a prerequisite for every other
+ * ROP. This pragmatic subset always performs a private-mailbox logon against the mailbox `BaseMapiEmsmdbRoute`
+ * already resolved and authorized at `Connect` time - the request's own `Essdn` field is decoded (to advance
+ * past it correctly) but never trusted for mailbox identity, the same principle `BaseMapiEmsmdbRoute.Connect`
+ * already applies to that request's `UserDn` field. Because mailbox resolution already happened upstream,
+ * this handler has no real failure path to model (`ecUnknownUser`/`ecLoginFailure`/... are all deferred).
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class RopLogonHandler {
+    constructor() {
+        this.ropId = ROP_ID_LOGON;
+    }
+    async handle(reader, writer, context) {
+        reader.readUInt8(); // LogonId - this pragmatic subset doesn't track multiple concurrent logons per session
+        const outputHandleIndex = reader.readUInt8();
+        const logonFlags = reader.readUInt8();
+        reader.readUInt32LE(); // OpenFlags - unused; every logon behaves as a plain private-mailbox logon
+        reader.readUInt32LE(); // StoreState - per spec, unused and always 0
+        const essdnSize = reader.readUInt16LE();
+        if (essdnSize > 0) {
+            reader.readBytes(essdnSize); // Essdn - never trusted for mailbox identity, see class doc comment
+        }
+        const fids = await this.assignFolderIds(context);
+        context.session.handles[outputHandleIndex] = { type: "logon", entityUid: context.mailboxUid };
+        writer.writeUInt8(ROP_ID_LOGON);
+        writer.writeUInt8(outputHandleIndex);
+        writer.writeUInt32LE(0); // ReturnValue - success
+        writer.writeUInt8(logonFlags); // echoed back unchanged, per spec
+        for (const folder of SPECIAL_FOLDERS) {
+            writer.writeBigUInt64LE(BigInt(fids[folder.name]));
+        }
+        writer.writeUInt8(0x01); // ResponseFlags - Reserved bit only; no OwnerRight/SendAsRight/OOF claims in this subset
+        writer.writeBytes(encodeGuid(context.mailboxUid));
+        writer.writeUInt16LE(REPL_ID);
+        writer.writeBytes(encodeGuid(REPL_GUID));
+        writer.writeBytes(encodeLogonTime(new Date()));
+        writer.writeBigUInt64LE(1n); // GwartTime - fixed constant; no real GWART/AD concept in this deployment
+        writer.writeUInt32LE(0); // StoreState - unused
+    }
+    /**
+     * Assigns this session's FIDs for the 13 special folders, remembering each one's real-`Folder`-or-virtual-
+     * placeholder target in `session.folderIds` so a later `RopOpenFolder` can resolve it back to something
+     * real. Delegates to `FolderTarget.assignOrGetFid` - the same "reuse an existing FID for this target if one
+     * was already assigned, otherwise mint the next free one" logic `RopGetHierarchyTable`/`RopQueryRows` use
+     * for child folders - rather than wholesale-replacing `session.folderIds` with a freshly-numbered map
+     * starting back at FID 1. A second `RopLogon` on a live session (spec-legal - a real client can reconnect
+     * or re-logon within one session context) previously invalidated every FID a client had already learned
+     * for a child folder via `RopGetHierarchyTable`/`RopQueryRows` (all assigned starting at FID 14, since the
+     * old code always reset the counter to 1-13 for just these specials) and could even cause FIDs 14+ to be
+     * silently re-issued to a *different* folder than the one the client last associated with that number.
+     * Reusing `assignOrGetFid` means a re-`RopLogon` is now purely additive: these 13 targets get their
+     * existing FIDs back if this is a second logon, and any child-folder FIDs already assigned are left alone.
+     */
+    async assignFolderIds(context) {
+        // The four real-folder-type lookups (Inbox/Outbox/Sent Items/Deleted Items) are independent of each
+        // other, so resolve them concurrently rather than one sequential round trip per special folder -
+        // FID *assignment* itself still happens afterward, in SPECIAL_FOLDERS' own fixed order, so which FID
+        // ends up bound to which target is unaffected by fetch order.
+        const targets = await Promise.all(SPECIAL_FOLDERS.map(async (folder) => {
+            if (!folder.folderType) {
+                return `virtual:${folder.name}`;
+            }
+            const existing = await context.folderRepo.find({ mailboxUid: context.mailboxUid, type: folder.folderType }, { ignoreACL: true, limit: 1 });
+            return existing[0] ? `folder:${existing[0].uid}` : `virtual:${folder.name}`;
+        }));
+        const fids = {};
+        SPECIAL_FOLDERS.forEach((folder, index) => {
+            fids[folder.name] = assignOrGetFid(context.session, targets[index]);
+        });
+        return fids;
+    }
+}
+/** `LogonTime` structure (`[MS-OXCROPS]` "LogonTime Structure"): `Seconds`/`Minutes`/`Hour`/`DayOfWeek`
+ * (1 byte each, `DayOfWeek` Sunday=0)/`Day`/`Month` (1 byte each, `Month` January=1)/`Year` (2 bytes) - all
+ * UTC, confirmed against the spec's own byte-layout table. */
+function encodeLogonTime(date) {
+    const writer = new BufferWriter();
+    writer.writeUInt8(date.getUTCSeconds());
+    writer.writeUInt8(date.getUTCMinutes());
+    writer.writeUInt8(date.getUTCHours());
+    writer.writeUInt8(date.getUTCDay());
+    writer.writeUInt8(date.getUTCDate());
+    writer.writeUInt8(date.getUTCMonth() + 1);
+    writer.writeUInt16LE(date.getUTCFullYear());
+    return writer.toBuffer();
+}
+//# sourceMappingURL=RopLogonHandler.js.map

package/dist/lib/rop/RopLogonHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RopLogonHandler.js","sourceRoot":"","sources":["../../../src/rop/RopLogonHandler.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAgB,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAU,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGnD,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B;;;2GAG2G;AAC3G,MAAM,OAAO,GAAG,CAAC,CAAC;AAClB,MAAM,SAAS,GAAG,sCAAsC,CAAC;AAEzD;;;;;;;;;;;;GAYG;AACH,MAAM,eAAe,GAAgD;IACjE,EAAE,IAAI,EAAE,MAAM,EAAE;IAChB,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAC1B,EAAE,IAAI,EAAE,cAAc,EAAE;IACxB,EAAE,IAAI,EAAE,YAAY,EAAE;IACtB,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,KAAK,EAAE;IAC/C,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE;IACjD,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE;IACxD,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,CAAC,aAAa,EAAE;IAC9D,EAAE,IAAI,EAAE,aAAa,EAAE;IACvB,EAAE,IAAI,EAAE,UAAU,EAAE;IACpB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAClB,EAAE,IAAI,EAAE,OAAO,EAAE;IACjB,EAAE,IAAI,EAAE,WAAW,EAAE;CACxB,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,OAAO,eAAe;IAA5B;QACoB,UAAK,GAAG,YAAY,CAAC;IAsEzC,CAAC;IApEU,KAAK,CAAC,MAAM,CAAC,MAAoB,EAAE,MAAoB,EAAE,OAAmB;QAC/E,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,uFAAuF;QAC3G,MAAM,iBAAiB,GAAW,MAAM,CAAC,SAAS,EAAE,CAAC;QACrD,MAAM,UAAU,GAAW,MAAM,CAAC,SAAS,EAAE,CAAC;QAC9C,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,2EAA2E;QAClG,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,6CAA6C;QACpE,MAAM,SAAS,GAAW,MAAM,CAAC,YAAY,EAAE,CAAC;QAChD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,oEAAoE;QACrG,CAAC;QAED,MAAM,IAAI,GAA2B,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;QAE9F,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAChC,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACrC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,wBAAwB;QACjD,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,kCAAkC;QACjE,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;YACnC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,yFAAyF;QAClH,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,0EAA0E;QACvG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;IACnD,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,KAAK,CAAC,eAAe,CAAC,OAAmB;QAC7C,oGAAoG;QACpG,iGAAiG;QACjG,qGAAqG;QACrG,8DAA8D;QAC9D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAmB,EAAE;YAClD,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBACrB,OAAO,WAAW,MAAM,CAAC,IAAI,EAAE,CAAC;YACpC,CAAC;YACD,MAAM,QAAQ,GAAa,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CACpD,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,EAC3D,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAChC,CAAC;YACF,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,IAAI,EAAE,CAAC;QAChF,CAAC,CAAC,CACL,CAAC;QAEF,MAAM,IAAI,GAA2B,EAAE,CAAC;QACxC,eAAe,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AAED;;8DAE8D;AAC9D,SAAS,eAAe,CAAC,IAAU;IAC/B,MAAM,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;IAClC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IACxC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IACxC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACtC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACpC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IACrC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1C,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC7B,CAAC"}

package/dist/lib/rop/RopOpenFolderHandler.js

@@ -0,0 +1,46 @@
+const ROP_ID_OPEN_FOLDER = 0x02;
+/** The well-known MAPI HRESULT `MAPI_E_NOT_FOUND`, reused as this handler's only failure `ReturnValue` (an
+ * unrecognized `FolderId` - one not present in `session.folderIds`, i.e. not something `RopLogon` handed out
+ * this session). */
+const ERROR_NOT_FOUND = 0x8004010f;
+/**
+ * `RopOpenFolder` (`[MS-OXCFOLD]`/`[MS-OXCROPS]`): opens a folder by FID, producing a new `"folder"` Server
+ * object handle later ROPs (`RopGetHierarchyTable`, a future `RopGetContentsTable`) reference by
+ * `InputHandleIndex`. The request's own `OpenModeFlags` (`OpenSoftDeleted`, ...) is decoded to advance past
+ * it correctly but not acted on - this pragmatic subset has no soft-deleted-folder recovery flow.
+ *
+ * Private-mailbox-only response shape: `IsGhosted` is always `0` and its conditional
+ * `ServerCount`/`CheapServerCount`/`Servers` fields are never present, since `IsGhosted` and its trailing
+ * fields are documented as public-folder-only (`[MS-OXCFOLD]`'s own "RopOpenFolder ROP Response Buffer"
+ * page). `HasRules` is always `0` - this library has no `[MS-OXORULE]` rules-engine support.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class RopOpenFolderHandler {
+    constructor() {
+        this.ropId = ROP_ID_OPEN_FOLDER;
+    }
+    handle(reader, writer, context) {
+        reader.readUInt8(); // LogonId - this pragmatic subset doesn't track multiple concurrent logons per session
+        reader.readUInt8(); // InputHandleIndex - the logon handle this open is performed against; only one
+        // logon exists per session in this pragmatic subset, so it's consumed to advance the reader correctly
+        // but never separately validated.
+        const outputHandleIndex = reader.readUInt8();
+        reader.readUInt8(); // OpenModeFlags - OpenSoftDeleted not supported in this pragmatic subset
+        const folderId = reader.readBigUInt64LE();
+        const target = context.session.folderIds[folderId.toString()];
+        if (!target) {
+            writer.writeUInt8(ROP_ID_OPEN_FOLDER);
+            writer.writeUInt8(outputHandleIndex);
+            writer.writeUInt32LE(ERROR_NOT_FOUND);
+            return;
+        }
+        context.session.handles[outputHandleIndex] = { type: "folder", entityUid: target };
+        writer.writeUInt8(ROP_ID_OPEN_FOLDER);
+        writer.writeUInt8(outputHandleIndex);
+        writer.writeUInt32LE(0); // ReturnValue - success
+        writer.writeUInt8(0); // HasRules - no rules-engine support
+        writer.writeUInt8(0); // IsGhosted - always false for a private mailbox
+    }
+}
+//# sourceMappingURL=RopOpenFolderHandler.js.map

package/dist/lib/rop/RopOpenFolderHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RopOpenFolderHandler.js","sourceRoot":"","sources":["../../../src/rop/RopOpenFolderHandler.ts"],"names":[],"mappings":"AAOA,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC;;oBAEoB;AACpB,MAAM,eAAe,GAAG,UAAU,CAAC;AAEnC;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,oBAAoB;IAAjC;QACoB,UAAK,GAAG,kBAAkB,CAAC;IA2B/C,CAAC;IAzBU,MAAM,CAAC,MAAoB,EAAE,MAAoB,EAAE,OAAmB;QACzE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,uFAAuF;QAC3G,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,+EAA+E;QACnG,sGAAsG;QACtG,kCAAkC;QAClC,MAAM,iBAAiB,GAAW,MAAM,CAAC,SAAS,EAAE,CAAC;QACrD,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,yEAAyE;QAC7F,MAAM,QAAQ,GAAW,MAAM,CAAC,eAAe,EAAE,CAAC;QAElD,MAAM,MAAM,GAAuB,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;YACtC,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YACrC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;YACtC,OAAO;QACX,CAAC;QAED,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAEnF,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACtC,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACrC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,wBAAwB;QACjD,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,qCAAqC;QAC3D,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,iDAAiD;IAC3E,CAAC;CACJ"}

package/dist/lib/rop/RopOpenMessageHandler.js

@@ -0,0 +1,81 @@
+import { writeTypedString } from "../codec/TypedString.js";
+import { resolveCalendarEventInfo } from "./CalendarEventTarget.js";
+import { resolveContactInfo } from "./ContactTarget.js";
+import { resolveMessageInfo } from "./MessageTarget.js";
+import { resolveTaskInfo } from "./TaskTarget.js";
+const ROP_ID_OPEN_MESSAGE = 0x03;
+/** The well-known MAPI HRESULT `MAPI_E_NOT_FOUND`, reused as this handler's only failure `ReturnValue` - an
+ * unrecognized `MessageId`, i.e. not something a `RopQueryRows` `PidTagMid` column has handed out this session
+ * (see `MessageTarget.assignOrGetMid`'s own doc comment). Same constant `RopOpenFolderHandler` uses for its
+ * own analogous `FolderId` lookup miss. */
+const ERROR_NOT_FOUND = 0x8004010f;
+/**
+ * `RopOpenMessage` (`[MS-OXCMSG]`/`[MS-OXCROPS]`): opens a message by MID, producing a new `"message"` Server
+ * object handle later ROPs (`RopGetPropertiesSpecific`, `RopOpenStream`) reference by `InputHandleIndex`. The
+ * request's own `FolderId` (the message's expected parent folder) and `CodePageId` are decoded to advance past
+ * them correctly but not otherwise acted on - a MID is resolved directly via `session.messageIds`
+ * (`MessageTarget.assignOrGetMid`), the same "the session already knows what this small integer refers to"
+ * design `RopOpenFolderHandler` uses for FIDs, so cross-checking the caller-supplied `FolderId` would be pure
+ * redundancy. `OpenModeFlags` is likewise decoded but not honored - this pragmatic subset only ever opens a
+ * message for reading (no `RopSetProperties`/`RopSaveChangesMessage` write-back support yet).
+ *
+ * **Pragmatic success response**: `HasNamedProperties` is always `false` - a conservative hint value only, not
+ * a claim that named properties are unsupported (`RopGetPropertyIdsFromNames`/`PropertyResolvers.ts` do resolve
+ * them for a subsequently-opened Calendar item; a real client calls `RopGetPropertyIdsFromNames` unconditionally
+ * for a known Calendar message class regardless of this flag, so leaving it `false` doesn't block that path).
+ * The `SubjectPrefix`/`NormalizedSubject` `TypedString`s are "no prefix" + the item's plain subject/title (this
+ * data model has no separate prefix/normalized-subject split the way real Exchange does), and the recipient
+ * table (`RecipientCount`/`ColumnCount`/`RecipientColumns`/`RowCount`/`RecipientRows`) is always empty - reading
+ * a message's `To`/`Cc` list is a documented gap in this pass, not silently wrong data.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class RopOpenMessageHandler {
+    constructor() {
+        this.ropId = ROP_ID_OPEN_MESSAGE;
+    }
+    async handle(reader, writer, context) {
+        reader.readUInt8(); // LogonId - this pragmatic subset doesn't track multiple concurrent logons per session
+        reader.readUInt8(); // InputHandleIndex - the folder/logon handle this open is performed against; not
+        // separately validated, matching RopOpenFolderHandler's own treatment of its input handle.
+        const outputHandleIndex = reader.readUInt8();
+        reader.readUInt16LE(); // CodePageId - this pragmatic subset always encodes strings as UTF-16LE/UTF-8 directly
+        reader.readBigUInt64LE(); // FolderId - the message's expected parent folder; not cross-checked, see class doc comment
+        reader.readUInt8(); // OpenModeFlags - read-only opens only in this pragmatic subset
+        const messageId = reader.readBigUInt64LE();
+        const target = context.session.messageIds[messageId.toString()];
+        if (!target) {
+            writer.writeUInt8(ROP_ID_OPEN_MESSAGE);
+            writer.writeUInt8(outputHandleIndex);
+            writer.writeUInt32LE(ERROR_NOT_FOUND);
+            return;
+        }
+        // A calendar/contact/task item's "subject" is its title/display name (PidTagSubject, the same tag a
+        // Message uses) - see CalendarEventTarget.ts's own doc comment for why no separate MID-registry
+        // mechanism is needed for any of these target kinds.
+        let subject;
+        if (target.startsWith("calendarEvent:")) {
+            subject = (await resolveCalendarEventInfo(target, context.calendarEventRepo)).title;
+        }
+        else if (target.startsWith("contact:")) {
+            subject = context.contactRepo ? (await resolveContactInfo(target, context.contactRepo)).displayName : "";
+        }
+        else if (target.startsWith("task:")) {
+            subject = context.taskRepo ? (await resolveTaskInfo(target, context.taskRepo)).title : "";
+        }
+        else {
+            subject = (await resolveMessageInfo(target, context.messageRepo)).subject;
+        }
+        context.session.handles[outputHandleIndex] = { type: "message", entityUid: target };
+        writer.writeUInt8(ROP_ID_OPEN_MESSAGE);
+        writer.writeUInt8(outputHandleIndex);
+        writer.writeUInt32LE(0); // ReturnValue - success
+        writer.writeUInt8(0); // HasNamedProperties - conservative fixed value, see class doc comment
+        writeTypedString(writer, undefined); // SubjectPrefix - no prefix/normalized-subject split in this data model
+        writeTypedString(writer, subject); // NormalizedSubject
+        writer.writeUInt16LE(0); // RecipientCount - reading recipients is a documented gap, see class doc comment
+        writer.writeUInt16LE(0); // ColumnCount
+        writer.writeUInt8(0); // RowCount
+    }
+}
+//# sourceMappingURL=RopOpenMessageHandler.js.map

package/dist/lib/rop/RopOpenMessageHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RopOpenMessageHandler.js","sourceRoot":"","sources":["../../../src/rop/RopOpenMessageHandler.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC;;;2CAG2C;AAC3C,MAAM,eAAe,GAAG,UAAU,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,qBAAqB;IAAlC;QACoB,UAAK,GAAG,mBAAmB,CAAC;IA6ChD,CAAC;IA3CU,KAAK,CAAC,MAAM,CAAC,MAAoB,EAAE,MAAoB,EAAE,OAAmB;QAC/E,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,uFAAuF;QAC3G,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,iFAAiF;QACrG,2FAA2F;QAC3F,MAAM,iBAAiB,GAAW,MAAM,CAAC,SAAS,EAAE,CAAC;QACrD,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,uFAAuF;QAC9G,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,4FAA4F;QACtH,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,gEAAgE;QACpF,MAAM,SAAS,GAAW,MAAM,CAAC,eAAe,EAAE,CAAC;QAEnD,MAAM,MAAM,GAAuB,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;YACvC,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YACrC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;YACtC,OAAO;QACX,CAAC;QAED,oGAAoG;QACpG,gGAAgG;QAChG,qDAAqD;QACrD,IAAI,OAAe,CAAC;QACpB,IAAI,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACtC,OAAO,GAAG,CAAC,MAAM,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC;QACxF,CAAC;aAAM,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACvC,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7G,CAAC;aAAM,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,CAAC;aAAM,CAAC;YACJ,OAAO,GAAG,CAAC,MAAM,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9E,CAAC;QACD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAEpF,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;QACvC,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACrC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,wBAAwB;QACjD,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,uEAAuE;QAC7F,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,wEAAwE;QAC7G,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,oBAAoB;QACvD,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,iFAAiF;QAC1G,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc;QACvC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW;IACrC,CAAC;CACJ"}

package/dist/lib/rop/RopOpenStreamHandler.js

@@ -0,0 +1,81 @@
+import { PropertyType, readPropertyTag } from "../codec/PropertyValue.js";
+import { PID_TAG_BODY, resolveMessageBodyBytes } from "./MessageBodyStream.js";
+const ROP_ID_OPEN_STREAM = 0x2b;
+/** `[MS-OXCPRPT]` §2.2.14.1 `OpenModeFlags` values - `ReadOnly` opens the existing value for reading;
+ * `ReadWrite`/`Create` both open for writing (`Create` additionally discards any existing value first, "the
+ * mode required for a property that has not been set" per the spec - always true for a fresh
+ * `RopCreateMessage` draft's body, which is the only write-mode case this pragmatic subset ever produces). */
+const OPEN_MODE_READ_ONLY = 0x00;
+/** The well-known MAPI HRESULT `MAPI_E_NOT_FOUND`, reused for "the referenced handle isn't a message, or the
+ * requested property isn't one this pragmatic subset can stream" - the same constant `RopOpenFolderHandler`
+ * uses for its own analogous lookup-miss case. */
+const ERROR_NOT_FOUND = 0x8004010f;
+/**
+ * `RopOpenStream` (`[MS-OXCPRPT]`/`[MS-OXCROPS]`): opens a property for streaming access, producing a new
+ * `"stream"` Server object handle `RopReadStream`/`RopWriteStream` reads/writes by `InputHandleIndex`.
+ * **Pragmatic subset**: only `PidTagBody` (`PtypString`, the plain-text message body) on a `"message"` handle
+ * is supported - a real client also streams `PidTagHtml`/`PidTagRtfCompressed` (rich body formats) and
+ * folder/attachment binary properties, none of which this pass implements; requesting any other `PropertyTag`,
+ * or opening a stream against a non-message handle, fails with `MAPI_E_NOT_FOUND` rather than succeeding with
+ * wrong data.
+ *
+ * `OpenModeFlags` (`[MS-OXCPRPT]` §2.2.14.1) selects which of two independent code paths runs:
+ * - `ReadOnly` (`0x00`): the step-7 behavior - resolves the real, already-saved message's body via
+ * `MessageBodyStream.resolveMessageBodyBytes()` (`BlobStore` + `mailparser`) and reports its length as
+ * `StreamSize`, for `RopReadStream` to read back.
+ * - `ReadWrite`/`Create` (`0x01`/`0x02`): a **write-mode** stream, the step-8 addition compose/send needs to
+ * accept a message body via `RopWriteStream` - `StreamSize` is always `0` (matching `Create`'s "discards the
+ * existing value" semantics; this pragmatic subset never opens `ReadWrite` against a body that already has
+ * content) and the new handle's `writeTargetHandleIndex` remembers which message handle to write back into,
+ * the link `RopWriteStream`/`RopSaveChangesMessageHandler`/`RopSubmitMessageHandler` use to find it again.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class RopOpenStreamHandler {
+    constructor() {
+        this.ropId = ROP_ID_OPEN_STREAM;
+    }
+    async handle(reader, writer, context) {
+        reader.readUInt8(); // LogonId - this pragmatic subset doesn't track multiple concurrent logons per session
+        const inputHandleIndex = reader.readUInt8();
+        const outputHandleIndex = reader.readUInt8();
+        const propertyTag = readPropertyTag(reader);
+        const openModeFlags = reader.readUInt8();
+        const handle = context.session.handles[inputHandleIndex];
+        const isSupportedProperty = propertyTag.propertyId === PID_TAG_BODY && propertyTag.propertyType === PropertyType.PtypString;
+        if (!handle || handle.type !== "message" || !isSupportedProperty) {
+            writer.writeUInt8(ROP_ID_OPEN_STREAM);
+            writer.writeUInt8(outputHandleIndex);
+            writer.writeUInt32LE(ERROR_NOT_FOUND);
+            return;
+        }
+        let streamSize;
+        if (openModeFlags === OPEN_MODE_READ_ONLY) {
+            const bytes = await resolveMessageBodyBytes(handle.entityUid, context.messageRepo, context.blobStore);
+            streamSize = bytes.length;
+            context.session.handles[outputHandleIndex] = {
+                type: "stream",
+                entityUid: handle.entityUid,
+                propertyId: propertyTag.propertyId,
+                propertyType: propertyTag.propertyType,
+                streamPosition: 0,
+            };
+        }
+        else {
+            streamSize = 0;
+            context.session.handles[outputHandleIndex] = {
+                type: "stream",
+                entityUid: handle.entityUid,
+                propertyId: propertyTag.propertyId,
+                propertyType: propertyTag.propertyType,
+                writeTargetHandleIndex: inputHandleIndex,
+                writeBufferBase64: "",
+            };
+        }
+        writer.writeUInt8(ROP_ID_OPEN_STREAM);
+        writer.writeUInt8(outputHandleIndex);
+        writer.writeUInt32LE(0); // ReturnValue - success
+        writer.writeUInt32LE(streamSize); // StreamSize
+    }
+}
+//# sourceMappingURL=RopOpenStreamHandler.js.map

package/dist/lib/rop/RopOpenStreamHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RopOpenStreamHandler.js","sourceRoot":"","sources":["../../../src/rop/RopOpenStreamHandler.ts"],"names":[],"mappings":"AAKA,OAAO,EAAe,YAAY,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACvF,OAAO,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAG/E,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC;;;8GAG8G;AAC9G,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC;;kDAEkD;AAClD,MAAM,eAAe,GAAG,UAAU,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,oBAAoB;IAAjC;QACoB,UAAK,GAAG,kBAAkB,CAAC;IA8C/C,CAAC;IA5CU,KAAK,CAAC,MAAM,CAAC,MAAoB,EAAE,MAAoB,EAAE,OAAmB;QAC/E,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,uFAAuF;QAC3G,MAAM,gBAAgB,GAAW,MAAM,CAAC,SAAS,EAAE,CAAC;QACpD,MAAM,iBAAiB,GAAW,MAAM,CAAC,SAAS,EAAE,CAAC;QACrD,MAAM,WAAW,GAAgB,eAAe,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,aAAa,GAAW,MAAM,CAAC,SAAS,EAAE,CAAC;QAEjD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACzD,MAAM,mBAAmB,GAAG,WAAW,CAAC,UAAU,KAAK,YAAY,IAAI,WAAW,CAAC,YAAY,KAAK,YAAY,CAAC,UAAU,CAAC;QAC5H,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC/D,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;YACtC,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YACrC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;YACtC,OAAO;QACX,CAAC;QAED,IAAI,UAAkB,CAAC;QACvB,IAAI,aAAa,KAAK,mBAAmB,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YACtG,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;YAC1B,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG;gBACzC,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,YAAY,EAAE,WAAW,CAAC,YAAY;gBACtC,cAAc,EAAE,CAAC;aACpB,CAAC;QACN,CAAC;aAAM,CAAC;YACJ,UAAU,GAAG,CAAC,CAAC;YACf,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG;gBACzC,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,YAAY,EAAE,WAAW,CAAC,YAAY;gBACtC,sBAAsB,EAAE,gBAAgB;gBACxC,iBAAiB,EAAE,EAAE;aACxB,CAAC;QACN,CAAC;QAED,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACtC,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACrC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,wBAAwB;QACjD,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa;IACnD,CAAC;CACJ"}

package/dist/lib/rop/RopQueryRowsHandler.js

@@ -0,0 +1,91 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { BufferWriter } from "../codec/BufferCursor.js";
+import { writePropertyValue } from "../codec/PropertyValue.js";
+import { resolvePropertyValues } from "./PropertyResolvers.js";
+const ROP_ID_QUERY_ROWS = 0x15;
+/** The well-known MAPI HRESULT `MAPI_E_INVALID_OBJECT`, reused for "the referenced handle isn't a table (or
+ * doesn't exist)" - the same constant `RopGetHierarchyTableHandler` uses for its own analogous check. */
+const ERROR_INVALID_OBJECT = 0x80070005;
+/** `BOOKMARK_END` (`[MS-OXCTABL]`'s `Origin` field) - this pragmatic subset has no separate seek/bookmark ROP
+ * support, so every response reports the cursor as having landed at the table's current end. */
+const ORIGIN_BOOKMARK_END = 0x02;
+/**
+ * `RopQueryRows` (`[MS-OXCTABL]`/`[MS-OXCROPS]`): fetches up to `RowCount` rows from an already-configured
+ * table (`RopGetHierarchyTable` + `RopSetColumns`), advancing the table's cursor. Confirmed field-by-field
+ * against `[MS-OXCTABL]`'s own real captured request/response byte example - including the response's
+ * `RowData` encoding (`PropertyRow`: a leading `Flags` byte, `0x00` for a `StandardPropertyRow` where every
+ * column is a plain `PropertyValue`, `0x01` for a `FlaggedPropertyRow` where each column gets its own
+ * `FlaggedPropertyValue` flag+optional-value). This pragmatic subset always emits `StandardPropertyRow`
+ * (`Flags = 0x00`) - every configured column always resolves to *some* value here (falling back to a
+ * type-appropriate zero/empty default for an unsupported property, never an error), so `FlaggedPropertyRow`'s
+ * per-column error signaling is never needed.
+ *
+ * Backward reads (`ForwardRead = FALSE`) and the `NoAdvance` flag are decoded (to advance the reader
+ * correctly) but not honored - this pragmatic subset's tables are simple forward-only cursors. Works generically
+ * against either a `RopGetHierarchyTable` (folder rows, `"folder:"`/`"virtual:"` targets) or a
+ * `RopGetContentsTable` (message rows, `"message:"` targets) handle - dispatching to `FolderTarget`'s or
+ * `MessageTarget`'s resolver and property-value mapping by row-target prefix, since a single table handle only
+ * ever holds one kind of row.
+ *
+ * **Known, deliberate performance limitation**: `resolvePropertyValues` still does one `repo.findOne()` per
+ * row (message/calendarEvent/contact/task) rather than a single batched fetch for the whole page - a genuine
+ * N+1 for a large `RowCount`. A real fix needs a batched "fetch all these uids" query, which this codebase's
+ * `RepoUtils<T>` abstraction doesn't expose a backend-agnostic way to express (Mongo's `$in` and TypeORM's
+ * `In()` aren't interchangeable at this call site, which has no idea which backend it's running against) - see
+ * `ResolutionCache` for the narrower, safe win this pass *did* make (the redundant *identical* whole-mailbox-
+ * folder-list and calendar-mailbox fetches that were happening once per row regardless of which distinct
+ * entity each row was, now happen at most once per call).
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class RopQueryRowsHandler {
+    constructor() {
+        this.ropId = ROP_ID_QUERY_ROWS;
+    }
+    async handle(reader, writer, context) {
+        reader.readUInt8(); // LogonId - this pragmatic subset doesn't track multiple concurrent logons per session
+        const inputHandleIndex = reader.readUInt8();
+        reader.readUInt8(); // QueryRowsFlags - NoAdvance/EnablePackedBuffers not supported; always advances
+        reader.readUInt8(); // ForwardRead - backward reads not supported; always reads forward
+        const requestedCount = reader.readUInt16LE();
+        const table = context.session.handles[inputHandleIndex];
+        if (!table || table.type !== "table") {
+            writer.writeUInt8(ROP_ID_QUERY_ROWS);
+            writer.writeUInt8(inputHandleIndex);
+            writer.writeUInt32LE(ERROR_INVALID_OBJECT);
+            return;
+        }
+        const rows = table.rows ?? [];
+        const cursor = table.cursor ?? 0;
+        const slice = rows.slice(cursor, cursor + requestedCount);
+        table.cursor = cursor + slice.length;
+        // Shared across every row this call resolves - see ResolutionCache's own doc comment for why: without
+        // it, a hierarchy table's `hasChildren` column (or a calendar table's organizer/attendee resolution)
+        // would re-fetch the same whole-mailbox folder list/mailbox record once per row instead of once per
+        // call.
+        const cache = {};
+        const rowBuffers = [];
+        for (const target of slice) {
+            rowBuffers.push(await this.buildRow(context, target, table.columns ?? [], cache));
+        }
+        writer.writeUInt8(ROP_ID_QUERY_ROWS);
+        writer.writeUInt8(inputHandleIndex);
+        writer.writeUInt32LE(0); // ReturnValue - success
+        writer.writeUInt8(ORIGIN_BOOKMARK_END);
+        writer.writeUInt16LE(slice.length);
+        for (const rowBuffer of rowBuffers) {
+            writer.writeBytes(rowBuffer);
+        }
+    }
+    async buildRow(context, target, columns, cache) {
+        const writer = new BufferWriter();
+        writer.writeUInt8(0x00); // Flags - StandardPropertyRow, see class doc comment
+        const values = await resolvePropertyValues(target, columns, context, cache);
+        columns.forEach((column, index) => writePropertyValue(writer, column.propertyType, values[index]));
+        return writer.toBuffer();
+    }
+}
+//# sourceMappingURL=RopQueryRowsHandler.js.map

package/dist/lib/rop/RopQueryRowsHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RopQueryRowsHandler.js","sourceRoot":"","sources":["../../../src/rop/RopQueryRowsHandler.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAgB,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAmB,MAAM,wBAAwB,CAAC;AAGhF,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B;yGACyG;AACzG,MAAM,oBAAoB,GAAG,UAAU,CAAC;AAExC;gGACgG;AAChG,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,OAAO,mBAAmB;IAAhC;QACoB,UAAK,GAAG,iBAAiB,CAAC;IAsD9C,CAAC;IApDU,KAAK,CAAC,MAAM,CAAC,MAAoB,EAAE,MAAoB,EAAE,OAAmB;QAC/E,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,uFAAuF;QAC3G,MAAM,gBAAgB,GAAW,MAAM,CAAC,SAAS,EAAE,CAAC;QACpD,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,gFAAgF;QACpG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,mEAAmE;QACvF,MAAM,cAAc,GAAW,MAAM,CAAC,YAAY,EAAE,CAAC;QAErD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACnC,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YACrC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;YACpC,MAAM,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC;YAC3C,OAAO;QACX,CAAC;QAED,MAAM,IAAI,GAAa,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;QACxC,MAAM,MAAM,GAAW,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QACzC,MAAM,KAAK,GAAa,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAAC,CAAC;QACpE,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAErC,sGAAsG;QACtG,qGAAqG;QACrG,oGAAoG;QACpG,QAAQ;QACR,MAAM,KAAK,GAAoB,EAAE,CAAC;QAClC,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACrC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QACpC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,wBAAwB;QACjD,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;QACvC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACjC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,QAAQ,CAClB,OAAmB,EACnB,MAAc,EACd,OAAuD,EACvD,KAAsB;QAEtB,MAAM,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAClC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,qDAAqD;QAC9E,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5E,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnG,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7B,CAAC;CACJ"}

package/dist/lib/rop/RopReadStreamHandler.js

@@ -0,0 +1,55 @@
+import { resolveMessageBodyBytes } from "./MessageBodyStream.js";
+const ROP_ID_READ_STREAM = 0x2c;
+/** The well-known MAPI HRESULT `MAPI_E_INVALID_OBJECT`, reused for "the referenced handle isn't a stream (or
+ * doesn't exist)" - the same constant `RopGetHierarchyTableHandler` uses for its own analogous check. */
+const ERROR_INVALID_OBJECT = 0x80070005;
+/** `0xBABE`: `ByteCount`'s sentinel value signaling "the real limit is the following 4-byte `MaximumByteCount`
+ * field instead" (`[MS-OXCPRPT]`'s own `RopReadStream` request-buffer page). */
+const BYTE_COUNT_USE_MAXIMUM = 0xbabe;
+/** The response's own `DataSize` field is a 16-bit count (`[MS-OXCPRPT]`'s own `RopReadStream` response-buffer
+ * page), so a single call can never actually return more than this many bytes - regardless of what `ByteCount`/
+ * `MaximumByteCount` (a full 32-bit value in the latter case) the client asked for. Returning fewer bytes than
+ * requested is spec-legal (the client just calls `RopReadStream` again for the rest, exactly how paging a large
+ * stream is meant to work) - `writeUInt16LE` throwing `RangeError` for an out-of-range value is not. */
+const MAX_DATA_SIZE = 0xffff;
+/**
+ * `RopReadStream` (`[MS-OXCPRPT]`/`[MS-OXCROPS]`): reads up to `ByteCount` (or `MaximumByteCount`, if
+ * `ByteCount` is the `0xBABE` sentinel) bytes from an already-opened stream (`RopOpenStream`), advancing the
+ * stream's read position - clamped to `MAX_DATA_SIZE` (`0xFFFF`) regardless of what the client asked for, since
+ * the response's own `DataSize` field can't carry more than that; a client wanting more of a large body simply
+ * calls `RopReadStream` again from the advanced `streamPosition`, the same paging behavior real Exchange uses.
+ * Unlike most other ROPs in this pragmatic subset, `[MS-OXCROPS]` documents only one combined response-buffer
+ * shape for this ROP (no separate Success/Failure pages) - `DataSize`/`Data` are always present, `DataSize = 0`
+ * (empty `Data`) standing in for the failure case rather than the fields being omitted entirely.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class RopReadStreamHandler {
+    constructor() {
+        this.ropId = ROP_ID_READ_STREAM;
+    }
+    async handle(reader, writer, context) {
+        reader.readUInt8(); // LogonId - this pragmatic subset doesn't track multiple concurrent logons per session
+        const inputHandleIndex = reader.readUInt8();
+        const byteCount = reader.readUInt16LE();
+        const requestedCount = byteCount === BYTE_COUNT_USE_MAXIMUM ? reader.readUInt32LE() : byteCount;
+        const handle = context.session.handles[inputHandleIndex];
+        if (!handle || handle.type !== "stream") {
+            writer.writeUInt8(ROP_ID_READ_STREAM);
+            writer.writeUInt8(inputHandleIndex);
+            writer.writeUInt32LE(ERROR_INVALID_OBJECT);
+            writer.writeUInt16LE(0); // DataSize - see class doc comment on why this is still written on failure
+            return;
+        }
+        const bytes = await resolveMessageBodyBytes(handle.entityUid, context.messageRepo, context.blobStore);
+        const position = handle.streamPosition ?? 0;
+        const slice = bytes.subarray(position, position + Math.min(requestedCount, MAX_DATA_SIZE));
+        handle.streamPosition = position + slice.length;
+        writer.writeUInt8(ROP_ID_READ_STREAM);
+        writer.writeUInt8(inputHandleIndex);
+        writer.writeUInt32LE(0); // ReturnValue - success
+        writer.writeUInt16LE(slice.length); // DataSize
+        writer.writeBytes(slice);
+    }
+}
+//# sourceMappingURL=RopReadStreamHandler.js.map

package/dist/lib/rop/RopReadStreamHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RopReadStreamHandler.js","sourceRoot":"","sources":["../../../src/rop/RopReadStreamHandler.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAGjE,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC;yGACyG;AACzG,MAAM,oBAAoB,GAAG,UAAU,CAAC;AAExC;gFACgF;AAChF,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAEtC;;;;wGAIwG;AACxG,MAAM,aAAa,GAAG,MAAM,CAAC;AAE7B;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,oBAAoB;IAAjC;QACoB,UAAK,GAAG,kBAAkB,CAAC;IA4B/C,CAAC;IA1BU,KAAK,CAAC,MAAM,CAAC,MAAoB,EAAE,MAAoB,EAAE,OAAmB;QAC/E,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,uFAAuF;QAC3G,MAAM,gBAAgB,GAAW,MAAM,CAAC,SAAS,EAAE,CAAC;QACpD,MAAM,SAAS,GAAW,MAAM,CAAC,YAAY,EAAE,CAAC;QAChD,MAAM,cAAc,GAAW,SAAS,KAAK,sBAAsB,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAExG,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;YACtC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;YACpC,MAAM,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC;YAC3C,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,2EAA2E;YACpG,OAAO;QACX,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACtG,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC;QAC3F,MAAM,CAAC,cAAc,GAAG,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC;QAEhD,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACtC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QACpC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,wBAAwB;QACjD,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW;QAC/C,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;CACJ"}

package/dist/lib/rop/RopReleaseHandler.js

@@ -0,0 +1,20 @@
+const ROP_ID_RELEASE = 0x01;
+/**
+ * `RopRelease` (`[MS-OXCROPS]`): releases a Server object handle. Confirmed against the spec's own real
+ * captured example (`08 00 01 00 00 01 00 01 6F 00 00 00 6E 00 00 00`) that the request is exactly 3 bytes
+ * (`RopId`/`LogonId`/`InputHandleIndex`) and, uniquely among ROPs, **produces no response entry at all** - the
+ * server MUST NOT write anything to the output buffer for it, so `handle()` never touches `writer`.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class RopReleaseHandler {
+    constructor() {
+        this.ropId = ROP_ID_RELEASE;
+    }
+    handle(reader, _writer, context) {
+        reader.readUInt8(); // LogonId - this pragmatic subset doesn't track per-logon-id state separately
+        const inputHandleIndex = reader.readUInt8();
+        delete context.session.handles[inputHandleIndex];
+    }
+}
+//# sourceMappingURL=RopReleaseHandler.js.map

package/dist/lib/rop/RopReleaseHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RopReleaseHandler.js","sourceRoot":"","sources":["../../../src/rop/RopReleaseHandler.ts"],"names":[],"mappings":"AAOA,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IAA9B;QACoB,UAAK,GAAG,cAAc,CAAC;IAO3C,CAAC;IALU,MAAM,CAAC,MAAoB,EAAE,OAAqB,EAAE,OAAmB;QAC1E,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,8EAA8E;QAClG,MAAM,gBAAgB,GAAW,MAAM,CAAC,SAAS,EAAE,CAAC;QACpD,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACrD,CAAC;CACJ"}