@blamejs/core 0.9.19 → 0.9.21

package/lib/mail-store.js

@@ -169,6 +169,12 @@ function create(opts) {
   var stmtSetFlag          = db.prepare("INSERT OR IGNORE INTO " + qFlags + " (objectid, flag, set_at) VALUES (?, ?, ?)");
   var stmtUnsetFlag        = db.prepare("DELETE FROM " + qFlags + " WHERE objectid = ? AND flag = ?");
   var stmtLegalHold        = db.prepare("UPDATE " + qMsgs + " SET legal_hold = ? WHERE objectid = ?");
+  var stmtMoveByObjectId   = db.prepare(
+    "UPDATE " + qMsgs + " SET folder_id = ?, modseq = ? WHERE objectid = ? AND folder_id = ?");
+  var stmtSizeByObjectId   = db.prepare(
+    "SELECT size_bytes FROM " + qMsgs + " WHERE objectid = ? AND folder_id = ?");
+  var stmtDecrementQuota   = db.prepare(
+    "UPDATE " + qQuota + " SET used_bytes = used_bytes - ?, used_count = used_count - ? WHERE folder_id = ?");
   var stmtThreadFor        = db.prepare("SELECT objectid FROM " + qMsgs + " WHERE thread_root_id = ? ORDER BY received_at ASC");
   var stmtFindThreadByMsgId = db.prepare(
     "SELECT objectid, thread_root_id FROM " + qMsgs + " WHERE message_id_hash = ? LIMIT 1");
@@ -262,6 +268,18 @@ function create(opts) {
       if (!q) return { usedBytes: 0, usedCount: 0, capBytes: null, capCount: null };
       return { usedBytes: q.used_bytes, usedCount: q.used_count, capBytes: q.cap_bytes, capCount: q.cap_count };
     },
+    moveMessages:     function (fromFolderName, toFolderName, objectids) {
+      return _moveMessages({
+        stmtGetFolderByName: stmtGetFolderByName,
+        stmtBumpFolderModseq: stmtBumpFolderModseq,
+        stmtMoveByObjectId: stmtMoveByObjectId,
+        stmtSizeByObjectId: stmtSizeByObjectId,
+        stmtDecrementQuota: stmtDecrementQuota,
+        stmtBumpQuota: stmtBumpQuota,
+        fromFolderName: fromFolderName, toFolderName: toFolderName,
+        objectids: objectids,
+      });
+    },
     setLegalHold:     function (objectids, holdOpts) {
       var hold = (holdOpts && holdOpts.hold) ? 1 : 0;                                              // allow:raw-byte-literal — boolean cast for sqlite INTEGER column
       objectids.forEach(function (oid) { stmtLegalHold.run(hold, oid); });
@@ -405,6 +423,55 @@ function _fetchByObjectId(args) {
   };
 }
 
+// ---- Move -----------------------------------------------------------------
+
+function _moveMessages(args) {
+  var fromFolder = args.stmtGetFolderByName.get(args.fromFolderName);
+  if (!fromFolder) {
+    throw new MailStoreError("mail-store/no-folder",
+      "moveMessages: from-folder '" + args.fromFolderName + "' not found");
+  }
+  var toFolder = args.stmtGetFolderByName.get(args.toFolderName);
+  if (!toFolder) {
+    throw new MailStoreError("mail-store/no-folder",
+      "moveMessages: to-folder '" + args.toFolderName + "' not found");
+  }
+  if (!Array.isArray(args.objectids)) {
+    throw new MailStoreError("mail-store/bad-input",
+      "moveMessages: objectids must be an array");
+  }
+  // Per RFC 7162 each folder owns its own modseq counter. The moved
+  // row joins the destination's sequence — it gets `dstModseq` (the
+  // destination folder's new max). Source still bumps its `modseq_max`
+  // to track the removal even though the row is gone; CONDSTORE
+  // clients polling the source for `since-modseq` see the change.
+  var srcModseq = (fromFolder.modseq_max || 0) + 1;
+  var dstModseq = (toFolder.modseq_max  || 0) + 1;
+  var changed = 0;
+  var movedBytes = 0;
+  for (var i = 0; i < args.objectids.length; i += 1) {
+    // Capture size before the row's folder_id moves — the destination
+    // quota gets the delta and the source quota decrements by the same.
+    var size = args.stmtSizeByObjectId.get(args.objectids[i], fromFolder.id);
+    var bytes = size ? size.size_bytes : 0;
+    var r = args.stmtMoveByObjectId.run(toFolder.id, dstModseq, args.objectids[i], fromFolder.id);
+    if (r && r.changes) {
+      changed += r.changes;
+      movedBytes += bytes;
+    }
+  }
+  // Quota maintenance: decrement source by sum-of-sizes, increment
+  // destination. v0.9.19 substrate already maintains per-folder quota
+  // on append; move must keep both sides accurate.
+  if (changed > 0) {
+    args.stmtDecrementQuota.run(movedBytes, changed, fromFolder.id);
+    args.stmtBumpQuota.run(toFolder.id, movedBytes, changed);
+  }
+  args.stmtBumpFolderModseq.run(srcModseq, args.fromFolderName);
+  args.stmtBumpFolderModseq.run(dstModseq, args.toFolderName);
+  return { changed: changed, fromModseq: srcModseq, toModseq: dstModseq };
+}
+
 // ---- Flags ----------------------------------------------------------------
 
 function _setFlags(args) {

package/lib/mail.js

@@ -68,6 +68,7 @@ var dkim = require("./mail-dkim");
 var mailAuth = require("./mail-auth");
 var mailBimi = require("./mail-bimi");
 var mailUnsubscribe = require("./mail-unsubscribe");
+var mailAgent = require("./mail-agent");
 var net = lazyRequire(function () { return require("node:net"); });
 var networkDns = lazyRequire(function () { return require("./network-dns"); });
 var nodeUrl = require("node:url");
@@ -1862,4 +1863,9 @@ module.exports = {
     http:    httpTransport,
     resend:  resendTransport,
   },
+  // The mail-stack standardization contract (v0.9.20). JMAP / IMAP /
+  // POP3 / ManageSieve / MX / submission all translate into
+  // `agent.X(args)`; RBAC + posture + audit + dispatch owned here.
+  // See lib/mail-agent.js for the full surface.
+  agent:      mailAgent,
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/core",
-  "version": "0.9.19",
+  "version": "0.9.21",
   "description": "The Node framework that owns its stack.",
   "license": "Apache-2.0",
   "author": "blamejs contributors",

package/sbom.cdx.json

@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:ed73363f-9191-4704-85db-94a6cd3c93e5",
+  "serialNumber": "urn:uuid:f8b30ec2-7478-4a7b-852d-09721ba89ab2",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-05-14T17:13:12.089Z",
+    "timestamp": "2026-05-14T20:33:49.367Z",
     "lifecycles": [
       {
         "phase": "build"
@@ -19,14 +19,14 @@
       }
     ],
     "component": {
-      "bom-ref": "@blamejs/core@0.9.19",
+      "bom-ref": "@blamejs/core@0.9.21",
       "type": "library",
       "name": "blamejs",
-      "version": "0.9.19",
+      "version": "0.9.21",
       "scope": "required",
       "author": "blamejs contributors",
       "description": "The Node framework that owns its stack.",
-      "purl": "pkg:npm/%40blamejs/core@0.9.19",
+      "purl": "pkg:npm/%40blamejs/core@0.9.21",
       "properties": [],
       "externalReferences": [
         {
@@ -54,7 +54,7 @@
   "components": [],
   "dependencies": [
     {
-      "ref": "@blamejs/core@0.9.19",
+      "ref": "@blamejs/core@0.9.21",
       "dependsOn": []
     }
   ]