@bobfrankston/iflow-direct 0.1.62 → 0.1.64

package/imap-protocol.js

@@ -344,6 +344,40 @@ function unquote(s) {
         return s.slice(1, -1).replace(/\\(.)/g, "$1");
     return s;
 }
+/** Build a TextDecoder for an encoded-word charset label, trying progressively
+ *  looser readings of the label before giving up on UTF-8.
+ *
+ *  TextDecoder throws RangeError on a label it doesn't know, and the caller's
+ *  catch then returned the RAW encoded text — so ONE unrecognized label put
+ *  `London_Startup_Is_Selling_Permanent=2C_Painless=2C_=22Stick-On=22` in the
+ *  user's subject line (Bob 2026-08-02, NNSquad via mailman). Labels seen in
+ *  the wild that TextDecoder rejects:
+ *    `en_US.UTF-8` — a POSIX LOCALE (language_TERRITORY.CODESET), not a
+ *                    charset; the real charset is the codeset after the dot.
+ *    `utf-8*en`    — RFC 2231 language suffix appended to the charset.
+ *    `utf8`        — no hyphen.
+ *  The raw label is tried FIRST so legitimate dotted names (`ansi_x3.4-1968`)
+ *  are never mangled by the locale rule. Last resort is UTF-8, which decodes
+ *  leniently (U+FFFD for bad bytes) rather than throwing — a couple of
+ *  replacement characters beat a subject full of quoted-printable. */
+function decoderFor(label) {
+    const raw = label.trim().toLowerCase();
+    const candidates = [raw];
+    const noLang = raw.split("*")[0]; // RFC 2231 suffix
+    if (noLang !== raw)
+        candidates.push(noLang);
+    const locale = noLang.match(/^[a-z]{1,8}(?:_[a-z0-9]{1,8})?\.(.+)$/);
+    if (locale)
+        candidates.push(locale[1]); // POSIX codeset
+    candidates.push(noLang.replace(/^utf[_]?8$/, "utf-8"));
+    for (const cs of candidates) {
+        try {
+            return new TextDecoder(cs);
+        }
+        catch { /* unknown label — try the next reading */ }
+    }
+    return new TextDecoder("utf-8");
+}
 /** Decode IMAP encoded-word (=?charset?encoding?text?=) */
 function decodeImapString(s) {
     if (!s)
@@ -352,13 +386,13 @@ function decodeImapString(s) {
     const unfolded = s.replace(/\?=\s+=\?/g, "?==?");
     return unfolded.replace(/=\?([^?]+)\?([BQ])\?([^?]+)\?=/gi, (_match, charset, encoding, text) => {
         try {
-            const cs = charset.toLowerCase().replace(/^utf8$/, "utf-8");
+            const decoder = decoderFor(charset);
             if (encoding.toUpperCase() === "B") {
                 const raw = atob(text);
                 const bytes = new Uint8Array(raw.length);
                 for (let j = 0; j < raw.length; j++)
                     bytes[j] = raw.charCodeAt(j);
-                return new TextDecoder(cs).decode(bytes);
+                return decoder.decode(bytes);
             }
             else {
                 // Quoted-printable: collect bytes then decode with charset
@@ -375,11 +409,14 @@ function decodeImapString(s) {
                         i++;
                     }
                 }
-                return new TextDecoder(cs).decode(new Uint8Array(bytes));
+                return decoder.decode(new Uint8Array(bytes));
             }
         }
         catch {
-            return text;
+            // Only reachable now for malformed base64 (atob throws). Strip the
+            // Q-encoding's underscore-for-space at least, so the fallback isn't
+            // more wrong than it has to be.
+            return encoding.toUpperCase() === "Q" ? text.replace(/_/g, " ") : text;
         }
     });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bobfrankston/iflow-direct",
-  "version": "0.1.62",
+  "version": "0.1.64",
   "description": "Direct IMAP client — transport-agnostic, no Node.js dependencies, browser-ready",
   "main": "index.js",
   "types": "index.ts",