@bobfrankston/mailx-imap 0.1.121 → 0.1.124

package/index.js

@@ -5226,12 +5226,27 @@ export class ImapManager extends EventEmitter {
             auth = { method: "XOAUTH2", user: smtpUser, token };
         }
         const parseAddrs = (s) => s.match(/[\w.+-]+@[\w.-]+/g) || [];
-        const toMatch = raw.match(/^To:\s*(.+)$/mi);
-        const ccMatch = raw.match(/^Cc:\s*(.+)$/mi);
-        const bccMatch = raw.match(/^Bcc:\s*(.+)$/mi);
-        const fromMatch = raw.match(/^From:\s*(.+)$/mi);
-        const subjectMatch = raw.match(/^Subject:\s*(.+)$/mi);
-        const messageIdMatch = raw.match(/^Message-ID:\s*(<[^>]+>)/mi);
+        // Parse recipients from the HEADER SECTION only — never the body.
+        // `/^Cc:/m` over the whole raw file matched header-looking lines in
+        // the QUOTED REPLY CHAIN: a reply whose real headers had no Cc
+        // picked up the quoted message's Cc, silently adding its addresses
+        // to RCPT TO — one stranger got a copy, and a quoted-printable
+        // soft-wrap truncated another mid-domain ("bworobey@gmail=" →
+        // envelope bworobey@gmail → receiving qmail padded its default
+        // domain → bounce; Bob 2026-07-21 "I didn't see him in the To
+        // list"). Headers end at the first blank line. Folded continuation
+        // lines are unfolded first, which ALSO fixes the old single-line
+        // regex silently dropping every recipient after the first fold of
+        // a long To: list.
+        const headerEnd = raw.search(/\r?\n\r?\n/);
+        const headerSec = (headerEnd === -1 ? raw : raw.slice(0, headerEnd))
+            .replace(/\r?\n[ \t]+/g, " ");
+        const toMatch = headerSec.match(/^To:\s*(.+)$/mi);
+        const ccMatch = headerSec.match(/^Cc:\s*(.+)$/mi);
+        const bccMatch = headerSec.match(/^Bcc:\s*(.+)$/mi);
+        const fromMatch = headerSec.match(/^From:\s*(.+)$/mi);
+        const subjectMatch = headerSec.match(/^Subject:\s*(.+)$/mi);
+        const messageIdMatch = headerSec.match(/^Message-ID:\s*(<[^>]+>)/mi);
         const recipients = [
             ...(toMatch ? parseAddrs(toMatch[1]) : []),
             ...(ccMatch ? parseAddrs(ccMatch[1]) : []),
@@ -5256,7 +5271,17 @@ export class ImapManager extends EventEmitter {
             console.log(`  [smtp] ${accountId}: SKIP ${messageId} — already in sent_log`);
             return;
         }
-        const rawToSend = raw.replace(/^Bcc:.*\r?\n/mi, "");
+        // Strip Bcc from the transmitted copy — HEADER SECTION only (the
+        // old whole-file replace could eat a "Bcc:"-looking line from the
+        // quoted body instead, leaving the real Bcc visible to every
+        // recipient). Folded continuation lines go with it. Recompute the
+        // header boundary: the Message-ID synthesis above may have grown
+        // the header section since headerSec was derived.
+        const bccHdrEnd = raw.search(/\r?\n\r?\n/);
+        const stripBcc = (h) => h.replace(/^Bcc:[^\n]*(\r?\n[ \t][^\n]*)*(\r?\n|$)/mi, "").replace(/\r?\n$/, "");
+        const rawToSend = bccHdrEnd === -1
+            ? stripBcc(raw)
+            : stripBcc(raw.slice(0, bccHdrEnd)) + raw.slice(bccHdrEnd);
         this.saveSendingCopy(accountId, rawToSend, "sent");
         const smtp = new SmtpClient({
             host: smtpHost,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bobfrankston/mailx-imap",
-  "version": "0.1.121",
+  "version": "0.1.124",
   "type": "module",
   "main": "index.js",
   "types": "index.d.ts",
@@ -9,9 +9,9 @@
   },
   "license": "ISC",
   "dependencies": {
-    "@bobfrankston/mailx-types": "^0.1.25",
-    "@bobfrankston/mailx-settings": "^0.1.35",
-    "@bobfrankston/mailx-store": "^0.1.63",
+    "@bobfrankston/mailx-types": "^0.1.28",
+    "@bobfrankston/mailx-settings": "^0.1.38",
+    "@bobfrankston/mailx-store": "^0.1.65",
     "@bobfrankston/iflow-direct": "^0.1.59",
     "@bobfrankston/tcp-transport": "^0.1.8",
     "@bobfrankston/smtp-direct": "^0.1.9",
@@ -37,9 +37,9 @@
   },
   ".transformedSnapshot": {
     "dependencies": {
-      "@bobfrankston/mailx-types": "^0.1.25",
-      "@bobfrankston/mailx-settings": "^0.1.35",
-      "@bobfrankston/mailx-store": "^0.1.63",
+      "@bobfrankston/mailx-types": "^0.1.28",
+      "@bobfrankston/mailx-settings": "^0.1.38",
+      "@bobfrankston/mailx-store": "^0.1.65",
       "@bobfrankston/iflow-direct": "^0.1.59",
       "@bobfrankston/tcp-transport": "^0.1.8",
       "@bobfrankston/smtp-direct": "^0.1.9",