@bobfrankston/rmfmail 1.2.241 → 1.2.243

package/packages/mailx-service/index.ts

@@ -2038,6 +2038,11 @@ export class MailxService implements MailxApi {
             let foldersSearched = 0;
             let foldersFailed = 0;
             const failedFolders: string[] = [];
+            // Folders the server says are gone: counted apart from transient
+            // failures so the UI never tells the user to retry something that
+            // cannot succeed.
+            let foldersGone = 0;
+            const goneFolders: string[] = [];
             let droppedHits = 0;
 
             // Bounded concurrency. The per-account ops queue already
@@ -2071,9 +2076,28 @@ export class MailxService implements MailxApi {
                     for (let j = 0; j < results.length; j++) {
                         const r = results[j];
                         if (r.status !== "fulfilled") {
+                            const why = String(r.reason?.message || r.reason || "");
+                            // A mailbox the server says does not exist is not a
+                            // timeout and will never succeed — every search pays
+                            // for it again and the user is told to "retry to
+                            // search them again", which cannot work. Gmail
+                            // answers `[NONEXISTENT] Unknown Mailbox` for the
+                            // `[Imap]/…` rows mailx keeps locally; Dovecot says
+                            // "doesn't exist". Drop the local folder row (the
+                            // IMAP sync path already does this on its own
+                            // wording) and count it separately.
+                            if (/\[NONEXISTENT\]|Unknown Mailbox|doesn't exist|does not exist/i.test(why)) {
+                                foldersGone++;
+                                goneFolders.push(`${acct.id}/${batch[j].path}`);
+                                console.log(`  [server-search] ${acct.id}/${batch[j].path}: mailbox not on server — removing the stale local folder row`);
+                                try { this.db.deleteFolder(batch[j].id); } catch (e: any) {
+                                    console.error(`  [server-search] could not remove stale folder ${batch[j].path}: ${e.message}`);
+                                }
+                                continue;
+                            }
                             foldersFailed++;
                             failedFolders.push(`${acct.id}/${batch[j].path}`);
-                            console.error(`  [server-search] ${acct.id}/${batch[j].path}: ${r.reason?.message || r.reason}`);
+                            console.error(`  [server-search] ${acct.id}/${batch[j].path}: ${why}`);
                             continue;
                         }
                         foldersSearched++;
@@ -2101,14 +2125,20 @@ export class MailxService implements MailxApi {
             // Newest first, then paginate.
             items.sort((a: any, b: any) => (b.date?.getTime?.() || 0) - (a.date?.getTime?.() || 0));
             const sliced = items.slice((page - 1) * pageSize, page * pageSize);
-            if (foldersFailed > 0 || droppedHits > 0) {
-                console.log(`  [server-search] q="${q}" — ${total} hits across ${foldersSearched} folders; ${foldersFailed} folders failed, ${droppedHits} hits dropped`);
+            if (foldersFailed > 0 || droppedHits > 0 || foldersGone > 0) {
+                console.log(`  [server-search] q="${q}" — ${total} hits across ${foldersSearched} folders; ${foldersFailed} failed, ${foldersGone} stale folder(s) removed, ${droppedHits} hits dropped${aborted ? " (superseded)" : ""}`);
             }
             return {
                 items: sliced, total, page, pageSize,
                 aborted,
-                partial: foldersFailed > 0 || droppedHits > 0,
+                // A superseded search is NOT a partial result — the user typed
+                // another character and this generation was abandoned on
+                // purpose. Reporting its untouched folders as failures is what
+                // produced "99 could not be searched (timeout / connection)"
+                // for a search nothing had gone wrong with (Bob 2026-08-09).
+                partial: !aborted && (foldersFailed > 0 || droppedHits > 0),
                 foldersSearched, foldersFailed, failedFolders, droppedHits,
+                foldersGone, goneFolders,
             };
         } else if (scope === "current" && accountId && folderId) {
             // Per-folder search — folder scope is the user's explicit

package/packages/mailx-types/mime-inline-images.d.ts

@@ -27,10 +27,6 @@ export interface InlineImagePart {
     mime: string;
     base64: string;
 }
-/** Pull base64 `data:` images out of the HTML, replacing each src with a
- *  `cid:` reference. Identical data: URIs (the same image pasted twice)
- *  collapse to one part. `idDomain` scopes the Content-IDs (RFC 2392 wants
- *  msg-id-like uniqueness). */
 export declare function extractInlineImages(html: string, idDomain: string): {
     html: string;
     images: InlineImagePart[];

package/packages/mailx-types/mime-inline-images.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mime-inline-images.d.ts","sourceRoot":"","sources":["mime-inline-images.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,WAAW,eAAe;IAC5B,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAClB;AAED;;;+BAG+B;AAC/B,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,eAAe,EAAE,CAAA;CAAE,CAmB/G"}
+{"version":3,"file":"mime-inline-images.d.ts","sourceRoot":"","sources":["mime-inline-images.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,WAAW,eAAe;IAC5B,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAClB;AAsBD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,eAAe,EAAE,CAAA;CAAE,CA2C/G"}

package/packages/mailx-types/mime-inline-images.js

@@ -25,18 +25,62 @@
  *  `cid:` reference. Identical data: URIs (the same image pasted twice)
  *  collapse to one part. `idDomain` scopes the Content-IDs (RFC 2392 wants
  *  msg-id-like uniqueness). */
+/** Base64 of a UTF-8 string, in both runtimes this package targets: the
+ *  daemon (Node, no `btoa` on older majors) and the browser/WebView (no
+ *  `Buffer`). SVG markup is text, so it must go through UTF-8 bytes rather
+ *  than `btoa` directly, which throws on any character above U+00FF. */
+function utf8ToBase64(text) {
+    const bytes = new TextEncoder().encode(text);
+    // Reached through globalThis, not by name: this module is type-checked
+    // against the BROWSER lib for the client build, where `Buffer` has no
+    // declaration at all.
+    const B = globalThis.Buffer;
+    if (B)
+        return B.from(bytes).toString("base64");
+    let bin = "";
+    for (const b of bytes)
+        bin += String.fromCharCode(b);
+    return btoa(bin);
+}
 export function extractInlineImages(html, idDomain) {
     const images = [];
     const byDataUri = new Map(); // data-uri → contentId
     const stamp = `${Date.now().toString(36)}${Math.random().toString(36).slice(2, 8)}`;
-    const out = html.replace(/(<img\b[^>]*?\ssrc=)(["'])(data:(image\/[\w.+-]+);base64,([A-Za-z0-9+/=\s]+))\2/gi, (_m, prefix, quote, dataUri, mime, b64) => {
+    // Two encodings, one job. `;base64,` is what an editor produces when it
+    // ingests a pasted bitmap — but SVG normally arrives URL-ENCODED
+    // (`data:image/svg+xml,%3Csvg…`), which is how most tools export it and
+    // what you get pasting markup. Matching only the base64 form left those
+    // as raw `data:` URIs on the wire: invisible in Outlook, stripped by
+    // Gmail — exactly the breakage v1.2.179 fixed for bitmaps, still live for
+    // SVG until now (Bob 2026-08-09: "can I put an SVG image into a
+    // message?"). Percent-encoded payloads are decoded and re-encoded to
+    // base64 so every inline image leaves as a normal MIME part.
+    const out = html.replace(/(<img\b[^>]*?\ssrc=)(["'])(data:(image\/[\w.+-]+)(;base64)?,([^"']+))\2/gi, (_m, prefix, quote, dataUri, mime, isB64, payload) => {
         let cid = byDataUri.get(dataUri);
         if (!cid) {
+            let base64;
+            if (isB64) {
+                // Strip whitespace the editor may have wrapped into the URI;
+                // the send path re-wraps at 76 cols per RFC 2045.
+                base64 = payload.replace(/\s+/g, "");
+            }
+            else {
+                try {
+                    base64 = utf8ToBase64(decodeURIComponent(payload));
+                }
+                catch {
+                    // Malformed percent-encoding — leave the src untouched
+                    // rather than emit a corrupt part. Better a broken
+                    // image the sender can see in their own Sent copy than
+                    // a silently mangled attachment.
+                    return _m;
+                }
+            }
+            if (!base64)
+                return _m;
             cid = `img${images.length + 1}.${stamp}@${idDomain}`;
             byDataUri.set(dataUri, cid);
-            // Strip whitespace the editor may have wrapped into the URI;
-            // the send path re-wraps at 76 cols per RFC 2045.
-            images.push({ contentId: cid, mime, base64: b64.replace(/\s+/g, "") });
+            images.push({ contentId: cid, mime, base64 });
         }
         return `${prefix}${quote}cid:${cid}${quote}`;
     });

package/packages/mailx-types/mime-inline-images.js.map

@@ -1 +1 @@
-{"version":3,"file":"mime-inline-images.js","sourceRoot":"","sources":["mime-inline-images.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AASH;;;+BAG+B;AAC/B,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,QAAgB;IAC9D,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAG,uBAAuB;IACtE,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACpF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CACpB,mFAAmF,EACnF,CAAC,EAAE,EAAE,MAAc,EAAE,KAAa,EAAE,OAAe,EAAE,IAAY,EAAE,GAAW,EAAE,EAAE;QAC9E,IAAI,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;YACrD,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC5B,6DAA6D;YAC7D,kDAAkD;YAClD,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,GAAG,MAAM,GAAG,KAAK,OAAO,GAAG,GAAG,KAAK,EAAE,CAAC;IACjD,CAAC,CACJ,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACjC,CAAC"}
+{"version":3,"file":"mime-inline-images.js","sourceRoot":"","sources":["mime-inline-images.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AASH;;;+BAG+B;AAC/B;;;wEAGwE;AACxE,SAAS,YAAY,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7C,uEAAuE;IACvE,sEAAsE;IACtE,sBAAsB;IACtB,MAAM,CAAC,GAAI,UAAkB,CAAC,MAAM,CAAC;IACrC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,QAAgB;IAC9D,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAG,uBAAuB;IACtE,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACpF,wEAAwE;IACxE,iEAAiE;IACjE,wEAAwE;IACxE,wEAAwE;IACxE,qEAAqE;IACrE,0EAA0E;IAC1E,gEAAgE;IAChE,qEAAqE;IACrE,6DAA6D;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CACpB,2EAA2E,EAC3E,CAAC,EAAE,EAAE,MAAc,EAAE,KAAa,EAAE,OAAe,EAAE,IAAY,EAAE,KAAyB,EAAE,OAAe,EAAE,EAAE;QAC7G,IAAI,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,IAAI,MAAc,CAAC;YACnB,IAAI,KAAK,EAAE,CAAC;gBACR,6DAA6D;gBAC7D,kDAAkD;gBAClD,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC;oBACD,MAAM,GAAG,YAAY,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;gBACvD,CAAC;gBAAC,MAAM,CAAC;oBACL,uDAAuD;oBACvD,mDAAmD;oBACnD,uDAAuD;oBACvD,iCAAiC;oBACjC,OAAO,EAAE,CAAC;gBACd,CAAC;YACL,CAAC;YACD,IAAI,CAAC,MAAM;gBAAE,OAAO,EAAE,CAAC;YACvB,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;YACrD,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,GAAG,MAAM,GAAG,KAAK,OAAO,GAAG,GAAG,KAAK,EAAE,CAAC;IACjD,CAAC,CACJ,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACjC,CAAC"}

package/packages/mailx-types/mime-inline-images.ts

@@ -33,20 +33,60 @@ export interface InlineImagePart {
  *  `cid:` reference. Identical data: URIs (the same image pasted twice)
  *  collapse to one part. `idDomain` scopes the Content-IDs (RFC 2392 wants
  *  msg-id-like uniqueness). */
+/** Base64 of a UTF-8 string, in both runtimes this package targets: the
+ *  daemon (Node, no `btoa` on older majors) and the browser/WebView (no
+ *  `Buffer`). SVG markup is text, so it must go through UTF-8 bytes rather
+ *  than `btoa` directly, which throws on any character above U+00FF. */
+function utf8ToBase64(text: string): string {
+    const bytes = new TextEncoder().encode(text);
+    // Reached through globalThis, not by name: this module is type-checked
+    // against the BROWSER lib for the client build, where `Buffer` has no
+    // declaration at all.
+    const B = (globalThis as any).Buffer;
+    if (B) return B.from(bytes).toString("base64");
+    let bin = "";
+    for (const b of bytes) bin += String.fromCharCode(b);
+    return btoa(bin);
+}
+
 export function extractInlineImages(html: string, idDomain: string): { html: string; images: InlineImagePart[] } {
     const images: InlineImagePart[] = [];
     const byDataUri = new Map<string, string>();   // data-uri → contentId
     const stamp = `${Date.now().toString(36)}${Math.random().toString(36).slice(2, 8)}`;
+    // Two encodings, one job. `;base64,` is what an editor produces when it
+    // ingests a pasted bitmap — but SVG normally arrives URL-ENCODED
+    // (`data:image/svg+xml,%3Csvg…`), which is how most tools export it and
+    // what you get pasting markup. Matching only the base64 form left those
+    // as raw `data:` URIs on the wire: invisible in Outlook, stripped by
+    // Gmail — exactly the breakage v1.2.179 fixed for bitmaps, still live for
+    // SVG until now (Bob 2026-08-09: "can I put an SVG image into a
+    // message?"). Percent-encoded payloads are decoded and re-encoded to
+    // base64 so every inline image leaves as a normal MIME part.
     const out = html.replace(
-        /(<img\b[^>]*?\ssrc=)(["'])(data:(image\/[\w.+-]+);base64,([A-Za-z0-9+/=\s]+))\2/gi,
-        (_m, prefix: string, quote: string, dataUri: string, mime: string, b64: string) => {
+        /(<img\b[^>]*?\ssrc=)(["'])(data:(image\/[\w.+-]+)(;base64)?,([^"']+))\2/gi,
+        (_m, prefix: string, quote: string, dataUri: string, mime: string, isB64: string | undefined, payload: string) => {
             let cid = byDataUri.get(dataUri);
             if (!cid) {
+                let base64: string;
+                if (isB64) {
+                    // Strip whitespace the editor may have wrapped into the URI;
+                    // the send path re-wraps at 76 cols per RFC 2045.
+                    base64 = payload.replace(/\s+/g, "");
+                } else {
+                    try {
+                        base64 = utf8ToBase64(decodeURIComponent(payload));
+                    } catch {
+                        // Malformed percent-encoding — leave the src untouched
+                        // rather than emit a corrupt part. Better a broken
+                        // image the sender can see in their own Sent copy than
+                        // a silently mangled attachment.
+                        return _m;
+                    }
+                }
+                if (!base64) return _m;
                 cid = `img${images.length + 1}.${stamp}@${idDomain}`;
                 byDataUri.set(dataUri, cid);
-                // Strip whitespace the editor may have wrapped into the URI;
-                // the send path re-wraps at 76 cols per RFC 2045.
-                images.push({ contentId: cid, mime, base64: b64.replace(/\s+/g, "") });
+                images.push({ contentId: cid, mime, base64 });
             }
             return `${prefix}${quote}cid:${cid}${quote}`;
         },

package/packages/mailx-types/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bobfrankston/mailx-types",
-  "version": "0.1.42",
+  "version": "0.1.43",
   "type": "module",
   "main": "index.js",
   "types": "index.d.ts",

package/packages/mailx-types/test/inline-images.test.mjs

@@ -0,0 +1,79 @@
+/**
+ * Every inline image must leave as a MIME part with a `cid:` reference — no
+ * `data:` URI may survive onto the wire, in either of the two encodings a
+ * data URI comes in.
+ *
+ * Run: node packages/mailx-types/test/inline-images.test.mjs
+ */
+import assert from "node:assert";
+import { extractInlineImages } from "../mime-inline-images.js";
+
+const PNG_B64 = "iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mP8z8BQDwAEhQGAhKmMIQAAAABJRU5ErkJggg==";
+const SVG_TEXT = `<svg xmlns="http://www.w3.org/2000/svg" width="10" height="10"><rect width="10" height="10" fill="#08f"/></svg>`;
+const SVG_B64 = Buffer.from(SVG_TEXT, "utf8").toString("base64");
+
+let n = 0;
+const check = (name, html, expectParts, expectMime) => {
+    const r = extractInlineImages(html, "bob.ma");
+    assert.strictEqual(r.images.length, expectParts, `${name}: expected ${expectParts} part(s), got ${r.images.length}`);
+    if (expectParts > 0) {
+        assert.strictEqual(r.images[0].mime, expectMime, `${name}: wrong mime (${r.images[0].mime})`);
+        assert.ok(!/data:/i.test(r.html), `${name}: a data: URI survived into the sent HTML`);
+        assert.match(r.html, /src="cid:img1\./, `${name}: src not rewritten to cid:`);
+        assert.doesNotThrow(() => Buffer.from(r.images[0].base64, "base64"), `${name}: part payload is not valid base64`);
+    }
+    n++;
+};
+
+check("base64 PNG", `<p>x</p><img src="data:image/png;base64,${PNG_B64}">`, 1, "image/png");
+check("base64 SVG", `<p>x</p><img src="data:image/svg+xml;base64,${SVG_B64}">`, 1, "image/svg+xml");
+
+// The form SVG actually arrives in — percent-encoded markup, not base64.
+const urlSvg = `<p>x</p><img src="data:image/svg+xml,${encodeURIComponent(SVG_TEXT)}">`;
+check("URL-encoded SVG", urlSvg, 1, "image/svg+xml");
+
+// …and its payload must decode back to the original markup.
+{
+    const r = extractInlineImages(urlSvg, "bob.ma");
+    const round = Buffer.from(r.images[0].base64, "base64").toString("utf8");
+    assert.strictEqual(round, SVG_TEXT, "URL-encoded SVG did not round-trip through the MIME part");
+    n++;
+}
+
+// Non-ASCII inside SVG text must survive (btoa alone would throw here).
+{
+    const svg = `<svg xmlns="http://www.w3.org/2000/svg"><text>café — naïve ✓</text></svg>`;
+    const r = extractInlineImages(`<img src="data:image/svg+xml,${encodeURIComponent(svg)}">`, "bob.ma");
+    assert.strictEqual(r.images.length, 1, "non-ASCII SVG produced no part");
+    assert.strictEqual(Buffer.from(r.images[0].base64, "base64").toString("utf8"), svg, "non-ASCII SVG mangled");
+    n++;
+}
+
+// Malformed percent-encoding: leave the tag alone rather than emit a corrupt part.
+{
+    const bad = `<img src="data:image/svg+xml,%E0%A4%A">`;
+    const r = extractInlineImages(bad, "bob.ma");
+    assert.strictEqual(r.images.length, 0, "a malformed data URI must not become a part");
+    assert.strictEqual(r.html, bad, "a malformed data URI must be left untouched");
+    n++;
+}
+
+// The same image twice collapses to one part.
+{
+    const two = `<img src="data:image/png;base64,${PNG_B64}"><img src="data:image/png;base64,${PNG_B64}">`;
+    const r = extractInlineImages(two, "bob.ma");
+    assert.strictEqual(r.images.length, 1, "identical images should share one part");
+    assert.strictEqual((r.html.match(/cid:/g) || []).length, 2, "both tags should reference the shared cid");
+    n++;
+}
+
+// A remote image is not ours to inline.
+{
+    const remote = `<img src="https://example.com/x.png">`;
+    const r = extractInlineImages(remote, "bob.ma");
+    assert.strictEqual(r.images.length, 0);
+    assert.strictEqual(r.html, remote);
+    n++;
+}
+
+console.log(`inline-images: ${n} checks passed`);