@dawnlit/outlook-bridge 1.1.1 → 2.0.0

package/dist/shared/attachmentMatch.js

@@ -1,30 +1,35 @@
 "use strict";
-// Matching an attachment by name, and the error when nothing matches.
-//
-// Both are shared because the error is the useful half. Resolving an email by id
-// happily returns a DIFFERENT message when the id is stale or wrong — common
-// precisely when many replies share one subject — so a bare "not found" points
-// the caller at the wrong problem. Naming the email actually resolved, and the
-// attachments it does carry, is what makes the mistake visible.
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_FILE_STEM = exports.RESERVED_FILE_NAME = exports.UNSAFE_FILE_NAME_CHARS = void 0;
 exports.normalizeAttachmentName = normalizeAttachmentName;
 exports.findAttachmentIndex = findAttachmentIndex;
 exports.attachmentNotFoundMessage = attachmentNotFoundMessage;
+exports.safeFileName = safeFileName;
+exports.uniqueSavePath = uniqueSavePath;
+// Matching an attachment by name, the error when nothing matches, and the
+// file name it is saved under.
+//
+// The error is the useful half. Resolving an email by id can return a
+// DIFFERENT message when the id is stale or wrong — common exactly when many
+// replies share one subject — so a bare "not found" points at the wrong
+// problem. Naming the email that actually resolved, and the attachments it does
+// carry, is what makes the mistake visible.
+const path_1 = __importDefault(require("path"));
 /**
  * Collapse whitespace runs (non-breaking spaces included) and trim, so a
- * trivially reformatted filename still resolves. Both platforms' regex engines
- * treat `\s` as covering U+00A0, which is the character a mail client is most
- * likely to have substituted.
+ * trivially reformatted file name still resolves. Both platforms' regex engines
+ * count U+00A0 as whitespace.
  */
 function normalizeAttachmentName(name) {
     return name.replace(/\s+/g, ' ').trim();
 }
 /**
- * Index of the attachment matching `wanted`, or -1.
- *
- * Exact first, then whitespace-normalized and case-insensitive — in that order,
- * so an email carrying two names differing only in case still resolves the one
- * that was actually asked for.
+ * Index of the attachment matching `wanted`, or -1: exact first, then
+ * whitespace-normalized and case-insensitive — in that order, so two names that
+ * differ only in case still resolve the one asked for.
  */
 function findAttachmentIndex(names, wanted) {
     const exact = names.indexOf(wanted);
@@ -34,17 +39,50 @@ function findAttachmentIndex(names, wanted) {
     return names.findIndex(name => normalizeAttachmentName(name).toLowerCase() === normalized);
 }
 /**
- * The "attachment not found" message, worded once for both platforms.
- *
- * Every field arrives already stringified, which is what lets the Windows script
- * build the identical sentence: it passes PowerShell interpolations
- * (`$($item.Subject)`) where macOS passes the values it read.
+ * The "attachment not found" message, worded once for both platforms. Fields
+ * arrive as strings so the Windows script can build the same sentence from
+ * PowerShell variables where macOS passes the values it read.
  */
 function attachmentNotFoundMessage(init) {
     return `Attachment '${init.fileName}' not found. `
         + `Resolved email: from=${init.senderEmail}; subject=${init.subject}; received=${init.receivedTime}. `
         + `Attachments present: ${init.present}. `
-        + `If this is not the email you expected, the ${init.idLabel} is likely wrong or stale - `
-        + `re-run readInboxEmails to get a current ${init.idLabel}.`;
+        + 'If this is not the email you expected, its id is likely wrong or stale - list the mail again for a current one.';
+}
+/** Characters no file name may carry on Windows (a superset of macOS's). */
+exports.UNSAFE_FILE_NAME_CHARS = '[<>:"/\\\\|?*\\x00-\\x1F]';
+/** Names Windows reserves for devices, with or without an extension. */
+exports.RESERVED_FILE_NAME = '^(con|prn|aux|nul|com[1-9]|lpt[1-9])(\\..*)?$';
+/** How long a saved name's stem may run before it is cut. */
+exports.MAX_FILE_STEM = 150;
+/**
+ * A sender-chosen attachment name made safe to write: no path separators or
+ * characters a file system rejects, no trailing dots or spaces, no reserved
+ * device name, and a stem short enough to stay clear of path-length limits. A
+ * name like `..\..\x.exe` therefore lands inside the destination as
+ * `.._.._x.exe`, never outside it.
+ */
+function safeFileName(name) {
+    let safe = name.replace(new RegExp(exports.UNSAFE_FILE_NAME_CHARS, 'g'), '_').replace(/[. ]+$/, '');
+    if (new RegExp(exports.RESERVED_FILE_NAME, 'i').test(safe))
+        safe = `_${safe}`;
+    const ext = path_1.default.extname(safe);
+    const stem = safe.slice(0, safe.length - ext.length);
+    if (stem.length > exports.MAX_FILE_STEM)
+        safe = stem.slice(0, exports.MAX_FILE_STEM) + ext;
+    return safe || 'attachment';
+}
+/**
+ * A path in `dir` for `name` that `exists` reports free: the name itself, else
+ * `name (1).ext`, `name (2).ext`, … Existing files are never overwritten.
+ */
+function uniqueSavePath(dir, name, exists) {
+    const ext = path_1.default.extname(name);
+    const stem = name.slice(0, name.length - ext.length);
+    let candidate = path_1.default.join(dir, name);
+    for (let n = 1; exists(candidate); n++) {
+        candidate = path_1.default.join(dir, `${stem} (${n})${ext}`);
+    }
+    return candidate;
 }
 //# sourceMappingURL=attachmentMatch.js.map

package/dist/shared/attachmentMatch.js.map

@@ -1 +1 @@
-{"version":3,"file":"attachmentMatch.js","sourceRoot":"","sources":["../../src/shared/attachmentMatch.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,EAAE;AACF,iFAAiF;AACjF,6EAA6E;AAC7E,+EAA+E;AAC/E,+EAA+E;AAC/E,gEAAgE;;AAQhE,0DAEC;AASD,kDAKC;AASD,8DAeC;AA9CD;;;;;GAKG;AACH,SAAgB,uBAAuB,CAAC,IAAY;IAChD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,mBAAmB,CAAC,KAAwB,EAAE,MAAc;IACxE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IACjE,OAAO,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,yBAAyB,CAAC,IASzC;IACG,OAAO,eAAe,IAAI,CAAC,QAAQ,eAAe;UAC5C,wBAAwB,IAAI,CAAC,WAAW,aAAa,IAAI,CAAC,OAAO,cAAc,IAAI,CAAC,YAAY,IAAI;UACpG,wBAAwB,IAAI,CAAC,OAAO,IAAI;UACxC,8CAA8C,IAAI,CAAC,OAAO,8BAA8B;UACxF,2CAA2C,IAAI,CAAC,OAAO,GAAG,CAAC;AACrE,CAAC"}
+{"version":3,"file":"attachmentMatch.js","sourceRoot":"","sources":["../../src/shared/attachmentMatch.ts"],"names":[],"mappings":";;;;;;AAeA,0DAEC;AAOD,kDAKC;AAOD,8DAYC;AAkBD,oCAOC;AAMD,wCAQC;AAvFD,0EAA0E;AAC1E,+BAA+B;AAC/B,EAAE;AACF,sEAAsE;AACtE,6EAA6E;AAC7E,wEAAwE;AACxE,gFAAgF;AAChF,4CAA4C;AAC5C,gDAAwB;AAExB;;;;GAIG;AACH,SAAgB,uBAAuB,CAAC,IAAY;IAChD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,SAAgB,mBAAmB,CAAC,KAAwB,EAAE,MAAc;IACxE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IACjE,OAAO,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,CAAC;AAC/F,CAAC;AAED;;;;GAIG;AACH,SAAgB,yBAAyB,CAAC,IAOzC;IACG,OAAO,eAAe,IAAI,CAAC,QAAQ,eAAe;UAC5C,wBAAwB,IAAI,CAAC,WAAW,aAAa,IAAI,CAAC,OAAO,cAAc,IAAI,CAAC,YAAY,IAAI;UACpG,wBAAwB,IAAI,CAAC,OAAO,IAAI;UACxC,iHAAiH,CAAC;AAC5H,CAAC;AAED,4EAA4E;AAC/D,QAAA,sBAAsB,GAAG,2BAA2B,CAAC;AAElE,wEAAwE;AAC3D,QAAA,kBAAkB,GAAG,+CAA+C,CAAC;AAElF,6DAA6D;AAChD,QAAA,aAAa,GAAG,GAAG,CAAC;AAEjC;;;;;;GAMG;AACH,SAAgB,YAAY,CAAC,IAAY;IACrC,IAAI,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,8BAAsB,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC5F,IAAI,IAAI,MAAM,CAAC,0BAAkB,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IACtE,MAAM,GAAG,GAAG,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,MAAM,GAAG,qBAAa;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAa,CAAC,GAAG,GAAG,CAAC;IAC3E,OAAO,IAAI,IAAI,YAAY,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,SAAgB,cAAc,CAAC,GAAW,EAAE,IAAY,EAAE,MAAiC;IACvF,MAAM,GAAG,GAAG,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,SAAS,GAAG,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,SAAS,GAAG,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC","sourcesContent":["// Matching an attachment by name, the error when nothing matches, and the\n// file name it is saved under.\n//\n// The error is the useful half. Resolving an email by id can return a\n// DIFFERENT message when the id is stale or wrong — common exactly when many\n// replies share one subject — so a bare \"not found\" points at the wrong\n// problem. Naming the email that actually resolved, and the attachments it does\n// carry, is what makes the mistake visible.\nimport path from 'path';\n\n/**\n * Collapse whitespace runs (non-breaking spaces included) and trim, so a\n * trivially reformatted file name still resolves. Both platforms' regex engines\n * count U+00A0 as whitespace.\n */\nexport function normalizeAttachmentName(name: string): string {\n    return name.replace(/\\s+/g, ' ').trim();\n}\n\n/**\n * Index of the attachment matching `wanted`, or -1: exact first, then\n * whitespace-normalized and case-insensitive — in that order, so two names that\n * differ only in case still resolve the one asked for.\n */\nexport function findAttachmentIndex(names: readonly string[], wanted: string): number {\n    const exact = names.indexOf(wanted);\n    if (exact !== -1) return exact;\n    const normalized = normalizeAttachmentName(wanted).toLowerCase();\n    return names.findIndex(name => normalizeAttachmentName(name).toLowerCase() === normalized);\n}\n\n/**\n * The \"attachment not found\" message, worded once for both platforms. Fields\n * arrive as strings so the Windows script can build the same sentence from\n * PowerShell variables where macOS passes the values it read.\n */\nexport function attachmentNotFoundMessage(init: {\n    fileName: string;\n    senderEmail: string;\n    subject: string;\n    receivedTime: string;\n    /** The attachments the email does carry, joined for display. */\n    present: string;\n}): string {\n    return `Attachment '${init.fileName}' not found. `\n        + `Resolved email: from=${init.senderEmail}; subject=${init.subject}; received=${init.receivedTime}. `\n        + `Attachments present: ${init.present}. `\n        + 'If this is not the email you expected, its id is likely wrong or stale - list the mail again for a current one.';\n}\n\n/** Characters no file name may carry on Windows (a superset of macOS's). */\nexport const UNSAFE_FILE_NAME_CHARS = '[<>:\"/\\\\\\\\|?*\\\\x00-\\\\x1F]';\n\n/** Names Windows reserves for devices, with or without an extension. */\nexport const RESERVED_FILE_NAME = '^(con|prn|aux|nul|com[1-9]|lpt[1-9])(\\\\..*)?$';\n\n/** How long a saved name's stem may run before it is cut. */\nexport const MAX_FILE_STEM = 150;\n\n/**\n * A sender-chosen attachment name made safe to write: no path separators or\n * characters a file system rejects, no trailing dots or spaces, no reserved\n * device name, and a stem short enough to stay clear of path-length limits. A\n * name like `..\\..\\x.exe` therefore lands inside the destination as\n * `.._.._x.exe`, never outside it.\n */\nexport function safeFileName(name: string): string {\n    let safe = name.replace(new RegExp(UNSAFE_FILE_NAME_CHARS, 'g'), '_').replace(/[. ]+$/, '');\n    if (new RegExp(RESERVED_FILE_NAME, 'i').test(safe)) safe = `_${safe}`;\n    const ext = path.extname(safe);\n    const stem = safe.slice(0, safe.length - ext.length);\n    if (stem.length > MAX_FILE_STEM) safe = stem.slice(0, MAX_FILE_STEM) + ext;\n    return safe || 'attachment';\n}\n\n/**\n * A path in `dir` for `name` that `exists` reports free: the name itself, else\n * `name (1).ext`, `name (2).ext`, … Existing files are never overwritten.\n */\nexport function uniqueSavePath(dir: string, name: string, exists: (file: string) => boolean): string {\n    const ext = path.extname(name);\n    const stem = name.slice(0, name.length - ext.length);\n    let candidate = path.join(dir, name);\n    for (let n = 1; exists(candidate); n++) {\n        candidate = path.join(dir, `${stem} (${n})${ext}`);\n    }\n    return candidate;\n}\n"]}

package/dist/shared/bounceReport.d.ts

@@ -0,0 +1,11 @@
+import type { BounceReport, SentRecipientGroup } from '../types';
+/**
+ * Every sent message with a bounced recipient, newest first, and the bounced
+ * addresses no sent message accounts for.
+ *
+ * Kept per message rather than per address or domain: a message's recipient
+ * set is the one grouping a mailbox actually records, and whether a failure
+ * means anything — one colleague gone, or nobody reached at all — depends on
+ * what else that same message went to.
+ */
+export declare function buildBounceReport(account: string, scannedDays: number, bouncedAddresses: readonly string[], sent: readonly SentRecipientGroup[]): BounceReport;

package/dist/shared/bounceReport.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildBounceReport = buildBounceReport;
+function distinctLowerCase(addresses) {
+    return [...new Set(addresses.map(address => address.trim().toLowerCase()).filter(Boolean))];
+}
+/**
+ * Every sent message with a bounced recipient, newest first, and the bounced
+ * addresses no sent message accounts for.
+ *
+ * Kept per message rather than per address or domain: a message's recipient
+ * set is the one grouping a mailbox actually records, and whether a failure
+ * means anything — one colleague gone, or nobody reached at all — depends on
+ * what else that same message went to.
+ */
+function buildBounceReport(account, scannedDays, bouncedAddresses, sent) {
+    const bounced = distinctLowerCase(bouncedAddresses);
+    const bouncedSet = new Set(bounced);
+    const matched = new Set();
+    const sends = [];
+    const newestFirst = [...sent].sort((a, b) => b.sentOn.localeCompare(a.sentOn));
+    for (const message of newestFirst) {
+        const recipients = distinctLowerCase(message.recipients);
+        const failedRecipients = recipients.filter(address => bouncedSet.has(address));
+        if (failedRecipients.length === 0)
+            continue;
+        failedRecipients.forEach(address => matched.add(address));
+        sends.push({
+            entryId: message.entryId,
+            subject: message.subject,
+            sentOn: message.sentOn,
+            recipients,
+            failedRecipients,
+            allFailed: failedRecipients.length === recipients.length,
+        });
+    }
+    return {
+        account,
+        scannedDays,
+        bouncedAddresses: bounced,
+        sends,
+        unmatchedAddresses: bounced.filter(address => !matched.has(address)).sort(),
+    };
+}
+//# sourceMappingURL=bounceReport.js.map

package/dist/shared/bounceReport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounceReport.js","sourceRoot":"","sources":["../../src/shared/bounceReport.ts"],"names":[],"mappings":";;AAkBA,8CAkCC;AA/CD,SAAS,iBAAiB,CAAC,SAA4B;IACnD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAChG,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,iBAAiB,CAC7B,OAAe,EACf,WAAmB,EACnB,gBAAmC,EACnC,IAAmC;IAEnC,MAAM,OAAO,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAAkB,EAAE,CAAC;IAEhC,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/E,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/E,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC5C,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU;YACV,gBAAgB;YAChB,SAAS,EAAE,gBAAgB,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;SAC3D,CAAC,CAAC;IACP,CAAC;IAED,OAAO;QACH,OAAO;QACP,WAAW;QACX,gBAAgB,EAAE,OAAO;QACzB,KAAK;QACL,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE;KAC9E,CAAC;AACN,CAAC","sourcesContent":["// Measuring what was sent against what bounced. Both reads are platform work\n// (collectBouncedRecipients, readSentRecipientGroups); putting them side by side\n// is the same everywhere, so it is done once here.\nimport type { BouncedSend, BounceReport, SentRecipientGroup } from '../types';\n\nfunction distinctLowerCase(addresses: readonly string[]): string[] {\n    return [...new Set(addresses.map(address => address.trim().toLowerCase()).filter(Boolean))];\n}\n\n/**\n * Every sent message with a bounced recipient, newest first, and the bounced\n * addresses no sent message accounts for.\n *\n * Kept per message rather than per address or domain: a message's recipient\n * set is the one grouping a mailbox actually records, and whether a failure\n * means anything — one colleague gone, or nobody reached at all — depends on\n * what else that same message went to.\n */\nexport function buildBounceReport(\n    account: string,\n    scannedDays: number,\n    bouncedAddresses: readonly string[],\n    sent: readonly SentRecipientGroup[],\n): BounceReport {\n    const bounced = distinctLowerCase(bouncedAddresses);\n    const bouncedSet = new Set(bounced);\n    const matched = new Set<string>();\n    const sends: BouncedSend[] = [];\n\n    const newestFirst = [...sent].sort((a, b) => b.sentOn.localeCompare(a.sentOn));\n    for (const message of newestFirst) {\n        const recipients = distinctLowerCase(message.recipients);\n        const failedRecipients = recipients.filter(address => bouncedSet.has(address));\n        if (failedRecipients.length === 0) continue;\n        failedRecipients.forEach(address => matched.add(address));\n        sends.push({\n            entryId: message.entryId,\n            subject: message.subject,\n            sentOn: message.sentOn,\n            recipients,\n            failedRecipients,\n            allFailed: failedRecipients.length === recipients.length,\n        });\n    }\n\n    return {\n        account,\n        scannedDays,\n        bouncedAddresses: bounced,\n        sends,\n        unmatchedAddresses: bounced.filter(address => !matched.has(address)).sort(),\n    };\n}\n"]}

package/dist/shared/bounceRules.d.ts

@@ -1,4 +1,4 @@
-/** Subject fragments that only a mail system writes. Matched case-insensitively. */
+/** Subject fragments only a mail system writes. Matched case-insensitively. */
 export declare const BOUNCE_SUBJECT_PHRASES: readonly string[];
 /** Fragments of a sender ADDRESS that fingerprint a mail-delivery daemon. */
 export declare const BOUNCE_DAEMON_ADDRESSES: readonly string[];
@@ -6,28 +6,56 @@ export declare const BOUNCE_DAEMON_ADDRESSES: readonly string[];
 export declare const BOUNCE_DAEMON_NAMES: readonly string[];
 /** MessageClass prefix Exchange stamps on a non-delivery report. */
 export declare const NDR_MESSAGE_CLASS_PREFIX = "REPORT.IPM.Note.NDR";
+/**
+ * The same structural signal as it arrives on the wire, for macOS: a bounce is
+ * a delivery-status notification (RFC 3464) and says so in its own headers.
+ * Both markers must be present — `multipart/report` also carries read receipts,
+ * and it is the report type that separates a delivery that FAILED from one that
+ * was acknowledged.
+ *
+ * Outlook for Mac publishes no MessageClass in its AppleScript dictionary, so
+ * this stands in for it: the message Exchange stamps REPORT.IPM.Note.NDR is the
+ * message that arrived carrying these headers.
+ *
+ * The macOS index tests these in AppleScript, whose `contains` is already
+ * case-insensitive, and returns one flag per message rather than the headers
+ * themselves (see mac/bounces.ts).
+ */
+export declare const DSN_HEADER_MARKERS: readonly string[];
+/** Address fragments never reported as a failed recipient — they are the bounce's own author. */
+export declare const DAEMON_SELF_ADDRESSES: readonly string[];
+/** At most this many failed recipients per bounce; a list bounce can name hundreds. */
+export declare const MAX_FAILED_RECIPIENTS = 5;
+/** The reasons a bounce is flagged, worded once. */
+export declare const BOUNCE_REASON: {
+    readonly ndr: "Non-delivery report (NDR)";
+    readonly daemon: "From mail-delivery system";
+    readonly subjectPhrase: (phrase: string) => string;
+};
 /**
  * Why this item is a bounce, or '' if it isn't.
  *
- * Order matches the Windows script's: the structural signal (an NDR message
- * class) outranks the sender fingerprint, which outranks the subject phrase —
- * so the reason a caller is shown is the strongest one that applied, not the
- * first one that happened to be tested.
+ * The structural signal (a non-delivery report) outranks the sender
+ * fingerprint, which outranks a subject phrase — so the reason reported is the
+ * strongest one that applied, not whichever was tested first.
  */
 export declare function bounceReason(item: {
     subject?: string;
     senderName?: string;
     senderEmail?: string;
-    /** True when the item's MessageClass marks it a non-delivery report (Windows only). */
+    /**
+     * True when the item is STRUCTURALLY a non-delivery report, whichever way
+     * its platform can see that: its MessageClass on Windows, the
+     * delivery-status headers it arrived with on macOS.
+     */
     isNonDeliveryReport?: boolean;
 }): string;
 /** The address pattern both platforms scan a bounce body with. */
 export declare const BODY_ADDRESS_PATTERN = "[A-Za-z0-9._%+\\-]+@[A-Za-z0-9.\\-]+\\.[A-Za-z]{2,}";
 /**
  * The addresses a bounce body names as having failed — best effort, since a
- * bounce body is prose with no agreed structure.
- *
- * The account's own address and the daemon's are dropped: both appear in nearly
- * every bounce, and neither is a send that failed.
+ * bounce body is prose with no agreed structure. The account's own address and
+ * the daemon's are dropped: both appear in nearly every bounce and neither is a
+ * send that failed.
  */
 export declare function failedRecipients(body: string, accountAddress: string): string[];

package/dist/shared/bounceRules.js

@@ -1,21 +1,21 @@
 "use strict";
 // What counts as a bounce, defined once for both platforms.
 //
-// Windows classifies inside the generated PowerShell (the item body is only
-// touched once a cheaper signal has matched, which is what keeps a large-inbox
-// scan affordable) while macOS classifies here in TypeScript after a bulk
-// property read. Two implementations of the RULES, though, is how "what is a
-// bounce" quietly comes to mean two different things — so the lists live here
-// and the PowerShell arrays are generated from them (see windows/bounces.ts).
+// Windows classifies inside the generated PowerShell — an item's body is only
+// read once a cheaper signal has matched, which keeps a large-inbox scan
+// affordable — while macOS classifies here after a bulk property read. Two
+// implementations of the RULES is how "what is a bounce" comes to mean two
+// things, so every list and limit lives here and the PowerShell is generated
+// from them (see windows/bounces.ts).
 //
-// Deliberately specific, multi-word, mail-system wording: ordinary mail that
-// merely mentions a "delivery" must never be flagged, because the caller's next
-// move is to delete what this matches.
+// Deliberately specific, mail-system wording: ordinary mail that merely
+// mentions a "delivery" must never match, because the next step is often to
+// delete what did.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.BODY_ADDRESS_PATTERN = exports.NDR_MESSAGE_CLASS_PREFIX = exports.BOUNCE_DAEMON_NAMES = exports.BOUNCE_DAEMON_ADDRESSES = exports.BOUNCE_SUBJECT_PHRASES = void 0;
+exports.BODY_ADDRESS_PATTERN = exports.BOUNCE_REASON = exports.MAX_FAILED_RECIPIENTS = exports.DAEMON_SELF_ADDRESSES = exports.DSN_HEADER_MARKERS = exports.NDR_MESSAGE_CLASS_PREFIX = exports.BOUNCE_DAEMON_NAMES = exports.BOUNCE_DAEMON_ADDRESSES = exports.BOUNCE_SUBJECT_PHRASES = void 0;
 exports.bounceReason = bounceReason;
 exports.failedRecipients = failedRecipients;
-/** Subject fragments that only a mail system writes. Matched case-insensitively. */
+/** Subject fragments only a mail system writes. Matched case-insensitively. */
 exports.BOUNCE_SUBJECT_PHRASES = [
     'undeliverable',
     'message blocked',
@@ -46,41 +46,59 @@ exports.BOUNCE_DAEMON_NAMES = [
 ];
 /** MessageClass prefix Exchange stamps on a non-delivery report. */
 exports.NDR_MESSAGE_CLASS_PREFIX = 'REPORT.IPM.Note.NDR';
-/** Addresses never reported as a failed recipient — they are the bounce's author. */
-const DAEMON_SELF_ADDRESSES = ['mailer-daemon', 'postmaster', 'mail-daemon'];
+/**
+ * The same structural signal as it arrives on the wire, for macOS: a bounce is
+ * a delivery-status notification (RFC 3464) and says so in its own headers.
+ * Both markers must be present — `multipart/report` also carries read receipts,
+ * and it is the report type that separates a delivery that FAILED from one that
+ * was acknowledged.
+ *
+ * Outlook for Mac publishes no MessageClass in its AppleScript dictionary, so
+ * this stands in for it: the message Exchange stamps REPORT.IPM.Note.NDR is the
+ * message that arrived carrying these headers.
+ *
+ * The macOS index tests these in AppleScript, whose `contains` is already
+ * case-insensitive, and returns one flag per message rather than the headers
+ * themselves (see mac/bounces.ts).
+ */
+exports.DSN_HEADER_MARKERS = ['multipart/report', 'delivery-status'];
+/** Address fragments never reported as a failed recipient — they are the bounce's own author. */
+exports.DAEMON_SELF_ADDRESSES = ['mailer-daemon', 'postmaster', 'mail-daemon'];
 /** At most this many failed recipients per bounce; a list bounce can name hundreds. */
-const MAX_FAILED_RECIPIENTS = 5;
+exports.MAX_FAILED_RECIPIENTS = 5;
+/** The reasons a bounce is flagged, worded once. */
+exports.BOUNCE_REASON = {
+    ndr: 'Non-delivery report (NDR)',
+    daemon: 'From mail-delivery system',
+    subjectPhrase: (phrase) => `Bounce subject phrase: '${phrase}'`,
+};
 /**
  * Why this item is a bounce, or '' if it isn't.
  *
- * Order matches the Windows script's: the structural signal (an NDR message
- * class) outranks the sender fingerprint, which outranks the subject phrase —
- * so the reason a caller is shown is the strongest one that applied, not the
- * first one that happened to be tested.
+ * The structural signal (a non-delivery report) outranks the sender
+ * fingerprint, which outranks a subject phrase — so the reason reported is the
+ * strongest one that applied, not whichever was tested first.
  */
 function bounceReason(item) {
     if (item.isNonDeliveryReport)
-        return 'Non-delivery report (NDR)';
+        return exports.BOUNCE_REASON.ndr;
     const senderEmail = (item.senderEmail || '').toLowerCase();
-    if (exports.BOUNCE_DAEMON_ADDRESSES.some(fragment => senderEmail.includes(fragment))) {
-        return 'From mail-delivery system';
-    }
+    if (exports.BOUNCE_DAEMON_ADDRESSES.some(fragment => senderEmail.includes(fragment)))
+        return exports.BOUNCE_REASON.daemon;
     const senderName = (item.senderName || '').toLowerCase();
-    if (exports.BOUNCE_DAEMON_NAMES.some(fragment => senderName.includes(fragment))) {
-        return 'From mail-delivery system';
-    }
+    if (exports.BOUNCE_DAEMON_NAMES.some(fragment => senderName.includes(fragment)))
+        return exports.BOUNCE_REASON.daemon;
     const subject = (item.subject || '').toLowerCase();
     const phrase = exports.BOUNCE_SUBJECT_PHRASES.find(p => subject.includes(p));
-    return phrase ? `Bounce subject phrase: '${phrase}'` : '';
+    return phrase ? exports.BOUNCE_REASON.subjectPhrase(phrase) : '';
 }
 /** The address pattern both platforms scan a bounce body with. */
 exports.BODY_ADDRESS_PATTERN = '[A-Za-z0-9._%+\\-]+@[A-Za-z0-9.\\-]+\\.[A-Za-z]{2,}';
 /**
  * The addresses a bounce body names as having failed — best effort, since a
- * bounce body is prose with no agreed structure.
- *
- * The account's own address and the daemon's are dropped: both appear in nearly
- * every bounce, and neither is a send that failed.
+ * bounce body is prose with no agreed structure. The account's own address and
+ * the daemon's are dropped: both appear in nearly every bounce and neither is a
+ * send that failed.
  */
 function failedRecipients(body, accountAddress) {
     if (!body)
@@ -91,12 +109,12 @@ function failedRecipients(body, accountAddress) {
         const address = match[0].toLowerCase().replace(/\.+$/, '');
         if (address === target)
             continue;
-        if (DAEMON_SELF_ADDRESSES.some(fragment => address.includes(fragment)))
+        if (exports.DAEMON_SELF_ADDRESSES.some(fragment => address.includes(fragment)))
             continue;
         if (found.includes(address))
             continue;
         found.push(address);
-        if (found.length >= MAX_FAILED_RECIPIENTS)
+        if (found.length >= exports.MAX_FAILED_RECIPIENTS)
             break;
     }
     return found;

package/dist/shared/bounceRules.js.map

@@ -1 +1 @@
-{"version":3,"file":"bounceRules.js","sourceRoot":"","sources":["../../src/shared/bounceRules.ts"],"names":[],"mappings":";AAAA,4DAA4D;AAC5D,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,0EAA0E;AAC1E,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,EAAE;AACF,6EAA6E;AAC7E,gFAAgF;AAChF,uCAAuC;;;AAmDvC,oCAoBC;AAYD,4CAaC;AA9FD,oFAAoF;AACvE,QAAA,sBAAsB,GAAsB;IACrD,eAAe;IACf,iBAAiB;IACjB,sBAAsB;IACtB,wCAAwC;IACxC,qBAAqB;IACrB,gBAAgB;IAChB,qCAAqC;IACrC,eAAe;CAClB,CAAC;AAEF,6EAA6E;AAChE,QAAA,uBAAuB,GAAsB;IACtD,eAAe;IACf,eAAe;IACf,aAAa;IACb,aAAa;IACb,cAAc;CACjB,CAAC;AAEF,kFAAkF;AACrE,QAAA,mBAAmB,GAAsB;IAClD,yBAAyB;IACzB,sBAAsB;IACtB,mBAAmB;IACnB,YAAY;IACZ,eAAe;IACf,oBAAoB;IACpB,wBAAwB;CAC3B,CAAC;AAEF,oEAAoE;AACvD,QAAA,wBAAwB,GAAG,qBAAqB,CAAC;AAE9D,qFAAqF;AACrF,MAAM,qBAAqB,GAAG,CAAC,eAAe,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;AAE7E,uFAAuF;AACvF,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC;;;;;;;GAOG;AACH,SAAgB,YAAY,CAAC,IAM5B;IACG,IAAI,IAAI,CAAC,mBAAmB;QAAE,OAAO,2BAA2B,CAAC;IAEjE,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3D,IAAI,+BAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC3E,OAAO,2BAA2B,CAAC;IACvC,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACzD,IAAI,2BAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO,2BAA2B,CAAC;IACvC,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,8BAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC,CAAC,CAAC,2BAA2B,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,kEAAkE;AACrD,QAAA,oBAAoB,GAAG,qDAAqD,CAAC;AAE1F;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAAC,IAAY,EAAE,cAAsB;IACjE,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,MAAM,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACpD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,4BAAoB,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,OAAO,KAAK,MAAM;YAAE,SAAS;QACjC,IAAI,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAAE,SAAS;QACjF,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACtC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,KAAK,CAAC,MAAM,IAAI,qBAAqB;YAAE,MAAM;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC"}
+{"version":3,"file":"bounceRules.js","sourceRoot":"","sources":["../../src/shared/bounceRules.ts"],"names":[],"mappings":";AAAA,4DAA4D;AAC5D,EAAE;AACF,8EAA8E;AAC9E,yEAAyE;AACzE,2EAA2E;AAC3E,2EAA2E;AAC3E,6EAA6E;AAC7E,sCAAsC;AACtC,EAAE;AACF,wEAAwE;AACxE,4EAA4E;AAC5E,mBAAmB;;;AA0EnB,oCAoBC;AAWD,4CAaC;AApHD,+EAA+E;AAClE,QAAA,sBAAsB,GAAsB;IACrD,eAAe;IACf,iBAAiB;IACjB,sBAAsB;IACtB,wCAAwC;IACxC,qBAAqB;IACrB,gBAAgB;IAChB,qCAAqC;IACrC,eAAe;CAClB,CAAC;AAEF,6EAA6E;AAChE,QAAA,uBAAuB,GAAsB;IACtD,eAAe;IACf,eAAe;IACf,aAAa;IACb,aAAa;IACb,cAAc;CACjB,CAAC;AAEF,kFAAkF;AACrE,QAAA,mBAAmB,GAAsB;IAClD,yBAAyB;IACzB,sBAAsB;IACtB,mBAAmB;IACnB,YAAY;IACZ,eAAe;IACf,oBAAoB;IACpB,wBAAwB;CAC3B,CAAC;AAEF,oEAAoE;AACvD,QAAA,wBAAwB,GAAG,qBAAqB,CAAC;AAE9D;;;;;;;;;;;;;;GAcG;AACU,QAAA,kBAAkB,GAAsB,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,CAAC;AAE7F,iGAAiG;AACpF,QAAA,qBAAqB,GAAsB,CAAC,eAAe,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;AAEvG,uFAAuF;AAC1E,QAAA,qBAAqB,GAAG,CAAC,CAAC;AAEvC,oDAAoD;AACvC,QAAA,aAAa,GAAG;IACzB,GAAG,EAAE,2BAA2B;IAChC,MAAM,EAAE,2BAA2B;IACnC,aAAa,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,2BAA2B,MAAM,GAAG;CACjE,CAAC;AAEX;;;;;;GAMG;AACH,SAAgB,YAAY,CAAC,IAU5B;IACG,IAAI,IAAI,CAAC,mBAAmB;QAAE,OAAO,qBAAa,CAAC,GAAG,CAAC;IAEvD,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3D,IAAI,+BAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,qBAAa,CAAC,MAAM,CAAC;IAC1G,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACzD,IAAI,2BAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,qBAAa,CAAC,MAAM,CAAC;IACrG,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,8BAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC,CAAC,CAAC,qBAAa,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,kEAAkE;AACrD,QAAA,oBAAoB,GAAG,qDAAqD,CAAC;AAE1F;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAC,IAAY,EAAE,cAAsB;IACjE,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,MAAM,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACpD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,4BAAoB,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,OAAO,KAAK,MAAM;YAAE,SAAS;QACjC,IAAI,6BAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAAE,SAAS;QACjF,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACtC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,KAAK,CAAC,MAAM,IAAI,6BAAqB;YAAE,MAAM;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC","sourcesContent":["// What counts as a bounce, defined once for both platforms.\n//\n// Windows classifies inside the generated PowerShell — an item's body is only\n// read once a cheaper signal has matched, which keeps a large-inbox scan\n// affordable — while macOS classifies here after a bulk property read. Two\n// implementations of the RULES is how \"what is a bounce\" comes to mean two\n// things, so every list and limit lives here and the PowerShell is generated\n// from them (see windows/bounces.ts).\n//\n// Deliberately specific, mail-system wording: ordinary mail that merely\n// mentions a \"delivery\" must never match, because the next step is often to\n// delete what did.\n\n/** Subject fragments only a mail system writes. Matched case-insensitively. */\nexport const BOUNCE_SUBJECT_PHRASES: readonly string[] = [\n    'undeliverable',\n    'message blocked',\n    'mail delivery failed',\n    'delivery status notification (failure)',\n    'delivery has failed',\n    'failure notice',\n    'undelivered mail returned to sender',\n    'returned mail',\n];\n\n/** Fragments of a sender ADDRESS that fingerprint a mail-delivery daemon. */\nexport const BOUNCE_DAEMON_ADDRESSES: readonly string[] = [\n    'mailer-daemon',\n    'mailer_daemon',\n    'postmaster@',\n    'mail-daemon',\n    'maildelivery',\n];\n\n/** Fragments of a sender DISPLAY NAME that fingerprint a mail-delivery daemon. */\nexport const BOUNCE_DAEMON_NAMES: readonly string[] = [\n    'mail delivery subsystem',\n    'mail delivery system',\n    'microsoft outlook',\n    'postmaster',\n    'mailer-daemon',\n    'mail administrator',\n    'internet mail delivery',\n];\n\n/** MessageClass prefix Exchange stamps on a non-delivery report. */\nexport const NDR_MESSAGE_CLASS_PREFIX = 'REPORT.IPM.Note.NDR';\n\n/**\n * The same structural signal as it arrives on the wire, for macOS: a bounce is\n * a delivery-status notification (RFC 3464) and says so in its own headers.\n * Both markers must be present — `multipart/report` also carries read receipts,\n * and it is the report type that separates a delivery that FAILED from one that\n * was acknowledged.\n *\n * Outlook for Mac publishes no MessageClass in its AppleScript dictionary, so\n * this stands in for it: the message Exchange stamps REPORT.IPM.Note.NDR is the\n * message that arrived carrying these headers.\n *\n * The macOS index tests these in AppleScript, whose `contains` is already\n * case-insensitive, and returns one flag per message rather than the headers\n * themselves (see mac/bounces.ts).\n */\nexport const DSN_HEADER_MARKERS: readonly string[] = ['multipart/report', 'delivery-status'];\n\n/** Address fragments never reported as a failed recipient — they are the bounce's own author. */\nexport const DAEMON_SELF_ADDRESSES: readonly string[] = ['mailer-daemon', 'postmaster', 'mail-daemon'];\n\n/** At most this many failed recipients per bounce; a list bounce can name hundreds. */\nexport const MAX_FAILED_RECIPIENTS = 5;\n\n/** The reasons a bounce is flagged, worded once. */\nexport const BOUNCE_REASON = {\n    ndr: 'Non-delivery report (NDR)',\n    daemon: 'From mail-delivery system',\n    subjectPhrase: (phrase: string) => `Bounce subject phrase: '${phrase}'`,\n} as const;\n\n/**\n * Why this item is a bounce, or '' if it isn't.\n *\n * The structural signal (a non-delivery report) outranks the sender\n * fingerprint, which outranks a subject phrase — so the reason reported is the\n * strongest one that applied, not whichever was tested first.\n */\nexport function bounceReason(item: {\n    subject?: string;\n    senderName?: string;\n    senderEmail?: string;\n    /**\n     * True when the item is STRUCTURALLY a non-delivery report, whichever way\n     * its platform can see that: its MessageClass on Windows, the\n     * delivery-status headers it arrived with on macOS.\n     */\n    isNonDeliveryReport?: boolean;\n}): string {\n    if (item.isNonDeliveryReport) return BOUNCE_REASON.ndr;\n\n    const senderEmail = (item.senderEmail || '').toLowerCase();\n    if (BOUNCE_DAEMON_ADDRESSES.some(fragment => senderEmail.includes(fragment))) return BOUNCE_REASON.daemon;\n    const senderName = (item.senderName || '').toLowerCase();\n    if (BOUNCE_DAEMON_NAMES.some(fragment => senderName.includes(fragment))) return BOUNCE_REASON.daemon;\n    const subject = (item.subject || '').toLowerCase();\n    const phrase = BOUNCE_SUBJECT_PHRASES.find(p => subject.includes(p));\n    return phrase ? BOUNCE_REASON.subjectPhrase(phrase) : '';\n}\n\n/** The address pattern both platforms scan a bounce body with. */\nexport const BODY_ADDRESS_PATTERN = '[A-Za-z0-9._%+\\\\-]+@[A-Za-z0-9.\\\\-]+\\\\.[A-Za-z]{2,}';\n\n/**\n * The addresses a bounce body names as having failed — best effort, since a\n * bounce body is prose with no agreed structure. The account's own address and\n * the daemon's are dropped: both appear in nearly every bounce and neither is a\n * send that failed.\n */\nexport function failedRecipients(body: string, accountAddress: string): string[] {\n    if (!body) return [];\n    const target = (accountAddress || '').toLowerCase();\n    const found: string[] = [];\n    for (const match of body.matchAll(new RegExp(BODY_ADDRESS_PATTERN, 'g'))) {\n        const address = match[0].toLowerCase().replace(/\\.+$/, '');\n        if (address === target) continue;\n        if (DAEMON_SELF_ADDRESSES.some(fragment => address.includes(fragment))) continue;\n        if (found.includes(address)) continue;\n        found.push(address);\n        if (found.length >= MAX_FAILED_RECIPIENTS) break;\n    }\n    return found;\n}\n"]}

package/dist/shared/exec.d.ts

@@ -0,0 +1,21 @@
+import { type ScriptRunner } from '../errors';
+import { type RunBudget } from '../runtime';
+export interface ScriptProcess {
+    runner: ScriptRunner;
+    command: string;
+    args: readonly string[];
+    /** The script exactly as it runs, for errors and the debug hook. */
+    script: string;
+    budget: RunBudget;
+    /** The script's own failure message, and the line it came from, out of stderr. */
+    parseFailure(stderr: string): {
+        message: string;
+        line?: number;
+    };
+}
+export interface ProcessOutput {
+    stdout: string;
+    durationMs: number;
+}
+/** Run one script to completion, rejecting with the most specific OutlookError on failure. */
+export declare function runScriptProcess(run: ScriptProcess): Promise<ProcessOutput>;

package/dist/shared/exec.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runScriptProcess = runScriptProcess;
+// Running one interpreter process: the part both platforms' runners share.
+//
+// Each platform decides how its script reaches the interpreter and how a
+// failure reads in that interpreter's stderr. Everything else — the settings a
+// run takes, telling an abort from a timeout from an overflow, and reporting
+// the run to the debug hook — happens here, once.
+const child_process_1 = require("child_process");
+const errors_1 = require("../errors");
+const runtime_1 = require("../runtime");
+/** Run one script to completion, rejecting with the most specific OutlookError on failure. */
+function runScriptProcess(run) {
+    const { maxBufferBytes, signal } = (0, runtime_1.getConfig)();
+    const timeout = (0, runtime_1.timeoutFor)(run.budget);
+    const startedAt = Date.now();
+    return new Promise((resolve, reject) => {
+        (0, child_process_1.execFile)(run.command, [...run.args], 
+        // windowsHide keeps a GUI host (an Electron app, say) from flashing a
+        // console window on every run.
+        { maxBuffer: maxBufferBytes, timeout, signal, windowsHide: true, encoding: 'utf8' }, (error, stdout, stderr) => {
+            const durationMs = Date.now() - startedAt;
+            if (error) {
+                const { message, line } = run.parseFailure(stderr ?? '');
+                const failure = (0, errors_1.classifyRunFailure)({
+                    runner: run.runner,
+                    script: run.script,
+                    stderr: stderr ?? '',
+                    message,
+                    line,
+                    durationMs,
+                    nodeError: error,
+                    timeoutMs: timeout,
+                    maxBufferBytes,
+                    signal,
+                });
+                (0, runtime_1.reportRun)({ runner: run.runner, script: run.script, durationMs, error: failure.message });
+                reject(failure);
+                return;
+            }
+            (0, runtime_1.reportRun)({ runner: run.runner, script: run.script, durationMs });
+            resolve({ stdout, durationMs });
+        });
+    });
+}
+//# sourceMappingURL=exec.js.map

package/dist/shared/exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.js","sourceRoot":"","sources":["../../src/shared/exec.ts"],"names":[],"mappings":";;AA4BA,4CAoCC;AAhED,2EAA2E;AAC3E,EAAE;AACF,yEAAyE;AACzE,+EAA+E;AAC/E,6EAA6E;AAC7E,kDAAkD;AAClD,iDAAyC;AACzC,sCAAkE;AAClE,wCAA8E;AAmB9E,8FAA8F;AAC9F,SAAgB,gBAAgB,CAAC,GAAkB;IAC/C,MAAM,EAAC,cAAc,EAAE,MAAM,EAAC,GAAG,IAAA,mBAAS,GAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAA,oBAAU,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,IAAA,wBAAQ,EACJ,GAAG,CAAC,OAAO,EACX,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;QACb,sEAAsE;QACtE,+BAA+B;QAC/B,EAAC,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAC,EACjF,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACtB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC1C,IAAI,KAAK,EAAE,CAAC;gBACR,MAAM,EAAC,OAAO,EAAE,IAAI,EAAC,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;gBACvD,MAAM,OAAO,GAAG,IAAA,2BAAkB,EAAC;oBAC/B,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,MAAM,EAAE,MAAM,IAAI,EAAE;oBACpB,OAAO;oBACP,IAAI;oBACJ,UAAU;oBACV,SAAS,EAAE,KAAK;oBAChB,SAAS,EAAE,OAAO;oBAClB,cAAc;oBACd,MAAM;iBACT,CAAC,CAAC;gBACH,IAAA,mBAAS,EAAC,EAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAC,CAAC,CAAC;gBACxF,MAAM,CAAC,OAAO,CAAC,CAAC;gBAChB,OAAO;YACX,CAAC;YACD,IAAA,mBAAS,EAAC,EAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAC,CAAC,CAAC;YAChE,OAAO,CAAC,EAAC,MAAM,EAAE,UAAU,EAAC,CAAC,CAAC;QAClC,CAAC,CACJ,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC","sourcesContent":["// Running one interpreter process: the part both platforms' runners share.\n//\n// Each platform decides how its script reaches the interpreter and how a\n// failure reads in that interpreter's stderr. Everything else — the settings a\n// run takes, telling an abort from a timeout from an overflow, and reporting\n// the run to the debug hook — happens here, once.\nimport { execFile } from 'child_process';\nimport { classifyRunFailure, type ScriptRunner } from '../errors';\nimport { getConfig, reportRun, type RunBudget, timeoutFor } from '../runtime';\n\nexport interface ScriptProcess {\n    runner: ScriptRunner;\n    command: string;\n    args: readonly string[];\n    /** The script exactly as it runs, for errors and the debug hook. */\n    script: string;\n    budget: RunBudget;\n\n    /** The script's own failure message, and the line it came from, out of stderr. */\n    parseFailure(stderr: string): { message: string; line?: number };\n}\n\nexport interface ProcessOutput {\n    stdout: string;\n    durationMs: number;\n}\n\n/** Run one script to completion, rejecting with the most specific OutlookError on failure. */\nexport function runScriptProcess(run: ScriptProcess): Promise<ProcessOutput> {\n    const {maxBufferBytes, signal} = getConfig();\n    const timeout = timeoutFor(run.budget);\n    const startedAt = Date.now();\n    return new Promise((resolve, reject) => {\n        execFile(\n            run.command,\n            [...run.args],\n            // windowsHide keeps a GUI host (an Electron app, say) from flashing a\n            // console window on every run.\n            {maxBuffer: maxBufferBytes, timeout, signal, windowsHide: true, encoding: 'utf8'},\n            (error, stdout, stderr) => {\n                const durationMs = Date.now() - startedAt;\n                if (error) {\n                    const {message, line} = run.parseFailure(stderr ?? '');\n                    const failure = classifyRunFailure({\n                        runner: run.runner,\n                        script: run.script,\n                        stderr: stderr ?? '',\n                        message,\n                        line,\n                        durationMs,\n                        nodeError: error,\n                        timeoutMs: timeout,\n                        maxBufferBytes,\n                        signal,\n                    });\n                    reportRun({runner: run.runner, script: run.script, durationMs, error: failure.message});\n                    reject(failure);\n                    return;\n                }\n                reportRun({runner: run.runner, script: run.script, durationMs});\n                resolve({stdout, durationMs});\n            },\n        );\n    });\n}\n"]}

package/dist/shared/json.d.ts

@@ -1,11 +1,17 @@
-/** Parse a script's stdout as an object, tolerating empty output and 'null'. */
-export declare function parseObject(raw: string): Record<string, unknown>;
-/** Parse a script's stdout as a list, absorbing ConvertTo-Json's unwrapping. */
-export declare function parseArray(raw: string): unknown[];
-/** One value as a list: an array stays, null becomes empty, anything else wraps. */
+/** One value as a list: an array stays, null and undefined become empty, anything else wraps. */
 export declare function toArray(value: unknown): unknown[];
-/** A record's field as a plain object, for mapping a list of rows. */
+/** A value as a plain object, for reading fields off one row. */
 export declare function record(value: unknown): Record<string, unknown>;
 export declare function str(value: unknown): string;
 export declare function num(value: unknown): number;
+export declare function bool(value: unknown): boolean;
+/** A list of non-empty strings. */
 export declare function strList(value: unknown): string[];
+/** A base64 field decoded as UTF-8 — how scripts pass bodies that must survive intact. */
+export declare function base64Text(value: unknown): string;
+/** A list of per-item failures, as the scripts report them. */
+export declare function itemFailures(value: unknown): {
+    entryId: string;
+    subject: string;
+    error: string;
+}[];

package/dist/shared/json.js

@@ -1,45 +1,51 @@
 "use strict";
-// Coercion helpers for the JSON the PowerShell scripts emit.
+// Coercing the JSON a PowerShell script prints into the package's types.
 //
-// PowerShell's ConvertTo-Json has two habits that a consumer must never see:
-// it unwraps a single-element array to a bare object, and renders an empty one
-// as null. Every list crossing that boundary therefore goes through `toArray`,
-// and every scalar through a coercion that survives a missing property.
+// ConvertTo-Json has two habits a caller must never see: it unwraps a
+// single-element array into a bare object, and it renders an empty one as
+// nothing at all. Every list crossing that boundary goes through `toArray`, and
+// every scalar through a coercion that survives a missing property.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.parseObject = parseObject;
-exports.parseArray = parseArray;
 exports.toArray = toArray;
 exports.record = record;
 exports.str = str;
 exports.num = num;
+exports.bool = bool;
 exports.strList = strList;
-/** Parse a script's stdout as an object, tolerating empty output and 'null'. */
-function parseObject(raw) {
-    if (!raw || !raw.trim() || raw.trim() === 'null')
-        return {};
-    return JSON.parse(raw.trim());
-}
-/** Parse a script's stdout as a list, absorbing ConvertTo-Json's unwrapping. */
-function parseArray(raw) {
-    if (!raw || !raw.trim() || raw.trim() === 'null')
-        return [];
-    return toArray(JSON.parse(raw.trim()));
-}
-/** One value as a list: an array stays, null becomes empty, anything else wraps. */
+exports.base64Text = base64Text;
+exports.itemFailures = itemFailures;
+/** One value as a list: an array stays, null and undefined become empty, anything else wraps. */
 function toArray(value) {
     return Array.isArray(value) ? value : value == null ? [] : [value];
 }
-/** A record's field as a plain object, for mapping a list of rows. */
+/** A value as a plain object, for reading fields off one row. */
 function record(value) {
-    return (value ?? {});
+    return value !== null && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : {};
 }
 function str(value) {
     return value == null ? '' : String(value);
 }
 function num(value) {
-    return typeof value === 'number' ? value : 0;
+    return typeof value === 'number' && Number.isFinite(value) ? value : 0;
 }
+function bool(value) {
+    return value === true;
+}
+/** A list of non-empty strings. */
 function strList(value) {
     return toArray(value).map(str).filter(Boolean);
 }
+/** A base64 field decoded as UTF-8 — how scripts pass bodies that must survive intact. */
+function base64Text(value) {
+    return Buffer.from(str(value), 'base64').toString('utf8');
+}
+/** A list of per-item failures, as the scripts report them. */
+function itemFailures(value) {
+    return toArray(value).map(row => {
+        const e = record(row);
+        return { entryId: str(e.entryId), subject: str(e.subject), error: str(e.error) };
+    });
+}
 //# sourceMappingURL=json.js.map