@dawnlit/outlook-bridge 2.0.0 → 2.2.0

package/dist/mac/run.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AS_HANDLERS = exports.AS_LIST_SEP = exports.AS_RECORD_SEP = exports.AS_FIELD_SEP = exports.LIST_SEP = exports.RECORD_SEP = exports.FIELD_SEP = void 0;
+exports.ITEM_FAILURE_ROW = exports.AS_HANDLERS = exports.AS_LIST_SEP = exports.LIST_SEP = exports.RECORD_SEP = exports.FIELD_SEP = void 0;
 exports.runOsaScript = runOsaScript;
 exports.asEscape = asEscape;
 exports.asString = asString;
@@ -14,10 +14,12 @@ exports.asRow = asRow;
 exports.splitRecords = splitRecords;
 exports.splitFields = splitFields;
 exports.splitList = splitList;
+exports.splitPositionalList = splitPositionalList;
 exports.field = field;
 exports.summaryFields = summaryFields;
 exports.intField = intField;
 exports.boolField = boolField;
+exports.splitBatch = splitBatch;
 // Getting a generated AppleScript to osascript and its output back.
 //
 // The macOS counterpart of windows/run.ts: running a script, the escaping
@@ -106,12 +108,12 @@ function asIdList(ids) {
 // bodies contain tabs, newlines and commas, but never these — and every emitted
 // field passes through the `sanitize` handler, which makes the framing safe
 // rather than merely unlikely to break.
-exports.FIELD_SEP = '';
-exports.RECORD_SEP = '';
-exports.LIST_SEP = '';
-/** The same three, as AppleScript expressions. */
-exports.AS_FIELD_SEP = '(character id 31)';
-exports.AS_RECORD_SEP = '(character id 30)';
+exports.FIELD_SEP = '\x1f';
+exports.RECORD_SEP = '\x1e';
+exports.LIST_SEP = '\x1d';
+/** The same three, as AppleScript expressions. Only the list one is written outside this module. */
+const AS_FIELD_SEP = '(character id 31)';
+const AS_RECORD_SEP = '(character id 30)';
 exports.AS_LIST_SEP = '(character id 29)';
 /**
  * One record: the AppleScript expressions in `fields`, separated and terminated
@@ -122,7 +124,7 @@ exports.AS_LIST_SEP = '(character id 29)';
 function asRow(fields) {
     return fields
         .map(f => `my sanitize(${f})`)
-        .join(` & ${exports.AS_FIELD_SEP} & `) + ` & ${exports.AS_RECORD_SEP}`;
+        .join(` & ${AS_FIELD_SEP} & `) + ` & ${AS_RECORD_SEP}`;
 }
 /**
  * The handlers every script relies on, called with `my` from inside a `tell`.
@@ -186,6 +188,15 @@ on sanitizeList(lst)
     return my joinList(cleaned, (character id 29))
 end sanitizeList
 
+-- A list whose positions matter, like an email's attachments: every element is
+-- FOLLOWED by the LIST separator, so an empty element keeps its place and an
+-- empty list stays distinct from a list of one empty name. splitPositionalList()
+-- takes it apart.
+on sanitizePositionalList(lst)
+    if (count of lst) is 0 then return ""
+    return my sanitizeList(lst) & (character id 29)
+end sanitizePositionalList
+
 on insertAboveQuoted(c, ins)
     if c is missing value then return ins
     set c to c as string
@@ -221,10 +232,21 @@ function splitRecords(raw) {
 function splitFields(record) {
     return record.split(exports.FIELD_SEP);
 }
-/** A field that carries a list. */
+/**
+ * A field that carries a list. Empty elements are dropped, so where an index
+ * into the list must match Outlook's, the field is written with
+ * `sanitizePositionalList` and read with `splitPositionalList` instead.
+ */
 function splitList(value) {
     return (value || '').split(exports.LIST_SEP).filter(Boolean);
 }
+/**
+ * A field written by `sanitizePositionalList`: every element at its position,
+ * empty ones included, so index N here is item N+1 of the AppleScript list.
+ */
+function splitPositionalList(value) {
+    return value ? value.split(exports.LIST_SEP).slice(0, -1) : [];
+}
 /** A field by position; a missing field reads as ''. */
 function field(fields, index) {
     return fields[index] ?? '';
@@ -242,4 +264,22 @@ function intField(fields, index, fallback = 0) {
 function boolField(fields, index) {
     return field(fields, index).trim() === 'true';
 }
+// ── Batches ──────────────────────────────────────────────────────────────
+//
+// A script acting on a list of ids returns one summary record, then one record
+// per id that failed. The failure row and its decoder sit together so the two
+// can't come to disagree about the field order.
+/** The record a batch script appends, inside `on error errText`, for the id `theId` it failed on. */
+exports.ITEM_FAILURE_ROW = asRow(['(theId as string)', 'subj', 'errText']);
+/** A batch script's output: the summary record's fields, and the items that failed. */
+function splitBatch(raw) {
+    const [summary = '', ...failures] = splitRecords(raw);
+    return {
+        summary: splitFields(summary),
+        failed: failures.map(record => {
+            const parts = splitFields(record);
+            return { entryId: field(parts, 0), subject: field(parts, 1), error: field(parts, 2) };
+        }),
+    };
+}
 //# sourceMappingURL=run.js.map

package/dist/mac/run.js.map

@@ -1 +1 @@
-{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/mac/run.ts"],"names":[],"mappings":";;;;;;AAkCA,oCAmBC;AAOD,4BAKC;AAGD,4BAEC;AAGD,wBAEC;AAGD,sBAKC;AAGD,4BAEC;AAuBD,sBAIC;AA6FD,oCAEC;AAGD,kCAEC;AAGD,8BAEC;AAGD,sBAEC;AAGD,sCAEC;AAGD,4BAGC;AAGD,8BAEC;AAjPD,oEAAoE;AACpE,EAAE;AACF,0EAA0E;AAC1E,0DAA0D;AAC1D,4CAAoB;AACpB,wCAAsE;AACtE,yCAAkD;AAClD,sCAAgD;AAChD,mDAA0D;AAE1D,MAAM,MAAM,GAAG,WAAoB,CAAC;AAEpC;;;;;GAKG;AACH,SAAS,YAAY,CAAC,MAAc;IAChC,MAAM,OAAO,GAAG,MAAM;SACjB,OAAO,CAAC,2CAA2C,EAAE,EAAE,CAAC;SACxD,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;SAC/B,IAAI,EAAE,CAAC;IACZ,OAAO,EAAC,OAAO,EAAC,CAAC;AACrB,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,MAAiB;IAChE,6EAA6E;IAC7E,qDAAqD;IACrD,MAAM,MAAM,GAAG,mBAAW,GAAG,MAAM,CAAC;IACpC,MAAM,IAAI,GAAG,IAAA,kBAAQ,EAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC5C,YAAE,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC;QACD,MAAM,EAAC,MAAM,EAAC,GAAG,MAAM,IAAA,uBAAgB,EAAC;YACpC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,CAAC,IAAI,CAAC;YACZ,MAAM;YACN,MAAM;YACN,YAAY;SACf,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrC,CAAC;YAAS,CAAC;QACP,IAAA,wBAAc,EAAC,IAAI,CAAC,CAAC;IACzB,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAgB,QAAQ,CAAC,IAAY;IACjC,OAAO,IAAI;SACN,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,6CAA6C;AAC7C,SAAgB,QAAQ,CAAC,IAAY;IACjC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;AACjC,CAAC;AAED,sCAAsC;AACtC,SAAgB,MAAM,CAAC,KAAc;IACjC,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;AACpC,CAAC;AAED,oFAAoF;AACpF,SAAgB,KAAK,CAAC,KAAa;IAC/B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,4BAAmB,CAAC,gCAAgC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,kFAAkF;AAClF,SAAgB,QAAQ,CAAC,GAAsB;IAC3C,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AAC9D,CAAC;AAED,4EAA4E;AAC5E,EAAE;AACF,2EAA2E;AAC3E,gFAAgF;AAChF,4EAA4E;AAC5E,wCAAwC;AAC3B,QAAA,SAAS,GAAG,GAAG,CAAC;AAChB,QAAA,UAAU,GAAG,GAAG,CAAC;AACjB,QAAA,QAAQ,GAAG,GAAG,CAAC;AAE5B,kDAAkD;AACrC,QAAA,YAAY,GAAG,mBAAmB,CAAC;AACnC,QAAA,aAAa,GAAG,mBAAmB,CAAC;AACpC,QAAA,WAAW,GAAG,mBAAmB,CAAC;AAE/C;;;;;GAKG;AACH,SAAgB,KAAK,CAAC,MAAyB;IAC3C,OAAO,MAAM;SACR,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC;SAC7B,IAAI,CAAC,MAAM,oBAAY,KAAK,CAAC,GAAG,MAAM,qBAAa,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACU,QAAA,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oCA+DS,+BAAmB;;;;;;;;;;;;;;;;;;CAkBtD,CAAC;AAEF,oEAAoE;AACpE,SAAgB,YAAY,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,KAAK,CAAC,kBAAU,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,2BAA2B;AAC3B,SAAgB,WAAW,CAAC,MAAc;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC,iBAAS,CAAC,CAAC;AACnC,CAAC;AAED,mCAAmC;AACnC,SAAgB,SAAS,CAAC,KAAyB;IAC/C,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACzD,CAAC;AAED,wDAAwD;AACxD,SAAgB,KAAK,CAAC,MAAyB,EAAE,KAAa;IAC1D,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED,yGAAyG;AACzG,SAAgB,aAAa,CAAC,GAAW;IACrC,OAAO,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,6DAA6D;AAC7D,SAAgB,QAAQ,CAAC,MAAyB,EAAE,KAAa,EAAE,QAAQ,GAAG,CAAC;IAC3E,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;AACpD,CAAC;AAED,kFAAkF;AAClF,SAAgB,SAAS,CAAC,MAAyB,EAAE,KAAa;IAC9D,OAAO,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC;AAClD,CAAC","sourcesContent":["// Getting a generated AppleScript to osascript and its output back.\n//\n// The macOS counterpart of windows/run.ts: running a script, the escaping\n// rules, and the record framing every reader here shares.\nimport fs from 'fs';\nimport { removeTempFile, type RunBudget, tempFile } from '../runtime';\nimport { runScriptProcess } from '../shared/exec';\nimport { InvalidRequestError } from '../errors';\nimport { WORD_SECTION_ANCHOR } from '../shared/replyBody';\n\nconst RUNNER = 'osascript' as const;\n\n/**\n * osascript's report of a script error: \"<file>:<start>:<end>: execution error:\n * <message> (<number>)\". Only the message is worth showing — these reach people\n * in per-item failure lists — and -2700 is the number AppleScript gives every\n * `error \"…\"` a script raises itself.\n */\nfunction parseFailure(stderr: string): { message: string } {\n    const message = stderr\n        .replace(/^(?:.*?:)?\\d+:\\d+:\\s*execution error:\\s*/m, '')\n        .replace(/\\s*\\(-2700\\)\\s*$/, '')\n        .trim();\n    return {message};\n}\n\n/**\n * Run a script from a temp file (no argument-length or quoting limits) and\n * return what it printed, minus the newline osascript appends.\n *\n * `AS_HANDLERS` is prepended here rather than by each caller: a script missing\n * a handler fails to compile as a WHOLE, with an error pointing nowhere near the\n * omission, so it can't be left to each script to remember.\n */\nexport async function runOsaScript(source: string, budget: RunBudget): Promise<string> {\n    // The full text is what osascript compiles, so it is also what error offsets\n    // refer to and what the debug hook and errors carry.\n    const script = AS_HANDLERS + source;\n    const file = tempFile('osa', 'applescript');\n    fs.writeFileSync(file, script, 'utf8');\n    try {\n        const {stdout} = await runScriptProcess({\n            runner: RUNNER,\n            command: 'osascript',\n            args: [file],\n            script,\n            budget,\n            parseFailure,\n        });\n        return stdout.replace(/\\n$/, '');\n    } finally {\n        removeTempFile(file);\n    }\n}\n\n/**\n * Escape text for the inside of an AppleScript double-quoted literal.\n * AppleScript strings never interpolate, so escaping the quote, the backslash\n * and line breaks is the whole job.\n */\nexport function asEscape(text: string): string {\n    return text\n        .replace(/\\\\/g, '\\\\\\\\')\n        .replace(/\"/g, '\\\\\"')\n        .replace(/\\r\\n|\\r|\\n/g, '\\\\n');\n}\n\n/** Text as an AppleScript string literal. */\nexport function asString(text: string): string {\n    return `\"${asEscape(text)}\"`;\n}\n\n/** AppleScript's boolean literals. */\nexport function asBool(value: boolean): string {\n    return value ? 'true' : 'false';\n}\n\n/** A whole number for a script; anything else is refused before it becomes code. */\nexport function asInt(value: number): string {\n    if (!Number.isSafeInteger(value)) {\n        throw new InvalidRequestError(`Expected a whole number, got ${String(value)}.`);\n    }\n    return String(value);\n}\n\n/** Message ids (already validated as integers) as an AppleScript list literal. */\nexport function asIdList(ids: readonly string[]): string {\n    return `{${ids.map(id => asInt(Number(id))).join(', ')}}`;\n}\n\n// ── Record framing ───────────────────────────────────────────────────────\n//\n// Control characters separate fields, records and list items: subjects and\n// bodies contain tabs, newlines and commas, but never these — and every emitted\n// field passes through the `sanitize` handler, which makes the framing safe\n// rather than merely unlikely to break.\nexport const FIELD_SEP = '\u001f';\nexport const RECORD_SEP = '\u001e';\nexport const LIST_SEP = '\u001d';\n\n/** The same three, as AppleScript expressions. */\nexport const AS_FIELD_SEP = '(character id 31)';\nexport const AS_RECORD_SEP = '(character id 30)';\nexport const AS_LIST_SEP = '(character id 29)';\n\n/**\n * One record: the AppleScript expressions in `fields`, separated and terminated\n * so `splitRecords`/`splitFields` can take them apart again. A field holding a\n * LIST must be built with `my sanitizeList(...)`, which cleans the elements —\n * `sanitize` deliberately leaves the list separator alone.\n */\nexport function asRow(fields: readonly string[]): string {\n    return fields\n        .map(f => `my sanitize(${f})`)\n        .join(` & ${AS_FIELD_SEP} & `) + ` & ${AS_RECORD_SEP}`;\n}\n\n/**\n * The handlers every script relies on, called with `my` from inside a `tell`.\n *\n * `isoDate` produces the zero-padded 'yyyy-MM-dd HH:mm' both platforms return;\n * `sanitize` strips the framing characters; `joinList` and `replaceText` are the\n * text-item-delimiter dance nobody should write twice.\n */\nexport const AS_HANDLERS = `\non pad2(n)\n    set s to (n as integer) as string\n    if (length of s) < 2 then set s to \"0\" & s\n    return s\nend pad2\n\non isoDate(d)\n    if d is missing value then return \"\"\n    return (year of d as string) & \"-\" & pad2(month of d as integer) & \"-\" & pad2(day of d) & \" \" & pad2(hours of d) & \":\" & pad2(minutes of d)\nend isoDate\n\non joinList(lst, sep)\n    set saved to AppleScript's text item delimiters\n    set AppleScript's text item delimiters to sep\n    set out to lst as string\n    set AppleScript's text item delimiters to saved\n    return out\nend joinList\n\non replaceText(t, findWhat, replaceWith)\n    set saved to AppleScript's text item delimiters\n    set AppleScript's text item delimiters to findWhat\n    set parts to text items of t\n    set AppleScript's text item delimiters to replaceWith\n    set out to parts as string\n    set AppleScript's text item delimiters to saved\n    return out\nend replaceText\n\n-- Strips the FIELD and RECORD separators only. The LIST separator is left\n-- alone on purpose: a field may legitimately BE a list.\non sanitize(v)\n    if v is missing value then return \"\"\n    set t to v as string\n    repeat with codePoint in {30, 31}\n        set marker to (character id (codePoint as integer))\n        if t contains marker then set t to my replaceText(t, marker, \" \")\n    end repeat\n    return t\nend sanitize\n\n-- A list field: each element loses all three separators, then they are joined\n-- with the LIST separator that splitList() takes them apart on.\non sanitizeList(lst)\n    set cleaned to {}\n    repeat with item_ in lst\n        set t to my sanitize(item_)\n        set marker to (character id 29)\n        if t contains marker then set t to my replaceText(t, marker, \" \")\n        set end of cleaned to t\n    end repeat\n    return my joinList(cleaned, (character id 29))\nend sanitizeList\n\non insertAboveQuoted(c, ins)\n    if c is missing value then return ins\n    set c to c as string\n    if (length of c) is 0 then return ins\n    -- A reply's own empty paragraph sits inside WordSection1; inserting straight\n    -- after that tag puts the new text where the cursor would be. Anything else\n    -- falls back to just inside <body>. ('at' is a reserved parameter name, so\n    -- the cut point can't be called that.)\n    set cutPoint to my tagEnd(c, \"${WORD_SECTION_ANCHOR}\")\n    if cutPoint is 0 then set cutPoint to my tagEnd(c, \"<body\")\n    if cutPoint is 0 then return ins & c\n    if cutPoint is (length of c) then return c & ins\n    return (text 1 thru cutPoint of c) & ins & (text (cutPoint + 1) thru -1 of c)\nend insertAboveQuoted\n\n-- 'rest' is an AppleScript term, so the remainder can't be called that:\n-- assigning to it compiles and then fails at run time.\non tagEnd(c, marker)\n    set ix to offset of marker in c\n    if ix is 0 then return 0\n    if marker ends with \">\" then return ix + (length of marker) - 1\n    set tailText to text ix thru -1 of c\n    set gt to offset of \">\" in tailText\n    if gt is 0 then return 0\n    return ix + gt - 1\nend tagEnd\n`;\n\n/** A script's output as records, without the trailing empty one. */\nexport function splitRecords(raw: string): string[] {\n    return raw.split(RECORD_SEP).filter(record => record.trim() !== '');\n}\n\n/** One record's fields. */\nexport function splitFields(record: string): string[] {\n    return record.split(FIELD_SEP);\n}\n\n/** A field that carries a list. */\nexport function splitList(value: string | undefined): string[] {\n    return (value || '').split(LIST_SEP).filter(Boolean);\n}\n\n/** A field by position; a missing field reads as ''. */\nexport function field(fields: readonly string[], index: number): string {\n    return fields[index] ?? '';\n}\n\n/** The fields of a script's first record — the summary a mutation returns ahead of any per-item rows. */\nexport function summaryFields(raw: string): string[] {\n    return splitFields(splitRecords(raw)[0] ?? '');\n}\n\n/** A numeric field, `fallback` when absent or unparsable. */\nexport function intField(fields: readonly string[], index: number, fallback = 0): number {\n    const parsed = Number.parseInt(field(fields, index), 10);\n    return Number.isNaN(parsed) ? fallback : parsed;\n}\n\n/** A boolean field; AppleScript renders booleans as the bare words true/false. */\nexport function boolField(fields: readonly string[], index: number): boolean {\n    return field(fields, index).trim() === 'true';\n}\n"]}
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/mac/run.ts"],"names":[],"mappings":";;;;;;AAmCA,oCAmBC;AAOD,4BAKC;AAGD,4BAEC;AAGD,wBAEC;AAGD,sBAKC;AAGD,4BAEC;AAuBD,sBAIC;AAsGD,oCAEC;AAGD,kCAEC;AAOD,8BAEC;AAMD,kDAEC;AAGD,sBAEC;AAGD,sCAEC;AAGD,4BAGC;AAGD,8BAEC;AAYD,gCASC;AA5RD,oEAAoE;AACpE,EAAE;AACF,0EAA0E;AAC1E,0DAA0D;AAC1D,4CAAoB;AACpB,wCAAsE;AACtE,yCAAkD;AAClD,sCAAgD;AAChD,mDAA0D;AAG1D,MAAM,MAAM,GAAG,WAAoB,CAAC;AAEpC;;;;;GAKG;AACH,SAAS,YAAY,CAAC,MAAc;IAChC,MAAM,OAAO,GAAG,MAAM;SACjB,OAAO,CAAC,2CAA2C,EAAE,EAAE,CAAC;SACxD,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;SAC/B,IAAI,EAAE,CAAC;IACZ,OAAO,EAAE,OAAO,EAAE,CAAC;AACvB,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,MAAiB;IAChE,6EAA6E;IAC7E,qDAAqD;IACrD,MAAM,MAAM,GAAG,mBAAW,GAAG,MAAM,CAAC;IACpC,MAAM,IAAI,GAAG,IAAA,kBAAQ,EAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC5C,YAAE,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,uBAAgB,EAAC;YACtC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,CAAC,IAAI,CAAC;YACZ,MAAM;YACN,MAAM;YACN,YAAY;SACf,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrC,CAAC;YAAS,CAAC;QACP,IAAA,wBAAc,EAAC,IAAI,CAAC,CAAC;IACzB,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAgB,QAAQ,CAAC,IAAY;IACjC,OAAO,IAAI;SACN,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,6CAA6C;AAC7C,SAAgB,QAAQ,CAAC,IAAY;IACjC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;AACjC,CAAC;AAED,sCAAsC;AACtC,SAAgB,MAAM,CAAC,KAAc;IACjC,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;AACpC,CAAC;AAED,oFAAoF;AACpF,SAAgB,KAAK,CAAC,KAAa;IAC/B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,4BAAmB,CAAC,gCAAgC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,kFAAkF;AAClF,SAAgB,QAAQ,CAAC,GAAsB;IAC3C,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AAC9D,CAAC;AAED,4EAA4E;AAC5E,EAAE;AACF,2EAA2E;AAC3E,gFAAgF;AAChF,4EAA4E;AAC5E,wCAAwC;AAC3B,QAAA,SAAS,GAAG,MAAM,CAAC;AACnB,QAAA,UAAU,GAAG,MAAM,CAAC;AACpB,QAAA,QAAQ,GAAG,MAAM,CAAC;AAE/B,oGAAoG;AACpG,MAAM,YAAY,GAAG,mBAAmB,CAAC;AACzC,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAC7B,QAAA,WAAW,GAAG,mBAAmB,CAAC;AAE/C;;;;;GAKG;AACH,SAAgB,KAAK,CAAC,MAAyB;IAC3C,OAAO,MAAM;SACR,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC;SAC7B,IAAI,CAAC,MAAM,YAAY,KAAK,CAAC,GAAG,MAAM,aAAa,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACU,QAAA,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oCAwES,+BAAmB;;;;;;;;;;;;;;;;;;CAkBtD,CAAC;AAEF,oEAAoE;AACpE,SAAgB,YAAY,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,KAAK,CAAC,kBAAU,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,2BAA2B;AAC3B,SAAgB,WAAW,CAAC,MAAc;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC,iBAAS,CAAC,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,SAAgB,SAAS,CAAC,KAAyB;IAC/C,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,KAAyB;IACzD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,wDAAwD;AACxD,SAAgB,KAAK,CAAC,MAAyB,EAAE,KAAa;IAC1D,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED,yGAAyG;AACzG,SAAgB,aAAa,CAAC,GAAW;IACrC,OAAO,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,6DAA6D;AAC7D,SAAgB,QAAQ,CAAC,MAAyB,EAAE,KAAa,EAAE,QAAQ,GAAG,CAAC;IAC3E,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;AACpD,CAAC;AAED,kFAAkF;AAClF,SAAgB,SAAS,CAAC,MAAyB,EAAE,KAAa;IAC9D,OAAO,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC;AAClD,CAAC;AAED,4EAA4E;AAC5E,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,gDAAgD;AAEhD,qGAAqG;AACxF,QAAA,gBAAgB,GAAG,KAAK,CAAC,CAAC,mBAAmB,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAEhF,uFAAuF;AACvF,SAAgB,UAAU,CAAC,GAAW;IAClC,MAAM,CAAC,OAAO,GAAG,EAAE,EAAE,GAAG,QAAQ,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACtD,OAAO;QACH,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC;QAC7B,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;YAC1B,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;QAC1F,CAAC,CAAC;KACL,CAAC;AACN,CAAC","sourcesContent":["// Getting a generated AppleScript to osascript and its output back.\n//\n// The macOS counterpart of windows/run.ts: running a script, the escaping\n// rules, and the record framing every reader here shares.\nimport fs from 'fs';\nimport { removeTempFile, type RunBudget, tempFile } from '../runtime';\nimport { runScriptProcess } from '../shared/exec';\nimport { InvalidRequestError } from '../errors';\nimport { WORD_SECTION_ANCHOR } from '../shared/replyBody';\nimport type { ItemFailure } from '../types';\n\nconst RUNNER = 'osascript' as const;\n\n/**\n * osascript's report of a script error: \"<file>:<start>:<end>: execution error:\n * <message> (<number>)\". Only the message is worth showing — these reach people\n * in per-item failure lists — and -2700 is the number AppleScript gives every\n * `error \"…\"` a script raises itself.\n */\nfunction parseFailure(stderr: string): { message: string } {\n    const message = stderr\n        .replace(/^(?:.*?:)?\\d+:\\d+:\\s*execution error:\\s*/m, '')\n        .replace(/\\s*\\(-2700\\)\\s*$/, '')\n        .trim();\n    return { message };\n}\n\n/**\n * Run a script from a temp file (no argument-length or quoting limits) and\n * return what it printed, minus the newline osascript appends.\n *\n * `AS_HANDLERS` is prepended here rather than by each caller: a script missing\n * a handler fails to compile as a WHOLE, with an error pointing nowhere near the\n * omission, so it can't be left to each script to remember.\n */\nexport async function runOsaScript(source: string, budget: RunBudget): Promise<string> {\n    // The full text is what osascript compiles, so it is also what error offsets\n    // refer to and what the debug hook and errors carry.\n    const script = AS_HANDLERS + source;\n    const file = tempFile('osa', 'applescript');\n    fs.writeFileSync(file, script, 'utf8');\n    try {\n        const { stdout } = await runScriptProcess({\n            runner: RUNNER,\n            command: 'osascript',\n            args: [file],\n            script,\n            budget,\n            parseFailure,\n        });\n        return stdout.replace(/\\n$/, '');\n    } finally {\n        removeTempFile(file);\n    }\n}\n\n/**\n * Escape text for the inside of an AppleScript double-quoted literal.\n * AppleScript strings never interpolate, so escaping the quote, the backslash\n * and line breaks is the whole job.\n */\nexport function asEscape(text: string): string {\n    return text\n        .replace(/\\\\/g, '\\\\\\\\')\n        .replace(/\"/g, '\\\\\"')\n        .replace(/\\r\\n|\\r|\\n/g, '\\\\n');\n}\n\n/** Text as an AppleScript string literal. */\nexport function asString(text: string): string {\n    return `\"${asEscape(text)}\"`;\n}\n\n/** AppleScript's boolean literals. */\nexport function asBool(value: boolean): string {\n    return value ? 'true' : 'false';\n}\n\n/** A whole number for a script; anything else is refused before it becomes code. */\nexport function asInt(value: number): string {\n    if (!Number.isSafeInteger(value)) {\n        throw new InvalidRequestError(`Expected a whole number, got ${String(value)}.`);\n    }\n    return String(value);\n}\n\n/** Message ids (already validated as integers) as an AppleScript list literal. */\nexport function asIdList(ids: readonly string[]): string {\n    return `{${ids.map(id => asInt(Number(id))).join(', ')}}`;\n}\n\n// ── Record framing ───────────────────────────────────────────────────────\n//\n// Control characters separate fields, records and list items: subjects and\n// bodies contain tabs, newlines and commas, but never these — and every emitted\n// field passes through the `sanitize` handler, which makes the framing safe\n// rather than merely unlikely to break.\nexport const FIELD_SEP = '\\x1f';\nexport const RECORD_SEP = '\\x1e';\nexport const LIST_SEP = '\\x1d';\n\n/** The same three, as AppleScript expressions. Only the list one is written outside this module. */\nconst AS_FIELD_SEP = '(character id 31)';\nconst AS_RECORD_SEP = '(character id 30)';\nexport const AS_LIST_SEP = '(character id 29)';\n\n/**\n * One record: the AppleScript expressions in `fields`, separated and terminated\n * so `splitRecords`/`splitFields` can take them apart again. A field holding a\n * LIST must be built with `my sanitizeList(...)`, which cleans the elements —\n * `sanitize` deliberately leaves the list separator alone.\n */\nexport function asRow(fields: readonly string[]): string {\n    return fields\n        .map(f => `my sanitize(${f})`)\n        .join(` & ${AS_FIELD_SEP} & `) + ` & ${AS_RECORD_SEP}`;\n}\n\n/**\n * The handlers every script relies on, called with `my` from inside a `tell`.\n *\n * `isoDate` produces the zero-padded 'yyyy-MM-dd HH:mm' both platforms return;\n * `sanitize` strips the framing characters; `joinList` and `replaceText` are the\n * text-item-delimiter dance nobody should write twice.\n */\nexport const AS_HANDLERS = `\non pad2(n)\n    set s to (n as integer) as string\n    if (length of s) < 2 then set s to \"0\" & s\n    return s\nend pad2\n\non isoDate(d)\n    if d is missing value then return \"\"\n    return (year of d as string) & \"-\" & pad2(month of d as integer) & \"-\" & pad2(day of d) & \" \" & pad2(hours of d) & \":\" & pad2(minutes of d)\nend isoDate\n\non joinList(lst, sep)\n    set saved to AppleScript's text item delimiters\n    set AppleScript's text item delimiters to sep\n    set out to lst as string\n    set AppleScript's text item delimiters to saved\n    return out\nend joinList\n\non replaceText(t, findWhat, replaceWith)\n    set saved to AppleScript's text item delimiters\n    set AppleScript's text item delimiters to findWhat\n    set parts to text items of t\n    set AppleScript's text item delimiters to replaceWith\n    set out to parts as string\n    set AppleScript's text item delimiters to saved\n    return out\nend replaceText\n\n-- Strips the FIELD and RECORD separators only. The LIST separator is left\n-- alone on purpose: a field may legitimately BE a list.\non sanitize(v)\n    if v is missing value then return \"\"\n    set t to v as string\n    repeat with codePoint in {30, 31}\n        set marker to (character id (codePoint as integer))\n        if t contains marker then set t to my replaceText(t, marker, \" \")\n    end repeat\n    return t\nend sanitize\n\n-- A list field: each element loses all three separators, then they are joined\n-- with the LIST separator that splitList() takes them apart on.\non sanitizeList(lst)\n    set cleaned to {}\n    repeat with item_ in lst\n        set t to my sanitize(item_)\n        set marker to (character id 29)\n        if t contains marker then set t to my replaceText(t, marker, \" \")\n        set end of cleaned to t\n    end repeat\n    return my joinList(cleaned, (character id 29))\nend sanitizeList\n\n-- A list whose positions matter, like an email's attachments: every element is\n-- FOLLOWED by the LIST separator, so an empty element keeps its place and an\n-- empty list stays distinct from a list of one empty name. splitPositionalList()\n-- takes it apart.\non sanitizePositionalList(lst)\n    if (count of lst) is 0 then return \"\"\n    return my sanitizeList(lst) & (character id 29)\nend sanitizePositionalList\n\non insertAboveQuoted(c, ins)\n    if c is missing value then return ins\n    set c to c as string\n    if (length of c) is 0 then return ins\n    -- A reply's own empty paragraph sits inside WordSection1; inserting straight\n    -- after that tag puts the new text where the cursor would be. Anything else\n    -- falls back to just inside <body>. ('at' is a reserved parameter name, so\n    -- the cut point can't be called that.)\n    set cutPoint to my tagEnd(c, \"${WORD_SECTION_ANCHOR}\")\n    if cutPoint is 0 then set cutPoint to my tagEnd(c, \"<body\")\n    if cutPoint is 0 then return ins & c\n    if cutPoint is (length of c) then return c & ins\n    return (text 1 thru cutPoint of c) & ins & (text (cutPoint + 1) thru -1 of c)\nend insertAboveQuoted\n\n-- 'rest' is an AppleScript term, so the remainder can't be called that:\n-- assigning to it compiles and then fails at run time.\non tagEnd(c, marker)\n    set ix to offset of marker in c\n    if ix is 0 then return 0\n    if marker ends with \">\" then return ix + (length of marker) - 1\n    set tailText to text ix thru -1 of c\n    set gt to offset of \">\" in tailText\n    if gt is 0 then return 0\n    return ix + gt - 1\nend tagEnd\n`;\n\n/** A script's output as records, without the trailing empty one. */\nexport function splitRecords(raw: string): string[] {\n    return raw.split(RECORD_SEP).filter(record => record.trim() !== '');\n}\n\n/** One record's fields. */\nexport function splitFields(record: string): string[] {\n    return record.split(FIELD_SEP);\n}\n\n/**\n * A field that carries a list. Empty elements are dropped, so where an index\n * into the list must match Outlook's, the field is written with\n * `sanitizePositionalList` and read with `splitPositionalList` instead.\n */\nexport function splitList(value: string | undefined): string[] {\n    return (value || '').split(LIST_SEP).filter(Boolean);\n}\n\n/**\n * A field written by `sanitizePositionalList`: every element at its position,\n * empty ones included, so index N here is item N+1 of the AppleScript list.\n */\nexport function splitPositionalList(value: string | undefined): string[] {\n    return value ? value.split(LIST_SEP).slice(0, -1) : [];\n}\n\n/** A field by position; a missing field reads as ''. */\nexport function field(fields: readonly string[], index: number): string {\n    return fields[index] ?? '';\n}\n\n/** The fields of a script's first record — the summary a mutation returns ahead of any per-item rows. */\nexport function summaryFields(raw: string): string[] {\n    return splitFields(splitRecords(raw)[0] ?? '');\n}\n\n/** A numeric field, `fallback` when absent or unparsable. */\nexport function intField(fields: readonly string[], index: number, fallback = 0): number {\n    const parsed = Number.parseInt(field(fields, index), 10);\n    return Number.isNaN(parsed) ? fallback : parsed;\n}\n\n/** A boolean field; AppleScript renders booleans as the bare words true/false. */\nexport function boolField(fields: readonly string[], index: number): boolean {\n    return field(fields, index).trim() === 'true';\n}\n\n// ── Batches ──────────────────────────────────────────────────────────────\n//\n// A script acting on a list of ids returns one summary record, then one record\n// per id that failed. The failure row and its decoder sit together so the two\n// can't come to disagree about the field order.\n\n/** The record a batch script appends, inside `on error errText`, for the id `theId` it failed on. */\nexport const ITEM_FAILURE_ROW = asRow(['(theId as string)', 'subj', 'errText']);\n\n/** A batch script's output: the summary record's fields, and the items that failed. */\nexport function splitBatch(raw: string): { summary: string[]; failed: ItemFailure[] } {\n    const [summary = '', ...failures] = splitRecords(raw);\n    return {\n        summary: splitFields(summary),\n        failed: failures.map(record => {\n            const parts = splitFields(record);\n            return { entryId: field(parts, 0), subject: field(parts, 1), error: field(parts, 2) };\n        }),\n    };\n}\n"]}

package/dist/mac/scripts.d.ts

@@ -12,6 +12,12 @@ import type { ItemFailure, MailFolderRef } from '../types';
 export interface MacAccount {
     readonly emailAccount: string;
     readonly folderIds?: Readonly<Record<string, number>>;
+    /**
+     * Set when the profile has no row for the address because macOS refused it:
+     * the sentence to fail with should AppleScript not find the account either,
+     * since the profile is where a mailbox AppleScript can't see would have been.
+     */
+    readonly profileRefusal?: string;
 }
 /** Look an address up in Outlook's profile database, for the folder ids it can add. */
 export declare function resolveMacAccount(emailAccount: string): Promise<MacAccount>;
@@ -52,8 +58,43 @@ export declare function dateProperty(rootId: number): string;
  * AppleScript literal is unreadable, and the parts are known here anyway.
  */
 export declare function macFolderPath(emailAccount: string, rootLabel: string, segments: readonly string[]): string;
-/** The dictionary term for a root, or NOT_IMPLEMENTED naming what was asked. */
-export declare function rootTerm(ref: MailFolderRef, folderLabel?: string): string;
+/**
+ * Walk a folder's `container` chain to the top as the list `chainNames`,
+ * nearest first. Requires `theFolder`, and leaves `cur` on the folder the walk
+ * stopped at: the account's nameless root folder, when it got that far.
+ *
+ * The chain's last element is the folder directly under the account, and an
+ * account can't hold two top-level folders of one name, so comparing that name
+ * is exact.
+ */
+export declare function folderChainSnippet(indent: string): string;
+/**
+ * Bind `acctRootId` to the id of the account's root folder — the folder every
+ * one of its top-level folders sits in — through the account object when the
+ * probe found one, else from the profile database. Requires
+ * `accountLookupSnippet`.
+ *
+ * Never fails: an account neither names a root for leaves `acctRootId` as
+ * `missing value`, which `ownMailGuardSnippet` reads as a root nothing can be
+ * shown to sit under.
+ */
+export declare function accountRootIdSnippet(acct: MacAccount): string;
+/**
+ * Fail unless `theMsg` is the account's own mail — the macOS counterpart of
+ * Windows resolving an id in the account's store. `message id N` resolves
+ * against the application, so an id alone says nothing about whose mailbox the
+ * message is in, and a stale or wrong one can name mail in another.
+ *
+ * Either of two signs is enough, because neither exists for every mailbox:
+ *  - the message's folder chain ends at the account's root folder. Requires
+ *    `folderChainSnippet` (for `cur`) and `accountRootIdSnippet`.
+ *  - the message's own account carries the address. A mailbox the dictionary
+ *    publishes no account object for answers this with `missing value` (see
+ *    profile.ts), which is why the first sign has to be able to stand alone.
+ * An item neither vouches for is refused rather than given the benefit of the
+ * doubt: what follows moves or deletes it.
+ */
+export declare function ownMailGuardSnippet(emailAccount: string, verb: 'delete' | 'move', indent: string): string;
 /**
  * Resolve `scopeFolder` from `targetAcct`: a well-known root walked down through
  * any further segments. Also binds `scopeCreated`.
@@ -81,16 +122,28 @@ export declare function partitionMessageIds(entryIds: readonly string[]): {
     invalid: ItemFailure[];
 };
 /**
- * Resolve `variable` from a message id, or fail as NOT_FOUND. `message id N`
- * resolves against the application, so the message is found wherever it sits.
+ * Bind `theMsg` to a message id, or fail as NOT_FOUND. `message id N` resolves
+ * against the application, so the message is found wherever it sits.
+ */
+export declare function messageLookupSnippet(id: string): string;
+/**
+ * Bind `theMsg` to the id a batch loop holds in `theId`, leaving it `missing
+ * value` when the id no longer resolves — the per-item counterpart of
+ * `messageLookupSnippet`, for a loop that skips or reports a miss and goes on
+ * rather than failing the whole run.
+ */
+export declare function messageByIdSnippet(indent: string): string;
+/**
+ * `theMsg`'s plain-text body as `bodyText`: whole, cut to `maxChars`, or — with
+ * a `maxChars` of 0 — not read at all, the body being the one expensive
+ * property of a message.
  */
-export declare function messageLookupSnippet(id: string, variable?: string): string;
+export declare function bodyTextSnippet(indent: string, maxChars?: number): string;
 /**
- * The sender's display name and address as `sndName` / `sndAddr`. `sender` is a
- * record, and `address of sender of m` doesn't coerce, so the record is bound
- * first.
+ * `theMsg`'s sender as `sndName` / `sndAddr`. `sender` is a record, and
+ * `address of sender of m` doesn't coerce, so the record is bound first.
  */
-export declare function senderSnippet(messageVariable?: string, indent?: string): string;
+export declare function senderSnippet(indent?: string): string;
 /**
  * Everything a reader wants off one message bound to `theMsg`, emitted together
  * with the row it produces (see `messageDetailFields`) so the read order and the
@@ -111,12 +164,12 @@ export declare const MessageDetail: {
     readonly body: 6;
 };
 /**
- * The first recipient's name and address as `sndName` / `sndAddr` — what
- * outgoing mail reports in place of a sender.
+ * `theMsg`'s first recipient as `sndName` / `sndAddr` — what outgoing mail
+ * reports in place of a sender.
  */
-export declare function firstRecipientSnippet(messageVariable?: string, indent?: string): string;
-/** Every address a message was sent to — To, CC and BCC — as the list `addrList`. */
-export declare function allRecipientsSnippet(messageVariable?: string, indent?: string): string;
+export declare function firstRecipientSnippet(indent?: string): string;
+/** Every address `theMsg` was sent to — To, CC and BCC — as the list `addrList`. */
+export declare function allRecipientsSnippet(indent?: string): string;
 /**
  * Recursive, case-insensitive, depth-capped folder search from `startFolder` —
  * the macOS counterpart of the Windows Find-FolderByName.

package/dist/mac/scripts.js

@@ -6,11 +6,15 @@ exports.accountLookupSnippet = accountLookupSnippet;
 exports.rootFolderSnippet = rootFolderSnippet;
 exports.dateProperty = dateProperty;
 exports.macFolderPath = macFolderPath;
-exports.rootTerm = rootTerm;
+exports.folderChainSnippet = folderChainSnippet;
+exports.accountRootIdSnippet = accountRootIdSnippet;
+exports.ownMailGuardSnippet = ownMailGuardSnippet;
 exports.mailScopeSnippet = mailScopeSnippet;
 exports.macMessageId = macMessageId;
 exports.partitionMessageIds = partitionMessageIds;
 exports.messageLookupSnippet = messageLookupSnippet;
+exports.messageByIdSnippet = messageByIdSnippet;
+exports.bodyTextSnippet = bodyTextSnippet;
 exports.senderSnippet = senderSnippet;
 exports.messageDetailSnippet = messageDetailSnippet;
 exports.messageDetailFields = messageDetailFields;
@@ -26,7 +30,12 @@ async function resolveMacAccount(emailAccount) {
     const wanted = emailAccount.trim().toLowerCase();
     const found = (await (0, profile_1.readProfileAccounts)())
         .find(account => account.emailAccount.trim().toLowerCase() === wanted);
-    return found ? { emailAccount, folderIds: found.folderIds } : { emailAccount };
+    if (found)
+        return { emailAccount, folderIds: found.folderIds };
+    // Asked only for an address the profile did not give: the script still looks
+    // for an account object first, so a classic account works without access.
+    const refusal = await (0, profile_1.profileRefusal)();
+    return refusal ? { emailAccount, profileRefusal: refusal } : { emailAccount };
 }
 /**
  * Resolve the account whose address matches into `targetAcct`, inside a
@@ -54,10 +63,18 @@ function accountLookupSnippet(acct, needsAccountObject = false) {
     end try`;
     if (acct.folderIds && !needsAccountObject)
         return probe;
-    const complaint = acct.folderIds
-        ? `${(0, errors_1.failureTag)('INVALID_REQUEST')}Outlook publishes no account object for '${acct.emailAccount}', `
-            + 'so the account a message is sent from cannot be set. Its folders can be read; mail cannot be composed from it.'
-        : `${(0, errors_1.failureTag)('ACCOUNT_NOT_FOUND')}Account '${acct.emailAccount}' not found in Outlook.`;
+    let complaint;
+    if (acct.folderIds) {
+        complaint = `${(0, errors_1.failureTag)('INVALID_REQUEST')}Outlook publishes no account object for '${acct.emailAccount}', `
+            + 'so the account a message is sent from cannot be set. Its folders can be read; mail cannot be composed from it.';
+    }
+    else if (acct.profileRefusal) {
+        complaint = `${(0, errors_1.failureTag)('PERMISSION_DENIED')}Account '${acct.emailAccount}' is not one Outlook's scripting `
+            + `can see. ${acct.profileRefusal}`;
+    }
+    else {
+        complaint = `${(0, errors_1.failureTag)('ACCOUNT_NOT_FOUND')}Account '${acct.emailAccount}' not found in Outlook.`;
+    }
     return `${probe}
     if targetAcct is missing value then error ${(0, run_1.asString)(complaint)}`;
 }
@@ -113,6 +130,84 @@ function dateProperty(rootId) {
 function macFolderPath(emailAccount, rootLabel, segments) {
     return ['\\\\' + emailAccount, rootLabel, ...segments].join('\\');
 }
+/**
+ * Walk a folder's `container` chain to the top as the list `chainNames`,
+ * nearest first. Requires `theFolder`, and leaves `cur` on the folder the walk
+ * stopped at: the account's nameless root folder, when it got that far.
+ *
+ * The chain's last element is the folder directly under the account, and an
+ * account can't hold two top-level folders of one name, so comparing that name
+ * is exact.
+ */
+function folderChainSnippet(indent) {
+    return `${indent}set chainNames to {}
+${indent}set cur to theFolder
+${indent}set guard to 0
+${indent}repeat while cur is not missing value and guard < 25
+${indent}    -- The account's root folder has a name of missing value, and coercing
+${indent}    -- that yields the STRING "missing value" — so test before coercing.
+${indent}    set rawName to missing value
+${indent}    try
+${indent}        set rawName to name of cur
+${indent}    end try
+${indent}    if rawName is missing value then exit repeat
+${indent}    set nm to rawName as string
+${indent}    if nm is "" then exit repeat
+${indent}    set end of chainNames to nm
+${indent}    set nextUp to missing value
+${indent}    try
+${indent}        set nextUp to container of cur
+${indent}    end try
+${indent}    set cur to nextUp
+${indent}    set guard to guard + 1
+${indent}end repeat`;
+}
+/**
+ * Bind `acctRootId` to the id of the account's root folder — the folder every
+ * one of its top-level folders sits in — through the account object when the
+ * probe found one, else from the profile database. Requires
+ * `accountLookupSnippet`.
+ *
+ * Never fails: an account neither names a root for leaves `acctRootId` as
+ * `missing value`, which `ownMailGuardSnippet` reads as a root nothing can be
+ * shown to sit under.
+ */
+function accountRootIdSnippet(acct) {
+    const profiled = acct.folderIds?.['root folder'];
+    return `    set acctRootId to missing value
+    try
+        if targetAcct is not missing value then set acctRootId to id of (root folder of targetAcct)
+    end try` + (profiled === undefined ? '' : `
+    if acctRootId is missing value then set acctRootId to ${(0, run_1.asInt)(profiled)}`);
+}
+/**
+ * Fail unless `theMsg` is the account's own mail — the macOS counterpart of
+ * Windows resolving an id in the account's store. `message id N` resolves
+ * against the application, so an id alone says nothing about whose mailbox the
+ * message is in, and a stale or wrong one can name mail in another.
+ *
+ * Either of two signs is enough, because neither exists for every mailbox:
+ *  - the message's folder chain ends at the account's root folder. Requires
+ *    `folderChainSnippet` (for `cur`) and `accountRootIdSnippet`.
+ *  - the message's own account carries the address. A mailbox the dictionary
+ *    publishes no account object for answers this with `missing value` (see
+ *    profile.ts), which is why the first sign has to be able to stand alone.
+ * An item neither vouches for is refused rather than given the benefit of the
+ * doubt: what follows moves or deletes it.
+ */
+function ownMailGuardSnippet(emailAccount, verb, indent) {
+    return `${indent}set inAccount to false
+${indent}try
+${indent}    if acctRootId is not missing value and (id of cur) is acctRootId then set inAccount to true
+${indent}end try
+${indent}if not inAccount then
+${indent}    try
+${indent}        set ownerAddr to email address of (account of theMsg)
+${indent}        if ownerAddr is not missing value and (ownerAddr as string) is ${(0, run_1.asString)(emailAccount)} then set inAccount to true
+${indent}    end try
+${indent}end if
+${indent}if not inAccount then error "item is in another mailbox, not this account - refusing to ${verb}"`;
+}
 /** The dictionary term for a root, or NOT_IMPLEMENTED naming what was asked. */
 function rootTerm(ref, folderLabel = '') {
     const term = exports.MAC_ROOT_TERMS[ref.rootId];
@@ -188,27 +283,55 @@ function partitionMessageIds(entryIds) {
     return { valid, invalid };
 }
 /**
- * Resolve `variable` from a message id, or fail as NOT_FOUND. `message id N`
- * resolves against the application, so the message is found wherever it sits.
+ * Bind `theMsg` to a message id, or fail as NOT_FOUND. `message id N` resolves
+ * against the application, so the message is found wherever it sits.
  */
-function messageLookupSnippet(id, variable = 'theMsg') {
+function messageLookupSnippet(id) {
     const complaint = `${(0, errors_1.failureTag)('NOT_FOUND', 'email')}No email found for message id '${id}'. It may have been deleted - list the mail again for a current id.`;
-    return `    set ${variable} to missing value
+    return `    set theMsg to missing value
     try
-        set ${variable} to message id ${id}
+        set theMsg to message id ${id}
     end try
-    if ${variable} is missing value then error ${(0, run_1.asString)(complaint)}`;
+    if theMsg is missing value then error ${(0, run_1.asString)(complaint)}`;
 }
 /**
- * The sender's display name and address as `sndName` / `sndAddr`. `sender` is a
- * record, and `address of sender of m` doesn't coerce, so the record is bound
- * first.
+ * Bind `theMsg` to the id a batch loop holds in `theId`, leaving it `missing
+ * value` when the id no longer resolves — the per-item counterpart of
+ * `messageLookupSnippet`, for a loop that skips or reports a miss and goes on
+ * rather than failing the whole run.
  */
-function senderSnippet(messageVariable = 'theMsg', indent = '    ') {
+function messageByIdSnippet(indent) {
+    return `${indent}set theMsg to missing value
+${indent}try
+${indent}    set theMsg to message id theId
+${indent}end try`;
+}
+/**
+ * `theMsg`'s plain-text body as `bodyText`: whole, cut to `maxChars`, or — with
+ * a `maxChars` of 0 — not read at all, the body being the one expensive
+ * property of a message.
+ */
+function bodyTextSnippet(indent, maxChars) {
+    if (maxChars === 0)
+        return `${indent}set bodyText to ""`;
+    const read = `${indent}set bodyText to ""
+${indent}try
+${indent}    set bodyText to (plain text content of theMsg) as string
+${indent}end try`;
+    if (maxChars === undefined)
+        return read;
+    return `${read}
+${indent}if (length of bodyText) > ${(0, run_1.asInt)(maxChars)} then set bodyText to text 1 thru ${(0, run_1.asInt)(maxChars)} of bodyText`;
+}
+/**
+ * `theMsg`'s sender as `sndName` / `sndAddr`. `sender` is a record, and
+ * `address of sender of m` doesn't coerce, so the record is bound first.
+ */
+function senderSnippet(indent = '    ') {
     return `${indent}set sndName to ""
 ${indent}set sndAddr to ""
 ${indent}try
-${indent}    set snd to sender of ${messageVariable}
+${indent}    set snd to sender of theMsg
 ${indent}    try
 ${indent}        set sndAddr to (address of snd) as string
 ${indent}    end try
@@ -228,7 +351,7 @@ function messageDetailSnippet(withBody = false, indent = '    ') {
 ${indent}try
 ${indent}    set subj to (subject of theMsg) as string
 ${indent}end try
-${senderSnippet('theMsg', indent)}
+${senderSnippet(indent)}
 ${indent}set recvd to ""
 ${indent}try
 ${indent}    set recvd to my isoDate(time received of theMsg)
@@ -240,15 +363,11 @@ ${indent}end try
 ${indent}set attNames to {}
 ${indent}try
 ${indent}    set attNames to name of every attachment of theMsg
-${indent}end try` + (withBody ? `
-${indent}set bodyText to ""
-${indent}try
-${indent}    set bodyText to (plain text content of theMsg) as string
-${indent}end try` : '');
+${indent}end try` + (withBody ? `\n${bodyTextSnippet(indent)}` : '');
 }
 /** The fields `messageDetailSnippet` fills, in row order — see `MessageDetail`. */
 function messageDetailFields(withBody = false) {
-    const fields = ['(id of theMsg as string)', 'subj', 'sndName', 'sndAddr', 'recvd', 'my sanitizeList(attNames)'];
+    const fields = ['(id of theMsg as string)', 'subj', 'sndName', 'sndAddr', 'recvd', 'my sanitizePositionalList(attNames)'];
     if (withBody)
         fields.push('bodyText');
     return fields;
@@ -264,14 +383,14 @@ exports.MessageDetail = {
     body: 6,
 };
 /**
- * The first recipient's name and address as `sndName` / `sndAddr` — what
- * outgoing mail reports in place of a sender.
+ * `theMsg`'s first recipient as `sndName` / `sndAddr` — what outgoing mail
+ * reports in place of a sender.
  */
-function firstRecipientSnippet(messageVariable = 'theMsg', indent = '    ') {
+function firstRecipientSnippet(indent = '    ') {
     return `${indent}set sndName to ""
 ${indent}set sndAddr to ""
 ${indent}try
-${indent}    set rcps to to recipients of ${messageVariable}
+${indent}    set rcps to to recipients of theMsg
 ${indent}    if (count of rcps) > 0 then
 ${indent}        set ea to email address of (item 1 of rcps)
 ${indent}        try
@@ -283,11 +402,11 @@ ${indent}        end try
 ${indent}    end if
 ${indent}end try`;
 }
-/** Every address a message was sent to — To, CC and BCC — as the list `addrList`. */
-function allRecipientsSnippet(messageVariable = 'theMsg', indent = '    ') {
+/** Every address `theMsg` was sent to — To, CC and BCC — as the list `addrList`. */
+function allRecipientsSnippet(indent = '    ') {
     return `${indent}set addrList to {}
 ${indent}try
-${indent}    repeat with r in (every recipient of ${messageVariable})
+${indent}    repeat with r in (every recipient of theMsg)
 ${indent}        try
 ${indent}            -- The record is bound before its field is read: a nested
 ${indent}            -- 'address of (email address of r)' doesn't coerce, and fails