@fluxmail/core 0.21.0 → 0.22.0

package/dist/quotedHtml.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Whether `html` would nest deeper than `limit`, in one linear pass. An end tag closes the nearest
+ * open element of its name and everything inside it, and one that names no open element is ignored,
+ * as a parser does. Tags inside comments and attributes count too, so this can only overestimate.
+ */
+export declare function exceedsNestingDepth(html: string, limit?: number): boolean;
+/**
+ * The original's HTML reduced to safe formatting, with every element it opens closed again, or
+ * undefined when it nests too deeply to parse safely.
+ */
+export declare function sanitizeQuotedHtml(html: string): string | undefined;
+//# sourceMappingURL=quotedHtml.d.ts.map

package/dist/quotedHtml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quotedHtml.d.ts","sourceRoot":"","sources":["../src/quotedHtml.ts"],"names":[],"mappings":"AA6PA;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,SAAoB,GAAG,OAAO,CAoBpF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAoCnE"}

package/dist/quotedHtml.js

@@ -0,0 +1,324 @@
+import { Parser } from 'htmlparser2';
+// Mail Fluxmail quotes or forwards comes from other people, so its HTML is rebuilt from an allowlist before
+// it goes out under the user's name. Tags are balanced, so the original can't close the quote and put text
+// outside it, and nothing in it can run, load a document or restyle the rest of the message.
+const ALLOWED_TAGS = new Set([
+    'a',
+    'abbr',
+    'address',
+    'b',
+    'bdi',
+    'bdo',
+    'big',
+    'blockquote',
+    'br',
+    'caption',
+    'center',
+    'cite',
+    'code',
+    'col',
+    'colgroup',
+    'dd',
+    'del',
+    'dfn',
+    'div',
+    'dl',
+    'dt',
+    'em',
+    'figcaption',
+    'figure',
+    'font',
+    'h1',
+    'h2',
+    'h3',
+    'h4',
+    'h5',
+    'h6',
+    'hr',
+    'i',
+    'img',
+    'ins',
+    'kbd',
+    'li',
+    'mark',
+    'ol',
+    'p',
+    'pre',
+    'q',
+    's',
+    'samp',
+    'small',
+    'span',
+    'strike',
+    'strong',
+    'sub',
+    'sup',
+    'table',
+    'tbody',
+    'td',
+    'tfoot',
+    'th',
+    'thead',
+    'time',
+    'tr',
+    'tt',
+    'u',
+    'ul',
+    'var',
+    'wbr',
+]);
+const VOID_TAGS = new Set(['br', 'col', 'hr', 'img', 'wbr']);
+// Content of these elements is dropped along with the tags.
+const DROPPED_WITH_CONTENT = new Set([
+    'applet',
+    'audio',
+    'embed',
+    'frame',
+    'frameset',
+    'head',
+    'iframe',
+    'math',
+    'noembed',
+    'noframes',
+    'noscript',
+    'object',
+    'script',
+    'select',
+    'style',
+    'svg',
+    'template',
+    'textarea',
+    'title',
+    'video',
+]);
+const ALLOWED_ATTRIBUTES = new Set([
+    'align',
+    'alt',
+    'bgcolor',
+    'border',
+    'cellpadding',
+    'cellspacing',
+    'color',
+    'colspan',
+    'dir',
+    'face',
+    'height',
+    'href',
+    'lang',
+    'rowspan',
+    'size',
+    'src',
+    'style',
+    'title',
+    'valign',
+    'width',
+]);
+// Style properties that could move quoted content over the user's reply or load something.
+// Formatting properties a quote may keep. Anything that could move the quote over the reply, such as
+// position, transform or a negative margin, is left out.
+const ALLOWED_STYLE = new Set([
+    'background-color',
+    'border-collapse',
+    'border-radius',
+    'border-spacing',
+    'color',
+    'direction',
+    'display',
+    'font',
+    'font-family',
+    'font-size',
+    'font-style',
+    'font-variant',
+    'font-weight',
+    'height',
+    'letter-spacing',
+    'line-height',
+    'list-style-type',
+    'margin',
+    'margin-bottom',
+    'margin-left',
+    'margin-right',
+    'margin-top',
+    'max-width',
+    'min-width',
+    'overflow-wrap',
+    'padding',
+    'padding-bottom',
+    'padding-left',
+    'padding-right',
+    'padding-top',
+    'table-layout',
+    'text-align',
+    'text-decoration',
+    'text-transform',
+    'vertical-align',
+    'white-space',
+    'width',
+    'word-break',
+    'word-wrap',
+]);
+const BORDER_STYLE = /^border(?:-(?:top|right|bottom|left))?(?:-(?:color|style|width))?$/;
+// Color functions are the only CSS functions kept, so calc(), var() and url() can't hide a value.
+const ALLOWED_FUNCTIONS = new Set(['rgb', 'rgba', 'hsl', 'hsla']);
+function escapeText(value) {
+    return value.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+}
+function escapeAttribute(value) {
+    return escapeText(value).replace(/"/g, '&quot;');
+}
+function safeUrl(tag, name, value) {
+    const url = value.trim();
+    if (name === 'href')
+        return /^(?:https?:|mailto:|#)/i.test(url) ? url : undefined;
+    if (tag === 'img')
+        return /^(?:https?:|cid:|data:image\/(?:png|gif|jpe?g|webp);)/i.test(url) ? url : undefined;
+    return undefined;
+}
+function safeDeclaration(declaration) {
+    const separator = declaration.indexOf(':');
+    if (separator < 1)
+        return undefined;
+    const property = declaration.slice(0, separator).trim().toLowerCase();
+    const value = declaration
+        .slice(separator + 1)
+        .replace(/!\s*important\s*$/i, '')
+        .trim();
+    if (!value || (!ALLOWED_STYLE.has(property) && !BORDER_STYLE.test(property)))
+        return undefined;
+    // Escapes and comments could spell a different property or value than the one checked here.
+    if (/[\\]|\/\*/.test(value) || !/^[\w\s#%.,'"/()+-]*$/.test(value))
+        return undefined;
+    for (const [, name] of value.matchAll(/([\w-]+)\s*\(/g)) {
+        if (!ALLOWED_FUNCTIONS.has(name.toLowerCase()))
+            return undefined;
+    }
+    // A negative margin can pull the quote over the reply above it.
+    if (property.startsWith('margin') && value.includes('-'))
+        return undefined;
+    return `${property}:${value}`;
+}
+function safeStyle(value) {
+    const declarations = value
+        .split(';')
+        .map((declaration) => safeDeclaration(declaration))
+        .filter((declaration) => declaration !== undefined);
+    return declarations.length ? declarations.join('; ') : undefined;
+}
+function attributes(tag, attribs) {
+    let out = '';
+    for (const [name, value] of Object.entries(attribs)) {
+        if (!ALLOWED_ATTRIBUTES.has(name))
+            continue;
+        const safe = name === 'href' || name === 'src' ? safeUrl(tag, name, value) : name === 'style' ? safeStyle(value) : value;
+        if (safe !== undefined)
+            out += ` ${name}="${escapeAttribute(safe)}"`;
+    }
+    return tag === 'a' && attribs.href !== undefined && out.includes(' href=')
+        ? `${out} target="_blank" rel="noopener noreferrer"`
+        : out;
+}
+// Real email nests a few dozen levels. The parser takes quadratic time on deeper nesting, so deeper
+// HTML isn't parsed at all.
+const MAX_NESTING_DEPTH = 500;
+// Elements that never stay open, either void or closed by their next sibling, so they don't add depth.
+const NON_NESTING_TAGS = new Set([
+    ...VOID_TAGS,
+    'area',
+    'base',
+    'embed',
+    'input',
+    'link',
+    'meta',
+    'param',
+    'source',
+    'track',
+    'p',
+    'li',
+    'dt',
+    'dd',
+    'td',
+    'th',
+    'tr',
+    'tbody',
+    'thead',
+    'tfoot',
+    'option',
+]);
+/**
+ * Whether `html` would nest deeper than `limit`, in one linear pass. An end tag closes the nearest
+ * open element of its name and everything inside it, and one that names no open element is ignored,
+ * as a parser does. Tags inside comments and attributes count too, so this can only overestimate.
+ */
+export function exceedsNestingDepth(html, limit = MAX_NESTING_DEPTH) {
+    const stack = [];
+    const open = new Map();
+    for (const [, closing, rawName] of html.matchAll(/<(\/?)([a-z][a-z0-9:-]*)/gi)) {
+        const name = rawName.toLowerCase();
+        if (closing) {
+            if (!open.get(name))
+                continue;
+            let popped;
+            do {
+                popped = stack.pop();
+                open.set(popped, open.get(popped) - 1);
+            } while (popped !== name);
+            continue;
+        }
+        if (NON_NESTING_TAGS.has(name))
+            continue;
+        stack.push(name);
+        open.set(name, (open.get(name) ?? 0) + 1);
+        if (stack.length > limit)
+            return true;
+    }
+    return false;
+}
+/**
+ * The original's HTML reduced to safe formatting, with every element it opens closed again, or
+ * undefined when it nests too deeply to parse safely.
+ */
+export function sanitizeQuotedHtml(html) {
+    if (exceedsNestingDepth(html))
+        return undefined;
+    let out = '';
+    const open = [];
+    let dropping = 0;
+    const parser = new Parser({
+        onopentag(name, attribs) {
+            if (dropping || DROPPED_WITH_CONTENT.has(name)) {
+                if (!VOID_TAGS.has(name))
+                    dropping++;
+                return;
+            }
+            if (!ALLOWED_TAGS.has(name))
+                return;
+            out += `<${name}${attributes(name, attribs)}>`;
+            if (!VOID_TAGS.has(name))
+                open.push(name);
+        },
+        ontext(text) {
+            if (!dropping)
+                out += escapeText(text);
+        },
+        onclosetag(name) {
+            if (dropping) {
+                if (!VOID_TAGS.has(name))
+                    dropping--;
+                return;
+            }
+            if (VOID_TAGS.has(name) || !ALLOWED_TAGS.has(name))
+                return;
+            const index = open.lastIndexOf(name);
+            if (index === -1)
+                return;
+            while (open.length > index)
+                out += `</${open.pop()}>`;
+        },
+    }, { decodeEntities: true, lowerCaseTags: true, lowerCaseAttributeNames: true, recognizeSelfClosing: true });
+    parser.write(html);
+    parser.end();
+    while (open.length)
+        out += `</${open.pop()}>`;
+    return out;
+}
+//# sourceMappingURL=quotedHtml.js.map

package/dist/quotedHtml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quotedHtml.js","sourceRoot":"","sources":["../src/quotedHtml.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,4GAA4G;AAC5G,2GAA2G;AAC3G,6FAA6F;AAE7F,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,GAAG;IACH,MAAM;IACN,SAAS;IACT,GAAG;IACH,KAAK;IACL,KAAK;IACL,KAAK;IACL,YAAY;IACZ,IAAI;IACJ,SAAS;IACT,QAAQ;IACR,MAAM;IACN,MAAM;IACN,KAAK;IACL,UAAU;IACV,IAAI;IACJ,KAAK;IACL,KAAK;IACL,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,YAAY;IACZ,QAAQ;IACR,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,GAAG;IACH,KAAK;IACL,KAAK;IACL,KAAK;IACL,IAAI;IACJ,MAAM;IACN,IAAI;IACJ,GAAG;IACH,KAAK;IACL,GAAG;IACH,GAAG;IACH,MAAM;IACN,OAAO;IACP,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,KAAK;IACL,OAAO;IACP,OAAO;IACP,IAAI;IACJ,OAAO;IACP,IAAI;IACJ,OAAO;IACP,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,GAAG;IACH,IAAI;IACJ,KAAK;IACL,KAAK;CACN,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAE7D,4DAA4D;AAC5D,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,QAAQ;IACR,OAAO;IACP,OAAO;IACP,OAAO;IACP,UAAU;IACV,MAAM;IACN,QAAQ;IACR,MAAM;IACN,SAAS;IACT,UAAU;IACV,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,KAAK;IACL,UAAU;IACV,UAAU;IACV,OAAO;IACP,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,OAAO;IACP,KAAK;IACL,SAAS;IACT,QAAQ;IACR,aAAa;IACb,aAAa;IACb,OAAO;IACP,SAAS;IACT,KAAK;IACL,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,SAAS;IACT,MAAM;IACN,KAAK;IACL,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;CACR,CAAC,CAAC;AAEH,2FAA2F;AAC3F,qGAAqG;AACrG,yDAAyD;AACzD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,kBAAkB;IAClB,iBAAiB;IACjB,eAAe;IACf,gBAAgB;IAChB,OAAO;IACP,WAAW;IACX,SAAS;IACT,MAAM;IACN,aAAa;IACb,WAAW;IACX,YAAY;IACZ,cAAc;IACd,aAAa;IACb,QAAQ;IACR,gBAAgB;IAChB,aAAa;IACb,iBAAiB;IACjB,QAAQ;IACR,eAAe;IACf,aAAa;IACb,cAAc;IACd,YAAY;IACZ,WAAW;IACX,WAAW;IACX,eAAe;IACf,SAAS;IACT,gBAAgB;IAChB,cAAc;IACd,eAAe;IACf,aAAa;IACb,cAAc;IACd,YAAY;IACZ,iBAAiB;IACjB,gBAAgB;IAChB,gBAAgB;IAChB,aAAa;IACb,OAAO;IACP,YAAY;IACZ,WAAW;CACZ,CAAC,CAAC;AACH,MAAM,YAAY,GAAG,oEAAoE,CAAC;AAC1F,kGAAkG;AAClG,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAElE,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,IAAY,EAAE,KAAa;IACvD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,wDAAwD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/G,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,WAAmB;IAC1C,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtE,MAAM,KAAK,GAAG,WAAW;SACtB,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;SACpB,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;SACjC,IAAI,EAAE,CAAC;IACV,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/F,4FAA4F;IAC5F,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACrF,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAK,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,SAAS,CAAC;IACpE,CAAC;IACD,gEAAgE;IAChE,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3E,OAAO,GAAG,QAAQ,IAAI,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,YAAY,GAAG,KAAK;SACvB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;SAClD,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC;IACtD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,OAA+B;IAC9D,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC5C,MAAM,IAAI,GACR,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC9G,IAAI,IAAI,KAAK,SAAS;YAAE,GAAG,IAAI,IAAI,IAAI,KAAK,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;IACvE,CAAC;IACD,OAAO,GAAG,KAAK,GAAG,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACxE,CAAC,CAAC,GAAG,GAAG,4CAA4C;QACpD,CAAC,CAAC,GAAG,CAAC;AACV,CAAC;AAED,oGAAoG;AACpG,4BAA4B;AAC5B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,uGAAuG;AACvG,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,GAAG,SAAS;IACZ,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,QAAQ;IACR,OAAO;IACP,GAAG;IACH,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,OAAO;IACP,OAAO;IACP,OAAO;IACP,QAAQ;CACT,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAK,GAAG,iBAAiB;IACzE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,GAAG,OAAQ,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC9B,IAAI,MAA0B,CAAC;YAC/B,GAAG,CAAC;gBACF,MAAM,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;gBACtB,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAE,GAAG,CAAC,CAAC,CAAC;YAC1C,CAAC,QAAQ,MAAM,KAAK,IAAI,EAAE;YAC1B,SAAS;QACX,CAAC;QACD,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACzC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK;YAAE,OAAO,IAAI,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,mBAAmB,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;QACE,SAAS,CAAC,IAAI,EAAE,OAAO;YACrB,IAAI,QAAQ,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,QAAQ,EAAE,CAAC;gBACrC,OAAO;YACT,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO;YACpC,GAAG,IAAI,IAAI,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;YAC/C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,CAAC,IAAI;YACT,IAAI,CAAC,QAAQ;gBAAE,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QACD,UAAU,CAAC,IAAI;YACb,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,QAAQ,EAAE,CAAC;gBACrC,OAAO;YACT,CAAC;YACD,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,KAAK,KAAK,CAAC,CAAC;gBAAE,OAAO;YACzB,OAAO,IAAI,CAAC,MAAM,GAAG,KAAK;gBAAE,GAAG,IAAI,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC;QACxD,CAAC;KACF,EACD,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,CACzG,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnB,MAAM,CAAC,GAAG,EAAE,CAAC;IACb,OAAO,IAAI,CAAC,MAAM;QAAE,GAAG,IAAI,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC;IAC9C,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/reply.d.ts

@@ -1,4 +1,4 @@
-import type { EmailAddress, Message, SendAsIdentity } from './types.js';
+import type { AttachmentInput, AttachmentMeta, EmailAddress, Message, MessageBody, SendAsIdentity } from './types.js';
 export interface ReplyRecipients {
     to: EmailAddress[];
     cc: EmailAddress[];
@@ -20,9 +20,50 @@ export declare function formatAddressList(addrs: EmailAddress[] | undefined): st
  * addressed to, falling back to the primary identity.
  */
 export declare function selectReplySender(original: Message, identities: SendAsIdentity[]): SendAsIdentity;
-/** The body of a forward: an optional comment, the original's headers, then its text and HTML. */
-export declare function buildForwardBody(original: Message, comment?: string): {
+export interface ForwardBodyOptions {
+    /** IANA time zone for the forwarded message's date. Defaults to UTC. */
+    timeZone?: string;
+}
+/**
+ * The body of a forward, as Gmail writes one: an optional comment, a "Forwarded message" header
+ * with the original's sender, date, subject and recipients, then the original's text and sanitized
+ * HTML.
+ */
+export declare function buildForwardBody(original: Message, comment?: string, options?: ForwardBodyOptions): {
     text?: string;
     html?: string;
 };
+/** Whether `timeZone` is an IANA time zone name the runtime can format dates in. */
+export declare function isValidTimeZone(timeZone: string): boolean;
+export interface ReplyBodyOptions {
+    /** Whether a quoted body is within the caller's size limits. */
+    fits?: (body: MessageBody) => boolean;
+    /** IANA time zone for the date in the "wrote:" line. Defaults to UTC. */
+    timeZone?: string;
+}
+/**
+ * The body of a reply: the new content, then an "On <date> <sender> wrote:" line, as Gmail writes it,
+ * and the quoted original. A plain-text reply to an HTML original also gets an HTML part. Otherwise
+ * only the parts the reply has are quoted, and a quote of the same original
+ * that Fluxmail added earlier is replaced. The original's HTML is sanitized first. If the quote is
+ * too large, the HTML part quotes the original's text instead, then the text is shortened; if even a
+ * short quote doesn't fit, the body is returned unquoted.
+ */
+export declare function buildReplyBody(original: Message, body: MessageBody, options?: ReplyBodyOptions): MessageBody;
+export interface QuotedImageOptions {
+    /** Attachments the message already has. An image with the same Content-ID isn't added again. */
+    attachments?: AttachmentInput[];
+    /** Most attachments the message may have in total. */
+    maxCount: number;
+    /** Most decoded attachment bytes the message may have in total. */
+    maxBytes: number;
+    /** The attachment's content, or undefined to leave it out, for example because it is over `maxBytes`. */
+    download: (attachment: AttachmentMeta, maxBytes: number) => Promise<Uint8Array | undefined>;
+}
+/**
+ * The original's attachments that `html` shows through cid: references, such as images embedded in a
+ * quoted or forwarded message, ready to send with it. Without them those images show as missing.
+ * An image that would go over the limits is left out, so the message still goes out.
+ */
+export declare function quotedImages(original: Message, html: string | undefined, options: QuotedImageOptions): Promise<AttachmentInput[]>;
 //# sourceMappingURL=reply.d.ts.map

package/dist/reply.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reply.d.ts","sourceRoot":"","sources":["../src/reply.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAExE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,YAAY,EAAE,CAAC;IACnB,EAAE,EAAE,YAAY,EAAE,CAAC;CACpB;AAeD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,OAAO,EACjB,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,EAC/B,QAAQ,EAAE,OAAO,GAChB,eAAe,CAejB;AAED,+CAA+C;AAC/C,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,gDAAgD;AAChD,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,CAErD;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,SAAS,GAAG,MAAM,CAE3E;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,cAAc,CASjG;AAMD,kGAAkG;AAClG,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAwBtG"}
+{"version":3,"file":"reply.d.ts","sourceRoot":"","sources":["../src/reply.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEtH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,YAAY,EAAE,CAAC;IACnB,EAAE,EAAE,YAAY,EAAE,CAAC;CACpB;AAeD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,OAAO,EACjB,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,EAC/B,QAAQ,EAAE,OAAO,GAChB,eAAe,CAejB;AAED,+CAA+C;AAC/C,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,gDAAgD;AAChD,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,CAErD;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,SAAS,GAAG,MAAM,CAE3E;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,cAAc,CASjG;AAWD,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,OAAO,EACjB,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,GAAE,kBAAuB,GAC/B;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAkClC;AAED,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAOzD;AA2JD,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC;IACtC,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,GAAE,gBAAqB,GAAG,WAAW,CAyDhH;AAED,MAAM,WAAW,kBAAkB;IACjC,gGAAgG;IAChG,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;IAChC,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC;IACjB,yGAAyG;IACzG,QAAQ,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;CAC7F;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,OAAO,EACjB,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,eAAe,EAAE,CAAC,CA0B5B"}