@zaclinley/dsh-mailharbor 0.16.0 → 0.17.0

package/lib/index.js

@@ -1209,6 +1209,18 @@ var MailDatabase = class {
       where.push("e.date >= ?");
       params.push(query.since);
     }
+    if (typeof query.before === "string" && query.before !== "") {
+      where.push("e.date < ?");
+      params.push(query.before.length === 10 ? `${query.before} 23:59:59` : query.before);
+    }
+    if (typeof query.from === "string" && query.from.trim() !== "") {
+      const needle = `%${query.from.trim().toLowerCase()}%`;
+      where.push("(lower(e.from_addr) LIKE ? OR lower(e.from_name) LIKE ?)");
+      params.push(needle, needle);
+    }
+    if (query.attachmentsOnly === true) {
+      where.push("EXISTS (SELECT 1 FROM attachments a WHERE a.email_id = e.id)");
+    }
     if (query.unread !== void 0) {
       const mids = query.unread.mids.slice(0, 500);
       const ids = query.unread.ids.slice(0, 500);
@@ -2768,7 +2780,7 @@ ${conversation.trim()}
 }
 
 // src/host/version.ts
-var VERSION = "0.16.0";
+var VERSION = "0.17.0";
 
 // src/host/api.ts
 init_smtp();
@@ -2872,11 +2884,19 @@ function buildRouter(runtime) {
       return { ...items, offset, limit };
     }
     const unreadOnly = url.searchParams.get("unread") === "1";
+    const from = url.searchParams.get("from") ?? "";
+    const since = url.searchParams.get("since") ?? "";
+    const before = url.searchParams.get("before") ?? "";
+    const attachmentsOnly = url.searchParams.get("attachment") === "1";
     const page = runtime.database(account).list({
       mailbox: mailbox === "" ? "all" : mailbox,
       query,
       offset,
       limit,
+      ...from.trim() === "" ? {} : { from },
+      ...since === "" ? {} : { since },
+      ...before === "" ? {} : { before },
+      ...attachmentsOnly ? { attachmentsOnly: true } : {},
       ...unreadOnly ? { unread: unreadKeys(runtime, account) } : {}
     });
     return { ...page, items: page.items.map((item) => localSummary(runtime, account, item)) };
@@ -3107,14 +3127,26 @@ function buildRouter(runtime) {
       const part = Number(url.searchParams.get("part") ?? 0);
       const provider = runtime.provider(account);
       const file2 = await provider.attachment(mailbox, uid, part);
-      writeAttachment(res, file2.filename, file2.contentType, Buffer.from(file2.dataBase64, "base64"));
+      writeAttachment(
+        res,
+        file2.filename,
+        file2.contentType,
+        Buffer.from(file2.dataBase64, "base64"),
+        canPreviewInline(file2.contentType) && url.searchParams.get("inline") === "1"
+      );
       return void 0;
     }
     const emailId = Number(url.searchParams.get("emailId") ?? 0);
     const attachmentId = Number(url.searchParams.get("attachmentId") ?? 0);
     const file = runtime.database(account).attachment(emailId, attachmentId);
     if (file === void 0) throw new HttpError(404, "\u9644\u4EF6\u4E0D\u5B58\u5728");
-    writeAttachment(res, file.filename, file.contentType, Buffer.from(file.data));
+    writeAttachment(
+      res,
+      file.filename,
+      file.contentType,
+      Buffer.from(file.data),
+      canPreviewInline(file.contentType) && url.searchParams.get("inline") === "1"
+    );
     return void 0;
   });
   router.get("/drafts", ({ url }) => {
@@ -3998,13 +4030,24 @@ async function listServer(runtime, account, mailbox, query, limit, offset = 0) {
   );
   return { items, total: result.total };
 }
-function writeAttachment(res, filename, contentType, data) {
+function canPreviewInline(contentType) {
+  const type = contentType.toLowerCase();
+  return type.startsWith("image/") && type !== "image/svg+xml" || type === "application/pdf" || type === "text/plain" || type === "text/csv" || type === "text/markdown" || type === "application/json";
+}
+function writeAttachment(res, filename, contentType, data, inline = false) {
   res.statusCode = 200;
   res.setHeader("content-type", contentType);
   res.setHeader("content-length", String(data.length));
-  res.setHeader("content-disposition", `attachment; filename*=UTF-8''${encodeURIComponent(filename)}`);
+  res.setHeader(
+    "content-disposition",
+    `${inline ? "inline" : "attachment"}; filename*=UTF-8''${encodeURIComponent(filename)}`
+  );
   res.setHeader("cache-control", "no-store");
   res.setHeader("x-content-type-options", "nosniff");
+  res.setHeader(
+    "content-security-policy",
+    "sandbox; default-src 'none'; img-src 'self' data:; style-src 'unsafe-inline'"
+  );
   res.end(data);
 }
 function asObject(value) {