imapflow 2.0.5 → 2.0.7

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [2.0.7](https://github.com/postalsys/imapflow/compare/v2.0.6...v2.0.7) (2026-09-25)
+
+
+### Bug Fixes
+
+* **fetch:** keep body sections a server sends as quoted strings ([a4f2f18](https://github.com/postalsys/imapflow/commit/a4f2f181f978dea9e6c94195c1f4ddbe54d52fc7)), closes [#403](https://github.com/postalsys/imapflow/issues/403)
+
+## [2.0.6](https://github.com/postalsys/imapflow/compare/v2.0.5...v2.0.6) (2026-09-22)
+
+
+### Bug Fixes
+
+* **parser:** split flags a server writes without the separating space ([96b2022](https://github.com/postalsys/imapflow/commit/96b202283ea5840842b4c9c94319b2b29cad829f))
+
 ## [2.0.5](https://github.com/postalsys/imapflow/compare/v2.0.4...v2.0.5) (2026-09-15)
 
 

package/dist/cjs/handler/token-parser.js

@@ -356,6 +356,7 @@ class TokenParser {
                     break;
                 case STATE_ATOM:
                     // An atom is terminated by: space, closing delimiter of parent node,
+                    // a backslash starting the next flag of a list (broken servers only),
                     // or encountering a '[' that starts a section for BODY/BINARY commands.
                     // space finishes an atom
                     if (chr === ' ') {
@@ -376,6 +377,30 @@ class TokenParser {
                         checkSP();
                         break;
                     }
+                    // A backslash can not occur inside an atom (it is a quoted-special), so one
+                    // arriving inside a flag of a parenthesized list can only be a server that
+                    // wrote two flags without the separating space, as home.pl does in its LIST
+                    // responses ("\\Sent\\HasNoChildren"). Read it as the end of this flag and the
+                    // start of the next one rather than rejecting the line, which would drop the
+                    // whole mailbox. Only an atom that already is a flag is split, so an unquoted
+                    // name is never cut in two, and only when a flag name follows, so a trailing
+                    // backslash still fails as before instead of becoming a one-character flag
+                    if (chr === '\\') {
+                        const parent = this.currentNode.parentNode;
+                        const value = this.currentNode.value;
+                        const next = this.str.charAt(i + 1);
+                        if (parent &&
+                            parent.type === 'LIST' &&
+                            value.length > 1 &&
+                            value.startsWith('\\') &&
+                            next &&
+                            (imap_formal_syntax_js_1.default['ATOM-CHAR']().includes(next) || next === '*')) {
+                            this.currentNode.endPos = this.pos + i - 1;
+                            this.currentNode = parent;
+                            startAtom();
+                            break;
+                        }
+                    }
                     // If the atom so far is all digits and we see ',' or ':', it is actually
                     // a sequence set (e.g., "1:5" or "1,3,5"), so reclassify and switch state
                     if ((chr === ',' || chr === ':') && RE_DIGITS.test(this.currentNode.value)) {

package/dist/cjs/package-info.d.ts

@@ -1,3 +1,3 @@
 export declare const name = "imapflow";
-export declare const version = "2.0.5";
+export declare const version = "2.0.7";
 export declare const homepage = "https://imapflow.com/";

package/dist/cjs/package-info.js

@@ -3,5 +3,5 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.homepage = exports.version = exports.name = void 0;
 exports.name = 'imapflow';
-exports.version = '2.0.5';
+exports.version = '2.0.7';
 exports.homepage = 'https://imapflow.com/';

package/dist/cjs/tools.js

@@ -681,6 +681,12 @@ async function formatMessageResponse(untagged, mailbox) {
             if (Buffer.isBuffer(attribute.value)) {
                 return attribute.value;
             }
+            // A section is an nstring, so a server may answer with a quoted string
+            // instead of a literal (Yahoo does for small parts). The tokenizer decoded
+            // the line as UTF-8, so encoding the same way restores the bytes it sent.
+            if (typeof attribute.value === 'string') {
+                return Buffer.from(attribute.value);
+            }
         };
         // NIL (parsed as null) and other non-array values yield an empty array, so callers
         // can safely index into the result. RFC 8474 allows e.g. `THREADID NIL` when the

package/dist/esm/handler/token-parser.js

@@ -350,6 +350,7 @@ export class TokenParser {
                     break;
                 case STATE_ATOM:
                     // An atom is terminated by: space, closing delimiter of parent node,
+                    // a backslash starting the next flag of a list (broken servers only),
                     // or encountering a '[' that starts a section for BODY/BINARY commands.
                     // space finishes an atom
                     if (chr === ' ') {
@@ -370,6 +371,30 @@ export class TokenParser {
                         checkSP();
                         break;
                     }
+                    // A backslash can not occur inside an atom (it is a quoted-special), so one
+                    // arriving inside a flag of a parenthesized list can only be a server that
+                    // wrote two flags without the separating space, as home.pl does in its LIST
+                    // responses ("\\Sent\\HasNoChildren"). Read it as the end of this flag and the
+                    // start of the next one rather than rejecting the line, which would drop the
+                    // whole mailbox. Only an atom that already is a flag is split, so an unquoted
+                    // name is never cut in two, and only when a flag name follows, so a trailing
+                    // backslash still fails as before instead of becoming a one-character flag
+                    if (chr === '\\') {
+                        const parent = this.currentNode.parentNode;
+                        const value = this.currentNode.value;
+                        const next = this.str.charAt(i + 1);
+                        if (parent &&
+                            parent.type === 'LIST' &&
+                            value.length > 1 &&
+                            value.startsWith('\\') &&
+                            next &&
+                            (imapFormalSyntax['ATOM-CHAR']().includes(next) || next === '*')) {
+                            this.currentNode.endPos = this.pos + i - 1;
+                            this.currentNode = parent;
+                            startAtom();
+                            break;
+                        }
+                    }
                     // If the atom so far is all digits and we see ',' or ':', it is actually
                     // a sequence set (e.g., "1:5" or "1,3,5"), so reclassify and switch state
                     if ((chr === ',' || chr === ':') && RE_DIGITS.test(this.currentNode.value)) {

package/dist/esm/package-info.d.ts

@@ -1,3 +1,3 @@
 export declare const name = "imapflow";
-export declare const version = "2.0.5";
+export declare const version = "2.0.7";
 export declare const homepage = "https://imapflow.com/";

package/dist/esm/package-info.js

@@ -1,4 +1,4 @@
 // Generated by scripts/build.js from package.json. Do not edit by hand.
 export const name = 'imapflow';
-export const version = '2.0.5';
+export const version = '2.0.7';
 export const homepage = 'https://imapflow.com/';

package/dist/esm/tools.js

@@ -631,6 +631,12 @@ export async function formatMessageResponse(untagged, mailbox) {
             if (Buffer.isBuffer(attribute.value)) {
                 return attribute.value;
             }
+            // A section is an nstring, so a server may answer with a quoted string
+            // instead of a literal (Yahoo does for small parts). The tokenizer decoded
+            // the line as UTF-8, so encoding the same way restores the bytes it sent.
+            if (typeof attribute.value === 'string') {
+                return Buffer.from(attribute.value);
+            }
         };
         // NIL (parsed as null) and other non-array values yield an empty array, so callers
         // can safely index into the result. RFC 8474 allows e.g. `THREADID NIL` when the

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "imapflow",
-    "version": "2.0.5",
+    "version": "2.0.7",
     "description": "IMAP Client for Node",
     "type": "module",
     "main": "./dist/cjs/imap-flow.js",
@@ -70,15 +70,15 @@
     "devDependencies": {
         "@types/node": "20.19.43",
         "c8": "12.0.0",
-        "eslint": "10.10.0",
+        "eslint": "10.11.0",
         "eslint-config-prettier": "10.1.8",
         "globals": "17.12.0",
-        "prettier": "3.9.6",
-        "tsx": "4.23.13",
+        "prettier": "3.9.8",
+        "tsx": "4.23.15",
         "types-node-legacy": "npm:@types/node@20.0.0",
         "typescript": "6.0.3",
-        "typescript-eslint": "8.70.0",
-        "wrangler": "4.131.2"
+        "typescript-eslint": "8.70.1",
+        "wrangler": "4.136.3"
     },
     "dependencies": {
         "@zone-eu/mailsplit": "5.4.17",