proton-mail-bridge-client 2.15.0 → 2.15.2

package/dist/services/simple-imap-service.js

@@ -8,6 +8,8 @@ import { logger } from "../utils/logger.js";
 import { ensureAccountIdentityMatches } from "../utils/account-identity.js";
 import { tlsOptionsFor } from "../utils/tls.js";
 import { DEFAULT_PDF_MAX_MB, DEFAULT_PDF_MAX_PAGES, extractPdfText, looksLikePdf, PdfTextError } from "../utils/pdf-text.js";
+import { describeImapError, isLikelyAuthenticationError, isLikelyCertificateError, isLikelyConnectionError, isLikelyTlsMismatchError } from "./imap-errors.js";
+export { describeImapError, isLikelyAuthenticationError, isLikelyCertificateError, isLikelyConnectionError, isLikelyTlsMismatchError };
 const FETCH_SUMMARY_QUERY = {
     uid: true,
     flags: true,
@@ -185,139 +187,6 @@ const LABEL_RESOLVE_BUDGET_MS = 15_000;
 // mutation would raise via assertMailboxUidValidity, rather than drifting into
 // two subtly different phrasings for what is the same underlying failure.
 export const UID_VALIDITY_MISMATCH_ERROR = "This email reference is from before the mailbox changed (folder was recreated or migrated) and no longer points to a valid message. Re-fetch the email (e.g. via search_emails or get_emails) to get a current reference.";
-function collectErrorText(error) {
-    const values = [];
-    if (error instanceof Error) {
-        values.push(error.message);
-        values.push(error.name);
-        const maybeResponseText = error.responseText;
-        if (typeof maybeResponseText === "string") {
-            values.push(maybeResponseText);
-        }
-        const maybeCode = error.code;
-        if (typeof maybeCode === "string") {
-            values.push(maybeCode);
-        }
-    }
-    else if (typeof error === "string") {
-        values.push(error);
-    }
-    else if (typeof error === "object" && error !== null) {
-        const maybeMessage = error.message;
-        const maybeCode = error.code;
-        const maybeResponse = error.response;
-        if (typeof maybeMessage === "string") {
-            values.push(maybeMessage);
-        }
-        if (typeof maybeCode === "string") {
-            values.push(maybeCode);
-        }
-        if (typeof maybeResponse === "string") {
-            values.push(maybeResponse);
-        }
-    }
-    return values.join(" ").toLowerCase();
-}
-// imapflow throws a generic Error("Command failed") for every IMAP NO/BAD
-// response (mailbox create/rename/delete, move, flag change, ...) — the
-// server's actual reason (e.g. Bridge rejecting a reserved folder name)
-// lives in the non-standard `.responseText` property, never in `.message`.
-// Left alone, every one of these surfaces as an unhelpful "Command failed"
-// with no clue why. Surface both. Found live: create_label "Starred" failed
-// with just "Command failed" instead of Bridge's actual rejection reason.
-export function describeImapError(error) {
-    if (!(error instanceof Error) || !error.message) {
-        return undefined;
-    }
-    const responseText = error.responseText;
-    if (typeof responseText === "string" && responseText.trim() && !error.message.includes(responseText.trim())) {
-        return `${error.message}: ${responseText.trim()}`;
-    }
-    return error.message;
-}
-export function isLikelyAuthenticationError(error) {
-    if (!error) {
-        return false;
-    }
-    const haystack = collectErrorText(error);
-    if (!haystack) {
-        return false;
-    }
-    return [
-        "auth",
-        "login failed",
-        "incorrect login credentials",
-        "invalid credentials",
-        "authentication failed",
-        "no such user",
-        "too many login attempts",
-    ].some((needle) => haystack.includes(needle));
-}
-// Distinguishes "Bridge isn't running / wrong host-port" from other failures, so the
-// caller can point the user at Bridge instead of a generic "internal error occurred".
-// A TLS handshake attempted against a plaintext/STARTTLS-only port (or the
-// reverse — plaintext against an implicit-TLS port, though that direction
-// more often just surfaces as a bare ECONNRESET, already covered by
-// isLikelyConnectionError, and can't be reliably told apart from a genuinely
-// unreachable Bridge from the error text alone) surfaces as Node/OpenSSL's
-// own EPROTO error. Neither isLikelyAuthenticationError nor
-// isLikelyConnectionError matched this, so a PROTONMAIL_*_SECURE/port
-// mismatch (Bridge assigns essentially random ports per install — confirmed
-// live) produced a bare "connection failed" with zero diagnosis, despite
-// run_doctor's own description promising a classified cause for every
-// connection failure.
-export function isLikelyTlsMismatchError(error) {
-    if (!error) {
-        return false;
-    }
-    const haystack = collectErrorText(error);
-    if (!haystack) {
-        return false;
-    }
-    return ["eproto", "wrong version number", "ssl routines", "wrong_version_number"].some((needle) => haystack.includes(needle));
-}
-// A certificate Node does not trust: Bridge's own is self-signed, so a host reached by another name than localhost
-// fails this way until the certificate is pinned (PROTONMAIL_TLS_CA_FILE) or the host is listed.
-export function isLikelyCertificateError(error) {
-    if (!error) {
-        return false;
-    }
-    const haystack = collectErrorText(error);
-    if (!haystack) {
-        return false;
-    }
-    return [
-        "self-signed certificate",
-        "self signed certificate",
-        "depth_zero_self_signed_cert",
-        "unable to verify the first certificate",
-        "unable_to_verify_leaf_signature",
-        "unable to get local issuer certificate",
-        "certificate has expired",
-        "err_tls_cert_altname_invalid",
-        "does not match certificate",
-    ].some((needle) => haystack.includes(needle));
-}
-export function isLikelyConnectionError(error) {
-    if (!error) {
-        return false;
-    }
-    const haystack = collectErrorText(error);
-    if (!haystack) {
-        return false;
-    }
-    return [
-        "econnrefused",
-        "enotfound",
-        "etimedout",
-        "ehostunreach",
-        "econnreset",
-        "connect etimedout",
-        "connection closed",
-        "connection timed out",
-        "timed out while connecting",
-    ].some((needle) => haystack.includes(needle));
-}
 // Proton Bridge exposes "views" over mail that already lives in a real folder: All Mail
 // (every message), Labels/* (a message per label it carries) and Starred. A search over
 // "every folder" that includes them scans the same messages several times — measured live