webmail/lib/__tests__/jmap-email-set-failures.test.ts

import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
import { JMAPClient } from '../jmap/client';

// #956: Email/set failures were swallowed by the delete/move helpers because
// request() only rejects on HTTP errors. Method-level errors and per-id
// notUpdated/notDestroyed entries must reject so the store keeps the rows.

function makeSession() {
  return {
    capabilities: { 'urn:ietf:params:jmap:core': {} },
    accounts: { 'acct-1': { name: 'test', isPersonal: true, accountCapabilities: {} } },
    primaryAccounts: { 'urn:ietf:params:jmap:mail': 'acct-1' },
    apiUrl: 'https://mail.example.com/jmap/api',
    downloadUrl: 'https://mail.example.com/jmap/download/{accountId}/{blobId}/{name}',
    uploadUrl: 'https://mail.example.com/jmap/upload/{accountId}/',
    eventSourceUrl: 'https://mail.example.com/jmap/eventsource',
  };
}

function jsonResponse(body: unknown): Response {
  return new Response(JSON.stringify(body), {
    status: 200,
    headers: { 'Content-Type': 'application/json' },
  });
}

const notUpdated = () =>
  jsonResponse({
    methodResponses: [
      ['Email/set', { updated: null, notUpdated: { e1: { type: 'invalidProperties', description: 'Mailbox does not exist' } } }, '0'],
    ],
  });
const notDestroyed = () =>
  jsonResponse({
    methodResponses: [
      ['Email/set', { destroyed: null, notDestroyed: { e1: { type: 'forbidden', description: 'No permission' } } }, '0'],
    ],
  });
const methodError = () =>
  jsonResponse({
    methodResponses: [['error', { type: 'accountNotFound', description: 'Account not found' }, '0']],
  });
const success = () =>
  jsonResponse({
    methodResponses: [['Email/set', { updated: { e1: null }, destroyed: ['e1'] }, '0']],
  });

describe('JMAPClient Email/set failure surfacing (#956)', () => {
  let fetchSpy: ReturnType<typeof vi.spyOn>;

  beforeEach(() => {
    fetchSpy = vi.spyOn(globalThis, 'fetch');
  });

  afterEach(() => {
    fetchSpy.mockRestore();
  });

  async function connectedClient(): Promise<JMAPClient> {
    fetchSpy.mockResolvedValueOnce(jsonResponse(makeSession()));
    const client = JMAPClient.withBearer('https://mail.example.com', 'token123', 'user@test.com');
    await client.connect();
    fetchSpy.mockReset();
    return client;
  }

  it('deleteEmail rejects on notDestroyed', async () => {
    const client = await connectedClient();
    fetchSpy.mockResolvedValueOnce(notDestroyed());
    await expect(client.deleteEmail('e1')).rejects.toThrow(/No permission/);
  });

  it('moveToTrash rejects on notUpdated', async () => {
    const client = await connectedClient();
    fetchSpy.mockResolvedValueOnce(notUpdated());
    await expect(client.moveToTrash('e1', 'trash')).rejects.toThrow(/Mailbox does not exist/);
  });

  it('batchDeleteEmails rejects on notDestroyed', async () => {
    const client = await connectedClient();
    fetchSpy.mockResolvedValueOnce(notDestroyed());
    await expect(client.batchDeleteEmails(['e1', 'e2'])).rejects.toThrow(/No permission/);
  });

  it('batchMoveEmails rejects on notUpdated', async () => {
    const client = await connectedClient();
    fetchSpy.mockResolvedValueOnce(notUpdated());
    await expect(client.batchMoveEmails(['e1', 'e2'], 'archive')).rejects.toThrow(/Mailbox does not exist/);
  });

  it('rejects on a method-level error response', async () => {
    const client = await connectedClient();
    fetchSpy.mockResolvedValueOnce(methodError());
    await expect(client.batchMoveEmails(['e1'], 'archive')).rejects.toThrow(/Account not found/);
  });

  it('still resolves when the server accepted the change', async () => {
    const client = await connectedClient();
    fetchSpy.mockResolvedValueOnce(success());
    await expect(client.deleteEmail('e1')).resolves.toBeUndefined();
    fetchSpy.mockResolvedValueOnce(success());
    await expect(client.batchMoveEmails(['e1'], 'archive')).resolves.toBeUndefined();
  });
});