Notes IMAP FETCH does not expose appended source to the structural replay probe #1423

Open
opened 2026-10-07 23:23:14 +00:00 by kayg · 0 comments
Owner

Found in the one #1403 release-server round (head d395b6e25d, runtime ef0aa12b1):

FINDING: appended Note was not served back by FETCH
FINDING: structural replay could not locate served base
Notes IMAP probe: 2 finding(s)
Notes submission regressions: 0 finding(s)

The unchanged notes_imap.py probe receives a successful APPEND (it reports no append refusal), then SELECTs Notes and FETCHes UID 1:* BODY.PEEK[]. Its body decoder cannot find Probe note, and the UUID/MIME structural base lookup fails. It therefore skips structural/serial/active-HTML edit assertions in this area.

Same-round read-only diagnostic finds one 182-byte Markdown source containing both Probe note and Secret of Alice. GET /api/v1/notes returns 200 and includes one Probe note title. No source loss is shown. Investigate mailbox projection/readiness and MIME literal selection before deciding whether the server or body decoder is wrong. Preserve the existing assertions and record the selected mailbox, tagged FETCH status and decoded literals without credentials. No secret/App Password was printed in the diagnostic.

Non-blocking retrieval/verification gap; structural edit coverage is unverified in this run. The independent Notes submission probe reported zero findings.

Found in the one #1403 release-server round (head d395b6e25da20d8c67b8b9fc1a593b813939c8a7, runtime ef0aa12b1): ``` FINDING: appended Note was not served back by FETCH FINDING: structural replay could not locate served base Notes IMAP probe: 2 finding(s) Notes submission regressions: 0 finding(s) ``` The unchanged notes_imap.py probe receives a successful APPEND (it reports no append refusal), then SELECTs Notes and FETCHes UID 1:* BODY.PEEK[]. Its body decoder cannot find Probe note, and the UUID/MIME structural base lookup fails. It therefore skips structural/serial/active-HTML edit assertions in this area. Same-round read-only diagnostic finds one 182-byte Markdown source containing both Probe note and Secret of Alice. GET /api/v1/notes returns 200 and includes one Probe note title. No source loss is shown. Investigate mailbox projection/readiness and MIME literal selection before deciding whether the server or body decoder is wrong. Preserve the existing assertions and record the selected mailbox, tagged FETCH status and decoded literals without credentials. No secret/App Password was printed in the diagnostic. Non-blocking retrieval/verification gap; structural edit coverage is unverified in this run. The independent Notes submission probe reported zero findings.
Commenting is not possible because the repository is archived.
No labels
No milestone
No project
No assignees
1 participant
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
kayg/calternal-v0#1423
No description provided.