inbox-search.test.ts

apps/dashboard/test/inbox-search.test.ts

1. /**
2. * Live Gmail search.
3. *
4. * The 30-day window is several times what the board holds, with the busiest
5. * mailbox alone in the thousands. Holding all of it is megabytes re-parsed on
6. * every click, and nobody finds an email by scrolling thousands of rows. So the
7. * board keeps the recent slice for browsing and lets the search box reach
8. * everything.
9. *
10. * That makes the search the thing standing between "we might be missing an
11. * important email" and not. What is tested here is the part that decides what a
12. * typed query is allowed to reach, and the part that refuses to imply a result
13. * set is complete when it is not.
14. */
16. import { describe, expect, it } from 'vitest'
17. import { SEARCH_QUERY_CAP, buildSearchQuery } from '../../../config/inbox.js'
18. import { INBOX_MAILBOXES } from '../../../config/inbox.js'
19. import { SEARCH_RESULT_CAP, searchResultsPage, type SearchHit } from '../src/inbox-view.js'
20. import type { InboxMessage } from '@meridian/gmail-client'
22. const msg = (over: Partial<InboxMessage> = {}): InboxMessage => ({
23. id: 'm1',
24. threadId: 't1',
25. mailbox: 'hello@meridiandisplay.example',
26. sender: 'client@example.com',
27. senderName: 'A Client',
28. subject: 'Banner proof',
29. snippet: 'preview',
30. date: '2026-09-04T18:00:00.000Z',
31. labels: ['INBOX'],
32. unread: false,
33. ...over,
34. })
36. const hit = (over: Partial<SearchHit> = {}): SearchHit => ({
37. mailbox: 'hello@meridiandisplay.example',
38. ok: true,
39. error: null,
40. messages: [msg()],
41. truncated: false,
42. ...over,
43. })
45. describe('buildSearchQuery', () => {
46. it('drops the 30-day window, which is the whole point', () => {
47. // The footer has always said "older mail is in Gmail, not gone". This is
48. // the board finally reaching it.
49. expect(buildSearchQuery('proof')).not.toContain('newer_than')
50. })
52. it('forces in:inbox, so a search cannot widen what the board shows', () => {
53. // Archived mail, Sent, Spam and Trash have never been on this board, and a
54. // search box is not where that should quietly change.
55. expect(buildSearchQuery('proof')).toBe('in:inbox proof')
56. })
58. it('removes a typed in: or label:, rather than combining with it', () => {
59. // `in:inbox in:anywhere` is Gmail's syntax for widening, and a reader
60. // typing it would not know they had. Stripped, not merged.
61. for (const q of ['in:anywhere proof', 'proof in:trash', 'label:spam proof', 'proof -in:inbox']) {
62. const built = buildSearchQuery(q)
63. expect(built.startsWith('in:inbox '), q).toBe(true)
64. expect(built.slice('in:inbox '.length), q).not.toMatch(/\b(in|label):/)
65. }
66. })
68. it('leaves every other Gmail operator alone, because they are the feature', () => {
69. // These are the searcher's own words in Gmail's own language, not a second
70. // query language invented here.
71. const q = buildSearchQuery('from:jordan@expohall.example has:attachment "feather flag"')
72. expect(q).toContain('from:jordan@expohall.example')
73. expect(q).toContain('has:attachment')
74. expect(q).toContain('"feather flag"')
75. })
77. it('caps the length rather than passing an unbounded string to Gmail', () => {
78. expect(buildSearchQuery('x'.repeat(5_000)).length).toBeLessThanOrEqual(
79. SEARCH_QUERY_CAP + 'in:inbox '.length,
80. )
81. })
83. it('an empty query still scopes to the inbox rather than matching everything', () => {
84. expect(buildSearchQuery(' ')).toBe('in:inbox')
85. })
86. })
88. describe('the results page', () => {
89. it('names a mailbox that could not be searched, and says matches are missing', () => {
90. // Six results and a named failure, never a short list that looks complete.
91. const html = searchResultsPage('proof', [
92. hit(),
93. hit({ mailbox: 'accounts@meridiandisplay.example', ok: false, error: 'invalid_grant', messages: [] }),
94. ], INBOX_MAILBOXES, null)
95. expect(html).toContain('invalid_grant')
96. expect(html).toContain('could not be searched')
97. expect(html).toContain('not absent')
98. })
100. it('says when more matched than it is showing', () => {
101. // Rule 5: capped and labelled, never capped and silent.
102. const html = searchResultsPage('proof', [hit({ truncated: true })], INBOX_MAILBOXES, null)
103. expect(html).toContain(String(SEARCH_RESULT_CAP))
104. expect(html).toContain('More matched than are shown')
105. })
107. it('distinguishes an empty RESULT from an unloaded one', () => {
108. // The distinction the whole feature turns on: Gmail was asked and said no,
109. // which is not the same as the board not holding it.
110. const html = searchResultsPage('nothing', [hit({ messages: [] })], INBOX_MAILBOXES, null)
111. expect(html).toContain('empty result rather than an unloaded one')
112. })
114. it('states the corpus, both halves of it', () => {
115. const html = searchResultsPage('proof', [hit()], INBOX_MAILBOXES, null)
116. expect(html).toContain('past the 30 days')
117. expect(html).toContain('Sent, Spam and Trash are not searched')
118. })
120. it('carries no read, filter or replied controls', () => {
121. // A row here that silently lacked a replied chip would read as "not
122. // replied" rather than "not known"; the search reaches past the board's
123. // own record of what it holds.
124. const html = searchResultsPage('proof', [hit()], INBOX_MAILBOXES, null)
125. expect(html).not.toContain('action="/inbox/read"')
126. expect(html).not.toContain('msg-replied')
127. expect(html).toContain('not known')
128. })
130. it('escapes the query, which is user input rendered back', () => {
131. const html = searchResultsPage('<img src=x onerror=alert(1)>', [hit()], INBOX_MAILBOXES, null)
132. expect(html).not.toContain('<img src=x')
133. expect(html).toContain('<img')
134. })
136. it('says which mailbox it searched when scoped to one', () => {
137. const html = searchResultsPage('proof', [hit()], INBOX_MAILBOXES, 'hello@meridiandisplay.example')
138. expect(html).toContain('Sam Whitaker')
139. })
140. })