<?xml version="1.0" encoding="UTF-8"?>
  <?xml-stylesheet type="text/xsl" href="rfc2629.xslt" ?>
  <!-- generated by https://github.com/cabo/kramdown-rfc version 1.7.29 (Ruby 2.6.10) -->


<!DOCTYPE rfc  [
  <!ENTITY nbsp    "&#160;">
  <!ENTITY zwsp   "&#8203;">
  <!ENTITY nbhy   "&#8209;">
  <!ENTITY wj     "&#8288;">

]>


<rfc ipr="trust200902" docName="draft-ietf-jmap-refplus-00" category="std" consensus="true" submissionType="IETF" tocInclude="true" sortRefs="true" symRefs="true">
  <front>
    <title abbrev="JMAP Enhanced Result References">JMAP Enhanced Result References</title>

    <author initials="M." surname="De Gennaro" fullname="Mauro De Gennaro">
      <organization abbrev="Stalwart Labs">Stalwart Labs LLC</organization>
      <address>
        <postal>
          <street>1309 Coffeen Avenue, Suite 1200</street>
          <city>Sheridan</city>
          <region>WY</region>
          <code>82801</code>
          <country>USA</country>
        </postal>
        <email>mauro@stalw.art</email>
        <uri>https://stalw.art</uri>
      </address>
    </author>

    <date year="2025" month="November" day="29"/>

    
    <workgroup>JMAP</workgroup>
    <keyword>Internet-Draft</keyword>

    <abstract>


<?line 40?>

<t>This document specifies an extension to the JSON Meta Application Protocol (JMAP) that enhances the result reference mechanism defined in <xref target="RFC8620"/>. The extension allows result references to be used in additional contexts beyond method call arguments, specifically within object properties during JMAP /set operations and within FilterCondition objects used in /query operations. Additionally, this specification extends result references to support JSON Path expressions (<xref target="RFC9535"/>) as an alternative to JSON Pointer (<xref target="RFC6901"/>), providing more expressive query capabilities for extracting values from previous method call results. These enhancements enable more efficient data reuse patterns across JMAP method calls, reducing the need for multiple round trips between client and server.</t>



    </abstract>



  </front>

  <middle>


<?line 44?>

<section anchor="introduction"><name>Introduction</name>

<t>JMAP (<xref target="RFC8620"/> — JSON Meta Application Protocol) is a generic protocol for synchronizing data, such as mail, calendars or contacts, between a client and a server. It is optimized for mobile and web environments, and aims to provide a consistent interface to different data types.</t>

<t>One of JMAP's core design principles is its ability to build efficient request chains that minimize the number of round trips between client and server. This is achieved through the result reference mechanism defined in <xref section="3.7" sectionFormat="of" target="RFC8620"/>, which allows method call arguments to reference the results of previous method calls within the same request. When processing a request, the server executes method calls sequentially, and any argument prefixed with "#" (an octothorpe) is resolved by extracting the specified value from a previous method call's result before the current method is executed.</t>

<t>Since the publication of JMAP Core (<xref target="RFC8620"/>) and JMAP for Mail (<xref target="RFC8621"/>), the JMAP ecosystem has expanded significantly with the definition of multiple additional data types and extensions, including JMAP for Calendars (<xref target="I-D.ietf-jmap-calendars"/>), JMAP for Contacts (<xref target="RFC9610"/>), and others. This growth has revealed practical limitations in the current result reference mechanism. Many real-world use cases require creating JMAP objects that incorporate data from other JMAP objects. For example, when creating a CalendarEvent, it is often necessary to copy "Participant" or "Location" objects from an existing event. Similarly, when creating Email objects, reusing attachment information or recipient lists from other messages would be beneficial.</t>

<t>The current result reference mechanism, however, is limited to method call arguments. This restriction prevents result references from being used within the object structures passed to /set methods for creating or updating records, or within FilterCondition objects used in /query methods. These limitations force clients to either make additional round trips to fetch intermediate data or to duplicate data within the request, both of which reduce efficiency.</t>

<t>Furthermore, JMAP Core exclusively uses JSON Pointer (<xref target="RFC6901"/>) syntax for navigating result structures. While JSON Pointer is simple and efficient, it has limited expressive power for certain selection patterns. JSON Path (<xref target="RFC9535"/>), a more recent standard, provides a richer query language for extracting values from JSON structures, including support for filters, array slicing, and more sophisticated selection patterns.</t>

<t>Therefore, this document aims to extend the result references defined in <xref target="RFC8620"/> to be usable in multiple additional contexts, specifically within JMAP /set method calls for object property values and within FilterCondition objects used in /query methods. Additionally, this specification defines support for JSON Path (<xref target="RFC9535"/>) expressions as an optional alternative to JSON Pointer, enabling more powerful value extraction capabilities while maintaining backward compatibility with existing implementations.</t>

<section anchor="notational-conventions"><name>Notational Conventions</name>

<t>The key words "<bcp14>MUST</bcp14>", "<bcp14>MUST NOT</bcp14>", "<bcp14>REQUIRED</bcp14>", "<bcp14>SHALL</bcp14>", "<bcp14>SHALL
NOT</bcp14>", "<bcp14>SHOULD</bcp14>", "<bcp14>SHOULD NOT</bcp14>", "<bcp14>RECOMMENDED</bcp14>", "<bcp14>NOT RECOMMENDED</bcp14>",
"<bcp14>MAY</bcp14>", and "<bcp14>OPTIONAL</bcp14>" in this document are to be interpreted as
described in BCP 14 <xref target="RFC2119"/> <xref target="RFC8174"/> when, and only when, they
appear in all capitals, as shown here.</t>

<?line -18?>

</section>
<section anchor="addition-to-the-capabilities-object"><name>Addition to the Capabilities Object</name>

<t>The capabilities object is returned as part of the JMAP Session object; see <xref section="2" sectionFormat="of" target="RFC8620"/>. This document defines one additional capability URI.</t>

<section anchor="urnietfparamsjmaprefplus"><name>urn:ietf:params:jmap:refplus</name>

<t>This capability indicates that the server supports enhanced result references as defined in this specification. When this capability is present, clients may use result references within /set method object properties and FilterCondition objects, in addition to the standard method call argument usage defined in <xref target="RFC8620"/>.</t>

<t>The value of this property in the JMAP Session "capabilities" property is an empty object.</t>

<t>The value of this property in an account's "accountCapabilities" property is an object that <bcp14>MUST</bcp14> contain the following information on server capabilities and permissions for that account:</t>

<dl newline="true">
  <dt><strong>jsonPath</strong>: <spanx style="verb">Boolean</spanx></dt>
  <dd>
    <t>Whether the server supports JSON Path expressions in result references. If true, result references may use JSON Path (<xref target="RFC9535"/>) syntax in addition to JSON Pointer (<xref target="RFC6901"/>) syntax. If false or absent, only JSON Pointer syntax is supported.</t>
  </dd>
</dl>

</section>
</section>
</section>
<section anchor="enhanced-result-references"><name>Enhanced Result References</name>

<t>Enhanced result references extend the existing result reference mechanism defined in <xref section="3.7" sectionFormat="of" target="RFC8620"/> to enable broader applicability and more expressive value extraction. Specifically, enhanced result references support two key extensions to the base mechanism:</t>

<t>First, enhanced result references may be used in additional contexts beyond method call arguments. They may be used anywhere within a "Foo" object when creating or updating such an object via the Foo/set method, allowing property values to be derived from previous method call results. They may also be used within FilterCondition objects in Foo/query method calls, enabling dynamic query construction based on prior results.</t>

<t>Second, enhanced result references optionally support JSON Path (<xref target="RFC9535"/>) expressions as an alternative to JSON Pointer (<xref target="RFC6901"/>) for extracting values from result structures. JSON Path provides more sophisticated query capabilities, including array filtering, recursive descent, and complex selection patterns, while JSON Pointer remains the baseline requirement for all implementations.</t>

<t>The syntax and resolution mechanism for enhanced result references follows the same fundamental pattern as standard result references, with extensions to accommodate the new contexts and optional JSON Path support. Backward compatibility is maintained: clients that do not use enhanced result references, and servers that do not advertise the <spanx style="verb">urn:ietf:params:jmap:refplus</spanx> capability, interoperate normally using the base result reference mechanism from <xref target="RFC8620"/>.</t>

<section anchor="json-path-support"><name>JSON Path Support</name>

<t>JSON Path (<xref target="RFC9535"/>) is a query language for JSON that provides powerful capabilities for selecting and extracting values from JSON structures. While JSON Pointer (<xref target="RFC6901"/>) provides a simple notation for referencing a specific value within a JSON document using a sequence of reference tokens, JSON Path offers a more expressive syntax that supports complex queries including filters, recursive descent, array slicing, and wildcard selections.</t>

<section anchor="comparison-with-json-pointer"><name>Comparison with JSON Pointer</name>

<t>The key differences between JSON Pointer and JSON Path include:</t>

<t><list style="symbols">
  <t>JSON Pointer uses a simple path syntax with "/" separators and identifies exactly one value. JSON Path uses a richer syntax with multiple selector types and can return zero, one, or multiple values.</t>
  <t>JSON Pointer is deterministic and always produces the same result for a given document. JSON Path queries may be order-dependent when multiple values match.</t>
  <t>JSON Pointer has no conditional or filtering capabilities. JSON Path supports filter expressions, enabling selection based on value predicates.</t>
  <t>JSON Pointer requires exact knowledge of the structure. JSON Path supports recursive descent (..) allowing queries to find values at any depth.</t>
</list></t>

</section>
<section anchor="support-and-capabilities"><name>Support and Capabilities</name>

<t>Enhanced result references extend the base result reference mechanism to optionally support JSON Path expressions. This support is indicated by the "jsonPath" property in the account capabilities being set to true. Servers <bcp14>MAY</bcp14> implement JSON Path support, as it can be more resource-intensive than JSON Pointer due to the potential for complex query evaluation.</t>

<t>When a server supports JSON Path, enhanced result references may use JSON Path syntax as an alternative to JSON Pointer syntax in the "path" property of a ResultReference object. To indicate that a path should be interpreted as a JSON Path expression rather than a JSON Pointer, the path <bcp14>MUST</bcp14> begin with "$" (dollar sign), which is the root node identifier in JSON Path syntax. Paths not beginning with "$" are interpreted as JSON Pointer expressions following the rules in <xref target="RFC8620"/>.</t>

</section>
<section anchor="validation-requirements"><name>Validation Requirements</name>

<t>If the JSON Path expression is syntactically invalid according to <xref target="RFC9535"/>, the server <bcp14>MUST</bcp14> reject the method call with an "invalidResultReference" error. The error description <bcp14>SHOULD</bcp14> indicate the syntax error where possible.</t>

<t>If a client attempts to use a JSON Path expression (path beginning with "$") but the server does not support JSON Path (jsonPath capability is false or absent), the server <bcp14>MUST</bcp14> reject the method call with an "invalidResultReference" error. The error description <bcp14>SHOULD</bcp14> indicate that JSON Path is not supported.</t>

<t>Servers supporting JSON Path <bcp14>SHOULD</bcp14> implement the complete JSON Path specification as defined in <xref target="RFC9535"/>, including all standard function extensions. However, servers <bcp14>MAY</bcp14> limit the complexity of JSON Path expressions for security or performance reasons, for example by restricting maximum expression length, maximum result set size, or computational complexity. If a server rejects a valid JSON Path expression due to such limitations, it <bcp14>SHOULD</bcp14> return an "invalidResultReference" error with a description indicating the specific limitation encountered.</t>

</section>
</section>
<section anchor="resolution-algorithm"><name>Resolution Algorithm</name>

<t>This section defines the algorithm for resolving enhanced result references, which extends the base resolution mechanism defined in <xref section="3.7" sectionFormat="of" target="RFC8620"/> to handle both JSON Path expressions and extended JSON Pointer expressions (including wildcard support).</t>

<t>When processing a ResultReference object, the server <bcp14>MUST</bcp14> follow these steps:</t>

<t><list style="numbers" type="1">
  <t>Resolve the "resultOf" and "name" properties to identify the target method response, as defined in <xref section="3.7" sectionFormat="of" target="RFC8620"/>.</t>
  <t>Identify the second element of the method response array (the arguments object) as the target JSON structure for path evaluation.</t>
  <t>Determine whether the "path" property uses JSON Path or JSON Pointer syntax:
  <list style="symbols">
      <t>If the path begins with "$" (dollar sign), treat it as a JSON Path expression.</t>
      <t>Otherwise, treat it as a JSON Pointer expression.</t>
    </list></t>
  <t>Evaluate the path expression against the target JSON structure according to the appropriate specification (<xref target="RFC9535"/> for JSON Path, <xref target="RFC6901"/> for JSON Pointer).</t>
  <t>Apply the type-specific resolution rules defined in this section to produce the final resolved value.</t>
</list></t>

<section anchor="resolving-json-path-references"><name>Resolving JSON Path References</name>

<t>When processing a ResultReference with a JSON Path expression, the server <bcp14>MUST</bcp14>:</t>

<t><list style="numbers" type="1">
  <t>Apply the JSON Path expression (the "path" value) to the arguments object of the identified response.</t>
  <t>Evaluate the JSON Path expression according to <xref target="RFC9535"/> to produce a nodelist.</t>
  <t>Determine the expected type of the property being set and resolve the nodelist according to the following type-specific rules.</t>
</list></t>

<t>The nodelist produced by JSON Path evaluation <bcp14>MUST</bcp14> be resolved according to the expected type of the target property:</t>

<t>For properties that expect <strong>JSON primitive types</strong> (String, Boolean, Number as defined in <xref target="RFC8259"/>, or null) or a <strong>single JMAP object</strong> type:</t>

<t><list style="symbols">
  <t>If the nodelist contains exactly one node, use that node's value as the resolved value.</t>
  <t>If the nodelist contains zero nodes, use null as the resolved value.</t>
  <t>If the nodelist contains more than one node, the result reference resolution fails with an "invalidResultReference" error.</t>
</list></t>

<t>For properties that expect an <strong>array type</strong> (denoted as "A[]" in <xref section="1.1" sectionFormat="of" target="RFC8620"/>, where A[] is an array of values of type A):</t>

<t><list style="symbols">
  <t>Map the nodelist to an array containing the value of each node in the nodelist, in the order specified by <xref target="RFC9535"/>.</t>
  <t>If the nodelist contains zero nodes, use an empty array as the resolved value.</t>
  <t>If the nodelist contains one or more nodes, use an array containing all node values as the resolved value.</t>
</list></t>

<t>For properties that expect a <strong>map type</strong> (denoted as "A[B]" in <xref section="1.1" sectionFormat="of" target="RFC8620"/>, where the keys are of type A and the values are of type B):</t>

<t><list style="symbols">
  <t>If the nodelist contains exactly one node and that node's value is a JSON object conforming to the A[B] type, use that object as the resolved value.</t>
  <t>If the nodelist contains zero nodes, use an empty object {} as the resolved value.</t>
  <t>If the nodelist contains more than one node, or if the single node's value is not a JSON object, the result reference resolution fails with an "invalidResultReference" error.</t>
</list></t>

</section>
<section anchor="resolving-json-pointer-references"><name>Resolving JSON Pointer References</name>

<t>JSON Pointer expressions, as defined in <xref target="RFC6901"/>, provide a deterministic path to a single value within a JSON structure. However, <xref target="RFC8620"/> extends JSON Pointer syntax to support wildcards ("*") in certain contexts, allowing a single pointer to match multiple values. This extension is maintained in enhanced result references.</t>

<t>When processing a ResultReference with a JSON Pointer expression, the server <bcp14>MUST</bcp14>:</t>

<t><list style="numbers" type="1">
  <t>Apply the JSON Pointer expression (the "path" value) to the arguments object of the identified response.</t>
  <t>Evaluate the JSON Pointer expression according to <xref target="RFC6901"/>, with wildcard extensions as defined in <xref target="RFC8620"/>.</t>
  <t>Determine the expected type of the property being set and resolve according to the following type-specific rules.</t>
</list></t>

<t>The result produced by JSON Pointer evaluation (which may be a single value or multiple values when wildcards are used) <bcp14>MUST</bcp14> be resolved according to the expected type of the target property:</t>

<t>For properties that expect <strong>JSON primitive types</strong> (String, Boolean, Number as defined in <xref target="RFC8259"/>, or null) or a <strong>single JMAP object</strong> type:</t>

<t><list style="symbols">
  <t>If the pointer identifies exactly one value, use that value as the resolved value.</t>
  <t>If the pointer contains wildcards and matches zero values, use null as the resolved value.</t>
  <t>If the pointer contains wildcards and matches more than one value, the result reference resolution fails with an "invalidResultReference" error.</t>
  <t>If the pointer does not contain wildcards and does not match any value, the result reference resolution fails with an "invalidResultReference" error (per <xref target="RFC6901"/>).</t>
</list></t>

<t>For properties that expect an <strong>array type</strong> (denoted as "A[]" in <xref section="1.1" sectionFormat="of" target="RFC8620"/>, where A[] is an array of values of type A):</t>

<t><list style="symbols">
  <t>If the pointer identifies a single value that is already an array, use that array as the resolved value.</t>
  <t>If the pointer contains wildcards and matches multiple values, collect all matched values into an array in the order they appear in the document structure.</t>
  <t>If the pointer contains wildcards and matches zero values, use an empty array as the resolved value.</t>
  <t>If the pointer identifies a single value that is not an array, create an array containing that single value as the resolved value.</t>
</list></t>

<t>For properties that expect a <strong>map type</strong> (denoted as "A[B]" in <xref section="1.1" sectionFormat="of" target="RFC8620"/>, where the keys are of type A and the values are of type B):</t>

<t><list style="symbols">
  <t>If the pointer identifies exactly one value and that value is a JSON object conforming to the A[B] type, use that object as the resolved value.</t>
  <t>If the pointer contains wildcards and matches zero values, use an empty object {} as the resolved value.</t>
  <t>If the pointer contains wildcards and matches more than one value, or if the single identified value is not a JSON object, the result reference resolution fails with an "invalidResultReference" error.</t>
</list></t>

</section>
<section anchor="type-validation"><name>Type Validation</name>

<t>After applying the type-specific resolution rules, the server <bcp14>MUST</bcp14> validate that the resolved value conforms to the expected type for the property. If type validation fails after resolution, the server <bcp14>MUST</bcp14> reject the operation with an "invalidProperties" error (for /set operations) or an "invalidArguments" error (for /query operations).</t>

</section>
</section>
<section anchor="usage-in-set-methods"><name>Usage in /set Methods</name>

<t>Enhanced result references may be used anywhere within object property values when creating or updating objects via the Foo/set method. This enables efficient reuse of data from previous method calls when constructing new objects or modifying existing ones.</t>

<t>To use an enhanced result reference within an object property, the property name is prefixed with "#" (an octothorpe), and the value is set to a ResultReference object as defined in <xref section="3.7" sectionFormat="of" target="RFC8620"/>. This follows the same pattern as using result references in method call arguments. For example, to set a property "participants" to a value from a previous result, the object would include a property "#participants" with a ResultReference value.</t>

<t>Enhanced result references may be used at any depth within the object structure, not just at the top level. For nested objects and arrays, result references can be applied to properties at any level of nesting. The server <bcp14>MUST</bcp14> recursively process all levels of object and array nesting to resolve all result references before validating the complete object structure.</t>

<t>When processing a Foo/set method call, the server <bcp14>MUST</bcp14> examine all objects in the "create" and "update" arguments for properties with names beginning with "#". For each such property found, the server <bcp14>MUST</bcp14>:</t>

<t><list style="numbers" type="1">
  <t>Remove the "#" prefix to determine the actual property name.</t>
  <t>Resolve the ResultReference value following the resolution algorithm defined in <xref section="3.7" sectionFormat="of" target="RFC8620"/>, with the extensions defined in this specification.</t>
  <t>Set the actual property to the resolved value.</t>
  <t>Remove the property with the "#" prefix from the object.</t>
</list></t>

<t>If a result reference fails to resolve, the server <bcp14>MUST</bcp14> reject the creation or update of that specific object with a SetError of type "invalidResultReference". The SetError <bcp14>SHOULD</bcp14> include a description indicating which property reference failed and why.</t>

<t>If an object contains both a property name with "#" prefix and the same property name without the prefix (e.g., both "#participants" and "participants"), the server <bcp14>MUST</bcp14> reject the creation or update with a SetError of type "invalidProperties", as this represents an ambiguous specification.</t>

<t>The resolved value <bcp14>MUST</bcp14> be of a type appropriate for the property being set. If the resolved value does not match the expected type for the property, the server <bcp14>MUST</bcp14> reject the creation or update with a SetError of type "invalidProperties". Type validation occurs after result reference resolution but before other property validation.</t>

<section anchor="usage-in-patch-objects"><name>Usage in Patch Objects</name>

<t>Enhanced result references may also be used as values within patch objects, as defined in <xref section="5.3" sectionFormat="of" target="RFC8620"/>. A patch object is used to update specific properties of an existing object without having to send the entire object. When using result references in patch objects, special syntax rules apply:</t>

<t>The patch object key (the path to the property being patched) <bcp14>MUST</bcp14> be a JSON Pointer as specified in <xref target="RFC6901"/>, and <bcp14>MUST</bcp14> be prefixed with "#" to indicate that the value is a result reference. For example, to patch a property "locations/a1/coordinates" with a value from a previous result, the patch object would include a key "#/locations/a1/coordinates" with a ResultReference value.</t>

<t>The value associated with the prefixed JSON Pointer key is a ResultReference object. This ResultReference may use either JSON Pointer or JSON Path (if supported by the server) in its "path" property to extract the value from the previous method result.</t>

<t>When processing patch objects, the server <bcp14>MUST</bcp14>:</t>

<t><list style="numbers" type="1">
  <t>Identify keys in the patch object that begin with "#".</t>
  <t>Remove the "#" prefix to obtain the JSON Pointer path to be patched.</t>
  <t>Resolve the ResultReference value according to the resolution algorithm.</t>
  <t>Apply the resolved value to the location specified by the JSON Pointer path in the target object.</t>
</list></t>

<t>If a result reference in a patch object fails to resolve, the server <bcp14>MUST</bcp14> reject the update with a SetError of type "invalidResultReference".</t>

<t>It is important to note that while the patch object key (the path) <bcp14>MUST</bcp14> use JSON Pointer syntax, the ResultReference value's "path" property may use either JSON Pointer or JSON Path syntax (if the server supports JSON Path).</t>

</section>
</section>
<section anchor="usage-in-filtercondition-objects"><name>Usage in FilterCondition Objects</name>

<t>Enhanced result references may be used within FilterCondition objects in Foo/query method calls. This enables dynamic query construction where filter criteria are derived from the results of previous method calls in the same request.</t>

<t>To use an enhanced result reference within a FilterCondition, the filter property name is prefixed with "#" (an octothorpe), and the value is set to a ResultReference object. For example, to filter based on a dynamically determined mailbox id, the FilterCondition would include "#inMailbox" rather than "inMailbox".</t>

<t>When processing a Foo/query method call, the server <bcp14>MUST</bcp14> examine the "filter" argument and any nested FilterCondition objects for properties with names beginning with "#". For each such property found, the server <bcp14>MUST</bcp14>:</t>

<t><list style="numbers" type="1">
  <t>Remove the "#" prefix to determine the actual filter property name.</t>
  <t>Resolve the ResultReference value following the resolution algorithm defined in <xref section="3.7" sectionFormat="of" target="RFC8620"/>, with the extensions defined in this specification.</t>
  <t>Replace the property with "#" prefix with a property of the actual name, having the resolved value.</t>
</list></t>

<t>If a result reference in a FilterCondition fails to resolve, the server <bcp14>MUST</bcp14> reject the entire query method call with an error response of type "invalidResultReference". The error response <bcp14>SHOULD</bcp14> include a description indicating which filter property reference failed and why.</t>

<t>If a FilterCondition contains both a property name with "#" prefix and the same property name without the prefix (e.g., both "#inMailbox" and "inMailbox"), the server <bcp14>MUST</bcp14> reject the query with an "invalidArguments" error, as this represents an ambiguous filter specification.</t>

<t>The resolved value <bcp14>MUST</bcp14> be of a type appropriate for the filter property being set. If the resolved value does not match the expected type for that filter property, the server <bcp14>MUST</bcp14> reject the query with an "invalidArguments" error.</t>

<t>Enhanced result references in FilterConditions support the full range of filter compositions defined by JMAP specifications, including nested FilterCondition objects combined with FilterOperators. The server <bcp14>MUST</bcp14> recursively process all levels of FilterCondition nesting to resolve all result references before evaluating the query.</t>

</section>
</section>
<section anchor="examples"><name>Examples</name>

<t>This section provides additional examples demonstrating the use of enhanced result references in various contexts.</t>

<section anchor="usage-in-set"><name>Usage in /set</name>

<t>Example using JSON Path (assuming server supports jsonPath capability):</t>

<figure><sourcecode type="json"><![CDATA[
[
  ["CalendarEvent/query", {
    "accountId": "a1",
    "filter": {
      "uid": "meeting-template-001"
    }
  }, "c0"],
  ["CalendarEvent/get", {
    "accountId": "a1",
    "#ids": {
      "resultOf": "c0",
      "name": "CalendarEvent/query",
      "path": "/ids"
    },
    "properties": ["participants", "locations"]
  }, "c1"],
  ["CalendarEvent/set", {
    "accountId": "a1",
    "create": {
      "new-event": {
        "calendarIds": {"cal-1": true},
        "title": "Team Sync",
        "start": "2025-11-01T14:00:00Z",
        "duration": "PT1H",
        "#participants": {
          "resultOf": "c1",
          "name": "CalendarEvent/get",
          "path": "$.list[0].participants"
        },
        "#locations": {
          "resultOf": "c1",
          "name": "CalendarEvent/get",
          "path": "$.list[0].locations"
        }
      }
    }
  }, "c2"]
]
]]></sourcecode></figure>

<t>In this example, the new calendar event reuses the participants and locations from a template event retrieved in previous calls. The server would resolve the result references before creating the event, effectively copying those complex object values without requiring the client to extract and reformat them.</t>

</section>
<section anchor="usage-in-set-patch-objects"><name>Usage in /set patch objects</name>

<t>Example of using result references in a patch object (assuming server supports jsonPath capability):</t>

<figure><sourcecode type="json"><![CDATA[
[
  ["CalendarEvent/get", {
    "accountId": "a1",
    "ids": ["event-template"],
    "properties": [ "locations", 
                    "organizerCalendarAddress",
                    "participants"]
  }, "c0"],
  ["CalendarEvent/set", {
    "accountId": "a1",
    "update": {
      "event-123": {
        "#/locations/a1": {
          "resultOf": "c0",
          "name": "CalendarEvent/get",
          "path": "$.list[0].locations.loc1"
        },
        "#/organizerCalendarAddress": {
          "resultOf": "c0",
          "name": "CalendarEvent/get",
          "path": "$.list[0].organizerCalendarAddress"
        },
        "#/participants/p1": {
          "resultOf": "c0",
          "name": "CalendarEvent/get",
          "path": "$.list[0].participants[?@.roles.chair]"
        }
      }
    }
  }, "c1"]
]
]]></sourcecode></figure>

<t>In this example, the patch object updates specific properties of event-123 using values extracted from a template event. The patch updates a single location entry ("locations/a1"), copies the organizer's calendar address, and adds a participant ("participants/p1") by extracting a participant with the "chair" role from the template using a JSON Path filter expression. The patch keys "#/locations/a1", "#/organizerCalendarAddress", and "#/participants/p1" use JSON Pointer syntax (prefixed with "#"), while the ResultReference path properties use a mix of JSON Path expressions (including the filter expression for selecting the chair participant) and simple paths.</t>

</section>
<section anchor="usage-in-query-filtercondition"><name>Usage in /query FilterCondition</name>

<t>Example using JSON Path for array extraction (assuming server supports jsonPath capability):</t>

<figure><sourcecode type="json"><![CDATA[
[
  ["Mailbox/query", {
    "accountId": "a1",
    "filter": {
      "role": "inbox"
    }
  }, "c0"],
  ["Email/query", {
    "accountId": "a1",
    "filter": {
      "#inMailboxOtherThan": {
        "resultOf": "c0",
        "name": "Mailbox/query",
        "path": "$.ids[0]"
      },
      "from": "boss@example.com"
    },
    "sort": [{"property": "receivedAt", "isAscending": false}],
    "limit": 50
  }, "c1"]
]
]]></sourcecode></figure>

<t>In this example, the Email/query uses a dynamically resolved mailbox id from the previous Mailbox/query call. The JSON Path expression <spanx style="verb">$.ids[0]</spanx> extracts the first mailbox id from the query result. The server resolves this reference before executing the email query, effectively filtering emails that are not in the user's inbox and are from a specific sender.</t>

</section>
<section anchor="extracting-multiple-values-with-json-path"><name>Extracting Multiple Values with JSON Path</name>

<t>Example demonstrating JSON Path for extracting multiple values:</t>

<figure><artwork><![CDATA[
[
  ["Email/get", {
    "accountId": "a1",
    "ids": ["template-email-id"],
    "properties": ["attachments"],
    "bodyProperties": ["blobId", "name", "type"]
  }, "c0"],
  ["Email/set", {
    "accountId": "a1",
    "create": {
      "new-email": {
        "mailboxIds": {
          "inbox-id": true
        },
        "subject": "Quarterly Reports",
        "from": [{"email": "sender@example.com"}],
        "to": [{"email": "recipient@example.com"}],
        "#attachments": {
          "resultOf": "c0",
          "name": "Email/get",
          "path": "$.list[0].attachments[?@.name && 
                @.name.toLowerCase().endsWith('.pdf')]"
        }
      }
    }
  }, "c1"]
]
]]></artwork></figure>

<t>In this example, the JSON Path expression <spanx style="verb">$.list[0].attachments[?@.name &amp;&amp; @.name.toLowerCase().endsWith('.pdf')]</spanx> extracts all EmailBodyPart objects from the attachments array that have a "name" property ending with ".pdf" (case-insensitive). The result would be an array of EmailBodyPart objects (each containing <spanx style="verb">blobId</spanx>, <spanx style="verb">name</spanx> and <spanx style="verb">type</spanx>) that is then used to populate the attachments property of the new email, effectively copying only the PDF attachments from the template email.</t>

</section>
</section>
<section anchor="security-considerations"><name>Security Considerations</name>

<t>The security considerations described in <xref target="RFC8620"/> and <xref target="RFC9535"/> apply to this specification. This section discusses additional security implications introduced by allowing result references to be used in object properties and FilterCondition objects, and by supporting JSON Path expressions.</t>

<section anchor="denial-of-service-considerations"><name>Denial of Service Considerations</name>

<t>Enhanced result references, particularly when combined with JSON Path support, introduce additional denial of service (DoS) vectors that implementations must address.</t>

<section anchor="computational-complexity-of-json-path"><name>Computational Complexity of JSON Path</name>

<t>JSON Path expressions can be significantly more computationally expensive to evaluate than JSON Pointer references. Servers supporting JSON Path <bcp14>MUST</bcp14> implement appropriate safeguards against excessive resource consumption:</t>

<t><list style="symbols">
  <t>Servers <bcp14>SHOULD</bcp14> enforce limits on the complexity of JSON Path expressions, such as maximum expression length, maximum nesting depth of selectors, or maximum number of filter predicates.</t>
  <t>Servers <bcp14>SHOULD</bcp14> enforce timeouts on JSON Path evaluation to prevent indefinitely long computations.</t>
  <t>Servers <bcp14>SHOULD</bcp14> limit the size of nodelists that can be produced by a single JSON Path expression. An expression that matches a very large number of nodes could consume excessive memory.</t>
  <t>Servers <bcp14>SHOULD</bcp14> consider the cumulative cost of evaluating multiple result references in a single request. An attacker might attempt to overwhelm the server by including many complex JSON Path expressions in a single request.</t>
</list></t>

<t>Servers that implement these limitations <bcp14>MUST</bcp14> return an "invalidResultReference" error when a limit is exceeded, with a description that indicates the nature of the limitation where possible without revealing sensitive operational details.</t>

</section>
<section anchor="resource-exhaustion-through-reference-chains"><name>Resource Exhaustion Through Reference Chains</name>

<t>Enhanced result references enable longer and more complex chains of dependent method calls within a single request. While this is a design goal that improves efficiency, it also creates opportunities for resource exhaustion:</t>

<t><list style="symbols">
  <t>An attacker might construct requests with deeply nested result reference dependencies that require the server to maintain large amounts of intermediate state.</t>
  <t>The expanded use of result references in /set operations means that a single method call might need to resolve many result references across complex nested object structures.</t>
  <t>Result references in FilterCondition objects might require repeated evaluation of the same reference multiple times during query execution.</t>
</list></t>

<t>Servers <bcp14>SHOULD</bcp14> enforce reasonable limits on the complexity of result reference usage, such as:</t>

<t><list style="symbols">
  <t>Maximum number of result references per request</t>
  <t>Maximum number of result references per method call</t>
  <t>Maximum depth of property nesting when resolving result references in /set operations</t>
  <t>Maximum number of FilterCondition objects containing result references in a single query</t>
</list></t>

<t>These limits <bcp14>SHOULD</bcp14> be documented and consistent with other JMAP request limits defined in <xref target="RFC8620"/>.</t>

</section>
<section anchor="algorithmic-complexity-attacks"><name>Algorithmic Complexity Attacks</name>

<t>Certain combinations of JSON Path expressions and data structures can exhibit pathological performance characteristics. For example:</t>

<t><list style="symbols">
  <t>Recursive descent (..) combined with wildcard selectors on deeply nested structures can produce very large intermediate results.</t>
  <t>Filter expressions with complex predicates applied to large arrays can require substantial computation.</t>
  <t>JSON Path expressions that produce large nodelists, when used multiple times within a single request, can cause quadratic or worse time complexity.</t>
</list></t>

<t>Servers <bcp14>SHOULD</bcp14> implement query cost analysis and impose limits on expensive operations. When possible, servers <bcp14>SHOULD</bcp14> detect potentially problematic patterns before full evaluation and reject them proactively.</t>

</section>
</section>
<section anchor="data-integrity-and-validation-concerns"><name>Data Integrity and Validation Concerns</name>

<t>The use of result references in /set operations creates additional considerations for data validation and integrity.</t>

<section anchor="type-confusion"><name>Type Confusion</name>

<t>Result references resolve to values of arbitrary JSON types. When these values are used to populate object properties or filter conditions, type mismatches can occur. While this specification requires servers to validate types after resolution, implementations must be careful to avoid type confusion vulnerabilities:</t>

<t><list style="symbols">
  <t>Type validation <bcp14>MUST</bcp14> occur after result reference resolution but before the value is used in any security-sensitive operation.</t>
  <t>Servers <bcp14>MUST NOT</bcp14> make assumptions about the type of a resolved value based on the context. The value type must be explicitly checked.</t>
  <t>String-to-number or string-to-boolean coercions <bcp14>MUST NOT</bcp14> be performed automatically, as these can lead to unexpected behavior and potential security issues.</t>
</list></t>

</section>
<section anchor="injection-attacks"><name>Injection Attacks</name>

<t>When result references are used to populate FilterCondition properties, there is a potential for filter injection attacks. Consider a scenario where a result reference is used to set a filter property that expects a simple string value, but the resolution produces a complex object or an array:</t>

<t><list style="symbols">
  <t>Servers <bcp14>MUST</bcp14> validate that resolved values match the expected type and structure for the property or filter being populated.</t>
  <t>Servers <bcp14>MUST NOT</bcp14> attempt to serialize complex objects to strings or perform other automatic conversions that might enable injection attacks.</t>
  <t>When a resolved value is used in a filter that performs string matching or other operations, the server <bcp14>MUST</bcp14> ensure that the value is properly sanitized and does not alter the semantic meaning of the filter.</t>
</list></t>

</section>
<section anchor="circular-reference-prevention"><name>Circular Reference Prevention</name>

<t>While JMAP's sequential processing model prevents direct circular references (a method cannot reference a method that comes after it), enhanced result references in nested object structures could potentially create complex data copying patterns that consume excessive memory or lead to unexpected behavior. Servers <bcp14>SHOULD</bcp14> implement safeguards against pathological data copying patterns.</t>

</section>
</section>
<section anchor="privacy-considerations"><name>Privacy Considerations</name>

<t>Enhanced result references can affect user privacy in several ways:</t>

<section anchor="data-leakage-across-contexts"><name>Data Leakage Across Contexts</name>

<t>The ability to copy data from one JMAP object to another using result references creates potential for unintended data leakage. For example:</t>

<t><list style="symbols">
  <t>Private or sensitive data from one context might be inadvertently copied into a more widely shared context.</t>
  <t>Metadata or structural information might be leaked through the types and structures of resolved values.</t>
</list></t>

<t>Implementations <bcp14>SHOULD</bcp14> provide mechanisms for administrators and users to understand and control how data flows between different contexts through result references.</t>

</section>
<section anchor="audit-and-logging"><name>Audit and Logging</name>

<t>The use of result references can obscure the true source of data in audit logs. When an object is created or modified using result references, audit logs <bcp14>SHOULD</bcp14> record not just the final object state but also information about which data was derived from result references. This enables proper forensic analysis and compliance with data protection regulations.</t>

</section>
</section>
<section anchor="implementation-considerations"><name>Implementation Considerations</name>

<t>Implementers should be aware of several security-relevant implementation challenges:</t>

<section anchor="parser-security"><name>Parser Security</name>

<t>JSON Path parsers are complex and may contain vulnerabilities. Servers implementing JSON Path support <bcp14>SHOULD</bcp14>:</t>

<t><list style="symbols">
  <t>Use well-tested, maintained JSON Path libraries rather than custom implementations.</t>
  <t>Keep JSON Path libraries up to date with security patches.</t>
  <t>Consider sandboxing or isolating JSON Path evaluation from critical server components.</t>
</list></t>

</section>
<section anchor="cache-security"><name>Cache Security</name>

<t>To improve performance, servers might cache the results of result reference resolution. Such caches <bcp14>MUST</bcp14> respect all security boundaries:</t>

<t><list style="symbols">
  <t>Cached results <bcp14>MUST NOT</bcp14> be shared across different users or security contexts.</t>
  <t>Cache entries <bcp14>MUST</bcp14> be invalidated when relevant access control policies change.</t>
  <t>Cache implementations <bcp14>MUST</bcp14> be resistant to timing attacks that might reveal the presence or contents of cached data.</t>
</list></t>

</section>
<section anchor="backward-compatibility"><name>Backward Compatibility</name>

<t>Servers that support enhanced result references <bcp14>MUST</bcp14> continue to correctly handle requests from clients that do not use this extension. In particular:</t>

<t><list style="symbols">
  <t>Servers <bcp14>MUST</bcp14> correctly reject enhanced result references from clients that have not included the <spanx style="verb">urn:ietf:params:jmap:refplus</spanx> capability in the "using" property of the request.</t>
  <t>The presence of properties with "#" prefixes in contexts where standard JMAP does not allow result references <bcp14>MUST</bcp14> be handled appropriately (typically as invalid property names).</t>
</list></t>

</section>
</section>
</section>
<section anchor="iana-considerations"><name>IANA considerations</name>

<section anchor="jmap-capability-registration-for-refplus"><name>JMAP Capability Registration for "refplus"</name>

<t>IANA will register the "refplus" JMAP Capability as follows:</t>

<t><strong>Capability Name:</strong> urn:ietf:params:jmap:refplus<br />
<strong>Specification document:</strong> this document<br />
<strong>Intended use:</strong> common<br />
<strong>Change Controller:</strong> IETF<br />
<strong>Security and privacy considerations:</strong> this document, <xref target="security-considerations"></xref></t>

</section>
</section>


  </middle>

  <back>


<references title='References' anchor="sec-combined-references">

    <references title='Normative References' anchor="sec-normative-references">



<reference anchor="RFC8620">
  <front>
    <title>The JSON Meta Application Protocol (JMAP)</title>
    <author fullname="N. Jenkins" initials="N." surname="Jenkins"/>
    <author fullname="C. Newman" initials="C." surname="Newman"/>
    <date month="July" year="2019"/>
    <abstract>
      <t>This document specifies a protocol for clients to efficiently query, fetch, and modify JSON-based data objects, with support for push notification of changes and fast resynchronisation and for out-of- band binary data upload/download.</t>
    </abstract>
  </front>
  <seriesInfo name="RFC" value="8620"/>
  <seriesInfo name="DOI" value="10.17487/RFC8620"/>
</reference>

<reference anchor="RFC8621">
  <front>
    <title>The JSON Meta Application Protocol (JMAP) for Mail</title>
    <author fullname="N. Jenkins" initials="N." surname="Jenkins"/>
    <author fullname="C. Newman" initials="C." surname="Newman"/>
    <date month="August" year="2019"/>
    <abstract>
      <t>This document specifies a data model for synchronising email data with a server using the JSON Meta Application Protocol (JMAP). Clients can use this to efficiently search, access, organise, and send messages, and to get push notifications for fast resynchronisation when new messages are delivered or a change is made in another client.</t>
    </abstract>
  </front>
  <seriesInfo name="RFC" value="8621"/>
  <seriesInfo name="DOI" value="10.17487/RFC8621"/>
</reference>

<reference anchor="RFC9535">
  <front>
    <title>JSONPath: Query Expressions for JSON</title>
    <author fullname="S. Gössner" initials="S." role="editor" surname="Gössner"/>
    <author fullname="G. Normington" initials="G." role="editor" surname="Normington"/>
    <author fullname="C. Bormann" initials="C." role="editor" surname="Bormann"/>
    <date month="February" year="2024"/>
    <abstract>
      <t>JSONPath defines a string syntax for selecting and extracting JSON (RFC 8259) values from within a given JSON value.</t>
    </abstract>
  </front>
  <seriesInfo name="RFC" value="9535"/>
  <seriesInfo name="DOI" value="10.17487/RFC9535"/>
</reference>

<reference anchor="RFC6901">
  <front>
    <title>JavaScript Object Notation (JSON) Pointer</title>
    <author fullname="P. Bryan" initials="P." role="editor" surname="Bryan"/>
    <author fullname="K. Zyp" initials="K." surname="Zyp"/>
    <author fullname="M. Nottingham" initials="M." role="editor" surname="Nottingham"/>
    <date month="April" year="2013"/>
    <abstract>
      <t>JSON Pointer defines a string syntax for identifying a specific value within a JavaScript Object Notation (JSON) document.</t>
    </abstract>
  </front>
  <seriesInfo name="RFC" value="6901"/>
  <seriesInfo name="DOI" value="10.17487/RFC6901"/>
</reference>

<reference anchor="RFC8259">
  <front>
    <title>The JavaScript Object Notation (JSON) Data Interchange Format</title>
    <author fullname="T. Bray" initials="T." role="editor" surname="Bray"/>
    <date month="December" year="2017"/>
    <abstract>
      <t>JavaScript Object Notation (JSON) is a lightweight, text-based, language-independent data interchange format. It was derived from the ECMAScript Programming Language Standard. JSON defines a small set of formatting rules for the portable representation of structured data.</t>
      <t>This document removes inconsistencies with other specifications of JSON, repairs specification errors, and offers experience-based interoperability guidance.</t>
    </abstract>
  </front>
  <seriesInfo name="STD" value="90"/>
  <seriesInfo name="RFC" value="8259"/>
  <seriesInfo name="DOI" value="10.17487/RFC8259"/>
</reference>

<reference anchor="RFC2119">
  <front>
    <title>Key words for use in RFCs to Indicate Requirement Levels</title>
    <author fullname="S. Bradner" initials="S." surname="Bradner"/>
    <date month="March" year="1997"/>
    <abstract>
      <t>In many standards track documents several words are used to signify the requirements in the specification. These words are often capitalized. This document defines these words as they should be interpreted in IETF documents. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements.</t>
    </abstract>
  </front>
  <seriesInfo name="BCP" value="14"/>
  <seriesInfo name="RFC" value="2119"/>
  <seriesInfo name="DOI" value="10.17487/RFC2119"/>
</reference>

<reference anchor="RFC8174">
  <front>
    <title>Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words</title>
    <author fullname="B. Leiba" initials="B." surname="Leiba"/>
    <date month="May" year="2017"/>
    <abstract>
      <t>RFC 2119 specifies common key words that may be used in protocol specifications. This document aims to reduce the ambiguity by clarifying that only UPPERCASE usage of the key words have the defined special meanings.</t>
    </abstract>
  </front>
  <seriesInfo name="BCP" value="14"/>
  <seriesInfo name="RFC" value="8174"/>
  <seriesInfo name="DOI" value="10.17487/RFC8174"/>
</reference>




    </references>

    <references title='Informative References' anchor="sec-informative-references">



<reference anchor="RFC9610">
  <front>
    <title>JSON Meta Application Protocol (JMAP) for Contacts</title>
    <author fullname="N. Jenkins" initials="N." role="editor" surname="Jenkins"/>
    <date month="December" year="2024"/>
    <abstract>
      <t>This document specifies a data model for synchronising contact data with a server using the JSON Meta Application Protocol (JMAP).</t>
    </abstract>
  </front>
  <seriesInfo name="RFC" value="9610"/>
  <seriesInfo name="DOI" value="10.17487/RFC9610"/>
</reference>


<reference anchor="I-D.ietf-jmap-calendars">
   <front>
      <title>JSON Meta Application Protocol (JMAP) for Calendars</title>
      <author fullname="Neil Jenkins" initials="N." surname="Jenkins">
         <organization>Fastmail</organization>
      </author>
      <author fullname="Michael Douglass" initials="M." surname="Douglass">
         <organization>Spherical Cow Group</organization>
      </author>
      <date day="4" month="November" year="2025"/>
      <abstract>
	 <t>   This document specifies a data model for synchronizing calendar data
   with a server using JMAP.  Clients can use this to efficiently read,
   write, and share calendars and events, receive push notifications for
   changes or event reminders, and keep track of changes made by others
   in a multi-user environment.

	 </t>
      </abstract>
   </front>
   <seriesInfo name="Internet-Draft" value="draft-ietf-jmap-calendars-26"/>
   
</reference>




    </references>

</references>


<?line 579?>

<section anchor="changes"><name>Changes</name>

<t>[[This section to be removed by RFC Editor]]</t>

<t><strong>draft-ietf-jmap-refplus-00</strong></t>

<t><list style="symbols">
  <t>Initial version</t>
</list></t>

</section>


  </back>

<!-- ##markdown-source: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-->

</rfc>

