Bernd Rodler cfdd091d22 feat: Phase 3+4 — security hardening + polish + offline + Electron push ...

Phase 3 (security):
- P3.1: Feature gate server-side enforcement (403 on disabled features)
- P3.2: Unified auth error interceptor (401→logout)
- P3.3: Store-level state isolation via StoreSnapshot contract
  (added message-list-tabs + task stores to snapshot/restore cycle)
- P3.4: Push event bus extraction — email-store no longer imports
  calendar/contact/filter/file stores directly
- P1.3: Auth localStorage AES-GCM encryption via custom Zustand adapter

Phase 4 (polish):
- P4.1: Offline write queue — pending operations in localStorage,
  auto-retry on reconnect, offline-queue-indicator banner
- P4.2: Identity spoofing — fromOverrideEmail domain validation
- P4.3: WebSocket push for Electron via main-process IPC bridge
  (ws package with Authorization headers)

2026-08-07 22:10:26 +02:00

..

__tests__

feat(unified-mailbox): account-bounded Unified Mailbox with opt-in cross-account

2026-07-11 21:14:34 +02:00

audit.ts

feat: web setup wizard + admin config/state dir split (#226)

2026-05-09 17:37:41 +02:00

bundled-plugins.ts

feat(smime): actually install the audited S/MIME plugin in real builds

2026-08-05 17:01:47 +02:00

config-manager.ts

feat(admin): build the AI Policy console (§6) — approved, spec now implemented

2026-08-06 08:48:30 +02:00

csp-frame-origins.ts

fix: correct regex for valid API post path validation

2026-05-18 12:44:54 +02:00

domain-branding.ts

fix: use callable .get to detect Headers in pickRequestHost

2026-07-09 13:51:12 +02:00

feature-gate.ts

feat: Phase 3+4 — security hardening + polish + offline + Electron push

2026-08-07 22:10:26 +02:00

jmap-servers.ts

chore: update version to 1.6.2

2026-05-06 20:07:36 +02:00

migrate.ts

feat(unified-mailbox): account-bounded Unified Mailbox with opt-in cross-account

2026-07-11 21:14:34 +02:00

password.ts

fix: Phase 1 critical+high fixes (17/18 items)

2026-08-07 12:40:32 +02:00

paths.ts

feat: web setup wizard + admin config/state dir split (#226)

2026-05-09 17:37:41 +02:00

plugin-approvals.ts

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

plugin-config.ts

feat: web setup wizard + admin config/state dir split (#226)

2026-05-09 17:37:41 +02:00

plugin-dev.ts

feat(smime): actually install the audited S/MIME plugin in real builds

2026-08-05 17:01:47 +02:00

plugin-registry.ts

feat: add privileged same-origin plugin tier + crypto API surface

2026-06-28 16:51:42 +02:00

plugin-signing.ts

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

rate-limit.ts

fix: Phase 1 critical+high fixes (17/18 items)

2026-08-07 12:40:32 +02:00

session.ts

fix: Phase 1 critical+high fixes (17/18 items)

2026-08-07 12:40:32 +02:00

types.ts

fix: Phase 2 QA — all 25 remaining HIGH/MEDIUM/LOW issues

2026-08-07 14:21:07 +02:00

vncdirectory-config.ts

feat: P2.9 VNCtalk + P2.10 Collabora + P2.11 Calendar Enhancements + P2.13 VNCdirectory Admin

2026-08-07 13:38:12 +02:00