Bernd Rodler a622e3755b fix: Phase 1 critical+high fixes (17/18 items) ...

CRITICAL fixes:
- C1: Error swallowing - throw TransportError on network failure in getEmails/searchEmails
- C2: Recurrence expansion ID delimiter changed from ':' to '::occurrence::'
- C3: Cross-account calendar event UID dedup after multi-account aggregation
- C4: Admin session token revocation via JTI blacklist on logout
- C6: FTS5 schema-drop - add warning log for automatic reindex trigger
- C7: Settings lock - gate updateSetting() with isSettingLocked() check
- C8: Offline push pause - add offline event handler that closes push transports

HIGH fixes:
- H1: Push handler - add ContactCard and FileNode branches
- H2: WS fallback - await state snapshot before reconcileAfterWebSocketFallback
- H3: Auth rate limiting - add checkUserAuthRateLimit to session and token routes
- H4: OAuth logs - strip access_token from error log context
- H7: Template XSS - apply DOMPurify to HTML template body on import
- H8: Secure cookie - derive from x-forwarded-proto, not NODE_ENV
- H9: bcrypt fix - remove bcrypt prefixes from isHashed() so scrypt-only
- H13: calendarTasksEnabled - apply admin gate at runtime in calendar page
- H14: Task mutations - add try/catch error handling to update/delete/toggle
- H18: autoSelectReplyIdentity default changed from false to true

Deferred: P1.3 (C5 auth localStorage encryption) - requires custom Zustand persist adapter.

2026-08-07 12:17:41 +02:00

..

__tests__

feat(ai): real retrieval — SourceRef, RRF fusion, real embedding leg (P3/P4)

2026-08-06 00:21:13 +02:00

admin

fix: Phase 1 critical+high fixes (17/18 items)

2026-08-07 12:17:41 +02:00

ai

feat(ai): OpenCode provider management (B4) — "any LLM OpenCode supports", from inside VNCmail+

2026-08-07 12:09:14 +02:00

auth

feat: require re-authentication for device pairing and SSO

2026-06-05 19:23:06 +02:00

demo

feat(theme): ship exactly 2 themes (SRC default + VNClagoon); rebrand user-facing VNCmail+

2026-08-05 23:43:19 +02:00

impersonation

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

jmap

fix: Phase 1 critical+high fixes (17/18 items)

2026-08-07 12:17:41 +02:00

mail-index

fix: Phase 1 critical+high fixes (17/18 items)

2026-08-07 12:17:41 +02:00

oauth

fix: Phase 1 critical+high fixes (17/18 items)

2026-08-07 12:17:41 +02:00

offline-replica

feat(electron): real offline mail replica — delta sync, full bodies, retention

2026-08-05 17:40:13 +02:00

plugin-sandbox

fix(security): gate plugin hook registration on granted permissions

2026-08-04 08:57:14 +02:00

protocol-handlers

feat: email a contact or group via the in-app composer

2026-06-19 12:29:43 +02:00

security

fix: validate URLs before outbound fetch

2026-04-27 22:23:39 +02:00

setup

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

sieve

Feature: extended filter rules — attachment field + multi-value conditions

2026-05-30 15:45:33 +02:00

smime-ca

feat(smime): real local dev CA (LocalDevCaProvider), CSR issuance verified

2026-08-06 00:30:27 +02:00

stalwart

feat(theme): SRC theme v1.1.0 — MD3 components (shape scale, buttons, cards, dialogs, state layers)

2026-08-03 19:13:07 +02:00

telemetry

feat: add option to disable calendar

2026-06-24 18:39:38 +02:00

version-check

chore: update version to 1.6.2

2026-05-06 20:07:36 +02:00

webdav

fix: prefix remaining <img>, favicon, and WebDAV URLs with basePath #319

2026-05-25 16:45:13 +02:00

account-state-manager.ts

refactor: move S/MIME to generic crypto plugin hooks

2026-06-28 19:13:02 +02:00

account-utils.ts

feat(accounts): pin default account on top + drag-to-reorder switcher

2026-07-04 14:51:46 +02:00

birthday-calendar.ts

chore: clear pre-commit eslint warnings (unused symbols, stale disables, test any)

2026-06-19 12:31:07 +02:00

browser-navigation.ts

chore: clear pre-commit eslint warnings (unused symbols, stale disables, test any)

2026-06-19 12:31:07 +02:00

builtin-themes.ts

feat(branding): SRC mark + SRC as default theme, and let an admin logo win

2026-08-05 17:48:42 +02:00

calendar-alerts.ts

fix: strike through cancelled events and mute their reminders #572

2026-07-07 23:26:36 +02:00

calendar-event-normalization.ts

fix: JSCalendar 2.0 recurrenceRule single-object compatibility 116

2026-03-31 00:11:04 +02:00

calendar-ics-export.ts

i18n: add missing translation keys

2026-04-21 17:42:52 +02:00

calendar-invitation.ts

fix: export isCalendarMimeType for use in email attachment filtering

2026-04-16 16:54:09 +02:00

calendar-participants.ts

fix(calendar): classify self-organized imported events as editable via organizerCalendarAddress fallback

2026-07-21 21:00:53 +02:00

calendar-utils.ts

fix: handle malformed event dates in calendar route #316

2026-05-22 14:04:02 +02:00

clear-cached-data.ts

feat(settings): add "Refresh cached data" recovery action

2026-07-21 20:58:55 +02:00

color-transform.ts

feat: add participant scheduling with iTIP invitations and inline calendar invitation banner

2026-02-17 01:09:57 +01:00

debug.ts

feat: store trusted senders in a dedicated JMAP address book #176

2026-04-12 01:10:28 +02:00

download-filename.ts

feat: add "Download all" button to bundle attachments into a zip #466

2026-06-24 18:46:41 +02:00

electron-bridge.ts

feat(electron): native notification bridge over contextBridge/IPC

2026-08-04 12:48:30 +02:00

email-composer-utils.ts

fix: honor part-type fallback when quoting replies #649

2026-07-21 23:27:40 +02:00

email-headers.ts

fix: stop HELO spf=none from downgrading a MAIL FROM spf=pass #650

2026-07-21 23:03:34 +02:00

email-sanitization.ts

feat: collapse quoted reply text behind a "..." toggle #480

2026-07-22 19:17:23 +02:00

email-source.ts

feat: add plugin hooks for email details, headers, and source

2026-06-25 01:04:26 +02:00

email-threading.ts

chore: update version to 1.6.2

2026-05-06 20:07:36 +02:00

eml-import.ts

feat: support importing emails from .zip archives

2026-05-22 15:22:33 +02:00

error-reporting.ts

Initial release: JMAP Webmail Client

2025-12-10 17:54:22 +01:00

favicon-badge.ts

feat: show unread count badge on favicon

2026-07-16 18:00:41 +02:00

file-preview.ts

Feature: preview .eml (message/rfc822) attachments like an email

2026-06-01 17:25:14 +02:00

forward-as-attachment.ts

fix: strip from/to names from forward-as-attachment filenames

2026-07-29 11:41:34 +12:00

html-to-text.ts

fix: preserve line breaks in generated text/plain alternative #421

2026-06-15 23:15:04 +02:00

iframe-bridge.ts

fix: pin parent origin in iframe-bridge to block cross-frame postMessage

2026-05-18 16:01:29 +02:00

jalali-utils.ts

feat: add Jalali (Persian/Shamsi) calendar support with Saturday as week start (#490)

2026-07-08 15:42:42 +02:00

keyboard.ts

fix: detect typing inside the QuotedHtml shadow island via composedPath #654

2026-07-21 23:26:51 +02:00

keyword-format.ts

feat: Add nesting of tags in a tree

2026-07-29 17:18:38 +02:00

keyword-nesting.ts

feat: allow hidden tags, either permanent or when there are no unread messages

2026-07-29 17:18:42 +02:00

logger.ts

feat: add contacts phase 2, advanced search, vacation responder, Docker & TOTP 2FA

2026-02-16 18:51:30 +01:00

mail-index-client.ts

feat(mail-index): 1-year retention by default + a recency retrieval leg

2026-08-07 09:45:10 +02:00

mailbox-label.ts

fix: localize special-folder names by JMAP role #404

2026-06-24 19:32:13 +02:00

mdn.ts

Feature: read receipts (MDN, RFC 8098)

2026-05-30 15:58:39 +02:00

notification-sound.ts

Fix: notification sound preview - base-path prefix + longer default beep

2026-07-04 14:52:26 +02:00

offline-fallback-client.ts

feat(electron): real offline mail replica — delta sync, full bodies, retention

2026-08-05 17:40:13 +02:00

offline-replica-client.ts

feat(electron): real offline mail replica — delta sync, full bodies, retention

2026-08-05 17:40:13 +02:00

platform-capabilities.ts

feat(ai): P0 client scaffolding — capability flags, settings pane, policy fetch

2026-08-05 22:02:40 +02:00

plugin-hooks.ts

feat: add message-list category tabs

2026-07-22 17:22:20 +02:00

plugin-i18n.ts

fix: standardize punctuation

2026-04-16 19:07:42 +02:00

plugin-loader.ts

Feature: localizable sandboxed plugins (manifest locales + api.i18n.t)

2026-05-30 15:56:55 +02:00

plugin-projection.ts

feat: add plugin hooks for email details, headers, and source

2026-06-25 01:04:26 +02:00

plugin-storage.ts

feat: add 3 new plugin hooks : onBeforeBlobUpload, onBeforeDraftAutoSave, onBeforeEditDraft (#586)

2026-07-09 14:55:34 +02:00

plugin-types.ts

feat(theme): per-theme brand logos (VNClagoon wordmark ↔ SRC mark)

2026-08-03 18:23:42 +02:00

plugin-validator.ts

chore: update version to 1.5.3

2026-04-28 17:34:06 +02:00

quote-collapse.ts

feat: collapse quoted reply text behind a "..." toggle #480

2026-07-22 19:17:23 +02:00

quote-header.ts

fix: HTML-escape sender/subject in reply/forward quote header (#482)

2026-06-25 00:25:28 +02:00

read-file-env.ts

feat: add SESSION_SECRET_FILE and OAUTH_CLIENT_SECRET_FILE env vars

2026-04-09 22:13:08 +02:00

recurrence-expansion.ts

fix: Phase 1 critical+high fixes (17/18 items)

2026-08-07 12:17:41 +02:00

reply-identity.ts

fix(email): restore the sender identity when reopening a draft

2026-07-23 19:36:33 +02:00

reply-recipients.ts

fix: reply to own thread message addresses original recipients #703

2026-07-30 19:02:39 +02:00

settings-sync.ts

feat: web setup wizard + admin config/state dir split (#226)

2026-05-09 17:37:41 +02:00

shared-calendar-colors.ts

Feature: per-viewer colors for shared calendars (#345)

2026-05-31 15:52:27 +02:00

signature-utils.ts

fix: preserve line breaks in generated text/plain alternative #421

2026-06-15 23:15:04 +02:00

sub-addressing.ts

chore: update version to 1.6.2

2026-05-06 20:07:36 +02:00

subject-prefix.ts

fix: strip reply/forward prefixes followed by a full-width colon

2026-06-24 15:56:38 +02:00

template-types.ts

feat(templates): add support for HTML templates

2026-07-19 10:10:31 +02:00

template-utils.ts

fix: Phase 1 critical+high fixes (17/18 items)

2026-08-07 12:17:41 +02:00

theme-compiler.ts

chore: update version to 1.5.3

2026-04-28 17:34:06 +02:00

theme-loader.ts

chore: update version to 1.5.3

2026-04-28 17:34:06 +02:00

theme-logo.ts

feat(branding): SRC mark + SRC as default theme, and let an admin logo win

2026-08-05 17:48:42 +02:00

thread-utils.ts

feat: Make it easier to handle multiple tags

2026-07-29 17:18:42 +02:00

tnef.ts

fix: standardize punctuation

2026-04-16 19:07:42 +02:00

unified-mailbox.ts

fix(unified-mailbox): single-source unified counters, unified id space, background push

2026-07-11 21:14:50 +02:00

utils.ts

feat(folders): drag-and-drop reorder for all folders

2026-07-21 20:56:38 +02:00

validation.ts

Fix: send mailto unsubscribe ourselves instead of via the OS handler

2026-07-08 15:41:46 +02:00

vcard.ts

feat: allow contact cards for organizations #701

2026-07-30 19:44:36 +02:00

version-compare.ts

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

web-push.ts

ix: reap only relay-confirmed-dead leftover push subscriptions

2026-06-17 09:11:29 +02:00