@rapidmx/web-client 0.14.1 → 0.16.0

package/dist/apps/admin/data-requests/index.js

@@ -173,5 +173,5 @@ function ErasureRequestsSection() {
             setDenying(false);
         }
     }
-    return (_jsxs("section", { children: [_jsx("h2", { className: "text-sm font-bold uppercase tracking-wide text-text-muted mb-3", children: "Erasure requests" }), _jsx("p", { className: "text-xs text-text-muted mb-3", children: "Self-service only \u2014 a mailbox owner requests their own account's erasure; there is no admin-initiated path here, only review." }), list.loadError && _jsx(Alert, { children: list.loadError }), list.loading ? (_jsx("p", { className: "text-sm text-text-muted", children: "Loading\u2026" })) : list.items.length === 0 ? (_jsx("p", { className: "text-sm text-text-muted", children: "No erasure requests." })) : (_jsx("ul", { className: "flex flex-col gap-2", children: list.items.map((request) => (_jsxs("li", { className: "border border-border rounded-sm p-3", children: [_jsxs("div", { className: "flex items-center justify-between gap-3", children: [_jsxs("span", { className: "text-sm", children: [request.mailboxUid, " \u00B7 ", new Date(request.dateCreated).toLocaleString(), request.status === "denied" && request.reason && (_jsxs("span", { className: "text-danger", children: [" \u2014 ", request.reason] })), request.status === "completed" && request.purgedCount !== undefined && (_jsxs("span", { className: "text-text-muted", children: [" \u2014 ", request.purgedCount, " records purged"] }))] }), _jsx("span", { className: `text-xs font-bold uppercase tracking-wide py-0.5 px-2 rounded-pill ${statusBadgeClass(request.status)}`, children: statusLabel(request.status) })] }), request.status === "pending" && (_jsxs("div", { className: "flex gap-3 mt-2", children: [_jsx(Button, { type: "button", className: "!w-auto", onClick: () => setApproveTarget(request), children: "Approve" }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: () => setDenyTarget(request), children: "Deny" })] }))] }, request.uid))) })), _jsx(LoadMoreButton, { list: list, label: "Load more erasure requests" }), _jsxs(Modal, { open: approveTarget !== null, onClose: dismissApproveModal, title: "Approve erasure request", children: [_jsxs("p", { className: "text-sm mb-3", children: ["Approving permanently erases the mailbox ", _jsx("strong", { className: "break-all", children: approveTarget?.mailboxUid }), " ", "and everything in it - mail, contacts, calendars, tasks, and notes."] }), _jsx("p", { className: "text-sm font-semibold text-danger mb-4", children: "This is irreversible and cannot be undone." }), approveError && _jsx(Alert, { children: approveError }), _jsxs("div", { className: "flex gap-3 justify-end", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: approving, onClick: closeApproveModal, children: "Cancel" }), _jsx(Button, { type: "button", className: "!w-auto !bg-none !bg-danger !border-danger hover:!bg-danger", loading: approving, disabled: approving, onClick: handleApprove, children: "Erase mailbox" })] })] }), _jsxs(Modal, { open: denyTarget !== null, onClose: dismissDenyModal, title: "Deny erasure request", children: [_jsxs("label", { className: "flex flex-col gap-1.5 text-sm mb-4", children: [_jsx("span", { className: "font-semibold", children: "Reason" }), _jsx("input", { "aria-label": "Denial reason", className: INPUT_CLASS, value: denyReason, onChange: (e) => setDenyReason(e.target.value) })] }), denyError && _jsx(Alert, { children: denyError }), _jsxs("div", { className: "flex gap-3 justify-end", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: denying, onClick: closeDenyModal, children: "Cancel" }), _jsx(Button, { type: "button", className: "!w-auto !bg-none !bg-danger !border-danger hover:!bg-danger", loading: denying, disabled: denying || !denyReason.trim(), onClick: handleDeny, children: "Deny" })] })] })] }));
+    return (_jsxs("section", { children: [_jsx("h2", { className: "text-sm font-bold uppercase tracking-wide text-text-muted mb-3", children: "Erasure requests" }), _jsxs("p", { className: "text-xs text-text-muted mb-3", children: ["A mailbox owner requests their own account's erasure and it is reviewed here. Erasing the data a", " ", _jsx("em", { children: "deleted" }), " mailbox left behind is started from the ", _jsx("a", { href: "/admin", className: "text-primary-dark hover:underline", children: "Mailboxes page" }), "; those requests are approved when filed and are marked \u201CDeleted mailbox data\u201D below."] }), list.loadError && _jsx(Alert, { children: list.loadError }), list.loading ? (_jsx("p", { className: "text-sm text-text-muted", children: "Loading\u2026" })) : list.items.length === 0 ? (_jsx("p", { className: "text-sm text-text-muted", children: "No erasure requests." })) : (_jsx("ul", { className: "flex flex-col gap-2", children: list.items.map((request) => (_jsxs("li", { className: "border border-border rounded-sm p-3", children: [_jsxs("div", { className: "flex items-center justify-between gap-3", children: [_jsxs("span", { className: "text-sm", children: [request.mailboxUid, " \u00B7 ", new Date(request.dateCreated).toLocaleString(), request.leftoverOnly && _jsx("span", { className: "text-text-muted", children: " \u00B7 Deleted mailbox data" }), request.status === "denied" && request.reason && (_jsxs("span", { className: "text-danger", children: [" \u2014 ", request.reason] })), request.status === "completed" && request.purgedCount !== undefined && (_jsxs("span", { className: "text-text-muted", children: [" \u2014 ", request.purgedCount, " records purged"] }))] }), _jsx("span", { className: `text-xs font-bold uppercase tracking-wide py-0.5 px-2 rounded-pill ${statusBadgeClass(request.status)}`, children: statusLabel(request.status) })] }), request.status === "pending" && (_jsxs("div", { className: "flex gap-3 mt-2", children: [_jsx(Button, { type: "button", className: "!w-auto", onClick: () => setApproveTarget(request), children: "Approve" }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: () => setDenyTarget(request), children: "Deny" })] }))] }, request.uid))) })), _jsx(LoadMoreButton, { list: list, label: "Load more erasure requests" }), _jsxs(Modal, { open: approveTarget !== null, onClose: dismissApproveModal, title: "Approve erasure request", children: [_jsxs("p", { className: "text-sm mb-3", children: ["Approving permanently erases the mailbox ", _jsx("strong", { className: "break-all", children: approveTarget?.mailboxUid }), " ", "and everything in it - mail, contacts, calendars, tasks, and notes."] }), _jsx("p", { className: "text-sm font-semibold text-danger mb-4", children: "This is irreversible and cannot be undone." }), approveError && _jsx(Alert, { children: approveError }), _jsxs("div", { className: "flex gap-3 justify-end", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: approving, onClick: closeApproveModal, children: "Cancel" }), _jsx(Button, { type: "button", className: "!w-auto !bg-none !bg-danger !border-danger hover:!bg-danger", loading: approving, disabled: approving, onClick: handleApprove, children: "Erase mailbox" })] })] }), _jsxs(Modal, { open: denyTarget !== null, onClose: dismissDenyModal, title: "Deny erasure request", children: [_jsxs("label", { className: "flex flex-col gap-1.5 text-sm mb-4", children: [_jsx("span", { className: "font-semibold", children: "Reason" }), _jsx("input", { "aria-label": "Denial reason", className: INPUT_CLASS, value: denyReason, onChange: (e) => setDenyReason(e.target.value) })] }), denyError && _jsx(Alert, { children: denyError }), _jsxs("div", { className: "flex gap-3 justify-end", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: denying, onClick: closeDenyModal, children: "Cancel" }), _jsx(Button, { type: "button", className: "!w-auto !bg-none !bg-danger !border-danger hover:!bg-danger", loading: denying, disabled: denying || !denyReason.trim(), onClick: handleDeny, children: "Deny" })] })] })] }));
 }

package/dist/apps/admin/domains/[uid].js

@@ -68,8 +68,10 @@ function DomainDetailContent({ uid }) {
             setSavingAlias(false);
         }
     }
-    return (_jsxs("div", { className: "max-w-3xl flex flex-col gap-5", children: [domain && (_jsxs("div", { className: "flex items-start justify-between gap-4", children: [_jsxs("div", { children: [_jsx("a", { href: "/admin/domains", className: "text-sm text-primary-dark hover:underline", children: "\u2190 All domains" }), _jsx("h1", { className: "text-xl font-bold tracking-tight mt-1", children: domain.name })] }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto shrink-0 !border-danger !text-danger hover:!border-danger hover:!text-danger", onClick: () => setConfirmingDelete(true), children: "Delete domain" })] })), _jsx(DomainDnsSetup, { uid: uid, onLoaded: handleLoaded }, refreshCount), domain && (_jsxs("div", { className: "bg-surface border border-border rounded-md p-6", children: [_jsx("h2", { className: "text-sm font-bold uppercase tracking-wide mb-3", children: "Alias" }), _jsx("p", { className: "text-sm text-text-muted mb-3", children: "Make this domain a pure alias of another one - it will still receive (and may send as) mail for the same addresses, but have no mailboxes of its own. Leave blank for a regular domain." }), aliasError && _jsx(Alert, { children: aliasError }), _jsx(FormField, { label: "Alias of", htmlFor: "aliasOf", children: _jsx("input", { id: "aliasOf", type: "text", className: INPUT_CLASS, value: aliasInput ?? "", onChange: (e) => {
+    return (_jsxs("div", { className: "max-w-3xl flex flex-col gap-5", children: [domain && (_jsxs("div", { className: "flex items-start justify-between gap-4", children: [_jsxs("div", { children: [_jsx("a", { href: "/admin/domains", className: "text-sm text-primary-dark hover:underline", children: "\u2190 All domains" }), _jsx("h1", { className: "text-xl font-bold tracking-tight mt-1", children: domain.name })] }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto shrink-0 !border-danger !text-danger hover:!border-danger hover:!text-danger", onClick: () => setConfirmingDelete(true), children: "Delete domain" })] })), _jsx(DomainDnsSetup, { uid: uid, onLoaded: handleLoaded }, refreshCount), domain && (_jsxs("div", { className: "bg-surface border border-border rounded-md p-6", children: [_jsx("h2", { className: "text-sm font-bold uppercase tracking-wide mb-3", children: "Alias" }), _jsx("p", { className: "text-sm text-text-muted mb-3", children: "Make this domain a pure alias of another one - it will still receive (and may send as) mail for the same addresses, but have no mailboxes of its own. Leave blank for a regular domain." }), aliasError && _jsx(Alert, { children: aliasError }), _jsx(FormField, { label: "Alias of", htmlFor: "aliasOf", children: _jsx("input", { id: "aliasOf", type: "text", className: INPUT_CLASS, 
+                            // Set in the same update as `domain` (see `handleLoaded()`), which is what this section waits for.
+                            value: aliasInput, onChange: (e) => {
                                 setAliasInput(e.target.value);
                                 setAliasSaved(false);
-                            }, placeholder: "e.g. powerlevel.gg" }) }), _jsxs("div", { className: "flex items-center gap-3", children: [_jsx(Button, { type: "button", className: "!w-auto", loading: savingAlias, disabled: savingAlias || (aliasInput ?? "") === (domain.aliasOf ?? ""), onClick: handleSaveAlias, children: "Save" }), aliasSaved && _jsx("span", { className: "text-sm text-text-muted", children: "Saved." })] })] })), domain && (_jsxs(Modal, { open: confirmingDelete, onClose: closeDeleteModal, title: "Delete domain", children: [_jsxs("p", { className: "text-sm mb-5", children: ["Are you sure you want to delete ", _jsx("strong", { children: domain.name }), "? This cannot be undone."] }), deleteError && _jsx(Alert, { children: deleteError }), _jsxs("div", { className: "flex gap-3 justify-end mt-5", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: deleting, onClick: closeDeleteModal, children: "Cancel" }), _jsx(Button, { type: "button", className: "!w-auto !bg-none !bg-danger !border-danger hover:!bg-danger", loading: deleting, disabled: deleting, onClick: handleDelete, children: "Delete" })] })] }))] }));
+                            }, placeholder: "e.g. powerlevel.gg" }) }), _jsxs("div", { className: "flex items-center gap-3", children: [_jsx(Button, { type: "button", className: "!w-auto", loading: savingAlias, disabled: savingAlias || aliasInput === (domain.aliasOf ?? ""), onClick: handleSaveAlias, children: "Save" }), aliasSaved && _jsx("span", { className: "text-sm text-text-muted", children: "Saved." })] })] })), domain && (_jsxs(Modal, { open: confirmingDelete, onClose: closeDeleteModal, title: "Delete domain", children: [_jsxs("p", { className: "text-sm mb-5", children: ["Are you sure you want to delete ", _jsx("strong", { children: domain.name }), "? This cannot be undone."] }), deleteError && _jsx(Alert, { children: deleteError }), _jsxs("div", { className: "flex gap-3 justify-end mt-5", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: deleting, onClick: closeDeleteModal, children: "Cancel" }), _jsx(Button, { type: "button", className: "!w-auto !bg-none !bg-danger !border-danger hover:!bg-danger", loading: deleting, disabled: deleting, onClick: handleDelete, children: "Delete" })] })] }))] }));
 }

package/dist/apps/admin/index.js

@@ -8,6 +8,7 @@ import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
 import { listMailboxes } from "@rapidmx/react-shared/mail/mailApi.js";
 import { reopenSetup } from "@rapidmx/react-shared/admin/setupApi.js";
 import AdminShell from "../shared/components/admin/layout/AdminShell.js";
+import LeftoverMailboxesSection from "../shared/components/admin/mailboxes/LeftoverMailboxesSection.js";
 import MailboxTable from "../shared/components/admin/mailboxes/MailboxTable.js";
 import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
 import Button from "@rapidmx/react-shared/components/buttons/Button.js";
@@ -45,5 +46,5 @@ function MailboxesListContent() {
             setConfirmingSetup(false);
         }
     }
-    return (_jsxs(_Fragment, { children: [_jsxs("div", { className: "flex items-center justify-between mb-5", children: [_jsx("h1", { className: "text-xl font-bold uppercase tracking-wide", children: "Mailboxes" }), _jsxs("div", { className: "flex gap-2", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: reopening, onClick: () => setConfirmingSetup(true), children: "Run setup again" }), _jsx("a", { href: "/admin/mailboxes/new", children: _jsx(Button, { type: "button", className: "!w-auto", children: "+ New mailbox" }) })] })] }), _jsx("p", { className: "text-sm text-text-muted mb-4", children: "Administrative details only (addresses, owners, quota). The console never shows a mailbox\u2019s mail: to see someone\u2019s account, impersonate them from their mailbox page." }), error && _jsx(Alert, { children: error }), _jsxs(Modal, { open: confirmingSetup, onClose: () => setConfirmingSetup(false), title: "Run setup again?", children: [_jsx("p", { className: "text-sm mb-4", children: "Setup starts again from its first step, and the admin console sends administrators to it until it's finished. Your existing settings, domains and mailboxes are kept." }), _jsxs("div", { className: "flex gap-2 justify-end", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: () => setConfirmingSetup(false), children: "Cancel" }), _jsx(Button, { type: "button", className: "!w-auto", loading: reopening, disabled: reopening, onClick: () => void handleRunSetup(), children: "Run setup" })] })] }), loading ? (_jsx("p", { className: "text-sm text-text-muted", children: "Loading\u2026" })) : (_jsx(MailboxTable, { mailboxes: mailboxes })), _jsxs("div", { className: "flex gap-3 items-center mt-4", children: [_jsx(Button, { variant: "secondary", type: "button", className: "!w-auto", disabled: page === 0 || loading, onClick: () => setPage((p) => Math.max(0, p - 1)), children: "Previous" }), _jsxs("span", { className: "text-sm text-text-muted", children: ["Page ", page + 1] }), _jsx(Button, { variant: "secondary", type: "button", className: "!w-auto", disabled: !hasNextPage || loading, onClick: () => setPage((p) => p + 1), children: "Next" })] })] }));
+    return (_jsxs(_Fragment, { children: [_jsxs("div", { className: "flex items-center justify-between mb-5", children: [_jsx("h1", { className: "text-xl font-bold uppercase tracking-wide", children: "Mailboxes" }), _jsxs("div", { className: "flex gap-2", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: reopening, onClick: () => setConfirmingSetup(true), children: "Run setup again" }), _jsx("a", { href: "/admin/mailboxes/new", children: _jsx(Button, { type: "button", className: "!w-auto", children: "+ New mailbox" }) })] })] }), _jsx("p", { className: "text-sm text-text-muted mb-4", children: "Administrative details only (addresses, owners, quota). The console never shows a mailbox\u2019s mail: to see someone\u2019s account, impersonate them from their mailbox page." }), error && _jsx(Alert, { children: error }), _jsxs(Modal, { open: confirmingSetup, onClose: () => setConfirmingSetup(false), title: "Run setup again?", children: [_jsx("p", { className: "text-sm mb-4", children: "Setup starts again from its first step, and the admin console sends administrators to it until it's finished. Your existing settings, domains and mailboxes are kept." }), _jsxs("div", { className: "flex gap-2 justify-end", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: () => setConfirmingSetup(false), children: "Cancel" }), _jsx(Button, { type: "button", className: "!w-auto", loading: reopening, disabled: reopening, onClick: () => void handleRunSetup(), children: "Run setup" })] })] }), loading ? (_jsx("p", { className: "text-sm text-text-muted", children: "Loading\u2026" })) : (_jsx(MailboxTable, { mailboxes: mailboxes })), _jsxs("div", { className: "flex gap-3 items-center mt-4", children: [_jsx(Button, { variant: "secondary", type: "button", className: "!w-auto", disabled: page === 0 || loading, onClick: () => setPage((p) => Math.max(0, p - 1)), children: "Previous" }), _jsxs("span", { className: "text-sm text-text-muted", children: ["Page ", page + 1] }), _jsx(Button, { variant: "secondary", type: "button", className: "!w-auto", disabled: !hasNextPage || loading, onClick: () => setPage((p) => p + 1), children: "Next" })] }), _jsx(LeftoverMailboxesSection, {})] }));
 }

package/dist/apps/admin/mailboxes/[uid].js

@@ -35,6 +35,9 @@ function MailboxDetailContent({ uid, impersonationBaseUrl, currentUserUid, }) {
     const [confirmingDelete, setConfirmingDelete] = useState(false);
     const [deleting, setDeleting] = useState(false);
     const [deleteError, setDeleteError] = useState(null);
+    // Deleting keeps the mailbox's data; this also erases it in the same step, after the address is typed to confirm.
+    const [eraseData, setEraseData] = useState(false);
+    const [typedAddress, setTypedAddress] = useState("");
     // Ignored while the action is under way (Escape/Close; Cancel is disabled then too), so its result or error
     // can't land on a modal reopened afterwards.
     function closeAccessModal() {
@@ -61,6 +64,9 @@ function MailboxDetailContent({ uid, impersonationBaseUrl, currentUserUid, }) {
         if (deleting)
             return;
         setConfirmingDelete(false);
+        setEraseData(false);
+        setTypedAddress("");
+        setDeleteError(null);
     }
     // Only ever invoked from the delete-confirmation modal below, which itself only renders once
     // `mailbox` is resolved (the `error || !mailbox` branch below returns before this content mounts).
@@ -68,7 +74,8 @@ function MailboxDetailContent({ uid, impersonationBaseUrl, currentUserUid, }) {
         setDeleting(true);
         setDeleteError(null);
         try {
-            await deleteMailbox(mailbox.uid, mailbox.version);
+            await deleteMailbox(mailbox.uid, mailbox.version, { erase: eraseData });
+            // The Mailboxes page it goes to lists what a delete without `erase` kept, and how far an erasure has got.
             window.location.href = "/admin";
         }
         catch (err) {
@@ -98,5 +105,8 @@ function MailboxDetailContent({ uid, impersonationBaseUrl, currentUserUid, }) {
     const ingestQueueHref = `/admin/ingest-queue?mailboxUid=${encodeURIComponent(mailbox.uid)}`;
     return (_jsxs("div", { className: "max-w-3xl flex flex-col gap-5", children: [_jsxs("div", { className: "flex items-start justify-between gap-4", children: [_jsxs("div", { children: [_jsx("a", { href: "/admin", className: "text-sm text-primary-dark hover:underline", children: "\u2190 All mailboxes" }), _jsx("h1", { className: "text-xl font-bold tracking-tight mt-1", children: mailbox.primarySmtpAddress })] }), _jsxs("div", { className: "flex gap-3 shrink-0", children: [mailbox.ownerUserUid && (_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: () => setConfirmingAccess(true), children: "Impersonate this user" })), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto !border-danger !text-danger hover:!border-danger hover:!text-danger", onClick: () => setConfirmingDelete(true), children: "Delete mailbox" })] })] }), _jsxs("p", { className: "text-sm text-text-muted", children: ["The console shows administrative details only - never a mailbox\u2019s mail or settings.", mailbox.ownerUserUid
                         ? " To see this mailbox as its owner sees it, impersonate them: that is recorded, and you can stop at any time."
-                        : " This shared mailbox has no owner: add yourself under Shared access to open it in the mail client."] }), _jsxs("div", { className: "bg-surface border border-border rounded-md p-6", children: [_jsxs("dl", { className: "grid grid-cols-1 sm:grid-cols-2 gap-x-6 gap-y-3 text-sm", children: [_jsx("dt", { className: "text-text-muted", children: "Display name" }), _jsx("dd", { children: mailbox.displayName }), _jsx("dt", { className: "text-text-muted", children: "Owner" }), _jsx("dd", { children: mailbox.ownerUserUid ?? "None (shared mailbox)" }), _jsx("dt", { className: "text-text-muted", children: "Timezone" }), _jsx("dd", { children: mailbox.timezone }), _jsx("dt", { className: "text-text-muted", children: "Quota" }), _jsxs("dd", { children: [formatBytes(mailbox.usedBytes), " / ", formatBytes(mailbox.quotaBytes)] }), _jsx("dt", { className: "text-text-muted", children: "Alias addresses" }), _jsx("dd", { children: mailbox.aliasAddresses.length > 0 ? mailbox.aliasAddresses.join(", ") : "None" }), mailbox.isResource && (_jsxs(_Fragment, { children: [_jsx("dt", { className: "text-text-muted", children: "Resource type" }), _jsx("dd", { className: "capitalize", children: mailbox.resourceType ?? "room" })] })), _jsx("dt", { className: "text-text-muted", children: "Created" }), _jsx("dd", { children: new Date(mailbox.dateCreated).toLocaleString() })] }), _jsxs("div", { className: "flex gap-4 mt-5 pt-5 border-t border-border text-sm font-medium", children: [_jsx("a", { href: quarantineHref, className: "text-primary-dark hover:underline", children: "View quarantine" }), _jsx("a", { href: ingestQueueHref, className: "text-primary-dark hover:underline", children: "View ingest queue" })] })] }), _jsx(ShareAccessCard, { mailboxUid: mailbox.uid, ownerUserUid: mailbox.ownerUserUid, currentUserUid: currentUserUid }), _jsx(EscrowScopeCard, { mailbox: mailbox, onUpdate: setMailbox }), mailbox.isResource && _jsx(ResourceSettingsCard, { mailbox: mailbox, onUpdate: setMailbox }), _jsxs(Modal, { open: confirmingAccess, onClose: closeAccessModal, title: "Impersonate this user", children: [_jsxs("p", { className: "text-sm mb-3", children: ["You\u2019ll be signed in as ", _jsx("strong", { className: "break-all", children: mailbox.ownerUserUid }), ", the owner of ", _jsx("strong", { className: "break-all", children: mailbox.primarySmtpAddress }), ", and see everything they can - and act as them, until you stop impersonating. This is the only way an administrator sees another user\u2019s mail."] }), accessError && _jsx(Alert, { children: accessError }), _jsxs("div", { className: "flex gap-3 justify-end mt-5", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: impersonating, onClick: closeAccessModal, children: "Cancel" }), _jsx(Button, { type: "button", className: "!w-auto", loading: impersonating, disabled: impersonating, onClick: handleAccessMailbox, children: "Impersonate" })] })] }), _jsxs(Modal, { open: confirmingDelete, onClose: closeDeleteModal, title: "Delete mailbox", children: [_jsxs("p", { className: "text-sm mb-5", children: ["Are you sure you want to delete ", _jsx("strong", { children: mailbox.primarySmtpAddress }), "? This permanently deletes the mailbox and everything in it, and cannot be undone. It fails if this mailbox is a custodian on an active legal hold."] }), deleteError && _jsx(Alert, { children: deleteError }), _jsxs("div", { className: "flex gap-3 justify-end mt-5", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: deleting, onClick: closeDeleteModal, children: "Cancel" }), _jsx(Button, { type: "button", className: "!w-auto !bg-none !bg-danger !border-danger hover:!bg-danger", loading: deleting, disabled: deleting, onClick: handleDelete, children: "Delete" })] })] })] }));
+                        : " This shared mailbox has no owner: add yourself under Shared access to open it in the mail client."] }), _jsxs("div", { className: "bg-surface border border-border rounded-md p-6", children: [_jsxs("dl", { className: "grid grid-cols-1 sm:grid-cols-2 gap-x-6 gap-y-3 text-sm", children: [_jsx("dt", { className: "text-text-muted", children: "Display name" }), _jsx("dd", { children: mailbox.displayName }), _jsx("dt", { className: "text-text-muted", children: "Owner" }), _jsx("dd", { children: mailbox.ownerUserUid ?? "None (shared mailbox)" }), _jsx("dt", { className: "text-text-muted", children: "Timezone" }), _jsx("dd", { children: mailbox.timezone }), _jsx("dt", { className: "text-text-muted", children: "Quota" }), _jsxs("dd", { children: [formatBytes(mailbox.usedBytes), " / ", formatBytes(mailbox.quotaBytes)] }), _jsx("dt", { className: "text-text-muted", children: "Alias addresses" }), _jsx("dd", { children: mailbox.aliasAddresses.length > 0 ? mailbox.aliasAddresses.join(", ") : "None" }), mailbox.isResource && (_jsxs(_Fragment, { children: [_jsx("dt", { className: "text-text-muted", children: "Resource type" }), _jsx("dd", { className: "capitalize", children: mailbox.resourceType ?? "room" })] })), _jsx("dt", { className: "text-text-muted", children: "Created" }), _jsx("dd", { children: new Date(mailbox.dateCreated).toLocaleString() })] }), _jsxs("div", { className: "flex gap-4 mt-5 pt-5 border-t border-border text-sm font-medium", children: [_jsx("a", { href: quarantineHref, className: "text-primary-dark hover:underline", children: "View quarantine" }), _jsx("a", { href: ingestQueueHref, className: "text-primary-dark hover:underline", children: "View ingest queue" })] })] }), _jsx(ShareAccessCard, { mailboxUid: mailbox.uid, ownerUserUid: mailbox.ownerUserUid, currentUserUid: currentUserUid }), _jsx(EscrowScopeCard, { mailbox: mailbox, onUpdate: setMailbox }), mailbox.isResource && _jsx(ResourceSettingsCard, { mailbox: mailbox, onUpdate: setMailbox }), _jsxs(Modal, { open: confirmingAccess, onClose: closeAccessModal, title: "Impersonate this user", children: [_jsxs("p", { className: "text-sm mb-3", children: ["You\u2019ll be signed in as ", _jsx("strong", { className: "break-all", children: mailbox.ownerUserUid }), ", the owner of ", _jsx("strong", { className: "break-all", children: mailbox.primarySmtpAddress }), ", and see everything they can - and act as them, until you stop impersonating. This is the only way an administrator sees another user\u2019s mail."] }), accessError && _jsx(Alert, { children: accessError }), _jsxs("div", { className: "flex gap-3 justify-end mt-5", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: impersonating, onClick: closeAccessModal, children: "Cancel" }), _jsx(Button, { type: "button", className: "!w-auto", loading: impersonating, disabled: impersonating, onClick: handleAccessMailbox, children: "Impersonate" })] })] }), _jsxs(Modal, { open: confirmingDelete, onClose: closeDeleteModal, title: "Delete mailbox", children: [_jsxs("p", { className: "text-sm mb-3", children: ["Are you sure you want to delete ", _jsx("strong", { className: "break-all", children: mailbox.primarySmtpAddress }), "? This cannot be undone. It fails if this mailbox is a custodian on an active legal hold."] }), _jsxs("p", { className: "text-sm mb-3", children: ["Deleting removes the mailbox itself. Its mail, contacts, calendars and everything else in it are", " ", _jsx("strong", { children: "kept" }), " until they are erased, and until then the address can\u2019t be used for a new mailbox. You can erase them later from the Mailboxes page."] }), _jsxs("label", { className: "flex items-start gap-2 text-sm mb-3", children: [_jsx("input", { type: "checkbox", className: "mt-0.5", checked: eraseData, disabled: deleting, onChange: (e) => {
+                                    setEraseData(e.target.checked);
+                                    setTypedAddress("");
+                                } }), _jsx("span", { children: "Also erase all of its data now (permanent)" })] }), eraseData && (_jsxs("div", { className: "mb-3", children: [_jsx("p", { className: "text-sm font-semibold text-danger mb-2", children: "Everything in this mailbox will be permanently erased, and this cannot be undone." }), _jsxs("label", { className: "flex flex-col gap-1.5 text-sm", children: [_jsxs("span", { className: "font-semibold", children: ["Type ", _jsx("span", { className: "break-all", children: mailbox.primarySmtpAddress }), " to confirm"] }), _jsx("input", { "aria-label": "Type the address to confirm", className: "w-full text-sm py-2.5 px-3 border border-border rounded-sm bg-surface text-text focus:outline-none focus:border-primary", value: typedAddress, disabled: deleting, autoComplete: "off", spellCheck: false, onChange: (e) => setTypedAddress(e.target.value) })] })] })), deleteError && _jsx(Alert, { children: deleteError }), _jsxs("div", { className: "flex gap-3 justify-end mt-5", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: deleting, onClick: closeDeleteModal, children: "Cancel" }), _jsx(Button, { type: "button", className: "!w-auto !bg-none !bg-danger !border-danger hover:!bg-danger", loading: deleting, disabled: deleting || (eraseData && typedAddress.trim().toLowerCase() !== mailbox.primarySmtpAddress.trim().toLowerCase()), onClick: handleDelete, children: eraseData ? "Delete and erase all its data" : "Delete" })] })] })] }));
 }

package/dist/apps/shared/appearance/AppearanceForm.js

@@ -54,7 +54,15 @@ export default function AppearanceForm() {
     const colors = prefs.colors;
     // The kind the radio shows: chosen before it can take effect ("Image" is chosen before there is one).
     const [kind, setKind] = useState(background?.kind ?? "none");
-    useEffect(() => setKind(background?.kind ?? "none"), [background?.kind]);
+    // Follows a change of the stored kind (the server's answer, another tab, a reset) - not the first render, which `useState()` above
+    // already started from: that effect can run after a choice made right after the page appeared, and would put the old kind back.
+    const shownKind = useRef(background?.kind);
+    useEffect(() => {
+        if (shownKind.current !== background?.kind) {
+            shownKind.current = background?.kind;
+            setKind(background?.kind ?? "none");
+        }
+    }, [background?.kind]);
     const [fileError, setFileError] = useState(null);
     const [dragging, setDragging] = useState(false);
     const [uploading, setUploading] = useState(null);

package/dist/apps/shared/calendar/bookingPlugin.d.ts

@@ -0,0 +1,50 @@
+import { PluginNav } from "../plugins/pluginNav.js";
+/** The id of the Settings section the booking plugin's manifest contributes (`ui.settingsSections`) - what tells the client it is running. */
+export declare const BOOKING_SETTINGS_SECTION_ID = "booking-types";
+/**
+ * Where the booking plugin's Settings pages are mounted (`/settings/booking-types`), or `undefined` when the plugin is not running.
+ *
+ * A server only puts a plugin's navigation into `pluginNav` while the plugin is enabled and its pages built, so its section being there is the
+ * client's one way of knowing (the plugin list itself is admin-only).
+ */
+export declare function bookingSettingsHref(pluginNav: PluginNav | undefined): string | undefined;
+/** The plugin's "new booking link" page for `mailboxUid` - the full form behind the popover's More options. */
+export declare function newBookingLinkHref(settingsHref: string, mailboxUid: string): string;
+export interface BookingAvailabilityWindow {
+    /** 0 (Sunday) to 6 (Saturday). */
+    dayOfWeek: number;
+    startMinute: number;
+    endMinute: number;
+}
+export type BookingLocationType = "phone" | "video" | "other";
+export interface BookingMeetingType {
+    name: string;
+    durationMinutes: number;
+    locationOptions: {
+        type: BookingLocationType;
+    }[];
+}
+export interface CreateBookingTypeInput {
+    mailboxUid: string;
+    calendarFolderUid: string;
+    slug: string;
+    name: string;
+    hostDisplayName: string;
+    meetingTypes: BookingMeetingType[];
+    timezone: string;
+    availability: BookingAvailabilityWindow[];
+    bufferAfterMinutes: number;
+}
+/** What comes back from a create: the fields the popover needs to show the link. */
+export interface CreatedBookingType {
+    uid: string;
+    mailboxUid: string;
+    slug: string;
+    name: string;
+}
+/** Creates a booking type with the plugin's own defaults for everything the popover leaves out (an hour's notice, 30 days ahead, no approval). */
+export declare function createBookingType(input: CreateBookingTypeInput): Promise<CreatedBookingType>;
+/** A URL-safe slug for a schedule's name, the way the plugin's own `normalizeSlug()` reads it; `"appointments"` when nothing usable is left. */
+export declare function slugFor(name: string): string;
+/** The public page of a booking type on this site's own origin (`/book/<mailbox>/<slug>`, the `@` of a mailbox uid left as it is). Browser only. */
+export declare function bookingPublicUrl(mailboxUid: string, slug: string): string;

package/dist/apps/shared/calendar/bookingPlugin.js

@@ -0,0 +1,57 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+/**
+ * The calendar's side of `@rapidmx/booking-plugin`: whether the plugin is running, and the one call the quick-create popover's
+ * "Appointment schedule" tab makes on it - creating a booking type (`POST /api/mail/booking-types`).
+ *
+ * The plugin ships its own typed client, but inside its own UI (`apps/shared/bookingApi.ts` of the plugin), which this package cannot import,
+ * so the few fields this popover writes are mirrored here. The plugin's `BaseBookingTypeRoute` is the authority: it normalizes the slug,
+ * assigns the uids, refuses a taken slug with a 409 and validates the availability, durations and calendar folder.
+ */
+import { apiFetch } from "@rapidmx/react-shared/util/api.js";
+import { isSafePluginHref } from "../plugins/pluginNav.js";
+/** The id of the Settings section the booking plugin's manifest contributes (`ui.settingsSections`) - what tells the client it is running. */
+export const BOOKING_SETTINGS_SECTION_ID = "booking-types";
+/**
+ * Where the booking plugin's Settings pages are mounted (`/settings/booking-types`), or `undefined` when the plugin is not running.
+ *
+ * A server only puts a plugin's navigation into `pluginNav` while the plugin is enabled and its pages built, so its section being there is the
+ * client's one way of knowing (the plugin list itself is admin-only).
+ */
+export function bookingSettingsHref(pluginNav) {
+    const section = pluginNav?.settingsSections?.find((item) => item.id === BOOKING_SETTINGS_SECTION_ID);
+    return section && isSafePluginHref(section.href) ? section.href.replace(/\/+$/, "") : undefined;
+}
+/** The plugin's "new booking link" page for `mailboxUid` - the full form behind the popover's More options. */
+export function newBookingLinkHref(settingsHref, mailboxUid) {
+    return `${settingsHref}/new?mailboxUid=${encodeURIComponent(mailboxUid)}`;
+}
+/** Creates a booking type with the plugin's own defaults for everything the popover leaves out (an hour's notice, 30 days ahead, no approval). */
+export function createBookingType(input) {
+    return apiFetch("/mail/booking-types", {
+        method: "POST",
+        body: JSON.stringify({
+            dateOverrides: [],
+            bufferBeforeMinutes: 0,
+            minimumNoticeMinutes: 60,
+            bookingWindowDays: 30,
+            requiresApproval: false,
+            enabled: true,
+            ...input,
+        }),
+    });
+}
+/** A URL-safe slug for a schedule's name, the way the plugin's own `normalizeSlug()` reads it; `"appointments"` when nothing usable is left. */
+export function slugFor(name) {
+    return (name
+        .trim()
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "") || "appointments");
+}
+/** The public page of a booking type on this site's own origin (`/book/<mailbox>/<slug>`, the `@` of a mailbox uid left as it is). Browser only. */
+export function bookingPublicUrl(mailboxUid, slug) {
+    return `${window.location.origin}/book/${encodeURIComponent(mailboxUid).replace(/%40/g, "@")}/${encodeURIComponent(slug)}`;
+}

package/dist/apps/shared/calendar/calendarLiveUpdates.d.ts

@@ -0,0 +1,11 @@
+/** Pure helper behind the calendar page's live updates: which push events say "an event changed, and the payload is only a busy block". */
+import type { PushEvent } from "@rapidmx/react-shared/mail/pushClient.js";
+/**
+ * The uid of the event a push event announces as a redacted busy block, or `undefined` for anything else the shared push connection delivers.
+ *
+ * When somebody creates or changes a private or confidential event, restapi publishes it on the calendar's channel once, for every subscriber - and that one
+ * payload has to be safe for a read-only reader of a shared calendar, so it is the busy block (`redacted: true`, title "Busy", no details). It must not be
+ * stored as the event by the calendar's owner (or anybody else who may see it in full): they fetch the event again by its uid, which answers with as
+ * much as they may see.
+ */
+export declare function redactedEventUidOf(event: PushEvent): string | undefined;

package/dist/apps/shared/calendar/calendarLiveUpdates.js

@@ -0,0 +1,23 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+/** Pure helper behind the calendar page's live updates: which push events say "an event changed, and the payload is only a busy block". */
+/** The published model name of a calendar event on either database (`CalendarEventMongo`, `CalendarEventSQL`) - and not the reminder's `"CalendarEvent"`,
+ * which has its own action. */
+const EVENT_MODEL = /^CalendarEvent(Mongo|SQL)$/;
+/**
+ * The uid of the event a push event announces as a redacted busy block, or `undefined` for anything else the shared push connection delivers.
+ *
+ * When somebody creates or changes a private or confidential event, restapi publishes it on the calendar's channel once, for every subscriber - and that one
+ * payload has to be safe for a read-only reader of a shared calendar, so it is the busy block (`redacted: true`, title "Busy", no details). It must not be
+ * stored as the event by the calendar's owner (or anybody else who may see it in full): they fetch the event again by its uid, which answers with as
+ * much as they may see.
+ */
+export function redactedEventUidOf(event) {
+    if (!EVENT_MODEL.test(event.type) || (event.action !== "create" && event.action !== "update")) {
+        return undefined;
+    }
+    const data = event.data;
+    return data?.redacted === true && typeof data.uid === "string" ? data.uid : undefined;
+}

package/dist/apps/shared/components/admin/layout/AdminShell.d.ts

@@ -1,6 +1,6 @@
 import "../../../styles/app.css";
 import React, { PropsWithChildren } from "react";
-import { NavItem } from "@rapidmx/react-shared/components/navigation/BottomTabBar.js";
+import type { NavItem } from "@rapidmx/react-shared/components/navigation/BottomTabBar.js";
 import { PluginNav, PluginNavProps } from "../../../plugins/pluginNav.js";
 export type AdminSection = "mailboxes" | "quarantine" | "ingestQueue" | "domains" | "auditLog" | "distributionLists" | "transportRules" | "escrowScopes" | "retentionPolicy" | "encryptionPolicy" | "mailboxPolicy" | "setup" | "dataRequests" | "plugins" | "branding" | "signingCertificates";
 /** A core `AdminSection`, or a plugin's `adminNav` item id (see `PluginNav`). */

package/dist/apps/shared/components/admin/layout/AdminShell.js

@@ -5,14 +5,14 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 ///////////////////////////////////////////////////////////////////////////////
 import "../../../styles/app.css";
 import { useEffect, useState } from "react";
-import { HiOutlineClipboardDocumentList, HiOutlineClock, HiOutlineDocumentArrowDown, HiOutlineDocumentCheck, HiOutlineGlobeAlt, HiOutlineInboxStack, HiOutlineKey, HiOutlineLockClosed, HiOutlinePaintBrush, HiOutlinePuzzlePiece, HiOutlineQueueList, HiOutlineRocketLaunch, HiOutlineShieldCheck, HiOutlineShieldExclamation, HiOutlineUserGroup, HiOutlineWrenchScrewdriver, } from "react-icons/hi2";
+import { HiOutlineClipboardDocumentList, HiOutlineClock, HiOutlineDocumentArrowDown, HiOutlineDocumentCheck, HiOutlineGlobeAlt, HiOutlineInboxStack, HiOutlineKey, HiOutlineLockClosed, HiOutlinePaintBrush, HiOutlinePuzzlePiece, HiOutlineQueueList, HiOutlineRocketLaunch, HiOutlineShieldCheck, HiOutlineShieldExclamation, HiOutlineUserGroup, HiOutlineWrenchScrewdriver, HiOutlineBars3, } from "react-icons/hi2";
 import { apiFetch, ApiRequestError } from "@rapidmx/react-shared/util/api.js";
 import { getSetupStatus } from "@rapidmx/react-shared/admin/setupApi.js";
 import { useRedirectIfUnauthenticated } from "@rapidmx/react-shared/auth/session.js";
 import useBranding from "@rapidmx/react-shared/branding/useBranding.js";
 import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
 import Button from "@rapidmx/react-shared/components/buttons/Button.js";
-import BottomTabBar from "@rapidmx/react-shared/components/navigation/BottomTabBar.js";
+import Drawer from "@rapidmx/react-shared/components/overlays/Drawer.js";
 import { FrameBrandingFooter, useBrandingHtml } from "../../layout/BrandingChrome.js";
 import RailIcon from "../../layout/RailIcon.js";
 import AppearanceProvider from "../../../appearance/AppearanceProvider.js";
@@ -110,6 +110,7 @@ export function adminNavItems(pluginNav) {
 export default function AdminShell({ active, userUid, authServerUrl, pluginNav, children }) {
     const [status, setStatus] = useState("checking");
     const [error, setError] = useState(null);
+    const [menuOpen, setMenuOpen] = useState(false);
     // `branding` only feeds the footer below: the admin-configured header is for the webmail and public pages, not the
     // console. `useBranding()` is still what injects the custom stylesheet and supplies the rail's icon.
     const { branding, iconSrc } = useBranding();
@@ -198,7 +199,10 @@ export default function AdminShell({ active, userUid, authServerUrl, pluginNav,
                                     id === active
                                         ? "bg-primary/10 text-primary-dark"
                                         : "text-text-muted hover:bg-surface-alt hover:text-text",
-                                ].join(" "), children: _jsx(Icon, { size: 20, "aria-hidden": "true" }) }, id)))] }), _jsx(BottomTabBar, { apps: navItems, active: active }), _jsxs("div", { className: "flex-1 flex flex-col min-w-0", children: [_jsxs("header", { className: "rr-solid sticky top-0 z-30 h-16 shrink-0 bg-surface border-b border-border flex items-center justify-between gap-4 px-6", children: [_jsx("span", { className: "font-display font-bold text-lg uppercase tracking-wide", children: activeItem?.label }), _jsx(UserMenu, { userUid: userUid, authServerUrl: authServerUrl, onSignOut: handleSignOut })] }), _jsx("div", { id: "app-content", className: "flex-1 pb-14 md:pb-0", children: _jsx("main", { className: "max-w-6xl mx-auto px-6 py-8", children: children }) })] })] }) }));
+                                ].join(" "), children: _jsx(Icon, { size: 20, "aria-hidden": "true" }) }, id)))] }), _jsx(Drawer, { open: menuOpen, onClose: () => setMenuOpen(false), title: "Admin", fullScreen: true, children: _jsx("nav", { "aria-label": "Admin menu", className: "flex flex-col gap-1 -mx-2", children: navItems.map(({ id, href, label, icon: Icon }) => (_jsxs("a", { href: href, "aria-current": id === active ? "page" : undefined, onClick: () => setMenuOpen(false), className: [
+                                    "flex items-center gap-3 px-3 py-2.5 rounded-sm text-sm font-medium",
+                                    id === active ? "bg-primary/10 text-primary-dark" : "text-text hover:bg-surface-alt",
+                                ].join(" "), children: [_jsx(Icon, { size: 20, "aria-hidden": "true" }), label] }, id))) }) }), _jsxs("div", { className: "flex-1 flex flex-col min-w-0", children: [_jsxs("header", { className: "rr-solid sticky top-0 z-30 h-16 shrink-0 bg-surface border-b border-border flex items-center justify-between gap-4 px-4 md:px-6", children: [_jsxs("div", { className: "flex items-center gap-2 min-w-0", children: [_jsx("button", { type: "button", className: "md:hidden shrink-0 w-9 h-9 flex items-center justify-center rounded-sm text-text-muted hover:bg-surface-alt hover:text-text", "aria-label": "Open menu", onClick: () => setMenuOpen(true), children: _jsx(HiOutlineBars3, { size: 20, "aria-hidden": "true" }) }), _jsx("span", { className: "font-display font-bold text-lg uppercase tracking-wide truncate", children: activeItem?.label })] }), _jsx(UserMenu, { userUid: userUid, authServerUrl: authServerUrl, onSignOut: handleSignOut, showMailLink: true })] }), _jsx("div", { id: "app-content", className: "flex-1", children: _jsx("main", { className: "max-w-6xl mx-auto px-6 py-8", children: children }) })] })] }) }));
     }
     // The user's own colours and background (`AppearanceProvider`), from what the last webmail page cached in this browser: the console never asks the server.
     return (_jsxs(AppearanceProvider, { userUid: userUid, lookUp: false, children: [content, _jsx(FrameBrandingFooter, { parsed: footer, appTitle: [...adminNavItems(pluginNav), ...OFF_RAIL_ITEMS].find((item) => item.id === active)?.label })] }));

package/dist/apps/shared/components/admin/mailboxes/EraseLeftoverDataDialog.d.ts

@@ -0,0 +1,35 @@
+import React from "react";
+import { DataSubjectErasureStatus } from "@rapidmx/react-shared/mail/erasureRequestApi.js";
+/** How often the request is asked how far the erasure has got. */
+export declare const ERASE_POLL_INTERVAL_MS = 2000;
+export interface EraseLeftoverDataDialogProps {
+    /** The deleted mailbox's address. */
+    address: string;
+    /** What is left, when the caller knows it (the list of deleted mailboxes does): named in the confirmation. */
+    counts?: {
+        folders: number;
+        messages: number;
+    };
+    /** An erasure already filed for the address (approved or running): the dialog then watches it instead of asking first. */
+    resume?: {
+        uid: string;
+        status: DataSubjectErasureStatus;
+    };
+    /** The button shown once the data is erased (`onDone` runs when it is pressed - the dialog closes itself first). Default "Done". */
+    doneLabel?: string;
+    onDone?: () => void;
+    /** Called once when the data is erased - whether or not the dialog is still open by then. */
+    onErased?: (address: string) => void;
+    onClose: () => void;
+    /** How often to ask how far the erasure has got. */
+    pollIntervalMs?: number;
+}
+/**
+ * Erases the data a deleted mailbox left behind - permanently - after the administrator types its address to confirm, then shows
+ * how far it has got: the erasure runs on the server in the background, so this asks about it every few seconds until it has
+ * finished or been refused. Mount it (with the address as its `key`) only while it is wanted; it holds its own state.
+ *
+ * The request that files the erasure can't be interrupted (closing is ignored while it is under way); once it is filed, closing
+ * only stops watching - the erasure carries on, and the deleted-mailbox list shows it.
+ */
+export default function EraseLeftoverDataDialog({ address, counts, resume, doneLabel, onDone, onErased, onClose, pollIntervalMs, }: EraseLeftoverDataDialogProps): React.JSX.Element;

package/dist/apps/shared/components/admin/mailboxes/EraseLeftoverDataDialog.js

@@ -0,0 +1,115 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { useEffect, useRef, useState } from "react";
+import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
+import { eraseLeftoverMailbox } from "@rapidmx/react-shared/admin/leftoverMailboxApi.js";
+import { getErasureRequest } from "@rapidmx/react-shared/mail/erasureRequestApi.js";
+import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
+import Button from "@rapidmx/react-shared/components/buttons/Button.js";
+import Modal from "@rapidmx/react-shared/components/overlays/Modal.js";
+import { notify } from "../../../notifications/store.js";
+const INPUT_CLASS = "w-full text-sm py-2.5 px-3 border border-border rounded-sm bg-surface text-text focus:outline-none focus:border-primary";
+const DANGER_BUTTON_CLASS = "!w-auto !bg-none !bg-danger !border-danger hover:!bg-danger";
+/** How often the request is asked how far the erasure has got. */
+export const ERASE_POLL_INTERVAL_MS = 2000;
+/** Where an erasure is, in words. */
+function progressLabel(status) {
+    return status === "in_progress" ? "Erasing the data…" : "Waiting for the erasure to start…";
+}
+/**
+ * Erases the data a deleted mailbox left behind - permanently - after the administrator types its address to confirm, then shows
+ * how far it has got: the erasure runs on the server in the background, so this asks about it every few seconds until it has
+ * finished or been refused. Mount it (with the address as its `key`) only while it is wanted; it holds its own state.
+ *
+ * The request that files the erasure can't be interrupted (closing is ignored while it is under way); once it is filed, closing
+ * only stops watching - the erasure carries on, and the deleted-mailbox list shows it.
+ */
+export default function EraseLeftoverDataDialog({ address, counts, resume, doneLabel = "Done", onDone, onErased, onClose, pollIntervalMs = ERASE_POLL_INTERVAL_MS, }) {
+    const [phase, setPhase] = useState(resume ? "watching" : "confirm");
+    const [typed, setTyped] = useState("");
+    const [requestUid, setRequestUid] = useState(resume?.uid);
+    const [status, setStatus] = useState(resume?.status);
+    const [error, setError] = useState(null);
+    // A check on the erasure failed (offline, a dropped connection): it is tried again, and the admin is told meanwhile.
+    const [checkFailed, setCheckFailed] = useState(false);
+    const onErasedRef = useRef(onErased);
+    onErasedRef.current = onErased;
+    const confirmed = typed.trim().toLowerCase() === address.trim().toLowerCase();
+    async function handleErase(e) {
+        e.preventDefault();
+        if (!confirmed) {
+            return;
+        }
+        setError(null);
+        setPhase("filing");
+        try {
+            const request = await eraseLeftoverMailbox(address);
+            setRequestUid(request.uid);
+            setStatus(request.status);
+            setPhase("watching");
+        }
+        catch (err) {
+            // The server's own words: a legal hold names its matter, a mailbox that exists again says so.
+            setError(err instanceof ApiRequestError ? err.message : "Could not start the erasure.");
+            setPhase("confirm");
+        }
+    }
+    // Watches the request until it has finished or been refused.
+    useEffect(() => {
+        if (phase !== "watching" || !requestUid) {
+            return;
+        }
+        let cancelled = false;
+        let timer;
+        const check = async () => {
+            try {
+                const request = await getErasureRequest(requestUid);
+                if (cancelled) {
+                    return;
+                }
+                setCheckFailed(false);
+                setStatus(request.status);
+                if (request.status === "completed") {
+                    setPhase("done");
+                    notify({ kind: "success", title: "Leftover data erased", message: `Everything left over from ${address} was erased.` });
+                    onErasedRef.current?.(address);
+                    return;
+                }
+                if (request.status === "denied") {
+                    setError(request.reason || "The erasure was refused.");
+                    setPhase("refused");
+                    return;
+                }
+            }
+            catch {
+                if (cancelled) {
+                    return;
+                }
+                setCheckFailed(true);
+            }
+            timer = setTimeout(() => void check(), pollIntervalMs);
+        };
+        void check();
+        return () => {
+            cancelled = true;
+            clearTimeout(timer);
+        };
+    }, [phase, requestUid, address, pollIntervalMs]);
+    // Closing is ignored while the request that files the erasure is under way, so its answer can't land on a dialog that was dismissed.
+    function dismiss() {
+        if (phase !== "filing") {
+            onClose();
+        }
+    }
+    function handleDone() {
+        onClose();
+        onDone?.();
+    }
+    const summary = counts
+        ? `It still has ${counts.folders} ${counts.folders === 1 ? "folder" : "folders"} and ${counts.messages} ${counts.messages === 1 ? "message" : "messages"}, and everything else stored with them.`
+        : "It still has its folders and everything stored in them.";
+    return (_jsxs(Modal, { open: true, onClose: dismiss, title: "Erase leftover data", children: [(phase === "confirm" || phase === "filing") && (_jsxs("form", { onSubmit: handleErase, children: [_jsxs("p", { className: "text-sm mb-3", children: [_jsx("strong", { className: "break-all", children: address }), " was deleted, but its data was kept. ", summary] }), _jsx("p", { className: "text-sm mb-3", children: "Erasing permanently deletes all of it - the mail, drafts and attachments, contacts, calendar events, tasks, notes, labels, filter rules and signatures, encryption keys, share links and access lists - and frees the address for a new mailbox." }), _jsx("p", { className: "text-sm font-semibold text-danger mb-4", children: "This is irreversible and cannot be undone." }), _jsxs("label", { className: "flex flex-col gap-1.5 text-sm mb-4", children: [_jsxs("span", { className: "font-semibold", children: ["Type ", _jsx("span", { className: "break-all", children: address }), " to confirm"] }), _jsx("input", { "aria-label": "Type the address to confirm", className: INPUT_CLASS, value: typed, disabled: phase === "filing", autoComplete: "off", spellCheck: false, onChange: (e) => setTyped(e.target.value) })] }), error && _jsx(Alert, { children: error }), _jsxs("div", { className: "flex gap-3 justify-end", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: phase === "filing", onClick: dismiss, children: "Cancel" }), _jsx(Button, { type: "submit", className: DANGER_BUTTON_CLASS, loading: phase === "filing", disabled: phase === "filing" || !confirmed, children: "Erase data" })] })] })), phase === "watching" && (_jsxs("div", { children: [_jsxs("p", { className: "text-sm mb-3", children: ["Erasing the data left over from ", _jsx("strong", { className: "break-all", children: address }), "."] }), _jsxs("p", { role: "status", className: "flex items-center gap-2 text-sm font-semibold mb-3", children: [_jsx("span", { className: "w-4 h-4 rounded-full border-2 border-current/30 border-t-current animate-spin", "aria-hidden": "true" }), progressLabel(status)] }), checkFailed && (_jsx("p", { className: "text-sm text-danger mb-3", children: "Could not check how far the erasure has got. Trying again\u2026" })), _jsx("p", { className: "text-sm text-text-muted mb-4", children: "You can close this window: the erasure carries on in the background, and the Mailboxes page shows how it is going." }), _jsx("div", { className: "flex justify-end", children: _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: onClose, children: "Stop watching" }) })] })), phase === "done" && (_jsxs("div", { children: [_jsxs("p", { role: "status", className: "text-sm mb-4", children: ["Everything left over from ", _jsx("strong", { className: "break-all", children: address }), " was erased. The address is free to use again."] }), _jsx("div", { className: "flex justify-end", children: _jsx(Button, { type: "button", className: "!w-auto", onClick: handleDone, children: doneLabel }) })] })), phase === "refused" && (_jsxs("div", { children: [_jsx(Alert, { children: error }), _jsx("div", { className: "flex justify-end", children: _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: onClose, children: "OK" }) })] }))] }));
+}

package/dist/apps/shared/components/admin/mailboxes/LeftoverMailboxesSection.d.ts

@@ -0,0 +1,16 @@
+import React from "react";
+/** How often the list is refreshed while an erasure is under way. */
+export declare const LEFTOVER_REFRESH_INTERVAL_MS = 5000;
+export interface LeftoverMailboxesSectionProps {
+    /** How often the list is refreshed while an erasure is under way. */
+    refreshIntervalMs?: number;
+    /** How often an open erasure asks how far it has got. */
+    pollIntervalMs?: number;
+}
+/**
+ * "Deleted mailboxes with remaining data": deleting a mailbox keeps everything in it, and the address can't be used again until
+ * that is erased, so this lists what is left (from `GET /mailboxes/leftover`) with an "Erase data" action for each. It shows nothing
+ * at all while there is nothing left - the section is only there when it is needed. An erasure that is under way shows as such, and
+ * the list refreshes itself until it has finished.
+ */
+export default function LeftoverMailboxesSection({ refreshIntervalMs, pollIntervalMs }: LeftoverMailboxesSectionProps): React.JSX.Element;